# Flog Txt Version 1 # Analyzer Version: 3.1.1 # Analyzer Build Date: Jul 31 2019 13:47:23 # Log Creation Date: 13.09.2019 00:07:53.603 Process: id = "1" image_name = "shaofao.exe" filename = "c:\\users\\fd1hvy\\desktop\\shaofao.exe" page_root = "0x7bbb0000" os_pid = "0xd60" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\Users\\FD1HVy\\Desktop\\shaofao.exe\" " cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103c1" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1 os_tid = 0xd68 [0034.869] GetProcessHeap () returned 0x120000 [0034.869] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x30) returned 0x1330b8 [0034.869] GetProcessHeap () returned 0x120000 [0034.869] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x3400) returned 0x13f560 [0034.874] GetProcessHeap () returned 0x120000 [0034.874] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x204) returned 0x13ce88 [0034.874] GetProcessHeap () returned 0x120000 [0034.874] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10) returned 0x13e080 [0034.874] GetTickCount () returned 0x114950d [0034.875] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0xaffb80 | out: lpWSAData=0xaffb80) returned 0 [0034.878] GetProcessHeap () returned 0x120000 [0034.878] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x1c) returned 0x12ad60 [0034.878] GetProcessHeap () returned 0x120000 [0034.878] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x1c) returned 0x12aea0 [0034.878] GetVersion () returned 0x23f00206 [0034.878] GetCurrentProcess () returned 0xffffffff [0034.878] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0xaffad4 | out: TokenHandle=0xaffad4*=0x20c) returned 1 [0034.878] GetTokenInformation (in: TokenHandle=0x20c, TokenInformationClass=0x14, TokenInformation=0xaffacc, TokenInformationLength=0x4, ReturnLength=0xaffad0 | out: TokenInformation=0xaffacc, ReturnLength=0xaffad0) returned 1 [0034.878] CloseHandle (hObject=0x20c) returned 1 [0034.878] GetProcessHeap () returned 0x120000 [0034.878] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x20) returned 0x12ad88 [0034.879] GetProcessHeap () returned 0x120000 [0034.879] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x1e) returned 0x146eb0 [0034.879] GetProcessHeap () returned 0x120000 [0034.879] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x1e) returned 0x147040 [0034.879] GetProcessHeap () returned 0x120000 [0034.879] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x90) returned 0x131d60 [0034.879] GetProcessHeap () returned 0x120000 [0034.879] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x131d60 | out: hHeap=0x120000) returned 1 [0034.879] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x146eb0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0034.879] GetProcessHeap () returned 0x120000 [0034.879] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x147040 | out: hHeap=0x120000) returned 1 [0034.879] GetProcessHeap () returned 0x120000 [0034.879] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x12ad88 | out: hHeap=0x120000) returned 1 [0034.879] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xaffa74, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xaffa74*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0034.879] GetProcessHeap () returned 0x120000 [0034.879] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x146eb0 | out: hHeap=0x120000) returned 1 [0034.879] GetProcessHeap () returned 0x120000 [0034.879] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x40) returned 0x132488 [0034.879] GetProcessHeap () returned 0x120000 [0034.879] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x3a) returned 0x132758 [0034.879] GetProcessHeap () returned 0x120000 [0034.879] RtlReAllocateHeap (Heap=0x120000, Flags=0x0, Ptr=0x132758, Size=0x72) returned 0x12f318 [0034.879] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0034.880] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x20c [0034.880] WaitForSingleObject (hHandle=0x20c, dwMilliseconds=0x0) returned 0x0 [0034.880] GetProcessHeap () returned 0x120000 [0034.880] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x132488 | out: hHeap=0x120000) returned 1 [0034.880] GetProcessHeap () returned 0x120000 [0034.880] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x12f318 | out: hHeap=0x120000) returned 1 [0034.880] GetProcessHeap () returned 0x120000 [0034.880] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x20) returned 0x12ad88 [0034.880] GetProcessHeap () returned 0x120000 [0034.880] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x1e) returned 0x146e38 [0034.880] GetProcessHeap () returned 0x120000 [0034.880] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x1e) returned 0x146e88 [0034.880] GetProcessHeap () returned 0x120000 [0034.880] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x90) returned 0x131d60 [0034.880] GetProcessHeap () returned 0x120000 [0034.880] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x131d60 | out: hHeap=0x120000) returned 1 [0034.880] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x146e38, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0034.880] GetProcessHeap () returned 0x120000 [0034.880] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x146e88 | out: hHeap=0x120000) returned 1 [0034.880] GetProcessHeap () returned 0x120000 [0034.880] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x12ad88 | out: hHeap=0x120000) returned 1 [0034.880] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xaffa5c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xaffa5c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0034.880] GetProcessHeap () returned 0x120000 [0034.880] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x146e38 | out: hHeap=0x120000) returned 1 [0034.880] GetProcessHeap () returned 0x120000 [0034.880] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x40) returned 0x132560 [0034.880] GetProcessHeap () returned 0x120000 [0034.880] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x3a) returned 0x1327e8 [0034.880] GetProcessHeap () returned 0x120000 [0034.880] RtlReAllocateHeap (Heap=0x120000, Flags=0x0, Ptr=0x1327e8, Size=0x72) returned 0x146ea0 [0034.880] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x0 [0034.880] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000000") returned 0x210 [0034.881] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0x0) returned 0x0 [0034.881] GetProcessHeap () returned 0x120000 [0034.881] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x132560 | out: hHeap=0x120000) returned 1 [0034.881] GetProcessHeap () returned 0x120000 [0034.881] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x146ea0 | out: hHeap=0x120000) returned 1 [0034.881] ReleaseMutex (hMutex=0x210) returned 1 [0034.881] CloseHandle (hObject=0x210) returned 1 [0034.881] GetProcessHeap () returned 0x120000 [0034.881] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x30) returned 0x132ec0 [0034.881] GetProcessHeap () returned 0x120000 [0034.881] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x20a) returned 0x147480 [0034.881] GetVersion () returned 0x23f00206 [0034.881] GetProcessHeap () returned 0x120000 [0034.881] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x50) returned 0x12f318 [0034.881] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75e90000 [0034.881] GetProcAddress (hModule=0x75e90000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x75ea6b30 [0034.881] Wow64DisableWow64FsRedirection (in: OldValue=0xaffab0 | out: OldValue=0xaffab0*=0x0) returned 1 [0034.881] GetProcessHeap () returned 0x120000 [0034.881] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x12f318 | out: hHeap=0x120000) returned 1 [0034.881] GetModuleHandleA (lpModuleName="advapi32.dll") returned 0x761b0000 [0034.881] GetProcAddress (hModule=0x761b0000, lpProcName="CreateProcessWithTokenW") returned 0x761c0c70 [0034.881] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x147480, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\shaofao.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\shaofao.exe")) returned 0x23 [0034.881] GetShellWindow () returned 0x100f0 [0034.882] GetWindowThreadProcessId (in: hWnd=0x100f0, lpdwProcessId=0xaffabc | out: lpdwProcessId=0xaffabc) returned 0x864 [0034.882] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x860) returned 0x210 [0034.882] OpenProcessToken (in: ProcessHandle=0x210, DesiredAccess=0x2000000, TokenHandle=0xaffacc | out: TokenHandle=0xaffacc*=0x214) returned 1 [0034.882] DuplicateTokenEx (in: hExistingToken=0x214, dwDesiredAccess=0x2000000, lpTokenAttributes=0xaffa94, ImpersonationLevel=0x2, TokenType=0x1, phNewToken=0xaffad0 | out: phNewToken=0xaffad0*=0x218) returned 1 [0034.882] CreateProcessWithTokenW (in: hToken=0x218, dwLogonFlags=0x0, lpApplicationName="C:\\Users\\FD1HVy\\Desktop\\shaofao.exe", lpCommandLine=0x0, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0xaffa48*(cb=0x0, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0xaffaa0 | out: lpCommandLine=0x0, lpProcessInformation=0xaffaa0*(hProcess=0x254, hThread=0x258, dwProcessId=0xf68, dwThreadId=0xf44)) returned 1 [0035.056] GetProcessHeap () returned 0x120000 [0035.056] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x50) returned 0x1497d8 [0035.057] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75e90000 [0035.057] GetProcAddress (hModule=0x75e90000, lpProcName="Wow64RevertWow64FsRedirection") returned 0x75ea6b50 [0035.057] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0035.057] GetProcessHeap () returned 0x120000 [0035.057] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1497d8 | out: hHeap=0x120000) returned 1 [0035.057] CloseHandle (hObject=0x210) returned 1 [0035.057] CloseHandle (hObject=0x254) returned 1 [0035.057] CloseHandle (hObject=0x258) returned 1 [0035.057] CloseHandle (hObject=0x214) returned 1 [0035.057] CloseHandle (hObject=0x218) returned 1 [0035.057] GetProcessHeap () returned 0x120000 [0035.057] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x147480 | out: hHeap=0x120000) returned 1 [0035.057] GetProcessHeap () returned 0x120000 [0035.057] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x132ec0 | out: hHeap=0x120000) returned 1 [0035.057] Sleep (dwMilliseconds=0x1388) [0040.066] GetProcessHeap () returned 0x120000 [0040.066] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x60) returned 0x12ede0 [0040.066] GetProcessHeap () returned 0x120000 [0040.066] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x5c) returned 0x13e4d0 [0040.066] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x1243c1a, lpParameter=0x13e4d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x218 [0040.067] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0x1388) returned 0x102 [0045.131] CloseHandle (hObject=0x218) returned 1 [0045.131] GetProcessHeap () returned 0x120000 [0045.131] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x12ede0 | out: hHeap=0x120000) returned 1 [0045.131] GetProcessHeap () returned 0x120000 [0045.131] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x60) returned 0x12ede0 [0045.132] GetProcessHeap () returned 0x120000 [0045.132] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x20) returned 0x148690 [0045.132] GetProcessHeap () returned 0x120000 [0045.132] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x1e) returned 0x148618 [0045.132] GetProcessHeap () returned 0x120000 [0045.132] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x1e) returned 0x148488 [0045.132] GetProcessHeap () returned 0x120000 [0045.132] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x90) returned 0x131f48 [0045.132] GetProcessHeap () returned 0x120000 [0045.132] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x131f48 | out: hHeap=0x120000) returned 1 [0045.132] ExpandEnvironmentStringsW (in: lpSrc="%localappdata%", lpDst=0x148618, nSize=0xf | out: lpDst="") returned 0x1e [0045.132] GetProcessHeap () returned 0x120000 [0045.132] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x148488 | out: hHeap=0x120000) returned 1 [0045.132] GetProcessHeap () returned 0x120000 [0045.132] RtlReAllocateHeap (Heap=0x120000, Flags=0x0, Ptr=0x148618, Size=0x3a) returned 0x132680 [0045.132] GetProcessHeap () returned 0x120000 [0045.132] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x3a) returned 0x1323b0 [0045.132] GetProcessHeap () returned 0x120000 [0045.132] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x90) returned 0x131f48 [0045.132] GetProcessHeap () returned 0x120000 [0045.132] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x131f48 | out: hHeap=0x120000) returned 1 [0045.132] ExpandEnvironmentStringsW (in: lpSrc="%localappdata%", lpDst=0x132680, nSize=0x1d | out: lpDst="") returned 0x1e [0045.132] GetProcessHeap () returned 0x120000 [0045.132] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1323b0 | out: hHeap=0x120000) returned 1 [0045.132] GetProcessHeap () returned 0x120000 [0045.132] RtlReAllocateHeap (Heap=0x120000, Flags=0x0, Ptr=0x132680, Size=0x72) returned 0x146e20 [0045.132] GetProcessHeap () returned 0x120000 [0045.132] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x72) returned 0x1471a0 [0045.132] GetProcessHeap () returned 0x120000 [0045.132] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x90) returned 0x131f48 [0045.132] GetProcessHeap () returned 0x120000 [0045.132] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x131f48 | out: hHeap=0x120000) returned 1 [0045.132] ExpandEnvironmentStringsW (in: lpSrc="%localappdata%", lpDst=0x146e20, nSize=0x39 | out: lpDst="C:\\Users\\FD1HVy\\AppData\\Local") returned 0x1e [0045.132] GetProcessHeap () returned 0x120000 [0045.132] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1471a0 | out: hHeap=0x120000) returned 1 [0045.132] GetProcessHeap () returned 0x120000 [0045.132] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x148690 | out: hHeap=0x120000) returned 1 [0045.132] GetProcessHeap () returned 0x120000 [0045.132] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x40) returned 0x132440 [0045.132] GetProcessHeap () returned 0x120000 [0045.132] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x3e) returned 0x1324d0 [0045.132] GetProcessHeap () returned 0x120000 [0045.133] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x3e) returned 0x132758 [0045.133] GetProcessHeap () returned 0x120000 [0045.133] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x90) returned 0x131f48 [0045.133] GetProcessHeap () returned 0x120000 [0045.133] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x10) returned 0x147bb8 [0045.133] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0xaff9b4 | out: phkResult=0xaff9b4*=0x26c) returned 0x0 [0045.133] RegQueryValueExW (in: hKey=0x26c, lpValueName="Startup", lpReserved=0x0, lpType=0xaff9b0, lpData=0x132758, lpcbData=0xaff9b8*=0x3e | out: lpType=0xaff9b0*=0x2, lpData=0x132758*=0x47, lpcbData=0xaff9b8*=0x98) returned 0xea [0045.133] RegCloseKey (hKey=0x26c) returned 0x0 [0045.133] GetProcessHeap () returned 0x120000 [0045.133] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x147bb8 | out: hHeap=0x120000) returned 1 [0045.133] GetProcessHeap () returned 0x120000 [0045.133] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x131f48 | out: hHeap=0x120000) returned 1 [0045.133] GetProcessHeap () returned 0x120000 [0045.133] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x132758 | out: hHeap=0x120000) returned 1 [0045.133] GetProcessHeap () returned 0x120000 [0045.133] RtlReAllocateHeap (Heap=0x120000, Flags=0x0, Ptr=0x1324d0, Size=0x7a) returned 0x1266e0 [0045.133] GetProcessHeap () returned 0x120000 [0045.133] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x7a) returned 0x131f48 [0045.133] GetProcessHeap () returned 0x120000 [0045.133] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x90) returned 0x131590 [0045.133] GetProcessHeap () returned 0x120000 [0045.133] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x10) returned 0x147d68 [0045.133] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0xaff9b4 | out: phkResult=0xaff9b4*=0x26c) returned 0x0 [0045.133] RegQueryValueExW (in: hKey=0x26c, lpValueName="Startup", lpReserved=0x0, lpType=0xaff9b0, lpData=0x131f48, lpcbData=0xaff9b8*=0x7a | out: lpType=0xaff9b0*=0x2, lpData=0x131f48*=0x90, lpcbData=0xaff9b8*=0x98) returned 0xea [0045.133] RegCloseKey (hKey=0x26c) returned 0x0 [0045.133] GetProcessHeap () returned 0x120000 [0045.133] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x147d68 | out: hHeap=0x120000) returned 1 [0045.133] GetProcessHeap () returned 0x120000 [0045.134] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x131590 | out: hHeap=0x120000) returned 1 [0045.134] GetProcessHeap () returned 0x120000 [0045.134] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x131f48 | out: hHeap=0x120000) returned 1 [0045.134] GetProcessHeap () returned 0x120000 [0045.134] RtlReAllocateHeap (Heap=0x120000, Flags=0x0, Ptr=0x1266e0, Size=0xf2) returned 0x131158 [0045.134] GetProcessHeap () returned 0x120000 [0045.134] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0xf2) returned 0x12ffe8 [0045.134] GetProcessHeap () returned 0x120000 [0045.134] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x90) returned 0x131f48 [0045.134] GetProcessHeap () returned 0x120000 [0045.134] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x10) returned 0x147b40 [0045.134] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0xaff9b4 | out: phkResult=0xaff9b4*=0x26c) returned 0x0 [0045.134] RegQueryValueExW (in: hKey=0x26c, lpValueName="Startup", lpReserved=0x0, lpType=0xaff9b0, lpData=0x12ffe8, lpcbData=0xaff9b8*=0xf2 | out: lpType=0xaff9b0*=0x2, lpData="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0xaff9b8*=0x98) returned 0x0 [0045.134] RegCloseKey (hKey=0x26c) returned 0x0 [0045.134] GetProcessHeap () returned 0x120000 [0045.134] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x147b40 | out: hHeap=0x120000) returned 1 [0045.134] GetProcessHeap () returned 0x120000 [0045.134] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x1e) returned 0x148550 [0045.134] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0xaff9b4 | out: phkResult=0xaff9b4*=0x26c) returned 0x0 [0045.134] RegQueryValueExW (in: hKey=0x26c, lpValueName="Common Startup", lpReserved=0x0, lpType=0xaff9b0, lpData=0x130080, lpcbData=0xaff9b8*=0x5a | out: lpType=0xaff9b0*=0x0, lpData=0x130080*=0x1a, lpcbData=0xaff9b8*=0x5a) returned 0x2 [0045.134] RegCloseKey (hKey=0x26c) returned 0x0 [0045.134] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0xaff9c8 | out: phkResult=0xaff9c8*=0x26c) returned 0x0 [0045.134] RegQueryValueExW (in: hKey=0x26c, lpValueName="Common Startup", lpReserved=0x0, lpType=0xaff9c4, lpData=0x130080, lpcbData=0xaff9cc*=0x5a | out: lpType=0xaff9c4*=0x2, lpData=0x130080*=0x1a, lpcbData=0xaff9cc*=0x78) returned 0xea [0045.134] RegCloseKey (hKey=0x26c) returned 0x0 [0045.134] GetProcessHeap () returned 0x120000 [0045.134] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x148550 | out: hHeap=0x120000) returned 1 [0045.134] GetProcessHeap () returned 0x120000 [0045.134] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x131f48 | out: hHeap=0x120000) returned 1 [0045.134] GetProcessHeap () returned 0x120000 [0045.134] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x12ffe8 | out: hHeap=0x120000) returned 1 [0045.134] GetProcessHeap () returned 0x120000 [0045.134] RtlReAllocateHeap (Heap=0x120000, Flags=0x0, Ptr=0x131158, Size=0x1e2) returned 0x149b98 [0045.134] GetProcessHeap () returned 0x120000 [0045.134] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x1e2) returned 0x149d88 [0045.135] GetProcessHeap () returned 0x120000 [0045.135] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x90) returned 0x131f48 [0045.135] GetProcessHeap () returned 0x120000 [0045.135] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x10) returned 0x147c90 [0045.135] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0xaff9b4 | out: phkResult=0xaff9b4*=0x26c) returned 0x0 [0045.135] RegQueryValueExW (in: hKey=0x26c, lpValueName="Startup", lpReserved=0x0, lpType=0xaff9b0, lpData=0x149d88, lpcbData=0xaff9b8*=0x1e2 | out: lpType=0xaff9b0*=0x2, lpData="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0xaff9b8*=0x98) returned 0x0 [0045.135] RegCloseKey (hKey=0x26c) returned 0x0 [0045.135] GetProcessHeap () returned 0x120000 [0045.135] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x147c90 | out: hHeap=0x120000) returned 1 [0045.135] GetProcessHeap () returned 0x120000 [0045.135] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x1e) returned 0x148690 [0045.135] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0xaff9b4 | out: phkResult=0xaff9b4*=0x26c) returned 0x0 [0045.135] RegQueryValueExW (in: hKey=0x26c, lpValueName="Common Startup", lpReserved=0x0, lpType=0xaff9b0, lpData=0x149e20, lpcbData=0xaff9b8*=0x14a | out: lpType=0xaff9b0*=0x0, lpData=0x149e20*=0x0, lpcbData=0xaff9b8*=0x14a) returned 0x2 [0045.135] RegCloseKey (hKey=0x26c) returned 0x0 [0045.135] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0xaff9c8 | out: phkResult=0xaff9c8*=0x26c) returned 0x0 [0045.135] RegQueryValueExW (in: hKey=0x26c, lpValueName="Common Startup", lpReserved=0x0, lpType=0xaff9c4, lpData=0x149e20, lpcbData=0xaff9cc*=0x14a | out: lpType=0xaff9c4*=0x2, lpData="%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0xaff9cc*=0x78) returned 0x0 [0045.135] RegCloseKey (hKey=0x26c) returned 0x0 [0045.135] GetProcessHeap () returned 0x120000 [0045.135] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x148690 | out: hHeap=0x120000) returned 1 [0045.135] GetProcessHeap () returned 0x120000 [0045.135] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x131f48 | out: hHeap=0x120000) returned 1 [0045.135] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup;%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpDst=0x149b98, nSize=0xf1 | out: lpDst="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup;C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned 0x8b [0045.135] GetProcessHeap () returned 0x120000 [0045.135] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x149d88 | out: hHeap=0x120000) returned 1 [0045.135] GetProcessHeap () returned 0x120000 [0045.135] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x132440 | out: hHeap=0x120000) returned 1 [0045.135] GetProcessHeap () returned 0x120000 [0045.135] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x20a) returned 0x147480 [0045.135] GetProcessHeap () returned 0x120000 [0045.135] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x20a) returned 0x14c6e8 [0045.135] GetProcessHeap () returned 0x120000 [0045.135] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x20a) returned 0x14c900 [0045.135] GetProcessHeap () returned 0x120000 [0045.135] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x20a) returned 0x14cb18 [0045.135] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x147480, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\shaofao.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\shaofao.exe")) returned 0x23 [0045.136] GetProcessHeap () returned 0x120000 [0045.136] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x20a) returned 0x14cd30 [0045.136] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x14cd30, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\shaofao.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\shaofao.exe")) returned 0x23 [0045.136] GetProcessHeap () returned 0x120000 [0045.136] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x14cd30 | out: hHeap=0x120000) returned 1 [0045.136] GetProcessHeap () returned 0x120000 [0045.136] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x20a) returned 0x14cd30 [0045.136] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x14cd30, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\shaofao.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\shaofao.exe")) returned 0x23 [0045.136] GetProcessHeap () returned 0x120000 [0045.136] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x14cd30 | out: hHeap=0x120000) returned 1 [0045.136] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\shaofao.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\shaofao.exe"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\shaofao.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\shaofao.exe"), bFailIfExists=0) returned 1 [0045.147] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x20106, phkResult=0xaffab0 | out: phkResult=0xaffab0*=0x26c) returned 0x0 [0045.148] RegSetValueExW (in: hKey=0x26c, lpValueName="shaofao", Reserved=0x0, dwType=0x1, lpData="C:\\Users\\FD1HVy\\AppData\\Local\\shaofao.exe", cbData=0x52 | out: lpData="C:\\Users\\FD1HVy\\AppData\\Local\\shaofao.exe") returned 0x0 [0045.148] RegCloseKey (hKey=0x26c) returned 0x0 [0045.148] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x20106, phkResult=0xaffaac | out: phkResult=0xaffaac*=0x26c) returned 0x0 [0045.148] RegSetValueExW (in: hKey=0x26c, lpValueName="shaofao", Reserved=0x0, dwType=0x1, lpData="C:\\Users\\FD1HVy\\AppData\\Local\\shaofao.exe", cbData=0x52 | out: lpData="C:\\Users\\FD1HVy\\AppData\\Local\\shaofao.exe") returned 0x0 [0045.148] RegCloseKey (hKey=0x26c) returned 0x0 [0045.148] GetProcessHeap () returned 0x120000 [0045.148] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x118) returned 0x149250 [0045.148] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\shaofao.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\shaofao.exe"), lpNewFileName="c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\shaofao.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\shaofao.exe"), bFailIfExists=1) returned 0 [0045.149] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\shaofao.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\shaofao.exe"), lpNewFileName="c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\shaofao.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\shaofao.exe"), bFailIfExists=1) returned 1 [0045.153] GetProcessHeap () returned 0x120000 [0045.153] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x149250 | out: hHeap=0x120000) returned 1 [0045.153] GetProcessHeap () returned 0x120000 [0045.153] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x147480 | out: hHeap=0x120000) returned 1 [0045.154] GetProcessHeap () returned 0x120000 [0045.154] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x14c6e8 | out: hHeap=0x120000) returned 1 [0045.154] GetProcessHeap () returned 0x120000 [0045.154] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x14c900 | out: hHeap=0x120000) returned 1 [0045.154] GetProcessHeap () returned 0x120000 [0045.154] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x14cb18 | out: hHeap=0x120000) returned 1 [0045.154] GetProcessHeap () returned 0x120000 [0045.154] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x12ede0 | out: hHeap=0x120000) returned 1 [0045.154] GetProcessHeap () returned 0x120000 [0045.154] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x146e20 | out: hHeap=0x120000) returned 1 [0045.154] GetProcessHeap () returned 0x120000 [0045.154] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x149b98 | out: hHeap=0x120000) returned 1 [0045.154] GetProcessHeap () returned 0x120000 [0045.154] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x20) returned 0x148668 [0045.154] GetProcessHeap () returned 0x120000 [0045.154] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x1e) returned 0x148690 [0045.154] GetProcessHeap () returned 0x120000 [0045.154] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x1e) returned 0x148500 [0045.154] GetProcessHeap () returned 0x120000 [0045.154] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x90) returned 0x131f48 [0045.154] GetProcessHeap () returned 0x120000 [0045.154] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x131f48 | out: hHeap=0x120000) returned 1 [0045.154] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x148690, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0045.154] GetProcessHeap () returned 0x120000 [0045.154] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x148500 | out: hHeap=0x120000) returned 1 [0045.154] GetProcessHeap () returned 0x120000 [0045.154] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x148668 | out: hHeap=0x120000) returned 1 [0045.154] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xaffacc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xaffacc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0045.154] GetProcessHeap () returned 0x120000 [0045.154] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x148690 | out: hHeap=0x120000) returned 1 [0045.154] GetProcessHeap () returned 0x120000 [0045.154] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x28) returned 0x137e88 [0045.154] GetProcessHeap () returned 0x120000 [0045.154] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10) returned 0x147c60 [0045.154] GetProcessHeap () returned 0x120000 [0045.154] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x60) returned 0x12ede0 [0045.155] GetProcessHeap () returned 0x120000 [0045.155] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x60) returned 0x12e5a0 [0045.155] GetProcessHeap () returned 0x120000 [0045.155] RtlReAllocateHeap (Heap=0x120000, Flags=0x0, Ptr=0x12e5a0, Size=0xbe) returned 0x131590 [0045.155] GetProcessHeap () returned 0x120000 [0045.155] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10) returned 0x147d68 [0045.155] GetProcessHeap () returned 0x120000 [0045.155] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x180) returned 0x149b98 [0045.155] GetProcessHeap () returned 0x120000 [0045.155] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x250) returned 0x149d20 [0045.155] GetProcessHeap () returned 0x120000 [0045.155] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x90) returned 0x131f48 [0045.155] GetProcessHeap () returned 0x120000 [0045.155] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x84) returned 0x12e300 [0045.155] GetProcessHeap () returned 0x120000 [0045.155] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x84) returned 0x131458 [0045.155] GetProcessHeap () returned 0x120000 [0045.155] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x90) returned 0x132bf0 [0045.155] GetProcessHeap () returned 0x120000 [0045.155] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x132bf0 | out: hHeap=0x120000) returned 1 [0045.155] ExpandEnvironmentStringsW (in: lpSrc="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys", lpDst=0x12e300, nSize=0x42 | out: lpDst="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys") returned 0x42 [0045.155] GetProcessHeap () returned 0x120000 [0045.155] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x131458 | out: hHeap=0x120000) returned 1 [0045.155] GetProcessHeap () returned 0x120000 [0045.155] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x131f48 | out: hHeap=0x120000) returned 1 [0045.155] GetProcessHeap () returned 0x120000 [0045.155] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0xc0) returned 0x131458 [0045.155] GetProcessHeap () returned 0x120000 [0045.155] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0xb2) returned 0x132bf0 [0045.155] GetProcessHeap () returned 0x120000 [0045.155] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0xb2) returned 0x131158 [0045.155] GetProcessHeap () returned 0x120000 [0045.155] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x90) returned 0x131f48 [0045.155] GetProcessHeap () returned 0x120000 [0045.155] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x131f48 | out: hHeap=0x120000) returned 1 [0045.155] ExpandEnvironmentStringsW (in: lpSrc="C:\\Windows;C:\\ProgramData\\microsoft\\windows\\caches;C:\\Users\\WR\\microsoft\\windows\\caches;", lpDst=0x132bf0, nSize=0x59 | out: lpDst="C:\\Windows;C:\\ProgramData\\microsoft\\windows\\caches;C:\\Users\\WR\\microsoft\\windows\\caches;") returned 0x59 [0045.155] GetProcessHeap () returned 0x120000 [0045.155] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x131158 | out: hHeap=0x120000) returned 1 [0045.155] GetProcessHeap () returned 0x120000 [0045.155] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x131458 | out: hHeap=0x120000) returned 1 [0045.155] GetProcessHeap () returned 0x120000 [0045.155] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x20a) returned 0x147480 [0045.155] GetProcessHeap () returned 0x120000 [0045.155] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x20a) returned 0x14c6e8 [0045.156] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x14c6e8, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\shaofao.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\shaofao.exe")) returned 0x23 [0045.156] GetProcessHeap () returned 0x120000 [0045.156] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x14c6e8 | out: hHeap=0x120000) returned 1 [0045.156] GetProcessHeap () returned 0x120000 [0045.156] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x174) returned 0x147698 [0045.156] GetProcessHeap () returned 0x120000 [0045.156] RtlReAllocateHeap (Heap=0x120000, Flags=0x0, Ptr=0x147698, Size=0x3c2) returned 0x14c6e8 [0045.156] GetProcessHeap () returned 0x120000 [0045.156] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x86) returned 0x131f48 [0045.156] GetProcessHeap () returned 0x120000 [0045.156] RtlReAllocateHeap (Heap=0x120000, Flags=0x0, Ptr=0x131f48, Size=0x9e) returned 0x131f48 [0045.156] GetProcessHeap () returned 0x120000 [0045.156] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0xb4) returned 0x131458 [0045.156] GetProcessHeap () returned 0x120000 [0045.156] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x147480 | out: hHeap=0x120000) returned 1 [0045.156] GetProcessHeap () returned 0x120000 [0045.156] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x149b98 | out: hHeap=0x120000) returned 1 [0045.156] GetProcessHeap () returned 0x120000 [0045.156] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x149d20 | out: hHeap=0x120000) returned 1 [0045.157] GetProcessHeap () returned 0x120000 [0045.157] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x12e300 | out: hHeap=0x120000) returned 1 [0045.157] GetProcessHeap () returned 0x120000 [0045.157] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x132bf0 | out: hHeap=0x120000) returned 1 [0045.157] GetProcessHeap () returned 0x120000 [0045.157] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x147c60 | out: hHeap=0x120000) returned 1 [0045.157] GetProcessHeap () returned 0x120000 [0045.157] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x12ede0 | out: hHeap=0x120000) returned 1 [0045.157] GetProcessHeap () returned 0x120000 [0045.157] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x20) returned 0x1485c8 [0045.157] GetProcessHeap () returned 0x120000 [0045.157] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x1e) returned 0x148578 [0045.157] GetProcessHeap () returned 0x120000 [0045.157] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x1e) returned 0x1485a0 [0045.157] GetProcessHeap () returned 0x120000 [0045.157] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x90) returned 0x12e300 [0045.157] GetProcessHeap () returned 0x120000 [0045.157] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x12e300 | out: hHeap=0x120000) returned 1 [0045.157] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x148578, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0045.157] GetProcessHeap () returned 0x120000 [0045.157] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1485a0 | out: hHeap=0x120000) returned 1 [0045.157] GetProcessHeap () returned 0x120000 [0045.157] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1485c8 | out: hHeap=0x120000) returned 1 [0045.157] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xaffacc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xaffacc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0045.158] GetProcessHeap () returned 0x120000 [0045.158] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x148578 | out: hHeap=0x120000) returned 1 [0045.158] GetProcessHeap () returned 0x120000 [0045.158] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x28) returned 0x137eb8 [0045.158] GetProcessHeap () returned 0x120000 [0045.158] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10) returned 0x147db0 [0045.158] GetProcessHeap () returned 0x120000 [0045.158] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x60) returned 0x12ede0 [0045.158] GetProcessHeap () returned 0x120000 [0045.158] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x60) returned 0x12e5a0 [0045.158] GetProcessHeap () returned 0x120000 [0045.158] RtlReAllocateHeap (Heap=0x120000, Flags=0x0, Ptr=0x12e5a0, Size=0xbe) returned 0x12e300 [0045.158] GetProcessHeap () returned 0x120000 [0045.158] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10) returned 0x147b88 [0045.158] GetProcessHeap () returned 0x120000 [0045.158] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x180) returned 0x149b98 [0045.158] GetProcessHeap () returned 0x120000 [0045.158] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x250) returned 0x149d20 [0045.158] GetProcessHeap () returned 0x120000 [0045.158] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x90) returned 0x132bf0 [0045.158] GetProcessHeap () returned 0x120000 [0045.158] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x84) returned 0x131158 [0045.158] GetProcessHeap () returned 0x120000 [0045.158] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x84) returned 0x12ffe8 [0045.158] GetProcessHeap () returned 0x120000 [0045.158] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x90) returned 0x12f490 [0045.158] GetProcessHeap () returned 0x120000 [0045.158] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x12f490 | out: hHeap=0x120000) returned 1 [0045.158] ExpandEnvironmentStringsW (in: lpSrc="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys", lpDst=0x131158, nSize=0x42 | out: lpDst="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys") returned 0x42 [0045.158] GetProcessHeap () returned 0x120000 [0045.158] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x12ffe8 | out: hHeap=0x120000) returned 1 [0045.158] GetProcessHeap () returned 0x120000 [0045.158] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x132bf0 | out: hHeap=0x120000) returned 1 [0045.158] GetProcessHeap () returned 0x120000 [0045.158] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0xc0) returned 0x132bf0 [0045.158] GetProcessHeap () returned 0x120000 [0045.158] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0xb2) returned 0x12ffe8 [0045.159] GetProcessHeap () returned 0x120000 [0045.159] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0xb2) returned 0x12f490 [0045.159] GetProcessHeap () returned 0x120000 [0045.159] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x90) returned 0x149250 [0045.159] GetProcessHeap () returned 0x120000 [0045.159] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x149250 | out: hHeap=0x120000) returned 1 [0045.159] ExpandEnvironmentStringsW (in: lpSrc="C:\\Windows;C:\\ProgramData\\microsoft\\windows\\caches;C:\\Users\\WR\\microsoft\\windows\\caches;", lpDst=0x12ffe8, nSize=0x59 | out: lpDst="C:\\Windows;C:\\ProgramData\\microsoft\\windows\\caches;C:\\Users\\WR\\microsoft\\windows\\caches;") returned 0x59 [0045.159] GetProcessHeap () returned 0x120000 [0045.159] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x12f490 | out: hHeap=0x120000) returned 1 [0045.159] GetProcessHeap () returned 0x120000 [0045.159] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x132bf0 | out: hHeap=0x120000) returned 1 [0045.159] GetProcessHeap () returned 0x120000 [0045.159] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x20a) returned 0x147480 [0045.159] GetProcessHeap () returned 0x120000 [0045.159] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x20a) returned 0x14cab8 [0045.159] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x14cab8, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\shaofao.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\shaofao.exe")) returned 0x23 [0045.159] GetProcessHeap () returned 0x120000 [0045.159] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x14cab8 | out: hHeap=0x120000) returned 1 [0045.159] GetProcessHeap () returned 0x120000 [0045.159] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x174) returned 0x147698 [0045.159] GetProcessHeap () returned 0x120000 [0045.159] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x252) returned 0x14cab8 [0045.159] GetProcessHeap () returned 0x120000 [0045.159] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x86) returned 0x147818 [0045.159] GetProcessHeap () returned 0x120000 [0045.159] RtlReAllocateHeap (Heap=0x120000, Flags=0x0, Ptr=0x147818, Size=0x9e) returned 0x132bf0 [0045.159] GetProcessHeap () returned 0x120000 [0045.159] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0xb4) returned 0x12f490 [0045.159] GetProcessHeap () returned 0x120000 [0045.159] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x147480 | out: hHeap=0x120000) returned 1 [0045.159] GetProcessHeap () returned 0x120000 [0045.159] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x149b98 | out: hHeap=0x120000) returned 1 [0045.159] GetProcessHeap () returned 0x120000 [0045.159] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x149d20 | out: hHeap=0x120000) returned 1 [0045.159] GetProcessHeap () returned 0x120000 [0045.159] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x131158 | out: hHeap=0x120000) returned 1 [0045.159] GetProcessHeap () returned 0x120000 [0045.159] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x12ffe8 | out: hHeap=0x120000) returned 1 [0045.159] GetProcessHeap () returned 0x120000 [0045.159] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x147db0 | out: hHeap=0x120000) returned 1 [0045.159] GetProcessHeap () returned 0x120000 [0045.159] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x12ede0 | out: hHeap=0x120000) returned 1 [0045.159] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x1242013, lpParameter=0xaffaf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26c [0045.160] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x1241fab, lpParameter=0xaffb08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x268 [0045.160] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x1241e4e, lpParameter=0xaffb14, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x298 [0045.161] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x1241859, lpParameter=0xaffb08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29c [0045.161] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x124197c, lpParameter=0xaffb08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a0 [0045.162] WaitForSingleObject (hHandle=0x29c, dwMilliseconds=0xffffffff) Thread: id = 2 os_tid = 0xbb4 Thread: id = 10 os_tid = 0xd4c [0040.069] GetProcessHeap () returned 0x120000 [0040.069] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x20) returned 0x148690 [0040.069] GetProcessHeap () returned 0x120000 [0040.069] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x14) returned 0x138460 [0040.069] GetProcessHeap () returned 0x120000 [0040.069] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x14) returned 0x1384a0 [0040.069] GetProcessHeap () returned 0x120000 [0040.069] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x90) returned 0x131d60 [0040.070] GetProcessHeap () returned 0x120000 [0040.070] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x131d60 | out: hHeap=0x120000) returned 1 [0040.070] ExpandEnvironmentStringsW (in: lpSrc="%comspec%", lpDst=0x138460, nSize=0xa | out: lpDst="") returned 0x1c [0040.070] GetProcessHeap () returned 0x120000 [0040.070] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1384a0 | out: hHeap=0x120000) returned 1 [0040.070] GetProcessHeap () returned 0x120000 [0040.070] RtlReAllocateHeap (Heap=0x120000, Flags=0x0, Ptr=0x138460, Size=0x26) returned 0x137e88 [0040.070] GetProcessHeap () returned 0x120000 [0040.070] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x26) returned 0x137c18 [0040.070] GetProcessHeap () returned 0x120000 [0040.070] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x90) returned 0x131d60 [0040.070] GetProcessHeap () returned 0x120000 [0040.070] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x131d60 | out: hHeap=0x120000) returned 1 [0040.070] ExpandEnvironmentStringsW (in: lpSrc="%comspec%", lpDst=0x137e88, nSize=0x13 | out: lpDst="") returned 0x1c [0040.070] GetProcessHeap () returned 0x120000 [0040.070] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x137c18 | out: hHeap=0x120000) returned 1 [0040.070] GetProcessHeap () returned 0x120000 [0040.070] RtlReAllocateHeap (Heap=0x120000, Flags=0x0, Ptr=0x137e88, Size=0x4a) returned 0x1497d8 [0040.070] GetProcessHeap () returned 0x120000 [0040.070] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x4a) returned 0x149410 [0040.070] GetProcessHeap () returned 0x120000 [0040.070] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x90) returned 0x131d60 [0040.070] GetProcessHeap () returned 0x120000 [0040.070] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x131d60 | out: hHeap=0x120000) returned 1 [0040.070] ExpandEnvironmentStringsW (in: lpSrc="%comspec%", lpDst=0x1497d8, nSize=0x25 | out: lpDst="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0040.070] GetProcessHeap () returned 0x120000 [0040.070] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x149410 | out: hHeap=0x120000) returned 1 [0040.070] GetProcessHeap () returned 0x120000 [0040.070] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x148690 | out: hHeap=0x120000) returned 1 [0040.070] GetProcessHeap () returned 0x120000 [0040.070] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x50) returned 0x149af0 [0040.070] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75e90000 [0040.071] GetProcAddress (hModule=0x75e90000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x75ea6b30 [0040.071] Wow64DisableWow64FsRedirection (in: OldValue=0xd7fc3c | out: OldValue=0xd7fc3c*=0x0) returned 1 [0040.071] GetProcessHeap () returned 0x120000 [0040.071] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x149af0 | out: hHeap=0x120000) returned 1 [0040.071] CreatePipe (in: hReadPipe=0xd7fc30, hWritePipe=0xd7fc2c, lpPipeAttributes=0xd7fc4c, nSize=0x0 | out: hReadPipe=0xd7fc30*=0x258, hWritePipe=0xd7fc2c*=0x254) returned 1 [0040.071] CreatePipe (in: hReadPipe=0xd7fc34, hWritePipe=0xd7fc38, lpPipeAttributes=0xd7fc4c, nSize=0x0 | out: hReadPipe=0xd7fc34*=0x210, hWritePipe=0xd7fc38*=0x25c) returned 1 [0040.071] SetHandleInformation (hObject=0x254, dwMask=0x1, dwFlags=0x0) returned 1 [0040.073] SetHandleInformation (hObject=0x210, dwMask=0x1, dwFlags=0x0) returned 1 [0040.073] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\cmd.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0xd7fc68*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x258, hStdOutput=0x25c, hStdError=0x25c), lpProcessInformation=0xd7fc58 | out: lpCommandLine=0x0, lpProcessInformation=0xd7fc58*(hProcess=0x264, hThread=0x260, dwProcessId=0xc70, dwThreadId=0x15c)) returned 1 [0040.336] WriteFile (in: hFile=0x254, lpBuffer=0x13e4d0*, nNumberOfBytesToWrite=0x5b, lpNumberOfBytesWritten=0xd7fc48, lpOverlapped=0x0 | out: lpBuffer=0x13e4d0*, lpNumberOfBytesWritten=0xd7fc48*=0x5b, lpOverlapped=0x0) returned 1 [0040.336] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0xffffffff) Thread: id = 18 os_tid = 0x4d0 [0045.168] GetVersion () returned 0x23f00206 [0045.168] GetCurrentProcess () returned 0xffffffff [0045.168] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0xebf9ec | out: TokenHandle=0xebf9ec*=0x2a4) returned 1 [0045.169] GetTokenInformation (in: TokenHandle=0x2a4, TokenInformationClass=0x14, TokenInformation=0xebf9e4, TokenInformationLength=0x4, ReturnLength=0xebf9e8 | out: TokenInformation=0xebf9e4, ReturnLength=0xebf9e8) returned 1 [0045.169] CloseHandle (hObject=0x2a4) returned 1 [0045.169] GetProcessHeap () returned 0x120000 [0045.169] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x20) returned 0x148410 [0045.169] GetProcessHeap () returned 0x120000 [0045.169] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x1e) returned 0x148640 [0045.169] GetProcessHeap () returned 0x120000 [0045.169] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x1e) returned 0x148668 [0045.169] GetProcessHeap () returned 0x120000 [0045.169] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x90) returned 0x131158 [0045.169] GetProcessHeap () returned 0x120000 [0045.169] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x131158 | out: hHeap=0x120000) returned 1 [0045.169] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x148640, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0045.169] GetProcessHeap () returned 0x120000 [0045.169] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x148668 | out: hHeap=0x120000) returned 1 [0045.169] GetProcessHeap () returned 0x120000 [0045.169] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x148410 | out: hHeap=0x120000) returned 1 [0045.169] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xebf974, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xebf974*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0045.169] GetProcessHeap () returned 0x120000 [0045.169] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x148640 | out: hHeap=0x120000) returned 1 [0045.169] GetProcessHeap () returned 0x120000 [0045.169] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x40) returned 0x1323b0 [0045.169] GetProcessHeap () returned 0x120000 [0045.169] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x3a) returned 0x1328c0 [0045.169] GetProcessHeap () returned 0x120000 [0045.169] RtlReAllocateHeap (Heap=0x120000, Flags=0x0, Ptr=0x1328c0, Size=0x72) returned 0x146d20 [0045.169] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2a4 [0045.169] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0x0) returned 0x102 [0045.169] CloseHandle (hObject=0x2a4) returned 1 [0045.170] GetProcessHeap () returned 0x120000 [0045.170] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1323b0 | out: hHeap=0x120000) returned 1 [0045.170] GetProcessHeap () returned 0x120000 [0045.170] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x146d20 | out: hHeap=0x120000) returned 1 [0045.170] Sleep (dwMilliseconds=0x3e8) [0046.295] GetProcessHeap () returned 0x120000 [0046.295] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x20) returned 0x148410 [0046.295] GetProcessHeap () returned 0x120000 [0046.295] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x1e) returned 0x148578 [0046.295] GetProcessHeap () returned 0x120000 [0046.295] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x1e) returned 0x1485a0 [0046.295] GetProcessHeap () returned 0x120000 [0046.295] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x90) returned 0x131158 [0046.295] GetProcessHeap () returned 0x120000 [0046.295] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x131158 | out: hHeap=0x120000) returned 1 [0046.295] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x148578, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0046.295] GetProcessHeap () returned 0x120000 [0046.295] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1485a0 | out: hHeap=0x120000) returned 1 [0046.295] GetProcessHeap () returned 0x120000 [0046.295] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x148410 | out: hHeap=0x120000) returned 1 [0046.295] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xebf974, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xebf974*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0046.295] GetProcessHeap () returned 0x120000 [0046.295] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x148578 | out: hHeap=0x120000) returned 1 [0046.295] GetProcessHeap () returned 0x120000 [0046.295] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x40) returned 0x132488 [0046.296] GetProcessHeap () returned 0x120000 [0046.296] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x3a) returned 0x132758 [0046.296] GetProcessHeap () returned 0x120000 [0046.296] RtlReAllocateHeap (Heap=0x120000, Flags=0x0, Ptr=0x132758, Size=0x72) returned 0x146da0 [0046.296] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x304 [0046.296] WaitForSingleObject (hHandle=0x304, dwMilliseconds=0x0) returned 0x102 [0046.296] CloseHandle (hObject=0x304) returned 1 [0046.296] GetProcessHeap () returned 0x120000 [0046.296] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x132488 | out: hHeap=0x120000) returned 1 [0046.296] GetProcessHeap () returned 0x120000 [0046.296] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x146da0 | out: hHeap=0x120000) returned 1 [0046.296] Sleep (dwMilliseconds=0x3e8) [0047.546] GetProcessHeap () returned 0x120000 [0047.548] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x20) returned 0x148668 [0047.550] GetProcessHeap () returned 0x120000 [0047.553] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x1e) returned 0x148410 [0047.553] GetProcessHeap () returned 0x120000 [0047.553] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x1e) returned 0x1485a0 [0047.554] GetProcessHeap () returned 0x120000 [0047.555] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x90) returned 0x131158 [0047.556] GetProcessHeap () returned 0x120000 [0047.556] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x131158 | out: hHeap=0x120000) returned 1 [0047.556] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x148410, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0047.557] GetProcessHeap () returned 0x120000 [0047.558] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1485a0 | out: hHeap=0x120000) returned 1 [0047.558] GetProcessHeap () returned 0x120000 [0047.559] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x148668 | out: hHeap=0x120000) returned 1 [0047.559] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xebf974, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xebf974*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0047.562] GetProcessHeap () returned 0x120000 [0047.562] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x148410 | out: hHeap=0x120000) returned 1 [0047.563] GetProcessHeap () returned 0x120000 [0047.564] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x40) returned 0x1325a8 [0047.564] GetProcessHeap () returned 0x120000 [0047.564] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x3a) returned 0x132488 [0047.565] GetProcessHeap () returned 0x120000 [0047.566] RtlReAllocateHeap (Heap=0x120000, Flags=0x0, Ptr=0x132488, Size=0x72) returned 0x215d28 [0047.568] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x318 [0047.569] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x0) returned 0x102 [0047.571] CloseHandle (hObject=0x318) returned 1 [0047.572] GetProcessHeap () returned 0x120000 [0047.572] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1325a8 | out: hHeap=0x120000) returned 1 [0047.573] GetProcessHeap () returned 0x120000 [0047.573] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x215d28 | out: hHeap=0x120000) returned 1 [0047.574] Sleep (dwMilliseconds=0x3e8) [0049.117] GetProcessHeap () returned 0x120000 [0049.117] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x20) returned 0x148668 [0049.117] GetProcessHeap () returned 0x120000 [0049.117] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x1e) returned 0x1485c8 [0049.117] GetProcessHeap () returned 0x120000 [0049.117] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x1e) returned 0x148690 [0049.117] GetProcessHeap () returned 0x120000 [0049.117] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x90) returned 0x12ffe8 [0049.117] GetProcessHeap () returned 0x120000 [0049.117] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x12ffe8 | out: hHeap=0x120000) returned 1 [0049.117] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x1485c8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0049.117] GetProcessHeap () returned 0x120000 [0049.117] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x148690 | out: hHeap=0x120000) returned 1 [0049.117] GetProcessHeap () returned 0x120000 [0049.117] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x148668 | out: hHeap=0x120000) returned 1 [0049.117] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xebf974, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xebf974*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0049.117] GetProcessHeap () returned 0x120000 [0049.117] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1485c8 | out: hHeap=0x120000) returned 1 [0049.117] GetProcessHeap () returned 0x120000 [0049.117] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x40) returned 0x132638 [0049.118] GetProcessHeap () returned 0x120000 [0049.118] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x3a) returned 0x1325a8 [0049.118] GetProcessHeap () returned 0x120000 [0049.118] RtlReAllocateHeap (Heap=0x120000, Flags=0x0, Ptr=0x1325a8, Size=0x72) returned 0x2155a8 [0049.118] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x338 [0049.118] WaitForSingleObject (hHandle=0x338, dwMilliseconds=0x0) returned 0x102 [0049.118] CloseHandle (hObject=0x338) returned 1 [0049.118] GetProcessHeap () returned 0x120000 [0049.118] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x132638 | out: hHeap=0x120000) returned 1 [0049.118] GetProcessHeap () returned 0x120000 [0049.118] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x2155a8 | out: hHeap=0x120000) returned 1 [0049.118] Sleep (dwMilliseconds=0x3e8) [0051.541] GetProcessHeap () returned 0x120000 [0051.541] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x20) returned 0x1485f0 [0051.541] GetProcessHeap () returned 0x120000 [0051.541] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x1e) returned 0x148410 [0051.541] GetProcessHeap () returned 0x120000 [0051.541] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x1e) returned 0x1485a0 [0051.541] GetProcessHeap () returned 0x120000 [0051.541] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x90) returned 0x12ffe8 [0051.541] GetProcessHeap () returned 0x120000 [0051.541] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x12ffe8 | out: hHeap=0x120000) returned 1 [0051.541] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x148410, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0051.541] GetProcessHeap () returned 0x120000 [0051.541] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1485a0 | out: hHeap=0x120000) returned 1 [0051.541] GetProcessHeap () returned 0x120000 [0051.541] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1485f0 | out: hHeap=0x120000) returned 1 [0051.541] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xebf974, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xebf974*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0051.541] GetProcessHeap () returned 0x120000 [0051.541] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x148410 | out: hHeap=0x120000) returned 1 [0051.541] GetProcessHeap () returned 0x120000 [0051.541] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x40) returned 0x132908 [0051.541] GetProcessHeap () returned 0x120000 [0051.541] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x3a) returned 0x132488 [0051.541] GetProcessHeap () returned 0x120000 [0051.541] RtlReAllocateHeap (Heap=0x120000, Flags=0x0, Ptr=0x132488, Size=0x72) returned 0x215528 [0051.541] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x32c [0051.541] WaitForSingleObject (hHandle=0x32c, dwMilliseconds=0x0) returned 0x102 [0051.541] CloseHandle (hObject=0x32c) returned 1 [0051.542] GetProcessHeap () returned 0x120000 [0051.542] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x132908 | out: hHeap=0x120000) returned 1 [0051.542] GetProcessHeap () returned 0x120000 [0051.542] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x215528 | out: hHeap=0x120000) returned 1 [0051.542] Sleep (dwMilliseconds=0x3e8) [0052.874] GetProcessHeap () returned 0x120000 [0052.874] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x20) returned 0x1485a0 [0052.874] GetProcessHeap () returned 0x120000 [0052.874] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x1e) returned 0x1485c8 [0052.874] GetProcessHeap () returned 0x120000 [0052.875] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x1e) returned 0x1485f0 [0052.875] GetProcessHeap () returned 0x120000 [0052.875] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x90) returned 0x12ffe8 [0052.875] GetProcessHeap () returned 0x120000 [0052.875] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x12ffe8 | out: hHeap=0x120000) returned 1 [0052.875] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x1485c8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0052.875] GetProcessHeap () returned 0x120000 [0052.875] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1485f0 | out: hHeap=0x120000) returned 1 [0052.875] GetProcessHeap () returned 0x120000 [0052.875] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1485a0 | out: hHeap=0x120000) returned 1 [0052.875] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xebf974, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xebf974*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0052.875] GetProcessHeap () returned 0x120000 [0052.875] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1485c8 | out: hHeap=0x120000) returned 1 [0052.875] GetProcessHeap () returned 0x120000 [0052.875] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x40) returned 0x132488 [0052.875] GetProcessHeap () returned 0x120000 [0052.875] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x3a) returned 0x1324d0 [0052.875] GetProcessHeap () returned 0x120000 [0052.875] RtlReAllocateHeap (Heap=0x120000, Flags=0x0, Ptr=0x1324d0, Size=0x72) returned 0x2158a8 [0052.875] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x32c [0052.875] WaitForSingleObject (hHandle=0x32c, dwMilliseconds=0x0) returned 0x102 [0052.875] CloseHandle (hObject=0x32c) returned 1 [0052.875] GetProcessHeap () returned 0x120000 [0052.875] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x132488 | out: hHeap=0x120000) returned 1 [0052.875] GetProcessHeap () returned 0x120000 [0052.875] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x2158a8 | out: hHeap=0x120000) returned 1 [0052.875] Sleep (dwMilliseconds=0x3e8) [0054.190] GetProcessHeap () returned 0x120000 [0054.191] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x20) returned 0x148668 [0054.192] GetProcessHeap () returned 0x120000 [0054.192] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x1e) returned 0x1485a0 [0054.193] GetProcessHeap () returned 0x120000 [0054.195] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x1e) returned 0x148410 [0054.195] GetProcessHeap () returned 0x120000 [0054.195] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x90) returned 0x131158 [0054.196] GetProcessHeap () returned 0x120000 [0054.196] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x131158 | out: hHeap=0x120000) returned 1 [0054.197] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x1485a0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0054.197] GetProcessHeap () returned 0x120000 [0054.198] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x148410 | out: hHeap=0x120000) returned 1 [0054.199] GetProcessHeap () returned 0x120000 [0054.200] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x148668 | out: hHeap=0x120000) returned 1 [0054.200] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xebf974, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xebf974*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0054.204] GetProcessHeap () returned 0x120000 [0054.205] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1485a0 | out: hHeap=0x120000) returned 1 [0054.205] GetProcessHeap () returned 0x120000 [0054.206] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x40) returned 0x132680 [0054.206] GetProcessHeap () returned 0x120000 [0054.209] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x3a) returned 0x132488 [0054.209] GetProcessHeap () returned 0x120000 [0054.210] RtlReAllocateHeap (Heap=0x120000, Flags=0x0, Ptr=0x132488, Size=0x72) returned 0x215928 [0054.210] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x314 [0054.213] WaitForSingleObject (hHandle=0x314, dwMilliseconds=0x0) returned 0x102 [0054.216] CloseHandle (hObject=0x314) returned 1 [0054.221] GetProcessHeap () returned 0x120000 [0054.221] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x132680 | out: hHeap=0x120000) returned 1 [0054.221] GetProcessHeap () returned 0x120000 [0054.222] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x215928 | out: hHeap=0x120000) returned 1 [0054.222] Sleep (dwMilliseconds=0x3e8) [0055.615] GetProcessHeap () returned 0x120000 [0055.615] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x20) returned 0x148690 [0055.615] GetProcessHeap () returned 0x120000 [0055.615] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x1e) returned 0x1485a0 [0055.615] GetProcessHeap () returned 0x120000 [0055.615] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x1e) returned 0x1485f0 [0055.615] GetProcessHeap () returned 0x120000 [0055.615] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x90) returned 0x12ffe8 [0055.615] GetProcessHeap () returned 0x120000 [0055.615] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x12ffe8 | out: hHeap=0x120000) returned 1 [0055.615] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x1485a0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0055.615] GetProcessHeap () returned 0x120000 [0055.615] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1485f0 | out: hHeap=0x120000) returned 1 [0055.615] GetProcessHeap () returned 0x120000 [0055.615] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x148690 | out: hHeap=0x120000) returned 1 [0055.615] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xebf974, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xebf974*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0055.616] GetProcessHeap () returned 0x120000 [0055.616] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1485a0 | out: hHeap=0x120000) returned 1 [0055.616] GetProcessHeap () returned 0x120000 [0055.616] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x40) returned 0x132488 [0055.616] GetProcessHeap () returned 0x120000 [0055.616] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x3a) returned 0x132638 [0055.616] GetProcessHeap () returned 0x120000 [0055.616] RtlReAllocateHeap (Heap=0x120000, Flags=0x0, Ptr=0x132638, Size=0x72) returned 0x18ff28 [0055.616] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x320 [0055.616] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x0) returned 0x102 [0055.616] CloseHandle (hObject=0x320) returned 1 [0055.616] GetProcessHeap () returned 0x120000 [0055.616] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x132488 | out: hHeap=0x120000) returned 1 [0055.616] GetProcessHeap () returned 0x120000 [0055.616] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x18ff28 | out: hHeap=0x120000) returned 1 [0055.616] Sleep (dwMilliseconds=0x3e8) [0056.936] GetProcessHeap () returned 0x120000 [0056.939] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x20) returned 0x148668 [0056.944] GetProcessHeap () returned 0x120000 [0056.952] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x1e) returned 0x1485a0 [0056.953] GetProcessHeap () returned 0x120000 [0056.954] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x1e) returned 0x1485f0 [0056.955] GetProcessHeap () returned 0x120000 [0056.955] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x90) returned 0x131158 [0056.955] GetProcessHeap () returned 0x120000 [0056.960] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x131158 | out: hHeap=0x120000) returned 1 [0056.960] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x1485a0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0056.973] GetProcessHeap () returned 0x120000 [0056.973] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1485f0 | out: hHeap=0x120000) returned 1 [0056.973] GetProcessHeap () returned 0x120000 [0056.973] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x148668 | out: hHeap=0x120000) returned 1 [0056.973] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xebf974, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xebf974*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0056.973] GetProcessHeap () returned 0x120000 [0056.973] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1485a0 | out: hHeap=0x120000) returned 1 [0056.973] GetProcessHeap () returned 0x120000 [0056.973] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x40) returned 0x132488 [0056.973] GetProcessHeap () returned 0x120000 [0056.973] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x3a) returned 0x1324d0 [0056.973] GetProcessHeap () returned 0x120000 [0056.973] RtlReAllocateHeap (Heap=0x120000, Flags=0x0, Ptr=0x1324d0, Size=0x72) returned 0x1903a8 [0056.974] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2ec [0056.974] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0x0) returned 0x102 [0056.974] CloseHandle (hObject=0x2ec) returned 1 [0056.974] GetProcessHeap () returned 0x120000 [0056.974] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x132488 | out: hHeap=0x120000) returned 1 [0056.974] GetProcessHeap () returned 0x120000 [0056.974] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1903a8 | out: hHeap=0x120000) returned 1 [0056.974] Sleep (dwMilliseconds=0x3e8) [0058.338] GetProcessHeap () returned 0x120000 [0058.339] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x20) returned 0x1485a0 [0058.339] GetProcessHeap () returned 0x120000 [0058.339] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x1e) returned 0x1485c8 [0058.339] GetProcessHeap () returned 0x120000 [0058.339] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x1e) returned 0x1485f0 [0058.339] GetProcessHeap () returned 0x120000 [0058.339] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x90) returned 0x131158 [0058.339] GetProcessHeap () returned 0x120000 [0058.339] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x131158 | out: hHeap=0x120000) returned 1 [0058.339] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x1485c8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0058.339] GetProcessHeap () returned 0x120000 [0058.339] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1485f0 | out: hHeap=0x120000) returned 1 [0058.339] GetProcessHeap () returned 0x120000 [0058.339] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1485a0 | out: hHeap=0x120000) returned 1 [0058.339] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xebf974, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xebf974*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0058.339] GetProcessHeap () returned 0x120000 [0058.339] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1485c8 | out: hHeap=0x120000) returned 1 [0058.339] GetProcessHeap () returned 0x120000 [0058.339] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x40) returned 0x132680 [0058.339] GetProcessHeap () returned 0x120000 [0058.339] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x3a) returned 0x1327e8 [0058.339] GetProcessHeap () returned 0x120000 [0058.339] RtlReAllocateHeap (Heap=0x120000, Flags=0x0, Ptr=0x1327e8, Size=0x72) returned 0x190aa8 [0058.339] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2e8 [0058.339] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x0) returned 0x102 [0058.339] CloseHandle (hObject=0x2e8) returned 1 [0058.339] GetProcessHeap () returned 0x120000 [0058.339] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x132680 | out: hHeap=0x120000) returned 1 [0058.339] GetProcessHeap () returned 0x120000 [0058.339] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x190aa8 | out: hHeap=0x120000) returned 1 [0058.339] Sleep (dwMilliseconds=0x3e8) [0059.666] GetProcessHeap () returned 0x120000 [0059.666] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x20) returned 0x1485a0 [0059.666] GetProcessHeap () returned 0x120000 [0059.666] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x1e) returned 0x148410 [0059.666] GetProcessHeap () returned 0x120000 [0059.666] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x1e) returned 0x148668 [0059.666] GetProcessHeap () returned 0x120000 [0059.666] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x90) returned 0x12ffe8 [0059.667] GetProcessHeap () returned 0x120000 [0059.667] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x12ffe8 | out: hHeap=0x120000) returned 1 [0059.667] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x148410, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0059.667] GetProcessHeap () returned 0x120000 [0059.667] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x148668 | out: hHeap=0x120000) returned 1 [0059.667] GetProcessHeap () returned 0x120000 [0059.667] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1485a0 | out: hHeap=0x120000) returned 1 [0059.667] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xebf974, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xebf974*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0060.468] GetProcessHeap () returned 0x120000 [0060.468] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x148410 | out: hHeap=0x120000) returned 1 [0060.468] GetProcessHeap () returned 0x120000 [0060.468] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x40) returned 0x132488 [0060.468] GetProcessHeap () returned 0x120000 [0060.468] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x3a) returned 0x132638 [0060.468] GetProcessHeap () returned 0x120000 [0060.468] RtlReAllocateHeap (Heap=0x120000, Flags=0x0, Ptr=0x132638, Size=0x72) returned 0x1902a8 [0060.468] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x33c [0060.469] WaitForSingleObject (hHandle=0x33c, dwMilliseconds=0x0) returned 0x102 [0060.469] CloseHandle (hObject=0x33c) returned 1 [0060.469] GetProcessHeap () returned 0x120000 [0060.469] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x132488 | out: hHeap=0x120000) returned 1 [0060.469] GetProcessHeap () returned 0x120000 [0060.469] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1902a8 | out: hHeap=0x120000) returned 1 [0060.469] Sleep (dwMilliseconds=0x3e8) [0062.082] GetProcessHeap () returned 0x120000 [0062.082] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x20) returned 0x1485a0 [0062.085] GetProcessHeap () returned 0x120000 [0062.085] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x1e) returned 0x148668 [0062.085] GetProcessHeap () returned 0x120000 [0062.085] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x1e) returned 0x1485c8 [0062.085] GetProcessHeap () returned 0x120000 [0062.085] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x90) returned 0x131158 [0062.172] GetProcessHeap () returned 0x120000 [0062.172] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x131158 | out: hHeap=0x120000) returned 1 [0062.172] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x148668, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0062.172] GetProcessHeap () returned 0x120000 [0062.172] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1485c8 | out: hHeap=0x120000) returned 1 [0062.172] GetProcessHeap () returned 0x120000 [0062.172] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1485a0 | out: hHeap=0x120000) returned 1 [0062.172] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xebf974, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xebf974*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0062.172] GetProcessHeap () returned 0x120000 [0062.172] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x148668 | out: hHeap=0x120000) returned 1 [0062.172] GetProcessHeap () returned 0x120000 [0062.172] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x40) returned 0x132488 [0062.173] GetProcessHeap () returned 0x120000 [0062.173] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x3a) returned 0x1325a8 [0062.173] GetProcessHeap () returned 0x120000 [0062.173] RtlReAllocateHeap (Heap=0x120000, Flags=0x0, Ptr=0x1325a8, Size=0x72) returned 0x190d28 [0062.173] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x330 [0062.173] WaitForSingleObject (hHandle=0x330, dwMilliseconds=0x0) returned 0x102 [0062.173] CloseHandle (hObject=0x330) returned 1 [0062.173] GetProcessHeap () returned 0x120000 [0062.173] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x132488 | out: hHeap=0x120000) returned 1 [0062.173] GetProcessHeap () returned 0x120000 [0062.173] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x190d28 | out: hHeap=0x120000) returned 1 [0062.173] Sleep (dwMilliseconds=0x3e8) [0063.428] GetProcessHeap () returned 0x120000 [0063.428] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x20) returned 0x148410 [0063.429] GetProcessHeap () returned 0x120000 [0063.429] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x1e) returned 0x1485a0 [0063.429] GetProcessHeap () returned 0x120000 [0063.429] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x1e) returned 0x1485c8 [0063.429] GetProcessHeap () returned 0x120000 [0063.429] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x90) returned 0x217648 [0063.429] GetProcessHeap () returned 0x120000 [0063.429] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x217648 | out: hHeap=0x120000) returned 1 [0063.429] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x1485a0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0063.429] GetProcessHeap () returned 0x120000 [0063.429] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1485c8 | out: hHeap=0x120000) returned 1 [0063.429] GetProcessHeap () returned 0x120000 [0063.429] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x148410 | out: hHeap=0x120000) returned 1 [0063.429] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xebf974, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xebf974*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0063.429] GetProcessHeap () returned 0x120000 [0063.429] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1485a0 | out: hHeap=0x120000) returned 1 [0063.429] GetProcessHeap () returned 0x120000 [0063.429] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x40) returned 0x132488 [0063.429] GetProcessHeap () returned 0x120000 [0063.429] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x3a) returned 0x1324d0 [0063.429] GetProcessHeap () returned 0x120000 [0063.429] RtlReAllocateHeap (Heap=0x120000, Flags=0x0, Ptr=0x1324d0, Size=0x72) returned 0x1904a8 [0063.429] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x30c [0063.430] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x0) returned 0x102 [0063.430] CloseHandle (hObject=0x30c) returned 1 [0063.430] GetProcessHeap () returned 0x120000 [0063.430] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x132488 | out: hHeap=0x120000) returned 1 [0063.430] GetProcessHeap () returned 0x120000 [0063.430] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1904a8 | out: hHeap=0x120000) returned 1 [0063.430] Sleep (dwMilliseconds=0x3e8) [0064.667] GetProcessHeap () returned 0x120000 [0064.669] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x20) returned 0x1485a0 [0064.670] GetProcessHeap () returned 0x120000 [0064.674] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x1e) returned 0x1485c8 [0064.674] GetProcessHeap () returned 0x120000 [0064.674] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x1e) returned 0x1485f0 [0064.676] GetProcessHeap () returned 0x120000 [0064.676] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x90) returned 0x216b00 [0064.678] GetProcessHeap () returned 0x120000 [0064.678] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x216b00 | out: hHeap=0x120000) returned 1 [0064.678] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x1485c8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0064.678] GetProcessHeap () returned 0x120000 [0064.678] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1485f0 | out: hHeap=0x120000) returned 1 [0064.678] GetProcessHeap () returned 0x120000 [0064.678] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1485a0 | out: hHeap=0x120000) returned 1 [0064.678] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xebf974, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xebf974*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0064.678] GetProcessHeap () returned 0x120000 [0064.678] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1485c8 | out: hHeap=0x120000) returned 1 [0064.678] GetProcessHeap () returned 0x120000 [0064.678] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x40) returned 0x132758 [0064.678] GetProcessHeap () returned 0x120000 [0064.678] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x3a) returned 0x1325a8 [0064.678] GetProcessHeap () returned 0x120000 [0064.678] RtlReAllocateHeap (Heap=0x120000, Flags=0x0, Ptr=0x1325a8, Size=0x72) returned 0x1902a8 [0064.678] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x30c [0064.678] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x0) returned 0x102 [0064.678] CloseHandle (hObject=0x30c) returned 1 [0064.678] GetProcessHeap () returned 0x120000 [0064.678] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x132758 | out: hHeap=0x120000) returned 1 [0064.678] GetProcessHeap () returned 0x120000 [0064.679] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1902a8 | out: hHeap=0x120000) returned 1 [0064.679] Sleep (dwMilliseconds=0x3e8) [0065.876] GetProcessHeap () returned 0x120000 [0065.879] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x20) returned 0x1485a0 [0065.883] GetProcessHeap () returned 0x120000 [0065.889] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x1e) returned 0x1485c8 [0065.893] GetProcessHeap () returned 0x120000 [0065.896] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x1e) returned 0x1485f0 [0065.897] GetProcessHeap () returned 0x120000 [0065.897] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x90) returned 0x217188 [0065.897] GetProcessHeap () returned 0x120000 [0065.899] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x217188 | out: hHeap=0x120000) returned 1 [0065.899] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x1485c8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0065.903] GetProcessHeap () returned 0x120000 [0065.904] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1485f0 | out: hHeap=0x120000) returned 1 [0065.906] GetProcessHeap () returned 0x120000 [0065.906] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1485a0 | out: hHeap=0x120000) returned 1 [0065.906] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xebf974, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xebf974*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0065.907] GetProcessHeap () returned 0x120000 [0065.907] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1485c8 | out: hHeap=0x120000) returned 1 [0065.907] GetProcessHeap () returned 0x120000 [0065.907] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x40) returned 0x1328c0 [0065.907] GetProcessHeap () returned 0x120000 [0065.907] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x3a) returned 0x132758 [0065.907] GetProcessHeap () returned 0x120000 [0065.907] RtlReAllocateHeap (Heap=0x120000, Flags=0x0, Ptr=0x132758, Size=0x72) returned 0x1904a8 [0065.907] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x250 [0065.907] WaitForSingleObject (hHandle=0x250, dwMilliseconds=0x0) returned 0x102 [0065.907] CloseHandle (hObject=0x250) returned 1 [0065.907] GetProcessHeap () returned 0x120000 [0065.907] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1328c0 | out: hHeap=0x120000) returned 1 [0065.907] GetProcessHeap () returned 0x120000 [0065.907] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1904a8 | out: hHeap=0x120000) returned 1 [0065.907] Sleep (dwMilliseconds=0x3e8) [0067.074] GetProcessHeap () returned 0x120000 [0067.074] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x20) returned 0x1485a0 [0067.074] GetProcessHeap () returned 0x120000 [0067.074] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x1e) returned 0x1485c8 [0067.075] GetProcessHeap () returned 0x120000 [0067.076] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x1e) returned 0x1485f0 [0067.077] GetProcessHeap () returned 0x120000 [0067.077] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x90) returned 0x216b00 [0067.078] GetProcessHeap () returned 0x120000 [0067.079] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x216b00 | out: hHeap=0x120000) returned 1 [0067.081] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x1485c8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0067.081] GetProcessHeap () returned 0x120000 [0067.081] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1485f0 | out: hHeap=0x120000) returned 1 [0067.081] GetProcessHeap () returned 0x120000 [0067.081] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1485a0 | out: hHeap=0x120000) returned 1 [0067.081] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xebf974, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xebf974*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0067.082] GetProcessHeap () returned 0x120000 [0067.082] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1485c8 | out: hHeap=0x120000) returned 1 [0067.082] GetProcessHeap () returned 0x120000 [0067.082] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x40) returned 0x132320 [0067.082] GetProcessHeap () returned 0x120000 [0067.082] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x3a) returned 0x1328c0 [0067.082] GetProcessHeap () returned 0x120000 [0067.082] RtlReAllocateHeap (Heap=0x120000, Flags=0x0, Ptr=0x1328c0, Size=0x72) returned 0x190d28 [0067.082] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x30c [0067.082] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x0) returned 0x102 [0067.082] CloseHandle (hObject=0x30c) returned 1 [0067.082] GetProcessHeap () returned 0x120000 [0067.082] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x132320 | out: hHeap=0x120000) returned 1 [0067.082] GetProcessHeap () returned 0x120000 [0067.082] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x190d28 | out: hHeap=0x120000) returned 1 [0067.082] Sleep (dwMilliseconds=0x3e8) [0068.224] GetProcessHeap () returned 0x120000 [0068.224] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x20) returned 0x148410 [0068.229] GetProcessHeap () returned 0x120000 [0068.229] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x1e) returned 0x1485a0 [0068.229] GetProcessHeap () returned 0x120000 [0068.229] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x1e) returned 0x148668 [0068.229] GetProcessHeap () returned 0x120000 [0068.229] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x90) returned 0x217220 [0068.229] GetProcessHeap () returned 0x120000 [0068.230] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x217220 | out: hHeap=0x120000) returned 1 [0068.230] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x1485a0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0068.230] GetProcessHeap () returned 0x120000 [0068.230] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x148668 | out: hHeap=0x120000) returned 1 [0068.231] GetProcessHeap () returned 0x120000 [0068.231] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x148410 | out: hHeap=0x120000) returned 1 [0068.231] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xebf974, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xebf974*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0068.260] GetProcessHeap () returned 0x120000 [0068.260] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1485a0 | out: hHeap=0x120000) returned 1 [0068.260] GetProcessHeap () returned 0x120000 [0068.260] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x40) returned 0x132320 [0068.260] GetProcessHeap () returned 0x120000 [0068.260] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x3a) returned 0x1327e8 [0068.260] GetProcessHeap () returned 0x120000 [0068.260] RtlReAllocateHeap (Heap=0x120000, Flags=0x0, Ptr=0x1327e8, Size=0x72) returned 0x1908a8 [0068.260] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x300 [0068.261] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0x0) returned 0x102 [0068.261] CloseHandle (hObject=0x300) returned 1 [0068.261] GetProcessHeap () returned 0x120000 [0068.261] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x132320 | out: hHeap=0x120000) returned 1 [0068.261] GetProcessHeap () returned 0x120000 [0068.261] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1908a8 | out: hHeap=0x120000) returned 1 [0068.261] Sleep (dwMilliseconds=0x3e8) [0069.375] GetProcessHeap () returned 0x120000 [0069.375] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x20) returned 0x148668 [0069.375] GetProcessHeap () returned 0x120000 [0069.375] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x1e) returned 0x1485a0 [0069.375] GetProcessHeap () returned 0x120000 [0069.375] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x1e) returned 0x1485c8 [0069.375] GetProcessHeap () returned 0x120000 [0069.375] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x90) returned 0x217188 [0069.375] GetProcessHeap () returned 0x120000 [0069.375] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x217188 | out: hHeap=0x120000) returned 1 [0069.375] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x1485a0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0069.375] GetProcessHeap () returned 0x120000 [0069.375] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1485c8 | out: hHeap=0x120000) returned 1 [0069.375] GetProcessHeap () returned 0x120000 [0069.375] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x148668 | out: hHeap=0x120000) returned 1 [0069.375] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xebf974, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xebf974*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0069.375] GetProcessHeap () returned 0x120000 [0069.375] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1485a0 | out: hHeap=0x120000) returned 1 [0069.375] GetProcessHeap () returned 0x120000 [0069.375] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x40) returned 0x1327e8 [0069.376] GetProcessHeap () returned 0x120000 [0069.376] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x3a) returned 0x1325a8 [0069.376] GetProcessHeap () returned 0x120000 [0069.376] RtlReAllocateHeap (Heap=0x120000, Flags=0x0, Ptr=0x1325a8, Size=0x72) returned 0x18fea8 [0069.376] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2e8 [0069.376] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x0) returned 0x102 [0069.376] CloseHandle (hObject=0x2e8) returned 1 [0069.376] GetProcessHeap () returned 0x120000 [0069.376] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1327e8 | out: hHeap=0x120000) returned 1 [0069.376] GetProcessHeap () returned 0x120000 [0069.376] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x18fea8 | out: hHeap=0x120000) returned 1 [0069.376] Sleep (dwMilliseconds=0x3e8) Thread: id = 19 os_tid = 0x4d8 [0045.172] GetProcessHeap () returned 0x120000 [0045.172] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x440) returned 0x14dab8 [0045.172] GetProcessHeap () returned 0x120000 [0045.172] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x434) returned 0x14df00 [0045.172] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2a4 [0045.181] Process32FirstW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0045.182] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6b, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0045.182] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0045.183] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0045.183] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0045.184] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0045.184] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0045.184] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0045.185] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0045.185] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0045.186] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0045.187] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0045.187] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0045.188] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0045.188] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x54, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0045.189] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0045.189] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0045.190] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0045.190] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0045.190] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0045.191] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0045.191] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0045.192] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0045.192] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0045.193] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0045.193] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0045.194] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0045.194] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0045.195] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0045.195] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0045.195] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0045.196] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0045.196] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3e, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0045.197] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0045.197] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0045.197] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0045.198] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0045.198] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0045.199] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0045.199] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="OfficeC2RClient.exe")) returned 1 [0045.200] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="OfficeC2RClient.exe")) returned 1 [0045.200] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0045.200] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0045.201] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0045.202] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0045.202] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0045.202] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0045.203] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0045.203] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="enteringreviewercustom.exe")) returned 1 [0045.204] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="files-anne.exe")) returned 1 [0045.204] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="sent-entertainment-noted.exe")) returned 1 [0045.205] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="advancement spies.exe")) returned 1 [0045.205] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="boulder_intelligence_gpl.exe")) returned 1 [0045.206] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="letters.exe")) returned 1 [0045.206] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="discount-talent.exe")) returned 1 [0045.222] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="pest_complicated_doc.exe")) returned 1 [0045.223] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="substance-necessity.exe")) returned 1 [0045.223] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="jeffrey.exe")) returned 1 [0045.223] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="logic-samuel-clubs.exe")) returned 1 [0045.224] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="gaps.exe")) returned 1 [0045.225] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="newspaper-jerry.exe")) returned 1 [0045.225] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="powerseller_protein_amendment.exe")) returned 1 [0045.226] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="daddy_conditional.exe")) returned 1 [0045.226] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="rely_speak_acres.exe")) returned 1 [0045.227] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="walk forced online.exe")) returned 1 [0045.228] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="trinity witch foam.exe")) returned 1 [0045.228] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="ep-garage.exe")) returned 1 [0045.229] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="treaty.exe")) returned 1 [0045.229] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xddc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="craftsnapshot.exe")) returned 1 [0045.230] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0045.230] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfb0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0045.231] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfa0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0045.232] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0045.232] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0045.233] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xd60, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0045.233] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd60, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0045.234] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x468, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xc70, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0045.234] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0045.235] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x390, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0045.235] Process32NextW (in: hSnapshot=0x2a4, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x390, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0 [0045.236] CloseHandle (hObject=0x2a4) returned 1 [0045.236] Sleep (dwMilliseconds=0x1f4) [0046.008] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x310 [0046.102] Process32FirstW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0046.103] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6b, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0046.103] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0046.104] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0046.104] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0046.104] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0046.105] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0046.105] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0046.106] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0046.106] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0046.107] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0046.107] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0046.108] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0046.108] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0046.109] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x54, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0046.109] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0046.109] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0046.110] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0046.110] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0046.111] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0046.111] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0046.112] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0046.112] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0046.113] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0046.113] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0046.114] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0046.114] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0046.114] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0046.115] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0046.115] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0046.116] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0046.116] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0046.117] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3d, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0046.117] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0046.118] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0046.118] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0046.118] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0046.119] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0046.119] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0046.120] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="OfficeC2RClient.exe")) returned 1 [0046.120] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0046.121] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0046.121] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0046.122] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0046.122] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0046.123] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0046.123] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0046.124] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="enteringreviewercustom.exe")) returned 1 [0046.124] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="files-anne.exe")) returned 1 [0046.125] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="sent-entertainment-noted.exe")) returned 1 [0046.125] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="advancement spies.exe")) returned 1 [0046.126] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="boulder_intelligence_gpl.exe")) returned 1 [0046.126] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="letters.exe")) returned 1 [0046.126] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="discount-talent.exe")) returned 1 [0046.127] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="pest_complicated_doc.exe")) returned 1 [0046.127] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="substance-necessity.exe")) returned 1 [0046.128] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="jeffrey.exe")) returned 1 [0046.128] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="logic-samuel-clubs.exe")) returned 1 [0046.129] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="gaps.exe")) returned 1 [0046.129] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="newspaper-jerry.exe")) returned 1 [0046.130] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="powerseller_protein_amendment.exe")) returned 1 [0046.131] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="daddy_conditional.exe")) returned 1 [0046.131] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="rely_speak_acres.exe")) returned 1 [0046.132] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="walk forced online.exe")) returned 1 [0046.400] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="trinity witch foam.exe")) returned 1 [0046.410] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="ep-garage.exe")) returned 1 [0046.416] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="treaty.exe")) returned 1 [0046.428] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xddc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="craftsnapshot.exe")) returned 1 [0046.442] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0046.442] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfb0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0046.443] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfa0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0046.443] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0046.444] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0046.445] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xd60, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0046.445] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd60, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0046.446] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x468, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xc70, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0046.446] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0046.447] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x390, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0046.447] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xc70, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0046.448] Process32NextW (in: hSnapshot=0x310, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xc70, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 0 [0046.448] CloseHandle (hObject=0x310) returned 1 [0046.448] Sleep (dwMilliseconds=0x1f4) [0047.378] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x314 [0047.397] Process32FirstW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0047.398] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6b, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0047.398] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0047.399] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0047.399] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0047.400] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0047.400] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0047.401] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0047.401] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0047.401] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0047.402] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0047.402] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0047.403] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0047.403] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0047.404] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x54, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0047.404] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0047.405] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0047.405] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0047.405] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0047.406] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0047.406] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0047.407] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0047.407] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0047.408] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0047.408] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0047.409] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0047.409] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0047.409] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0047.410] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0047.410] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0047.411] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0047.411] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0047.412] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3d, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0047.412] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0047.412] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0047.413] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0047.413] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0047.414] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0047.414] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0047.415] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="OfficeC2RClient.exe")) returned 1 [0047.415] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0047.416] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0047.416] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0047.416] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0047.417] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0047.417] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0047.418] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0047.418] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="enteringreviewercustom.exe")) returned 1 [0047.419] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="files-anne.exe")) returned 1 [0047.419] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="sent-entertainment-noted.exe")) returned 1 [0047.419] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="advancement spies.exe")) returned 1 [0047.420] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="boulder_intelligence_gpl.exe")) returned 1 [0047.421] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="letters.exe")) returned 1 [0047.421] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="discount-talent.exe")) returned 1 [0047.421] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="pest_complicated_doc.exe")) returned 1 [0047.422] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="substance-necessity.exe")) returned 1 [0048.035] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="jeffrey.exe")) returned 1 [0048.037] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="logic-samuel-clubs.exe")) returned 1 [0048.038] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="gaps.exe")) returned 1 [0048.050] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="newspaper-jerry.exe")) returned 1 [0048.051] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="powerseller_protein_amendment.exe")) returned 1 [0048.051] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="daddy_conditional.exe")) returned 1 [0048.052] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="rely_speak_acres.exe")) returned 1 [0048.052] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="walk forced online.exe")) returned 1 [0048.053] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="trinity witch foam.exe")) returned 1 [0048.054] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="ep-garage.exe")) returned 1 [0048.054] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="treaty.exe")) returned 1 [0048.055] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xddc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="craftsnapshot.exe")) returned 1 [0048.055] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0048.056] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfb0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0048.056] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfa0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0048.057] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0048.057] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0048.058] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xd60, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0048.059] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd60, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0048.059] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x468, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xc70, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0048.060] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0048.060] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x390, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0048.061] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xc70, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0048.061] Process32NextW (in: hSnapshot=0x314, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xc70, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 0 [0048.062] CloseHandle (hObject=0x314) returned 1 [0048.062] Sleep (dwMilliseconds=0x1f4) [0049.080] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x334 [0049.085] Process32FirstW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0049.085] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6b, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0049.086] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0049.086] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0049.086] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0049.087] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0049.087] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0049.088] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0049.088] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0049.089] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0049.089] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0049.089] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0049.090] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0049.090] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0049.091] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x54, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0049.091] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0049.092] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0049.092] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0049.092] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0049.093] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0049.094] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0049.094] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0049.095] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0049.095] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0049.095] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0049.096] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0049.096] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0049.097] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0049.097] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0049.098] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0049.098] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0049.098] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0049.099] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3d, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0049.099] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0049.100] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0049.100] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0049.101] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0049.101] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0049.101] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0049.102] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="OfficeC2RClient.exe")) returned 1 [0049.102] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0049.103] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0049.103] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0049.104] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0049.104] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0049.104] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0049.105] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0049.105] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="enteringreviewercustom.exe")) returned 1 [0049.106] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="files-anne.exe")) returned 1 [0049.106] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="sent-entertainment-noted.exe")) returned 1 [0049.106] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="advancement spies.exe")) returned 1 [0049.107] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="boulder_intelligence_gpl.exe")) returned 1 [0049.107] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="letters.exe")) returned 1 [0049.108] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="discount-talent.exe")) returned 1 [0049.108] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="pest_complicated_doc.exe")) returned 1 [0049.109] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="substance-necessity.exe")) returned 1 [0049.109] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="jeffrey.exe")) returned 1 [0049.110] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="logic-samuel-clubs.exe")) returned 1 [0049.110] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="gaps.exe")) returned 1 [0049.111] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="newspaper-jerry.exe")) returned 1 [0049.111] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="powerseller_protein_amendment.exe")) returned 1 [0049.112] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="daddy_conditional.exe")) returned 1 [0049.113] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="rely_speak_acres.exe")) returned 1 [0049.113] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="walk forced online.exe")) returned 1 [0049.114] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="trinity witch foam.exe")) returned 1 [0049.114] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="ep-garage.exe")) returned 1 [0049.115] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="treaty.exe")) returned 1 [0049.115] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xddc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="craftsnapshot.exe")) returned 1 [0049.116] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0049.116] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfb0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0049.946] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfa0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0049.947] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0049.948] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0049.948] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xd60, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0049.949] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd60, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0049.949] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x468, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xc70, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0049.950] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0049.950] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x390, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0049.951] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xc70, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0049.951] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xc70, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 0 [0049.952] CloseHandle (hObject=0x334) returned 1 [0049.952] Sleep (dwMilliseconds=0x1f4) [0051.545] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x32c [0051.553] Process32FirstW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0051.554] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0051.554] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0051.555] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0051.555] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0051.556] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0051.556] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0051.556] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0051.557] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0051.557] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0051.558] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0051.558] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0051.559] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0051.559] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0051.559] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x51, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0051.560] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0051.560] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0051.561] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0051.561] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0051.563] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0051.563] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0051.564] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0051.564] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0051.564] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0051.565] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0051.565] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0051.566] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0051.566] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0051.567] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0051.567] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0051.568] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0051.568] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0051.568] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3d, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0051.569] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0051.569] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0051.570] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0051.570] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0051.570] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0051.571] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0051.571] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="OfficeC2RClient.exe")) returned 1 [0051.572] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0051.572] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0051.573] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0051.573] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0051.573] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0051.574] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0051.574] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0051.575] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="enteringreviewercustom.exe")) returned 1 [0051.575] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="files-anne.exe")) returned 1 [0051.576] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="sent-entertainment-noted.exe")) returned 1 [0051.576] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="advancement spies.exe")) returned 1 [0051.576] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="boulder_intelligence_gpl.exe")) returned 1 [0051.577] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="letters.exe")) returned 1 [0051.578] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="discount-talent.exe")) returned 1 [0051.578] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="pest_complicated_doc.exe")) returned 1 [0051.578] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="substance-necessity.exe")) returned 1 [0051.833] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="jeffrey.exe")) returned 1 [0051.845] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="logic-samuel-clubs.exe")) returned 1 [0051.854] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="gaps.exe")) returned 1 [0051.854] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="newspaper-jerry.exe")) returned 1 [0051.855] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="powerseller_protein_amendment.exe")) returned 1 [0051.855] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="daddy_conditional.exe")) returned 1 [0051.856] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="rely_speak_acres.exe")) returned 1 [0051.856] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="walk forced online.exe")) returned 1 [0051.857] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="trinity witch foam.exe")) returned 1 [0051.858] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="ep-garage.exe")) returned 1 [0051.858] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="treaty.exe")) returned 1 [0051.859] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xddc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="craftsnapshot.exe")) returned 1 [0051.859] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0051.860] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfb0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0051.861] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfa0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0051.861] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0051.862] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0051.862] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xd60, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0051.863] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd60, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0051.863] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x468, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xc70, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0051.864] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0051.864] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x390, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0051.865] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xc70, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0051.865] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xc70, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 0 [0051.866] CloseHandle (hObject=0x32c) returned 1 [0051.866] Sleep (dwMilliseconds=0x1f4) [0052.749] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x32c [0052.754] Process32FirstW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0052.754] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0052.755] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0052.755] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0052.756] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0052.756] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0052.757] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0052.757] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0052.758] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0052.758] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0052.759] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0052.759] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0052.760] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0052.760] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0052.761] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x51, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0052.761] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0052.761] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0052.762] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0052.762] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0052.763] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0052.763] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0052.764] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0052.764] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0052.766] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0052.766] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0052.767] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0052.767] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0052.768] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0052.768] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0052.769] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0052.769] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0052.770] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0052.770] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3c, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0052.771] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0052.771] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0052.772] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0052.772] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0052.773] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0052.773] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0052.774] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="OfficeC2RClient.exe")) returned 1 [0052.774] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0052.775] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0052.775] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0052.775] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0052.776] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0052.776] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0052.777] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0052.777] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="enteringreviewercustom.exe")) returned 1 [0052.778] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="files-anne.exe")) returned 1 [0052.778] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="sent-entertainment-noted.exe")) returned 1 [0052.779] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="advancement spies.exe")) returned 1 [0052.779] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="boulder_intelligence_gpl.exe")) returned 1 [0052.780] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="letters.exe")) returned 1 [0052.780] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="discount-talent.exe")) returned 1 [0052.781] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="pest_complicated_doc.exe")) returned 1 [0052.781] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="substance-necessity.exe")) returned 1 [0052.782] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="jeffrey.exe")) returned 1 [0052.782] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="logic-samuel-clubs.exe")) returned 1 [0052.783] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="gaps.exe")) returned 1 [0052.783] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="newspaper-jerry.exe")) returned 1 [0052.784] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="powerseller_protein_amendment.exe")) returned 1 [0052.785] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="daddy_conditional.exe")) returned 1 [0052.785] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="rely_speak_acres.exe")) returned 1 [0052.786] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="walk forced online.exe")) returned 1 [0052.787] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="trinity witch foam.exe")) returned 1 [0052.787] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="ep-garage.exe")) returned 1 [0052.788] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="treaty.exe")) returned 1 [0052.788] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xddc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="craftsnapshot.exe")) returned 1 [0052.789] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0052.790] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfb0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0052.790] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfa0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0052.791] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0052.791] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0052.792] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xd60, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0052.792] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd60, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0052.793] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x468, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xc70, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0052.793] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0052.794] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x390, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0052.794] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xc70, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0052.795] Process32NextW (in: hSnapshot=0x32c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xc70, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 0 [0052.795] CloseHandle (hObject=0x32c) returned 1 [0052.796] Sleep (dwMilliseconds=0x1f4) [0053.408] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x320 [0053.452] Process32FirstW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0053.453] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0053.454] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0053.454] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0053.454] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0053.455] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0053.455] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0053.456] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0053.456] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0053.457] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.457] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0053.458] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0053.458] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.459] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0053.459] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x51, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.460] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.460] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.461] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.461] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.462] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.462] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.463] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.463] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.464] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0053.464] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.465] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.465] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0053.466] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0053.466] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.467] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0053.467] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0053.468] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0053.468] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3c, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0053.469] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0053.469] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0053.470] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0053.470] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0053.471] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0053.471] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0053.472] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="OfficeC2RClient.exe")) returned 1 [0053.472] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0053.473] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0053.473] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0053.474] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0053.474] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0053.475] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0053.475] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0053.475] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="enteringreviewercustom.exe")) returned 1 [0053.476] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="files-anne.exe")) returned 1 [0053.476] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="sent-entertainment-noted.exe")) returned 1 [0053.477] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="advancement spies.exe")) returned 1 [0053.477] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="boulder_intelligence_gpl.exe")) returned 1 [0053.478] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="letters.exe")) returned 1 [0053.478] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="discount-talent.exe")) returned 1 [0053.479] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="pest_complicated_doc.exe")) returned 1 [0053.479] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="substance-necessity.exe")) returned 1 [0053.480] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="jeffrey.exe")) returned 1 [0053.480] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="logic-samuel-clubs.exe")) returned 1 [0053.481] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="gaps.exe")) returned 1 [0053.481] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="newspaper-jerry.exe")) returned 1 [0053.482] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="powerseller_protein_amendment.exe")) returned 1 [0053.483] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="daddy_conditional.exe")) returned 1 [0053.483] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="rely_speak_acres.exe")) returned 1 [0054.092] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="walk forced online.exe")) returned 1 [0054.093] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="trinity witch foam.exe")) returned 1 [0054.094] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="ep-garage.exe")) returned 1 [0054.094] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="treaty.exe")) returned 1 [0054.095] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xddc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="craftsnapshot.exe")) returned 1 [0054.096] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0054.096] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfb0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0054.097] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfa0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0054.097] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.098] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0054.099] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xd60, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0054.099] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd60, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0054.100] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x468, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xc70, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0054.100] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0054.101] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x390, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0054.101] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xc70, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0054.102] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xc70, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 0 [0054.102] CloseHandle (hObject=0x320) returned 1 [0054.103] Sleep (dwMilliseconds=0x1f4) [0054.755] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x320 [0055.027] Process32FirstW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0055.028] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0055.028] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0055.029] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0055.029] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0055.030] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0055.031] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0055.031] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0055.032] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0055.032] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.033] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0055.034] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0055.034] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.035] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0055.036] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x51, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.036] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.037] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.037] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.038] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.038] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.039] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.040] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.040] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.041] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0055.041] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.042] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.043] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0055.044] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0055.044] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.045] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0055.046] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0055.046] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0055.047] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3b, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0055.047] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0055.048] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0055.048] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0055.049] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0055.049] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0055.050] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0055.050] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0055.051] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0055.051] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0055.052] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0055.052] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0055.053] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0055.053] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0055.054] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="enteringreviewercustom.exe")) returned 1 [0055.054] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="files-anne.exe")) returned 1 [0055.055] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="sent-entertainment-noted.exe")) returned 1 [0055.055] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="advancement spies.exe")) returned 1 [0055.056] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="boulder_intelligence_gpl.exe")) returned 1 [0055.056] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="letters.exe")) returned 1 [0055.057] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="discount-talent.exe")) returned 1 [0055.057] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="pest_complicated_doc.exe")) returned 1 [0055.058] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="substance-necessity.exe")) returned 1 [0055.058] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="jeffrey.exe")) returned 1 [0055.059] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="logic-samuel-clubs.exe")) returned 1 [0055.059] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="gaps.exe")) returned 1 [0055.059] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="newspaper-jerry.exe")) returned 1 [0055.060] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="powerseller_protein_amendment.exe")) returned 1 [0055.061] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="daddy_conditional.exe")) returned 1 [0055.061] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="rely_speak_acres.exe")) returned 1 [0055.062] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="walk forced online.exe")) returned 1 [0055.062] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="trinity witch foam.exe")) returned 1 [0055.063] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="ep-garage.exe")) returned 1 [0055.064] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="treaty.exe")) returned 1 [0055.064] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xddc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="craftsnapshot.exe")) returned 1 [0055.065] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0055.065] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfb0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0055.066] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfa0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0055.066] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.067] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0055.067] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xd60, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0055.068] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd60, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0055.068] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x468, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xc70, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0055.069] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0055.069] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x390, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0055.070] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xc70, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0055.070] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.071] Process32NextW (in: hSnapshot=0x320, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0055.071] CloseHandle (hObject=0x320) returned 1 [0055.071] Sleep (dwMilliseconds=0x1f4) [0055.908] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x334 [0055.912] Process32FirstW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0055.913] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0055.913] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0055.914] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0055.914] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0055.915] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0055.915] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0055.916] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0055.916] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0055.916] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.917] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0055.917] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0055.918] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.918] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0055.919] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x51, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.919] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.920] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.920] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.921] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.921] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.921] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.922] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.922] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.923] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0055.923] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.924] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.924] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0055.925] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0055.925] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.926] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0055.926] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0055.927] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0055.927] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3b, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0055.927] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0055.928] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0055.928] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0055.929] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0055.929] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0055.930] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0055.930] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0055.931] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0055.931] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0055.932] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0055.932] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0055.933] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0055.933] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0055.933] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="enteringreviewercustom.exe")) returned 1 [0055.934] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="files-anne.exe")) returned 1 [0055.934] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="sent-entertainment-noted.exe")) returned 1 [0055.935] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="advancement spies.exe")) returned 1 [0055.935] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="boulder_intelligence_gpl.exe")) returned 1 [0055.936] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="letters.exe")) returned 1 [0055.936] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="discount-talent.exe")) returned 1 [0055.937] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="pest_complicated_doc.exe")) returned 1 [0055.937] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="substance-necessity.exe")) returned 1 [0055.938] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="jeffrey.exe")) returned 1 [0055.938] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="logic-samuel-clubs.exe")) returned 1 [0055.939] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="gaps.exe")) returned 1 [0055.939] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="newspaper-jerry.exe")) returned 1 [0055.940] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="powerseller_protein_amendment.exe")) returned 1 [0055.940] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="daddy_conditional.exe")) returned 1 [0055.941] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="rely_speak_acres.exe")) returned 1 [0055.941] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="walk forced online.exe")) returned 1 [0055.942] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="trinity witch foam.exe")) returned 1 [0055.943] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="ep-garage.exe")) returned 1 [0055.943] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="treaty.exe")) returned 1 [0055.944] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xddc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="craftsnapshot.exe")) returned 1 [0055.944] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0055.945] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfb0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0056.455] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfa0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0056.456] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0056.456] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0056.457] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xd60, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0056.457] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd60, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0056.458] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x468, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xc70, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0056.458] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0056.459] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x390, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0056.459] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xc70, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0056.460] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0056.460] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0056.461] CloseHandle (hObject=0x334) returned 1 [0056.461] Sleep (dwMilliseconds=0x1f4) [0057.503] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x334 [0057.525] Process32FirstW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0057.525] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0057.526] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0057.526] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0057.527] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0057.527] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0057.527] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0057.528] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0057.528] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0057.529] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0057.529] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0057.530] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0057.530] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0057.531] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0057.531] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x51, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0057.532] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0057.532] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0057.532] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0057.533] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0057.533] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0057.534] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0057.534] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0057.535] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0057.535] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0057.535] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0057.536] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0057.536] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0057.537] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0057.537] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0057.538] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0057.538] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0057.539] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0057.539] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3b, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0057.540] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0057.540] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0057.541] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0057.541] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0057.541] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0057.542] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0057.542] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0057.543] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0057.543] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0057.544] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0057.544] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0057.544] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0057.545] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0057.545] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="enteringreviewercustom.exe")) returned 1 [0057.546] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="files-anne.exe")) returned 1 [0057.546] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="sent-entertainment-noted.exe")) returned 1 [0057.547] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="advancement spies.exe")) returned 1 [0057.547] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="boulder_intelligence_gpl.exe")) returned 1 [0057.547] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="letters.exe")) returned 1 [0057.548] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="discount-talent.exe")) returned 1 [0057.548] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="pest_complicated_doc.exe")) returned 1 [0057.549] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="substance-necessity.exe")) returned 1 [0057.549] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="jeffrey.exe")) returned 1 [0057.550] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="logic-samuel-clubs.exe")) returned 1 [0057.550] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="gaps.exe")) returned 1 [0057.550] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="newspaper-jerry.exe")) returned 1 [0057.551] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="powerseller_protein_amendment.exe")) returned 1 [0057.552] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="daddy_conditional.exe")) returned 1 [0057.552] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="rely_speak_acres.exe")) returned 1 [0057.553] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="walk forced online.exe")) returned 1 [0057.553] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="trinity witch foam.exe")) returned 1 [0057.554] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="ep-garage.exe")) returned 1 [0057.554] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="treaty.exe")) returned 1 [0057.910] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xddc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="craftsnapshot.exe")) returned 1 [0057.936] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0057.937] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfb0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0057.938] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfa0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0057.938] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0057.939] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0057.939] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xd60, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0057.940] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd60, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0057.940] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x468, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xc70, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0057.941] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0057.941] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x390, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0057.942] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xc70, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0057.942] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0057.943] Process32NextW (in: hSnapshot=0x334, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0057.943] CloseHandle (hObject=0x334) returned 1 [0057.943] Sleep (dwMilliseconds=0x1f4) [0058.900] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x338 [0058.924] Process32FirstW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0058.924] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0058.924] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0058.925] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0058.925] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0058.926] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0058.926] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0058.927] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0058.927] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0058.928] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0058.928] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0058.928] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0058.929] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0058.929] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0058.931] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x51, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0058.931] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0058.931] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0058.932] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0058.932] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0058.933] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0058.933] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0058.934] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0058.934] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0058.935] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0058.935] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0058.936] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0058.936] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0058.936] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0058.937] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0058.937] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0058.938] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0058.938] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0058.939] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3b, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0058.939] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0058.939] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0058.940] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0058.940] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0058.941] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0058.941] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0058.942] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0058.942] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0058.942] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0058.943] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0058.943] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0058.944] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0058.944] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0058.945] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="enteringreviewercustom.exe")) returned 1 [0058.945] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="files-anne.exe")) returned 1 [0058.946] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="sent-entertainment-noted.exe")) returned 1 [0058.946] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="advancement spies.exe")) returned 1 [0058.946] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="boulder_intelligence_gpl.exe")) returned 1 [0058.947] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="letters.exe")) returned 1 [0058.947] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="discount-talent.exe")) returned 1 [0058.948] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="pest_complicated_doc.exe")) returned 1 [0058.948] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="substance-necessity.exe")) returned 1 [0058.949] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="jeffrey.exe")) returned 1 [0058.949] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="logic-samuel-clubs.exe")) returned 1 [0058.950] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="gaps.exe")) returned 1 [0058.950] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="newspaper-jerry.exe")) returned 1 [0058.950] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="powerseller_protein_amendment.exe")) returned 1 [0058.951] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="daddy_conditional.exe")) returned 1 [0058.952] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="rely_speak_acres.exe")) returned 1 [0059.434] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="walk forced online.exe")) returned 1 [0059.434] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="trinity witch foam.exe")) returned 1 [0059.435] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="ep-garage.exe")) returned 1 [0059.435] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="treaty.exe")) returned 1 [0059.436] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xddc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="craftsnapshot.exe")) returned 1 [0059.437] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0059.441] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfb0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0059.441] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfa0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0059.442] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.442] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0059.443] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xd60, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0059.443] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd60, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0059.444] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x468, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xc70, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0059.445] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0059.445] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x390, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0059.446] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xc70, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0059.447] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.447] Process32NextW (in: hSnapshot=0x338, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0059.448] CloseHandle (hObject=0x338) returned 1 [0059.448] Sleep (dwMilliseconds=0x1f4) [0060.643] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x304 [0060.651] Process32FirstW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0060.651] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0060.652] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0060.652] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0060.653] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0060.653] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0060.654] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0060.654] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0060.654] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0060.655] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0060.655] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0060.656] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0060.656] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0060.657] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0060.657] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x51, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0060.658] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0060.658] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0060.658] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0060.659] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0060.659] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0060.660] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0060.660] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0060.661] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0060.661] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0060.661] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0060.662] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0060.662] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0060.663] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0060.663] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0060.664] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0060.664] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0060.668] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0060.669] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x42, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0060.669] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0060.670] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0060.670] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0060.670] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0060.671] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0060.671] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0060.672] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0060.672] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0060.673] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0060.673] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0060.673] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0060.674] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0060.674] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0060.675] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="enteringreviewercustom.exe")) returned 1 [0060.675] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="files-anne.exe")) returned 1 [0060.676] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="sent-entertainment-noted.exe")) returned 1 [0060.676] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="advancement spies.exe")) returned 1 [0060.677] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="boulder_intelligence_gpl.exe")) returned 1 [0060.677] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="letters.exe")) returned 1 [0060.677] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="discount-talent.exe")) returned 1 [0060.678] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="pest_complicated_doc.exe")) returned 1 [0060.678] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="substance-necessity.exe")) returned 1 [0060.679] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="jeffrey.exe")) returned 1 [0060.679] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="logic-samuel-clubs.exe")) returned 1 [0060.687] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="gaps.exe")) returned 1 [0060.688] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="newspaper-jerry.exe")) returned 1 [0060.688] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="powerseller_protein_amendment.exe")) returned 1 [0060.689] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="daddy_conditional.exe")) returned 1 [0060.689] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="rely_speak_acres.exe")) returned 1 [0060.690] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="walk forced online.exe")) returned 1 [0060.690] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="trinity witch foam.exe")) returned 1 [0060.691] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="ep-garage.exe")) returned 1 [0060.963] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="treaty.exe")) returned 1 [0060.973] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xddc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="craftsnapshot.exe")) returned 1 [0060.973] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0060.974] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfb0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0060.975] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfa0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0060.975] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0060.976] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0060.976] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xd60, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0060.977] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd60, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0060.978] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x468, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xc70, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0060.978] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0060.979] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x390, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0060.979] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xc70, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0060.980] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0060.980] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0060.980] CloseHandle (hObject=0x304) returned 1 [0060.981] Sleep (dwMilliseconds=0x1f4) [0062.088] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x304 [0062.094] Process32FirstW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0062.094] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0062.095] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0062.095] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0062.096] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0062.096] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0062.097] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0062.097] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0062.098] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0062.098] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0062.099] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0062.099] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0062.099] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0062.100] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0062.100] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x51, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0062.101] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0062.101] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0062.102] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0062.102] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0062.103] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0062.103] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0062.104] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0062.104] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0062.104] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0062.105] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0062.106] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0062.106] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0062.106] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0062.107] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0062.107] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0062.108] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0062.108] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0062.108] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x41, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0062.109] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0062.109] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0062.110] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0062.110] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0062.111] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0062.111] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0062.111] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0062.112] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0062.112] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0062.113] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0062.113] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0062.114] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0062.114] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0062.114] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="enteringreviewercustom.exe")) returned 1 [0062.115] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="files-anne.exe")) returned 1 [0062.115] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="sent-entertainment-noted.exe")) returned 1 [0062.116] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="advancement spies.exe")) returned 1 [0062.116] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="boulder_intelligence_gpl.exe")) returned 1 [0062.116] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="letters.exe")) returned 1 [0062.117] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="discount-talent.exe")) returned 1 [0062.118] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="pest_complicated_doc.exe")) returned 1 [0062.118] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="substance-necessity.exe")) returned 1 [0062.118] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="jeffrey.exe")) returned 1 [0062.119] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="logic-samuel-clubs.exe")) returned 1 [0062.119] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="gaps.exe")) returned 1 [0062.120] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="newspaper-jerry.exe")) returned 1 [0062.120] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="powerseller_protein_amendment.exe")) returned 1 [0062.121] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="daddy_conditional.exe")) returned 1 [0062.311] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="rely_speak_acres.exe")) returned 1 [0062.324] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="walk forced online.exe")) returned 1 [0062.334] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="trinity witch foam.exe")) returned 1 [0062.346] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="ep-garage.exe")) returned 1 [0062.347] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="treaty.exe")) returned 1 [0062.347] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xddc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="craftsnapshot.exe")) returned 1 [0062.348] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0062.349] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfb0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0062.349] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfa0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0062.350] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0062.350] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0062.351] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xd60, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0062.351] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd60, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0062.352] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x468, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xc70, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0062.353] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0062.353] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x390, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0062.354] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xc70, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0062.354] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0062.355] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 1 [0062.355] Process32NextW (in: hSnapshot=0x304, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 0 [0062.356] CloseHandle (hObject=0x304) returned 1 [0062.356] Sleep (dwMilliseconds=0x1f4) [0063.000] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x330 [0063.005] Process32FirstW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0063.005] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0063.006] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0063.006] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0063.007] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0063.007] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0063.007] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0063.009] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0063.010] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0063.010] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0063.010] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0063.011] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0063.011] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0063.012] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0063.012] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x51, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0063.012] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0063.013] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0063.013] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0063.014] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0063.014] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0063.015] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0063.015] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0063.015] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0063.016] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0063.016] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0063.017] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0063.017] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0063.018] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0063.018] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0063.018] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0063.019] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0063.019] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0063.020] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x41, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0063.020] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0063.020] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0063.021] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0063.021] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0063.022] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0063.022] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0063.023] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0063.023] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0063.024] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0063.024] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0063.025] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0063.025] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0063.026] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0063.026] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="enteringreviewercustom.exe")) returned 1 [0063.027] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="files-anne.exe")) returned 1 [0063.027] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="sent-entertainment-noted.exe")) returned 1 [0063.027] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="advancement spies.exe")) returned 1 [0063.028] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="boulder_intelligence_gpl.exe")) returned 1 [0063.028] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="letters.exe")) returned 1 [0063.029] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="discount-talent.exe")) returned 1 [0063.029] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="pest_complicated_doc.exe")) returned 1 [0063.030] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="substance-necessity.exe")) returned 1 [0063.030] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="jeffrey.exe")) returned 1 [0063.030] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="logic-samuel-clubs.exe")) returned 1 [0063.031] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="gaps.exe")) returned 1 [0063.031] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="newspaper-jerry.exe")) returned 1 [0063.032] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="powerseller_protein_amendment.exe")) returned 1 [0063.032] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="daddy_conditional.exe")) returned 1 [0063.033] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="rely_speak_acres.exe")) returned 1 [0063.336] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="walk forced online.exe")) returned 1 [0063.354] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="trinity witch foam.exe")) returned 1 [0063.355] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="ep-garage.exe")) returned 1 [0063.356] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="treaty.exe")) returned 1 [0063.356] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xddc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="craftsnapshot.exe")) returned 1 [0063.357] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0063.357] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfb0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0063.358] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfa0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0063.359] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0063.359] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0063.360] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xd60, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0063.360] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd60, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0063.361] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x468, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xc70, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0063.361] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0063.362] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x390, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0063.362] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xc70, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0063.363] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0063.363] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 1 [0063.364] Process32NextW (in: hSnapshot=0x330, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 0 [0063.364] CloseHandle (hObject=0x330) returned 1 [0063.364] Sleep (dwMilliseconds=0x1f4) [0064.271] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x30c [0064.276] Process32FirstW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0064.276] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0064.277] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0064.277] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0064.277] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0064.278] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0064.279] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0064.279] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0064.280] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0064.280] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0064.280] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0064.281] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0064.281] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0064.282] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0064.285] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x58, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0064.286] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0064.286] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0064.287] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0064.287] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0064.288] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0064.288] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0064.288] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0064.289] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0064.290] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0064.290] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0064.290] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0064.291] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0064.292] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0064.292] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0064.292] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0064.293] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0064.293] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0064.294] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x41, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0064.294] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0064.295] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0064.295] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0064.296] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0064.296] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0064.297] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0064.297] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0064.298] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0064.298] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0064.299] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0064.299] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0064.300] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0064.300] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0064.301] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="enteringreviewercustom.exe")) returned 1 [0064.301] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="files-anne.exe")) returned 1 [0064.301] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="sent-entertainment-noted.exe")) returned 1 [0064.302] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="advancement spies.exe")) returned 1 [0064.302] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="boulder_intelligence_gpl.exe")) returned 1 [0064.303] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="letters.exe")) returned 1 [0064.303] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="discount-talent.exe")) returned 1 [0064.304] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="pest_complicated_doc.exe")) returned 1 [0064.304] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="substance-necessity.exe")) returned 1 [0064.305] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="jeffrey.exe")) returned 1 [0064.305] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="logic-samuel-clubs.exe")) returned 1 [0064.306] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="gaps.exe")) returned 1 [0064.306] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="newspaper-jerry.exe")) returned 1 [0064.397] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="powerseller_protein_amendment.exe")) returned 1 [0064.402] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="daddy_conditional.exe")) returned 1 [0064.614] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="rely_speak_acres.exe")) returned 1 [0064.614] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="walk forced online.exe")) returned 1 [0064.615] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="trinity witch foam.exe")) returned 1 [0064.616] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="ep-garage.exe")) returned 1 [0064.616] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="treaty.exe")) returned 1 [0064.617] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xddc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="craftsnapshot.exe")) returned 1 [0064.617] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0064.618] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfb0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0064.619] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfa0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0064.619] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0064.620] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0064.620] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xd60, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0064.621] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd60, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0064.622] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x468, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xc70, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0064.622] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0064.623] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x390, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0064.623] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xc70, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0064.624] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0064.624] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 1 [0064.625] Process32NextW (in: hSnapshot=0x30c, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 0 [0064.625] CloseHandle (hObject=0x30c) returned 1 [0064.625] Sleep (dwMilliseconds=0x1f4) [0065.206] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x234 [0065.211] Process32FirstW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0065.211] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0065.212] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0065.212] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0065.213] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0065.213] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0065.214] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0065.214] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0065.215] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0065.215] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0065.216] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0065.216] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0065.217] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0065.217] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0065.218] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x58, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0065.218] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0065.219] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0065.219] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0065.220] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0065.220] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0065.220] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0065.221] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0065.221] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0065.222] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0065.222] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0065.223] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0065.223] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0065.224] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0065.224] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0065.225] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0065.225] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0065.226] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0065.226] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x41, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0065.226] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0065.227] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0065.227] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0065.228] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0065.228] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0065.257] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0065.258] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0065.258] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0065.259] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0065.259] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0065.260] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0065.260] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0065.261] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0065.261] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="enteringreviewercustom.exe")) returned 1 [0065.261] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="files-anne.exe")) returned 1 [0065.262] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="sent-entertainment-noted.exe")) returned 1 [0065.262] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="advancement spies.exe")) returned 1 [0065.263] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="boulder_intelligence_gpl.exe")) returned 1 [0065.263] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="letters.exe")) returned 1 [0065.264] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="discount-talent.exe")) returned 1 [0065.264] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="pest_complicated_doc.exe")) returned 1 [0065.265] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="substance-necessity.exe")) returned 1 [0065.265] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="jeffrey.exe")) returned 1 [0065.266] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="logic-samuel-clubs.exe")) returned 1 [0065.594] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="gaps.exe")) returned 1 [0065.595] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="newspaper-jerry.exe")) returned 1 [0065.595] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="powerseller_protein_amendment.exe")) returned 1 [0065.596] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="daddy_conditional.exe")) returned 1 [0065.596] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="rely_speak_acres.exe")) returned 1 [0065.597] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="walk forced online.exe")) returned 1 [0065.598] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="trinity witch foam.exe")) returned 1 [0065.598] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="ep-garage.exe")) returned 1 [0065.599] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="treaty.exe")) returned 1 [0065.600] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xddc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="craftsnapshot.exe")) returned 1 [0065.600] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0065.601] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfb0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0065.601] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfa0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0065.602] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0065.602] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0065.603] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xd60, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0065.603] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd60, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0065.604] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x468, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xc70, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0065.605] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0065.605] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x390, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0065.606] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xc70, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0065.606] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0065.607] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 1 [0065.607] Process32NextW (in: hSnapshot=0x234, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 0 [0065.608] CloseHandle (hObject=0x234) returned 1 [0065.608] Sleep (dwMilliseconds=0x1f4) [0066.396] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x250 [0066.491] Process32FirstW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0066.492] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0066.492] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0066.493] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0066.493] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0066.494] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0066.494] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0066.495] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0066.495] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0066.496] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0066.496] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0066.496] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0066.497] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0066.497] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0066.498] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x58, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0066.498] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0066.499] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0066.499] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0066.500] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0066.500] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0066.501] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0066.501] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0066.502] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0066.502] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0066.502] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0066.503] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0066.503] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0066.504] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0066.504] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0066.505] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0066.505] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0066.506] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0066.506] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x41, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0066.507] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0066.507] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0066.508] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0066.508] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0066.508] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0066.509] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0066.509] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0066.510] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0066.510] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0066.511] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0066.511] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0066.512] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0066.512] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0066.513] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="enteringreviewercustom.exe")) returned 1 [0066.513] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="files-anne.exe")) returned 1 [0066.514] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="sent-entertainment-noted.exe")) returned 1 [0066.514] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="advancement spies.exe")) returned 1 [0066.515] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="boulder_intelligence_gpl.exe")) returned 1 [0066.515] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="letters.exe")) returned 1 [0066.516] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="discount-talent.exe")) returned 1 [0066.516] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="pest_complicated_doc.exe")) returned 1 [0066.517] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="substance-necessity.exe")) returned 1 [0066.517] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="jeffrey.exe")) returned 1 [0066.517] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="logic-samuel-clubs.exe")) returned 1 [0066.518] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="gaps.exe")) returned 1 [0066.518] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="newspaper-jerry.exe")) returned 1 [0066.519] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="powerseller_protein_amendment.exe")) returned 1 [0066.520] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="daddy_conditional.exe")) returned 1 [0066.520] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="rely_speak_acres.exe")) returned 1 [0066.521] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="walk forced online.exe")) returned 1 [0066.521] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="trinity witch foam.exe")) returned 1 [0066.522] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="ep-garage.exe")) returned 1 [0066.523] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="treaty.exe")) returned 1 [0066.523] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xddc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="craftsnapshot.exe")) returned 1 [0066.524] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0066.524] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfb0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0066.525] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfa0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0066.525] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0066.526] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0066.527] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xd60, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0066.527] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd60, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0066.528] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x468, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xc70, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0066.528] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0066.529] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x390, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0066.529] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xc70, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0066.530] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0066.702] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 1 [0066.703] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 0 [0066.703] CloseHandle (hObject=0x250) returned 1 [0066.703] Sleep (dwMilliseconds=0x1f4) [0067.309] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x250 [0067.319] Process32FirstW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0067.319] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0067.320] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0067.320] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0067.321] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0067.321] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0067.322] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0067.322] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0067.323] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0067.323] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0067.323] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0067.324] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0067.324] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0067.325] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0067.325] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x58, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0067.326] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0067.326] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0067.327] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0067.328] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0067.329] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0067.329] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0067.330] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0067.330] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0067.331] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0067.331] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0067.331] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0067.332] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0067.332] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0067.333] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0067.333] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0067.334] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0067.334] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0067.335] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x41, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0067.335] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0067.335] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0067.336] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0067.336] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0067.337] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0067.337] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0067.338] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0067.338] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0067.339] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0067.339] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0067.340] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0067.340] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0067.341] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0067.341] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="enteringreviewercustom.exe")) returned 1 [0067.341] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="files-anne.exe")) returned 1 [0067.342] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="sent-entertainment-noted.exe")) returned 1 [0067.342] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="advancement spies.exe")) returned 1 [0067.343] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="boulder_intelligence_gpl.exe")) returned 1 [0067.343] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="letters.exe")) returned 1 [0067.344] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="discount-talent.exe")) returned 1 [0067.344] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="pest_complicated_doc.exe")) returned 1 [0067.345] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="substance-necessity.exe")) returned 1 [0067.345] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="jeffrey.exe")) returned 1 [0067.346] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="logic-samuel-clubs.exe")) returned 1 [0067.346] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="gaps.exe")) returned 1 [0067.347] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="newspaper-jerry.exe")) returned 1 [0067.347] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="powerseller_protein_amendment.exe")) returned 1 [0067.348] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="daddy_conditional.exe")) returned 1 [0067.348] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="rely_speak_acres.exe")) returned 1 [0067.349] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="walk forced online.exe")) returned 1 [0067.350] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="trinity witch foam.exe")) returned 1 [0067.350] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="ep-garage.exe")) returned 1 [0067.351] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="treaty.exe")) returned 1 [0067.351] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xddc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="craftsnapshot.exe")) returned 1 [0067.352] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0067.353] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfb0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0067.353] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfa0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0067.354] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0067.354] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0067.355] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0xd60, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0067.355] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd60, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0067.356] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x468, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xc70, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0067.356] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0067.357] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x390, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0067.357] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xc70, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0067.358] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0067.538] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 1 [0067.559] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 0 [0067.559] CloseHandle (hObject=0x250) returned 1 [0067.559] Sleep (dwMilliseconds=0x1f4) [0068.135] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2e8 [0068.143] Process32FirstW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0068.144] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0068.144] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0068.145] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0068.145] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0068.146] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0068.146] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0068.146] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0068.147] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0068.147] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0068.148] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0068.148] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0068.149] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0068.149] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0068.149] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x57, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0068.150] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0068.150] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0068.151] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0068.151] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0068.152] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0068.152] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0068.152] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0068.153] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0068.153] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0068.154] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0068.154] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0068.155] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0068.155] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0068.156] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0068.157] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0068.159] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0068.159] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0068.160] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x41, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0068.160] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0068.161] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0068.161] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0068.162] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0068.162] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0068.163] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0068.163] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0068.164] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0068.164] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0068.165] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0068.165] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0068.166] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0068.166] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0068.166] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="enteringreviewercustom.exe")) returned 1 [0068.167] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="files-anne.exe")) returned 1 [0068.167] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="sent-entertainment-noted.exe")) returned 1 [0068.168] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="advancement spies.exe")) returned 1 [0068.168] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="boulder_intelligence_gpl.exe")) returned 1 [0068.169] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="letters.exe")) returned 1 [0068.169] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="discount-talent.exe")) returned 1 [0068.170] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="pest_complicated_doc.exe")) returned 1 [0068.170] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="substance-necessity.exe")) returned 1 [0068.170] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="jeffrey.exe")) returned 1 [0068.311] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="logic-samuel-clubs.exe")) returned 1 [0068.312] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="gaps.exe")) returned 1 [0068.312] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="newspaper-jerry.exe")) returned 1 [0068.313] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="powerseller_protein_amendment.exe")) returned 1 [0068.313] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="daddy_conditional.exe")) returned 1 [0068.314] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="rely_speak_acres.exe")) returned 1 [0068.314] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="walk forced online.exe")) returned 1 [0068.315] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="trinity witch foam.exe")) returned 1 [0068.316] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="ep-garage.exe")) returned 1 [0068.316] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="treaty.exe")) returned 1 [0068.317] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xddc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="craftsnapshot.exe")) returned 1 [0068.317] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0068.318] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfb0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0068.318] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfa0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0068.319] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0068.319] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0068.320] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0xd60, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0068.320] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd60, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0068.321] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x468, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xc70, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0068.321] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0068.322] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x390, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0068.322] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0xc70, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0068.323] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0068.323] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 1 [0068.324] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 0 [0068.324] CloseHandle (hObject=0x2e8) returned 1 [0068.324] Sleep (dwMilliseconds=0x1f4) [0069.061] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2e8 [0069.066] Process32FirstW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0069.066] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0069.067] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0069.067] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0069.068] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0069.068] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0069.069] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0069.069] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0069.069] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0069.070] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0069.070] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0069.071] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0069.071] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0069.072] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0069.072] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x57, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0069.072] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0069.073] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0069.073] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0069.074] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0069.074] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0069.075] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0069.075] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0069.075] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0069.076] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0069.076] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0069.077] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0069.091] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0069.091] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0069.092] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0069.092] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0069.092] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0069.104] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0069.105] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x41, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0069.105] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0069.105] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0069.106] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0069.106] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0069.107] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0069.107] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0069.108] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0069.108] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0069.109] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0069.109] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0069.110] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0069.110] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0069.111] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0069.111] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="enteringreviewercustom.exe")) returned 1 [0069.111] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="files-anne.exe")) returned 1 [0069.112] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="sent-entertainment-noted.exe")) returned 1 [0069.112] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="advancement spies.exe")) returned 1 [0069.113] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="boulder_intelligence_gpl.exe")) returned 1 [0069.113] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="letters.exe")) returned 1 [0069.114] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="discount-talent.exe")) returned 1 [0069.114] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="pest_complicated_doc.exe")) returned 1 [0069.114] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="substance-necessity.exe")) returned 1 [0069.115] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="jeffrey.exe")) returned 1 [0069.115] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="logic-samuel-clubs.exe")) returned 1 [0069.116] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="gaps.exe")) returned 1 [0069.116] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="newspaper-jerry.exe")) returned 1 [0069.117] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="powerseller_protein_amendment.exe")) returned 1 [0069.117] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="daddy_conditional.exe")) returned 1 [0069.118] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="rely_speak_acres.exe")) returned 1 [0069.118] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="walk forced online.exe")) returned 1 [0069.119] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="trinity witch foam.exe")) returned 1 [0069.120] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="ep-garage.exe")) returned 1 [0069.120] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="treaty.exe")) returned 1 [0069.121] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xddc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="craftsnapshot.exe")) returned 1 [0069.121] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0069.122] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfb0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0069.122] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfa0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0069.123] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0069.123] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0069.249] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0xd60, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0069.250] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd60, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0069.251] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x468, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xc70, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0069.251] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0069.252] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x390, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0069.253] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0xc70, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0069.253] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0069.254] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 1 [0069.254] Process32NextW (in: hSnapshot=0x2e8, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 0 [0069.255] CloseHandle (hObject=0x2e8) returned 1 [0069.255] Sleep (dwMilliseconds=0x1f4) [0069.929] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x250 [0069.933] Process32FirstW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0069.934] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0069.934] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0069.935] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0069.935] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0069.936] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0069.936] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0069.937] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0069.938] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0069.938] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0069.939] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0069.939] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0069.939] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0069.940] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0069.940] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x57, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0069.941] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0069.941] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0069.942] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0069.942] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0069.943] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0069.943] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0069.944] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0069.944] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0069.944] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0069.945] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0069.945] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0069.946] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0069.946] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0069.947] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0069.947] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0069.948] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0069.948] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0069.949] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x41, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0069.949] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0069.949] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0069.950] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0069.950] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0069.951] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0069.951] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0069.952] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0069.952] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0069.953] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0069.953] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0069.954] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0069.954] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0069.954] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0069.955] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="enteringreviewercustom.exe")) returned 1 [0069.955] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="files-anne.exe")) returned 1 [0069.956] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="sent-entertainment-noted.exe")) returned 1 [0069.956] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="advancement spies.exe")) returned 1 [0069.957] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="boulder_intelligence_gpl.exe")) returned 1 [0069.957] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="letters.exe")) returned 1 [0069.957] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="discount-talent.exe")) returned 1 [0069.958] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="pest_complicated_doc.exe")) returned 1 [0069.958] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="substance-necessity.exe")) returned 1 [0069.959] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="jeffrey.exe")) returned 1 [0069.959] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="logic-samuel-clubs.exe")) returned 1 [0069.960] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="gaps.exe")) returned 1 [0069.960] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="newspaper-jerry.exe")) returned 1 [0069.961] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="powerseller_protein_amendment.exe")) returned 1 [0069.961] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="daddy_conditional.exe")) returned 1 [0069.962] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="rely_speak_acres.exe")) returned 1 [0069.962] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="walk forced online.exe")) returned 1 [0069.963] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="trinity witch foam.exe")) returned 1 [0069.964] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="ep-garage.exe")) returned 1 [0069.964] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="treaty.exe")) returned 1 [0069.965] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xddc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="craftsnapshot.exe")) returned 1 [0069.966] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0069.966] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfb0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0069.967] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfa0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0069.967] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.141] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0070.142] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0xd60, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0070.142] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd60, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0070.143] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x468, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xc70, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0070.143] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0070.144] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x390, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0070.144] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0xc70, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0070.145] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.145] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 1 [0070.146] Process32NextW (in: hSnapshot=0x250, lppe=0xfff990 | out: lppe=0xfff990*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 0 [0070.146] CloseHandle (hObject=0x250) returned 1 [0070.146] Sleep (dwMilliseconds=0x1f4) Thread: id = 20 os_tid = 0x4b8 [0045.207] GetProcessHeap () returned 0x120000 [0045.207] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x21a) returned 0x14ec20 [0045.207] GetProcessHeap () returned 0x120000 [0045.207] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x28) returned 0x137ca8 [0045.207] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2a8 [0045.207] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2ac [0045.207] GetComputerNameW (in: lpBuffer=0x14ec30, nSize=0x113fbd0 | out: lpBuffer="NQDPDE", nSize=0x113fbd0) returned 1 [0045.207] GetProcessHeap () returned 0x120000 [0045.207] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x20) returned 0x148578 [0045.207] CloseHandle (hObject=0x2ac) returned 1 [0045.207] CloseHandle (hObject=0x2a8) returned 1 [0045.207] GetProcessHeap () returned 0x120000 [0045.207] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x137ca8 | out: hHeap=0x120000) returned 1 [0045.207] GetProcessHeap () returned 0x120000 [0045.207] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x148578 | out: hHeap=0x120000) returned 1 [0045.207] GetProcessHeap () returned 0x120000 [0045.207] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x14ec20 | out: hHeap=0x120000) returned 1 Thread: id = 21 os_tid = 0xe44 [0045.208] GetLogicalDrives () returned 0x4 [0045.208] GetProcessHeap () returned 0x120000 [0045.208] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x40) returned 0x1323b0 [0045.208] GetProcessHeap () returned 0x120000 [0045.208] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x28) returned 0x137f48 [0045.208] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2a8 [0045.208] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2ac [0045.208] GetProcessHeap () returned 0x120000 [0045.208] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x20) returned 0x148578 [0045.208] GetProcessHeap () returned 0x120000 [0045.208] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x1e) returned 0x1485a0 [0045.208] GetProcessHeap () returned 0x120000 [0045.208] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x1e) returned 0x148410 [0045.208] GetProcessHeap () returned 0x120000 [0045.208] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x90) returned 0x131158 [0045.208] GetProcessHeap () returned 0x120000 [0045.208] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x131158 | out: hHeap=0x120000) returned 1 [0045.208] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x1485a0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0045.208] GetProcessHeap () returned 0x120000 [0045.209] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x148410 | out: hHeap=0x120000) returned 1 [0045.209] GetProcessHeap () returned 0x120000 [0045.209] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x148578 | out: hHeap=0x120000) returned 1 [0045.209] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x275fafc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x275fafc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0045.209] GetProcessHeap () returned 0x120000 [0045.209] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1485a0 | out: hHeap=0x120000) returned 1 [0045.209] GetProcessHeap () returned 0x120000 [0045.209] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10) returned 0x147b28 [0045.209] GetProcessHeap () returned 0x120000 [0045.209] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10) returned 0x147dc8 [0045.209] GetProcessHeap () returned 0x120000 [0045.209] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10) returned 0x147cd8 [0045.209] GetProcessHeap () returned 0x120000 [0045.209] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x90) returned 0x131158 [0045.209] GetProcessHeap () returned 0x120000 [0045.209] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10) returned 0x147db0 [0045.209] htonl (hostlong=0xb4197730) returned 0x307719b4 [0045.209] QueryPerformanceCounter (in: lpPerformanceCount=0x275f9f8 | out: lpPerformanceCount=0x275f9f8*=13647005295) returned 1 [0045.209] GetTickCount () returned 0x114bd75 [0045.209] GetCurrentProcessId () returned 0xd60 [0045.209] GetCurrentThreadId () returned 0xe44 [0045.209] GetLocalTime (in: lpSystemTime=0x275f9e0 | out: lpSystemTime=0x275f9e0*(wYear=0x7e3, wMonth=0x9, wDayOfWeek=0x5, wDay=0xd, wHour=0x2, wMinute=0x8, wSecond=0x26, wMilliseconds=0x320)) [0045.209] SystemTimeToFileTime (in: lpSystemTime=0x275f9e0, lpFileTime=0x275f9f0 | out: lpFileTime=0x275f9f0) returned 1 [0045.209] QueryPerformanceCounter (in: lpPerformanceCount=0x275f9f8 | out: lpPerformanceCount=0x275f9f8*=13647022618) returned 1 [0045.210] GetProcessHeap () returned 0x120000 [0045.210] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x28) returned 0x137ca8 [0045.210] GetProcessHeap () returned 0x120000 [0045.210] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10) returned 0x147ae0 [0045.210] GetProcessHeap () returned 0x120000 [0045.210] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x4) returned 0x148a90 [0045.210] GetProcessHeap () returned 0x120000 [0045.210] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x14) returned 0x138220 [0045.210] GetProcessHeap () returned 0x120000 [0045.210] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10) returned 0x147b40 [0045.210] GetProcessHeap () returned 0x120000 [0045.210] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x80) returned 0x147818 [0045.210] GetProcessHeap () returned 0x120000 [0045.210] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10) returned 0x147cf0 [0045.210] GetProcessHeap () returned 0x120000 [0045.210] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x82) returned 0x12ffe8 [0045.210] GetProcessHeap () returned 0x120000 [0045.210] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10) returned 0x147d08 [0045.210] GetProcessHeap () returned 0x120000 [0045.210] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x4) returned 0x148920 [0045.210] GetProcessHeap () returned 0x120000 [0045.210] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10) returned 0x147b58 [0045.210] GetProcessHeap () returned 0x120000 [0045.210] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x80) returned 0x130078 [0045.210] GetProcessHeap () returned 0x120000 [0045.210] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10) returned 0x147e58 [0045.210] GetProcessHeap () returned 0x120000 [0045.210] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x2) returned 0x1489d0 [0045.210] GetProcessHeap () returned 0x120000 [0045.210] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x4) returned 0x1489a0 [0045.210] GetProcessHeap () returned 0x120000 [0045.210] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10) returned 0x147e28 [0045.210] GetProcessHeap () returned 0x120000 [0045.210] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x80) returned 0x149250 [0045.210] GetProcessHeap () returned 0x120000 [0045.210] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10) returned 0x147e40 [0045.210] GetProcessHeap () returned 0x120000 [0045.211] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x4) returned 0x148a10 [0045.211] GetProcessHeap () returned 0x120000 [0045.211] RtlReAllocateHeap (Heap=0x120000, Flags=0x0, Ptr=0x1489d0, Size=0x82) returned 0x1492d8 [0045.211] GetProcessHeap () returned 0x120000 [0045.211] RtlReAllocateHeap (Heap=0x120000, Flags=0x0, Ptr=0x148a10, Size=0x100) returned 0x132a28 [0045.211] GetProcessHeap () returned 0x120000 [0045.211] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10) returned 0x147df8 [0045.211] GetProcessHeap () returned 0x120000 [0045.211] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x82) returned 0x149da8 [0045.211] GetProcessHeap () returned 0x120000 [0045.211] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10) returned 0x147de0 [0045.211] GetProcessHeap () returned 0x120000 [0045.211] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x82) returned 0x149e38 [0045.211] GetProcessHeap () returned 0x120000 [0045.211] RtlReAllocateHeap (Heap=0x120000, Flags=0x0, Ptr=0x1492d8, Size=0x104) returned 0x14ec20 [0045.211] GetProcessHeap () returned 0x120000 [0045.211] RtlReAllocateHeap (Heap=0x120000, Flags=0x0, Ptr=0x132a28, Size=0x200) returned 0x14ed30 [0045.212] GetProcessHeap () returned 0x120000 [0045.212] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1489a0 | out: hHeap=0x120000) returned 1 [0045.212] GetProcessHeap () returned 0x120000 [0045.212] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x14ed30 | out: hHeap=0x120000) returned 1 [0045.212] GetProcessHeap () returned 0x120000 [0045.212] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x147e40 | out: hHeap=0x120000) returned 1 [0045.212] GetProcessHeap () returned 0x120000 [0045.212] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x130078 | out: hHeap=0x120000) returned 1 [0045.212] GetProcessHeap () returned 0x120000 [0045.212] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x147b58 | out: hHeap=0x120000) returned 1 [0045.212] GetProcessHeap () returned 0x120000 [0045.212] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x149250 | out: hHeap=0x120000) returned 1 [0045.212] GetProcessHeap () returned 0x120000 [0045.212] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x147e28 | out: hHeap=0x120000) returned 1 [0045.212] GetProcessHeap () returned 0x120000 [0045.212] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x14ec20 | out: hHeap=0x120000) returned 1 [0045.212] GetProcessHeap () returned 0x120000 [0045.212] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x147e58 | out: hHeap=0x120000) returned 1 [0045.212] GetProcessHeap () returned 0x120000 [0045.212] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x149da8 | out: hHeap=0x120000) returned 1 [0045.212] GetProcessHeap () returned 0x120000 [0045.212] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x147df8 | out: hHeap=0x120000) returned 1 [0045.212] GetProcessHeap () returned 0x120000 [0045.213] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x149e38 | out: hHeap=0x120000) returned 1 [0045.213] GetProcessHeap () returned 0x120000 [0045.213] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x147de0 | out: hHeap=0x120000) returned 1 [0045.213] GetProcessHeap () returned 0x120000 [0045.213] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x148a90 | out: hHeap=0x120000) returned 1 [0045.213] GetProcessHeap () returned 0x120000 [0045.213] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x147ae0 | out: hHeap=0x120000) returned 1 [0045.213] GetProcessHeap () returned 0x120000 [0045.213] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x12ffe8 | out: hHeap=0x120000) returned 1 [0045.213] GetProcessHeap () returned 0x120000 [0045.213] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x147cf0 | out: hHeap=0x120000) returned 1 [0045.213] GetProcessHeap () returned 0x120000 [0045.213] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x147818 | out: hHeap=0x120000) returned 1 [0045.213] GetProcessHeap () returned 0x120000 [0045.213] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x147b40 | out: hHeap=0x120000) returned 1 [0045.213] GetProcessHeap () returned 0x120000 [0045.213] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x148920 | out: hHeap=0x120000) returned 1 [0045.213] GetProcessHeap () returned 0x120000 [0045.213] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x147d08 | out: hHeap=0x120000) returned 1 [0045.213] GetProcessHeap () returned 0x120000 [0045.213] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x137ca8 | out: hHeap=0x120000) returned 1 [0045.213] GetProcessHeap () returned 0x120000 [0045.213] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x138220 | out: hHeap=0x120000) returned 1 [0045.213] GetProcessHeap () returned 0x120000 [0045.213] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0xa4) returned 0x130128 [0045.213] GetProcessHeap () returned 0x120000 [0045.213] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x147dc8 | out: hHeap=0x120000) returned 1 [0045.213] GetProcessHeap () returned 0x120000 [0045.213] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x147cd8 | out: hHeap=0x120000) returned 1 [0045.213] GetProcessHeap () returned 0x120000 [0045.213] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x131158 | out: hHeap=0x120000) returned 1 [0045.213] GetProcessHeap () returned 0x120000 [0045.213] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x147db0 | out: hHeap=0x120000) returned 1 [0045.213] GetProcessHeap () returned 0x120000 [0045.213] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x147b28 | out: hHeap=0x120000) returned 1 [0045.213] GetProcessHeap () returned 0x120000 [0045.213] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x14) returned 0x138460 [0045.213] GetProcessHeap () returned 0x120000 [0045.213] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0xe) returned 0x147db0 [0045.213] ResetEvent (hEvent=0x2ac) returned 1 [0045.214] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x1244a4c, lpParameter=0x138460, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a4 [0045.257] CloseHandle (hObject=0x2a4) returned 1 [0045.257] GetProcessHeap () returned 0x120000 [0045.257] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10) returned 0x147dc8 [0045.257] GetProcessHeap () returned 0x120000 [0045.257] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10) returned 0x147b28 [0045.257] GetProcessHeap () returned 0x120000 [0045.257] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10) returned 0x147ae0 [0045.257] GetProcessHeap () returned 0x120000 [0045.257] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x90) returned 0x131158 [0045.257] GetProcessHeap () returned 0x120000 [0045.257] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10) returned 0x147b40 [0045.257] htonl (hostlong=0xb4197730) returned 0x307719b4 [0045.257] GetProcessHeap () returned 0x120000 [0045.257] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x28) returned 0x137d68 [0045.257] GetProcessHeap () returned 0x120000 [0045.257] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10) returned 0x147b58 [0045.257] GetProcessHeap () returned 0x120000 [0045.257] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x4) returned 0x148a00 [0045.257] GetProcessHeap () returned 0x120000 [0045.257] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x14) returned 0x138260 [0045.257] GetProcessHeap () returned 0x120000 [0045.257] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10) returned 0x147ea0 [0045.257] GetProcessHeap () returned 0x120000 [0045.257] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x80) returned 0x147818 [0045.257] GetProcessHeap () returned 0x120000 [0045.257] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10) returned 0x147e58 [0045.257] GetProcessHeap () returned 0x120000 [0045.257] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x82) returned 0x12ffe8 [0045.257] GetProcessHeap () returned 0x120000 [0045.258] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10) returned 0x147e40 [0045.258] GetProcessHeap () returned 0x120000 [0045.258] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x4) returned 0x148900 [0045.258] GetProcessHeap () returned 0x120000 [0045.258] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10) returned 0x147e70 [0045.258] GetProcessHeap () returned 0x120000 [0045.258] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x80) returned 0x130078 [0045.258] GetProcessHeap () returned 0x120000 [0045.258] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10) returned 0x147e10 [0045.258] GetProcessHeap () returned 0x120000 [0045.258] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x2) returned 0x148990 [0045.258] GetProcessHeap () returned 0x120000 [0045.258] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x4) returned 0x1489c0 [0045.258] GetProcessHeap () returned 0x120000 [0045.258] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10) returned 0x147e28 [0045.258] GetProcessHeap () returned 0x120000 [0045.258] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x80) returned 0x149250 [0045.258] GetProcessHeap () returned 0x120000 [0045.258] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10) returned 0x147e88 [0045.258] GetProcessHeap () returned 0x120000 [0045.258] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x4) returned 0x1489d0 [0045.258] GetProcessHeap () returned 0x120000 [0045.258] RtlReAllocateHeap (Heap=0x120000, Flags=0x0, Ptr=0x148990, Size=0x82) returned 0x1492d8 [0045.258] GetProcessHeap () returned 0x120000 [0045.258] RtlReAllocateHeap (Heap=0x120000, Flags=0x0, Ptr=0x1489d0, Size=0x100) returned 0x132a28 [0045.258] GetProcessHeap () returned 0x120000 [0045.258] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10) returned 0x147de0 [0045.258] GetProcessHeap () returned 0x120000 [0045.258] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x82) returned 0x149da8 [0045.258] GetProcessHeap () returned 0x120000 [0045.258] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10) returned 0x147df8 [0045.258] GetProcessHeap () returned 0x120000 [0045.258] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x82) returned 0x149e38 [0045.258] GetProcessHeap () returned 0x120000 [0045.258] RtlReAllocateHeap (Heap=0x120000, Flags=0x0, Ptr=0x1492d8, Size=0x104) returned 0x14f500 [0045.258] GetProcessHeap () returned 0x120000 [0045.259] RtlReAllocateHeap (Heap=0x120000, Flags=0x0, Ptr=0x132a28, Size=0x200) returned 0x14f610 [0045.259] GetProcessHeap () returned 0x120000 [0045.260] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1489c0 | out: hHeap=0x120000) returned 1 [0045.260] GetProcessHeap () returned 0x120000 [0045.260] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x14f610 | out: hHeap=0x120000) returned 1 [0045.260] GetProcessHeap () returned 0x120000 [0045.260] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x147e88 | out: hHeap=0x120000) returned 1 [0045.260] GetProcessHeap () returned 0x120000 [0045.260] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x130078 | out: hHeap=0x120000) returned 1 [0045.260] GetProcessHeap () returned 0x120000 [0045.260] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x147e70 | out: hHeap=0x120000) returned 1 [0045.260] GetProcessHeap () returned 0x120000 [0045.260] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x149250 | out: hHeap=0x120000) returned 1 [0045.260] GetProcessHeap () returned 0x120000 [0045.260] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x147e28 | out: hHeap=0x120000) returned 1 [0045.260] GetProcessHeap () returned 0x120000 [0045.260] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x14f500 | out: hHeap=0x120000) returned 1 [0045.260] GetProcessHeap () returned 0x120000 [0045.260] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x147e10 | out: hHeap=0x120000) returned 1 [0045.260] GetProcessHeap () returned 0x120000 [0045.260] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x149da8 | out: hHeap=0x120000) returned 1 [0045.260] GetProcessHeap () returned 0x120000 [0045.260] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x147de0 | out: hHeap=0x120000) returned 1 [0045.260] GetProcessHeap () returned 0x120000 [0045.260] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x149e38 | out: hHeap=0x120000) returned 1 [0045.260] GetProcessHeap () returned 0x120000 [0045.260] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x147df8 | out: hHeap=0x120000) returned 1 [0045.260] GetProcessHeap () returned 0x120000 [0045.260] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x148a00 | out: hHeap=0x120000) returned 1 [0045.260] GetProcessHeap () returned 0x120000 [0045.260] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x147b58 | out: hHeap=0x120000) returned 1 [0045.260] GetProcessHeap () returned 0x120000 [0045.260] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x12ffe8 | out: hHeap=0x120000) returned 1 [0045.260] GetProcessHeap () returned 0x120000 [0045.260] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x147e58 | out: hHeap=0x120000) returned 1 [0045.260] GetProcessHeap () returned 0x120000 [0045.260] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x147818 | out: hHeap=0x120000) returned 1 [0045.260] GetProcessHeap () returned 0x120000 [0045.260] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x147ea0 | out: hHeap=0x120000) returned 1 [0045.260] GetProcessHeap () returned 0x120000 [0045.260] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x148900 | out: hHeap=0x120000) returned 1 [0045.260] GetProcessHeap () returned 0x120000 [0045.260] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x147e40 | out: hHeap=0x120000) returned 1 [0045.260] GetProcessHeap () returned 0x120000 [0045.260] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x137d68 | out: hHeap=0x120000) returned 1 [0045.260] GetProcessHeap () returned 0x120000 [0045.260] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x138260 | out: hHeap=0x120000) returned 1 [0045.260] GetProcessHeap () returned 0x120000 [0045.260] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0xa4) returned 0x130288 [0045.260] GetProcessHeap () returned 0x120000 [0045.261] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x147b28 | out: hHeap=0x120000) returned 1 [0045.261] GetProcessHeap () returned 0x120000 [0045.261] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x147ae0 | out: hHeap=0x120000) returned 1 [0045.261] GetProcessHeap () returned 0x120000 [0045.261] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x131158 | out: hHeap=0x120000) returned 1 [0045.261] GetProcessHeap () returned 0x120000 [0045.261] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x147b40 | out: hHeap=0x120000) returned 1 [0045.261] GetProcessHeap () returned 0x120000 [0045.261] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x147dc8 | out: hHeap=0x120000) returned 1 [0045.261] GetProcessHeap () returned 0x120000 [0045.261] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x14) returned 0x1382a0 [0045.261] GetProcessHeap () returned 0x120000 [0045.261] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0xe) returned 0x147dc8 [0045.261] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x1244a4c, lpParameter=0x1382a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a4 [0045.261] CloseHandle (hObject=0x2a4) returned 1 [0045.262] WaitForSingleObject (hHandle=0x2ac, dwMilliseconds=0xffffffff) Thread: id = 22 os_tid = 0xef0 [0045.214] GetLogicalDrives () returned 0x4 [0045.214] GetProcessHeap () returned 0x120000 [0045.214] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x20) returned 0x148410 [0045.214] GetProcessHeap () returned 0x120000 [0045.214] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x1e) returned 0x148640 [0045.214] GetProcessHeap () returned 0x120000 [0045.214] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x1e) returned 0x148668 [0045.214] GetProcessHeap () returned 0x120000 [0045.214] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x90) returned 0x131158 [0045.214] GetProcessHeap () returned 0x120000 [0045.214] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x131158 | out: hHeap=0x120000) returned 1 [0045.214] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x148640, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0045.214] GetProcessHeap () returned 0x120000 [0045.214] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x148668 | out: hHeap=0x120000) returned 1 [0045.214] GetProcessHeap () returned 0x120000 [0045.214] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x148410 | out: hHeap=0x120000) returned 1 [0045.214] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x285fa74, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x285fa74*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0045.215] GetProcessHeap () returned 0x120000 [0045.215] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x148640 | out: hHeap=0x120000) returned 1 [0045.215] GetProcessHeap () returned 0x120000 [0045.215] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x40) returned 0x132440 [0045.215] GetProcessHeap () returned 0x120000 [0045.215] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x28) returned 0x137cd8 [0045.215] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2b0 [0045.215] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2b4 [0045.215] GetLogicalDrives () returned 0x4 [0045.215] Sleep (dwMilliseconds=0x3e8) [0046.463] GetLogicalDrives () returned 0x4 [0046.463] Sleep (dwMilliseconds=0x3e8) [0047.739] GetLogicalDrives () returned 0x4 [0047.739] Sleep (dwMilliseconds=0x3e8) [0049.232] GetLogicalDrives () returned 0x4 [0049.232] Sleep (dwMilliseconds=0x3e8) [0051.545] GetLogicalDrives () returned 0x4 [0051.545] Sleep (dwMilliseconds=0x3e8) [0052.874] GetLogicalDrives () returned 0x4 [0052.874] Sleep (dwMilliseconds=0x3e8) [0054.222] GetLogicalDrives () returned 0x4 [0054.222] Sleep (dwMilliseconds=0x3e8) [0055.615] GetLogicalDrives () returned 0x4 [0055.615] Sleep (dwMilliseconds=0x3e8) [0056.974] GetLogicalDrives () returned 0x4 [0056.974] Sleep (dwMilliseconds=0x3e8) [0058.338] GetLogicalDrives () returned 0x4 [0058.338] Sleep (dwMilliseconds=0x3e8) [0059.667] GetLogicalDrives () returned 0x4 [0059.667] Sleep (dwMilliseconds=0x3e8) [0060.961] GetLogicalDrives () returned 0x4 [0060.961] Sleep (dwMilliseconds=0x3e8) [0062.181] GetLogicalDrives () returned 0x4 [0062.188] Sleep (dwMilliseconds=0x3e8) [0063.430] GetLogicalDrives () returned 0x4 [0063.430] Sleep (dwMilliseconds=0x3e8) [0064.661] GetLogicalDrives () returned 0x4 [0064.663] Sleep (dwMilliseconds=0x3e8) [0065.907] GetLogicalDrives () returned 0x4 [0065.907] Sleep (dwMilliseconds=0x3e8) [0067.051] GetLogicalDrives () returned 0x4 [0067.062] Sleep (dwMilliseconds=0x3e8) [0068.261] GetLogicalDrives () returned 0x4 [0068.261] Sleep (dwMilliseconds=0x3e8) [0069.375] GetLogicalDrives () returned 0x4 [0069.375] Sleep (dwMilliseconds=0x3e8) Thread: id = 23 os_tid = 0x4a4 [0045.269] GetProcessHeap () returned 0x120000 [0045.269] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x38) returned 0x139800 [0045.269] GetProcessHeap () returned 0x120000 [0045.269] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x18) returned 0x1384a0 [0045.269] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2a4 [0045.269] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2b8 [0045.270] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2bc [0045.270] GetProcessHeap () returned 0x120000 [0045.270] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x14fde0 [0045.270] GetProcessHeap () returned 0x120000 [0045.270] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x50) returned 0x149728 [0045.270] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75e90000 [0045.270] GetProcAddress (hModule=0x75e90000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x75ea6b30 [0045.270] Wow64DisableWow64FsRedirection (in: OldValue=0x113faf4 | out: OldValue=0x113faf4*=0x0) returned 1 [0045.270] GetProcessHeap () returned 0x120000 [0045.270] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x149728 | out: hHeap=0x120000) returned 1 [0045.270] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x1, lpStartAddress=0x12448ba, lpParameter=0x113faf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c0 [0045.271] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x1, lpStartAddress=0x12448ba, lpParameter=0x113faf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c4 [0045.271] GetProcessHeap () returned 0x120000 [0045.271] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x15fde8 [0045.272] FindFirstFileW (in: lpFileName="\\\\?\\C:\\*", lpFindFileData=0x113f868 | out: lpFindFileData=0x113f868*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1149735, dwReserved1=0x745f9fc4, cFileName="$GetCurrent", cAlternateFileName="$GETCU~1")) returned 0x139c80 [0045.272] GetProcessHeap () returned 0x120000 [0045.272] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x16fdf0 [0045.272] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$GetCurrent\\*", lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x139840 [0045.273] FindNextFileW (in: hFindFile=0x139840, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0045.273] FindNextFileW (in: hFindFile=0x139840, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Logs", cAlternateFileName="")) returned 1 [0045.274] GetProcessHeap () returned 0x120000 [0045.274] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x180e00 [0045.274] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139e40 [0045.276] FindNextFileW (in: hFindFile=0x139e40, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.276] FindNextFileW (in: hFindFile=0x139e40, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x542c8aac, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0xafe5f7a, ftLastWriteTime.dwHighDateTime=0x1d3273e, nFileSizeHigh=0x0, nFileSizeLow=0xa6b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="downlevel_2017_09_07_02_02_39_766.log", cAlternateFileName="DOWNLE~1.LOG")) returned 1 [0045.276] SetEvent (hEvent=0x2b8) returned 1 [0045.276] ResetEvent (hEvent=0x2bc) returned 1 [0045.276] FindNextFileW (in: hFindFile=0x139e40, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973abb0f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1774, dwReserved0=0x0, dwReserved1=0x0, cFileName="oobe_2017_09_07_03_08_57_737.log", cAlternateFileName="OOBE_2~1.LOG")) returned 1 [0045.276] FindNextFileW (in: hFindFile=0x139e40, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 1 [0045.277] FindNextFileW (in: hFindFile=0x139e40, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 0 [0045.277] FindClose (in: hFindFile=0x139e40 | out: hFindFile=0x139e40) returned 1 [0045.277] GetProcessHeap () returned 0x120000 [0045.277] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x180e00 | out: hHeap=0x120000) returned 1 [0045.278] FindNextFileW (in: hFindFile=0x139840, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SafeOS", cAlternateFileName="")) returned 1 [0045.278] GetProcessHeap () returned 0x120000 [0045.278] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x180e00 [0045.278] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139880 [0045.279] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.280] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9568f13f, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9568f13f, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x232c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentOOBE.dll", cAlternateFileName="GETCUR~1.DLL")) returned 1 [0045.280] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956819aa, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x956819aa, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentRollback.ini", cAlternateFileName="GETCUR~1.INI")) returned 1 [0045.280] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x54acc791, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x54acc791, ftLastWriteTime.dwHighDateTime=0x1d3273a, nFileSizeHigh=0x0, nFileSizeLow=0x241, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupComplete.cmd", cAlternateFileName="PARTNE~1.CMD")) returned 1 [0045.280] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9575af11, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9577d1ec, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="preoobe.cmd", cAlternateFileName="")) returned 1 [0045.280] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 1 [0045.280] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 0 [0045.280] FindClose (in: hFindFile=0x139880 | out: hFindFile=0x139880) returned 1 [0045.281] GetProcessHeap () returned 0x120000 [0045.281] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x180e00 | out: hHeap=0x120000) returned 1 [0045.281] FindNextFileW (in: hFindFile=0x139840, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SafeOS", cAlternateFileName="")) returned 0 [0045.281] FindClose (in: hFindFile=0x139840 | out: hFindFile=0x139840) returned 1 [0045.281] GetProcessHeap () returned 0x120000 [0045.281] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x16fdf0 | out: hHeap=0x120000) returned 1 [0045.282] FindNextFileW (in: hFindFile=0x139c80, lpFindFileData=0x113f868 | out: lpFindFileData=0x113f868*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1149735, dwReserved1=0x745f9fc4, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 1 [0045.282] GetProcessHeap () returned 0x120000 [0045.282] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x16fdf0 [0045.282] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\*", lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x139840 [0045.282] FindNextFileW (in: hFindFile=0x139840, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0045.282] FindNextFileW (in: hFindFile=0x139840, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="S-1-5-18", cAlternateFileName="")) returned 1 [0045.283] GetProcessHeap () returned 0x120000 [0045.283] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x180e00 [0045.283] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-18\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139cc0 [0045.283] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.283] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0045.283] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0045.283] FindClose (in: hFindFile=0x139cc0 | out: hFindFile=0x139cc0) returned 1 [0045.283] GetProcessHeap () returned 0x120000 [0045.283] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x180e00 | out: hHeap=0x120000) returned 1 [0045.284] FindNextFileW (in: hFindFile=0x139840, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0045.284] GetProcessHeap () returned 0x120000 [0045.284] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x180e00 [0045.284] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b80 [0045.284] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.284] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0045.284] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0045.284] FindClose (in: hFindFile=0x139b80 | out: hFindFile=0x139b80) returned 1 [0045.285] GetProcessHeap () returned 0x120000 [0045.285] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x180e00 | out: hHeap=0x120000) returned 1 [0045.285] FindNextFileW (in: hFindFile=0x139840, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 0 [0045.285] FindClose (in: hFindFile=0x139840 | out: hFindFile=0x139840) returned 1 [0045.285] GetProcessHeap () returned 0x120000 [0045.285] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x16fdf0 | out: hHeap=0x120000) returned 1 [0045.286] FindNextFileW (in: hFindFile=0x139c80, lpFindFileData=0x113f868 | out: lpFindFileData=0x113f868*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1149735, dwReserved1=0x745f9fc4, cFileName="$WINRE_BACKUP_PARTITION.MARKER", cAlternateFileName="$WINRE~1.MAR")) returned 1 [0045.286] FindNextFileW (in: hFindFile=0x139c80, lpFindFileData=0x113f868 | out: lpFindFileData=0x113f868*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1149735, dwReserved1=0x745f9fc4, cFileName="588bce7c90097ed212", cAlternateFileName="588BCE~1")) returned 1 [0045.286] GetProcessHeap () returned 0x120000 [0045.286] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x16fdf0 [0045.286] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\*", lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x139880 [0045.287] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0045.288] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1025", cAlternateFileName="")) returned 1 [0045.288] GetProcessHeap () returned 0x120000 [0045.288] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0045.288] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139cc0 [0045.289] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.289] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0045.289] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x121e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0045.289] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0045.289] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0045.289] FindClose (in: hFindFile=0x139cc0 | out: hFindFile=0x139cc0) returned 1 [0045.289] GetProcessHeap () returned 0x120000 [0045.289] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0045.290] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1028", cAlternateFileName="")) returned 1 [0045.290] GetProcessHeap () returned 0x120000 [0045.290] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0045.290] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b80 [0045.291] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.291] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0045.291] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0045.291] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0045.291] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0045.291] FindClose (in: hFindFile=0x139b80 | out: hFindFile=0x139b80) returned 1 [0045.291] GetProcessHeap () returned 0x120000 [0045.291] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0045.291] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1029", cAlternateFileName="")) returned 1 [0045.291] GetProcessHeap () returned 0x120000 [0045.291] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0045.292] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d80 [0045.292] FindNextFileW (in: hFindFile=0x139d80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.292] FindNextFileW (in: hFindFile=0x139d80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0045.292] FindNextFileW (in: hFindFile=0x139d80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13c4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0045.293] FindNextFileW (in: hFindFile=0x139d80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0045.293] FindNextFileW (in: hFindFile=0x139d80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0045.293] FindClose (in: hFindFile=0x139d80 | out: hFindFile=0x139d80) returned 1 [0045.293] GetProcessHeap () returned 0x120000 [0045.293] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0045.293] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1030", cAlternateFileName="")) returned 1 [0045.293] GetProcessHeap () returned 0x120000 [0045.293] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0045.293] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b80 [0045.294] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.294] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xcf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0045.294] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12fb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0045.294] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0045.294] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0045.294] FindClose (in: hFindFile=0x139b80 | out: hFindFile=0x139b80) returned 1 [0045.294] GetProcessHeap () returned 0x120000 [0045.294] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0045.295] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1031", cAlternateFileName="")) returned 1 [0045.295] GetProcessHeap () returned 0x120000 [0045.295] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0045.295] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d00 [0045.296] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.296] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0045.296] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0045.296] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0045.296] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0045.296] FindClose (in: hFindFile=0x139d00 | out: hFindFile=0x139d00) returned 1 [0045.296] GetProcessHeap () returned 0x120000 [0045.296] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0045.297] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1032", cAlternateFileName="")) returned 1 [0045.297] GetProcessHeap () returned 0x120000 [0045.297] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0045.297] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139cc0 [0045.298] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.298] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x22ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0045.298] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1510c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0045.298] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0045.298] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0045.298] FindClose (in: hFindFile=0x139cc0 | out: hFindFile=0x139cc0) returned 1 [0045.298] GetProcessHeap () returned 0x120000 [0045.298] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0045.298] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1033", cAlternateFileName="")) returned 1 [0045.298] GetProcessHeap () returned 0x120000 [0045.298] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0045.299] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b80 [0045.299] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.300] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd723cc00, ftCreationTime.dwHighDateTime=0x1cabb47, ftLastAccessTime.dwLowDateTime=0xd723cc00, ftLastAccessTime.dwHighDateTime=0x1cabb47, ftLastWriteTime.dwLowDateTime=0xd723cc00, ftLastWriteTime.dwHighDateTime=0x1cabb47, nFileSizeHigh=0x0, nFileSizeLow=0xc74, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0045.300] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x47ad1a00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x47ad1a00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x47ad1a00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12db0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0045.300] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0045.300] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0045.300] FindClose (in: hFindFile=0x139b80 | out: hFindFile=0x139b80) returned 1 [0045.300] GetProcessHeap () returned 0x120000 [0045.300] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0045.301] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1035", cAlternateFileName="")) returned 1 [0045.301] GetProcessHeap () returned 0x120000 [0045.301] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0045.301] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139dc0 [0045.302] FindNextFileW (in: hFindFile=0x139dc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.303] FindNextFileW (in: hFindFile=0x139dc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe76, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0045.303] FindNextFileW (in: hFindFile=0x139dc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12cde, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0045.303] FindNextFileW (in: hFindFile=0x139dc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0045.303] FindNextFileW (in: hFindFile=0x139dc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0045.303] FindClose (in: hFindFile=0x139dc0 | out: hFindFile=0x139dc0) returned 1 [0045.303] GetProcessHeap () returned 0x120000 [0045.303] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0045.303] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1036", cAlternateFileName="")) returned 1 [0045.303] GetProcessHeap () returned 0x120000 [0045.303] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0045.303] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b80 [0045.513] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.515] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0045.518] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x14412, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0045.519] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0045.528] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0045.529] FindClose (in: hFindFile=0x139b80 | out: hFindFile=0x139b80) returned 1 [0045.532] GetProcessHeap () returned 0x120000 [0045.532] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0045.535] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1037", cAlternateFileName="")) returned 1 [0045.538] GetProcessHeap () returned 0x120000 [0045.538] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.540] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139cc0 [0045.540] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.541] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0045.541] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1198c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0045.541] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0045.541] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0045.541] FindClose (in: hFindFile=0x139cc0 | out: hFindFile=0x139cc0) returned 1 [0045.541] GetProcessHeap () returned 0x120000 [0045.541] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.541] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1038", cAlternateFileName="")) returned 1 [0045.541] GetProcessHeap () returned 0x120000 [0045.541] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.541] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139cc0 [0045.541] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.541] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x109e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0045.541] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x151aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0045.541] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0045.542] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0045.542] FindClose (in: hFindFile=0x139cc0 | out: hFindFile=0x139cc0) returned 1 [0045.542] GetProcessHeap () returned 0x120000 [0045.542] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.542] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1040", cAlternateFileName="")) returned 1 [0045.542] GetProcessHeap () returned 0x120000 [0045.542] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.542] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139cc0 [0045.542] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.542] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0045.542] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x138bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0045.542] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0045.542] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0045.542] FindClose (in: hFindFile=0x139cc0 | out: hFindFile=0x139cc0) returned 1 [0045.542] GetProcessHeap () returned 0x120000 [0045.542] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.542] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1041", cAlternateFileName="")) returned 1 [0045.542] GetProcessHeap () returned 0x120000 [0045.542] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.543] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139cc0 [0045.543] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.543] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x278d, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0045.543] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x10a82, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0045.543] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0045.543] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0045.543] FindClose (in: hFindFile=0x139cc0 | out: hFindFile=0x139cc0) returned 1 [0045.543] GetProcessHeap () returned 0x120000 [0045.543] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.543] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1042", cAlternateFileName="")) returned 1 [0045.543] GetProcessHeap () returned 0x120000 [0045.543] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.543] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d80 [0045.543] FindNextFileW (in: hFindFile=0x139d80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.543] FindNextFileW (in: hFindFile=0x139d80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x318f, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0045.544] FindNextFileW (in: hFindFile=0x139d80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xfed6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0045.544] FindNextFileW (in: hFindFile=0x139d80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0045.544] FindNextFileW (in: hFindFile=0x139d80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0045.544] FindClose (in: hFindFile=0x139d80 | out: hFindFile=0x139d80) returned 1 [0045.544] GetProcessHeap () returned 0x120000 [0045.544] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.544] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1043", cAlternateFileName="")) returned 1 [0045.544] GetProcessHeap () returned 0x120000 [0045.544] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.544] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139cc0 [0045.544] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.544] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdda, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0045.544] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13712, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0045.544] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0045.544] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0045.544] FindClose (in: hFindFile=0x139cc0 | out: hFindFile=0x139cc0) returned 1 [0045.545] GetProcessHeap () returned 0x120000 [0045.545] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.545] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1044", cAlternateFileName="")) returned 1 [0045.545] GetProcessHeap () returned 0x120000 [0045.545] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.545] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139cc0 [0045.545] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.545] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0045.545] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x135c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0045.545] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0045.545] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0045.545] FindClose (in: hFindFile=0x139cc0 | out: hFindFile=0x139cc0) returned 1 [0045.546] GetProcessHeap () returned 0x120000 [0045.546] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.546] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1045", cAlternateFileName="")) returned 1 [0045.546] GetProcessHeap () returned 0x120000 [0045.546] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.546] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139cc0 [0045.546] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.546] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0045.546] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0045.546] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0045.546] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0045.546] FindClose (in: hFindFile=0x139cc0 | out: hFindFile=0x139cc0) returned 1 [0045.546] GetProcessHeap () returned 0x120000 [0045.546] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.546] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1046", cAlternateFileName="")) returned 1 [0045.546] GetProcessHeap () returned 0x120000 [0045.546] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.546] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139cc0 [0045.546] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.547] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe63, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0045.547] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13b62, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0045.547] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0045.547] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0045.547] FindClose (in: hFindFile=0x139cc0 | out: hFindFile=0x139cc0) returned 1 [0045.547] GetProcessHeap () returned 0x120000 [0045.547] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.547] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1049", cAlternateFileName="")) returned 1 [0045.547] GetProcessHeap () returned 0x120000 [0045.547] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.547] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139cc0 [0045.547] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.547] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0045.547] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13e4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0045.547] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0045.548] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0045.548] FindClose (in: hFindFile=0x139cc0 | out: hFindFile=0x139cc0) returned 1 [0045.548] GetProcessHeap () returned 0x120000 [0045.548] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.548] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1053", cAlternateFileName="")) returned 1 [0045.548] GetProcessHeap () returned 0x120000 [0045.548] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.548] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d80 [0045.548] FindNextFileW (in: hFindFile=0x139d80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.548] FindNextFileW (in: hFindFile=0x139d80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf19, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0045.548] FindNextFileW (in: hFindFile=0x139d80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0045.548] FindNextFileW (in: hFindFile=0x139d80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0045.548] FindNextFileW (in: hFindFile=0x139d80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0045.548] FindClose (in: hFindFile=0x139d80 | out: hFindFile=0x139d80) returned 1 [0045.548] GetProcessHeap () returned 0x120000 [0045.548] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.548] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1055", cAlternateFileName="")) returned 1 [0045.548] GetProcessHeap () returned 0x120000 [0045.548] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.548] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139cc0 [0045.549] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.549] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf13, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0045.549] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12c12, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0045.549] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0045.549] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0045.549] FindClose (in: hFindFile=0x139cc0 | out: hFindFile=0x139cc0) returned 1 [0045.549] GetProcessHeap () returned 0x120000 [0045.549] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.549] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="2052", cAlternateFileName="")) returned 1 [0045.549] GetProcessHeap () returned 0x120000 [0045.549] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.549] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139cc0 [0045.549] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.549] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x16c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0045.549] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0045.550] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0045.550] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0045.550] FindClose (in: hFindFile=0x139cc0 | out: hFindFile=0x139cc0) returned 1 [0045.550] GetProcessHeap () returned 0x120000 [0045.550] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.550] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="2070", cAlternateFileName="")) returned 1 [0045.550] GetProcessHeap () returned 0x120000 [0045.550] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.550] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d00 [0045.550] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.550] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0045.550] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1397e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0045.550] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0045.550] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0045.550] FindClose (in: hFindFile=0x139d00 | out: hFindFile=0x139d00) returned 1 [0045.550] GetProcessHeap () returned 0x120000 [0045.550] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.550] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="3076", cAlternateFileName="")) returned 1 [0045.551] GetProcessHeap () returned 0x120000 [0045.551] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.551] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139cc0 [0045.551] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.551] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0045.551] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0045.551] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0045.551] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0045.551] FindClose (in: hFindFile=0x139cc0 | out: hFindFile=0x139cc0) returned 1 [0045.551] GetProcessHeap () returned 0x120000 [0045.551] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.551] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="3082", cAlternateFileName="")) returned 1 [0045.551] GetProcessHeap () returned 0x120000 [0045.551] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.551] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139cc0 [0045.551] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.551] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0045.551] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1387c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0045.552] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0045.552] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0045.552] FindClose (in: hFindFile=0x139cc0 | out: hFindFile=0x139cc0) returned 1 [0045.552] GetProcessHeap () returned 0x120000 [0045.552] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.552] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Client", cAlternateFileName="")) returned 1 [0045.552] GetProcessHeap () returned 0x120000 [0045.552] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.552] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139cc0 [0045.552] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.552] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce2bc00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0xce2bc00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0xce2bc00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x31444, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0045.552] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0045.552] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 0 [0045.552] FindClose (in: hFindFile=0x139cc0 | out: hFindFile=0x139cc0) returned 1 [0045.552] GetProcessHeap () returned 0x120000 [0045.552] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.552] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbc518d00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbc518d00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbc518d00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3ef6, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="DHtmlHeader.html", cAlternateFileName="DHTMLH~1.HTM")) returned 1 [0045.553] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x159d5, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="DisplayIcon.ico", cAlternateFileName="DISPLA~1.ICO")) returned 1 [0045.553] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Extended", cAlternateFileName="")) returned 1 [0045.553] GetProcessHeap () returned 0x120000 [0045.553] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.553] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139cc0 [0045.553] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.553] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2a714f00, ftCreationTime.dwHighDateTime=0x1cac6f0, ftLastAccessTime.dwLowDateTime=0x2a714f00, ftLastAccessTime.dwHighDateTime=0x1cac6f0, ftLastWriteTime.dwLowDateTime=0x2a714f00, ftLastWriteTime.dwHighDateTime=0x1cac6f0, nFileSizeHigh=0x0, nFileSizeLow=0x16c82, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0045.553] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0045.553] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 0 [0045.553] FindClose (in: hFindFile=0x139cc0 | out: hFindFile=0x139cc0) returned 1 [0045.553] GetProcessHeap () returned 0x120000 [0045.553] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.553] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Graphics", cAlternateFileName="")) returned 1 [0045.553] GetProcessHeap () returned 0x120000 [0045.553] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.553] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d80 [0045.554] FindNextFileW (in: hFindFile=0x139d80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.554] FindNextFileW (in: hFindFile=0x139d80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Print.ico", cAlternateFileName="")) returned 1 [0045.554] FindNextFileW (in: hFindFile=0x139d80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate1.ico", cAlternateFileName="")) returned 1 [0045.554] FindNextFileW (in: hFindFile=0x139d80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate2.ico", cAlternateFileName="")) returned 1 [0045.554] FindNextFileW (in: hFindFile=0x139d80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate3.ico", cAlternateFileName="")) returned 1 [0045.555] FindNextFileW (in: hFindFile=0x139d80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate4.ico", cAlternateFileName="")) returned 1 [0045.555] FindNextFileW (in: hFindFile=0x139d80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate5.ico", cAlternateFileName="")) returned 1 [0045.555] FindNextFileW (in: hFindFile=0x139d80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate6.ico", cAlternateFileName="")) returned 1 [0045.555] FindNextFileW (in: hFindFile=0x139d80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate7.ico", cAlternateFileName="")) returned 1 [0045.555] FindNextFileW (in: hFindFile=0x139d80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate8.ico", cAlternateFileName="")) returned 1 [0045.555] FindNextFileW (in: hFindFile=0x139d80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Save.ico", cAlternateFileName="")) returned 1 [0045.555] FindNextFileW (in: hFindFile=0x139d80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x8f66, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.ico", cAlternateFileName="")) returned 1 [0045.555] FindNextFileW (in: hFindFile=0x139d80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b5e7f00, ftCreationTime.dwHighDateTime=0x1ca927c, ftLastAccessTime.dwLowDateTime=0x5b5e7f00, ftLastAccessTime.dwHighDateTime=0x1ca927c, ftLastWriteTime.dwLowDateTime=0x5b5e7f00, ftLastWriteTime.dwHighDateTime=0x1ca927c, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="stop.ico", cAlternateFileName="")) returned 1 [0045.555] FindNextFileW (in: hFindFile=0x139d80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqMet.ico", cAlternateFileName="SYSREQ~1.ICO")) returned 1 [0045.555] FindNextFileW (in: hFindFile=0x139d80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqNotMet.ico", cAlternateFileName="SYSREQ~2.ICO")) returned 1 [0045.556] FindNextFileW (in: hFindFile=0x139d80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 1 [0045.556] FindNextFileW (in: hFindFile=0x139d80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 0 [0045.556] FindClose (in: hFindFile=0x139d80 | out: hFindFile=0x139d80) returned 1 [0045.556] GetProcessHeap () returned 0x120000 [0045.556] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.556] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0xe2c, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="header.bmp", cAlternateFileName="")) returned 1 [0045.556] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x66ea7e00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0xad1384b, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Core.mzz", cAlternateFileName="NETFX_~1.MZZ")) returned 1 [0045.557] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xc183da00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0x1d0200, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Core_x64.msi", cAlternateFileName="NETFX_~1.MSI")) returned 1 [0045.557] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4c130c00, ftCreationTime.dwHighDateTime=0x1cac6d9, ftLastAccessTime.dwLowDateTime=0x4c130c00, ftLastAccessTime.dwHighDateTime=0x1cac6d9, ftLastWriteTime.dwLowDateTime=0x4c130c00, ftLastWriteTime.dwHighDateTime=0x1cac6d9, nFileSizeHigh=0x0, nFileSizeLow=0x11c000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Core_x86.msi", cAlternateFileName="NETFX_~2.MSI")) returned 1 [0045.557] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf7cd9415, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x29222c7, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Extended.mzz", cAlternateFileName="NETFX_~2.MZZ")) returned 1 [0045.557] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2dbe0800, ftCreationTime.dwHighDateTime=0x1cac6fb, ftLastAccessTime.dwLowDateTime=0x2dbe0800, ftLastAccessTime.dwHighDateTime=0x1cac6fb, ftLastWriteTime.dwLowDateTime=0x2dbe0800, ftLastWriteTime.dwHighDateTime=0x1cac6fb, nFileSizeHigh=0x0, nFileSizeLow=0xd5000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Extended_x64.msi", cAlternateFileName="NETFX_~3.MSI")) returned 1 [0045.557] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x7626f700, ftCreationTime.dwHighDateTime=0x1cac6f6, ftLastAccessTime.dwLowDateTime=0x7626f700, ftLastAccessTime.dwHighDateTime=0x1cac6f6, ftLastWriteTime.dwLowDateTime=0x7626f700, ftLastWriteTime.dwHighDateTime=0x1cac6f6, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Extended_x86.msi", cAlternateFileName="NETFX_~4.MSI")) returned 1 [0045.557] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4a0f7400, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x4a0f7400, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x4a0f7400, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x426ae, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="ParameterInfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0045.557] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x19dedd00, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x19dedd00, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x19dedd00, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d200, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="RGB9RAST_x64.msi", cAlternateFileName="RGB9RA~1.MSI")) returned 1 [0045.557] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x177c8300, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x177c8300, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x177c8300, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x17200, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="RGB9Rast_x86.msi", cAlternateFileName="RGB9RA~2.MSI")) returned 1 [0045.557] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x13148, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Setup.exe", cAlternateFileName="")) returned 1 [0045.558] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0xc5158, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SetupEngine.dll", cAlternateFileName="SETUPE~1.DLL")) returned 1 [0045.558] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x48150, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SetupUi.dll", cAlternateFileName="")) returned 1 [0045.558] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5381000, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x5381000, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x5381000, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x75a8, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SetupUi.xsd", cAlternateFileName="")) returned 1 [0045.558] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6519be00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0x6519be00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0x6519be00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x17758, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SetupUtility.exe", cAlternateFileName="SETUPU~1.EXE")) returned 1 [0045.558] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0xa078, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SplashScreen.bmp", cAlternateFileName="SPLASH~1.BMP")) returned 1 [0045.558] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x143bc400, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0x143bc400, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x143bc400, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x23420, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0045.558] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3704, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Strings.xml", cAlternateFileName="")) returned 1 [0045.558] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x97f2, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0045.558] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0x19688, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="watermark.bmp", cAlternateFileName="WATERM~1.BMP")) returned 1 [0045.558] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0x2120bc00, ftLastWriteTime.dwHighDateTime=0x1cac6c9, nFileSizeHigh=0x0, nFileSizeLow=0x4f5113, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows6.0-KB956250-v6001-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0045.558] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0x1bbe7400, ftLastWriteTime.dwHighDateTime=0x1cac6bf, nFileSizeHigh=0x0, nFileSizeLow=0x217520, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows6.0-KB956250-v6001-x86.msu", cAlternateFileName="WINDOW~2.MSU")) returned 1 [0045.559] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0x5b8e5700, ftLastWriteTime.dwHighDateTime=0x1cac6d1, nFileSizeHigh=0x0, nFileSizeLow=0x4db1ce, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows6.1-KB958488-v6001-x64.msu", cAlternateFileName="WINDOW~3.MSU")) returned 1 [0045.559] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 1 [0045.559] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 0 [0045.559] FindClose (in: hFindFile=0x139880 | out: hFindFile=0x139880) returned 1 [0045.559] GetProcessHeap () returned 0x120000 [0045.559] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x16fdf0 | out: hHeap=0x120000) returned 1 [0045.559] FindNextFileW (in: hFindFile=0x139c80, lpFindFileData=0x113f868 | out: lpFindFileData=0x113f868*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6fa258, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1149735, dwReserved1=0x745f9fc4, cFileName="Boot", cAlternateFileName="")) returned 1 [0045.559] GetProcessHeap () returned 0x120000 [0045.560] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x16fdf0 [0045.560] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\*", lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x139cc0 [0045.560] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0045.560] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xac3efa99, ftLastAccessTime.dwHighDateTime=0x1d4d5d3, ftLastWriteTime.dwLowDateTime=0xac3efa99, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="BCD", cAlternateFileName="")) returned 1 [0045.560] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0045.560] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0045.560] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0045.560] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0045.560] GetProcessHeap () returned 0x120000 [0045.561] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.561] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\bg-BG\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d00 [0045.561] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.561] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0045.561] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0045.561] FindClose (in: hFindFile=0x139d00 | out: hFindFile=0x139d00) returned 1 [0045.561] GetProcessHeap () returned 0x120000 [0045.561] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.561] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4e6d79, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef4e6d79, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x175a0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="bootspaces.dll", cAlternateFileName="BOOTSP~1.DLL")) returned 1 [0045.562] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xef703e94, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0045.562] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef4fcd12, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x185a0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="bootvhd.dll", cAlternateFileName="")) returned 1 [0045.562] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0045.562] GetProcessHeap () returned 0x120000 [0045.562] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.562] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139e40 [0045.562] GetProcessHeap () returned 0x120000 [0045.562] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.562] GetProcessHeap () returned 0x120000 [0045.562] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.562] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\da-DK\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139880 [0045.563] GetProcessHeap () returned 0x120000 [0045.563] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.563] GetProcessHeap () returned 0x120000 [0045.563] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.563] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\de-DE\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d00 [0045.563] GetProcessHeap () returned 0x120000 [0045.563] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.563] GetProcessHeap () returned 0x120000 [0045.563] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.563] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\el-GR\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d00 [0045.564] GetProcessHeap () returned 0x120000 [0045.564] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.564] GetProcessHeap () returned 0x120000 [0045.564] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.564] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\en-GB\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139880 [0045.564] GetProcessHeap () returned 0x120000 [0045.565] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.565] GetProcessHeap () returned 0x120000 [0045.565] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.565] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\en-US\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139880 [0045.565] GetProcessHeap () returned 0x120000 [0045.565] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.565] GetProcessHeap () returned 0x120000 [0045.565] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.565] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\es-ES\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139880 [0045.566] GetProcessHeap () returned 0x120000 [0045.566] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.566] GetProcessHeap () returned 0x120000 [0045.566] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.566] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\es-MX\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d00 [0045.566] GetProcessHeap () returned 0x120000 [0045.566] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.566] GetProcessHeap () returned 0x120000 [0045.566] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.566] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\et-EE\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139880 [0045.567] GetProcessHeap () returned 0x120000 [0045.567] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.567] GetProcessHeap () returned 0x120000 [0045.567] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.567] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fi-FI\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d00 [0045.567] GetProcessHeap () returned 0x120000 [0045.568] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.568] GetProcessHeap () returned 0x120000 [0045.568] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.568] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Fonts\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d00 [0045.571] GetProcessHeap () returned 0x120000 [0045.571] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.571] GetProcessHeap () returned 0x120000 [0045.571] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.571] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fr-CA\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d00 [0045.571] GetProcessHeap () returned 0x120000 [0045.571] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.571] GetProcessHeap () returned 0x120000 [0045.572] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.572] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fr-FR\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139880 [0045.572] GetProcessHeap () returned 0x120000 [0045.572] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.572] GetProcessHeap () returned 0x120000 [0045.572] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.572] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\hr-HR\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d00 [0045.755] GetProcessHeap () returned 0x120000 [0045.755] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.757] GetProcessHeap () returned 0x120000 [0045.757] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.759] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\hu-HU\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139880 [0045.765] GetProcessHeap () returned 0x120000 [0045.769] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.769] GetProcessHeap () returned 0x120000 [0045.770] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.771] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\it-IT\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139880 [0045.772] GetProcessHeap () returned 0x120000 [0045.772] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.772] GetProcessHeap () returned 0x120000 [0045.772] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.772] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ja-JP\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139880 [0045.772] GetProcessHeap () returned 0x120000 [0045.772] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.772] GetProcessHeap () returned 0x120000 [0045.772] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.772] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ko-KR\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b80 [0045.772] GetProcessHeap () returned 0x120000 [0045.772] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.773] GetProcessHeap () returned 0x120000 [0045.773] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.773] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\lt-LT\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139e40 [0045.773] GetProcessHeap () returned 0x120000 [0045.773] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.773] GetProcessHeap () returned 0x120000 [0045.773] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.773] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\lv-LV\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b80 [0045.773] GetProcessHeap () returned 0x120000 [0045.773] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.773] GetProcessHeap () returned 0x120000 [0045.773] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.773] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\nb-NO\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0045.773] GetProcessHeap () returned 0x120000 [0045.773] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.773] GetProcessHeap () returned 0x120000 [0045.773] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.773] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\nl-NL\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d00 [0045.773] GetProcessHeap () returned 0x120000 [0045.773] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.773] GetProcessHeap () returned 0x120000 [0045.774] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.774] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pl-PL\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139880 [0045.774] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0045.774] FindClose (in: hFindFile=0x139880 | out: hFindFile=0x139880) returned 1 [0045.774] GetProcessHeap () returned 0x120000 [0045.774] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.774] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0045.774] GetProcessHeap () returned 0x120000 [0045.774] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.774] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pt-BR\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d00 [0045.774] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.774] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0045.774] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65dc94, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0045.774] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65dc94, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0045.774] FindClose (in: hFindFile=0x139d00 | out: hFindFile=0x139d00) returned 1 [0045.774] GetProcessHeap () returned 0x120000 [0045.775] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.775] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0045.775] GetProcessHeap () returned 0x120000 [0045.775] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.775] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pt-PT\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d80 [0045.775] FindNextFileW (in: hFindFile=0x139d80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.775] FindNextFileW (in: hFindFile=0x139d80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0045.775] FindNextFileW (in: hFindFile=0x139d80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6714dc, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0045.775] FindNextFileW (in: hFindFile=0x139d80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6714dc, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0045.775] FindClose (in: hFindFile=0x139d80 | out: hFindFile=0x139d80) returned 1 [0045.775] GetProcessHeap () returned 0x120000 [0045.775] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.775] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="qps-ploc", cAlternateFileName="")) returned 1 [0045.775] GetProcessHeap () returned 0x120000 [0045.775] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.775] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d00 [0045.775] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.775] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12160, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0045.775] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef684d85, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbd1a998, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xd398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0045.776] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef684d85, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbd1a998, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xd398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0045.776] FindClose (in: hFindFile=0x139d00 | out: hFindFile=0x139d00) returned 1 [0045.776] GetProcessHeap () returned 0x120000 [0045.776] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.776] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1 [0045.776] GetProcessHeap () returned 0x120000 [0045.776] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.776] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Resources\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b80 [0045.776] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.776] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9abff9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef597530, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x169a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootres.dll", cAlternateFileName="")) returned 1 [0045.776] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0045.776] GetProcessHeap () returned 0x120000 [0045.776] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0045.776] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Resources\\en-US\\*", lpFindFileData=0x113f0b8 | out: lpFindFileData=0x113f0b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d00 [0045.777] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113f0b8 | out: lpFindFileData=0x113f0b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.777] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113f0b8 | out: lpFindFileData=0x113f0b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9baa67, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31acad58, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootres.dll.mui", cAlternateFileName="BOOTRE~1.MUI")) returned 1 [0045.777] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113f0b8 | out: lpFindFileData=0x113f0b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9baa67, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31acad58, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootres.dll.mui", cAlternateFileName="BOOTRE~1.MUI")) returned 0 [0045.777] FindClose (in: hFindFile=0x139d00 | out: hFindFile=0x139d00) returned 1 [0045.777] GetProcessHeap () returned 0x120000 [0045.777] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0045.777] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0045.777] FindClose (in: hFindFile=0x139b80 | out: hFindFile=0x139b80) returned 1 [0045.777] GetProcessHeap () returned 0x120000 [0045.777] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.777] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="ro-RO", cAlternateFileName="")) returned 1 [0045.778] GetProcessHeap () returned 0x120000 [0045.778] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.778] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ro-RO\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b80 [0045.778] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.778] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0045.778] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0045.778] FindClose (in: hFindFile=0x139b80 | out: hFindFile=0x139b80) returned 1 [0045.778] GetProcessHeap () returned 0x120000 [0045.778] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.778] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0045.778] GetProcessHeap () returned 0x120000 [0045.778] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.778] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ru-RU\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139880 [0045.778] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.779] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0045.779] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0045.779] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0045.779] FindClose (in: hFindFile=0x139880 | out: hFindFile=0x139880) returned 1 [0045.779] GetProcessHeap () returned 0x120000 [0045.779] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.779] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="sk-SK", cAlternateFileName="")) returned 1 [0045.779] GetProcessHeap () returned 0x120000 [0045.779] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.779] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sk-SK\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d00 [0045.779] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.779] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0045.779] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0045.779] FindClose (in: hFindFile=0x139d00 | out: hFindFile=0x139d00) returned 1 [0045.780] GetProcessHeap () returned 0x120000 [0045.780] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.780] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="sl-SI", cAlternateFileName="")) returned 1 [0045.780] GetProcessHeap () returned 0x120000 [0045.780] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.780] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sl-SI\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139880 [0045.780] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.780] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0045.780] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0045.780] FindClose (in: hFindFile=0x139880 | out: hFindFile=0x139880) returned 1 [0045.780] GetProcessHeap () returned 0x120000 [0045.780] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.780] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1 [0045.780] GetProcessHeap () returned 0x120000 [0045.780] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.780] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139880 [0045.780] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.780] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0045.780] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe318f070, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xaf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0045.781] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe318f070, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xaf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0045.781] FindClose (in: hFindFile=0x139880 | out: hFindFile=0x139880) returned 1 [0045.781] GetProcessHeap () returned 0x120000 [0045.781] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.781] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~2")) returned 1 [0045.781] GetProcessHeap () returned 0x120000 [0045.781] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.781] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sr-Latn-RS\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0045.781] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.781] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0045.781] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0045.781] FindClose (in: hFindFile=0x139ec0 | out: hFindFile=0x139ec0) returned 1 [0045.781] GetProcessHeap () returned 0x120000 [0045.781] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.781] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0045.781] GetProcessHeap () returned 0x120000 [0045.781] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.781] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sv-SE\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d00 [0045.781] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.781] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0045.782] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6a2250, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf98, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0045.782] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6a2250, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf98, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0045.782] FindClose (in: hFindFile=0x139d00 | out: hFindFile=0x139d00) returned 1 [0045.782] GetProcessHeap () returned 0x120000 [0045.782] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.782] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0045.782] GetProcessHeap () returned 0x120000 [0045.782] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.782] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\tr-TR\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139e40 [0045.782] FindNextFileW (in: hFindFile=0x139e40, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.782] FindNextFileW (in: hFindFile=0x139e40, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12558, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0045.782] FindNextFileW (in: hFindFile=0x139e40, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6b5aca, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f4373a, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0045.782] FindNextFileW (in: hFindFile=0x139e40, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6b5aca, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f4373a, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0045.782] FindClose (in: hFindFile=0x139e40 | out: hFindFile=0x139e40) returned 1 [0045.782] GetProcessHeap () returned 0x120000 [0045.782] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.782] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="uk-UA", cAlternateFileName="")) returned 1 [0045.783] GetProcessHeap () returned 0x120000 [0045.783] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.783] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\uk-UA\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139e80 [0045.783] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.783] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0045.783] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0045.783] FindClose (in: hFindFile=0x139e80 | out: hFindFile=0x139e80) returned 1 [0045.783] GetProcessHeap () returned 0x120000 [0045.783] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.783] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef6c9427, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef6c9427, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1236, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="updaterevokesipolicy.p7b", cAlternateFileName="UPDATE~1.P7B")) returned 1 [0045.783] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0045.783] GetProcessHeap () returned 0x120000 [0045.783] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.783] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-CN\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139880 [0045.783] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.783] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0045.783] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6d7e9a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0045.784] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6d7e9a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0045.784] FindClose (in: hFindFile=0x139880 | out: hFindFile=0x139880) returned 1 [0045.784] GetProcessHeap () returned 0x120000 [0045.784] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.784] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0045.784] GetProcessHeap () returned 0x120000 [0045.784] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.784] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-HK\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b80 [0045.784] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.784] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf958, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0045.784] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x518ea25e, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe31db522, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xa558, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0045.784] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x518ea25e, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe31db522, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xa558, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0045.784] FindClose (in: hFindFile=0x139b80 | out: hFindFile=0x139b80) returned 1 [0045.784] GetProcessHeap () returned 0x120000 [0045.784] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.784] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0045.784] GetProcessHeap () returned 0x120000 [0045.784] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.784] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-TW\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b80 [0045.784] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.785] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0045.785] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa598, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0045.785] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa598, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0045.785] FindClose (in: hFindFile=0x139b80 | out: hFindFile=0x139b80) returned 1 [0045.785] GetProcessHeap () returned 0x120000 [0045.785] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.785] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0045.785] FindClose (in: hFindFile=0x139cc0 | out: hFindFile=0x139cc0) returned 1 [0045.785] GetProcessHeap () returned 0x120000 [0045.785] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x16fdf0 | out: hHeap=0x120000) returned 1 [0045.785] FindNextFileW (in: hFindFile=0x139c80, lpFindFileData=0x113f868 | out: lpFindFileData=0x113f868*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xe47a48a8, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfb90936b, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0x607da, dwReserved0=0x1149735, dwReserved1=0x745f9fc4, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0045.785] FindNextFileW (in: hFindFile=0x139c80, lpFindFileData=0x113f868 | out: lpFindFileData=0x113f868*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5533ee0, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef9d0a0c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x1149735, dwReserved1=0x745f9fc4, cFileName="BOOTNXT", cAlternateFileName="")) returned 1 [0045.785] FindNextFileW (in: hFindFile=0x139c80, lpFindFileData=0x113f868 | out: lpFindFileData=0x113f868*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xc4ee267e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4ee267e, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xf1c63cdd, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x1149735, dwReserved1=0x745f9fc4, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0045.786] FindNextFileW (in: hFindFile=0x139c80, lpFindFileData=0x113f868 | out: lpFindFileData=0x113f868*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x745f9fc4, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0045.786] FindNextFileW (in: hFindFile=0x139c80, lpFindFileData=0x113f868 | out: lpFindFileData=0x113f868*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x745f9fc4, cFileName="ESD", cAlternateFileName="")) returned 1 [0045.786] GetProcessHeap () returned 0x120000 [0045.786] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.786] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ESD\\*", lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x139b80 [0045.786] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0045.786] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 0 [0045.786] FindClose (in: hFindFile=0x139b80 | out: hFindFile=0x139b80) returned 1 [0045.786] GetProcessHeap () returned 0x120000 [0045.786] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.786] FindNextFileW (in: hFindFile=0x139c80, lpFindFileData=0x113f868 | out: lpFindFileData=0x113f868*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x7ef2dddf, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x7ef2dddf, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3d7ebe9, ftLastWriteTime.dwHighDateTime=0x1d4d600, nFileSizeHigh=0x0, nFileSizeLow=0x332fe000, dwReserved0=0xa0000003, dwReserved1=0x745f9fc4, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0045.786] FindNextFileW (in: hFindFile=0x139c80, lpFindFileData=0x113f868 | out: lpFindFileData=0x113f868*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x745f9fc4, cFileName="Logs", cAlternateFileName="")) returned 1 [0045.786] GetProcessHeap () returned 0x120000 [0045.786] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.786] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Logs\\*", lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x139880 [0046.019] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0046.033] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5052fa31, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5052fa31, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Application.evtx", cAlternateFileName="APPLIC~1.EVT")) returned 1 [0046.033] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505ee5f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505ee5f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="HardwareEvents.evtx", cAlternateFileName="HARDWA~1.EVT")) returned 1 [0046.033] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505a2134, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505a2134, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Internet Explorer.evtx", cAlternateFileName="INTERN~1.EVT")) returned 1 [0046.033] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5057bed8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5057bed8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Key Management Service.evtx", cAlternateFileName="KEYMAN~1.EVT")) returned 1 [0046.033] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1dbd7c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1dbd7c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Client-Licensing-Platform%4Admin.evtx", cAlternateFileName="MICROS~1.EVT")) returned 1 [0046.033] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5d836e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5d836e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx", cAlternateFileName="MICROS~2.EVT")) returned 1 [0046.033] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9206ac5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9206ac5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9c0f529, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx", cAlternateFileName="MICROS~3.EVT")) returned 1 [0046.033] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppLocker%4EXE and DLL.evtx", cAlternateFileName="MICROS~4.EVT")) returned 1 [0046.033] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4169a7a, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4169a7a, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppLocker%4MSI and Script.evtx", cAlternateFileName="MI2EEA~1.EVT")) returned 1 [0046.034] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx", cAlternateFileName="MI07E1~1.EVT")) returned 1 [0046.034] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx", cAlternateFileName="MI8196~1.EVT")) returned 1 [0046.034] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd41b5f2d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd41b5f2d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppModel-Runtime%4Admin.evtx", cAlternateFileName="MIE36C~1.EVT")) returned 1 [0046.034] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd389efbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd389efbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppReadiness%4Admin.evtx", cAlternateFileName="MIC5CB~1.EVT")) returned 1 [0046.034] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd38c5212, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd38c5212, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppReadiness%4Operational.evtx", cAlternateFileName="MIF8AA~1.EVT")) returned 1 [0046.034] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppXDeployment%4Operational.evtx", cAlternateFileName="MI34FE~1.EVT")) returned 1 [0046.034] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x211000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppXDeploymentServer%4Operational.evtx", cAlternateFileName="MIA24C~1.EVT")) returned 1 [0046.034] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx", cAlternateFileName="MIDBEC~1.EVT")) returned 1 [0046.034] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85798667, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x85798667, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppxPackaging%4Operational.evtx", cAlternateFileName="MI54F1~1.EVT")) returned 1 [0046.035] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74d25ab, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74d25ab, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx", cAlternateFileName="MI111F~1.EVT")) returned 1 [0046.035] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f96ca4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe1f96ca4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Bits-Client%4Operational.evtx", cAlternateFileName="MI9465~1.EVT")) returned 1 [0046.035] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8783aa15, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8783aa15, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-CodeIntegrity%4Operational.evtx", cAlternateFileName="MI03A7~1.EVT")) returned 1 [0046.035] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3c71c5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3c71c5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx", cAlternateFileName="MI5CA2~1.EVT")) returned 1 [0046.035] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx", cAlternateFileName="MI5FD1~1.EVT")) returned 1 [0046.035] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Crypto-DPAPI%4Operational.evtx", cAlternateFileName="MI8BDF~1.EVT")) returned 1 [0046.035] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3ed420, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3ed420, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx", cAlternateFileName="MIAEBD~1.EVT")) returned 1 [0046.035] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cef47f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cef47f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-DeviceSetupManager%4Admin.evtx", cAlternateFileName="MIA726~1.EVT")) returned 1 [0046.036] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-DeviceSetupManager%4Operational.evtx", cAlternateFileName="MI08CB~1.EVT")) returned 1 [0046.036] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc967f17e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc967f17e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Dhcp-Client%4Admin.evtx", cAlternateFileName="MI8270~1.EVT")) returned 1 [0046.036] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc96cb64b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc96cb64b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Dhcpv6-Client%4Admin.evtx", cAlternateFileName="MIEBFF~1.EVT")) returned 1 [0046.036] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64aa7b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca64aa7b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Diagnosis-DPS%4Operational.evtx", cAlternateFileName="MI9F85~1.EVT")) returned 1 [0046.036] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd9ec80, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xfd9ec80, ftLastAccessTime.dwHighDateTime=0x1d1a04f, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Diagnostics-Performance%4Operational.evtx", cAlternateFileName="MIBE3D~1.EVT")) returned 1 [0046.036] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9658ef3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9658ef3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-GroupPolicy%4Operational.evtx", cAlternateFileName="MIE38D~1.EVT")) returned 1 [0046.036] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9dcc480, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9dcc480, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-HotspotAuth%4Operational.evtx", cAlternateFileName="MIE386~1.EVT")) returned 1 [0046.036] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b4bacf, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b4bacf, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx", cAlternateFileName="MI6B25~1.EVT")) returned 1 [0046.036] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb66288f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-International%4Operational.evtx", cAlternateFileName="MI854A~1.EVT")) returned 1 [0046.036] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x506ad1ac, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x506ad1ac, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Kernel-Boot%4Operational.evtx", cAlternateFileName="MI32CE~1.EVT")) returned 1 [0046.037] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Kernel-EventTracing%4Admin.evtx", cAlternateFileName="MIA934~1.EVT")) returned 1 [0046.037] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5071f8b0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5071f8b0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Kernel-PnP%4Configuration.evtx", cAlternateFileName="MIB32D~1.EVT")) returned 1 [0046.037] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8ebf6d7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc8ebf6d7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx", cAlternateFileName="MICA77~1.EVT")) returned 1 [0046.037] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5090f75d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5090f75d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx", cAlternateFileName="MI1E8D~1.EVT")) returned 1 [0046.037] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd75102f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd75102f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx", cAlternateFileName="MID067~1.EVT")) returned 1 [0046.037] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Kernel-WHEA%4Errors.evtx", cAlternateFileName="MIDE4D~1.EVT")) returned 1 [0046.037] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Kernel-WHEA%4Operational.evtx", cAlternateFileName="MI36C5~1.EVT")) returned 1 [0046.038] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59547c37, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x59547c37, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Known Folders API Service.evtx", cAlternateFileName="MI86D6~1.EVT")) returned 1 [0046.038] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb7386e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbb7386e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-LiveId%4Operational.evtx", cAlternateFileName="MI4C58~1.EVT")) returned 1 [0046.038] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93d06f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93d06f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-MUI%4Admin.evtx", cAlternateFileName="MI30D3~1.EVT")) returned 1 [0046.038] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93aa49b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93aa49b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-MUI%4Operational.evtx", cAlternateFileName="MI6F01~1.EVT")) returned 1 [0046.038] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9d33b19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9d33b19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-NCSI%4Operational.evtx", cAlternateFileName="MI483C~1.EVT")) returned 1 [0046.038] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbcf0ff2, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbcf0ff2, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-NetworkProfile%4Operational.evtx", cAlternateFileName="MIFC66~1.EVT")) returned 1 [0046.038] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ab3154, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ab3154, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Ntfs%4Operational.evtx", cAlternateFileName="MI6E98~1.EVT")) returned 1 [0046.038] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ad9393, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ad9393, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Ntfs%4WHC.evtx", cAlternateFileName="MIB2AC~1.EVT")) returned 1 [0046.038] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5fe5cb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5fe5cb, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx", cAlternateFileName="MI6AFE~1.EVT")) returned 1 [0046.039] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe24cdef0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe24cdef0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-ReadyBoost%4Operational.evtx", cAlternateFileName="MIB9D2~1.EVT")) returned 1 [0046.039] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd125335f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd125335f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx", cAlternateFileName="MI7A67~1.EVT")) returned 1 [0046.039] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-SettingSync%4Debug.evtx", cAlternateFileName="MI3773~1.EVT")) returned 1 [0046.039] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-SettingSync%4Operational.evtx", cAlternateFileName="MI36AA~1.EVT")) returned 1 [0046.039] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Shell-Core%4ActionCenter.evtx", cAlternateFileName="MI2E2E~1.EVT")) returned 1 [0046.039] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Shell-Core%4Operational.evtx", cAlternateFileName="MI1C6C~1.EVT")) returned 1 [0046.039] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-SmbClient%4Connectivity.evtx", cAlternateFileName="MI00FB~1.EVT")) returned 1 [0046.039] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97b042f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97b042f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-SMBClient%4Operational.evtx", cAlternateFileName="MID8B0~1.EVT")) returned 1 [0046.039] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-SmbClient%4Security.evtx", cAlternateFileName="MI8CEE~1.EVT")) returned 1 [0046.039] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb1ea1c9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb1ea1c9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-SMBServer%4Audit.evtx", cAlternateFileName="MIE3AD~1.EVT")) returned 1 [0046.040] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb19dd19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb19dd19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-SMBServer%4Connectivity.evtx", cAlternateFileName="MI8248~1.EVT")) returned 1 [0046.040] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb151873, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb151873, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-SMBServer%4Operational.evtx", cAlternateFileName="MI4B6B~1.EVT")) returned 1 [0046.040] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb177aca, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb177aca, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-SMBServer%4Security.evtx", cAlternateFileName="MI7709~1.EVT")) returned 1 [0046.040] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd751ea61, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd751ea61, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Store%4Operational.evtx", cAlternateFileName="MICEDD~1.EVT")) returned 1 [0046.040] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd0763ff, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd0763ff, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-TaskScheduler%4Maintenance.evtx", cAlternateFileName="MIE2F0~1.EVT")) returned 1 [0046.040] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5089d037, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5089d037, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx", cAlternateFileName="MIAB1D~1.EVT")) returned 1 [0046.041] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x508c32a6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x508c32a6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx", cAlternateFileName="MI62D3~1.EVT")) returned 1 [0046.041] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc14341c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc14341c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx", cAlternateFileName="MIEC03~1.EVT")) returned 1 [0046.041] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1b5b23, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1b5b23, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx", cAlternateFileName="MI1F5D~1.EVT")) returned 1 [0046.041] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74ac348, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74ac348, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-TWinUI%4Operational.evtx", cAlternateFileName="MIA925~1.EVT")) returned 1 [0046.041] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50aff605, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50aff605, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-User Profile Service%4Operational.evtx", cAlternateFileName="MI4D4C~1.EVT")) returned 1 [0046.041] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50981e6e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50981e6e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-UserPnp%4ActionCenter.evtx", cAlternateFileName="MI5FF0~1.EVT")) returned 1 [0046.041] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5095bc04, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5095bc04, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-UserPnp%4DeviceInstall.evtx", cAlternateFileName="MIBD88~1.EVT")) returned 1 [0046.041] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b97f64, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b97f64, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx", cAlternateFileName="MICC17~1.EVT")) returned 1 [0046.041] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc986efe1, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc986efe1, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Wcmsvc%4Operational.evtx", cAlternateFileName="MI72BF~1.EVT")) returned 1 [0046.041] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb426548, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb426548, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Windows Defender%4Operational.evtx", cAlternateFileName="MI7501~1.EVT")) returned 1 [0046.042] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb4729e7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb4729e7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Windows Defender%4WHC.evtx", cAlternateFileName="MIF226~1.EVT")) returned 1 [0046.042] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4b19353, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4b19353, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx", cAlternateFileName="MIDCC7~1.EVT")) returned 1 [0046.042] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9c9b1b6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9c9b1b6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx", cAlternateFileName="MI7771~1.EVT")) returned 1 [0046.042] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9df26e9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9df26e9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx", cAlternateFileName="MI4667~1.EVT")) returned 1 [0046.042] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd122d184, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd122d184, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Winlogon%4Operational.evtx", cAlternateFileName="MID6AB~1.EVT")) returned 1 [0046.042] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf164b9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcf164b9b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-WMI-Activity%4Operational.evtx", cAlternateFileName="MIFF83~1.EVT")) returned 1 [0046.042] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9a458f4, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Security.evtx", cAlternateFileName="SECURI~1.EVT")) returned 1 [0046.042] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a6db2c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x95a6db2c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Setup.evtx", cAlternateFileName="SETUP~1.EVT")) returned 1 [0046.043] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505097c4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505097c4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="System.evtx", cAlternateFileName="SYSTEM~1.EVT")) returned 1 [0046.043] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows PowerShell.evtx", cAlternateFileName="WINDOW~1.EVT")) returned 1 [0046.043] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows PowerShell.evtx", cAlternateFileName="WINDOW~1.EVT")) returned 0 [0046.043] FindClose (in: hFindFile=0x139880 | out: hFindFile=0x139880) returned 1 [0046.046] GetProcessHeap () returned 0x120000 [0046.046] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0046.046] FindNextFileW (in: hFindFile=0x139c80, lpFindFileData=0x113f868 | out: lpFindFileData=0x113f868*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6e97b025, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0x6e97b025, ftLastAccessTime.dwHighDateTime=0x1d3275c, ftLastWriteTime.dwLowDateTime=0x47384f2, ftLastWriteTime.dwHighDateTime=0x1d4d600, nFileSizeHigh=0x0, nFileSizeLow=0x28000000, dwReserved0=0xa0000003, dwReserved1=0x745f9fc4, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0046.046] FindNextFileW (in: hFindFile=0x139c80, lpFindFileData=0x113f868 | out: lpFindFileData=0x113f868*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x745f9fc4, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0046.046] GetProcessHeap () returned 0x120000 [0046.046] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0046.046] FindFirstFileW (in: lpFileName="\\\\?\\C:\\PerfLogs\\*", lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x139b80 [0046.050] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0046.050] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 0 [0046.050] FindClose (in: hFindFile=0x139b80 | out: hFindFile=0x139b80) returned 1 [0046.050] GetProcessHeap () returned 0x120000 [0046.050] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0046.050] FindNextFileW (in: hFindFile=0x139c80, lpFindFileData=0x113f868 | out: lpFindFileData=0x113f868*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x518874ca, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x518874ca, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x745f9fc4, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0046.050] GetProcessHeap () returned 0x120000 [0046.050] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0046.050] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\*", lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x518874ca, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x518874ca, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x139cc0 [0046.050] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x518874ca, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x518874ca, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0046.050] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x113f5d8 | out: lpFindFileData=0x113f5d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1 [0046.050] GetProcessHeap () returned 0x120000 [0046.050] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x610e10 [0046.051] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\*", lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139e40 [0046.051] FindNextFileW (in: hFindFile=0x139e40, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.051] FindNextFileW (in: hFindFile=0x139e40, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESIGNER", cAlternateFileName="")) returned 1 [0046.051] GetProcessHeap () returned 0x120000 [0046.051] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x16fdf0 [0046.051] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\*", lpFindFileData=0x113f0b8 | out: lpFindFileData=0x113f0b8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d00 [0046.055] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113f0b8 | out: lpFindFileData=0x113f0b8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.055] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113f0b8 | out: lpFindFileData=0x113f0b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8c3a00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5c8c3a00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.OLB", cAlternateFileName="")) returned 1 [0046.055] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113f0b8 | out: lpFindFileData=0x113f0b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8c3a00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5c8c3a00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.OLB", cAlternateFileName="")) returned 0 [0046.055] FindClose (in: hFindFile=0x139d00 | out: hFindFile=0x139d00) returned 1 [0046.055] GetProcessHeap () returned 0x120000 [0046.055] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x16fdf0 | out: hHeap=0x120000) returned 1 [0046.055] FindNextFileW (in: hFindFile=0x139e40, lpFindFileData=0x113f348 | out: lpFindFileData=0x113f348*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft shared", cAlternateFileName="MICROS~1")) returned 1 [0046.055] GetProcessHeap () returned 0x120000 [0046.055] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x16fdf0 [0046.055] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\*", lpFindFileData=0x113f0b8 | out: lpFindFileData=0x113f0b8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b80 [0046.056] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x113f0b8 | out: lpFindFileData=0x113f0b8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.056] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x113f0b8 | out: lpFindFileData=0x113f0b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81028f76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x81028f76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClickToRun", cAlternateFileName="CLICKT~1")) returned 1 [0046.056] GetProcessHeap () returned 0x120000 [0046.056] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0046.056] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\*", lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81028f76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x81028f76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d00 [0046.056] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81028f76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x81028f76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.057] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x809e6bf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x809e6bf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1 [0046.057] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x809e6bf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x809e6bf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1 [0046.057] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="API-MS~3.DLL")) returned 1 [0046.057] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="API-MS~4.DLL")) returned 1 [0046.058] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="APF10C~1.DLL")) returned 1 [0046.058] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1 [0046.058] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="APA632~1.DLL")) returned 1 [0046.058] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1 [0046.058] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x58c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="APFD9C~1.DLL")) returned 1 [0046.058] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="APC00F~1.DLL")) returned 1 [0046.058] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="AP0479~1.DLL")) returned 1 [0046.058] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="AP23C9~1.DLL")) returned 1 [0046.058] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1 [0046.059] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="APAE51~1.DLL")) returned 1 [0046.059] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x68c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1 [0046.059] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1 [0046.059] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="APFCAD~1.DLL")) returned 1 [0046.059] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="AP8F34~1.DLL")) returned 1 [0046.059] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="APD1B7~1.DLL")) returned 1 [0046.059] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="APBF0F~1.DLL")) returned 1 [0046.059] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="AP5E4C~1.DLL")) returned 1 [0046.059] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="AP80F4~1.DLL")) returned 1 [0046.059] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb979f700, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x27c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApiClient.dll", cAlternateFileName="APICLI~1.DLL")) returned 1 [0046.060] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9bc01200, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0xa02d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVCatalog.dll", cAlternateFileName="APPVCA~1.DLL")) returned 1 [0046.060] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x1f5ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="appvcleaner.exe", cAlternateFileName="APPVCL~1.EXE")) returned 1 [0046.060] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a330a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a330a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x4b0d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVFileSystemMetadata.dll", cAlternateFileName="APPVFI~1.DLL")) returned 1 [0046.060] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a330a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a330a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x2052d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVIntegration.dll", cAlternateFileName="APPVIN~1.DLL")) returned 1 [0046.060] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a59305, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a59305, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x726d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVIsvApi.dll", cAlternateFileName="APPVIS~1.DLL")) returned 1 [0046.060] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe1b7300, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0x60ea0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppvIsvStream32.dll", cAlternateFileName="APPVIS~2.DLL")) returned 1 [0046.060] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb5e67000, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x73aa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppvIsvStream64.dll", cAlternateFileName="APPVIS~3.DLL")) returned 1 [0046.061] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x336d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVIsvStreamingManager.dll", cAlternateFileName="APPVIS~4.DLL")) returned 1 [0046.061] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80aa57b9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80aa57b9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x1566d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVIsvSubsystemController.dll", cAlternateFileName="AP213A~1.DLL")) returned 1 [0046.061] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80aa57b9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80aa57b9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x18d60800, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0x1ae0a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppvIsvSubsystems32.dll", cAlternateFileName="AP3342~1.DLL")) returned 1 [0046.061] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80acba0b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80acba0b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbbdc5100, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x22e0a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppvIsvSubsystems64.dll", cAlternateFileName="AP4400~1.DLL")) returned 1 [0046.061] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80af1c6a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80af1c6a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x8a8d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVIsvVirtualization.dll", cAlternateFileName="AP485B~1.DLL")) returned 1 [0046.061] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80af1c6a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80af1c6a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x12cad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVManifest.dll", cAlternateFileName="APPVMA~1.DLL")) returned 1 [0046.061] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b17ebf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b17ebf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0xe76d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVOrchestration.dll", cAlternateFileName="APPVOR~1.DLL")) returned 1 [0046.061] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b17ebf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b17ebf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x13c4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVPolicy.dll", cAlternateFileName="APPVPO~1.DLL")) returned 1 [0046.062] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b17ebf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b17ebf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9e226c00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x7d0d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVScripting.dll", cAlternateFileName="APPVSC~1.DLL")) returned 1 [0046.062] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9e226c00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x406d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVShNotify.exe", cAlternateFileName="APPVSH~1.EXE")) returned 1 [0046.062] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x14115400, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0xc84c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2R32.dll", cAlternateFileName="")) returned 1 [0046.062] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb4b54300, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x127260, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2R64.dll", cAlternateFileName="")) returned 1 [0046.062] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8ee04f00, ftLastWriteTime.dwHighDateTime=0x1d0d67f, nFileSizeHigh=0x0, nFileSizeLow=0x1028, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RHeartbeatConfig.xml", cAlternateFileName="C2RHEA~1.XML")) returned 1 [0046.062] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb3841600, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RUI.en-us.dll", cAlternateFileName="C2RUIE~1.DLL")) returned 1 [0046.062] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x514a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="concrt140.dll", cAlternateFileName="CONCRT~1.DLL")) returned 1 [0046.062] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbd783a00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="i640.hash", cAlternateFileName="I640~1.HAS")) returned 1 [0046.062] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbc470d00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="i641033.hash", cAlternateFileName="I64103~1.HAS")) returned 1 [0046.062] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbe3eab00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x10ae80, dwReserved0=0x0, dwReserved1=0x0, cFileName="IntegratedOffice.exe", cAlternateFileName="INTEGR~1.EXE")) returned 1 [0046.063] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b8a5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b8a5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xa2e72000, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x578d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MavInject32.exe", cAlternateFileName="MAVINJ~1.EXE")) returned 1 [0046.063] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b8a5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b8a5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8745c00, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0x2ffa60, dwReserved0=0x0, dwReserved1=0x0, cFileName="mso20win32client.dll", cAlternateFileName="MSO20W~1.DLL")) returned 1 [0046.063] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80bb0837, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80bb0837, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xad6b600, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0x475e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="mso30win32client.dll", cAlternateFileName="MSO30W~1.DLL")) returned 1 [0046.063] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80bfccf1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80bfccf1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x307ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mso40uires.dll", cAlternateFileName="MSO40U~1.DLL")) returned 1 [0046.063] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c22f4a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80c22f4a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x10cc9700, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0x8e6060, dwReserved0=0x0, dwReserved1=0x0, cFileName="mso40uiwin32client.dll", cAlternateFileName="MSO40U~2.DLL")) returned 1 [0046.063] GetProcessHeap () returned 0x120000 [0046.063] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0046.063] GetProcessHeap () returned 0x120000 [0046.063] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0046.063] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\*", lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d00 [0046.065] GetProcessHeap () returned 0x120000 [0046.065] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.065] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\*", lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05532b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d80 [0046.067] GetProcessHeap () returned 0x120000 [0046.067] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.067] GetProcessHeap () returned 0x120000 [0046.067] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.067] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\*", lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0553f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d80 [0046.067] GetProcessHeap () returned 0x120000 [0046.067] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.067] GetProcessHeap () returned 0x120000 [0046.067] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.067] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\*", lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0554b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d80 [0046.067] GetProcessHeap () returned 0x120000 [0046.067] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.067] GetProcessHeap () returned 0x120000 [0046.067] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.067] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\*", lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05550d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d80 [0046.067] GetProcessHeap () returned 0x120000 [0046.067] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.068] GetProcessHeap () returned 0x120000 [0046.068] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.068] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\*", lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0555b2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d80 [0046.071] GetProcessHeap () returned 0x120000 [0046.071] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.071] GetProcessHeap () returned 0x120000 [0046.071] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.071] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\*", lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa055662c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139dc0 [0046.071] GetProcessHeap () returned 0x120000 [0046.071] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.071] GetProcessHeap () returned 0x120000 [0046.071] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.071] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\*", lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0557085, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139880 [0046.071] GetProcessHeap () returned 0x120000 [0046.071] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.071] GetProcessHeap () returned 0x120000 [0046.071] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.071] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\*", lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dd09d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d80 [0046.074] GetProcessHeap () returned 0x120000 [0046.074] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.074] GetProcessHeap () returned 0x120000 [0046.074] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.075] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\*", lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05ddf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d80 [0046.078] GetProcessHeap () returned 0x120000 [0046.078] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.078] GetProcessHeap () returned 0x120000 [0046.078] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.078] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\*", lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dea14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d80 [0046.078] GetProcessHeap () returned 0x120000 [0046.078] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.078] GetProcessHeap () returned 0x120000 [0046.078] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.078] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\*", lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df011, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d80 [0046.078] GetProcessHeap () returned 0x120000 [0046.078] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.078] GetProcessHeap () returned 0x120000 [0046.078] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.078] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\*", lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df7b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139e80 [0046.079] GetProcessHeap () returned 0x120000 [0046.079] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.079] GetProcessHeap () returned 0x120000 [0046.079] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.079] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\*", lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0635c03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.188] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0635c03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.190] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e126ecb, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e126ecb, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e126ecb, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0046.192] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e126ecb, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e126ecb, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e126ecb, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0046.194] FindClose (in: hFindFile=0x139ec0 | out: hFindFile=0x139ec0) returned 1 [0046.197] GetProcessHeap () returned 0x120000 [0046.197] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.199] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06369df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0046.203] GetProcessHeap () returned 0x120000 [0046.205] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0046.207] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\*", lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06369df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.213] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06369df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.213] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0046.214] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0046.214] FindClose (in: hFindFile=0x139ec0 | out: hFindFile=0x139ec0) returned 1 [0046.214] GetProcessHeap () returned 0x120000 [0046.214] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0046.214] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0637839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fsdefinitions", cAlternateFileName="FSDEFI~1")) returned 1 [0046.214] GetProcessHeap () returned 0x120000 [0046.214] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.214] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\*", lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0637839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139e80 [0046.215] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0637839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.215] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638633, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxpad", cAlternateFileName="")) returned 1 [0046.215] GetProcessHeap () returned 0x120000 [0046.215] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0046.215] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\*", lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638633, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.215] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638633, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.215] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxbase.xml", cAlternateFileName="")) returned 1 [0046.215] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxbase.xml", cAlternateFileName="")) returned 0 [0046.215] FindClose (in: hFindFile=0x139ec0 | out: hFindFile=0x139ec0) returned 1 [0046.215] GetProcessHeap () returned 0x120000 [0046.215] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0046.215] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxpad.xml", cAlternateFileName="")) returned 1 [0046.215] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638c00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="insert", cAlternateFileName="")) returned 1 [0046.215] GetProcessHeap () returned 0x120000 [0046.215] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0046.215] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\*", lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638c00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.215] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638c00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.215] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x387, dwReserved0=0x0, dwReserved1=0x0, cFileName="insertbase.xml", cAlternateFileName="")) returned 1 [0046.216] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x387, dwReserved0=0x0, dwReserved1=0x0, cFileName="insertbase.xml", cAlternateFileName="")) returned 0 [0046.216] FindClose (in: hFindFile=0x139ec0 | out: hFindFile=0x139ec0) returned 1 [0046.216] GetProcessHeap () returned 0x120000 [0046.216] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0046.216] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="insert.xml", cAlternateFileName="")) returned 1 [0046.216] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa063932e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypad", cAlternateFileName="")) returned 1 [0046.216] GetProcessHeap () returned 0x120000 [0046.216] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0046.216] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\*", lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa063932e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.216] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa063932e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.216] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x180, dwReserved0=0x0, dwReserved1=0x0, cFileName="ea.xml", cAlternateFileName="")) returned 1 [0046.216] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x387, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypadbase.xml", cAlternateFileName="")) returned 1 [0046.216] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor-kor.xml", cAlternateFileName="")) returned 1 [0046.216] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor-kor.xml", cAlternateFileName="")) returned 0 [0046.216] FindClose (in: hFindFile=0x139ec0 | out: hFindFile=0x139ec0) returned 1 [0046.217] GetProcessHeap () returned 0x120000 [0046.217] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0046.217] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypad.xml", cAlternateFileName="")) returned 1 [0046.217] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cd023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="main", cAlternateFileName="")) returned 1 [0046.217] GetProcessHeap () returned 0x120000 [0046.217] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0046.217] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\*", lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cd023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.218] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cd023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.218] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd05, dwReserved0=0x0, dwReserved1=0x0, cFileName="base.xml", cAlternateFileName="")) returned 1 [0046.218] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="baseAltGr_rtl.xml", cAlternateFileName="")) returned 1 [0046.218] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_altgr.xml", cAlternateFileName="")) returned 1 [0046.218] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_ca.xml", cAlternateFileName="")) returned 1 [0046.218] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_heb.xml", cAlternateFileName="")) returned 1 [0046.218] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_jpn.xml", cAlternateFileName="")) returned 1 [0046.218] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_kor.xml", cAlternateFileName="")) returned 1 [0046.219] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_rtl.xml", cAlternateFileName="")) returned 1 [0046.219] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x40e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp.xml", cAlternateFileName="")) returned 1 [0046.219] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3af9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr.xml", cAlternateFileName="")) returned 1 [0046.219] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x264b, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-changjei.xml", cAlternateFileName="")) returned 1 [0046.219] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-dayi.xml", cAlternateFileName="")) returned 1 [0046.219] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-phonetic.xml", cAlternateFileName="")) returned 1 [0046.219] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-phonetic.xml", cAlternateFileName="")) returned 0 [0046.219] FindClose (in: hFindFile=0x139ec0 | out: hFindFile=0x139ec0) returned 1 [0046.220] GetProcessHeap () returned 0x120000 [0046.220] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0046.220] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xadda, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.xml", cAlternateFileName="")) returned 1 [0046.220] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cdb88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskclearui", cAlternateFileName="OSKCLE~1")) returned 1 [0046.220] GetProcessHeap () returned 0x120000 [0046.220] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0046.220] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\*", lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cdb88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.220] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cdb88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.220] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskclearuibase.xml", cAlternateFileName="")) returned 1 [0046.220] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskclearuibase.xml", cAlternateFileName="")) returned 0 [0046.220] FindClose (in: hFindFile=0x139ec0 | out: hFindFile=0x139ec0) returned 1 [0046.220] GetProcessHeap () returned 0x120000 [0046.220] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0046.220] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskclearui.xml", cAlternateFileName="")) returned 1 [0046.221] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenu", cAlternateFileName="")) returned 1 [0046.221] GetProcessHeap () returned 0x120000 [0046.221] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0046.221] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\*", lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.221] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.221] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenubase.xml", cAlternateFileName="")) returned 1 [0046.221] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenubase.xml", cAlternateFileName="")) returned 0 [0046.221] FindClose (in: hFindFile=0x139ec0 | out: hFindFile=0x139ec0) returned 1 [0046.221] GetProcessHeap () returned 0x120000 [0046.221] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0046.221] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenu.xml", cAlternateFileName="")) returned 1 [0046.221] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce7a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknav", cAlternateFileName="")) returned 1 [0046.221] GetProcessHeap () returned 0x120000 [0046.221] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0046.221] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\*", lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce7a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.221] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce7a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.221] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x42d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknavbase.xml", cAlternateFileName="")) returned 1 [0046.222] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x42d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknavbase.xml", cAlternateFileName="")) returned 0 [0046.222] FindClose (in: hFindFile=0x139ec0 | out: hFindFile=0x139ec0) returned 1 [0046.222] GetProcessHeap () returned 0x120000 [0046.222] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0046.222] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknav.xml", cAlternateFileName="")) returned 1 [0046.222] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ceb7f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpad", cAlternateFileName="OSKNUM~1")) returned 1 [0046.222] GetProcessHeap () returned 0x120000 [0046.222] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0046.222] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\*", lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ceb7f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.222] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ceb7f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.222] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x73d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpadbase.xml", cAlternateFileName="")) returned 1 [0046.222] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x73d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpadbase.xml", cAlternateFileName="")) returned 0 [0046.222] FindClose (in: hFindFile=0x139ec0 | out: hFindFile=0x139ec0) returned 1 [0046.222] GetProcessHeap () returned 0x120000 [0046.222] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0046.222] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpad.xml", cAlternateFileName="")) returned 1 [0046.222] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cef41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpred", cAlternateFileName="")) returned 1 [0046.223] GetProcessHeap () returned 0x120000 [0046.223] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0046.223] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\*", lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cef41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.223] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cef41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.223] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpredbase.xml", cAlternateFileName="")) returned 1 [0046.223] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpredbase.xml", cAlternateFileName="")) returned 0 [0046.223] FindClose (in: hFindFile=0x139ec0 | out: hFindFile=0x139ec0) returned 1 [0046.223] GetProcessHeap () returned 0x120000 [0046.223] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0046.223] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpred.xml", cAlternateFileName="")) returned 1 [0046.223] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf371, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols", cAlternateFileName="")) returned 1 [0046.223] GetProcessHeap () returned 0x120000 [0046.223] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0046.223] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\*", lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf371, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.223] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf371, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.223] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ea-sym.xml", cAlternateFileName="")) returned 1 [0046.223] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x325, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp-sym.xml", cAlternateFileName="")) returned 1 [0046.224] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeef, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbase.xml", cAlternateFileName="")) returned 1 [0046.224] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeef, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbase.xml", cAlternateFileName="")) returned 0 [0046.224] FindClose (in: hFindFile=0x139ec0 | out: hFindFile=0x139ec0) returned 1 [0046.224] GetProcessHeap () returned 0x120000 [0046.224] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0046.224] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols.xml", cAlternateFileName="")) returned 1 [0046.224] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols.xml", cAlternateFileName="")) returned 0 [0046.224] FindClose (in: hFindFile=0x139e80 | out: hFindFile=0x139e80) returned 1 [0046.224] GetProcessHeap () returned 0x120000 [0046.224] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.225] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-IL", cAlternateFileName="")) returned 1 [0046.225] GetProcessHeap () returned 0x120000 [0046.225] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.225] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\*", lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139e80 [0046.225] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.225] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0046.225] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0046.225] FindClose (in: hFindFile=0x139e80 | out: hFindFile=0x139e80) returned 1 [0046.225] GetProcessHeap () returned 0x120000 [0046.225] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.226] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-HR", cAlternateFileName="")) returned 1 [0046.226] GetProcessHeap () returned 0x120000 [0046.226] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.226] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\*", lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139e80 [0046.226] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.226] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0046.226] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0046.226] FindClose (in: hFindFile=0x139e80 | out: hFindFile=0x139e80) returned 1 [0046.226] GetProcessHeap () returned 0x120000 [0046.226] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.226] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0046.226] GetProcessHeap () returned 0x120000 [0046.226] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.226] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\*", lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139e80 [0046.226] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.226] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0046.226] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0046.226] FindClose (in: hFindFile=0x139e80 | out: hFindFile=0x139e80) returned 1 [0046.226] GetProcessHeap () returned 0x120000 [0046.227] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.227] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8ce781, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe382bd1f, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe382bd1f, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb620, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrcommonlm.dat", cAlternateFileName="")) returned 1 [0046.227] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HWRCustomization", cAlternateFileName="HWRCUS~1")) returned 1 [0046.227] GetProcessHeap () returned 0x120000 [0046.227] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.227] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\HWRCustomization\\*", lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139e80 [0046.227] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.227] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0046.227] FindClose (in: hFindFile=0x139e80 | out: hFindFile=0x139e80) returned 1 [0046.227] GetProcessHeap () returned 0x120000 [0046.227] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.227] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85c57278, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xb269cdea, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb269cdea, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x79bc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrenclm.dat", cAlternateFileName="")) returned 1 [0046.227] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8ce781, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe38781cd, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe38781cd, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x10cb30, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrlatinlm.dat", cAlternateFileName="")) returned 1 [0046.227] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85cc99ae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xb28b2edf, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb28b2edf, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2662f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrusalm.dat", cAlternateFileName="")) returned 1 [0046.227] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85cc99ae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xb281a570, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb281a570, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x339380, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrusash.dat", cAlternateFileName="")) returned 1 [0046.227] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x58400, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkDiv.dll", cAlternateFileName="")) returned 1 [0046.228] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1ecc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkObj.dll", cAlternateFileName="")) returned 1 [0046.228] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe467a929, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe467a929, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x59a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization.exe", cAlternateFileName="")) returned 1 [0046.228] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x972, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsar.xml", cAlternateFileName="")) returned 1 [0046.228] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa20, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscat.xml", cAlternateFileName="")) returned 1 [0046.228] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x99e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipschs.xml", cAlternateFileName="")) returned 1 [0046.228] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscht.xml", cAlternateFileName="")) returned 1 [0046.228] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscsy.xml", cAlternateFileName="")) returned 1 [0046.228] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsdan.xml", cAlternateFileName="")) returned 1 [0046.228] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsdeu.xml", cAlternateFileName="")) returned 1 [0046.228] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsel.xml", cAlternateFileName="")) returned 1 [0046.229] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsen.xml", cAlternateFileName="")) returned 1 [0046.229] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xbd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsesp.xml", cAlternateFileName="")) returned 1 [0046.229] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d14d081, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d14d081, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPSEventLogMsg.dll", cAlternateFileName="")) returned 1 [0046.229] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa62, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsfin.xml", cAlternateFileName="")) returned 1 [0046.229] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa44, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsfra.xml", cAlternateFileName="")) returned 1 [0046.229] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipshe.xml", cAlternateFileName="")) returned 1 [0046.229] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipshi.xml", cAlternateFileName="")) returned 1 [0046.229] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c96711d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipshrv.xml", cAlternateFileName="")) returned 1 [0046.229] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d14d081, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d14d081, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsid.xml", cAlternateFileName="")) returned 1 [0046.230] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9de, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsita.xml", cAlternateFileName="")) returned 1 [0046.230] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c96711d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c96711d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c96711d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9da, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsjpn.xml", cAlternateFileName="")) returned 1 [0046.230] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipskor.xml", cAlternateFileName="")) returned 1 [0046.230] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe462e472, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe462e472, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsMigrationPlugin.dll", cAlternateFileName="")) returned 1 [0046.230] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsnld.xml", cAlternateFileName="")) returned 1 [0046.230] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa14, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsnor.xml", cAlternateFileName="")) returned 1 [0046.230] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa28, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsplk.xml", cAlternateFileName="")) returned 1 [0046.230] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe46546cb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe46546cb, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1ec00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsPlugin.dll", cAlternateFileName="")) returned 1 [0046.230] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsptb.xml", cAlternateFileName="")) returned 1 [0046.230] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsptg.xml", cAlternateFileName="")) returned 1 [0046.231] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c96711d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c96711d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c96711d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsrom.xml", cAlternateFileName="")) returned 1 [0046.231] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsrus.xml", cAlternateFileName="")) returned 1 [0046.231] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssrb.xml", cAlternateFileName="")) returned 1 [0046.231] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssrl.xml", cAlternateFileName="")) returned 1 [0046.231] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssve.xml", cAlternateFileName="")) returned 1 [0046.231] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xaa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipstr.xml", cAlternateFileName="")) returned 1 [0046.231] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0769b1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0046.231] GetProcessHeap () returned 0x120000 [0046.231] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.231] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\*", lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0769b1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139e80 [0046.231] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0769b1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.231] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9592f9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e9592f9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e9592f9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0046.232] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9592f9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e9592f9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e9592f9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0046.232] FindClose (in: hFindFile=0x139e80 | out: hFindFile=0x139e80) returned 1 [0046.233] GetProcessHeap () returned 0x120000 [0046.234] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.234] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0046.234] GetProcessHeap () returned 0x120000 [0046.234] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.234] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\*", lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139e80 [0046.235] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.236] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9592f9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e9592f9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e9592f9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0046.236] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9592f9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e9592f9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e9592f9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0046.236] FindClose (in: hFindFile=0x139e80 | out: hFindFile=0x139e80) returned 1 [0046.250] GetProcessHeap () returned 0x120000 [0046.251] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.252] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0046.258] GetProcessHeap () returned 0x120000 [0046.259] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.260] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\*", lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139e80 [0046.264] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.266] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0046.269] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0046.269] FindClose (in: hFindFile=0x139e80 | out: hFindFile=0x139e80) returned 1 [0046.269] GetProcessHeap () returned 0x120000 [0046.269] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.269] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LanguageModel", cAlternateFileName="LANGUA~1")) returned 1 [0046.270] GetProcessHeap () returned 0x120000 [0046.270] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.270] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\*", lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139e80 [0046.275] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.275] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="chstic.dgml", cAlternateFileName="")) returned 1 [0046.281] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="chstic.dgml", cAlternateFileName="")) returned 0 [0046.281] FindClose (in: hFindFile=0x139e80 | out: hFindFile=0x139e80) returned 1 [0046.281] GetProcessHeap () returned 0x120000 [0046.281] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.281] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt-LT", cAlternateFileName="")) returned 1 [0046.281] GetProcessHeap () returned 0x120000 [0046.281] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.282] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\*", lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139e80 [0046.282] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.282] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0046.282] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0046.282] FindClose (in: hFindFile=0x139e80 | out: hFindFile=0x139e80) returned 1 [0046.282] GetProcessHeap () returned 0x120000 [0046.282] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.282] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv-LV", cAlternateFileName="")) returned 1 [0046.282] GetProcessHeap () returned 0x120000 [0046.282] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.282] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\*", lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139e80 [0046.282] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.282] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0046.282] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0046.282] FindClose (in: hFindFile=0x139e80 | out: hFindFile=0x139e80) returned 1 [0046.282] GetProcessHeap () returned 0x120000 [0046.282] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.282] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a4376e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1f30e81, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1f30e81, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x19f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll", cAlternateFileName="")) returned 1 [0046.283] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463d4edd, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xc2004e62, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463d4edd, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x7b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Ink.dll", cAlternateFileName="")) returned 1 [0046.283] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a4376e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd51e08b5, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd51e08b5, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x178200, dwReserved0=0x0, dwReserved1=0x0, cFileName="mip.exe", cAlternateFileName="")) returned 1 [0046.283] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a1d507, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xde1acd8d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xde1acd8d, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x612e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mraut.dll", cAlternateFileName="")) returned 1 [0046.283] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwgst.dll", cAlternateFileName="")) returned 1 [0046.283] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8ce781, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe3805ad4, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe3805ad4, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x106a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwLatin.dll", cAlternateFileName="")) returned 1 [0046.283] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076bff5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0046.283] GetProcessHeap () returned 0x120000 [0046.283] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.283] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\*", lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076bff5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139e80 [0046.283] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076bff5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.283] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e90ce26, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e90ce26, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e90ce26, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0046.283] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e90ce26, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e90ce26, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e90ce26, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0046.283] FindClose (in: hFindFile=0x139e80 | out: hFindFile=0x139e80) returned 1 [0046.284] GetProcessHeap () returned 0x120000 [0046.284] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.284] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0046.284] GetProcessHeap () returned 0x120000 [0046.284] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.284] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\*", lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139e80 [0046.284] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.284] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0046.284] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0046.284] FindClose (in: hFindFile=0x139e80 | out: hFindFile=0x139e80) returned 1 [0046.284] GetProcessHeap () returned 0x120000 [0046.284] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.284] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0046.284] GetProcessHeap () returned 0x120000 [0046.284] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.284] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\*", lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139e80 [0046.284] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.284] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0046.284] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0046.285] FindClose (in: hFindFile=0x139e80 | out: hFindFile=0x139e80) returned 1 [0046.285] GetProcessHeap () returned 0x120000 [0046.285] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.285] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0046.285] GetProcessHeap () returned 0x120000 [0046.285] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.285] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\*", lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139e80 [0046.285] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.285] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0046.285] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0046.285] FindClose (in: hFindFile=0x139e80 | out: hFindFile=0x139e80) returned 1 [0046.285] GetProcessHeap () returned 0x120000 [0046.285] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.285] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0046.285] GetProcessHeap () returned 0x120000 [0046.285] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.285] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\*", lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139e80 [0046.285] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.285] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0046.286] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0046.286] FindClose (in: hFindFile=0x139e80 | out: hFindFile=0x139e80) returned 1 [0046.286] GetProcessHeap () returned 0x120000 [0046.286] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.286] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-RO", cAlternateFileName="")) returned 1 [0046.286] GetProcessHeap () returned 0x120000 [0046.286] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.286] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\*", lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139e80 [0046.286] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.286] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0046.286] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0046.286] FindClose (in: hFindFile=0x139e80 | out: hFindFile=0x139e80) returned 1 [0046.286] GetProcessHeap () returned 0x120000 [0046.286] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.286] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll", cAlternateFileName="")) returned 1 [0046.286] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0046.286] GetProcessHeap () returned 0x120000 [0046.286] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.286] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\*", lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139e80 [0046.287] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.287] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0046.287] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0046.287] FindClose (in: hFindFile=0x139e80 | out: hFindFile=0x139e80) returned 1 [0046.287] GetProcessHeap () returned 0x120000 [0046.287] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.287] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe46546cb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe46546cb, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.exe", cAlternateFileName="")) returned 1 [0046.287] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-SK", cAlternateFileName="")) returned 1 [0046.287] GetProcessHeap () returned 0x120000 [0046.287] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.287] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\*", lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139e80 [0046.287] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.287] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0046.287] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0046.287] FindClose (in: hFindFile=0x139e80 | out: hFindFile=0x139e80) returned 1 [0046.287] GetProcessHeap () returned 0x120000 [0046.287] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.287] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-SI", cAlternateFileName="")) returned 1 [0046.287] GetProcessHeap () returned 0x120000 [0046.287] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.288] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\*", lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139e80 [0046.288] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.288] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0046.288] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0046.288] FindClose (in: hFindFile=0x139e80 | out: hFindFile=0x139e80) returned 1 [0046.288] GetProcessHeap () returned 0x120000 [0046.288] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.288] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~1")) returned 1 [0046.288] GetProcessHeap () returned 0x120000 [0046.288] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.288] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\*", lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139e80 [0046.288] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.288] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0046.288] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0046.288] FindClose (in: hFindFile=0x139e80 | out: hFindFile=0x139e80) returned 1 [0046.288] GetProcessHeap () returned 0x120000 [0046.288] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.288] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0046.288] GetProcessHeap () returned 0x120000 [0046.288] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.289] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\*", lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139e80 [0046.289] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.289] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0046.289] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0046.289] FindClose (in: hFindFile=0x139e80 | out: hFindFile=0x139e80) returned 1 [0046.289] GetProcessHeap () returned 0x120000 [0046.289] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.289] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe467a929, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe467a929, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabIpsps.dll", cAlternateFileName="")) returned 1 [0046.289] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463d4edd, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x779da8e5, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463d4edd, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x3e9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tabskb.dll", cAlternateFileName="")) returned 1 [0046.289] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x5f780, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabTip.exe", cAlternateFileName="")) returned 1 [0046.289] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th-TH", cAlternateFileName="")) returned 1 [0046.289] GetProcessHeap () returned 0x120000 [0046.289] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.289] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\*", lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139e80 [0046.289] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.289] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0046.290] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0046.290] FindClose (in: hFindFile=0x139e80 | out: hFindFile=0x139e80) returned 1 [0046.290] GetProcessHeap () returned 0x120000 [0046.290] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.290] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1aad768, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1aad768, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x109400, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipRes.dll", cAlternateFileName="")) returned 1 [0046.290] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll", cAlternateFileName="")) returned 1 [0046.290] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79680792, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x79680792, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x79680792, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x101200, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipskins.dll", cAlternateFileName="")) returned 1 [0046.290] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7965a52d, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x7965a52d, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x7965a52d, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x9e1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tiptsf.dll", cAlternateFileName="")) returned 1 [0046.290] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463d4edd, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x6ebfe576, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463d4edd, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x17a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tpcps.dll", cAlternateFileName="")) returned 1 [0046.290] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0046.290] GetProcessHeap () returned 0x120000 [0046.290] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.290] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\*", lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139e80 [0046.290] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.291] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0046.291] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0046.291] FindClose (in: hFindFile=0x139e80 | out: hFindFile=0x139e80) returned 1 [0046.291] GetProcessHeap () returned 0x120000 [0046.291] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.291] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-UA", cAlternateFileName="")) returned 1 [0046.291] GetProcessHeap () returned 0x120000 [0046.291] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.291] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\*", lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139e80 [0046.291] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.291] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0046.291] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0046.291] FindClose (in: hFindFile=0x139e80 | out: hFindFile=0x139e80) returned 1 [0046.291] GetProcessHeap () returned 0x120000 [0046.291] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.291] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0046.291] GetProcessHeap () returned 0x120000 [0046.291] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.291] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\*", lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139e80 [0046.291] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.291] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0046.292] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0046.292] FindClose (in: hFindFile=0x139e80 | out: hFindFile=0x139e80) returned 1 [0046.292] GetProcessHeap () returned 0x120000 [0046.292] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.292] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0046.292] GetProcessHeap () returned 0x120000 [0046.292] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.292] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\*", lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139e80 [0046.292] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.292] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e0daa01, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e0daa01, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0046.292] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e0daa01, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e0daa01, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0046.292] FindClose (in: hFindFile=0x139e80 | out: hFindFile=0x139e80) returned 1 [0046.292] GetProcessHeap () returned 0x120000 [0046.292] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.292] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0046.292] FindClose (in: hFindFile=0x139d00 | out: hFindFile=0x139d00) returned 1 [0046.292] GetProcessHeap () returned 0x120000 [0046.292] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0046.293] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x113f0b8 | out: lpFindFileData=0x113f0b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSInfo", cAlternateFileName="")) returned 1 [0046.293] GetProcessHeap () returned 0x120000 [0046.293] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0046.293] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\*", lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139e80 [0046.293] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.293] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa098aa4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0046.293] GetProcessHeap () returned 0x120000 [0046.293] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.294] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\*", lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa098aa4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d00 [0046.294] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa098aa4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.294] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x73430dfb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x261f2e00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 1 [0046.294] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x73430dfb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x261f2e00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 0 [0046.294] FindClose (in: hFindFile=0x139d00 | out: hFindFile=0x139d00) returned 1 [0046.294] GetProcessHeap () returned 0x120000 [0046.294] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.294] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463aec8d, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x63793f1, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463aec8d, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x5a600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 1 [0046.294] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463aec8d, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x63793f1, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463aec8d, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x5a600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 0 [0046.294] FindClose (in: hFindFile=0x139e80 | out: hFindFile=0x139e80) returned 1 [0046.294] GetProcessHeap () returned 0x120000 [0046.294] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0046.294] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x113f0b8 | out: lpFindFileData=0x113f0b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9f60362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE16", cAlternateFileName="")) returned 1 [0046.294] GetProcessHeap () returned 0x120000 [0046.294] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0046.295] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\*", lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9f60362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d00 [0046.448] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9f60362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.448] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9e7b530, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x58cd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICLUA.EXE", cAlternateFileName="")) returned 1 [0046.449] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa0a26299, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda982389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Setup Controller", cAlternateFileName="OFFICE~1")) returned 1 [0046.449] GetProcessHeap () returned 0x120000 [0046.449] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.449] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\*", lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa0a26299, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda982389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139e80 [0047.725] GetProcessHeap () returned 0x120000 [0047.725] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0047.725] GetProcessHeap () returned 0x120000 [0047.725] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0047.737] GetProcessHeap () returned 0x120000 [0047.737] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0047.737] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d00 [0047.737] GetProcessHeap () returned 0x120000 [0047.737] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0047.737] GetProcessHeap () returned 0x120000 [0047.737] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0047.737] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\*", lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d00 [0048.042] GetProcessHeap () returned 0x120000 [0048.042] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0048.042] GetProcessHeap () returned 0x120000 [0048.042] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0048.042] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\*", lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d00 [0056.001] GetProcessHeap () returned 0x120000 [0056.001] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0056.001] GetProcessHeap () returned 0x120000 [0056.001] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0056.001] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\*", lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153b0 [0056.002] GetProcessHeap () returned 0x120000 [0056.002] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0056.003] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\en-US\\*", lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156f0 [0056.003] GetProcessHeap () returned 0x120000 [0056.003] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0056.003] GetProcessHeap () returned 0x120000 [0056.003] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0056.004] GetProcessHeap () returned 0x120000 [0056.004] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0056.004] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\*", lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154f0 [0056.004] GetProcessHeap () returned 0x120000 [0056.004] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0056.005] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\en-US\\*", lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215530 [0056.005] GetProcessHeap () returned 0x120000 [0056.005] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0056.005] GetProcessHeap () returned 0x120000 [0056.005] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0056.006] GetProcessHeap () returned 0x120000 [0056.006] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0056.006] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\*", lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0056.088] GetProcessHeap () returned 0x120000 [0056.088] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0056.088] GetProcessHeap () returned 0x120000 [0056.088] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0056.088] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VGX\\*", lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215530 [0056.153] GetProcessHeap () returned 0x120000 [0056.153] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0056.153] GetProcessHeap () returned 0x120000 [0056.153] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0056.154] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\*", lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215530 [0056.154] GetProcessHeap () returned 0x120000 [0056.154] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0056.154] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\*", lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aebd53e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0056.155] GetProcessHeap () returned 0x120000 [0056.155] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0056.155] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\*", lpFindFileData=0x113e908 | out: lpFindFileData=0x113e908*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153b0 [0056.566] GetProcessHeap () returned 0x120000 [0056.566] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0058.298] GetProcessHeap () returned 0x120000 [0058.298] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0059.116] GetProcessHeap () returned 0x120000 [0059.116] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0059.116] GetProcessHeap () returned 0x120000 [0059.116] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x16fdf0 | out: hHeap=0x120000) returned 1 [0059.120] GetProcessHeap () returned 0x120000 [0059.120] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x16fdf0 [0059.121] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Services\\*", lpFindFileData=0x113f0b8 | out: lpFindFileData=0x113f0b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0059.161] GetProcessHeap () returned 0x120000 [0059.162] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x16fdf0 | out: hHeap=0x120000) returned 1 [0059.162] GetProcessHeap () returned 0x120000 [0059.162] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x16fdf0 [0059.162] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\*", lpFindFileData=0x113f0b8 | out: lpFindFileData=0x113f0b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156f0 [0059.162] GetProcessHeap () returned 0x120000 [0059.162] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0059.162] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\*", lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158f0 [0059.471] GetProcessHeap () returned 0x120000 [0059.471] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0059.472] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\en-US\\*", lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154f0 [0059.494] GetProcessHeap () returned 0x120000 [0059.494] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0064.870] GetProcessHeap () returned 0x120000 [0064.870] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0064.880] GetProcessHeap () returned 0x120000 [0064.880] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0064.880] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\en-US\\*", lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0064.888] GetProcessHeap () returned 0x120000 [0064.888] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0064.890] GetProcessHeap () returned 0x120000 [0064.890] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0064.890] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\*", lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215430 [0064.922] GetProcessHeap () returned 0x120000 [0064.922] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0064.922] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\*", lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0066.686] GetProcessHeap () returned 0x120000 [0066.686] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0069.413] GetProcessHeap () returned 0x120000 [0069.413] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0069.413] GetProcessHeap () returned 0x120000 [0069.413] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0069.413] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\*", lpFindFileData=0x113ee28 | out: lpFindFileData=0x113ee28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215130 [0069.414] GetProcessHeap () returned 0x120000 [0069.414] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0069.414] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\*", lpFindFileData=0x113eb98 | out: lpFindFileData=0x113eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157f0 Thread: id = 24 os_tid = 0x46c [0045.288] GetProcessHeap () returned 0x120000 [0045.288] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x38) returned 0x139840 [0045.290] GetProcessHeap () returned 0x120000 [0045.290] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x18) returned 0x1385e0 [0045.292] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2d0 [0045.294] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2d4 [0045.297] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2d8 [0045.297] GetProcessHeap () returned 0x120000 [0045.299] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x193f00 [0045.301] GetProcessHeap () returned 0x120000 [0045.301] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x50) returned 0x149af0 [0045.301] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75e90000 [0045.304] GetProcAddress (hModule=0x75e90000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x75ea6b30 [0045.304] Wow64DisableWow64FsRedirection (in: OldValue=0x2a5fbc4 | out: OldValue=0x2a5fbc4*=0x0) returned 1 [0045.304] GetProcessHeap () returned 0x120000 [0045.304] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x149af0 | out: hHeap=0x120000) returned 1 [0045.304] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x1, lpStartAddress=0x12448ba, lpParameter=0x2a5fbc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2dc [0045.304] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x1, lpStartAddress=0x12448ba, lpParameter=0x2a5fbc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2e0 [0045.305] GetProcessHeap () returned 0x120000 [0045.305] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x1b3f10 [0045.305] FindFirstFileW (in: lpFileName="\\\\?\\C:\\*", lpFindFileData=0x2a5f938 | out: lpFindFileData=0x2a5f938*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1149afd, dwReserved1=0x745f9fc4, cFileName="$GetCurrent", cAlternateFileName="$GETCU~1")) returned 0x1398c0 [0045.305] GetProcessHeap () returned 0x120000 [0045.305] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x1c3f18 [0045.306] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$GetCurrent\\*", lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x139b80 [0045.306] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0045.306] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Logs", cAlternateFileName="")) returned 1 [0045.312] GetProcessHeap () returned 0x120000 [0045.312] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x1d3f20 [0045.423] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139cc0 [0045.423] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.423] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x542c8aac, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0xafe5f7a, ftLastWriteTime.dwHighDateTime=0x1d3273e, nFileSizeHigh=0x0, nFileSizeLow=0xa6b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="downlevel_2017_09_07_02_02_39_766.log", cAlternateFileName="DOWNLE~1.LOG")) returned 1 [0045.423] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973abb0f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1774, dwReserved0=0x0, dwReserved1=0x0, cFileName="oobe_2017_09_07_03_08_57_737.log", cAlternateFileName="OOBE_2~1.LOG")) returned 1 [0045.424] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 1 [0045.424] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 0 [0045.424] FindClose (in: hFindFile=0x139cc0 | out: hFindFile=0x139cc0) returned 1 [0045.424] GetProcessHeap () returned 0x120000 [0045.424] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1d3f20 | out: hHeap=0x120000) returned 1 [0045.424] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SafeOS", cAlternateFileName="")) returned 1 [0045.424] GetProcessHeap () returned 0x120000 [0045.424] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x1d3f20 [0045.425] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139cc0 [0045.425] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.425] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9568f13f, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9568f13f, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x232c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentOOBE.dll", cAlternateFileName="GETCUR~1.DLL")) returned 1 [0045.425] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956819aa, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x956819aa, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentRollback.ini", cAlternateFileName="GETCUR~1.INI")) returned 1 [0045.425] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x54acc791, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x54acc791, ftLastWriteTime.dwHighDateTime=0x1d3273a, nFileSizeHigh=0x0, nFileSizeLow=0x241, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupComplete.cmd", cAlternateFileName="PARTNE~1.CMD")) returned 1 [0045.426] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9575af11, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9577d1ec, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="preoobe.cmd", cAlternateFileName="")) returned 1 [0045.426] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 1 [0045.426] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 0 [0045.426] FindClose (in: hFindFile=0x139cc0 | out: hFindFile=0x139cc0) returned 1 [0045.426] GetProcessHeap () returned 0x120000 [0045.426] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1d3f20 | out: hHeap=0x120000) returned 1 [0045.426] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SafeOS", cAlternateFileName="")) returned 0 [0045.426] FindClose (in: hFindFile=0x139b80 | out: hFindFile=0x139b80) returned 1 [0045.427] GetProcessHeap () returned 0x120000 [0045.427] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1c3f18 | out: hHeap=0x120000) returned 1 [0045.427] FindNextFileW (in: hFindFile=0x1398c0, lpFindFileData=0x2a5f938 | out: lpFindFileData=0x2a5f938*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1149afd, dwReserved1=0x745f9fc4, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 1 [0045.427] GetProcessHeap () returned 0x120000 [0045.427] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x1c3f18 [0045.428] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\*", lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x139b80 [0045.428] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0045.428] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="S-1-5-18", cAlternateFileName="")) returned 1 [0045.428] GetProcessHeap () returned 0x120000 [0045.428] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x1d3f20 [0045.428] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-18\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139cc0 [0045.428] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.428] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0045.428] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0045.428] FindClose (in: hFindFile=0x139cc0 | out: hFindFile=0x139cc0) returned 1 [0045.428] GetProcessHeap () returned 0x120000 [0045.428] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1d3f20 | out: hHeap=0x120000) returned 1 [0045.428] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0045.428] GetProcessHeap () returned 0x120000 [0045.428] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x1d3f20 [0045.429] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139cc0 [0045.429] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.429] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0045.429] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0045.429] FindClose (in: hFindFile=0x139cc0 | out: hFindFile=0x139cc0) returned 1 [0045.429] GetProcessHeap () returned 0x120000 [0045.429] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1d3f20 | out: hHeap=0x120000) returned 1 [0045.429] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 0 [0045.429] FindClose (in: hFindFile=0x139b80 | out: hFindFile=0x139b80) returned 1 [0045.429] GetProcessHeap () returned 0x120000 [0045.429] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1c3f18 | out: hHeap=0x120000) returned 1 [0045.430] FindNextFileW (in: hFindFile=0x1398c0, lpFindFileData=0x2a5f938 | out: lpFindFileData=0x2a5f938*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1149afd, dwReserved1=0x745f9fc4, cFileName="$WINRE_BACKUP_PARTITION.MARKER", cAlternateFileName="$WINRE~1.MAR")) returned 1 [0045.430] FindNextFileW (in: hFindFile=0x1398c0, lpFindFileData=0x2a5f938 | out: lpFindFileData=0x2a5f938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1149afd, dwReserved1=0x745f9fc4, cFileName="588bce7c90097ed212", cAlternateFileName="588BCE~1")) returned 1 [0045.430] GetProcessHeap () returned 0x120000 [0045.430] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x1c3f18 [0045.430] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\*", lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x139e80 [0045.501] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0045.501] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1025", cAlternateFileName="")) returned 1 [0045.501] GetProcessHeap () returned 0x120000 [0045.502] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.502] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d80 [0045.502] FindNextFileW (in: hFindFile=0x139d80, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.502] FindNextFileW (in: hFindFile=0x139d80, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0045.502] FindNextFileW (in: hFindFile=0x139d80, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x121e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0045.502] FindNextFileW (in: hFindFile=0x139d80, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0045.502] FindNextFileW (in: hFindFile=0x139d80, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0045.502] FindClose (in: hFindFile=0x139d80 | out: hFindFile=0x139d80) returned 1 [0045.503] GetProcessHeap () returned 0x120000 [0045.503] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.503] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1028", cAlternateFileName="")) returned 1 [0045.503] GetProcessHeap () returned 0x120000 [0045.503] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.503] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139cc0 [0045.503] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.503] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0045.503] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0045.503] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0045.503] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0045.503] FindClose (in: hFindFile=0x139cc0 | out: hFindFile=0x139cc0) returned 1 [0045.503] GetProcessHeap () returned 0x120000 [0045.503] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.503] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1029", cAlternateFileName="")) returned 1 [0045.503] GetProcessHeap () returned 0x120000 [0045.503] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.503] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b80 [0045.503] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.503] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0045.504] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13c4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0045.504] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0045.504] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0045.504] FindClose (in: hFindFile=0x139b80 | out: hFindFile=0x139b80) returned 1 [0045.504] GetProcessHeap () returned 0x120000 [0045.504] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.504] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1030", cAlternateFileName="")) returned 1 [0045.504] GetProcessHeap () returned 0x120000 [0045.504] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.504] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b80 [0045.504] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.504] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xcf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0045.504] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12fb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0045.504] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0045.504] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0045.504] FindClose (in: hFindFile=0x139b80 | out: hFindFile=0x139b80) returned 1 [0045.504] GetProcessHeap () returned 0x120000 [0045.504] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.504] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1031", cAlternateFileName="")) returned 1 [0045.504] GetProcessHeap () returned 0x120000 [0045.504] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.504] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0045.505] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.505] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0045.505] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0045.505] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0045.505] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0045.505] FindClose (in: hFindFile=0x139ec0 | out: hFindFile=0x139ec0) returned 1 [0045.505] GetProcessHeap () returned 0x120000 [0045.505] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.505] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1032", cAlternateFileName="")) returned 1 [0045.505] GetProcessHeap () returned 0x120000 [0045.505] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.505] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0045.505] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.505] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x22ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0045.505] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1510c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0045.505] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0045.505] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0045.505] FindClose (in: hFindFile=0x139ec0 | out: hFindFile=0x139ec0) returned 1 [0045.506] GetProcessHeap () returned 0x120000 [0045.506] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.506] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1033", cAlternateFileName="")) returned 1 [0045.506] GetProcessHeap () returned 0x120000 [0045.506] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.506] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b80 [0045.506] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.506] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd723cc00, ftCreationTime.dwHighDateTime=0x1cabb47, ftLastAccessTime.dwLowDateTime=0xd723cc00, ftLastAccessTime.dwHighDateTime=0x1cabb47, ftLastWriteTime.dwLowDateTime=0xd723cc00, ftLastWriteTime.dwHighDateTime=0x1cabb47, nFileSizeHigh=0x0, nFileSizeLow=0xc74, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0045.506] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x47ad1a00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x47ad1a00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x47ad1a00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12db0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0045.506] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0045.506] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0045.506] FindClose (in: hFindFile=0x139b80 | out: hFindFile=0x139b80) returned 1 [0045.506] GetProcessHeap () returned 0x120000 [0045.506] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.506] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1035", cAlternateFileName="")) returned 1 [0045.506] GetProcessHeap () returned 0x120000 [0045.506] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.506] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139cc0 [0045.506] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.506] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe76, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0045.507] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12cde, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0045.507] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0045.507] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0045.507] FindClose (in: hFindFile=0x139cc0 | out: hFindFile=0x139cc0) returned 1 [0045.507] GetProcessHeap () returned 0x120000 [0045.507] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.507] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1036", cAlternateFileName="")) returned 1 [0045.507] GetProcessHeap () returned 0x120000 [0045.507] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.507] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b80 [0045.507] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.507] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0045.507] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x14412, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0045.507] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0045.507] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0045.507] FindClose (in: hFindFile=0x139b80 | out: hFindFile=0x139b80) returned 1 [0045.507] GetProcessHeap () returned 0x120000 [0045.507] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.507] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1037", cAlternateFileName="")) returned 1 [0045.508] GetProcessHeap () returned 0x120000 [0045.508] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.508] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b80 [0045.508] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.508] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0045.508] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1198c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0045.508] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0045.508] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0045.508] FindClose (in: hFindFile=0x139b80 | out: hFindFile=0x139b80) returned 1 [0045.508] GetProcessHeap () returned 0x120000 [0045.508] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.508] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1038", cAlternateFileName="")) returned 1 [0045.508] GetProcessHeap () returned 0x120000 [0045.508] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.508] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b80 [0045.508] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.508] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x109e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0045.509] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x151aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0045.509] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0045.509] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0045.509] FindClose (in: hFindFile=0x139b80 | out: hFindFile=0x139b80) returned 1 [0045.509] GetProcessHeap () returned 0x120000 [0045.509] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.509] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1040", cAlternateFileName="")) returned 1 [0045.509] GetProcessHeap () returned 0x120000 [0045.509] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.509] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b80 [0045.509] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.510] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0045.510] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x138bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0045.510] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0045.510] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0045.510] FindClose (in: hFindFile=0x139b80 | out: hFindFile=0x139b80) returned 1 [0045.510] GetProcessHeap () returned 0x120000 [0045.510] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.510] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1041", cAlternateFileName="")) returned 1 [0045.510] GetProcessHeap () returned 0x120000 [0045.510] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.510] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139cc0 [0045.511] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.511] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x278d, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0045.511] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x10a82, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0045.511] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0045.511] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0045.511] FindClose (in: hFindFile=0x139cc0 | out: hFindFile=0x139cc0) returned 1 [0045.511] GetProcessHeap () returned 0x120000 [0045.511] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.511] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1042", cAlternateFileName="")) returned 1 [0045.511] GetProcessHeap () returned 0x120000 [0045.511] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.511] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d80 [0045.511] FindNextFileW (in: hFindFile=0x139d80, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.511] FindNextFileW (in: hFindFile=0x139d80, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x318f, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0045.511] FindNextFileW (in: hFindFile=0x139d80, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xfed6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0045.512] FindNextFileW (in: hFindFile=0x139d80, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0045.512] FindNextFileW (in: hFindFile=0x139d80, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0045.512] FindClose (in: hFindFile=0x139d80 | out: hFindFile=0x139d80) returned 1 [0045.512] GetProcessHeap () returned 0x120000 [0045.512] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.512] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1043", cAlternateFileName="")) returned 1 [0045.512] GetProcessHeap () returned 0x120000 [0045.512] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.512] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139cc0 [0045.512] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.512] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdda, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0045.512] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13712, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0045.512] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0045.512] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0045.512] FindClose (in: hFindFile=0x139cc0 | out: hFindFile=0x139cc0) returned 1 [0045.512] GetProcessHeap () returned 0x120000 [0045.512] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.512] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1044", cAlternateFileName="")) returned 1 [0045.513] GetProcessHeap () returned 0x120000 [0045.513] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.513] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139cc0 [0045.513] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.513] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0045.513] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x135c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0045.513] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0045.513] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0045.514] FindClose (in: hFindFile=0x139cc0 | out: hFindFile=0x139cc0) returned 1 [0045.514] GetProcessHeap () returned 0x120000 [0045.514] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.514] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1045", cAlternateFileName="")) returned 1 [0045.514] GetProcessHeap () returned 0x120000 [0045.514] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.514] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d00 [0045.516] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.516] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0045.516] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0045.516] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0045.516] FindNextFileW (in: hFindFile=0x139d00, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0045.516] FindClose (in: hFindFile=0x139d00 | out: hFindFile=0x139d00) returned 1 [0045.516] GetProcessHeap () returned 0x120000 [0045.516] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.516] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1046", cAlternateFileName="")) returned 1 [0045.516] GetProcessHeap () returned 0x120000 [0045.516] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.516] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139cc0 [0045.517] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.517] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe63, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0045.517] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13b62, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0045.517] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0045.517] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0045.517] FindClose (in: hFindFile=0x139cc0 | out: hFindFile=0x139cc0) returned 1 [0045.517] GetProcessHeap () returned 0x120000 [0045.517] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.517] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1049", cAlternateFileName="")) returned 1 [0045.517] GetProcessHeap () returned 0x120000 [0045.517] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.517] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139cc0 [0045.517] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.517] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0045.518] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13e4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0045.518] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0045.518] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0045.518] FindClose (in: hFindFile=0x139cc0 | out: hFindFile=0x139cc0) returned 1 [0045.518] GetProcessHeap () returned 0x120000 [0045.518] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.518] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1053", cAlternateFileName="")) returned 1 [0045.518] GetProcessHeap () returned 0x120000 [0045.518] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.518] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139cc0 [0045.519] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.519] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf19, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0045.519] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0045.519] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0045.519] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0045.519] FindClose (in: hFindFile=0x139cc0 | out: hFindFile=0x139cc0) returned 1 [0045.519] GetProcessHeap () returned 0x120000 [0045.519] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.519] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1055", cAlternateFileName="")) returned 1 [0045.519] GetProcessHeap () returned 0x120000 [0045.519] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.519] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139cc0 [0045.520] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.520] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf13, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0045.520] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12c12, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0045.520] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0045.520] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0045.520] FindClose (in: hFindFile=0x139cc0 | out: hFindFile=0x139cc0) returned 1 [0045.522] GetProcessHeap () returned 0x120000 [0045.522] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.522] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="2052", cAlternateFileName="")) returned 1 [0045.522] GetProcessHeap () returned 0x120000 [0045.522] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.522] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139cc0 [0045.523] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.523] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x16c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0045.523] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0045.523] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0045.523] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0045.523] FindClose (in: hFindFile=0x139cc0 | out: hFindFile=0x139cc0) returned 1 [0045.523] GetProcessHeap () returned 0x120000 [0045.523] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.523] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="2070", cAlternateFileName="")) returned 1 [0045.523] GetProcessHeap () returned 0x120000 [0045.523] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.523] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139cc0 [0045.523] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.523] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0045.523] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1397e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0045.523] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0045.523] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0045.524] FindClose (in: hFindFile=0x139cc0 | out: hFindFile=0x139cc0) returned 1 [0045.524] GetProcessHeap () returned 0x120000 [0045.524] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.524] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="3076", cAlternateFileName="")) returned 1 [0045.524] GetProcessHeap () returned 0x120000 [0045.524] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.524] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139cc0 [0045.524] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.524] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0045.524] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0045.524] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0045.524] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0045.524] FindClose (in: hFindFile=0x139cc0 | out: hFindFile=0x139cc0) returned 1 [0045.524] GetProcessHeap () returned 0x120000 [0045.524] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.524] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="3082", cAlternateFileName="")) returned 1 [0045.524] GetProcessHeap () returned 0x120000 [0045.524] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.524] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139e40 [0045.525] FindNextFileW (in: hFindFile=0x139e40, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.525] FindNextFileW (in: hFindFile=0x139e40, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0045.525] FindNextFileW (in: hFindFile=0x139e40, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1387c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0045.525] FindNextFileW (in: hFindFile=0x139e40, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0045.525] FindNextFileW (in: hFindFile=0x139e40, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0045.525] FindClose (in: hFindFile=0x139e40 | out: hFindFile=0x139e40) returned 1 [0045.525] GetProcessHeap () returned 0x120000 [0045.525] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.525] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Client", cAlternateFileName="")) returned 1 [0045.525] GetProcessHeap () returned 0x120000 [0045.526] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.526] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139e40 [0045.526] FindNextFileW (in: hFindFile=0x139e40, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.526] FindNextFileW (in: hFindFile=0x139e40, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce2bc00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0xce2bc00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0xce2bc00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x31444, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0045.526] FindNextFileW (in: hFindFile=0x139e40, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0045.526] FindNextFileW (in: hFindFile=0x139e40, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 0 [0045.526] FindClose (in: hFindFile=0x139e40 | out: hFindFile=0x139e40) returned 1 [0045.526] GetProcessHeap () returned 0x120000 [0045.526] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.527] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbc518d00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbc518d00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbc518d00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3ef6, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="DHtmlHeader.html", cAlternateFileName="DHTMLH~1.HTM")) returned 1 [0045.527] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x159d5, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="DisplayIcon.ico", cAlternateFileName="DISPLA~1.ICO")) returned 1 [0045.527] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Extended", cAlternateFileName="")) returned 1 [0045.527] GetProcessHeap () returned 0x120000 [0045.527] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.527] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139cc0 [0045.527] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.527] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2a714f00, ftCreationTime.dwHighDateTime=0x1cac6f0, ftLastAccessTime.dwLowDateTime=0x2a714f00, ftLastAccessTime.dwHighDateTime=0x1cac6f0, ftLastWriteTime.dwLowDateTime=0x2a714f00, ftLastWriteTime.dwHighDateTime=0x1cac6f0, nFileSizeHigh=0x0, nFileSizeLow=0x16c82, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0045.527] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0045.527] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 0 [0045.527] FindClose (in: hFindFile=0x139cc0 | out: hFindFile=0x139cc0) returned 1 [0045.527] GetProcessHeap () returned 0x120000 [0045.527] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.527] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Graphics", cAlternateFileName="")) returned 1 [0045.527] GetProcessHeap () returned 0x120000 [0045.527] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5c0048 [0045.527] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0045.529] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.529] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Print.ico", cAlternateFileName="")) returned 1 [0045.529] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate1.ico", cAlternateFileName="")) returned 1 [0045.529] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate2.ico", cAlternateFileName="")) returned 1 [0045.529] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate3.ico", cAlternateFileName="")) returned 1 [0045.530] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate4.ico", cAlternateFileName="")) returned 1 [0045.530] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate5.ico", cAlternateFileName="")) returned 1 [0045.530] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate6.ico", cAlternateFileName="")) returned 1 [0045.530] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate7.ico", cAlternateFileName="")) returned 1 [0045.530] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate8.ico", cAlternateFileName="")) returned 1 [0045.530] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Save.ico", cAlternateFileName="")) returned 1 [0045.530] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x8f66, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.ico", cAlternateFileName="")) returned 1 [0045.530] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b5e7f00, ftCreationTime.dwHighDateTime=0x1ca927c, ftLastAccessTime.dwLowDateTime=0x5b5e7f00, ftLastAccessTime.dwHighDateTime=0x1ca927c, ftLastWriteTime.dwLowDateTime=0x5b5e7f00, ftLastWriteTime.dwHighDateTime=0x1ca927c, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="stop.ico", cAlternateFileName="")) returned 1 [0045.530] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqMet.ico", cAlternateFileName="SYSREQ~1.ICO")) returned 1 [0045.530] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqNotMet.ico", cAlternateFileName="SYSREQ~2.ICO")) returned 1 [0045.530] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 1 [0045.530] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 0 [0045.530] FindClose (in: hFindFile=0x139ec0 | out: hFindFile=0x139ec0) returned 1 [0045.531] GetProcessHeap () returned 0x120000 [0045.531] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x5c0048 | out: hHeap=0x120000) returned 1 [0045.531] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0xe2c, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="header.bmp", cAlternateFileName="")) returned 1 [0045.531] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x66ea7e00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0xad1384b, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Core.mzz", cAlternateFileName="NETFX_~1.MZZ")) returned 1 [0045.531] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xc183da00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0x1d0200, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Core_x64.msi", cAlternateFileName="NETFX_~1.MSI")) returned 1 [0045.531] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4c130c00, ftCreationTime.dwHighDateTime=0x1cac6d9, ftLastAccessTime.dwLowDateTime=0x4c130c00, ftLastAccessTime.dwHighDateTime=0x1cac6d9, ftLastWriteTime.dwLowDateTime=0x4c130c00, ftLastWriteTime.dwHighDateTime=0x1cac6d9, nFileSizeHigh=0x0, nFileSizeLow=0x11c000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Core_x86.msi", cAlternateFileName="NETFX_~2.MSI")) returned 1 [0045.531] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf7cd9415, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x29222c7, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Extended.mzz", cAlternateFileName="NETFX_~2.MZZ")) returned 1 [0045.531] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2dbe0800, ftCreationTime.dwHighDateTime=0x1cac6fb, ftLastAccessTime.dwLowDateTime=0x2dbe0800, ftLastAccessTime.dwHighDateTime=0x1cac6fb, ftLastWriteTime.dwLowDateTime=0x2dbe0800, ftLastWriteTime.dwHighDateTime=0x1cac6fb, nFileSizeHigh=0x0, nFileSizeLow=0xd5000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Extended_x64.msi", cAlternateFileName="NETFX_~3.MSI")) returned 1 [0045.531] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x7626f700, ftCreationTime.dwHighDateTime=0x1cac6f6, ftLastAccessTime.dwLowDateTime=0x7626f700, ftLastAccessTime.dwHighDateTime=0x1cac6f6, ftLastWriteTime.dwLowDateTime=0x7626f700, ftLastWriteTime.dwHighDateTime=0x1cac6f6, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Extended_x86.msi", cAlternateFileName="NETFX_~4.MSI")) returned 1 [0045.532] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4a0f7400, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x4a0f7400, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x4a0f7400, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x426ae, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="ParameterInfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0045.532] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x19dedd00, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x19dedd00, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x19dedd00, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d200, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="RGB9RAST_x64.msi", cAlternateFileName="RGB9RA~1.MSI")) returned 1 [0045.532] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x177c8300, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x177c8300, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x177c8300, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x17200, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="RGB9Rast_x86.msi", cAlternateFileName="RGB9RA~2.MSI")) returned 1 [0045.532] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x13148, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Setup.exe", cAlternateFileName="")) returned 1 [0045.532] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0xc5158, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SetupEngine.dll", cAlternateFileName="SETUPE~1.DLL")) returned 1 [0045.532] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x48150, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SetupUi.dll", cAlternateFileName="")) returned 1 [0045.532] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5381000, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x5381000, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x5381000, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x75a8, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SetupUi.xsd", cAlternateFileName="")) returned 1 [0045.532] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6519be00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0x6519be00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0x6519be00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x17758, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SetupUtility.exe", cAlternateFileName="SETUPU~1.EXE")) returned 1 [0045.532] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0xa078, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SplashScreen.bmp", cAlternateFileName="SPLASH~1.BMP")) returned 1 [0045.532] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x143bc400, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0x143bc400, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x143bc400, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x23420, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0045.533] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3704, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Strings.xml", cAlternateFileName="")) returned 1 [0045.533] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x97f2, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0045.533] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0x19688, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="watermark.bmp", cAlternateFileName="WATERM~1.BMP")) returned 1 [0045.533] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0x2120bc00, ftLastWriteTime.dwHighDateTime=0x1cac6c9, nFileSizeHigh=0x0, nFileSizeLow=0x4f5113, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows6.0-KB956250-v6001-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0045.533] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0x1bbe7400, ftLastWriteTime.dwHighDateTime=0x1cac6bf, nFileSizeHigh=0x0, nFileSizeLow=0x217520, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows6.0-KB956250-v6001-x86.msu", cAlternateFileName="WINDOW~2.MSU")) returned 1 [0045.533] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0x5b8e5700, ftLastWriteTime.dwHighDateTime=0x1cac6d1, nFileSizeHigh=0x0, nFileSizeLow=0x4db1ce, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows6.1-KB958488-v6001-x64.msu", cAlternateFileName="WINDOW~3.MSU")) returned 1 [0045.533] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 1 [0045.533] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 0 [0045.533] FindClose (in: hFindFile=0x139e80 | out: hFindFile=0x139e80) returned 1 [0045.533] GetProcessHeap () returned 0x120000 [0045.533] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1c3f18 | out: hHeap=0x120000) returned 1 [0045.534] FindNextFileW (in: hFindFile=0x1398c0, lpFindFileData=0x2a5f938 | out: lpFindFileData=0x2a5f938*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6fa258, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1149afd, dwReserved1=0x745f9fc4, cFileName="Boot", cAlternateFileName="")) returned 1 [0045.534] GetProcessHeap () returned 0x120000 [0045.534] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x1c3f18 [0045.534] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\*", lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x139b80 [0045.535] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0045.536] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xac3efa99, ftLastAccessTime.dwHighDateTime=0x1d4d5d3, ftLastWriteTime.dwLowDateTime=0xac3efa99, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="BCD", cAlternateFileName="")) returned 1 [0045.536] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0045.536] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0045.536] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0045.536] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0045.536] GetProcessHeap () returned 0x120000 [0045.536] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0045.536] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\bg-BG\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139cc0 [0045.537] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.537] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0045.537] FindNextFileW (in: hFindFile=0x139cc0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0045.537] FindClose (in: hFindFile=0x139cc0 | out: hFindFile=0x139cc0) returned 1 [0045.537] GetProcessHeap () returned 0x120000 [0045.537] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0045.537] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4e6d79, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef4e6d79, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x175a0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="bootspaces.dll", cAlternateFileName="BOOTSP~1.DLL")) returned 1 [0045.537] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xef703e94, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0045.537] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef4fcd12, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x185a0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="bootvhd.dll", cAlternateFileName="")) returned 1 [0045.537] FindNextFileW (in: hFindFile=0x139b80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0045.537] GetProcessHeap () returned 0x120000 [0045.537] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0045.538] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0045.540] GetProcessHeap () returned 0x120000 [0045.540] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0045.712] GetProcessHeap () returned 0x120000 [0045.712] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0045.712] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\da-DK\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139880 [0045.727] GetProcessHeap () returned 0x120000 [0045.727] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0045.735] GetProcessHeap () returned 0x120000 [0045.735] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0045.735] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\de-DE\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139880 [0045.744] GetProcessHeap () returned 0x120000 [0045.744] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0045.744] GetProcessHeap () returned 0x120000 [0045.744] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0045.744] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\el-GR\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139e40 [0045.745] GetProcessHeap () returned 0x120000 [0045.745] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0045.745] GetProcessHeap () returned 0x120000 [0045.745] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0045.745] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\en-GB\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d00 [0045.745] GetProcessHeap () returned 0x120000 [0045.745] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0045.745] GetProcessHeap () returned 0x120000 [0045.745] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0045.745] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\en-US\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d00 [0045.745] GetProcessHeap () returned 0x120000 [0045.745] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0045.745] GetProcessHeap () returned 0x120000 [0045.745] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0045.745] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\es-ES\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d00 [0045.745] GetProcessHeap () returned 0x120000 [0045.745] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0045.745] GetProcessHeap () returned 0x120000 [0045.745] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0045.745] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\es-MX\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d80 [0045.746] GetProcessHeap () returned 0x120000 [0045.746] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0045.746] GetProcessHeap () returned 0x120000 [0045.746] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0045.746] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\et-EE\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139e40 [0045.746] GetProcessHeap () returned 0x120000 [0045.746] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0045.746] GetProcessHeap () returned 0x120000 [0045.746] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0045.746] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fi-FI\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d00 [0045.746] GetProcessHeap () returned 0x120000 [0045.746] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0045.746] GetProcessHeap () returned 0x120000 [0045.746] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0045.746] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Fonts\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139e80 [0045.747] GetProcessHeap () returned 0x120000 [0045.747] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0045.748] GetProcessHeap () returned 0x120000 [0045.748] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0045.748] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fr-CA\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139880 [0045.748] GetProcessHeap () returned 0x120000 [0045.748] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0045.748] GetProcessHeap () returned 0x120000 [0045.748] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0045.748] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fr-FR\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d00 [0045.748] GetProcessHeap () returned 0x120000 [0045.748] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0045.748] GetProcessHeap () returned 0x120000 [0045.748] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0045.748] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\hr-HR\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d00 [0045.749] GetProcessHeap () returned 0x120000 [0045.749] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0045.749] GetProcessHeap () returned 0x120000 [0045.749] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0045.749] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\hu-HU\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d00 [0045.749] GetProcessHeap () returned 0x120000 [0045.749] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0045.749] GetProcessHeap () returned 0x120000 [0045.749] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0045.749] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\it-IT\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d00 [0045.750] GetProcessHeap () returned 0x120000 [0045.750] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0045.750] GetProcessHeap () returned 0x120000 [0045.750] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0045.750] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ja-JP\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139e40 [0045.750] GetProcessHeap () returned 0x120000 [0045.750] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0045.750] GetProcessHeap () returned 0x120000 [0045.750] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0045.750] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ko-KR\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d80 [0045.751] GetProcessHeap () returned 0x120000 [0045.751] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0045.751] GetProcessHeap () returned 0x120000 [0045.751] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0045.751] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\lt-LT\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139e40 [0045.751] GetProcessHeap () returned 0x120000 [0045.751] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0045.751] GetProcessHeap () returned 0x120000 [0045.751] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0045.751] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\lv-LV\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d80 [0045.752] GetProcessHeap () returned 0x120000 [0045.752] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0045.752] GetProcessHeap () returned 0x120000 [0045.752] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0045.752] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\nb-NO\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d80 [0045.753] GetProcessHeap () returned 0x120000 [0045.753] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0045.753] GetProcessHeap () returned 0x120000 [0045.753] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0045.753] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\nl-NL\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d80 [0045.753] GetProcessHeap () returned 0x120000 [0045.753] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0045.753] GetProcessHeap () returned 0x120000 [0045.753] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0045.753] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pl-PL\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139e40 [0045.754] GetProcessHeap () returned 0x120000 [0045.754] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0045.754] GetProcessHeap () returned 0x120000 [0045.754] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0045.754] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pt-BR\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0045.754] GetProcessHeap () returned 0x120000 [0045.754] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0045.754] GetProcessHeap () returned 0x120000 [0045.755] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0045.755] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pt-PT\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d00 [0045.755] GetProcessHeap () returned 0x120000 [0045.755] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0045.756] GetProcessHeap () returned 0x120000 [0045.756] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0045.756] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139880 [0045.756] GetProcessHeap () returned 0x120000 [0045.756] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0045.756] GetProcessHeap () returned 0x120000 [0045.756] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0045.756] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Resources\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d00 [0045.757] GetProcessHeap () returned 0x120000 [0045.757] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x610e10 [0045.758] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Resources\\en-US\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d80 [0045.758] GetProcessHeap () returned 0x120000 [0045.758] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x610e10 | out: hHeap=0x120000) returned 1 [0045.758] GetProcessHeap () returned 0x120000 [0045.758] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0045.758] GetProcessHeap () returned 0x120000 [0045.758] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0045.758] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ro-RO\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139dc0 [0045.759] GetProcessHeap () returned 0x120000 [0045.759] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0045.759] GetProcessHeap () returned 0x120000 [0045.759] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0045.759] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ru-RU\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d00 [0045.760] GetProcessHeap () returned 0x120000 [0045.760] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0045.760] GetProcessHeap () returned 0x120000 [0045.760] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0045.760] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sk-SK\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d00 [0045.760] GetProcessHeap () returned 0x120000 [0045.760] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0045.760] GetProcessHeap () returned 0x120000 [0045.760] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0045.760] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sl-SI\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139e80 [0045.761] GetProcessHeap () returned 0x120000 [0045.761] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0045.761] GetProcessHeap () returned 0x120000 [0045.761] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0045.761] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d00 [0045.761] GetProcessHeap () returned 0x120000 [0045.761] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0045.761] GetProcessHeap () returned 0x120000 [0045.761] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0045.761] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sr-Latn-RS\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d00 [0045.762] GetProcessHeap () returned 0x120000 [0045.762] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0045.762] GetProcessHeap () returned 0x120000 [0045.762] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0045.762] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sv-SE\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139e80 [0045.762] GetProcessHeap () returned 0x120000 [0045.763] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0045.763] GetProcessHeap () returned 0x120000 [0045.763] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0045.763] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\tr-TR\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d00 [0045.763] GetProcessHeap () returned 0x120000 [0045.763] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0045.763] GetProcessHeap () returned 0x120000 [0045.763] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0045.763] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\uk-UA\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d00 [0045.764] GetProcessHeap () returned 0x120000 [0045.764] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0045.764] GetProcessHeap () returned 0x120000 [0045.764] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0045.764] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-CN\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d00 [0045.764] GetProcessHeap () returned 0x120000 [0045.764] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0045.765] GetProcessHeap () returned 0x120000 [0045.765] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0045.765] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-HK\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d00 [0045.765] GetProcessHeap () returned 0x120000 [0045.765] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0045.765] GetProcessHeap () returned 0x120000 [0045.765] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x17fdf8 [0045.765] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-TW\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d00 [0045.765] GetProcessHeap () returned 0x120000 [0045.765] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17fdf8 | out: hHeap=0x120000) returned 1 [0045.765] GetProcessHeap () returned 0x120000 [0045.766] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1c3f18 | out: hHeap=0x120000) returned 1 [0045.766] GetProcessHeap () returned 0x120000 [0045.766] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x1c3f18 [0045.767] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ESD\\*", lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x139b80 [0045.769] GetProcessHeap () returned 0x120000 [0045.769] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1c3f18 | out: hHeap=0x120000) returned 1 [0045.769] GetProcessHeap () returned 0x120000 [0045.769] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x1c3f18 [0045.769] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Logs\\*", lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x139880 [0046.081] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0046.081] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5052fa31, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5052fa31, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Application.evtx", cAlternateFileName="APPLIC~1.EVT")) returned 1 [0046.081] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505ee5f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505ee5f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="HardwareEvents.evtx", cAlternateFileName="HARDWA~1.EVT")) returned 1 [0046.081] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505a2134, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505a2134, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Internet Explorer.evtx", cAlternateFileName="INTERN~1.EVT")) returned 1 [0046.081] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5057bed8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5057bed8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Key Management Service.evtx", cAlternateFileName="KEYMAN~1.EVT")) returned 1 [0046.081] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1dbd7c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1dbd7c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Client-Licensing-Platform%4Admin.evtx", cAlternateFileName="MICROS~1.EVT")) returned 1 [0046.082] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5d836e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5d836e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx", cAlternateFileName="MICROS~2.EVT")) returned 1 [0046.082] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9206ac5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9206ac5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9c0f529, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx", cAlternateFileName="MICROS~3.EVT")) returned 1 [0046.082] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppLocker%4EXE and DLL.evtx", cAlternateFileName="MICROS~4.EVT")) returned 1 [0046.082] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4169a7a, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4169a7a, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppLocker%4MSI and Script.evtx", cAlternateFileName="MI2EEA~1.EVT")) returned 1 [0046.082] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx", cAlternateFileName="MI07E1~1.EVT")) returned 1 [0046.082] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx", cAlternateFileName="MI8196~1.EVT")) returned 1 [0046.082] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd41b5f2d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd41b5f2d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppModel-Runtime%4Admin.evtx", cAlternateFileName="MIE36C~1.EVT")) returned 1 [0046.082] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd389efbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd389efbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppReadiness%4Admin.evtx", cAlternateFileName="MIC5CB~1.EVT")) returned 1 [0046.082] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd38c5212, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd38c5212, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppReadiness%4Operational.evtx", cAlternateFileName="MIF8AA~1.EVT")) returned 1 [0046.082] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppXDeployment%4Operational.evtx", cAlternateFileName="MI34FE~1.EVT")) returned 1 [0046.082] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x211000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppXDeploymentServer%4Operational.evtx", cAlternateFileName="MIA24C~1.EVT")) returned 1 [0046.082] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx", cAlternateFileName="MIDBEC~1.EVT")) returned 1 [0046.082] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85798667, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x85798667, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppxPackaging%4Operational.evtx", cAlternateFileName="MI54F1~1.EVT")) returned 1 [0046.082] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74d25ab, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74d25ab, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx", cAlternateFileName="MI111F~1.EVT")) returned 1 [0046.082] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f96ca4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe1f96ca4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Bits-Client%4Operational.evtx", cAlternateFileName="MI9465~1.EVT")) returned 1 [0046.083] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8783aa15, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8783aa15, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-CodeIntegrity%4Operational.evtx", cAlternateFileName="MI03A7~1.EVT")) returned 1 [0046.083] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3c71c5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3c71c5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx", cAlternateFileName="MI5CA2~1.EVT")) returned 1 [0046.083] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx", cAlternateFileName="MI5FD1~1.EVT")) returned 1 [0046.083] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Crypto-DPAPI%4Operational.evtx", cAlternateFileName="MI8BDF~1.EVT")) returned 1 [0046.083] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3ed420, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3ed420, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx", cAlternateFileName="MIAEBD~1.EVT")) returned 1 [0046.083] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cef47f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cef47f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-DeviceSetupManager%4Admin.evtx", cAlternateFileName="MIA726~1.EVT")) returned 1 [0046.083] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-DeviceSetupManager%4Operational.evtx", cAlternateFileName="MI08CB~1.EVT")) returned 1 [0046.083] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc967f17e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc967f17e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Dhcp-Client%4Admin.evtx", cAlternateFileName="MI8270~1.EVT")) returned 1 [0046.083] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc96cb64b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc96cb64b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Dhcpv6-Client%4Admin.evtx", cAlternateFileName="MIEBFF~1.EVT")) returned 1 [0046.083] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64aa7b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca64aa7b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Diagnosis-DPS%4Operational.evtx", cAlternateFileName="MI9F85~1.EVT")) returned 1 [0046.083] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd9ec80, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xfd9ec80, ftLastAccessTime.dwHighDateTime=0x1d1a04f, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Diagnostics-Performance%4Operational.evtx", cAlternateFileName="MIBE3D~1.EVT")) returned 1 [0046.084] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9658ef3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9658ef3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-GroupPolicy%4Operational.evtx", cAlternateFileName="MIE38D~1.EVT")) returned 1 [0046.084] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9dcc480, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9dcc480, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-HotspotAuth%4Operational.evtx", cAlternateFileName="MIE386~1.EVT")) returned 1 [0046.084] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b4bacf, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b4bacf, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx", cAlternateFileName="MI6B25~1.EVT")) returned 1 [0046.084] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb66288f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-International%4Operational.evtx", cAlternateFileName="MI854A~1.EVT")) returned 1 [0046.084] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x506ad1ac, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x506ad1ac, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Kernel-Boot%4Operational.evtx", cAlternateFileName="MI32CE~1.EVT")) returned 1 [0046.084] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Kernel-EventTracing%4Admin.evtx", cAlternateFileName="MIA934~1.EVT")) returned 1 [0046.084] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5071f8b0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5071f8b0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Kernel-PnP%4Configuration.evtx", cAlternateFileName="MIB32D~1.EVT")) returned 1 [0046.084] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8ebf6d7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc8ebf6d7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx", cAlternateFileName="MICA77~1.EVT")) returned 1 [0046.084] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5090f75d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5090f75d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx", cAlternateFileName="MI1E8D~1.EVT")) returned 1 [0046.084] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd75102f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd75102f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx", cAlternateFileName="MID067~1.EVT")) returned 1 [0046.084] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Kernel-WHEA%4Errors.evtx", cAlternateFileName="MIDE4D~1.EVT")) returned 1 [0046.084] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Kernel-WHEA%4Operational.evtx", cAlternateFileName="MI36C5~1.EVT")) returned 1 [0046.085] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59547c37, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x59547c37, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Known Folders API Service.evtx", cAlternateFileName="MI86D6~1.EVT")) returned 1 [0046.085] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb7386e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbb7386e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-LiveId%4Operational.evtx", cAlternateFileName="MI4C58~1.EVT")) returned 1 [0046.085] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93d06f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93d06f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-MUI%4Admin.evtx", cAlternateFileName="MI30D3~1.EVT")) returned 1 [0046.085] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93aa49b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93aa49b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-MUI%4Operational.evtx", cAlternateFileName="MI6F01~1.EVT")) returned 1 [0046.085] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9d33b19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9d33b19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-NCSI%4Operational.evtx", cAlternateFileName="MI483C~1.EVT")) returned 1 [0046.085] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbcf0ff2, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbcf0ff2, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-NetworkProfile%4Operational.evtx", cAlternateFileName="MIFC66~1.EVT")) returned 1 [0046.085] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ab3154, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ab3154, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Ntfs%4Operational.evtx", cAlternateFileName="MI6E98~1.EVT")) returned 1 [0046.085] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ad9393, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ad9393, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Ntfs%4WHC.evtx", cAlternateFileName="MIB2AC~1.EVT")) returned 1 [0046.085] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5fe5cb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5fe5cb, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx", cAlternateFileName="MI6AFE~1.EVT")) returned 1 [0046.085] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe24cdef0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe24cdef0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-ReadyBoost%4Operational.evtx", cAlternateFileName="MIB9D2~1.EVT")) returned 1 [0046.085] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd125335f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd125335f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx", cAlternateFileName="MI7A67~1.EVT")) returned 1 [0046.085] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-SettingSync%4Debug.evtx", cAlternateFileName="MI3773~1.EVT")) returned 1 [0046.085] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-SettingSync%4Operational.evtx", cAlternateFileName="MI36AA~1.EVT")) returned 1 [0046.085] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Shell-Core%4ActionCenter.evtx", cAlternateFileName="MI2E2E~1.EVT")) returned 1 [0046.086] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Shell-Core%4Operational.evtx", cAlternateFileName="MI1C6C~1.EVT")) returned 1 [0046.086] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-SmbClient%4Connectivity.evtx", cAlternateFileName="MI00FB~1.EVT")) returned 1 [0046.086] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97b042f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97b042f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-SMBClient%4Operational.evtx", cAlternateFileName="MID8B0~1.EVT")) returned 1 [0046.086] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-SmbClient%4Security.evtx", cAlternateFileName="MI8CEE~1.EVT")) returned 1 [0046.086] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb1ea1c9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb1ea1c9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-SMBServer%4Audit.evtx", cAlternateFileName="MIE3AD~1.EVT")) returned 1 [0046.086] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb19dd19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb19dd19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-SMBServer%4Connectivity.evtx", cAlternateFileName="MI8248~1.EVT")) returned 1 [0046.086] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb151873, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb151873, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-SMBServer%4Operational.evtx", cAlternateFileName="MI4B6B~1.EVT")) returned 1 [0046.086] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb177aca, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb177aca, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-SMBServer%4Security.evtx", cAlternateFileName="MI7709~1.EVT")) returned 1 [0046.086] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd751ea61, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd751ea61, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Store%4Operational.evtx", cAlternateFileName="MICEDD~1.EVT")) returned 1 [0046.086] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd0763ff, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd0763ff, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-TaskScheduler%4Maintenance.evtx", cAlternateFileName="MIE2F0~1.EVT")) returned 1 [0046.087] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5089d037, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5089d037, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx", cAlternateFileName="MIAB1D~1.EVT")) returned 1 [0046.087] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x508c32a6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x508c32a6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx", cAlternateFileName="MI62D3~1.EVT")) returned 1 [0046.087] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc14341c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc14341c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx", cAlternateFileName="MIEC03~1.EVT")) returned 1 [0046.087] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1b5b23, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1b5b23, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx", cAlternateFileName="MI1F5D~1.EVT")) returned 1 [0046.087] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74ac348, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74ac348, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-TWinUI%4Operational.evtx", cAlternateFileName="MIA925~1.EVT")) returned 1 [0046.087] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50aff605, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50aff605, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-User Profile Service%4Operational.evtx", cAlternateFileName="MI4D4C~1.EVT")) returned 1 [0046.087] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50981e6e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50981e6e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-UserPnp%4ActionCenter.evtx", cAlternateFileName="MI5FF0~1.EVT")) returned 1 [0046.087] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5095bc04, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5095bc04, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-UserPnp%4DeviceInstall.evtx", cAlternateFileName="MIBD88~1.EVT")) returned 1 [0046.087] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b97f64, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b97f64, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx", cAlternateFileName="MICC17~1.EVT")) returned 1 [0046.087] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc986efe1, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc986efe1, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Wcmsvc%4Operational.evtx", cAlternateFileName="MI72BF~1.EVT")) returned 1 [0046.087] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb426548, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb426548, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Windows Defender%4Operational.evtx", cAlternateFileName="MI7501~1.EVT")) returned 1 [0046.087] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb4729e7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb4729e7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Windows Defender%4WHC.evtx", cAlternateFileName="MIF226~1.EVT")) returned 1 [0046.087] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4b19353, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4b19353, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx", cAlternateFileName="MIDCC7~1.EVT")) returned 1 [0046.087] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9c9b1b6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9c9b1b6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx", cAlternateFileName="MI7771~1.EVT")) returned 1 [0046.088] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9df26e9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9df26e9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx", cAlternateFileName="MI4667~1.EVT")) returned 1 [0046.088] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd122d184, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd122d184, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Winlogon%4Operational.evtx", cAlternateFileName="MID6AB~1.EVT")) returned 1 [0046.088] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf164b9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcf164b9b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-WMI-Activity%4Operational.evtx", cAlternateFileName="MIFF83~1.EVT")) returned 1 [0046.088] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9a458f4, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Security.evtx", cAlternateFileName="SECURI~1.EVT")) returned 1 [0046.088] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a6db2c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x95a6db2c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Setup.evtx", cAlternateFileName="SETUP~1.EVT")) returned 1 [0046.088] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505097c4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505097c4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="System.evtx", cAlternateFileName="SYSTEM~1.EVT")) returned 1 [0046.088] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows PowerShell.evtx", cAlternateFileName="WINDOW~1.EVT")) returned 1 [0046.088] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows PowerShell.evtx", cAlternateFileName="WINDOW~1.EVT")) returned 0 [0046.088] FindClose (in: hFindFile=0x139880 | out: hFindFile=0x139880) returned 1 [0046.089] GetProcessHeap () returned 0x120000 [0046.089] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1c3f18 | out: hHeap=0x120000) returned 1 [0046.089] FindNextFileW (in: hFindFile=0x1398c0, lpFindFileData=0x2a5f938 | out: lpFindFileData=0x2a5f938*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6e97b025, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0x6e97b025, ftLastAccessTime.dwHighDateTime=0x1d3275c, ftLastWriteTime.dwLowDateTime=0x47384f2, ftLastWriteTime.dwHighDateTime=0x1d4d600, nFileSizeHigh=0x0, nFileSizeLow=0x28000000, dwReserved0=0xa0000003, dwReserved1=0x745f9fc4, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0046.089] FindNextFileW (in: hFindFile=0x1398c0, lpFindFileData=0x2a5f938 | out: lpFindFileData=0x2a5f938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x745f9fc4, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0046.089] GetProcessHeap () returned 0x120000 [0046.089] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x1c3f18 [0046.089] FindFirstFileW (in: lpFileName="\\\\?\\C:\\PerfLogs\\*", lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x139d80 [0046.089] FindNextFileW (in: hFindFile=0x139d80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0046.089] FindNextFileW (in: hFindFile=0x139d80, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 0 [0046.089] FindClose (in: hFindFile=0x139d80 | out: hFindFile=0x139d80) returned 1 [0046.089] GetProcessHeap () returned 0x120000 [0046.090] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1c3f18 | out: hHeap=0x120000) returned 1 [0046.090] FindNextFileW (in: hFindFile=0x1398c0, lpFindFileData=0x2a5f938 | out: lpFindFileData=0x2a5f938*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x518874ca, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x518874ca, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x745f9fc4, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0046.090] GetProcessHeap () returned 0x120000 [0046.090] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x1c3f18 [0046.090] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\*", lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x518874ca, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x518874ca, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x139880 [0046.090] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x518874ca, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x518874ca, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0046.090] FindNextFileW (in: hFindFile=0x139880, lpFindFileData=0x2a5f6a8 | out: lpFindFileData=0x2a5f6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1 [0046.090] GetProcessHeap () returned 0x120000 [0046.090] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0046.090] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d80 [0046.090] FindNextFileW (in: hFindFile=0x139d80, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.090] FindNextFileW (in: hFindFile=0x139d80, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESIGNER", cAlternateFileName="")) returned 1 [0046.091] GetProcessHeap () returned 0x120000 [0046.091] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0046.091] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139dc0 [0046.091] FindNextFileW (in: hFindFile=0x139dc0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.091] FindNextFileW (in: hFindFile=0x139dc0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8c3a00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5c8c3a00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.OLB", cAlternateFileName="")) returned 1 [0046.091] FindNextFileW (in: hFindFile=0x139dc0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8c3a00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5c8c3a00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.OLB", cAlternateFileName="")) returned 0 [0046.091] FindClose (in: hFindFile=0x139dc0 | out: hFindFile=0x139dc0) returned 1 [0046.091] GetProcessHeap () returned 0x120000 [0046.091] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0046.091] FindNextFileW (in: hFindFile=0x139d80, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft shared", cAlternateFileName="MICROS~1")) returned 1 [0046.091] GetProcessHeap () returned 0x120000 [0046.091] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0046.091] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139dc0 [0046.091] FindNextFileW (in: hFindFile=0x139dc0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.092] FindNextFileW (in: hFindFile=0x139dc0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81028f76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x81028f76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClickToRun", cAlternateFileName="CLICKT~1")) returned 1 [0046.092] GetProcessHeap () returned 0x120000 [0046.092] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0046.092] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81028f76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x81028f76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139e80 [0046.092] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81028f76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x81028f76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.092] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x809e6bf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x809e6bf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1 [0046.093] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x809e6bf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x809e6bf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1 [0046.093] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="API-MS~3.DLL")) returned 1 [0046.093] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="API-MS~4.DLL")) returned 1 [0046.093] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="APF10C~1.DLL")) returned 1 [0046.093] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1 [0046.093] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="APA632~1.DLL")) returned 1 [0046.093] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1 [0046.093] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x58c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="APFD9C~1.DLL")) returned 1 [0046.093] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="APC00F~1.DLL")) returned 1 [0046.093] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="AP0479~1.DLL")) returned 1 [0046.093] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="AP23C9~1.DLL")) returned 1 [0046.093] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1 [0046.093] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="APAE51~1.DLL")) returned 1 [0046.093] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x68c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1 [0046.094] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1 [0046.094] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="APFCAD~1.DLL")) returned 1 [0046.094] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="AP8F34~1.DLL")) returned 1 [0046.094] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="APD1B7~1.DLL")) returned 1 [0046.094] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="APBF0F~1.DLL")) returned 1 [0046.094] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="AP5E4C~1.DLL")) returned 1 [0046.094] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="AP80F4~1.DLL")) returned 1 [0046.094] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb979f700, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x27c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApiClient.dll", cAlternateFileName="APICLI~1.DLL")) returned 1 [0046.094] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9bc01200, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0xa02d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVCatalog.dll", cAlternateFileName="APPVCA~1.DLL")) returned 1 [0046.094] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x1f5ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="appvcleaner.exe", cAlternateFileName="APPVCL~1.EXE")) returned 1 [0046.094] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a330a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a330a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x4b0d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVFileSystemMetadata.dll", cAlternateFileName="APPVFI~1.DLL")) returned 1 [0046.094] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a330a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a330a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x2052d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVIntegration.dll", cAlternateFileName="APPVIN~1.DLL")) returned 1 [0046.094] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a59305, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a59305, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x726d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVIsvApi.dll", cAlternateFileName="APPVIS~1.DLL")) returned 1 [0046.094] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe1b7300, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0x60ea0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppvIsvStream32.dll", cAlternateFileName="APPVIS~2.DLL")) returned 1 [0046.095] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb5e67000, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x73aa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppvIsvStream64.dll", cAlternateFileName="APPVIS~3.DLL")) returned 1 [0046.095] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x336d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVIsvStreamingManager.dll", cAlternateFileName="APPVIS~4.DLL")) returned 1 [0046.095] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80aa57b9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80aa57b9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x1566d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVIsvSubsystemController.dll", cAlternateFileName="AP213A~1.DLL")) returned 1 [0046.095] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80aa57b9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80aa57b9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x18d60800, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0x1ae0a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppvIsvSubsystems32.dll", cAlternateFileName="AP3342~1.DLL")) returned 1 [0046.095] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80acba0b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80acba0b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbbdc5100, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x22e0a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppvIsvSubsystems64.dll", cAlternateFileName="AP4400~1.DLL")) returned 1 [0046.095] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80af1c6a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80af1c6a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x8a8d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVIsvVirtualization.dll", cAlternateFileName="AP485B~1.DLL")) returned 1 [0046.095] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80af1c6a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80af1c6a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x12cad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVManifest.dll", cAlternateFileName="APPVMA~1.DLL")) returned 1 [0046.095] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b17ebf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b17ebf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0xe76d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVOrchestration.dll", cAlternateFileName="APPVOR~1.DLL")) returned 1 [0046.095] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b17ebf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b17ebf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x13c4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVPolicy.dll", cAlternateFileName="APPVPO~1.DLL")) returned 1 [0046.095] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b17ebf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b17ebf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9e226c00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x7d0d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVScripting.dll", cAlternateFileName="APPVSC~1.DLL")) returned 1 [0046.095] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9e226c00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x406d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVShNotify.exe", cAlternateFileName="APPVSH~1.EXE")) returned 1 [0046.095] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x14115400, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0xc84c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2R32.dll", cAlternateFileName="")) returned 1 [0046.095] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb4b54300, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x127260, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2R64.dll", cAlternateFileName="")) returned 1 [0046.095] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8ee04f00, ftLastWriteTime.dwHighDateTime=0x1d0d67f, nFileSizeHigh=0x0, nFileSizeLow=0x1028, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RHeartbeatConfig.xml", cAlternateFileName="C2RHEA~1.XML")) returned 1 [0046.095] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb3841600, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RUI.en-us.dll", cAlternateFileName="C2RUIE~1.DLL")) returned 1 [0046.096] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x514a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="concrt140.dll", cAlternateFileName="CONCRT~1.DLL")) returned 1 [0046.096] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbd783a00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="i640.hash", cAlternateFileName="I640~1.HAS")) returned 1 [0046.096] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbc470d00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="i641033.hash", cAlternateFileName="I64103~1.HAS")) returned 1 [0046.096] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbe3eab00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x10ae80, dwReserved0=0x0, dwReserved1=0x0, cFileName="IntegratedOffice.exe", cAlternateFileName="INTEGR~1.EXE")) returned 1 [0046.096] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b8a5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b8a5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xa2e72000, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x578d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MavInject32.exe", cAlternateFileName="MAVINJ~1.EXE")) returned 1 [0046.096] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b8a5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b8a5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8745c00, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0x2ffa60, dwReserved0=0x0, dwReserved1=0x0, cFileName="mso20win32client.dll", cAlternateFileName="MSO20W~1.DLL")) returned 1 [0046.096] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80bb0837, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80bb0837, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xad6b600, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0x475e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="mso30win32client.dll", cAlternateFileName="MSO30W~1.DLL")) returned 1 [0046.096] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80bfccf1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80bfccf1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x307ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mso40uires.dll", cAlternateFileName="MSO40U~1.DLL")) returned 1 [0046.096] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c22f4a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80c22f4a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x10cc9700, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0x8e6060, dwReserved0=0x0, dwReserved1=0x0, cFileName="mso40uiwin32client.dll", cAlternateFileName="MSO40U~2.DLL")) returned 1 [0046.096] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x11fdc400, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0xee60, dwReserved0=0x0, dwReserved1=0x0, cFileName="msointl30.en-us.dll", cAlternateFileName="MSOINT~1.DLL")) returned 1 [0046.096] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c9565a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80c9565a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1909ea00, ftLastWriteTime.dwHighDateTime=0x1d098bf, nFileSizeHigh=0x0, nFileSizeLow=0xa12a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1 [0046.096] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cbb8b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80cbb8b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x9b0a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1 [0046.096] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cbb8b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80cbb8b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b6c4400, ftLastWriteTime.dwHighDateTime=0x1d098bf, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1 [0046.096] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cbb8b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80cbb8b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x5b1068, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeC2RClient.exe", cAlternateFileName="OFFICE~1.EXE")) returned 1 [0046.096] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d07d85, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d07d85, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0xf34d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeC2RCom.dll", cAlternateFileName="OFFICE~1.DLL")) returned 1 [0046.096] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d07d85, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d07d85, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbd0d7e00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x2a5e58, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeClickToRun.exe", cAlternateFileName="OFFICE~2.EXE")) returned 1 [0046.097] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3f141b52, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x12ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeUpdateSchedule.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0046.097] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3fa7ec8f, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x1162, dwReserved0=0x0, dwReserved1=0x0, cFileName="ServiceWatcherSchedule.xml", cAlternateFileName="SERVIC~1.XML")) returned 1 [0046.097] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbe3eab00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x101458, dwReserved0=0x0, dwReserved1=0x0, cFileName="StreamServer.dll", cAlternateFileName="STREAM~1.DLL")) returned 1 [0046.097] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0xefec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ucrtbase.dll", cAlternateFileName="")) returned 1 [0046.097] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d7a486, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d7a486, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x5f4b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vccorlib140.dll", cAlternateFileName="VCCORL~1.DLL")) returned 1 [0046.097] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d7a486, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d7a486, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 1 [0046.097] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d7a486, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d7a486, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 0 [0046.097] FindClose (in: hFindFile=0x139e80 | out: hFindFile=0x139e80) returned 1 [0046.097] GetProcessHeap () returned 0x120000 [0046.097] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0046.097] FindNextFileW (in: hFindFile=0x139dc0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ink", cAlternateFileName="")) returned 1 [0046.097] GetProcessHeap () returned 0x120000 [0046.097] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0046.097] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139e80 [0046.175] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.176] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe462e472, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe462e472, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xc137d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Alphabet.xml", cAlternateFileName="")) returned 1 [0046.176] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05532b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-SA", cAlternateFileName="")) returned 1 [0046.176] GetProcessHeap () returned 0x120000 [0046.176] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0046.176] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05532b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.176] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05532b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.176] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0046.176] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0046.176] FindClose (in: hFindFile=0x139ec0 | out: hFindFile=0x139ec0) returned 1 [0046.177] GetProcessHeap () returned 0x120000 [0046.177] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0046.177] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0553f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0046.177] GetProcessHeap () returned 0x120000 [0046.177] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0046.177] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0553f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.177] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0553f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.177] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0046.177] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0046.177] FindClose (in: hFindFile=0x139ec0 | out: hFindFile=0x139ec0) returned 1 [0046.177] GetProcessHeap () returned 0x120000 [0046.177] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0046.177] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe46546cb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe46546cb, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x69a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content.xml", cAlternateFileName="")) returned 1 [0046.177] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0554b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0046.177] GetProcessHeap () returned 0x120000 [0046.177] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0046.177] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0554b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.177] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0554b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.177] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e316e09, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e316e09, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e316e09, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0046.177] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e316e09, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e316e09, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e316e09, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0046.178] FindClose (in: hFindFile=0x139ec0 | out: hFindFile=0x139ec0) returned 1 [0046.178] GetProcessHeap () returned 0x120000 [0046.178] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0046.178] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05550d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0046.178] GetProcessHeap () returned 0x120000 [0046.178] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0046.178] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05550d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.178] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05550d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.178] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2f0ba2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2f0ba2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2f0ba2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0046.178] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2f0ba2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2f0ba2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2f0ba2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0046.178] FindClose (in: hFindFile=0x139ec0 | out: hFindFile=0x139ec0) returned 1 [0046.178] GetProcessHeap () returned 0x120000 [0046.178] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0046.178] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0555b2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0046.178] GetProcessHeap () returned 0x120000 [0046.178] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0046.178] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0555b2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.178] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0555b2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.178] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2f0ba2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2f0ba2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2f0ba2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0046.178] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2f0ba2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2f0ba2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2f0ba2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0046.178] FindClose (in: hFindFile=0x139ec0 | out: hFindFile=0x139ec0) returned 1 [0046.179] GetProcessHeap () returned 0x120000 [0046.179] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0046.179] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa055662c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0046.179] GetProcessHeap () returned 0x120000 [0046.179] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0046.179] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa055662c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.179] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa055662c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.179] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0046.179] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0046.179] FindClose (in: hFindFile=0x139ec0 | out: hFindFile=0x139ec0) returned 1 [0046.179] GetProcessHeap () returned 0x120000 [0046.179] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0046.179] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0557085, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB", cAlternateFileName="")) returned 1 [0046.179] GetProcessHeap () returned 0x120000 [0046.179] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0046.179] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0557085, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.179] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0557085, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.179] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0046.179] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0046.179] FindClose (in: hFindFile=0x139ec0 | out: hFindFile=0x139ec0) returned 1 [0046.180] GetProcessHeap () returned 0x120000 [0046.180] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0046.180] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dd09d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0046.180] GetProcessHeap () returned 0x120000 [0046.180] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0046.180] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dd09d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.180] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dd09d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.180] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a3b058, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a3b058, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1b2d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-correct.avi", cAlternateFileName="")) returned 1 [0046.180] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a612b1, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a612b1, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xbf28, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-delete.avi", cAlternateFileName="")) returned 1 [0046.181] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a1d507, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1aad768, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1aad768, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb61e, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-join.avi", cAlternateFileName="")) returned 1 [0046.181] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x148de, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-split.avi", cAlternateFileName="")) returned 1 [0046.181] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2bfcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="correct.avi", cAlternateFileName="")) returned 1 [0046.181] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a612b1, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a612b1, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x32e18, dwReserved0=0x0, dwReserved1=0x0, cFileName="delete.avi", cAlternateFileName="")) returned 1 [0046.181] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da3ec5f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7bf3d600, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickLearningWizard.exe.mui", cAlternateFileName="")) returned 1 [0046.181] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dab1374, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7e563000, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkObj.dll.mui", cAlternateFileName="")) returned 1 [0046.181] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d9f27a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7f875d00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization.exe.mui", cAlternateFileName="")) returned 1 [0046.181] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d9f27a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7f875d00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPSEventLogMsg.dll.mui", cAlternateFileName="")) returned 1 [0046.181] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da18a06, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x80b88a00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsMigrationPlugin.dll.mui", cAlternateFileName="")) returned 1 [0046.181] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a1d507, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1af9c24, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1af9c24, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x30d3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="join.avi", cAlternateFileName="")) returned 1 [0046.181] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7e563000, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll.mui", cAlternateFileName="")) returned 1 [0046.181] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da8b116, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7d250300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mip.exe.mui", cAlternateFileName="")) returned 1 [0046.181] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da18a06, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x80b88a00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwLatin.dll.mui", cAlternateFileName="")) returned 1 [0046.181] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dab1374, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7e563000, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll.mui", cAlternateFileName="")) returned 1 [0046.181] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da18a06, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7f875d00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.exe.mui", cAlternateFileName="")) returned 1 [0046.182] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2c6cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="split.avi", cAlternateFileName="")) returned 1 [0046.182] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7e563000, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="tabskb.dll.mui", cAlternateFileName="")) returned 1 [0046.182] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da8b116, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7d250300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabTip.exe.mui", cAlternateFileName="")) returned 1 [0046.182] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ffe6194, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7c896e00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x6200, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipRes.dll.mui", cAlternateFileName="")) returned 1 [0046.182] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0046.182] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7d250300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 1 [0046.182] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7d250300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 0 [0046.182] FindClose (in: hFindFile=0x139ec0 | out: hFindFile=0x139ec0) returned 1 [0046.183] GetProcessHeap () returned 0x120000 [0046.183] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0046.183] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05ddf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0046.183] GetProcessHeap () returned 0x120000 [0046.183] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0046.183] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05ddf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.183] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05ddf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.183] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0046.183] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0046.183] FindClose (in: hFindFile=0x139ec0 | out: hFindFile=0x139ec0) returned 1 [0046.183] GetProcessHeap () returned 0x120000 [0046.183] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0046.183] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dea14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-MX", cAlternateFileName="")) returned 1 [0046.183] GetProcessHeap () returned 0x120000 [0046.183] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0046.183] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dea14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.183] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dea14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.183] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2a46df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2a46df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2a46df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0046.183] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2a46df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2a46df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2a46df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0046.184] FindClose (in: hFindFile=0x139ec0 | out: hFindFile=0x139ec0) returned 1 [0046.184] GetProcessHeap () returned 0x120000 [0046.184] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0046.184] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df011, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et-EE", cAlternateFileName="")) returned 1 [0046.184] GetProcessHeap () returned 0x120000 [0046.184] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0046.184] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df011, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.184] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df011, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.184] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0046.184] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0046.184] FindClose (in: hFindFile=0x139ec0 | out: hFindFile=0x139ec0) returned 1 [0046.184] GetProcessHeap () returned 0x120000 [0046.184] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0046.184] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df7b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0046.184] GetProcessHeap () returned 0x120000 [0046.184] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0046.184] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df7b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.184] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df7b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.184] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0046.184] FindNextFileW (in: hFindFile=0x139ec0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0046.184] FindClose (in: hFindFile=0x139ec0 | out: hFindFile=0x139ec0) returned 1 [0046.185] GetProcessHeap () returned 0x120000 [0046.185] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0046.185] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8f49e8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd11f8841, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd11f8841, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x186b84, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickAnimation.avi", cAlternateFileName="")) returned 1 [0046.185] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8f49e8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd121ea9a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd121ea9a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xc4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickLearningWizard.exe", cAlternateFileName="")) returned 1 [0046.185] GetProcessHeap () returned 0x120000 [0046.185] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0046.185] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0635c03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.185] GetProcessHeap () returned 0x120000 [0046.185] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0046.185] GetProcessHeap () returned 0x120000 [0046.185] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0046.185] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06369df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.185] GetProcessHeap () returned 0x120000 [0046.185] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0046.185] GetProcessHeap () returned 0x120000 [0046.185] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0046.185] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0637839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215cf0 [0046.188] GetProcessHeap () returned 0x120000 [0046.188] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0046.188] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638633, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215b30 [0046.188] GetProcessHeap () returned 0x120000 [0046.188] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0046.188] GetProcessHeap () returned 0x120000 [0046.188] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0046.188] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638c00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215d30 [0046.189] GetProcessHeap () returned 0x120000 [0046.189] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0046.189] GetProcessHeap () returned 0x120000 [0046.189] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0046.189] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa063932e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215fb0 [0046.189] GetProcessHeap () returned 0x120000 [0046.189] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0046.189] GetProcessHeap () returned 0x120000 [0046.189] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0046.189] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cd023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215a30 [0046.191] GetProcessHeap () returned 0x120000 [0046.191] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0046.191] GetProcessHeap () returned 0x120000 [0046.191] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0046.191] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cdb88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215f70 [0046.192] GetProcessHeap () returned 0x120000 [0046.192] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0046.192] GetProcessHeap () returned 0x120000 [0046.192] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0046.192] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215eb0 [0046.192] GetProcessHeap () returned 0x120000 [0046.192] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0046.192] GetProcessHeap () returned 0x120000 [0046.192] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0046.192] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce7a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215b70 [0046.193] GetProcessHeap () returned 0x120000 [0046.193] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0046.193] GetProcessHeap () returned 0x120000 [0046.193] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0046.193] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ceb7f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215bb0 [0046.193] GetProcessHeap () returned 0x120000 [0046.193] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0046.193] GetProcessHeap () returned 0x120000 [0046.193] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0046.193] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cef41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215bb0 [0046.193] GetProcessHeap () returned 0x120000 [0046.193] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0046.193] GetProcessHeap () returned 0x120000 [0046.193] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0046.193] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf371, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215f70 [0046.194] GetProcessHeap () returned 0x120000 [0046.194] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0046.194] GetProcessHeap () returned 0x120000 [0046.194] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0046.195] GetProcessHeap () returned 0x120000 [0046.195] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0046.195] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x216070 [0046.196] GetProcessHeap () returned 0x120000 [0046.196] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0046.196] GetProcessHeap () returned 0x120000 [0046.196] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0046.196] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215bb0 [0046.196] GetProcessHeap () returned 0x120000 [0046.196] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0046.196] GetProcessHeap () returned 0x120000 [0046.196] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0046.196] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0046.196] GetProcessHeap () returned 0x120000 [0046.196] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0046.196] GetProcessHeap () returned 0x120000 [0046.196] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0046.196] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\HWRCustomization\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152b0 [0046.197] GetProcessHeap () returned 0x120000 [0046.197] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0046.197] GetProcessHeap () returned 0x120000 [0046.197] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0046.197] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0769b1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.198] GetProcessHeap () returned 0x120000 [0046.198] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0046.198] GetProcessHeap () returned 0x120000 [0046.198] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0046.198] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.198] GetProcessHeap () returned 0x120000 [0046.198] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0046.198] GetProcessHeap () returned 0x120000 [0046.198] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0046.198] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.198] GetProcessHeap () returned 0x120000 [0046.198] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0046.198] GetProcessHeap () returned 0x120000 [0046.198] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0046.198] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.199] GetProcessHeap () returned 0x120000 [0046.199] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0046.200] GetProcessHeap () returned 0x120000 [0046.200] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.201] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.201] GetProcessHeap () returned 0x120000 [0046.201] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.201] GetProcessHeap () returned 0x120000 [0046.201] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.201] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.201] GetProcessHeap () returned 0x120000 [0046.201] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.201] GetProcessHeap () returned 0x120000 [0046.201] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.201] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076bff5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.201] GetProcessHeap () returned 0x120000 [0046.201] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.202] GetProcessHeap () returned 0x120000 [0046.202] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.202] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.202] GetProcessHeap () returned 0x120000 [0046.202] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.202] GetProcessHeap () returned 0x120000 [0046.202] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.202] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.202] GetProcessHeap () returned 0x120000 [0046.202] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.203] GetProcessHeap () returned 0x120000 [0046.203] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.203] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.203] GetProcessHeap () returned 0x120000 [0046.203] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.203] GetProcessHeap () returned 0x120000 [0046.203] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.203] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.203] GetProcessHeap () returned 0x120000 [0046.203] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.203] GetProcessHeap () returned 0x120000 [0046.203] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.203] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.204] GetProcessHeap () returned 0x120000 [0046.204] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.204] GetProcessHeap () returned 0x120000 [0046.204] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.204] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.204] GetProcessHeap () returned 0x120000 [0046.204] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.204] GetProcessHeap () returned 0x120000 [0046.204] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.204] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.204] GetProcessHeap () returned 0x120000 [0046.204] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.204] GetProcessHeap () returned 0x120000 [0046.204] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.204] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.205] GetProcessHeap () returned 0x120000 [0046.205] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.205] GetProcessHeap () returned 0x120000 [0046.205] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.205] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.206] GetProcessHeap () returned 0x120000 [0046.206] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.206] GetProcessHeap () returned 0x120000 [0046.206] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.206] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.206] GetProcessHeap () returned 0x120000 [0046.206] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.206] GetProcessHeap () returned 0x120000 [0046.206] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.206] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.207] GetProcessHeap () returned 0x120000 [0046.207] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.207] GetProcessHeap () returned 0x120000 [0046.207] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.207] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.207] GetProcessHeap () returned 0x120000 [0046.207] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.207] GetProcessHeap () returned 0x120000 [0046.207] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.207] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.208] GetProcessHeap () returned 0x120000 [0046.208] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.208] GetProcessHeap () returned 0x120000 [0046.208] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.208] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.208] GetProcessHeap () returned 0x120000 [0046.208] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.208] GetProcessHeap () returned 0x120000 [0046.208] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.208] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.208] GetProcessHeap () returned 0x120000 [0046.208] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.208] GetProcessHeap () returned 0x120000 [0046.208] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0046.209] GetProcessHeap () returned 0x120000 [0046.209] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0046.209] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139e80 [0046.210] GetProcessHeap () returned 0x120000 [0046.210] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0046.210] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa098aa4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215530 [0046.211] GetProcessHeap () returned 0x120000 [0046.211] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0046.212] GetProcessHeap () returned 0x120000 [0046.212] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0046.213] GetProcessHeap () returned 0x120000 [0046.213] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0046.213] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9f60362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.450] GetProcessHeap () returned 0x120000 [0046.450] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0046.451] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa0a26299, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda982389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215af0 [0046.451] GetProcessHeap () returned 0x120000 [0046.451] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0046.451] GetProcessHeap () returned 0x120000 [0046.451] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0046.452] GetProcessHeap () returned 0x120000 [0046.452] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0046.453] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.453] GetProcessHeap () returned 0x120000 [0046.453] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0046.453] GetProcessHeap () returned 0x120000 [0046.453] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0046.453] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.454] GetProcessHeap () returned 0x120000 [0046.454] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0046.454] GetProcessHeap () returned 0x120000 [0046.454] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0046.454] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.456] GetProcessHeap () returned 0x120000 [0046.456] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0046.456] GetProcessHeap () returned 0x120000 [0046.456] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0046.456] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.456] GetProcessHeap () returned 0x120000 [0046.456] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0046.456] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\en-US\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215a70 [0046.456] GetProcessHeap () returned 0x120000 [0046.457] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0046.457] GetProcessHeap () returned 0x120000 [0046.457] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0046.457] GetProcessHeap () returned 0x120000 [0046.457] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0046.458] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.459] GetProcessHeap () returned 0x120000 [0046.459] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0046.459] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\en-US\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156b0 [0046.459] GetProcessHeap () returned 0x120000 [0046.459] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0046.459] GetProcessHeap () returned 0x120000 [0046.459] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0046.459] GetProcessHeap () returned 0x120000 [0046.460] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0046.460] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.461] GetProcessHeap () returned 0x120000 [0046.461] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0046.461] GetProcessHeap () returned 0x120000 [0046.461] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0046.461] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VGX\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.461] GetProcessHeap () returned 0x120000 [0046.461] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0046.461] GetProcessHeap () returned 0x120000 [0046.461] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0046.461] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.461] GetProcessHeap () returned 0x120000 [0046.462] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0046.462] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aebd53e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0046.463] GetProcessHeap () returned 0x120000 [0046.463] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0046.463] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157f0 [0046.465] GetProcessHeap () returned 0x120000 [0046.465] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0046.466] GetProcessHeap () returned 0x120000 [0046.466] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0046.466] GetProcessHeap () returned 0x120000 [0046.466] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0046.466] GetProcessHeap () returned 0x120000 [0046.466] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0046.467] GetProcessHeap () returned 0x120000 [0046.467] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0046.467] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Services\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139dc0 [0046.467] GetProcessHeap () returned 0x120000 [0046.467] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0046.467] GetProcessHeap () returned 0x120000 [0046.467] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0046.467] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139dc0 [0046.469] GetProcessHeap () returned 0x120000 [0046.469] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0046.469] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.471] GetProcessHeap () returned 0x120000 [0046.471] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0046.471] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\en-US\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215770 [0046.471] GetProcessHeap () returned 0x120000 [0046.471] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0046.471] GetProcessHeap () returned 0x120000 [0046.471] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0046.472] GetProcessHeap () returned 0x120000 [0046.472] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0046.472] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\en-US\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.472] GetProcessHeap () returned 0x120000 [0046.472] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0046.472] GetProcessHeap () returned 0x120000 [0046.472] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0046.472] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.474] GetProcessHeap () returned 0x120000 [0046.474] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0046.474] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157f0 [0046.475] GetProcessHeap () returned 0x120000 [0046.475] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0046.475] GetProcessHeap () returned 0x120000 [0046.475] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0046.476] GetProcessHeap () returned 0x120000 [0046.476] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0046.476] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.478] GetProcessHeap () returned 0x120000 [0046.478] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0046.478] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215cb0 [0046.478] GetProcessHeap () returned 0x120000 [0046.478] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0046.478] GetProcessHeap () returned 0x120000 [0046.478] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0046.479] GetProcessHeap () returned 0x120000 [0046.479] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0046.479] GetProcessHeap () returned 0x120000 [0046.479] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0046.480] GetProcessHeap () returned 0x120000 [0046.480] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0046.481] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4ea7bdb9, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x4ea7bdb9, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d80 [0046.481] GetProcessHeap () returned 0x120000 [0046.481] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0046.482] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139dc0 [0046.482] GetProcessHeap () returned 0x120000 [0046.482] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0046.482] GetProcessHeap () returned 0x120000 [0046.482] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0046.482] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\images\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139dc0 [0046.482] GetProcessHeap () returned 0x120000 [0046.482] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0046.482] GetProcessHeap () returned 0x120000 [0046.482] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0046.482] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\SIGNUP\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139dc0 [0046.483] GetProcessHeap () returned 0x120000 [0046.483] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0046.483] GetProcessHeap () returned 0x120000 [0046.483] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0046.484] GetProcessHeap () returned 0x120000 [0046.484] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0046.485] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa235ac5b, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa235ac5b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d80 [0046.485] GetProcessHeap () returned 0x120000 [0046.485] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0046.485] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139dc0 [0046.745] GetProcessHeap () returned 0x120000 [0046.745] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0046.745] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.747] GetProcessHeap () returned 0x120000 [0046.747] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0046.747] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2891a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215170 [0046.748] GetProcessHeap () returned 0x120000 [0046.748] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0046.749] GetProcessHeap () returned 0x120000 [0046.749] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0046.749] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215130 [0046.749] GetProcessHeap () returned 0x120000 [0046.749] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0046.750] GetProcessHeap () returned 0x120000 [0046.750] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0046.750] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215a30 [0046.750] GetProcessHeap () returned 0x120000 [0046.750] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0046.750] GetProcessHeap () returned 0x120000 [0046.750] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0046.751] GetProcessHeap () returned 0x120000 [0046.751] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0046.752] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.754] GetProcessHeap () returned 0x120000 [0046.754] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0046.754] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155f0 [0046.756] GetProcessHeap () returned 0x120000 [0046.756] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0046.756] GetProcessHeap () returned 0x120000 [0046.756] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0046.756] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\applet\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215bf0 [0046.756] GetProcessHeap () returned 0x120000 [0046.756] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0046.756] GetProcessHeap () returned 0x120000 [0046.756] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0046.757] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105e2a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215b30 [0046.757] GetProcessHeap () returned 0x120000 [0046.757] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0046.757] GetProcessHeap () returned 0x120000 [0046.757] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0046.757] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0046.759] GetProcessHeap () returned 0x120000 [0046.759] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0046.759] GetProcessHeap () returned 0x120000 [0046.759] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0046.759] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa11bdb26, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215830 [0046.762] GetProcessHeap () returned 0x120000 [0046.762] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0046.762] GetProcessHeap () returned 0x120000 [0046.762] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0046.762] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa122f229, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x216070 [0046.765] GetProcessHeap () returned 0x120000 [0046.765] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0046.765] GetProcessHeap () returned 0x120000 [0046.765] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0046.765] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215d30 [0046.766] GetProcessHeap () returned 0x120000 [0046.766] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0046.766] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215eb0 [0046.768] GetProcessHeap () returned 0x120000 [0046.768] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0046.768] GetProcessHeap () returned 0x120000 [0046.768] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0046.768] GetProcessHeap () returned 0x120000 [0046.768] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0046.768] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1295634, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215db0 [0046.769] GetProcessHeap () returned 0x120000 [0046.769] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0046.769] GetProcessHeap () returned 0x120000 [0046.769] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0046.769] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152b0 [0046.772] GetProcessHeap () returned 0x120000 [0046.772] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0046.772] GetProcessHeap () returned 0x120000 [0046.772] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0046.772] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157f0 [0046.774] GetProcessHeap () returned 0x120000 [0046.774] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0046.774] GetProcessHeap () returned 0x120000 [0046.774] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0046.775] GetProcessHeap () returned 0x120000 [0046.775] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0046.776] GetProcessHeap () returned 0x120000 [0046.776] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0046.777] GetProcessHeap () returned 0x120000 [0046.777] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0046.778] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf9dfb986, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139d80 [0046.778] GetProcessHeap () returned 0x120000 [0046.778] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0046.778] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.779] GetProcessHeap () returned 0x120000 [0046.779] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0046.779] GetProcessHeap () returned 0x120000 [0046.779] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0046.779] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139dc0 [0046.784] GetProcessHeap () returned 0x120000 [0046.784] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0046.784] GetProcessHeap () returned 0x120000 [0046.784] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0046.784] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139dc0 [0046.784] GetProcessHeap () returned 0x120000 [0046.785] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0046.785] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2ca2e08, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.786] GetProcessHeap () returned 0x120000 [0046.786] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0046.786] GetProcessHeap () returned 0x120000 [0046.786] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0046.786] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0046.787] GetProcessHeap () returned 0x120000 [0046.787] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0046.787] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x147260 [0047.279] GetProcessHeap () returned 0x120000 [0047.279] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0047.279] GetProcessHeap () returned 0x120000 [0047.279] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0047.279] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x146ca0 [0047.280] GetProcessHeap () returned 0x120000 [0047.280] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0047.280] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x147420 [0047.282] GetProcessHeap () returned 0x120000 [0047.282] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0047.282] GetProcessHeap () returned 0x120000 [0047.282] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0047.283] GetProcessHeap () returned 0x120000 [0047.283] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0047.283] GetProcessHeap () returned 0x120000 [0047.283] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0047.283] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0047.284] GetProcessHeap () returned 0x120000 [0047.284] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0047.284] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1472e0 [0047.286] GetProcessHeap () returned 0x120000 [0047.286] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0047.286] GetProcessHeap () returned 0x120000 [0047.286] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0047.286] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x146da0 [0047.288] GetProcessHeap () returned 0x120000 [0047.288] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0047.288] GetProcessHeap () returned 0x120000 [0047.288] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0047.288] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x147020 [0047.291] GetProcessHeap () returned 0x120000 [0047.291] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0047.291] GetProcessHeap () returned 0x120000 [0047.291] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0047.292] GetProcessHeap () returned 0x120000 [0047.292] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0047.293] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Flattener\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114f5747, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114f5747, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0047.294] GetProcessHeap () returned 0x120000 [0047.294] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0047.294] GetProcessHeap () returned 0x120000 [0047.294] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0047.294] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\fre\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0047.545] GetProcessHeap () returned 0x120000 [0047.545] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0047.545] GetProcessHeap () returned 0x120000 [0047.545] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0047.545] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Integration\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b2abe77, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b2abe77, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0047.549] GetProcessHeap () returned 0x120000 [0047.549] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0047.549] GetProcessHeap () returned 0x120000 [0047.549] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0047.549] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Licenses16\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2687c83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee308135, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0048.071] GetProcessHeap () returned 0x120000 [0048.071] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0048.072] GetProcessHeap () returned 0x120000 [0048.072] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0048.072] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\loc\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee45f66d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x983c2c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139e80 [0048.072] GetProcessHeap () returned 0x120000 [0048.072] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0048.072] GetProcessHeap () returned 0x120000 [0048.072] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0048.072] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\mcxml\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139e80 [0048.073] GetProcessHeap () returned 0x120000 [0048.073] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0048.073] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92201bc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3b8c7ea5, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b8c7ea5, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0048.080] GetProcessHeap () returned 0x120000 [0048.080] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0048.080] GetProcessHeap () returned 0x120000 [0048.080] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0048.080] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\mcxml\\es-es\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99dfc61, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99dfc61, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99dfc61, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0048.082] GetProcessHeap () returned 0x120000 [0048.082] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0048.082] GetProcessHeap () returned 0x120000 [0048.082] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0048.082] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\mcxml\\fr-fr\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99473dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99473dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99473dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0048.085] GetProcessHeap () returned 0x120000 [0048.085] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0048.085] GetProcessHeap () returned 0x120000 [0048.085] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0048.085] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1164cbcb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0048.287] GetProcessHeap () returned 0x120000 [0048.287] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0048.287] GetProcessHeap () returned 0x120000 [0048.287] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0048.287] GetProcessHeap () returned 0x120000 [0048.287] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0048.287] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139e80 [0048.290] GetProcessHeap () returned 0x120000 [0048.290] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0048.290] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b93a5c4, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b93a5c4, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0048.291] GetProcessHeap () returned 0x120000 [0048.291] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0048.291] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ac4a8a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ac4a8a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ac4a8a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x147060 [0048.294] GetProcessHeap () returned 0x120000 [0048.294] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0048.294] GetProcessHeap () returned 0x120000 [0048.294] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0048.294] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1697068, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x99937c0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99937c0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x146fa0 [0048.296] GetProcessHeap () returned 0x120000 [0048.296] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0048.305] GetProcessHeap () returned 0x120000 [0048.305] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0048.305] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc7c11d2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x631610 [0048.308] GetProcessHeap () returned 0x120000 [0048.308] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0048.308] GetProcessHeap () returned 0x120000 [0048.308] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0048.308] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x630ed0 [0048.313] GetProcessHeap () returned 0x120000 [0048.313] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0048.313] GetProcessHeap () returned 0x120000 [0048.313] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0048.313] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x631610 [0048.316] GetProcessHeap () returned 0x120000 [0048.316] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0048.427] GetProcessHeap () returned 0x120000 [0048.427] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0048.428] GetProcessHeap () returned 0x120000 [0048.428] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0048.428] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1036\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d440f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d440f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d440f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0048.429] GetProcessHeap () returned 0x120000 [0048.429] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0048.429] GetProcessHeap () returned 0x120000 [0048.429] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0048.429] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\3082\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d440f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d440f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d440f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0048.429] GetProcessHeap () returned 0x120000 [0048.429] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0048.429] GetProcessHeap () returned 0x120000 [0048.429] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0048.429] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1295fc19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x12985c4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0048.430] GetProcessHeap () returned 0x120000 [0048.430] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0048.430] GetProcessHeap () returned 0x120000 [0048.430] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0048.430] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1335b74d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1335b74d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0048.434] GetProcessHeap () returned 0x120000 [0048.434] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0048.434] GetProcessHeap () returned 0x120000 [0048.434] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0048.434] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc7c5a96a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133819a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0048.435] GetProcessHeap () returned 0x120000 [0048.435] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0048.435] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd42039, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd42039, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1906f0 [0048.435] GetProcessHeap () returned 0x120000 [0048.435] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0048.436] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x895576a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x895576a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190af0 [0048.436] GetProcessHeap () returned 0x120000 [0048.436] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0048.437] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ar\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190bf0 [0048.439] GetProcessHeap () returned 0x120000 [0048.439] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0048.439] GetProcessHeap () returned 0x120000 [0048.439] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0048.439] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bg\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf480feb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x18157e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18157e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190ab0 [0048.447] GetProcessHeap () returned 0x120000 [0048.447] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0048.447] GetProcessHeap () returned 0x120000 [0048.447] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0048.447] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x61b241f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x61b241f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1907b0 [0048.452] GetProcessHeap () returned 0x120000 [0048.452] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0048.452] GetProcessHeap () returned 0x120000 [0048.452] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0048.452] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cs\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf134fca5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ee20e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ee20e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1908f0 [0048.455] GetProcessHeap () returned 0x120000 [0048.455] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0048.455] GetProcessHeap () returned 0x120000 [0048.455] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0048.455] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\da\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c164a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6866e01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6866e01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190630 [0048.461] GetProcessHeap () returned 0x120000 [0048.461] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0048.461] GetProcessHeap () returned 0x120000 [0048.461] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0048.461] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\de\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190730 [0048.463] GetProcessHeap () returned 0x120000 [0048.463] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0048.463] GetProcessHeap () returned 0x120000 [0048.463] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0048.463] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\el\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190c70 [0048.981] GetProcessHeap () returned 0x120000 [0048.982] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0048.984] GetProcessHeap () returned 0x120000 [0048.984] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0048.984] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\es\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190a70 [0049.048] GetProcessHeap () returned 0x120000 [0049.048] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0049.048] GetProcessHeap () returned 0x120000 [0049.048] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0049.048] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\et\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8719376, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8719376, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190b70 [0049.049] GetProcessHeap () returned 0x120000 [0049.049] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0049.049] GetProcessHeap () returned 0x120000 [0049.049] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0049.049] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\eu\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x69980f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69980f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190bf0 [0049.055] GetProcessHeap () returned 0x120000 [0049.055] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0049.055] GetProcessHeap () returned 0x120000 [0049.055] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0049.056] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fi\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6bae279, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bae279, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190bf0 [0049.057] GetProcessHeap () returned 0x120000 [0049.057] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0049.057] GetProcessHeap () returned 0x120000 [0049.057] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0049.057] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fr\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1908f0 [0049.058] GetProcessHeap () returned 0x120000 [0049.059] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0049.059] GetProcessHeap () returned 0x120000 [0049.059] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0049.059] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gl\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e0a643, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x675bda6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x675bda6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190cb0 [0049.060] GetProcessHeap () returned 0x120000 [0049.060] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0049.060] GetProcessHeap () returned 0x120000 [0049.060] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0049.060] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\he\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c8cf9c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190ab0 [0049.064] GetProcessHeap () returned 0x120000 [0049.064] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0049.064] GetProcessHeap () returned 0x120000 [0049.064] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0049.064] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hi\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf43e3cb7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190a70 [0049.065] GetProcessHeap () returned 0x120000 [0049.065] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0049.065] GetProcessHeap () returned 0x120000 [0049.065] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0049.066] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hr\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190b30 [0049.067] GetProcessHeap () returned 0x120000 [0049.067] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0049.067] GetProcessHeap () returned 0x120000 [0049.067] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0049.067] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hu\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ebbef3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ebbef3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190730 [0049.069] GetProcessHeap () returned 0x120000 [0049.069] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0049.069] GetProcessHeap () returned 0x120000 [0049.069] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0049.069] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\id\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc43098a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc43098a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190870 [0049.072] GetProcessHeap () returned 0x120000 [0049.072] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0049.072] GetProcessHeap () returned 0x120000 [0049.072] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0049.072] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\it\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa89f599, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6270fd0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6270fd0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190770 [0049.075] GetProcessHeap () returned 0x120000 [0049.075] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0049.075] GetProcessHeap () returned 0x120000 [0049.075] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0049.075] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ja\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x91adba5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x91adba5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1909f0 [0049.076] GetProcessHeap () returned 0x120000 [0049.076] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0049.076] GetProcessHeap () returned 0x120000 [0049.076] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0049.076] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kk\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd09866, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6d2b978, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d2b978, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190a30 [0049.912] GetProcessHeap () returned 0x120000 [0049.913] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0049.913] GetProcessHeap () returned 0x120000 [0049.913] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0049.913] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ko\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12b7378, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x5101cbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190b30 [0049.914] GetProcessHeap () returned 0x120000 [0049.914] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0049.914] GetProcessHeap () returned 0x120000 [0049.914] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0049.914] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lt\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6bad1cb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x22f6470, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190730 [0049.916] GetProcessHeap () returned 0x120000 [0049.916] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0049.916] GetProcessHeap () returned 0x120000 [0049.916] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0049.916] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lv\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x59f29de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59f29de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190cb0 [0049.918] GetProcessHeap () returned 0x120000 [0049.918] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0049.918] GetProcessHeap () returned 0x120000 [0049.918] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0049.918] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ms\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190b70 [0049.920] GetProcessHeap () returned 0x120000 [0049.920] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0049.920] GetProcessHeap () returned 0x120000 [0049.920] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0049.920] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nl\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0822be8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190b30 [0049.921] GetProcessHeap () returned 0x120000 [0049.921] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0049.921] GetProcessHeap () returned 0x120000 [0049.921] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0049.922] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\no\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4409f1c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8680a1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190cf0 [0049.923] GetProcessHeap () returned 0x120000 [0049.923] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0049.923] GetProcessHeap () returned 0x120000 [0049.923] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0049.923] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pl\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf854e731, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190b70 [0049.925] GetProcessHeap () returned 0x120000 [0049.925] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0049.925] GetProcessHeap () returned 0x120000 [0049.925] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0049.925] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-BR\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf755cb7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6bfa6d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bfa6d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190ab0 [0049.930] GetProcessHeap () returned 0x120000 [0049.930] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0049.930] GetProcessHeap () returned 0x120000 [0049.930] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0049.930] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-pt\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190b70 [0049.933] GetProcessHeap () returned 0x120000 [0049.933] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0049.933] GetProcessHeap () returned 0x120000 [0049.933] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0049.933] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ro\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190670 [0049.934] GetProcessHeap () returned 0x120000 [0049.934] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0049.934] GetProcessHeap () returned 0x120000 [0049.934] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0049.934] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ru\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf13037fa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf71003, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf71003, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1907f0 [0049.936] GetProcessHeap () returned 0x120000 [0049.936] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0049.936] GetProcessHeap () returned 0x120000 [0049.936] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0049.936] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sk\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190930 [0049.939] GetProcessHeap () returned 0x120000 [0049.939] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0049.939] GetProcessHeap () returned 0x120000 [0049.939] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0049.939] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sl\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190b70 [0049.941] GetProcessHeap () returned 0x120000 [0049.941] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0049.941] GetProcessHeap () returned 0x120000 [0049.941] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0049.941] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf05741b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x4cd5a2f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4cd5a2f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190630 [0049.943] GetProcessHeap () returned 0x120000 [0049.943] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0049.943] GetProcessHeap () returned 0x120000 [0049.943] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0049.943] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6aee686, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6d05722, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d05722, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190970 [0049.944] GetProcessHeap () returned 0x120000 [0049.944] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0049.944] GetProcessHeap () returned 0x120000 [0049.944] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0049.944] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn-CS\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190b30 [0051.365] GetProcessHeap () returned 0x120000 [0051.365] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0051.365] GetProcessHeap () returned 0x120000 [0051.365] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0051.365] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sv\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa25d2ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x670f8d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x670f8d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1906b0 [0051.367] GetProcessHeap () returned 0x120000 [0051.367] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0051.367] GetProcessHeap () returned 0x120000 [0051.367] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0051.367] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\th\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1860d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190ab0 [0051.369] GetProcessHeap () returned 0x120000 [0051.369] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0051.369] GetProcessHeap () returned 0x120000 [0051.369] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0051.369] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tr\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x453c2a7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x453c2a7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190cb0 [0051.370] GetProcessHeap () returned 0x120000 [0051.370] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0051.370] GetProcessHeap () returned 0x120000 [0051.370] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0051.370] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uk\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x37f90ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37f90ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190b30 [0051.375] GetProcessHeap () returned 0x120000 [0051.375] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0051.375] GetProcessHeap () returned 0x120000 [0051.375] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0051.375] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\vi\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4692737, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x4abf9f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4abf9f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190730 [0051.377] GetProcessHeap () returned 0x120000 [0051.377] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0051.377] GetProcessHeap () returned 0x120000 [0051.377] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0051.377] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANS\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e56af1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x680214, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x680214, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190c30 [0051.378] GetProcessHeap () returned 0x120000 [0051.378] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0051.378] GetProcessHeap () returned 0x120000 [0051.378] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0051.378] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANT\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00af60a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5581c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa5581c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190b30 [0051.380] GetProcessHeap () returned 0x120000 [0051.380] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0051.380] GetProcessHeap () returned 0x120000 [0051.380] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0051.381] GetProcessHeap () returned 0x120000 [0051.381] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0051.381] GetProcessHeap () returned 0x120000 [0051.381] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0051.381] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power Map Excel Add-in\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf016e209, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x18fe70 [0051.383] GetProcessHeap () returned 0x120000 [0051.383] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0051.383] GetProcessHeap () returned 0x120000 [0051.383] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0051.383] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1905b0 [0051.383] GetProcessHeap () returned 0x120000 [0051.383] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0051.384] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ar\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190470 [0051.385] GetProcessHeap () returned 0x120000 [0051.385] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0051.385] GetProcessHeap () returned 0x120000 [0051.385] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0051.385] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\bg\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133819a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x18ffb0 [0051.387] GetProcessHeap () returned 0x120000 [0051.387] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0051.387] GetProcessHeap () returned 0x120000 [0051.387] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0051.387] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ca\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42d8c51, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190370 [0051.388] GetProcessHeap () returned 0x120000 [0051.388] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0051.388] GetProcessHeap () returned 0x120000 [0051.388] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0051.388] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\cs\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9a9d821, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190470 [0051.390] GetProcessHeap () returned 0x120000 [0051.390] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0051.390] GetProcessHeap () returned 0x120000 [0051.390] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0051.390] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a6473, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190230 [0051.396] GetProcessHeap () returned 0x120000 [0051.396] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0051.396] GetProcessHeap () returned 0x120000 [0051.396] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0051.396] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\de\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190030 [0051.397] GetProcessHeap () returned 0x120000 [0051.397] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0051.397] GetProcessHeap () returned 0x120000 [0051.397] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0051.398] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\el\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf46b8986, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190570 [0051.399] GetProcessHeap () returned 0x120000 [0051.399] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0051.399] GetProcessHeap () returned 0x120000 [0051.399] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0051.399] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\es\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7582db3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1903b0 [0051.723] GetProcessHeap () returned 0x120000 [0051.723] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0051.723] GetProcessHeap () returned 0x120000 [0051.723] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0051.723] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b0f72e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1902b0 [0051.725] GetProcessHeap () returned 0x120000 [0051.725] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0051.725] GetProcessHeap () returned 0x120000 [0051.725] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0051.725] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\eu\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6d2a978, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1903b0 [0051.726] GetProcessHeap () returned 0x120000 [0051.726] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0051.726] GetProcessHeap () returned 0x120000 [0051.726] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0051.726] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fi\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x138defa8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x138defa8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x18ff30 [0051.728] GetProcessHeap () returned 0x120000 [0051.728] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0051.728] GetProcessHeap () returned 0x120000 [0051.728] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0051.728] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fr\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1902f0 [0051.729] GetProcessHeap () returned 0x120000 [0051.729] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0051.729] GetProcessHeap () returned 0x120000 [0051.729] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0051.729] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\gl\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ac3a61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13aced2b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13aced2b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190370 [0051.732] GetProcessHeap () returned 0x120000 [0051.732] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0051.732] GetProcessHeap () returned 0x120000 [0051.732] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0051.732] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\he\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a98712, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13a8299e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13a8299e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190570 [0051.734] GetProcessHeap () returned 0x120000 [0051.734] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0051.734] GetProcessHeap () returned 0x120000 [0051.734] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0051.734] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hi\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa806c3d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1428e945, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1428e945, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190070 [0051.735] GetProcessHeap () returned 0x120000 [0051.735] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0051.736] GetProcessHeap () returned 0x120000 [0051.736] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0051.736] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hr\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13b67741, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13b67741, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x18ff70 [0051.737] GetProcessHeap () returned 0x120000 [0051.737] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0051.737] GetProcessHeap () returned 0x120000 [0051.737] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0051.737] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6164f96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14648313, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14648313, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1904f0 [0051.738] GetProcessHeap () returned 0x120000 [0051.738] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0051.739] GetProcessHeap () returned 0x120000 [0051.739] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0051.739] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\id\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1434d390, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1434d390, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x18ff70 [0051.740] GetProcessHeap () returned 0x120000 [0051.740] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0051.740] GetProcessHeap () returned 0x120000 [0051.740] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0051.740] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\it\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf964b3dd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14969496, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14969496, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x18ffb0 [0051.742] GetProcessHeap () returned 0x120000 [0051.742] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0051.742] GetProcessHeap () returned 0x120000 [0051.742] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0051.742] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ja\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf15d84bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x146e0bdc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x146e0bdc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190470 [0051.744] GetProcessHeap () returned 0x120000 [0051.744] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0051.744] GetProcessHeap () returned 0x120000 [0051.744] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0051.744] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\kk\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfae6f174, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14b330aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14b330aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x18ffb0 [0051.745] GetProcessHeap () returned 0x120000 [0051.745] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0051.745] GetProcessHeap () returned 0x120000 [0051.745] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0051.745] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ko\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14ac0994, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14ac0994, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1900f0 [0051.747] GetProcessHeap () returned 0x120000 [0051.747] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0051.747] GetProcessHeap () returned 0x120000 [0051.747] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0051.747] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lt\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7b529d9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x152a6704, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x152a6704, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x18ff70 [0051.748] GetProcessHeap () returned 0x120000 [0051.748] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0051.748] GetProcessHeap () returned 0x120000 [0051.748] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0051.748] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lv\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf035e09d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190430 [0051.750] GetProcessHeap () returned 0x120000 [0051.750] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0051.750] GetProcessHeap () returned 0x120000 [0051.750] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0051.750] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ms\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42fef17, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15ab259c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ab259c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1903b0 [0051.751] GetProcessHeap () returned 0x120000 [0051.751] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0051.751] GetProcessHeap () returned 0x120000 [0051.751] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0051.751] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\nl\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x718b80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15a3fea8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15a3fea8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1905f0 [0051.753] GetProcessHeap () returned 0x120000 [0051.753] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0051.753] GetProcessHeap () returned 0x120000 [0051.753] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0051.753] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\no\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15b71118, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b71118, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1900f0 [0052.016] GetProcessHeap () returned 0x120000 [0052.016] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0052.016] GetProcessHeap () returned 0x120000 [0052.016] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0052.016] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pl\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf44c8b33, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15b24c93, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b24c93, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190430 [0052.018] GetProcessHeap () returned 0x120000 [0052.018] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0052.018] GetProcessHeap () returned 0x120000 [0052.018] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0052.018] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15bbd5ad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15bbd5ad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190530 [0052.020] GetProcessHeap () returned 0x120000 [0052.020] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0052.020] GetProcessHeap () returned 0x120000 [0052.020] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0052.020] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt-PT\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf475131d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15be380c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15be380c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190130 [0052.023] GetProcessHeap () returned 0x120000 [0052.023] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0052.023] GetProcessHeap () returned 0x120000 [0052.023] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0052.023] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ro\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6ac83cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15d3adab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d3adab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190130 [0052.024] GetProcessHeap () returned 0x120000 [0052.024] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0052.024] GetProcessHeap () returned 0x120000 [0052.024] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0052.024] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ru\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe00baf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15d14b21, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d14b21, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1905f0 [0052.025] GetProcessHeap () returned 0x120000 [0052.026] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0052.026] GetProcessHeap () returned 0x120000 [0052.026] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0052.026] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sk\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6c6bda4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15e92299, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e92299, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1902b0 [0052.027] GetProcessHeap () returned 0x120000 [0052.027] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0052.027] GetProcessHeap () returned 0x120000 [0052.027] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0052.027] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sl\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b359a5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15e45dad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e45dad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1900b0 [0052.031] GetProcessHeap () returned 0x120000 [0052.031] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0052.031] GetProcessHeap () returned 0x120000 [0052.031] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0052.031] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-cyrl\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15f04999, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15f04999, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1905f0 [0052.033] GetProcessHeap () returned 0x120000 [0052.033] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0052.033] GetProcessHeap () returned 0x120000 [0052.033] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0052.033] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-latn\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa879350, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x160a83ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x160a83ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x18ffb0 [0052.035] GetProcessHeap () returned 0x120000 [0052.035] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0052.035] GetProcessHeap () returned 0x120000 [0052.035] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0052.035] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-Latn-CS\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf45f9db0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15ede724, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ede724, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x18ff30 [0052.036] GetProcessHeap () returned 0x120000 [0052.037] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0052.037] GetProcessHeap () returned 0x120000 [0052.037] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0052.037] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sv\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16035c5a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16035c5a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190270 [0052.039] GetProcessHeap () returned 0x120000 [0052.039] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0052.039] GetProcessHeap () returned 0x120000 [0052.039] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0052.039] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\th\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c66c57, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16166f59, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16166f59, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1901f0 [0052.040] GetProcessHeap () returned 0x120000 [0052.040] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0052.040] GetProcessHeap () returned 0x120000 [0052.040] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0052.040] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16140cde, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16140cde, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x18fff0 [0052.044] GetProcessHeap () returned 0x120000 [0052.044] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0052.044] GetProcessHeap () returned 0x120000 [0052.044] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0052.044] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\uk\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7b9ee02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x161d962a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1904f0 [0052.046] GetProcessHeap () returned 0x120000 [0052.046] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0052.046] GetProcessHeap () returned 0x120000 [0052.046] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0052.046] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\vi\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf637b042, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x161d962a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190370 [0052.047] GetProcessHeap () returned 0x120000 [0052.047] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0052.047] GetProcessHeap () returned 0x120000 [0052.047] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0052.047] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHS\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4c15e5f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x163ef7bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x163ef7bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190530 [0052.050] GetProcessHeap () returned 0x120000 [0052.050] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0052.050] GetProcessHeap () returned 0x120000 [0052.050] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0052.050] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x164159c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x164159c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190430 [0052.051] GetProcessHeap () returned 0x120000 [0052.051] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0052.051] GetProcessHeap () returned 0x120000 [0052.051] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0052.052] GetProcessHeap () returned 0x120000 [0052.052] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0052.053] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1906b0 [0052.053] GetProcessHeap () returned 0x120000 [0052.053] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0052.053] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x163ef7bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x163ef7bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190d70 [0052.055] GetProcessHeap () returned 0x120000 [0052.055] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0052.055] GetProcessHeap () returned 0x120000 [0052.055] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0052.055] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x165b9401, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x165b9401, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190db0 [0052.419] GetProcessHeap () returned 0x120000 [0052.419] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0052.419] GetProcessHeap () returned 0x120000 [0052.419] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0052.419] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16605845, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16605845, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190cb0 [0052.421] GetProcessHeap () returned 0x120000 [0052.421] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0052.421] GetProcessHeap () returned 0x120000 [0052.421] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0052.421] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x164ae360, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1908b0 [0052.423] GetProcessHeap () returned 0x120000 [0052.423] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0052.423] GetProcessHeap () returned 0x120000 [0052.423] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0052.423] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16651cf9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16651cf9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190bb0 [0052.425] GetProcessHeap () returned 0x120000 [0052.425] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0052.425] GetProcessHeap () returned 0x120000 [0052.426] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0052.426] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf10a1263, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1662bb01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1662bb01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190a70 [0052.428] GetProcessHeap () returned 0x120000 [0052.428] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0052.428] GetProcessHeap () returned 0x120000 [0052.428] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0052.428] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190630 [0052.430] GetProcessHeap () returned 0x120000 [0052.430] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0052.430] GetProcessHeap () returned 0x120000 [0052.430] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0052.430] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff580e7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1908b0 [0052.432] GetProcessHeap () returned 0x120000 [0052.432] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0052.432] GetProcessHeap () returned 0x120000 [0052.432] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0052.432] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1906f0 [0052.436] GetProcessHeap () returned 0x120000 [0052.436] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0052.436] GetProcessHeap () returned 0x120000 [0052.436] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0052.436] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1909f0 [0052.438] GetProcessHeap () returned 0x120000 [0052.439] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0052.439] GetProcessHeap () returned 0x120000 [0052.439] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0052.439] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1480f75, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190c70 [0052.440] GetProcessHeap () returned 0x120000 [0052.440] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0052.440] GetProcessHeap () returned 0x120000 [0052.440] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0052.440] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0194432, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190770 [0052.442] GetProcessHeap () returned 0x120000 [0052.442] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0052.442] GetProcessHeap () returned 0x120000 [0052.442] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0052.442] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1906f0 [0052.444] GetProcessHeap () returned 0x120000 [0052.444] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0052.444] GetProcessHeap () returned 0x120000 [0052.444] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0052.444] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf458770a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190c30 [0052.445] GetProcessHeap () returned 0x120000 [0052.445] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0052.445] GetProcessHeap () returned 0x120000 [0052.445] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0052.445] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf05741b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190cf0 [0052.447] GetProcessHeap () returned 0x120000 [0052.447] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0052.447] GetProcessHeap () returned 0x120000 [0052.447] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0052.447] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190c30 [0052.449] GetProcessHeap () returned 0x120000 [0052.449] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0052.449] GetProcessHeap () returned 0x120000 [0052.449] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0052.449] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190b70 [0052.450] GetProcessHeap () returned 0x120000 [0052.450] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0052.450] GetProcessHeap () returned 0x120000 [0052.450] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0052.450] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0f23aa6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190d30 [0052.452] GetProcessHeap () returned 0x120000 [0052.452] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0052.452] GetProcessHeap () returned 0x120000 [0052.452] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0052.452] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe4d066, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190830 [0052.453] FindNextFileW (in: hFindFile=0x190830, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe4d066, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.453] FindNextFileW (in: hFindFile=0x190830, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16710914, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1152, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0052.453] FindNextFileW (in: hFindFile=0x190830, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x196cd32, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x196cd32, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x196cd32, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd028, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0052.453] FindNextFileW (in: hFindFile=0x190830, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7b9ee02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7b9ee02, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7bc5054, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x39070, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0052.453] FindNextFileW (in: hFindFile=0x190830, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x67ce4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67ce4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67ce4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14a90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0052.453] FindNextFileW (in: hFindFile=0x190830, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x61b241f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x61b241f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x61b241f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x200a98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0052.454] FindNextFileW (in: hFindFile=0x190830, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfae6f174, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfae6f174, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfae6f174, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2a98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0052.454] FindNextFileW (in: hFindFile=0x190830, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefe4d066, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefe4d066, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefebf763, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1e038, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0052.454] FindNextFileW (in: hFindFile=0x190830, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbe60d8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbe60d8f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbe60d8f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1 [0052.454] FindNextFileW (in: hFindFile=0x190830, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbdc8437, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbdc8437, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbdc8437, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4c050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0052.454] FindNextFileW (in: hFindFile=0x190830, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefee59ce, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff0bc27, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48088, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0052.454] FindNextFileW (in: hFindFile=0x190830, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0052.454] FindNextFileW (in: hFindFile=0x190830, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1d4bb8b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d4bb8b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d71cd8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1 [0052.454] FindNextFileW (in: hFindFile=0x190830, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2ee20e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2ee20e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2f5480d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a080, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0052.454] FindNextFileW (in: hFindFile=0x190830, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4409f1c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4409f1c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4409f1c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x70ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1 [0052.454] FindNextFileW (in: hFindFile=0x190830, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf07b04e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf07b04e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf07b04e4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15ad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0052.454] FindNextFileW (in: hFindFile=0x190830, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56d17f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1 [0052.454] FindNextFileW (in: hFindFile=0x190830, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf00d5872, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00d5872, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0052.454] FindNextFileW (in: hFindFile=0x190830, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x85e80ac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x85e80ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x85e80ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0052.454] FindNextFileW (in: hFindFile=0x190830, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x61fe8c4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x61fe8c4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x61fe8c4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0052.454] FindNextFileW (in: hFindFile=0x190830, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x61fe8c4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x61fe8c4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x61fe8c4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0 [0052.454] FindClose (in: hFindFile=0x190830 | out: hFindFile=0x190830) returned 1 [0052.455] GetProcessHeap () returned 0x120000 [0052.455] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0052.455] FindNextFileW (in: hFindFile=0x1906b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf158c060, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0052.455] GetProcessHeap () returned 0x120000 [0052.455] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0052.455] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf158c060, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1909b0 [0052.456] FindNextFileW (in: hFindFile=0x1909b0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf158c060, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.456] FindNextFileW (in: hFindFile=0x1909b0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1095, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0052.456] FindNextFileW (in: hFindFile=0x1909b0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf483611a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf483611a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf483611a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xca90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0052.456] FindNextFileW (in: hFindFile=0x1909b0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d2b978, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d2b978, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d2b978, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38ad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0052.456] FindNextFileW (in: hFindFile=0x1909b0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x303975a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0052.457] FindNextFileW (in: hFindFile=0x1909b0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa531f86, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa531f86, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa853100, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1fda98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0052.457] FindNextFileW (in: hFindFile=0x1909b0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffe01c35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffe01c35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x46a153, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0052.457] FindNextFileW (in: hFindFile=0x1909b0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffe01c35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffe01c35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffe01c35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1c030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1 [0052.457] FindNextFileW (in: hFindFile=0x1909b0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x633d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1 [0052.457] FindNextFileW (in: hFindFile=0x1909b0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x63a229e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x63a229e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x63a229e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0052.457] FindNextFileW (in: hFindFile=0x1909b0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa3dba42, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa3dba42, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3dba42, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x46ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1 [0052.457] FindNextFileW (in: hFindFile=0x1909b0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9f15ef0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9f15ef0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9f15ef0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5478, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0052.457] FindNextFileW (in: hFindFile=0x1909b0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf618b1a4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf618b1a4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf618b1a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12058, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0052.457] FindNextFileW (in: hFindFile=0x1909b0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb16b0a3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb16b0a3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb16b0a3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19ae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0052.457] FindNextFileW (in: hFindFile=0x1909b0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf483611a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf483611a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4a25fae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x70ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0052.457] FindNextFileW (in: hFindFile=0x1909b0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6ac83cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6ac83cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6ac83cd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1 [0052.457] FindNextFileW (in: hFindFile=0x1909b0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf15d84bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf15d84bd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf16bd2da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0052.457] FindNextFileW (in: hFindFile=0x1909b0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x624ad43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0052.457] FindNextFileW (in: hFindFile=0x1909b0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb62ec35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb62ec35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb654e78, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0052.457] FindNextFileW (in: hFindFile=0x1909b0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf447c679, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf447c679, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44c8b33, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e58, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0052.457] FindNextFileW (in: hFindFile=0x1909b0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf447c679, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf447c679, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44c8b33, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e58, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0 [0052.458] FindClose (in: hFindFile=0x1909b0 | out: hFindFile=0x1909b0) returned 1 [0052.458] GetProcessHeap () returned 0x120000 [0052.458] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0052.458] FindNextFileW (in: hFindFile=0x1906b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf41a796b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41a796b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf41cdbc1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Interop.MSDASC.dll", cAlternateFileName="INTERO~1.DLL")) returned 1 [0052.458] FindNextFileW (in: hFindFile=0x1906b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1bce2f5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0052.458] GetProcessHeap () returned 0x120000 [0052.458] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0052.458] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1bce2f5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190c70 [0052.459] FindNextFileW (in: hFindFile=0x190c70, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1bce2f5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.459] FindNextFileW (in: hFindFile=0x190c70, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167cf4d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0052.459] FindNextFileW (in: hFindFile=0x190c70, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbe60d8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbe60d8f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc0e95c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0052.459] FindNextFileW (in: hFindFile=0x190c70, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1bce2f5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1bce2f5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1bce2f5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x390a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0052.460] FindNextFileW (in: hFindFile=0x190c70, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2ff666, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2ff666, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2ff666, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13a90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0052.460] FindNextFileW (in: hFindFile=0x190c70, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6165f55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6165f55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x200030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0052.460] FindNextFileW (in: hFindFile=0x190c70, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x51e6a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x51e6a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x520cca6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0052.460] FindNextFileW (in: hFindFile=0x190c70, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x69259a9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x69259a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69259a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1 [0052.460] FindNextFileW (in: hFindFile=0x190c70, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x386b77a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x386b77a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x38b7c4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1 [0052.460] FindNextFileW (in: hFindFile=0x190c70, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x22a9f7a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22a9f7a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22a9f7a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4bab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0052.460] FindNextFileW (in: hFindFile=0x190c70, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffd8f528, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd8f528, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffdb5707, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x47b08, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1 [0052.460] FindNextFileW (in: hFindFile=0x190c70, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc0c33db, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc0c33db, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc0e95c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8088, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0052.460] FindNextFileW (in: hFindFile=0x190c70, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7b9ee02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7b9ee02, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7bc5054, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0052.460] FindNextFileW (in: hFindFile=0x190c70, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6f2911, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6f2911, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6f2911, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a080, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0052.460] FindNextFileW (in: hFindFile=0x190c70, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x70ad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1 [0052.460] FindNextFileW (in: hFindFile=0x190c70, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x688d06d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x688d06d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x688d06d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1 [0052.460] FindNextFileW (in: hFindFile=0x190c70, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2b31ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2b31ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2d943c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1 [0052.460] FindNextFileW (in: hFindFile=0x190c70, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4646280, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4646280, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0052.460] FindNextFileW (in: hFindFile=0x190c70, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x196cd32, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x196cd32, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x196cd32, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9ad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0052.461] FindNextFileW (in: hFindFile=0x190c70, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ac3a61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ac3a61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9bf4d66, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0052.461] FindNextFileW (in: hFindFile=0x190c70, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ac3a61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ac3a61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9bf4d66, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0 [0052.461] FindClose (in: hFindFile=0x190c70 | out: hFindFile=0x190c70) returned 1 [0052.461] GetProcessHeap () returned 0x120000 [0052.461] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0052.461] FindNextFileW (in: hFindFile=0x1906b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0052.461] GetProcessHeap () returned 0x120000 [0052.461] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0052.462] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190970 [0052.462] FindNextFileW (in: hFindFile=0x190970, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.462] FindNextFileW (in: hFindFile=0x190970, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1003, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0052.462] FindNextFileW (in: hFindFile=0x190970, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5c164a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5c164a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5e78ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0052.463] FindNextFileW (in: hFindFile=0x190970, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x680214, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x680214, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x680214, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0052.463] FindNextFileW (in: hFindFile=0x190970, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x22f6470, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22f6470, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0052.463] FindNextFileW (in: hFindFile=0x190970, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x231c662, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x231c662, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x231c662, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x204030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0052.463] FindNextFileW (in: hFindFile=0x190970, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3f7b55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3f7b55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4903b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0052.463] FindNextFileW (in: hFindFile=0x190970, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6c93006, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1eaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1 [0052.463] FindNextFileW (in: hFindFile=0x190970, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbc70f7e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbc70f7e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbc97147, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1 [0052.463] FindNextFileW (in: hFindFile=0x190970, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6cde4ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6cde4ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6d04716, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4c050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0052.463] FindNextFileW (in: hFindFile=0x190970, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd68243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd68243, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x49040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0052.463] FindNextFileW (in: hFindFile=0x190970, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfae6f174, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfae6f174, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfae6f174, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0052.463] FindNextFileW (in: hFindFile=0x190970, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1 [0052.463] FindNextFileW (in: hFindFile=0x190970, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d05722, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d05722, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d05722, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0052.463] FindNextFileW (in: hFindFile=0x190970, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80afe67, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80afe67, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80afe67, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x73068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0052.463] FindNextFileW (in: hFindFile=0x190970, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x680214, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x680214, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x680214, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1 [0052.463] FindNextFileW (in: hFindFile=0x190970, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf99dec29, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99dec29, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9a04f26, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1 [0052.463] FindNextFileW (in: hFindFile=0x190970, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x381f2dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x381f2dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0052.464] FindNextFileW (in: hFindFile=0x190970, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf318faf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf318faf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf37f804b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0052.464] FindNextFileW (in: hFindFile=0x190970, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6081126, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6081126, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x613fd44, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0052.464] FindNextFileW (in: hFindFile=0x190970, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6081126, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6081126, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x613fd44, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0 [0052.464] FindClose (in: hFindFile=0x190970 | out: hFindFile=0x190970) returned 1 [0052.464] GetProcessHeap () returned 0x120000 [0052.464] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0052.464] FindNextFileW (in: hFindFile=0x1906b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kk", cAlternateFileName="")) returned 1 [0052.464] GetProcessHeap () returned 0x120000 [0052.464] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0052.465] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1906f0 [0052.799] FindNextFileW (in: hFindFile=0x1906f0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.799] FindNextFileW (in: hFindFile=0x1906f0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0052.799] FindNextFileW (in: hFindFile=0x1906f0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6bae279, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6bae279, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bae279, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0052.799] FindNextFileW (in: hFindFile=0x1906f0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x231c662, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x231c662, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x231c662, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0052.800] FindNextFileW (in: hFindFile=0x1906f0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x68ff786, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68ff786, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69259a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0052.800] FindNextFileW (in: hFindFile=0x1906f0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c15e5f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4c15e5f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4c15e5f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x20aa98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0052.800] FindNextFileW (in: hFindFile=0x1906f0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b3aadd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6b3aadd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6b3aadd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0052.800] FindNextFileW (in: hFindFile=0x1906f0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7bc5054, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7bc5054, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7beb2bc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x22040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1 [0052.800] FindNextFileW (in: hFindFile=0x1906f0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4bc999b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4bc999b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4bc999b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0052.800] FindNextFileW (in: hFindFile=0x1906f0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x520cca6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x520cca6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5612cee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4d050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0052.800] FindNextFileW (in: hFindFile=0x1906f0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf618b1a4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf618b1a4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf618b1a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x49aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1 [0052.800] FindNextFileW (in: hFindFile=0x1906f0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b61d36, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0052.800] FindNextFileW (in: hFindFile=0x1906f0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x303975a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1 [0052.800] FindNextFileW (in: hFindFile=0x1906f0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5a18be3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a18be3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a18be3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0052.800] FindNextFileW (in: hFindFile=0x1906f0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf44c8b33, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf44c8b33, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44c8b33, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x74040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0052.800] FindNextFileW (in: hFindFile=0x1906f0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf47e9c8f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4a25fae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0052.800] FindNextFileW (in: hFindFile=0x1906f0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2ebae3b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2f2d53e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0052.800] FindNextFileW (in: hFindFile=0x1906f0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5a18be3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a18be3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a3ee57, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4640, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0052.800] FindNextFileW (in: hFindFile=0x1906f0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6735b3a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6735b3a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6735b3a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0052.801] FindNextFileW (in: hFindFile=0x1906f0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfcc3c8ab, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcc3c8ab, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcc62b13, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0052.801] FindNextFileW (in: hFindFile=0x1906f0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfcc3c8ab, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcc3c8ab, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcc62b13, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0 [0052.801] FindClose (in: hFindFile=0x1906f0 | out: hFindFile=0x1906f0) returned 1 [0052.801] GetProcessHeap () returned 0x120000 [0052.801] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0052.801] FindNextFileW (in: hFindFile=0x1906b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe4d066, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0052.801] GetProcessHeap () returned 0x120000 [0052.802] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0052.802] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ko\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe4d066, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190c30 [0052.802] FindNextFileW (in: hFindFile=0x190c30, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe4d066, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.802] FindNextFileW (in: hFindFile=0x190c30, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0052.803] FindNextFileW (in: hFindFile=0x190c30, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf00af60a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf00af60a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00d5872, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xcaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0052.803] FindNextFileW (in: hFindFile=0x190c30, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7ca9e76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7ca9e76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf803d796, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x38aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0052.803] FindNextFileW (in: hFindFile=0x190c30, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x613fd44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x613fd44, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0052.803] FindNextFileW (in: hFindFile=0x190c30, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x897b914, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x897b914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x91d3da7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x200a98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0052.803] FindNextFileW (in: hFindFile=0x190c30, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb8b74ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb8b74ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb8dd674, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0052.803] FindNextFileW (in: hFindFile=0x190c30, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6f2911, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6f2911, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6f2911, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1 [0052.803] FindNextFileW (in: hFindFile=0x190c30, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1697068, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1697068, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf16bd2da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0052.803] FindNextFileW (in: hFindFile=0x190c30, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefe4d066, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefe4d066, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefebf763, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4bab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0052.803] FindNextFileW (in: hFindFile=0x190c30, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa178468, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa178468, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa531f86, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1 [0052.803] FindNextFileW (in: hFindFile=0x190c30, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4bc999b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4bc999b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4bc999b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0052.803] FindNextFileW (in: hFindFile=0x190c30, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x69980f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x69980f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69980f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1 [0052.803] FindNextFileW (in: hFindFile=0x190c30, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x575324, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x575324, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59b433, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0052.803] FindNextFileW (in: hFindFile=0x190c30, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0089415, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0089415, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x71040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0052.803] FindNextFileW (in: hFindFile=0x190c30, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x718b80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x718b80, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x718b80, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1 [0052.803] FindNextFileW (in: hFindFile=0x190c30, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x67ce4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67ce4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67ce4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1 [0052.804] FindNextFileW (in: hFindFile=0x190c30, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2d943c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2d943c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2d943c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0052.804] FindNextFileW (in: hFindFile=0x190c30, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2ebbef3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2ebbef3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2f0835f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0052.804] FindNextFileW (in: hFindFile=0x190c30, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ac3a61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ac3a61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e0ae4d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0052.804] FindNextFileW (in: hFindFile=0x190c30, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ac3a61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ac3a61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e0ae4d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0 [0052.804] FindClose (in: hFindFile=0x190c30 | out: hFindFile=0x190c30) returned 1 [0052.804] GetProcessHeap () returned 0x120000 [0052.804] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0052.804] FindNextFileW (in: hFindFile=0x1906b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0052.805] GetProcessHeap () returned 0x120000 [0052.805] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0052.805] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lt\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190870 [0052.805] FindNextFileW (in: hFindFile=0x190870, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.806] FindNextFileW (in: hFindFile=0x190870, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1111, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0052.806] FindNextFileW (in: hFindFile=0x190870, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf8574958, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf8574958, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf8574958, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0052.806] FindNextFileW (in: hFindFile=0x190870, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5a18be3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a18be3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a3ee57, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0052.806] FindNextFileW (in: hFindFile=0x190870, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x63a229e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x63a229e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x63a229e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0052.806] FindNextFileW (in: hFindFile=0x190870, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0063153, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0089415, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1ffa98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0052.806] FindNextFileW (in: hFindFile=0x190870, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x95505c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x95505c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a13a8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0052.806] FindNextFileW (in: hFindFile=0x190870, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf472b09c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf472b09c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf472b09c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1d040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1 [0052.806] FindNextFileW (in: hFindFile=0x190870, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b5bbeb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b5bbeb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b5bbeb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0052.806] FindNextFileW (in: hFindFile=0x190870, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a6c5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4bab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0052.806] FindNextFileW (in: hFindFile=0x190870, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb94fd84, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb94fd84, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb94fd84, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x47ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1 [0052.806] FindNextFileW (in: hFindFile=0x190870, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x447d6b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x447d6b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x44a38de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5480, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0052.806] FindNextFileW (in: hFindFile=0x190870, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa6d5947, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa6d5947, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa853100, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1 [0052.806] FindNextFileW (in: hFindFile=0x190870, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4d48116, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4d48116, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19af0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0052.806] FindNextFileW (in: hFindFile=0x190870, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf75a8fbb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf75a8fbb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf75a8fbb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x71078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1 [0052.806] FindNextFileW (in: hFindFile=0x190870, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf03d07a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf03d07a0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf03d07a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0052.807] FindNextFileW (in: hFindFile=0x190870, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6cde4ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6cde4ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6d04716, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1 [0052.807] FindNextFileW (in: hFindFile=0x190870, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf00d5872, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00d5872, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4088, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0052.807] FindNextFileW (in: hFindFile=0x190870, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbda21cf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbda21cf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbda21cf, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0052.807] FindNextFileW (in: hFindFile=0x190870, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbda21cf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbda21cf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbda21cf, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e78, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0052.807] FindNextFileW (in: hFindFile=0x190870, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbda21cf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbda21cf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbda21cf, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e78, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0 [0052.807] FindClose (in: hFindFile=0x190870 | out: hFindFile=0x190870) returned 1 [0052.808] GetProcessHeap () returned 0x120000 [0052.808] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0052.808] FindNextFileW (in: hFindFile=0x1906b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf10a1263, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0052.808] GetProcessHeap () returned 0x120000 [0052.808] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0052.808] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lv\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf10a1263, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190cf0 [0052.808] FindNextFileW (in: hFindFile=0x190cf0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf10a1263, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.809] FindNextFileW (in: hFindFile=0x190cf0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1191, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0052.809] FindNextFileW (in: hFindFile=0x190cf0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4cfac8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4cfac8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4cfac8a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xca90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0052.809] FindNextFileW (in: hFindFile=0x190cf0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x68ff786, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68ff786, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69259a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0052.809] FindNextFileW (in: hFindFile=0x190cf0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x91d3da7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x91d3da7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x91d3da7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0052.809] FindNextFileW (in: hFindFile=0x190cf0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc32591f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc32591f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc34bb5b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x200030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0052.809] FindNextFileW (in: hFindFile=0x190cf0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a6473, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a6473, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a6473, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0052.809] FindNextFileW (in: hFindFile=0x190cf0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf480feb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf480feb5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf483611a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1d038, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0052.809] FindNextFileW (in: hFindFile=0x190cf0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4cd4a32, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4cd4a32, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4cd4a32, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1 [0052.809] FindNextFileW (in: hFindFile=0x190cf0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbe3ab3a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbe3ab3a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbe3ab3a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4bab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0052.809] FindNextFileW (in: hFindFile=0x190cf0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf10a1263, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf10a1263, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf12910b6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x47ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0052.809] FindNextFileW (in: hFindFile=0x190cf0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42fef17, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42fef17, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf43250ed, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8098, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0052.809] FindNextFileW (in: hFindFile=0x190cf0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa5ca8ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5ca8ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa68949f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1 [0052.809] FindNextFileW (in: hFindFile=0x190cf0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e7d566, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e7d566, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19b08, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0052.810] FindNextFileW (in: hFindFile=0x190cf0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1c8cf9c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c8cf9c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c8cf9c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x71088, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0052.810] FindNextFileW (in: hFindFile=0x190cf0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x605aed7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x605aed7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x613fd44, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15088, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1 [0052.810] FindNextFileW (in: hFindFile=0x190cf0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x238ed8d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x238ed8d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2984c3b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1 [0052.810] FindNextFileW (in: hFindFile=0x190cf0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d76e38, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d76e38, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6d76e38, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3b00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0052.810] FindNextFileW (in: hFindFile=0x190cf0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x37acc11, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37acc11, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37acc11, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0052.810] FindNextFileW (in: hFindFile=0x190cf0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1755c61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1755c61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e98, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0052.810] FindNextFileW (in: hFindFile=0x190cf0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1755c61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1755c61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e98, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0 [0052.810] FindClose (in: hFindFile=0x190cf0 | out: hFindFile=0x190cf0) returned 1 [0052.811] GetProcessHeap () returned 0x120000 [0052.811] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0052.811] FindNextFileW (in: hFindFile=0x1906b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf632eb9d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf632eb9d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf632eb9d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x164c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MDXQueryGenerator.DLL", cAlternateFileName="MDXQUE~1.DLL")) returned 1 [0052.811] FindNextFileW (in: hFindFile=0x1906b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d50bdc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d50bdc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6d50bdc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14640, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.AdomdClientUI.dll", cAlternateFileName="MIF69D~1.DLL")) returned 1 [0052.811] FindNextFileW (in: hFindFile=0x1906b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1697068, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1697068, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf16bd2da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17bc90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0052.811] FindNextFileW (in: hFindFile=0x1906b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d9d08d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d9d08d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf755cb7d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x69040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.dll", cAlternateFileName="MI6388~1.DLL")) returned 1 [0052.811] FindNextFileW (in: hFindFile=0x1906b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffddb96c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffddb96c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffddb96c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1af090, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.dll", cAlternateFileName="MI8069~1.DLL")) returned 1 [0052.811] FindNextFileW (in: hFindFile=0x1906b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x60f38e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60f38e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c240, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.XmlSerializers.dll", cAlternateFileName="MI37F3~1.DLL")) returned 1 [0052.811] FindNextFileW (in: hFindFile=0x1906b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf18d33e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf18d33e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf18d33e2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x664698, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0052.811] FindNextFileW (in: hFindFile=0x1906b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x520cca6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x520cca6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5612cee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a840, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.XmlSerializers.dll", cAlternateFileName="MI3E9C~1.DLL")) returned 1 [0052.811] FindNextFileW (in: hFindFile=0x1906b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x823be8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x823be8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a13a8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x100c30, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.dll", cAlternateFileName="MIA386~1.DLL")) returned 1 [0052.812] FindNextFileW (in: hFindFile=0x1906b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0df27d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d78c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Modeler.UI.rll", cAlternateFileName="MICROS~1.RLL")) returned 1 [0052.812] FindNextFileW (in: hFindFile=0x1906b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6cc6b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6cc6b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6cc6b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x78c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.SPClient.Interfaces.DLL", cAlternateFileName="MI4938~1.DLL")) returned 1 [0052.812] FindNextFileW (in: hFindFile=0x1906b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4bc999b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4bc999b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4bc999b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4c630, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.dll", cAlternateFileName="MI0653~1.DLL")) returned 1 [0052.812] FindNextFileW (in: hFindFile=0x1906b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61d7668, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61d7668, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61d7668, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6640, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Dallas.OAuthClient.dll", cAlternateFileName="MIF98A~1.DLL")) returned 1 [0052.812] FindNextFileW (in: hFindFile=0x1906b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfae48f06, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfae48f06, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfae48f06, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x62068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Data.ConnectionUI.Dialog.dll", cAlternateFileName="MI3A9E~1.DLL")) returned 1 [0052.812] FindNextFileW (in: hFindFile=0x1906b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3858, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Data.ConnectionUI.dll", cAlternateFileName="MI58F6~1.DLL")) returned 1 [0052.812] FindNextFileW (in: hFindFile=0x1906b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4cd5a2f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4cd5a2f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4cfbc75, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe6098, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Data.Recommendation.Client.Core.dll", cAlternateFileName="MIC655~1.DLL")) returned 1 [0052.812] FindNextFileW (in: hFindFile=0x1906b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffdb5707, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffdb5707, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffdb5707, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Data.Recommendation.Client.Picasso.dll", cAlternateFileName="MI021B~1.DLL")) returned 1 [0052.812] FindNextFileW (in: hFindFile=0x1906b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6dea551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6dea551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6dea551, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5840, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Data.Recommendation.Client.Picasso.Sampler.dll", cAlternateFileName="MI7F2A~1.DLL")) returned 1 [0052.812] FindNextFileW (in: hFindFile=0x1906b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5ad77c9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5ad77c9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5eb74f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Data.Recommendation.Common.dll", cAlternateFileName="MI37D9~1.DLL")) returned 1 [0052.813] FindNextFileW (in: hFindFile=0x1906b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa5ca8ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5ca8ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa806c3d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x146ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.DLL", cAlternateFileName="MIA28E~1.DLL")) returned 1 [0052.813] FindNextFileW (in: hFindFile=0x1906b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf00d5872, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00d5872, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.DLL", cAlternateFileName="MICROS~1.DLL")) returned 1 [0052.813] FindNextFileW (in: hFindFile=0x1906b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c88562, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4c88562, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4cd4a32, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x18e058, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.Excel.dll", cAlternateFileName="MIDE30~1.DLL")) returned 1 [0052.813] FindNextFileW (in: hFindFile=0x1906b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4caf7cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4caf7cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4caf7cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb4ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.dll", cAlternateFileName="MI2EE4~1.DLL")) returned 1 [0052.813] FindNextFileW (in: hFindFile=0x1906b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167cf4d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.tlb", cAlternateFileName="MICROS~1.TLB")) returned 1 [0052.813] FindNextFileW (in: hFindFile=0x1906b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b61d36, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30878, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.dll", cAlternateFileName="MI8157~1.DLL")) returned 1 [0052.813] FindNextFileW (in: hFindFile=0x1906b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf18f9628, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf18f9628, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1726c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.dll", cAlternateFileName="MIBCC9~1.DLL")) returned 1 [0052.813] FindNextFileW (in: hFindFile=0x1906b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x91d3da7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x91d3da7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x97efe5f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfc60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Interfaces.dll", cAlternateFileName="MI2DB2~1.DLL")) returned 1 [0052.813] FindNextFileW (in: hFindFile=0x1906b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992fb3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992fb3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2283d0f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x886d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.dll", cAlternateFileName="MIB40B~1.DLL")) returned 1 [0052.813] FindNextFileW (in: hFindFile=0x1906b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf19b820e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf19b820e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf19b820e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1faa68, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.dll", cAlternateFileName="MIC718~1.DLL")) returned 1 [0052.813] FindNextFileW (in: hFindFile=0x1906b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0194432, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0194432, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0194432, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x36468, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0052.813] FindNextFileW (in: hFindFile=0x1906b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6bfa6d9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6bfa6d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bfa6d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15868, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.dll", cAlternateFileName="MIBACB~1.DLL")) returned 1 [0052.813] FindNextFileW (in: hFindFile=0x1906b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc0c33db, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc0c33db, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x47078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.dll", cAlternateFileName="MI319B~1.DLL")) returned 1 [0052.813] FindNextFileW (in: hFindFile=0x1906b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4561444, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4561444, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x85f4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.reportviewer.common.dll", cAlternateFileName="MI70D9~1.DLL")) returned 1 [0052.814] FindNextFileW (in: hFindFile=0x1906b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa4995f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa4995f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa531f86, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x872c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.reportviewer.winforms.dll", cAlternateFileName="MI925C~1.DLL")) returned 1 [0052.814] FindNextFileW (in: hFindFile=0x1906b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6165f55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6165f55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6460, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Configuration.SString.dll", cAlternateFileName="MIB00C~1.DLL")) returned 1 [0052.814] FindNextFileW (in: hFindFile=0x1906b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4409f1c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4409f1c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf443017d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5e2c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.dll", cAlternateFileName="MI4FF6~1.DLL")) returned 1 [0052.814] FindNextFileW (in: hFindFile=0x1906b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0052.814] GetProcessHeap () returned 0x120000 [0052.814] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0052.814] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ms\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190a70 [0052.815] FindNextFileW (in: hFindFile=0x190a70, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.815] FindNextFileW (in: hFindFile=0x190a70, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167cf4d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1050, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0052.815] FindNextFileW (in: hFindFile=0x190a70, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x60f38e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60f38e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0052.815] FindNextFileW (in: hFindFile=0x190a70, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffd6924a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd6924a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffd6924a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x38ad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0052.815] FindNextFileW (in: hFindFile=0x190a70, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7d7750, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7d7750, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7d7750, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0052.815] FindNextFileW (in: hFindFile=0x190a70, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x618c1b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x618c1b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x618c1b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fe030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0052.815] FindNextFileW (in: hFindFile=0x190a70, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf37f804b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf37f804b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf3b3f424, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3038, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0052.815] FindNextFileW (in: hFindFile=0x190a70, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e7d566, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e7d566, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1ca90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1 [0052.815] FindNextFileW (in: hFindFile=0x190a70, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6c6bda4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6c6bda4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c6bda4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1 [0052.815] FindNextFileW (in: hFindFile=0x190a70, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5a8a2df, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a8a2df, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a8a2df, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4c050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0052.815] FindNextFileW (in: hFindFile=0x190a70, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfaebb622, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaebb622, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaebb622, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x47068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1 [0052.815] FindNextFileW (in: hFindFile=0x190a70, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb67b102, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb67b102, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb6c7584, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5478, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0052.816] FindNextFileW (in: hFindFile=0x190a70, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1de43d5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1de43d5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0052.816] FindNextFileW (in: hFindFile=0x190a70, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4c63313, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4c63313, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4c895d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a090, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0052.816] FindNextFileW (in: hFindFile=0x190a70, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffddb96c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffddb96c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffddb96c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x71080, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1 [0052.816] FindNextFileW (in: hFindFile=0x190a70, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4cd4a32, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4cd4a32, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4cd4a32, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0052.816] FindNextFileW (in: hFindFile=0x190a70, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc70564d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc70564d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc70564d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1 [0052.816] FindNextFileW (in: hFindFile=0x190a70, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf63ed72c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf63ed72c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6a7bf80, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0052.816] FindNextFileW (in: hFindFile=0x190a70, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x59b433, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x59b433, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5c164a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0052.816] FindNextFileW (in: hFindFile=0x190a70, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0089415, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0089415, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e68, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0052.816] FindNextFileW (in: hFindFile=0x190a70, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0089415, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0089415, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e68, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0 [0052.816] FindClose (in: hFindFile=0x190a70 | out: hFindFile=0x190a70) returned 1 [0052.817] GetProcessHeap () returned 0x120000 [0052.817] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0052.817] FindNextFileW (in: hFindFile=0x1906b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03d07a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167f56e9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0052.817] GetProcessHeap () returned 0x120000 [0052.817] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0052.817] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\nl\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03d07a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167f56e9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190ab0 [0052.818] FindNextFileW (in: hFindFile=0x190ab0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03d07a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167f56e9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.818] FindNextFileW (in: hFindFile=0x190ab0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167f56e9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167f56e9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x114b, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0052.818] FindNextFileW (in: hFindFile=0x190ab0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x718b80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x718b80, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x718b80, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd048, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0052.818] FindNextFileW (in: hFindFile=0x190ab0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5127e7d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5127e7d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5127e7d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0052.818] FindNextFileW (in: hFindFile=0x190ab0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1480f75, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1480f75, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf158c060, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0052.818] FindNextFileW (in: hFindFile=0x190ab0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa879350, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa879350, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1fea98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0052.818] FindNextFileW (in: hFindFile=0x190ab0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc0c33db, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc0c33db, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc0e95c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0052.818] FindNextFileW (in: hFindFile=0x190ab0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf03d07a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf03d07a0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf03d07a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1d038, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0052.818] FindNextFileW (in: hFindFile=0x190ab0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56853a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1 [0052.818] FindNextFileW (in: hFindFile=0x190ab0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a0a7fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a0a7fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a30a43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4bab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0052.819] FindNextFileW (in: hFindFile=0x190ab0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0da6398, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0da6398, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0dcc568, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x47ae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0052.819] FindNextFileW (in: hFindFile=0x190ab0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ac3289, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ac3289, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8088, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0052.819] FindNextFileW (in: hFindFile=0x190ab0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6c46ba0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c46ba0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c46ba0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1 [0052.819] FindNextFileW (in: hFindFile=0x190ab0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffdb5707, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffdb5707, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffddb96c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19ae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0052.820] GetProcessHeap () returned 0x120000 [0052.820] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0052.820] GetProcessHeap () returned 0x120000 [0052.820] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0052.820] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\no\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf45d3b76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190a70 [0052.821] GetProcessHeap () returned 0x120000 [0052.821] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0052.821] GetProcessHeap () returned 0x120000 [0052.821] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0052.821] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pl\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1908f0 [0052.823] GetProcessHeap () returned 0x120000 [0052.823] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0052.823] GetProcessHeap () returned 0x120000 [0052.823] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0052.823] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1907f0 [0052.825] GetProcessHeap () returned 0x120000 [0052.825] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0052.825] GetProcessHeap () returned 0x120000 [0052.825] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0052.825] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt-PT\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe00baf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1909b0 [0052.826] GetProcessHeap () returned 0x120000 [0052.826] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0052.826] GetProcessHeap () returned 0x120000 [0052.826] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0052.827] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88e2fa3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x88e2fa3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190cf0 [0052.828] GetProcessHeap () returned 0x120000 [0052.828] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0052.828] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1025\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf145ad52, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf145ad52, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf145ad52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1906f0 [0052.828] GetProcessHeap () returned 0x120000 [0052.828] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0052.828] GetProcessHeap () returned 0x120000 [0052.828] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0052.828] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1026\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefee59ce, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefee59ce, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190d30 [0052.829] GetProcessHeap () returned 0x120000 [0052.829] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0052.829] GetProcessHeap () returned 0x120000 [0052.829] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0052.829] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\10266\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1755c61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1755c61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1755c61, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1907b0 [0052.829] GetProcessHeap () returned 0x120000 [0052.829] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0052.829] GetProcessHeap () returned 0x120000 [0052.829] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0052.830] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1027\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4266542, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4266542, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4266542, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1908f0 [0052.830] GetProcessHeap () returned 0x120000 [0052.830] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0052.830] GetProcessHeap () returned 0x120000 [0052.830] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0052.830] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1028\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffd42fe2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd42fe2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffd42fe2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190630 [0052.830] GetProcessHeap () returned 0x120000 [0052.830] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0052.830] GetProcessHeap () returned 0x120000 [0052.830] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0052.830] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1029\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf632eb9d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf632eb9d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf632eb9d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1906f0 [0052.830] GetProcessHeap () returned 0x120000 [0052.830] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0052.830] GetProcessHeap () returned 0x120000 [0052.831] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0052.831] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1030\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaf7a22a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf7a22a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaf7a22a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190c70 [0052.831] GetProcessHeap () returned 0x120000 [0052.831] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0052.831] GetProcessHeap () returned 0x120000 [0052.831] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0052.831] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1031\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x633d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190a70 [0052.831] GetProcessHeap () returned 0x120000 [0052.831] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0052.831] GetProcessHeap () returned 0x120000 [0052.831] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0052.831] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1032\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e6a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x51e6a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x51e6a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190b70 [0053.031] GetProcessHeap () returned 0x120000 [0053.031] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0053.031] GetProcessHeap () returned 0x120000 [0053.031] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0053.031] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1033\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42d8c51, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42fef17, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42fef17, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190bf0 [0053.031] GetProcessHeap () returned 0x120000 [0053.031] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0053.031] GetProcessHeap () returned 0x120000 [0053.031] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0053.031] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1035\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a56cbe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a7cf13, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190bf0 [0053.035] GetProcessHeap () returned 0x120000 [0053.035] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0053.035] GetProcessHeap () returned 0x120000 [0053.035] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0053.035] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1036\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa911c96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa911c96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa911c96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1908f0 [0053.035] GetProcessHeap () returned 0x120000 [0053.035] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0053.036] GetProcessHeap () returned 0x120000 [0053.036] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0053.036] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1037\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67a8250, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67a8250, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190cb0 [0053.036] GetProcessHeap () returned 0x120000 [0053.036] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0053.036] GetProcessHeap () returned 0x120000 [0053.036] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0053.036] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1038\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88e2fa3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x88e2fa3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x88e2fa3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190ab0 [0053.037] GetProcessHeap () returned 0x120000 [0053.037] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0053.037] GetProcessHeap () returned 0x120000 [0053.037] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0053.037] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1040\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x381f2dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x381f2dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190a70 [0053.038] GetProcessHeap () returned 0x120000 [0053.038] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0053.038] GetProcessHeap () returned 0x120000 [0053.038] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0053.038] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1041\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6355df6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190af0 [0053.038] GetProcessHeap () returned 0x120000 [0053.038] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0053.038] GetProcessHeap () returned 0x120000 [0053.038] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0053.038] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1042\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf048f354, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf048f354, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf048f354, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1906f0 [0053.039] GetProcessHeap () returned 0x120000 [0053.039] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0053.039] GetProcessHeap () returned 0x120000 [0053.039] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0053.039] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1043\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x303975a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190870 [0053.039] GetProcessHeap () returned 0x120000 [0053.039] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0053.039] GetProcessHeap () returned 0x120000 [0053.040] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0053.040] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1044\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf61d7668, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190770 [0053.040] GetProcessHeap () returned 0x120000 [0053.040] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0053.040] GetProcessHeap () returned 0x120000 [0053.040] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0053.040] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1045\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2ebae3b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2ebae3b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1909f0 [0053.040] GetProcessHeap () returned 0x120000 [0053.040] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0053.040] GetProcessHeap () returned 0x120000 [0053.040] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0053.040] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1046\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1887f3e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1887f3e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1887f3e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190a30 [0053.040] GetProcessHeap () returned 0x120000 [0053.040] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0053.040] GetProcessHeap () returned 0x120000 [0053.041] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0053.041] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1048\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5a8a2df, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a8a2df, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a8a2df, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190af0 [0053.041] GetProcessHeap () returned 0x120000 [0053.041] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0053.041] GetProcessHeap () returned 0x120000 [0053.041] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0053.041] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1049\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b87f8e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b87f8e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b87f8e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1906f0 [0053.042] GetProcessHeap () returned 0x120000 [0053.042] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0053.042] GetProcessHeap () returned 0x120000 [0053.042] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0053.042] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1050\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfcc62b13, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcc62b13, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcc62b13, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190cb0 [0053.042] GetProcessHeap () returned 0x120000 [0053.042] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0053.042] GetProcessHeap () returned 0x120000 [0053.042] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0053.042] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1051\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x303975a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190b70 [0053.042] GetProcessHeap () returned 0x120000 [0053.042] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0053.042] GetProcessHeap () returned 0x120000 [0053.042] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0053.042] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1053\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6bd3439, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6bd3439, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6bd3439, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190af0 [0053.043] GetProcessHeap () returned 0x120000 [0053.043] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0053.043] GetProcessHeap () returned 0x120000 [0053.043] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0053.043] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1054\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf443017d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf443017d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf443017d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190d30 [0053.043] GetProcessHeap () returned 0x120000 [0053.043] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0053.043] GetProcessHeap () returned 0x120000 [0053.044] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0053.044] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1055\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0089415, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0089415, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190b70 [0053.044] GetProcessHeap () returned 0x120000 [0053.044] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0053.044] GetProcessHeap () returned 0x120000 [0053.044] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0053.044] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1057\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190ab0 [0053.044] GetProcessHeap () returned 0x120000 [0053.044] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0053.044] GetProcessHeap () returned 0x120000 [0053.044] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0053.044] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1058\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190b70 [0053.045] GetProcessHeap () returned 0x120000 [0053.045] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0053.045] GetProcessHeap () returned 0x120000 [0053.045] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0053.045] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1060\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf99b89f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99b89f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99b89f6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190670 [0053.046] GetProcessHeap () returned 0x120000 [0053.046] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0053.046] GetProcessHeap () returned 0x120000 [0053.046] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0053.046] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1061\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc2d943c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2d943c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2d943c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1907f0 [0053.046] GetProcessHeap () returned 0x120000 [0053.046] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0053.046] GetProcessHeap () returned 0x120000 [0053.046] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0053.046] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1062\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1992fb3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992fb3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992fb3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190930 [0053.047] GetProcessHeap () returned 0x120000 [0053.047] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0053.047] GetProcessHeap () returned 0x120000 [0053.047] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0053.047] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1063\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56853a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190b70 [0053.047] GetProcessHeap () returned 0x120000 [0053.047] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0053.047] GetProcessHeap () returned 0x120000 [0053.047] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0053.047] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1066\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80d6078, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190630 [0053.048] GetProcessHeap () returned 0x120000 [0053.048] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0053.048] GetProcessHeap () returned 0x120000 [0053.048] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0053.048] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1069\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffe01c35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffe01c35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffe01c35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190970 [0053.049] GetProcessHeap () returned 0x120000 [0053.049] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0053.049] GetProcessHeap () returned 0x120000 [0053.049] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0053.049] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1081\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5afc9d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5afc9d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5afc9d3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190af0 [0053.049] GetProcessHeap () returned 0x120000 [0053.049] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0053.049] GetProcessHeap () returned 0x120000 [0053.049] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0053.049] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1086\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a2268a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7abb0bc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7abb0bc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1906f0 [0053.050] GetProcessHeap () returned 0x120000 [0053.050] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0053.050] GetProcessHeap () returned 0x120000 [0053.050] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0053.050] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1087\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6355df6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190ab0 [0053.050] GetProcessHeap () returned 0x120000 [0053.050] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0053.050] GetProcessHeap () returned 0x120000 [0053.051] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0053.051] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1110\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf61fd8b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190cb0 [0053.051] GetProcessHeap () returned 0x120000 [0053.051] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0053.051] GetProcessHeap () returned 0x120000 [0053.051] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0053.051] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2052\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc47ce76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc47ce76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc47ce76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190b30 [0053.051] GetProcessHeap () returned 0x120000 [0053.051] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0053.051] GetProcessHeap () returned 0x120000 [0053.051] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0053.051] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2070\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c40a24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c40a24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c40a24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190730 [0053.052] GetProcessHeap () returned 0x120000 [0053.052] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0053.052] GetProcessHeap () returned 0x120000 [0053.052] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0053.052] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2074\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1906f0 [0053.052] GetProcessHeap () returned 0x120000 [0053.052] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0053.052] GetProcessHeap () returned 0x120000 [0053.052] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0053.052] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\3082\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190b70 [0053.054] GetProcessHeap () returned 0x120000 [0053.054] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0053.054] GetProcessHeap () returned 0x120000 [0053.054] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0053.054] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\9242\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67ce4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67ce4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67ce4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1908b0 [0053.055] GetProcessHeap () returned 0x120000 [0053.055] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0053.055] GetProcessHeap () returned 0x120000 [0053.055] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0053.055] GetProcessHeap () returned 0x120000 [0053.055] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0053.056] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ro\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190ab0 [0053.057] GetProcessHeap () returned 0x120000 [0053.057] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0053.057] GetProcessHeap () returned 0x120000 [0053.058] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0053.058] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ru\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190b30 [0053.059] GetProcessHeap () returned 0x120000 [0053.059] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0053.059] GetProcessHeap () returned 0x120000 [0053.059] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0053.059] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sk\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff580e7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190670 [0053.061] GetProcessHeap () returned 0x120000 [0053.061] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0053.061] GetProcessHeap () returned 0x120000 [0053.061] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0053.061] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sl\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe99511, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190a70 [0053.069] GetProcessHeap () returned 0x120000 [0053.069] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0053.069] GetProcessHeap () returned 0x120000 [0053.069] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0053.069] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-cyrl\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b5bbeb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190830 [0053.071] GetProcessHeap () returned 0x120000 [0053.071] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0053.071] GetProcessHeap () returned 0x120000 [0053.071] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0053.071] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-latn\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190a70 [0053.073] GetProcessHeap () returned 0x120000 [0053.073] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0053.073] GetProcessHeap () returned 0x120000 [0053.073] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0053.073] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-Latn-CS\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190630 [0053.074] GetProcessHeap () returned 0x120000 [0053.074] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0053.074] GetProcessHeap () returned 0x120000 [0053.074] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0053.074] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sv\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02eb98a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190cf0 [0053.076] GetProcessHeap () returned 0x120000 [0053.076] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0053.076] GetProcessHeap () returned 0x120000 [0053.076] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0053.076] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\th\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefebf763, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190cf0 [0053.316] GetProcessHeap () returned 0x120000 [0053.316] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0053.316] GetProcessHeap () returned 0x120000 [0053.316] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0053.316] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tr\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c40a24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16867e02, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16867e02, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190630 [0053.317] GetProcessHeap () returned 0x120000 [0053.317] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0053.317] GetProcessHeap () returned 0x120000 [0053.317] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0053.318] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\uk\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1565dae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1907f0 [0053.319] GetProcessHeap () returned 0x120000 [0053.319] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0053.319] GetProcessHeap () returned 0x120000 [0053.319] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0053.319] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\vi\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf164abda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190a30 [0053.321] GetProcessHeap () returned 0x120000 [0053.321] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0053.321] GetProcessHeap () returned 0x120000 [0053.321] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0053.321] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHS\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefebf763, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190b70 [0053.322] GetProcessHeap () returned 0x120000 [0053.322] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0053.323] GetProcessHeap () returned 0x120000 [0053.323] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0053.323] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHT\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190cf0 [0053.324] GetProcessHeap () returned 0x120000 [0053.324] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0053.324] GetProcessHeap () returned 0x120000 [0053.324] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0053.325] GetProcessHeap () returned 0x120000 [0053.325] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0053.326] GetProcessHeap () returned 0x120000 [0053.326] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0053.326] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2ad8211, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x17728794, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17728794, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0053.327] GetProcessHeap () returned 0x120000 [0053.327] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0053.330] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x176dc2d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17774bfd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17774bfd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1903b0 [0053.331] GetProcessHeap () returned 0x120000 [0053.331] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0053.331] GetProcessHeap () returned 0x120000 [0053.331] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0053.331] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2ad8211, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc38b3c05, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc3bd4d47, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190b30 [0053.333] GetProcessHeap () returned 0x120000 [0053.333] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0053.333] GetProcessHeap () returned 0x120000 [0053.333] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0053.334] GetProcessHeap () returned 0x120000 [0053.334] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0053.335] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x17774bfd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17774bfd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0053.337] GetProcessHeap () returned 0x120000 [0053.337] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0053.338] GetProcessHeap () returned 0x120000 [0053.338] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0053.338] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1774e9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1774e9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0053.340] GetProcessHeap () returned 0x120000 [0053.340] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0053.340] GetProcessHeap () returned 0x120000 [0053.340] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0053.340] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec4ee541, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0053.341] GetProcessHeap () returned 0x120000 [0053.341] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0053.341] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec4ee541, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf477755d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4cd4a32, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1908b0 [0053.346] GetProcessHeap () returned 0x120000 [0053.346] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0053.346] GetProcessHeap () returned 0x120000 [0053.346] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0053.347] GetProcessHeap () returned 0x120000 [0053.347] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0053.348] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d9058b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0053.352] GetProcessHeap () returned 0x120000 [0053.352] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0053.352] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\1033\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d9058b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190db0 [0053.352] GetProcessHeap () returned 0x120000 [0053.352] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0053.352] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\1033\\16\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4db6809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1908f0 [0053.352] GetProcessHeap () returned 0x120000 [0053.352] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0053.352] GetProcessHeap () returned 0x120000 [0053.352] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0053.353] GetProcessHeap () returned 0x120000 [0053.353] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0053.359] GetProcessHeap () returned 0x120000 [0053.359] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0053.359] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca90ec5a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca90ec5a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0053.360] GetProcessHeap () returned 0x120000 [0053.360] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0053.360] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb548de7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff0bc27, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190930 [0053.836] GetProcessHeap () returned 0x120000 [0053.836] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0053.836] GetProcessHeap () returned 0x120000 [0053.836] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0053.837] GetProcessHeap () returned 0x120000 [0053.837] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0053.838] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x197a4903, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0053.838] GetProcessHeap () returned 0x120000 [0053.838] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0053.839] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17ff3259, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x186355ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x186355ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1901f0 [0053.839] GetProcessHeap () returned 0x120000 [0053.839] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0053.839] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x18fe70 [0053.839] GetProcessHeap () returned 0x120000 [0053.839] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0053.839] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Components\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18aadbcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18aadbcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18aadbcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x18feb0 [0053.841] GetProcessHeap () returned 0x120000 [0053.842] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0053.842] GetProcessHeap () returned 0x120000 [0053.842] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0053.842] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\ManagedObjects\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b0f9971, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1900f0 [0053.847] GetProcessHeap () returned 0x120000 [0053.847] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0053.847] GetProcessHeap () returned 0x120000 [0053.847] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0053.847] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Servers\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18681a5c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18681a5c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1903f0 [0053.847] GetProcessHeap () returned 0x120000 [0053.847] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0053.847] GetProcessHeap () returned 0x120000 [0053.847] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0053.848] GetProcessHeap () returned 0x120000 [0053.848] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0053.848] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1865b8d4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1865b8d4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x18fff0 [0053.848] GetProcessHeap () returned 0x120000 [0053.848] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0053.848] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\Components\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1865b8d4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1904f0 [0053.851] GetProcessHeap () returned 0x120000 [0053.851] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0053.851] GetProcessHeap () returned 0x120000 [0053.851] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0053.852] GetProcessHeap () returned 0x120000 [0053.852] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0053.852] GetProcessHeap () returned 0x120000 [0053.852] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0053.852] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18681a5c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18ad3e4a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190bf0 [0053.852] GetProcessHeap () returned 0x120000 [0053.852] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0053.852] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18a3b641, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197321ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197321ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190b70 [0053.855] GetProcessHeap () returned 0x120000 [0053.855] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0053.855] GetProcessHeap () returned 0x120000 [0053.855] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0053.855] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1907d846, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1907d846, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1908b0 [0053.862] GetProcessHeap () returned 0x120000 [0053.862] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0053.862] GetProcessHeap () returned 0x120000 [0053.862] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0053.862] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1bc991c1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1bc991c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190830 [0053.871] GetProcessHeap () returned 0x120000 [0053.871] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0053.871] GetProcessHeap () returned 0x120000 [0053.871] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0053.871] GetProcessHeap () returned 0x120000 [0053.871] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0053.872] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1907d846, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b6c9560, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b6c9560, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1905f0 [0053.875] GetProcessHeap () returned 0x120000 [0053.875] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0053.875] GetProcessHeap () returned 0x120000 [0053.875] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0053.875] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197a4903, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190530 [0053.875] GetProcessHeap () returned 0x120000 [0053.875] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0053.875] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1983d259, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1983d259, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x18fef0 [0053.876] GetProcessHeap () returned 0x120000 [0053.876] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0053.876] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198afa29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198afa29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1905f0 [0053.878] GetProcessHeap () returned 0x120000 [0053.878] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0053.879] GetProcessHeap () returned 0x120000 [0053.879] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0053.879] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\Computers\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1983d259, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198634b7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x18ffb0 [0053.879] GetProcessHeap () returned 0x120000 [0053.879] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0053.879] GetProcessHeap () returned 0x120000 [0053.879] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0053.880] GetProcessHeap () returned 0x120000 [0053.880] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0053.880] GetProcessHeap () returned 0x120000 [0053.880] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0053.880] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf073ddf4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1903b0 [0053.883] GetProcessHeap () returned 0x120000 [0053.883] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0053.883] GetProcessHeap () returned 0x120000 [0053.883] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0053.884] GetProcessHeap () returned 0x120000 [0053.884] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0053.885] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19889710, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19889710, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0053.885] GetProcessHeap () returned 0x120000 [0053.885] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0053.885] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\Analysis\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12b7378, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xafa146a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190a30 [0054.165] GetProcessHeap () returned 0x120000 [0054.165] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0054.165] GetProcessHeap () returned 0x120000 [0054.165] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0054.165] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\SOLVER\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41a796b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41a796b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190cf0 [0054.165] GetProcessHeap () returned 0x120000 [0054.165] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0054.165] GetProcessHeap () returned 0x120000 [0054.165] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0054.166] GetProcessHeap () returned 0x120000 [0054.166] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0054.167] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1b27715c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b27715c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0054.208] GetProcessHeap () returned 0x120000 [0054.208] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0054.208] GetProcessHeap () returned 0x120000 [0054.208] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0054.208] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1b22ac67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b22ac67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0054.212] GetProcessHeap () returned 0x120000 [0054.212] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0054.213] GetProcessHeap () returned 0x120000 [0054.213] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0054.213] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1b3a83c3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b3a83c3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0054.214] GetProcessHeap () returned 0x120000 [0054.214] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0054.214] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ar\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf99462e6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99462e6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99462e6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190af0 [0054.215] GetProcessHeap () returned 0x120000 [0054.215] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0054.215] GetProcessHeap () returned 0x120000 [0054.215] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0054.215] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\bg\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6dea551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6dea551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6dea551, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190a70 [0054.215] GetProcessHeap () returned 0x120000 [0054.215] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0054.215] GetProcessHeap () returned 0x120000 [0054.215] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0054.215] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ca\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56853a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190d70 [0054.216] GetProcessHeap () returned 0x120000 [0054.216] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0054.216] GetProcessHeap () returned 0x120000 [0054.216] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0054.216] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\cs\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf803d796, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf803d796, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf803d796, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1903f0 [0054.216] GetProcessHeap () returned 0x120000 [0054.216] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0054.216] GetProcessHeap () returned 0x120000 [0054.216] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0054.216] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\da\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6165f55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6165f55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190330 [0054.217] GetProcessHeap () returned 0x120000 [0054.217] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0054.217] GetProcessHeap () returned 0x120000 [0054.217] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0054.217] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\de\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190630 [0054.217] GetProcessHeap () returned 0x120000 [0054.217] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0054.217] GetProcessHeap () returned 0x120000 [0054.217] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0054.217] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\el\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff0bc27, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff31e88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190530 [0054.217] GetProcessHeap () returned 0x120000 [0054.217] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0054.217] GetProcessHeap () returned 0x120000 [0054.217] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0054.217] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\en-us\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5a3de35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a3de35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a3de35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190270 [0054.218] GetProcessHeap () returned 0x120000 [0054.218] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0054.218] GetProcessHeap () returned 0x120000 [0054.218] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0054.218] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\es\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfcb7dd00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcb7dd00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcb7dd00, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190db0 [0054.219] GetProcessHeap () returned 0x120000 [0054.219] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0054.219] GetProcessHeap () returned 0x120000 [0054.219] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0054.219] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\et\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190bf0 [0054.219] GetProcessHeap () returned 0x120000 [0054.219] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0054.219] GetProcessHeap () returned 0x120000 [0054.220] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0054.220] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\eu\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1907f0 [0054.220] GetProcessHeap () returned 0x120000 [0054.220] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0054.220] GetProcessHeap () returned 0x120000 [0054.220] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0054.220] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\fi\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1907b0 [0054.220] GetProcessHeap () returned 0x120000 [0054.220] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0054.220] GetProcessHeap () returned 0x120000 [0054.220] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0054.220] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\fr\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190870 [0054.220] GetProcessHeap () returned 0x120000 [0054.220] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0054.220] GetProcessHeap () returned 0x120000 [0054.220] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0054.220] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\gl\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa178468, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa178468, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa178468, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6310d0 [0054.221] GetProcessHeap () returned 0x120000 [0054.221] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0054.221] GetProcessHeap () returned 0x120000 [0054.221] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0054.221] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\he\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf618b1a4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf618b1a4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf618b1a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x631ad0 [0054.447] GetProcessHeap () returned 0x120000 [0054.447] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0054.447] GetProcessHeap () returned 0x120000 [0054.447] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0054.447] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hi\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56853a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x630f90 [0054.451] GetProcessHeap () returned 0x120000 [0054.451] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0054.452] GetProcessHeap () returned 0x120000 [0054.452] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0054.452] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hr\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf480feb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf480feb5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf480feb5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x631cd0 [0054.452] GetProcessHeap () returned 0x120000 [0054.452] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0054.452] GetProcessHeap () returned 0x120000 [0054.452] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0054.452] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hu\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4646280, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4646280, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x631b10 [0054.452] GetProcessHeap () returned 0x120000 [0054.453] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0054.453] GetProcessHeap () returned 0x120000 [0054.453] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0054.453] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\id\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63a229e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x63a229e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x63a229e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x631810 [0054.453] GetProcessHeap () returned 0x120000 [0054.453] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0054.453] GetProcessHeap () returned 0x120000 [0054.453] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0054.453] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\it\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59b433, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x59b433, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59b433, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x631550 [0054.454] GetProcessHeap () returned 0x120000 [0054.454] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0054.454] GetProcessHeap () returned 0x120000 [0054.454] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0054.454] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ja\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6aef645, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aef645, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x630f10 [0054.454] GetProcessHeap () returned 0x120000 [0054.454] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0054.454] GetProcessHeap () returned 0x120000 [0054.454] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0054.454] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\kk\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6781ff8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6781ff8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x631690 [0054.455] GetProcessHeap () returned 0x120000 [0054.455] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0054.455] GetProcessHeap () returned 0x120000 [0054.455] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0054.455] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ko\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f9c329, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5f9c329, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5f9c329, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x631bd0 [0054.455] GetProcessHeap () returned 0x120000 [0054.455] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0054.455] GetProcessHeap () returned 0x120000 [0054.455] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0054.455] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\lt\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1bce2f5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1bce2f5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1bf45a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x631110 [0054.455] GetProcessHeap () returned 0x120000 [0054.455] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0054.455] GetProcessHeap () returned 0x120000 [0054.455] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0054.455] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\lv\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf13037fa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf13037fa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf13037fa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6315d0 [0054.456] GetProcessHeap () returned 0x120000 [0054.456] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0054.456] GetProcessHeap () returned 0x120000 [0054.456] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0054.456] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ms\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc21a8ad, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc21a8ad, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc21a8ad, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x631210 [0054.456] GetProcessHeap () returned 0x120000 [0054.456] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0054.456] GetProcessHeap () returned 0x120000 [0054.456] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0054.456] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\nl\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaf2dd35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf2dd35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaf2dd35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x631610 [0054.457] GetProcessHeap () returned 0x120000 [0054.457] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0054.457] GetProcessHeap () returned 0x120000 [0054.457] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0054.457] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\no\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffe01c35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffe01c35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffe01c35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x631590 [0054.458] GetProcessHeap () returned 0x120000 [0054.458] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0054.458] GetProcessHeap () returned 0x120000 [0054.458] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0054.458] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pl\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ff786, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68ff786, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69259a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6315d0 [0054.458] GetProcessHeap () returned 0x120000 [0054.458] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0054.458] GetProcessHeap () returned 0x120000 [0054.458] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0054.458] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pt\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc2b31ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2b31ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x631390 [0054.459] GetProcessHeap () returned 0x120000 [0054.459] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0054.459] GetProcessHeap () returned 0x120000 [0054.459] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0054.459] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pt-BR\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x386b77a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x386b77a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x386b77a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x631c50 [0054.459] GetProcessHeap () returned 0x120000 [0054.459] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0054.459] GetProcessHeap () returned 0x120000 [0054.459] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0054.459] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ro\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4903b8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4903b8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4903b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x630f50 [0054.460] GetProcessHeap () returned 0x120000 [0054.460] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0054.460] GetProcessHeap () returned 0x120000 [0054.460] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0054.460] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ru\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86a6c5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x631510 [0054.460] GetProcessHeap () returned 0x120000 [0054.460] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0054.460] GetProcessHeap () returned 0x120000 [0054.460] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0054.460] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sk\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67a8250, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67a8250, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x631c90 [0054.460] GetProcessHeap () returned 0x120000 [0054.460] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0054.460] GetProcessHeap () returned 0x120000 [0054.460] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0054.460] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sl\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a7cf13, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a7cf13, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x631790 [0054.461] GetProcessHeap () returned 0x120000 [0054.461] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0054.461] GetProcessHeap () returned 0x120000 [0054.461] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0054.461] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-BA\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1565dae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1565dae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1565dae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x631b10 [0054.461] GetProcessHeap () returned 0x120000 [0054.461] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0054.461] GetProcessHeap () returned 0x120000 [0054.461] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0054.461] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-CS\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf443017d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf443017d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44563cd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x631290 [0054.461] GetProcessHeap () returned 0x120000 [0054.461] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0054.461] GetProcessHeap () returned 0x120000 [0054.461] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0054.461] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Latn-CS\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x631310 [0054.462] GetProcessHeap () returned 0x120000 [0054.462] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0054.462] GetProcessHeap () returned 0x120000 [0054.462] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0054.462] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sv\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x631950 [0054.462] GetProcessHeap () returned 0x120000 [0054.462] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0054.462] GetProcessHeap () returned 0x120000 [0054.462] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0054.462] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\th\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb67b102, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb67b102, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb6ed802, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x631310 [0054.463] GetProcessHeap () returned 0x120000 [0054.463] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0054.463] GetProcessHeap () returned 0x120000 [0054.463] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0054.463] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\tr\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x631250 [0054.463] GetProcessHeap () returned 0x120000 [0054.463] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0054.463] GetProcessHeap () returned 0x120000 [0054.463] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0054.463] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\uk\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80d6078, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x147220 [0054.463] GetProcessHeap () returned 0x120000 [0054.463] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0054.463] GetProcessHeap () returned 0x120000 [0054.463] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0054.464] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\vi\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c46ba0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c46ba0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c46ba0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x631d50 [0054.464] GetProcessHeap () returned 0x120000 [0054.464] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0054.464] GetProcessHeap () returned 0x120000 [0054.464] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0054.464] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\zh-CN\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc40a725, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc40a725, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc40a725, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190770 [0054.465] GetProcessHeap () returned 0x120000 [0054.465] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0054.465] GetProcessHeap () returned 0x120000 [0054.465] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0054.465] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\zh-TW\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x659fb9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x659fb9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x659fb9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x190670 [0054.465] GetProcessHeap () returned 0x120000 [0054.465] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0054.465] GetProcessHeap () returned 0x120000 [0054.465] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0054.468] GetProcessHeap () returned 0x120000 [0054.468] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0054.469] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1c8ab024, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c8ab024, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0054.471] GetProcessHeap () returned 0x120000 [0054.471] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0054.472] GetProcessHeap () returned 0x120000 [0054.472] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0054.472] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1fc86400, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1fc86400, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0054.475] GetProcessHeap () returned 0x120000 [0054.475] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0054.475] GetProcessHeap () returned 0x120000 [0054.475] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0054.475] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc348b22, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1fc39fa2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1fc39fa2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0054.478] GetProcessHeap () returned 0x120000 [0054.478] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0054.478] GetProcessHeap () returned 0x120000 [0054.478] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0054.478] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc39bed4a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb0d2731, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb0d2731, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0054.480] GetProcessHeap () returned 0x120000 [0054.480] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0054.480] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\1033\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc52c782a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc52c782a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc52c782a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215af0 [0054.480] GetProcessHeap () returned 0x120000 [0054.480] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0054.480] GetProcessHeap () returned 0x120000 [0054.481] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0054.481] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\1036\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf318faf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf318faf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf31b5d3e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215570 [0054.481] GetProcessHeap () returned 0x120000 [0054.481] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0054.481] GetProcessHeap () returned 0x120000 [0054.481] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0054.481] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\3082\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe34d5ed4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe34d5ed4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe34d5ed4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215530 [0054.481] GetProcessHeap () returned 0x120000 [0054.481] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0054.481] GetProcessHeap () returned 0x120000 [0054.481] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0054.482] GetProcessHeap () returned 0x120000 [0054.482] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0054.483] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x246bb96e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x246bb96e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0054.485] GetProcessHeap () returned 0x120000 [0054.485] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0054.485] GetProcessHeap () returned 0x120000 [0054.485] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0054.485] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc3bb225, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x241382dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x241382dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0054.663] GetProcessHeap () returned 0x120000 [0054.663] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0054.664] GetProcessHeap () returned 0x120000 [0054.664] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0054.664] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\QUERIES\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeda173cc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0054.664] GetProcessHeap () returned 0x120000 [0054.664] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0054.664] GetProcessHeap () returned 0x120000 [0054.664] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0054.664] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\SAMPLES\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb48c20e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0054.664] GetProcessHeap () returned 0x120000 [0054.664] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0054.664] GetProcessHeap () returned 0x120000 [0054.664] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0054.664] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\STARTUP\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeda173cc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0054.664] GetProcessHeap () returned 0x120000 [0054.664] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0054.667] GetProcessHeap () returned 0x120000 [0054.667] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0054.667] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa326fd, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0xa326fd, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0xa326fd, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0054.667] GetProcessHeap () returned 0x120000 [0054.667] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0054.668] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa326fd, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4cce0ca, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4cce0ca, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215d70 [0055.352] GetProcessHeap () returned 0x120000 [0055.352] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0055.352] GetProcessHeap () returned 0x120000 [0055.352] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0055.353] GetProcessHeap () returned 0x120000 [0055.353] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0055.354] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\XLSTART\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeda173cc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0055.354] GetProcessHeap () returned 0x120000 [0055.354] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0055.354] GetProcessHeap () returned 0x120000 [0055.354] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0055.354] GetProcessHeap () returned 0x120000 [0055.354] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0055.354] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\rsod\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b1a0d3d, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139e80 [0055.359] GetProcessHeap () returned 0x120000 [0055.359] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0055.359] GetProcessHeap () returned 0x120000 [0055.359] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0055.359] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Stationery\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb48c20e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb48c20e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139e80 [0055.359] GetProcessHeap () returned 0x120000 [0055.360] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0055.360] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb48c20e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6099da, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0055.362] GetProcessHeap () returned 0x120000 [0055.362] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0055.362] GetProcessHeap () returned 0x120000 [0055.362] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0055.362] GetProcessHeap () returned 0x120000 [0055.362] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0055.362] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139e80 [0055.362] GetProcessHeap () returned 0x120000 [0055.362] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0055.362] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb571036, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0055.365] GetProcessHeap () returned 0x120000 [0055.365] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0055.365] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5972d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5bd4f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5bd4f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215670 [0055.365] GetProcessHeap () returned 0x120000 [0055.365] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0055.366] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5972d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb62fbf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb62fbf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0055.368] GetProcessHeap () returned 0x120000 [0055.368] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0055.368] GetProcessHeap () returned 0x120000 [0055.368] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0055.368] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5bd4f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6a2342, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6a2342, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215230 [0055.370] GetProcessHeap () returned 0x120000 [0055.370] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0055.370] GetProcessHeap () returned 0x120000 [0055.370] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0055.371] GetProcessHeap () returned 0x120000 [0055.371] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0055.372] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\GettingStarted16\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e332373, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e332373, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e332373, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215cf0 [0055.379] GetProcessHeap () returned 0x120000 [0055.379] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0055.382] GetProcessHeap () returned 0x120000 [0055.382] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0055.382] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0055.382] GetProcessHeap () returned 0x120000 [0055.382] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0055.382] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215830 [0055.383] GetProcessHeap () returned 0x120000 [0055.383] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0055.383] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Notebook Templates\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0055.383] GetProcessHeap () returned 0x120000 [0055.383] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0055.383] GetProcessHeap () returned 0x120000 [0055.383] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0055.383] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb7ad38b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215170 [0055.384] GetProcessHeap () returned 0x120000 [0055.384] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0055.384] GetProcessHeap () returned 0x120000 [0055.384] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0055.384] GetProcessHeap () returned 0x120000 [0055.384] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0055.385] GetProcessHeap () returned 0x120000 [0055.385] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0055.386] GetProcessHeap () returned 0x120000 [0055.386] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0055.386] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\Presentation Designs\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24517fc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24517fc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0055.387] GetProcessHeap () returned 0x120000 [0055.387] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0055.387] GetProcessHeap () returned 0x120000 [0055.387] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0055.388] GetProcessHeap () returned 0x120000 [0055.388] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0055.388] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139e80 [0055.389] GetProcessHeap () returned 0x120000 [0055.389] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0055.390] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xaf31749c, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xaf31749c, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0055.391] GetProcessHeap () returned 0x120000 [0055.391] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0055.391] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f15ef0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xaf31749c, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x5a112a2, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x216070 [0055.391] GetProcessHeap () returned 0x120000 [0055.391] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0055.391] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f15ef0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2e5eac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215ff0 [0055.392] GetProcessHeap () returned 0x120000 [0055.392] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0055.392] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\Heartbeat\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e2e5eac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e2e5eac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2e5eac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215d70 [0055.393] GetProcessHeap () returned 0x120000 [0055.393] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0055.393] GetProcessHeap () returned 0x120000 [0055.393] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0055.393] GetProcessHeap () returned 0x120000 [0055.393] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0055.394] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\VISIO\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a112a2, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x5a112a2, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5a112a2, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2159f0 [0055.645] GetProcessHeap () returned 0x120000 [0055.645] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0055.645] GetProcessHeap () returned 0x120000 [0055.645] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0055.646] GetProcessHeap () returned 0x120000 [0055.646] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0055.646] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b809370, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b809370, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215af0 [0055.650] GetProcessHeap () returned 0x120000 [0055.650] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0055.650] GetProcessHeap () returned 0x120000 [0055.650] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0055.651] GetProcessHeap () returned 0x120000 [0055.651] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0055.652] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Common Programs\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0055.652] GetProcessHeap () returned 0x120000 [0055.652] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0055.653] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Common Programs\\Microsoft Office 2016 Tools\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152b0 [0055.655] GetProcessHeap () returned 0x120000 [0055.655] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0055.655] GetProcessHeap () returned 0x120000 [0055.655] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0055.656] GetProcessHeap () returned 0x120000 [0055.656] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0055.657] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x868ac6fd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x868ac6fd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0055.657] GetProcessHeap () returned 0x120000 [0055.657] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0055.657] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x868ac6fd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8913323b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8913323b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0055.664] GetProcessHeap () returned 0x120000 [0055.664] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0055.664] GetProcessHeap () returned 0x120000 [0055.664] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0055.665] GetProcessHeap () returned 0x120000 [0055.665] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0055.666] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xaf31749c, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xaf31749c, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ec0 [0055.666] GetProcessHeap () returned 0x120000 [0055.666] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0055.666] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\DESIGNER\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb975fdf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb975fdf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb975fdf, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2159f0 [0055.667] GetProcessHeap () returned 0x120000 [0055.667] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0055.667] GetProcessHeap () returned 0x120000 [0055.667] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0055.667] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x868ac6fd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x52ea133, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x52ea133, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215270 [0055.667] GetProcessHeap () returned 0x120000 [0055.667] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0055.667] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\DW\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf477755d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x246bb96e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x246bb96e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0055.669] GetProcessHeap () returned 0x120000 [0055.669] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0055.669] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\DW\\1033\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf477755d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf477755d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf47e9c8f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157b0 [0055.669] GetProcessHeap () returned 0x120000 [0055.669] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0055.669] GetProcessHeap () returned 0x120000 [0055.669] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0055.670] GetProcessHeap () returned 0x120000 [0055.670] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0055.671] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EQUATION\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x868ac6fd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb976f98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb976f98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0055.672] GetProcessHeap () returned 0x120000 [0055.672] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0055.672] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EQUATION\\1033\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4620012, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4620012, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4620012, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152b0 [0055.673] GetProcessHeap () returned 0x120000 [0055.673] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0055.673] GetProcessHeap () returned 0x120000 [0055.673] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0055.673] GetProcessHeap () returned 0x120000 [0055.673] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0055.674] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EURO\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf99b89f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99b89f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99b89f6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215830 [0055.674] GetProcessHeap () returned 0x120000 [0055.674] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0055.674] GetProcessHeap () returned 0x120000 [0055.674] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0055.674] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Filters\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2ca2e08, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14c6cb9, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x14c6cb9, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215170 [0055.674] GetProcessHeap () returned 0x120000 [0055.674] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0055.674] GetProcessHeap () returned 0x120000 [0055.674] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0055.674] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2e1f46, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb976f98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb976f98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0055.677] GetProcessHeap () returned 0x120000 [0055.677] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0055.677] GetProcessHeap () returned 0x120000 [0055.677] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0055.677] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Help\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12910b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x26737b32, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26737b32, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0055.679] GetProcessHeap () returned 0x120000 [0055.679] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0055.679] GetProcessHeap () returned 0x120000 [0055.679] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0055.679] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\MSClientDataMgr\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf472b09c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf472b09c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf472b09c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0055.679] GetProcessHeap () returned 0x120000 [0055.679] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0055.679] GetProcessHeap () returned 0x120000 [0055.680] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0055.680] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2803429, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x26bb01a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bb01a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215130 [0055.680] GetProcessHeap () returned 0x120000 [0055.680] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0055.680] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc541ed37, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb99d23b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb99d23b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0055.681] GetProcessHeap () returned 0x120000 [0055.681] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0055.682] GetProcessHeap () returned 0x120000 [0055.682] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0055.682] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Cultures\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc461cf97, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc461cf97, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc461cf97, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215230 [0055.682] GetProcessHeap () returned 0x120000 [0055.682] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0055.682] GetProcessHeap () returned 0x120000 [0055.682] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0055.682] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe99511, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x24bcc96d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24bcc96d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0055.683] GetProcessHeap () returned 0x120000 [0055.683] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x691e58 [0055.683] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\*", lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24bcc96d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24d70354, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24d70354, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156b0 [0055.685] GetProcessHeap () returned 0x120000 [0055.685] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x691e58 | out: hHeap=0x120000) returned 1 [0055.685] GetProcessHeap () returned 0x120000 [0055.685] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x691e58 [0055.685] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Resources\\*", lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4befc00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4befc00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4befc00, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215670 [0056.169] GetProcessHeap () returned 0x120000 [0056.169] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0056.175] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Resources\\1033\\*", lpFindFileData=0x2a5df98 | out: lpFindFileData=0x2a5df98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4befc00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4befc00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4befc00, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x33c0058, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215430 [0056.179] GetProcessHeap () returned 0x120000 [0056.179] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0056.180] GetProcessHeap () returned 0x120000 [0056.180] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x691e58 | out: hHeap=0x120000) returned 1 [0056.180] GetProcessHeap () returned 0x120000 [0056.180] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0056.181] GetProcessHeap () returned 0x120000 [0056.181] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0056.181] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\en-us\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2803429, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2803429, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2803429, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0056.182] GetProcessHeap () returned 0x120000 [0056.182] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0056.182] GetProcessHeap () returned 0x120000 [0056.182] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0056.182] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef915def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef915def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xef915def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0056.183] GetProcessHeap () returned 0x120000 [0056.183] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0056.183] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\Office.en-us\\*", lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef915def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8f6526, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215770 [0056.183] GetProcessHeap () returned 0x120000 [0056.183] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0056.183] GetProcessHeap () returned 0x120000 [0056.183] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0056.183] GetProcessHeap () returned 0x120000 [0056.184] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0056.184] GetProcessHeap () returned 0x120000 [0056.184] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0056.185] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\PROOF\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc8d02b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8d02b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0056.185] GetProcessHeap () returned 0x120000 [0056.185] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0056.185] GetProcessHeap () returned 0x120000 [0056.185] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0056.185] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc576616a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x26bd6427, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bd6427, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0056.187] GetProcessHeap () returned 0x120000 [0056.187] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0056.187] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\1033\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf07b04e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf07b04e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc8aa06f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215330 [0056.188] GetProcessHeap () returned 0x120000 [0056.188] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0056.188] GetProcessHeap () returned 0x120000 [0056.188] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0056.188] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc883e0d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x26bd6427, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bd6427, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215230 [0056.188] GetProcessHeap () returned 0x120000 [0056.188] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0056.188] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\*", lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc883e0d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc883e0d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8aa06f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152b0 [0056.189] GetProcessHeap () returned 0x120000 [0056.189] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0056.189] GetProcessHeap () returned 0x120000 [0056.189] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0056.189] GetProcessHeap () returned 0x120000 [0056.189] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0056.190] GetProcessHeap () returned 0x120000 [0056.190] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0056.190] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Source Engine\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0ed7602, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0ed7602, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0ed7602, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158f0 [0056.191] GetProcessHeap () returned 0x120000 [0056.191] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0056.191] GetProcessHeap () returned 0x120000 [0056.191] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0056.191] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TEXTCONV\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf15d84bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42b29f3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5f76153, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0056.191] GetProcessHeap () returned 0x120000 [0056.191] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0056.191] GetProcessHeap () returned 0x120000 [0056.191] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0056.191] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0056.193] GetProcessHeap () returned 0x120000 [0056.193] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0056.194] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AFTRNOON\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26bfc670, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152b0 [0056.194] GetProcessHeap () returned 0x120000 [0056.194] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0056.194] GetProcessHeap () returned 0x120000 [0056.194] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0056.194] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ARCTIC\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156f0 [0056.195] GetProcessHeap () returned 0x120000 [0056.195] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0056.195] GetProcessHeap () returned 0x120000 [0056.195] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0056.195] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AXIS\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0056.195] GetProcessHeap () returned 0x120000 [0056.195] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0056.195] GetProcessHeap () returned 0x120000 [0056.195] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0056.195] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLENDS\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a70c44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a96da3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27a96da3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0056.196] GetProcessHeap () returned 0x120000 [0056.196] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0056.196] GetProcessHeap () returned 0x120000 [0056.196] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0056.196] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUECALM\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a70c44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a70c44, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27a70c44, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215230 [0056.196] GetProcessHeap () returned 0x120000 [0056.196] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0056.196] GetProcessHeap () returned 0x120000 [0056.196] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0056.196] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUEPRNT\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215430 [0056.197] GetProcessHeap () returned 0x120000 [0056.197] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0056.197] GetProcessHeap () returned 0x120000 [0056.197] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0056.197] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BOLDSTRI\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a96da3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215230 [0056.198] GetProcessHeap () returned 0x120000 [0056.198] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0056.198] GetProcessHeap () returned 0x120000 [0056.198] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0056.198] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BREEZE\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a96da3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156b0 [0056.198] GetProcessHeap () returned 0x120000 [0056.198] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0056.198] GetProcessHeap () returned 0x120000 [0056.198] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0056.198] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CANYON\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0056.199] GetProcessHeap () returned 0x120000 [0056.199] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0056.199] GetProcessHeap () returned 0x120000 [0056.199] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0056.199] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CAPSULES\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0056.203] GetProcessHeap () returned 0x120000 [0056.203] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0056.203] GetProcessHeap () returned 0x120000 [0056.203] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0056.203] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CASCADE\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0056.204] GetProcessHeap () returned 0x120000 [0056.204] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0056.204] GetProcessHeap () returned 0x120000 [0056.204] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0056.204] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\COMPASS\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215670 [0056.204] GetProcessHeap () returned 0x120000 [0056.204] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0056.204] GetProcessHeap () returned 0x120000 [0056.205] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0056.205] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CONCRETE\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215170 [0056.205] GetProcessHeap () returned 0x120000 [0056.205] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0056.205] GetProcessHeap () returned 0x120000 [0056.205] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0056.205] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\DEEPBLUE\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215230 [0056.206] GetProcessHeap () returned 0x120000 [0056.206] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0056.206] GetProcessHeap () returned 0x120000 [0056.206] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0056.206] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECHO\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0056.207] GetProcessHeap () returned 0x120000 [0056.207] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0056.207] GetProcessHeap () returned 0x120000 [0056.207] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0056.207] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECLIPSE\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152b0 [0056.207] GetProcessHeap () returned 0x120000 [0056.207] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0056.207] GetProcessHeap () returned 0x120000 [0056.207] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0056.208] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EDGE\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215830 [0056.208] GetProcessHeap () returned 0x120000 [0056.208] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0056.208] GetProcessHeap () returned 0x120000 [0056.208] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0056.208] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EVRGREEN\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b2f705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b2f705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152b0 [0056.208] GetProcessHeap () returned 0x120000 [0056.208] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0056.208] GetProcessHeap () returned 0x120000 [0056.208] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0056.208] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EXPEDITN\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b2f705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b2f705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215770 [0056.209] GetProcessHeap () returned 0x120000 [0056.209] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0056.209] GetProcessHeap () returned 0x120000 [0056.209] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0056.209] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ICE\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ba1ded, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ba1ded, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0056.210] GetProcessHeap () returned 0x120000 [0056.210] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0056.210] GetProcessHeap () returned 0x120000 [0056.210] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0056.210] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\INDUST\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b5591d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0056.210] GetProcessHeap () returned 0x120000 [0056.211] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0056.211] GetProcessHeap () returned 0x120000 [0056.211] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0056.211] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\IRIS\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b5591d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b7bb91, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b7bb91, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215430 [0056.211] GetProcessHeap () returned 0x120000 [0056.211] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0056.211] GetProcessHeap () returned 0x120000 [0056.211] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0056.211] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\JOURNAL\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b5591d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215670 [0056.212] GetProcessHeap () returned 0x120000 [0056.212] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0056.212] GetProcessHeap () returned 0x120000 [0056.212] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0056.212] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LAYERS\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b7bb91, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ba1ded, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ba1ded, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215830 [0056.213] GetProcessHeap () returned 0x120000 [0056.213] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0056.213] GetProcessHeap () returned 0x120000 [0056.213] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0056.213] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LEVEL\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b7bb91, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215230 [0056.213] GetProcessHeap () returned 0x120000 [0056.213] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0056.213] GetProcessHeap () returned 0x120000 [0056.213] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0056.213] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\NETWORK\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156f0 [0056.214] GetProcessHeap () returned 0x120000 [0056.214] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0056.214] GetProcessHeap () returned 0x120000 [0056.214] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0056.214] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PAPYRUS\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215330 [0056.215] GetProcessHeap () returned 0x120000 [0056.215] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0056.215] GetProcessHeap () returned 0x120000 [0056.215] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0056.215] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PIXEL\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215670 [0056.215] GetProcessHeap () returned 0x120000 [0056.215] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0056.215] GetProcessHeap () returned 0x120000 [0056.215] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0056.215] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PROFILE\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0056.216] GetProcessHeap () returned 0x120000 [0056.216] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0056.216] GetProcessHeap () returned 0x120000 [0056.216] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0056.216] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\QUAD\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0056.216] GetProcessHeap () returned 0x120000 [0056.216] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0056.216] GetProcessHeap () returned 0x120000 [0056.216] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0056.216] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RADIAL\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215170 [0056.217] GetProcessHeap () returned 0x120000 [0056.217] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0056.217] GetProcessHeap () returned 0x120000 [0056.217] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0056.217] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\REFINED\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215570 [0056.218] GetProcessHeap () returned 0x120000 [0056.218] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0056.218] GetProcessHeap () returned 0x120000 [0056.218] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0056.218] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RICEPAPR\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215670 [0056.219] GetProcessHeap () returned 0x120000 [0056.219] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0056.219] GetProcessHeap () returned 0x120000 [0056.219] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0056.219] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RIPPLE\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215170 [0056.219] GetProcessHeap () returned 0x120000 [0056.219] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0056.219] GetProcessHeap () returned 0x120000 [0056.219] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0056.219] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RMNSQUE\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0056.527] GetProcessHeap () returned 0x120000 [0056.527] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0056.527] GetProcessHeap () returned 0x120000 [0056.527] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0056.528] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SATIN\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x289576aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x289576aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156f0 [0056.536] GetProcessHeap () returned 0x120000 [0056.536] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0056.537] GetProcessHeap () returned 0x120000 [0056.537] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0056.537] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SKY\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157b0 [0056.539] GetProcessHeap () returned 0x120000 [0056.539] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0056.539] GetProcessHeap () returned 0x120000 [0056.539] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0056.539] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SLATE\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c609b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c609b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215770 [0056.543] GetProcessHeap () returned 0x120000 [0056.543] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0056.543] GetProcessHeap () returned 0x120000 [0056.543] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0056.543] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SONORA\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c3a755, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0056.544] GetProcessHeap () returned 0x120000 [0056.544] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0056.545] GetProcessHeap () returned 0x120000 [0056.545] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0056.545] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SPRING\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215430 [0056.550] GetProcessHeap () returned 0x120000 [0056.550] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0056.550] GetProcessHeap () returned 0x120000 [0056.550] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0056.550] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STRTEDGE\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x28551719, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28551719, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0056.556] GetProcessHeap () returned 0x120000 [0056.556] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0056.556] GetProcessHeap () returned 0x120000 [0056.556] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0056.556] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STUDIO\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c3a755, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215130 [0056.559] GetProcessHeap () returned 0x120000 [0056.559] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0056.559] GetProcessHeap () returned 0x120000 [0056.559] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0056.559] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SUMIPNTG\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215430 [0056.560] GetProcessHeap () returned 0x120000 [0056.560] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0056.560] GetProcessHeap () returned 0x120000 [0056.560] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0056.560] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATER\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215570 [0056.561] GetProcessHeap () returned 0x120000 [0056.561] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0056.561] GetProcessHeap () returned 0x120000 [0056.561] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0056.561] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATERMAR\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157f0 [0056.565] GetProcessHeap () returned 0x120000 [0056.565] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0056.565] GetProcessHeap () returned 0x120000 [0056.565] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0056.566] GetProcessHeap () returned 0x120000 [0056.566] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0056.566] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0dcc568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155f0 [0056.570] GetProcessHeap () returned 0x120000 [0056.570] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0056.570] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ENES\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc85db99, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc85db99, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc883e0d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215830 [0056.571] GetProcessHeap () returned 0x120000 [0056.571] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0056.571] GetProcessHeap () returned 0x120000 [0056.571] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0056.571] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ENFR\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc8aa06f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8aa06f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152b0 [0056.572] GetProcessHeap () returned 0x120000 [0056.572] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0056.572] GetProcessHeap () returned 0x120000 [0056.572] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0056.572] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ESEN\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c8cf9c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8aa06f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0056.572] GetProcessHeap () returned 0x120000 [0056.572] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0056.572] GetProcessHeap () returned 0x120000 [0056.572] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0056.572] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\FREN\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf63a12a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc91c74d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0056.573] GetProcessHeap () returned 0x120000 [0056.573] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0056.573] GetProcessHeap () returned 0x120000 [0056.573] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0056.574] GetProcessHeap () returned 0x120000 [0056.574] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0056.574] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca8c279f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca8c279f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca8c279f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0056.574] GetProcessHeap () returned 0x120000 [0056.574] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0056.575] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca8c279f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf24004e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf24004e4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158f0 [0056.575] GetProcessHeap () returned 0x120000 [0056.575] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0056.575] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\1033\\*", lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb4d4679, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4d4679, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xecf3682d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215430 [0056.576] GetProcessHeap () returned 0x120000 [0056.576] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0056.576] GetProcessHeap () returned 0x120000 [0056.576] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0056.576] GetProcessHeap () returned 0x120000 [0056.576] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0056.577] GetProcessHeap () returned 0x120000 [0056.577] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0056.577] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52ea133, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x52ea133, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x52ea133, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215830 [0056.578] GetProcessHeap () returned 0x120000 [0056.578] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0056.578] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52ea133, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x62b5b1e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x62b5b1e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0056.580] GetProcessHeap () returned 0x120000 [0056.580] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0056.580] GetProcessHeap () returned 0x120000 [0056.580] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0056.580] GetProcessHeap () returned 0x120000 [0056.580] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0056.581] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157b0 [0056.581] GetProcessHeap () returned 0x120000 [0056.581] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0056.581] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157f0 [0056.581] GetProcessHeap () returned 0x120000 [0056.581] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0056.582] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\*", lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca27806, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xca27806, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153b0 [0056.582] GetProcessHeap () returned 0x120000 [0056.582] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0056.582] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\1033\\*", lpFindFileData=0x2a5df98 | out: lpFindFileData=0x2a5df98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca27806, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xca27806, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xca27806, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215830 [0056.583] GetProcessHeap () returned 0x120000 [0056.583] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0056.583] GetProcessHeap () returned 0x120000 [0056.583] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0056.583] GetProcessHeap () returned 0x120000 [0056.583] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0056.584] GetProcessHeap () returned 0x120000 [0056.584] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0056.584] GetProcessHeap () returned 0x120000 [0056.584] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0056.586] GetProcessHeap () returned 0x120000 [0056.586] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0056.586] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\ODBC\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e16872b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e16872b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2272ee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0056.590] GetProcessHeap () returned 0x120000 [0056.590] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0056.590] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\ODBC\\Data Sources\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e2272ee, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e2272ee, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2272ee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0056.591] GetProcessHeap () returned 0x120000 [0056.591] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0056.591] GetProcessHeap () returned 0x120000 [0056.591] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0056.592] GetProcessHeap () returned 0x120000 [0056.592] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0056.592] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0056.593] GetProcessHeap () returned 0x120000 [0056.593] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0056.593] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\MSMAPI\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0056.593] GetProcessHeap () returned 0x120000 [0056.593] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0056.594] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\MSMAPI\\1033\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215830 [0056.594] GetProcessHeap () returned 0x120000 [0056.594] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0056.594] GetProcessHeap () returned 0x120000 [0056.594] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0056.595] GetProcessHeap () returned 0x120000 [0056.595] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0056.595] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\ole db\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb8dd674, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158f0 [0056.596] GetProcessHeap () returned 0x120000 [0056.596] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0056.596] GetProcessHeap () returned 0x120000 [0056.596] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0056.596] GetProcessHeap () returned 0x120000 [0056.596] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0056.597] GetProcessHeap () returned 0x120000 [0056.597] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0056.597] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0056.598] GetProcessHeap () returned 0x120000 [0056.598] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0056.598] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26f8376, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215770 [0056.598] GetProcessHeap () returned 0x120000 [0056.598] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0056.598] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\EQUATION\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x28551719, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28551719, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215430 [0056.934] GetProcessHeap () returned 0x120000 [0056.934] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0056.934] GetProcessHeap () returned 0x120000 [0056.934] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0056.934] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefcf5b24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0056.936] GetProcessHeap () returned 0x120000 [0056.936] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0056.936] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1028\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12dd5ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf12dd5ae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152b0 [0056.936] GetProcessHeap () returned 0x120000 [0056.936] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0056.936] GetProcessHeap () returned 0x120000 [0056.936] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0056.937] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1031\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e56af1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1e56af1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1e56af1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0056.937] GetProcessHeap () returned 0x120000 [0056.937] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0056.937] GetProcessHeap () returned 0x120000 [0056.937] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0056.937] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1033\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0501a67, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0501a67, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0501a67, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156b0 [0056.937] GetProcessHeap () returned 0x120000 [0056.937] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0056.937] GetProcessHeap () returned 0x120000 [0056.938] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0056.938] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1036\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0056.938] GetProcessHeap () returned 0x120000 [0056.938] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0056.938] GetProcessHeap () returned 0x120000 [0056.938] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0056.938] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1040\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6296213, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215430 [0056.938] GetProcessHeap () returned 0x120000 [0056.938] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0056.938] GetProcessHeap () returned 0x120000 [0056.938] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0056.938] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1041\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf41cdbc1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0056.939] GetProcessHeap () returned 0x120000 [0056.939] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0056.939] GetProcessHeap () returned 0x120000 [0056.939] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0056.939] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1042\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1329a43, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1329a43, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1329a43, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0056.939] GetProcessHeap () returned 0x120000 [0056.939] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0056.940] GetProcessHeap () returned 0x120000 [0056.940] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0056.940] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1046\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b81e2e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b81e2e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b81e2e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0056.940] GetProcessHeap () returned 0x120000 [0056.940] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0056.940] GetProcessHeap () returned 0x120000 [0056.940] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0056.940] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1049\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff31e88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff31e88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215130 [0056.940] GetProcessHeap () returned 0x120000 [0056.940] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0056.940] GetProcessHeap () returned 0x120000 [0056.941] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0056.941] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\2052\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefcf5b24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefcf5b24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefcf5b24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215270 [0056.941] GetProcessHeap () returned 0x120000 [0056.941] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0056.941] GetProcessHeap () returned 0x120000 [0056.941] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0056.941] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\3082\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd68243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd68243, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0056.941] GetProcessHeap () returned 0x120000 [0056.941] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0056.941] GetProcessHeap () returned 0x120000 [0056.941] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0056.942] GetProcessHeap () returned 0x120000 [0056.942] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0056.943] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26f8376, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x28577965, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28577965, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157b0 [0056.944] GetProcessHeap () returned 0x120000 [0056.944] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0056.945] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\1033\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4512fb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd4512fb5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2ebae3b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158f0 [0056.945] GetProcessHeap () returned 0x120000 [0056.945] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0056.945] GetProcessHeap () returned 0x120000 [0056.945] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0056.945] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\Cultures\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc436e5a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc436e5a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc436e5a6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152b0 [0056.945] GetProcessHeap () returned 0x120000 [0056.945] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0056.945] GetProcessHeap () returned 0x120000 [0056.945] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0056.945] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\en-us\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2d86b0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2d86b0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2d86b0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0056.946] GetProcessHeap () returned 0x120000 [0056.946] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0056.946] GetProcessHeap () returned 0x120000 [0056.946] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0056.947] GetProcessHeap () returned 0x120000 [0056.947] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0056.948] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Portal\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd8e49f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0056.948] GetProcessHeap () returned 0x120000 [0056.948] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0056.948] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Portal\\1033\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd8e49f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd8e49f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0056.948] GetProcessHeap () returned 0x120000 [0056.948] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0056.948] GetProcessHeap () returned 0x120000 [0056.948] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0056.949] GetProcessHeap () returned 0x120000 [0056.949] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0056.950] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc968bf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc968bf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0056.952] GetProcessHeap () returned 0x120000 [0056.952] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0056.952] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA6\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0056.952] GetProcessHeap () returned 0x120000 [0056.952] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0056.953] GetProcessHeap () returned 0x120000 [0056.953] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0056.953] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc968bf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc968bf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc968bf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215130 [0056.953] GetProcessHeap () returned 0x120000 [0056.953] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0056.953] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\1033\\*", lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc968bf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0056.956] GetProcessHeap () returned 0x120000 [0056.956] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0056.956] GetProcessHeap () returned 0x120000 [0056.956] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0056.956] GetProcessHeap () returned 0x120000 [0056.956] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0056.957] GetProcessHeap () returned 0x120000 [0056.957] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0056.958] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c1a793, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215230 [0056.958] GetProcessHeap () returned 0x120000 [0056.958] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0056.958] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\16\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c1a793, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0056.958] GetProcessHeap () returned 0x120000 [0056.958] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0056.958] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\*", lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd7bf89, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd7bf89, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156b0 [0056.959] GetProcessHeap () returned 0x120000 [0056.959] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0056.959] GetProcessHeap () returned 0x120000 [0056.959] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0056.959] GetProcessHeap () returned 0x120000 [0056.959] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0056.960] GetProcessHeap () returned 0x120000 [0056.960] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0056.960] GetProcessHeap () returned 0x120000 [0056.960] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0056.960] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\System\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215570 [0056.961] GetProcessHeap () returned 0x120000 [0056.961] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0056.962] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\System\\ole db\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7b78b8d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215830 [0056.962] GetProcessHeap () returned 0x120000 [0056.962] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0056.962] GetProcessHeap () returned 0x120000 [0056.962] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0056.963] GetProcessHeap () returned 0x120000 [0056.963] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0056.963] GetProcessHeap () returned 0x120000 [0056.963] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0056.963] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2e11c27d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e11c27d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156b0 [0056.964] GetProcessHeap () returned 0x120000 [0056.964] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0056.964] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb142e44, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0056.970] GetProcessHeap () returned 0x120000 [0056.970] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0056.971] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb142e44, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215430 [0056.971] GetProcessHeap () returned 0x120000 [0056.971] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0056.971] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ae4bf10, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ae4bf10, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0056.972] GetProcessHeap () returned 0x120000 [0056.972] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0056.972] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\Cartridges\\*", lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a6fec90, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2aebe60a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2aebe60a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215330 [0057.447] GetProcessHeap () returned 0x120000 [0057.447] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0057.447] GetProcessHeap () returned 0x120000 [0057.447] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0057.448] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\*", lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb142e44, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154f0 [0057.448] GetProcessHeap () returned 0x120000 [0057.448] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0057.448] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\1033\\*", lpFindFileData=0x2a5df98 | out: lpFindFileData=0x2a5df98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee45f66d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0057.448] GetProcessHeap () returned 0x120000 [0057.448] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0057.448] GetProcessHeap () returned 0x120000 [0057.448] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0057.454] GetProcessHeap () returned 0x120000 [0057.454] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0057.463] GetProcessHeap () returned 0x120000 [0057.463] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0057.464] GetProcessHeap () returned 0x120000 [0057.464] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0057.465] GetProcessHeap () returned 0x120000 [0057.465] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0057.468] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Office\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e11c27d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e11c27d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e11c27d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0057.474] GetProcessHeap () returned 0x120000 [0057.474] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0057.474] GetProcessHeap () returned 0x120000 [0057.474] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0057.474] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215770 [0057.474] GetProcessHeap () returned 0x120000 [0057.474] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0057.476] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\110\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156f0 [0057.477] GetProcessHeap () returned 0x120000 [0057.477] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0057.477] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\110\\Shared\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158f0 [0057.489] GetProcessHeap () returned 0x120000 [0057.490] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0057.490] FindNextFileW (in: hFindFile=0x2156f0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared", cAlternateFileName="")) returned 0 [0057.490] FindClose (in: hFindFile=0x2156f0 | out: hFindFile=0x2156f0) returned 1 [0057.490] GetProcessHeap () returned 0x120000 [0057.490] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0057.491] FindNextFileW (in: hFindFile=0x215770, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="110", cAlternateFileName="")) returned 0 [0057.491] FindClose (in: hFindFile=0x215770 | out: hFindFile=0x215770) returned 1 [0057.492] GetProcessHeap () returned 0x120000 [0057.492] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0057.492] FindNextFileW (in: hFindFile=0x2156b0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.NET", cAlternateFileName="MICROS~1.NET")) returned 1 [0057.492] GetProcessHeap () returned 0x120000 [0057.492] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0057.492] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0057.493] FindNextFileW (in: hFindFile=0x215870, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0057.493] FindNextFileW (in: hFindFile=0x215870, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADOMD.NET", cAlternateFileName="")) returned 1 [0057.493] GetProcessHeap () returned 0x120000 [0057.493] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0057.494] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0057.494] FindNextFileW (in: hFindFile=0x215630, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0057.494] FindNextFileW (in: hFindFile=0x215630, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="110", cAlternateFileName="")) returned 1 [0057.494] GetProcessHeap () returned 0x120000 [0057.494] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0057.494] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\110\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157f0 [0057.494] FindNextFileW (in: hFindFile=0x2157f0, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0057.494] FindNextFileW (in: hFindFile=0x2157f0, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xafe30, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.AdomdClient.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0057.494] FindNextFileW (in: hFindFile=0x2157f0, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xafe30, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.AdomdClient.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0057.494] FindClose (in: hFindFile=0x2157f0 | out: hFindFile=0x2157f0) returned 1 [0057.494] GetProcessHeap () returned 0x120000 [0057.494] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0057.494] FindNextFileW (in: hFindFile=0x215630, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="110", cAlternateFileName="")) returned 0 [0057.494] FindClose (in: hFindFile=0x215630 | out: hFindFile=0x215630) returned 1 [0057.495] GetProcessHeap () returned 0x120000 [0057.495] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0057.495] FindNextFileW (in: hFindFile=0x215870, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADOMD.NET", cAlternateFileName="")) returned 0 [0057.495] FindClose (in: hFindFile=0x215870 | out: hFindFile=0x215870) returned 1 [0057.496] GetProcessHeap () returned 0x120000 [0057.496] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0057.496] FindNextFileW (in: hFindFile=0x2156b0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.NET", cAlternateFileName="MICROS~1.NET")) returned 0 [0057.496] FindClose (in: hFindFile=0x2156b0 | out: hFindFile=0x2156b0) returned 1 [0057.496] GetProcessHeap () returned 0x120000 [0057.496] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0057.496] FindNextFileW (in: hFindFile=0x139e80, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ProgramFilesX86", cAlternateFileName="PROGRA~2")) returned 1 [0057.496] GetProcessHeap () returned 0x120000 [0057.496] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0057.497] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0057.497] FindNextFileW (in: hFindFile=0x2154b0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0057.497] FindNextFileW (in: hFindFile=0x2154b0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Analysis Services", cAlternateFileName="MICROS~2")) returned 1 [0057.497] GetProcessHeap () returned 0x120000 [0057.497] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0057.497] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154f0 [0057.497] FindNextFileW (in: hFindFile=0x2154f0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0057.497] FindNextFileW (in: hFindFile=0x2154f0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AS OLEDB", cAlternateFileName="ASOLED~1")) returned 1 [0057.497] GetProcessHeap () returned 0x120000 [0057.497] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0057.498] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0057.498] FindNextFileW (in: hFindFile=0x2151f0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0057.498] FindNextFileW (in: hFindFile=0x2151f0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2b0d4700, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0d4700, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="110", cAlternateFileName="")) returned 1 [0057.499] GetProcessHeap () returned 0x120000 [0057.499] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0057.499] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2b0d4700, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0d4700, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215230 [0057.499] FindNextFileW (in: hFindFile=0x215230, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2b0d4700, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0d4700, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0057.499] FindNextFileW (in: hFindFile=0x215230, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2afef8f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b0ae4ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0ae4ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cartridges", cAlternateFileName="CARTRI~1")) returned 1 [0057.499] GetProcessHeap () returned 0x120000 [0057.500] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0057.500] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\Cartridges\\*", lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2afef8f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b0ae4ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0ae4ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215430 [0057.501] FindNextFileW (in: hFindFile=0x215430, lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2afef8f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b0ae4ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0ae4ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0057.501] FindNextFileW (in: hFindFile=0x215430, lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2b015b1d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b015b1d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b015b1d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="as80.xsl", cAlternateFileName="")) returned 1 [0057.501] FindNextFileW (in: hFindFile=0x215430, lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2b015b1d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b015b1d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b015b1d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x49ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="as90.xsl", cAlternateFileName="")) returned 1 [0057.501] FindNextFileW (in: hFindFile=0x215430, lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2b015b1d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b015b1d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b015b1d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x75ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="db2v0801.xsl", cAlternateFileName="")) returned 1 [0057.501] FindNextFileW (in: hFindFile=0x215430, lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2afef8f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2afef8f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b015b1d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1816e, dwReserved0=0x0, dwReserved1=0x0, cFileName="hive.xsl", cAlternateFileName="")) returned 1 [0057.501] FindNextFileW (in: hFindFile=0x215430, lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2afef8f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2afef8f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2afef8f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7b27, dwReserved0=0x0, dwReserved1=0x0, cFileName="Informix.xsl", cAlternateFileName="")) returned 1 [0057.501] FindNextFileW (in: hFindFile=0x215430, lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2b015b1d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b015b1d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b015b1d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7339, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjet.xsl", cAlternateFileName="")) returned 1 [0057.501] FindNextFileW (in: hFindFile=0x215430, lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2afef8f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2afef8f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2afef8f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="orcl7.xsl", cAlternateFileName="")) returned 1 [0057.501] FindNextFileW (in: hFindFile=0x215430, lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2afef8f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2afef8f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2afef8f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x858c, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql2000.xsl", cAlternateFileName="")) returned 1 [0057.501] FindNextFileW (in: hFindFile=0x215430, lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2b0ae4ba, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b0ae4ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0ae4ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e02, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql70.xsl", cAlternateFileName="")) returned 1 [0057.501] FindNextFileW (in: hFindFile=0x215430, lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2b0ae4ba, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b0ae4ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0ae4ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18559, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql90.xsl", cAlternateFileName="")) returned 1 [0057.502] FindNextFileW (in: hFindFile=0x215430, lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2b0882a6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b0882a6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0882a6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1393e, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlpdw.xsl", cAlternateFileName="")) returned 1 [0057.502] FindNextFileW (in: hFindFile=0x215430, lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2b0ae4ba, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b0ae4ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0ae4ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x76a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sybase.xsl", cAlternateFileName="")) returned 1 [0057.502] FindNextFileW (in: hFindFile=0x215430, lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2b0ae4ba, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b0ae4ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0ae4ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c42, dwReserved0=0x0, dwReserved1=0x0, cFileName="trdtv2r41.xsl", cAlternateFileName="TRDTV2~1.XSL")) returned 1 [0057.502] FindNextFileW (in: hFindFile=0x215430, lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2b0ae4ba, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b0ae4ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0ae4ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c42, dwReserved0=0x0, dwReserved1=0x0, cFileName="trdtv2r41.xsl", cAlternateFileName="TRDTV2~1.XSL")) returned 0 [0057.502] FindClose (in: hFindFile=0x215430 | out: hFindFile=0x215430) returned 1 [0057.502] GetProcessHeap () returned 0x120000 [0057.502] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0057.502] FindNextFileW (in: hFindFile=0x215230, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa937f07, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2b015b1d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0d4700, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x128848, dwReserved0=0x0, dwReserved1=0x0, cFileName="dbghelp.dll", cAlternateFileName="")) returned 1 [0057.503] FindNextFileW (in: hFindFile=0x215230, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2d25b938, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2771c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdlocal.dll", cAlternateFileName="MSMDLO~1.DLL")) returned 1 [0057.503] FindNextFileW (in: hFindFile=0x215230, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa5ff4c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa5ff4c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa8619f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6d4290, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmgdsrv.dll", cAlternateFileName="")) returned 1 [0057.503] FindNextFileW (in: hFindFile=0x215230, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x386b77a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x386b77a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ba84052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x735cf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolap110.dll", cAlternateFileName="MSOLAP~1.DLL")) returned 1 [0057.503] FindNextFileW (in: hFindFile=0x215230, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4befc00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4befc00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2ba5ddea, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44718, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui110.dll", cAlternateFileName="MSOLUI~1.DLL")) returned 1 [0057.503] FindNextFileW (in: hFindFile=0x215230, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1 [0057.503] GetProcessHeap () returned 0x120000 [0057.503] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0057.503] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\*", lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215270 [0057.503] FindNextFileW (in: hFindFile=0x215270, lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0057.504] FindNextFileW (in: hFindFile=0x215270, lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf3143659, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0057.504] GetProcessHeap () returned 0x120000 [0057.504] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x681e50 [0057.504] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\1033\\*", lpFindFileData=0x2a5df98 | out: lpFindFileData=0x2a5df98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf3143659, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155f0 [0057.504] FindNextFileW (in: hFindFile=0x2155f0, lpFindFileData=0x2a5df98 | out: lpFindFileData=0x2a5df98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf3143659, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0057.504] FindNextFileW (in: hFindFile=0x2155f0, lpFindFileData=0x2a5df98 | out: lpFindFileData=0x2a5df98*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x113870, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdsrv.rll", cAlternateFileName="")) returned 1 [0057.504] FindNextFileW (in: hFindFile=0x2155f0, lpFindFileData=0x2a5df98 | out: lpFindFileData=0x2a5df98*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3143659, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf3143659, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca99edb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1126d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdsrvi.rll", cAlternateFileName="")) returned 1 [0057.504] FindNextFileW (in: hFindFile=0x2155f0, lpFindFileData=0x2a5df98 | out: lpFindFileData=0x2a5df98*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61fd8b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3728, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui110.rll", cAlternateFileName="MSOLUI~1.RLL")) returned 1 [0057.504] FindNextFileW (in: hFindFile=0x2155f0, lpFindFileData=0x2a5df98 | out: lpFindFileData=0x2a5df98*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61fd8b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3728, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui110.rll", cAlternateFileName="MSOLUI~1.RLL")) returned 0 [0057.504] FindClose (in: hFindFile=0x2155f0 | out: hFindFile=0x2155f0) returned 1 [0057.505] GetProcessHeap () returned 0x120000 [0057.505] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x681e50 | out: hHeap=0x120000) returned 1 [0057.505] FindNextFileW (in: hFindFile=0x215270, lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf3143659, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0057.505] FindClose (in: hFindFile=0x215270 | out: hFindFile=0x215270) returned 1 [0057.505] GetProcessHeap () returned 0x120000 [0057.505] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0057.506] FindNextFileW (in: hFindFile=0x215230, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5e91324, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5e91324, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5eb74f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17a50, dwReserved0=0x0, dwReserved1=0x0, cFileName="SQLDumper.exe", cAlternateFileName="SQLDUM~1.EXE")) returned 1 [0057.506] FindNextFileW (in: hFindFile=0x215230, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa2f5c0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa2f5c0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2d19cde8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e106f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmsrv.dll", cAlternateFileName="")) returned 1 [0057.506] FindNextFileW (in: hFindFile=0x215230, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa2f5c0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa2f5c0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2d19cde8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e106f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmsrv.dll", cAlternateFileName="")) returned 0 [0057.506] FindClose (in: hFindFile=0x215230 | out: hFindFile=0x215230) returned 1 [0057.506] GetProcessHeap () returned 0x120000 [0057.506] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0057.507] FindNextFileW (in: hFindFile=0x2151f0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2b0d4700, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0d4700, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="110", cAlternateFileName="")) returned 0 [0057.507] FindClose (in: hFindFile=0x2151f0 | out: hFindFile=0x2151f0) returned 1 [0057.507] GetProcessHeap () returned 0x120000 [0057.507] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0057.507] FindNextFileW (in: hFindFile=0x2154f0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AS OLEDB", cAlternateFileName="ASOLED~1")) returned 0 [0057.507] FindClose (in: hFindFile=0x2154f0 | out: hFindFile=0x2154f0) returned 1 [0057.508] GetProcessHeap () returned 0x120000 [0057.508] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0057.509] FindNextFileW (in: hFindFile=0x2154b0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2f517e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2f517e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2f517e4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="MICROS~1")) returned 1 [0057.509] GetProcessHeap () returned 0x120000 [0057.509] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0057.509] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2f517e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2f517e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2f517e4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152b0 [0057.509] FindNextFileW (in: hFindFile=0x2152b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2f517e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2f517e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2f517e4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0057.509] FindNextFileW (in: hFindFile=0x2152b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2f517e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office16", cAlternateFileName="")) returned 1 [0057.510] GetProcessHeap () returned 0x120000 [0057.510] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0057.510] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2f517e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215570 [0057.511] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2f517e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0057.511] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd43957d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca99edb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e1424f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0057.511] GetProcessHeap () returned 0x120000 [0057.511] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0057.512] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\1033\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd43957d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca99edb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e1424f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0057.513] FindNextFileW (in: hFindFile=0x215630, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd43957d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca99edb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e1424f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0057.513] FindNextFileW (in: hFindFile=0x215630, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45d3b76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf45d3b76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf45d3b76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3058, dwReserved0=0x0, dwReserved1=0x0, cFileName="BHOINTL.DLL", cAlternateFileName="")) returned 1 [0057.513] FindNextFileW (in: hFindFile=0x215630, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4ba375b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4ba375b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x87da40, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveIntlResource.dll", cAlternateFileName="GROOVE~1.DLL")) returned 1 [0057.513] FindNextFileW (in: hFindFile=0x215630, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf46b8986, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf46b8986, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca73c66, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52848, dwReserved0=0x0, dwReserved1=0x0, cFileName="lyncDesktopResources.dll", cAlternateFileName="LYNCDE~1.DLL")) returned 1 [0057.513] FindNextFileW (in: hFindFile=0x215630, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee2e1f46, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee2e1f46, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee3545e6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b6b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPISHELLR.DLL", cAlternateFileName="MAPISH~1.DLL")) returned 1 [0057.513] FindNextFileW (in: hFindFile=0x215630, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4cfac8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4cfac8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a3de35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xee48, dwReserved0=0x0, dwReserved1=0x0, cFileName="ocapires.dll", cAlternateFileName="")) returned 1 [0057.513] FindNextFileW (in: hFindFile=0x215630, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed12666a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed12666a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xed231745, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OcHelperResource.dll", cAlternateFileName="OCHELP~1.DLL")) returned 1 [0057.514] FindNextFileW (in: hFindFile=0x215630, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1bf45a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1bf45a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1bf45a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1a878, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCLTINT.DLL", cAlternateFileName="")) returned 1 [0057.514] FindNextFileW (in: hFindFile=0x215630, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf263c7d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf263c7d5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16e6a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OcPubRes.dll", cAlternateFileName="")) returned 1 [0057.514] FindNextFileW (in: hFindFile=0x215630, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2e1424f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e1424f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e1424f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWSHLP10.CHM", cAlternateFileName="")) returned 1 [0057.514] FindNextFileW (in: hFindFile=0x215630, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd43957d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd43957d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd442e16d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x380d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="STSUCRES.DLL", cAlternateFileName="")) returned 1 [0057.514] FindNextFileW (in: hFindFile=0x215630, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x34c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STSUPLD.INTL.DLL", cAlternateFileName="STSUPL~1.DLL")) returned 1 [0057.514] FindNextFileW (in: hFindFile=0x215630, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1860d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1860d8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1860d8a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x29048, dwReserved0=0x0, dwReserved1=0x0, cFileName="UcAddinRes.dll", cAlternateFileName="UCADDI~1.DLL")) returned 1 [0057.514] FindNextFileW (in: hFindFile=0x215630, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefebf763, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefebf763, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca99edb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a048, dwReserved0=0x0, dwReserved1=0x0, cFileName="UccApiRes.dll", cAlternateFileName="UCCAPI~1.DLL")) returned 1 [0057.514] FindNextFileW (in: hFindFile=0x215630, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca99edb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xca99edb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x411f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBAOWS10.CHM", cAlternateFileName="")) returned 1 [0057.514] FindNextFileW (in: hFindFile=0x215630, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4cfac8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4cfac8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb0c5e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x85a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="VVIEWRES.DLL", cAlternateFileName="")) returned 1 [0057.514] FindNextFileW (in: hFindFile=0x215630, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4cfac8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4cfac8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb0c5e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x85a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="VVIEWRES.DLL", cAlternateFileName="")) returned 0 [0057.514] FindClose (in: hFindFile=0x215630 | out: hFindFile=0x215630) returned 1 [0057.515] GetProcessHeap () returned 0x120000 [0057.515] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0057.515] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x386b77a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x386b77a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x386b77a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="APDEA0~1.DLL")) returned 1 [0057.515] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2b31ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2b31ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="APC7B0~1.DLL")) returned 1 [0057.515] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="AP6221~1.DLL")) returned 1 [0057.515] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d97f24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d97f24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="API-MS~3.DLL")) returned 1 [0057.515] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a1d539, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2a1d539, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ebbef3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="APF10C~1.DLL")) returned 1 [0057.515] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x624ad43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1 [0057.515] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb67b102, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb67b102, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb6c7584, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="APA632~1.DLL")) returned 1 [0057.515] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6bae279, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6bae279, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bae279, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1 [0057.515] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfaf2dd35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf2dd35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaf7a22a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x58c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="APFD9C~1.DLL")) returned 1 [0057.515] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf75cf220, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf75cf220, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7beb2bc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="APC00F~1.DLL")) returned 1 [0057.516] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa2f5c0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa2f5c0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa2f5c0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="AP0479~1.DLL")) returned 1 [0057.516] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9f15ef0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9f15ef0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9f15ef0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="AP23C9~1.DLL")) returned 1 [0057.516] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa15225b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa15225b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa616dcb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1 [0057.516] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff31e88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff7e33c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x72c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1 [0057.516] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb94fd84, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb94fd84, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb99c21f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x68c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1 [0057.516] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1 [0057.516] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4646280, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4646280, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="API-MS~4.DLL")) returned 1 [0057.516] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa15225b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa15225b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa2834f0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="AP8F34~1.DLL")) returned 1 [0057.516] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1329a43, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1329a43, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf145ad52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1 [0057.516] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa15225b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa15225b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa5581c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="APBF0F~1.DLL")) returned 1 [0057.516] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d05722, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d05722, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d05722, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="AP5E4C~1.DLL")) returned 1 [0057.516] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e0ae4d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e0ae4d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e572fe, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="AP80F4~1.DLL")) returned 1 [0057.516] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6dea551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6dea551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6dea551, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x66a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppSharingChromeHook.dll", cAlternateFileName="APPSHA~1.DLL")) returned 1 [0057.516] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9f15ef0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9f15ef0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa178468, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8a48, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppSharingHookController.exe", cAlternateFileName="APPSHA~1.EXE")) returned 1 [0057.516] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0xfa178468, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa178468, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa178468, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvStream32.dll", cAlternateFileName="APPVIS~1.DLL")) returned 1 [0057.517] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0xfa178468, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa178468, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa178468, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvSubsystems32.dll", cAlternateFileName="APPVIS~2.DLL")) returned 1 [0057.517] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e0ae4d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e0ae4d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e310c7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12e48, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AutoHelper.dll", cAlternateFileName="AUTOHE~1.DLL")) returned 1 [0057.517] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0xfa178468, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa178468, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa178468, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2R32.dll", cAlternateFileName="")) returned 1 [0057.517] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992fb3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992fb3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2283d0f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b740, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="concrt140.dll", cAlternateFileName="CONCRT~1.DLL")) returned 1 [0057.517] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3201264, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2c4a611d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2c4a611d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="DCF", cAlternateFileName="")) returned 1 [0057.517] GetProcessHeap () returned 0x120000 [0057.517] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0057.517] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3201264, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2c4a611d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2c4a611d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215170 [0057.518] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3201264, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2c4a611d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2c4a611d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0057.518] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf428c77b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf428c77b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf428c77b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0057.518] GetProcessHeap () returned 0x120000 [0057.518] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0057.518] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\1033\\*", lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf428c77b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf428c77b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf428c77b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215230 [0057.518] FindNextFileW (in: hFindFile=0x215230, lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf428c77b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf428c77b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf428c77b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0057.518] FindNextFileW (in: hFindFile=0x215230, lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf428c77b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf428c77b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42b29f3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4848, dwReserved0=0x0, dwReserved1=0x0, cFileName="NATIVESHIM.RESOURCES.DLL", cAlternateFileName="NATIVE~1.DLL")) returned 1 [0057.518] FindNextFileW (in: hFindFile=0x215230, lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf428c77b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf428c77b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42b29f3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4848, dwReserved0=0x0, dwReserved1=0x0, cFileName="NATIVESHIM.RESOURCES.DLL", cAlternateFileName="NATIVE~1.DLL")) returned 0 [0057.518] FindClose (in: hFindFile=0x215230 | out: hFindFile=0x215230) returned 1 [0057.519] GetProcessHeap () returned 0x120000 [0057.519] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0057.519] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2c4a611d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2c4a611d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2c4a611d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21276, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessCompare.rdlc", cAlternateFileName="ACCESS~1.RDL")) returned 1 [0057.519] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2c4a611d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2c4a611d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2c4a611d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa20, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMessageDismissal.txt", cAlternateFileName="ACCESS~1.TXT")) returned 1 [0057.519] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa82ce6a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa82ce6a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa853100, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.AuditItems.dll", cAlternateFileName="COMMON~4.DLL")) returned 1 [0057.519] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87b1cd2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x87b1cd2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x97efe5f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa460, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.ClientConfiguration.dll", cAlternateFileName="COCECA~1.DLL")) returned 1 [0057.519] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1814809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.DatabaseCore.dll", cAlternateFileName="COMMON~1.DLL")) returned 1 [0057.519] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5f9c329, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5f9c329, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5f9c329, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a860, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.DatabaseServices.dll", cAlternateFileName="CO3DCE~1.DLL")) returned 1 [0057.519] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5df79a9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5df79a9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5e9028c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7860, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.DBConnection.exe", cAlternateFileName="COMMON~1.EXE")) returned 1 [0057.519] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa853100, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa853100, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa89f599, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.DBConnection64.exe", cAlternateFileName="COMMON~2.EXE")) returned 1 [0057.519] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb8dd674, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb8dd674, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb9038f2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x684c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.ExcelServices.dll", cAlternateFileName="CO37ED~1.DLL")) returned 1 [0057.519] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x18a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.FileUtils.dll", cAlternateFileName="COMMON~3.DLL")) returned 1 [0057.519] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf43250ed, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf43250ed, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf43e3cb7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.MsoInterop.dll", cAlternateFileName="COMMON~2.DLL")) returned 1 [0057.519] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc47ce76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc47ce76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc47ce76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.PasswordManager.dll", cAlternateFileName="CO07E9~1.DLL")) returned 1 [0057.519] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffe01c35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffe01c35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffe01c35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6460, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.ShowHelp.exe", cAlternateFileName="COMMON~3.EXE")) returned 1 [0057.519] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x305f84a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x305f84a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x36c7dee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.SqlDatabase.dll", cAlternateFileName="COF0D3~1.DLL")) returned 1 [0057.519] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4cfbc75, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4cfbc75, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4d48116, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b460, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATABASECOMPARE.EXE", cAlternateFileName="DATABA~1.EXE")) returned 1 [0057.520] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e0ae4d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e0ae4d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e310c7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9060, dwReserved0=0x0, dwReserved1=0x0, cFileName="DcfMsoWrapper.dll", cAlternateFileName="DCFMSO~1.DLL")) returned 1 [0057.520] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a30a43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a30a43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a56cbe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7660, dwReserved0=0x0, dwReserved1=0x0, cFileName="DcfMsoWrapper.x86.dll", cAlternateFileName="DCFMSO~2.DLL")) returned 1 [0057.520] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6e36a06, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6e36a06, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e36a06, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x561718, dwReserved0=0x0, dwReserved1=0x0, cFileName="DocumentFormat.OpenXml.dll", cAlternateFileName="DOCUME~1.DLL")) returned 1 [0057.520] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2c47fe0a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2c47fe0a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2c47fe0a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="EmptyReport.rdlc", cAlternateFileName="EMPTYR~1.RDL")) returned 1 [0057.520] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3201264, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1 [0057.520] GetProcessHeap () returned 0x120000 [0057.520] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0057.520] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\*", lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3201264, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153b0 [0057.893] FindNextFileW (in: hFindFile=0x2153b0, lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3201264, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0057.894] FindNextFileW (in: hFindFile=0x2153b0, lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3201264, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3201264, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe330c311, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x32c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.AuditItems.Resources.dll", cAlternateFileName="COMMON~1.DLL")) returned 1 [0057.894] FindNextFileW (in: hFindFile=0x2153b0, lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1755c61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1755c61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6070, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.ClientConfiguration.Resources.dll", cAlternateFileName="COMMON~4.DLL")) returned 1 [0057.894] FindNextFileW (in: hFindFile=0x2153b0, lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8789aa5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe8789aa5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe8894afa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x42c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.ExcelServices.Resources.dll", cAlternateFileName="COMMON~2.DLL")) returned 1 [0057.894] FindNextFileW (in: hFindFile=0x2153b0, lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4ba375b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4ba375b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf2b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.FileUtils.Resources.dll", cAlternateFileName="COA5FF~1.DLL")) returned 1 [0057.894] FindNextFileW (in: hFindFile=0x2153b0, lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefdda943, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefdda943, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefdda943, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb468, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.PasswordManager.Resources.dll", cAlternateFileName="COMMON~3.DLL")) returned 1 [0057.894] FindNextFileW (in: hFindFile=0x2153b0, lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf44c8b33, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf44c8b33, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2db78, dwReserved0=0x0, dwReserved1=0x0, cFileName="DatabaseCompare.HxS", cAlternateFileName="DATABA~1.HXS")) returned 1 [0057.894] FindNextFileW (in: hFindFile=0x2153b0, lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb0c5e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb0c5e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb0c5e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DatabaseCompare_col.hxc", cAlternateFileName="DATABA~1.HXC")) returned 1 [0057.894] FindNextFileW (in: hFindFile=0x2153b0, lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb0c5e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb0c5e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb0c5e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="DatabaseCompare_col.hxt", cAlternateFileName="DATABA~1.HXT")) returned 1 [0057.894] FindNextFileW (in: hFindFile=0x2153b0, lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcae6392, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcae6392, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcae6392, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="DatabaseCompare_f_col.hxk", cAlternateFileName="DATABA~1.HXK")) returned 1 [0057.894] FindNextFileW (in: hFindFile=0x2153b0, lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb0c5e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb0c5e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb0c5e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="DatabaseCompare_k_col.hxk", cAlternateFileName="DATABA~2.HXK")) returned 1 [0057.895] FindNextFileW (in: hFindFile=0x2153b0, lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed5eb1ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed5eb1ce, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcae6392, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x36eb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpreadsheetCompare.HxS", cAlternateFileName="SPREAD~1.HXS")) returned 1 [0057.895] FindNextFileW (in: hFindFile=0x2153b0, lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcae6392, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcae6392, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb0c5e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpreadsheetCompare_col.hxc", cAlternateFileName="SPREAD~1.HXC")) returned 1 [0057.895] FindNextFileW (in: hFindFile=0x2153b0, lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb0c5e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb0c5e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpreadsheetCompare_col.hxt", cAlternateFileName="SPREAD~1.HXT")) returned 1 [0057.895] FindNextFileW (in: hFindFile=0x2153b0, lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb58a9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb58a9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpreadsheetCompare_f_col.hxk", cAlternateFileName="SPREAD~1.HXK")) returned 1 [0057.895] FindNextFileW (in: hFindFile=0x2153b0, lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpreadsheetCompare_k_col.hxk", cAlternateFileName="SPREAD~2.HXK")) returned 1 [0057.895] FindNextFileW (in: hFindFile=0x2153b0, lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5a8a2df, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a8a2df, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5ab054a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5860, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpreadsheetIQ.Diagram.Resources.dll", cAlternateFileName="SPREAD~3.DLL")) returned 1 [0057.895] FindNextFileW (in: hFindFile=0x2153b0, lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4b3103f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4b3103f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4b3103f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe5c68, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpreadsheetIQ.ExcelAddin.Resources.dll", cAlternateFileName="SPREAD~2.DLL")) returned 1 [0057.895] FindNextFileW (in: hFindFile=0x2153b0, lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1814809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5270, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpreadsheetIQ.ExcelServices.Resources.dll", cAlternateFileName="SPREAD~1.DLL")) returned 1 [0057.895] FindNextFileW (in: hFindFile=0x2153b0, lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1814809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5270, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpreadsheetIQ.ExcelServices.Resources.dll", cAlternateFileName="SPREAD~1.DLL")) returned 0 [0057.895] FindClose (in: hFindFile=0x2153b0 | out: hFindFile=0x2153b0) returned 1 [0057.896] GetProcessHeap () returned 0x120000 [0057.896] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0057.896] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2c4a611d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2c4a611d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2c4a611d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMessageDismissal.txt", cAlternateFileName="EXCELM~1.TXT")) returned 1 [0057.896] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x520cca6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x520cca6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5259176, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b6c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="filecompare.exe", cAlternateFileName="FILECO~1.EXE")) returned 1 [0057.896] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b3bafd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b3bafd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b3bafd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4d050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Shared.v11.1.dll", cAlternateFileName="INC5E8~1.DLL")) returned 1 [0057.896] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4c63313, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4c63313, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4c63313, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x120ab8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Win.Misc.v11.1.dll", cAlternateFileName="IN2EFE~1.DLL")) returned 1 [0057.896] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1329a43, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1329a43, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1329a43, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd1050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Win.Misc.v8.1.dll", cAlternateFileName="INFRAG~2.DLL")) returned 1 [0057.896] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2f5480d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2f5480d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2f5480d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x218068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Win.UltraChart.v11.1.Design.dll", cAlternateFileName="IN3F5C~1.DLL")) returned 1 [0057.896] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc5fa5d2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc5fa5d2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc5fa5d2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x20cac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Win.UltraChart.v8.1.Design.dll", cAlternateFileName="INEBA1~1.DLL")) returned 1 [0057.896] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9a77594, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9a77594, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9a77594, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1b7068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Win.UltraWinChart.v11.1.dll", cAlternateFileName="IN23A5~1.DLL")) returned 1 [0057.897] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e7d566, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e7d566, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e7d566, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7c068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Win.UltraWinEditors.v11.1.dll", cAlternateFileName="IN7A94~1.DLL")) returned 1 [0057.897] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b0f72e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b0f72e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b0f72e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x71068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Win.UltraWinEditors.v8.1.dll", cAlternateFileName="INFRAG~4.DLL")) returned 1 [0057.897] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2f7aa31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2f7aa31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2fa0ca2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x232060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Win.UltraWinGrid.v11.1.dll", cAlternateFileName="IN41D8~1.DLL")) returned 1 [0057.897] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5ab1579, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5ab1579, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5eb74f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d5ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Win.UltraWinGrid.v8.1.dll", cAlternateFileName="IN06CE~1.DLL")) returned 1 [0057.897] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf158c060, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf158c060, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf16bd2da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x36070, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Win.UltraWinStatusBar.v11.1.dll", cAlternateFileName="INFRAG~3.DLL")) returned 1 [0057.897] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf311d3eb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf311d3eb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf311d3eb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x35068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Win.UltraWinStatusBar.v8.1.dll", cAlternateFileName="INA095~1.DLL")) returned 1 [0057.897] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80d6078, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x42070, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Win.UltraWinTabControl.v11.1.dll", cAlternateFileName="IN1488~1.DLL")) returned 1 [0057.897] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff0bc27, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff31e88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x42ad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Win.UltraWinTabControl.v8.1.dll", cAlternateFileName="INFRAG~1.DLL")) returned 1 [0057.897] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1698075, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1698075, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1698075, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a0ad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Win.UltraWinToolbars.v11.1.dll", cAlternateFileName="IN732F~1.DLL")) returned 1 [0057.897] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfaf53f9d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf53f9d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb43ee0e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x269068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Win.UltraWinToolbars.v8.1.dll", cAlternateFileName="IN58F0~1.DLL")) returned 1 [0057.897] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6c93006, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa0ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Win.UltraWinTree.v11.1.dll", cAlternateFileName="INC660~1.DLL")) returned 1 [0057.897] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2f0835f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2f0835f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2f5480d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Win.UltraWinTree.v8.1.dll", cAlternateFileName="IN3A49~1.DLL")) returned 1 [0057.897] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7b14e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7b14e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7d7750, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b8048, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Win.v11.1.dll", cAlternateFileName="IN9B72~1.DLL")) returned 1 [0057.897] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x680214, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x680214, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x680214, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Inquire.dll", cAlternateFileName="")) returned 1 [0057.897] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf63ed72c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf63ed72c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6a7bf80, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.Access.dao.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0057.898] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61d7668, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61d7668, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61d7668, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1d0c58, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.Access.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0057.898] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc6b9190, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc6b9190, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc6b9190, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x199a58, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.Excel.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0057.898] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6297232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6297232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6297232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd248, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Vbe.Interop.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0057.898] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xec8b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSVCR110.DLL", cAlternateFileName="")) returned 1 [0057.898] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb86af90, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb86af90, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb8b74ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="NativeShim.dll", cAlternateFileName="NATIVE~2.DLL")) returned 1 [0057.898] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9bf4d66, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9bf4d66, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e0ae4d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x42a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NativeShim.Resources.dll", cAlternateFileName="NATIVE~1.DLL")) returned 1 [0057.898] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb713a45, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb713a45, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb78613f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9aaa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Northwoods.Go.dll", cAlternateFileName="NORTHW~1.DLL")) returned 1 [0057.898] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a2a905, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a2a905, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6faa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="office.dll", cAlternateFileName="")) returned 1 [0057.898] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5a3ee57, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a3ee57, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5ad77c9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f0c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPREADSHEETCOMPARE.EXE", cAlternateFileName="SPREAD~1.EXE")) returned 1 [0057.898] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5127e7d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5127e7d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5127e7d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd0c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpreadsheetIQ.Diagram.dll", cAlternateFileName="SPREAD~3.DLL")) returned 1 [0057.898] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1c66c57, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c66c57, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c66c57, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1332c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpreadsheetIQ.ExcelAddIn.dll", cAlternateFileName="SPREAD~1.DLL")) returned 1 [0057.898] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpreadsheetIQ.ExcelServices.dll", cAlternateFileName="SPREAD~2.DLL")) returned 1 [0057.898] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf64139b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf64139b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6a7bf80, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6040, dwReserved0=0x0, dwReserved1=0x0, cFileName="stdole.dll", cAlternateFileName="")) returned 1 [0057.898] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x381f2dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x381f2dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11058, dwReserved0=0x0, dwReserved1=0x0, cFileName="SyncFusion.Compression.Base.dll", cAlternateFileName="SY9561~1.DLL")) returned 1 [0057.899] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5a8a2df, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a8a2df, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a8a2df, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1f040, dwReserved0=0x0, dwReserved1=0x0, cFileName="SyncFusion.Core.dll", cAlternateFileName="SYNCFU~3.DLL")) returned 1 [0057.899] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61fd8b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6048, dwReserved0=0x0, dwReserved1=0x0, cFileName="SyncFusion.Grid.Base.dll", cAlternateFileName="SYNCFU~4.DLL")) returned 1 [0057.899] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6dea551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6dea551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6dea551, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6058, dwReserved0=0x0, dwReserved1=0x0, cFileName="SyncFusion.Grid.Grouping.Base.dll", cAlternateFileName="SYC536~1.DLL")) returned 1 [0057.899] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfaf07af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf07af2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaf2dd35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd0060, dwReserved0=0x0, dwReserved1=0x0, cFileName="SyncFusion.Grid.Grouping.Windows.dll", cAlternateFileName="SYAFCD~1.DLL")) returned 1 [0057.899] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e572fe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e572fe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e7d566, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x195050, dwReserved0=0x0, dwReserved1=0x0, cFileName="SyncFusion.Grid.Windows.dll", cAlternateFileName="SY9D98~1.DLL")) returned 1 [0057.899] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4cd4a32, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4cd4a32, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4cfac8a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x88050, dwReserved0=0x0, dwReserved1=0x0, cFileName="SyncFusion.Grouping.Base.dll", cAlternateFileName="SYNCFU~2.DLL")) returned 1 [0057.899] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0089415, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0089415, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x374048, dwReserved0=0x0, dwReserved1=0x0, cFileName="SyncFusion.Shared.Base.dll", cAlternateFileName="SYNCFU~1.DLL")) returned 1 [0057.899] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf75a8fbb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf75a8fbb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf75a8fbb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb050, dwReserved0=0x0, dwReserved1=0x0, cFileName="SyncFusion.Shared.Windows.dll", cAlternateFileName="SY87B2~1.DLL")) returned 1 [0057.899] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7b529d9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7b529d9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7b9ee02, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6048, dwReserved0=0x0, dwReserved1=0x0, cFileName="SyncFusion.Tools.Base.dll", cAlternateFileName="SY4996~1.DLL")) returned 1 [0057.899] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x670f8d9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x670f8d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x670f8d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x468050, dwReserved0=0x0, dwReserved1=0x0, cFileName="SyncFusion.Tools.Windows.dll", cAlternateFileName="SY9B72~1.DLL")) returned 1 [0057.899] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x520cca6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x520cca6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5612cee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x306048, dwReserved0=0x0, dwReserved1=0x0, cFileName="SyncFusion.XlsIO.Base.dll", cAlternateFileName="SY774A~1.DLL")) returned 1 [0057.899] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x520cca6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x520cca6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5612cee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x306048, dwReserved0=0x0, dwReserved1=0x0, cFileName="SyncFusion.XlsIO.Base.dll", cAlternateFileName="SY774A~1.DLL")) returned 0 [0057.899] FindClose (in: hFindFile=0x215170 | out: hFindFile=0x215170) returned 1 [0057.899] GetProcessHeap () returned 0x120000 [0057.899] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0057.899] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c3c0a4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4c3c0a4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4c3c0a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x171878, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="GROOVEEX.DLL", cAlternateFileName="")) returned 1 [0057.900] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1945af2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1945af2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3b2a8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="IEAWSDC.DLL", cAlternateFileName="")) returned 1 [0057.900] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd33f011b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd33f011b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd360620a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4d690, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Interceptor.dll", cAlternateFileName="INTERC~1.DLL")) returned 1 [0057.900] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd3200239, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd3200239, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd35213f7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb60, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Interceptor.tlb", cAlternateFileName="INTERC~1.TLB")) returned 1 [0057.900] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2f517e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2f517e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd324c72e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x24a40, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="JitV.dll", cAlternateFileName="")) returned 1 [0057.900] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5ab054a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5ab054a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2c4a611d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11448, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MeetingJoinAxOC.dll", cAlternateFileName="MEETIN~1.DLL")) returned 1 [0057.900] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ac3289, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2d1e9216, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43cea0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="mfc140u.dll", cAlternateFileName="")) returned 1 [0057.900] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0089415, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0089415, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8460, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MINSBPROXY.DLL", cAlternateFileName="MINSBP~1.DLL")) returned 1 [0057.900] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a6c5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86cced8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8460, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MINSBROAMINGPROXY.DLL", cAlternateFileName="MINSBR~1.DLL")) returned 1 [0057.900] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf016e209, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf016e209, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf016e209, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15660, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSOHEV.DLL", cAlternateFileName="")) returned 1 [0057.900] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3085a99, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13660, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSOHTMED.EXE", cAlternateFileName="")) returned 1 [0057.900] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf475131d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf475131d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf475131d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x22c60, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSOSB.DLL", cAlternateFileName="")) returned 1 [0057.900] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0f23aa6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0f23aa6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2d19cde8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f2b0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1 [0057.900] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7c83c72, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7c83c72, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7c83c72, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6b538, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1 [0057.900] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x519a5bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x519a5bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2d25b938, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xec8b0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1 [0057.900] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2616676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2616676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2ebae3b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14a48, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="NAME.DLL", cAlternateFileName="")) returned 1 [0057.901] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6bd443f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6bd443f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bd443f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c68, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="NAMECONTROLPROXY.DLL", cAlternateFileName="NAMECO~1.DLL")) returned 1 [0057.901] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6ac83cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6ac83cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2d25b938, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43cc0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="NAMEEXT.DLL", cAlternateFileName="")) returned 1 [0057.901] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6735b3a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6735b3a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6781ff8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8cc0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="NPSPWRAP.DLL", cAlternateFileName="")) returned 1 [0057.901] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1329a43, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1329a43, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf134fca5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x27c48, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="OCHelper.dll", cAlternateFileName="")) returned 1 [0057.901] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5df79a9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5df79a9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2d1e9216, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f260, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="OLKFSTUB.DLL", cAlternateFileName="")) returned 1 [0057.901] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa853100, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa853100, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa853100, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d4d8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ONBttnIE.dll", cAlternateFileName="")) returned 1 [0057.901] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x633d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27878, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ONBttnIELinkedNotes.dll", cAlternateFileName="ONBTTN~1.DLL")) returned 1 [0057.901] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7a2268a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7a2268a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7a2268a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14888, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ONLNTCOMLIB.DLL", cAlternateFileName="ONLNTC~1.DLL")) returned 1 [0057.901] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4abf9f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4abf9f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4abf9f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ec0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="OSFPROXY.DLL", cAlternateFileName="")) returned 1 [0057.901] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5c164a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5c164a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5c164a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8460, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="OSFROAMINGPROXY.DLL", cAlternateFileName="OSFROA~1.DLL")) returned 1 [0057.901] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5a3ee57, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a3ee57, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5e91324, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25860, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="OWSCLT.DLL", cAlternateFileName="")) returned 1 [0057.901] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc692f34, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc692f34, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2d20f472, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2658c8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="OWSSUPP.DLL", cAlternateFileName="")) returned 1 [0057.901] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3760836, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3760836, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x236d8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="PPSLAX.DLL", cAlternateFileName="")) returned 1 [0057.901] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6c45b55, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6c45b55, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c6bda4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1d460, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="STSCOPY.DLL", cAlternateFileName="")) returned 1 [0057.902] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbda21cf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbda21cf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbdc8437, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf660, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="STSUPLD.DLL", cAlternateFileName="")) returned 1 [0057.902] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4266542, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4266542, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf428c77b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xdbcc0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ucrtbase.dll", cAlternateFileName="")) returned 1 [0057.902] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb94fd84, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb94fd84, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb99c21f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x62e70, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="URLREDIR.DLL", cAlternateFileName="")) returned 1 [0057.902] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b359a5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b359a5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b359a5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x412b0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="vccorlib140.dll", cAlternateFileName="VCCORL~1.DLL")) returned 1 [0057.902] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa6d5947, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa6d5947, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa82ce6a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14d50, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 1 [0057.902] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb62ec35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb62ec35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2e67974c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f1250, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="VVIEWDWG.DLL", cAlternateFileName="")) returned 1 [0057.902] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5a18be3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a18be3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2dbe50b1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4d650, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="VVIEWER.DLL", cAlternateFileName="")) returned 1 [0057.902] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5a18be3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a18be3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2dbe50b1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4d650, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="VVIEWER.DLL", cAlternateFileName="")) returned 0 [0057.902] FindClose (in: hFindFile=0x215570 | out: hFindFile=0x215570) returned 1 [0057.902] GetProcessHeap () returned 0x120000 [0057.902] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0057.903] FindNextFileW (in: hFindFile=0x2152b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2f517e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office16", cAlternateFileName="")) returned 0 [0057.903] FindClose (in: hFindFile=0x2152b0 | out: hFindFile=0x2152b0) returned 1 [0057.903] GetProcessHeap () returned 0x120000 [0057.903] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0057.903] FindNextFileW (in: hFindFile=0x2154b0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft SQL Server", cAlternateFileName="MICROS~3")) returned 1 [0057.903] GetProcessHeap () returned 0x120000 [0057.903] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0057.903] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215570 [0057.904] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0057.904] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="110", cAlternateFileName="")) returned 1 [0057.904] GetProcessHeap () returned 0x120000 [0057.904] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0057.905] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\110\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154f0 [0057.905] FindNextFileW (in: hFindFile=0x2154f0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0057.905] FindNextFileW (in: hFindFile=0x2154f0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared", cAlternateFileName="")) returned 1 [0057.905] GetProcessHeap () returned 0x120000 [0057.905] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0057.905] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\110\\Shared\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0057.905] FindNextFileW (in: hFindFile=0x215870, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0057.905] FindNextFileW (in: hFindFile=0x215870, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x54c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msasxpress.dll", cAlternateFileName="MSASXP~1.DLL")) returned 1 [0057.905] FindNextFileW (in: hFindFile=0x215870, lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x54c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msasxpress.dll", cAlternateFileName="MSASXP~1.DLL")) returned 0 [0057.905] FindClose (in: hFindFile=0x215870 | out: hFindFile=0x215870) returned 1 [0057.905] GetProcessHeap () returned 0x120000 [0057.905] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0057.906] GetProcessHeap () returned 0x120000 [0057.906] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0057.907] GetProcessHeap () returned 0x120000 [0057.907] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0057.907] GetProcessHeap () returned 0x120000 [0057.907] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0057.907] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158f0 [0057.907] GetProcessHeap () returned 0x120000 [0057.907] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0057.908] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0057.909] GetProcessHeap () returned 0x120000 [0057.909] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0057.909] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\110\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0057.909] GetProcessHeap () returned 0x120000 [0057.909] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0057.909] GetProcessHeap () returned 0x120000 [0057.909] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0057.910] GetProcessHeap () returned 0x120000 [0057.910] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0057.910] GetProcessHeap () returned 0x120000 [0057.910] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0057.910] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Mozilla Firefox\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0057.911] GetProcessHeap () returned 0x120000 [0057.911] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0057.912] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Mozilla Firefox\\plugins\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0057.912] GetProcessHeap () returned 0x120000 [0057.912] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0057.912] GetProcessHeap () returned 0x120000 [0057.912] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0057.913] GetProcessHeap () returned 0x120000 [0057.913] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0057.913] GetProcessHeap () returned 0x120000 [0057.913] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0057.913] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\System\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8d7d1d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee8d7d1d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156f0 [0057.915] GetProcessHeap () returned 0x120000 [0057.915] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0057.915] GetProcessHeap () returned 0x120000 [0057.915] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0057.915] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\SystemX86\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b6194c4, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b6194c4, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153b0 [0057.916] GetProcessHeap () returned 0x120000 [0057.916] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0057.916] GetProcessHeap () returned 0x120000 [0057.916] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0057.916] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156f0 [0057.917] GetProcessHeap () returned 0x120000 [0057.917] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0057.917] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154f0 [0057.917] GetProcessHeap () returned 0x120000 [0057.917] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0057.918] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_64\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a65087, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215670 [0057.918] GetProcessHeap () returned 0x120000 [0057.918] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0057.918] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_64\\Microsoft.Office.Access.BusinessDataCatalog\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a65087, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0057.919] GetProcessHeap () returned 0x120000 [0057.919] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0057.919] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_64\\Microsoft.Office.Access.BusinessDataCatalog\\16.0.0.0__71E9BCE111E9429C\\*", lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a65087, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0057.919] GetProcessHeap () returned 0x120000 [0057.919] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0057.919] GetProcessHeap () returned 0x120000 [0057.919] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0057.919] GetProcessHeap () returned 0x120000 [0057.919] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0057.920] GetProcessHeap () returned 0x120000 [0057.920] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0057.921] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0057.924] GetProcessHeap () returned 0x120000 [0057.924] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0057.924] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.AdomdClient\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a30a43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a30a43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a56cbe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215170 [0057.925] GetProcessHeap () returned 0x120000 [0057.925] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0057.925] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.AdomdClient\\11.0.0.0__89845DCD8080CC91\\*", lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a56cbe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a56cbe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a56cbe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215570 [0057.925] GetProcessHeap () returned 0x120000 [0057.926] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0057.926] GetProcessHeap () returned 0x120000 [0057.926] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0057.926] GetProcessHeap () returned 0x120000 [0057.926] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0057.926] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.SPClient.Interfaces\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd2face, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd2face, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd2face, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0057.931] GetProcessHeap () returned 0x120000 [0057.931] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0057.931] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.SPClient.Interfaces\\11.0.0.0__89845DCD8080CC91\\*", lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd2face, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd2face, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd2face, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0057.931] GetProcessHeap () returned 0x120000 [0057.931] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0057.931] GetProcessHeap () returned 0x120000 [0057.931] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0057.931] GetProcessHeap () returned 0x120000 [0057.932] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0057.932] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.BusinessData\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22a9f7a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22a9f7a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22d01df, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153b0 [0057.932] GetProcessHeap () returned 0x120000 [0057.932] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0057.932] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.BusinessData\\16.0.0.0__71E9BCE111E9429C\\*", lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22d01df, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22d01df, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0057.932] GetProcessHeap () returned 0x120000 [0057.932] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0057.932] GetProcessHeap () returned 0x120000 [0057.932] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0057.932] GetProcessHeap () returned 0x120000 [0057.932] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0057.932] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessApplications.Diagnostics\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x863456d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0058.291] GetProcessHeap () returned 0x120000 [0058.291] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x671e48 [0058.291] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessApplications.Diagnostics\\16.0.0.0__71E9BCE111E9429C\\*", lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x863456d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0058.291] GetProcessHeap () returned 0x120000 [0058.292] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x671e48 | out: hHeap=0x120000) returned 1 [0058.292] GetProcessHeap () returned 0x120000 [0058.292] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0058.292] GetProcessHeap () returned 0x120000 [0058.293] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0058.293] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0058.305] GetProcessHeap () returned 0x120000 [0058.305] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0058.305] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData\\16.0.0.0__71E9BCE111E9429C\\*", lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215770 [0058.305] GetProcessHeap () returned 0x120000 [0058.305] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0058.305] GetProcessHeap () returned 0x120000 [0058.305] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0058.306] GetProcessHeap () returned 0x120000 [0058.306] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0058.307] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData.Intl\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d97f24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d97f24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0058.307] GetProcessHeap () returned 0x120000 [0058.307] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0058.308] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData.Intl\\16.0.0.0__71E9BCE111E9429C\\*", lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d97f24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d97f24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215570 [0058.308] GetProcessHeap () returned 0x120000 [0058.308] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0058.308] GetProcessHeap () returned 0x120000 [0058.308] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0058.309] GetProcessHeap () returned 0x120000 [0058.309] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0058.310] GetProcessHeap () returned 0x120000 [0058.310] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0058.311] GetProcessHeap () returned 0x120000 [0058.311] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0058.312] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\INF\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153b0 [0058.312] GetProcessHeap () returned 0x120000 [0058.312] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0058.312] GetProcessHeap () returned 0x120000 [0058.312] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0058.312] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\Installer\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26abeaf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc369dacd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc369dacd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215170 [0058.312] GetProcessHeap () returned 0x120000 [0058.312] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0058.312] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\Installer\\{90160000-000F-0000-1000-0000000FF1CE}\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26abeaf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc36c3d3f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc434832e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0058.313] GetProcessHeap () returned 0x120000 [0058.313] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0058.313] GetProcessHeap () returned 0x120000 [0058.313] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0058.313] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\Installer\\{90160000-001F-0409-1000-0000000FF1CE}\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2f507b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2f507b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2f507b2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0058.313] GetProcessHeap () returned 0x120000 [0058.313] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0058.313] GetProcessHeap () returned 0x120000 [0058.313] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0058.313] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\Installer\\{90160000-001F-040C-1000-0000000FF1CE}\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc369dacd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc369dacd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc369dacd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215570 [0058.313] GetProcessHeap () returned 0x120000 [0058.313] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0058.313] GetProcessHeap () returned 0x120000 [0058.313] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0058.313] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\Installer\\{90160000-001F-0C0A-1000-0000000FF1CE}\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc369dacd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc369dacd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc369dacd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157f0 [0058.314] GetProcessHeap () returned 0x120000 [0058.314] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0058.314] GetProcessHeap () returned 0x120000 [0058.314] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0058.314] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\Installer\\{90160000-006E-0409-1000-0000000FF1CE}\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc28c2111, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc28c2111, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc28c2111, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155f0 [0058.314] GetProcessHeap () returned 0x120000 [0058.314] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0058.314] GetProcessHeap () returned 0x120000 [0058.314] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0058.315] GetProcessHeap () returned 0x120000 [0058.315] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0058.315] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\PCHEALTH\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e24d55a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e24d55a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e273816, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215830 [0058.316] GetProcessHeap () returned 0x120000 [0058.316] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0058.316] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\PCHEALTH\\ERRORREP\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e273816, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e299a0e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e299a0e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215270 [0058.316] GetProcessHeap () returned 0x120000 [0058.316] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0058.317] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\PCHEALTH\\ERRORREP\\QHEADLES\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e299a0e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e299a0e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e299a0e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155f0 [0058.317] GetProcessHeap () returned 0x120000 [0058.317] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0058.317] GetProcessHeap () returned 0x120000 [0058.317] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0058.317] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\PCHEALTH\\ERRORREP\\QSIGNOFF\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e299a0e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e299a0e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e299a0e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215330 [0058.317] GetProcessHeap () returned 0x120000 [0058.317] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0058.317] GetProcessHeap () returned 0x120000 [0058.317] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0058.318] GetProcessHeap () returned 0x120000 [0058.319] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0058.319] GetProcessHeap () returned 0x120000 [0058.319] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0058.319] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\SHELLNEW\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2daddbf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b285e60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b285e60, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0058.319] GetProcessHeap () returned 0x120000 [0058.319] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0058.320] GetProcessHeap () returned 0x120000 [0058.320] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0058.320] GetProcessHeap () returned 0x120000 [0058.320] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0058.320] GetProcessHeap () returned 0x120000 [0058.320] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0058.323] GetProcessHeap () returned 0x120000 [0058.323] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0058.324] GetProcessHeap () returned 0x120000 [0058.324] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0058.324] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office 15\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x4dca02c6, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x4dca02c6, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158f0 [0058.324] GetProcessHeap () returned 0x120000 [0058.324] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0058.324] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office 15\\ClientX64\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82e68d8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x82e8efda, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215430 [0058.325] GetProcessHeap () returned 0x120000 [0058.325] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0058.325] GetProcessHeap () returned 0x120000 [0058.325] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0058.325] GetProcessHeap () returned 0x120000 [0058.325] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0058.325] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe99e772e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xa7154510, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xf7d369cb, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215830 [0058.331] GetProcessHeap () returned 0x120000 [0058.331] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0058.331] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\browser\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb0da723, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xece35df2, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xece35df2, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0058.333] GetProcessHeap () returned 0x120000 [0058.333] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0058.333] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\browser\\extensions\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd77219, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xedb40aac, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xedb40aac, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215170 [0058.334] GetProcessHeap () returned 0x120000 [0058.334] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0058.334] GetProcessHeap () returned 0x120000 [0058.334] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0058.334] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\browser\\features\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd77219, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xedb1a83d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xedb1a83d, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153b0 [0058.713] GetProcessHeap () returned 0x120000 [0058.713] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0058.713] GetProcessHeap () returned 0x120000 [0058.713] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0058.713] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\browser\\VisualElements\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xece35df2, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xed7d339e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xed7d339e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153b0 [0058.713] GetProcessHeap () returned 0x120000 [0058.713] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0058.713] GetProcessHeap () returned 0x120000 [0058.713] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0058.726] GetProcessHeap () returned 0x120000 [0058.726] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0058.726] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\defaults\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec080216, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecc92398, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecc92398, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157b0 [0058.726] GetProcessHeap () returned 0x120000 [0058.726] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0058.727] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\defaults\\pref\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecc92398, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeccb8639, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xeccb8639, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0058.730] GetProcessHeap () returned 0x120000 [0058.730] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0058.730] GetProcessHeap () returned 0x120000 [0058.730] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0058.731] GetProcessHeap () returned 0x120000 [0058.732] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0058.732] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\dictionaries\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec0cc6d9, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecc92398, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecc92398, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0058.732] GetProcessHeap () returned 0x120000 [0058.732] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0058.732] GetProcessHeap () returned 0x120000 [0058.732] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0058.732] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\fonts\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec0f2926, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecbad561, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecbad561, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0058.733] GetProcessHeap () returned 0x120000 [0058.733] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0058.733] GetProcessHeap () returned 0x120000 [0058.733] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0058.733] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\gmp-clearkey\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec13ee02, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecaee98b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecaee98b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158f0 [0058.733] GetProcessHeap () returned 0x120000 [0058.733] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0058.733] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\gmp-clearkey\\0.1\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecaee98b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecb87321, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecb87321, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0058.734] GetProcessHeap () returned 0x120000 [0058.734] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0058.734] GetProcessHeap () returned 0x120000 [0058.734] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0058.735] GetProcessHeap () returned 0x120000 [0058.735] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0058.735] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\uninstall\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe9d2ec34, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef639ad2, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef639ad2, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0058.736] GetProcessHeap () returned 0x120000 [0058.736] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0058.736] GetProcessHeap () returned 0x120000 [0058.736] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0058.736] GetProcessHeap () returned 0x120000 [0058.736] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0058.736] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709c717f, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x709c717f, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x709c717f, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0058.736] GetProcessHeap () returned 0x120000 [0058.736] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0058.736] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\Microsoft\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709c717f, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x709c717f, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x709c717f, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152b0 [0058.736] GetProcessHeap () returned 0x120000 [0058.736] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0058.737] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709c717f, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x709c717f, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x709c717f, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0058.737] GetProcessHeap () returned 0x120000 [0058.737] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0058.737] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709c717f, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x709c717f, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x709c717f, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0058.738] GetProcessHeap () returned 0x120000 [0058.738] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0058.738] GetProcessHeap () returned 0x120000 [0058.738] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0058.738] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709c717f, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x709ed3a7, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x709ed3a7, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0058.738] GetProcessHeap () returned 0x120000 [0058.738] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0058.738] GetProcessHeap () returned 0x120000 [0058.738] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0058.738] GetProcessHeap () returned 0x120000 [0058.739] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0058.739] GetProcessHeap () returned 0x120000 [0058.739] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0058.739] GetProcessHeap () returned 0x120000 [0058.739] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0058.739] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709ed3a7, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x4dcec80c, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x4dcec80c, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0058.740] GetProcessHeap () returned 0x120000 [0058.740] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0058.740] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709ed3a7, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x709ed3a7, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x709ed3a7, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0058.740] GetProcessHeap () returned 0x120000 [0058.740] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0058.740] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709ed3a7, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70a5faff, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70a5faff, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157b0 [0058.741] GetProcessHeap () returned 0x120000 [0058.741] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0058.741] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709ed3a7, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70a3987a, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70a3987a, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215430 [0058.742] GetProcessHeap () returned 0x120000 [0058.742] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0058.744] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70a3987a, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70a3987a, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70a3987a, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215770 [0058.745] GetProcessHeap () returned 0x120000 [0058.745] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0058.745] GetProcessHeap () returned 0x120000 [0058.745] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0058.747] GetProcessHeap () returned 0x120000 [0058.747] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0058.747] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70a5faff, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70af849b, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70af849b, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157f0 [0058.748] GetProcessHeap () returned 0x120000 [0058.749] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0058.750] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70af849b, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70af849b, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215430 [0058.750] GetProcessHeap () returned 0x120000 [0058.750] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0058.750] GetProcessHeap () returned 0x120000 [0058.750] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0058.751] GetProcessHeap () returned 0x120000 [0058.751] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0058.752] GetProcessHeap () returned 0x120000 [0058.752] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0058.752] GetProcessHeap () returned 0x120000 [0058.752] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0058.752] GetProcessHeap () returned 0x120000 [0058.752] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0058.752] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\rempl\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x59f2f4b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa73e1bbd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8390c831, ftLastWriteTime.dwHighDateTime=0x1d32735, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215230 [0058.753] GetProcessHeap () returned 0x120000 [0058.753] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0058.753] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\rempl\\Logs\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8390c831, ftCreationTime.dwHighDateTime=0x1d32735, ftLastAccessTime.dwLowDateTime=0x86e9cd10, ftLastAccessTime.dwHighDateTime=0x1d336d7, ftLastWriteTime.dwLowDateTime=0x86e9cd10, ftLastWriteTime.dwHighDateTime=0x1d336d7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215830 [0058.756] GetProcessHeap () returned 0x120000 [0058.756] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0058.756] GetProcessHeap () returned 0x120000 [0058.756] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0058.756] GetProcessHeap () returned 0x120000 [0058.756] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0058.756] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Uninstall Information\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd2709a20, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xa747e827, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2709a20, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215170 [0058.758] GetProcessHeap () returned 0x120000 [0058.758] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0058.758] GetProcessHeap () returned 0x120000 [0058.758] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0058.758] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4c509d45, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x4ea7bdb9, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x4ea7bdb9, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0058.759] GetProcessHeap () returned 0x120000 [0058.759] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0058.759] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x749f4454, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa747febb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x865d24d3, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0058.759] GetProcessHeap () returned 0x120000 [0058.759] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0058.759] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x865d24d3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa74805fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x865d24d3, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156b0 [0058.759] GetProcessHeap () returned 0x120000 [0058.759] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0058.759] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x865d24d3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa755519f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0058.760] GetProcessHeap () returned 0x120000 [0058.760] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0058.761] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e2fdd51, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa76437f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215230 [0058.761] GetProcessHeap () returned 0x120000 [0058.761] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0058.761] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\ar-sa\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e2fdd51, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa76f9fe7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e32400a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0058.761] GetProcessHeap () returned 0x120000 [0058.761] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0058.761] GetProcessHeap () returned 0x120000 [0058.761] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0058.761] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\bg-BG\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e32400a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa772ddc0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e32400a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156f0 [0058.761] GetProcessHeap () returned 0x120000 [0058.761] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0058.761] GetProcessHeap () returned 0x120000 [0058.762] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0058.762] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\ca-ES\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa77fb761, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e34a1b4, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215570 [0058.762] GetProcessHeap () returned 0x120000 [0058.762] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0058.762] GetProcessHeap () returned 0x120000 [0058.762] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0058.762] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\ca-ES-valencia\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa78433f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e34a1b4, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215830 [0058.762] GetProcessHeap () returned 0x120000 [0058.762] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0058.762] GetProcessHeap () returned 0x120000 [0058.762] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0058.762] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\cs-CZ\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa78fe34b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3703fd, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0058.762] GetProcessHeap () returned 0x120000 [0058.762] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0058.762] GetProcessHeap () returned 0x120000 [0058.762] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0058.762] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\da-DK\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3703fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa795f898, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3703fd, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215330 [0058.763] GetProcessHeap () returned 0x120000 [0058.763] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0058.763] GetProcessHeap () returned 0x120000 [0058.763] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0058.763] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\de-AT\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3703fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa79714a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e396633, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156f0 [0058.763] GetProcessHeap () returned 0x120000 [0058.763] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0058.763] GetProcessHeap () returned 0x120000 [0058.763] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0058.763] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\de-CH\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e396633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa79bb5f0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e396633, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215430 [0058.763] GetProcessHeap () returned 0x120000 [0058.763] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0058.763] GetProcessHeap () returned 0x120000 [0058.763] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0058.763] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\de-DE\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e396633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7a12def, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3bc889, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0058.763] GetProcessHeap () returned 0x120000 [0058.763] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0058.763] GetProcessHeap () returned 0x120000 [0058.763] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0058.763] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\el-GR\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7adca7e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3bc889, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215330 [0058.764] GetProcessHeap () returned 0x120000 [0058.764] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0058.764] GetProcessHeap () returned 0x120000 [0058.764] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0058.764] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-AU\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7b18143, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3e2af7, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0058.764] GetProcessHeap () returned 0x120000 [0058.764] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0058.764] GetProcessHeap () returned 0x120000 [0058.764] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0058.764] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-CA\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7b914a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3e2af7, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215130 [0058.764] GetProcessHeap () returned 0x120000 [0058.764] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0058.764] GetProcessHeap () returned 0x120000 [0058.764] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0058.764] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-GB\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7b93b92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e408d2a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215570 [0058.764] GetProcessHeap () returned 0x120000 [0058.764] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0058.764] GetProcessHeap () returned 0x120000 [0058.765] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0058.765] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-HK\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7c098ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e408d2a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152b0 [0058.765] GetProcessHeap () returned 0x120000 [0058.765] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0058.765] GetProcessHeap () returned 0x120000 [0058.765] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0058.765] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-ID\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7c0b4b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e42efab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215270 [0058.765] GetProcessHeap () returned 0x120000 [0058.765] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0058.765] GetProcessHeap () returned 0x120000 [0058.765] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0058.765] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-IE\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7c6d3fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e42efab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154f0 [0058.765] GetProcessHeap () returned 0x120000 [0058.765] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0058.765] GetProcessHeap () returned 0x120000 [0058.765] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0058.765] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-IN\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7ca1328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e42efab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156f0 [0058.766] GetProcessHeap () returned 0x120000 [0058.766] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0058.766] GetProcessHeap () returned 0x120000 [0058.766] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0058.766] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-MY\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7d0e1e3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4551d8, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158f0 [0058.766] GetProcessHeap () returned 0x120000 [0058.766] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0058.766] GetProcessHeap () returned 0x120000 [0058.766] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0058.766] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-NZ\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7d107f6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4551d8, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0058.766] GetProcessHeap () returned 0x120000 [0058.766] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0058.766] GetProcessHeap () returned 0x120000 [0058.766] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0058.766] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-PH\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7d8451a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4551d8, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0058.766] GetProcessHeap () returned 0x120000 [0058.766] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0058.766] GetProcessHeap () returned 0x120000 [0058.766] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0058.767] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-US\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7de1d75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e47b424, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215270 [0058.767] GetProcessHeap () returned 0x120000 [0058.767] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0058.767] GetProcessHeap () returned 0x120000 [0058.767] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0058.767] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-ZA\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7de3d39, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e47b424, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215830 [0058.767] GetProcessHeap () returned 0x120000 [0058.767] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0058.767] GetProcessHeap () returned 0x120000 [0058.767] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0058.767] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\es-AR\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7e82a38, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4a167a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0058.767] GetProcessHeap () returned 0x120000 [0058.767] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0058.767] GetProcessHeap () returned 0x120000 [0058.767] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0058.767] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\es-CL\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f2851c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4a167a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0058.767] GetProcessHeap () returned 0x120000 [0058.767] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0058.768] GetProcessHeap () returned 0x120000 [0058.768] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0058.768] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\es-CO\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f2a5d6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4a167a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215270 [0058.768] GetProcessHeap () returned 0x120000 [0058.768] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0058.768] GetProcessHeap () returned 0x120000 [0058.768] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0058.768] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\es-ES\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f8f938, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4c78e2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0058.768] GetProcessHeap () returned 0x120000 [0058.768] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0058.768] GetProcessHeap () returned 0x120000 [0058.768] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0058.768] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\es-MX\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f926c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4c78e2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0058.768] GetProcessHeap () returned 0x120000 [0058.768] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0058.768] GetProcessHeap () returned 0x120000 [0058.768] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0058.768] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\es-US\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7fd9866, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4c78e2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153b0 [0058.768] GetProcessHeap () returned 0x120000 [0058.769] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0058.769] GetProcessHeap () returned 0x120000 [0058.769] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0058.769] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\es-XL\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4edb3a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa803fb1a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e93ff63, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0058.769] GetProcessHeap () returned 0x120000 [0058.769] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0058.769] GetProcessHeap () returned 0x120000 [0058.769] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0058.769] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\et-EE\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e9661e4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa80b9206, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ebc8896, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156f0 [0058.769] GetProcessHeap () returned 0x120000 [0058.769] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0058.769] GetProcessHeap () returned 0x120000 [0058.769] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0058.769] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\eu-ES\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ebc8896, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8130bd1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ec87470, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0058.769] GetProcessHeap () returned 0x120000 [0058.769] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0058.769] GetProcessHeap () returned 0x120000 [0058.769] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0058.769] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\fi-FI\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ecad633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa817116e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ed6c2ab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152b0 [0058.770] GetProcessHeap () returned 0x120000 [0058.770] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0058.770] GetProcessHeap () returned 0x120000 [0058.770] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0058.770] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\fr-BE\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ed6c2ab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa81d6f2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2a33eb, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215270 [0058.770] GetProcessHeap () returned 0x120000 [0058.770] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0058.770] GetProcessHeap () returned 0x120000 [0058.770] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0058.770] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\fr-CA\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f2a33eb, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa820b284, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2c9637, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0058.770] GetProcessHeap () returned 0x120000 [0058.770] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0058.770] GetProcessHeap () returned 0x120000 [0058.770] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0058.770] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\fr-CH\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f2c9637, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8276077, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2c9637, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158f0 [0058.770] GetProcessHeap () returned 0x120000 [0058.770] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0058.771] GetProcessHeap () returned 0x120000 [0058.771] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0058.771] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\fr-FR\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f2c9637, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa830d026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2ef892, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156f0 [0058.771] GetProcessHeap () returned 0x120000 [0058.771] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0058.771] GetProcessHeap () returned 0x120000 [0058.771] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0058.771] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\fr-XF\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f2ef892, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa830f28d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f315afa, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155f0 [0058.771] GetProcessHeap () returned 0x120000 [0058.771] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0058.771] GetProcessHeap () returned 0x120000 [0058.771] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0058.771] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\gl-ES\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f315afa, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8397774, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f315afa, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0058.771] GetProcessHeap () returned 0x120000 [0058.771] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0058.771] GetProcessHeap () returned 0x120000 [0058.771] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0058.771] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\he-IL\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f33bd1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa83e88ef, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f33bd1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152b0 [0058.772] GetProcessHeap () returned 0x120000 [0058.772] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0058.772] GetProcessHeap () returned 0x120000 [0058.772] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0058.772] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\hr-HR\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f33bd1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa83eab4d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f33bd1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0058.772] GetProcessHeap () returned 0x120000 [0058.772] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0058.772] GetProcessHeap () returned 0x120000 [0058.772] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0058.772] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\hu-HU\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f33bd1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa84655fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f361f6d, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0058.772] GetProcessHeap () returned 0x120000 [0058.772] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0058.772] GetProcessHeap () returned 0x120000 [0058.772] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0058.772] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\is-IS\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f361f6d, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa84b3b2f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f361f6d, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158f0 [0058.772] GetProcessHeap () returned 0x120000 [0058.772] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0058.772] GetProcessHeap () returned 0x120000 [0058.772] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0058.772] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\it-IT\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f361f6d, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa84fae3d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3881cc, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0058.773] GetProcessHeap () returned 0x120000 [0058.773] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0058.773] GetProcessHeap () returned 0x120000 [0058.773] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0058.773] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\ja-JP\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3881cc, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa85726e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3881cc, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0058.773] GetProcessHeap () returned 0x120000 [0058.773] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0058.773] GetProcessHeap () returned 0x120000 [0058.773] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0058.773] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\ko-KR\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3881cc, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8575326, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3ae466, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157b0 [0058.773] GetProcessHeap () returned 0x120000 [0058.773] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0058.773] GetProcessHeap () returned 0x120000 [0058.773] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0058.773] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\lb-LU\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3ae466, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa85bfd1b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3ae466, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0059.259] GetProcessHeap () returned 0x120000 [0059.259] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0059.260] GetProcessHeap () returned 0x120000 [0059.260] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0059.261] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\lt-LT\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3ae466, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa860670d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3d467a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215430 [0059.261] GetProcessHeap () returned 0x120000 [0059.261] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0059.261] GetProcessHeap () returned 0x120000 [0059.261] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0059.261] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\lv-LV\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3d467a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8608b57, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3d467a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0059.261] GetProcessHeap () returned 0x120000 [0059.261] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0059.261] GetProcessHeap () returned 0x120000 [0059.261] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0059.261] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\ms-MY\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3d467a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8663023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3fa8d2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0059.261] GetProcessHeap () returned 0x120000 [0059.261] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0059.261] GetProcessHeap () returned 0x120000 [0059.261] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0059.261] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\nb-NO\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3fa8d2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8664e62, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3fa8d2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0059.262] GetProcessHeap () returned 0x120000 [0059.262] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0059.262] GetProcessHeap () returned 0x120000 [0059.262] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0059.262] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\nl-BE\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3fa8d2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa86afcc3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f420b1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215270 [0059.262] GetProcessHeap () returned 0x120000 [0059.262] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0059.262] GetProcessHeap () returned 0x120000 [0059.262] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0059.262] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\nl-NL\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa86b1f8a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f420b1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0059.262] GetProcessHeap () returned 0x120000 [0059.262] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0059.262] GetProcessHeap () returned 0x120000 [0059.262] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0059.262] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\nn-NO\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8706406, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f420b1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215330 [0059.262] GetProcessHeap () returned 0x120000 [0059.262] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0059.263] GetProcessHeap () returned 0x120000 [0059.263] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0059.263] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\pl-PL\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa870879d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f741ca5, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0059.263] GetProcessHeap () returned 0x120000 [0059.263] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0059.263] GetProcessHeap () returned 0x120000 [0059.263] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0059.263] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\pt-BR\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f9f0764, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8758deb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8fb21a2e, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154f0 [0059.263] GetProcessHeap () returned 0x120000 [0059.263] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0059.263] GetProcessHeap () returned 0x120000 [0059.263] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0059.263] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\pt-PT\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8fb940f6, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa879d17a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x910709ea, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0059.263] GetProcessHeap () returned 0x120000 [0059.263] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0059.263] GetProcessHeap () returned 0x120000 [0059.263] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0059.263] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\resources\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x910709ea, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8805329, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91ab8c63, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0059.264] GetProcessHeap () returned 0x120000 [0059.264] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0059.264] GetProcessHeap () returned 0x120000 [0059.264] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0059.264] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\ro-RO\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91ab8c63, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8807941, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91b2b4b0, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215530 [0059.264] GetProcessHeap () returned 0x120000 [0059.264] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0059.264] GetProcessHeap () returned 0x120000 [0059.264] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0059.264] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\ru-RU\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91b515fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8880860, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91ca8b67, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153b0 [0059.264] GetProcessHeap () returned 0x120000 [0059.264] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0059.264] GetProcessHeap () returned 0x120000 [0059.264] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0059.264] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\sk-SK\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91ca8b67, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa88ef27e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92500ff3, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215330 [0059.264] GetProcessHeap () returned 0x120000 [0059.264] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0059.264] GetProcessHeap () returned 0x120000 [0059.264] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0059.265] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\sl-SI\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x926583f5, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa88f19a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92906e91, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0059.265] GetProcessHeap () returned 0x120000 [0059.265] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0059.265] GetProcessHeap () returned 0x120000 [0059.265] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0059.265] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\sr-Latn-RS\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92906e91, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8945b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92eb078f, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215170 [0059.265] GetProcessHeap () returned 0x120000 [0059.265] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0059.265] GetProcessHeap () returned 0x120000 [0059.265] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0059.265] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\sv-SE\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92eb078f, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8a33d41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x934cc975, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215130 [0059.265] GetProcessHeap () returned 0x120000 [0059.265] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0059.265] GetProcessHeap () returned 0x120000 [0059.265] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0059.265] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\th-TH\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x934cc975, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8a36304, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x93670243, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0059.266] GetProcessHeap () returned 0x120000 [0059.266] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0059.266] GetProcessHeap () returned 0x120000 [0059.266] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0059.266] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\tr-TR\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93670243, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8b3c077, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x93991459, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0059.266] GetProcessHeap () returned 0x120000 [0059.266] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0059.266] GetProcessHeap () returned 0x120000 [0059.266] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0059.266] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\uk-UA\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93991459, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8c00614, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x93a9c3f1, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157b0 [0059.266] GetProcessHeap () returned 0x120000 [0059.266] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0059.266] GetProcessHeap () returned 0x120000 [0059.266] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0059.266] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\vi-VN\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93b5b0aa, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8c62177, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x949a9132, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154f0 [0059.266] GetProcessHeap () returned 0x120000 [0059.266] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0059.266] GetProcessHeap () returned 0x120000 [0059.266] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0059.266] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\zh-CN\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x949a9132, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8c9dee8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94c57ba9, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0059.267] GetProcessHeap () returned 0x120000 [0059.267] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0059.267] GetProcessHeap () returned 0x120000 [0059.267] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0059.267] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\zh-HK\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94c57ba9, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8db6dd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0059.267] GetProcessHeap () returned 0x120000 [0059.267] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0059.267] GetProcessHeap () returned 0x120000 [0059.267] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0059.267] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\zh-TW\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94cf0533, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8db965a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0059.267] GetProcessHeap () returned 0x120000 [0059.267] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0059.267] GetProcessHeap () returned 0x120000 [0059.267] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0059.268] GetProcessHeap () returned 0x120000 [0059.269] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0059.269] GetProcessHeap () returned 0x120000 [0059.269] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0059.269] GetProcessHeap () returned 0x120000 [0059.269] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0059.269] GetProcessHeap () returned 0x120000 [0059.269] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0059.269] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\Logs\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c52ff94, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x53c41cd1, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x53c41cd1, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0059.270] GetProcessHeap () returned 0x120000 [0059.270] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0059.270] GetProcessHeap () returned 0x120000 [0059.270] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0059.270] GetProcessHeap () returned 0x120000 [0059.270] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0059.270] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4dca02c6, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x4dca02c6, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215130 [0059.271] GetProcessHeap () returned 0x120000 [0059.272] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0059.272] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\en-US\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa8fdc6ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215430 [0059.273] GetProcessHeap () returned 0x120000 [0059.273] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0059.274] GetProcessHeap () returned 0x120000 [0059.274] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0059.274] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\Offline\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa8fdd5e7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a4f7cc5, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215270 [0059.274] GetProcessHeap () returned 0x120000 [0059.274] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0059.274] GetProcessHeap () returned 0x120000 [0059.274] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0059.274] GetProcessHeap () returned 0x120000 [0059.274] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0059.275] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Defender Advanced Threat Protection\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa8fde0ed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157f0 [0059.276] GetProcessHeap () returned 0x120000 [0059.276] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0059.276] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Defender Advanced Threat Protection\\en-US\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa8fde773, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155f0 [0059.276] GetProcessHeap () returned 0x120000 [0059.276] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0059.276] GetProcessHeap () returned 0x120000 [0059.276] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0059.277] GetProcessHeap () returned 0x120000 [0059.277] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0059.277] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4dca02c6, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x4dca02c6, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215830 [0059.277] GetProcessHeap () returned 0x120000 [0059.277] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0059.277] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\en-US\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa90b7e0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215270 [0059.278] GetProcessHeap () returned 0x120000 [0059.278] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0059.278] GetProcessHeap () returned 0x120000 [0059.278] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0059.278] GetProcessHeap () returned 0x120000 [0059.278] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0059.278] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e4faee, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x4dcc6277, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x4dcc6277, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215670 [0059.279] GetProcessHeap () returned 0x120000 [0059.279] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0059.279] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9124bcc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215170 [0059.280] GetProcessHeap () returned 0x120000 [0059.280] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0059.280] GetProcessHeap () returned 0x120000 [0059.280] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0059.280] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Icons\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9125145, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215570 [0059.281] GetProcessHeap () returned 0x120000 [0059.281] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0059.281] GetProcessHeap () returned 0x120000 [0059.281] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0059.281] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Media Renderer\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9182d5a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215130 [0059.283] GetProcessHeap () returned 0x120000 [0059.283] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0059.283] GetProcessHeap () returned 0x120000 [0059.283] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0059.283] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c5441, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215430 [0059.285] GetProcessHeap () returned 0x120000 [0059.285] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0059.285] GetProcessHeap () returned 0x120000 [0059.285] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0059.285] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Skins\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c66b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215830 [0059.285] GetProcessHeap () returned 0x120000 [0059.285] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0059.285] GetProcessHeap () returned 0x120000 [0059.285] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0059.285] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Visualizations\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c754d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0059.285] GetProcessHeap () returned 0x120000 [0059.285] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0059.286] GetProcessHeap () returned 0x120000 [0059.286] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0059.286] GetProcessHeap () returned 0x120000 [0059.286] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0059.286] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Multimedia Platform\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa91c7efb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a4f7cc5, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157f0 [0059.286] GetProcessHeap () returned 0x120000 [0059.286] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0059.286] GetProcessHeap () returned 0x120000 [0059.286] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0059.286] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa91c8710, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215330 [0059.286] GetProcessHeap () returned 0x120000 [0059.286] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0059.286] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\Accessories\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa91c944d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7120260d, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153b0 [0059.286] GetProcessHeap () returned 0x120000 [0059.286] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0059.287] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\Accessories\\en-US\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c9e08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0059.287] GetProcessHeap () returned 0x120000 [0059.287] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0059.287] GetProcessHeap () returned 0x120000 [0059.287] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0059.288] GetProcessHeap () returned 0x120000 [0059.288] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0059.288] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa9257555, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155f0 [0059.290] GetProcessHeap () returned 0x120000 [0059.290] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0059.291] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\en-US\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9258521, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0059.291] GetProcessHeap () returned 0x120000 [0059.291] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0059.291] GetProcessHeap () returned 0x120000 [0059.291] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0059.292] GetProcessHeap () returned 0x120000 [0059.292] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0059.292] GetProcessHeap () returned 0x120000 [0059.292] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0059.292] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4dd389cd, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x4dd389cd, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215830 [0059.292] GetProcessHeap () returned 0x120000 [0059.292] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0059.292] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\en-US\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa92ab93a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0059.293] GetProcessHeap () returned 0x120000 [0059.293] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0059.293] GetProcessHeap () returned 0x120000 [0059.293] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0059.293] GetProcessHeap () returned 0x120000 [0059.293] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0059.293] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Portable Devices\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92ac52c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a51df28, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0059.293] GetProcessHeap () returned 0x120000 [0059.293] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0059.293] GetProcessHeap () returned 0x120000 [0059.293] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0059.293] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Security\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92acc65, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0059.293] GetProcessHeap () returned 0x120000 [0059.293] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0059.293] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Security\\BrowserCore\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92ad688, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0059.294] GetProcessHeap () returned 0x120000 [0059.294] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0059.294] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Security\\BrowserCore\\en-US\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa92ae2d6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0059.294] GetProcessHeap () returned 0x120000 [0059.294] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0059.294] GetProcessHeap () returned 0x120000 [0059.294] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0059.295] GetProcessHeap () returned 0x120000 [0059.295] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0059.295] GetProcessHeap () returned 0x120000 [0059.295] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0059.295] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92aed1a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0059.295] GetProcessHeap () returned 0x120000 [0059.295] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0059.296] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92af7c3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0059.296] GetProcessHeap () returned 0x120000 [0059.296] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0059.296] GetProcessHeap () returned 0x120000 [0059.296] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0059.296] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Shared Gadgets\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92aff0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0059.296] GetProcessHeap () returned 0x120000 [0059.296] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0059.296] GetProcessHeap () returned 0x120000 [0059.296] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x620e18 | out: hHeap=0x120000) returned 1 [0059.297] GetProcessHeap () returned 0x120000 [0059.297] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x620e18 [0059.297] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\*", lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8da88b6d, ftLastAccessTime.dwHighDateTime=0x1d3274e, ftLastWriteTime.dwLowDateTime=0x8da88b6d, ftLastWriteTime.dwHighDateTime=0x1d3274e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153b0 [0059.591] GetProcessHeap () returned 0x120000 [0059.591] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0059.591] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x223c89ad, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xa93a9ec0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3002ee68, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157b0 [0059.594] GetProcessHeap () returned 0x120000 [0059.594] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0059.594] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x228b384c, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xa93abe68, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x228b384c, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215270 [0059.595] GetProcessHeap () returned 0x120000 [0059.595] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0059.595] GetProcessHeap () returned 0x120000 [0059.595] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0059.595] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\Assets\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x229e4b3b, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xa94b581e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2310be20, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0059.604] GetProcessHeap () returned 0x120000 [0059.604] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0059.605] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\Assets\\App\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x229e4b3b, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xa95725d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x22a0ae1c, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0059.607] GetProcessHeap () returned 0x120000 [0059.607] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0059.607] GetProcessHeap () returned 0x120000 [0059.607] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0059.607] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\Assets\\Periscope\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22a31024, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xa95a0375, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x22a572ca, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215130 [0059.610] GetProcessHeap () returned 0x120000 [0059.610] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0059.634] GetProcessHeap () returned 0x120000 [0059.634] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0059.635] GetProcessHeap () returned 0x120000 [0059.635] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0059.635] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\js\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2310be20, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xa967b88f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2313207f, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215270 [0059.637] GetProcessHeap () returned 0x120000 [0059.637] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0059.637] GetProcessHeap () returned 0x120000 [0059.637] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0059.637] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x3002ee68, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xa967c915, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3002ee68, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0059.639] GetProcessHeap () returned 0x120000 [0059.639] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0059.639] GetProcessHeap () returned 0x120000 [0059.639] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0059.640] GetProcessHeap () returned 0x120000 [0059.640] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0059.640] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Deleted\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa967d4bd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0059.640] GetProcessHeap () returned 0x120000 [0059.640] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0059.640] GetProcessHeap () returned 0x120000 [0059.640] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0059.640] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96c0f12e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3c9c41d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb3c9c41d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0059.641] GetProcessHeap () returned 0x120000 [0059.641] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0059.642] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96c0f12e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9730ad4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x96c0f12e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154f0 [0059.644] GetProcessHeap () returned 0x120000 [0059.644] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0059.644] GetProcessHeap () returned 0x120000 [0059.645] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0059.645] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb3c9c41d, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xa973141d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xb3c9c41d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156b0 [0059.646] GetProcessHeap () returned 0x120000 [0059.646] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0059.646] GetProcessHeap () returned 0x120000 [0059.646] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0059.646] GetProcessHeap () returned 0x120000 [0059.646] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0059.647] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96dd8d87, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3cc2682, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb3cc2682, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0060.693] GetProcessHeap () returned 0x120000 [0060.693] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0060.693] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96dfefce, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9785683, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x96dfefce, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0060.694] GetProcessHeap () returned 0x120000 [0060.694] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0060.694] GetProcessHeap () returned 0x120000 [0060.694] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0060.694] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96dfefce, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa97d9a35, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9764f8c5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215770 [0060.696] GetProcessHeap () returned 0x120000 [0060.696] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0060.696] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Catalog\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96e25227, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa98a3eee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x970877d7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156b0 [0060.699] GetProcessHeap () returned 0x120000 [0060.699] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0060.699] GetProcessHeap () returned 0x120000 [0060.699] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0060.699] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x970ada35, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa98a4daf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x970ada35, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215330 [0060.699] GetProcessHeap () returned 0x120000 [0060.699] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0060.700] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\Contrast-black\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x970ada35, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa98a634d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x970ada35, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0060.701] GetProcessHeap () returned 0x120000 [0060.701] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0060.701] GetProcessHeap () returned 0x120000 [0060.701] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0060.701] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\contrast-white\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x970ada35, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa98a6acd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x970ada35, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156b0 [0060.701] GetProcessHeap () returned 0x120000 [0060.701] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0060.701] GetProcessHeap () returned 0x120000 [0060.701] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0060.703] GetProcessHeap () returned 0x120000 [0060.703] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0060.703] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\contrast-black\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x970ada35, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa98a7570, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x970ada35, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0060.703] GetProcessHeap () returned 0x120000 [0060.703] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0060.703] GetProcessHeap () returned 0x120000 [0060.703] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0060.703] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\contrast-white\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x970ada35, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa98a7e68, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x970ada35, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0060.703] GetProcessHeap () returned 0x120000 [0060.703] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0060.703] GetProcessHeap () returned 0x120000 [0060.703] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0060.703] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x970d3c8f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9987cd1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x972809b4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0060.707] GetProcessHeap () returned 0x120000 [0060.707] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0060.707] GetProcessHeap () returned 0x120000 [0060.707] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0060.707] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\HeroHelp\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x972809b4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa998957e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x972da738, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215330 [0060.707] GetProcessHeap () returned 0x120000 [0060.707] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0060.707] GetProcessHeap () returned 0x120000 [0060.707] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0060.707] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\manifestAssets\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97326c19, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa998a0eb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x974a57e1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0060.709] GetProcessHeap () returned 0x120000 [0060.709] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0060.710] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\manifestAssets\\contrast-black\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97326c19, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9a18213, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9739a738, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215130 [0060.714] GetProcessHeap () returned 0x120000 [0060.715] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0060.715] GetProcessHeap () returned 0x120000 [0060.715] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0060.715] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\manifestAssets\\contrast-white\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9739a738, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9a9f7f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x974330d0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215570 [0060.717] GetProcessHeap () returned 0x120000 [0060.717] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0060.717] GetProcessHeap () returned 0x120000 [0060.717] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0060.718] GetProcessHeap () returned 0x120000 [0060.718] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0060.719] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Office\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x974a57e1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9aa16f0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x975664ea, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0060.721] GetProcessHeap () returned 0x120000 [0060.721] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0060.721] GetProcessHeap () returned 0x120000 [0060.721] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0060.721] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Resources\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x975664ea, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9aa22bd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9758c747, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154f0 [0060.721] GetProcessHeap () returned 0x120000 [0060.721] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0060.721] GetProcessHeap () returned 0x120000 [0060.721] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0060.721] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\TextureBitmaps\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x975d8bfa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9b12d9d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9764f8c5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156b0 [0060.723] GetProcessHeap () returned 0x120000 [0060.723] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0060.723] GetProcessHeap () returned 0x120000 [0060.723] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0060.723] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Workflow\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9764f8c5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9b67c1d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x976e822e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215170 [0060.725] GetProcessHeap () returned 0x120000 [0060.725] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0060.726] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Workflow\\NavColumn_Black\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x976e822e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9bd111d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x977346e6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215130 [0060.731] GetProcessHeap () returned 0x120000 [0060.731] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0060.731] GetProcessHeap () returned 0x120000 [0060.731] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0060.732] GetProcessHeap () returned 0x120000 [0060.732] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0060.733] GetProcessHeap () returned 0x120000 [0060.733] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0060.733] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Common\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9853e192, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9bd24bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9853e192, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0060.733] GetProcessHeap () returned 0x120000 [0060.733] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0060.733] GetProcessHeap () returned 0x120000 [0060.733] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0060.733] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb3cc2682, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb3cc2682, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb3cc2682, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157f0 [0060.733] GetProcessHeap () returned 0x120000 [0060.733] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0060.733] GetProcessHeap () returned 0x120000 [0060.733] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0060.734] GetProcessHeap () returned 0x120000 [0060.734] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0060.734] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x339fb10b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4a05954, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb4a05954, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0060.981] GetProcessHeap () returned 0x120000 [0060.981] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0060.981] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33a6d81b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9cb9e99, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x33a6d81b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0060.982] GetProcessHeap () returned 0x120000 [0060.982] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0060.982] GetProcessHeap () returned 0x120000 [0060.982] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0060.982] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ccfdd0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9cba947, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x33cf6025, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155f0 [0060.983] GetProcessHeap () returned 0x120000 [0060.983] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0060.983] GetProcessHeap () returned 0x120000 [0060.983] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0060.983] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb4a05954, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb4a05954, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdfcbee3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0060.984] GetProcessHeap () returned 0x120000 [0060.984] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0060.984] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdfcbee3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xdfcbee3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xdfcbee3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215230 [0060.985] GetProcessHeap () returned 0x120000 [0060.985] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0060.985] GetProcessHeap () returned 0x120000 [0060.985] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0060.985] GetProcessHeap () returned 0x120000 [0060.985] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0060.986] GetProcessHeap () returned 0x120000 [0060.986] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0060.986] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33d4dd68, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb523798b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb523798b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0060.987] GetProcessHeap () returned 0x120000 [0060.987] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0060.987] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33d73fc1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9e44ee0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x33d73fc1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215230 [0060.988] GetProcessHeap () returned 0x120000 [0060.988] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0060.988] GetProcessHeap () returned 0x120000 [0060.988] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0060.988] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f2112c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9e45833, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x33f47386, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155f0 [0060.988] GetProcessHeap () returned 0x120000 [0060.988] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0060.988] GetProcessHeap () returned 0x120000 [0060.988] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0060.988] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb523798b, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb523798b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe0183a1, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215570 [0060.989] GetProcessHeap () returned 0x120000 [0060.989] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0060.989] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe0183a1, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xe0183a1, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xe0183a1, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215430 [0060.989] GetProcessHeap () returned 0x120000 [0060.989] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0060.989] GetProcessHeap () returned 0x120000 [0060.989] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0060.990] GetProcessHeap () returned 0x120000 [0060.990] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0060.990] GetProcessHeap () returned 0x120000 [0060.990] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0060.990] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfa8fd8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xa9f2aac4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5e205736, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215230 [0060.992] GetProcessHeap () returned 0x120000 [0060.992] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0060.993] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\css\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfcf205, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xa9f2be01, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfcf205, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0060.993] GetProcessHeap () returned 0x120000 [0060.993] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0060.993] GetProcessHeap () returned 0x120000 [0060.993] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0060.993] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfcf205, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xa9f2cc20, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdff5463, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215130 [0060.995] GetProcessHeap () returned 0x120000 [0060.995] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0060.995] GetProcessHeap () returned 0x120000 [0060.995] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0060.995] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\js\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdff5463, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xa9f2d5d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdff5463, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215270 [0060.996] GetProcessHeap () returned 0x120000 [0060.996] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0060.996] GetProcessHeap () returned 0x120000 [0060.996] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0060.996] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5e205736, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x10032a71, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0x10032a71, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0060.997] GetProcessHeap () returned 0x120000 [0060.997] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0060.997] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x10032a71, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x10032a71, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0x10032a71, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0060.999] GetProcessHeap () returned 0x120000 [0060.999] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0060.999] GetProcessHeap () returned 0x120000 [0060.999] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0060.999] GetProcessHeap () returned 0x120000 [0060.999] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0061.000] GetProcessHeap () returned 0x120000 [0061.000] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0061.000] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdf3689c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa041d8d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5e205736, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0061.003] GetProcessHeap () returned 0x120000 [0061.003] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.003] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdf3689c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa04335f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdf3689c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215770 [0061.003] GetProcessHeap () returned 0x120000 [0061.003] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.003] GetProcessHeap () returned 0x120000 [0061.004] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.004] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5e205736, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa043ddd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5e205736, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0061.004] GetProcessHeap () returned 0x120000 [0061.004] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.004] GetProcessHeap () returned 0x120000 [0061.004] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0061.004] GetProcessHeap () returned 0x120000 [0061.004] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0061.005] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x773fa578, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa095f16, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5eed6166, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0061.007] GetProcessHeap () returned 0x120000 [0061.007] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.007] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x773fa578, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa096b21, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x773fa578, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215430 [0061.007] GetProcessHeap () returned 0x120000 [0061.007] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.007] GetProcessHeap () returned 0x120000 [0061.007] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.007] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5eed6166, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa097114, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5eed6166, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0061.008] GetProcessHeap () returned 0x120000 [0061.008] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.008] GetProcessHeap () returned 0x120000 [0061.008] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0061.009] GetProcessHeap () returned 0x120000 [0061.009] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0061.009] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7746cb84, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa097cbe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5eefc3c1, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0061.011] GetProcessHeap () returned 0x120000 [0061.011] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.011] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77492ec4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa098c51, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77492ec4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0061.011] GetProcessHeap () returned 0x120000 [0061.011] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.011] GetProcessHeap () returned 0x120000 [0061.011] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.011] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77492ec4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa0991e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77492ec4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154f0 [0061.012] GetProcessHeap () returned 0x120000 [0061.012] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0061.012] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77492ec4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa0dcf11, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x775054bc, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215330 [0061.013] GetProcessHeap () returned 0x120000 [0061.013] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0061.014] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77492ec4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa0df02e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x774b901c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0061.017] GetProcessHeap () returned 0x120000 [0061.017] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0061.017] GetProcessHeap () returned 0x120000 [0061.017] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0061.017] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x774b901c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa14080b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x774df276, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215530 [0061.019] GetProcessHeap () returned 0x120000 [0061.019] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0061.019] GetProcessHeap () returned 0x120000 [0061.019] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0061.020] GetProcessHeap () returned 0x120000 [0061.020] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.020] GetProcessHeap () returned 0x120000 [0061.021] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.021] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7752b705, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa1412e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7752b705, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0061.021] GetProcessHeap () returned 0x120000 [0061.021] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.021] GetProcessHeap () returned 0x120000 [0061.021] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.021] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7752b705, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa20b499, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7755195b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215530 [0061.284] GetProcessHeap () returned 0x120000 [0061.284] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.284] GetProcessHeap () returned 0x120000 [0061.284] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.284] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x776cf25e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa20c37f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x776f534b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0061.285] GetProcessHeap () returned 0x120000 [0061.285] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0061.285] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x776f534b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa20cf06, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x776f534b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0061.285] GetProcessHeap () returned 0x120000 [0061.285] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0061.285] GetProcessHeap () returned 0x120000 [0061.285] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.286] GetProcessHeap () returned 0x120000 [0061.286] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.286] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b93d5c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa20dbad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77b93d5c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0061.286] GetProcessHeap () returned 0x120000 [0061.286] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0061.286] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b93d5c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa20ead2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77b93d5c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215170 [0061.287] GetProcessHeap () returned 0x120000 [0061.287] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0061.288] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b93d5c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa28c5b9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0061.292] GetProcessHeap () returned 0x120000 [0061.292] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0061.292] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Finance\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b93d5c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa28d627, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77b93d5c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0061.292] GetProcessHeap () returned 0x120000 [0061.292] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0061.292] GetProcessHeap () returned 0x120000 [0061.292] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0061.292] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\FoodAndDrink\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b93d5c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa28dd9f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77b93d5c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215430 [0061.293] GetProcessHeap () returned 0x120000 [0061.293] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0061.293] GetProcessHeap () returned 0x120000 [0061.293] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0061.293] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Health\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b93d5c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa28e968, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77b93d5c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157b0 [0061.293] GetProcessHeap () returned 0x120000 [0061.293] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0061.293] GetProcessHeap () returned 0x120000 [0061.293] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0061.293] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\News\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b93d5c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa28f394, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77b93d5c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154f0 [0061.294] GetProcessHeap () returned 0x120000 [0061.294] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0061.294] GetProcessHeap () returned 0x120000 [0061.294] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0061.294] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Sports\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77bb9eb0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa28fe63, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0061.294] GetProcessHeap () returned 0x120000 [0061.294] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0061.294] GetProcessHeap () returned 0x120000 [0061.294] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0061.294] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Weather\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77bb9eb0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2907e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0061.294] GetProcessHeap () returned 0x120000 [0061.295] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0061.295] GetProcessHeap () returned 0x120000 [0061.295] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0061.296] GetProcessHeap () returned 0x120000 [0061.296] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0061.296] GetProcessHeap () returned 0x120000 [0061.296] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.296] GetProcessHeap () returned 0x120000 [0061.296] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.297] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77bb9eb0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2911b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0061.297] GetProcessHeap () returned 0x120000 [0061.297] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0061.297] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77bb9eb0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa291621, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215430 [0061.298] GetProcessHeap () returned 0x120000 [0061.298] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0061.299] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77bb9eb0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa291d28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215130 [0061.299] GetProcessHeap () returned 0x120000 [0061.299] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0061.299] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77bb9eb0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa292432, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215170 [0061.299] GetProcessHeap () returned 0x120000 [0061.299] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0061.299] GetProcessHeap () returned 0x120000 [0061.299] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0061.301] GetProcessHeap () returned 0x120000 [0061.301] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0061.301] GetProcessHeap () returned 0x120000 [0061.301] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.301] GetProcessHeap () returned 0x120000 [0061.301] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.302] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5eefc3c1, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa292b95, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5eefc3c1, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215430 [0061.307] GetProcessHeap () returned 0x120000 [0061.307] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.307] GetProcessHeap () returned 0x120000 [0061.307] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.307] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77be010a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa293090, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77be010a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215530 [0061.308] GetProcessHeap () returned 0x120000 [0061.308] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.308] GetProcessHeap () returned 0x120000 [0061.308] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.308] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77492ec4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa0986e1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77492ec4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215770 [0061.308] GetProcessHeap () returned 0x120000 [0061.308] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.308] GetProcessHeap () returned 0x120000 [0061.309] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0061.309] GetProcessHeap () returned 0x120000 [0061.309] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0061.309] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70454cf5, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa293665, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5fac1d9b, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0061.311] GetProcessHeap () returned 0x120000 [0061.311] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.312] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70454cf5, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa293d66, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70454cf5, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215670 [0061.312] GetProcessHeap () returned 0x120000 [0061.312] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.312] GetProcessHeap () returned 0x120000 [0061.312] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.312] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5fac1d9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa2942e2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5fac1d9b, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215270 [0061.312] GetProcessHeap () returned 0x120000 [0061.312] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.312] GetProcessHeap () returned 0x120000 [0061.312] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0061.313] GetProcessHeap () returned 0x120000 [0061.313] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0061.313] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2d4c9e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5fac1d9b, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0061.315] GetProcessHeap () returned 0x120000 [0061.315] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.316] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2d61ce, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x704a11ba, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215330 [0061.316] GetProcessHeap () returned 0x120000 [0061.316] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.316] GetProcessHeap () returned 0x120000 [0061.316] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.316] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2d69dd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x704a11ba, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0061.316] GetProcessHeap () returned 0x120000 [0061.316] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0061.316] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2d7904, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x704ed6f5, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215770 [0061.318] GetProcessHeap () returned 0x120000 [0061.318] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0061.319] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa3cc321, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x704c73fb, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215430 [0061.321] GetProcessHeap () returned 0x120000 [0061.321] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0061.321] GetProcessHeap () returned 0x120000 [0061.321] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0061.321] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x704c73fb, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa457e69, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x704ed6f5, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0061.324] GetProcessHeap () returned 0x120000 [0061.324] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0061.324] GetProcessHeap () returned 0x120000 [0061.324] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0061.325] GetProcessHeap () returned 0x120000 [0061.325] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.326] GetProcessHeap () returned 0x120000 [0061.326] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.326] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x705138c0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa458f92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x705138c0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0061.326] GetProcessHeap () returned 0x120000 [0061.326] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.326] GetProcessHeap () returned 0x120000 [0061.326] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.326] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70585fca, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa459889, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x705ac224, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157b0 [0061.326] GetProcessHeap () returned 0x120000 [0061.326] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0061.326] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x705ac224, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa45a502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x705ac224, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157f0 [0061.326] GetProcessHeap () returned 0x120000 [0061.326] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0061.326] GetProcessHeap () returned 0x120000 [0061.326] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.327] GetProcessHeap () returned 0x120000 [0061.327] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.327] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7074fc08, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa45af55, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7074fc08, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0061.329] GetProcessHeap () returned 0x120000 [0061.329] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0061.329] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7074fc08, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa45be97, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7074fc08, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215830 [0061.329] GetProcessHeap () returned 0x120000 [0061.329] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0061.330] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7074fc08, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa45ce6a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215170 [0061.332] GetProcessHeap () returned 0x120000 [0061.332] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0061.332] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Finance\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7074fc08, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa45dd3d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7074fc08, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0061.332] GetProcessHeap () returned 0x120000 [0061.332] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0061.332] GetProcessHeap () returned 0x120000 [0061.332] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0061.332] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\FoodAndDrink\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7074fc08, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa45e65c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7074fc08, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0061.333] GetProcessHeap () returned 0x120000 [0061.333] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0061.333] GetProcessHeap () returned 0x120000 [0061.333] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0061.333] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Health\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7074fc08, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa45f23f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7074fc08, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0061.333] GetProcessHeap () returned 0x120000 [0061.333] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0061.333] GetProcessHeap () returned 0x120000 [0061.333] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0061.333] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\News\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7074fc08, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa45fd68, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7074fc08, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0061.333] GetProcessHeap () returned 0x120000 [0061.333] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0061.334] GetProcessHeap () returned 0x120000 [0061.334] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0061.334] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Sports\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7074fc08, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa4608e8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7074fc08, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0061.334] GetProcessHeap () returned 0x120000 [0061.334] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0061.334] GetProcessHeap () returned 0x120000 [0061.334] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0061.334] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Weather\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa461467, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215130 [0061.334] GetProcessHeap () returned 0x120000 [0061.335] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0061.335] GetProcessHeap () returned 0x120000 [0061.335] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0061.336] GetProcessHeap () returned 0x120000 [0061.336] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0061.336] GetProcessHeap () returned 0x120000 [0061.338] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.339] FindNextFileW (in: hFindFile=0x215730, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa4624cc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Msn.Shell", cAlternateFileName="MICROS~1.SHE")) returned 1 [0061.339] GetProcessHeap () returned 0x120000 [0061.339] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.339] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa4624cc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0061.339] FindNextFileW (in: hFindFile=0x2152f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa4624cc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.339] FindNextFileW (in: hFindFile=0x2152f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa463310, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Themes", cAlternateFileName="")) returned 1 [0061.340] GetProcessHeap () returned 0x120000 [0061.340] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0061.340] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa463310, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0061.340] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa463310, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.340] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa464150, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Glyphs", cAlternateFileName="")) returned 1 [0061.340] GetProcessHeap () returned 0x120000 [0061.340] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0061.341] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa464150, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215330 [0061.341] FindNextFileW (in: hFindFile=0x215330, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa464150, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.341] FindNextFileW (in: hFindFile=0x215330, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa464f0e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Font", cAlternateFileName="")) returned 1 [0061.341] GetProcessHeap () returned 0x120000 [0061.341] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0061.341] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa464f0e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0061.342] FindNextFileW (in: hFindFile=0x215870, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa464f0e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.342] FindNextFileW (in: hFindFile=0x215870, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x70775e5e, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xcdcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNMDL2.ttf", cAlternateFileName="")) returned 1 [0061.342] FindNextFileW (in: hFindFile=0x215870, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x70775e5e, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xf530, dwReserved0=0x0, dwReserved1=0x0, cFileName="WeatherColorIcons.ttf", cAlternateFileName="")) returned 1 [0061.342] FindNextFileW (in: hFindFile=0x215870, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x70775e5e, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xf530, dwReserved0=0x0, dwReserved1=0x0, cFileName="WeatherColorIcons.ttf", cAlternateFileName="")) returned 0 [0061.342] FindClose (in: hFindFile=0x215870 | out: hFindFile=0x215870) returned 1 [0061.342] GetProcessHeap () returned 0x120000 [0061.342] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0061.342] FindNextFileW (in: hFindFile=0x215330, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa464f0e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Font", cAlternateFileName="")) returned 0 [0061.342] FindClose (in: hFindFile=0x215330 | out: hFindFile=0x215330) returned 1 [0061.342] GetProcessHeap () returned 0x120000 [0061.342] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0061.343] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa464150, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Glyphs", cAlternateFileName="")) returned 0 [0061.343] FindClose (in: hFindFile=0x215470 | out: hFindFile=0x215470) returned 1 [0061.344] GetProcessHeap () returned 0x120000 [0061.344] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0061.344] FindNextFileW (in: hFindFile=0x2152f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa463310, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Themes", cAlternateFileName="")) returned 0 [0061.344] FindClose (in: hFindFile=0x2152f0 | out: hFindFile=0x2152f0) returned 1 [0061.344] GetProcessHeap () returned 0x120000 [0061.344] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.344] FindNextFileW (in: hFindFile=0x215730, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5fac1d9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa466063, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5fac1d9b, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1 [0061.344] GetProcessHeap () returned 0x120000 [0061.344] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.345] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5fac1d9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa466063, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5fac1d9b, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152b0 [0061.346] FindNextFileW (in: hFindFile=0x2152b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5fac1d9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa466063, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5fac1d9b, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.346] FindNextFileW (in: hFindFile=0x2152b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5fac1d9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa466063, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5fac1d9b, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0061.346] FindClose (in: hFindFile=0x2152b0 | out: hFindFile=0x2152b0) returned 1 [0061.346] GetProcessHeap () returned 0x120000 [0061.346] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.346] FindNextFileW (in: hFindFile=0x215730, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x70775e5e, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftAdvertising.ini", cAlternateFileName="")) returned 1 [0061.346] FindNextFileW (in: hFindFile=0x215730, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa466b87, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSAdvertisingJS", cAlternateFileName="MSADVE~1")) returned 1 [0061.346] GetProcessHeap () returned 0x120000 [0061.346] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.346] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa466b87, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156b0 [0061.346] FindNextFileW (in: hFindFile=0x2156b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa466b87, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.346] FindNextFileW (in: hFindFile=0x2156b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x70775e5e, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x4be9, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootstrap.js", cAlternateFileName="")) returned 1 [0061.346] FindNextFileW (in: hFindFile=0x2156b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x70775e5e, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x73d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ormma.js", cAlternateFileName="")) returned 1 [0061.346] FindNextFileW (in: hFindFile=0x2156b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x70775e5e, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x73d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ormma.js", cAlternateFileName="")) returned 0 [0061.346] FindClose (in: hFindFile=0x2156b0 | out: hFindFile=0x2156b0) returned 1 [0061.346] GetProcessHeap () returned 0x120000 [0061.346] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.346] FindNextFileW (in: hFindFile=0x215730, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x70775e5e, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x4413, dwReserved0=0x0, dwReserved1=0x0, cFileName="PlatformConfiguration.xml", cAlternateFileName="")) returned 1 [0061.346] FindNextFileW (in: hFindFile=0x215730, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x70775e5e, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x7079c0bc, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x6c528, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1 [0061.347] FindNextFileW (in: hFindFile=0x215730, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7079c0bc, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x7079c0bc, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x707c2312, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xe5200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SQLite3Wrapper.dll", cAlternateFileName="")) returned 1 [0061.347] FindNextFileW (in: hFindFile=0x215730, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x707c2312, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x707c2312, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x707c2312, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SQLiteWrapper.winmd", cAlternateFileName="")) returned 1 [0061.347] FindNextFileW (in: hFindFile=0x215730, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2d5b50, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x704a11ba, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Resources", cAlternateFileName="_RESOU~1")) returned 1 [0061.347] GetProcessHeap () returned 0x120000 [0061.347] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.347] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2d5b50, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x704a11ba, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0061.347] FindNextFileW (in: hFindFile=0x2155b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2d5b50, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x704a11ba, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.347] FindNextFileW (in: hFindFile=0x2155b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x704a11ba, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x704a11ba, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2985, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.rsrc", cAlternateFileName="")) returned 1 [0061.347] FindNextFileW (in: hFindFile=0x2155b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x704a11ba, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x704a11ba, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xa3, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.txt", cAlternateFileName="")) returned 1 [0061.347] FindNextFileW (in: hFindFile=0x2155b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x704a11ba, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x704a11ba, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xa3, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.txt", cAlternateFileName="")) returned 0 [0061.347] FindClose (in: hFindFile=0x2155b0 | out: hFindFile=0x2155b0) returned 1 [0061.347] GetProcessHeap () returned 0x120000 [0061.347] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.347] FindNextFileW (in: hFindFile=0x215730, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2d5b50, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x704a11ba, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Resources", cAlternateFileName="_RESOU~1")) returned 0 [0061.347] FindClose (in: hFindFile=0x215730 | out: hFindFile=0x215730) returned 1 [0061.347] GetProcessHeap () returned 0x120000 [0061.347] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0061.348] FindNextFileW (in: hFindFile=0x2153b0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c254236, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa53d33a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x608513a6, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI90D7~1.0_N")) returned 1 [0061.348] GetProcessHeap () returned 0x120000 [0061.348] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0061.348] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c254236, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa53d33a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x608513a6, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0061.350] FindNextFileW (in: hFindFile=0x2153f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c254236, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa53d33a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x608513a6, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.350] FindNextFileW (in: hFindFile=0x2153f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c254236, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c254236, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c254236, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1 [0061.350] FindNextFileW (in: hFindFile=0x2153f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c254236, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa53e492, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c254236, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1 [0061.350] GetProcessHeap () returned 0x120000 [0061.350] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.351] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c254236, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa53e492, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c254236, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0061.351] FindNextFileW (in: hFindFile=0x2152f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c254236, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa53e492, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c254236, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.351] FindNextFileW (in: hFindFile=0x2152f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c254236, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c254236, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c254236, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x650b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 1 [0061.351] FindNextFileW (in: hFindFile=0x2152f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c254236, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c254236, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c254236, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x650b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 0 [0061.351] FindClose (in: hFindFile=0x2152f0 | out: hFindFile=0x2152f0) returned 1 [0061.351] GetProcessHeap () returned 0x120000 [0061.351] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.351] FindNextFileW (in: hFindFile=0x2153f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c27a365, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c27a365, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c27a365, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x296b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1 [0061.351] FindNextFileW (in: hFindFile=0x2153f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x608513a6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa53f14b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x608513a6, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1 [0061.351] GetProcessHeap () returned 0x120000 [0061.351] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.351] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x608513a6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa53f14b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x608513a6, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0061.351] FindNextFileW (in: hFindFile=0x2151f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x608513a6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa53f14b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x608513a6, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.351] FindNextFileW (in: hFindFile=0x2151f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x608513a6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa53f14b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x608513a6, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0061.351] FindClose (in: hFindFile=0x2151f0 | out: hFindFile=0x2151f0) returned 1 [0061.351] GetProcessHeap () returned 0x120000 [0061.351] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.351] FindNextFileW (in: hFindFile=0x2153f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x608513a6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa53f14b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x608513a6, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0 [0061.352] FindClose (in: hFindFile=0x2153f0 | out: hFindFile=0x2153f0) returned 1 [0061.352] GetProcessHeap () returned 0x120000 [0061.352] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0061.352] FindNextFileW (in: hFindFile=0x2153b0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2a05a2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa5d0219, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x608775e5, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe", cAlternateFileName="MI689D~1.0_X")) returned 1 [0061.352] GetProcessHeap () returned 0x120000 [0061.352] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0061.355] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2a05a2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa5d0219, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x608775e5, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215130 [0061.356] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2a05a2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa5d0219, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x608775e5, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.357] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c2c683a, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c2c683a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x11251, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppConfiguration.xml", cAlternateFileName="")) returned 1 [0061.357] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c2c683a, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c2c683a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x7730, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1 [0061.357] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2a05a2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c2a05a2, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c2c683a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2088, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1 [0061.357] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa5d1b5b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c2c683a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1 [0061.357] GetProcessHeap () returned 0x120000 [0061.357] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.358] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa5d1b5b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c2c683a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215770 [0061.358] FindNextFileW (in: hFindFile=0x215770, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa5d1b5b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c2c683a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.358] FindNextFileW (in: hFindFile=0x215770, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c2c683a, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c2c683a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2fe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 1 [0061.358] FindNextFileW (in: hFindFile=0x215770, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c2c683a, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c2c683a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2fe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 0 [0061.358] FindClose (in: hFindFile=0x215770 | out: hFindFile=0x215770) returned 1 [0061.358] GetProcessHeap () returned 0x120000 [0061.358] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.358] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c2c683a, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c2c683a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2991, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1 [0061.358] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa5d25c8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c35f15d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1 [0061.358] GetProcessHeap () returned 0x120000 [0061.358] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.358] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa5d25c8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c35f15d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157b0 [0061.358] FindNextFileW (in: hFindFile=0x2157b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa5d25c8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c35f15d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.358] FindNextFileW (in: hFindFile=0x2157b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa5d4131, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c35f15d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppTiles", cAlternateFileName="")) returned 1 [0061.358] GetProcessHeap () returned 0x120000 [0061.358] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0061.358] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa5d4131, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c35f15d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215170 [0061.360] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa5d4131, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c35f15d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.360] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa66b57d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c312cbd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="contrast-black", cAlternateFileName="CONTRA~1")) returned 1 [0061.360] GetProcessHeap () returned 0x120000 [0061.360] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0061.361] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa66b57d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c312cbd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152b0 [0061.363] FindNextFileW (in: hFindFile=0x2152b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa66b57d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c312cbd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.363] FindNextFileW (in: hFindFile=0x2152b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c2c683a, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c2c683a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x13f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports_LogoSmall.scale-100.png", cAlternateFileName="")) returned 1 [0061.363] FindNextFileW (in: hFindFile=0x2152b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2eca57, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c2eca57, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c2eca57, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports_LogoSmall.targetsize-16.png", cAlternateFileName="")) returned 1 [0061.363] FindNextFileW (in: hFindFile=0x2152b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2eca57, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c2eca57, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c2eca57, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports_LogoSmall.targetsize-24.png", cAlternateFileName="")) returned 1 [0061.363] FindNextFileW (in: hFindFile=0x2152b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2eca57, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c2eca57, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c2eca57, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x990, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports_LogoSmall.targetsize-256.png", cAlternateFileName="")) returned 1 [0061.363] FindNextFileW (in: hFindFile=0x2152b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2eca57, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c2eca57, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c2eca57, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x132, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports_LogoSmall.targetsize-32.png", cAlternateFileName="")) returned 1 [0061.363] FindNextFileW (in: hFindFile=0x2152b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2eca57, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c2eca57, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c2eca57, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x19d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports_LogoSmall.targetsize-48.png", cAlternateFileName="")) returned 1 [0061.363] FindNextFileW (in: hFindFile=0x2152b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2eca57, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c2eca57, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c2eca57, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x669, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports_SplashScreen.scale-100.png", cAlternateFileName="")) returned 1 [0061.363] FindNextFileW (in: hFindFile=0x2152b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2eca57, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c2eca57, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c2eca57, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x577, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports_TileLargeSquare.scale-100.png", cAlternateFileName="")) returned 1 [0061.363] FindNextFileW (in: hFindFile=0x2152b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2eca57, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c2eca57, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c2eca57, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x265, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports_TileMediumSquare.scale-100.png", cAlternateFileName="")) returned 1 [0061.363] FindNextFileW (in: hFindFile=0x2152b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2eca57, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c2eca57, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c2eca57, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x183, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports_TileSmallSquare.scale-100.png", cAlternateFileName="")) returned 1 [0061.363] FindNextFileW (in: hFindFile=0x2152b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c312cbd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c312cbd, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c312cbd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports_TileWide.scale-100.png", cAlternateFileName="")) returned 1 [0061.363] FindNextFileW (in: hFindFile=0x2152b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c312cbd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c312cbd, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c312cbd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports_TileWide.scale-100.png", cAlternateFileName="")) returned 0 [0061.363] FindClose (in: hFindFile=0x2152b0 | out: hFindFile=0x2152b0) returned 1 [0061.364] GetProcessHeap () returned 0x120000 [0061.364] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0061.364] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c312cbd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa6c2ab5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c338f0b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="contrast-white", cAlternateFileName="CONTRA~2")) returned 1 [0061.364] GetProcessHeap () returned 0x120000 [0061.364] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0061.364] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c312cbd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa6c2ab5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c338f0b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215830 [0061.365] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c312cbd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa6c2ab5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c338f0b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.365] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c312cbd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c312cbd, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c312cbd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports_LogoSmall.scale-100.png", cAlternateFileName="")) returned 1 [0061.365] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c312cbd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c312cbd, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c312cbd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports_LogoSmall.targetsize-16.png", cAlternateFileName="")) returned 1 [0061.365] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c312cbd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c312cbd, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c312cbd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports_LogoSmall.targetsize-24.png", cAlternateFileName="")) returned 1 [0061.365] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c312cbd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c312cbd, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c312cbd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x9b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports_LogoSmall.targetsize-256.png", cAlternateFileName="")) returned 1 [0061.366] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c312cbd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c312cbd, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c312cbd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x139, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports_LogoSmall.targetsize-32.png", cAlternateFileName="")) returned 1 [0061.366] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c312cbd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c312cbd, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c312cbd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports_LogoSmall.targetsize-48.png", cAlternateFileName="")) returned 1 [0061.366] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c312cbd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c312cbd, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c312cbd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x714, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports_SplashScreen.scale-100.png", cAlternateFileName="")) returned 1 [0061.366] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c312cbd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c312cbd, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c312cbd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x5c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports_TileLargeSquare.scale-100.png", cAlternateFileName="")) returned 1 [0061.366] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c312cbd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c312cbd, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c312cbd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x260, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports_TileMediumSquare.scale-100.png", cAlternateFileName="")) returned 1 [0061.366] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c338f0b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c338f0b, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c338f0b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x189, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports_TileSmallSquare.scale-100.png", cAlternateFileName="")) returned 1 [0061.366] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c338f0b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c338f0b, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c338f0b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x315, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports_TileWide.scale-100.png", cAlternateFileName="")) returned 1 [0061.366] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c338f0b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c338f0b, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c338f0b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x315, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports_TileWide.scale-100.png", cAlternateFileName="")) returned 0 [0061.366] FindClose (in: hFindFile=0x215830 | out: hFindFile=0x215830) returned 1 [0061.367] GetProcessHeap () returned 0x120000 [0061.367] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0061.367] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c338f0b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c338f0b, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c338f0b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x13f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports_LogoSmall.scale-100.png", cAlternateFileName="")) returned 1 [0061.367] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c338f0b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c338f0b, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c338f0b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports_LogoSmall.targetsize-16.png", cAlternateFileName="")) returned 1 [0061.367] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c338f0b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c338f0b, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c338f0b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports_LogoSmall.targetsize-24.png", cAlternateFileName="")) returned 1 [0061.367] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c338f0b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c338f0b, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c338f0b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x990, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports_LogoSmall.targetsize-256.png", cAlternateFileName="")) returned 1 [0061.367] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c338f0b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c338f0b, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c338f0b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x132, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports_LogoSmall.targetsize-32.png", cAlternateFileName="")) returned 1 [0061.367] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c338f0b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c338f0b, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c338f0b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x19d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports_LogoSmall.targetsize-48.png", cAlternateFileName="")) returned 1 [0061.367] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c338f0b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c338f0b, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c338f0b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x669, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports_SplashScreen.scale-100.png", cAlternateFileName="")) returned 1 [0061.367] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c338f0b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c338f0b, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c338f0b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x577, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports_TileLargeSquare.scale-100.png", cAlternateFileName="")) returned 1 [0061.367] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c35f15d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c35f15d, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c35f15d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x265, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports_TileMediumSquare.scale-100.png", cAlternateFileName="")) returned 1 [0061.367] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c35f15d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c35f15d, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c35f15d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x183, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports_TileSmallSquare.scale-100.png", cAlternateFileName="")) returned 1 [0061.367] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c35f15d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c35f15d, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c35f15d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports_TileWide.scale-100.png", cAlternateFileName="")) returned 1 [0061.367] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c35f15d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c35f15d, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c35f15d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="StoreLogo.png", cAlternateFileName="")) returned 1 [0061.368] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c35f15d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c35f15d, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c35f15d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="StoreLogo.png", cAlternateFileName="")) returned 0 [0061.368] FindClose (in: hFindFile=0x215170 | out: hFindFile=0x215170) returned 1 [0061.368] GetProcessHeap () returned 0x120000 [0061.368] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0061.369] FindNextFileW (in: hFindFile=0x2157b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c35f15d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c35f15d, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c35f15d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x120f, dwReserved0=0x0, dwReserved1=0x0, cFileName="StatsLogo.png", cAlternateFileName="")) returned 1 [0061.369] FindNextFileW (in: hFindFile=0x2157b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c35f15d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c35f15d, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c35f15d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x120f, dwReserved0=0x0, dwReserved1=0x0, cFileName="StatsLogo.png", cAlternateFileName="")) returned 0 [0061.369] FindClose (in: hFindFile=0x2157b0 | out: hFindFile=0x2157b0) returned 1 [0061.369] GetProcessHeap () returned 0x120000 [0061.369] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.369] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c35f15d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c35f15d, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c35f15d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xe958, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClrCompression.dll", cAlternateFileName="")) returned 1 [0061.370] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c35f15d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa6c41d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c35f15d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Configuration", cAlternateFileName="CONFIG~1")) returned 1 [0061.370] GetProcessHeap () returned 0x120000 [0061.370] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.370] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c35f15d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa6c41d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c35f15d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0061.370] FindNextFileW (in: hFindFile=0x2158b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c35f15d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa6c41d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c35f15d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.370] FindNextFileW (in: hFindFile=0x2158b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c35f15d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c35f15d, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c3853b7, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x23c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="configuration.sqlite", cAlternateFileName="")) returned 1 [0061.370] SetEvent (hEvent=0x2d4) returned 1 [0061.370] ResetEvent (hEvent=0x2d8) returned 1 [0061.370] FindNextFileW (in: hFindFile=0x2158b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c35f15d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c35f15d, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c3853b7, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x23c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="configuration.sqlite", cAlternateFileName="")) returned 0 [0061.370] FindClose (in: hFindFile=0x2158b0 | out: hFindFile=0x2158b0) returned 1 [0061.370] GetProcessHeap () returned 0x120000 [0061.370] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.370] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c3853b7, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c3853b7, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c3853b7, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x5ab7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MarketConfiguration.xml", cAlternateFileName="")) returned 1 [0061.370] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c490576, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa6c48a4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c490576, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Advertising", cAlternateFileName="MICROS~1.ADV")) returned 1 [0061.370] GetProcessHeap () returned 0x120000 [0061.370] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.370] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c490576, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa6c48a4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c490576, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0061.372] FindNextFileW (in: hFindFile=0x2151b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c490576, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa6c48a4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c490576, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.372] FindNextFileW (in: hFindFile=0x2151b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c490576, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c490576, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c490576, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x62f, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootstrap.html", cAlternateFileName="")) returned 1 [0061.372] FindNextFileW (in: hFindFile=0x2151b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c490576, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa6c51ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c490576, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Themes", cAlternateFileName="")) returned 1 [0061.372] GetProcessHeap () returned 0x120000 [0061.372] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0061.372] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c490576, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa6c51ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c490576, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0061.372] FindNextFileW (in: hFindFile=0x2158b0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c490576, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa6c51ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c490576, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.372] FindNextFileW (in: hFindFile=0x2158b0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c490576, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c490576, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c490576, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="Generic.xbf", cAlternateFileName="")) returned 1 [0061.372] FindNextFileW (in: hFindFile=0x2158b0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c490576, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c490576, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c490576, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="Generic.xbf", cAlternateFileName="")) returned 0 [0061.372] FindClose (in: hFindFile=0x2158b0 | out: hFindFile=0x2158b0) returned 1 [0061.372] GetProcessHeap () returned 0x120000 [0061.372] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0061.372] FindNextFileW (in: hFindFile=0x2151b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c490576, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa6c51ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c490576, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Themes", cAlternateFileName="")) returned 0 [0061.372] FindClose (in: hFindFile=0x2151b0 | out: hFindFile=0x2151b0) returned 1 [0061.372] GetProcessHeap () returned 0x120000 [0061.372] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.373] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c3853b7, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c3853b7, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c46a340, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x35acb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Advertising.dll", cAlternateFileName="")) returned 1 [0061.373] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c46a340, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c46a340, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c490576, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xa4b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Advertising.winmd", cAlternateFileName="")) returned 1 [0061.373] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c490576, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c490576, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c4b67dc, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x9d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Aria.ClientTelemetry.dll", cAlternateFileName="")) returned 1 [0061.373] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c4dca2a, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Aria.ClientTelemetry.winmd", cAlternateFileName="")) returned 1 [0061.373] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa6c5add, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Msn.Services", cAlternateFileName="MICROS~1.SER")) returned 1 [0061.373] GetProcessHeap () returned 0x120000 [0061.373] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.374] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa6c5add, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0061.374] FindNextFileW (in: hFindFile=0x215870, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa6c5add, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.374] FindNextFileW (in: hFindFile=0x215870, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa6c62fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Personalization", cAlternateFileName="PERSON~1")) returned 1 [0061.374] GetProcessHeap () returned 0x120000 [0061.374] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0061.374] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa6c62fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215170 [0061.374] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa6c62fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.374] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa73b0f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataModels", cAlternateFileName="DATAMO~1")) returned 1 [0061.374] GetProcessHeap () returned 0x120000 [0061.374] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0061.375] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa73b0f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0061.377] FindNextFileW (in: hFindFile=0x2152f0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa73b0f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.377] FindNextFileW (in: hFindFile=0x2152f0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa73c941, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Finance", cAlternateFileName="")) returned 1 [0061.377] GetProcessHeap () returned 0x120000 [0061.377] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0061.377] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Finance\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa73c941, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0061.377] FindNextFileW (in: hFindFile=0x2151f0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa73c941, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.377] FindNextFileW (in: hFindFile=0x2151f0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c4dca2a, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xdde, dwReserved0=0x0, dwReserved1=0x0, cFileName="Finance.xml", cAlternateFileName="")) returned 1 [0061.377] FindNextFileW (in: hFindFile=0x2151f0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c4dca2a, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xdde, dwReserved0=0x0, dwReserved1=0x0, cFileName="Finance.xml", cAlternateFileName="")) returned 0 [0061.377] FindClose (in: hFindFile=0x2151f0 | out: hFindFile=0x2151f0) returned 1 [0061.377] GetProcessHeap () returned 0x120000 [0061.377] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0061.377] FindNextFileW (in: hFindFile=0x2152f0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa73d444, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FoodAndDrink", cAlternateFileName="FOODAN~1")) returned 1 [0061.377] GetProcessHeap () returned 0x120000 [0061.377] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0061.377] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\FoodAndDrink\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa73d444, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215770 [0061.378] FindNextFileW (in: hFindFile=0x215770, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa73d444, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.378] FindNextFileW (in: hFindFile=0x215770, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c4dca2a, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xefe, dwReserved0=0x0, dwReserved1=0x0, cFileName="FoodAndDrink.xml", cAlternateFileName="")) returned 1 [0061.378] FindNextFileW (in: hFindFile=0x215770, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c4dca2a, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xefe, dwReserved0=0x0, dwReserved1=0x0, cFileName="FoodAndDrink.xml", cAlternateFileName="")) returned 0 [0061.378] FindClose (in: hFindFile=0x215770 | out: hFindFile=0x215770) returned 1 [0061.378] GetProcessHeap () returned 0x120000 [0061.378] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0061.378] FindNextFileW (in: hFindFile=0x2152f0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa73dce6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Health", cAlternateFileName="")) returned 1 [0061.378] GetProcessHeap () returned 0x120000 [0061.378] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0061.378] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Health\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa73dce6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0061.378] FindNextFileW (in: hFindFile=0x2154b0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa73dce6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.378] FindNextFileW (in: hFindFile=0x2154b0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c4dca2a, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x928, dwReserved0=0x0, dwReserved1=0x0, cFileName="Health.xml", cAlternateFileName="")) returned 1 [0061.378] FindNextFileW (in: hFindFile=0x2154b0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c4dca2a, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x928, dwReserved0=0x0, dwReserved1=0x0, cFileName="Health.xml", cAlternateFileName="")) returned 0 [0061.378] FindClose (in: hFindFile=0x2154b0 | out: hFindFile=0x2154b0) returned 1 [0061.378] GetProcessHeap () returned 0x120000 [0061.378] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0061.378] FindNextFileW (in: hFindFile=0x2152f0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa73e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="News", cAlternateFileName="")) returned 1 [0061.378] GetProcessHeap () returned 0x120000 [0061.378] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0061.378] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\News\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa73e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0061.379] FindNextFileW (in: hFindFile=0x2155b0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa73e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.379] FindNextFileW (in: hFindFile=0x2155b0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c4dca2a, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="News.xml", cAlternateFileName="")) returned 1 [0061.379] FindNextFileW (in: hFindFile=0x2155b0, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c4dca2a, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="News.xml", cAlternateFileName="")) returned 0 [0061.379] FindClose (in: hFindFile=0x2155b0 | out: hFindFile=0x2155b0) returned 1 [0061.379] GetProcessHeap () returned 0x120000 [0061.379] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0061.379] FindNextFileW (in: hFindFile=0x2152f0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa73ed8e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports", cAlternateFileName="")) returned 1 [0061.379] GetProcessHeap () returned 0x120000 [0061.379] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0061.379] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Sports\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa73ed8e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215330 [0061.380] FindNextFileW (in: hFindFile=0x215330, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa73ed8e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.380] FindNextFileW (in: hFindFile=0x215330, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c4dca2a, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2249e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports.xml", cAlternateFileName="")) returned 1 [0061.380] FindNextFileW (in: hFindFile=0x215330, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c4dca2a, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2249e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports.xml", cAlternateFileName="")) returned 0 [0061.380] FindClose (in: hFindFile=0x215330 | out: hFindFile=0x215330) returned 1 [0061.380] GetProcessHeap () returned 0x120000 [0061.380] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0061.380] FindNextFileW (in: hFindFile=0x2152f0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa73f623, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather", cAlternateFileName="")) returned 1 [0061.380] GetProcessHeap () returned 0x120000 [0061.380] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0061.380] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Weather\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa73f623, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0061.380] FindNextFileW (in: hFindFile=0x215730, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa73f623, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.380] FindNextFileW (in: hFindFile=0x215730, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c502c94, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xb19, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather.xml", cAlternateFileName="")) returned 1 [0061.380] FindNextFileW (in: hFindFile=0x215730, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c502c94, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xb19, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather.xml", cAlternateFileName="")) returned 0 [0061.380] FindClose (in: hFindFile=0x215730 | out: hFindFile=0x215730) returned 1 [0061.380] GetProcessHeap () returned 0x120000 [0061.380] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0061.380] FindNextFileW (in: hFindFile=0x2152f0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa73f623, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather", cAlternateFileName="")) returned 0 [0061.380] FindClose (in: hFindFile=0x2152f0 | out: hFindFile=0x2152f0) returned 1 [0061.381] GetProcessHeap () returned 0x120000 [0061.381] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0061.382] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa73b0f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataModels", cAlternateFileName="DATAMO~1")) returned 0 [0061.382] FindClose (in: hFindFile=0x215170 | out: hFindFile=0x215170) returned 1 [0061.382] GetProcessHeap () returned 0x120000 [0061.382] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0061.382] FindNextFileW (in: hFindFile=0x215870, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa6c62fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Personalization", cAlternateFileName="PERSON~1")) returned 0 [0061.382] FindClose (in: hFindFile=0x215870 | out: hFindFile=0x215870) returned 1 [0061.382] GetProcessHeap () returned 0x120000 [0061.382] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.382] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa7402e1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Msn.Shell", cAlternateFileName="MICROS~1.SHE")) returned 1 [0061.382] GetProcessHeap () returned 0x120000 [0061.382] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.386] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa7402e1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156b0 [0061.386] FindNextFileW (in: hFindFile=0x2156b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa7402e1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.386] FindNextFileW (in: hFindFile=0x2156b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa741010, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Themes", cAlternateFileName="")) returned 1 [0061.386] GetProcessHeap () returned 0x120000 [0061.386] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0061.386] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa741010, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0061.387] FindNextFileW (in: hFindFile=0x2158b0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa741010, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.387] FindNextFileW (in: hFindFile=0x2158b0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa741b52, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Glyphs", cAlternateFileName="")) returned 1 [0061.387] GetProcessHeap () returned 0x120000 [0061.387] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0061.388] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa741b52, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0061.388] FindNextFileW (in: hFindFile=0x2153f0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa741b52, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.388] FindNextFileW (in: hFindFile=0x2153f0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa742614, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Font", cAlternateFileName="")) returned 1 [0061.388] GetProcessHeap () returned 0x120000 [0061.388] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0061.389] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa742614, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215430 [0061.389] FindNextFileW (in: hFindFile=0x215430, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa742614, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.389] FindNextFileW (in: hFindFile=0x215430, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c502c94, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xcdcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNMDL2.ttf", cAlternateFileName="")) returned 1 [0061.389] FindNextFileW (in: hFindFile=0x215430, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c502c94, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xf530, dwReserved0=0x0, dwReserved1=0x0, cFileName="WeatherColorIcons.ttf", cAlternateFileName="")) returned 1 [0061.389] FindNextFileW (in: hFindFile=0x215430, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c502c94, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xf530, dwReserved0=0x0, dwReserved1=0x0, cFileName="WeatherColorIcons.ttf", cAlternateFileName="")) returned 0 [0061.389] FindClose (in: hFindFile=0x215430 | out: hFindFile=0x215430) returned 1 [0061.389] GetProcessHeap () returned 0x120000 [0061.389] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0061.389] FindNextFileW (in: hFindFile=0x2153f0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa742614, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Font", cAlternateFileName="")) returned 0 [0061.389] FindClose (in: hFindFile=0x2153f0 | out: hFindFile=0x2153f0) returned 1 [0061.389] GetProcessHeap () returned 0x120000 [0061.389] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0061.390] FindNextFileW (in: hFindFile=0x2158b0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa741b52, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Glyphs", cAlternateFileName="")) returned 0 [0061.390] FindClose (in: hFindFile=0x2158b0 | out: hFindFile=0x2158b0) returned 1 [0061.390] GetProcessHeap () returned 0x120000 [0061.390] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0061.390] FindNextFileW (in: hFindFile=0x2156b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa741010, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Themes", cAlternateFileName="")) returned 0 [0061.390] FindClose (in: hFindFile=0x2156b0 | out: hFindFile=0x2156b0) returned 1 [0061.390] GetProcessHeap () returned 0x120000 [0061.391] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.391] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c502c94, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c9a1593, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xb8da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Msn.Sports.dll", cAlternateFileName="")) returned 1 [0061.391] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c9a1593, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c9a1593, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c9a1593, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Msn.Sports.exe", cAlternateFileName="")) returned 1 [0061.391] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x608775e5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa743364, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x608775e5, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1 [0061.391] GetProcessHeap () returned 0x120000 [0061.391] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.391] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x608775e5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa743364, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x608775e5, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0061.392] FindNextFileW (in: hFindFile=0x215730, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x608775e5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa743364, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x608775e5, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.392] FindNextFileW (in: hFindFile=0x215730, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x608775e5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa743364, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x608775e5, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0061.392] FindClose (in: hFindFile=0x215730 | out: hFindFile=0x215730) returned 1 [0061.392] GetProcessHeap () returned 0x120000 [0061.392] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.392] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c9a1593, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c9a1593, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c9a1593, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftAdvertising.ini", cAlternateFileName="")) returned 1 [0061.392] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c9a1593, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa743cf4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c9c77d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSAdvertisingJS", cAlternateFileName="MSADVE~1")) returned 1 [0061.392] GetProcessHeap () returned 0x120000 [0061.392] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.392] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c9a1593, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa743cf4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c9c77d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0061.393] FindNextFileW (in: hFindFile=0x2151b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c9a1593, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa743cf4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c9c77d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.393] FindNextFileW (in: hFindFile=0x2151b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c9a1593, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c9a1593, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c9c77d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x4be9, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootstrap.js", cAlternateFileName="")) returned 1 [0061.393] FindNextFileW (in: hFindFile=0x2151b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c9c77d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c9c77d0, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c9c77d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x73d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ormma.js", cAlternateFileName="")) returned 1 [0061.393] FindNextFileW (in: hFindFile=0x2151b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c9c77d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c9c77d0, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c9c77d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x73d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ormma.js", cAlternateFileName="")) returned 0 [0061.393] FindClose (in: hFindFile=0x2151b0 | out: hFindFile=0x2151b0) returned 1 [0061.393] GetProcessHeap () returned 0x120000 [0061.393] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.393] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c9c77d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c9c77d0, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c9c77d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x4413, dwReserved0=0x0, dwReserved1=0x0, cFileName="PlatformConfiguration.xml", cAlternateFileName="")) returned 1 [0061.393] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c9c77d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c9c77d0, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c9edaa1, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x7f760, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1 [0061.394] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c9edaa1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c9edaa1, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6cad2708, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xe5200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SQLite3Wrapper.dll", cAlternateFileName="")) returned 1 [0061.394] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cad2708, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6cad2708, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6cad2708, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SQLiteWrapper.winmd", cAlternateFileName="")) returned 1 [0061.394] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6caf896e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa7447d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6caf896e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Themes", cAlternateFileName="")) returned 1 [0061.394] GetProcessHeap () returned 0x120000 [0061.394] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.394] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Themes\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6caf896e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa7447d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6caf896e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215230 [0061.394] FindNextFileW (in: hFindFile=0x215230, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6caf896e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa7447d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6caf896e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.394] FindNextFileW (in: hFindFile=0x215230, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6caf896e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa7452b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6caf896e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0061.394] GetProcessHeap () returned 0x120000 [0061.394] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0061.394] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Themes\\Fonts\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6caf896e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa7452b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6caf896e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152b0 [0061.394] FindNextFileW (in: hFindFile=0x2152b0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6caf896e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa7452b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6caf896e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.394] FindNextFileW (in: hFindFile=0x2152b0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6caf896e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6caf896e, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6caf896e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x457c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DIN1451CLSHF.TTF", cAlternateFileName="")) returned 1 [0061.394] FindNextFileW (in: hFindFile=0x2152b0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6caf896e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6caf896e, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6caf896e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x457c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DIN1451CLSHF.TTF", cAlternateFileName="")) returned 0 [0061.394] FindClose (in: hFindFile=0x2152b0 | out: hFindFile=0x2152b0) returned 1 [0061.394] GetProcessHeap () returned 0x120000 [0061.394] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0061.394] FindNextFileW (in: hFindFile=0x215230, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6caf896e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa7452b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6caf896e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0 [0061.394] FindClose (in: hFindFile=0x215230 | out: hFindFile=0x215230) returned 1 [0061.395] GetProcessHeap () returned 0x120000 [0061.395] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.395] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa5d109a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c2c683a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Resources", cAlternateFileName="_RESOU~1")) returned 1 [0061.395] GetProcessHeap () returned 0x120000 [0061.395] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.395] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa5d109a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c2c683a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215270 [0061.395] FindNextFileW (in: hFindFile=0x215270, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa5d109a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c2c683a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.395] FindNextFileW (in: hFindFile=0x215270, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c2c683a, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c2c683a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2985, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.rsrc", cAlternateFileName="")) returned 1 [0061.395] FindNextFileW (in: hFindFile=0x215270, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c2c683a, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c2c683a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xa3, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.txt", cAlternateFileName="")) returned 1 [0061.395] FindNextFileW (in: hFindFile=0x215270, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c2c683a, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c2c683a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xa3, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.txt", cAlternateFileName="")) returned 0 [0061.395] FindClose (in: hFindFile=0x215270 | out: hFindFile=0x215270) returned 1 [0061.395] GetProcessHeap () returned 0x120000 [0061.395] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.395] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa5d109a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c2c683a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Resources", cAlternateFileName="_RESOU~1")) returned 0 [0061.395] FindClose (in: hFindFile=0x215130 | out: hFindFile=0x215130) returned 1 [0061.395] GetProcessHeap () returned 0x120000 [0061.395] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0061.396] FindNextFileW (in: hFindFile=0x2153b0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e476601, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb7a270e5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb7a270e5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe", cAlternateFileName="MICROS~3.SCA")) returned 1 [0061.396] GetProcessHeap () returned 0x120000 [0061.396] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0061.396] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e476601, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb7a270e5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb7a270e5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154f0 [0061.398] FindNextFileW (in: hFindFile=0x2154f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e476601, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb7a270e5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb7a270e5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.398] FindNextFileW (in: hFindFile=0x2154f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e4c2aa1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2e4c2aa1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2e4c2aa1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xfdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1 [0061.398] FindNextFileW (in: hFindFile=0x2154f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e476601, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2e476601, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2e476601, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x34e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1 [0061.398] FindNextFileW (in: hFindFile=0x2154f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e4c2aa1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2e4fcf04, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2e4fcf04, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2980, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1 [0061.398] FindNextFileW (in: hFindFile=0x2154f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e4fcf04, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa7d9181, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2e4fcf04, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1 [0061.398] GetProcessHeap () returned 0x120000 [0061.398] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.399] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e4fcf04, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa7d9181, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2e4fcf04, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156b0 [0061.399] FindNextFileW (in: hFindFile=0x2156b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e4fcf04, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa7d9181, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2e4fcf04, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.400] FindNextFileW (in: hFindFile=0x2156b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e4fcf04, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa7da30b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2e622b9b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppTiles", cAlternateFileName="")) returned 1 [0061.400] GetProcessHeap () returned 0x120000 [0061.400] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0061.400] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppTiles\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e4fcf04, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa7da30b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2e622b9b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215130 [0061.401] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e4fcf04, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa7da30b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2e622b9b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.401] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e4fcf04, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa84e071, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2e563f5f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="contrast-black", cAlternateFileName="CONTRA~1")) returned 1 [0061.401] GetProcessHeap () returned 0x120000 [0061.401] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0061.402] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e4fcf04, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa84e071, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2e563f5f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0061.404] FindNextFileW (in: hFindFile=0x215870, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e4fcf04, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa84e071, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2e563f5f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.404] FindNextFileW (in: hFindFile=0x215870, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e4fcf04, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2e4fcf04, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2e4fcf04, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather_BadgeLogo.scale-100.png", cAlternateFileName="")) returned 1 [0061.404] FindNextFileW (in: hFindFile=0x215870, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e4fcf04, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2e4fcf04, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2e4fcf04, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather_LogoSmall.scale-100.png", cAlternateFileName="")) returned 1 [0061.404] FindNextFileW (in: hFindFile=0x215870, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e4fcf04, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2e53dd05, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2e53dd05, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather_SplashScreen.scale-100.png", cAlternateFileName="")) returned 1 [0061.404] FindNextFileW (in: hFindFile=0x215870, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e53dd05, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2e563f5f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2e563f5f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather_TileLargeSquare.scale-100.png", cAlternateFileName="")) returned 1 [0061.405] FindNextFileW (in: hFindFile=0x215870, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e563f5f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2e563f5f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2e563f5f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather_TileMediumSquare.scale-100.png", cAlternateFileName="")) returned 1 [0061.405] FindNextFileW (in: hFindFile=0x215870, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e563f5f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2e563f5f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2e563f5f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x10a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather_TileSmallSquare.scale-100.png", cAlternateFileName="")) returned 1 [0061.405] FindNextFileW (in: hFindFile=0x215870, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e563f5f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2e58a1bc, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2e58a1bc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x25f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather_TileWide.scale-100.png", cAlternateFileName="")) returned 1 [0061.405] FindNextFileW (in: hFindFile=0x215870, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e563f5f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2e58a1bc, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2e58a1bc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x25f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather_TileWide.scale-100.png", cAlternateFileName="")) returned 0 [0061.405] FindClose (in: hFindFile=0x215870 | out: hFindFile=0x215870) returned 1 [0061.405] GetProcessHeap () returned 0x120000 [0061.405] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0061.405] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e58a1bc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa8cdeaf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2e5b0416, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="contrast-white", cAlternateFileName="CONTRA~2")) returned 1 [0061.406] GetProcessHeap () returned 0x120000 [0061.406] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0061.406] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e58a1bc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa8cdeaf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2e5b0416, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0061.407] FindNextFileW (in: hFindFile=0x215630, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e58a1bc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa8cdeaf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2e5b0416, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.407] FindNextFileW (in: hFindFile=0x215630, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e58a1bc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2e58a1bc, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2e58a1bc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather_BadgeLogo.scale-100.png", cAlternateFileName="")) returned 1 [0061.407] FindNextFileW (in: hFindFile=0x215630, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e58a1bc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2e58a1bc, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2e58a1bc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather_LogoSmall.scale-100.png", cAlternateFileName="")) returned 1 [0061.407] FindNextFileW (in: hFindFile=0x215630, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e58a1bc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2e5b0416, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2e5b0416, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather_SplashScreen.scale-100.png", cAlternateFileName="")) returned 1 [0061.407] FindNextFileW (in: hFindFile=0x215630, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5b0416, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2e5b0416, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2e5b0416, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather_TileLargeSquare.scale-100.png", cAlternateFileName="")) returned 1 [0061.407] FindNextFileW (in: hFindFile=0x215630, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5b0416, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2e5b0416, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2e5b0416, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather_TileMediumSquare.scale-100.png", cAlternateFileName="")) returned 1 [0061.407] FindNextFileW (in: hFindFile=0x215630, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5b0416, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2e5b0416, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2e5b0416, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather_TileSmallSquare.scale-100.png", cAlternateFileName="")) returned 1 [0061.407] FindNextFileW (in: hFindFile=0x215630, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5b0416, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2e5d667d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2e5d667d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x263, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather_TileWide.scale-100.png", cAlternateFileName="")) returned 1 [0061.407] FindNextFileW (in: hFindFile=0x215630, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5b0416, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2e5d667d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2e5d667d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x263, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather_TileWide.scale-100.png", cAlternateFileName="")) returned 0 [0061.407] FindClose (in: hFindFile=0x215630 | out: hFindFile=0x215630) returned 1 [0061.408] GetProcessHeap () returned 0x120000 [0061.408] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0061.408] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5d667d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2e5d667d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2e5d667d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="StoreLogo.scale-100.png", cAlternateFileName="")) returned 1 [0061.408] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5d667d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2e5d667d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2e5d667d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather_BadgeLogo.scale-100.png", cAlternateFileName="")) returned 1 [0061.408] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5d667d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2e5d667d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2e5d667d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather_LogoSmall.scale-100.png", cAlternateFileName="")) returned 1 [0061.408] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5d667d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2e5d667d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2e5d667d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather_SplashScreen.scale-100.png", cAlternateFileName="")) returned 1 [0061.408] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5fc917, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2e5fc917, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2e5fc917, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather_TileLargeSquare.scale-100.png", cAlternateFileName="")) returned 1 [0061.408] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5fc917, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2e5fc917, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2e5fc917, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather_TileMediumSquare.scale-100.png", cAlternateFileName="")) returned 1 [0061.409] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e622b9b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2e622b9b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2e622b9b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x10a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather_TileSmallSquare.scale-100.png", cAlternateFileName="")) returned 1 [0061.409] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e622b9b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2e622b9b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2e622b9b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x25f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather_TileWide.scale-100.png", cAlternateFileName="")) returned 1 [0061.409] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e622b9b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2e622b9b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2e622b9b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x25f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather_TileWide.scale-100.png", cAlternateFileName="")) returned 0 [0061.409] FindClose (in: hFindFile=0x215130 | out: hFindFile=0x215130) returned 1 [0061.409] GetProcessHeap () returned 0x120000 [0061.409] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0061.410] FindNextFileW (in: hFindFile=0x2156b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e4fcf04, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa7da30b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2e622b9b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppTiles", cAlternateFileName="")) returned 0 [0061.410] FindClose (in: hFindFile=0x2156b0 | out: hFindFile=0x2156b0) returned 1 [0061.410] GetProcessHeap () returned 0x120000 [0061.410] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.411] FindNextFileW (in: hFindFile=0x2154f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb7a270e5, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb7a270e5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb7a270e5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1 [0061.411] GetProcessHeap () returned 0x120000 [0061.411] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.411] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb7a270e5, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb7a270e5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb7a270e5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215270 [0061.696] FindNextFileW (in: hFindFile=0x215270, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb7a270e5, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb7a270e5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb7a270e5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.696] FindNextFileW (in: hFindFile=0x215270, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb7a270e5, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb7a270e5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb7a270e5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0061.696] FindClose (in: hFindFile=0x215270 | out: hFindFile=0x215270) returned 1 [0061.696] GetProcessHeap () returned 0x120000 [0061.696] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.696] FindNextFileW (in: hFindFile=0x2154f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e622b9b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2e648df4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2e648df4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa70, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1 [0061.697] FindNextFileW (in: hFindFile=0x2154f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e622b9b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2e648df4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2e648df4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa70, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 0 [0061.697] FindClose (in: hFindFile=0x2154f0 | out: hFindFile=0x2154f0) returned 1 [0061.697] GetProcessHeap () returned 0x120000 [0061.697] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0061.697] FindNextFileW (in: hFindFile=0x2153b0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2cdd5a7d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb7a270e5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb7a270e5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MICROS~2.0_N")) returned 1 [0061.697] GetProcessHeap () returned 0x120000 [0061.697] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0061.698] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2cdd5a7d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb7a270e5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb7a270e5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0061.699] FindNextFileW (in: hFindFile=0x215730, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2cdd5a7d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb7a270e5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb7a270e5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.699] FindNextFileW (in: hFindFile=0x215730, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ce6e3c6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2ce6e3c6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2ce6e3c6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1 [0061.699] FindNextFileW (in: hFindFile=0x215730, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2cdd5a7d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa935760, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2cdd5a7d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1 [0061.700] GetProcessHeap () returned 0x120000 [0061.700] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.700] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2cdd5a7d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa935760, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2cdd5a7d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0061.700] FindNextFileW (in: hFindFile=0x2154b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2cdd5a7d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa935760, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2cdd5a7d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.700] FindNextFileW (in: hFindFile=0x2154b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cdd5a7d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2cdd5a7d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2cdd5a7d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x7511, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 1 [0061.700] FindNextFileW (in: hFindFile=0x2154b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cdd5a7d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2cdd5a7d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2cdd5a7d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x7511, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 0 [0061.700] FindClose (in: hFindFile=0x2154b0 | out: hFindFile=0x2154b0) returned 1 [0061.700] GetProcessHeap () returned 0x120000 [0061.700] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.700] FindNextFileW (in: hFindFile=0x215730, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ce6e3c6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2ce94624, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2ce94624, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2980, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1 [0061.700] FindNextFileW (in: hFindFile=0x215730, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb7a270e5, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb7a270e5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb7a270e5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1 [0061.701] GetProcessHeap () returned 0x120000 [0061.701] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.701] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb7a270e5, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb7a270e5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb7a270e5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215230 [0061.701] FindNextFileW (in: hFindFile=0x215230, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb7a270e5, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb7a270e5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb7a270e5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.701] GetProcessHeap () returned 0x120000 [0061.701] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.701] GetProcessHeap () returned 0x120000 [0061.701] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0061.702] GetProcessHeap () returned 0x120000 [0061.702] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0061.702] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2ceba882, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb7a270e5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb7a270e5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0061.704] GetProcessHeap () returned 0x120000 [0061.704] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.704] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d0fdc78, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa936cde, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d0fdc78, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0061.705] GetProcessHeap () returned 0x120000 [0061.705] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.705] GetProcessHeap () returned 0x120000 [0061.705] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.705] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d1bc83f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa937267, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2db7c876, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215230 [0061.705] GetProcessHeap () returned 0x120000 [0061.705] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0061.705] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d1bc83f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa9d2e10, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d827806, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156b0 [0061.706] GetProcessHeap () returned 0x120000 [0061.706] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0061.707] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d1bc83f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaaa1d3b9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d2c78be, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0061.709] GetProcessHeap () returned 0x120000 [0061.709] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0061.709] GetProcessHeap () returned 0x120000 [0061.709] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0061.709] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d2c78be, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaaa975ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d388f04, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152b0 [0061.712] GetProcessHeap () returned 0x120000 [0061.712] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0061.712] GetProcessHeap () returned 0x120000 [0061.712] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0061.712] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\LiveTile\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d388f04, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaaac88c5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d46dd2e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215270 [0061.714] GetProcessHeap () returned 0x120000 [0061.714] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0061.714] GetProcessHeap () returned 0x120000 [0061.714] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0061.714] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\Spacer\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d46dd2e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaabbfeb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d50668e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0061.716] GetProcessHeap () returned 0x120000 [0061.716] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0061.716] GetProcessHeap () returned 0x120000 [0061.716] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0061.716] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\WeatherIcons\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d59f00b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaabc1237, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d59f00b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215130 [0061.716] GetProcessHeap () returned 0x120000 [0061.716] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0061.716] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\WeatherIcons\\30x30\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d59f00b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaac222e2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d827806, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0061.719] GetProcessHeap () returned 0x120000 [0061.719] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0061.719] GetProcessHeap () returned 0x120000 [0061.720] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0061.721] GetProcessHeap () returned 0x120000 [0061.721] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0061.722] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\WeatherImages\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d827806, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaac23e3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d9f144d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155f0 [0061.722] GetProcessHeap () returned 0x120000 [0061.722] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0061.722] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\WeatherImages\\210x173\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d827806, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaaca3951, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d9cb1f4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0061.724] GetProcessHeap () returned 0x120000 [0061.724] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0061.724] GetProcessHeap () returned 0x120000 [0061.724] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0061.724] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\WeatherImages\\423x173\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d9f144d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad0c763, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2db303c4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215130 [0061.726] GetProcessHeap () returned 0x120000 [0061.726] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0061.726] GetProcessHeap () returned 0x120000 [0061.726] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0061.727] GetProcessHeap () returned 0x120000 [0061.727] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0061.727] GetProcessHeap () returned 0x120000 [0061.727] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0061.728] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\Attribution\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2db7c876, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad78aac, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dbabacb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0061.730] GetProcessHeap () returned 0x120000 [0061.730] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0061.730] GetProcessHeap () returned 0x120000 [0061.730] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.730] GetProcessHeap () returned 0x120000 [0061.730] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.731] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Configuration\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dbabacb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad79c2f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dbabacb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0061.731] GetProcessHeap () returned 0x120000 [0061.731] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.731] GetProcessHeap () returned 0x120000 [0061.731] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.731] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Images\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dbabacb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7a6fb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dbabacb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215770 [0061.731] GetProcessHeap () returned 0x120000 [0061.731] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.731] GetProcessHeap () returned 0x120000 [0061.731] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.731] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd03022, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7ad84, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd2927f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0061.731] GetProcessHeap () returned 0x120000 [0061.731] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.731] GetProcessHeap () returned 0x120000 [0061.731] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.731] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd4f4d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7b5bd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd4f4d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0061.736] GetProcessHeap () returned 0x120000 [0061.736] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0061.736] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls\\EndOfLife\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd4f4d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7c2d2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd4f4d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0061.736] GetProcessHeap () returned 0x120000 [0061.736] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0061.737] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls\\EndOfLife\\Assets\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd4f4d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7cee8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd4f4d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0061.737] GetProcessHeap () returned 0x120000 [0061.737] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0061.737] GetProcessHeap () returned 0x120000 [0061.737] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0061.739] GetProcessHeap () returned 0x120000 [0061.739] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.739] GetProcessHeap () returned 0x120000 [0061.739] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.739] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd4f4d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7d91e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd4f4d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0061.739] GetProcessHeap () returned 0x120000 [0061.739] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0061.739] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd4f4d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7e777, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd4f4d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0061.740] GetProcessHeap () returned 0x120000 [0061.740] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0061.741] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd4f4d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7f48f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd4f4d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215830 [0061.741] GetProcessHeap () returned 0x120000 [0061.741] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0061.741] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd4f4d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7ff09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd75732, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0061.742] GetProcessHeap () returned 0x120000 [0061.742] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0061.742] GetProcessHeap () returned 0x120000 [0061.742] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0061.743] GetProcessHeap () returned 0x120000 [0061.743] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0061.743] GetProcessHeap () returned 0x120000 [0061.743] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.744] GetProcessHeap () returned 0x120000 [0061.744] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.744] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb7a270e5, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x2d31f11, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0x2d31f11, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154f0 [0061.744] GetProcessHeap () returned 0x120000 [0061.744] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.744] GetProcessHeap () returned 0x120000 [0061.744] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.744] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d0fdc78, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa9368ce, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d1965e1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215330 [0061.745] GetProcessHeap () returned 0x120000 [0061.745] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.745] GetProcessHeap () returned 0x120000 [0061.745] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0061.745] GetProcessHeap () returned 0x120000 [0061.745] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0061.746] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68f377c2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaae3acdd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x61f43dfb, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0061.747] GetProcessHeap () returned 0x120000 [0061.747] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.748] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68f5da18, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaae3d897, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x68f83c76, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154f0 [0061.750] GetProcessHeap () returned 0x120000 [0061.750] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.750] GetProcessHeap () returned 0x120000 [0061.750] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.750] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x61f43dfb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaae3e4bd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x61f43dfb, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0061.750] GetProcessHeap () returned 0x120000 [0061.750] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.751] GetProcessHeap () returned 0x120000 [0061.751] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0061.751] GetProcessHeap () returned 0x120000 [0061.751] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0061.751] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68a98ed8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaaebc8e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x61f43dfb, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0061.753] GetProcessHeap () returned 0x120000 [0061.753] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.753] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68a98ed8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaaebe349, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x68a98ed8, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215530 [0061.754] GetProcessHeap () returned 0x120000 [0061.754] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.754] GetProcessHeap () returned 0x120000 [0061.754] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.754] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x61f43dfb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaaebeeeb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x61f43dfb, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0061.754] GetProcessHeap () returned 0x120000 [0061.754] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.754] GetProcessHeap () returned 0x120000 [0061.754] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0061.759] GetProcessHeap () returned 0x120000 [0061.759] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0061.759] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ae5394, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaaf17e9e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x61f43dfb, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0061.761] GetProcessHeap () returned 0x120000 [0061.761] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.761] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ae5394, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaaf18f1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x68ae5394, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0061.761] GetProcessHeap () returned 0x120000 [0061.761] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.761] GetProcessHeap () returned 0x120000 [0061.761] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.761] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ae5394, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaafbd2f7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x68bca1ad, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0061.765] GetProcessHeap () returned 0x120000 [0061.765] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.765] GetProcessHeap () returned 0x120000 [0061.765] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.765] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x61f43dfb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x134444f, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0x134444f, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0061.767] GetProcessHeap () returned 0x120000 [0061.767] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.767] GetProcessHeap () returned 0x120000 [0061.767] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0061.767] GetProcessHeap () returned 0x120000 [0061.767] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0061.768] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd526822a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab021835, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x628cd443, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0061.769] GetProcessHeap () returned 0x120000 [0061.769] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.770] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd526822a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab022752, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd526822a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157b0 [0061.770] GetProcessHeap () returned 0x120000 [0061.770] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.770] GetProcessHeap () returned 0x120000 [0061.770] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0061.770] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x628cd443, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xab022fb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x628cd443, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215770 [0061.770] GetProcessHeap () returned 0x120000 [0061.770] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0061.770] GetProcessHeap () returned 0x120000 [0061.770] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0061.771] GetProcessHeap () returned 0x120000 [0061.771] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0061.771] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5373138, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab088494, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x628cd443, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0061.773] GetProcessHeap () returned 0x120000 [0061.773] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0062.173] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5373138, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab08a798, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd5373138, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215570 [0062.175] GetProcessHeap () returned 0x120000 [0062.175] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0062.175] GetProcessHeap () returned 0x120000 [0062.175] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0062.175] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd53994f2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab08aff3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd53994f2, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0062.178] GetProcessHeap () returned 0x120000 [0062.178] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0062.178] GetProcessHeap () returned 0x120000 [0062.178] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0062.178] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd547e1a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab08b876, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd547e1a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215170 [0062.178] GetProcessHeap () returned 0x120000 [0062.178] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0062.178] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\en-gb\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd547e1a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab08c849, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd547e1a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215430 [0062.178] GetProcessHeap () returned 0x120000 [0062.178] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0062.178] GetProcessHeap () returned 0x120000 [0062.178] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0062.178] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\en-US\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd547e1a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab08d12b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd547e1a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215530 [0062.179] GetProcessHeap () returned 0x120000 [0062.179] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0062.179] GetProcessHeap () returned 0x120000 [0062.179] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0062.179] GetProcessHeap () returned 0x120000 [0062.179] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0062.179] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x628cd443, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xab08dbee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x628cd443, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157f0 [0062.180] GetProcessHeap () returned 0x120000 [0062.180] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0062.180] GetProcessHeap () returned 0x120000 [0062.180] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0062.180] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd547e1a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab08e5b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd547e1a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155f0 [0062.180] GetProcessHeap () returned 0x120000 [0062.180] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0062.180] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\en-GB\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd547e1a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab08f2fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd547e1a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0062.181] GetProcessHeap () returned 0x120000 [0062.181] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0062.181] GetProcessHeap () returned 0x120000 [0062.181] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0062.181] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\en-US\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd547e1a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab08fb6f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd547e1a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215670 [0062.181] GetProcessHeap () returned 0x120000 [0062.181] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0062.181] GetProcessHeap () returned 0x120000 [0062.182] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0062.182] GetProcessHeap () returned 0x120000 [0062.182] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0062.183] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\_Resources\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5373138, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab089e41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd5373138, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215670 [0062.183] GetProcessHeap () returned 0x120000 [0062.183] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0062.183] GetProcessHeap () returned 0x120000 [0062.183] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0062.184] GetProcessHeap () returned 0x120000 [0062.184] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0062.184] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d296410, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb9355ef2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb9355ef2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0062.187] GetProcessHeap () returned 0x120000 [0062.187] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0062.187] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d2bc66a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab13f343, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9d32ed7f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215330 [0062.189] GetProcessHeap () returned 0x120000 [0062.189] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0062.189] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d308b21, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab1ce307, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9d32ed7f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215570 [0062.191] GetProcessHeap () returned 0x120000 [0062.191] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0062.191] GetProcessHeap () returned 0x120000 [0062.191] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0062.191] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d32ed7f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab1d0bd1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9d37b231, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215530 [0062.193] GetProcessHeap () returned 0x120000 [0062.193] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0062.193] GetProcessHeap () returned 0x120000 [0062.193] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0062.193] GetProcessHeap () returned 0x120000 [0062.193] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0062.194] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb9355ef2, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb9355ef2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb9355ef2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215770 [0062.195] GetProcessHeap () returned 0x120000 [0062.195] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0062.195] GetProcessHeap () returned 0x120000 [0062.195] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0062.196] GetProcessHeap () returned 0x120000 [0062.196] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0062.196] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c531351, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb932fcac, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb932fcac, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215430 [0062.197] GetProcessHeap () returned 0x120000 [0062.198] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0062.198] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c5575af, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab228e06, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9c5575af, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0062.198] GetProcessHeap () returned 0x120000 [0062.198] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0062.198] GetProcessHeap () returned 0x120000 [0062.198] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0062.198] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9cdf7b05, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab2732ed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9d1b15f4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0062.201] GetProcessHeap () returned 0x120000 [0062.201] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0062.201] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\contrast-black\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9cf75299, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab3100a2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9d080313, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157b0 [0062.205] GetProcessHeap () returned 0x120000 [0062.205] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0062.205] GetProcessHeap () returned 0x120000 [0062.205] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0062.205] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\contrast-white\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d080313, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab39d704, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9d18b39b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157f0 [0062.208] GetProcessHeap () returned 0x120000 [0062.208] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0062.208] GetProcessHeap () returned 0x120000 [0062.208] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0062.209] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\FileIcons\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d18b39b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab446b84, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9d1d7849, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0062.211] GetProcessHeap () returned 0x120000 [0062.211] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0062.211] GetProcessHeap () returned 0x120000 [0062.211] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0062.359] GetProcessHeap () returned 0x120000 [0062.361] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0062.365] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb932fcac, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xfe80d855, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe80d855, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0062.380] GetProcessHeap () returned 0x120000 [0062.380] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0062.380] GetProcessHeap () returned 0x120000 [0062.380] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0062.381] GetProcessHeap () returned 0x120000 [0062.381] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0062.381] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c3b24a6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb932fcac, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb932fcac, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0062.382] GetProcessHeap () returned 0x120000 [0062.382] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0062.383] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c3b24a6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab4afc0f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9c3b24a6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0062.716] GetProcessHeap () returned 0x120000 [0062.728] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0062.730] GetProcessHeap () returned 0x120000 [0062.730] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0062.730] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb932fcac, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb932fcac, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb932fcac, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0062.731] GetProcessHeap () returned 0x120000 [0062.731] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0062.731] GetProcessHeap () returned 0x120000 [0062.731] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0062.732] GetProcessHeap () returned 0x120000 [0062.732] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0062.732] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fe54df6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbad8fd68, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbad8fd68, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0062.735] GetProcessHeap () returned 0x120000 [0062.735] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0062.735] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fe54df6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab549f27, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7fed1b77, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215330 [0062.737] GetProcessHeap () returned 0x120000 [0062.737] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0062.737] GetProcessHeap () returned 0x120000 [0062.737] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0062.738] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbad8fd68, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbad8fd68, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbad8fd68, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0062.739] GetProcessHeap () returned 0x120000 [0062.739] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0062.739] GetProcessHeap () returned 0x120000 [0062.739] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0062.739] GetProcessHeap () returned 0x120000 [0062.739] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0062.740] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ed19195, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbad4389d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbad4389d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0062.741] GetProcessHeap () returned 0x120000 [0062.741] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0062.741] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ed19195, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab5eb5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7ed19195, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0062.742] GetProcessHeap () returned 0x120000 [0062.742] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0062.742] GetProcessHeap () returned 0x120000 [0062.742] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0062.742] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbad4389d, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbad4389d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbad4389d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0062.743] GetProcessHeap () returned 0x120000 [0062.743] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0062.743] GetProcessHeap () returned 0x120000 [0062.743] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0062.743] GetProcessHeap () returned 0x120000 [0062.743] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0062.744] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7eee2de1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbad69af3, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbad69af3, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152b0 [0062.745] GetProcessHeap () returned 0x120000 [0062.745] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0062.745] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ef09035, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab5edb1a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7ef09035, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0062.746] GetProcessHeap () returned 0x120000 [0062.746] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0062.746] GetProcessHeap () returned 0x120000 [0062.746] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0062.746] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f2d055d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6bff9c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f8f31a9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0062.751] GetProcessHeap () returned 0x120000 [0062.751] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0062.751] GetProcessHeap () returned 0x120000 [0062.751] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0062.751] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f8f31a9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c0da4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f98bb1c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0062.751] GetProcessHeap () returned 0x120000 [0062.751] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0062.751] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f8f31a9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c1a05, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f919407, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0062.752] GetProcessHeap () returned 0x120000 [0062.752] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0062.753] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f8f31a9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c20a7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f919407, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0062.753] GetProcessHeap () returned 0x120000 [0062.753] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0062.754] GetProcessHeap () returned 0x120000 [0062.754] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0062.754] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f919407, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c24fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f93f661, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215130 [0062.754] GetProcessHeap () returned 0x120000 [0062.754] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0062.754] GetProcessHeap () returned 0x120000 [0062.754] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0062.755] GetProcessHeap () returned 0x120000 [0062.755] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0062.756] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9658ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c2a52, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f9658ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215770 [0062.756] GetProcessHeap () returned 0x120000 [0062.756] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0062.757] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens\\en-US\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9658ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c2f47, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f9658ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157f0 [0062.758] GetProcessHeap () returned 0x120000 [0062.758] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0062.758] GetProcessHeap () returned 0x120000 [0062.758] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0062.759] GetProcessHeap () returned 0x120000 [0062.760] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0062.760] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\images\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9658ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c3363, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f9658ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0062.760] GetProcessHeap () returned 0x120000 [0062.760] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0062.762] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\images\\en-US\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9658ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c39d2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f9658ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0062.762] GetProcessHeap () returned 0x120000 [0062.762] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0062.762] GetProcessHeap () returned 0x120000 [0062.762] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0062.763] GetProcessHeap () returned 0x120000 [0062.763] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0062.764] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f98bb1c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c4278, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f98bb1c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0062.764] GetProcessHeap () returned 0x120000 [0062.764] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0062.765] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-GB\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f98bb1c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c4ac5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f98bb1c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0062.952] GetProcessHeap () returned 0x120000 [0062.952] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0062.952] GetProcessHeap () returned 0x120000 [0062.952] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0062.952] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-US\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f98bb1c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c5109, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f98bb1c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0062.965] GetProcessHeap () returned 0x120000 [0062.965] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0062.966] GetProcessHeap () returned 0x120000 [0062.966] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0062.967] GetProcessHeap () returned 0x120000 [0062.967] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0062.967] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\surfaceHub\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f98bb1c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c57e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f9fe269, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156b0 [0062.967] GetProcessHeap () returned 0x120000 [0062.967] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0062.969] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\surfaceHub\\en-GB\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f98bb1c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c60ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f9fe269, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0062.969] GetProcessHeap () returned 0x120000 [0062.969] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0062.969] GetProcessHeap () returned 0x120000 [0062.969] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0062.969] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\surfaceHub\\en-US\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9fe269, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c6700, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7fa28bd5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0062.970] GetProcessHeap () returned 0x120000 [0062.970] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0062.970] GetProcessHeap () returned 0x120000 [0062.970] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0062.971] GetProcessHeap () returned 0x120000 [0062.971] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0062.972] GetProcessHeap () returned 0x120000 [0062.972] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0062.972] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbad69af3, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbad69af3, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbad69af3, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215230 [0062.972] GetProcessHeap () returned 0x120000 [0062.972] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0062.972] GetProcessHeap () returned 0x120000 [0062.972] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0062.972] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fa4ee54, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c7513, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7fa750b2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0062.972] GetProcessHeap () returned 0x120000 [0062.972] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0062.972] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fa750b2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab78e843, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7fac1569, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0062.973] GetProcessHeap () returned 0x120000 [0062.973] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0062.975] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\Images\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fa9b30b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab78f63a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7fac1569, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215330 [0062.975] GetProcessHeap () returned 0x120000 [0062.975] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0062.975] GetProcessHeap () returned 0x120000 [0062.975] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0062.975] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\PartnerJS\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fac1569, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab78fdf4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7fac1569, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0062.975] GetProcessHeap () returned 0x120000 [0062.975] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0062.975] GetProcessHeap () returned 0x120000 [0062.975] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0062.976] GetProcessHeap () returned 0x120000 [0062.977] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0062.977] GetProcessHeap () returned 0x120000 [0062.977] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0062.977] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\_Resources\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f0140b4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab5ed36f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f2aa2da, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156b0 [0062.977] GetProcessHeap () returned 0x120000 [0062.977] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0062.977] GetProcessHeap () returned 0x120000 [0062.977] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0062.978] GetProcessHeap () returned 0x120000 [0062.978] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0062.978] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x287b925a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbd8a0611, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbd8a0611, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0062.980] GetProcessHeap () returned 0x120000 [0062.980] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0062.980] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x287b925a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab841b4d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x287b925a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0062.981] GetProcessHeap () returned 0x120000 [0062.981] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0062.981] GetProcessHeap () returned 0x120000 [0062.981] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0062.981] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbd8a0611, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbd8a0611, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbd8a0611, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215770 [0062.987] GetProcessHeap () returned 0x120000 [0062.987] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0062.987] GetProcessHeap () returned 0x120000 [0062.987] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0062.988] GetProcessHeap () returned 0x120000 [0062.988] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0062.988] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29a48b6f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbd8c685e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbd8c685e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0062.990] GetProcessHeap () returned 0x120000 [0062.990] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0062.990] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29a95021, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab9559ab, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x29c3c6c4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152b0 [0062.992] GetProcessHeap () returned 0x120000 [0062.992] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0062.992] GetProcessHeap () returned 0x120000 [0062.993] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0062.993] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbd8c685e, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbd8c685e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbd8c685e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215230 [0062.993] GetProcessHeap () returned 0x120000 [0062.993] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0062.993] GetProcessHeap () returned 0x120000 [0062.993] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0062.994] GetProcessHeap () returned 0x120000 [0062.994] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0062.994] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2889e07b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbd8a0611, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbd8a0611, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215130 [0062.996] GetProcessHeap () returned 0x120000 [0062.996] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0062.996] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2891078c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab9bb295, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2891078c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215270 [0062.997] GetProcessHeap () returned 0x120000 [0062.997] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0062.997] GetProcessHeap () returned 0x120000 [0062.997] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0062.997] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2895cc43, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabb21004, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x28bc9f4c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154f0 [0062.999] GetProcessHeap () returned 0x120000 [0062.999] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0062.999] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Fonts\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x289a90fa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabb2233c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x289a90fa, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0062.999] GetProcessHeap () returned 0x120000 [0062.999] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0062.999] GetProcessHeap () returned 0x120000 [0062.999] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0062.999] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Sounds\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28a67cbd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabb22dfb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x28a67cbd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0062.999] GetProcessHeap () returned 0x120000 [0062.999] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0063.108] GetProcessHeap () returned 0x120000 [0063.108] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0063.108] GetProcessHeap () returned 0x120000 [0063.108] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0063.110] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbd8a0611, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xfbac0b62, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfbac0b62, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0063.111] GetProcessHeap () returned 0x120000 [0063.111] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0063.119] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x294baca8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2950715f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2950715f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x52000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PersonPicture.UAP.dll", cAlternateFileName="")) returned 1 [0063.123] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2950715f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2952d3b8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2952d3b8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x400c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1 [0063.123] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2952d3b8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x29553616, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x29553616, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="StoreRatingPromotion.dll", cAlternateFileName="")) returned 1 [0063.123] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29553616, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x29553616, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x29553616, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="StoreRatingPromotion.winmd", cAlternateFileName="")) returned 1 [0063.127] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2957986f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabb25901, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2993daf0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TEE", cAlternateFileName="")) returned 1 [0063.127] GetProcessHeap () returned 0x120000 [0063.127] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0063.127] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2957986f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabb25901, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2993daf0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157f0 [0063.128] FindNextFileW (in: hFindFile=0x2157f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2957986f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabb25901, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2993daf0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.128] FindNextFileW (in: hFindFile=0x2157f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2957986f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2957986f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2957986f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1da, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE.Messaging.config", cAlternateFileName="")) returned 1 [0063.128] FindNextFileW (in: hFindFile=0x2157f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2957986f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2957986f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2957986f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe15, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE.PhoneNumber.SMS.model", cAlternateFileName="")) returned 1 [0063.128] FindNextFileW (in: hFindFile=0x2157f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2957986f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2957986f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2957986f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x27f, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE.PhoneNumber.SMS.ot", cAlternateFileName="")) returned 1 [0063.129] FindNextFileW (in: hFindFile=0x2157f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2957986f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2957986f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2957986f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Email.model", cAlternateFileName="")) returned 1 [0063.129] FindNextFileW (in: hFindFile=0x2157f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2957986f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2957986f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2957986f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x219, dwReserved0=0x0, dwReserved1=0x0, cFileName="Email.ot", cAlternateFileName="")) returned 1 [0063.129] FindNextFileW (in: hFindFile=0x2157f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2957986f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x295c5d27, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x295c5d27, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x22c23, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB.Calendar.model", cAlternateFileName="")) returned 1 [0063.129] FindNextFileW (in: hFindFile=0x2157f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x295c5d27, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x295ebf80, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x295ebf80, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x440, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB.Calendar.ot", cAlternateFileName="")) returned 1 [0063.129] FindNextFileW (in: hFindFile=0x2157f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x295ebf80, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x295ebf80, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x295ebf80, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB.Messaging.config", cAlternateFileName="")) returned 1 [0063.129] FindNextFileW (in: hFindFile=0x2157f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x295ebf80, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x295ebf80, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x295ebf80, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe09, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB.PhoneNumber.SMS.model", cAlternateFileName="")) returned 1 [0063.129] FindNextFileW (in: hFindFile=0x2157f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x295ebf80, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x296121de, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x296121de, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x27f, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB.PhoneNumber.SMS.ot", cAlternateFileName="")) returned 1 [0063.129] FindNextFileW (in: hFindFile=0x2157f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x296121de, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x296121de, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x296121de, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x73ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB.PostalAddress.model", cAlternateFileName="")) returned 1 [0063.129] FindNextFileW (in: hFindFile=0x2157f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x296121de, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x296121de, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x296121de, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB.PostalAddress.ot", cAlternateFileName="")) returned 1 [0063.129] FindNextFileW (in: hFindFile=0x2157f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x296121de, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x29638437, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x29638437, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1181c, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.Calendar.model", cAlternateFileName="")) returned 1 [0063.129] FindNextFileW (in: hFindFile=0x2157f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29638437, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2965e695, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2965e695, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x440, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.Calendar.ot", cAlternateFileName="")) returned 1 [0063.129] FindNextFileW (in: hFindFile=0x2157f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2965e695, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2965e695, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2965e695, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.Messaging.config", cAlternateFileName="")) returned 1 [0063.129] FindNextFileW (in: hFindFile=0x2157f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2965e695, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2965e695, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2965e695, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.PhoneNumber.SMS.model", cAlternateFileName="")) returned 1 [0063.129] FindNextFileW (in: hFindFile=0x2157f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29722e41, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x29795577, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x29795577, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x27f, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.PhoneNumber.SMS.ot", cAlternateFileName="")) returned 1 [0063.129] FindNextFileW (in: hFindFile=0x2157f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x297bb7d0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x29807c87, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x29807c87, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x6d46, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.PostalAddress.model", cAlternateFileName="")) returned 1 [0063.130] FindNextFileW (in: hFindFile=0x2157f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29807c87, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x29807c87, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x29807c87, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.PostalAddress.ot", cAlternateFileName="")) returned 1 [0063.130] FindNextFileW (in: hFindFile=0x2157f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29807c87, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x29807c87, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x29807c87, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1da, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES.Messaging.config", cAlternateFileName="")) returned 1 [0063.130] FindNextFileW (in: hFindFile=0x2157f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2985747b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2985747b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2985747b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES.PhoneNumber.SMS.model", cAlternateFileName="")) returned 1 [0063.130] FindNextFileW (in: hFindFile=0x2157f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2985747b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2985747b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2985747b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x27f, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES.PhoneNumber.SMS.ot", cAlternateFileName="")) returned 1 [0063.130] FindNextFileW (in: hFindFile=0x2157f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2985747b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2985747b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2985747b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1da, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR.Messaging.config", cAlternateFileName="")) returned 1 [0063.130] FindNextFileW (in: hFindFile=0x2157f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2987d6d4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2987d6d4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2987d6d4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR.PhoneNumber.SMS.model", cAlternateFileName="")) returned 1 [0063.130] FindNextFileW (in: hFindFile=0x2157f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2987d6d4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2987d6d4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2987d6d4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x27f, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR.PhoneNumber.SMS.ot", cAlternateFileName="")) returned 1 [0063.130] FindNextFileW (in: hFindFile=0x2157f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2987d6d4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2987d6d4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2987d6d4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1da, dwReserved0=0x0, dwReserved1=0x0, cFileName="generic.Messaging.config", cAlternateFileName="")) returned 1 [0063.130] FindNextFileW (in: hFindFile=0x2157f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298a3932, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x298a3932, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x298a3932, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1da, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT.Messaging.config", cAlternateFileName="")) returned 1 [0063.130] FindNextFileW (in: hFindFile=0x2157f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298c9b8b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x298f7d18, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x298f7d18, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT.PhoneNumber.SMS.model", cAlternateFileName="")) returned 1 [0063.130] FindNextFileW (in: hFindFile=0x2157f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298f7d18, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2993daf0, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2993daf0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x27f, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT.PhoneNumber.SMS.ot", cAlternateFileName="")) returned 1 [0063.130] FindNextFileW (in: hFindFile=0x2157f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2993daf0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2993daf0, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2993daf0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x42a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Url.model", cAlternateFileName="")) returned 1 [0063.130] FindNextFileW (in: hFindFile=0x2157f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2993daf0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2993daf0, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2993daf0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Url.ot", cAlternateFileName="")) returned 1 [0063.130] FindNextFileW (in: hFindFile=0x2157f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2993daf0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2993daf0, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2993daf0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Url.ot", cAlternateFileName="")) returned 0 [0063.130] FindClose (in: hFindFile=0x2157f0 | out: hFindFile=0x2157f0) returned 1 [0063.131] GetProcessHeap () returned 0x120000 [0063.131] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0063.131] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x289369e5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab9baa69, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x289369e5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Resources", cAlternateFileName="_RESOU~1")) returned 1 [0063.131] GetProcessHeap () returned 0x120000 [0063.131] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0063.131] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\_Resources\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x289369e5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab9baa69, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x289369e5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0063.131] FindNextFileW (in: hFindFile=0x2154b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x289369e5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab9baa69, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x289369e5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.131] FindNextFileW (in: hFindFile=0x2154b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x289369e5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x289369e5, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x289369e5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2b59, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.rsrc", cAlternateFileName="")) returned 1 [0063.132] FindNextFileW (in: hFindFile=0x2154b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x289369e5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x289369e5, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x289369e5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa3, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.txt", cAlternateFileName="")) returned 1 [0063.132] FindNextFileW (in: hFindFile=0x2154b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x289369e5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x289369e5, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x289369e5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa3, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.txt", cAlternateFileName="")) returned 0 [0063.132] FindClose (in: hFindFile=0x2154b0 | out: hFindFile=0x2154b0) returned 1 [0063.132] GetProcessHeap () returned 0x120000 [0063.132] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0063.132] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x289369e5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab9baa69, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x289369e5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Resources", cAlternateFileName="_RESOU~1")) returned 0 [0063.132] FindClose (in: hFindFile=0x215130 | out: hFindFile=0x215130) returned 1 [0063.132] GetProcessHeap () returned 0x120000 [0063.132] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0063.133] FindNextFileW (in: hFindFile=0x2153b0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac06201d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbed30aaa, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbed30aaa, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIAA72~1.0_N")) returned 1 [0063.133] GetProcessHeap () returned 0x120000 [0063.133] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0063.133] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac06201d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbed30aaa, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbed30aaa, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155f0 [0063.134] FindNextFileW (in: hFindFile=0x2155f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac06201d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbed30aaa, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbed30aaa, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.134] FindNextFileW (in: hFindFile=0x2155f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac278116, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac278116, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac278116, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1 [0063.134] FindNextFileW (in: hFindFile=0x2155f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac08827b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabb9e6bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xac08827b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1 [0063.134] GetProcessHeap () returned 0x120000 [0063.135] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0063.135] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac08827b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabb9e6bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xac08827b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0063.135] FindNextFileW (in: hFindFile=0x2151f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac08827b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabb9e6bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xac08827b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.135] FindNextFileW (in: hFindFile=0x2151f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac08827b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac08827b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac08827b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1dde, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 1 [0063.135] FindNextFileW (in: hFindFile=0x2151f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac08827b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac08827b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac08827b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1dde, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 0 [0063.135] FindClose (in: hFindFile=0x2151f0 | out: hFindFile=0x2151f0) returned 1 [0063.135] GetProcessHeap () returned 0x120000 [0063.135] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0063.135] FindNextFileW (in: hFindFile=0x2155f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac278116, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac278116, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac278116, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x299d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1 [0063.136] FindNextFileW (in: hFindFile=0x2155f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbed30aaa, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbed30aaa, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbed30aaa, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1 [0063.136] GetProcessHeap () returned 0x120000 [0063.136] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0063.136] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbed30aaa, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbed30aaa, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbed30aaa, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215230 [0063.136] FindNextFileW (in: hFindFile=0x215230, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbed30aaa, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbed30aaa, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbed30aaa, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.136] FindNextFileW (in: hFindFile=0x215230, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbed30aaa, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbed30aaa, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbed30aaa, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0063.137] FindClose (in: hFindFile=0x215230 | out: hFindFile=0x215230) returned 1 [0063.137] GetProcessHeap () returned 0x120000 [0063.137] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0063.137] FindNextFileW (in: hFindFile=0x2155f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbed30aaa, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbed30aaa, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbed30aaa, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0 [0063.137] FindClose (in: hFindFile=0x2155f0 | out: hFindFile=0x2155f0) returned 1 [0063.137] GetProcessHeap () returned 0x120000 [0063.137] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0063.137] FindNextFileW (in: hFindFile=0x2153b0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac29e374, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbed30aaa, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbed30aaa, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI825E~1.0_X")) returned 1 [0063.138] GetProcessHeap () returned 0x120000 [0063.138] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0063.138] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac29e374, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbed30aaa, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbed30aaa, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0063.138] FindNextFileW (in: hFindFile=0x2153f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac29e374, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbed30aaa, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbed30aaa, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.138] FindNextFileW (in: hFindFile=0x2153f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac310a85, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac4da6c7, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac4da6c7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x6bc600, dwReserved0=0x0, dwReserved1=0x0, cFileName="3DViewer.dll", cAlternateFileName="")) returned 1 [0063.138] FindNextFileW (in: hFindFile=0x2153f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac500925, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac526b7e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac526b7e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="3DViewer.exe", cAlternateFileName="")) returned 1 [0063.138] FindNextFileW (in: hFindFile=0x2153f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac526b7e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac526b7e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac526b7e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="3DViewer.ResourceResolver.exe", cAlternateFileName="")) returned 1 [0063.138] FindNextFileW (in: hFindFile=0x2153f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac29e374, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac2c45ce, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac2c45ce, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x6fa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1 [0063.138] FindNextFileW (in: hFindFile=0x2153f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac29e374, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac29e374, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac29e374, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2a17, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1 [0063.138] FindNextFileW (in: hFindFile=0x2153f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac2ea82c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabba0d3c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xac2ea82c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1 [0063.138] GetProcessHeap () returned 0x120000 [0063.138] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0063.139] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac2ea82c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabba0d3c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xac2ea82c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0063.139] FindNextFileW (in: hFindFile=0x2155b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac2ea82c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabba0d3c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xac2ea82c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.139] FindNextFileW (in: hFindFile=0x2155b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2ea82c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac2ea82c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac2ea82c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x30da, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 1 [0063.140] FindNextFileW (in: hFindFile=0x2155b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2ea82c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac2ea82c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac2ea82c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x30da, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 0 [0063.140] FindClose (in: hFindFile=0x2155b0 | out: hFindFile=0x2155b0) returned 1 [0063.140] GetProcessHeap () returned 0x120000 [0063.140] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0063.140] FindNextFileW (in: hFindFile=0x2153f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2ea82c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac2ea82c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac2ea82c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x29c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1 [0063.140] FindNextFileW (in: hFindFile=0x2153f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac526b7e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabba158a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xac59928e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1 [0063.140] GetProcessHeap () returned 0x120000 [0063.140] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0063.140] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac526b7e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabba158a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xac59928e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215570 [0063.140] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac526b7e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabba158a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xac59928e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.140] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac526b7e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac526b7e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac526b7e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="dev-config.json", cAlternateFileName="")) returned 1 [0063.140] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac526b7e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabba219f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xac526b7e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0063.140] GetProcessHeap () returned 0x120000 [0063.140] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0063.140] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\Assets\\Fonts\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac526b7e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabba219f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xac526b7e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215430 [0063.140] FindNextFileW (in: hFindFile=0x215430, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac526b7e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabba219f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xac526b7e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.140] FindNextFileW (in: hFindFile=0x215430, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac526b7e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac54cddc, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac54cddc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x714c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BhaiMDL2.ttf", cAlternateFileName="")) returned 1 [0063.141] FindNextFileW (in: hFindFile=0x215430, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac526b7e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac54cddc, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac54cddc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x714c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BhaiMDL2.ttf", cAlternateFileName="")) returned 0 [0063.141] FindClose (in: hFindFile=0x215430 | out: hFindFile=0x215430) returned 1 [0063.141] GetProcessHeap () returned 0x120000 [0063.141] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0063.141] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac54cddc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabba2cef, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xac54cddc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Images", cAlternateFileName="")) returned 1 [0063.141] GetProcessHeap () returned 0x120000 [0063.141] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0063.141] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\Assets\\Images\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac54cddc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabba2cef, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xac54cddc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0063.141] FindNextFileW (in: hFindFile=0x2151b0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac54cddc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabba2cef, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xac54cddc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.141] FindNextFileW (in: hFindFile=0x2151b0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac54cddc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabbf3417, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xac59928e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tiles", cAlternateFileName="")) returned 1 [0063.141] GetProcessHeap () returned 0x120000 [0063.141] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0063.142] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\Assets\\Images\\Tiles\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac54cddc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabbf3417, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xac59928e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0063.143] FindNextFileW (in: hFindFile=0x2155b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac54cddc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabbf3417, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xac59928e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.144] FindNextFileW (in: hFindFile=0x2155b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac54cddc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac54cddc, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac54cddc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1e90, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashScreen.scale-200.png", cAlternateFileName="")) returned 1 [0063.144] FindNextFileW (in: hFindFile=0x2155b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac54cddc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac54cddc, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac54cddc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1142, dwReserved0=0x0, dwReserved1=0x0, cFileName="Square150x150Logo.scale-200.png", cAlternateFileName="")) returned 1 [0063.144] FindNextFileW (in: hFindFile=0x2155b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac54cddc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac573035, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac573035, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2442, dwReserved0=0x0, dwReserved1=0x0, cFileName="Square310x310Logo.scale-200.png", cAlternateFileName="")) returned 1 [0063.144] FindNextFileW (in: hFindFile=0x2155b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac573035, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac573035, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac573035, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x9ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="Square44x44Logo.scale-200.png", cAlternateFileName="")) returned 1 [0063.144] FindNextFileW (in: hFindFile=0x2155b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac573035, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac573035, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac573035, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="Square44x44Logo.targetsize-24_altform-unplated.png", cAlternateFileName="")) returned 1 [0063.144] FindNextFileW (in: hFindFile=0x2155b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac573035, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac573035, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac573035, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x8a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Square71x71Logo.scale-200.png", cAlternateFileName="")) returned 1 [0063.144] FindNextFileW (in: hFindFile=0x2155b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac573035, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac59928e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac59928e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x6a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="StoreLogo.png", cAlternateFileName="")) returned 1 [0063.144] FindNextFileW (in: hFindFile=0x2155b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac59928e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac59928e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac59928e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x12e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wide310x150Logo.scale-200.png", cAlternateFileName="")) returned 1 [0063.144] FindNextFileW (in: hFindFile=0x2155b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac59928e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac59928e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac59928e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x12e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wide310x150Logo.scale-200.png", cAlternateFileName="")) returned 0 [0063.144] FindClose (in: hFindFile=0x2155b0 | out: hFindFile=0x2155b0) returned 1 [0063.145] GetProcessHeap () returned 0x120000 [0063.145] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0063.145] FindNextFileW (in: hFindFile=0x2151b0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac54cddc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabbf3417, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xac59928e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tiles", cAlternateFileName="")) returned 0 [0063.145] FindClose (in: hFindFile=0x2151b0 | out: hFindFile=0x2151b0) returned 1 [0063.145] GetProcessHeap () returned 0x120000 [0063.145] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0063.146] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac59928e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac59928e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac59928e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x24c, dwReserved0=0x0, dwReserved1=0x0, cFileName="release-config.json", cAlternateFileName="")) returned 1 [0063.146] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac59928e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabbf429c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xac657e5b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Viewer", cAlternateFileName="")) returned 1 [0063.147] GetProcessHeap () returned 0x120000 [0063.147] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0063.147] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\Assets\\Viewer\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac59928e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabbf429c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xac657e5b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0063.147] FindNextFileW (in: hFindFile=0x215630, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac59928e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabbf429c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xac657e5b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.147] FindNextFileW (in: hFindFile=0x215630, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac59928e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac657e5b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac657e5b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1a6410, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default-Scene.bxf", cAlternateFileName="")) returned 1 [0063.147] FindNextFileW (in: hFindFile=0x215630, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac657e5b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac67e0b4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac67e0b4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3c217, dwReserved0=0x0, dwReserved1=0x0, cFileName="ViewEnv.hdr", cAlternateFileName="")) returned 1 [0063.147] FindNextFileW (in: hFindFile=0x215630, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac657e5b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac67e0b4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac67e0b4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3c217, dwReserved0=0x0, dwReserved1=0x0, cFileName="ViewEnv.hdr", cAlternateFileName="")) returned 0 [0063.147] FindClose (in: hFindFile=0x215630 | out: hFindFile=0x215630) returned 1 [0063.147] GetProcessHeap () returned 0x120000 [0063.147] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0063.147] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac59928e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabbf429c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xac657e5b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Viewer", cAlternateFileName="")) returned 0 [0063.147] FindClose (in: hFindFile=0x215570 | out: hFindFile=0x215570) returned 1 [0063.147] GetProcessHeap () returned 0x120000 [0063.147] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0063.148] FindNextFileW (in: hFindFile=0x2153f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac67e0b4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac6a430d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac6a430d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x24c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Beihai.Common.Diagnostics.dll", cAlternateFileName="")) returned 1 [0063.148] FindNextFileW (in: hFindFile=0x2153f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac6a430d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac6a430d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac6a430d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Beihai_Common_Diagnostics.winmd", cAlternateFileName="")) returned 1 [0063.148] FindNextFileW (in: hFindFile=0x2153f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac6a430d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac6ca56b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac6ca56b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xff58, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClrCompression.dll", cAlternateFileName="")) returned 1 [0063.148] FindNextFileW (in: hFindFile=0x2153f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac6ca56b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac7af38c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac7af38c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x597000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EngineWinRT.dll", cAlternateFileName="")) returned 1 [0063.148] FindNextFileW (in: hFindFile=0x2153f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac7af38c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac7d55e5, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac7d55e5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lift.Engine.winmd", cAlternateFileName="")) returned 1 [0063.148] FindNextFileW (in: hFindFile=0x2153f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac7d55e5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac7d55e5, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac7d55e5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lift.Transcoding.winmd", cAlternateFileName="")) returned 1 [0063.148] FindNextFileW (in: hFindFile=0x2153f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbed30aaa, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xabbf4c99, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xbed30aaa, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1 [0063.148] GetProcessHeap () returned 0x120000 [0063.148] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0063.149] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbed30aaa, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xabbf4c99, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xbed30aaa, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0063.149] FindNextFileW (in: hFindFile=0x215730, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbed30aaa, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xabbf4c99, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xbed30aaa, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.149] FindNextFileW (in: hFindFile=0x215730, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbed30aaa, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xabbf4c99, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xbed30aaa, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0063.150] FindClose (in: hFindFile=0x215730 | out: hFindFile=0x215730) returned 1 [0063.150] GetProcessHeap () returned 0x120000 [0063.150] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0063.150] FindNextFileW (in: hFindFile=0x2153f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac7d55e5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaca37b9a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xaca37b9a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x65be00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PluginManagerWinRt.dll", cAlternateFileName="")) returned 1 [0063.150] FindNextFileW (in: hFindFile=0x2153f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaca37b9a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xacb9b066, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xacb9b066, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x6a2f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1 [0063.150] FindNextFileW (in: hFindFile=0x2153f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac310a85, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabba02f9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xac310a85, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Resources", cAlternateFileName="_RESOU~1")) returned 1 [0063.150] GetProcessHeap () returned 0x120000 [0063.150] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0063.150] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\_Resources\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac310a85, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabba02f9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xac310a85, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155f0 [0063.150] FindNextFileW (in: hFindFile=0x2155f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac310a85, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabba02f9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xac310a85, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.150] FindNextFileW (in: hFindFile=0x2155f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac310a85, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac310a85, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac310a85, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x24b, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.rsrc", cAlternateFileName="")) returned 1 [0063.150] FindNextFileW (in: hFindFile=0x2155f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac310a85, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac310a85, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac310a85, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1ce4, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.rsrc", cAlternateFileName="")) returned 1 [0063.150] FindNextFileW (in: hFindFile=0x2155f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac310a85, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac310a85, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac310a85, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x148, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.txt", cAlternateFileName="")) returned 1 [0063.150] FindNextFileW (in: hFindFile=0x2155f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac310a85, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac310a85, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac310a85, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x148, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.txt", cAlternateFileName="")) returned 0 [0063.150] FindClose (in: hFindFile=0x2155f0 | out: hFindFile=0x2155f0) returned 1 [0063.150] GetProcessHeap () returned 0x120000 [0063.150] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0063.150] FindNextFileW (in: hFindFile=0x2153f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac310a85, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabba02f9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xac310a85, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Resources", cAlternateFileName="_RESOU~1")) returned 0 [0063.151] FindClose (in: hFindFile=0x2153f0 | out: hFindFile=0x2153f0) returned 1 [0063.151] GetProcessHeap () returned 0x120000 [0063.151] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0063.151] FindNextFileW (in: hFindFile=0x2153b0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62a7e361, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc3123ced, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc3123ced, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI476B~1.0_X")) returned 1 [0063.151] GetProcessHeap () returned 0x120000 [0063.151] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0063.152] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62a7e361, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc3123ced, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc3123ced, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155f0 [0063.155] FindNextFileW (in: hFindFile=0x2155f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62a7e361, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc3123ced, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc3123ced, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.155] FindNextFileW (in: hFindFile=0x2155f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62aa45be, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x62aa45be, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x62aa45be, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2557a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1 [0063.155] FindNextFileW (in: hFindFile=0x2155f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a7e361, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x62a7e361, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x62a7e361, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x11c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1 [0063.155] FindNextFileW (in: hFindFile=0x2155f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62aca818, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabc4070c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x62aca818, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1 [0063.156] GetProcessHeap () returned 0x120000 [0063.156] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0063.157] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62aca818, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabc4070c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x62aca818, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0063.158] FindNextFileW (in: hFindFile=0x2151b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62aca818, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabc4070c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x62aca818, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.158] FindNextFileW (in: hFindFile=0x2151b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62aca818, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x62aca818, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x62aca818, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5880, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 1 [0063.158] FindNextFileW (in: hFindFile=0x2151b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62aca818, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x62aca818, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x62aca818, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5880, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 0 [0063.158] FindClose (in: hFindFile=0x2151b0 | out: hFindFile=0x2151b0) returned 1 [0063.159] GetProcessHeap () returned 0x120000 [0063.159] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0063.159] FindNextFileW (in: hFindFile=0x2155f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62aa45be, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x62aa45be, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x62aa45be, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2997, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1 [0063.159] FindNextFileW (in: hFindFile=0x2155f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62aca818, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x62b893df, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x62b893df, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x249ed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="clienttelemetry.dll", cAlternateFileName="")) returned 1 [0063.159] FindNextFileW (in: hFindFile=0x2155f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62b893df, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x62baf63d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x62baf63d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1c8e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="FilesystemMetadata.xml", cAlternateFileName="")) returned 1 [0063.159] FindNextFileW (in: hFindFile=0x2155f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62baf63d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x62baf63d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x62baf63d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x21, dwReserved0=0x0, dwReserved1=0x0, cFileName="FilesystemMetadata.xml.md", cAlternateFileName="")) returned 1 [0063.159] FindNextFileW (in: hFindFile=0x2155f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62baf63d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabc41746, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x62c6e205, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0063.159] GetProcessHeap () returned 0x120000 [0063.159] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0063.159] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\images\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62baf63d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabc41746, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x62c6e205, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0063.364] FindNextFileW (in: hFindFile=0x215870, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62baf63d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabc41746, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x62c6e205, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.364] FindNextFileW (in: hFindFile=0x215870, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62baf63d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x62baf63d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x62baf63d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x30e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeHubLogo_150x150.png", cAlternateFileName="")) returned 1 [0063.364] FindNextFileW (in: hFindFile=0x215870, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62baf63d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x62baf63d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x62baf63d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeHubLogo_310x150.png", cAlternateFileName="")) returned 1 [0063.365] FindNextFileW (in: hFindFile=0x215870, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62baf63d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x62bd5897, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x62bd5897, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x65e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeHubLogo_310x310.png", cAlternateFileName="")) returned 1 [0063.365] FindNextFileW (in: hFindFile=0x215870, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62bd5897, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x62bd5897, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x62bd5897, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeHubLogo_44x44.png", cAlternateFileName="")) returned 1 [0063.365] FindNextFileW (in: hFindFile=0x215870, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c47fa2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x62c47fa2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x62c47fa2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x216, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeHubLogo_71x71.png", cAlternateFileName="")) returned 1 [0063.365] FindNextFileW (in: hFindFile=0x215870, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c47fa2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x62c6e205, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x62c6e205, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeHubLogo_Splash.png", cAlternateFileName="")) returned 1 [0063.365] FindNextFileW (in: hFindFile=0x215870, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c6e205, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x62c6e205, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x62c6e205, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x129, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeIcon.png", cAlternateFileName="")) returned 1 [0063.365] FindNextFileW (in: hFindFile=0x215870, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c6e205, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x62c6e205, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x62c6e205, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x129, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeIcon.png", cAlternateFileName="")) returned 0 [0063.365] FindClose (in: hFindFile=0x215870 | out: hFindFile=0x215870) returned 1 [0063.366] GetProcessHeap () returned 0x120000 [0063.366] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0063.366] FindNextFileW (in: hFindFile=0x2155f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62c6e205, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabc423fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x62c6e205, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="loc", cAlternateFileName="")) returned 1 [0063.366] GetProcessHeap () returned 0x120000 [0063.366] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0063.366] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\loc\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62c6e205, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabc423fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x62c6e205, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215130 [0063.366] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62c6e205, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabc423fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x62c6e205, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.366] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c6e205, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x62c9445e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x62c9445e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x274f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifestLoc.16.en-us.xml", cAlternateFileName="")) returned 1 [0063.366] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c6e205, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x62c9445e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x62c9445e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x274f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifestLoc.16.en-us.xml", cAlternateFileName="")) returned 0 [0063.366] FindClose (in: hFindFile=0x215130 | out: hFindFile=0x215130) returned 1 [0063.366] GetProcessHeap () returned 0x120000 [0063.366] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0063.366] FindNextFileW (in: hFindFile=0x2155f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc3123ced, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xc3123ced, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc3123ced, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1 [0063.366] GetProcessHeap () returned 0x120000 [0063.366] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0063.366] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc3123ced, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xc3123ced, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc3123ced, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0063.368] FindNextFileW (in: hFindFile=0x215370, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc3123ced, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xc3123ced, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc3123ced, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.368] FindNextFileW (in: hFindFile=0x215370, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc3123ced, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xc3123ced, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc3123ced, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0063.368] FindClose (in: hFindFile=0x215370 | out: hFindFile=0x215370) returned 1 [0063.368] GetProcessHeap () returned 0x120000 [0063.368] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0063.368] FindNextFileW (in: hFindFile=0x2155f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c9445e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x63254d7a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x63254d7a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3f0cc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="mso20imm.dll", cAlternateFileName="")) returned 1 [0063.368] FindNextFileW (in: hFindFile=0x2155f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63254d7a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x63508a92, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x63508a92, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5a32c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mso30imm.dll", cAlternateFileName="")) returned 1 [0063.368] FindNextFileW (in: hFindFile=0x2155f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6357cfac, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x63688022, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x63688022, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2180c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="office.odf", cAlternateFileName="")) returned 1 [0063.368] FindNextFileW (in: hFindFile=0x2155f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x636ae280, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabc4357d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x63720995, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office16", cAlternateFileName="")) returned 1 [0063.368] GetProcessHeap () returned 0x120000 [0063.368] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0063.368] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Office16\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x636ae280, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabc4357d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x63720995, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0063.368] FindNextFileW (in: hFindFile=0x2158b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x636ae280, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabc4357d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x63720995, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.368] FindNextFileW (in: hFindFile=0x2158b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x636ae280, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabc4416c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x636ae280, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0063.368] GetProcessHeap () returned 0x120000 [0063.368] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0063.368] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Office16\\1033\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x636ae280, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabc4416c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x636ae280, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0063.369] FindNextFileW (in: hFindFile=0x2151b0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x636ae280, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabc4416c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x636ae280, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.369] FindNextFileW (in: hFindFile=0x2151b0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636ae280, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x636ae280, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x636ae280, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1537e, dwReserved0=0x0, dwReserved1=0x0, cFileName="getofficecarousel.dcp", cAlternateFileName="")) returned 1 [0063.369] FindNextFileW (in: hFindFile=0x2151b0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636ae280, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x636ae280, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x636ae280, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x90c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="officehubintl.dll", cAlternateFileName="")) returned 1 [0063.369] FindNextFileW (in: hFindFile=0x2151b0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636ae280, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x636ae280, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x636ae280, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x90c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="officehubintl.dll", cAlternateFileName="")) returned 0 [0063.369] FindClose (in: hFindFile=0x2151b0 | out: hFindFile=0x2151b0) returned 1 [0063.369] GetProcessHeap () returned 0x120000 [0063.369] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0063.369] FindNextFileW (in: hFindFile=0x2158b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636d44de, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x636fa737, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x636fa737, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x68cc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeHubBackgroundTask.dll", cAlternateFileName="")) returned 1 [0063.369] FindNextFileW (in: hFindFile=0x2158b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636fa737, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x636fa737, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x636fa737, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x8ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeHubTaskHost.exe", cAlternateFileName="")) returned 1 [0063.370] FindNextFileW (in: hFindFile=0x2158b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63720995, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x638057b6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x638057b6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1e18c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeHubWin32.exe", cAlternateFileName="")) returned 1 [0063.370] FindNextFileW (in: hFindFile=0x2158b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63720995, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x638057b6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x638057b6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1e18c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeHubWin32.exe", cAlternateFileName="")) returned 0 [0063.370] FindClose (in: hFindFile=0x2158b0 | out: hFindFile=0x2158b0) returned 1 [0063.370] GetProcessHeap () returned 0x120000 [0063.370] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0063.370] FindNextFileW (in: hFindFile=0x2155f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x638057b6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x638057b6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x638057b6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x659, dwReserved0=0x0, dwReserved1=0x0, cFileName="Officehub_Base_PriConfig.xml", cAlternateFileName="")) returned 1 [0063.370] FindNextFileW (in: hFindFile=0x2155f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x638057b6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x638c4379, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x638c4379, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x189ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="officeimm.odf", cAlternateFileName="")) returned 1 [0063.370] FindNextFileW (in: hFindFile=0x2155f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x638c4379, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x638c4379, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x638c4379, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xb76, dwReserved0=0x0, dwReserved1=0x0, cFileName="Offihub_Base_PriInfo.pri.xml", cAlternateFileName="")) returned 1 [0063.370] FindNextFileW (in: hFindFile=0x2155f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x638c4379, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x63936aaf, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x63936aaf, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x356000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Registry.dat", cAlternateFileName="")) returned 1 [0063.370] FindNextFileW (in: hFindFile=0x2155f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63936aaf, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x63936aaf, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x63936aaf, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x7f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1 [0063.370] FindNextFileW (in: hFindFile=0x2155f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63936aaf, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6395ccec, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6395ccec, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xdd80, dwReserved0=0x0, dwReserved1=0x0, cFileName="StreamMap.xml", cAlternateFileName="")) returned 1 [0063.371] FindNextFileW (in: hFindFile=0x2155f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6395ccec, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabc44b63, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6395ccec, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="strings", cAlternateFileName="")) returned 1 [0063.371] GetProcessHeap () returned 0x120000 [0063.371] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0063.371] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\strings\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6395ccec, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabc44b63, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6395ccec, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0063.371] FindNextFileW (in: hFindFile=0x215370, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6395ccec, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabc44b63, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6395ccec, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.371] FindNextFileW (in: hFindFile=0x215370, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6395ccec, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6395ccec, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6395ccec, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1933, dwReserved0=0x0, dwReserved1=0x0, cFileName="officehubintl.lang-en-us.resw", cAlternateFileName="")) returned 1 [0063.371] FindNextFileW (in: hFindFile=0x215370, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6395ccec, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6395ccec, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6395ccec, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1933, dwReserved0=0x0, dwReserved1=0x0, cFileName="officehubintl.lang-en-us.resw", cAlternateFileName="")) returned 0 [0063.371] FindClose (in: hFindFile=0x215370 | out: hFindFile=0x215370) returned 1 [0063.371] GetProcessHeap () returned 0x120000 [0063.371] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0063.371] FindNextFileW (in: hFindFile=0x2155f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6395ccec, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabc45469, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x662a39a5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VFS", cAlternateFileName="")) returned 1 [0063.371] GetProcessHeap () returned 0x120000 [0063.372] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0063.372] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\VFS\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6395ccec, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabc45469, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x662a39a5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0063.372] FindNextFileW (in: hFindFile=0x215630, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6395ccec, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabc45469, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x662a39a5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.372] FindNextFileW (in: hFindFile=0x215630, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x410, ftCreationTime.dwLowDateTime=0x6395ccec, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadd7feb3, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6395ccec, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="ProgramFilesCommonX64", cAlternateFileName="PROGRA~1")) returned 1 [0063.372] FindNextFileW (in: hFindFile=0x215630, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x410, ftCreationTime.dwLowDateTime=0x662a39a5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadd7feb3, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x663ae9ff, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="SystemX64", cAlternateFileName="SYSTEM~1")) returned 1 [0063.372] FindNextFileW (in: hFindFile=0x215630, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x410, ftCreationTime.dwLowDateTime=0x662a39a5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadd7feb3, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x663ae9ff, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="SystemX64", cAlternateFileName="SYSTEM~1")) returned 0 [0063.372] FindClose (in: hFindFile=0x215630 | out: hFindFile=0x215630) returned 1 [0063.372] GetProcessHeap () returned 0x120000 [0063.372] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0063.372] FindNextFileW (in: hFindFile=0x2155f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x663d4c5d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabd372f0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6644736d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XMLOffKeys", cAlternateFileName="XMLOFF~1")) returned 1 [0063.372] GetProcessHeap () returned 0x120000 [0063.372] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0063.372] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x663d4c5d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabd372f0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6644736d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0063.373] FindNextFileW (in: hFindFile=0x215730, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x663d4c5d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabd372f0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6644736d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.373] FindNextFileW (in: hFindFile=0x215730, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x663d4c5d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x663faeb6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x663faeb6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4d695, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="Keys_OffVer11.xml", cAlternateFileName="")) returned 1 [0063.373] FindNextFileW (in: hFindFile=0x215730, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x663faeb6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x66421114, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x66421114, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x275b, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="Keys_OffVer12.xml", cAlternateFileName="")) returned 1 [0063.373] FindNextFileW (in: hFindFile=0x215730, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66421114, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x66421114, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x66421114, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4d89, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="Keys_OffVer14.xml", cAlternateFileName="")) returned 1 [0063.374] FindNextFileW (in: hFindFile=0x215730, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66421114, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x66421114, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x66421114, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x6a3b, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="Keys_OffVer15.xml", cAlternateFileName="")) returned 1 [0063.374] FindNextFileW (in: hFindFile=0x215730, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66421114, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x66421114, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x66421114, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x67ad, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="Keys_OffVer16.xml", cAlternateFileName="")) returned 1 [0063.374] FindNextFileW (in: hFindFile=0x215730, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66421114, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6644736d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6644736d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x140b9, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="Keys_OffVer365.xml", cAlternateFileName="")) returned 1 [0063.374] FindNextFileW (in: hFindFile=0x215730, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6644736d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6646d5cb, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6646d5cb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x8b59d, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="Keys_OffVerOOBE.xml", cAlternateFileName="")) returned 1 [0063.374] FindNextFileW (in: hFindFile=0x215730, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6644736d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6646d5cb, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6646d5cb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x8b59d, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="Keys_OffVerOOBE.xml", cAlternateFileName="")) returned 0 [0063.374] FindClose (in: hFindFile=0x215730 | out: hFindFile=0x215730) returned 1 [0063.375] GetProcessHeap () returned 0x120000 [0063.375] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0063.375] FindNextFileW (in: hFindFile=0x2155f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x663d4c5d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabd372f0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6644736d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XMLOffKeys", cAlternateFileName="XMLOFF~1")) returned 0 [0063.375] FindClose (in: hFindFile=0x2155f0 | out: hFindFile=0x2155f0) returned 1 [0063.375] GetProcessHeap () returned 0x120000 [0063.375] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0063.375] FindNextFileW (in: hFindFile=0x2153b0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x628da999, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc3123ced, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc3123ced, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIC168~1.0_N")) returned 1 [0063.375] GetProcessHeap () returned 0x120000 [0063.375] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0063.376] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x628da999, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc3123ced, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc3123ced, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0063.377] FindNextFileW (in: hFindFile=0x2158b0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x628da999, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc3123ced, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc3123ced, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.377] FindNextFileW (in: hFindFile=0x2158b0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a0bc4b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x62a0bc4b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x62a0bc4b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1 [0063.377] FindNextFileW (in: hFindFile=0x2158b0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x628da999, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabdaf1a7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x628da999, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1 [0063.377] GetProcessHeap () returned 0x120000 [0063.377] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0063.378] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x628da999, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabdaf1a7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x628da999, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0063.378] FindNextFileW (in: hFindFile=0x2152f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x628da999, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabdaf1a7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x628da999, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.378] FindNextFileW (in: hFindFile=0x2152f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x628da999, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x628da999, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x628da999, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3e47, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 1 [0063.378] FindNextFileW (in: hFindFile=0x2152f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x628da999, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x628da999, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x628da999, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3e47, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 0 [0063.378] FindClose (in: hFindFile=0x2152f0 | out: hFindFile=0x2152f0) returned 1 [0063.378] GetProcessHeap () returned 0x120000 [0063.378] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0063.378] FindNextFileW (in: hFindFile=0x2158b0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a31eae, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x62a31eae, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x62a31eae, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2970, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1 [0063.378] FindNextFileW (in: hFindFile=0x2158b0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc3123ced, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xc3123ced, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc3123ced, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1 [0063.379] GetProcessHeap () returned 0x120000 [0063.379] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0063.379] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc3123ced, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xc3123ced, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc3123ced, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0063.379] FindNextFileW (in: hFindFile=0x2151b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc3123ced, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xc3123ced, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc3123ced, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.379] FindNextFileW (in: hFindFile=0x2151b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc3123ced, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xc3123ced, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc3123ced, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0063.379] FindClose (in: hFindFile=0x2151b0 | out: hFindFile=0x2151b0) returned 1 [0063.379] GetProcessHeap () returned 0x120000 [0063.379] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0063.379] FindNextFileW (in: hFindFile=0x2158b0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc3123ced, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xc3123ced, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc3123ced, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0 [0063.379] FindClose (in: hFindFile=0x2158b0 | out: hFindFile=0x2158b0) returned 1 [0063.379] GetProcessHeap () returned 0x120000 [0063.379] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0063.380] FindNextFileW (in: hFindFile=0x2153b0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x390dfd83, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc96ea5b4, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc96ea5b4, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe", cAlternateFileName="MI06F6~1.SCA")) returned 1 [0063.380] GetProcessHeap () returned 0x120000 [0063.380] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0063.380] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x390dfd83, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc96ea5b4, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc96ea5b4, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0063.382] FindNextFileW (in: hFindFile=0x2155b0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x390dfd83, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc96ea5b4, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc96ea5b4, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.382] FindNextFileW (in: hFindFile=0x2155b0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x391eadfd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x391eadfd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x391eadfd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x69d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1 [0063.382] FindNextFileW (in: hFindFile=0x2155b0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390dfd83, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x390dfd83, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x390dfd83, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x34a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1 [0063.382] FindNextFileW (in: hFindFile=0x2155b0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x391eadfd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x391eadfd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x391eadfd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x295a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1 [0063.382] FindNextFileW (in: hFindFile=0x2155b0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x391eadfd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabe0794e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3925d50d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1 [0063.382] GetProcessHeap () returned 0x120000 [0063.382] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0063.382] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x391eadfd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabe0794e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3925d50d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154f0 [0063.383] FindNextFileW (in: hFindFile=0x2154f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x391eadfd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabe0794e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3925d50d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.383] FindNextFileW (in: hFindFile=0x2154f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x391eadfd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x391eadfd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x391eadfd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5415, dwReserved0=0x0, dwReserved1=0x0, cFileName="ads_win10_300x250.scale-100.jpg", cAlternateFileName="")) returned 1 [0063.383] FindNextFileW (in: hFindFile=0x2154f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x391eadfd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x39211056, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x39211056, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4c2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ads_win10_728x90.scale-100.jpg", cAlternateFileName="")) returned 1 [0063.383] FindNextFileW (in: hFindFile=0x2154f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x39211056, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabe5a941, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x392372b0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Livetiles", cAlternateFileName="LIVETI~1")) returned 1 [0063.383] GetProcessHeap () returned 0x120000 [0063.383] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0063.383] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\Livetiles\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x39211056, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabe5a941, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x392372b0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0063.384] FindNextFileW (in: hFindFile=0x215370, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x39211056, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabe5a941, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x392372b0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.384] FindNextFileW (in: hFindFile=0x215370, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39211056, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x39211056, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x39211056, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x7e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftSolitaireAppList.scale-100.png", cAlternateFileName="")) returned 1 [0063.384] FindNextFileW (in: hFindFile=0x215370, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39211056, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x39211056, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x39211056, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x627f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftSolitaireLargeTile.scale-100.jpg", cAlternateFileName="")) returned 1 [0063.384] FindNextFileW (in: hFindFile=0x215370, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39211056, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x39211056, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x39211056, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x22f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftSolitaireMedTile.scale-100.jpg", cAlternateFileName="")) returned 1 [0063.385] FindNextFileW (in: hFindFile=0x215370, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39211056, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x392372b0, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x392372b0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xdb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftSolitaireSmallTile.scale-100.jpg", cAlternateFileName="")) returned 1 [0063.385] FindNextFileW (in: hFindFile=0x215370, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x392372b0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3925d50d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3925d50d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3b66, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftSolitaireWideTile.scale-100.jpg", cAlternateFileName="")) returned 1 [0063.385] FindNextFileW (in: hFindFile=0x215370, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x392372b0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3925d50d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3925d50d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3b66, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftSolitaireWideTile.scale-100.jpg", cAlternateFileName="")) returned 0 [0063.385] FindClose (in: hFindFile=0x215370 | out: hFindFile=0x215370) returned 1 [0063.385] GetProcessHeap () returned 0x120000 [0063.385] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0063.385] FindNextFileW (in: hFindFile=0x2154f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3925d50d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3925d50d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3925d50d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1210, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashScreen.scale-100.png", cAlternateFileName="")) returned 1 [0063.386] FindNextFileW (in: hFindFile=0x2154f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3925d50d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3925d50d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3925d50d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1210, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashScreen.scale-100.png", cAlternateFileName="")) returned 0 [0063.386] FindClose (in: hFindFile=0x2154f0 | out: hFindFile=0x2154f0) returned 1 [0063.386] GetProcessHeap () returned 0x120000 [0063.386] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0063.386] FindNextFileW (in: hFindFile=0x2155b0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc96ea5b4, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xc96ea5b4, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc96ea5b4, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1 [0063.386] GetProcessHeap () returned 0x120000 [0063.386] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0063.387] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc96ea5b4, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xc96ea5b4, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc96ea5b4, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0063.387] FindNextFileW (in: hFindFile=0x2151f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc96ea5b4, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xc96ea5b4, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc96ea5b4, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.388] FindNextFileW (in: hFindFile=0x2151f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc96ea5b4, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xc96ea5b4, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc96ea5b4, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0063.388] FindClose (in: hFindFile=0x2151f0 | out: hFindFile=0x2151f0) returned 1 [0063.388] GetProcessHeap () returned 0x120000 [0063.388] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0063.388] FindNextFileW (in: hFindFile=0x2155b0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3925d50d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3925d50d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3925d50d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x538, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1 [0063.388] FindNextFileW (in: hFindFile=0x2155b0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3925d50d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3925d50d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3925d50d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x538, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 0 [0063.388] FindClose (in: hFindFile=0x2155b0 | out: hFindFile=0x2155b0) returned 1 [0063.388] GetProcessHeap () returned 0x120000 [0063.388] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0063.388] FindNextFileW (in: hFindFile=0x2153b0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33798b5a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc96c435e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc96c435e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI9806~1.0_N")) returned 1 [0063.389] GetProcessHeap () returned 0x120000 [0063.389] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0063.389] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33798b5a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc96c435e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc96c435e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215530 [0063.390] FindNextFileW (in: hFindFile=0x215530, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33798b5a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc96c435e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc96c435e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.390] FindNextFileW (in: hFindFile=0x215530, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3387d97b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3387d97b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3387d97b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1 [0063.390] FindNextFileW (in: hFindFile=0x215530, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33798b5a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabec308c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x33798b5a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1 [0063.391] GetProcessHeap () returned 0x120000 [0063.391] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0063.391] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33798b5a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabec308c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x33798b5a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0063.391] FindNextFileW (in: hFindFile=0x2153f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33798b5a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabec308c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x33798b5a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.391] FindNextFileW (in: hFindFile=0x2153f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33798b5a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x337bedb8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x337bedb8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x41c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 1 [0063.391] FindNextFileW (in: hFindFile=0x2153f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33798b5a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x337bedb8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x337bedb8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x41c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 0 [0063.391] FindClose (in: hFindFile=0x2153f0 | out: hFindFile=0x2153f0) returned 1 [0063.391] GetProcessHeap () returned 0x120000 [0063.391] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0063.391] FindNextFileW (in: hFindFile=0x215530, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3387d97b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3387d97b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3387d97b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x295a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1 [0063.391] FindNextFileW (in: hFindFile=0x215530, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc96c435e, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xc96c435e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc96c435e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1 [0063.392] GetProcessHeap () returned 0x120000 [0063.392] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0063.392] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc96c435e, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xc96c435e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc96c435e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0063.392] FindNextFileW (in: hFindFile=0x2152f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc96c435e, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xc96c435e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc96c435e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.392] FindNextFileW (in: hFindFile=0x2152f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc96c435e, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xc96c435e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc96c435e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0063.392] FindClose (in: hFindFile=0x2152f0 | out: hFindFile=0x2152f0) returned 1 [0063.392] GetProcessHeap () returned 0x120000 [0063.392] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0063.392] FindNextFileW (in: hFindFile=0x215530, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc96c435e, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xc96c435e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc96c435e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0 [0063.392] FindClose (in: hFindFile=0x215530 | out: hFindFile=0x215530) returned 1 [0063.392] GetProcessHeap () returned 0x120000 [0063.392] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0063.393] FindNextFileW (in: hFindFile=0x2153b0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34052404, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc96ea5b4, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc96ea5b4, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIEA86~1.0_X")) returned 1 [0063.400] GetProcessHeap () returned 0x120000 [0063.400] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0063.400] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34052404, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc96ea5b4, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc96ea5b4, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0063.401] FindNextFileW (in: hFindFile=0x2153f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34052404, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc96ea5b4, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc96ea5b4, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.402] FindNextFileW (in: hFindFile=0x2153f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3421c04b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3421c04b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3421c04b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x176, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApplicationInsights.config", cAlternateFileName="")) returned 1 [0063.402] FindNextFileW (in: hFindFile=0x2153f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3407866c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x340c4b15, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x340c4b15, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3708d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1 [0063.402] FindNextFileW (in: hFindFile=0x2153f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34052404, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3407866c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3407866c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2187, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1 [0063.402] FindNextFileW (in: hFindFile=0x2153f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340ead73, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabf3049c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x340ead73, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1 [0063.402] GetProcessHeap () returned 0x120000 [0063.402] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0063.403] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340ead73, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabf3049c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x340ead73, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215170 [0063.403] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340ead73, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabf3049c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x340ead73, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.403] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x340ead73, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34110fcc, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34110fcc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x309a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 1 [0063.403] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x340ead73, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34110fcc, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34110fcc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x309a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 0 [0063.403] FindClose (in: hFindFile=0x215170 | out: hFindFile=0x215170) returned 1 [0063.403] GetProcessHeap () returned 0x120000 [0063.403] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0063.403] FindNextFileW (in: hFindFile=0x2153f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x340c4b15, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x340ead73, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x340ead73, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2981, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1 [0063.403] FindNextFileW (in: hFindFile=0x2153f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x342422a4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabf30abf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x342422a4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Arkadium.Win10.Awards", cAlternateFileName="ARKADI~1.AWA")) returned 1 [0063.403] GetProcessHeap () returned 0x120000 [0063.403] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0063.403] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.Awards\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x342422a4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabf30abf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x342422a4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0063.403] FindNextFileW (in: hFindFile=0x2158b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x342422a4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabf30abf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x342422a4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.403] FindNextFileW (in: hFindFile=0x2158b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x342422a4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabf96d1f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x342b49b5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1 [0063.403] GetProcessHeap () returned 0x120000 [0063.403] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0063.403] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.Awards\\Assets\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x342422a4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabf96d1f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x342b49b5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0063.443] FindNextFileW (in: hFindFile=0x215870, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x342422a4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabf96d1f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x342b49b5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.443] FindNextFileW (in: hFindFile=0x215870, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x342422a4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34268502, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34268502, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3af7, dwReserved0=0x0, dwReserved1=0x0, cFileName="3_awards_years_base.png", cAlternateFileName="")) returned 1 [0063.443] FindNextFileW (in: hFindFile=0x215870, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34268502, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34268502, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34268502, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="awards_circle_gray.png", cAlternateFileName="")) returned 1 [0063.443] FindNextFileW (in: hFindFile=0x215870, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34268502, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3428e75b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3428e75b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x495, dwReserved0=0x0, dwReserved1=0x0, cFileName="awards_corner_gray.png", cAlternateFileName="")) returned 1 [0063.443] FindNextFileW (in: hFindFile=0x215870, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3428e75b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3428e75b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3428e75b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Awards_cup.png", cAlternateFileName="")) returned 1 [0063.444] GetProcessHeap () returned 0x120000 [0063.444] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0063.444] GetProcessHeap () returned 0x120000 [0063.444] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0063.444] GetProcessHeap () returned 0x120000 [0063.444] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0063.445] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x342dac13, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabf9793f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x342dac13, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215430 [0063.552] GetProcessHeap () returned 0x120000 [0063.552] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0063.552] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\Assets\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x342dac13, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabffc808, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3472fed7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157b0 [0063.619] GetProcessHeap () returned 0x120000 [0063.619] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0063.621] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\Assets\\Animation\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x342dac13, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac04346d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x344583a2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154f0 [0063.623] GetProcessHeap () returned 0x120000 [0063.623] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0063.623] GetProcessHeap () returned 0x120000 [0063.623] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0063.623] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\Assets\\Audio\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3447e5fb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac043e7b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3447e5fb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0063.623] GetProcessHeap () returned 0x120000 [0063.623] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0063.623] GetProcessHeap () returned 0x120000 [0063.623] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0063.623] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\Assets\\Calendar\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x344f0d0c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac044536, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x344f0d0c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0063.624] GetProcessHeap () returned 0x120000 [0063.624] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0063.625] GetProcessHeap () returned 0x120000 [0063.625] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0063.625] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\Assets\\Perfect\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3453d1c3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac044a68, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x345651d2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0063.625] GetProcessHeap () returned 0x120000 [0063.625] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0063.625] GetProcessHeap () returned 0x120000 [0063.625] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0063.625] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\Assets\\Popups\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3458b455, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac0bb1e2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3464a018, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0063.626] GetProcessHeap () returned 0x120000 [0063.626] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0063.626] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\Assets\\Popups\\Upsell\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3464a018, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac12f3ab, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34670276, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215130 [0063.628] GetProcessHeap () returned 0x120000 [0063.628] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0063.628] GetProcessHeap () returned 0x120000 [0063.628] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0063.630] GetProcessHeap () returned 0x120000 [0063.630] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0063.631] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\Assets\\PrizeHistory\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34670276, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac18e78c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34708be4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215130 [0063.633] GetProcessHeap () returned 0x120000 [0063.633] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0063.633] GetProcessHeap () returned 0x120000 [0063.633] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0063.633] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\Assets\\ProgressBar\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34708be4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac18f047, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34708be4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155f0 [0063.634] GetProcessHeap () returned 0x120000 [0063.634] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0063.634] GetProcessHeap () returned 0x120000 [0063.634] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0063.634] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\Assets\\Tab\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3472fed7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac18f99f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3472fed7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215670 [0063.634] GetProcessHeap () returned 0x120000 [0063.634] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0063.634] GetProcessHeap () returned 0x120000 [0063.634] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0063.636] GetProcessHeap () returned 0x120000 [0063.636] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0063.636] GetProcessHeap () returned 0x120000 [0063.636] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0063.636] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.News\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3477c3bd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac190436, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3477c3bd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215230 [0063.637] GetProcessHeap () returned 0x120000 [0063.637] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0063.637] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.News\\Assets\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3477c3bd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac1fc576, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x347a261b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0063.639] GetProcessHeap () returned 0x120000 [0063.639] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0063.639] GetProcessHeap () returned 0x120000 [0063.639] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0063.639] GetProcessHeap () returned 0x120000 [0063.639] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0063.639] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.StarClub\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347a261b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac1fd71d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x347a261b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215270 [0063.639] GetProcessHeap () returned 0x120000 [0063.639] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0063.639] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.StarClub\\Assets\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347a261b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac275cac, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3499a434, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215330 [0063.641] GetProcessHeap () returned 0x120000 [0063.641] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0063.642] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.StarClub\\Assets\\Animation\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347a261b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac318bc0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x347eead2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215570 [0063.644] GetProcessHeap () returned 0x120000 [0063.644] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0063.644] GetProcessHeap () returned 0x120000 [0063.644] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0063.644] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.StarClub\\Assets\\Badges\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34814d2b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac3196ed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34814d2b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215530 [0063.644] GetProcessHeap () returned 0x120000 [0063.645] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0063.645] GetProcessHeap () returned 0x120000 [0063.645] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0063.645] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.StarClub\\Assets\\Pin\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x348db826, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac319e44, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x348db826, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0063.645] GetProcessHeap () returned 0x120000 [0063.645] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0063.645] GetProcessHeap () returned 0x120000 [0063.645] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0063.645] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.StarClub\\Assets\\Sounds\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x348db826, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac36e3cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34927cf5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215430 [0063.647] GetProcessHeap () returned 0x120000 [0063.647] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0063.647] GetProcessHeap () returned 0x120000 [0063.647] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0063.647] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.StarClub\\Assets\\Stripes\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3499a434, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac36f571, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3499a434, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0063.647] GetProcessHeap () returned 0x120000 [0063.647] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0063.647] GetProcessHeap () returned 0x120000 [0063.647] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0063.650] GetProcessHeap () returned 0x120000 [0063.650] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0063.650] GetProcessHeap () returned 0x120000 [0063.650] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0063.650] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.Upsell\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3499a434, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac3703f0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3499a434, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0063.650] GetProcessHeap () returned 0x120000 [0063.651] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0063.651] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.Upsell\\Default\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3499a434, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac371336, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3499a434, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157b0 [0063.651] GetProcessHeap () returned 0x120000 [0063.651] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0063.651] GetProcessHeap () returned 0x120000 [0063.651] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0063.651] GetProcessHeap () returned 0x120000 [0063.651] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0063.652] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.Xaml.Toolkit\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x349e68bd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac371ee7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x349e68bd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157f0 [0063.652] GetProcessHeap () returned 0x120000 [0063.652] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0063.652] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.Xaml.Toolkit\\Assets\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x349e68bd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac487abd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34af1924, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215430 [0063.653] GetProcessHeap () returned 0x120000 [0063.653] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0063.655] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.Xaml.Toolkit\\Assets\\Buttons\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x349e68bd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac488be1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34a0cb16, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215830 [0063.944] GetProcessHeap () returned 0x120000 [0063.944] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0063.945] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.Xaml.Toolkit\\Assets\\Buttons\\Back\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x349e68bd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac489905, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x349e68bd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157b0 [0063.945] GetProcessHeap () returned 0x120000 [0063.945] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0063.945] GetProcessHeap () returned 0x120000 [0063.945] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0063.945] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.Xaml.Toolkit\\Assets\\Buttons\\Menu\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34a0cb16, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac52ad21, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34a32d6a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0063.948] GetProcessHeap () returned 0x120000 [0063.948] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0063.948] GetProcessHeap () returned 0x120000 [0063.948] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0063.948] GetProcessHeap () returned 0x120000 [0063.948] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0063.948] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.Xaml.Toolkit\\Assets\\Hud\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34acb6c6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac52b9f7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34af1924, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0063.948] GetProcessHeap () returned 0x120000 [0063.948] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0063.949] GetProcessHeap () returned 0x120000 [0063.949] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0063.949] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.Xaml.Toolkit\\Assets\\XboxControl\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34af1924, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac5cdd03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34b17b7d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0063.953] GetProcessHeap () returned 0x120000 [0063.953] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0063.953] GetProcessHeap () returned 0x120000 [0063.953] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0063.954] GetProcessHeap () returned 0x120000 [0063.954] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0063.955] GetProcessHeap () returned 0x120000 [0063.955] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0063.955] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34b17b7d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac644067, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x377f6ca3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215830 [0063.957] GetProcessHeap () returned 0x120000 [0063.957] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0063.957] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Advertisement\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34b64035, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac645b09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34b64035, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0063.957] GetProcessHeap () returned 0x120000 [0063.957] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0063.957] GetProcessHeap () returned 0x120000 [0063.957] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0063.957] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Audio\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34b64035, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac6cbcfb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34c48e56, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0063.959] GetProcessHeap () returned 0x120000 [0063.959] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0063.959] GetProcessHeap () returned 0x120000 [0063.959] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0063.959] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Awards\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34c48e56, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac6cce12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x350306db, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0063.961] GetProcessHeap () returned 0x120000 [0063.962] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0063.963] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Awards\\challenge\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34c48e56, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac779db7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34d56040, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0063.965] GetProcessHeap () returned 0x120000 [0063.965] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0063.965] GetProcessHeap () returned 0x120000 [0063.965] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0063.965] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Awards\\common\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34d56040, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac7e1fd7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34e610ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152b0 [0063.967] GetProcessHeap () returned 0x120000 [0063.967] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0063.967] GetProcessHeap () returned 0x120000 [0063.967] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0063.967] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Awards\\freecell\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34e610ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac845f95, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34e87318, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156b0 [0063.970] GetProcessHeap () returned 0x120000 [0063.970] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0063.970] GetProcessHeap () returned 0x120000 [0063.970] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0063.970] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Awards\\klondike\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34ead571, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac8488db, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34ef9a28, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0063.973] GetProcessHeap () returned 0x120000 [0063.973] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0063.973] GetProcessHeap () returned 0x120000 [0063.973] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0063.973] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Awards\\pyramid\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34f1fc81, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac8a1411, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34f97d43, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0063.975] GetProcessHeap () returned 0x120000 [0063.975] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0063.975] GetProcessHeap () returned 0x120000 [0063.975] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0063.975] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Awards\\spider\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34f97d43, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac8e55e7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3500a487, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215430 [0064.000] GetProcessHeap () returned 0x120000 [0064.000] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0064.000] GetProcessHeap () returned 0x120000 [0064.000] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0064.000] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Awards\\tripeaks\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x350306db, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac95908b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x350c904a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215130 [0064.002] GetProcessHeap () returned 0x120000 [0064.002] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0064.002] GetProcessHeap () returned 0x120000 [0064.002] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0064.003] GetProcessHeap () returned 0x120000 [0064.003] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0064.003] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Buttons\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x350f002f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac95a2c9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x352c9059, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215270 [0064.005] GetProcessHeap () returned 0x120000 [0064.005] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0064.006] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Buttons\\Deal\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x350f002f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac9df1ec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3513c50b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157f0 [0064.351] GetProcessHeap () returned 0x120000 [0064.351] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0064.351] GetProcessHeap () returned 0x120000 [0064.351] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0064.351] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Buttons\\FullScreen\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3513c50b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaca3dcfb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x35197d53, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0064.353] GetProcessHeap () returned 0x120000 [0064.353] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0064.353] GetProcessHeap () returned 0x120000 [0064.353] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0064.353] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Buttons\\GiveUp\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35197d53, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaca840b3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x351bdfd6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152b0 [0064.355] GetProcessHeap () returned 0x120000 [0064.355] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0064.355] GetProcessHeap () returned 0x120000 [0064.356] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0064.356] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Buttons\\Solve\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x351bdfd6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xacad2aaa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x35256944, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0064.358] GetProcessHeap () returned 0x120000 [0064.358] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0064.358] GetProcessHeap () returned 0x120000 [0064.358] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0064.358] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Buttons\\TryAgain\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3527cb9e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xacc01122, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x352c9059, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0064.360] GetProcessHeap () returned 0x120000 [0064.360] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0064.360] GetProcessHeap () returned 0x120000 [0064.360] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0064.360] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Buttons\\Undo\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352c9059, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xacc863de, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x352f22cf, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0064.362] GetProcessHeap () returned 0x120000 [0064.362] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0064.362] GetProcessHeap () returned 0x120000 [0064.362] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0064.363] GetProcessHeap () returned 0x120000 [0064.364] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0064.364] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\DailyChallenges\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3533dfe8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaccce3d2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x355540e1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156b0 [0064.365] GetProcessHeap () returned 0x120000 [0064.365] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0064.366] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\DailyChallenges\\Icons\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35364241, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xacccf58b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x35364241, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0064.367] GetProcessHeap () returned 0x120000 [0064.367] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0064.367] GetProcessHeap () returned 0x120000 [0064.367] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0064.367] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\DailyChallenges\\LobbyTiles\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x353b06f8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xacd36e5b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x353d6951, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0064.369] GetProcessHeap () returned 0x120000 [0064.369] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0064.369] GetProcessHeap () returned 0x120000 [0064.369] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0064.369] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\DailyChallenges\\Popup\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x353fcbab, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xacd9987b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x35495519, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215230 [0064.372] GetProcessHeap () returned 0x120000 [0064.372] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0064.372] GetProcessHeap () returned 0x120000 [0064.372] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0064.372] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\DailyChallenges\\Tile\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x355540e1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xacd9a8ce, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x355540e1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0064.372] GetProcessHeap () returned 0x120000 [0064.372] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0064.372] GetProcessHeap () returned 0x120000 [0064.372] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0064.374] GetProcessHeap () returned 0x120000 [0064.374] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0064.374] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Fireworks\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3557a33f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xacd9b495, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x355a0598, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156b0 [0064.374] GetProcessHeap () returned 0x120000 [0064.374] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0064.374] GetProcessHeap () returned 0x120000 [0064.375] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0064.375] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Fues\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x355c67f6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xace02661, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3576d4df, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215530 [0064.376] GetProcessHeap () returned 0x120000 [0064.377] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0064.377] GetProcessHeap () returned 0x120000 [0064.377] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0064.377] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\GameEnd\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35793738, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xace05649, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3582c0a2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0064.379] GetProcessHeap () returned 0x120000 [0064.379] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0064.379] GetProcessHeap () returned 0x120000 [0064.379] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0064.379] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35852300, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xace066b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x35f531bc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156b0 [0064.380] GetProcessHeap () returned 0x120000 [0064.380] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0064.381] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\FreeCell\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35878559, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xace07319, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x35878559, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0064.382] GetProcessHeap () returned 0x120000 [0064.382] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0064.382] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\FreeCell\\ResPacks\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35878559, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xace07e04, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x35878559, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215430 [0064.382] GetProcessHeap () returned 0x120000 [0064.382] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0064.382] GetProcessHeap () returned 0x120000 [0064.382] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0064.383] GetProcessHeap () returned 0x120000 [0064.383] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0064.385] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\Klondike\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3589e7b7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xace08745, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3589e7b7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215430 [0064.385] GetProcessHeap () returned 0x120000 [0064.385] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0064.385] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\Klondike\\ResPacks\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3589e7b7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xace091ed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3589e7b7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0064.385] GetProcessHeap () returned 0x120000 [0064.385] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0064.385] GetProcessHeap () returned 0x120000 [0064.386] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0064.387] GetProcessHeap () returned 0x120000 [0064.387] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0064.388] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\Localization\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x358c4a10, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xacf1abf4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x35d3d0be, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0064.641] GetProcessHeap () returned 0x120000 [0064.641] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0064.641] GetProcessHeap () returned 0x120000 [0064.641] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0064.641] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\Particles\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35d3d0be, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xacf1b816, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x35dd5a2c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152b0 [0064.641] GetProcessHeap () returned 0x120000 [0064.641] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0064.641] GetProcessHeap () returned 0x120000 [0064.641] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0064.641] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\Pyramid\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35dfbc86, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xacf1c555, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x35e21edf, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215230 [0064.642] GetProcessHeap () returned 0x120000 [0064.642] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0064.642] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\Pyramid\\ResPacks\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35e21edf, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xacf1d153, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x35e21edf, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215130 [0064.642] GetProcessHeap () returned 0x120000 [0064.642] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0064.642] GetProcessHeap () returned 0x120000 [0064.642] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0064.643] GetProcessHeap () returned 0x120000 [0064.643] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0064.644] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\Spider\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35e48142, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xacf1dfdd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x35e6e396, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0064.645] GetProcessHeap () returned 0x120000 [0064.645] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0064.645] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\Spider\\ResPacks\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35e48142, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xacf1ef18, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x35e48142, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215770 [0064.650] GetProcessHeap () returned 0x120000 [0064.650] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0064.650] GetProcessHeap () returned 0x120000 [0064.650] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0064.651] GetProcessHeap () returned 0x120000 [0064.651] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0064.653] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\Theme\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35e6e396, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xacf1f832, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x35f2cf5e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215570 [0064.653] GetProcessHeap () returned 0x120000 [0064.653] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0064.653] GetProcessHeap () returned 0x120000 [0064.653] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0064.653] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\TriPeaks\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35f531bc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xacf1fefc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x35fc58cc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0064.653] GetProcessHeap () returned 0x120000 [0064.653] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0064.653] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\TriPeaks\\ResPacks\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35f531bc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xacf20a89, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x35f531bc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155f0 [0064.654] GetProcessHeap () returned 0x120000 [0064.654] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0064.654] GetProcessHeap () returned 0x120000 [0064.654] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0064.655] GetProcessHeap () returned 0x120000 [0064.655] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0064.655] GetProcessHeap () returned 0x120000 [0064.655] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0064.655] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\HowToPlay\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36011d7f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xacf21496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x363fa5db, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0064.657] GetProcessHeap () returned 0x120000 [0064.657] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0064.658] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\HowToPlay\\DailyChallenges\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36011d7f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad048c46, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3605e236, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0064.660] GetProcessHeap () returned 0x120000 [0064.660] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0064.660] GetProcessHeap () returned 0x120000 [0064.660] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0064.660] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\HowToPlay\\FreeCell\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3605e236, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad0b7bdb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x360f6ba4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215670 [0064.662] GetProcessHeap () returned 0x120000 [0064.662] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0064.662] GetProcessHeap () returned 0x120000 [0064.662] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0064.662] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\HowToPlay\\Klondike\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3611cdfe, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad0ba445, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x361db9c5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0064.664] GetProcessHeap () returned 0x120000 [0064.664] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0064.664] GetProcessHeap () returned 0x120000 [0064.664] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0064.664] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\HowToPlay\\Pyramid\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36227e81, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad119406, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x362e6a44, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215230 [0064.666] GetProcessHeap () returned 0x120000 [0064.666] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0064.666] GetProcessHeap () returned 0x120000 [0064.666] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0064.666] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\HowToPlay\\Spider\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3630cca2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad1cdf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x363d4386, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215230 [0064.668] GetProcessHeap () returned 0x120000 [0064.668] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0064.668] GetProcessHeap () returned 0x120000 [0064.668] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0064.668] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\HowToPlay\\StarClub\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x363d4386, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad1ce7fc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x363fa5db, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215430 [0064.669] GetProcessHeap () returned 0x120000 [0064.669] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0064.669] GetProcessHeap () returned 0x120000 [0064.669] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0064.669] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\HowToPlay\\TriPeaks\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x363fa5db, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad1d0ffd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3644e45a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155f0 [0064.671] GetProcessHeap () returned 0x120000 [0064.671] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0064.671] GetProcessHeap () returned 0x120000 [0064.671] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0064.672] GetProcessHeap () returned 0x120000 [0064.672] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0064.673] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x364746b3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad239fed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3650d026, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215570 [0064.675] GetProcessHeap () returned 0x120000 [0064.675] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0064.675] GetProcessHeap () returned 0x120000 [0064.675] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0064.675] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Livetiles\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3650d026, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad2b592c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x365a5990, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215430 [0064.677] GetProcessHeap () returned 0x120000 [0064.677] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0064.677] GetProcessHeap () returned 0x120000 [0064.677] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0064.677] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\MainPage\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x365a5990, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad3440cd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x365cbbe9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0064.760] GetProcessHeap () returned 0x120000 [0064.760] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0064.760] GetProcessHeap () returned 0x120000 [0064.760] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0064.760] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\MainPageState2\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x365cbbe9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad346b82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36664553, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0064.763] GetProcessHeap () returned 0x120000 [0064.763] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0064.763] GetProcessHeap () returned 0x120000 [0064.763] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0064.763] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\News\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36664553, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad34763e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36664553, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215130 [0064.763] GetProcessHeap () returned 0x120000 [0064.763] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0064.764] GetProcessHeap () returned 0x120000 [0064.764] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0064.764] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\OptInPopup\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3668a7b1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad348156, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3668a7b1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0064.764] GetProcessHeap () returned 0x120000 [0064.764] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0064.764] GetProcessHeap () returned 0x120000 [0064.764] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0064.764] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\PopUp\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x366b0a0a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad348e3e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x366b0a0a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155f0 [0064.764] GetProcessHeap () returned 0x120000 [0064.764] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0064.764] GetProcessHeap () returned 0x120000 [0064.764] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0064.764] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\SampleHeader\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x366fcec2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad349c2a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36723120, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155f0 [0064.765] GetProcessHeap () returned 0x120000 [0064.765] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0064.765] GetProcessHeap () returned 0x120000 [0064.765] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0064.765] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\SplashScreen\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36723120, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad3af563, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36749379, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0064.767] GetProcessHeap () returned 0x120000 [0064.767] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0064.767] GetProcessHeap () returned 0x120000 [0064.767] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0064.767] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\StarClub\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3676f5d7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad3b11e3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36795830, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215770 [0064.769] GetProcessHeap () returned 0x120000 [0064.769] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0064.769] GetProcessHeap () returned 0x120000 [0064.769] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0064.769] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Statistics\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x367bba89, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad3b1c47, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x367e1ce3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215130 [0064.770] GetProcessHeap () returned 0x120000 [0064.770] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0064.770] GetProcessHeap () returned 0x120000 [0064.770] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0064.770] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Store\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36807f40, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad3b269d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36807f40, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0064.770] GetProcessHeap () returned 0x120000 [0064.770] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0064.770] GetProcessHeap () returned 0x120000 [0064.771] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0064.771] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\ThemeCreation\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3682e19a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad463d9a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36a24610, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0064.777] GetProcessHeap () returned 0x120000 [0064.777] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0064.778] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\ThemeCreation\\Effects\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x368c6b0d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad4dd181, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36939219, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0064.781] GetProcessHeap () returned 0x120000 [0064.781] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0064.781] GetProcessHeap () returned 0x120000 [0064.781] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0064.783] GetProcessHeap () returned 0x120000 [0064.783] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0064.783] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\ThemeDownload\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36a24610, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad4ddf83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36a4a88e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215430 [0064.783] GetProcessHeap () returned 0x120000 [0064.783] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0064.783] GetProcessHeap () returned 0x120000 [0064.784] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0064.784] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\ThemePreview\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36a4a88e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad4de80d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36c3a737, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0064.788] GetProcessHeap () returned 0x120000 [0064.788] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0064.789] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\ThemePreview\\Backgrounds\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36a4a88e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad524849, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36abcfa3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0064.792] GetProcessHeap () returned 0x120000 [0064.792] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0064.792] GetProcessHeap () returned 0x120000 [0064.792] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0064.792] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\ThemePreview\\CardBacks\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36abcfa3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad56501d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36b09456, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0064.795] GetProcessHeap () returned 0x120000 [0064.795] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0064.795] GetProcessHeap () returned 0x120000 [0064.795] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0064.795] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\ThemePreview\\Effects\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36b2f6b4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad565f3b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36c144d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0064.803] GetProcessHeap () returned 0x120000 [0064.803] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0064.803] GetProcessHeap () returned 0x120000 [0064.803] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0064.803] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\ThemePreview\\Themes\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36c3a737, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad603ea4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36cd309d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0064.806] GetProcessHeap () returned 0x120000 [0064.806] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0064.806] GetProcessHeap () returned 0x120000 [0064.806] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0064.807] GetProcessHeap () returned 0x120000 [0064.807] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0064.808] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Themes\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36cf92fa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad604f5a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x374f1a3e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215330 [0064.809] GetProcessHeap () returned 0x120000 [0064.809] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0064.810] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Themes\\Aquarium\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36cf92fa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad660916, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36db7ebd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0064.813] GetProcessHeap () returned 0x120000 [0064.813] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0064.813] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Themes\\Aquarium\\mask\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36db7ebd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad6bc21d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36e9cce3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0064.873] GetProcessHeap () returned 0x120000 [0064.873] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0064.883] GetProcessHeap () returned 0x120000 [0064.884] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0064.894] GetProcessHeap () returned 0x120000 [0064.894] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0064.896] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Themes\\Autumn\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36e9cce3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad6c0df3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36f5b8ab, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215530 [0064.915] GetProcessHeap () returned 0x120000 [0064.915] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0064.915] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Themes\\Autumn\\mask\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36f5b8ab, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad73344c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36fcdfbb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215570 [0064.926] GetProcessHeap () returned 0x120000 [0064.926] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0064.927] GetProcessHeap () returned 0x120000 [0064.927] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0064.928] GetProcessHeap () returned 0x120000 [0064.928] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0064.928] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Themes\\Beach\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36ff4214, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad77eea6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x370ff293, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0064.930] GetProcessHeap () returned 0x120000 [0064.930] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0064.930] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Themes\\Beach\\mask\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x370ff293, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad7cec66, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x37197c02, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215770 [0064.932] GetProcessHeap () returned 0x120000 [0064.932] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0064.932] GetProcessHeap () returned 0x120000 [0064.932] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0064.932] GetProcessHeap () returned 0x120000 [0064.932] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0064.933] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Themes\\Classic\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x371bde5b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad7d10a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3728a569, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0064.934] GetProcessHeap () returned 0x120000 [0064.935] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0064.935] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Themes\\Classic\\mask\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3728a569, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad8a1f96, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x372fcc79, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215670 [0064.936] GetProcessHeap () returned 0x120000 [0064.937] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0064.937] GetProcessHeap () returned 0x120000 [0064.937] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0064.937] GetProcessHeap () returned 0x120000 [0064.937] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0064.938] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Themes\\Fable\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x372fcc79, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad912c92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x37399629, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215530 [0064.939] GetProcessHeap () returned 0x120000 [0064.939] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0064.940] GetProcessHeap () returned 0x120000 [0064.940] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0064.940] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Themes\\Jumbo\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37399629, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad991296, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x374581f1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0064.941] GetProcessHeap () returned 0x120000 [0064.941] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0064.941] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Themes\\Jumbo\\mask\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x374581f1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xada1e8d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x374f1a3e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157f0 [0064.943] GetProcessHeap () returned 0x120000 [0064.943] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0064.943] GetProcessHeap () returned 0x120000 [0064.943] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0064.944] GetProcessHeap () returned 0x120000 [0064.944] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0064.944] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Themes\\Mobile\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x374f1a3e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xada1fcdb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x374f1a3e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0064.944] GetProcessHeap () returned 0x120000 [0064.944] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0064.944] GetProcessHeap () returned 0x120000 [0064.944] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0064.944] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Themes\\Western\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x374f1a3e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xada5d89c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x376785a9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215130 [0064.946] GetProcessHeap () returned 0x120000 [0064.946] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0064.946] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Themes\\Western\\mask\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x374f1a3e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xada602f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x37593788, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157f0 [0064.950] GetProcessHeap () returned 0x120000 [0064.950] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0064.950] GetProcessHeap () returned 0x120000 [0064.950] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0064.950] GetProcessHeap () returned 0x120000 [0064.950] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0064.950] GetProcessHeap () returned 0x120000 [0064.950] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0064.950] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Tiles\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3769e802, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadb15f48, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x376c4a60, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155f0 [0065.069] GetProcessHeap () returned 0x120000 [0065.069] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0065.069] GetProcessHeap () returned 0x120000 [0065.069] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0065.069] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Tournament\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x376ebbff, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadb1841a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x377d0a4a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215670 [0065.071] GetProcessHeap () returned 0x120000 [0065.071] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0065.071] GetProcessHeap () returned 0x120000 [0065.071] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0065.071] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\XboxControl\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x377d0a4a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadb19197, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x377f6ca3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0065.072] GetProcessHeap () returned 0x120000 [0065.072] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0065.072] GetProcessHeap () returned 0x120000 [0065.072] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0065.072] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\XboxFlow\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x377f6ca3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadb19d17, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x377f6ca3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152b0 [0065.072] GetProcessHeap () returned 0x120000 [0065.072] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0065.072] GetProcessHeap () returned 0x120000 [0065.072] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0065.073] GetProcessHeap () returned 0x120000 [0065.073] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0065.073] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Avatars\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37974437, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadb1ac8e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x37974437, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155f0 [0065.074] GetProcessHeap () returned 0x120000 [0065.074] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0065.074] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Avatars\\Assets\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37974437, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadb1bdb7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x37974437, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0065.074] GetProcessHeap () returned 0x120000 [0065.074] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0065.074] GetProcessHeap () returned 0x120000 [0065.074] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0065.075] GetProcessHeap () returned 0x120000 [0065.075] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0065.075] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc96ea5b4, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xdae86288, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xdae86288, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215770 [0065.076] GetProcessHeap () returned 0x120000 [0065.076] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0065.076] GetProcessHeap () returned 0x120000 [0065.076] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0065.076] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\SharpDXEngine\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37e86909, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadb1ce25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x37e86909, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215170 [0065.076] GetProcessHeap () returned 0x120000 [0065.076] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0065.076] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\SharpDXEngine\\Rendering\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37e86909, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadb1d39d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x37e86909, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215570 [0065.076] GetProcessHeap () returned 0x120000 [0065.076] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0065.076] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\SharpDXEngine\\Rendering\\Shaders\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37e86909, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadb1d9b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x37e86909, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215530 [0065.077] GetProcessHeap () returned 0x120000 [0065.077] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0065.077] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\SharpDXEngine\\Rendering\\Shaders\\Builtin\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37e86909, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadb1de6c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x37ef901a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0065.077] GetProcessHeap () returned 0x120000 [0065.077] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0065.078] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\SharpDXEngine\\Rendering\\Shaders\\Builtin\\Bin\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37e86909, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadb98b45, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x37ef901a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0065.080] GetProcessHeap () returned 0x120000 [0065.080] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0065.080] GetProcessHeap () returned 0x120000 [0065.081] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0065.081] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\SharpDXEngine\\Rendering\\Shaders\\Builtin\\HLSL\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37ef901a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadbfe34d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x37f709ad, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0065.083] GetProcessHeap () returned 0x120000 [0065.083] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0065.083] GetProcessHeap () returned 0x120000 [0065.083] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0065.083] GetProcessHeap () returned 0x120000 [0065.083] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0065.084] GetProcessHeap () returned 0x120000 [0065.084] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0065.084] GetProcessHeap () returned 0x120000 [0065.085] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0065.085] GetProcessHeap () returned 0x120000 [0065.085] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0065.085] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\_Resources\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34110fcc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabf2fada, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3421c04b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0065.088] GetProcessHeap () returned 0x120000 [0065.088] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0065.088] GetProcessHeap () returned 0x120000 [0065.088] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0065.088] GetProcessHeap () returned 0x120000 [0065.088] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0065.089] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_split.scale-100_8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a98e846, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xcb314296, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcb314296, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0065.098] GetProcessHeap () returned 0x120000 [0065.098] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0065.098] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a9dacf8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadc94d2f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6aa271af, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215170 [0065.104] GetProcessHeap () returned 0x120000 [0065.104] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0065.104] GetProcessHeap () returned 0x120000 [0065.104] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0065.104] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xcb314296, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xcb314296, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcb314296, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152b0 [0065.108] GetProcessHeap () returned 0x120000 [0065.108] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0065.108] GetProcessHeap () returned 0x120000 [0065.108] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0065.109] GetProcessHeap () returned 0x120000 [0065.109] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0065.109] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69c2543c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xcb2ee04f, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcb2ee04f, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215830 [0065.135] GetProcessHeap () returned 0x120000 [0065.135] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0065.136] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69c2543c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadd6c838, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69c2543c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215170 [0065.136] GetProcessHeap () returned 0x120000 [0065.136] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0065.136] GetProcessHeap () returned 0x120000 [0065.136] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0065.136] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xcb2ee04f, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xcb2ee04f, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcb2ee04f, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0065.138] GetProcessHeap () returned 0x120000 [0065.138] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0065.139] GetProcessHeap () returned 0x120000 [0065.139] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0065.139] GetProcessHeap () returned 0x120000 [0065.139] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0065.140] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69e152fc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xcb2ee04f, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcb2ee04f, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155f0 [0065.141] GetProcessHeap () returned 0x120000 [0065.141] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0065.142] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69e3b535, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadd6eb7b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69e3b535, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0065.143] GetProcessHeap () returned 0x120000 [0065.143] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0065.143] GetProcessHeap () returned 0x120000 [0065.143] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0065.143] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69e879ec, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaddf87aa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69efa0fc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215830 [0065.145] GetProcessHeap () returned 0x120000 [0065.145] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0065.145] GetProcessHeap () returned 0x120000 [0065.145] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0065.145] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_x64__8wekyb3d8bbwe\\Microsoft.StickyNotes.Views\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a8a9a20, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaddf973d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6a8a9a20, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158f0 [0065.145] GetProcessHeap () returned 0x120000 [0065.145] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0065.145] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_x64__8wekyb3d8bbwe\\Microsoft.StickyNotes.Views\\Images\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a8a9a20, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaddfa4dd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6a8a9a20, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0065.146] GetProcessHeap () returned 0x120000 [0065.146] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0065.146] GetProcessHeap () returned 0x120000 [0065.146] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0065.146] GetProcessHeap () returned 0x120000 [0065.146] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0065.147] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xcb2ee04f, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xd8b5b46d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xd8b5b46d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0065.147] GetProcessHeap () returned 0x120000 [0065.147] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0065.147] GetProcessHeap () returned 0x120000 [0065.147] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0065.147] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_x64__8wekyb3d8bbwe\\Resources\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a8cfc83, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaddfb0cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6a8cfc83, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0065.147] GetProcessHeap () returned 0x120000 [0065.147] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0065.147] GetProcessHeap () returned 0x120000 [0065.147] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0065.147] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_x64__8wekyb3d8bbwe\\_Resources\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69e61793, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadd6e3ea, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69e61793, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152b0 [0065.148] GetProcessHeap () returned 0x120000 [0065.148] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0065.148] GetProcessHeap () returned 0x120000 [0065.148] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0065.148] GetProcessHeap () returned 0x120000 [0065.148] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0065.149] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa16112ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xcd2853a0, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcd2853a0, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152b0 [0065.327] GetProcessHeap () returned 0x120000 [0065.327] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0065.328] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa16112ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadea87cd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa16112ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0065.329] GetProcessHeap () returned 0x120000 [0065.329] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0065.329] GetProcessHeap () returned 0x120000 [0065.329] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0065.329] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xcd2853a0, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xcd2853a0, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcd2853a0, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0065.330] GetProcessHeap () returned 0x120000 [0065.330] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0065.330] GetProcessHeap () returned 0x120000 [0065.330] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0065.331] GetProcessHeap () returned 0x120000 [0065.331] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0065.331] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa17daefc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xcd2853a0, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcd2853a0, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0065.333] GetProcessHeap () returned 0x120000 [0065.333] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0065.333] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1801155, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadeaa4f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa18273b3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0065.334] GetProcessHeap () returned 0x120000 [0065.334] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0065.334] GetProcessHeap () returned 0x120000 [0065.334] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0065.334] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa18273b3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadeab676, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa2f98f1f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215130 [0065.335] GetProcessHeap () returned 0x120000 [0065.335] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0065.335] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\Assets\\Fonts\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa18273b3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadeac2bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa18273b3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215770 [0065.339] GetProcessHeap () returned 0x120000 [0065.339] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0065.339] GetProcessHeap () returned 0x120000 [0065.339] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0065.339] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\Assets\\Images\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa184d60c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadeacbdb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa184d60c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157b0 [0065.340] GetProcessHeap () returned 0x120000 [0065.340] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0065.341] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\Assets\\Images\\Stickers\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa184d60c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadff5e06, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa1e1d1ec, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0065.342] GetProcessHeap () returned 0x120000 [0065.342] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0065.342] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\Assets\\Images\\Stickers\\Thumbnails\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1e1d1ec, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae053910, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa2937ee9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215230 [0065.347] GetProcessHeap () returned 0x120000 [0065.347] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0065.347] GetProcessHeap () returned 0x120000 [0065.347] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0065.347] GetProcessHeap () returned 0x120000 [0065.348] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0065.348] GetProcessHeap () returned 0x120000 [0065.348] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0065.348] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\Assets\\Logos\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa29843a0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae054a1f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa2eff0ed, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215830 [0065.349] GetProcessHeap () returned 0x120000 [0065.349] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0065.349] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\Assets\\Logos\\BadgeLogo\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa29843a0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae12b3bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa29d0853, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215170 [0065.352] GetProcessHeap () returned 0x120000 [0065.352] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0065.352] GetProcessHeap () returned 0x120000 [0065.352] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0065.352] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\Assets\\Logos\\SplashScreen\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa29d0853, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae1f1d1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa2b01b2f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0065.354] GetProcessHeap () returned 0x120000 [0065.354] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0065.354] GetProcessHeap () returned 0x120000 [0065.354] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0065.354] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\Assets\\Logos\\Square150x150\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2b01b2f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae1f47d0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa2caac59, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0065.356] GetProcessHeap () returned 0x120000 [0065.356] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0065.356] GetProcessHeap () returned 0x120000 [0065.356] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0065.356] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\Assets\\Logos\\Square310x310\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2cafa91, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae2671bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa2cfbf72, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154f0 [0065.358] GetProcessHeap () returned 0x120000 [0065.358] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0065.358] GetProcessHeap () returned 0x120000 [0065.358] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0065.358] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\Assets\\Logos\\Square44x44\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2d221c7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae268742, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa2e586d2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156b0 [0065.360] GetProcessHeap () returned 0x120000 [0065.361] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0065.361] GetProcessHeap () returned 0x120000 [0065.361] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0065.361] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\Assets\\Logos\\Square71x71\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2e586d2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae26a4c5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa2e7e910, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0065.363] GetProcessHeap () returned 0x120000 [0065.363] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0065.363] GetProcessHeap () returned 0x120000 [0065.363] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0065.363] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\Assets\\Logos\\StoreLogo\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2eb2c15, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae2b9598, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa2ed8e94, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0065.365] GetProcessHeap () returned 0x120000 [0065.365] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0065.365] GetProcessHeap () returned 0x120000 [0065.365] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0065.365] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\Assets\\Logos\\Wide310x150\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2eff0ed, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae32081c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa2f4b5a4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215230 [0065.367] GetProcessHeap () returned 0x120000 [0065.367] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0065.367] GetProcessHeap () returned 0x120000 [0065.367] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0065.368] GetProcessHeap () returned 0x120000 [0065.368] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0065.368] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\Assets\\PDP\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2f72ca1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae32171a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa2f72ca1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0065.610] GetProcessHeap () returned 0x120000 [0065.610] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0065.610] GetProcessHeap () returned 0x120000 [0065.611] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0065.611] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\Assets\\Videos\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2f98f1f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae321d67, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa2f98f1f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215530 [0065.611] GetProcessHeap () returned 0x120000 [0065.611] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0065.611] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\Assets\\Videos\\Help\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2f98f1f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae3225d2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa2fe53db, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215830 [0065.611] GetProcessHeap () returned 0x120000 [0065.612] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0065.612] GetProcessHeap () returned 0x120000 [0065.612] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0065.612] GetProcessHeap () returned 0x120000 [0065.612] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0065.613] GetProcessHeap () returned 0x120000 [0065.613] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0065.613] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\Content\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa30ca1fc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae322e08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa30ca1fc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156b0 [0065.613] GetProcessHeap () returned 0x120000 [0065.613] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0065.613] GetProcessHeap () returned 0x120000 [0065.613] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0065.613] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\CoreEngine\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa30f045a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae32349e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa30f045a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0065.614] GetProcessHeap () returned 0x120000 [0065.614] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0065.614] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\CoreEngine\\Data\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa30f045a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae323c6c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa31af01d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0065.614] GetProcessHeap () returned 0x120000 [0065.614] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0065.614] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\CoreEngine\\Data\\3DBrush\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa30f045a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae3c2040, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa313c90c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215770 [0065.616] GetProcessHeap () returned 0x120000 [0065.616] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0065.616] GetProcessHeap () returned 0x120000 [0065.616] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0065.616] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\CoreEngine\\Data\\BrushProfile\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3162b66, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae3c32ff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa3162b66, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0065.617] GetProcessHeap () returned 0x120000 [0065.617] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0065.617] GetProcessHeap () returned 0x120000 [0065.617] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0065.618] GetProcessHeap () returned 0x120000 [0065.618] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0065.618] GetProcessHeap () returned 0x120000 [0065.618] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0065.618] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xcd2853a0, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xcd2853a0, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcd2853a0, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152b0 [0065.619] GetProcessHeap () returned 0x120000 [0065.619] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0065.619] GetProcessHeap () returned 0x120000 [0065.619] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0065.619] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\SurfaceProfiles\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa442943f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae416fc0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa4580975, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215570 [0065.621] GetProcessHeap () returned 0x120000 [0065.621] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0065.621] GetProcessHeap () returned 0x120000 [0065.621] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0065.622] GetProcessHeap () returned 0x120000 [0065.622] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0065.622] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb21852be, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae4c23b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69869570, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0065.625] GetProcessHeap () returned 0x120000 [0065.625] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0065.626] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb21ab500, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae4c3e79, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xb21ab500, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215770 [0065.626] GetProcessHeap () returned 0x120000 [0065.626] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0065.626] GetProcessHeap () returned 0x120000 [0065.626] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0065.626] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x69869570, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd88c5fc4, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xd88c5fc4, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215570 [0065.626] GetProcessHeap () returned 0x120000 [0065.626] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0065.626] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd88c5fc4, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xd88c5fc4, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xd88c5fc4, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0065.627] GetProcessHeap () returned 0x120000 [0065.627] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0065.627] GetProcessHeap () returned 0x120000 [0065.627] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0065.628] GetProcessHeap () returned 0x120000 [0065.628] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0065.628] GetProcessHeap () returned 0x120000 [0065.628] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0065.628] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb23e79d9, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae58079f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69b6448c, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0065.629] GetProcessHeap () returned 0x120000 [0065.629] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0065.630] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb240dc54, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae5814c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xb240dc54, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0065.630] GetProcessHeap () returned 0x120000 [0065.630] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0065.630] GetProcessHeap () returned 0x120000 [0065.630] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0065.630] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x69b6448c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd9da2999, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xd9da2999, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157f0 [0065.630] GetProcessHeap () returned 0x120000 [0065.630] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0065.630] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9da2999, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xd9da2999, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xd9da2999, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215670 [0065.631] GetProcessHeap () returned 0x120000 [0065.631] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0065.631] GetProcessHeap () returned 0x120000 [0065.631] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0065.631] GetProcessHeap () returned 0x120000 [0065.631] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0065.632] GetProcessHeap () returned 0x120000 [0065.632] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0065.632] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f97eba2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae61172a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5c39f778, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0065.633] GetProcessHeap () returned 0x120000 [0065.633] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0065.633] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f97eba2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae6123e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4f97eba2, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155f0 [0065.634] GetProcessHeap () returned 0x120000 [0065.634] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0065.634] GetProcessHeap () returned 0x120000 [0065.634] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0065.634] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5c39f778, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xdae53146, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xdae53146, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0065.634] GetProcessHeap () returned 0x120000 [0065.634] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0065.634] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdae53146, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x12ce6df5, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0x12ce6df5, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215230 [0065.634] GetProcessHeap () returned 0x120000 [0065.634] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0065.634] GetProcessHeap () returned 0x120000 [0065.634] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0065.635] GetProcessHeap () returned 0x120000 [0065.635] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0065.635] GetProcessHeap () returned 0x120000 [0065.635] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0065.635] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4fbe1144, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae652687, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5be1c081, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0065.637] GetProcessHeap () returned 0x120000 [0065.637] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0065.637] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4fbe1144, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae653223, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4fbe1144, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0065.637] GetProcessHeap () returned 0x120000 [0065.637] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0065.637] GetProcessHeap () returned 0x120000 [0065.637] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0065.637] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5be1c081, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xdb90dade, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xdb90dade, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156b0 [0065.638] GetProcessHeap () returned 0x120000 [0065.638] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0065.638] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdb90dade, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xd257af62, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xd257af62, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0065.638] GetProcessHeap () returned 0x120000 [0065.638] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0065.638] GetProcessHeap () returned 0x120000 [0065.638] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0065.639] GetProcessHeap () returned 0x120000 [0065.639] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0065.639] GetProcessHeap () returned 0x120000 [0065.639] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0065.639] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x569db5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb046ec20, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb046ec20, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0065.641] GetProcessHeap () returned 0x120000 [0065.641] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0065.641] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b6267, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae6c9f8a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5b6267, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215570 [0065.641] GetProcessHeap () returned 0x120000 [0065.641] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0065.641] GetProcessHeap () returned 0x120000 [0065.641] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0065.641] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb046ec20, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb046ec20, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdb9fcec, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0065.643] GetProcessHeap () returned 0x120000 [0065.643] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0065.643] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdb79a84, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xdb79a84, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xdb9fcec, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215170 [0065.643] GetProcessHeap () returned 0x120000 [0065.643] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0065.643] GetProcessHeap () returned 0x120000 [0065.643] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0065.644] GetProcessHeap () returned 0x120000 [0065.644] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0065.644] GetProcessHeap () returned 0x120000 [0065.644] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0065.644] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf855c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf7c444d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xaf7c444d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155f0 [0065.864] GetProcessHeap () returned 0x120000 [0065.864] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0065.864] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc44a0e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae726a29, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc44a0e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0065.865] GetProcessHeap () returned 0x120000 [0065.865] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0065.866] GetProcessHeap () returned 0x120000 [0065.866] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0065.866] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xaf7c444d, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xaf7c444d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd96398a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215130 [0065.866] GetProcessHeap () returned 0x120000 [0065.866] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0065.866] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd96398a, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xd96398a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xd96398a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0065.867] GetProcessHeap () returned 0x120000 [0065.867] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0065.867] GetProcessHeap () returned 0x120000 [0065.867] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0065.868] GetProcessHeap () returned 0x120000 [0065.868] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0065.868] GetProcessHeap () returned 0x120000 [0065.868] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0065.868] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x115e8dfa, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xae7e244c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x12f3e2a7, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0065.869] GetProcessHeap () returned 0x120000 [0065.869] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0065.870] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11909f6c, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xae7e4415, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x11909f6c, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215770 [0065.871] GetProcessHeap () returned 0x120000 [0065.871] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0065.871] GetProcessHeap () returned 0x120000 [0065.871] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0065.871] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x12f3e2a7, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xdbfe8744, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xdbfe8744, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0065.872] GetProcessHeap () returned 0x120000 [0065.872] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0065.872] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdbfe8744, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa8c8ab51, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xa8c8ab51, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0065.873] GetProcessHeap () returned 0x120000 [0065.873] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0065.873] GetProcessHeap () returned 0x120000 [0065.873] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0065.873] GetProcessHeap () returned 0x120000 [0065.873] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0065.873] GetProcessHeap () returned 0x120000 [0065.873] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0065.873] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x13f7c62e, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xae87e1ef, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x164e3d2d, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0065.875] GetProcessHeap () returned 0x120000 [0065.875] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0065.875] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14120099, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xae88003f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x14120099, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0065.876] GetProcessHeap () returned 0x120000 [0065.876] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0065.876] GetProcessHeap () returned 0x120000 [0065.876] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0065.876] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x164e3d2d, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xdc925941, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xdc925941, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0065.877] GetProcessHeap () returned 0x120000 [0065.877] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0065.877] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc925941, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa8e2e542, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xa8e2e542, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215770 [0065.877] GetProcessHeap () returned 0x120000 [0065.877] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0065.877] GetProcessHeap () returned 0x120000 [0065.877] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0065.878] GetProcessHeap () returned 0x120000 [0065.878] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0065.878] GetProcessHeap () returned 0x120000 [0065.878] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0065.878] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb26701cd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae8ff986, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69da07d7, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0065.880] GetProcessHeap () returned 0x120000 [0065.880] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0065.880] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb2696342, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae900a2d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xb2696342, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0065.881] GetProcessHeap () returned 0x120000 [0065.881] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0065.881] GetProcessHeap () returned 0x120000 [0065.881] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0065.881] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x69da07d7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xdd0e53b5, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xdd0e53b5, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0065.881] GetProcessHeap () returned 0x120000 [0065.881] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0065.881] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdd0e53b5, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xdd0e53b5, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xdd0e53b5, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0065.882] GetProcessHeap () returned 0x120000 [0065.882] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0065.882] GetProcessHeap () returned 0x120000 [0065.882] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0065.882] GetProcessHeap () returned 0x120000 [0065.882] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0065.882] GetProcessHeap () returned 0x120000 [0065.882] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0065.882] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb26e2784, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae9b674b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69fb68e3, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154f0 [0065.884] GetProcessHeap () returned 0x120000 [0065.884] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0065.884] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb2708a61, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae9b8a01, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xb2708a61, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0065.885] GetProcessHeap () returned 0x120000 [0065.886] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0065.886] GetProcessHeap () returned 0x120000 [0065.886] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0065.886] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x69fb68e3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xddc386b4, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xddc386b4, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0065.886] GetProcessHeap () returned 0x120000 [0065.886] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0065.886] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xddc386b4, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xddc386b4, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xddc386b4, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215530 [0065.887] GetProcessHeap () returned 0x120000 [0065.887] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0065.887] GetProcessHeap () returned 0x120000 [0065.887] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0065.887] GetProcessHeap () returned 0x120000 [0065.887] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0065.887] GetProcessHeap () returned 0x120000 [0065.887] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0065.887] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ff4e801, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaea38daa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5c77f49b, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215530 [0065.889] GetProcessHeap () returned 0x120000 [0065.889] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0065.890] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ff74b34, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaea3adf2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4ff74b34, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0065.890] GetProcessHeap () returned 0x120000 [0065.890] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0065.890] GetProcessHeap () returned 0x120000 [0065.890] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0065.890] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5c77f49b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xde4445ea, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xde4445ea, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0065.890] GetProcessHeap () returned 0x120000 [0065.891] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0065.891] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde4445ea, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xd28c236f, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xd28c236f, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215770 [0065.891] GetProcessHeap () returned 0x120000 [0065.891] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0065.891] GetProcessHeap () returned 0x120000 [0065.891] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0065.891] GetProcessHeap () returned 0x120000 [0065.891] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0065.891] GetProcessHeap () returned 0x120000 [0065.891] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0065.892] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ffc0fdc, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaeaf585c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5c58f618, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0065.893] GetProcessHeap () returned 0x120000 [0065.893] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0065.893] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ffc0fdc, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaeaf6ce9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4ffc0fdc, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215270 [0065.894] GetProcessHeap () returned 0x120000 [0065.894] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0065.894] GetProcessHeap () returned 0x120000 [0065.894] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0065.894] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5c58f618, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xdefbdb44, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xdefbdb44, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0065.894] GetProcessHeap () returned 0x120000 [0065.894] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0065.895] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdefbdb44, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xd28e85c8, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xd28e85c8, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215530 [0065.895] GetProcessHeap () returned 0x120000 [0065.895] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0065.895] GetProcessHeap () returned 0x120000 [0065.895] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0065.895] GetProcessHeap () returned 0x120000 [0065.895] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0065.904] GetProcessHeap () returned 0x120000 [0065.904] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0065.904] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1096e68, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae30dca7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xae30dca7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0065.905] GetProcessHeap () returned 0x120000 [0065.905] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0065.906] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10e331a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaeb8d82b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x10e331a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0065.906] GetProcessHeap () returned 0x120000 [0065.906] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0065.906] GetProcessHeap () returned 0x120000 [0065.906] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0065.906] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xae30dca7, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xae30dca7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd51152b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0065.991] GetProcessHeap () returned 0x120000 [0065.991] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0065.991] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd51152b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xd51152b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xd51152b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0065.992] GetProcessHeap () returned 0x120000 [0065.992] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0065.992] GetProcessHeap () returned 0x120000 [0065.992] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0065.993] GetProcessHeap () returned 0x120000 [0065.993] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0065.993] GetProcessHeap () returned 0x120000 [0065.993] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0065.993] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11c813b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad7e0bf4, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xad7e0bf4, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215130 [0065.994] GetProcessHeap () returned 0x120000 [0065.994] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0065.995] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1260aaa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaec89e61, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1260aaa, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0065.995] GetProcessHeap () returned 0x120000 [0065.995] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0065.995] GetProcessHeap () returned 0x120000 [0065.995] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0065.995] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xad7e0bf4, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xad7e0bf4, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd478c3a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157b0 [0065.995] GetProcessHeap () returned 0x120000 [0065.995] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0065.995] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd478c3a, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xd478c3a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xd478c3a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0065.996] GetProcessHeap () returned 0x120000 [0065.996] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0065.996] GetProcessHeap () returned 0x120000 [0065.996] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0065.996] GetProcessHeap () returned 0x120000 [0065.996] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0065.996] GetProcessHeap () returned 0x120000 [0065.996] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0065.996] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f6d5e4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad0dfe61, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xad0dfe61, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0065.998] GetProcessHeap () returned 0x120000 [0065.998] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0065.998] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f93841, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaecdd562, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x33f93841, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152b0 [0066.001] GetProcessHeap () returned 0x120000 [0066.001] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.001] GetProcessHeap () returned 0x120000 [0066.001] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.001] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xad0dfe61, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xad0dfe61, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd64283b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155f0 [0066.002] GetProcessHeap () returned 0x120000 [0066.002] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0066.002] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd61c5d8, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xd61c5d8, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xd6b4f3c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0066.002] GetProcessHeap () returned 0x120000 [0066.002] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0066.003] GetProcessHeap () returned 0x120000 [0066.003] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.003] GetProcessHeap () returned 0x120000 [0066.003] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0066.003] GetProcessHeap () returned 0x120000 [0066.003] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0066.003] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33fb9a9b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaca2b3ac, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xaca2b3ac, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215270 [0066.004] GetProcessHeap () returned 0x120000 [0066.004] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.005] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33fdfcf4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaed7d57f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x33fdfcf4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215330 [0066.005] GetProcessHeap () returned 0x120000 [0066.005] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.005] GetProcessHeap () returned 0x120000 [0066.005] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.005] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xaca2b3ac, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xaca2b3ac, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd40665d, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215570 [0066.008] GetProcessHeap () returned 0x120000 [0066.008] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0066.008] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd40665d, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xd40665d, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xd40665d, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215530 [0066.008] GetProcessHeap () returned 0x120000 [0066.008] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0066.008] GetProcessHeap () returned 0x120000 [0066.008] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.009] GetProcessHeap () returned 0x120000 [0066.009] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0066.009] GetProcessHeap () returned 0x120000 [0066.009] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0066.009] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b404f13, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xaee25a0f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1c25330e, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0066.010] GetProcessHeap () returned 0x120000 [0066.010] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.011] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b667506, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xaee2755c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1b68d6c9, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0066.011] GetProcessHeap () returned 0x120000 [0066.011] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.011] GetProcessHeap () returned 0x120000 [0066.011] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.011] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1c25330e, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xdf70aeab, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xdf70aeab, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215830 [0066.012] GetProcessHeap () returned 0x120000 [0066.012] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0066.012] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdf70aeab, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa8fd1f17, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xa8fd1f17, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0066.012] GetProcessHeap () returned 0x120000 [0066.012] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0066.013] GetProcessHeap () returned 0x120000 [0066.013] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.013] GetProcessHeap () returned 0x120000 [0066.013] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0066.013] GetProcessHeap () returned 0x120000 [0066.013] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0066.013] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ac94c, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xaef00b37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1dc41199, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215170 [0066.015] GetProcessHeap () returned 0x120000 [0066.015] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.016] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d3c29bb, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xaef031dc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1d3c29bb, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152b0 [0066.016] GetProcessHeap () returned 0x120000 [0066.016] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.016] GetProcessHeap () returned 0x120000 [0066.016] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.016] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1dc41199, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xdfdbf898, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xdfdbf898, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215330 [0066.017] GetProcessHeap () returned 0x120000 [0066.017] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0066.017] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdfdbf898, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa904464d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xa904464d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0066.017] GetProcessHeap () returned 0x120000 [0066.017] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0066.018] GetProcessHeap () returned 0x120000 [0066.018] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.018] GetProcessHeap () returned 0x120000 [0066.018] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0066.018] GetProcessHeap () returned 0x120000 [0066.018] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0066.018] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59460ee7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd1ed095d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd1ed095d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0066.020] GetProcessHeap () returned 0x120000 [0066.020] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.020] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\animations\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x595b8410, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaef96f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x597b1fa2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0066.022] GetProcessHeap () returned 0x120000 [0066.022] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.022] GetProcessHeap () returned 0x120000 [0066.022] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.022] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594ad391, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaef981fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x594ad391, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0066.022] GetProcessHeap () returned 0x120000 [0066.022] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.022] GetProcessHeap () returned 0x120000 [0066.023] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.023] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\en-gb\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59b93c35, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf014f53, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x59c527fd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0066.025] GetProcessHeap () returned 0x120000 [0066.025] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.025] GetProcessHeap () returned 0x120000 [0066.025] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.025] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\en-us\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59c527fd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf0838ba, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x59e1c43f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158f0 [0066.026] GetProcessHeap () returned 0x120000 [0066.026] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0066.026] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\en-us\\jscripts\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59c9ecb4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf084920, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x59c9ecb4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0066.027] GetProcessHeap () returned 0x120000 [0066.027] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0066.027] GetProcessHeap () returned 0x120000 [0066.027] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0066.027] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\en-us\\pages\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59e1c43f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf085638, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x59e1c43f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215770 [0066.027] GetProcessHeap () returned 0x120000 [0066.027] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0066.027] GetProcessHeap () returned 0x120000 [0066.027] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0066.027] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\en-us\\styles\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59e1c43f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf0862ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x59e4269d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0066.028] GetProcessHeap () returned 0x120000 [0066.028] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0066.028] GetProcessHeap () returned 0x120000 [0066.028] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.028] GetProcessHeap () returned 0x120000 [0066.028] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.029] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\font\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59e4269d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf086b6a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x59e4269d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0066.029] GetProcessHeap () returned 0x120000 [0066.029] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.029] GetProcessHeap () returned 0x120000 [0066.029] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.029] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\fonts\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59e4269d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf0873c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x59e4269d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0066.029] GetProcessHeap () returned 0x120000 [0066.029] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.029] GetProcessHeap () returned 0x120000 [0066.029] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.029] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\images\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a00c2e3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf19691b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5b6b3675, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0066.120] GetProcessHeap () returned 0x120000 [0066.120] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0066.120] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\images\\contrast-black\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a8f7f56, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf27329f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5acfe8e6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0066.140] GetProcessHeap () returned 0x120000 [0066.140] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0066.140] GetProcessHeap () returned 0x120000 [0066.140] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0066.140] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\images\\contrast-white\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5acfe8e6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf35a206, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5b07f008, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0066.162] GetProcessHeap () returned 0x120000 [0066.162] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0066.184] GetProcessHeap () returned 0x120000 [0066.184] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0066.184] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\images\\osf\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b665011, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf3b3b3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5b6b3675, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215570 [0066.186] GetProcessHeap () returned 0x120000 [0066.186] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0066.186] GetProcessHeap () returned 0x120000 [0066.186] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.187] GetProcessHeap () returned 0x120000 [0066.187] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.187] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\jscripts\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b6b3675, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf3b4e8d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5b6d8db2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0066.187] GetProcessHeap () returned 0x120000 [0066.187] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.187] GetProcessHeap () returned 0x120000 [0066.187] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.188] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\manifests\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b6d8db2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf3b57d0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5b6d8db2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215130 [0066.188] GetProcessHeap () returned 0x120000 [0066.188] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.188] GetProcessHeap () returned 0x120000 [0066.188] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.188] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd1ed095d, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xd1ed095d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd1ed095d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215770 [0066.189] GetProcessHeap () returned 0x120000 [0066.189] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.189] GetProcessHeap () returned 0x120000 [0066.189] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.189] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\pages\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5db81172, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf3b6b86, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5db81172, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157b0 [0066.190] GetProcessHeap () returned 0x120000 [0066.190] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.190] GetProcessHeap () returned 0x120000 [0066.190] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.190] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\sr-cyrl-cs\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5dde3722, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf3b7384, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5dde3722, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0066.190] GetProcessHeap () returned 0x120000 [0066.190] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.190] GetProcessHeap () returned 0x120000 [0066.190] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.190] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\sr-latn-cs\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5dde3722, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf3b7fcf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5dde3722, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215230 [0066.190] GetProcessHeap () returned 0x120000 [0066.190] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.190] GetProcessHeap () returned 0x120000 [0066.190] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.190] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\xaml\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5de0997c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf3b8a1c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5de0997c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215830 [0066.191] GetProcessHeap () returned 0x120000 [0066.191] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0066.191] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\xaml\\onenote\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5de0997c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf435cd5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5dea7b9b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215170 [0066.193] GetProcessHeap () returned 0x120000 [0066.193] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0066.193] GetProcessHeap () returned 0x120000 [0066.193] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.193] GetProcessHeap () returned 0x120000 [0066.193] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0066.193] GetProcessHeap () returned 0x120000 [0066.193] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0066.193] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_2015.7668.58071.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58fa379e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd1eaa713, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd1eaa713, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0066.195] GetProcessHeap () returned 0x120000 [0066.195] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.195] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_2015.7668.58071.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58fa379e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf4f3df1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x58fa379e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0066.195] GetProcessHeap () returned 0x120000 [0066.195] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.195] GetProcessHeap () returned 0x120000 [0066.195] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.195] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_2015.7668.58071.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd1eaa713, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xd1eaa713, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd1eaa713, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0066.196] GetProcessHeap () returned 0x120000 [0066.196] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.196] GetProcessHeap () returned 0x120000 [0066.196] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0066.197] GetProcessHeap () returned 0x120000 [0066.197] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0066.197] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa599a57e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf561945, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6e6321cd, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0066.201] GetProcessHeap () returned 0x120000 [0066.201] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.202] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa599a57e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf5639e6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa599a57e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0066.204] GetProcessHeap () returned 0x120000 [0066.205] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.205] GetProcessHeap () returned 0x120000 [0066.205] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.205] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa59c07d4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf5645f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa59c07d4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215770 [0066.205] GetProcessHeap () returned 0x120000 [0066.205] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0066.205] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\Assets\\WebPlayer\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa59c07d4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf5e05e2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa5da4145, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0066.211] GetProcessHeap () returned 0x120000 [0066.211] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0066.211] GetProcessHeap () returned 0x120000 [0066.211] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.211] GetProcessHeap () returned 0x120000 [0066.211] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.212] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\en-us\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa602cafb, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf65cc53, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa611194e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215530 [0066.213] GetProcessHeap () returned 0x120000 [0066.214] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.214] GetProcessHeap () returned 0x120000 [0066.214] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.214] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\fonts\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa611194e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf65eae6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa611194e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0066.541] GetProcessHeap () returned 0x120000 [0066.541] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.541] GetProcessHeap () returned 0x120000 [0066.541] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.541] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\images\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa611194e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf75f944, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6794654, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215330 [0066.545] GetProcessHeap () returned 0x120000 [0066.545] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0066.545] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\images\\contrast-black\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa62b52e7, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf83e928, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6373eb6, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0066.548] GetProcessHeap () returned 0x120000 [0066.548] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0066.548] GetProcessHeap () returned 0x120000 [0066.548] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0066.548] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\images\\contrast-white\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6373eb6, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf8d0215, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa644c9ea, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0066.550] GetProcessHeap () returned 0x120000 [0066.551] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0066.552] GetProcessHeap () returned 0x120000 [0066.552] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.553] GetProcessHeap () returned 0x120000 [0066.553] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.553] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6e6321cd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaf8d1431, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6e6321cd, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0066.554] GetProcessHeap () returned 0x120000 [0066.554] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.554] GetProcessHeap () returned 0x120000 [0066.554] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.554] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\storyclientui_xaml\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa786af81, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf8d1b15, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa786af81, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0066.555] GetProcessHeap () returned 0x120000 [0066.555] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0066.555] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\storyclientui_xaml\\view\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa786af81, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf8d21fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa78911fc, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155f0 [0066.555] GetProcessHeap () returned 0x120000 [0066.555] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0066.555] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\storyclientui_xaml\\view\\landing\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa786af81, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf8d2741, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa78911fc, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215570 [0066.556] GetProcessHeap () returned 0x120000 [0066.556] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0066.556] GetProcessHeap () returned 0x120000 [0066.556] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0066.556] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\storyclientui_xaml\\view\\shared\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa78911fc, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf8d2bfe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa78911fc, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215270 [0066.557] GetProcessHeap () returned 0x120000 [0066.557] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0066.557] GetProcessHeap () returned 0x120000 [0066.557] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0066.557] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\storyclientui_xaml\\view\\story\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa78911fc, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf943e43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa78b7317, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154f0 [0066.559] GetProcessHeap () returned 0x120000 [0066.559] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0066.559] GetProcessHeap () returned 0x120000 [0066.559] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0066.559] GetProcessHeap () returned 0x120000 [0066.559] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.560] GetProcessHeap () returned 0x120000 [0066.560] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.560] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\xaml\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7c24a57, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf945b92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa7c24a57, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0066.560] GetProcessHeap () returned 0x120000 [0066.560] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0066.560] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\xaml\\mso\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7c24a57, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf9b0041, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa7c4acb9, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0066.562] GetProcessHeap () returned 0x120000 [0066.562] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0066.562] GetProcessHeap () returned 0x120000 [0066.562] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.562] GetProcessHeap () returned 0x120000 [0066.562] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0066.563] GetProcessHeap () returned 0x120000 [0066.563] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0066.563] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa57d3c26, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xafabb342, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6e60bed5, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0066.565] GetProcessHeap () returned 0x120000 [0066.565] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.565] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa57d3c26, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xafabc4b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa57d3c26, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215670 [0066.565] GetProcessHeap () returned 0x120000 [0066.565] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.566] GetProcessHeap () returned 0x120000 [0066.566] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.566] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6e60bed5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xafabcf70, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6e60bed5, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0066.566] GetProcessHeap () returned 0x120000 [0066.566] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.566] GetProcessHeap () returned 0x120000 [0066.566] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0066.567] GetProcessHeap () returned 0x120000 [0066.567] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0066.567] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ef508f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd45db281, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd45db281, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0066.569] GetProcessHeap () returned 0x120000 [0066.569] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.569] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2000117, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafabf4fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x21c9d54, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215230 [0066.570] GetProcessHeap () returned 0x120000 [0066.570] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0066.571] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2000117, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafb54c83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2072835, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215270 [0066.573] GetProcessHeap () returned 0x120000 [0066.573] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0066.573] GetProcessHeap () returned 0x120000 [0066.573] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0066.573] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2072835, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafbab880, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x210b18c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0066.575] GetProcessHeap () returned 0x120000 [0066.575] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0066.575] GetProcessHeap () returned 0x120000 [0066.575] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.575] GetProcessHeap () returned 0x120000 [0066.575] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.575] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd45db281, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xd45db281, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd45db281, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0066.576] GetProcessHeap () returned 0x120000 [0066.576] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.576] GetProcessHeap () returned 0x120000 [0066.576] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0066.577] GetProcessHeap () returned 0x120000 [0066.577] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0066.577] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f76a4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd45db281, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd45db281, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215570 [0066.578] GetProcessHeap () returned 0x120000 [0066.578] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.579] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f76a4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafbae931, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4f76a4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0066.579] GetProcessHeap () returned 0x120000 [0066.579] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.579] GetProcessHeap () returned 0x120000 [0066.579] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.579] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd45db281, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xd45db281, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd45db281, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215230 [0066.705] GetProcessHeap () returned 0x120000 [0066.705] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.707] GetProcessHeap () returned 0x120000 [0066.707] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0066.707] GetProcessHeap () returned 0x120000 [0066.707] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0066.707] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16dc6f6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd45db281, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd45db281, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0066.708] GetProcessHeap () returned 0x120000 [0066.708] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.709] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x170294f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafbb05d6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x170294f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215170 [0066.709] GetProcessHeap () returned 0x120000 [0066.709] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.709] GetProcessHeap () returned 0x120000 [0066.709] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.709] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x170294f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafbf828d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1b3b5a8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155f0 [0066.710] GetProcessHeap () returned 0x120000 [0066.710] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0066.710] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\Assets\\contrast-black\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x170294f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafbfa501, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x18645b9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0066.712] GetProcessHeap () returned 0x120000 [0066.712] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0066.713] GetProcessHeap () returned 0x120000 [0066.713] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0066.713] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\Assets\\contrast-white\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18645b9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafc4ec6a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x19e1d44, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0066.715] GetProcessHeap () returned 0x120000 [0066.715] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0066.715] GetProcessHeap () returned 0x120000 [0066.715] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.715] GetProcessHeap () returned 0x120000 [0066.715] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.716] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd45db281, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xd5bf8796, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xd5bf8796, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215770 [0066.716] GetProcessHeap () returned 0x120000 [0066.716] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.716] GetProcessHeap () returned 0x120000 [0066.716] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0066.717] GetProcessHeap () returned 0x120000 [0066.717] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0066.717] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x255053c0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd61ded48, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd61ded48, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215770 [0066.719] GetProcessHeap () returned 0x120000 [0066.719] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.719] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x25557698, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafc5120a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2564079d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0066.721] GetProcessHeap () returned 0x120000 [0066.721] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0066.721] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x25557698, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafcf43cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x255a7e0e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0066.723] GetProcessHeap () returned 0x120000 [0066.723] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0066.723] GetProcessHeap () returned 0x120000 [0066.723] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0066.723] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x255a7e0e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafd6c55f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x255f42ea, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0066.725] GetProcessHeap () returned 0x120000 [0066.725] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0066.725] GetProcessHeap () returned 0x120000 [0066.725] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.725] GetProcessHeap () returned 0x120000 [0066.725] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.726] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd61ded48, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xd61ded48, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd61ded48, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0066.726] GetProcessHeap () returned 0x120000 [0066.726] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.726] GetProcessHeap () returned 0x120000 [0066.726] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0066.727] GetProcessHeap () returned 0x120000 [0066.727] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0066.727] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2499f315, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd61ded48, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd61ded48, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215830 [0066.728] GetProcessHeap () returned 0x120000 [0066.728] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.729] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x249c5573, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafd6f7c8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x249c5573, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0066.730] GetProcessHeap () returned 0x120000 [0066.730] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.730] GetProcessHeap () returned 0x120000 [0066.730] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.730] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x249eb7cc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafdc1431, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x24bc56a8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0066.731] GetProcessHeap () returned 0x120000 [0066.731] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0066.731] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\Assets\\contrast-black\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x249eb7cc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafe104e1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x24a5dedd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0066.733] GetProcessHeap () returned 0x120000 [0066.733] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0066.733] GetProcessHeap () returned 0x120000 [0066.733] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0066.733] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\Assets\\contrast-white\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24a5dedd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafe13300, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x24ad5f3c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215670 [0066.735] GetProcessHeap () returned 0x120000 [0066.735] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0066.735] GetProcessHeap () returned 0x120000 [0066.735] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0066.736] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\Assets\\Fonts\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24ad5f3c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafe13de4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x24ad5f3c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0066.736] GetProcessHeap () returned 0x120000 [0066.736] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0066.736] GetProcessHeap () returned 0x120000 [0066.736] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0066.736] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\Assets\\Sounds\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b52f97, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafe1485b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x24bc56a8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0066.737] GetProcessHeap () returned 0x120000 [0066.737] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0066.737] GetProcessHeap () returned 0x120000 [0066.737] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.737] GetProcessHeap () returned 0x120000 [0066.737] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.738] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd61ded48, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xd442d6fc, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xd442d6fc, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215170 [0066.738] GetProcessHeap () returned 0x120000 [0066.738] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.738] GetProcessHeap () returned 0x120000 [0066.738] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.739] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\Strings\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x25492ca6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafe15ed6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x25492ca6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0066.739] GetProcessHeap () returned 0x120000 [0066.739] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0066.739] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\Strings\\en-US\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x25492ca6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafe16ee0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x25492ca6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0066.739] GetProcessHeap () returned 0x120000 [0066.739] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0066.739] GetProcessHeap () returned 0x120000 [0066.739] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.740] GetProcessHeap () returned 0x120000 [0066.740] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.740] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\_Resources\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x249c5573, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafd6f1ac, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x249c5573, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0066.740] GetProcessHeap () returned 0x120000 [0066.740] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.740] GetProcessHeap () returned 0x120000 [0066.740] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0066.740] GetProcessHeap () returned 0x120000 [0066.740] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0066.740] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_2017.222.1920.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x248ba4f4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd61ded48, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd61ded48, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152b0 [0066.868] GetProcessHeap () returned 0x120000 [0066.868] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.868] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_2017.222.1920.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x248ba4f4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafe6e80a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x248ba4f4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215670 [0066.868] GetProcessHeap () returned 0x120000 [0066.868] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.868] GetProcessHeap () returned 0x120000 [0066.868] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.868] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_2017.222.1920.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd61ded48, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xd61ded48, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd61ded48, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215530 [0066.869] GetProcessHeap () returned 0x120000 [0066.869] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.869] GetProcessHeap () returned 0x120000 [0066.869] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0066.870] GetProcessHeap () returned 0x120000 [0066.870] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0066.870] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x367c081d, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xaff5073a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x37eb3642, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0066.872] GetProcessHeap () returned 0x120000 [0066.872] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.872] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36b540f8, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xb004bc29, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36b540f8, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0066.873] GetProcessHeap () returned 0x120000 [0066.873] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.873] GetProcessHeap () returned 0x120000 [0066.873] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.873] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x37eb3642, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xe4deabeb, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xe4deabeb, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0066.873] GetProcessHeap () returned 0x120000 [0066.873] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0066.873] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4deabeb, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa90b6d32, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xa90b6d32, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0066.874] GetProcessHeap () returned 0x120000 [0066.874] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0066.874] FindNextFileW (in: hFindFile=0x2153f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4deabeb, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa90b6d32, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xa90b6d32, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Autogen", cAlternateFileName="")) returned 0 [0066.874] FindClose (in: hFindFile=0x2153f0 | out: hFindFile=0x2153f0) returned 1 [0066.874] GetProcessHeap () returned 0x120000 [0066.874] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.874] FindNextFileW (in: hFindFile=0x2151f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3708b3d5, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x3708b3d5, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x37d35dd5, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x300, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="RESOUR~1.PRI")) returned 1 [0066.874] FindNextFileW (in: hFindFile=0x2151f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3708b3d5, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x3708b3d5, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x37d35dd5, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x300, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="RESOUR~1.PRI")) returned 0 [0066.874] FindClose (in: hFindFile=0x2151f0 | out: hFindFile=0x2151f0) returned 1 [0066.875] GetProcessHeap () returned 0x120000 [0066.875] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0066.875] FindNextFileW (in: hFindFile=0x2153b0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3979638c, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xb00f9315, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3a630d34, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe", cAlternateFileName="MI9817~1.0_X")) returned 1 [0066.875] GetProcessHeap () returned 0x120000 [0066.875] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0066.875] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3979638c, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xb00f9315, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3a630d34, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215130 [0066.876] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3979638c, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xb00f9315, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3a630d34, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.876] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3998628f, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x3998628f, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x3a525ccf, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x6f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="APPXBL~1.XML")) returned 1 [0066.876] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39854f81, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x39854f81, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x3a525ccf, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x1273, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="APPXMA~1.XML")) returned 1 [0066.876] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x39a1ec32, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xb00fa945, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x39a1ec32, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1 [0066.876] GetProcessHeap () returned 0x120000 [0066.876] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.877] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x39a1ec32, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xb00fa945, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x39a1ec32, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0066.877] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x39a1ec32, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xb00fa945, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x39a1ec32, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.877] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39a1ec32, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x39a1ec32, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x3a525ccf, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x2b55, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="CODEIN~1.CAT")) returned 1 [0066.877] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39a1ec32, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x39a1ec32, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x3a525ccf, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x2b55, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="CODEIN~1.CAT")) returned 0 [0066.877] FindClose (in: hFindFile=0x215470 | out: hFindFile=0x215470) returned 1 [0066.877] GetProcessHeap () returned 0x120000 [0066.877] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.877] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39ab75fa, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x39ab75fa, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x3a525ccf, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x2998, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="APPXSI~1.P7X")) returned 1 [0066.877] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3708b3d5, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x3708b3d5, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x37d35dd5, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0xc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0066.877] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39b4ff24, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x39b4ff24, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x3a525ccf, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0xa3f98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Services.Store.Engagement.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0066.877] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39b4ff24, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x39b4ff24, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x3a525ccf, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x6598, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Services.Store.Engagement.Proxies.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0066.878] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3708b3d5, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x3708b3d5, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x37d35dd5, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x3f98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Services.Store.Engagement.winmd", cAlternateFileName="")) returned 1 [0066.878] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x3a630d34, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xe56b56ac, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xe56b56ac, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1 [0066.878] GetProcessHeap () returned 0x120000 [0066.878] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.878] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x3a630d34, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xe56b56ac, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xe56b56ac, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157b0 [0066.878] FindNextFileW (in: hFindFile=0x2157b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x3a630d34, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xe56b56ac, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xe56b56ac, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.878] FindNextFileW (in: hFindFile=0x2157b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56b56ac, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa91031f7, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xa91031f7, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Autogen", cAlternateFileName="")) returned 1 [0066.878] GetProcessHeap () returned 0x120000 [0066.878] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0066.878] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56b56ac, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa91031f7, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xa91031f7, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0066.879] FindNextFileW (in: hFindFile=0x2151f0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56b56ac, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa91031f7, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xa91031f7, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.879] FindNextFileW (in: hFindFile=0x2151f0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe56b56ac, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa91031f7, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xa91031f7, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSByteCodeCache_32", cAlternateFileName="JSBYTE~1")) returned 1 [0066.879] FindNextFileW (in: hFindFile=0x2151f0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe56b56ac, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa91031f7, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xa91031f7, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSByteCodeCache_32", cAlternateFileName="JSBYTE~1")) returned 0 [0066.879] FindClose (in: hFindFile=0x2151f0 | out: hFindFile=0x2151f0) returned 1 [0066.879] GetProcessHeap () returned 0x120000 [0066.879] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0066.879] FindNextFileW (in: hFindFile=0x2157b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56b56ac, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa91031f7, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xa91031f7, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Autogen", cAlternateFileName="")) returned 0 [0066.879] FindClose (in: hFindFile=0x2157b0 | out: hFindFile=0x2157b0) returned 1 [0066.879] GetProcessHeap () returned 0x120000 [0066.879] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.880] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3708b3d5, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x3708b3d5, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x37d35dd5, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x300, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1 [0066.880] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3708b3d5, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x3708b3d5, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x37d35dd5, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x300, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 0 [0066.880] FindClose (in: hFindFile=0x215130 | out: hFindFile=0x215130) returned 1 [0066.880] GetProcessHeap () returned 0x120000 [0066.880] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0066.880] FindNextFileW (in: hFindFile=0x2153b0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbff4e2d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xdba3c24b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba3c24b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c", cAlternateFileName="MI66C7~1.SCA")) returned 1 [0066.884] GetProcessHeap () returned 0x120000 [0066.884] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0066.884] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbff4e2d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xdba3c24b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba3c24b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0066.885] FindNextFileW (in: hFindFile=0x2153f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbff4e2d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xdba3c24b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba3c24b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.885] FindNextFileW (in: hFindFile=0x2153f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc08d79c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc08d79c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc08d79c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1036, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1 [0066.886] FindNextFileW (in: hFindFile=0x2153f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbff4e2d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbff4e2d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xbff4e2d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1 [0066.886] FindNextFileW (in: hFindFile=0x2153f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc08d79c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc0b39f5, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc0b39f5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x295b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1 [0066.886] FindNextFileW (in: hFindFile=0x2153f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdba3c24b, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xdba3c24b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba3c24b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1 [0066.886] GetProcessHeap () returned 0x120000 [0066.886] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.886] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdba3c24b, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xdba3c24b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba3c24b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152b0 [0066.886] FindNextFileW (in: hFindFile=0x2152b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdba3c24b, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xdba3c24b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba3c24b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.887] FindNextFileW (in: hFindFile=0x2152b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdba3c24b, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xdba3c24b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba3c24b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0066.887] FindClose (in: hFindFile=0x2152b0 | out: hFindFile=0x2152b0) returned 1 [0066.887] GetProcessHeap () returned 0x120000 [0066.887] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.887] FindNextFileW (in: hFindFile=0x2153f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0b39f5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc0b39f5, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc0b39f5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa20, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1 [0066.887] FindNextFileW (in: hFindFile=0x2153f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc0b39f5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb020b681, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc0b39f5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeApp", cAlternateFileName="")) returned 1 [0066.887] GetProcessHeap () returned 0x120000 [0066.887] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.887] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc0b39f5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb020b681, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc0b39f5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0066.887] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc0b39f5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb020b681, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc0b39f5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.887] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc0b39f5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb02ab869, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1725bd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1 [0066.888] GetProcessHeap () returned 0x120000 [0066.888] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0066.888] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc0b39f5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb02ab869, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1725bd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215130 [0066.889] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc0b39f5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb02ab869, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1725bd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.889] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0b39f5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc0b39f5, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc0b39f5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="delete_12x12.scale-100.png", cAlternateFileName="")) returned 1 [0066.889] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0d9c4e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc0d9c4e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc0d9c4e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xac, dwReserved0=0x0, dwReserved1=0x0, cFileName="edit_12x12.scale-100.png", cAlternateFileName="")) returned 1 [0066.889] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0d9c4e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc0d9c4e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc0d9c4e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1b12, dwReserved0=0x0, dwReserved1=0x0, cFileName="friends.scale-100.png", cAlternateFileName="")) returned 1 [0066.889] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0d9c4e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc0d9c4e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc0d9c4e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1db7, dwReserved0=0x0, dwReserved1=0x0, cFileName="highfive.scale-100.png", cAlternateFileName="")) returned 1 [0066.889] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc0d9c4e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb02ac9ec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc0d9c4e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Images", cAlternateFileName="")) returned 1 [0066.889] GetProcessHeap () returned 0x120000 [0066.889] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0066.891] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\Images\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc0d9c4e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb02ac9ec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc0d9c4e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215170 [0066.891] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc0d9c4e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb02ac9ec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc0d9c4e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.891] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0d9c4e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc0d9c4e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc0d9c4e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x12d, dwReserved0=0x0, dwReserved1=0x0, cFileName="image_placeholder.scale-100.png", cAlternateFileName="")) returned 1 [0066.891] FindNextFileW (in: hFindFile=0x215170, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0d9c4e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc0d9c4e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc0d9c4e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x12d, dwReserved0=0x0, dwReserved1=0x0, cFileName="image_placeholder.scale-100.png", cAlternateFileName="")) returned 0 [0066.891] FindClose (in: hFindFile=0x215170 | out: hFindFile=0x215170) returned 1 [0066.891] GetProcessHeap () returned 0x120000 [0066.891] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0066.891] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0d9c4e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc0d9c4e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc0d9c4e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x11d, dwReserved0=0x0, dwReserved1=0x0, cFileName="LockScreenBadgeLogo.scale-100.png", cAlternateFileName="")) returned 1 [0066.891] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0ffeac, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc0ffeac, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc0ffeac, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x361, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeAppList.scale-100.png", cAlternateFileName="")) returned 1 [0066.891] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0ffeac, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc0ffeac, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc0ffeac, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x266, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeAppList.scale-100_contrast-black.png", cAlternateFileName="")) returned 1 [0066.891] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0ffeac, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc0ffeac, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc0ffeac, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x27f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeAppList.scale-100_contrast-white.png", cAlternateFileName="")) returned 1 [0066.891] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0ffeac, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc0ffeac, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc0ffeac, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xbc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeLargeTile.scale-100.png", cAlternateFileName="")) returned 1 [0066.891] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0ffeac, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc0ffeac, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc0ffeac, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xbe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeLargeTile.scale-100_contrast-black.png", cAlternateFileName="")) returned 1 [0066.891] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0ffeac, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc0ffeac, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc0ffeac, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xc5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeLargeTile.scale-100_contrast-white.png", cAlternateFileName="")) returned 1 [0066.891] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0ffeac, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc0ffeac, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc0ffeac, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2da, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeLogo.scale-100.png", cAlternateFileName="")) returned 1 [0066.892] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0ffeac, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc0ffeac, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc0ffeac, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeMedTile.scale-100.png", cAlternateFileName="")) returned 1 [0066.892] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0ffeac, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc12610a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc12610a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x41b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeMedTile.scale-100_contrast-black.png", cAlternateFileName="")) returned 1 [0066.892] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc12610a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc12610a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc12610a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x43b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeMedTile.scale-100_contrast-white.png", cAlternateFileName="")) returned 1 [0066.892] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc14c364, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc14c364, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc14c364, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeTile.scale-100.png", cAlternateFileName="")) returned 1 [0066.892] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc14c364, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc14c364, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc14c364, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeTile.scale-100_contrast-black.png", cAlternateFileName="")) returned 1 [0066.892] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc14c364, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc14c364, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc14c364, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeTile.scale-100_contrast-white.png", cAlternateFileName="")) returned 1 [0066.892] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc14c364, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc14c364, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc14c364, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeWideTile.scale-100.png", cAlternateFileName="")) returned 1 [0066.892] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc14c364, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc14c364, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc14c364, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x498, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeWideTile.scale-100_contrast-black.png", cAlternateFileName="")) returned 1 [0066.892] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1725bd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc1725bd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc1725bd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeWideTile.scale-100_contrast-white.png", cAlternateFileName="")) returned 1 [0066.892] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0d9c4e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc0d9c4e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc0d9c4e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="skype_titlebar_logo.scale-100.png", cAlternateFileName="")) returned 1 [0066.892] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1725bd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc1725bd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc1725bd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x8ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashScreen.scale-100.png", cAlternateFileName="")) returned 1 [0066.892] FindNextFileW (in: hFindFile=0x215130, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1725bd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc1725bd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc1725bd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x8ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashScreen.scale-100.png", cAlternateFileName="")) returned 0 [0066.892] FindClose (in: hFindFile=0x215130 | out: hFindFile=0x215130) returned 1 [0066.892] GetProcessHeap () returned 0x120000 [0066.892] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0066.892] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc0b39f5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb02ab869, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1725bd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 0 [0066.892] FindClose (in: hFindFile=0x215470 | out: hFindFile=0x215470) returned 1 [0066.892] GetProcessHeap () returned 0x120000 [0066.893] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.894] FindNextFileW (in: hFindFile=0x2153f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc0b39f5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb020b681, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc0b39f5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeApp", cAlternateFileName="")) returned 0 [0066.894] FindClose (in: hFindFile=0x2153f0 | out: hFindFile=0x2153f0) returned 1 [0066.894] GetProcessHeap () returned 0x120000 [0066.894] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0066.894] FindNextFileW (in: hFindFile=0x2153b0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73778cb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xdba15ff2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba15ff2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c", cAlternateFileName="MI29A2~1.0_N")) returned 1 [0066.894] GetProcessHeap () returned 0x120000 [0066.894] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0066.894] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73778cb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xdba15ff2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba15ff2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215570 [0066.896] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73778cb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xdba15ff2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba15ff2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.896] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x739db1f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x739db1f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x739db1f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1 [0066.896] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73778cb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0335567, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x73778cb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1 [0066.896] GetProcessHeap () returned 0x120000 [0066.896] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.896] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73778cb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0335567, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x73778cb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158f0 [0066.897] FindNextFileW (in: hFindFile=0x2158f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73778cb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0335567, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x73778cb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.897] FindNextFileW (in: hFindFile=0x2158f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73778cb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x73778cb, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x73778cb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x41ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 1 [0066.897] FindNextFileW (in: hFindFile=0x2158f0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73778cb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x73778cb, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x73778cb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x41ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 0 [0066.897] FindClose (in: hFindFile=0x2158f0 | out: hFindFile=0x2158f0) returned 1 [0066.897] GetProcessHeap () returned 0x120000 [0066.897] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.897] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x739db1f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x73c3d79, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x73c3d79, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x295b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1 [0066.897] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdba15ff2, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xdba15ff2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba15ff2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1 [0066.897] GetProcessHeap () returned 0x120000 [0066.897] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.897] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdba15ff2, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xdba15ff2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba15ff2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0066.898] FindNextFileW (in: hFindFile=0x215730, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdba15ff2, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xdba15ff2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba15ff2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.898] FindNextFileW (in: hFindFile=0x215730, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdba15ff2, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xdba15ff2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba15ff2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0066.898] FindClose (in: hFindFile=0x215730 | out: hFindFile=0x215730) returned 1 [0066.898] GetProcessHeap () returned 0x120000 [0066.898] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.898] FindNextFileW (in: hFindFile=0x215570, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdba15ff2, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xdba15ff2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba15ff2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0 [0066.898] FindClose (in: hFindFile=0x215570 | out: hFindFile=0x215570) returned 1 [0066.898] GetProcessHeap () returned 0x120000 [0066.898] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0066.899] FindNextFileW (in: hFindFile=0x2153b0, lpFindFileData=0x2a5f418 | out: lpFindFileData=0x2a5f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7410239, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xdba15ff2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba15ff2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c", cAlternateFileName="MIC69C~1.0_X")) returned 1 [0066.899] GetProcessHeap () returned 0x120000 [0066.899] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0066.899] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7410239, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xdba15ff2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba15ff2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0066.900] FindNextFileW (in: hFindFile=0x2152f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7410239, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xdba15ff2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba15ff2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.901] FindNextFileW (in: hFindFile=0x2152f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7436489, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7436489, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7436489, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x31187, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1 [0066.901] FindNextFileW (in: hFindFile=0x2152f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7410239, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7410239, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7410239, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x6af1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1 [0066.901] FindNextFileW (in: hFindFile=0x2152f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745c6e7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb03fc1b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x745c6e7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1 [0066.901] GetProcessHeap () returned 0x120000 [0066.901] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.901] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745c6e7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb03fc1b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x745c6e7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0066.901] FindNextFileW (in: hFindFile=0x2158b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745c6e7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb03fc1b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x745c6e7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.901] FindNextFileW (in: hFindFile=0x2158b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c6e7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7482940, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7482940, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3a8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 1 [0066.901] FindNextFileW (in: hFindFile=0x2158b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c6e7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7482940, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7482940, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3a8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 0 [0066.902] FindClose (in: hFindFile=0x2158b0 | out: hFindFile=0x2158b0) returned 1 [0066.902] GetProcessHeap () returned 0x120000 [0066.902] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.902] FindNextFileW (in: hFindFile=0x2152f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c6e7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x745c6e7, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x745c6e7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2982, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1 [0066.902] FindNextFileW (in: hFindFile=0x2152f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74a8b9e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x74cedf7, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x74cedf7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xff58, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClrCompression.dll", cAlternateFileName="")) returned 1 [0066.902] FindNextFileW (in: hFindFile=0x2152f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74cedf7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x74f5051, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x74f5051, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2be00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Skype.ImageTool.dll", cAlternateFileName="")) returned 1 [0066.902] FindNextFileW (in: hFindFile=0x2152f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74f5051, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x751b2af, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x751b2af, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Skype.ImageTool.winmd", cAlternateFileName="")) returned 1 [0066.902] FindNextFileW (in: hFindFile=0x2152f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdba15ff2, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x888bff4e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x888bff4e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1 [0066.902] GetProcessHeap () returned 0x120000 [0066.902] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.902] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdba15ff2, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x888bff4e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x888bff4e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157b0 [0066.902] FindNextFileW (in: hFindFile=0x2157b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdba15ff2, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x888bff4e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x888bff4e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.902] FindNextFileW (in: hFindFile=0x2157b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdc57111f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xdc57111f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xdc57111f, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x2caf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.857e5af3.pri", cAlternateFileName="RESOUR~1.PRI")) returned 1 [0066.902] FindNextFileW (in: hFindFile=0x2157b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdc57111f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xdc57111f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xdc57111f, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x2caf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000-MergedResources-0.pri", cAlternateFileName="")) returned 1 [0066.902] FindNextFileW (in: hFindFile=0x2157b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdc57111f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xdc57111f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xdc57111f, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x2caf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000-MergedResources-0.pri", cAlternateFileName="")) returned 0 [0066.902] FindClose (in: hFindFile=0x2157b0 | out: hFindFile=0x2157b0) returned 1 [0066.902] GetProcessHeap () returned 0x120000 [0066.902] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0066.902] FindNextFileW (in: hFindFile=0x2152f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x751b2af, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7541508, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7541508, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x15200, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationsExtensions.winmd", cAlternateFileName="")) returned 1 [0066.903] FindNextFileW (in: hFindFile=0x2152f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7541508, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x758d9bf, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x758d9bf, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xf5430, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1 [0066.903] FindNextFileW (in: hFindFile=0x2152f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x758d9bf, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7698a3e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7698a3e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x236c90, dwReserved0=0x0, dwReserved1=0x0, cFileName="roottools.dll", cAlternateFileName="")) returned 1 [0066.903] FindNextFileW (in: hFindFile=0x2152f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7698a3e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x77eff6f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x77eff6f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x325c90, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtmcodecs.dll", cAlternateFileName="")) returned 1 [0066.903] FindNextFileW (in: hFindFile=0x2152f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77eff6f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x783c427, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x783c427, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe0c90, dwReserved0=0x0, dwReserved1=0x0, cFileName="RtmMediaManager.dll", cAlternateFileName="")) returned 1 [0066.903] FindNextFileW (in: hFindFile=0x2152f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7862680, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x78aeb37, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x78aeb37, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x77690, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtmpal.dll", cAlternateFileName="")) returned 1 [0066.903] FindNextFileW (in: hFindFile=0x2152f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78aeb37, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7d00f8c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7d00f8c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x8fb488, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtmpltfm.dll", cAlternateFileName="")) returned 1 [0066.903] FindNextFileW (in: hFindFile=0x2152f0, lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd5c51, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb03fd343, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x887a4f1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeApp", cAlternateFileName="")) returned 1 [0066.903] GetProcessHeap () returned 0x120000 [0066.903] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0066.903] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd5c51, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb03fd343, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x887a4f1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152b0 [0066.903] FindNextFileW (in: hFindFile=0x2152b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd5c51, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb03fd343, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x887a4f1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.903] FindNextFileW (in: hFindFile=0x2152b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd5c51, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb045bfbe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8854298, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1 [0066.903] GetProcessHeap () returned 0x120000 [0066.903] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0066.903] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd5c51, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb045bfbe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8854298, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215830 [0066.905] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd5c51, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb045bfbe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8854298, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.905] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd5c51, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb04fda55, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x81ebd4a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Audio", cAlternateFileName="")) returned 1 [0066.905] GetProcessHeap () returned 0x120000 [0066.905] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0066.907] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd5c51, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb04fda55, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x81ebd4a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0067.043] FindNextFileW (in: hFindFile=0x215870, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd5c51, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb04fda55, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x81ebd4a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.043] FindNextFileW (in: hFindFile=0x215870, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8048362, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x806e5bb, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x806e5bb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x714d, dwReserved0=0x0, dwReserved1=0x0, cFileName="IncomingCall.wma", cAlternateFileName="")) returned 1 [0067.043] FindNextFileW (in: hFindFile=0x215870, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fd5c51, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7ffbeaa, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7ffbeaa, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xd1ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="incoming_contacts.wav", cAlternateFileName="")) returned 1 [0067.043] FindNextFileW (in: hFindFile=0x215870, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ffbeaa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8022104, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8022104, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xfde4, dwReserved0=0x0, dwReserved1=0x0, cFileName="incoming_file.wav", cAlternateFileName="")) returned 1 [0067.043] FindNextFileW (in: hFindFile=0x215870, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8022104, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8048362, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8048362, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x6bac, dwReserved0=0x0, dwReserved1=0x0, cFileName="incoming_im.wav", cAlternateFileName="")) returned 1 [0067.043] FindNextFileW (in: hFindFile=0x215870, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8048362, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8048362, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8048362, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xb99c, dwReserved0=0x0, dwReserved1=0x0, cFileName="incoming_voicemail.wav", cAlternateFileName="")) returned 1 [0067.043] FindNextFileW (in: hFindFile=0x215870, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x806e5bb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8094814, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8094814, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2dc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skype_Call_Answer.m4a", cAlternateFileName="")) returned 1 [0067.043] FindNextFileW (in: hFindFile=0x215870, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80baa72, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x80e0ccb, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x80e0ccb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa7ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skype_Call_Calling.m4a", cAlternateFileName="")) returned 1 [0067.044] FindNextFileW (in: hFindFile=0x215870, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80e0ccb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x80e0ccb, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x80e0ccb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa099, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skype_Call_Connecting.m4a", cAlternateFileName="")) returned 1 [0067.044] FindNextFileW (in: hFindFile=0x215870, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80e0ccb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x81533dc, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x81533dc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x34ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skype_Call_Dialing.m4a", cAlternateFileName="")) returned 1 [0067.044] FindNextFileW (in: hFindFile=0x215870, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81533dc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x819f893, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x819f893, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2847, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skype_Call_Ended.m4a", cAlternateFileName="")) returned 1 [0067.044] FindNextFileW (in: hFindFile=0x215870, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x819f893, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x81c5af1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x81c5af1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2a76, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skype_Call_Failed.m4a", cAlternateFileName="")) returned 1 [0067.044] FindNextFileW (in: hFindFile=0x215870, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81c5af1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x81ebd4a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x81ebd4a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3699, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skype_Call_Hold.m4a", cAlternateFileName="")) returned 1 [0067.044] FindNextFileW (in: hFindFile=0x215870, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81ebd4a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8211fa4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8211fa4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x199e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skype_Call_Resume.m4a", cAlternateFileName="")) returned 1 [0067.044] FindNextFileW (in: hFindFile=0x215870, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81ebd4a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8211fa4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8211fa4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x199e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skype_Call_Resume.m4a", cAlternateFileName="")) returned 0 [0067.044] FindClose (in: hFindFile=0x215870 | out: hFindFile=0x215870) returned 1 [0067.045] GetProcessHeap () returned 0x120000 [0067.045] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0067.045] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8211fa4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8211fa4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8211fa4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="delete_12x12.scale-200.png", cAlternateFileName="")) returned 1 [0067.045] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8211fa4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8211fa4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8211fa4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="edit_12x12.scale-200.png", cAlternateFileName="")) returned 1 [0067.045] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8211fa4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x825e45b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x825e45b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3a02, dwReserved0=0x0, dwReserved1=0x0, cFileName="friends.scale-200.png", cAlternateFileName="")) returned 1 [0067.045] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x825e45b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x825e45b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x825e45b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3f19, dwReserved0=0x0, dwReserved1=0x0, cFileName="highfive.scale-200.png", cAlternateFileName="")) returned 1 [0067.045] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x825e45b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb05006d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x83b598c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Images", cAlternateFileName="")) returned 1 [0067.045] GetProcessHeap () returned 0x120000 [0067.045] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0067.045] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Images\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x825e45b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb05006d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x83b598c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215670 [0067.047] FindNextFileW (in: hFindFile=0x215670, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x825e45b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb05006d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x83b598c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.047] FindNextFileW (in: hFindFile=0x215670, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x825e45b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x825e45b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x825e45b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x781, dwReserved0=0x0, dwReserved1=0x0, cFileName="avatar_default_large.png", cAlternateFileName="")) returned 1 [0067.047] FindNextFileW (in: hFindFile=0x215670, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x825e45b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x82846b4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x82846b4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x72a, dwReserved0=0x0, dwReserved1=0x0, cFileName="avatar_group_large.png", cAlternateFileName="")) returned 1 [0067.047] FindNextFileW (in: hFindFile=0x215670, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82846b4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x82d0b6b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x82d0b6b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x399, dwReserved0=0x0, dwReserved1=0x0, cFileName="chat_spinner.png", cAlternateFileName="")) returned 1 [0067.047] FindNextFileW (in: hFindFile=0x215670, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d0b6b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x82d0b6b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x82d0b6b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x124, dwReserved0=0x0, dwReserved1=0x0, cFileName="computer_black.png", cAlternateFileName="")) returned 1 [0067.047] FindNextFileW (in: hFindFile=0x215670, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d0b6b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x82d0b6b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x82d0b6b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x132, dwReserved0=0x0, dwReserved1=0x0, cFileName="computer_white.png", cAlternateFileName="")) returned 1 [0067.047] FindNextFileW (in: hFindFile=0x215670, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d0b6b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x831d022, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x831d022, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x91f, dwReserved0=0x0, dwReserved1=0x0, cFileName="expression_picker_tab_mruicon.png", cAlternateFileName="")) returned 1 [0067.047] FindNextFileW (in: hFindFile=0x215670, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x831d022, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x831d022, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x831d022, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xb44, dwReserved0=0x0, dwReserved1=0x0, cFileName="expression_picker_tab_placeholder.png", cAlternateFileName="")) returned 1 [0067.047] FindNextFileW (in: hFindFile=0x215670, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x831d022, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x831d022, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x831d022, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x248, dwReserved0=0x0, dwReserved1=0x0, cFileName="feedback_icon_smiley.png", cAlternateFileName="")) returned 1 [0067.047] FindNextFileW (in: hFindFile=0x215670, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x831d022, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x834327c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x834327c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Generic_placeholder.png", cAlternateFileName="")) returned 1 [0067.048] FindNextFileW (in: hFindFile=0x215670, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x834327c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x834327c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x834327c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x267, dwReserved0=0x0, dwReserved1=0x0, cFileName="handset_black.png", cAlternateFileName="")) returned 1 [0067.048] FindNextFileW (in: hFindFile=0x215670, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x834327c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x834327c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x834327c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x251, dwReserved0=0x0, dwReserved1=0x0, cFileName="handset_white.png", cAlternateFileName="")) returned 1 [0067.048] FindNextFileW (in: hFindFile=0x215670, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x834327c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x834327c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x834327c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x215, dwReserved0=0x0, dwReserved1=0x0, cFileName="image_placeholder.scale-200.png", cAlternateFileName="")) returned 1 [0067.048] FindNextFileW (in: hFindFile=0x215670, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x834327c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x834327c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x834327c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x691, dwReserved0=0x0, dwReserved1=0x0, cFileName="IncomingCallBrandingImage.png", cAlternateFileName="")) returned 1 [0067.048] FindNextFileW (in: hFindFile=0x215670, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x834327c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x83694da, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x83694da, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x83f, dwReserved0=0x0, dwReserved1=0x0, cFileName="moji_mask.contrast-black.png", cAlternateFileName="")) returned 1 [0067.048] FindNextFileW (in: hFindFile=0x215670, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83694da, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x83694da, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x83694da, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x842, dwReserved0=0x0, dwReserved1=0x0, cFileName="moji_mask.contrast-standard.png", cAlternateFileName="")) returned 1 [0067.048] FindNextFileW (in: hFindFile=0x215670, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83694da, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x83694da, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x83694da, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x842, dwReserved0=0x0, dwReserved1=0x0, cFileName="moji_mask.contrast-white.png", cAlternateFileName="")) returned 1 [0067.048] FindNextFileW (in: hFindFile=0x215670, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83694da, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x838f733, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x838f733, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x856, dwReserved0=0x0, dwReserved1=0x0, cFileName="moji_mask_DarkMain.png", cAlternateFileName="")) returned 1 [0067.048] FindNextFileW (in: hFindFile=0x215670, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x838f733, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x838f733, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x838f733, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x658, dwReserved0=0x0, dwReserved1=0x0, cFileName="PiSh_placeholder.png", cAlternateFileName="")) returned 1 [0067.048] FindNextFileW (in: hFindFile=0x215670, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x838f733, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x838f733, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x838f733, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x395, dwReserved0=0x0, dwReserved1=0x0, cFileName="PiSh_placeholder_small.png", cAlternateFileName="")) returned 1 [0067.048] FindNextFileW (in: hFindFile=0x215670, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x838f733, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x838f733, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x838f733, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="signal_black.png", cAlternateFileName="")) returned 1 [0067.048] FindNextFileW (in: hFindFile=0x215670, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x838f733, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x838f733, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x838f733, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x22e, dwReserved0=0x0, dwReserved1=0x0, cFileName="signal_white.png", cAlternateFileName="")) returned 1 [0067.048] FindNextFileW (in: hFindFile=0x215670, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83b598c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x83b598c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x83b598c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xfa, dwReserved0=0x0, dwReserved1=0x0, cFileName="win_logo_black.png", cAlternateFileName="")) returned 1 [0067.048] FindNextFileW (in: hFindFile=0x215670, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83b598c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x83b598c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x83b598c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="win_logo_white.png", cAlternateFileName="")) returned 1 [0067.048] FindNextFileW (in: hFindFile=0x215670, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83b598c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x83b598c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x83b598c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="win_logo_white.png", cAlternateFileName="")) returned 0 [0067.048] FindClose (in: hFindFile=0x215670 | out: hFindFile=0x215670) returned 1 [0067.049] GetProcessHeap () returned 0x120000 [0067.049] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0067.049] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83b598c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x83b598c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x83b598c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="LockScreenBadgeLogo.scale-200.png", cAlternateFileName="")) returned 1 [0067.049] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83b598c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x83dbbea, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x83dbbea, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x0, dwReserved1=0x0, cFileName="quickreplysend.png", cAlternateFileName="")) returned 1 [0067.049] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8401e43, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8401e43, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8401e43, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeAppList.scale-200.png", cAlternateFileName="")) returned 1 [0067.049] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8401e43, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8401e43, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8401e43, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x47b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeAppList.scale-200_contrast-black.png", cAlternateFileName="")) returned 1 [0067.049] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84280a1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x844e2fb, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x844e2fb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeAppList.scale-200_contrast-white.png", cAlternateFileName="")) returned 1 [0067.050] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x844e2fb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x844e2fb, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x844e2fb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x14d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeAppList.targetsize-16_altform-unplated.png", cAlternateFileName="")) returned 1 [0067.050] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x844e2fb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x844e2fb, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x844e2fb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeAppList.targetsize-16_contrast-black.png", cAlternateFileName="")) returned 1 [0067.050] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x844e2fb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x844e2fb, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x844e2fb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeAppList.targetsize-16_contrast-white.png", cAlternateFileName="")) returned 1 [0067.050] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x844e2fb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x844e2fb, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x844e2fb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeAppList.targetsize-24_altform-unplated.png", cAlternateFileName="")) returned 1 [0067.050] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x844e2fb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8474559, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8474559, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x164, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeAppList.targetsize-24_contrast-black.png", cAlternateFileName="")) returned 1 [0067.050] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x849a7b2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x849a7b2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x849a7b2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x175, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeAppList.targetsize-24_contrast-white.png", cAlternateFileName="")) returned 1 [0067.050] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x849a7b2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x849a7b2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x849a7b2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xdd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeAppList.targetsize-256_altform-unplated.png", cAlternateFileName="")) returned 1 [0067.050] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x849a7b2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x84c0a0b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x84c0a0b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xded, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeAppList.targetsize-256_contrast-black.png", cAlternateFileName="")) returned 1 [0067.050] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84c0a0b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x84e6c69, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x84e6c69, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe55, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeAppList.targetsize-256_contrast-white.png", cAlternateFileName="")) returned 1 [0067.050] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84e6c69, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x84e6c69, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x84e6c69, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeAppList.targetsize-32_altform-unplated.png", cAlternateFileName="")) returned 1 [0067.050] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84e6c69, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x84e6c69, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x84e6c69, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeAppList.targetsize-32_contrast-black.png", cAlternateFileName="")) returned 1 [0067.050] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84e6c69, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x84e6c69, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x84e6c69, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeAppList.targetsize-32_contrast-white.png", cAlternateFileName="")) returned 1 [0067.050] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84e6c69, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x850cec2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x850cec2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeAppList.targetsize-48_altform-unplated.png", cAlternateFileName="")) returned 1 [0067.051] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x850cec2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x850cec2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x850cec2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x27d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeAppList.targetsize-48_contrast-black.png", cAlternateFileName="")) returned 1 [0067.051] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x850cec2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8533120, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8533120, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x297, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeAppList.targetsize-48_contrast-white.png", cAlternateFileName="")) returned 1 [0067.051] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8533120, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8559379, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8559379, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3c728, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeAssets-Light.ttf", cAlternateFileName="")) returned 1 [0067.051] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8559379, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x857f5d3, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x857f5d3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x31bf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeAssets-Regular.ttf", cAlternateFileName="")) returned 1 [0067.051] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x857f5d3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x85a5831, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x85a5831, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x15cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeLargeTile.scale-200.png", cAlternateFileName="")) returned 1 [0067.051] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85a5831, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x85f1ce8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x85f1ce8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x16d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeLargeTile.scale-200_contrast-black.png", cAlternateFileName="")) returned 1 [0067.051] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85f1ce8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8617f41, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8617f41, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x16cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeLargeTile.scale-200_contrast-white.png", cAlternateFileName="")) returned 1 [0067.051] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8617f41, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x863e19a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x863e19a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeLogo.scale-200.png", cAlternateFileName="")) returned 1 [0067.051] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x863e19a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x868a65b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x868a65b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x845, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeMedTile.scale-200.png", cAlternateFileName="")) returned 1 [0067.051] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x868a65b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x868a65b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x868a65b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x887, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeMedTile.scale-200_contrast-black.png", cAlternateFileName="")) returned 1 [0067.052] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x868a65b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86b08ab, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86b08ab, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x8f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeMedTile.scale-200_contrast-white.png", cAlternateFileName="")) returned 1 [0067.052] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86b08ab, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86d6b09, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86d6b09, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x655, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeTile.scale-200.png", cAlternateFileName="")) returned 1 [0067.052] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86d6b09, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8722fc0, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8722fc0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x554, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeTile.scale-200_contrast-black.png", cAlternateFileName="")) returned 1 [0067.052] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8722fc0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8722fc0, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8722fc0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x59e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeTile.scale-200_contrast-white.png", cAlternateFileName="")) returned 1 [0067.052] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8722fc0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8749219, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8749219, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x8f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeWideTile.scale-200.png", cAlternateFileName="")) returned 1 [0067.052] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f473, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x876f473, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x876f473, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x9f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeWideTile.scale-200_contrast-black.png", cAlternateFileName="")) returned 1 [0067.052] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f473, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x882e03f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x882e03f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x9c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeWideTile.scale-200_contrast-white.png", cAlternateFileName="")) returned 1 [0067.052] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83dbbea, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8401e43, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8401e43, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x0, cFileName="skype_titlebar_logo.scale-200.png", cAlternateFileName="")) returned 1 [0067.052] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x882e03f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x882e03f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x882e03f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1309, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashScreen.scale-200.png", cAlternateFileName="")) returned 1 [0067.052] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8854298, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0501269, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8854298, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Text", cAlternateFileName="")) returned 1 [0067.052] GetProcessHeap () returned 0x120000 [0067.052] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0067.052] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Text\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8854298, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0501269, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8854298, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0067.052] FindNextFileW (in: hFindFile=0x2151b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8854298, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0501269, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8854298, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.052] FindNextFileW (in: hFindFile=0x2151b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8854298, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x887a4f1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x887a4f1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x40c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="LegalDisclaimer.txt", cAlternateFileName="")) returned 1 [0067.053] FindNextFileW (in: hFindFile=0x2151b0, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8854298, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x887a4f1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x887a4f1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x40c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="LegalDisclaimer.txt", cAlternateFileName="")) returned 0 [0067.053] FindClose (in: hFindFile=0x2151b0 | out: hFindFile=0x2151b0) returned 1 [0067.053] GetProcessHeap () returned 0x120000 [0067.053] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0067.053] FindNextFileW (in: hFindFile=0x215830, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8854298, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0501269, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8854298, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Text", cAlternateFileName="")) returned 0 [0067.053] FindClose (in: hFindFile=0x215830 | out: hFindFile=0x215830) returned 1 [0067.053] GetProcessHeap () returned 0x120000 [0067.053] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0067.054] FindNextFileW (in: hFindFile=0x2152b0, lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x887a4f1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb05022d8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab6490e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Designs", cAlternateFileName="")) returned 1 [0067.055] GetProcessHeap () returned 0x120000 [0067.055] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0067.055] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Designs\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x887a4f1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb05022d8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab6490e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158f0 [0067.055] FindNextFileW (in: hFindFile=0x2158f0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x887a4f1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb05022d8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab6490e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.055] FindNextFileW (in: hFindFile=0x2158f0, lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x887a4f1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb05031a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9229e15, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Emoticons", cAlternateFileName="EMOTIC~1")) returned 1 [0067.056] GetProcessHeap () returned 0x120000 [0067.056] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0067.057] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Designs\\Emoticons\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x887a4f1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb05031a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9229e15, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215330 [0067.057] FindNextFileW (in: hFindFile=0x215330, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x887a4f1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb05031a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9229e15, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.057] FindNextFileW (in: hFindFile=0x215330, lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x887a4f1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb05f6ee8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9229e15, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="large", cAlternateFileName="")) returned 1 [0067.057] GetProcessHeap () returned 0x120000 [0067.057] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0067.057] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Designs\\Emoticons\\large\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x887a4f1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb05f6ee8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9229e15, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0067.058] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x887a4f1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb05f6ee8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9229e15, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.059] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x887a4f1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x88a074f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x88a074f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xf7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="angel.png", cAlternateFileName="")) returned 1 [0067.059] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88c69a9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x88c69a9, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x88c69a9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xee9, dwReserved0=0x0, dwReserved1=0x0, cFileName="angry.png", cAlternateFileName="")) returned 1 [0067.059] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88c69a9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8912e60, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8912e60, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1c9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="bandit.png", cAlternateFileName="")) returned 1 [0067.059] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8912e60, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x89390b9, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x89390b9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1181, dwReserved0=0x0, dwReserved1=0x0, cFileName="bartlett.png", cAlternateFileName="")) returned 1 [0067.059] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x895f317, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x895f317, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x895f317, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x15ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="beer.png", cAlternateFileName="")) returned 1 [0067.059] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8985570, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8985570, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8985570, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xdf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="bigsmile.png", cAlternateFileName="")) returned 1 [0067.059] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8985570, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8985570, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8985570, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1cc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="bike.png", cAlternateFileName="")) returned 1 [0067.059] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8985570, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8985570, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8985570, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1290, dwReserved0=0x0, dwReserved1=0x0, cFileName="blushing.png", cAlternateFileName="")) returned 1 [0067.059] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8985570, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8985570, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8985570, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xbda, dwReserved0=0x0, dwReserved1=0x0, cFileName="bow.png", cAlternateFileName="")) returned 1 [0067.060] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89ab7ca, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x89ab7ca, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x89ab7ca, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1755, dwReserved0=0x0, dwReserved1=0x0, cFileName="brokenheart.png", cAlternateFileName="")) returned 1 [0067.060] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89ab7ca, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x89ab7ca, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x89ab7ca, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x14c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="bug.png", cAlternateFileName="")) returned 1 [0067.060] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89ab7ca, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x89ab7ca, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x89ab7ca, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1633, dwReserved0=0x0, dwReserved1=0x0, cFileName="cake.png", cAlternateFileName="")) returned 1 [0067.060] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89ab7ca, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x89d1a28, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x89d1a28, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x150e, dwReserved0=0x0, dwReserved1=0x0, cFileName="call.png", cAlternateFileName="")) returned 1 [0067.060] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89d1a28, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x89f7c81, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x89f7c81, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x16eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="cash.png", cAlternateFileName="")) returned 1 [0067.060] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89f7c81, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8a44138, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8a44138, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xc27, dwReserved0=0x0, dwReserved1=0x0, cFileName="cat.png", cAlternateFileName="")) returned 1 [0067.060] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a44138, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8a6a391, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8a6a391, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x17e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="clapping.png", cAlternateFileName="")) returned 1 [0067.060] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a6a391, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8a905ef, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8a905ef, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xc2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="coffee.png", cAlternateFileName="")) returned 1 [0067.060] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a905ef, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8ab684d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8ab684d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x14d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="cool.png", cAlternateFileName="")) returned 1 [0067.060] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab684d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8ab684d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8ab684d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1316, dwReserved0=0x0, dwReserved1=0x0, cFileName="crying.png", cAlternateFileName="")) returned 1 [0067.060] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8adcaa6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8b02d00, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8b02d00, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x118c, dwReserved0=0x0, dwReserved1=0x0, cFileName="dancing.png", cAlternateFileName="")) returned 1 [0067.060] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b02d00, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8b28f5e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8b28f5e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1182, dwReserved0=0x0, dwReserved1=0x0, cFileName="devil.png", cAlternateFileName="")) returned 1 [0067.060] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b28f5e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8b4f1b7, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8b4f1b7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1649, dwReserved0=0x0, dwReserved1=0x0, cFileName="dog.png", cAlternateFileName="")) returned 1 [0067.060] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b4f1b7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8b75410, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8b75410, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xd2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="doh.png", cAlternateFileName="")) returned 1 [0067.060] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b75410, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8b75410, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8b75410, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xfd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="drink.png", cAlternateFileName="")) returned 1 [0067.061] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b75410, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8b9b66e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8b9b66e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1595, dwReserved0=0x0, dwReserved1=0x0, cFileName="drunk.png", cAlternateFileName="")) returned 1 [0067.061] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b9b66e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8b9b66e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8b9b66e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xc14, dwReserved0=0x0, dwReserved1=0x0, cFileName="dull.png", cAlternateFileName="")) returned 1 [0067.061] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bc18c7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8bc18c7, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8bc18c7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1324, dwReserved0=0x0, dwReserved1=0x0, cFileName="dull_tauri.png", cAlternateFileName="")) returned 1 [0067.061] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bc18c7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8be7b21, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8be7b21, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1b1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="emo.png", cAlternateFileName="")) returned 1 [0067.061] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8be7b21, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8be7b21, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8be7b21, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xf95, dwReserved0=0x0, dwReserved1=0x0, cFileName="envy.png", cAlternateFileName="")) returned 1 [0067.061] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8be7b21, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8c0dd7f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8c0dd7f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xf75, dwReserved0=0x0, dwReserved1=0x0, cFileName="evilgrin.png", cAlternateFileName="")) returned 1 [0067.061] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c0dd7f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8c33fd8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8c33fd8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x15de, dwReserved0=0x0, dwReserved1=0x0, cFileName="facepalm.png", cAlternateFileName="")) returned 1 [0067.061] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c33fd8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8c5a236, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8c5a236, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x13cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="fingerscrossed.png", cAlternateFileName="")) returned 1 [0067.061] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c5a236, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8c8048f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8c8048f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1090, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower.png", cAlternateFileName="")) returned 1 [0067.061] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c8048f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8c8048f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8c8048f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x13d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="giggle.png", cAlternateFileName="")) returned 1 [0067.061] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c8048f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8ca66e8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8ca66e8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1462, dwReserved0=0x0, dwReserved1=0x0, cFileName="handshake.png", cAlternateFileName="")) returned 1 [0067.062] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ca66e8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8ccc946, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8ccc946, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xf7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="happy.png", cAlternateFileName="")) returned 1 [0067.062] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ccc946, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8ccc946, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8ccc946, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1589, dwReserved0=0x0, dwReserved1=0x0, cFileName="headbang.png", cAlternateFileName="")) returned 1 [0067.062] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ccc946, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8ccc946, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8ccc946, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x13d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="heart.png", cAlternateFileName="")) returned 1 [0067.062] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ccc946, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8cf2b9f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8cf2b9f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1e8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="heidy.png", cAlternateFileName="")) returned 1 [0067.062] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cf2b9f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8d18dfd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8d18dfd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x146f, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi.png", cAlternateFileName="")) returned 1 [0067.063] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d18dfd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8d3f057, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8d3f057, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x12a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="highfive.png", cAlternateFileName="")) returned 1 [0067.063] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d3f057, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8d652b0, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8d652b0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1b42, dwReserved0=0x0, dwReserved1=0x0, cFileName="hug.png", cAlternateFileName="")) returned 1 [0067.063] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d652b0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8d652b0, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8d652b0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1787, dwReserved0=0x0, dwReserved1=0x0, cFileName="idea.png", cAlternateFileName="")) returned 1 [0067.063] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d652b0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8d652b0, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8d652b0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x138d, dwReserved0=0x0, dwReserved1=0x0, cFileName="inlove.png", cAlternateFileName="")) returned 1 [0067.063] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d8b50e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8d8b50e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8d8b50e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1522, dwReserved0=0x0, dwReserved1=0x0, cFileName="itwasntme.png", cAlternateFileName="")) returned 1 [0067.063] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d8b50e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8d8b50e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8d8b50e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x112d, dwReserved0=0x0, dwReserved1=0x0, cFileName="kiss.png", cAlternateFileName="")) returned 1 [0067.063] FindNextFileW (in: hFindFile=0x215470, lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d8b50e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8d8b50e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8d8b50e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xf0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="lalala.png", cAlternateFileName="")) returned 1 [0067.065] GetProcessHeap () returned 0x120000 [0067.066] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0067.066] GetProcessHeap () returned 0x120000 [0067.066] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0067.066] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Designs\\Emoticons\\small\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9229e15, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb067e10d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x97fd903, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0067.069] GetProcessHeap () returned 0x120000 [0067.069] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0067.069] GetProcessHeap () returned 0x120000 [0067.069] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0067.071] GetProcessHeap () returned 0x120000 [0067.071] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0067.072] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Designs\\Flags\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9823b5c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb067f17b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa4790d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215330 [0067.073] GetProcessHeap () returned 0x120000 [0067.073] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0067.073] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Designs\\Flags\\large\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9823b5c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0801800, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa4790d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0067.080] GetProcessHeap () returned 0x120000 [0067.080] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0067.080] GetProcessHeap () returned 0x120000 [0067.080] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0067.080] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Designs\\Flags\\small\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4790d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb08d0d29, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab6490e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156b0 [0067.185] GetProcessHeap () returned 0x120000 [0067.185] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0067.185] GetProcessHeap () returned 0x120000 [0067.185] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0067.186] GetProcessHeap () returned 0x120000 [0067.186] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0067.186] GetProcessHeap () returned 0x120000 [0067.186] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.187] GetProcessHeap () returned 0x120000 [0067.187] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.187] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\_Resources\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7482940, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb03fb4c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7482940, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0067.188] GetProcessHeap () returned 0x120000 [0067.188] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.188] GetProcessHeap () returned 0x120000 [0067.188] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0067.188] GetProcessHeap () returned 0x120000 [0067.188] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0067.189] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x137b8f21, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xdfec7dad, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdfec7dad, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0067.190] GetProcessHeap () returned 0x120000 [0067.190] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.191] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x138053d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0975177, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x138053d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0067.191] GetProcessHeap () returned 0x120000 [0067.191] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.191] GetProcessHeap () returned 0x120000 [0067.191] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.191] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x138053d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb09dc5d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1385188b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215130 [0067.194] GetProcessHeap () returned 0x120000 [0067.194] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.194] GetProcessHeap () returned 0x120000 [0067.194] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.194] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdfec7dad, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xdfec7dad, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdfec7dad, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215270 [0067.196] GetProcessHeap () returned 0x120000 [0067.196] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.196] GetProcessHeap () returned 0x120000 [0067.196] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0067.196] GetProcessHeap () returned 0x120000 [0067.196] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0067.197] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1374681a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xdfea1b47, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdfea1b47, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157f0 [0067.198] GetProcessHeap () returned 0x120000 [0067.198] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.199] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1374681a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0a25f5b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1374681a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0067.199] GetProcessHeap () returned 0x120000 [0067.199] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.199] GetProcessHeap () returned 0x120000 [0067.199] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.199] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdfea1b47, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb0a26390, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdfea1b47, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152b0 [0067.199] GetProcessHeap () returned 0x120000 [0067.199] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.199] GetProcessHeap () returned 0x120000 [0067.199] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0067.200] GetProcessHeap () returned 0x120000 [0067.200] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0067.200] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9eace405, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb0a85441, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5b9575e3, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0067.202] GetProcessHeap () returned 0x120000 [0067.202] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.202] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9eace405, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb0a862ba, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9eace405, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0067.202] GetProcessHeap () returned 0x120000 [0067.202] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.202] GetProcessHeap () returned 0x120000 [0067.202] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.203] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5b9575e3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe5ee7834, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xe5ee7834, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0067.203] GetProcessHeap () returned 0x120000 [0067.203] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0067.203] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ee7834, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xe5ee7834, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xe5ee7834, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0067.203] GetProcessHeap () returned 0x120000 [0067.203] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0067.203] GetProcessHeap () returned 0x120000 [0067.203] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.204] GetProcessHeap () returned 0x120000 [0067.204] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0067.204] GetProcessHeap () returned 0x120000 [0067.204] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0067.204] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9eb8d19b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb0ace717, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5b6ced31, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0067.205] GetProcessHeap () returned 0x120000 [0067.205] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.206] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ebb321a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb0acfda8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9ebb321a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0067.206] GetProcessHeap () returned 0x120000 [0067.206] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.206] GetProcessHeap () returned 0x120000 [0067.206] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.206] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5b6ced31, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe665ae03, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xe665ae03, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0067.206] GetProcessHeap () returned 0x120000 [0067.206] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0067.206] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe665ae03, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xe665ae03, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xe665ae03, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156b0 [0067.207] GetProcessHeap () returned 0x120000 [0067.207] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0067.207] GetProcessHeap () returned 0x120000 [0067.207] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.207] GetProcessHeap () returned 0x120000 [0067.207] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0067.207] GetProcessHeap () returned 0x120000 [0067.207] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0067.207] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12fc9b2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb13a1d82, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb13a1d82, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215330 [0067.209] GetProcessHeap () returned 0x120000 [0067.209] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.209] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1348e69, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0b1b1e8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1348e69, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0067.209] GetProcessHeap () returned 0x120000 [0067.209] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.209] GetProcessHeap () returned 0x120000 [0067.210] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.210] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb13a1d82, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xec3ce583, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xec3ce583, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0067.210] GetProcessHeap () returned 0x120000 [0067.210] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0067.210] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec3ce583, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xec3ce583, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xec3ce583, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0067.211] GetProcessHeap () returned 0x120000 [0067.211] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0067.211] GetProcessHeap () returned 0x120000 [0067.211] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.211] GetProcessHeap () returned 0x120000 [0067.211] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0067.212] GetProcessHeap () returned 0x120000 [0067.212] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0067.212] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1538d09, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0d397aa, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb0d397aa, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0067.213] GetProcessHeap () returned 0x120000 [0067.213] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.214] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x155ef67, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0bda2d2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x155ef67, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0067.214] GetProcessHeap () returned 0x120000 [0067.214] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.214] GetProcessHeap () returned 0x120000 [0067.214] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.214] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb0d397aa, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xec1de6d7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xec1de6d7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0067.214] GetProcessHeap () returned 0x120000 [0067.215] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0067.215] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec1de6d7, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xec1de6d7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xec1de6d7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155f0 [0067.215] GetProcessHeap () returned 0x120000 [0067.215] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0067.215] GetProcessHeap () returned 0x120000 [0067.215] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.215] GetProcessHeap () returned 0x120000 [0067.215] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0067.215] GetProcessHeap () returned 0x120000 [0067.215] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0067.215] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7e7ba3c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xe09a894e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe09a894e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215570 [0067.274] GetProcessHeap () returned 0x120000 [0067.274] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.274] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7e7ba3c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0c2f555, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa7e7ba3c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215770 [0067.275] GetProcessHeap () returned 0x120000 [0067.275] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.275] GetProcessHeap () returned 0x120000 [0067.275] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.275] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe098276e, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb0c2fbb1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe098276e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0067.276] GetProcessHeap () returned 0x120000 [0067.276] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.276] GetProcessHeap () returned 0x120000 [0067.276] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0067.277] GetProcessHeap () returned 0x120000 [0067.277] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0067.277] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8150701, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xe09a894e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe09a894e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158f0 [0067.278] GetProcessHeap () returned 0x120000 [0067.278] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.279] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa819cbaf, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0d1f064, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa819cbaf, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0067.279] GetProcessHeap () returned 0x120000 [0067.279] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.279] GetProcessHeap () returned 0x120000 [0067.279] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.279] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa819cbaf, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0d716f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa820f2c9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157f0 [0067.288] GetProcessHeap () returned 0x120000 [0067.288] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.288] GetProcessHeap () returned 0x120000 [0067.288] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.288] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\js\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa820f2c9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0d721ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa820f2c9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215670 [0067.289] GetProcessHeap () returned 0x120000 [0067.289] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.289] GetProcessHeap () returned 0x120000 [0067.289] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.289] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe09a894e, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xc770c60a, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc770c60a, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0067.289] GetProcessHeap () returned 0x120000 [0067.289] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0067.289] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc770c60a, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc770c60a, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc770c60a, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155f0 [0067.290] GetProcessHeap () returned 0x120000 [0067.290] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0067.290] GetProcessHeap () returned 0x120000 [0067.290] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.290] GetProcessHeap () returned 0x120000 [0067.290] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0067.291] GetProcessHeap () returned 0x120000 [0067.291] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0067.291] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe563d29, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb0e615f0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x716c6041, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0067.293] GetProcessHeap () returned 0x120000 [0067.293] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.294] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe589f8c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb0f30e8c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xbe5b019c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215230 [0067.296] GetProcessHeap () returned 0x120000 [0067.296] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.296] GetProcessHeap () returned 0x120000 [0067.296] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.296] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x716c6041, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xb0f31d41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x716c6041, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0067.296] GetProcessHeap () returned 0x120000 [0067.296] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.296] GetProcessHeap () returned 0x120000 [0067.296] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0067.297] GetProcessHeap () returned 0x120000 [0067.297] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0067.297] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86d169f9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xe8ca3fa7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe8ca3fa7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0067.298] GetProcessHeap () returned 0x120000 [0067.298] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.299] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86d3cc52, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0f84b23, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x86deed4d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156b0 [0067.301] GetProcessHeap () returned 0x120000 [0067.301] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.301] GetProcessHeap () returned 0x120000 [0067.301] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.301] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86deed4d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0f85922, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x86deed4d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0067.301] GetProcessHeap () returned 0x120000 [0067.301] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0067.301] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86deed4d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb104434a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x86e3b22e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0067.303] GetProcessHeap () returned 0x120000 [0067.303] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0067.303] GetProcessHeap () returned 0x120000 [0067.303] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.303] GetProcessHeap () returned 0x120000 [0067.304] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.304] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe8ca3fa7, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xe8ca3fa7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe8ca3fa7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215570 [0067.305] GetProcessHeap () returned 0x120000 [0067.305] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.305] GetProcessHeap () returned 0x120000 [0067.305] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0067.306] GetProcessHeap () returned 0x120000 [0067.306] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0067.306] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86e61487, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xe8ca3fa7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe8ca3fa7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158f0 [0067.307] GetProcessHeap () returned 0x120000 [0067.307] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.308] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86ead93a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb10a896e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x86ef9df1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0067.522] GetProcessHeap () returned 0x120000 [0067.522] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.522] GetProcessHeap () returned 0x120000 [0067.522] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.522] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86ef9df1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb10a9b5e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x86ef9df1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0067.522] GetProcessHeap () returned 0x120000 [0067.522] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0067.522] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86ef9df1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1139167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x86f5a04b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155f0 [0067.524] GetProcessHeap () returned 0x120000 [0067.524] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0067.524] GetProcessHeap () returned 0x120000 [0067.524] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.525] GetProcessHeap () returned 0x120000 [0067.525] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.525] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe8ca3fa7, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xe8ca3fa7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe8ca3fa7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0067.525] GetProcessHeap () returned 0x120000 [0067.525] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.525] GetProcessHeap () returned 0x120000 [0067.525] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0067.526] GetProcessHeap () returned 0x120000 [0067.526] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0067.526] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845121d2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xe8ca3fa7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe8ca3fa7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215770 [0067.527] GetProcessHeap () returned 0x120000 [0067.527] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.527] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppCS\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x846696fa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb113db64, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x846696fa, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157b0 [0067.527] GetProcessHeap () returned 0x120000 [0067.527] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0067.527] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppCS\\Assets\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x846696fa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb113ea79, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x846696fa, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0067.528] GetProcessHeap () returned 0x120000 [0067.528] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0067.528] GetProcessHeap () returned 0x120000 [0067.528] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.528] GetProcessHeap () returned 0x120000 [0067.528] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.528] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845848da, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb113f7c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x845848da, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0067.529] GetProcessHeap () returned 0x120000 [0067.529] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.530] GetProcessHeap () returned 0x120000 [0067.530] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.530] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8468f958, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb120ddc0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x85423bf4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0067.532] GetProcessHeap () returned 0x120000 [0067.532] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.532] GetProcessHeap () returned 0x120000 [0067.532] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.532] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Bing.Immersive\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x854700ab, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb120f88d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x854700ab, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0067.533] GetProcessHeap () returned 0x120000 [0067.533] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0067.533] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Bing.Immersive\\Shaders\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x854700ab, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1210963, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8549630e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215830 [0067.533] GetProcessHeap () returned 0x120000 [0067.533] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0067.533] GetProcessHeap () returned 0x120000 [0067.533] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.534] GetProcessHeap () returned 0x120000 [0067.534] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.534] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Lumia.AppTk.NativeDirect3d.UAP\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8565ff4b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1211054, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8565ff4b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0067.535] GetProcessHeap () returned 0x120000 [0067.535] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.535] GetProcessHeap () returned 0x120000 [0067.535] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.535] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Lumia.VideoTk\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85744d6c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1306fa7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x857b747c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157f0 [0067.536] GetProcessHeap () returned 0x120000 [0067.536] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.537] GetProcessHeap () returned 0x120000 [0067.537] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.537] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Lumia.ViewerPlugin\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x857b747c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1308123, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x858571c5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0067.538] GetProcessHeap () returned 0x120000 [0067.538] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0067.538] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x857b747c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb136b57a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x85803933, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215670 [0067.540] GetProcessHeap () returned 0x120000 [0067.540] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0067.540] GetProcessHeap () returned 0x120000 [0067.540] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0067.540] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Lumia.ViewerPlugin\\CinemagraphDelegate\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85830f47, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb136be4d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x85830f47, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0067.541] GetProcessHeap () returned 0x120000 [0067.541] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0067.541] GetProcessHeap () returned 0x120000 [0067.541] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0067.541] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Common\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85830f47, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb136cb5e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x85830f47, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0067.541] GetProcessHeap () returned 0x120000 [0067.541] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0067.541] GetProcessHeap () returned 0x120000 [0067.541] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0067.541] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Lumia.ViewerPlugin\\CompositeSurface\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x858571c5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb136d809, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x858571c5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215170 [0067.542] GetProcessHeap () returned 0x120000 [0067.542] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0067.542] GetProcessHeap () returned 0x120000 [0067.542] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0067.542] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Lumia.ViewerPlugin\\JpegSurface\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x858571c5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb136e08a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x858571c5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215530 [0067.542] GetProcessHeap () returned 0x120000 [0067.542] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0067.542] GetProcessHeap () returned 0x120000 [0067.542] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0067.542] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Lumia.ViewerPlugin\\ReliveSurfaces\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x858571c5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb136e5d8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8587d423, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0067.542] GetProcessHeap () returned 0x120000 [0067.542] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0067.543] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Lumia.ViewerPlugin\\ReliveSurfaces\\Preview\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x858571c5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb136f0e3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x858571c5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215170 [0067.544] GetProcessHeap () returned 0x120000 [0067.544] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0067.544] GetProcessHeap () returned 0x120000 [0067.544] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0067.544] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Lumia.ViewerPlugin\\ReliveSurfaces\\Sequence\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x858571c5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb136fa8b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x858571c5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0067.544] GetProcessHeap () returned 0x120000 [0067.544] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0067.544] GetProcessHeap () returned 0x120000 [0067.544] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0067.545] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Lumia.ViewerPlugin\\ReliveSurfaces\\Video\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8587d423, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb13701c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8587d423, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0067.545] GetProcessHeap () returned 0x120000 [0067.545] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0067.545] GetProcessHeap () returned 0x120000 [0067.545] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0067.545] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Lumia.ViewerPlugin\\ReliveSurfaces\\ZoomPan\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8587d423, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb13708b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8587d423, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215270 [0067.545] GetProcessHeap () returned 0x120000 [0067.545] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0067.545] GetProcessHeap () returned 0x120000 [0067.545] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0067.547] GetProcessHeap () returned 0x120000 [0067.547] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.547] GetProcessHeap () returned 0x120000 [0067.547] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.547] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe8ca3fa7, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xec4ff828, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xec4ff828, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0067.547] GetProcessHeap () returned 0x120000 [0067.547] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.547] GetProcessHeap () returned 0x120000 [0067.547] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.547] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\PhotosApp\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8644bef6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1371afa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x86472154, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215530 [0067.548] GetProcessHeap () returned 0x120000 [0067.548] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0067.548] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\PhotosApp\\Assets\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86472154, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1372638, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x86472154, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0067.548] GetProcessHeap () returned 0x120000 [0067.548] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0067.549] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\PhotosApp\\Assets\\ThirdPartyNotices\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86472154, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb13730f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x86472154, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0067.549] GetProcessHeap () returned 0x120000 [0067.549] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0067.549] GetProcessHeap () returned 0x120000 [0067.549] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0067.551] GetProcessHeap () returned 0x120000 [0067.551] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.551] GetProcessHeap () returned 0x120000 [0067.551] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0067.552] GetProcessHeap () returned 0x120000 [0067.552] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0067.552] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84322329, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xe8c7dd6a, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe8c7dd6a, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215170 [0067.553] GetProcessHeap () returned 0x120000 [0067.553] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.554] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84322329, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb13da82d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x84322329, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0067.554] GetProcessHeap () returned 0x120000 [0067.554] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.554] GetProcessHeap () returned 0x120000 [0067.554] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.554] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe8c7dd6a, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xe8c7dd6a, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe8c7dd6a, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157f0 [0067.554] GetProcessHeap () returned 0x120000 [0067.554] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.555] GetProcessHeap () returned 0x120000 [0067.555] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0067.555] GetProcessHeap () returned 0x120000 [0067.555] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0067.555] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x485b9d47, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xebb94597, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xebb94597, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0067.557] GetProcessHeap () returned 0x120000 [0067.557] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.557] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x485b9d47, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1437fbe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4878db60, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0067.632] GetProcessHeap () returned 0x120000 [0067.632] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.632] GetProcessHeap () returned 0x120000 [0067.632] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.633] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xebb94597, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xebb94597, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xebb94597, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0067.633] GetProcessHeap () returned 0x120000 [0067.633] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.633] GetProcessHeap () returned 0x120000 [0067.633] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0067.634] GetProcessHeap () returned 0x120000 [0067.634] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0067.634] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x479ad420, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xebb94597, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xebb94597, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155f0 [0067.635] GetProcessHeap () returned 0x120000 [0067.635] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.636] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x47a4c028, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb143a0a2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x47a4c028, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215130 [0067.636] GetProcessHeap () returned 0x120000 [0067.636] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.636] GetProcessHeap () returned 0x120000 [0067.636] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.636] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x47a7225c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1502df3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x48164a4b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215170 [0067.642] GetProcessHeap () returned 0x120000 [0067.642] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.643] GetProcessHeap () returned 0x120000 [0067.643] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.643] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xebb94597, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x85720f04, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x85720f04, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215570 [0067.643] GetProcessHeap () returned 0x120000 [0067.643] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.643] GetProcessHeap () returned 0x120000 [0067.643] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0067.648] GetProcessHeap () returned 0x120000 [0067.648] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0067.649] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x47932bea, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xebb94597, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xebb94597, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158f0 [0067.650] GetProcessHeap () returned 0x120000 [0067.650] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.651] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x47932bea, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb15ba85a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x47932bea, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0067.651] GetProcessHeap () returned 0x120000 [0067.651] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.651] GetProcessHeap () returned 0x120000 [0067.651] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.651] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xebb94597, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xebb94597, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xebb94597, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215830 [0067.652] GetProcessHeap () returned 0x120000 [0067.652] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.652] GetProcessHeap () returned 0x120000 [0067.652] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0067.653] GetProcessHeap () returned 0x120000 [0067.653] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0067.653] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c8c485e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xee789c53, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xee789c53, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0067.655] GetProcessHeap () returned 0x120000 [0067.655] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.657] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c910d15, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb160da7b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4c9f5b36, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157b0 [0067.662] GetProcessHeap () returned 0x120000 [0067.662] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.662] GetProcessHeap () returned 0x120000 [0067.662] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.662] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xee789c53, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xee789c53, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xee789c53, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157f0 [0067.663] GetProcessHeap () returned 0x120000 [0067.663] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.663] GetProcessHeap () returned 0x120000 [0067.663] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0067.664] GetProcessHeap () returned 0x120000 [0067.664] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0067.664] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c079ab6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xee763a10, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xee763a10, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215330 [0067.665] GetProcessHeap () returned 0x120000 [0067.665] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.666] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c0c5f69, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1610dce, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4c0c5f69, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0067.666] GetProcessHeap () returned 0x120000 [0067.666] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.666] GetProcessHeap () returned 0x120000 [0067.666] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.666] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c0ee003, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1753caa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4c55722f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0067.672] GetProcessHeap () returned 0x120000 [0067.672] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.672] GetProcessHeap () returned 0x120000 [0067.672] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.672] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xee763a10, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xc1bb8bed, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc1bb8bed, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215670 [0067.672] GetProcessHeap () returned 0x120000 [0067.672] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.672] GetProcessHeap () returned 0x120000 [0067.673] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0067.673] GetProcessHeap () returned 0x120000 [0067.673] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0067.674] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4bcf41f6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xee763a10, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xee763a10, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0067.675] GetProcessHeap () returned 0x120000 [0067.675] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.675] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4bd1a450, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb17a168b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4bd1a450, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215330 [0067.675] GetProcessHeap () returned 0x120000 [0067.675] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.676] GetProcessHeap () returned 0x120000 [0067.676] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.676] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xee763a10, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xee763a10, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xee763a10, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0067.676] GetProcessHeap () returned 0x120000 [0067.676] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.676] GetProcessHeap () returned 0x120000 [0067.676] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0067.677] GetProcessHeap () returned 0x120000 [0067.677] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0067.677] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x924af4b0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf0ee0a7b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf0ee0a7b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215770 [0067.740] GetProcessHeap () returned 0x120000 [0067.740] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.740] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x924d5709, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb184beda, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x924d5709, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0067.741] GetProcessHeap () returned 0x120000 [0067.741] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0067.741] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x924d5709, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb18b5b34, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x925289b3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0067.743] GetProcessHeap () returned 0x120000 [0067.743] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0067.743] GetProcessHeap () returned 0x120000 [0067.743] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.743] GetProcessHeap () returned 0x120000 [0067.743] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.743] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf0ee0a7b, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xf0ee0a7b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf0ee0a7b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152b0 [0067.744] GetProcessHeap () returned 0x120000 [0067.744] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.744] GetProcessHeap () returned 0x120000 [0067.744] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0067.745] GetProcessHeap () returned 0x120000 [0067.745] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0067.745] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92a96d25, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf0ee0a7b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf0ee0a7b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156b0 [0067.746] GetProcessHeap () returned 0x120000 [0067.746] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.747] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92ae31dc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb196874e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92ae31dc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0067.747] GetProcessHeap () returned 0x120000 [0067.747] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0067.747] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92ae31dc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1a4790e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92d27c4b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0067.749] GetProcessHeap () returned 0x120000 [0067.749] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0067.749] GetProcessHeap () returned 0x120000 [0067.749] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.749] GetProcessHeap () returned 0x120000 [0067.749] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.749] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf0ee0a7b, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xf0ee0a7b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf0ee0a7b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215570 [0067.750] GetProcessHeap () returned 0x120000 [0067.750] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.750] GetProcessHeap () returned 0x120000 [0067.750] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0067.751] GetProcessHeap () returned 0x120000 [0067.751] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0067.751] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91aa5e6e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf0eba822, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf0eba822, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0067.752] GetProcessHeap () returned 0x120000 [0067.752] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.753] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91aa5e6e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1ad3afc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91aa5e6e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0067.753] GetProcessHeap () returned 0x120000 [0067.753] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.753] GetProcessHeap () returned 0x120000 [0067.753] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.753] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf0eba822, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xf0eba822, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf0eba822, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0067.754] GetProcessHeap () returned 0x120000 [0067.754] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.754] GetProcessHeap () returned 0x120000 [0067.754] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0067.755] GetProcessHeap () returned 0x120000 [0067.755] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0067.755] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91d7ab3d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf0eba822, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf0eba822, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0067.756] GetProcessHeap () returned 0x120000 [0067.756] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.756] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91dc6fe6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1b532af, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91dc6fe6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215230 [0067.757] GetProcessHeap () returned 0x120000 [0067.757] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.757] GetProcessHeap () returned 0x120000 [0067.757] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.757] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91dc6fe6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1b53ee0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91e396fc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215830 [0067.758] GetProcessHeap () returned 0x120000 [0067.758] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0067.758] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\EnsoUI\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91dc6fe6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1b54824, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91ded244, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0067.758] GetProcessHeap () returned 0x120000 [0067.758] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0067.758] GetProcessHeap () returned 0x120000 [0067.758] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0067.758] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91ded244, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1c1b81a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91e1349e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0067.760] GetProcessHeap () returned 0x120000 [0067.760] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0067.760] GetProcessHeap () returned 0x120000 [0067.760] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0067.760] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Sounds\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91e1349e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1c1c741, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91e396fc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0067.760] GetProcessHeap () returned 0x120000 [0067.760] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0067.760] GetProcessHeap () returned 0x120000 [0067.760] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0067.760] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91e396fc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1c9ee0f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92141e7c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0067.765] GetProcessHeap () returned 0x120000 [0067.765] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0067.765] GetProcessHeap () returned 0x120000 [0067.765] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.765] GetProcessHeap () returned 0x120000 [0067.765] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.765] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf0eba822, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb1ca075e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xf0eba822, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0067.766] GetProcessHeap () returned 0x120000 [0067.766] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.766] GetProcessHeap () returned 0x120000 [0067.766] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0067.766] GetProcessHeap () returned 0x120000 [0067.766] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0067.767] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182554a4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf78f971b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf78f971b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0067.767] GetProcessHeap () returned 0x120000 [0067.767] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.768] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18314067, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1cf6222, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x18314067, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156b0 [0067.768] GetProcessHeap () returned 0x120000 [0067.768] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.768] GetProcessHeap () returned 0x120000 [0067.768] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.768] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-gb\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186f3da6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1d89b7d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x187b296e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215330 [0067.770] GetProcessHeap () returned 0x120000 [0067.770] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.770] GetProcessHeap () returned 0x120000 [0067.770] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.770] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x187f4c6b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1e11b3c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x189221ca, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0067.772] GetProcessHeap () returned 0x120000 [0067.772] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.772] GetProcessHeap () returned 0x120000 [0067.772] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.772] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\fonts\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x189948d6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1e12880, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x189948d6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0067.773] GetProcessHeap () returned 0x120000 [0067.773] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.773] GetProcessHeap () returned 0x120000 [0067.773] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.773] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x199ac747, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1f59bda, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1d9063ff, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0067.835] GetProcessHeap () returned 0x120000 [0067.835] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0067.835] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\contrast-black\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1aa1da70, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb20a74ff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1b6ddbe6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0067.846] GetProcessHeap () returned 0x120000 [0067.846] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0067.846] GetProcessHeap () returned 0x120000 [0067.846] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0067.846] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\contrast-white\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b72a09e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb213bc33, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1c4bf701, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0067.857] GetProcessHeap () returned 0x120000 [0067.857] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0067.865] GetProcessHeap () returned 0x120000 [0067.865] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.865] GetProcessHeap () returned 0x120000 [0067.865] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.865] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf78f971b, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xf78f971b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf78f971b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0067.865] GetProcessHeap () returned 0x120000 [0067.865] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.865] GetProcessHeap () returned 0x120000 [0067.865] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.865] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\models\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1dad0045, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb21bd0e7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1dd36a78, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155f0 [0067.867] GetProcessHeap () returned 0x120000 [0067.867] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.868] GetProcessHeap () returned 0x120000 [0067.868] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.868] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\sr-cyrl-cs\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x203a8a50, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb21be58d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x203a8a50, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0067.868] GetProcessHeap () returned 0x120000 [0067.868] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.868] GetProcessHeap () returned 0x120000 [0067.868] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.868] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\sr-latn-cs\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x203a8a50, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb21bf209, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x203a8a50, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0067.868] GetProcessHeap () returned 0x120000 [0067.868] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.868] GetProcessHeap () returned 0x120000 [0067.868] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.868] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\telemetryrules\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x203ceca9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb21bffdc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x203f4f02, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215770 [0067.869] GetProcessHeap () returned 0x120000 [0067.869] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.869] GetProcessHeap () returned 0x120000 [0067.869] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0067.869] GetProcessHeap () returned 0x120000 [0067.869] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0067.870] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x181968dc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf78d353e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf78d353e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215570 [0067.871] GetProcessHeap () returned 0x120000 [0067.871] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.872] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x181bcb35, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2264955, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x181bcb35, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158f0 [0067.872] GetProcessHeap () returned 0x120000 [0067.872] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.872] GetProcessHeap () returned 0x120000 [0067.872] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.872] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf78d353e, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb2264fc2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xf78d353e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0067.873] GetProcessHeap () returned 0x120000 [0067.873] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.873] GetProcessHeap () returned 0x120000 [0067.873] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0067.873] GetProcessHeap () returned 0x120000 [0067.873] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0067.874] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50f88bbd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf97d1eca, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf97d1eca, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0067.876] GetProcessHeap () returned 0x120000 [0067.876] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.877] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50faee11, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb236c85a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51099929, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157f0 [0067.879] GetProcessHeap () returned 0x120000 [0067.879] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.879] GetProcessHeap () returned 0x120000 [0067.879] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.879] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf97d1eca, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xf97d1eca, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf97d1eca, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215670 [0067.880] GetProcessHeap () returned 0x120000 [0067.880] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.880] GetProcessHeap () returned 0x120000 [0067.880] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0067.881] GetProcessHeap () returned 0x120000 [0067.881] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0067.881] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ff71b46, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf97abca3, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf97abca3, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0067.969] GetProcessHeap () returned 0x120000 [0067.969] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.970] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ff71b46, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb23d70f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4ff71b46, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155f0 [0067.970] GetProcessHeap () returned 0x120000 [0067.970] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.970] GetProcessHeap () returned 0x120000 [0067.970] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.970] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf97abca3, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xf97abca3, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf97abca3, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0067.971] GetProcessHeap () returned 0x120000 [0067.971] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.971] GetProcessHeap () returned 0x120000 [0067.971] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0067.972] GetProcessHeap () returned 0x120000 [0067.972] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0067.972] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5011552a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf97abca3, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf97abca3, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0067.973] GetProcessHeap () returned 0x120000 [0067.973] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.974] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5013b788, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb23d8b82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x501619e2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215230 [0067.974] GetProcessHeap () returned 0x120000 [0067.974] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.974] GetProcessHeap () returned 0x120000 [0067.974] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.974] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50187c3b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb24969c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x50509bf1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156b0 [0067.976] GetProcessHeap () returned 0x120000 [0067.976] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0067.976] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\Fonts\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x501ade99, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2497e66, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x501ade99, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0067.979] GetProcessHeap () returned 0x120000 [0067.979] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0067.981] GetProcessHeap () returned 0x120000 [0067.981] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0067.981] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\Retail\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504bd736, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2498947, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x504e398f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215230 [0067.981] GetProcessHeap () returned 0x120000 [0067.981] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0067.981] GetProcessHeap () returned 0x120000 [0067.981] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0067.981] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\ThankYou\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504e398f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2499429, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x50509bf1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0067.981] GetProcessHeap () returned 0x120000 [0067.982] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0067.982] GetProcessHeap () returned 0x120000 [0067.982] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.982] GetProcessHeap () returned 0x120000 [0067.982] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.983] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\HoloAssets\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x505560a4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb249a097, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x505560a4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215170 [0067.983] GetProcessHeap () returned 0x120000 [0067.983] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.983] GetProcessHeap () returned 0x120000 [0067.983] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.983] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf97abca3, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbeb29071, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xbeb29071, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155f0 [0067.983] GetProcessHeap () returned 0x120000 [0067.983] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.983] GetProcessHeap () returned 0x120000 [0067.983] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.983] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Styling\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e0b429, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb249b3d8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x50e0b429, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155f0 [0067.983] GetProcessHeap () returned 0x120000 [0067.983] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0067.983] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Styling\\css\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e0b429, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb249c186, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x50e31682, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0067.984] GetProcessHeap () returned 0x120000 [0067.984] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0067.984] GetProcessHeap () returned 0x120000 [0067.984] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.984] GetProcessHeap () returned 0x120000 [0067.984] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0067.984] GetProcessHeap () returned 0x120000 [0067.984] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0067.985] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8aea982c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xfd4ea481, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xfd4ea481, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0067.986] GetProcessHeap () returned 0x120000 [0067.986] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.987] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8aea982c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb253a43f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8aea982c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215670 [0067.987] GetProcessHeap () returned 0x120000 [0067.987] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.987] GetProcessHeap () returned 0x120000 [0067.987] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.987] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfd4ea481, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xfd4ea481, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xfd4ea481, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0067.988] GetProcessHeap () returned 0x120000 [0067.988] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0067.988] GetProcessHeap () returned 0x120000 [0067.988] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0067.989] GetProcessHeap () returned 0x120000 [0067.989] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0067.989] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d01521b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xfd5106b5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xfd5106b5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0067.991] GetProcessHeap () returned 0x120000 [0067.991] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0067.991] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d0fa03c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb253d3a4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d25784d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0067.991] GetProcessHeap () returned 0x120000 [0067.991] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0067.991] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppTiles\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d0fa03c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb25946d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d198c81, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0067.993] GetProcessHeap () returned 0x120000 [0067.993] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0067.994] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d0fa03c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb25f5277, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d12029a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215830 [0067.996] GetProcessHeap () returned 0x120000 [0067.996] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0067.996] GetProcessHeap () returned 0x120000 [0067.996] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0067.996] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d12029a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb263e5bd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d172a07, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0067.998] GetProcessHeap () returned 0x120000 [0067.998] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0067.998] GetProcessHeap () returned 0x120000 [0067.998] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0068.000] GetProcessHeap () returned 0x120000 [0068.000] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0068.000] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\Images\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d198c81, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb263f1df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d198c81, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0068.000] GetProcessHeap () returned 0x120000 [0068.000] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0068.002] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\Images\\Ratings\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d198c81, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb26aeba4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d2315ef, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0068.004] GetProcessHeap () returned 0x120000 [0068.004] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0068.004] GetProcessHeap () returned 0x120000 [0068.004] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0068.005] GetProcessHeap () returned 0x120000 [0068.005] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0068.005] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d25784d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb26afa42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d733784, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215670 [0068.007] GetProcessHeap () returned 0x120000 [0068.007] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0068.008] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Car\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d25784d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb26b084c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d2a3d00, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0068.099] GetProcessHeap () returned 0x120000 [0068.099] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0068.099] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Car\\LTR\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d25784d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb273bedf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d27daa6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0068.101] GetProcessHeap () returned 0x120000 [0068.101] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0068.101] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Car\\LTR\\contrast-black\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d25784d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb273ce6d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d25784d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215530 [0068.101] GetProcessHeap () returned 0x120000 [0068.101] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0068.101] GetProcessHeap () returned 0x120000 [0068.101] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0068.101] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Car\\LTR\\contrast-white\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d25784d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb273db4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d27daa6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215530 [0068.101] GetProcessHeap () returned 0x120000 [0068.101] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0068.101] GetProcessHeap () returned 0x120000 [0068.101] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0068.103] GetProcessHeap () returned 0x120000 [0068.103] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0068.104] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Car\\RTL\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d2a3d00, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb27a8e4b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d2c9f5d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0068.105] GetProcessHeap () returned 0x120000 [0068.105] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0068.105] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Car\\RTL\\contrast-black\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d2a3d00, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb27a9e30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d2a3d00, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215170 [0068.106] GetProcessHeap () returned 0x120000 [0068.106] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0068.106] GetProcessHeap () returned 0x120000 [0068.106] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0068.106] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Car\\RTL\\contrast-white\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d2a3d00, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb27aa7bb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d2c9f5d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157b0 [0068.106] GetProcessHeap () returned 0x120000 [0068.106] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0068.106] GetProcessHeap () returned 0x120000 [0068.106] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0068.107] GetProcessHeap () returned 0x120000 [0068.107] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0068.109] GetProcessHeap () returned 0x120000 [0068.109] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0068.109] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Collections\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d2c9f5d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb27f7692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d2f25ea, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152b0 [0068.110] GetProcessHeap () returned 0x120000 [0068.110] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0068.110] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Collections\\contrast-black\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d2c9f5d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb287144a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d2c9f5d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156b0 [0068.113] GetProcessHeap () returned 0x120000 [0068.113] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0068.113] GetProcessHeap () returned 0x120000 [0068.113] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0068.113] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Collections\\contrast-white\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d2f25ea, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb28bfbaf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d2f25ea, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215770 [0068.115] GetProcessHeap () returned 0x120000 [0068.115] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0068.115] GetProcessHeap () returned 0x120000 [0068.115] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0068.116] GetProcessHeap () returned 0x120000 [0068.116] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0068.117] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d318869, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb28c0a27, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d51986a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215770 [0068.117] GetProcessHeap () returned 0x120000 [0068.117] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0068.117] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Car\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d318869, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb28c1827, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d368a9d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0068.118] GetProcessHeap () returned 0x120000 [0068.118] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0068.118] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Car\\LTR\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d318869, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb290fc02, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d33eac2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0068.120] GetProcessHeap () returned 0x120000 [0068.120] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0068.120] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Car\\LTR\\contrast-black\\*", lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d318869, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb29109e3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d318869, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0068.120] GetProcessHeap () returned 0x120000 [0068.120] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0068.120] GetProcessHeap () returned 0x120000 [0068.120] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0068.120] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Car\\LTR\\contrast-white\\*", lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d318869, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb291154c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d33eac2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0068.120] GetProcessHeap () returned 0x120000 [0068.120] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0068.120] GetProcessHeap () returned 0x120000 [0068.120] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0068.121] GetProcessHeap () returned 0x120000 [0068.121] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0068.121] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Car\\RTL\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d368a9d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2956f28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d390da3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215170 [0068.122] GetProcessHeap () returned 0x120000 [0068.122] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0068.122] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Car\\RTL\\contrast-black\\*", lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d368a9d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2957dbe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d36ab20, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0068.123] GetProcessHeap () returned 0x120000 [0068.123] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0068.123] GetProcessHeap () returned 0x120000 [0068.123] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0068.123] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Car\\RTL\\contrast-white\\*", lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d36ab20, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb29586aa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d390da3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157f0 [0068.123] GetProcessHeap () returned 0x120000 [0068.123] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0068.123] GetProcessHeap () returned 0x120000 [0068.123] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0068.123] GetProcessHeap () returned 0x120000 [0068.123] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0068.124] GetProcessHeap () returned 0x120000 [0068.124] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0068.125] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Home\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d390da3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2959420, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d4034b3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155f0 [0068.126] GetProcessHeap () returned 0x120000 [0068.126] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0068.126] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Home\\LTR\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d390da3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb29bb252, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d4034b3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156b0 [0068.127] GetProcessHeap () returned 0x120000 [0068.127] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0068.127] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Home\\LTR\\contrast-black\\*", lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d390da3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb29bc390, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d3b6ffc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0068.128] GetProcessHeap () returned 0x120000 [0068.128] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0068.128] GetProcessHeap () returned 0x120000 [0068.128] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0068.128] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Home\\LTR\\contrast-white\\*", lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d3b6ffc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb29bcc45, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d3dd25a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152b0 [0068.128] GetProcessHeap () returned 0x120000 [0068.128] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0068.128] GetProcessHeap () returned 0x120000 [0068.128] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0068.128] GetProcessHeap () returned 0x120000 [0068.128] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0068.128] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Home\\RTL\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d4034b3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2a0b8ce, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d44f96b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0068.130] GetProcessHeap () returned 0x120000 [0068.130] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0068.130] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Home\\RTL\\contrast-black\\*", lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d4034b3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2a0c5bd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d4034b3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0068.130] GetProcessHeap () returned 0x120000 [0068.130] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0068.130] GetProcessHeap () returned 0x120000 [0068.130] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0068.131] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Home\\RTL\\contrast-white\\*", lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d42970d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2a0cbbe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d42970d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157b0 [0068.131] GetProcessHeap () returned 0x120000 [0068.131] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0068.131] GetProcessHeap () returned 0x120000 [0068.131] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0068.131] GetProcessHeap () returned 0x120000 [0068.131] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0068.132] GetProcessHeap () returned 0x120000 [0068.132] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0068.133] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Place\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d44f96b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2a0dbbe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d4c207b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215170 [0068.134] GetProcessHeap () returned 0x120000 [0068.134] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0068.134] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Place\\LTR\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d44f96b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2a5dcf9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d4c207b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215570 [0068.267] GetProcessHeap () returned 0x120000 [0068.267] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0068.267] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Place\\LTR\\contrast-black\\*", lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d44f96b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2a5ee8f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d475bc4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215530 [0068.267] GetProcessHeap () returned 0x120000 [0068.267] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0068.267] GetProcessHeap () returned 0x120000 [0068.267] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0068.267] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Place\\LTR\\contrast-white\\*", lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d475bc4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2a5f62e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d49be1d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157b0 [0068.268] GetProcessHeap () returned 0x120000 [0068.268] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0068.268] GetProcessHeap () returned 0x120000 [0068.268] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0068.268] GetProcessHeap () returned 0x120000 [0068.268] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0068.268] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Place\\RTL\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d4c207b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2ab3fd5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d51986a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0068.270] GetProcessHeap () returned 0x120000 [0068.270] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0068.270] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Place\\RTL\\contrast-black\\*", lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d4c207b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2ab4bf2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d4edfec, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215830 [0068.270] GetProcessHeap () returned 0x120000 [0068.270] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0068.270] GetProcessHeap () returned 0x120000 [0068.270] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0068.270] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Place\\RTL\\contrast-white\\*", lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d4f35ec, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2ab52e8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d4f35ec, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0068.270] GetProcessHeap () returned 0x120000 [0068.270] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0068.271] GetProcessHeap () returned 0x120000 [0068.271] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0068.271] GetProcessHeap () returned 0x120000 [0068.271] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0068.272] GetProcessHeap () returned 0x120000 [0068.272] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0068.273] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Work\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d51986a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2ab5f49, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d565d22, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157b0 [0068.274] GetProcessHeap () returned 0x120000 [0068.274] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0068.274] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Work\\LTR\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d51986a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2aff91b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d565d22, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157f0 [0068.275] GetProcessHeap () returned 0x120000 [0068.275] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0068.275] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Work\\LTR\\contrast-black\\*", lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d51986a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2b006c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d53fac4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0068.275] GetProcessHeap () returned 0x120000 [0068.275] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0068.276] GetProcessHeap () returned 0x120000 [0068.276] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0068.276] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Work\\LTR\\contrast-white\\*", lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d53fac4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2b00f23, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d53fac4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215830 [0068.276] GetProcessHeap () returned 0x120000 [0068.276] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0068.276] GetProcessHeap () returned 0x120000 [0068.276] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0068.276] GetProcessHeap () returned 0x120000 [0068.276] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0068.276] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Work\\RTL\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d565d22, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2b5c666, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d5b21d4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0068.278] GetProcessHeap () returned 0x120000 [0068.278] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0068.278] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Work\\RTL\\contrast-black\\*", lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d565d22, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2b5e29a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d58bf7b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215170 [0068.278] GetProcessHeap () returned 0x120000 [0068.278] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0068.278] GetProcessHeap () returned 0x120000 [0068.278] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0068.278] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Work\\RTL\\contrast-white\\*", lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d58bf7b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2b5ed79, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d5b21d4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155f0 [0068.278] GetProcessHeap () returned 0x120000 [0068.278] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0068.279] GetProcessHeap () returned 0x120000 [0068.279] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0068.279] GetProcessHeap () returned 0x120000 [0068.279] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0068.280] GetProcessHeap () returned 0x120000 [0068.280] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0068.289] GetProcessHeap () returned 0x120000 [0068.289] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0068.289] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Home\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d5d8432, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2ba78f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d64ab43, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156b0 [0068.290] GetProcessHeap () returned 0x120000 [0068.290] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0068.290] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Home\\contrast-black\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d5d8432, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2ba8ace, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d5d8432, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0068.291] GetProcessHeap () returned 0x120000 [0068.291] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0068.291] GetProcessHeap () returned 0x120000 [0068.291] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0068.291] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Home\\contrast-white\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d5d8432, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2ba9318, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d5fe690, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215830 [0068.291] GetProcessHeap () returned 0x120000 [0068.291] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0068.291] GetProcessHeap () returned 0x120000 [0068.291] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0068.292] GetProcessHeap () returned 0x120000 [0068.292] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0068.294] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Place\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d64ab43, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2c19005, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d696ffa, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158f0 [0068.295] GetProcessHeap () returned 0x120000 [0068.295] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0068.295] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Place\\contrast-black\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d64ab43, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2c19f2d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d670d9c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0068.295] GetProcessHeap () returned 0x120000 [0068.295] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0068.295] GetProcessHeap () returned 0x120000 [0068.295] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0068.295] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Place\\contrast-white\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d670d9c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2c1a7b0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d696ffa, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0068.296] GetProcessHeap () returned 0x120000 [0068.296] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0068.297] GetProcessHeap () returned 0x120000 [0068.297] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0068.297] GetProcessHeap () returned 0x120000 [0068.297] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0068.297] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\TrafficHub\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d696ffa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2c3062e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d733784, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0068.298] GetProcessHeap () returned 0x120000 [0068.298] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0068.298] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\TrafficHub\\contrast-black\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d696ffa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2c31253, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d6bd253, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152b0 [0068.298] GetProcessHeap () returned 0x120000 [0068.298] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0068.298] GetProcessHeap () returned 0x120000 [0068.298] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0068.298] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\TrafficHub\\contrast-white\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d6bd253, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2c31b07, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d70d530, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0068.299] GetProcessHeap () returned 0x120000 [0068.299] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0068.299] GetProcessHeap () returned 0x120000 [0068.299] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0068.300] GetProcessHeap () returned 0x120000 [0068.300] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0068.301] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Work\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d733784, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2c99e2e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d77fc3b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156b0 [0068.303] GetProcessHeap () returned 0x120000 [0068.303] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0068.303] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Work\\contrast-black\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d733784, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2c9b0f4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d7599e2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0068.303] GetProcessHeap () returned 0x120000 [0068.303] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0068.303] GetProcessHeap () returned 0x120000 [0068.303] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0068.303] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Work\\contrast-white\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d7599e2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2c9bc21, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d7599e2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0068.304] GetProcessHeap () returned 0x120000 [0068.304] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0068.304] GetProcessHeap () returned 0x120000 [0068.304] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0068.305] GetProcessHeap () returned 0x120000 [0068.305] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0068.305] GetProcessHeap () returned 0x120000 [0068.305] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0068.306] GetProcessHeap () returned 0x120000 [0068.306] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0068.306] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfd5106b5, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xfd5106b5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xfd5106b5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0068.306] GetProcessHeap () returned 0x120000 [0068.306] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0068.306] GetProcessHeap () returned 0x120000 [0068.307] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0068.307] GetProcessHeap () returned 0x120000 [0068.307] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0068.307] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b07346e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xfd4ea481, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xfd4ea481, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0068.309] GetProcessHeap () returned 0x120000 [0068.309] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0068.309] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\AppCore\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b0e5b7f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2ced312, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b0e5b7f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215130 [0068.310] GetProcessHeap () returned 0x120000 [0068.310] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0068.310] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\AppCore\\Location\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b0e5b7f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2cee18a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b0e5b7f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215770 [0068.410] GetProcessHeap () returned 0x120000 [0068.410] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0068.411] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\AppCore\\Location\\Shifter\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b0e5b7f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2ceec4f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b0e5b7f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157f0 [0068.412] GetProcessHeap () returned 0x120000 [0068.412] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0068.412] GetProcessHeap () returned 0x120000 [0068.412] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0068.413] GetProcessHeap () returned 0x120000 [0068.413] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0068.414] GetProcessHeap () returned 0x120000 [0068.414] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0068.414] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b0e5b7f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2cef683, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b0e5b7f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0068.425] GetProcessHeap () returned 0x120000 [0068.425] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0068.426] GetProcessHeap () returned 0x120000 [0068.426] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0068.426] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b0e5b7f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2cf0464, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c38a336, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152b0 [0068.427] GetProcessHeap () returned 0x120000 [0068.427] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0068.427] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b0e5b7f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2e0460d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b3cb0d0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0068.429] GetProcessHeap () returned 0x120000 [0068.429] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0068.430] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b0e5b7f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2e8edc6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b1d14c0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0068.433] GetProcessHeap () returned 0x120000 [0068.433] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0068.433] GetProcessHeap () returned 0x120000 [0068.433] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0068.433] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b1f771a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2e902ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2e62aa, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0068.435] GetProcessHeap () returned 0x120000 [0068.435] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0068.435] GetProcessHeap () returned 0x120000 [0068.435] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0068.437] GetProcessHeap () returned 0x120000 [0068.437] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0068.437] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\Fonts\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b3cb0d0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2e90b88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b3cb0d0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154f0 [0068.437] GetProcessHeap () returned 0x120000 [0068.437] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0068.437] GetProcessHeap () returned 0x120000 [0068.437] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0068.437] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\Images\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b3cb0d0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2efb6c2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b4afef1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215130 [0068.440] GetProcessHeap () returned 0x120000 [0068.440] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0068.442] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\Images\\LayersControl\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b3cb0d0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2efbe2a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b3f1329, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0068.442] GetProcessHeap () returned 0x120000 [0068.442] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0068.442] GetProcessHeap () returned 0x120000 [0068.442] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0068.442] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\Images\\PrintAndShare\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b3f1329, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2f3152f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b4afef1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0068.445] GetProcessHeap () returned 0x120000 [0068.445] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0068.445] GetProcessHeap () returned 0x120000 [0068.445] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0068.445] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\Images\\RadialControl\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b4afef1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2fc69fb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b4afef1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215770 [0068.456] GetProcessHeap () returned 0x120000 [0068.456] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0068.456] GetProcessHeap () returned 0x120000 [0068.456] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0068.456] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\Images\\Ratings\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b4afef1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2ff63a8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b4d614a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0068.486] GetProcessHeap () returned 0x120000 [0068.486] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0068.486] GetProcessHeap () returned 0x120000 [0068.486] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0068.487] GetProcessHeap () returned 0x120000 [0068.487] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0068.487] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\LiveTiles\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b4fc3a8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3087d01, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b76acf2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215530 [0068.490] GetProcessHeap () returned 0x120000 [0068.490] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0068.490] GetProcessHeap () returned 0x120000 [0068.490] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0068.490] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b8e847d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb30890e1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c2f19a3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215830 [0068.491] GetProcessHeap () returned 0x120000 [0068.491] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0068.493] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Car\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b8e847d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3089937, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ba3f9af, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0068.493] GetProcessHeap () returned 0x120000 [0068.493] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0068.493] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Car\\LTR\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b8e847d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb30f908c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ba19755, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215330 [0068.496] GetProcessHeap () returned 0x120000 [0068.496] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0068.496] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Car\\LTR\\contrast-black\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b8e847d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb30f9fa9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b980de7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0068.497] GetProcessHeap () returned 0x120000 [0068.497] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0068.497] GetProcessHeap () returned 0x120000 [0068.497] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0068.497] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Car\\LTR\\contrast-white\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b9a7045, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb30fa4e4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b9f34f7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0068.497] GetProcessHeap () returned 0x120000 [0068.497] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0068.497] GetProcessHeap () returned 0x120000 [0068.497] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0068.498] GetProcessHeap () returned 0x120000 [0068.498] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0068.529] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Car\\RTL\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ba3f9af, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb30fb71e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bad9e55, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0068.569] GetProcessHeap () returned 0x120000 [0068.569] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0068.570] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Car\\RTL\\contrast-black\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ba3f9af, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb30fbf46, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ba8be66, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215330 [0068.570] GetProcessHeap () returned 0x120000 [0068.570] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0068.570] GetProcessHeap () returned 0x120000 [0068.570] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0068.570] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Car\\RTL\\contrast-white\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ba8be66, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb30fc3a4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bab3bcd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215130 [0068.571] GetProcessHeap () returned 0x120000 [0068.571] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0068.571] GetProcessHeap () returned 0x120000 [0068.571] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0068.572] GetProcessHeap () returned 0x120000 [0068.572] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0068.573] GetProcessHeap () returned 0x120000 [0068.573] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0068.573] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Collections\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bad9e55, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb314cc17, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bb73c04, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155f0 [0068.574] GetProcessHeap () returned 0x120000 [0068.574] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0068.574] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Collections\\contrast-black\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bad9e55, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb31cde56, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bb000a9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0068.576] GetProcessHeap () returned 0x120000 [0068.576] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0068.576] GetProcessHeap () returned 0x120000 [0068.576] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0068.576] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Collections\\contrast-white\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bb26303, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3233df3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bb4c561, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0068.579] GetProcessHeap () returned 0x120000 [0068.579] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0068.579] GetProcessHeap () returned 0x120000 [0068.579] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0068.580] GetProcessHeap () returned 0x120000 [0068.580] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0068.581] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bb73c04, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb32348f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c003fae, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215770 [0068.581] GetProcessHeap () returned 0x120000 [0068.581] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0068.581] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Car\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bb73c04, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb323545e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bc327f1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156b0 [0068.581] GetProcessHeap () returned 0x120000 [0068.581] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0068.582] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Car\\LTR\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bb73c04, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb32914e4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bc0c598, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155f0 [0068.583] GetProcessHeap () returned 0x120000 [0068.583] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0068.584] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Car\\LTR\\contrast-black\\*", lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bb73c04, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb32922fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bb99e88, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0068.584] GetProcessHeap () returned 0x120000 [0068.584] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0068.584] GetProcessHeap () returned 0x120000 [0068.584] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0068.585] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Car\\LTR\\contrast-white\\*", lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bb99e88, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3292b75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bbc00e1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0068.585] GetProcessHeap () returned 0x120000 [0068.585] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0068.585] GetProcessHeap () returned 0x120000 [0068.585] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0068.585] GetProcessHeap () returned 0x120000 [0068.585] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0068.585] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Car\\RTL\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bc327f1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb330b8a0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bd6f0f8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215670 [0068.588] GetProcessHeap () returned 0x120000 [0068.588] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0068.588] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Car\\RTL\\contrast-black\\*", lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bc327f1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb330ca4b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bcf7199, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0068.588] GetProcessHeap () returned 0x120000 [0068.588] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0068.588] GetProcessHeap () returned 0x120000 [0068.588] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0068.588] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Car\\RTL\\contrast-white\\*", lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bcf7199, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb330d4eb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bd1d3f2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0068.589] GetProcessHeap () returned 0x120000 [0068.589] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0068.589] GetProcessHeap () returned 0x120000 [0068.589] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0068.589] GetProcessHeap () returned 0x120000 [0068.589] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0068.590] GetProcessHeap () returned 0x120000 [0068.590] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0068.591] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Home\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bd6f0f8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb330e45c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8be0c854, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0068.591] GetProcessHeap () returned 0x120000 [0068.591] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0068.591] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Home\\LTR\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bd6f0f8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb335dfb4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8be0c854, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215230 [0068.594] GetProcessHeap () returned 0x120000 [0068.594] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0068.594] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Home\\LTR\\contrast-black\\*", lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bd6f0f8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb335ec08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bd95377, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0068.595] GetProcessHeap () returned 0x120000 [0068.595] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0068.595] GetProcessHeap () returned 0x120000 [0068.595] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0068.595] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Home\\LTR\\contrast-white\\*", lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bd95377, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb335eff0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bde65da, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215270 [0068.595] GetProcessHeap () returned 0x120000 [0068.596] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0068.596] GetProcessHeap () returned 0x120000 [0068.596] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0068.596] GetProcessHeap () returned 0x120000 [0068.596] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0068.596] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Home\\RTL\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be0c854, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb33b18c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8beaa4cc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155f0 [0068.598] GetProcessHeap () returned 0x120000 [0068.598] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0068.598] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Home\\RTL\\contrast-black\\*", lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be0c854, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb33b285d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8be5a264, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215570 [0068.599] GetProcessHeap () returned 0x120000 [0068.599] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0068.599] GetProcessHeap () returned 0x120000 [0068.599] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0068.599] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Home\\RTL\\contrast-white\\*", lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be5a264, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb33b30cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8be804ec, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0068.599] GetProcessHeap () returned 0x120000 [0068.599] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0068.599] GetProcessHeap () returned 0x120000 [0068.599] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0068.599] GetProcessHeap () returned 0x120000 [0068.599] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0068.600] GetProcessHeap () returned 0x120000 [0068.600] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0068.601] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Place\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8beaa4cc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb33b37ec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bf6b61f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215230 [0068.602] GetProcessHeap () returned 0x120000 [0068.602] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0068.602] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Place\\LTR\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8beaa4cc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3404bd2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bf6b61f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0068.603] GetProcessHeap () returned 0x120000 [0068.603] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0068.603] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Place\\LTR\\contrast-black\\*", lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8beaa4cc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb34056ab, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bef69a4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158f0 [0068.603] GetProcessHeap () returned 0x120000 [0068.603] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0068.603] GetProcessHeap () returned 0x120000 [0068.604] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0068.604] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Place\\LTR\\contrast-white\\*", lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bef69a4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3405f23, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bf1cbfd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0068.604] GetProcessHeap () returned 0x120000 [0068.604] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0068.604] GetProcessHeap () returned 0x120000 [0068.604] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0068.604] GetProcessHeap () returned 0x120000 [0068.604] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0068.604] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Place\\RTL\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bf6b61f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3454610, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bfddd50, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155f0 [0068.606] GetProcessHeap () returned 0x120000 [0068.606] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0068.606] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Place\\RTL\\contrast-black\\*", lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bf6b61f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3455631, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bf9189e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0068.606] GetProcessHeap () returned 0x120000 [0068.606] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0068.606] GetProcessHeap () returned 0x120000 [0068.606] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0068.606] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Place\\RTL\\contrast-white\\*", lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bfb7af7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3456035, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bfddd50, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0068.606] GetProcessHeap () returned 0x120000 [0068.606] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0068.606] GetProcessHeap () returned 0x120000 [0068.606] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0068.606] GetProcessHeap () returned 0x120000 [0068.606] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0068.607] GetProcessHeap () returned 0x120000 [0068.607] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0068.609] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Work\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c003fae, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3456e12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c0766c3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0068.609] GetProcessHeap () returned 0x120000 [0068.609] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0068.609] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Work\\LTR\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c003fae, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb34fccf8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c0766c3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154f0 [0068.679] GetProcessHeap () returned 0x120000 [0068.679] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0068.680] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Work\\LTR\\contrast-black\\*", lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c003fae, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb34fe0e7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c003fae, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157b0 [0068.680] GetProcessHeap () returned 0x120000 [0068.680] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0068.680] GetProcessHeap () returned 0x120000 [0068.680] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0068.680] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Work\\LTR\\contrast-white\\*", lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c02a20c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb34fec79, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c050465, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0068.680] GetProcessHeap () returned 0x120000 [0068.680] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0068.680] GetProcessHeap () returned 0x120000 [0068.680] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0068.680] GetProcessHeap () returned 0x120000 [0068.680] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0068.680] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Work\\RTL\\*", lpFindFileData=0x2a5e4b8 | out: lpFindFileData=0x2a5e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c0766c3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb350145a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c0a185e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0068.682] GetProcessHeap () returned 0x120000 [0068.682] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0068.682] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Work\\RTL\\contrast-black\\*", lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c0766c3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3501ce9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c0766c3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0068.686] GetProcessHeap () returned 0x120000 [0068.686] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0068.686] GetProcessHeap () returned 0x120000 [0068.686] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x661e40 [0068.686] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Work\\RTL\\contrast-white\\*", lpFindFileData=0x2a5e228 | out: lpFindFileData=0x2a5e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c0766c3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb350228b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c0a185e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0068.687] GetProcessHeap () returned 0x120000 [0068.687] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x661e40 | out: hHeap=0x120000) returned 1 [0068.687] GetProcessHeap () returned 0x120000 [0068.687] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0068.687] GetProcessHeap () returned 0x120000 [0068.687] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0068.688] GetProcessHeap () returned 0x120000 [0068.688] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0068.689] GetProcessHeap () returned 0x120000 [0068.689] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0068.689] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Home\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c0a185e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb35c9bed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c1ac8fd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0068.691] GetProcessHeap () returned 0x120000 [0068.691] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0068.691] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Home\\contrast-black\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c0c7adc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb35cac6f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c13a1ed, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0068.691] GetProcessHeap () returned 0x120000 [0068.691] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0068.691] GetProcessHeap () returned 0x120000 [0068.691] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0068.691] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Home\\contrast-white\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c13a1ed, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb35cb8cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c1866a4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0068.692] GetProcessHeap () returned 0x120000 [0068.692] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0068.693] GetProcessHeap () returned 0x120000 [0068.693] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0068.694] GetProcessHeap () returned 0x120000 [0068.694] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0068.695] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Place\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c1ac8fd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3623b8b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c26b4c5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0068.711] GetProcessHeap () returned 0x120000 [0068.711] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0068.711] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Place\\contrast-black\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c1ac8fd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb362499b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c1f8db5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0068.711] GetProcessHeap () returned 0x120000 [0068.711] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0068.711] GetProcessHeap () returned 0x120000 [0068.711] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0068.712] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Place\\contrast-white\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c1f8db5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3625294, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c24526c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0068.712] GetProcessHeap () returned 0x120000 [0068.712] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0068.712] GetProcessHeap () returned 0x120000 [0068.712] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0068.713] GetProcessHeap () returned 0x120000 [0068.713] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0068.714] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\TrafficHub\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c26b4c5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb367a3f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c2f19a3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0068.724] GetProcessHeap () returned 0x120000 [0068.724] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0068.724] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\TrafficHub\\contrast-black\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c26b4c5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb367b39d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c29171e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215670 [0068.724] GetProcessHeap () returned 0x120000 [0068.724] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0068.724] GetProcessHeap () returned 0x120000 [0068.724] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0068.724] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\TrafficHub\\contrast-white\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c29171e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb367bae1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c2b797c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0068.724] GetProcessHeap () returned 0x120000 [0068.725] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0068.725] GetProcessHeap () returned 0x120000 [0068.725] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0068.726] GetProcessHeap () returned 0x120000 [0068.726] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0068.727] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Work\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c2f19a3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb36c962c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c3640d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0068.728] GetProcessHeap () returned 0x120000 [0068.728] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0068.728] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Work\\contrast-black\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c2f19a3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb36ca3a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c317c21, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0068.730] GetProcessHeap () returned 0x120000 [0068.730] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0068.730] GetProcessHeap () returned 0x120000 [0068.730] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0068.730] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Work\\contrast-white\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c317c21, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb36caca0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c317c21, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215170 [0068.731] GetProcessHeap () returned 0x120000 [0068.731] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0068.731] GetProcessHeap () returned 0x120000 [0068.731] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0068.732] GetProcessHeap () returned 0x120000 [0068.732] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0068.732] GetProcessHeap () returned 0x120000 [0068.732] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0068.732] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\Sounds\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c38a336, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb36cb89c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c38a336, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0068.732] GetProcessHeap () returned 0x120000 [0068.732] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0068.732] GetProcessHeap () returned 0x120000 [0068.733] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0068.733] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\Voices\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c38a336, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb36cc1d6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c57a1d6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0068.733] GetProcessHeap () returned 0x120000 [0068.733] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0068.734] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\Voices\\beeps\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c38a336, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb36ccb49, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c3fca47, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0068.735] GetProcessHeap () returned 0x120000 [0068.735] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0068.735] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\Voices\\beeps\\beeps\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c38a336, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb36cd6ff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c38a336, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0068.735] GetProcessHeap () returned 0x120000 [0068.735] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0068.735] GetProcessHeap () returned 0x120000 [0068.735] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0068.737] GetProcessHeap () returned 0x120000 [0068.737] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0068.738] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\Voices\\en-GB\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c422ca0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb36ce29e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c422ca0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215670 [0068.738] GetProcessHeap () returned 0x120000 [0068.738] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0068.738] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\Voices\\en-GB\\en-GB_female_TTS\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c422ca0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb37661f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c4bb60f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215530 [0068.740] GetProcessHeap () returned 0x120000 [0068.740] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0068.741] GetProcessHeap () returned 0x120000 [0068.741] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0068.741] GetProcessHeap () returned 0x120000 [0068.741] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0068.741] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\Voices\\en-IN\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c4bb60f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3766d81, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c4bb60f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0068.749] GetProcessHeap () returned 0x120000 [0068.749] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0068.750] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\Voices\\en-IN\\en-IN_female_TTS\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c4bb60f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb37c2829, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c553f78, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157f0 [0068.791] GetProcessHeap () returned 0x120000 [0068.969] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0068.969] GetProcessHeap () returned 0x120000 [0068.969] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0068.969] GetProcessHeap () returned 0x120000 [0068.969] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0068.969] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\Voices\\en-US\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c57a1d6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb37c3803, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c57a1d6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0068.970] GetProcessHeap () returned 0x120000 [0068.970] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0068.970] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\Voices\\en-US\\en-US_female_TTS\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c57a1d6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb381afc6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c5c668d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215130 [0068.972] GetProcessHeap () returned 0x120000 [0068.972] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0068.972] GetProcessHeap () returned 0x120000 [0068.972] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0068.973] GetProcessHeap () returned 0x120000 [0068.973] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0068.973] GetProcessHeap () returned 0x120000 [0068.973] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0068.973] GetProcessHeap () returned 0x120000 [0068.973] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0068.974] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Microsoft.Bing.Client.Graph\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8cd4055a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb381c4eb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8cd4055a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0068.975] GetProcessHeap () returned 0x120000 [0068.975] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0068.975] GetProcessHeap () returned 0x120000 [0068.975] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0068.975] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfd4ea481, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbd1c01b1, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xbd1c01b1, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155f0 [0068.975] GetProcessHeap () returned 0x120000 [0068.975] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0068.975] GetProcessHeap () returned 0x120000 [0068.975] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0068.975] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Speech\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8cdb2c6b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb381d673, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8cdd8ec4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0068.975] GetProcessHeap () returned 0x120000 [0068.975] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0068.975] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Speech\\en-GB\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8cdb2c6b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb381e43a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8cdb2c6b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152b0 [0068.975] GetProcessHeap () returned 0x120000 [0068.975] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0068.975] GetProcessHeap () returned 0x120000 [0068.975] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0068.975] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Speech\\en-US\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8cdd8ec4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb381eaf6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8cdd8ec4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0068.976] GetProcessHeap () returned 0x120000 [0068.976] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0068.976] GetProcessHeap () returned 0x120000 [0068.976] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0068.976] GetProcessHeap () returned 0x120000 [0068.976] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0068.976] GetProcessHeap () returned 0x120000 [0068.976] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0068.976] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1384417, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb391b556, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7c923e77, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215770 [0068.978] GetProcessHeap () returned 0x120000 [0068.978] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0068.978] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1384417, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb391ec44, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1384417, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215330 [0068.979] GetProcessHeap () returned 0x120000 [0068.979] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0068.979] GetProcessHeap () returned 0x120000 [0068.979] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0068.979] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1384417, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3a006ef, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1501b56, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0068.987] GetProcessHeap () returned 0x120000 [0068.987] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0068.987] GetProcessHeap () returned 0x120000 [0068.987] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0068.987] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\Common\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1501b56, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3a0227c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1501b56, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0068.989] GetProcessHeap () returned 0x120000 [0068.989] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0068.989] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\Common\\NavigationData\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1501b56, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3a02903, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1501b56, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0068.990] GetProcessHeap () returned 0x120000 [0068.990] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0068.990] GetProcessHeap () returned 0x120000 [0068.990] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0068.990] GetProcessHeap () returned 0x120000 [0068.990] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0068.991] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\CompanionAppCore\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd15e6aaa, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3a03176, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd15e6aaa, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215830 [0068.991] GetProcessHeap () returned 0x120000 [0068.991] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0068.991] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\CompanionAppCore\\Data\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd15e6aaa, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3a03a8b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd15e6aaa, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0068.991] GetProcessHeap () returned 0x120000 [0068.991] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0068.991] GetProcessHeap () returned 0x120000 [0068.991] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0068.992] GetProcessHeap () returned 0x120000 [0068.992] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0068.992] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd160cc79, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3acabea, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1b1da7e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215170 [0068.994] GetProcessHeap () returned 0x120000 [0068.994] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0068.994] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\af-ZA\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd160cc79, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3acc02c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd160cc79, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0068.994] GetProcessHeap () returned 0x120000 [0068.994] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0068.996] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\af-ZA\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd160cc79, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3acce34, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd160cc79, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0068.996] GetProcessHeap () returned 0x120000 [0068.996] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0068.996] GetProcessHeap () returned 0x120000 [0068.996] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0068.996] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\af-ZA\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd160cc79, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3acd31e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd160cc79, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0068.996] GetProcessHeap () returned 0x120000 [0068.996] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0068.996] GetProcessHeap () returned 0x120000 [0068.996] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0068.998] GetProcessHeap () returned 0x120000 [0068.998] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0068.998] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\am-ET\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd160cc79, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3acd818, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1632e44, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0068.999] GetProcessHeap () returned 0x120000 [0068.999] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.000] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\am-ET\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd160cc79, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3acded2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1632e44, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157f0 [0069.000] GetProcessHeap () returned 0x120000 [0069.000] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.000] GetProcessHeap () returned 0x120000 [0069.000] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.000] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\am-ET\\resources\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1632e44, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3ace3d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1632e44, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157f0 [0069.000] GetProcessHeap () returned 0x120000 [0069.000] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0069.001] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\am-ET\\resources\\css\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1632e44, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3ace965, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1632e44, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215670 [0069.001] GetProcessHeap () returned 0x120000 [0069.001] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0069.001] GetProcessHeap () returned 0x120000 [0069.001] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.002] GetProcessHeap () returned 0x120000 [0069.002] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.003] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\am-ET\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1632e44, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3acf05e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1632e44, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0069.004] GetProcessHeap () returned 0x120000 [0069.004] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.004] GetProcessHeap () returned 0x120000 [0069.004] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.004] GetProcessHeap () returned 0x120000 [0069.004] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.004] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ar-sa\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1632e44, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3acf640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd165909e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0069.004] GetProcessHeap () returned 0x120000 [0069.004] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.004] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ar-sa\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1632e44, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3acfd4c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1632e44, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0069.005] GetProcessHeap () returned 0x120000 [0069.005] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.005] GetProcessHeap () returned 0x120000 [0069.005] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.005] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ar-sa\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd165909e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3ad02d8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd165909e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0069.005] GetProcessHeap () returned 0x120000 [0069.005] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.005] GetProcessHeap () returned 0x120000 [0069.005] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.007] GetProcessHeap () returned 0x120000 [0069.007] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.007] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\az-latn-az\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd165909e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b61797, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd165909e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0069.130] GetProcessHeap () returned 0x120000 [0069.130] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.131] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\az-latn-az\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd165909e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b628a0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd165909e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0069.132] GetProcessHeap () returned 0x120000 [0069.132] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.132] GetProcessHeap () returned 0x120000 [0069.132] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.132] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\az-latn-az\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd165909e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b62f31, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd165909e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0069.132] GetProcessHeap () returned 0x120000 [0069.132] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.132] GetProcessHeap () returned 0x120000 [0069.132] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.133] GetProcessHeap () returned 0x120000 [0069.133] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.134] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\be-by\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd165909e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b63663, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd167f3a4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0069.134] GetProcessHeap () returned 0x120000 [0069.134] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.135] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\be-by\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd165909e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b63d32, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd165909e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157b0 [0069.136] GetProcessHeap () returned 0x120000 [0069.136] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.136] GetProcessHeap () returned 0x120000 [0069.136] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.136] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\be-by\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd167f3a4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b64526, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd167f3a4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215270 [0069.136] GetProcessHeap () returned 0x120000 [0069.136] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.136] GetProcessHeap () returned 0x120000 [0069.136] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.137] GetProcessHeap () returned 0x120000 [0069.137] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.138] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\bg-BG\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd167f3a4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b64c64, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd167f3a4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157f0 [0069.138] GetProcessHeap () returned 0x120000 [0069.138] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.139] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\bg-BG\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd167f3a4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b654be, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd167f3a4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0069.139] GetProcessHeap () returned 0x120000 [0069.139] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.140] GetProcessHeap () returned 0x120000 [0069.140] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.140] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\bg-BG\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd167f3a4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b65cf3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd167f3a4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152b0 [0069.140] GetProcessHeap () returned 0x120000 [0069.140] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.140] GetProcessHeap () returned 0x120000 [0069.141] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.142] GetProcessHeap () returned 0x120000 [0069.142] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.142] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\bn-BD\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd167f3a4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b66403, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16a561b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0069.142] GetProcessHeap () returned 0x120000 [0069.142] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.143] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\bn-BD\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd167f3a4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b66cd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd167f3a4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0069.144] GetProcessHeap () returned 0x120000 [0069.144] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.144] GetProcessHeap () returned 0x120000 [0069.144] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.144] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\bn-BD\\resources\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16a561b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b6731c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16a561b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0069.144] GetProcessHeap () returned 0x120000 [0069.144] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x641e30 [0069.144] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\bn-BD\\resources\\css\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16a561b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b67c32, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16a561b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154f0 [0069.145] GetProcessHeap () returned 0x120000 [0069.145] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x641e30 | out: hHeap=0x120000) returned 1 [0069.145] GetProcessHeap () returned 0x120000 [0069.145] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.146] GetProcessHeap () returned 0x120000 [0069.146] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.147] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\bn-BD\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16a561b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b681e6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16a561b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215130 [0069.148] GetProcessHeap () returned 0x120000 [0069.148] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.148] GetProcessHeap () returned 0x120000 [0069.148] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.148] GetProcessHeap () returned 0x120000 [0069.148] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.148] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ca-es\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16a561b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b68832, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16a561b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0069.148] GetProcessHeap () returned 0x120000 [0069.148] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.148] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ca-es\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16a561b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b69102, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16a561b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157b0 [0069.148] GetProcessHeap () returned 0x120000 [0069.148] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.148] GetProcessHeap () returned 0x120000 [0069.148] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.148] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ca-es\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16a561b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b6990e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16a561b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156b0 [0069.149] GetProcessHeap () returned 0x120000 [0069.149] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.149] GetProcessHeap () returned 0x120000 [0069.149] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.151] GetProcessHeap () returned 0x120000 [0069.151] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.151] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\cs-cz\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16a561b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b6a067, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16cb7a8, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215330 [0069.151] GetProcessHeap () returned 0x120000 [0069.151] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.152] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\cs-cz\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16a561b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b6a7df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16cb7a8, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0069.152] GetProcessHeap () returned 0x120000 [0069.152] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.152] GetProcessHeap () returned 0x120000 [0069.152] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.153] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\cs-cz\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16cb7a8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b6ad9a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16cb7a8, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0069.153] GetProcessHeap () returned 0x120000 [0069.153] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.153] GetProcessHeap () returned 0x120000 [0069.153] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.154] GetProcessHeap () returned 0x120000 [0069.154] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.154] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\da-dk\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16cb7a8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b6b4e6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16cb7a8, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0069.155] GetProcessHeap () returned 0x120000 [0069.155] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.158] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\da-dk\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16cb7a8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b6bbf7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16cb7a8, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0069.158] GetProcessHeap () returned 0x120000 [0069.158] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.158] GetProcessHeap () returned 0x120000 [0069.158] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.158] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\da-dk\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16cb7a8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b6c350, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16cb7a8, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215130 [0069.158] GetProcessHeap () returned 0x120000 [0069.158] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.158] GetProcessHeap () returned 0x120000 [0069.158] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.160] GetProcessHeap () returned 0x120000 [0069.160] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.160] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\de-de\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16cb7a8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b6cb42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16f1ad8, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155f0 [0069.160] GetProcessHeap () returned 0x120000 [0069.160] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.161] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\de-de\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16cb7a8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b6d3c3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16f1ad8, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215570 [0069.162] GetProcessHeap () returned 0x120000 [0069.162] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.162] GetProcessHeap () returned 0x120000 [0069.162] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.162] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\de-de\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16f1ad8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b6da8e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16f1ad8, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157b0 [0069.163] GetProcessHeap () returned 0x120000 [0069.163] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.163] GetProcessHeap () returned 0x120000 [0069.163] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.164] GetProcessHeap () returned 0x120000 [0069.164] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.164] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\el-GR\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16f1ad8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b6e28a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16f1ad8, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156b0 [0069.165] GetProcessHeap () returned 0x120000 [0069.165] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.166] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\el-GR\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16f1ad8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b6eb1c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16f1ad8, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155f0 [0069.166] GetProcessHeap () returned 0x120000 [0069.166] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.166] GetProcessHeap () returned 0x120000 [0069.166] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.166] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\el-GR\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16f1ad8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b6f1bd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16f1ad8, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0069.274] GetProcessHeap () returned 0x120000 [0069.274] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.274] GetProcessHeap () returned 0x120000 [0069.274] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.276] GetProcessHeap () returned 0x120000 [0069.276] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.276] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\en-gb\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16f1ad8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b6fa3d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1717d00, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0069.276] GetProcessHeap () returned 0x120000 [0069.276] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.278] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\en-gb\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16f1ad8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b703f4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16f1ad8, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0069.278] GetProcessHeap () returned 0x120000 [0069.278] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.278] GetProcessHeap () returned 0x120000 [0069.278] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.278] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\en-gb\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1717d00, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b70aaf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1717d00, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155f0 [0069.278] GetProcessHeap () returned 0x120000 [0069.278] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.278] GetProcessHeap () returned 0x120000 [0069.278] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.280] GetProcessHeap () returned 0x120000 [0069.280] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.280] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\en-US\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1717d00, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b711cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1717d00, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0069.288] GetProcessHeap () returned 0x120000 [0069.288] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.289] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\en-US\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1717d00, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b71a29, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1717d00, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0069.290] GetProcessHeap () returned 0x120000 [0069.290] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.290] GetProcessHeap () returned 0x120000 [0069.290] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.290] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\en-US\\windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1717d00, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b71f78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1717d00, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0069.290] GetProcessHeap () returned 0x120000 [0069.290] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.290] GetProcessHeap () returned 0x120000 [0069.290] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.291] GetProcessHeap () returned 0x120000 [0069.291] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.292] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\es-es\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1717d00, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b727df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd173df84, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215570 [0069.292] GetProcessHeap () returned 0x120000 [0069.292] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.293] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\es-es\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1717d00, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b72faa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1717d00, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152b0 [0069.294] GetProcessHeap () returned 0x120000 [0069.294] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.294] GetProcessHeap () returned 0x120000 [0069.294] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.294] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\es-es\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd173df84, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b73624, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd173df84, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0069.294] GetProcessHeap () returned 0x120000 [0069.294] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.294] GetProcessHeap () returned 0x120000 [0069.294] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.296] GetProcessHeap () returned 0x120000 [0069.296] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.296] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\es-mx\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd173df84, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b73d44, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd173df84, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158f0 [0069.296] GetProcessHeap () returned 0x120000 [0069.296] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.298] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\es-mx\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd173df84, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b74495, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd173df84, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215230 [0069.298] GetProcessHeap () returned 0x120000 [0069.298] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.298] GetProcessHeap () returned 0x120000 [0069.298] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.298] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\es-mx\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd173df84, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b749df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd173df84, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0069.299] GetProcessHeap () returned 0x120000 [0069.299] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.299] GetProcessHeap () returned 0x120000 [0069.299] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.300] GetProcessHeap () returned 0x120000 [0069.300] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.300] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\et-ee\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd173df84, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b7522b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1764198, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215530 [0069.301] GetProcessHeap () returned 0x120000 [0069.301] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.302] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\et-ee\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd173df84, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b75a56, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd173df84, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0069.302] GetProcessHeap () returned 0x120000 [0069.302] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.302] GetProcessHeap () returned 0x120000 [0069.302] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.302] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\et-ee\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1764198, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b75f90, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1764198, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157b0 [0069.302] GetProcessHeap () returned 0x120000 [0069.302] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.302] GetProcessHeap () returned 0x120000 [0069.302] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.304] GetProcessHeap () returned 0x120000 [0069.304] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.304] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\eu-es\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1764198, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b765cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1764198, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0069.305] GetProcessHeap () returned 0x120000 [0069.305] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.306] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\eu-es\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1764198, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b76c22, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1764198, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0069.306] GetProcessHeap () returned 0x120000 [0069.306] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.306] GetProcessHeap () returned 0x120000 [0069.306] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.306] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\eu-es\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1764198, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b77226, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1764198, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0069.307] GetProcessHeap () returned 0x120000 [0069.307] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.307] GetProcessHeap () returned 0x120000 [0069.307] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.308] GetProcessHeap () returned 0x120000 [0069.308] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.308] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\fa-IR\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1764198, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b77b4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1764198, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0069.308] GetProcessHeap () returned 0x120000 [0069.308] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.310] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\fa-IR\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1764198, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bc632d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1764198, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0069.376] GetProcessHeap () returned 0x120000 [0069.376] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.376] GetProcessHeap () returned 0x120000 [0069.376] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.376] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\fa-IR\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1764198, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bc6cda, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd178a438, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0069.377] GetProcessHeap () returned 0x120000 [0069.377] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.377] GetProcessHeap () returned 0x120000 [0069.377] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.379] GetProcessHeap () returned 0x120000 [0069.379] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.379] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\fi-fi\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd178a438, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bc768e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd178a438, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0069.379] GetProcessHeap () returned 0x120000 [0069.379] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.381] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\fi-fi\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd178a438, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bc8033, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd178a438, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215670 [0069.381] GetProcessHeap () returned 0x120000 [0069.381] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.381] GetProcessHeap () returned 0x120000 [0069.381] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.381] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\fi-fi\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd178a438, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bc8d4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd178a438, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0069.382] GetProcessHeap () returned 0x120000 [0069.382] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.382] GetProcessHeap () returned 0x120000 [0069.382] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.382] GetProcessHeap () returned 0x120000 [0069.382] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.382] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\fil-PH\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd178a438, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bc981d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd178a438, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0069.382] GetProcessHeap () returned 0x120000 [0069.382] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.382] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\fil-PH\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd178a438, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bca430, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd178a438, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0069.383] GetProcessHeap () returned 0x120000 [0069.383] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.383] GetProcessHeap () returned 0x120000 [0069.383] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.383] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\fil-PH\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd178a438, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bcb11e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd178a438, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0069.383] GetProcessHeap () returned 0x120000 [0069.383] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.383] GetProcessHeap () returned 0x120000 [0069.383] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.384] GetProcessHeap () returned 0x120000 [0069.384] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.385] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\fr-ca\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17b0696, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bcb5a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17b0696, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0069.386] GetProcessHeap () returned 0x120000 [0069.386] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.387] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\fr-ca\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17b0696, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bcbb7a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17b0696, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0069.387] GetProcessHeap () returned 0x120000 [0069.387] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.387] GetProcessHeap () returned 0x120000 [0069.387] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.387] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\fr-ca\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17b0696, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bcc04f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17b0696, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152b0 [0069.388] GetProcessHeap () returned 0x120000 [0069.388] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.388] GetProcessHeap () returned 0x120000 [0069.388] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.389] GetProcessHeap () returned 0x120000 [0069.389] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.390] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\fr-fr\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17b0696, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bcc44b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17b0696, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0069.390] GetProcessHeap () returned 0x120000 [0069.390] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.391] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\fr-fr\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17b0696, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bcc9ea, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17b0696, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0069.392] GetProcessHeap () returned 0x120000 [0069.392] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.392] GetProcessHeap () returned 0x120000 [0069.392] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.392] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\fr-fr\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17b0696, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bcce17, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17b0696, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215230 [0069.393] GetProcessHeap () returned 0x120000 [0069.393] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.393] GetProcessHeap () returned 0x120000 [0069.393] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.394] GetProcessHeap () returned 0x120000 [0069.394] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.394] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\gl-es\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17b0696, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bcd223, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17d68f4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0069.395] GetProcessHeap () returned 0x120000 [0069.395] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.396] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\gl-es\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17b0696, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bcd7e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17d68f4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215130 [0069.396] GetProcessHeap () returned 0x120000 [0069.396] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.396] GetProcessHeap () returned 0x120000 [0069.396] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.396] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\gl-es\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17d68f4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bcdd23, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17d68f4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0069.397] GetProcessHeap () returned 0x120000 [0069.397] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.397] GetProcessHeap () returned 0x120000 [0069.397] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.399] GetProcessHeap () returned 0x120000 [0069.399] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.399] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ha-Latn-NG\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17d68f4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bce143, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17d68f4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157b0 [0069.399] GetProcessHeap () returned 0x120000 [0069.399] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.401] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ha-Latn-NG\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17d68f4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bce7d8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17d68f4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0069.401] GetProcessHeap () returned 0x120000 [0069.401] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.401] GetProcessHeap () returned 0x120000 [0069.401] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.401] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ha-Latn-NG\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17d68f4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bcec49, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17d68f4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0069.401] GetProcessHeap () returned 0x120000 [0069.401] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.401] GetProcessHeap () returned 0x120000 [0069.401] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.403] GetProcessHeap () returned 0x120000 [0069.403] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.403] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\he-IL\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17d68f4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bcf06e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17fcb09, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152b0 [0069.409] GetProcessHeap () returned 0x120000 [0069.409] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.411] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\he-IL\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17d68f4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bcf5c5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17fcb09, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0069.411] GetProcessHeap () returned 0x120000 [0069.411] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.411] GetProcessHeap () returned 0x120000 [0069.411] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.411] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\he-IL\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17fcb09, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bcf98d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17fcb09, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157b0 [0069.411] GetProcessHeap () returned 0x120000 [0069.411] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.411] GetProcessHeap () returned 0x120000 [0069.411] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.411] GetProcessHeap () returned 0x120000 [0069.411] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.411] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\hi-in\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17fcb09, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bcfd54, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17fcb09, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215330 [0069.411] GetProcessHeap () returned 0x120000 [0069.411] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.411] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\hi-in\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17fcb09, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd0298, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17fcb09, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0069.421] GetProcessHeap () returned 0x120000 [0069.421] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.421] GetProcessHeap () returned 0x120000 [0069.421] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.421] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\hi-in\\resources\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17fcb09, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd0653, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17fcb09, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158f0 [0069.421] GetProcessHeap () returned 0x120000 [0069.421] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0069.421] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\hi-in\\resources\\css\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17fcb09, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd0b90, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17fcb09, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0069.422] GetProcessHeap () returned 0x120000 [0069.422] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0069.422] GetProcessHeap () returned 0x120000 [0069.422] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.423] GetProcessHeap () returned 0x120000 [0069.423] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.423] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\hi-in\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17fcb09, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd1000, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17fcb09, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0069.423] GetProcessHeap () returned 0x120000 [0069.423] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.424] GetProcessHeap () returned 0x120000 [0069.424] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.424] GetProcessHeap () returned 0x120000 [0069.424] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.424] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\hr-HR\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17fcb09, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd1485, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1822dad, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0069.425] GetProcessHeap () returned 0x120000 [0069.425] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.425] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\hr-HR\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17fcb09, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd195d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1822dad, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0069.433] GetProcessHeap () returned 0x120000 [0069.433] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.433] GetProcessHeap () returned 0x120000 [0069.433] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.433] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\hr-HR\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1822dad, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd1d15, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1822dad, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0069.433] GetProcessHeap () returned 0x120000 [0069.433] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.433] GetProcessHeap () returned 0x120000 [0069.433] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.434] GetProcessHeap () returned 0x120000 [0069.434] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.434] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\hu-HU\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1822dad, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd21c9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1822dad, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0069.434] GetProcessHeap () returned 0x120000 [0069.434] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.435] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\hu-HU\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1822dad, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd271d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1822dad, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0069.583] GetProcessHeap () returned 0x120000 [0069.583] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.583] GetProcessHeap () returned 0x120000 [0069.583] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.583] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\hu-HU\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1822dad, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd2b5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1822dad, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0069.584] GetProcessHeap () returned 0x120000 [0069.584] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.584] GetProcessHeap () returned 0x120000 [0069.584] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.584] GetProcessHeap () returned 0x120000 [0069.584] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.585] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\id-ID\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1822dad, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd2fa8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1848fd2, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215830 [0069.585] GetProcessHeap () returned 0x120000 [0069.585] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.585] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\id-ID\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1822dad, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd34f6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1848fd2, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0069.585] GetProcessHeap () returned 0x120000 [0069.585] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.585] GetProcessHeap () returned 0x120000 [0069.585] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.585] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\id-ID\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1848fd2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd38c2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1848fd2, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154f0 [0069.587] GetProcessHeap () returned 0x120000 [0069.587] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.587] GetProcessHeap () returned 0x120000 [0069.587] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.588] GetProcessHeap () returned 0x120000 [0069.588] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.588] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\is-is\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1848fd2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd3d56, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1848fd2, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0069.588] GetProcessHeap () returned 0x120000 [0069.588] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.588] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\is-is\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1848fd2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd42ff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1848fd2, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0069.588] GetProcessHeap () returned 0x120000 [0069.589] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.589] GetProcessHeap () returned 0x120000 [0069.589] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.589] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\is-is\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1848fd2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd46d4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1848fd2, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152b0 [0069.589] GetProcessHeap () returned 0x120000 [0069.589] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.589] GetProcessHeap () returned 0x120000 [0069.589] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.589] GetProcessHeap () returned 0x120000 [0069.589] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.590] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\it-it\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1848fd2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd4a8c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd186f25d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156b0 [0069.593] GetProcessHeap () returned 0x120000 [0069.593] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.594] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\it-it\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1848fd2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd4fe2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd186f25d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0069.594] GetProcessHeap () returned 0x120000 [0069.594] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.594] GetProcessHeap () returned 0x120000 [0069.594] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.594] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\it-it\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd186f25d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd53d6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd186f25d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0069.595] GetProcessHeap () returned 0x120000 [0069.595] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.595] GetProcessHeap () returned 0x120000 [0069.595] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.595] GetProcessHeap () returned 0x120000 [0069.595] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.596] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ja-jp\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd186f25d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd57a8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd186f25d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0069.596] GetProcessHeap () returned 0x120000 [0069.596] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.596] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ja-jp\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd186f25d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd5d75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd186f25d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0069.597] GetProcessHeap () returned 0x120000 [0069.597] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.597] GetProcessHeap () returned 0x120000 [0069.597] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.597] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ja-jp\\resources\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd186f25d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd6141, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd186f25d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215270 [0069.597] GetProcessHeap () returned 0x120000 [0069.597] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0069.598] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ja-jp\\resources\\css\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd186f25d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd6651, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd186f25d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0069.599] GetProcessHeap () returned 0x120000 [0069.599] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0069.599] GetProcessHeap () returned 0x120000 [0069.599] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.600] GetProcessHeap () returned 0x120000 [0069.600] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.600] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ja-jp\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd186f25d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd6abe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd186f25d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215430 [0069.600] GetProcessHeap () returned 0x120000 [0069.601] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.601] GetProcessHeap () returned 0x120000 [0069.601] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.601] GetProcessHeap () returned 0x120000 [0069.601] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.601] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\kk-kz\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd186f25d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd6f76, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18954bb, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215230 [0069.602] GetProcessHeap () returned 0x120000 [0069.602] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.602] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\kk-kz\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd186f25d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd7454, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18954bb, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215830 [0069.602] GetProcessHeap () returned 0x120000 [0069.602] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.602] GetProcessHeap () returned 0x120000 [0069.602] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.602] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\kk-kz\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18954bb, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd78b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18954bb, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0069.603] GetProcessHeap () returned 0x120000 [0069.603] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.603] GetProcessHeap () returned 0x120000 [0069.603] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.603] GetProcessHeap () returned 0x120000 [0069.603] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.603] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\km-KH\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18954bb, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd7d0e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18954bb, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0069.603] GetProcessHeap () returned 0x120000 [0069.603] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.603] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\km-KH\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18954bb, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd8256, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18954bb, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0069.613] GetProcessHeap () returned 0x120000 [0069.613] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.613] GetProcessHeap () returned 0x120000 [0069.613] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.613] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\km-KH\\resources\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18954bb, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd8622, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18954bb, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0069.613] GetProcessHeap () returned 0x120000 [0069.613] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0069.614] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\km-KH\\resources\\css\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18954bb, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd8b2b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18954bb, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0069.615] GetProcessHeap () returned 0x120000 [0069.615] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0069.615] GetProcessHeap () returned 0x120000 [0069.615] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.616] GetProcessHeap () returned 0x120000 [0069.616] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.616] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\km-KH\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18954bb, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd903b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18954bb, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215230 [0069.617] GetProcessHeap () returned 0x120000 [0069.617] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.617] GetProcessHeap () returned 0x120000 [0069.617] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.617] GetProcessHeap () returned 0x120000 [0069.617] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.617] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\kn-in\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18954bb, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd94c8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18bb71d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0069.621] GetProcessHeap () returned 0x120000 [0069.621] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.621] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\kn-in\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18954bb, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd99f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18bb71d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215530 [0069.622] GetProcessHeap () returned 0x120000 [0069.622] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.622] GetProcessHeap () returned 0x120000 [0069.622] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.622] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\kn-in\\resources\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18bb71d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd9dad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18bb71d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215830 [0069.622] GetProcessHeap () returned 0x120000 [0069.622] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0069.623] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\kn-in\\resources\\css\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18bb71d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bda31e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18bb71d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0069.623] GetProcessHeap () returned 0x120000 [0069.623] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0069.623] GetProcessHeap () returned 0x120000 [0069.623] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.625] GetProcessHeap () returned 0x120000 [0069.625] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.625] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\kn-in\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18bb71d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bda7e6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18bb71d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0069.629] GetProcessHeap () returned 0x120000 [0069.629] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.629] GetProcessHeap () returned 0x120000 [0069.629] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.629] GetProcessHeap () returned 0x120000 [0069.629] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.629] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ko-kr\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18bb71d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bdac7b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18e1926, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215430 [0069.629] GetProcessHeap () returned 0x120000 [0069.629] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.629] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ko-kr\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18bb71d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bdb185, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18bb71d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0069.630] GetProcessHeap () returned 0x120000 [0069.630] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.630] GetProcessHeap () returned 0x120000 [0069.630] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.630] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ko-kr\\resources\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18bb71d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bdb54a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18bb71d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0069.630] GetProcessHeap () returned 0x120000 [0069.630] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0069.631] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ko-kr\\resources\\css\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18bb71d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bdbc73, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18bb71d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0069.656] GetProcessHeap () returned 0x120000 [0069.656] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0069.656] GetProcessHeap () returned 0x120000 [0069.656] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.657] GetProcessHeap () returned 0x120000 [0069.657] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.657] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ko-kr\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18e1926, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bdc134, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18e1926, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155f0 [0069.657] GetProcessHeap () returned 0x120000 [0069.657] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.657] GetProcessHeap () returned 0x120000 [0069.658] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.658] GetProcessHeap () returned 0x120000 [0069.658] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.658] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\lo-LA\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18e1926, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bdc5e6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18e1926, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0069.659] GetProcessHeap () returned 0x120000 [0069.659] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.659] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\lo-LA\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18e1926, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bdcb3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18e1926, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154f0 [0069.659] GetProcessHeap () returned 0x120000 [0069.659] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.659] GetProcessHeap () returned 0x120000 [0069.659] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.659] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\lo-LA\\resources\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18e1926, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bdcef0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18e1926, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156b0 [0069.660] GetProcessHeap () returned 0x120000 [0069.660] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0069.661] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\lo-LA\\resources\\css\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18e1926, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bdd45d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18e1926, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158f0 [0069.661] GetProcessHeap () returned 0x120000 [0069.661] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0069.661] GetProcessHeap () returned 0x120000 [0069.661] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.663] GetProcessHeap () returned 0x120000 [0069.663] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.663] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\lo-LA\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18e1926, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bdd8cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18e1926, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0069.663] GetProcessHeap () returned 0x120000 [0069.663] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.663] GetProcessHeap () returned 0x120000 [0069.663] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.752] GetProcessHeap () returned 0x120000 [0069.752] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.752] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\lt-lt\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18e1926, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bddd32, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1907ba9, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215830 [0069.752] GetProcessHeap () returned 0x120000 [0069.752] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.752] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\lt-lt\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18e1926, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bde27b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18e1926, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0069.753] GetProcessHeap () returned 0x120000 [0069.753] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.753] GetProcessHeap () returned 0x120000 [0069.753] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.753] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\lt-lt\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1907ba9, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bde603, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1907ba9, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0069.753] GetProcessHeap () returned 0x120000 [0069.753] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.753] GetProcessHeap () returned 0x120000 [0069.753] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.754] GetProcessHeap () returned 0x120000 [0069.754] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.754] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\lv-lv\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1907ba9, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bdea7b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1907ba9, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0069.754] GetProcessHeap () returned 0x120000 [0069.754] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.755] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\lv-lv\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1907ba9, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bdefdd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1907ba9, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0069.755] GetProcessHeap () returned 0x120000 [0069.755] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.755] GetProcessHeap () returned 0x120000 [0069.755] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.755] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\lv-lv\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1907ba9, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bdf3bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1907ba9, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215230 [0069.756] GetProcessHeap () returned 0x120000 [0069.756] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.756] GetProcessHeap () returned 0x120000 [0069.756] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.757] GetProcessHeap () returned 0x120000 [0069.757] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.757] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\mk-MK\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1907ba9, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bdf85e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd192ddda, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156b0 [0069.757] GetProcessHeap () returned 0x120000 [0069.757] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.757] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\mk-MK\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1907ba9, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bdfd9b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1907ba9, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0069.758] GetProcessHeap () returned 0x120000 [0069.758] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.758] GetProcessHeap () returned 0x120000 [0069.758] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.758] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\mk-MK\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd192ddda, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be0128, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd192ddda, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215230 [0069.768] GetProcessHeap () returned 0x120000 [0069.768] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.768] GetProcessHeap () returned 0x120000 [0069.768] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.769] GetProcessHeap () returned 0x120000 [0069.769] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.769] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ml-in\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd192ddda, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be05b2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd192ddda, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0069.770] GetProcessHeap () returned 0x120000 [0069.770] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.770] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ml-in\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd192ddda, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be0af1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd192ddda, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0069.771] GetProcessHeap () returned 0x120000 [0069.771] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.771] GetProcessHeap () returned 0x120000 [0069.771] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.771] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ml-in\\resources\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd192ddda, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be0e95, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd192ddda, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155f0 [0069.771] GetProcessHeap () returned 0x120000 [0069.771] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0069.772] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ml-in\\resources\\css\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd192ddda, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be13d8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd192ddda, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0069.772] GetProcessHeap () returned 0x120000 [0069.772] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0069.772] GetProcessHeap () returned 0x120000 [0069.772] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.773] GetProcessHeap () returned 0x120000 [0069.773] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.774] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ml-in\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd192ddda, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be1841, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd192ddda, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215530 [0069.774] GetProcessHeap () returned 0x120000 [0069.774] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.775] GetProcessHeap () returned 0x120000 [0069.775] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.775] GetProcessHeap () returned 0x120000 [0069.775] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.775] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ms-MY\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd192ddda, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be1c00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1954034, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0069.775] GetProcessHeap () returned 0x120000 [0069.775] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.775] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ms-MY\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd192ddda, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be216c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd192ddda, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157b0 [0069.775] GetProcessHeap () returned 0x120000 [0069.775] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.775] GetProcessHeap () returned 0x120000 [0069.775] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.775] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ms-MY\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1954034, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be2580, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1954034, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0069.775] GetProcessHeap () returned 0x120000 [0069.775] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.776] GetProcessHeap () returned 0x120000 [0069.776] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.776] GetProcessHeap () returned 0x120000 [0069.776] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.776] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\nb-no\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1954034, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be2939, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1954034, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0069.780] GetProcessHeap () returned 0x120000 [0069.780] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.780] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\nb-no\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1954034, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be2e78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1954034, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215430 [0069.781] GetProcessHeap () returned 0x120000 [0069.781] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.781] GetProcessHeap () returned 0x120000 [0069.781] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.781] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\nb-no\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1954034, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be323a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1954034, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0069.781] GetProcessHeap () returned 0x120000 [0069.781] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.781] GetProcessHeap () returned 0x120000 [0069.781] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.781] GetProcessHeap () returned 0x120000 [0069.781] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.781] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\nl-nl\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1954034, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be36b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd197a2a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0069.781] GetProcessHeap () returned 0x120000 [0069.781] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.781] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\nl-nl\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1954034, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be3bfc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1954034, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0069.782] GetProcessHeap () returned 0x120000 [0069.782] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.782] GetProcessHeap () returned 0x120000 [0069.782] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.782] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\nl-nl\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd197a2a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be4019, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd197a2a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0069.783] GetProcessHeap () returned 0x120000 [0069.783] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.783] GetProcessHeap () returned 0x120000 [0069.783] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.783] GetProcessHeap () returned 0x120000 [0069.783] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.783] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\pl-pl\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd197a2a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be442f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd197a2a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215670 [0069.783] GetProcessHeap () returned 0x120000 [0069.783] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.783] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\pl-pl\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd197a2a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be4973, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd197a2a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0069.783] GetProcessHeap () returned 0x120000 [0069.783] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.783] GetProcessHeap () returned 0x120000 [0069.783] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.783] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\pl-pl\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd197a2a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be4cf4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd197a2a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0069.786] GetProcessHeap () returned 0x120000 [0069.786] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.786] GetProcessHeap () returned 0x120000 [0069.786] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.786] GetProcessHeap () returned 0x120000 [0069.786] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.786] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\pt-br\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd197a2a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be51bd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd197a2a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0069.786] GetProcessHeap () returned 0x120000 [0069.786] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.786] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\pt-br\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd197a2a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be5729, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd197a2a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0069.787] GetProcessHeap () returned 0x120000 [0069.787] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.787] GetProcessHeap () returned 0x120000 [0069.787] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.787] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\pt-br\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd197a2a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be5b21, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd19a053a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0069.787] GetProcessHeap () returned 0x120000 [0069.787] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.787] GetProcessHeap () returned 0x120000 [0069.787] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.787] GetProcessHeap () returned 0x120000 [0069.787] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.787] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\pt-pt\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd19a053a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be607f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd19a053a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157b0 [0069.791] GetProcessHeap () returned 0x120000 [0069.791] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.791] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\pt-pt\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd19a053a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be65bd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd19a053a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215270 [0069.791] GetProcessHeap () returned 0x120000 [0069.791] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.791] GetProcessHeap () returned 0x120000 [0069.791] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.791] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\pt-pt\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd19a053a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be68d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd19a053a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0069.791] GetProcessHeap () returned 0x120000 [0069.791] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.791] GetProcessHeap () returned 0x120000 [0069.791] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.791] GetProcessHeap () returned 0x120000 [0069.791] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.791] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\resources\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd19a053a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be6d4d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd19c675b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215530 [0069.792] GetProcessHeap () returned 0x120000 [0069.792] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.792] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\resources\\css\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd19a053a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be734a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd19a053a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0069.800] GetProcessHeap () returned 0x120000 [0069.800] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.800] GetProcessHeap () returned 0x120000 [0069.800] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.800] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\resources\\images\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd19a053a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be7666, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd19a053a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0069.800] GetProcessHeap () returned 0x120000 [0069.800] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.800] GetProcessHeap () returned 0x120000 [0069.800] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.801] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\resources\\scripts\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd19c675b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be7a22, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd19c675b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0069.801] GetProcessHeap () returned 0x120000 [0069.801] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.801] GetProcessHeap () returned 0x120000 [0069.801] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.801] GetProcessHeap () returned 0x120000 [0069.801] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.802] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ro-RO\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd19c675b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be7f96, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd19c675b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0069.802] GetProcessHeap () returned 0x120000 [0069.802] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.802] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ro-RO\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd19c675b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be84b2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd19c675b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215830 [0069.803] GetProcessHeap () returned 0x120000 [0069.803] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.803] GetProcessHeap () returned 0x120000 [0069.803] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.803] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ro-RO\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd19c675b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be8871, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd19c675b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0069.803] GetProcessHeap () returned 0x120000 [0069.803] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.803] GetProcessHeap () returned 0x120000 [0069.803] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.803] GetProcessHeap () returned 0x120000 [0069.803] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.803] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ru-ru\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd19c675b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be8d58, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd19ec9c9, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0069.803] GetProcessHeap () returned 0x120000 [0069.803] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.803] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ru-ru\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd19c675b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be928f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd19ec9c9, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215230 [0069.804] GetProcessHeap () returned 0x120000 [0069.804] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.804] GetProcessHeap () returned 0x120000 [0069.804] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.804] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ru-ru\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd19ec9c9, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be9656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd19ec9c9, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0069.804] GetProcessHeap () returned 0x120000 [0069.804] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.804] GetProcessHeap () returned 0x120000 [0069.805] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.805] GetProcessHeap () returned 0x120000 [0069.805] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.805] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\sk-SK\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd19ec9c9, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be9add, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd19ec9c9, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215270 [0069.805] GetProcessHeap () returned 0x120000 [0069.805] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.805] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\sk-SK\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd19ec9c9, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be9f4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd19ec9c9, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0069.805] GetProcessHeap () returned 0x120000 [0069.805] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.805] GetProcessHeap () returned 0x120000 [0069.805] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.805] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\sk-SK\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd19ec9c9, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bea3a8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd19ec9c9, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215530 [0069.806] GetProcessHeap () returned 0x120000 [0069.806] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.806] GetProcessHeap () returned 0x120000 [0069.806] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.806] GetProcessHeap () returned 0x120000 [0069.806] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.806] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\sl-SI\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd19ec9c9, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bea832, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a12c48, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0069.807] GetProcessHeap () returned 0x120000 [0069.807] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.807] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\sl-SI\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd19ec9c9, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bead14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd19ec9c9, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0069.807] GetProcessHeap () returned 0x120000 [0069.807] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.807] GetProcessHeap () returned 0x120000 [0069.807] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.807] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\sl-SI\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a12c48, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3beb0ce, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a12c48, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0069.807] GetProcessHeap () returned 0x120000 [0069.807] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.808] GetProcessHeap () returned 0x120000 [0069.808] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.808] GetProcessHeap () returned 0x120000 [0069.808] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.808] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\sq-AL\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a12c48, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3beb509, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a12c48, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0069.808] GetProcessHeap () returned 0x120000 [0069.808] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.808] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\sq-AL\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a12c48, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3beba5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a12c48, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0069.809] GetProcessHeap () returned 0x120000 [0069.809] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.809] GetProcessHeap () returned 0x120000 [0069.809] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.809] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\sq-AL\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a12c48, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bebe70, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a12c48, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0069.809] GetProcessHeap () returned 0x120000 [0069.809] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.809] GetProcessHeap () returned 0x120000 [0069.809] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.809] GetProcessHeap () returned 0x120000 [0069.809] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.809] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\sr-Latn-RS\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a12c48, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bec2b3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a38efd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0069.809] GetProcessHeap () returned 0x120000 [0069.809] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.809] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\sr-Latn-RS\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a12c48, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bec81b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a12c48, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155f0 [0069.810] GetProcessHeap () returned 0x120000 [0069.810] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.810] GetProcessHeap () returned 0x120000 [0069.810] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.810] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\sr-Latn-RS\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a38efd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3becbe0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a38efd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215670 [0069.969] GetProcessHeap () returned 0x120000 [0069.969] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.969] GetProcessHeap () returned 0x120000 [0069.969] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.969] GetProcessHeap () returned 0x120000 [0069.969] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.970] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\sv-se\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a38efd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bed082, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a38efd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156b0 [0069.970] GetProcessHeap () returned 0x120000 [0069.970] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.970] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\sv-se\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a38efd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bed675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a38efd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215670 [0069.970] GetProcessHeap () returned 0x120000 [0069.970] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.971] GetProcessHeap () returned 0x120000 [0069.971] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.971] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\sv-se\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a38efd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3beda39, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a38efd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0069.971] GetProcessHeap () returned 0x120000 [0069.971] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.971] GetProcessHeap () returned 0x120000 [0069.971] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.971] GetProcessHeap () returned 0x120000 [0069.971] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.972] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\sw-KE\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a38efd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3beddee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a5f0d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0069.973] GetProcessHeap () returned 0x120000 [0069.973] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.973] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\sw-KE\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a38efd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bee32b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a38efd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0069.973] GetProcessHeap () returned 0x120000 [0069.973] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.973] GetProcessHeap () returned 0x120000 [0069.973] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.973] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\sw-KE\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a5f0d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bee724, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a5f0d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0069.973] GetProcessHeap () returned 0x120000 [0069.973] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.979] GetProcessHeap () returned 0x120000 [0069.979] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.980] GetProcessHeap () returned 0x120000 [0069.980] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.980] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ta-in\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a5f0d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3beeb8a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a5f0d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0069.980] GetProcessHeap () returned 0x120000 [0069.980] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.980] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ta-in\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a5f0d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bef129, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a5f0d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0069.981] GetProcessHeap () returned 0x120000 [0069.981] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.981] GetProcessHeap () returned 0x120000 [0069.981] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.981] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ta-in\\resources\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a5f0d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bef4e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a5f0d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0069.984] GetProcessHeap () returned 0x120000 [0069.984] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0069.985] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ta-in\\resources\\css\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a5f0d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3befa5a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a5f0d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0069.986] GetProcessHeap () returned 0x120000 [0069.986] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0069.986] GetProcessHeap () returned 0x120000 [0069.986] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.987] GetProcessHeap () returned 0x120000 [0069.987] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.987] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ta-in\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a5f0d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3befed4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a5f0d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157b0 [0069.988] GetProcessHeap () returned 0x120000 [0069.988] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.988] GetProcessHeap () returned 0x120000 [0069.988] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.988] GetProcessHeap () returned 0x120000 [0069.988] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.988] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\te-in\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a5f0d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf0322, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a8534f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215270 [0069.989] GetProcessHeap () returned 0x120000 [0069.989] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.989] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\te-in\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a5f0d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf0907, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a8534f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215830 [0069.990] GetProcessHeap () returned 0x120000 [0069.990] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.990] GetProcessHeap () returned 0x120000 [0069.990] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.990] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\te-in\\resources\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a8534f, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf0ccf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a8534f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0069.990] GetProcessHeap () returned 0x120000 [0069.990] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0069.991] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\te-in\\resources\\css\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a8534f, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf11bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a8534f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158f0 [0069.991] GetProcessHeap () returned 0x120000 [0069.991] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0069.991] GetProcessHeap () returned 0x120000 [0069.991] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.993] GetProcessHeap () returned 0x120000 [0069.993] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.993] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\te-in\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a8534f, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf1630, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a8534f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152b0 [0069.994] GetProcessHeap () returned 0x120000 [0069.994] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.994] GetProcessHeap () returned 0x120000 [0069.994] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0069.995] GetProcessHeap () returned 0x120000 [0069.995] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0069.995] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\th-th\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a8534f, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf1ae6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1aab505, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0069.995] GetProcessHeap () returned 0x120000 [0069.995] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.995] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\th-th\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a8534f, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf2013, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a8534f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0069.996] GetProcessHeap () returned 0x120000 [0069.996] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0069.996] GetProcessHeap () returned 0x120000 [0069.996] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0069.996] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\th-th\\resources\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a8534f, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf2407, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a8534f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0069.996] GetProcessHeap () returned 0x120000 [0069.996] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0069.997] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\th-th\\resources\\css\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a8534f, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf294c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a8534f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0069.998] GetProcessHeap () returned 0x120000 [0069.998] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0069.998] GetProcessHeap () returned 0x120000 [0069.998] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0070.000] GetProcessHeap () returned 0x120000 [0070.000] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0070.000] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\th-th\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1aab505, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf2d5b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1aab505, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0070.000] GetProcessHeap () returned 0x120000 [0070.000] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0070.000] GetProcessHeap () returned 0x120000 [0070.000] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0070.001] GetProcessHeap () returned 0x120000 [0070.001] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0070.001] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\tr-tr\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1aab505, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf3210, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1aab505, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151f0 [0070.001] GetProcessHeap () returned 0x120000 [0070.001] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0070.001] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\tr-tr\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1aab505, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf3726, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1aab505, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0070.001] GetProcessHeap () returned 0x120000 [0070.001] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0070.001] GetProcessHeap () returned 0x120000 [0070.001] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0070.001] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\tr-tr\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1aab505, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf3b3d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1aab505, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0070.047] GetProcessHeap () returned 0x120000 [0070.047] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0070.047] GetProcessHeap () returned 0x120000 [0070.047] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0070.048] GetProcessHeap () returned 0x120000 [0070.048] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0070.048] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\uk-ua\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1aab505, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf3fcb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1aab505, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215830 [0070.049] GetProcessHeap () returned 0x120000 [0070.049] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0070.049] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\uk-ua\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1aab505, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf4499, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1aab505, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156b0 [0070.049] GetProcessHeap () returned 0x120000 [0070.049] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0070.049] GetProcessHeap () returned 0x120000 [0070.049] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0070.050] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\uk-ua\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1aab505, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf485b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1ad1747, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0070.050] GetProcessHeap () returned 0x120000 [0070.050] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0070.050] GetProcessHeap () returned 0x120000 [0070.050] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0070.050] GetProcessHeap () returned 0x120000 [0070.050] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0070.051] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\UND\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1ad1747, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf4d14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1ad1747, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0070.051] GetProcessHeap () returned 0x120000 [0070.051] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0070.052] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\UND\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1ad1747, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf51a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1ad1747, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215330 [0070.052] GetProcessHeap () returned 0x120000 [0070.052] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0070.052] GetProcessHeap () returned 0x120000 [0070.052] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0070.052] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\UND\\windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1ad1747, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf55fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1ad1747, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0070.052] GetProcessHeap () returned 0x120000 [0070.052] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0070.052] GetProcessHeap () returned 0x120000 [0070.052] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0070.053] GetProcessHeap () returned 0x120000 [0070.053] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0070.053] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\uz-latn-uz\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1ad1747, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf5a88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1ad1747, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155f0 [0070.053] GetProcessHeap () returned 0x120000 [0070.053] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0070.054] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\uz-latn-uz\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1ad1747, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf5f1a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1ad1747, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215570 [0070.054] GetProcessHeap () returned 0x120000 [0070.054] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0070.054] GetProcessHeap () returned 0x120000 [0070.054] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0070.054] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\uz-latn-uz\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1ad1747, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf62e7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1ad1747, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215270 [0070.055] GetProcessHeap () returned 0x120000 [0070.055] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0070.055] GetProcessHeap () returned 0x120000 [0070.055] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0070.055] GetProcessHeap () returned 0x120000 [0070.055] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0070.056] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\vi-vn\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1af78f1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf6794, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1af78f1, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215570 [0070.056] GetProcessHeap () returned 0x120000 [0070.056] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0070.056] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\vi-vn\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1af78f1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf6cab, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1af78f1, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158f0 [0070.056] GetProcessHeap () returned 0x120000 [0070.056] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0070.056] GetProcessHeap () returned 0x120000 [0070.056] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0070.057] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\vi-vn\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1af78f1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf7081, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1af78f1, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0070.057] GetProcessHeap () returned 0x120000 [0070.057] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0070.057] GetProcessHeap () returned 0x120000 [0070.057] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0070.058] GetProcessHeap () returned 0x120000 [0070.058] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0070.058] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\zh-cn\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1af78f1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf75e2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1af78f1, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215830 [0070.059] GetProcessHeap () returned 0x120000 [0070.059] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0070.059] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\zh-cn\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1af78f1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf7b08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1af78f1, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0070.059] GetProcessHeap () returned 0x120000 [0070.059] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0070.059] GetProcessHeap () returned 0x120000 [0070.059] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0070.059] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\zh-cn\\resources\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1af78f1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf7f94, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1af78f1, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0070.059] GetProcessHeap () returned 0x120000 [0070.059] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0070.060] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\zh-cn\\resources\\css\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1af78f1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf8494, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1af78f1, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155f0 [0070.187] GetProcessHeap () returned 0x120000 [0070.187] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0070.187] GetProcessHeap () returned 0x120000 [0070.187] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0070.189] GetProcessHeap () returned 0x120000 [0070.189] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0070.189] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\zh-cn\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1af78f1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf8a12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1b1da7e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0070.189] GetProcessHeap () returned 0x120000 [0070.189] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0070.189] GetProcessHeap () returned 0x120000 [0070.189] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0070.189] GetProcessHeap () returned 0x120000 [0070.189] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0070.189] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\zh-tw\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1b1da7e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf8e94, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1b1da7e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0070.190] GetProcessHeap () returned 0x120000 [0070.190] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0070.190] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\zh-tw\\deeplink\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1b1da7e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf947e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1b1da7e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0070.190] GetProcessHeap () returned 0x120000 [0070.190] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0070.190] GetProcessHeap () returned 0x120000 [0070.190] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0070.190] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\zh-tw\\resources\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1b1da7e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf9830, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1b1da7e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156b0 [0070.191] GetProcessHeap () returned 0x120000 [0070.191] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0070.192] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\zh-tw\\resources\\css\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1b1da7e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf9d4c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1b1da7e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0070.192] GetProcessHeap () returned 0x120000 [0070.192] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0070.192] GetProcessHeap () returned 0x120000 [0070.192] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0070.193] GetProcessHeap () returned 0x120000 [0070.193] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0070.194] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\zh-tw\\Windows\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1b1da7e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bfa0ff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1b1da7e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0070.194] GetProcessHeap () returned 0x120000 [0070.194] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0070.194] GetProcessHeap () returned 0x120000 [0070.194] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0070.194] GetProcessHeap () returned 0x120000 [0070.194] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0070.195] GetProcessHeap () returned 0x120000 [0070.195] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0070.195] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7c923e77, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xb3bfa622, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7c923e77, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0070.195] GetProcessHeap () returned 0x120000 [0070.195] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0070.195] GetProcessHeap () returned 0x120000 [0070.195] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0070.195] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\_Resources\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1384417, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb391e1bd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1384417, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215170 [0070.196] GetProcessHeap () returned 0x120000 [0070.196] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0070.196] GetProcessHeap () returned 0x120000 [0070.196] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0070.199] GetProcessHeap () returned 0x120000 [0070.199] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0070.199] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1121ceb, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3c565ec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7c923e77, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155f0 [0070.201] GetProcessHeap () returned 0x120000 [0070.201] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0070.201] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1121ceb, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3c57272, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1121ceb, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2157b0 [0070.201] GetProcessHeap () returned 0x120000 [0070.201] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0070.202] GetProcessHeap () returned 0x120000 [0070.202] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0070.202] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7c923e77, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xb3c57d4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7c923e77, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2156b0 [0070.202] GetProcessHeap () returned 0x120000 [0070.202] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0070.202] GetProcessHeap () returned 0x120000 [0070.202] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0070.202] GetProcessHeap () returned 0x120000 [0070.202] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0070.202] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542e769c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xffa513a7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xffa513a7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154f0 [0070.204] GetProcessHeap () returned 0x120000 [0070.204] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0070.204] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54333b4e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3cb474b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x54333b4e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0070.204] GetProcessHeap () returned 0x120000 [0070.204] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0070.204] GetProcessHeap () returned 0x120000 [0070.204] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0070.204] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54333b4e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3cb4e9d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x546fe097, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0070.210] GetProcessHeap () returned 0x120000 [0070.210] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0070.210] GetProcessHeap () returned 0x120000 [0070.210] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0070.210] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xffa513a7, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xffa513a7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xffa513a7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0070.211] GetProcessHeap () returned 0x120000 [0070.211] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0070.211] GetProcessHeap () returned 0x120000 [0070.211] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0070.211] GetProcessHeap () returned 0x120000 [0070.211] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0070.212] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_2017.130.1208.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x541b63c4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xffa513a7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xffa513a7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215430 [0070.213] GetProcessHeap () returned 0x120000 [0070.213] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0070.213] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_2017.130.1208.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x541b63c4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3d1c8f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x541b63c4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0070.214] GetProcessHeap () returned 0x120000 [0070.214] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0070.214] GetProcessHeap () returned 0x120000 [0070.214] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0070.214] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_2017.130.1208.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xffa513a7, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xffa513a7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xffa513a7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215730 [0070.214] GetProcessHeap () returned 0x120000 [0070.214] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0070.214] GetProcessHeap () returned 0x120000 [0070.214] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0070.215] GetProcessHeap () returned 0x120000 [0070.215] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0070.215] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1117e7db, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x209d0ef, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x209d0ef, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0070.217] GetProcessHeap () returned 0x120000 [0070.217] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0070.217] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x111a4a34, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3d7d8df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x111a4a34, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0070.217] GetProcessHeap () returned 0x120000 [0070.217] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0070.218] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppTiles\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x111a4a34, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3d7e235, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1123d39e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215870 [0070.219] GetProcessHeap () returned 0x120000 [0070.219] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0070.219] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x111a4a34, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3de5d38, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x111cac92, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215330 [0070.222] GetProcessHeap () returned 0x120000 [0070.222] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0070.222] GetProcessHeap () returned 0x120000 [0070.222] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0070.222] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x111cac92, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3e4905e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x111f0eec, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154f0 [0070.224] GetProcessHeap () returned 0x120000 [0070.224] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0070.224] GetProcessHeap () returned 0x120000 [0070.224] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0070.224] GetProcessHeap () returned 0x120000 [0070.224] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0070.224] GetProcessHeap () returned 0x120000 [0070.224] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0070.224] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x209d0ef, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x209d0ef, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x209d0ef, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0070.225] GetProcessHeap () returned 0x120000 [0070.225] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0070.225] GetProcessHeap () returned 0x120000 [0070.225] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0070.226] GetProcessHeap () returned 0x120000 [0070.226] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0070.226] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf79c53c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x209d0ef, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x209d0ef, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155b0 [0070.226] GetProcessHeap () returned 0x120000 [0070.226] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0070.226] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7c2795, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3e4b375, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xf7c2795, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0070.227] GetProcessHeap () returned 0x120000 [0070.227] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0070.227] GetProcessHeap () returned 0x120000 [0070.227] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0070.227] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf834ea6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3e4b71c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfb96d5c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0070.227] GetProcessHeap () returned 0x120000 [0070.227] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0070.228] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf834ea6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3e4bdce, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfb96d5c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215170 [0070.228] GetProcessHeap () returned 0x120000 [0070.228] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0070.228] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf834ea6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3eeb1e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xf96617e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215670 [0070.379] GetProcessHeap () returned 0x120000 [0070.379] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0070.379] GetProcessHeap () returned 0x120000 [0070.379] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0070.379] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf96617e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3f52d0b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfa7abce, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215470 [0070.382] GetProcessHeap () returned 0x120000 [0070.382] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0070.382] GetProcessHeap () returned 0x120000 [0070.382] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0070.383] GetProcessHeap () returned 0x120000 [0070.383] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0070.383] GetProcessHeap () returned 0x120000 [0070.383] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0070.383] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\Content\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbbcfe3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3f54435, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfbbcfe3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215670 [0070.383] GetProcessHeap () returned 0x120000 [0070.383] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0070.383] GetProcessHeap () returned 0x120000 [0070.383] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0070.383] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x209d0ef, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xef0f4f22, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xef0f4f22, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215530 [0070.384] GetProcessHeap () returned 0x120000 [0070.384] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0070.384] GetProcessHeap () returned 0x120000 [0070.384] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0070.384] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\MS.Entertainment.Common\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xff9cd23, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3f552d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xff9cd23, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215530 [0070.384] GetProcessHeap () returned 0x120000 [0070.384] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0070.384] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\MS.Entertainment.Common\\Resources\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xff9cd23, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3f55972, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xff9cd23, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215370 [0070.384] GetProcessHeap () returned 0x120000 [0070.385] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0070.385] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\MS.Entertainment.Common\\Resources\\Fonts\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xff9cd23, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3f55f81, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xff9cd23, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0070.385] GetProcessHeap () returned 0x120000 [0070.385] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0070.385] GetProcessHeap () returned 0x120000 [0070.385] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0070.386] GetProcessHeap () returned 0x120000 [0070.386] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0070.386] GetProcessHeap () returned 0x120000 [0070.386] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0070.386] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\Resources\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x100cdffb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3f56a17, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x100f4259, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215170 [0070.386] GetProcessHeap () returned 0x120000 [0070.386] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0070.387] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\Resources\\Fonts\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x100cdffb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3f574c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x100f4259, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215630 [0070.387] GetProcessHeap () returned 0x120000 [0070.387] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0070.387] GetProcessHeap () returned 0x120000 [0070.387] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0070.387] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\Resources\\RetailDemo\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x100f4259, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3f57c18, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1016696a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215830 [0070.387] GetProcessHeap () returned 0x120000 [0070.387] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0070.387] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\Resources\\RetailDemo\\data\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x100f4259, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3f58472, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x100f4259, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155f0 [0070.388] GetProcessHeap () returned 0x120000 [0070.388] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0070.389] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\Resources\\RetailDemo\\data\\en-us\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x100f4259, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3f58d9f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1014070c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0070.389] GetProcessHeap () returned 0x120000 [0070.389] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0070.389] GetProcessHeap () returned 0x120000 [0070.389] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0070.392] GetProcessHeap () returned 0x120000 [0070.392] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0070.392] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\Resources\\RetailDemo\\strings\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1016696a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3f595cc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1016696a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2154b0 [0070.392] GetProcessHeap () returned 0x120000 [0070.392] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x651e38 [0070.393] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\Resources\\RetailDemo\\strings\\en-us\\*", lpFindFileData=0x2a5e748 | out: lpFindFileData=0x2a5e748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1016696a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3f59e2a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1016696a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155f0 [0070.393] GetProcessHeap () returned 0x120000 [0070.393] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x651e38 | out: hHeap=0x120000) returned 1 [0070.393] GetProcessHeap () returned 0x120000 [0070.393] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0070.394] GetProcessHeap () returned 0x120000 [0070.395] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0070.395] GetProcessHeap () returned 0x120000 [0070.395] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0070.395] GetProcessHeap () returned 0x120000 [0070.395] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0070.396] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\UX\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1016696a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3f5a955, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1016696a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215170 [0070.396] GetProcessHeap () returned 0x120000 [0070.396] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0070.397] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\UX\\Controls\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1016696a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3f5b29e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1016696a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2151b0 [0070.397] GetProcessHeap () returned 0x120000 [0070.397] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0070.397] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\UX\\Controls\\Xbox360PurchaseControl\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1016696a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3f5bc07, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1016696a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215570 [0070.397] GetProcessHeap () returned 0x120000 [0070.397] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0070.397] GetProcessHeap () returned 0x120000 [0070.397] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0070.397] GetProcessHeap () returned 0x120000 [0070.397] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0070.398] GetProcessHeap () returned 0x120000 [0070.398] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0070.398] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\WinStore\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10ef5fcd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3f5c5b2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x10ef5fcd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158f0 [0070.399] GetProcessHeap () returned 0x120000 [0070.399] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33a0048 [0070.399] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\WinStore\\Resources\\*", lpFindFileData=0x2a5ec68 | out: lpFindFileData=0x2a5ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10ef5fcd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3f5cf2d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x10ef5fcd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215430 [0070.399] GetProcessHeap () returned 0x120000 [0070.399] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33b0050 [0070.399] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\WinStore\\Resources\\Assets\\*", lpFindFileData=0x2a5e9d8 | out: lpFindFileData=0x2a5e9d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10ef5fcd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3fa6f00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x10f686dd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0070.401] GetProcessHeap () returned 0x120000 [0070.401] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33b0050 | out: hHeap=0x120000) returned 1 [0070.401] GetProcessHeap () returned 0x120000 [0070.401] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33a0048 | out: hHeap=0x120000) returned 1 [0070.402] GetProcessHeap () returned 0x120000 [0070.402] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0070.402] GetProcessHeap () returned 0x120000 [0070.402] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0070.402] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\_Resources\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7e89f3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3e4adae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xf834ea6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0070.402] GetProcessHeap () returned 0x120000 [0070.402] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0070.402] GetProcessHeap () returned 0x120000 [0070.402] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0070.403] GetProcessHeap () returned 0x120000 [0070.403] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0070.403] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.874.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf703bd2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2076e87, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x2076e87, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215170 [0070.405] GetProcessHeap () returned 0x120000 [0070.405] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0070.405] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.874.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf703bd2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb40028af, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xf703bd2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2153f0 [0070.405] GetProcessHeap () returned 0x120000 [0070.405] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0070.405] GetProcessHeap () returned 0x120000 [0070.405] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0070.405] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.874.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x2076e87, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x2076e87, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x2076e87, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215830 [0070.406] GetProcessHeap () returned 0x120000 [0070.406] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0070.406] GetProcessHeap () returned 0x120000 [0070.406] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0070.406] GetProcessHeap () returned 0x120000 [0070.406] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0070.407] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_2017.113.1250.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x722d4fa4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4b15022, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4b15022, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2152f0 [0070.408] GetProcessHeap () returned 0x120000 [0070.408] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0070.408] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_2017.113.1250.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x722d4fa4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4075472, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x722d4fa4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2155f0 [0070.409] GetProcessHeap () returned 0x120000 [0070.409] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0070.409] GetProcessHeap () returned 0x120000 [0070.409] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0070.409] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_2017.113.1250.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4b15022, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x4b15022, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4b15022, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2158b0 [0070.409] GetProcessHeap () returned 0x120000 [0070.409] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0070.410] GetProcessHeap () returned 0x120000 [0070.410] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x33e0060 | out: hHeap=0x120000) returned 1 [0070.410] GetProcessHeap () returned 0x120000 [0070.410] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x33e0060 [0070.410] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2a5f188 | out: lpFindFileData=0x2a5f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7242c4d5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4b15022, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4b15022, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215830 [0070.412] GetProcessHeap () returned 0x120000 [0070.412] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0070.412] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7247898c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb414678b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7247898c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215530 [0070.412] GetProcessHeap () returned 0x120000 [0070.413] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x631e28 | out: hHeap=0x120000) returned 1 [0070.413] GetProcessHeap () returned 0x120000 [0070.413] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x631e28 [0070.413] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x2a5eef8 | out: lpFindFileData=0x2a5eef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x725a9c6e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4260cb3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x72abd1b0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x215770 Thread: id = 25 os_tid = 0xf3c [0045.453] GetProcessHeap () returned 0x120000 [0045.453] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x1d4800 [0045.453] GetProcessHeap () returned 0x120000 [0045.453] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x1e4808 [0045.453] GetProcessHeap () returned 0x120000 [0045.453] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x28) returned 0x191348 [0045.453] GetProcessHeap () returned 0x120000 [0045.453] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x110102) returned 0x2f23020 [0045.456] GetProcessHeap () returned 0x120000 [0045.456] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x50) returned 0x149830 [0045.456] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75e90000 [0045.456] GetProcAddress (hModule=0x75e90000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x75ea6b30 [0045.456] Wow64DisableWow64FsRedirection (in: OldValue=0x2b5f790 | out: OldValue=0x2b5f790*=0x0) returned 1 [0045.456] GetProcessHeap () returned 0x120000 [0045.456] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x149830 | out: hHeap=0x120000) returned 1 [0045.456] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0045.458] GetFileSizeEx (in: hFile=0x2e8, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=42674) returned 1 [0045.458] CloseHandle (hObject=0x2e8) returned 1 [0045.458] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log")) returned 0x20 [0045.458] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log")) returned 0x20 [0045.459] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0045.459] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0045.459] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0045.459] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0045.459] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2ec [0045.459] ReadFile (in: hFile=0x2e8, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0xa6b2, lpOverlapped=0x0) returned 1 [0045.475] WriteFile (in: hFile=0x2ec, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xa6c0, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0xa6c0, lpOverlapped=0x0) returned 1 [0045.476] WriteFile (in: hFile=0x2ec, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x122, lpOverlapped=0x0) returned 1 [0045.476] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0045.476] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0045.476] WriteFile (in: hFile=0x2e8, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xa6b2, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0xa6b2, lpOverlapped=0x0) returned 1 [0045.477] FlushFileBuffers (hFile=0x2e8) returned 1 [0045.712] FlushFileBuffers (hFile=0x2ec) returned 1 [0045.714] CloseHandle (hObject=0x2e8) returned 1 [0045.715] CloseHandle (hObject=0x2ec) returned 1 [0045.717] DeleteFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log")) returned 1 [0045.718] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec [0045.718] GetFileSizeEx (in: hFile=0x2ec, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=40) returned 1 [0045.718] CloseHandle (hObject=0x2ec) returned 1 [0045.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log")) returned 0x20 [0045.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log")) returned 0x20 [0045.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0045.719] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec [0045.719] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0045.719] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0045.719] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e8 [0045.719] ReadFile (in: hFile=0x2ec, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0x28, lpOverlapped=0x0) returned 1 [0045.723] WriteFile (in: hFile=0x2e8, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x30, lpOverlapped=0x0) returned 1 [0045.724] WriteFile (in: hFile=0x2e8, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x112, lpOverlapped=0x0) returned 1 [0045.724] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0045.724] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0045.724] WriteFile (in: hFile=0x2ec, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0x28, lpOverlapped=0x0) returned 1 [0045.724] FlushFileBuffers (hFile=0x2ec) returned 1 [0045.727] FlushFileBuffers (hFile=0x2e8) returned 1 [0045.729] CloseHandle (hObject=0x2ec) returned 1 [0045.729] CloseHandle (hObject=0x2e8) returned 1 [0045.730] DeleteFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log")) returned 1 [0045.731] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0045.733] GetFileSizeEx (in: hFile=0x2e8, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=144072) returned 1 [0045.733] CloseHandle (hObject=0x2e8) returned 1 [0045.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll")) returned 0x20 [0045.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll")) returned 0x20 [0045.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0045.734] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0045.734] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0045.734] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0045.734] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2ec [0045.734] ReadFile (in: hFile=0x2e8, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0x232c8, lpOverlapped=0x0) returned 1 [0045.737] WriteFile (in: hFile=0x2ec, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x232d0, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x232d0, lpOverlapped=0x0) returned 1 [0045.740] WriteFile (in: hFile=0x2ec, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x102, lpOverlapped=0x0) returned 1 [0045.740] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0045.740] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0045.740] WriteFile (in: hFile=0x2e8, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x232c8, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0x232c8, lpOverlapped=0x0) returned 1 [0045.741] FlushFileBuffers (hFile=0x2e8) returned 1 [0046.234] FlushFileBuffers (hFile=0x2ec) returned 1 [0046.237] CloseHandle (hObject=0x2e8) returned 1 [0046.239] CloseHandle (hObject=0x2ec) returned 1 [0046.242] DeleteFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll")) returned 1 [0046.244] CreateFileW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec [0046.244] GetFileSizeEx (in: hFile=0x2ec, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=129) returned 1 [0046.244] CloseHandle (hObject=0x2ec) returned 1 [0046.244] GetFileAttributesW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini")) returned 0x26 [0046.245] GetFileAttributesW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini")) returned 0x26 [0046.245] GetFileAttributesW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0046.245] CreateFileW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec [0046.245] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0046.245] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0046.245] CreateFileW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x26, hTemplateFile=0x0) returned 0x2e8 [0046.246] ReadFile (in: hFile=0x2ec, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0x81, lpOverlapped=0x0) returned 1 [0046.247] WriteFile (in: hFile=0x2e8, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x90, lpOverlapped=0x0) returned 1 [0046.248] WriteFile (in: hFile=0x2e8, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0xf2, lpOverlapped=0x0) returned 1 [0046.248] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0046.248] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0046.248] WriteFile (in: hFile=0x2ec, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x81, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0x81, lpOverlapped=0x0) returned 1 [0046.249] FlushFileBuffers (hFile=0x2ec) returned 1 [0046.251] FlushFileBuffers (hFile=0x2e8) returned 1 [0046.252] CloseHandle (hObject=0x2ec) returned 1 [0046.253] CloseHandle (hObject=0x2e8) returned 1 [0046.253] DeleteFileW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini")) returned 1 [0046.254] CreateFileW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0046.255] GetFileSizeEx (in: hFile=0x2e8, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=129) returned 1 [0046.255] CloseHandle (hObject=0x2e8) returned 1 [0046.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini")) returned 0x26 [0046.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini")) returned 0x26 [0046.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0046.255] CreateFileW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0046.255] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0046.255] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0046.255] CreateFileW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x26, hTemplateFile=0x0) returned 0x2ec [0046.255] ReadFile (in: hFile=0x2e8, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0x81, lpOverlapped=0x0) returned 1 [0046.255] WriteFile (in: hFile=0x2ec, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x90, lpOverlapped=0x0) returned 1 [0046.256] WriteFile (in: hFile=0x2ec, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0xf2, lpOverlapped=0x0) returned 1 [0046.256] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0046.256] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0046.257] WriteFile (in: hFile=0x2e8, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x81, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0x81, lpOverlapped=0x0) returned 1 [0046.257] FlushFileBuffers (hFile=0x2e8) returned 1 [0046.259] FlushFileBuffers (hFile=0x2ec) returned 1 [0046.261] CloseHandle (hObject=0x2e8) returned 1 [0046.261] CloseHandle (hObject=0x2ec) returned 1 [0046.261] DeleteFileW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini")) returned 1 [0046.262] CreateFileW (lpFileName="\\\\?\\C:\\$WINRE_BACKUP_PARTITION.MARKER" (normalized: "c:\\$winre_backup_partition.marker"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec [0046.263] GetFileSizeEx (in: hFile=0x2ec, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=0) returned 1 [0046.263] CloseHandle (hObject=0x2ec) returned 1 [0046.263] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec [0046.264] GetFileSizeEx (in: hFile=0x2ec, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=7567) returned 1 [0046.264] CloseHandle (hObject=0x2ec) returned 1 [0046.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf")) returned 0x80 [0046.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf")) returned 0x80 [0046.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0046.264] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec [0046.264] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0046.264] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0046.264] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x31c [0046.266] ReadFile (in: hFile=0x2ec, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0x1d8f, lpOverlapped=0x0) returned 1 [0046.267] WriteFile (in: hFile=0x31c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x1d90, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x1d90, lpOverlapped=0x0) returned 1 [0046.268] WriteFile (in: hFile=0x31c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0xf2, lpOverlapped=0x0) returned 1 [0046.268] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0046.268] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0046.268] WriteFile (in: hFile=0x2ec, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x1d8f, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0x1d8f, lpOverlapped=0x0) returned 1 [0046.268] FlushFileBuffers (hFile=0x2ec) returned 1 [0046.270] FlushFileBuffers (hFile=0x31c) returned 1 [0046.271] CloseHandle (hObject=0x2ec) returned 1 [0046.272] CloseHandle (hObject=0x31c) returned 1 [0046.273] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf")) returned 1 [0046.274] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0046.274] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=74214) returned 1 [0046.274] CloseHandle (hObject=0x31c) returned 1 [0046.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml")) returned 0x80 [0046.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml")) returned 0x80 [0046.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0046.274] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0046.274] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0046.274] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0046.274] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2ec [0046.274] ReadFile (in: hFile=0x31c, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0x121e6, lpOverlapped=0x0) returned 1 [0046.276] WriteFile (in: hFile=0x2ec, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x121f0, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x121f0, lpOverlapped=0x0) returned 1 [0046.278] WriteFile (in: hFile=0x2ec, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x102, lpOverlapped=0x0) returned 1 [0046.278] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0046.278] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0046.279] WriteFile (in: hFile=0x31c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x121e6, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0x121e6, lpOverlapped=0x0) returned 1 [0046.279] FlushFileBuffers (hFile=0x31c) returned 1 [0046.586] FlushFileBuffers (hFile=0x2ec) returned 1 [0046.587] CloseHandle (hObject=0x31c) returned 1 [0046.589] CloseHandle (hObject=0x2ec) returned 1 [0046.591] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml")) returned 1 [0046.593] SetEvent (hEvent=0x2a4) returned 1 [0046.594] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec [0046.595] GetFileSizeEx (in: hFile=0x2ec, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=14168) returned 1 [0046.595] CloseHandle (hObject=0x2ec) returned 1 [0046.595] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll")) returned 0x80 [0046.595] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll")) returned 0x80 [0046.595] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0046.595] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec [0046.595] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0046.595] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0046.595] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x31c [0046.595] ReadFile (in: hFile=0x2ec, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0x3758, lpOverlapped=0x0) returned 1 [0046.597] WriteFile (in: hFile=0x31c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x3760, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x3760, lpOverlapped=0x0) returned 1 [0046.598] WriteFile (in: hFile=0x31c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x102, lpOverlapped=0x0) returned 1 [0046.598] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0046.598] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0046.598] WriteFile (in: hFile=0x2ec, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x3758, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0x3758, lpOverlapped=0x0) returned 1 [0046.598] FlushFileBuffers (hFile=0x2ec) returned 1 [0047.230] FlushFileBuffers (hFile=0x31c) returned 1 [0047.232] CloseHandle (hObject=0x2ec) returned 1 [0047.233] CloseHandle (hObject=0x31c) returned 1 [0047.234] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll")) returned 1 [0047.235] SetEvent (hEvent=0x2a4) returned 1 [0047.235] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0047.235] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=80970) returned 1 [0047.235] CloseHandle (hObject=0x31c) returned 1 [0047.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml")) returned 0x80 [0047.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml")) returned 0x80 [0047.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0047.236] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0047.236] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0047.236] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0047.236] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2ec [0047.236] ReadFile (in: hFile=0x31c, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0x13c4a, lpOverlapped=0x0) returned 1 [0047.240] WriteFile (in: hFile=0x2ec, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x13c50, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x13c50, lpOverlapped=0x0) returned 1 [0047.242] WriteFile (in: hFile=0x2ec, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x102, lpOverlapped=0x0) returned 1 [0047.242] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0047.242] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0047.242] WriteFile (in: hFile=0x31c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x13c4a, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0x13c4a, lpOverlapped=0x0) returned 1 [0047.242] FlushFileBuffers (hFile=0x31c) returned 1 [0047.705] FlushFileBuffers (hFile=0x2ec) returned 1 [0047.706] CloseHandle (hObject=0x31c) returned 1 [0047.708] CloseHandle (hObject=0x2ec) returned 1 [0047.710] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml")) returned 1 [0047.712] SetEvent (hEvent=0x2a4) returned 1 [0047.712] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec [0047.713] GetFileSizeEx (in: hFile=0x2ec, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=3314) returned 1 [0047.713] CloseHandle (hObject=0x2ec) returned 1 [0047.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf")) returned 0x80 [0047.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf")) returned 0x80 [0047.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0047.713] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec [0047.713] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0047.713] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0047.713] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x31c [0047.715] ReadFile (in: hFile=0x2ec, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0xcf2, lpOverlapped=0x0) returned 1 [0047.716] WriteFile (in: hFile=0x31c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xd00, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0xd00, lpOverlapped=0x0) returned 1 [0047.717] WriteFile (in: hFile=0x31c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0xf2, lpOverlapped=0x0) returned 1 [0047.717] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0047.717] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0047.717] WriteFile (in: hFile=0x2ec, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xcf2, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0xcf2, lpOverlapped=0x0) returned 1 [0047.717] FlushFileBuffers (hFile=0x2ec) returned 1 [0047.719] FlushFileBuffers (hFile=0x31c) returned 1 [0047.720] CloseHandle (hObject=0x2ec) returned 1 [0047.720] CloseHandle (hObject=0x31c) returned 1 [0047.721] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf")) returned 1 [0047.722] SetEvent (hEvent=0x2a4) returned 1 [0047.722] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0047.722] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=77748) returned 1 [0047.722] CloseHandle (hObject=0x31c) returned 1 [0047.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml")) returned 0x80 [0047.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml")) returned 0x80 [0047.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0047.722] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0047.723] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0047.723] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0047.723] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2ec [0047.723] ReadFile (in: hFile=0x31c, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0x12fb4, lpOverlapped=0x0) returned 1 [0047.726] WriteFile (in: hFile=0x2ec, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x12fc0, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x12fc0, lpOverlapped=0x0) returned 1 [0047.728] WriteFile (in: hFile=0x2ec, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x102, lpOverlapped=0x0) returned 1 [0047.728] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0047.728] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0047.728] WriteFile (in: hFile=0x31c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x12fb4, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0x12fb4, lpOverlapped=0x0) returned 1 [0047.731] FlushFileBuffers (hFile=0x31c) returned 1 [0048.674] FlushFileBuffers (hFile=0x2ec) returned 1 [0048.675] CloseHandle (hObject=0x31c) returned 1 [0048.677] CloseHandle (hObject=0x2ec) returned 1 [0048.679] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml")) returned 1 [0048.680] SetEvent (hEvent=0x2a4) returned 1 [0048.680] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec [0048.681] GetFileSizeEx (in: hFile=0x2ec, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=3419) returned 1 [0048.681] CloseHandle (hObject=0x2ec) returned 1 [0048.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf")) returned 0x80 [0048.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf")) returned 0x80 [0048.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0048.681] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec [0048.681] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0048.681] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0048.681] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x31c [0048.682] ReadFile (in: hFile=0x2ec, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0xd5b, lpOverlapped=0x0) returned 1 [0048.684] WriteFile (in: hFile=0x31c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xd60, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0xd60, lpOverlapped=0x0) returned 1 [0048.685] WriteFile (in: hFile=0x31c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0xf2, lpOverlapped=0x0) returned 1 [0048.685] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0048.685] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0048.685] WriteFile (in: hFile=0x2ec, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xd5b, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0xd5b, lpOverlapped=0x0) returned 1 [0048.685] FlushFileBuffers (hFile=0x2ec) returned 1 [0048.687] FlushFileBuffers (hFile=0x31c) returned 1 [0048.688] CloseHandle (hObject=0x2ec) returned 1 [0048.689] CloseHandle (hObject=0x31c) returned 1 [0048.689] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf")) returned 1 [0048.690] SetEvent (hEvent=0x2a4) returned 1 [0048.690] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0048.690] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=82346) returned 1 [0048.690] CloseHandle (hObject=0x31c) returned 1 [0048.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml")) returned 0x80 [0048.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml")) returned 0x80 [0048.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0048.691] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0048.691] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0048.691] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0048.691] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2ec [0048.691] ReadFile (in: hFile=0x31c, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0x141aa, lpOverlapped=0x0) returned 1 [0048.693] WriteFile (in: hFile=0x2ec, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x141b0, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x141b0, lpOverlapped=0x0) returned 1 [0048.695] WriteFile (in: hFile=0x2ec, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x102, lpOverlapped=0x0) returned 1 [0048.696] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0048.696] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0048.696] WriteFile (in: hFile=0x31c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x141aa, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0x141aa, lpOverlapped=0x0) returned 1 [0048.696] FlushFileBuffers (hFile=0x31c) returned 1 [0048.698] FlushFileBuffers (hFile=0x2ec) returned 1 [0048.699] CloseHandle (hObject=0x31c) returned 1 [0048.701] CloseHandle (hObject=0x2ec) returned 1 [0048.703] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml")) returned 1 [0048.705] SetEvent (hEvent=0x2a4) returned 1 [0048.705] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec [0048.705] GetFileSizeEx (in: hFile=0x2ec, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=18776) returned 1 [0048.705] CloseHandle (hObject=0x2ec) returned 1 [0048.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll")) returned 0x80 [0048.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll")) returned 0x80 [0048.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0048.705] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec [0048.706] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0048.706] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0048.706] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x31c [0048.706] ReadFile (in: hFile=0x2ec, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0x4958, lpOverlapped=0x0) returned 1 [0048.721] WriteFile (in: hFile=0x31c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x4960, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x4960, lpOverlapped=0x0) returned 1 [0048.722] WriteFile (in: hFile=0x31c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x102, lpOverlapped=0x0) returned 1 [0048.722] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0048.722] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0048.722] WriteFile (in: hFile=0x2ec, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x4958, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0x4958, lpOverlapped=0x0) returned 1 [0048.722] FlushFileBuffers (hFile=0x2ec) returned 1 [0050.051] FlushFileBuffers (hFile=0x31c) returned 1 [0050.053] CloseHandle (hObject=0x2ec) returned 1 [0050.054] CloseHandle (hObject=0x31c) returned 1 [0050.055] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll")) returned 1 [0050.056] SetEvent (hEvent=0x2a4) returned 1 [0050.056] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0050.056] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=19288) returned 1 [0050.056] CloseHandle (hObject=0x31c) returned 1 [0050.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll")) returned 0x80 [0050.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll")) returned 0x80 [0050.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0050.057] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0050.057] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0050.057] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0050.057] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2ec [0050.057] ReadFile (in: hFile=0x31c, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0x4b58, lpOverlapped=0x0) returned 1 [0050.059] WriteFile (in: hFile=0x2ec, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x4b60, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x4b60, lpOverlapped=0x0) returned 1 [0050.060] WriteFile (in: hFile=0x2ec, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x102, lpOverlapped=0x0) returned 1 [0050.060] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0050.060] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0050.060] WriteFile (in: hFile=0x31c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x4b58, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0x4b58, lpOverlapped=0x0) returned 1 [0050.060] FlushFileBuffers (hFile=0x31c) returned 1 [0051.527] FlushFileBuffers (hFile=0x2ec) returned 1 [0051.529] CloseHandle (hObject=0x31c) returned 1 [0051.530] CloseHandle (hObject=0x2ec) returned 1 [0051.530] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll")) returned 1 [0051.532] SetEvent (hEvent=0x2a4) returned 1 [0051.532] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec [0051.532] GetFileSizeEx (in: hFile=0x2ec, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=17240) returned 1 [0051.532] CloseHandle (hObject=0x2ec) returned 1 [0051.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll")) returned 0x80 [0051.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll")) returned 0x80 [0051.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0051.532] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec [0051.533] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0051.533] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0051.533] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x31c [0051.533] ReadFile (in: hFile=0x2ec, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0x4358, lpOverlapped=0x0) returned 1 [0051.535] WriteFile (in: hFile=0x31c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x4360, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x4360, lpOverlapped=0x0) returned 1 [0051.536] WriteFile (in: hFile=0x31c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x102, lpOverlapped=0x0) returned 1 [0051.536] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0051.536] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0051.536] WriteFile (in: hFile=0x2ec, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x4358, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0x4358, lpOverlapped=0x0) returned 1 [0051.537] FlushFileBuffers (hFile=0x2ec) returned 1 [0052.150] FlushFileBuffers (hFile=0x31c) returned 1 [0052.152] CloseHandle (hObject=0x2ec) returned 1 [0052.152] CloseHandle (hObject=0x31c) returned 1 [0052.153] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll")) returned 1 [0052.154] SetEvent (hEvent=0x2a4) returned 1 [0052.155] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0052.155] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=18264) returned 1 [0052.155] CloseHandle (hObject=0x31c) returned 1 [0052.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll")) returned 0x80 [0052.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll")) returned 0x80 [0052.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0052.155] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0052.155] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0052.155] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0052.155] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2ec [0052.156] ReadFile (in: hFile=0x31c, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0x4758, lpOverlapped=0x0) returned 1 [0052.159] WriteFile (in: hFile=0x2ec, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x4760, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x4760, lpOverlapped=0x0) returned 1 [0052.160] WriteFile (in: hFile=0x2ec, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x102, lpOverlapped=0x0) returned 1 [0052.160] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0052.160] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0052.160] WriteFile (in: hFile=0x31c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x4758, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0x4758, lpOverlapped=0x0) returned 1 [0052.160] FlushFileBuffers (hFile=0x31c) returned 1 [0052.480] FlushFileBuffers (hFile=0x2ec) returned 1 [0052.482] CloseHandle (hObject=0x31c) returned 1 [0052.483] CloseHandle (hObject=0x2ec) returned 1 [0052.484] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll")) returned 1 [0052.485] SetEvent (hEvent=0x2a4) returned 1 [0052.485] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec [0052.485] GetFileSizeEx (in: hFile=0x2ec, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=82962) returned 1 [0052.485] CloseHandle (hObject=0x2ec) returned 1 [0052.485] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml")) returned 0x80 [0052.485] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml")) returned 0x80 [0052.485] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0052.485] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec [0052.485] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0052.485] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0052.485] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x31c [0052.486] ReadFile (in: hFile=0x2ec, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0x14412, lpOverlapped=0x0) returned 1 [0052.488] WriteFile (in: hFile=0x31c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x14420, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x14420, lpOverlapped=0x0) returned 1 [0052.490] WriteFile (in: hFile=0x31c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x102, lpOverlapped=0x0) returned 1 [0052.491] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0052.491] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0052.491] WriteFile (in: hFile=0x2ec, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x14412, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0x14412, lpOverlapped=0x0) returned 1 [0052.491] FlushFileBuffers (hFile=0x2ec) returned 1 [0053.086] FlushFileBuffers (hFile=0x31c) returned 1 [0053.100] CloseHandle (hObject=0x2ec) returned 1 [0053.103] CloseHandle (hObject=0x31c) returned 1 [0053.105] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml")) returned 1 [0053.106] SetEvent (hEvent=0x2a4) returned 1 [0053.106] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0053.107] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=6851) returned 1 [0053.107] CloseHandle (hObject=0x31c) returned 1 [0053.107] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf")) returned 0x80 [0053.107] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf")) returned 0x80 [0053.107] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0053.107] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0053.107] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0053.107] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0053.107] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2ec [0053.109] ReadFile (in: hFile=0x31c, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0x1ac3, lpOverlapped=0x0) returned 1 [0053.110] WriteFile (in: hFile=0x2ec, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x1ad0, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x1ad0, lpOverlapped=0x0) returned 1 [0053.111] WriteFile (in: hFile=0x2ec, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0xf2, lpOverlapped=0x0) returned 1 [0053.111] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0053.111] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0053.111] WriteFile (in: hFile=0x31c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x1ac3, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0x1ac3, lpOverlapped=0x0) returned 1 [0053.111] FlushFileBuffers (hFile=0x31c) returned 1 [0053.113] FlushFileBuffers (hFile=0x2ec) returned 1 [0053.115] CloseHandle (hObject=0x31c) returned 1 [0053.115] CloseHandle (hObject=0x2ec) returned 1 [0053.116] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf")) returned 1 [0053.117] SetEvent (hEvent=0x2a4) returned 1 [0053.117] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec [0053.117] GetFileSizeEx (in: hFile=0x2ec, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=72076) returned 1 [0053.117] CloseHandle (hObject=0x2ec) returned 1 [0053.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml")) returned 0x80 [0053.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml")) returned 0x80 [0053.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0053.118] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec [0053.118] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0053.118] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0053.118] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x31c [0053.118] ReadFile (in: hFile=0x2ec, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0x1198c, lpOverlapped=0x0) returned 1 [0053.120] WriteFile (in: hFile=0x31c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x11990, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x11990, lpOverlapped=0x0) returned 1 [0053.122] WriteFile (in: hFile=0x31c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x102, lpOverlapped=0x0) returned 1 [0053.123] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0053.123] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0053.123] WriteFile (in: hFile=0x2ec, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x1198c, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0x1198c, lpOverlapped=0x0) returned 1 [0053.123] FlushFileBuffers (hFile=0x2ec) returned 1 [0053.812] FlushFileBuffers (hFile=0x31c) returned 1 [0053.814] CloseHandle (hObject=0x2ec) returned 1 [0053.816] CloseHandle (hObject=0x31c) returned 1 [0053.818] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml")) returned 1 [0053.819] SetEvent (hEvent=0x2a4) returned 1 [0053.819] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0053.819] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=4254) returned 1 [0053.819] CloseHandle (hObject=0x31c) returned 1 [0053.819] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf")) returned 0x80 [0053.820] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf")) returned 0x80 [0053.820] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0053.820] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0053.820] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0053.820] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0053.820] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c [0053.840] ReadFile (in: hFile=0x31c, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0x109e, lpOverlapped=0x0) returned 1 [0053.844] WriteFile (in: hFile=0x32c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x10a0, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x10a0, lpOverlapped=0x0) returned 1 [0053.845] WriteFile (in: hFile=0x32c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0xf2, lpOverlapped=0x0) returned 1 [0053.845] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0053.845] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0053.845] WriteFile (in: hFile=0x31c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x109e, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0x109e, lpOverlapped=0x0) returned 1 [0053.845] FlushFileBuffers (hFile=0x31c) returned 1 [0053.854] FlushFileBuffers (hFile=0x32c) returned 1 [0053.857] CloseHandle (hObject=0x31c) returned 1 [0053.857] CloseHandle (hObject=0x32c) returned 1 [0053.858] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf")) returned 1 [0053.859] SetEvent (hEvent=0x2a4) returned 1 [0053.859] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x32c [0053.859] GetFileSizeEx (in: hFile=0x32c, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=86442) returned 1 [0053.859] CloseHandle (hObject=0x32c) returned 1 [0053.859] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml")) returned 0x80 [0053.859] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml")) returned 0x80 [0053.859] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0053.859] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x32c [0053.860] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0053.860] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0053.860] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x31c [0053.860] ReadFile (in: hFile=0x32c, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0x151aa, lpOverlapped=0x0) returned 1 [0053.863] WriteFile (in: hFile=0x31c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x151b0, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x151b0, lpOverlapped=0x0) returned 1 [0053.865] WriteFile (in: hFile=0x31c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x102, lpOverlapped=0x0) returned 1 [0053.865] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0053.865] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0053.865] WriteFile (in: hFile=0x32c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x151aa, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0x151aa, lpOverlapped=0x0) returned 1 [0053.866] FlushFileBuffers (hFile=0x32c) returned 1 [0054.410] FlushFileBuffers (hFile=0x31c) returned 1 [0054.412] CloseHandle (hObject=0x32c) returned 1 [0054.415] CloseHandle (hObject=0x31c) returned 1 [0054.417] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml")) returned 1 [0054.419] SetEvent (hEvent=0x2a4) returned 1 [0054.419] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0054.420] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=3643) returned 1 [0054.420] CloseHandle (hObject=0x31c) returned 1 [0054.420] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf")) returned 0x80 [0054.420] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf")) returned 0x80 [0054.420] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0054.420] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0054.420] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0054.420] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0054.420] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c [0054.421] ReadFile (in: hFile=0x31c, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0xe3b, lpOverlapped=0x0) returned 1 [0054.423] WriteFile (in: hFile=0x32c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xe40, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0xe40, lpOverlapped=0x0) returned 1 [0054.424] WriteFile (in: hFile=0x32c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0xf2, lpOverlapped=0x0) returned 1 [0054.424] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0054.424] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0054.424] WriteFile (in: hFile=0x31c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xe3b, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0xe3b, lpOverlapped=0x0) returned 1 [0054.424] FlushFileBuffers (hFile=0x31c) returned 1 [0054.435] FlushFileBuffers (hFile=0x32c) returned 1 [0054.436] CloseHandle (hObject=0x31c) returned 1 [0054.437] CloseHandle (hObject=0x32c) returned 1 [0054.437] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf")) returned 1 [0054.438] SetEvent (hEvent=0x2a4) returned 1 [0054.439] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x32c [0054.439] GetFileSizeEx (in: hFile=0x32c, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=80060) returned 1 [0054.439] CloseHandle (hObject=0x32c) returned 1 [0054.439] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml")) returned 0x80 [0054.439] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml")) returned 0x80 [0054.439] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0054.439] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x32c [0054.439] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0054.439] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0054.439] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x31c [0054.439] ReadFile (in: hFile=0x32c, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0x138bc, lpOverlapped=0x0) returned 1 [0054.443] WriteFile (in: hFile=0x31c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x138c0, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x138c0, lpOverlapped=0x0) returned 1 [0054.445] WriteFile (in: hFile=0x31c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x102, lpOverlapped=0x0) returned 1 [0054.445] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0054.445] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0054.445] WriteFile (in: hFile=0x32c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x138bc, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0x138bc, lpOverlapped=0x0) returned 1 [0054.445] FlushFileBuffers (hFile=0x32c) returned 1 [0055.130] FlushFileBuffers (hFile=0x31c) returned 1 [0055.133] CloseHandle (hObject=0x32c) returned 1 [0055.135] CloseHandle (hObject=0x31c) returned 1 [0055.137] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml")) returned 1 [0055.139] SetEvent (hEvent=0x2a4) returned 1 [0055.139] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0055.139] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=10125) returned 1 [0055.139] CloseHandle (hObject=0x31c) returned 1 [0055.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf")) returned 0x80 [0055.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf")) returned 0x80 [0055.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0055.139] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0055.139] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0055.139] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0055.139] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c [0055.141] ReadFile (in: hFile=0x31c, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0x278d, lpOverlapped=0x0) returned 1 [0055.143] WriteFile (in: hFile=0x32c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x2790, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x2790, lpOverlapped=0x0) returned 1 [0055.144] WriteFile (in: hFile=0x32c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0xf2, lpOverlapped=0x0) returned 1 [0055.144] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0055.144] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0055.144] WriteFile (in: hFile=0x31c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x278d, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0x278d, lpOverlapped=0x0) returned 1 [0055.144] FlushFileBuffers (hFile=0x31c) returned 1 [0055.196] FlushFileBuffers (hFile=0x32c) returned 1 [0055.199] CloseHandle (hObject=0x31c) returned 1 [0055.201] CloseHandle (hObject=0x32c) returned 1 [0055.201] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf")) returned 1 [0055.202] SetEvent (hEvent=0x2a4) returned 1 [0055.202] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x32c [0055.203] GetFileSizeEx (in: hFile=0x32c, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=12687) returned 1 [0055.203] CloseHandle (hObject=0x32c) returned 1 [0055.203] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf")) returned 0x80 [0055.203] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf")) returned 0x80 [0055.203] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0055.203] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x32c [0055.203] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0055.203] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0055.203] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x31c [0055.205] ReadFile (in: hFile=0x32c, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0x318f, lpOverlapped=0x0) returned 1 [0055.207] WriteFile (in: hFile=0x31c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x3190, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x3190, lpOverlapped=0x0) returned 1 [0055.208] WriteFile (in: hFile=0x31c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0xf2, lpOverlapped=0x0) returned 1 [0055.209] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0055.209] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0055.209] WriteFile (in: hFile=0x32c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x318f, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0x318f, lpOverlapped=0x0) returned 1 [0055.209] FlushFileBuffers (hFile=0x32c) returned 1 [0055.224] FlushFileBuffers (hFile=0x31c) returned 1 [0055.240] CloseHandle (hObject=0x32c) returned 1 [0055.241] CloseHandle (hObject=0x31c) returned 1 [0055.241] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf")) returned 1 [0055.242] SetEvent (hEvent=0x2a4) returned 1 [0055.242] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0055.243] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=65238) returned 1 [0055.243] CloseHandle (hObject=0x31c) returned 1 [0055.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml")) returned 0x80 [0055.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml")) returned 0x80 [0055.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0055.243] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0055.243] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0055.243] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0055.243] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c [0055.243] ReadFile (in: hFile=0x31c, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0xfed6, lpOverlapped=0x0) returned 1 [0055.245] WriteFile (in: hFile=0x32c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xfee0, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0xfee0, lpOverlapped=0x0) returned 1 [0055.247] WriteFile (in: hFile=0x32c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x102, lpOverlapped=0x0) returned 1 [0055.247] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0055.247] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0055.247] WriteFile (in: hFile=0x31c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xfed6, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0xfed6, lpOverlapped=0x0) returned 1 [0055.247] FlushFileBuffers (hFile=0x31c) returned 1 [0055.289] FlushFileBuffers (hFile=0x32c) returned 1 [0055.290] CloseHandle (hObject=0x31c) returned 1 [0055.292] CloseHandle (hObject=0x32c) returned 1 [0055.294] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml")) returned 1 [0055.295] SetEvent (hEvent=0x2a4) returned 1 [0055.295] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x32c [0055.296] GetFileSizeEx (in: hFile=0x32c, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=3546) returned 1 [0055.296] CloseHandle (hObject=0x32c) returned 1 [0055.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf")) returned 0x80 [0055.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf")) returned 0x80 [0055.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0055.297] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x32c [0055.297] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0055.297] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0055.297] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x300 [0055.301] ReadFile (in: hFile=0x32c, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0xdda, lpOverlapped=0x0) returned 1 [0055.304] WriteFile (in: hFile=0x300, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xde0, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0xde0, lpOverlapped=0x0) returned 1 [0055.305] WriteFile (in: hFile=0x300, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0xf2, lpOverlapped=0x0) returned 1 [0055.305] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0055.305] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0055.305] WriteFile (in: hFile=0x32c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xdda, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0xdda, lpOverlapped=0x0) returned 1 [0055.305] FlushFileBuffers (hFile=0x32c) returned 1 [0055.313] FlushFileBuffers (hFile=0x300) returned 1 [0055.314] CloseHandle (hObject=0x32c) returned 1 [0055.315] CloseHandle (hObject=0x300) returned 1 [0055.315] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf")) returned 1 [0055.316] SetEvent (hEvent=0x2a4) returned 1 [0055.316] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0055.317] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=19288) returned 1 [0055.317] CloseHandle (hObject=0x300) returned 1 [0055.317] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll")) returned 0x80 [0055.317] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll")) returned 0x80 [0055.317] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0055.317] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0055.317] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0055.317] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0055.318] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c [0055.318] ReadFile (in: hFile=0x300, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0x4b58, lpOverlapped=0x0) returned 1 [0055.319] WriteFile (in: hFile=0x32c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x4b60, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x4b60, lpOverlapped=0x0) returned 1 [0055.320] WriteFile (in: hFile=0x32c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x102, lpOverlapped=0x0) returned 1 [0055.321] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0055.321] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0055.321] WriteFile (in: hFile=0x300, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x4b58, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0x4b58, lpOverlapped=0x0) returned 1 [0055.321] FlushFileBuffers (hFile=0x300) returned 1 [0056.025] FlushFileBuffers (hFile=0x32c) returned 1 [0056.027] CloseHandle (hObject=0x300) returned 1 [0056.027] CloseHandle (hObject=0x32c) returned 1 [0056.028] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll")) returned 1 [0056.029] SetEvent (hEvent=0x2a4) returned 1 [0056.029] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x32c [0056.029] GetFileSizeEx (in: hFile=0x32c, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=17752) returned 1 [0056.029] CloseHandle (hObject=0x32c) returned 1 [0056.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll")) returned 0x80 [0056.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll")) returned 0x80 [0056.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0056.030] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x32c [0056.030] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0056.030] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0056.030] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x300 [0056.030] ReadFile (in: hFile=0x32c, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0x4558, lpOverlapped=0x0) returned 1 [0056.032] WriteFile (in: hFile=0x300, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x4560, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x4560, lpOverlapped=0x0) returned 1 [0056.033] WriteFile (in: hFile=0x300, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x102, lpOverlapped=0x0) returned 1 [0056.033] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0056.033] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0056.033] WriteFile (in: hFile=0x32c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x4558, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0x4558, lpOverlapped=0x0) returned 1 [0056.034] FlushFileBuffers (hFile=0x32c) returned 1 [0056.169] FlushFileBuffers (hFile=0x300) returned 1 [0056.170] CloseHandle (hObject=0x32c) returned 1 [0056.171] CloseHandle (hObject=0x300) returned 1 [0056.172] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll")) returned 1 [0056.173] SetEvent (hEvent=0x2a4) returned 1 [0056.173] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0056.174] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=18264) returned 1 [0056.174] CloseHandle (hObject=0x300) returned 1 [0056.174] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll")) returned 0x80 [0056.174] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll")) returned 0x80 [0056.174] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0056.174] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0056.174] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0056.174] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0056.174] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c [0056.174] ReadFile (in: hFile=0x300, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0x4758, lpOverlapped=0x0) returned 1 [0056.176] WriteFile (in: hFile=0x32c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x4760, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x4760, lpOverlapped=0x0) returned 1 [0056.177] WriteFile (in: hFile=0x32c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x102, lpOverlapped=0x0) returned 1 [0056.177] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0056.177] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0056.177] WriteFile (in: hFile=0x300, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x4758, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0x4758, lpOverlapped=0x0) returned 1 [0056.177] FlushFileBuffers (hFile=0x300) returned 1 [0056.540] FlushFileBuffers (hFile=0x32c) returned 1 [0056.545] CloseHandle (hObject=0x300) returned 1 [0056.545] CloseHandle (hObject=0x32c) returned 1 [0056.546] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll")) returned 1 [0056.547] SetEvent (hEvent=0x2a4) returned 1 [0056.548] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x32c [0056.548] GetFileSizeEx (in: hFile=0x32c, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=80738) returned 1 [0056.548] CloseHandle (hObject=0x32c) returned 1 [0056.548] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml")) returned 0x80 [0056.548] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml")) returned 0x80 [0056.548] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0056.548] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x32c [0056.548] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0056.548] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0056.548] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x300 [0056.548] ReadFile (in: hFile=0x32c, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0x13b62, lpOverlapped=0x0) returned 1 [0056.551] WriteFile (in: hFile=0x300, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x13b70, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x13b70, lpOverlapped=0x0) returned 1 [0056.553] WriteFile (in: hFile=0x300, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x102, lpOverlapped=0x0) returned 1 [0056.554] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0056.554] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0056.554] WriteFile (in: hFile=0x32c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x13b62, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0x13b62, lpOverlapped=0x0) returned 1 [0056.554] FlushFileBuffers (hFile=0x32c) returned 1 [0057.455] FlushFileBuffers (hFile=0x300) returned 1 [0057.457] CloseHandle (hObject=0x32c) returned 1 [0057.459] CloseHandle (hObject=0x300) returned 1 [0057.461] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml")) returned 1 [0057.463] SetEvent (hEvent=0x2a4) returned 1 [0057.463] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0057.466] GetFileSizeEx (in: hFile=0x314, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=54456) returned 1 [0057.467] CloseHandle (hObject=0x314) returned 1 [0057.467] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf")) returned 0x80 [0057.467] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf")) returned 0x80 [0057.467] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0057.467] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0057.467] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0057.467] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0057.467] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c [0057.469] ReadFile (in: hFile=0x314, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0xd4b8, lpOverlapped=0x0) returned 1 [0057.471] WriteFile (in: hFile=0x33c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xd4c0, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0xd4c0, lpOverlapped=0x0) returned 1 [0057.472] WriteFile (in: hFile=0x33c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0xf2, lpOverlapped=0x0) returned 1 [0057.473] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0057.473] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0057.473] WriteFile (in: hFile=0x314, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xd4b8, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0xd4b8, lpOverlapped=0x0) returned 1 [0057.473] FlushFileBuffers (hFile=0x314) returned 1 [0057.476] FlushFileBuffers (hFile=0x33c) returned 1 [0057.478] CloseHandle (hObject=0x314) returned 1 [0057.479] CloseHandle (hObject=0x33c) returned 1 [0057.481] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf")) returned 1 [0057.482] SetEvent (hEvent=0x2a4) returned 1 [0057.482] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c [0057.482] GetFileSizeEx (in: hFile=0x33c, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=81482) returned 1 [0057.482] CloseHandle (hObject=0x33c) returned 1 [0057.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml")) returned 0x80 [0057.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml")) returned 0x80 [0057.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0057.482] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c [0057.482] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0057.482] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0057.482] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x314 [0057.483] ReadFile (in: hFile=0x33c, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0x13e4a, lpOverlapped=0x0) returned 1 [0057.486] WriteFile (in: hFile=0x314, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x13e50, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x13e50, lpOverlapped=0x0) returned 1 [0057.488] WriteFile (in: hFile=0x314, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x102, lpOverlapped=0x0) returned 1 [0057.488] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0057.488] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0057.488] WriteFile (in: hFile=0x33c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x13e4a, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0x13e4a, lpOverlapped=0x0) returned 1 [0057.488] FlushFileBuffers (hFile=0x33c) returned 1 [0058.278] FlushFileBuffers (hFile=0x314) returned 1 [0058.279] CloseHandle (hObject=0x33c) returned 1 [0058.282] CloseHandle (hObject=0x314) returned 1 [0058.284] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml")) returned 1 [0058.285] SetEvent (hEvent=0x2a4) returned 1 [0058.285] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0058.285] GetFileSizeEx (in: hFile=0x314, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=3865) returned 1 [0058.285] CloseHandle (hObject=0x314) returned 1 [0058.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf")) returned 0x80 [0058.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf")) returned 0x80 [0058.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0058.286] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0058.286] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0058.286] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0058.286] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c [0058.287] ReadFile (in: hFile=0x314, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0xf19, lpOverlapped=0x0) returned 1 [0058.289] WriteFile (in: hFile=0x33c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xf20, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0xf20, lpOverlapped=0x0) returned 1 [0058.289] WriteFile (in: hFile=0x33c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0xf2, lpOverlapped=0x0) returned 1 [0058.290] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0058.290] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0058.290] WriteFile (in: hFile=0x314, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xf19, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0xf19, lpOverlapped=0x0) returned 1 [0058.290] FlushFileBuffers (hFile=0x314) returned 1 [0058.292] FlushFileBuffers (hFile=0x33c) returned 1 [0058.294] CloseHandle (hObject=0x314) returned 1 [0058.294] CloseHandle (hObject=0x33c) returned 1 [0058.295] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf")) returned 1 [0058.296] SetEvent (hEvent=0x2a4) returned 1 [0058.296] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c [0058.296] GetFileSizeEx (in: hFile=0x33c, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=77680) returned 1 [0058.296] CloseHandle (hObject=0x33c) returned 1 [0058.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml")) returned 0x80 [0058.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml")) returned 0x80 [0058.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0058.296] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c [0058.296] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0058.296] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0058.297] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x314 [0058.297] ReadFile (in: hFile=0x33c, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0x12f70, lpOverlapped=0x0) returned 1 [0058.299] WriteFile (in: hFile=0x314, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x12f80, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x12f80, lpOverlapped=0x0) returned 1 [0058.301] WriteFile (in: hFile=0x314, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x102, lpOverlapped=0x0) returned 1 [0058.301] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0058.301] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0058.301] WriteFile (in: hFile=0x33c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x12f70, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0x12f70, lpOverlapped=0x0) returned 1 [0058.302] FlushFileBuffers (hFile=0x33c) returned 1 [0059.078] FlushFileBuffers (hFile=0x314) returned 1 [0059.082] CloseHandle (hObject=0x33c) returned 1 [0059.084] CloseHandle (hObject=0x314) returned 1 [0059.086] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml")) returned 1 [0059.087] SetEvent (hEvent=0x2a4) returned 1 [0059.088] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0059.088] GetFileSizeEx (in: hFile=0x314, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=3859) returned 1 [0059.088] CloseHandle (hObject=0x314) returned 1 [0059.088] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf")) returned 0x80 [0059.088] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf")) returned 0x80 [0059.088] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0059.088] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0059.088] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0059.088] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0059.088] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c [0059.091] ReadFile (in: hFile=0x314, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0xf13, lpOverlapped=0x0) returned 1 [0059.093] WriteFile (in: hFile=0x33c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xf20, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0xf20, lpOverlapped=0x0) returned 1 [0059.094] WriteFile (in: hFile=0x33c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0xf2, lpOverlapped=0x0) returned 1 [0059.094] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0059.094] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0059.094] WriteFile (in: hFile=0x314, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xf13, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0xf13, lpOverlapped=0x0) returned 1 [0059.094] FlushFileBuffers (hFile=0x314) returned 1 [0059.101] FlushFileBuffers (hFile=0x33c) returned 1 [0059.112] CloseHandle (hObject=0x314) returned 1 [0059.113] CloseHandle (hObject=0x33c) returned 1 [0059.113] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf")) returned 1 [0059.114] SetEvent (hEvent=0x2a4) returned 1 [0059.114] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c [0059.114] GetFileSizeEx (in: hFile=0x33c, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=17752) returned 1 [0059.114] CloseHandle (hObject=0x33c) returned 1 [0059.114] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll")) returned 0x80 [0059.114] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll")) returned 0x80 [0059.115] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0059.115] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c [0059.115] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0059.115] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0059.115] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x314 [0059.115] ReadFile (in: hFile=0x33c, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0x4558, lpOverlapped=0x0) returned 1 [0059.117] WriteFile (in: hFile=0x314, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x4560, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x4560, lpOverlapped=0x0) returned 1 [0059.118] WriteFile (in: hFile=0x314, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x102, lpOverlapped=0x0) returned 1 [0059.118] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0059.118] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0059.118] WriteFile (in: hFile=0x33c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x4558, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0x4558, lpOverlapped=0x0) returned 1 [0059.118] FlushFileBuffers (hFile=0x33c) returned 1 [0059.169] FlushFileBuffers (hFile=0x314) returned 1 [0059.171] CloseHandle (hObject=0x33c) returned 1 [0059.172] CloseHandle (hObject=0x314) returned 1 [0059.173] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll")) returned 1 [0059.174] SetEvent (hEvent=0x2a4) returned 1 [0059.174] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0059.174] GetFileSizeEx (in: hFile=0x314, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=60684) returned 1 [0059.174] CloseHandle (hObject=0x314) returned 1 [0059.174] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml")) returned 0x80 [0059.174] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml")) returned 0x80 [0059.174] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0059.174] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0059.174] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0059.174] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0059.174] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c [0059.174] ReadFile (in: hFile=0x314, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0xed0c, lpOverlapped=0x0) returned 1 [0059.187] WriteFile (in: hFile=0x33c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xed10, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0xed10, lpOverlapped=0x0) returned 1 [0059.189] WriteFile (in: hFile=0x33c, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x102, lpOverlapped=0x0) returned 1 [0059.189] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0059.189] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0059.189] WriteFile (in: hFile=0x314, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xed0c, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0xed0c, lpOverlapped=0x0) returned 1 [0059.189] FlushFileBuffers (hFile=0x314) returned 1 [0059.465] FlushFileBuffers (hFile=0x33c) returned 1 [0059.466] CloseHandle (hObject=0x314) returned 1 [0059.468] CloseHandle (hObject=0x33c) returned 1 [0059.470] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml")) returned 1 [0059.471] SetEvent (hEvent=0x2a4) returned 1 [0059.471] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0059.473] GetFileSizeEx (in: hFile=0x314, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=4015) returned 1 [0059.473] CloseHandle (hObject=0x314) returned 1 [0059.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf")) returned 0x80 [0059.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf")) returned 0x80 [0059.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0059.473] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0059.474] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0059.474] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0059.474] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338 [0059.476] ReadFile (in: hFile=0x314, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0xfaf, lpOverlapped=0x0) returned 1 [0059.481] WriteFile (in: hFile=0x338, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xfb0, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0xfb0, lpOverlapped=0x0) returned 1 [0059.482] WriteFile (in: hFile=0x338, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0xf2, lpOverlapped=0x0) returned 1 [0059.483] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0059.483] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0059.483] WriteFile (in: hFile=0x314, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xfaf, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0xfaf, lpOverlapped=0x0) returned 1 [0059.483] FlushFileBuffers (hFile=0x314) returned 1 [0059.488] FlushFileBuffers (hFile=0x338) returned 1 [0059.490] CloseHandle (hObject=0x314) returned 1 [0059.490] CloseHandle (hObject=0x338) returned 1 [0059.491] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf")) returned 1 [0059.492] SetEvent (hEvent=0x2a4) returned 1 [0059.492] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338 [0059.492] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=80254) returned 1 [0059.492] CloseHandle (hObject=0x338) returned 1 [0059.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml")) returned 0x80 [0059.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml")) returned 0x80 [0059.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0059.492] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338 [0059.492] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0059.493] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0059.493] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x314 [0059.493] ReadFile (in: hFile=0x338, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0x1397e, lpOverlapped=0x0) returned 1 [0059.495] WriteFile (in: hFile=0x314, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x13980, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x13980, lpOverlapped=0x0) returned 1 [0059.497] WriteFile (in: hFile=0x314, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x102, lpOverlapped=0x0) returned 1 [0059.498] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0059.498] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0059.498] WriteFile (in: hFile=0x338, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x1397e, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0x1397e, lpOverlapped=0x0) returned 1 [0059.498] FlushFileBuffers (hFile=0x338) returned 1 [0060.631] FlushFileBuffers (hFile=0x314) returned 1 [0060.632] CloseHandle (hObject=0x338) returned 1 [0060.637] CloseHandle (hObject=0x314) returned 1 [0060.639] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml")) returned 1 [0060.640] SetEvent (hEvent=0x2a4) returned 1 [0060.640] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0060.640] GetFileSizeEx (in: hFile=0x314, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=6309) returned 1 [0060.640] CloseHandle (hObject=0x314) returned 1 [0060.641] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf")) returned 0x80 [0060.641] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf")) returned 0x80 [0060.641] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0060.641] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0060.641] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0060.641] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0060.641] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338 [0060.642] ReadFile (in: hFile=0x314, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0x18a5, lpOverlapped=0x0) returned 1 [0060.644] WriteFile (in: hFile=0x338, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x18b0, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x18b0, lpOverlapped=0x0) returned 1 [0060.645] WriteFile (in: hFile=0x338, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0xf2, lpOverlapped=0x0) returned 1 [0060.645] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0060.645] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0060.645] WriteFile (in: hFile=0x314, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x18a5, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0x18a5, lpOverlapped=0x0) returned 1 [0060.645] FlushFileBuffers (hFile=0x314) returned 1 [0061.273] FlushFileBuffers (hFile=0x338) returned 1 [0061.276] CloseHandle (hObject=0x314) returned 1 [0061.276] CloseHandle (hObject=0x338) returned 1 [0061.277] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf")) returned 1 [0061.278] SetEvent (hEvent=0x2a4) returned 1 [0061.278] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338 [0061.278] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=14168) returned 1 [0061.278] CloseHandle (hObject=0x338) returned 1 [0061.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll")) returned 0x80 [0061.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll")) returned 0x80 [0061.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0061.279] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338 [0061.279] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0061.279] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0061.279] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x314 [0061.279] ReadFile (in: hFile=0x338, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0x3758, lpOverlapped=0x0) returned 1 [0061.281] WriteFile (in: hFile=0x314, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x3760, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x3760, lpOverlapped=0x0) returned 1 [0061.282] WriteFile (in: hFile=0x314, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x102, lpOverlapped=0x0) returned 1 [0061.282] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0061.282] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0061.282] WriteFile (in: hFile=0x338, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x3758, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0x3758, lpOverlapped=0x0) returned 1 [0061.282] FlushFileBuffers (hFile=0x338) returned 1 [0061.668] FlushFileBuffers (hFile=0x314) returned 1 [0061.672] CloseHandle (hObject=0x338) returned 1 [0061.672] CloseHandle (hObject=0x314) returned 1 [0061.673] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll")) returned 1 [0061.674] SetEvent (hEvent=0x2a4) returned 1 [0061.674] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0061.674] GetFileSizeEx (in: hFile=0x314, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=79996) returned 1 [0061.674] CloseHandle (hObject=0x314) returned 1 [0061.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml")) returned 0x80 [0061.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml")) returned 0x80 [0061.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0061.674] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0061.675] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0061.675] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0061.675] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338 [0061.675] ReadFile (in: hFile=0x314, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0x1387c, lpOverlapped=0x0) returned 1 [0061.677] WriteFile (in: hFile=0x338, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x13880, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x13880, lpOverlapped=0x0) returned 1 [0061.679] WriteFile (in: hFile=0x338, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x102, lpOverlapped=0x0) returned 1 [0061.679] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0061.679] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0061.679] WriteFile (in: hFile=0x314, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x1387c, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0x1387c, lpOverlapped=0x0) returned 1 [0061.680] FlushFileBuffers (hFile=0x314) returned 1 [0062.312] FlushFileBuffers (hFile=0x338) returned 1 [0062.313] CloseHandle (hObject=0x314) returned 1 [0062.316] CloseHandle (hObject=0x338) returned 1 [0062.318] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml")) returned 1 [0062.319] SetEvent (hEvent=0x2a4) returned 1 [0062.319] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338 [0062.320] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=201796) returned 1 [0062.320] CloseHandle (hObject=0x338) returned 1 [0062.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml")) returned 0x80 [0062.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml")) returned 0x80 [0062.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0062.320] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338 [0062.320] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0062.320] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0062.320] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x314 [0062.321] ReadFile (in: hFile=0x338, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0x31444, lpOverlapped=0x0) returned 1 [0062.327] WriteFile (in: hFile=0x314, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x31450, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x31450, lpOverlapped=0x0) returned 1 [0062.331] WriteFile (in: hFile=0x314, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x102, lpOverlapped=0x0) returned 1 [0062.331] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0062.331] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0062.331] WriteFile (in: hFile=0x338, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x31444, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0x31444, lpOverlapped=0x0) returned 1 [0062.332] FlushFileBuffers (hFile=0x338) returned 1 [0062.334] FlushFileBuffers (hFile=0x314) returned 1 [0062.336] CloseHandle (hObject=0x338) returned 1 [0062.340] CloseHandle (hObject=0x314) returned 1 [0062.344] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml")) returned 1 [0062.346] SetEvent (hEvent=0x2a4) returned 1 [0062.346] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0062.358] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=39042) returned 1 [0062.358] CloseHandle (hObject=0x304) returned 1 [0062.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml")) returned 0x80 [0062.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml")) returned 0x80 [0062.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\UiInfo.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0062.358] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0062.359] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0062.359] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0062.359] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\UiInfo.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x314 [0062.360] ReadFile (in: hFile=0x304, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0x9882, lpOverlapped=0x0) returned 1 [0062.362] WriteFile (in: hFile=0x314, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x9890, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x9890, lpOverlapped=0x0) returned 1 [0062.363] WriteFile (in: hFile=0x314, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0xf2, lpOverlapped=0x0) returned 1 [0062.364] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0062.364] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0062.364] WriteFile (in: hFile=0x304, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x9882, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0x9882, lpOverlapped=0x0) returned 1 [0062.364] FlushFileBuffers (hFile=0x304) returned 1 [0062.366] FlushFileBuffers (hFile=0x314) returned 1 [0062.367] CloseHandle (hObject=0x304) returned 1 [0062.369] CloseHandle (hObject=0x314) returned 1 [0062.370] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml")) returned 1 [0062.371] SetEvent (hEvent=0x2a4) returned 1 [0062.371] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0062.371] GetFileSizeEx (in: hFile=0x314, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=16118) returned 1 [0062.371] CloseHandle (hObject=0x314) returned 1 [0062.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html")) returned 0x80 [0062.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html")) returned 0x80 [0062.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\DHtmlHeader.html.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0062.375] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0062.376] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0062.376] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0062.376] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\DHtmlHeader.html.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x304 [0062.376] ReadFile (in: hFile=0x314, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0x3ef6, lpOverlapped=0x0) returned 1 [0062.377] WriteFile (in: hFile=0x304, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x3f00, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x3f00, lpOverlapped=0x0) returned 1 [0062.378] WriteFile (in: hFile=0x304, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x102, lpOverlapped=0x0) returned 1 [0062.379] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0062.379] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0062.379] WriteFile (in: hFile=0x314, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x3ef6, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0x3ef6, lpOverlapped=0x0) returned 1 [0062.379] FlushFileBuffers (hFile=0x314) returned 1 [0062.952] FlushFileBuffers (hFile=0x304) returned 1 [0062.953] CloseHandle (hObject=0x314) returned 1 [0062.954] CloseHandle (hObject=0x304) returned 1 [0062.955] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html")) returned 1 [0062.956] SetEvent (hEvent=0x2a4) returned 1 [0062.956] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0062.956] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=93314) returned 1 [0062.956] CloseHandle (hObject=0x304) returned 1 [0062.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml")) returned 0x80 [0062.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml")) returned 0x80 [0062.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0062.956] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0062.956] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0062.957] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0062.957] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x314 [0062.957] ReadFile (in: hFile=0x304, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0x16c82, lpOverlapped=0x0) returned 1 [0062.960] WriteFile (in: hFile=0x314, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x16c90, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x16c90, lpOverlapped=0x0) returned 1 [0062.963] WriteFile (in: hFile=0x314, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x102, lpOverlapped=0x0) returned 1 [0062.963] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0062.963] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0062.963] WriteFile (in: hFile=0x304, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x16c82, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0x16c82, lpOverlapped=0x0) returned 1 [0062.963] FlushFileBuffers (hFile=0x304) returned 1 [0063.337] FlushFileBuffers (hFile=0x314) returned 1 [0063.338] CloseHandle (hObject=0x304) returned 1 [0063.341] CloseHandle (hObject=0x314) returned 1 [0063.343] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml")) returned 1 [0063.344] SetEvent (hEvent=0x2a4) returned 1 [0063.344] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0063.346] GetFileSizeEx (in: hFile=0x314, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=1150) returned 1 [0063.346] CloseHandle (hObject=0x314) returned 1 [0063.350] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico")) returned 0x80 [0063.350] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico")) returned 0x80 [0063.350] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Print.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0063.350] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0063.351] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0063.351] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0063.351] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Print.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x304 [0063.351] ReadFile (in: hFile=0x314, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0x47e, lpOverlapped=0x0) returned 1 [0063.352] WriteFile (in: hFile=0x304, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x480, lpOverlapped=0x0) returned 1 [0063.353] WriteFile (in: hFile=0x304, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0xf2, lpOverlapped=0x0) returned 1 [0063.353] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0063.353] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0063.354] WriteFile (in: hFile=0x314, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x47e, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0x47e, lpOverlapped=0x0) returned 1 [0063.354] FlushFileBuffers (hFile=0x314) returned 1 [0064.342] FlushFileBuffers (hFile=0x304) returned 1 [0064.628] CloseHandle (hObject=0x314) returned 1 [0064.629] CloseHandle (hObject=0x304) returned 1 [0064.630] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico")) returned 1 [0064.631] SetEvent (hEvent=0x2a4) returned 1 [0064.631] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0064.631] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=894) returned 1 [0064.631] CloseHandle (hObject=0x304) returned 1 [0064.631] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico")) returned 0x80 [0064.631] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico")) returned 0x80 [0064.631] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0064.631] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0064.632] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0064.632] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0064.632] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x314 [0064.632] ReadFile (in: hFile=0x304, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0x37e, lpOverlapped=0x0) returned 1 [0064.633] WriteFile (in: hFile=0x314, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x380, lpOverlapped=0x0) returned 1 [0064.634] WriteFile (in: hFile=0x314, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0xf2, lpOverlapped=0x0) returned 1 [0064.634] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0064.634] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0064.634] WriteFile (in: hFile=0x304, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x37e, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0x37e, lpOverlapped=0x0) returned 1 [0064.635] FlushFileBuffers (hFile=0x304) returned 1 [0064.853] FlushFileBuffers (hFile=0x314) returned 1 [0064.854] CloseHandle (hObject=0x304) returned 1 [0064.854] CloseHandle (hObject=0x314) returned 1 [0064.855] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico")) returned 1 [0064.856] SetEvent (hEvent=0x2a4) returned 1 [0064.856] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0064.856] GetFileSizeEx (in: hFile=0x314, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=894) returned 1 [0064.856] CloseHandle (hObject=0x314) returned 1 [0064.856] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico")) returned 0x80 [0064.856] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico")) returned 0x80 [0064.856] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0064.856] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0064.856] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0064.856] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0064.856] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x304 [0064.857] ReadFile (in: hFile=0x314, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0x37e, lpOverlapped=0x0) returned 1 [0064.859] WriteFile (in: hFile=0x304, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x380, lpOverlapped=0x0) returned 1 [0064.860] WriteFile (in: hFile=0x304, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0xf2, lpOverlapped=0x0) returned 1 [0064.860] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0064.860] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0064.860] WriteFile (in: hFile=0x314, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x37e, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0x37e, lpOverlapped=0x0) returned 1 [0064.861] FlushFileBuffers (hFile=0x314) returned 1 [0064.864] FlushFileBuffers (hFile=0x304) returned 1 [0064.865] CloseHandle (hObject=0x314) returned 1 [0064.865] CloseHandle (hObject=0x304) returned 1 [0064.866] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico")) returned 1 [0064.867] SetEvent (hEvent=0x2a4) returned 1 [0064.867] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0064.867] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=894) returned 1 [0064.867] CloseHandle (hObject=0x304) returned 1 [0064.867] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico")) returned 0x80 [0064.867] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico")) returned 0x80 [0064.867] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0064.867] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0064.867] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0064.867] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0064.867] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x314 [0064.868] ReadFile (in: hFile=0x304, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0x37e, lpOverlapped=0x0) returned 1 [0064.870] WriteFile (in: hFile=0x314, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x380, lpOverlapped=0x0) returned 1 [0064.871] WriteFile (in: hFile=0x314, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0xf2, lpOverlapped=0x0) returned 1 [0064.871] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0064.871] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0064.871] WriteFile (in: hFile=0x304, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x37e, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0x37e, lpOverlapped=0x0) returned 1 [0064.871] FlushFileBuffers (hFile=0x304) returned 1 [0064.873] FlushFileBuffers (hFile=0x314) returned 1 [0064.876] CloseHandle (hObject=0x304) returned 1 [0064.876] CloseHandle (hObject=0x314) returned 1 [0064.876] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico")) returned 1 [0064.878] SetEvent (hEvent=0x2a4) returned 1 [0064.878] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0064.878] GetFileSizeEx (in: hFile=0x314, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=894) returned 1 [0064.878] CloseHandle (hObject=0x314) returned 1 [0064.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico")) returned 0x80 [0064.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico")) returned 0x80 [0064.879] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0064.879] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0064.879] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0064.879] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0064.879] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x304 [0064.879] ReadFile (in: hFile=0x314, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0x37e, lpOverlapped=0x0) returned 1 [0064.881] WriteFile (in: hFile=0x304, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x380, lpOverlapped=0x0) returned 1 [0064.881] WriteFile (in: hFile=0x304, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0xf2, lpOverlapped=0x0) returned 1 [0064.882] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0064.882] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0064.882] WriteFile (in: hFile=0x314, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x37e, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0x37e, lpOverlapped=0x0) returned 1 [0064.882] FlushFileBuffers (hFile=0x314) returned 1 [0064.883] FlushFileBuffers (hFile=0x304) returned 1 [0064.886] CloseHandle (hObject=0x314) returned 1 [0064.886] CloseHandle (hObject=0x304) returned 1 [0064.886] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico")) returned 1 [0064.887] SetEvent (hEvent=0x2a4) returned 1 [0064.887] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x328 [0064.888] GetFileSizeEx (in: hFile=0x328, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=894) returned 1 [0064.888] CloseHandle (hObject=0x328) returned 1 [0064.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico")) returned 0x80 [0064.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico")) returned 0x80 [0064.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0064.891] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0064.891] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0064.891] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0064.891] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x314 [0064.891] ReadFile (in: hFile=0x304, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0x37e, lpOverlapped=0x0) returned 1 [0064.893] WriteFile (in: hFile=0x314, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x380, lpOverlapped=0x0) returned 1 [0064.893] WriteFile (in: hFile=0x314, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0xf2, lpOverlapped=0x0) returned 1 [0064.894] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0064.894] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0064.894] WriteFile (in: hFile=0x304, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x37e, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0x37e, lpOverlapped=0x0) returned 1 [0064.894] FlushFileBuffers (hFile=0x304) returned 1 [0064.897] FlushFileBuffers (hFile=0x314) returned 1 [0064.898] CloseHandle (hObject=0x304) returned 1 [0064.898] CloseHandle (hObject=0x314) returned 1 [0064.899] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico")) returned 1 [0064.900] SetEvent (hEvent=0x2a4) returned 1 [0064.900] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0064.900] GetFileSizeEx (in: hFile=0x314, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=1150) returned 1 [0064.900] CloseHandle (hObject=0x314) returned 1 [0064.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico")) returned 0x80 [0064.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico")) returned 0x80 [0064.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Save.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0064.900] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0064.900] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0064.900] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0064.900] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Save.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x304 [0064.901] ReadFile (in: hFile=0x314, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0x47e, lpOverlapped=0x0) returned 1 [0064.903] WriteFile (in: hFile=0x304, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x480, lpOverlapped=0x0) returned 1 [0064.904] WriteFile (in: hFile=0x304, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0xf2, lpOverlapped=0x0) returned 1 [0064.904] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0064.904] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0064.904] WriteFile (in: hFile=0x314, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x47e, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0x47e, lpOverlapped=0x0) returned 1 [0064.904] FlushFileBuffers (hFile=0x314) returned 1 [0064.906] FlushFileBuffers (hFile=0x304) returned 1 [0064.907] CloseHandle (hObject=0x314) returned 1 [0064.908] CloseHandle (hObject=0x304) returned 1 [0064.908] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico")) returned 1 [0064.909] SetEvent (hEvent=0x2a4) returned 1 [0064.909] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0064.909] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=36710) returned 1 [0064.909] CloseHandle (hObject=0x304) returned 1 [0064.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico")) returned 0x80 [0064.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico")) returned 0x80 [0064.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Setup.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0064.910] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0064.910] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0064.910] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0064.910] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Setup.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x314 [0064.910] ReadFile (in: hFile=0x304, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0x8f66, lpOverlapped=0x0) returned 1 [0064.912] WriteFile (in: hFile=0x314, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x8f70, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x8f70, lpOverlapped=0x0) returned 1 [0064.913] WriteFile (in: hFile=0x314, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0xf2, lpOverlapped=0x0) returned 1 [0064.913] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0064.913] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0064.913] WriteFile (in: hFile=0x304, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x8f66, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0x8f66, lpOverlapped=0x0) returned 1 [0064.913] FlushFileBuffers (hFile=0x304) returned 1 [0064.915] FlushFileBuffers (hFile=0x314) returned 1 [0064.916] CloseHandle (hObject=0x304) returned 1 [0064.918] CloseHandle (hObject=0x314) returned 1 [0064.919] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico")) returned 1 [0064.920] SetEvent (hEvent=0x2a4) returned 1 [0064.920] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0064.920] GetFileSizeEx (in: hFile=0x314, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=10134) returned 1 [0064.920] CloseHandle (hObject=0x314) returned 1 [0064.920] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico")) returned 0x80 [0064.920] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico")) returned 0x80 [0064.920] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\stop.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0064.920] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0064.920] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0064.921] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0064.921] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\stop.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x304 [0064.921] ReadFile (in: hFile=0x314, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0x2796, lpOverlapped=0x0) returned 1 [0064.922] WriteFile (in: hFile=0x304, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x27a0, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x27a0, lpOverlapped=0x0) returned 1 [0064.923] WriteFile (in: hFile=0x304, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0xf2, lpOverlapped=0x0) returned 1 [0064.924] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0064.924] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0064.924] WriteFile (in: hFile=0x314, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x2796, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0x2796, lpOverlapped=0x0) returned 1 [0064.924] FlushFileBuffers (hFile=0x314) returned 1 [0065.087] FlushFileBuffers (hFile=0x304) returned 1 [0065.091] CloseHandle (hObject=0x314) returned 1 [0065.091] CloseHandle (hObject=0x304) returned 1 [0065.092] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico")) returned 1 [0065.093] SetEvent (hEvent=0x2a4) returned 1 [0065.093] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0065.093] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=181483595) returned 1 [0065.093] CloseHandle (hObject=0x304) returned 1 [0065.093] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz")) returned 0x80 [0065.093] MoveFileW (lpExistingFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz"), lpNewFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Core.mzz.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 1 [0065.094] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Core.mzz.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0065.094] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f588 | out: lpNewFilePointer=0x0) returned 1 [0065.094] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f588 | out: lpNewFilePointer=0x0) returned 1 [0065.094] ReadFile (in: hFile=0x304, lpBuffer=0x2f23058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2b5f594, lpOverlapped=0x0 | out: lpBuffer=0x2f23058*, lpNumberOfBytesRead=0x2b5f594*=0x40000, lpOverlapped=0x0) returned 1 [0065.102] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x39b12c3, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f588 | out: lpNewFilePointer=0x0) returned 1 [0065.102] ReadFile (in: hFile=0x304, lpBuffer=0x2f63058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2b5f594, lpOverlapped=0x0 | out: lpBuffer=0x2f63058*, lpNumberOfBytesRead=0x2b5f594*=0x40000, lpOverlapped=0x0) returned 1 [0065.106] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0xacd384b, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f588 | out: lpNewFilePointer=0x0) returned 1 [0065.106] ReadFile (in: hFile=0x304, lpBuffer=0x2fa3058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2b5f594, lpOverlapped=0x0 | out: lpBuffer=0x2fa3058*, lpNumberOfBytesRead=0x2b5f594*=0x40000, lpOverlapped=0x0) returned 1 [0065.123] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f6f8 | out: lpNewFilePointer=0x0) returned 1 [0065.123] WriteFile (in: hFile=0x304, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xc0112, lpNumberOfBytesWritten=0x2b5f6f0, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6f0*=0xc0112, lpOverlapped=0x0) returned 1 [0065.268] SetEndOfFile (hFile=0x304) returned 1 [0065.268] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0xacd384b, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f590 | out: lpNewFilePointer=0x0) returned 1 [0065.268] WriteFile (in: hFile=0x304, lpBuffer=0x2fe314a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2b5f59c, lpOverlapped=0x0 | out: lpBuffer=0x2fe314a*, lpNumberOfBytesWritten=0x2b5f59c*=0x40000, lpOverlapped=0x0) returned 1 [0065.270] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x39b12c3, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f590 | out: lpNewFilePointer=0x0) returned 1 [0065.270] WriteFile (in: hFile=0x304, lpBuffer=0x2fe314a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2b5f59c, lpOverlapped=0x0 | out: lpBuffer=0x2fe314a*, lpNumberOfBytesWritten=0x2b5f59c*=0x40000, lpOverlapped=0x0) returned 1 [0065.270] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f590 | out: lpNewFilePointer=0x0) returned 1 [0065.270] WriteFile (in: hFile=0x304, lpBuffer=0x2fe314a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2b5f59c, lpOverlapped=0x0 | out: lpBuffer=0x2fe314a*, lpNumberOfBytesWritten=0x2b5f59c*=0x40000, lpOverlapped=0x0) returned 1 [0065.271] FlushFileBuffers (hFile=0x304) returned 1 [0065.494] CloseHandle (hObject=0x304) returned 1 [0066.743] SetEvent (hEvent=0x2a4) returned 1 [0066.743] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0066.743] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=43131591) returned 1 [0066.743] CloseHandle (hObject=0x304) returned 1 [0066.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz")) returned 0x20 [0066.747] MoveFileW (lpExistingFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz"), lpNewFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended.mzz.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 1 [0066.748] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended.mzz.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0066.748] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f588 | out: lpNewFilePointer=0x0) returned 1 [0066.748] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f588 | out: lpNewFilePointer=0x0) returned 1 [0066.748] ReadFile (in: hFile=0x304, lpBuffer=0x2f23058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2b5f594, lpOverlapped=0x0 | out: lpBuffer=0x2f23058*, lpNumberOfBytesRead=0x2b5f594*=0x40000, lpOverlapped=0x0) returned 1 [0066.753] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0xdb60ed, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f588 | out: lpNewFilePointer=0x0) returned 1 [0066.753] ReadFile (in: hFile=0x304, lpBuffer=0x2f63058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2b5f594, lpOverlapped=0x0 | out: lpBuffer=0x2f63058*, lpNumberOfBytesRead=0x2b5f594*=0x40000, lpOverlapped=0x0) returned 1 [0066.756] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x28e22c7, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f588 | out: lpNewFilePointer=0x0) returned 1 [0066.756] ReadFile (in: hFile=0x304, lpBuffer=0x2fa3058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2b5f594, lpOverlapped=0x0 | out: lpBuffer=0x2fa3058*, lpNumberOfBytesRead=0x2b5f594*=0x40000, lpOverlapped=0x0) returned 1 [0066.771] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f6f8 | out: lpNewFilePointer=0x0) returned 1 [0066.771] WriteFile (in: hFile=0x304, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xc0112, lpNumberOfBytesWritten=0x2b5f6f0, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6f0*=0xc0112, lpOverlapped=0x0) returned 1 [0067.138] SetEndOfFile (hFile=0x304) returned 1 [0067.138] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x28e22c7, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f590 | out: lpNewFilePointer=0x0) returned 1 [0067.138] WriteFile (in: hFile=0x304, lpBuffer=0x2fe314a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2b5f59c, lpOverlapped=0x0 | out: lpBuffer=0x2fe314a*, lpNumberOfBytesWritten=0x2b5f59c*=0x40000, lpOverlapped=0x0) returned 1 [0067.140] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0xdb60ed, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f590 | out: lpNewFilePointer=0x0) returned 1 [0067.140] WriteFile (in: hFile=0x304, lpBuffer=0x2fe314a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2b5f59c, lpOverlapped=0x0 | out: lpBuffer=0x2fe314a*, lpNumberOfBytesWritten=0x2b5f59c*=0x40000, lpOverlapped=0x0) returned 1 [0067.140] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f590 | out: lpNewFilePointer=0x0) returned 1 [0067.140] WriteFile (in: hFile=0x304, lpBuffer=0x2fe314a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2b5f59c, lpOverlapped=0x0 | out: lpBuffer=0x2fe314a*, lpNumberOfBytesWritten=0x2b5f59c*=0x40000, lpOverlapped=0x0) returned 1 [0067.141] FlushFileBuffers (hFile=0x304) returned 1 [0067.391] CloseHandle (hObject=0x304) returned 1 [0068.172] SetEvent (hEvent=0x2a4) returned 1 [0068.172] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0068.173] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=272046) returned 1 [0068.173] CloseHandle (hObject=0x304) returned 1 [0068.173] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml")) returned 0x80 [0068.173] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml")) returned 0x80 [0068.173] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\ParameterInfo.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0068.173] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0068.173] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0068.173] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0068.174] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\ParameterInfo.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x324 [0068.174] ReadFile (in: hFile=0x304, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0x426ae, lpOverlapped=0x0) returned 1 [0068.179] WriteFile (in: hFile=0x324, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x426b0, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x426b0, lpOverlapped=0x0) returned 1 [0068.185] WriteFile (in: hFile=0x324, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x102, lpOverlapped=0x0) returned 1 [0068.185] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0068.185] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0068.185] WriteFile (in: hFile=0x304, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x426ae, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0x426ae, lpOverlapped=0x0) returned 1 [0068.186] FlushFileBuffers (hFile=0x304) returned 1 [0068.189] FlushFileBuffers (hFile=0x324) returned 1 [0068.194] CloseHandle (hObject=0x304) returned 1 [0068.199] CloseHandle (hObject=0x324) returned 1 [0068.204] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml")) returned 1 [0068.207] SetEvent (hEvent=0x2a4) returned 1 [0068.207] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324 [0068.207] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=184832) returned 1 [0068.207] CloseHandle (hObject=0x324) returned 1 [0068.207] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi")) returned 0x80 [0068.207] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi")) returned 0x80 [0068.207] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\RGB9RAST_x64.msi.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0068.207] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324 [0068.208] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0068.208] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0068.208] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\RGB9RAST_x64.msi.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x304 [0068.208] ReadFile (in: hFile=0x324, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0x2d200, lpOverlapped=0x0) returned 1 [0068.213] WriteFile (in: hFile=0x304, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x2d210, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x2d210, lpOverlapped=0x0) returned 1 [0068.217] WriteFile (in: hFile=0x304, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x102, lpOverlapped=0x0) returned 1 [0068.217] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0068.217] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0068.217] WriteFile (in: hFile=0x324, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x2d200, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0x2d200, lpOverlapped=0x0) returned 1 [0068.217] FlushFileBuffers (hFile=0x324) returned 1 [0068.331] FlushFileBuffers (hFile=0x304) returned 1 [0068.332] CloseHandle (hObject=0x324) returned 1 [0068.336] CloseHandle (hObject=0x304) returned 1 [0068.339] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi")) returned 1 [0068.341] SetEvent (hEvent=0x2a4) returned 1 [0068.341] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0068.341] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=78152) returned 1 [0068.341] CloseHandle (hObject=0x304) returned 1 [0068.341] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe")) returned 0x80 [0068.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe")) returned 0x80 [0068.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Setup.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\setup.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0068.343] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0068.343] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0068.343] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0068.343] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Setup.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\setup.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x324 [0068.344] ReadFile (in: hFile=0x304, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0x13148, lpOverlapped=0x0) returned 1 [0068.346] WriteFile (in: hFile=0x324, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x13150, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x13150, lpOverlapped=0x0) returned 1 [0068.348] WriteFile (in: hFile=0x324, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0xf2, lpOverlapped=0x0) returned 1 [0068.348] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0068.348] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0068.348] WriteFile (in: hFile=0x304, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x13148, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0x13148, lpOverlapped=0x0) returned 1 [0068.348] FlushFileBuffers (hFile=0x304) returned 1 [0068.496] FlushFileBuffers (hFile=0x324) returned 1 [0068.499] CloseHandle (hObject=0x304) returned 1 [0068.501] CloseHandle (hObject=0x324) returned 1 [0068.503] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe")) returned 1 [0068.504] SetEvent (hEvent=0x2a4) returned 1 [0068.505] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUi.dll" (normalized: "c:\\588bce7c90097ed212\\setupui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324 [0068.505] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=295248) returned 1 [0068.505] CloseHandle (hObject=0x324) returned 1 [0068.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUi.dll" (normalized: "c:\\588bce7c90097ed212\\setupui.dll")) returned 0x80 [0068.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUi.dll" (normalized: "c:\\588bce7c90097ed212\\setupui.dll")) returned 0x80 [0068.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUi.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\setupui.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0068.527] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUi.dll" (normalized: "c:\\588bce7c90097ed212\\setupui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324 [0068.527] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0068.528] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0068.528] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUi.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\setupui.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x304 [0068.528] ReadFile (in: hFile=0x324, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0x48150, lpOverlapped=0x0) returned 1 [0068.557] WriteFile (in: hFile=0x304, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x48160, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x48160, lpOverlapped=0x0) returned 1 [0068.562] WriteFile (in: hFile=0x304, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0xf2, lpOverlapped=0x0) returned 1 [0068.562] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0068.562] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0068.562] WriteFile (in: hFile=0x324, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x48150, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0x48150, lpOverlapped=0x0) returned 1 [0068.563] FlushFileBuffers (hFile=0x324) returned 1 [0068.690] FlushFileBuffers (hFile=0x304) returned 1 [0068.696] CloseHandle (hObject=0x324) returned 1 [0068.701] CloseHandle (hObject=0x304) returned 1 [0068.706] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUi.dll" (normalized: "c:\\588bce7c90097ed212\\setupui.dll")) returned 1 [0068.708] SetEvent (hEvent=0x2a4) returned 1 [0068.709] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0068.709] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=96088) returned 1 [0068.709] CloseHandle (hObject=0x304) returned 1 [0068.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe")) returned 0x80 [0068.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe")) returned 0x80 [0068.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUtility.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0068.709] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0068.709] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0068.709] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0068.709] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUtility.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x324 [0068.710] ReadFile (in: hFile=0x304, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0x17758, lpOverlapped=0x0) returned 1 [0068.716] WriteFile (in: hFile=0x324, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x17760, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x17760, lpOverlapped=0x0) returned 1 [0068.718] WriteFile (in: hFile=0x324, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x102, lpOverlapped=0x0) returned 1 [0068.719] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0068.719] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0068.719] WriteFile (in: hFile=0x304, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x17758, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0x17758, lpOverlapped=0x0) returned 1 [0068.719] FlushFileBuffers (hFile=0x304) returned 1 [0068.734] FlushFileBuffers (hFile=0x324) returned 1 [0068.741] CloseHandle (hObject=0x304) returned 1 [0068.743] CloseHandle (hObject=0x324) returned 1 [0068.745] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe")) returned 1 [0068.747] SetEvent (hEvent=0x2a4) returned 1 [0068.747] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324 [0068.747] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=41080) returned 1 [0068.747] CloseHandle (hObject=0x324) returned 1 [0068.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp")) returned 0x80 [0068.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp")) returned 0x80 [0068.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SplashScreen.bmp.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0068.747] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324 [0068.747] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0068.747] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0068.747] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SplashScreen.bmp.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x304 [0068.747] ReadFile (in: hFile=0x324, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0xa078, lpOverlapped=0x0) returned 1 [0068.751] WriteFile (in: hFile=0x304, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xa080, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0xa080, lpOverlapped=0x0) returned 1 [0068.752] WriteFile (in: hFile=0x304, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x102, lpOverlapped=0x0) returned 1 [0068.753] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0068.753] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0068.753] WriteFile (in: hFile=0x324, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xa078, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0xa078, lpOverlapped=0x0) returned 1 [0068.753] FlushFileBuffers (hFile=0x324) returned 1 [0069.162] FlushFileBuffers (hFile=0x304) returned 1 [0069.167] CloseHandle (hObject=0x324) returned 1 [0069.169] CloseHandle (hObject=0x304) returned 1 [0069.170] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp")) returned 1 [0069.172] SetEvent (hEvent=0x2a4) returned 1 [0069.172] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\sqmapi.dll" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0069.172] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=144416) returned 1 [0069.172] CloseHandle (hObject=0x304) returned 1 [0069.172] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\sqmapi.dll" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll")) returned 0x80 [0069.172] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\sqmapi.dll" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll")) returned 0x80 [0069.172] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\sqmapi.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0069.172] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\sqmapi.dll" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0069.172] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0069.172] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0069.172] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\sqmapi.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x324 [0069.173] ReadFile (in: hFile=0x304, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0x23420, lpOverlapped=0x0) returned 1 [0069.181] WriteFile (in: hFile=0x324, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x23430, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x23430, lpOverlapped=0x0) returned 1 [0069.184] WriteFile (in: hFile=0x324, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0xf2, lpOverlapped=0x0) returned 1 [0069.184] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0069.184] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0069.184] WriteFile (in: hFile=0x304, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x23420, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0x23420, lpOverlapped=0x0) returned 1 [0069.184] FlushFileBuffers (hFile=0x304) returned 1 [0069.316] FlushFileBuffers (hFile=0x324) returned 1 [0069.318] CloseHandle (hObject=0x304) returned 1 [0069.321] CloseHandle (hObject=0x324) returned 1 [0069.324] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\sqmapi.dll" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll")) returned 1 [0069.325] SetEvent (hEvent=0x2a4) returned 1 [0069.325] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324 [0069.326] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=38898) returned 1 [0069.326] CloseHandle (hObject=0x324) returned 1 [0069.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml")) returned 0x80 [0069.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml")) returned 0x80 [0069.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\UiInfo.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0069.326] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324 [0069.326] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0069.326] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f700 | out: lpNewFilePointer=0x0) returned 1 [0069.326] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\UiInfo.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x304 [0069.326] ReadFile (in: hFile=0x324, lpBuffer=0x2f23020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2b5f714, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesRead=0x2b5f714*=0x97f2, lpOverlapped=0x0) returned 1 [0069.328] WriteFile (in: hFile=0x304, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x9800, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0x9800, lpOverlapped=0x0) returned 1 [0069.330] WriteFile (in: hFile=0x304, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2b5f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6ec*=0xf2, lpOverlapped=0x0) returned 1 [0069.330] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0069.330] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f460 | out: lpNewFilePointer=0x0) returned 1 [0069.330] WriteFile (in: hFile=0x324, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0x97f2, lpNumberOfBytesWritten=0x2b5f46c, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f46c*=0x97f2, lpOverlapped=0x0) returned 1 [0069.331] FlushFileBuffers (hFile=0x324) returned 1 [0069.438] FlushFileBuffers (hFile=0x304) returned 1 [0069.439] CloseHandle (hObject=0x324) returned 1 [0069.441] CloseHandle (hObject=0x304) returned 1 [0069.442] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml")) returned 1 [0069.443] SetEvent (hEvent=0x2a4) returned 1 [0069.443] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0069.444] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x2b5f738 | out: lpFileSize=0x2b5f738*=5198099) returned 1 [0069.444] CloseHandle (hObject=0x304) returned 1 [0069.444] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu")) returned 0x80 [0069.444] MoveFileW (lpExistingFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu"), lpNewFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 1 [0069.445] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0069.445] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f588 | out: lpNewFilePointer=0x0) returned 1 [0069.445] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f588 | out: lpNewFilePointer=0x0) returned 1 [0069.445] ReadFile (in: hFile=0x304, lpBuffer=0x2f23058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2b5f594, lpOverlapped=0x0 | out: lpBuffer=0x2f23058*, lpNumberOfBytesRead=0x2b5f594*=0x40000, lpOverlapped=0x0) returned 1 [0069.449] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x1a705b, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f588 | out: lpNewFilePointer=0x0) returned 1 [0069.449] ReadFile (in: hFile=0x304, lpBuffer=0x2f63058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2b5f594, lpOverlapped=0x0 | out: lpBuffer=0x2f63058*, lpNumberOfBytesRead=0x2b5f594*=0x40000, lpOverlapped=0x0) returned 1 [0069.452] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x4b5113, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f588 | out: lpNewFilePointer=0x0) returned 1 [0069.452] ReadFile (in: hFile=0x304, lpBuffer=0x2fa3058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2b5f594, lpOverlapped=0x0 | out: lpBuffer=0x2fa3058*, lpNumberOfBytesRead=0x2b5f594*=0x40000, lpOverlapped=0x0) returned 1 [0069.464] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f6f8 | out: lpNewFilePointer=0x0) returned 1 [0069.464] WriteFile (in: hFile=0x304, lpBuffer=0x2f23020*, nNumberOfBytesToWrite=0xc0132, lpNumberOfBytesWritten=0x2b5f6f0, lpOverlapped=0x0 | out: lpBuffer=0x2f23020*, lpNumberOfBytesWritten=0x2b5f6f0*=0xc0132, lpOverlapped=0x0) returned 1 [0069.667] SetEndOfFile (hFile=0x304) returned 1 [0069.667] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x4b5113, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f590 | out: lpNewFilePointer=0x0) returned 1 [0069.667] WriteFile (in: hFile=0x304, lpBuffer=0x2fe316a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2b5f59c, lpOverlapped=0x0 | out: lpBuffer=0x2fe316a*, lpNumberOfBytesWritten=0x2b5f59c*=0x40000, lpOverlapped=0x0) returned 1 [0069.669] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x1a705b, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f590 | out: lpNewFilePointer=0x0) returned 1 [0069.669] WriteFile (in: hFile=0x304, lpBuffer=0x2fe316a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2b5f59c, lpOverlapped=0x0 | out: lpBuffer=0x2fe316a*, lpNumberOfBytesWritten=0x2b5f59c*=0x40000, lpOverlapped=0x0) returned 1 [0069.671] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2b5f590 | out: lpNewFilePointer=0x0) returned 1 [0069.671] WriteFile (in: hFile=0x304, lpBuffer=0x2fe316a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2b5f59c, lpOverlapped=0x0 | out: lpBuffer=0x2fe316a*, lpNumberOfBytesWritten=0x2b5f59c*=0x40000, lpOverlapped=0x0) returned 1 [0069.673] FlushFileBuffers (hFile=0x304) returned 1 [0070.002] CloseHandle (hObject=0x304) Thread: id = 26 os_tid = 0x6e4 [0045.479] GetProcessHeap () returned 0x120000 [0045.479] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x1f50f0 [0045.480] GetProcessHeap () returned 0x120000 [0045.480] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x2050f8 [0045.480] GetProcessHeap () returned 0x120000 [0045.480] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x28) returned 0x191378 [0045.480] GetProcessHeap () returned 0x120000 [0045.480] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x110102) returned 0x304d020 [0045.483] GetProcessHeap () returned 0x120000 [0045.483] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x50) returned 0x149830 [0045.483] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75e90000 [0045.483] GetProcAddress (hModule=0x75e90000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x75ea6b30 [0045.483] Wow64DisableWow64FsRedirection (in: OldValue=0x2c9f8d0 | out: OldValue=0x2c9f8d0*=0x0) returned 1 [0045.483] GetProcessHeap () returned 0x120000 [0045.483] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x149830 | out: hHeap=0x120000) returned 1 [0045.483] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0045.484] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=6004) returned 1 [0045.484] CloseHandle (hObject=0x2f0) returned 1 [0045.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log")) returned 0x20 [0045.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log")) returned 0x20 [0045.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0045.484] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0045.485] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0045.485] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0045.485] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2f4 [0045.485] ReadFile (in: hFile=0x2f0, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0x1774, lpOverlapped=0x0) returned 1 [0045.499] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x1780, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x1780, lpOverlapped=0x0) returned 1 [0045.500] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x122, lpOverlapped=0x0) returned 1 [0045.500] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0045.500] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0045.501] WriteFile (in: hFile=0x2f0, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x1774, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0x1774, lpOverlapped=0x0) returned 1 [0045.501] FlushFileBuffers (hFile=0x2f0) returned 1 [0046.008] FlushFileBuffers (hFile=0x2f4) returned 1 [0046.009] CloseHandle (hObject=0x2f0) returned 1 [0046.010] CloseHandle (hObject=0x2f4) returned 1 [0046.011] DeleteFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log")) returned 1 [0046.012] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0046.013] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=156) returned 1 [0046.013] CloseHandle (hObject=0x2f4) returned 1 [0046.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini")) returned 0x20 [0046.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini")) returned 0x20 [0046.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0046.013] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0046.013] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0046.013] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0046.014] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2f0 [0046.014] ReadFile (in: hFile=0x2f4, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0x9c, lpOverlapped=0x0) returned 1 [0046.015] WriteFile (in: hFile=0x2f0, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0xa0, lpOverlapped=0x0) returned 1 [0046.015] WriteFile (in: hFile=0x2f0, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x102, lpOverlapped=0x0) returned 1 [0046.016] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0046.016] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0046.016] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x9c, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0x9c, lpOverlapped=0x0) returned 1 [0046.016] FlushFileBuffers (hFile=0x2f4) returned 1 [0046.020] FlushFileBuffers (hFile=0x2f0) returned 1 [0046.022] CloseHandle (hObject=0x2f4) returned 1 [0046.023] CloseHandle (hObject=0x2f0) returned 1 [0046.023] DeleteFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini")) returned 1 [0046.024] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0046.024] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=577) returned 1 [0046.024] CloseHandle (hObject=0x2f0) returned 1 [0046.024] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd")) returned 0x20 [0046.024] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd")) returned 0x20 [0046.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0046.025] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0046.025] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0046.025] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0046.025] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2f4 [0046.025] ReadFile (in: hFile=0x2f0, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0x241, lpOverlapped=0x0) returned 1 [0046.027] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x250, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x250, lpOverlapped=0x0) returned 1 [0046.028] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x112, lpOverlapped=0x0) returned 1 [0046.028] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0046.028] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0046.028] WriteFile (in: hFile=0x2f0, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x241, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0x241, lpOverlapped=0x0) returned 1 [0046.028] FlushFileBuffers (hFile=0x2f0) returned 1 [0046.030] FlushFileBuffers (hFile=0x2f4) returned 1 [0046.043] CloseHandle (hObject=0x2f0) returned 1 [0046.044] CloseHandle (hObject=0x2f4) returned 1 [0046.044] DeleteFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd")) returned 1 [0046.045] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0046.047] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=74) returned 1 [0046.047] CloseHandle (hObject=0x2f4) returned 1 [0046.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd")) returned 0x20 [0046.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd")) returned 0x20 [0046.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\preoobe.cmd.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0046.049] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0046.049] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0046.050] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0046.050] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\preoobe.cmd.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x300 [0046.052] ReadFile (in: hFile=0x2f4, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0x4a, lpOverlapped=0x0) returned 1 [0046.053] WriteFile (in: hFile=0x300, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x50, lpOverlapped=0x0) returned 1 [0046.053] WriteFile (in: hFile=0x300, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0xf2, lpOverlapped=0x0) returned 1 [0046.054] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0046.054] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0046.054] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x4a, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0x4a, lpOverlapped=0x0) returned 1 [0046.054] FlushFileBuffers (hFile=0x2f4) returned 1 [0046.064] FlushFileBuffers (hFile=0x300) returned 1 [0046.068] CloseHandle (hObject=0x2f4) returned 1 [0046.069] CloseHandle (hObject=0x300) returned 1 [0046.069] DeleteFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd")) returned 1 [0046.070] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0046.073] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=307) returned 1 [0046.073] CloseHandle (hObject=0x2f4) returned 1 [0046.073] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd")) returned 0x20 [0046.073] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd")) returned 0x20 [0046.073] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0046.073] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0046.073] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0046.073] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0046.073] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x300 [0046.075] ReadFile (in: hFile=0x2f4, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0x133, lpOverlapped=0x0) returned 1 [0046.076] WriteFile (in: hFile=0x300, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x140, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x140, lpOverlapped=0x0) returned 1 [0046.077] WriteFile (in: hFile=0x300, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x102, lpOverlapped=0x0) returned 1 [0046.079] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0046.079] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0046.079] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x133, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0x133, lpOverlapped=0x0) returned 1 [0046.079] FlushFileBuffers (hFile=0x2f4) returned 1 [0046.400] FlushFileBuffers (hFile=0x300) returned 1 [0046.402] CloseHandle (hObject=0x2f4) returned 1 [0046.402] CloseHandle (hObject=0x300) returned 1 [0046.403] DeleteFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd")) returned 1 [0046.404] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0046.404] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=17240) returned 1 [0046.405] CloseHandle (hObject=0x300) returned 1 [0046.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll")) returned 0x80 [0046.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll")) returned 0x80 [0046.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0046.405] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0046.405] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0046.405] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0046.405] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f4 [0046.405] ReadFile (in: hFile=0x300, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0x4358, lpOverlapped=0x0) returned 1 [0046.407] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x4360, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x4360, lpOverlapped=0x0) returned 1 [0046.408] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x102, lpOverlapped=0x0) returned 1 [0046.409] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0046.409] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0046.409] WriteFile (in: hFile=0x300, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x4358, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0x4358, lpOverlapped=0x0) returned 1 [0046.409] FlushFileBuffers (hFile=0x300) returned 1 [0046.411] FlushFileBuffers (hFile=0x2f4) returned 1 [0046.412] CloseHandle (hObject=0x300) returned 1 [0046.413] CloseHandle (hObject=0x2f4) returned 1 [0046.414] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll")) returned 1 [0046.415] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0046.415] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=6309) returned 1 [0046.415] CloseHandle (hObject=0x2f4) returned 1 [0046.415] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf")) returned 0x80 [0046.415] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf")) returned 0x80 [0046.415] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0046.416] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0046.416] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0046.416] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0046.416] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x300 [0046.417] ReadFile (in: hFile=0x2f4, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0x18a5, lpOverlapped=0x0) returned 1 [0046.420] WriteFile (in: hFile=0x300, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x18b0, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x18b0, lpOverlapped=0x0) returned 1 [0046.420] WriteFile (in: hFile=0x300, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0xf2, lpOverlapped=0x0) returned 1 [0046.421] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0046.421] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0046.421] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x18a5, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0x18a5, lpOverlapped=0x0) returned 1 [0046.421] FlushFileBuffers (hFile=0x2f4) returned 1 [0046.423] FlushFileBuffers (hFile=0x300) returned 1 [0046.424] CloseHandle (hObject=0x2f4) returned 1 [0046.425] CloseHandle (hObject=0x300) returned 1 [0046.425] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf")) returned 1 [0046.426] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0046.426] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=60816) returned 1 [0046.426] CloseHandle (hObject=0x300) returned 1 [0046.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml")) returned 0x80 [0046.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml")) returned 0x80 [0046.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0046.427] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0046.427] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0046.427] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0046.427] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f4 [0046.427] ReadFile (in: hFile=0x300, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0xed90, lpOverlapped=0x0) returned 1 [0046.429] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0xeda0, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0xeda0, lpOverlapped=0x0) returned 1 [0046.431] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x102, lpOverlapped=0x0) returned 1 [0046.431] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0046.431] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0046.431] WriteFile (in: hFile=0x300, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0xed90, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0xed90, lpOverlapped=0x0) returned 1 [0046.431] FlushFileBuffers (hFile=0x300) returned 1 [0046.731] FlushFileBuffers (hFile=0x2f4) returned 1 [0046.732] CloseHandle (hObject=0x300) returned 1 [0046.734] CloseHandle (hObject=0x2f4) returned 1 [0046.736] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml")) returned 1 [0046.738] SetEvent (hEvent=0x2a4) returned 1 [0046.738] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0046.738] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=3726) returned 1 [0046.738] CloseHandle (hObject=0x2f4) returned 1 [0046.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf")) returned 0x80 [0046.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf")) returned 0x80 [0046.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0046.739] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0046.739] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0046.739] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0046.739] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x300 [0046.740] ReadFile (in: hFile=0x2f4, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0xe8e, lpOverlapped=0x0) returned 1 [0046.742] WriteFile (in: hFile=0x300, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0xe90, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0xe90, lpOverlapped=0x0) returned 1 [0046.742] WriteFile (in: hFile=0x300, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0xf2, lpOverlapped=0x0) returned 1 [0046.743] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0046.743] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0046.743] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0xe8e, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0xe8e, lpOverlapped=0x0) returned 1 [0046.743] FlushFileBuffers (hFile=0x2f4) returned 1 [0047.382] FlushFileBuffers (hFile=0x300) returned 1 [0047.383] CloseHandle (hObject=0x2f4) returned 1 [0047.384] CloseHandle (hObject=0x300) returned 1 [0047.385] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf")) returned 1 [0047.386] SetEvent (hEvent=0x2a4) returned 1 [0047.386] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0047.386] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=18264) returned 1 [0047.386] CloseHandle (hObject=0x300) returned 1 [0047.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll")) returned 0x80 [0047.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll")) returned 0x80 [0047.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0047.386] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0047.386] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0047.386] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0047.386] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f4 [0047.387] ReadFile (in: hFile=0x300, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0x4758, lpOverlapped=0x0) returned 1 [0047.388] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x4760, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x4760, lpOverlapped=0x0) returned 1 [0047.390] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x102, lpOverlapped=0x0) returned 1 [0047.391] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0047.391] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0047.391] WriteFile (in: hFile=0x300, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x4758, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0x4758, lpOverlapped=0x0) returned 1 [0047.391] FlushFileBuffers (hFile=0x300) returned 1 [0048.037] FlushFileBuffers (hFile=0x2f4) returned 1 [0048.039] CloseHandle (hObject=0x300) returned 1 [0048.040] CloseHandle (hObject=0x2f4) returned 1 [0048.041] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll")) returned 1 [0048.042] SetEvent (hEvent=0x2a4) returned 1 [0048.042] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0048.044] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=18264) returned 1 [0048.044] CloseHandle (hObject=0x2f4) returned 1 [0048.044] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll")) returned 0x80 [0048.044] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll")) returned 0x80 [0048.044] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0048.044] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0048.044] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0048.044] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0048.044] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x300 [0048.044] ReadFile (in: hFile=0x2f4, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0x4758, lpOverlapped=0x0) returned 1 [0048.047] WriteFile (in: hFile=0x300, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x4760, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x4760, lpOverlapped=0x0) returned 1 [0048.048] WriteFile (in: hFile=0x300, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x102, lpOverlapped=0x0) returned 1 [0048.048] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0048.048] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0048.048] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x4758, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0x4758, lpOverlapped=0x0) returned 1 [0048.048] FlushFileBuffers (hFile=0x2f4) returned 1 [0049.202] FlushFileBuffers (hFile=0x300) returned 1 [0049.204] CloseHandle (hObject=0x2f4) returned 1 [0049.204] CloseHandle (hObject=0x300) returned 1 [0049.206] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll")) returned 1 [0049.207] SetEvent (hEvent=0x2a4) returned 1 [0049.207] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0049.208] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=8876) returned 1 [0049.208] CloseHandle (hObject=0x300) returned 1 [0049.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf")) returned 0x80 [0049.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf")) returned 0x80 [0049.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0049.208] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0049.208] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0049.208] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0049.208] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f4 [0049.210] ReadFile (in: hFile=0x300, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0x22ac, lpOverlapped=0x0) returned 1 [0049.211] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x22b0, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x22b0, lpOverlapped=0x0) returned 1 [0049.212] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0xf2, lpOverlapped=0x0) returned 1 [0049.213] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0049.213] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0049.213] WriteFile (in: hFile=0x300, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x22ac, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0x22ac, lpOverlapped=0x0) returned 1 [0049.213] FlushFileBuffers (hFile=0x300) returned 1 [0049.216] FlushFileBuffers (hFile=0x2f4) returned 1 [0049.217] CloseHandle (hObject=0x300) returned 1 [0049.218] CloseHandle (hObject=0x2f4) returned 1 [0049.219] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf")) returned 1 [0049.220] SetEvent (hEvent=0x2a4) returned 1 [0049.220] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0049.220] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=86284) returned 1 [0049.220] CloseHandle (hObject=0x2f4) returned 1 [0049.220] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml")) returned 0x80 [0049.220] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml")) returned 0x80 [0049.220] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0049.220] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0049.220] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0049.220] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0049.220] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x300 [0049.221] ReadFile (in: hFile=0x2f4, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0x1510c, lpOverlapped=0x0) returned 1 [0049.223] WriteFile (in: hFile=0x300, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x15110, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x15110, lpOverlapped=0x0) returned 1 [0049.225] WriteFile (in: hFile=0x300, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x102, lpOverlapped=0x0) returned 1 [0049.225] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0049.225] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0049.226] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x1510c, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0x1510c, lpOverlapped=0x0) returned 1 [0049.226] FlushFileBuffers (hFile=0x2f4) returned 1 [0050.065] FlushFileBuffers (hFile=0x300) returned 1 [0050.068] CloseHandle (hObject=0x2f4) returned 1 [0050.070] CloseHandle (hObject=0x300) returned 1 [0050.072] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml")) returned 1 [0050.073] SetEvent (hEvent=0x2a4) returned 1 [0050.073] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0050.074] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=3188) returned 1 [0050.074] CloseHandle (hObject=0x300) returned 1 [0050.074] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf")) returned 0x80 [0050.074] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf")) returned 0x80 [0050.074] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0050.074] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0050.074] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0050.074] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0050.074] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f4 [0050.076] ReadFile (in: hFile=0x300, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0xc74, lpOverlapped=0x0) returned 1 [0050.109] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0xc80, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0xc80, lpOverlapped=0x0) returned 1 [0050.110] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0xf2, lpOverlapped=0x0) returned 1 [0050.110] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0050.110] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0050.111] WriteFile (in: hFile=0x300, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0xc74, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0xc74, lpOverlapped=0x0) returned 1 [0050.111] FlushFileBuffers (hFile=0x300) returned 1 [0050.113] FlushFileBuffers (hFile=0x2f4) returned 1 [0050.114] CloseHandle (hObject=0x300) returned 1 [0050.115] CloseHandle (hObject=0x2f4) returned 1 [0050.115] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf")) returned 1 [0050.117] SetEvent (hEvent=0x2a4) returned 1 [0050.117] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0050.117] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=77232) returned 1 [0050.117] CloseHandle (hObject=0x2f4) returned 1 [0050.117] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml")) returned 0x80 [0050.117] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml")) returned 0x80 [0050.117] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0050.117] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0050.117] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0050.117] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0050.117] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x300 [0050.118] ReadFile (in: hFile=0x2f4, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0x12db0, lpOverlapped=0x0) returned 1 [0050.120] WriteFile (in: hFile=0x300, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x12dc0, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x12dc0, lpOverlapped=0x0) returned 1 [0050.122] WriteFile (in: hFile=0x300, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x102, lpOverlapped=0x0) returned 1 [0050.122] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0050.122] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0050.122] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x12db0, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0x12db0, lpOverlapped=0x0) returned 1 [0050.123] FlushFileBuffers (hFile=0x2f4) returned 1 [0051.805] FlushFileBuffers (hFile=0x300) returned 1 [0051.820] CloseHandle (hObject=0x2f4) returned 1 [0051.822] CloseHandle (hObject=0x300) returned 1 [0051.824] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml")) returned 1 [0051.826] SetEvent (hEvent=0x2a4) returned 1 [0051.826] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0051.826] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=3702) returned 1 [0051.826] CloseHandle (hObject=0x300) returned 1 [0051.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf")) returned 0x80 [0051.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf")) returned 0x80 [0051.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0051.828] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0051.828] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0051.829] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0051.829] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f4 [0051.832] ReadFile (in: hFile=0x300, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0xe76, lpOverlapped=0x0) returned 1 [0051.834] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0xe80, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0xe80, lpOverlapped=0x0) returned 1 [0051.834] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0xf2, lpOverlapped=0x0) returned 1 [0051.835] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0051.835] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0051.835] WriteFile (in: hFile=0x300, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0xe76, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0xe76, lpOverlapped=0x0) returned 1 [0051.835] FlushFileBuffers (hFile=0x300) returned 1 [0051.839] FlushFileBuffers (hFile=0x2f4) returned 1 [0051.840] CloseHandle (hObject=0x300) returned 1 [0051.841] CloseHandle (hObject=0x2f4) returned 1 [0051.841] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf")) returned 1 [0051.842] SetEvent (hEvent=0x2a4) returned 1 [0051.842] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0051.842] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=77022) returned 1 [0051.842] CloseHandle (hObject=0x2f4) returned 1 [0051.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml")) returned 0x80 [0051.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml")) returned 0x80 [0051.843] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0051.843] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0051.844] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0051.844] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0051.844] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x300 [0051.845] ReadFile (in: hFile=0x2f4, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0x12cde, lpOverlapped=0x0) returned 1 [0051.849] WriteFile (in: hFile=0x300, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x12ce0, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x12ce0, lpOverlapped=0x0) returned 1 [0051.851] WriteFile (in: hFile=0x300, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x102, lpOverlapped=0x0) returned 1 [0051.851] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0051.851] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0051.851] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x12cde, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0x12cde, lpOverlapped=0x0) returned 1 [0051.851] FlushFileBuffers (hFile=0x2f4) returned 1 [0052.437] FlushFileBuffers (hFile=0x300) returned 1 [0052.467] CloseHandle (hObject=0x2f4) returned 1 [0052.469] CloseHandle (hObject=0x300) returned 1 [0052.471] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml")) returned 1 [0052.473] SetEvent (hEvent=0x2a4) returned 1 [0052.473] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0052.473] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=3526) returned 1 [0052.473] CloseHandle (hObject=0x300) returned 1 [0052.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf")) returned 0x80 [0052.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf")) returned 0x80 [0052.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0052.473] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0052.473] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0052.473] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0052.473] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f4 [0052.475] ReadFile (in: hFile=0x300, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0xdc6, lpOverlapped=0x0) returned 1 [0052.477] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0xdd0, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0xdd0, lpOverlapped=0x0) returned 1 [0052.478] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0xf2, lpOverlapped=0x0) returned 1 [0052.478] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0052.478] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0052.478] WriteFile (in: hFile=0x300, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0xdc6, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0xdc6, lpOverlapped=0x0) returned 1 [0052.478] FlushFileBuffers (hFile=0x300) returned 1 [0052.481] FlushFileBuffers (hFile=0x2f4) returned 1 [0052.497] CloseHandle (hObject=0x300) returned 1 [0052.498] CloseHandle (hObject=0x2f4) returned 1 [0052.498] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf")) returned 1 [0052.499] SetEvent (hEvent=0x2a4) returned 1 [0052.499] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0052.499] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=18776) returned 1 [0052.499] CloseHandle (hObject=0x2f4) returned 1 [0052.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll")) returned 0x80 [0052.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll")) returned 0x80 [0052.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0052.500] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0052.500] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0052.500] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0052.500] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x300 [0052.500] ReadFile (in: hFile=0x2f4, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0x4958, lpOverlapped=0x0) returned 1 [0052.502] WriteFile (in: hFile=0x300, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x4960, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x4960, lpOverlapped=0x0) returned 1 [0052.503] WriteFile (in: hFile=0x300, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x102, lpOverlapped=0x0) returned 1 [0052.503] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0052.503] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0052.503] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x4958, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0x4958, lpOverlapped=0x0) returned 1 [0052.503] FlushFileBuffers (hFile=0x2f4) returned 1 [0053.339] FlushFileBuffers (hFile=0x300) returned 1 [0053.348] CloseHandle (hObject=0x2f4) returned 1 [0053.349] CloseHandle (hObject=0x300) returned 1 [0053.350] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll")) returned 1 [0053.351] SetEvent (hEvent=0x2a4) returned 1 [0053.351] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0053.354] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=16728) returned 1 [0053.354] CloseHandle (hObject=0x300) returned 1 [0053.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll")) returned 0x80 [0053.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll")) returned 0x80 [0053.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0053.355] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0053.355] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0053.355] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0053.355] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f4 [0053.355] ReadFile (in: hFile=0x300, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0x4158, lpOverlapped=0x0) returned 1 [0053.357] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x4160, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x4160, lpOverlapped=0x0) returned 1 [0053.358] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x102, lpOverlapped=0x0) returned 1 [0053.358] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0053.358] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0053.358] WriteFile (in: hFile=0x300, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x4158, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0x4158, lpOverlapped=0x0) returned 1 [0053.359] FlushFileBuffers (hFile=0x300) returned 1 [0054.151] FlushFileBuffers (hFile=0x2f4) returned 1 [0054.153] CloseHandle (hObject=0x300) returned 1 [0054.154] CloseHandle (hObject=0x2f4) returned 1 [0054.155] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll")) returned 1 [0054.157] SetEvent (hEvent=0x2a4) returned 1 [0054.157] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0054.158] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=18776) returned 1 [0054.158] CloseHandle (hObject=0x2f4) returned 1 [0054.158] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll")) returned 0x80 [0054.158] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll")) returned 0x80 [0054.158] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0054.158] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0054.158] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0054.158] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0054.159] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x300 [0054.159] ReadFile (in: hFile=0x2f4, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0x4958, lpOverlapped=0x0) returned 1 [0054.160] WriteFile (in: hFile=0x300, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x4960, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x4960, lpOverlapped=0x0) returned 1 [0054.161] WriteFile (in: hFile=0x300, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x102, lpOverlapped=0x0) returned 1 [0054.161] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0054.161] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0054.162] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x4958, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0x4958, lpOverlapped=0x0) returned 1 [0054.162] FlushFileBuffers (hFile=0x2f4) returned 1 [0054.615] FlushFileBuffers (hFile=0x300) returned 1 [0054.616] CloseHandle (hObject=0x2f4) returned 1 [0054.617] CloseHandle (hObject=0x300) returned 1 [0054.618] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll")) returned 1 [0054.619] SetEvent (hEvent=0x2a4) returned 1 [0054.619] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0054.620] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=18264) returned 1 [0054.620] CloseHandle (hObject=0x300) returned 1 [0054.620] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll")) returned 0x80 [0054.620] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll")) returned 0x80 [0054.620] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0054.620] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0054.620] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0054.620] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0054.620] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f4 [0054.620] ReadFile (in: hFile=0x300, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0x4758, lpOverlapped=0x0) returned 1 [0054.622] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x4760, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x4760, lpOverlapped=0x0) returned 1 [0054.623] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x102, lpOverlapped=0x0) returned 1 [0054.623] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0054.623] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0054.623] WriteFile (in: hFile=0x300, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x4758, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0x4758, lpOverlapped=0x0) returned 1 [0054.623] FlushFileBuffers (hFile=0x300) returned 1 [0055.142] FlushFileBuffers (hFile=0x2f4) returned 1 [0055.146] CloseHandle (hObject=0x300) returned 1 [0055.147] CloseHandle (hObject=0x2f4) returned 1 [0055.148] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll")) returned 1 [0055.149] SetEvent (hEvent=0x2a4) returned 1 [0055.149] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0055.149] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=68226) returned 1 [0055.149] CloseHandle (hObject=0x2f4) returned 1 [0055.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml")) returned 0x80 [0055.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml")) returned 0x80 [0055.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0055.149] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0055.149] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0055.149] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0055.149] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x300 [0055.150] ReadFile (in: hFile=0x2f4, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0x10a82, lpOverlapped=0x0) returned 1 [0055.152] WriteFile (in: hFile=0x300, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x10a90, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x10a90, lpOverlapped=0x0) returned 1 [0055.154] WriteFile (in: hFile=0x300, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x102, lpOverlapped=0x0) returned 1 [0055.154] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0055.154] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0055.154] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x10a82, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0x10a82, lpOverlapped=0x0) returned 1 [0055.155] FlushFileBuffers (hFile=0x2f4) returned 1 [0055.183] FlushFileBuffers (hFile=0x300) returned 1 [0055.185] CloseHandle (hObject=0x2f4) returned 1 [0055.186] CloseHandle (hObject=0x300) returned 1 [0055.188] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml")) returned 1 [0055.189] SetEvent (hEvent=0x2a4) returned 1 [0055.190] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0055.190] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=15704) returned 1 [0055.190] CloseHandle (hObject=0x300) returned 1 [0055.190] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll")) returned 0x80 [0055.190] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll")) returned 0x80 [0055.190] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0055.190] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0055.190] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0055.190] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0055.190] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f4 [0055.190] ReadFile (in: hFile=0x300, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0x3d58, lpOverlapped=0x0) returned 1 [0055.192] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x3d60, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x3d60, lpOverlapped=0x0) returned 1 [0055.193] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x102, lpOverlapped=0x0) returned 1 [0055.193] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0055.193] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0055.193] WriteFile (in: hFile=0x300, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x3d58, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0x3d58, lpOverlapped=0x0) returned 1 [0055.194] FlushFileBuffers (hFile=0x300) returned 1 [0055.251] FlushFileBuffers (hFile=0x2f4) returned 1 [0055.253] CloseHandle (hObject=0x300) returned 1 [0055.253] CloseHandle (hObject=0x2f4) returned 1 [0055.254] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll")) returned 1 [0055.255] SetEvent (hEvent=0x2a4) returned 1 [0055.255] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0055.255] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=15192) returned 1 [0055.255] CloseHandle (hObject=0x2f4) returned 1 [0055.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll")) returned 0x80 [0055.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll")) returned 0x80 [0055.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0055.256] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0055.256] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0055.256] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0055.256] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x300 [0055.256] ReadFile (in: hFile=0x2f4, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0x3b58, lpOverlapped=0x0) returned 1 [0055.257] WriteFile (in: hFile=0x300, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x3b60, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x3b60, lpOverlapped=0x0) returned 1 [0055.259] WriteFile (in: hFile=0x300, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x102, lpOverlapped=0x0) returned 1 [0055.259] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0055.259] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0055.259] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x3b58, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0x3b58, lpOverlapped=0x0) returned 1 [0055.259] FlushFileBuffers (hFile=0x2f4) returned 1 [0055.290] FlushFileBuffers (hFile=0x300) returned 1 [0055.297] CloseHandle (hObject=0x2f4) returned 1 [0055.298] CloseHandle (hObject=0x300) returned 1 [0055.299] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll")) returned 1 [0055.300] SetEvent (hEvent=0x2a4) returned 1 [0055.300] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0055.302] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=79634) returned 1 [0055.302] CloseHandle (hObject=0x2f4) returned 1 [0055.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml")) returned 0x80 [0055.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml")) returned 0x80 [0055.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0055.302] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0055.303] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0055.303] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0055.303] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x31c [0055.303] ReadFile (in: hFile=0x2f4, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0x13712, lpOverlapped=0x0) returned 1 [0055.307] WriteFile (in: hFile=0x31c, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x13720, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x13720, lpOverlapped=0x0) returned 1 [0055.309] WriteFile (in: hFile=0x31c, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x102, lpOverlapped=0x0) returned 1 [0055.310] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0055.310] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0055.310] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x13712, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0x13712, lpOverlapped=0x0) returned 1 [0055.310] FlushFileBuffers (hFile=0x2f4) returned 1 [0055.991] FlushFileBuffers (hFile=0x31c) returned 1 [0055.994] CloseHandle (hObject=0x2f4) returned 1 [0055.996] CloseHandle (hObject=0x31c) returned 1 [0055.998] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml")) returned 1 [0055.999] SetEvent (hEvent=0x2a4) returned 1 [0055.999] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0055.999] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=3046) returned 1 [0055.999] CloseHandle (hObject=0x31c) returned 1 [0055.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf")) returned 0x80 [0056.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf")) returned 0x80 [0056.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0056.000] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0056.000] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0056.000] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0056.000] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f4 [0056.007] ReadFile (in: hFile=0x31c, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0xbe6, lpOverlapped=0x0) returned 1 [0056.009] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0xbf0, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0xbf0, lpOverlapped=0x0) returned 1 [0056.009] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0xf2, lpOverlapped=0x0) returned 1 [0056.010] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0056.010] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0056.010] WriteFile (in: hFile=0x31c, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0xbe6, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0xbe6, lpOverlapped=0x0) returned 1 [0056.010] FlushFileBuffers (hFile=0x31c) returned 1 [0056.012] FlushFileBuffers (hFile=0x2f4) returned 1 [0056.014] CloseHandle (hObject=0x31c) returned 1 [0056.015] CloseHandle (hObject=0x2f4) returned 1 [0056.015] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf")) returned 1 [0056.016] SetEvent (hEvent=0x2a4) returned 1 [0056.016] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0056.016] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=79296) returned 1 [0056.016] CloseHandle (hObject=0x2f4) returned 1 [0056.016] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml")) returned 0x80 [0056.016] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml")) returned 0x80 [0056.016] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0056.017] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0056.017] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0056.017] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0056.017] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x31c [0056.017] ReadFile (in: hFile=0x2f4, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0x135c0, lpOverlapped=0x0) returned 1 [0056.019] WriteFile (in: hFile=0x31c, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x135d0, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x135d0, lpOverlapped=0x0) returned 1 [0056.021] WriteFile (in: hFile=0x31c, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x102, lpOverlapped=0x0) returned 1 [0056.021] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0056.022] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0056.022] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x135c0, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0x135c0, lpOverlapped=0x0) returned 1 [0056.022] FlushFileBuffers (hFile=0x2f4) returned 1 [0056.070] FlushFileBuffers (hFile=0x31c) returned 1 [0056.081] CloseHandle (hObject=0x2f4) returned 1 [0056.083] CloseHandle (hObject=0x31c) returned 1 [0056.085] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml")) returned 1 [0056.086] SetEvent (hEvent=0x2a4) returned 1 [0056.086] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0056.086] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=4040) returned 1 [0056.087] CloseHandle (hObject=0x31c) returned 1 [0056.087] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf")) returned 0x80 [0056.087] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf")) returned 0x80 [0056.087] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0056.087] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0056.087] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0056.087] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0056.087] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f4 [0056.089] ReadFile (in: hFile=0x31c, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0xfc8, lpOverlapped=0x0) returned 1 [0056.095] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0xfd0, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0xfd0, lpOverlapped=0x0) returned 1 [0056.096] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0xf2, lpOverlapped=0x0) returned 1 [0056.096] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0056.096] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0056.096] WriteFile (in: hFile=0x31c, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0xfc8, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0xfc8, lpOverlapped=0x0) returned 1 [0056.096] FlushFileBuffers (hFile=0x31c) returned 1 [0056.105] FlushFileBuffers (hFile=0x2f4) returned 1 [0056.149] CloseHandle (hObject=0x31c) returned 1 [0056.150] CloseHandle (hObject=0x2f4) returned 1 [0056.150] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf")) returned 1 [0056.151] SetEvent (hEvent=0x2a4) returned 1 [0056.151] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0056.152] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=82374) returned 1 [0056.152] CloseHandle (hObject=0x2f4) returned 1 [0056.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml")) returned 0x80 [0056.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml")) returned 0x80 [0056.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0056.152] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0056.152] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0056.152] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0056.152] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x31c [0056.152] ReadFile (in: hFile=0x2f4, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0x141c6, lpOverlapped=0x0) returned 1 [0056.159] WriteFile (in: hFile=0x31c, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x141d0, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x141d0, lpOverlapped=0x0) returned 1 [0056.161] WriteFile (in: hFile=0x31c, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x102, lpOverlapped=0x0) returned 1 [0056.161] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0056.161] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0056.161] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x141c6, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0x141c6, lpOverlapped=0x0) returned 1 [0056.162] FlushFileBuffers (hFile=0x2f4) returned 1 [0056.526] FlushFileBuffers (hFile=0x31c) returned 1 [0056.529] CloseHandle (hObject=0x2f4) returned 1 [0056.532] CloseHandle (hObject=0x31c) returned 1 [0056.534] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml")) returned 1 [0056.535] SetEvent (hEvent=0x2a4) returned 1 [0056.535] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0056.535] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=3683) returned 1 [0056.535] CloseHandle (hObject=0x31c) returned 1 [0056.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf")) returned 0x80 [0056.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf")) returned 0x80 [0056.536] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0056.536] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0056.536] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0056.536] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0056.536] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f4 [0056.538] ReadFile (in: hFile=0x31c, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0xe63, lpOverlapped=0x0) returned 1 [0056.541] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0xe70, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0xe70, lpOverlapped=0x0) returned 1 [0056.541] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0xf2, lpOverlapped=0x0) returned 1 [0056.542] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0056.542] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0056.542] WriteFile (in: hFile=0x31c, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0xe63, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0xe63, lpOverlapped=0x0) returned 1 [0056.542] FlushFileBuffers (hFile=0x31c) returned 1 [0056.558] FlushFileBuffers (hFile=0x2f4) returned 1 [0056.561] CloseHandle (hObject=0x31c) returned 1 [0056.562] CloseHandle (hObject=0x2f4) returned 1 [0056.562] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf")) returned 1 [0056.563] SetEvent (hEvent=0x2a4) returned 1 [0056.563] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0056.563] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=18264) returned 1 [0056.564] CloseHandle (hObject=0x2f4) returned 1 [0056.564] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll")) returned 0x80 [0056.564] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll")) returned 0x80 [0056.564] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0056.564] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0056.564] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0056.564] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0056.564] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x31c [0056.564] ReadFile (in: hFile=0x2f4, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0x4758, lpOverlapped=0x0) returned 1 [0056.566] WriteFile (in: hFile=0x31c, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x4760, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x4760, lpOverlapped=0x0) returned 1 [0056.567] WriteFile (in: hFile=0x31c, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x102, lpOverlapped=0x0) returned 1 [0056.568] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0056.568] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0056.568] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x4758, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0x4758, lpOverlapped=0x0) returned 1 [0056.568] FlushFileBuffers (hFile=0x2f4) returned 1 [0057.923] FlushFileBuffers (hFile=0x31c) returned 1 [0057.926] CloseHandle (hObject=0x2f4) returned 1 [0057.927] CloseHandle (hObject=0x31c) returned 1 [0057.928] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll")) returned 1 [0057.929] SetEvent (hEvent=0x2a4) returned 1 [0057.929] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0057.929] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=18264) returned 1 [0057.929] CloseHandle (hObject=0x31c) returned 1 [0057.929] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll")) returned 0x80 [0057.929] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll")) returned 0x80 [0057.929] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0057.929] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0057.929] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0057.929] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0057.929] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f4 [0057.930] ReadFile (in: hFile=0x31c, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0x4758, lpOverlapped=0x0) returned 1 [0057.933] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x4760, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x4760, lpOverlapped=0x0) returned 1 [0057.934] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x102, lpOverlapped=0x0) returned 1 [0057.934] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0057.934] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0057.934] WriteFile (in: hFile=0x31c, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x4758, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0x4758, lpOverlapped=0x0) returned 1 [0057.935] FlushFileBuffers (hFile=0x31c) returned 1 [0058.716] FlushFileBuffers (hFile=0x2f4) returned 1 [0058.717] CloseHandle (hObject=0x31c) returned 1 [0058.718] CloseHandle (hObject=0x2f4) returned 1 [0058.719] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll")) returned 1 [0058.720] SetEvent (hEvent=0x2a4) returned 1 [0058.720] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0058.720] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=17752) returned 1 [0058.720] CloseHandle (hObject=0x2f4) returned 1 [0058.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll")) returned 0x80 [0058.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll")) returned 0x80 [0058.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0058.721] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0058.721] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0058.721] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0058.721] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x31c [0058.722] ReadFile (in: hFile=0x2f4, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0x4558, lpOverlapped=0x0) returned 1 [0058.723] WriteFile (in: hFile=0x31c, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x4560, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x4560, lpOverlapped=0x0) returned 1 [0058.724] WriteFile (in: hFile=0x31c, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x102, lpOverlapped=0x0) returned 1 [0058.724] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0058.724] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0058.724] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x4558, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0x4558, lpOverlapped=0x0) returned 1 [0058.725] FlushFileBuffers (hFile=0x2f4) returned 1 [0059.092] FlushFileBuffers (hFile=0x31c) returned 1 [0059.097] CloseHandle (hObject=0x2f4) returned 1 [0059.097] CloseHandle (hObject=0x31c) returned 1 [0059.098] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll")) returned 1 [0059.099] SetEvent (hEvent=0x2a4) returned 1 [0059.099] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0059.099] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=76818) returned 1 [0059.099] CloseHandle (hObject=0x31c) returned 1 [0059.099] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml")) returned 0x80 [0059.099] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml")) returned 0x80 [0059.099] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0059.099] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0059.100] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0059.100] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0059.100] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f4 [0059.100] ReadFile (in: hFile=0x31c, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0x12c12, lpOverlapped=0x0) returned 1 [0059.103] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x12c20, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x12c20, lpOverlapped=0x0) returned 1 [0059.104] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x102, lpOverlapped=0x0) returned 1 [0059.105] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0059.105] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0059.105] WriteFile (in: hFile=0x31c, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x12c12, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0x12c12, lpOverlapped=0x0) returned 1 [0059.105] FlushFileBuffers (hFile=0x31c) returned 1 [0059.152] FlushFileBuffers (hFile=0x2f4) returned 1 [0059.155] CloseHandle (hObject=0x31c) returned 1 [0059.157] CloseHandle (hObject=0x2f4) returned 1 [0059.159] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml")) returned 1 [0059.160] SetEvent (hEvent=0x2a4) returned 1 [0059.160] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0059.160] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=5827) returned 1 [0059.161] CloseHandle (hObject=0x2f4) returned 1 [0059.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf")) returned 0x80 [0059.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf")) returned 0x80 [0059.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0059.161] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0059.161] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0059.161] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0059.161] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x310 [0059.164] ReadFile (in: hFile=0x2f4, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0x16c3, lpOverlapped=0x0) returned 1 [0059.165] WriteFile (in: hFile=0x310, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x16d0, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x16d0, lpOverlapped=0x0) returned 1 [0059.166] WriteFile (in: hFile=0x310, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0xf2, lpOverlapped=0x0) returned 1 [0059.166] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0059.166] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0059.166] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x16c3, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0x16c3, lpOverlapped=0x0) returned 1 [0059.167] FlushFileBuffers (hFile=0x2f4) returned 1 [0059.199] FlushFileBuffers (hFile=0x310) returned 1 [0059.201] CloseHandle (hObject=0x2f4) returned 1 [0059.202] CloseHandle (hObject=0x310) returned 1 [0059.203] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf")) returned 1 [0059.204] SetEvent (hEvent=0x2a4) returned 1 [0059.204] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310 [0059.204] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=14168) returned 1 [0059.204] CloseHandle (hObject=0x310) returned 1 [0059.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll")) returned 0x80 [0059.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll")) returned 0x80 [0059.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0059.204] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310 [0059.205] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0059.205] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0059.205] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f4 [0059.205] ReadFile (in: hFile=0x310, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0x3758, lpOverlapped=0x0) returned 1 [0059.208] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x3760, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x3760, lpOverlapped=0x0) returned 1 [0059.209] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x102, lpOverlapped=0x0) returned 1 [0059.209] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0059.209] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0059.209] WriteFile (in: hFile=0x310, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x3758, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0x3758, lpOverlapped=0x0) returned 1 [0059.209] FlushFileBuffers (hFile=0x310) returned 1 [0060.133] FlushFileBuffers (hFile=0x2f4) returned 1 [0060.220] CloseHandle (hObject=0x310) returned 1 [0060.221] CloseHandle (hObject=0x2f4) returned 1 [0060.222] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll")) returned 1 [0060.223] SetEvent (hEvent=0x2a4) returned 1 [0060.223] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0060.223] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=18776) returned 1 [0060.223] CloseHandle (hObject=0x2f4) returned 1 [0060.224] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll")) returned 0x80 [0060.224] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll")) returned 0x80 [0060.224] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0060.224] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0060.224] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0060.224] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0060.224] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x310 [0060.224] ReadFile (in: hFile=0x2f4, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0x4958, lpOverlapped=0x0) returned 1 [0060.252] WriteFile (in: hFile=0x310, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x4960, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x4960, lpOverlapped=0x0) returned 1 [0060.253] WriteFile (in: hFile=0x310, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x102, lpOverlapped=0x0) returned 1 [0060.253] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0060.253] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0060.253] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x4958, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0x4958, lpOverlapped=0x0) returned 1 [0060.253] FlushFileBuffers (hFile=0x2f4) returned 1 [0060.962] FlushFileBuffers (hFile=0x310) returned 1 [0060.963] CloseHandle (hObject=0x2f4) returned 1 [0060.964] CloseHandle (hObject=0x310) returned 1 [0060.965] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll")) returned 1 [0060.966] SetEvent (hEvent=0x2a4) returned 1 [0060.966] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310 [0060.966] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=60816) returned 1 [0060.966] CloseHandle (hObject=0x310) returned 1 [0060.966] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml")) returned 0x80 [0060.966] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml")) returned 0x80 [0060.966] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0060.966] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310 [0060.966] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0060.966] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0060.967] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f4 [0060.967] ReadFile (in: hFile=0x310, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0xed90, lpOverlapped=0x0) returned 1 [0060.969] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0xeda0, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0xeda0, lpOverlapped=0x0) returned 1 [0060.971] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x102, lpOverlapped=0x0) returned 1 [0060.971] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0060.971] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0060.971] WriteFile (in: hFile=0x310, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0xed90, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0xed90, lpOverlapped=0x0) returned 1 [0060.971] FlushFileBuffers (hFile=0x310) returned 1 [0061.654] FlushFileBuffers (hFile=0x2f4) returned 1 [0061.657] CloseHandle (hObject=0x310) returned 1 [0061.659] CloseHandle (hObject=0x2f4) returned 1 [0061.661] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml")) returned 1 [0061.662] SetEvent (hEvent=0x2a4) returned 1 [0061.663] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0061.663] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=3069) returned 1 [0061.663] CloseHandle (hObject=0x2f4) returned 1 [0061.663] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf")) returned 0x80 [0061.663] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf")) returned 0x80 [0061.663] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0061.663] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0061.663] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0061.663] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0061.663] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x310 [0061.667] ReadFile (in: hFile=0x2f4, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0xbfd, lpOverlapped=0x0) returned 1 [0061.669] WriteFile (in: hFile=0x310, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0xc00, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0xc00, lpOverlapped=0x0) returned 1 [0061.670] WriteFile (in: hFile=0x310, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0xf2, lpOverlapped=0x0) returned 1 [0061.670] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0061.670] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0061.670] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0xbfd, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0xbfd, lpOverlapped=0x0) returned 1 [0061.670] FlushFileBuffers (hFile=0x2f4) returned 1 [0061.684] FlushFileBuffers (hFile=0x310) returned 1 [0061.685] CloseHandle (hObject=0x2f4) returned 1 [0061.686] CloseHandle (hObject=0x310) returned 1 [0061.686] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf")) returned 1 [0061.687] SetEvent (hEvent=0x2a4) returned 1 [0061.687] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310 [0061.687] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=18776) returned 1 [0061.687] CloseHandle (hObject=0x310) returned 1 [0061.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll")) returned 0x80 [0061.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll")) returned 0x80 [0061.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0061.687] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310 [0061.688] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0061.688] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0061.688] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f4 [0061.688] ReadFile (in: hFile=0x310, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0x4958, lpOverlapped=0x0) returned 1 [0061.693] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x4960, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x4960, lpOverlapped=0x0) returned 1 [0061.694] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x102, lpOverlapped=0x0) returned 1 [0061.695] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0061.695] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0061.695] WriteFile (in: hFile=0x310, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x4958, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0x4958, lpOverlapped=0x0) returned 1 [0061.695] FlushFileBuffers (hFile=0x310) returned 1 [0062.714] FlushFileBuffers (hFile=0x2f4) returned 1 [0062.716] CloseHandle (hObject=0x310) returned 1 [0062.717] CloseHandle (hObject=0x2f4) returned 1 [0062.718] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll")) returned 1 [0062.719] SetEvent (hEvent=0x2a4) returned 1 [0062.719] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0062.719] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=88533) returned 1 [0062.719] CloseHandle (hObject=0x2f4) returned 1 [0062.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico")) returned 0x80 [0062.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico")) returned 0x80 [0062.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\DisplayIcon.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0062.719] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0062.720] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0062.720] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0062.720] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\DisplayIcon.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x310 [0062.720] ReadFile (in: hFile=0x2f4, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0x159d5, lpOverlapped=0x0) returned 1 [0062.725] WriteFile (in: hFile=0x310, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x159e0, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x159e0, lpOverlapped=0x0) returned 1 [0062.727] WriteFile (in: hFile=0x310, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0xf2, lpOverlapped=0x0) returned 1 [0062.727] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0062.728] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0062.728] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x159d5, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0x159d5, lpOverlapped=0x0) returned 1 [0062.728] FlushFileBuffers (hFile=0x2f4) returned 1 [0063.111] FlushFileBuffers (hFile=0x310) returned 1 [0063.112] CloseHandle (hObject=0x2f4) returned 1 [0063.114] CloseHandle (hObject=0x310) returned 1 [0063.116] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico")) returned 1 [0063.118] SetEvent (hEvent=0x2a4) returned 1 [0063.118] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310 [0063.118] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=39050) returned 1 [0063.118] CloseHandle (hObject=0x310) returned 1 [0063.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml")) returned 0x80 [0063.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml")) returned 0x80 [0063.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\UiInfo.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0063.118] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310 [0063.119] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0063.119] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0063.119] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\UiInfo.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f4 [0063.122] ReadFile (in: hFile=0x310, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0x988a, lpOverlapped=0x0) returned 1 [0063.124] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x9890, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x9890, lpOverlapped=0x0) returned 1 [0063.125] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0xf2, lpOverlapped=0x0) returned 1 [0063.125] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0063.125] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0063.125] WriteFile (in: hFile=0x310, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x988a, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0x988a, lpOverlapped=0x0) returned 1 [0063.126] FlushFileBuffers (hFile=0x310) returned 1 [0063.656] FlushFileBuffers (hFile=0x2f4) returned 1 [0064.330] CloseHandle (hObject=0x310) returned 1 [0064.331] CloseHandle (hObject=0x2f4) returned 1 [0064.332] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml")) returned 1 [0064.334] SetEvent (hEvent=0x2a4) returned 1 [0064.334] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0064.334] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=894) returned 1 [0064.334] CloseHandle (hObject=0x2f4) returned 1 [0064.334] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico")) returned 0x80 [0064.334] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico")) returned 0x80 [0064.334] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0064.334] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0064.334] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0064.334] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0064.334] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x310 [0064.335] ReadFile (in: hFile=0x2f4, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0x37e, lpOverlapped=0x0) returned 1 [0064.336] WriteFile (in: hFile=0x310, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x380, lpOverlapped=0x0) returned 1 [0064.340] WriteFile (in: hFile=0x310, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0xf2, lpOverlapped=0x0) returned 1 [0064.340] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0064.340] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0064.340] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x37e, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0x37e, lpOverlapped=0x0) returned 1 [0064.341] FlushFileBuffers (hFile=0x2f4) returned 1 [0064.342] FlushFileBuffers (hFile=0x310) returned 1 [0064.343] CloseHandle (hObject=0x2f4) returned 1 [0064.344] CloseHandle (hObject=0x310) returned 1 [0064.345] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico")) returned 1 [0064.346] SetEvent (hEvent=0x2a4) returned 1 [0064.346] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310 [0064.346] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=894) returned 1 [0064.346] CloseHandle (hObject=0x310) returned 1 [0064.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico")) returned 0x80 [0064.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico")) returned 0x80 [0064.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0064.346] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310 [0064.346] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0064.346] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0064.346] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f4 [0064.346] ReadFile (in: hFile=0x310, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0x37e, lpOverlapped=0x0) returned 1 [0064.348] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x380, lpOverlapped=0x0) returned 1 [0064.349] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0xf2, lpOverlapped=0x0) returned 1 [0064.349] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0064.349] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0064.349] WriteFile (in: hFile=0x310, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x37e, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0x37e, lpOverlapped=0x0) returned 1 [0064.349] FlushFileBuffers (hFile=0x310) returned 1 [0064.751] FlushFileBuffers (hFile=0x2f4) returned 1 [0064.751] CloseHandle (hObject=0x310) returned 1 [0064.752] CloseHandle (hObject=0x2f4) returned 1 [0064.752] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico")) returned 1 [0064.753] SetEvent (hEvent=0x2a4) returned 1 [0064.753] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0064.754] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=894) returned 1 [0064.754] CloseHandle (hObject=0x2f4) returned 1 [0064.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico")) returned 0x80 [0064.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico")) returned 0x80 [0064.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0064.754] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0064.754] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0064.754] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0064.754] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x310 [0064.755] ReadFile (in: hFile=0x2f4, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0x37e, lpOverlapped=0x0) returned 1 [0064.756] WriteFile (in: hFile=0x310, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x380, lpOverlapped=0x0) returned 1 [0064.757] WriteFile (in: hFile=0x310, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0xf2, lpOverlapped=0x0) returned 1 [0064.757] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0064.757] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0064.757] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x37e, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0x37e, lpOverlapped=0x0) returned 1 [0064.757] FlushFileBuffers (hFile=0x2f4) returned 1 [0064.955] FlushFileBuffers (hFile=0x310) returned 1 [0064.958] CloseHandle (hObject=0x2f4) returned 1 [0064.959] CloseHandle (hObject=0x310) returned 1 [0064.959] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico")) returned 1 [0064.960] SetEvent (hEvent=0x2a4) returned 1 [0064.960] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310 [0064.960] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=1150) returned 1 [0064.960] CloseHandle (hObject=0x310) returned 1 [0064.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico")) returned 0x80 [0064.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico")) returned 0x80 [0064.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0064.961] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310 [0064.961] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0064.961] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0064.961] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f4 [0064.961] ReadFile (in: hFile=0x310, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0x47e, lpOverlapped=0x0) returned 1 [0064.964] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x480, lpOverlapped=0x0) returned 1 [0064.965] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0xf2, lpOverlapped=0x0) returned 1 [0064.965] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0064.965] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0064.965] WriteFile (in: hFile=0x310, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x47e, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0x47e, lpOverlapped=0x0) returned 1 [0064.966] FlushFileBuffers (hFile=0x310) returned 1 [0065.032] FlushFileBuffers (hFile=0x2f4) returned 1 [0065.038] CloseHandle (hObject=0x310) returned 1 [0065.038] CloseHandle (hObject=0x2f4) returned 1 [0065.038] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico")) returned 1 [0065.039] SetEvent (hEvent=0x2a4) returned 1 [0065.040] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0065.040] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=1150) returned 1 [0065.040] CloseHandle (hObject=0x2f4) returned 1 [0065.040] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico")) returned 0x80 [0065.040] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico")) returned 0x80 [0065.040] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0065.040] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0065.040] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0065.040] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0065.040] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x310 [0065.040] ReadFile (in: hFile=0x2f4, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0x47e, lpOverlapped=0x0) returned 1 [0065.042] WriteFile (in: hFile=0x310, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x480, lpOverlapped=0x0) returned 1 [0065.043] WriteFile (in: hFile=0x310, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x102, lpOverlapped=0x0) returned 1 [0065.043] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0065.043] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0065.043] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x47e, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0x47e, lpOverlapped=0x0) returned 1 [0065.043] FlushFileBuffers (hFile=0x2f4) returned 1 [0065.045] FlushFileBuffers (hFile=0x310) returned 1 [0065.048] CloseHandle (hObject=0x2f4) returned 1 [0065.051] CloseHandle (hObject=0x310) returned 1 [0065.052] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico")) returned 1 [0065.053] SetEvent (hEvent=0x2a4) returned 1 [0065.053] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310 [0065.053] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=10134) returned 1 [0065.053] CloseHandle (hObject=0x310) returned 1 [0065.053] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico")) returned 0x80 [0065.053] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico")) returned 0x80 [0065.053] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\warn.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0065.053] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310 [0065.054] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0065.054] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0065.054] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\warn.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f4 [0065.054] ReadFile (in: hFile=0x310, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0x2796, lpOverlapped=0x0) returned 1 [0065.055] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x27a0, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x27a0, lpOverlapped=0x0) returned 1 [0065.056] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0xf2, lpOverlapped=0x0) returned 1 [0065.057] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0065.057] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0065.057] WriteFile (in: hFile=0x310, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x2796, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0x2796, lpOverlapped=0x0) returned 1 [0065.058] FlushFileBuffers (hFile=0x310) returned 1 [0065.060] FlushFileBuffers (hFile=0x2f4) returned 1 [0065.062] CloseHandle (hObject=0x310) returned 1 [0065.062] CloseHandle (hObject=0x2f4) returned 1 [0065.063] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico")) returned 1 [0065.064] SetEvent (hEvent=0x2a4) returned 1 [0065.064] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0065.064] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=3628) returned 1 [0065.064] CloseHandle (hObject=0x2f4) returned 1 [0065.064] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp")) returned 0x80 [0065.064] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp")) returned 0x80 [0065.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\header.bmp.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\header.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0065.065] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0065.065] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0065.065] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0065.065] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\header.bmp.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\header.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x310 [0065.065] ReadFile (in: hFile=0x2f4, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0xe2c, lpOverlapped=0x0) returned 1 [0065.066] WriteFile (in: hFile=0x310, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0xe30, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0xe30, lpOverlapped=0x0) returned 1 [0065.067] WriteFile (in: hFile=0x310, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0xf2, lpOverlapped=0x0) returned 1 [0065.067] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0065.067] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0065.068] WriteFile (in: hFile=0x2f4, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0xe2c, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0xe2c, lpOverlapped=0x0) returned 1 [0065.068] FlushFileBuffers (hFile=0x2f4) returned 1 [0065.282] FlushFileBuffers (hFile=0x310) returned 1 [0065.283] CloseHandle (hObject=0x2f4) returned 1 [0065.284] CloseHandle (hObject=0x310) returned 1 [0065.284] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp")) returned 1 [0065.285] SetEvent (hEvent=0x2a4) returned 1 [0065.286] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Core_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310 [0065.286] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=1901056) returned 1 [0065.286] CloseHandle (hObject=0x310) returned 1 [0065.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Core_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi")) returned 0x80 [0065.286] MoveFileW (lpExistingFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Core_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi"), lpNewFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Core_x64.msi.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 1 [0065.287] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Core_x64.msi.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310 [0065.287] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f6c8 | out: lpNewFilePointer=0x0) returned 1 [0065.287] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f6c8 | out: lpNewFilePointer=0x0) returned 1 [0065.287] ReadFile (in: hFile=0x310, lpBuffer=0x304d058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2c9f6d4, lpOverlapped=0x0 | out: lpBuffer=0x304d058*, lpNumberOfBytesRead=0x2c9f6d4*=0x40000, lpOverlapped=0x0) returned 1 [0065.293] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x9ab55, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f6c8 | out: lpNewFilePointer=0x0) returned 1 [0065.293] ReadFile (in: hFile=0x310, lpBuffer=0x308d058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2c9f6d4, lpOverlapped=0x0 | out: lpBuffer=0x308d058*, lpNumberOfBytesRead=0x2c9f6d4*=0x40000, lpOverlapped=0x0) returned 1 [0065.296] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x190200, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f6c8 | out: lpNewFilePointer=0x0) returned 1 [0065.296] ReadFile (in: hFile=0x310, lpBuffer=0x30cd058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2c9f6d4, lpOverlapped=0x0 | out: lpBuffer=0x30cd058*, lpNumberOfBytesRead=0x2c9f6d4*=0x40000, lpOverlapped=0x0) returned 1 [0065.308] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f838 | out: lpNewFilePointer=0x0) returned 1 [0065.309] WriteFile (in: hFile=0x310, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0xc0112, lpNumberOfBytesWritten=0x2c9f830, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f830*=0xc0112, lpOverlapped=0x0) returned 1 [0065.470] SetEndOfFile (hFile=0x310) returned 1 [0065.470] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x190200, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f6d0 | out: lpNewFilePointer=0x0) returned 1 [0065.470] WriteFile (in: hFile=0x310, lpBuffer=0x310d14a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2c9f6dc, lpOverlapped=0x0 | out: lpBuffer=0x310d14a*, lpNumberOfBytesWritten=0x2c9f6dc*=0x40000, lpOverlapped=0x0) returned 1 [0065.472] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x9ab55, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f6d0 | out: lpNewFilePointer=0x0) returned 1 [0065.472] WriteFile (in: hFile=0x310, lpBuffer=0x310d14a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2c9f6dc, lpOverlapped=0x0 | out: lpBuffer=0x310d14a*, lpNumberOfBytesWritten=0x2c9f6dc*=0x40000, lpOverlapped=0x0) returned 1 [0065.474] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f6d0 | out: lpNewFilePointer=0x0) returned 1 [0065.474] WriteFile (in: hFile=0x310, lpBuffer=0x310d14a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2c9f6dc, lpOverlapped=0x0 | out: lpBuffer=0x310d14a*, lpNumberOfBytesWritten=0x2c9f6dc*=0x40000, lpOverlapped=0x0) returned 1 [0065.475] FlushFileBuffers (hFile=0x310) returned 1 [0066.401] CloseHandle (hObject=0x310) returned 1 [0066.685] SetEvent (hEvent=0x2a4) returned 1 [0066.687] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0066.688] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=1163264) returned 1 [0066.688] CloseHandle (hObject=0x31c) returned 1 [0066.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi")) returned 0x80 [0066.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi")) returned 0x80 [0066.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Core_x86.msi.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0066.688] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0066.688] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0066.688] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0066.688] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Core_x86.msi.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x310 [0066.689] ReadFile (in: hFile=0x31c, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0x110100, lpOverlapped=0x0) returned 1 [0066.811] WriteFile (in: hFile=0x310, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x110100, lpOverlapped=0x0) returned 1 [0066.831] ReadFile (in: hFile=0x31c, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0xbf00, lpOverlapped=0x0) returned 1 [0066.831] WriteFile (in: hFile=0x310, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0xbf10, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0xbf10, lpOverlapped=0x0) returned 1 [0066.832] WriteFile (in: hFile=0x310, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x102, lpOverlapped=0x0) returned 1 [0066.832] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0066.833] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0066.833] WriteFile (in: hFile=0x31c, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0x110102, lpOverlapped=0x0) returned 1 [0066.837] WriteFile (in: hFile=0x31c, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0xbefe, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0xbefe, lpOverlapped=0x0) returned 1 [0066.838] FlushFileBuffers (hFile=0x31c) returned 1 [0067.225] FlushFileBuffers (hFile=0x310) returned 1 [0067.228] CloseHandle (hObject=0x31c) returned 1 [0067.246] CloseHandle (hObject=0x310) returned 1 [0067.390] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi")) returned 1 [0067.450] SetEvent (hEvent=0x2a4) returned 1 [0067.451] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310 [0067.451] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=872448) returned 1 [0067.452] CloseHandle (hObject=0x310) returned 1 [0067.452] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi")) returned 0x80 [0067.452] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi")) returned 0x80 [0067.452] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended_x64.msi.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0067.452] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310 [0067.452] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0067.452] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0067.452] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended_x64.msi.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x234 [0067.453] ReadFile (in: hFile=0x310, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0xd5000, lpOverlapped=0x0) returned 1 [0067.467] WriteFile (in: hFile=0x234, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0xd5010, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0xd5010, lpOverlapped=0x0) returned 1 [0067.482] WriteFile (in: hFile=0x234, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x102, lpOverlapped=0x0) returned 1 [0067.482] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0067.482] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0067.482] WriteFile (in: hFile=0x310, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0xd5000, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0xd5000, lpOverlapped=0x0) returned 1 [0067.612] FlushFileBuffers (hFile=0x310) returned 1 [0067.931] FlushFileBuffers (hFile=0x234) returned 1 [0067.933] CloseHandle (hObject=0x310) returned 1 [0067.946] CloseHandle (hObject=0x234) returned 1 [0067.959] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi")) returned 1 [0067.966] SetEvent (hEvent=0x2a4) returned 1 [0067.967] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234 [0067.967] GetFileSizeEx (in: hFile=0x234, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=495616) returned 1 [0067.967] CloseHandle (hObject=0x234) returned 1 [0067.967] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi")) returned 0x80 [0067.967] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi")) returned 0x80 [0067.967] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended_x86.msi.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0067.967] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234 [0067.967] SetFilePointerEx (in: hFile=0x234, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0067.967] SetFilePointerEx (in: hFile=0x234, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0067.967] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended_x86.msi.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0068.065] ReadFile (in: hFile=0x234, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0x79000, lpOverlapped=0x0) returned 1 [0068.072] WriteFile (in: hFile=0x250, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x79010, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x79010, lpOverlapped=0x0) returned 1 [0068.080] WriteFile (in: hFile=0x250, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x102, lpOverlapped=0x0) returned 1 [0068.080] SetFilePointerEx (in: hFile=0x234, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0068.080] SetFilePointerEx (in: hFile=0x234, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0068.080] WriteFile (in: hFile=0x234, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x79000, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0x79000, lpOverlapped=0x0) returned 1 [0068.081] FlushFileBuffers (hFile=0x234) returned 1 [0068.229] FlushFileBuffers (hFile=0x250) returned 1 [0068.231] CloseHandle (hObject=0x234) returned 1 [0068.238] CloseHandle (hObject=0x250) returned 1 [0068.246] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi")) returned 1 [0068.251] SetEvent (hEvent=0x2a4) returned 1 [0068.251] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x250 [0068.251] GetFileSizeEx (in: hFile=0x250, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=94720) returned 1 [0068.251] CloseHandle (hObject=0x250) returned 1 [0068.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi")) returned 0x80 [0068.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi")) returned 0x80 [0068.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\RGB9Rast_x86.msi.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0068.252] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x250 [0068.252] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0068.252] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0068.252] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\RGB9Rast_x86.msi.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x234 [0068.252] ReadFile (in: hFile=0x250, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0x17200, lpOverlapped=0x0) returned 1 [0068.255] WriteFile (in: hFile=0x234, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x17210, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x17210, lpOverlapped=0x0) returned 1 [0068.257] WriteFile (in: hFile=0x234, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x102, lpOverlapped=0x0) returned 1 [0068.257] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0068.257] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0068.257] WriteFile (in: hFile=0x250, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x17200, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0x17200, lpOverlapped=0x0) returned 1 [0068.257] FlushFileBuffers (hFile=0x250) returned 1 [0068.443] FlushFileBuffers (hFile=0x234) returned 1 [0068.446] CloseHandle (hObject=0x250) returned 1 [0068.448] CloseHandle (hObject=0x234) returned 1 [0068.451] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi")) returned 1 [0068.452] SetEvent (hEvent=0x2a4) returned 1 [0068.452] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupEngine.dll" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234 [0068.453] GetFileSizeEx (in: hFile=0x234, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=807256) returned 1 [0068.453] CloseHandle (hObject=0x234) returned 1 [0068.453] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupEngine.dll" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll")) returned 0x80 [0068.453] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupEngine.dll" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll")) returned 0x80 [0068.453] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupEngine.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0068.453] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupEngine.dll" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234 [0068.453] SetFilePointerEx (in: hFile=0x234, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0068.453] SetFilePointerEx (in: hFile=0x234, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0068.453] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupEngine.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0068.453] ReadFile (in: hFile=0x234, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0xc5158, lpOverlapped=0x0) returned 1 [0068.468] WriteFile (in: hFile=0x250, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0xc5160, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0xc5160, lpOverlapped=0x0) returned 1 [0068.481] WriteFile (in: hFile=0x250, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0xf2, lpOverlapped=0x0) returned 1 [0068.481] SetFilePointerEx (in: hFile=0x234, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0068.481] SetFilePointerEx (in: hFile=0x234, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0068.481] WriteFile (in: hFile=0x234, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0xc5158, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0xc5158, lpOverlapped=0x0) returned 1 [0068.508] FlushFileBuffers (hFile=0x234) returned 1 [0068.624] FlushFileBuffers (hFile=0x250) returned 1 [0068.625] CloseHandle (hObject=0x234) returned 1 [0068.637] CloseHandle (hObject=0x250) returned 1 [0068.650] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupEngine.dll" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll")) returned 1 [0068.657] SetEvent (hEvent=0x2a4) returned 1 [0068.657] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x250 [0068.657] GetFileSizeEx (in: hFile=0x250, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=30120) returned 1 [0068.657] CloseHandle (hObject=0x250) returned 1 [0068.657] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd")) returned 0x80 [0068.657] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd")) returned 0x80 [0068.657] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUi.xsd.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0068.657] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x250 [0068.657] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0068.657] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0068.657] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUi.xsd.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x234 [0068.658] ReadFile (in: hFile=0x250, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0x75a8, lpOverlapped=0x0) returned 1 [0068.756] WriteFile (in: hFile=0x234, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x75b0, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x75b0, lpOverlapped=0x0) returned 1 [0068.758] WriteFile (in: hFile=0x234, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0xf2, lpOverlapped=0x0) returned 1 [0068.758] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0068.758] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0068.758] WriteFile (in: hFile=0x250, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x75a8, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0x75a8, lpOverlapped=0x0) returned 1 [0068.758] FlushFileBuffers (hFile=0x250) returned 1 [0069.192] FlushFileBuffers (hFile=0x234) returned 1 [0069.194] CloseHandle (hObject=0x250) returned 1 [0069.195] CloseHandle (hObject=0x234) returned 1 [0069.196] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd")) returned 1 [0069.198] SetEvent (hEvent=0x2a4) returned 1 [0069.198] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234 [0069.198] GetFileSizeEx (in: hFile=0x234, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=14084) returned 1 [0069.198] CloseHandle (hObject=0x234) returned 1 [0069.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml")) returned 0x80 [0069.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml")) returned 0x80 [0069.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Strings.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\strings.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0069.204] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234 [0069.204] SetFilePointerEx (in: hFile=0x234, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0069.205] SetFilePointerEx (in: hFile=0x234, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0069.205] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Strings.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\strings.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0069.205] ReadFile (in: hFile=0x234, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0x3704, lpOverlapped=0x0) returned 1 [0069.207] WriteFile (in: hFile=0x250, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x3710, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x3710, lpOverlapped=0x0) returned 1 [0069.208] WriteFile (in: hFile=0x250, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0xf2, lpOverlapped=0x0) returned 1 [0069.208] SetFilePointerEx (in: hFile=0x234, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0069.208] SetFilePointerEx (in: hFile=0x234, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0069.209] WriteFile (in: hFile=0x234, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x3704, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0x3704, lpOverlapped=0x0) returned 1 [0069.209] FlushFileBuffers (hFile=0x234) returned 1 [0069.392] FlushFileBuffers (hFile=0x250) returned 1 [0069.403] CloseHandle (hObject=0x234) returned 1 [0069.404] CloseHandle (hObject=0x250) returned 1 [0069.406] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml")) returned 1 [0069.407] SetEvent (hEvent=0x2a4) returned 1 [0069.407] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x250 [0069.407] GetFileSizeEx (in: hFile=0x250, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=104072) returned 1 [0069.407] CloseHandle (hObject=0x250) returned 1 [0069.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp")) returned 0x80 [0069.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp")) returned 0x80 [0069.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\watermark.bmp.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0069.408] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x250 [0069.408] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0069.408] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f840 | out: lpNewFilePointer=0x0) returned 1 [0069.408] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\watermark.bmp.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x234 [0069.408] ReadFile (in: hFile=0x250, lpBuffer=0x304d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2c9f854, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesRead=0x2c9f854*=0x19688, lpOverlapped=0x0) returned 1 [0069.416] WriteFile (in: hFile=0x234, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x19690, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0x19690, lpOverlapped=0x0) returned 1 [0069.418] WriteFile (in: hFile=0x234, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2c9f82c, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f82c*=0xf2, lpOverlapped=0x0) returned 1 [0069.418] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0069.418] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f5a0 | out: lpNewFilePointer=0x0) returned 1 [0069.418] WriteFile (in: hFile=0x250, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0x19688, lpNumberOfBytesWritten=0x2c9f5ac, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f5ac*=0x19688, lpOverlapped=0x0) returned 1 [0069.418] FlushFileBuffers (hFile=0x250) returned 1 [0069.596] FlushFileBuffers (hFile=0x234) returned 1 [0069.604] CloseHandle (hObject=0x250) returned 1 [0069.606] CloseHandle (hObject=0x234) returned 1 [0069.609] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp")) returned 1 [0069.610] SetEvent (hEvent=0x2a4) returned 1 [0069.610] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234 [0069.611] GetFileSizeEx (in: hFile=0x234, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=2192672) returned 1 [0069.611] CloseHandle (hObject=0x234) returned 1 [0069.611] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu")) returned 0x80 [0069.611] MoveFileW (lpExistingFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu"), lpNewFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 1 [0069.611] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234 [0069.611] SetFilePointerEx (in: hFile=0x234, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f6c8 | out: lpNewFilePointer=0x0) returned 1 [0069.612] SetFilePointerEx (in: hFile=0x234, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f6c8 | out: lpNewFilePointer=0x0) returned 1 [0069.612] ReadFile (in: hFile=0x234, lpBuffer=0x304d058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2c9f6d4, lpOverlapped=0x0 | out: lpBuffer=0x304d058*, lpNumberOfBytesRead=0x2c9f6d4*=0x40000, lpOverlapped=0x0) returned 1 [0069.620] SetFilePointerEx (in: hFile=0x234, liDistanceToMove=0xb270a, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f6c8 | out: lpNewFilePointer=0x0) returned 1 [0069.620] ReadFile (in: hFile=0x234, lpBuffer=0x308d058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2c9f6d4, lpOverlapped=0x0 | out: lpBuffer=0x308d058*, lpNumberOfBytesRead=0x2c9f6d4*=0x40000, lpOverlapped=0x0) returned 1 [0069.627] SetFilePointerEx (in: hFile=0x234, liDistanceToMove=0x1d7520, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f6c8 | out: lpNewFilePointer=0x0) returned 1 [0069.627] ReadFile (in: hFile=0x234, lpBuffer=0x30cd058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2c9f6d4, lpOverlapped=0x0 | out: lpBuffer=0x30cd058*, lpNumberOfBytesRead=0x2c9f6d4*=0x40000, lpOverlapped=0x0) returned 1 [0069.649] SetFilePointerEx (in: hFile=0x234, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f838 | out: lpNewFilePointer=0x0) returned 1 [0069.650] WriteFile (in: hFile=0x234, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0xc0132, lpNumberOfBytesWritten=0x2c9f830, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f830*=0xc0132, lpOverlapped=0x0) returned 1 [0069.741] SetEndOfFile (hFile=0x234) returned 1 [0069.741] SetFilePointerEx (in: hFile=0x234, liDistanceToMove=0x1d7520, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f6d0 | out: lpNewFilePointer=0x0) returned 1 [0069.741] WriteFile (in: hFile=0x234, lpBuffer=0x310d16a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2c9f6dc, lpOverlapped=0x0 | out: lpBuffer=0x310d16a*, lpNumberOfBytesWritten=0x2c9f6dc*=0x40000, lpOverlapped=0x0) returned 1 [0069.743] SetFilePointerEx (in: hFile=0x234, liDistanceToMove=0xb270a, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f6d0 | out: lpNewFilePointer=0x0) returned 1 [0069.743] WriteFile (in: hFile=0x234, lpBuffer=0x310d16a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2c9f6dc, lpOverlapped=0x0 | out: lpBuffer=0x310d16a*, lpNumberOfBytesWritten=0x2c9f6dc*=0x40000, lpOverlapped=0x0) returned 1 [0069.745] SetFilePointerEx (in: hFile=0x234, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f6d0 | out: lpNewFilePointer=0x0) returned 1 [0069.745] WriteFile (in: hFile=0x234, lpBuffer=0x310d16a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2c9f6dc, lpOverlapped=0x0 | out: lpBuffer=0x310d16a*, lpNumberOfBytesWritten=0x2c9f6dc*=0x40000, lpOverlapped=0x0) returned 1 [0069.746] FlushFileBuffers (hFile=0x234) returned 1 [0069.842] CloseHandle (hObject=0x234) returned 1 [0070.092] SetEvent (hEvent=0x2a4) returned 1 [0070.230] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x250 [0070.230] GetFileSizeEx (in: hFile=0x250, lpFileSize=0x2c9f878 | out: lpFileSize=0x2c9f878*=5091790) returned 1 [0070.230] CloseHandle (hObject=0x250) returned 1 [0070.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu")) returned 0x80 [0070.230] MoveFileW (lpExistingFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu"), lpNewFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 1 [0070.230] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x250 [0070.231] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f6c8 | out: lpNewFilePointer=0x0) returned 1 [0070.231] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f6c8 | out: lpNewFilePointer=0x0) returned 1 [0070.231] ReadFile (in: hFile=0x250, lpBuffer=0x304d058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2c9f6d4, lpOverlapped=0x0 | out: lpBuffer=0x304d058*, lpNumberOfBytesRead=0x2c9f6d4*=0x40000, lpOverlapped=0x0) returned 1 [0070.235] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x19e5ef, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f6c8 | out: lpNewFilePointer=0x0) returned 1 [0070.235] ReadFile (in: hFile=0x250, lpBuffer=0x308d058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2c9f6d4, lpOverlapped=0x0 | out: lpBuffer=0x308d058*, lpNumberOfBytesRead=0x2c9f6d4*=0x40000, lpOverlapped=0x0) returned 1 [0070.238] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x49b1ce, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f6c8 | out: lpNewFilePointer=0x0) returned 1 [0070.238] ReadFile (in: hFile=0x250, lpBuffer=0x30cd058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2c9f6d4, lpOverlapped=0x0 | out: lpBuffer=0x30cd058*, lpNumberOfBytesRead=0x2c9f6d4*=0x40000, lpOverlapped=0x0) returned 1 [0070.250] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f838 | out: lpNewFilePointer=0x0) returned 1 [0070.250] WriteFile (in: hFile=0x250, lpBuffer=0x304d020*, nNumberOfBytesToWrite=0xc0132, lpNumberOfBytesWritten=0x2c9f830, lpOverlapped=0x0 | out: lpBuffer=0x304d020*, lpNumberOfBytesWritten=0x2c9f830*=0xc0132, lpOverlapped=0x0) returned 1 [0070.420] SetEndOfFile (hFile=0x250) returned 1 [0070.420] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x49b1ce, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f6d0 | out: lpNewFilePointer=0x0) returned 1 [0070.420] WriteFile (in: hFile=0x250, lpBuffer=0x310d16a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2c9f6dc, lpOverlapped=0x0 | out: lpBuffer=0x310d16a*, lpNumberOfBytesWritten=0x2c9f6dc*=0x40000, lpOverlapped=0x0) returned 1 [0070.423] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x19e5ef, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f6d0 | out: lpNewFilePointer=0x0) returned 1 [0070.423] WriteFile (in: hFile=0x250, lpBuffer=0x310d16a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2c9f6dc, lpOverlapped=0x0 | out: lpBuffer=0x310d16a*, lpNumberOfBytesWritten=0x2c9f6dc*=0x40000, lpOverlapped=0x0) returned 1 [0070.425] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c9f6d0 | out: lpNewFilePointer=0x0) returned 1 [0070.425] WriteFile (in: hFile=0x250, lpBuffer=0x310d16a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2c9f6dc, lpOverlapped=0x0 | out: lpBuffer=0x310d16a*, lpNumberOfBytesWritten=0x2c9f6dc*=0x40000, lpOverlapped=0x0) returned 1 [0070.426] FlushFileBuffers (hFile=0x250) Thread: id = 27 os_tid = 0xe5c [0045.571] GetProcessHeap () returned 0x120000 [0045.572] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5d0720 [0045.573] GetProcessHeap () returned 0x120000 [0045.573] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5e0728 [0045.573] GetProcessHeap () returned 0x120000 [0045.573] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x28) returned 0x191258 [0045.573] GetProcessHeap () returned 0x120000 [0045.573] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x110102) returned 0x3164020 [0045.576] GetProcessHeap () returned 0x120000 [0045.576] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x50) returned 0x1494c0 [0045.576] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75e90000 [0045.576] GetProcAddress (hModule=0x75e90000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x75ea6b30 [0045.576] Wow64DisableWow64FsRedirection (in: OldValue=0x2ddf800 | out: OldValue=0x2ddf800*=0x0) returned 1 [0045.576] GetProcessHeap () returned 0x120000 [0045.576] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1494c0 | out: hHeap=0x120000) returned 1 [0045.576] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.576] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.576] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.576] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.576] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.576] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.577] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.577] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.577] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.577] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.577] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.577] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.577] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.577] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.577] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.577] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.577] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.577] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.577] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.578] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.578] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.578] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.578] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.578] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.578] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.578] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.578] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.578] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.578] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.578] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.578] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.578] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.578] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.579] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.579] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.579] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.579] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.579] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.579] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.579] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.579] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.579] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.579] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.579] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.579] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.579] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.580] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.580] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.580] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.580] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.580] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.580] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.580] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.580] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.580] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.580] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.580] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.580] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.580] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.580] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.581] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.581] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.581] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.581] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.581] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.581] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.581] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.581] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.581] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.581] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.581] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.581] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.581] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.582] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.582] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.582] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.582] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.582] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.582] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.582] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.582] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.582] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.582] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.582] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.582] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.582] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.582] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.583] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.583] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.583] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.583] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.583] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.583] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.583] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.583] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.583] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.583] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.583] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.583] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.583] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.584] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.584] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.584] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.584] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.584] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.584] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.584] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.584] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.584] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.584] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.584] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.584] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.584] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.584] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.585] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.585] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.585] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.585] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.585] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.585] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.585] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.585] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.585] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.585] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.585] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.585] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.585] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.586] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.586] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.586] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.586] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.586] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.586] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.586] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.586] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.586] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.586] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.586] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.586] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.586] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.586] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.587] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.587] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.587] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.587] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.587] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.587] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.587] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.587] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.587] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.587] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.587] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.587] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.587] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.587] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.588] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.588] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.588] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.588] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.588] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.588] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.588] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.588] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.588] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.588] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.588] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.588] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.588] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.589] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.589] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.589] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.589] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.589] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.589] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.589] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.589] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.589] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.589] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.589] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.589] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.589] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.590] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.590] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.590] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.590] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.590] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.590] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.590] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.590] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.590] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.590] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.590] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.590] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.590] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.590] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.591] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.591] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.591] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.591] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.591] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.591] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.591] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.591] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.591] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.591] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.591] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.591] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.591] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.592] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.592] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.592] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.592] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.592] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.592] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.592] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.592] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.592] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.592] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.593] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.593] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.593] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.593] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.593] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.593] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.593] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.593] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.593] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.593] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.593] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.593] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.593] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.594] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.594] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.594] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.594] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.594] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.594] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.594] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.594] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.594] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.594] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.594] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.594] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.594] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.595] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.595] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.595] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.595] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.595] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0048.468] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2ddf770 | out: lpNewFilePointer=0x0) returned 1 [0048.469] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2ddf770 | out: lpNewFilePointer=0x0) returned 1 [0048.469] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZLIB.ACCDE.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzlib.accde.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x330 [0048.469] ReadFile (in: hFile=0x32c, lpBuffer=0x3164020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2ddf784, lpOverlapped=0x0 | out: lpBuffer=0x3164020*, lpNumberOfBytesRead=0x2ddf784*=0x110100, lpOverlapped=0x0) returned 1 [0049.125] WriteFile (in: hFile=0x330, lpBuffer=0x3164020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x2ddf75c, lpOverlapped=0x0 | out: lpBuffer=0x3164020*, lpNumberOfBytesWritten=0x2ddf75c*=0x110100, lpOverlapped=0x0) returned 1 [0049.144] ReadFile (in: hFile=0x32c, lpBuffer=0x3164020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2ddf784, lpOverlapped=0x0 | out: lpBuffer=0x3164020*, lpNumberOfBytesRead=0x2ddf784*=0xedf00, lpOverlapped=0x0) returned 1 [0049.155] WriteFile (in: hFile=0x330, lpBuffer=0x3164020*, nNumberOfBytesToWrite=0xedf10, lpNumberOfBytesWritten=0x2ddf75c, lpOverlapped=0x0 | out: lpBuffer=0x3164020*, lpNumberOfBytesWritten=0x2ddf75c*=0xedf10, lpOverlapped=0x0) returned 1 [0049.967] WriteFile (in: hFile=0x330, lpBuffer=0x3164020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2ddf75c, lpOverlapped=0x0 | out: lpBuffer=0x3164020*, lpNumberOfBytesWritten=0x2ddf75c*=0xf2, lpOverlapped=0x0) returned 1 [0049.967] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2ddf4d0 | out: lpNewFilePointer=0x0) returned 1 [0049.968] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2ddf4d0 | out: lpNewFilePointer=0x0) returned 1 [0049.968] WriteFile (in: hFile=0x32c, lpBuffer=0x3164020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x2ddf4dc, lpOverlapped=0x0 | out: lpBuffer=0x3164020*, lpNumberOfBytesWritten=0x2ddf4dc*=0x110102, lpOverlapped=0x0) returned 1 [0049.973] WriteFile (in: hFile=0x32c, lpBuffer=0x3164020*, nNumberOfBytesToWrite=0xedefe, lpNumberOfBytesWritten=0x2ddf4dc, lpOverlapped=0x0 | out: lpBuffer=0x3164020*, lpNumberOfBytesWritten=0x2ddf4dc*=0xedefe, lpOverlapped=0x0) returned 1 [0049.975] FlushFileBuffers (hFile=0x32c) returned 1 [0049.986] FlushFileBuffers (hFile=0x330) returned 1 [0051.467] CloseHandle (hObject=0x32c) returned 1 [0051.467] CloseHandle (hObject=0x330) returned 1 [0051.766] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZLIB.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzlib.accde")) returned 1 [0051.783] ResetEvent (hEvent=0x2d4) returned 1 [0051.783] SetEvent (hEvent=0x2d8) returned 1 [0051.783] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZTOOL.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwztool.accde"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330 [0051.785] GetFileSizeEx (in: hFile=0x330, lpFileSize=0x2ddf7a8 | out: lpFileSize=0x2ddf7a8*=11493376) returned 1 [0051.785] CloseHandle (hObject=0x330) returned 1 [0051.785] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZTOOL.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwztool.accde")) returned 0x220 [0051.785] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZTOOL.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwztool.accde")) returned 0x220 [0051.785] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZTOOL.ACCDE.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwztool.accde.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0051.785] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZTOOL.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwztool.accde"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330 [0051.785] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2ddf770 | out: lpNewFilePointer=0x0) returned 1 [0051.785] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2ddf770 | out: lpNewFilePointer=0x0) returned 1 [0051.785] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZTOOL.ACCDE.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwztool.accde.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x328 [0051.785] ReadFile (in: hFile=0x330, lpBuffer=0x3164020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2ddf784, lpOverlapped=0x0 | out: lpBuffer=0x3164020*, lpNumberOfBytesRead=0x2ddf784*=0x110100, lpOverlapped=0x0) returned 1 [0052.109] WriteFile (in: hFile=0x328, lpBuffer=0x3164020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x2ddf75c, lpOverlapped=0x0 | out: lpBuffer=0x3164020*, lpNumberOfBytesWritten=0x2ddf75c*=0x110100, lpOverlapped=0x0) returned 1 [0052.129] ReadFile (in: hFile=0x330, lpBuffer=0x3164020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2ddf784, lpOverlapped=0x0 | out: lpBuffer=0x3164020*, lpNumberOfBytesRead=0x2ddf784*=0x110100, lpOverlapped=0x0) returned 1 [0052.514] WriteFile (in: hFile=0x328, lpBuffer=0x3164020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x2ddf75c, lpOverlapped=0x0 | out: lpBuffer=0x3164020*, lpNumberOfBytesWritten=0x2ddf75c*=0x110100, lpOverlapped=0x0) returned 1 [0052.534] ReadFile (in: hFile=0x330, lpBuffer=0x3164020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2ddf784, lpOverlapped=0x0 | out: lpBuffer=0x3164020*, lpNumberOfBytesRead=0x2ddf784*=0x110100, lpOverlapped=0x0) returned 1 [0052.857] WriteFile (in: hFile=0x328, lpBuffer=0x3164020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x2ddf75c, lpOverlapped=0x0 | out: lpBuffer=0x3164020*, lpNumberOfBytesWritten=0x2ddf75c*=0x110100, lpOverlapped=0x0) returned 1 [0053.082] ReadFile (in: hFile=0x330, lpBuffer=0x3164020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2ddf784, lpOverlapped=0x0 | out: lpBuffer=0x3164020*, lpNumberOfBytesRead=0x2ddf784*=0x110100, lpOverlapped=0x0) returned 1 [0053.144] WriteFile (in: hFile=0x328, lpBuffer=0x3164020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x2ddf75c, lpOverlapped=0x0 | out: lpBuffer=0x3164020*, lpNumberOfBytesWritten=0x2ddf75c*=0x110100, lpOverlapped=0x0) returned 1 [0053.375] ReadFile (in: hFile=0x330, lpBuffer=0x3164020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2ddf784, lpOverlapped=0x0 | out: lpBuffer=0x3164020*, lpNumberOfBytesRead=0x2ddf784*=0x110100, lpOverlapped=0x0) returned 1 [0053.396] WriteFile (in: hFile=0x328, lpBuffer=0x3164020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x2ddf75c, lpOverlapped=0x0 | out: lpBuffer=0x3164020*, lpNumberOfBytesWritten=0x2ddf75c*=0x110100, lpOverlapped=0x0) returned 1 [0053.895] ReadFile (in: hFile=0x330, lpBuffer=0x3164020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2ddf784, lpOverlapped=0x0 | out: lpBuffer=0x3164020*, lpNumberOfBytesRead=0x2ddf784*=0x110100, lpOverlapped=0x0) returned 1 [0054.233] WriteFile (in: hFile=0x328, lpBuffer=0x3164020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x2ddf75c, lpOverlapped=0x0 | out: lpBuffer=0x3164020*, lpNumberOfBytesWritten=0x2ddf75c*=0x110100, lpOverlapped=0x0) returned 1 [0054.505] ReadFile (in: hFile=0x330, lpBuffer=0x3164020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2ddf784, lpOverlapped=0x0 | out: lpBuffer=0x3164020*, lpNumberOfBytesRead=0x2ddf784*=0x110100, lpOverlapped=0x0) returned 1 [0054.525] WriteFile (in: hFile=0x328, lpBuffer=0x3164020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x2ddf75c, lpOverlapped=0x0 | out: lpBuffer=0x3164020*, lpNumberOfBytesWritten=0x2ddf75c*=0x110100, lpOverlapped=0x0) returned 1 [0054.734] ReadFile (in: hFile=0x330, lpBuffer=0x3164020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2ddf784, lpOverlapped=0x0 | out: lpBuffer=0x3164020*, lpNumberOfBytesRead=0x2ddf784*=0x110100, lpOverlapped=0x0) returned 1 [0055.398] WriteFile (in: hFile=0x328, lpBuffer=0x3164020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x2ddf75c, lpOverlapped=0x0 | out: lpBuffer=0x3164020*, lpNumberOfBytesWritten=0x2ddf75c*=0x110100, lpOverlapped=0x0) returned 1 [0055.418] ReadFile (in: hFile=0x330, lpBuffer=0x3164020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2ddf784, lpOverlapped=0x0 | out: lpBuffer=0x3164020*, lpNumberOfBytesRead=0x2ddf784*=0x110100, lpOverlapped=0x0) returned 1 [0055.696] WriteFile (in: hFile=0x328, lpBuffer=0x3164020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x2ddf75c, lpOverlapped=0x0 | out: lpBuffer=0x3164020*, lpNumberOfBytesWritten=0x2ddf75c*=0x110100, lpOverlapped=0x0) returned 1 [0055.715] ReadFile (in: hFile=0x330, lpBuffer=0x3164020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2ddf784, lpOverlapped=0x0 | out: lpBuffer=0x3164020*, lpNumberOfBytesRead=0x2ddf784*=0x110100, lpOverlapped=0x0) returned 1 [0056.227] WriteFile (in: hFile=0x328, lpBuffer=0x3164020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x2ddf75c, lpOverlapped=0x0 | out: lpBuffer=0x3164020*, lpNumberOfBytesWritten=0x2ddf75c*=0x110100, lpOverlapped=0x0) returned 1 [0056.266] ReadFile (in: hFile=0x330, lpBuffer=0x3164020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2ddf784, lpOverlapped=0x0 | out: lpBuffer=0x3164020*, lpNumberOfBytesRead=0x2ddf784*=0x55600, lpOverlapped=0x0) returned 1 [0056.270] WriteFile (in: hFile=0x328, lpBuffer=0x3164020*, nNumberOfBytesToWrite=0x55610, lpNumberOfBytesWritten=0x2ddf75c, lpOverlapped=0x0 | out: lpBuffer=0x3164020*, lpNumberOfBytesWritten=0x2ddf75c*=0x55610, lpOverlapped=0x0) returned 1 [0056.599] WriteFile (in: hFile=0x328, lpBuffer=0x3164020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2ddf75c, lpOverlapped=0x0 | out: lpBuffer=0x3164020*, lpNumberOfBytesWritten=0x2ddf75c*=0xf2, lpOverlapped=0x0) returned 1 [0056.600] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2ddf4d0 | out: lpNewFilePointer=0x0) returned 1 [0056.600] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2ddf4d0 | out: lpNewFilePointer=0x0) returned 1 [0056.600] WriteFile (in: hFile=0x330, lpBuffer=0x3164020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x2ddf4dc, lpOverlapped=0x0 | out: lpBuffer=0x3164020*, lpNumberOfBytesWritten=0x2ddf4dc*=0x110102, lpOverlapped=0x0) returned 1 [0056.614] WriteFile (in: hFile=0x330, lpBuffer=0x3164020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x2ddf4dc, lpOverlapped=0x0 | out: lpBuffer=0x3164020*, lpNumberOfBytesWritten=0x2ddf4dc*=0x110102, lpOverlapped=0x0) returned 1 [0056.626] WriteFile (in: hFile=0x330, lpBuffer=0x3164020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x2ddf4dc, lpOverlapped=0x0 | out: lpBuffer=0x3164020*, lpNumberOfBytesWritten=0x2ddf4dc*=0x110102, lpOverlapped=0x0) returned 1 [0056.982] WriteFile (in: hFile=0x330, lpBuffer=0x3164020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x2ddf4dc, lpOverlapped=0x0 | out: lpBuffer=0x3164020*, lpNumberOfBytesWritten=0x2ddf4dc*=0x110102, lpOverlapped=0x0) returned 1 [0056.996] WriteFile (in: hFile=0x330, lpBuffer=0x3164020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x2ddf4dc, lpOverlapped=0x0 | out: lpBuffer=0x3164020*, lpNumberOfBytesWritten=0x2ddf4dc*=0x110102, lpOverlapped=0x0) returned 1 [0057.561] WriteFile (in: hFile=0x330, lpBuffer=0x3164020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x2ddf4dc, lpOverlapped=0x0 | out: lpBuffer=0x3164020*, lpNumberOfBytesWritten=0x2ddf4dc*=0x110102, lpOverlapped=0x0) returned 1 [0057.574] WriteFile (in: hFile=0x330, lpBuffer=0x3164020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x2ddf4dc, lpOverlapped=0x0 | out: lpBuffer=0x3164020*, lpNumberOfBytesWritten=0x2ddf4dc*=0x110102, lpOverlapped=0x0) returned 1 [0057.586] WriteFile (in: hFile=0x330, lpBuffer=0x3164020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x2ddf4dc, lpOverlapped=0x0 | out: lpBuffer=0x3164020*, lpNumberOfBytesWritten=0x2ddf4dc*=0x110102, lpOverlapped=0x0) returned 1 [0057.599] WriteFile (in: hFile=0x330, lpBuffer=0x3164020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x2ddf4dc, lpOverlapped=0x0 | out: lpBuffer=0x3164020*, lpNumberOfBytesWritten=0x2ddf4dc*=0x110102, lpOverlapped=0x0) returned 1 [0057.953] WriteFile (in: hFile=0x330, lpBuffer=0x3164020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x2ddf4dc, lpOverlapped=0x0 | out: lpBuffer=0x3164020*, lpNumberOfBytesWritten=0x2ddf4dc*=0x110102, lpOverlapped=0x0) returned 1 [0057.964] WriteFile (in: hFile=0x330, lpBuffer=0x3164020*, nNumberOfBytesToWrite=0x555ec, lpNumberOfBytesWritten=0x2ddf4dc, lpOverlapped=0x0 | out: lpBuffer=0x3164020*, lpNumberOfBytesWritten=0x2ddf4dc*=0x555ec, lpOverlapped=0x0) returned 1 [0057.965] FlushFileBuffers (hFile=0x330) returned 1 [0059.191] FlushFileBuffers (hFile=0x328) returned 1 [0059.215] CloseHandle (hObject=0x330) returned 1 [0062.122] CloseHandle (hObject=0x328) returned 1 [0063.435] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZTOOL.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwztool.accde")) returned 1 [0063.436] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) Thread: id = 28 os_tid = 0xd08 [0045.608] GetProcessHeap () returned 0x120000 [0045.608] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x5f0e00 [0045.608] GetProcessHeap () returned 0x120000 [0045.608] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10000) returned 0x600e08 [0045.608] GetProcessHeap () returned 0x120000 [0045.608] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x28) returned 0x191138 [0045.609] GetProcessHeap () returned 0x120000 [0045.609] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x110102) returned 0x328c020 [0045.611] GetProcessHeap () returned 0x120000 [0045.611] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x50) returned 0x149620 [0045.611] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75e90000 [0045.611] GetProcAddress (hModule=0x75e90000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x75ea6b30 [0045.611] Wow64DisableWow64FsRedirection (in: OldValue=0x2f1f9a0 | out: OldValue=0x2f1f9a0*=0x0) returned 1 [0045.611] GetProcessHeap () returned 0x120000 [0045.611] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x149620 | out: hHeap=0x120000) returned 1 [0045.611] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.611] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.612] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.612] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.612] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.612] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.612] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.612] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.612] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.612] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.612] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.612] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.612] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.612] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.612] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.612] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.613] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.613] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.613] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.613] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.613] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.613] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.613] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.613] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.613] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.613] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.613] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.613] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.613] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.614] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.614] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.614] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.614] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.614] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.614] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.614] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.614] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.614] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.614] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.614] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.614] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.614] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.615] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.615] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.615] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.615] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.615] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.615] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.615] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.615] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.615] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.615] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.615] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.615] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.615] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.616] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.616] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.616] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.616] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.616] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.616] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.616] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.616] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.616] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.616] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.616] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.616] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.616] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.616] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.617] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.617] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.617] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.617] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.617] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.617] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.617] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.617] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.617] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.617] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.617] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.617] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.617] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.618] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.618] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.618] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.618] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.618] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.618] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.618] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.618] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.618] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.618] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.618] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.618] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.618] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.618] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.619] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.619] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.619] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.619] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.619] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.619] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.619] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.619] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.619] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.619] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.619] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.619] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.619] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.619] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.620] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.620] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.620] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.620] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.620] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.620] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.620] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.620] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.620] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.620] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.620] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.620] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.620] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.621] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.621] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.621] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.621] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.621] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.621] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.621] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.621] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.621] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.621] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.621] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.621] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.621] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.622] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.622] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.622] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.622] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.622] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.622] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.622] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.622] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.622] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.622] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.622] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.622] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.622] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.623] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.623] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.623] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.623] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.623] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.623] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.623] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.623] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.624] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.624] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.624] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.624] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.624] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.624] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.624] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.624] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.624] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.624] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.624] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.624] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.624] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.625] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.625] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.625] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.625] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.625] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.625] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.625] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.625] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.625] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.625] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.625] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.625] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.625] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.626] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.626] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.626] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.626] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.626] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.626] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.626] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.626] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.626] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.626] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.626] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.626] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.626] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.627] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.627] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.627] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.627] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.627] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.627] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.627] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.627] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.627] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.627] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.627] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.627] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.627] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.628] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.628] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.628] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.628] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.628] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.628] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.628] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.628] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.628] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.628] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.628] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.628] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.628] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.629] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.629] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.629] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.629] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.629] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.629] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.629] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.629] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.629] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.629] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.629] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.629] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.629] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.630] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.630] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.630] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.630] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.630] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.630] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.630] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.630] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.630] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.630] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.630] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.630] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.630] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0045.630] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0048.321] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f1f910 | out: lpNewFilePointer=0x0) returned 1 [0048.321] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f1f910 | out: lpNewFilePointer=0x0) returned 1 [0048.321] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DBSAMPLE.MDB.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dbsample.mdb.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x318 [0048.326] ReadFile (in: hFile=0x304, lpBuffer=0x328c020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f1f924, lpOverlapped=0x0 | out: lpBuffer=0x328c020*, lpNumberOfBytesRead=0x2f1f924*=0x7c000, lpOverlapped=0x0) returned 1 [0048.349] WriteFile (in: hFile=0x318, lpBuffer=0x328c020*, nNumberOfBytesToWrite=0x7c010, lpNumberOfBytesWritten=0x2f1f8fc, lpOverlapped=0x0 | out: lpBuffer=0x328c020*, lpNumberOfBytesWritten=0x2f1f8fc*=0x7c010, lpOverlapped=0x0) returned 1 [0048.746] WriteFile (in: hFile=0x318, lpBuffer=0x328c020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f1f8fc, lpOverlapped=0x0 | out: lpBuffer=0x328c020*, lpNumberOfBytesWritten=0x2f1f8fc*=0xf2, lpOverlapped=0x0) returned 1 [0048.973] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f1f670 | out: lpNewFilePointer=0x0) returned 1 [0048.973] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f1f670 | out: lpNewFilePointer=0x0) returned 1 [0048.973] WriteFile (in: hFile=0x304, lpBuffer=0x328c020*, nNumberOfBytesToWrite=0x7c000, lpNumberOfBytesWritten=0x2f1f67c, lpOverlapped=0x0 | out: lpBuffer=0x328c020*, lpNumberOfBytesWritten=0x2f1f67c*=0x7c000, lpOverlapped=0x0) returned 1 [0048.975] FlushFileBuffers (hFile=0x304) returned 1 [0048.982] FlushFileBuffers (hFile=0x318) returned 1 [0048.985] CloseHandle (hObject=0x304) returned 1 [0048.985] CloseHandle (hObject=0x318) returned 1 [0048.998] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DBSAMPLE.MDB" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dbsample.mdb")) returned 1 [0049.003] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZMAIN.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzmain.accde"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0049.003] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x2f1f948 | out: lpFileSize=0x2f1f948*=9277440) returned 1 [0049.003] CloseHandle (hObject=0x318) returned 1 [0049.003] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZMAIN.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzmain.accde")) returned 0x220 [0049.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZMAIN.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzmain.accde")) returned 0x220 [0049.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZMAIN.ACCDE.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzmain.accde.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0049.004] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZMAIN.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzmain.accde"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0049.004] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f1f910 | out: lpNewFilePointer=0x0) returned 1 [0049.004] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f1f910 | out: lpNewFilePointer=0x0) returned 1 [0049.004] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZMAIN.ACCDE.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzmain.accde.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x304 [0049.004] ReadFile (in: hFile=0x318, lpBuffer=0x328c020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f1f924, lpOverlapped=0x0 | out: lpBuffer=0x328c020*, lpNumberOfBytesRead=0x2f1f924*=0x110100, lpOverlapped=0x0) returned 1 [0049.043] WriteFile (in: hFile=0x304, lpBuffer=0x328c020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x2f1f8fc, lpOverlapped=0x0 | out: lpBuffer=0x328c020*, lpNumberOfBytesWritten=0x2f1f8fc*=0x110100, lpOverlapped=0x0) returned 1 [0049.875] ReadFile (in: hFile=0x318, lpBuffer=0x328c020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f1f924, lpOverlapped=0x0 | out: lpBuffer=0x328c020*, lpNumberOfBytesRead=0x2f1f924*=0x110100, lpOverlapped=0x0) returned 1 [0051.650] WriteFile (in: hFile=0x304, lpBuffer=0x328c020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x2f1f8fc, lpOverlapped=0x0 | out: lpBuffer=0x328c020*, lpNumberOfBytesWritten=0x2f1f8fc*=0x110100, lpOverlapped=0x0) returned 1 [0051.669] ReadFile (in: hFile=0x318, lpBuffer=0x328c020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f1f924, lpOverlapped=0x0 | out: lpBuffer=0x328c020*, lpNumberOfBytesRead=0x2f1f924*=0x110100, lpOverlapped=0x0) returned 1 [0051.876] WriteFile (in: hFile=0x304, lpBuffer=0x328c020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x2f1f8fc, lpOverlapped=0x0 | out: lpBuffer=0x328c020*, lpNumberOfBytesWritten=0x2f1f8fc*=0x110100, lpOverlapped=0x0) returned 1 [0051.973] ReadFile (in: hFile=0x318, lpBuffer=0x328c020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f1f924, lpOverlapped=0x0 | out: lpBuffer=0x328c020*, lpNumberOfBytesRead=0x2f1f924*=0x110100, lpOverlapped=0x0) returned 1 [0052.009] WriteFile (in: hFile=0x304, lpBuffer=0x328c020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x2f1f8fc, lpOverlapped=0x0 | out: lpBuffer=0x328c020*, lpNumberOfBytesWritten=0x2f1f8fc*=0x110100, lpOverlapped=0x0) returned 1 [0052.256] ReadFile (in: hFile=0x318, lpBuffer=0x328c020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f1f924, lpOverlapped=0x0 | out: lpBuffer=0x328c020*, lpNumberOfBytesRead=0x2f1f924*=0x110100, lpOverlapped=0x0) returned 1 [0052.277] WriteFile (in: hFile=0x304, lpBuffer=0x328c020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x2f1f8fc, lpOverlapped=0x0 | out: lpBuffer=0x328c020*, lpNumberOfBytesWritten=0x2f1f8fc*=0x110100, lpOverlapped=0x0) returned 1 [0052.724] ReadFile (in: hFile=0x318, lpBuffer=0x328c020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f1f924, lpOverlapped=0x0 | out: lpBuffer=0x328c020*, lpNumberOfBytesRead=0x2f1f924*=0x110100, lpOverlapped=0x0) returned 1 [0052.745] WriteFile (in: hFile=0x304, lpBuffer=0x328c020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x2f1f8fc, lpOverlapped=0x0 | out: lpBuffer=0x328c020*, lpNumberOfBytesWritten=0x2f1f8fc*=0x110100, lpOverlapped=0x0) returned 1 [0053.009] ReadFile (in: hFile=0x318, lpBuffer=0x328c020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f1f924, lpOverlapped=0x0 | out: lpBuffer=0x328c020*, lpNumberOfBytesRead=0x2f1f924*=0x110100, lpOverlapped=0x0) returned 1 [0053.030] WriteFile (in: hFile=0x304, lpBuffer=0x328c020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x2f1f8fc, lpOverlapped=0x0 | out: lpBuffer=0x328c020*, lpNumberOfBytesWritten=0x2f1f8fc*=0x110100, lpOverlapped=0x0) returned 1 [0053.288] ReadFile (in: hFile=0x318, lpBuffer=0x328c020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f1f924, lpOverlapped=0x0 | out: lpBuffer=0x328c020*, lpNumberOfBytesRead=0x2f1f924*=0x110100, lpOverlapped=0x0) returned 1 [0053.310] WriteFile (in: hFile=0x304, lpBuffer=0x328c020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x2f1f8fc, lpOverlapped=0x0 | out: lpBuffer=0x328c020*, lpNumberOfBytesWritten=0x2f1f8fc*=0x110100, lpOverlapped=0x0) returned 1 [0053.591] ReadFile (in: hFile=0x318, lpBuffer=0x328c020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f1f924, lpOverlapped=0x0 | out: lpBuffer=0x328c020*, lpNumberOfBytesRead=0x2f1f924*=0x58800, lpOverlapped=0x0) returned 1 [0053.595] WriteFile (in: hFile=0x304, lpBuffer=0x328c020*, nNumberOfBytesToWrite=0x58810, lpNumberOfBytesWritten=0x2f1f8fc, lpOverlapped=0x0 | out: lpBuffer=0x328c020*, lpNumberOfBytesWritten=0x2f1f8fc*=0x58810, lpOverlapped=0x0) returned 1 [0053.601] WriteFile (in: hFile=0x304, lpBuffer=0x328c020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f1f8fc, lpOverlapped=0x0 | out: lpBuffer=0x328c020*, lpNumberOfBytesWritten=0x2f1f8fc*=0xf2, lpOverlapped=0x0) returned 1 [0053.601] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f1f670 | out: lpNewFilePointer=0x0) returned 1 [0053.601] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f1f670 | out: lpNewFilePointer=0x0) returned 1 [0053.601] WriteFile (in: hFile=0x318, lpBuffer=0x328c020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x2f1f67c, lpOverlapped=0x0 | out: lpBuffer=0x328c020*, lpNumberOfBytesWritten=0x2f1f67c*=0x110102, lpOverlapped=0x0) returned 1 [0054.114] WriteFile (in: hFile=0x318, lpBuffer=0x328c020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x2f1f67c, lpOverlapped=0x0 | out: lpBuffer=0x328c020*, lpNumberOfBytesWritten=0x2f1f67c*=0x110102, lpOverlapped=0x0) returned 1 [0054.128] WriteFile (in: hFile=0x318, lpBuffer=0x328c020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x2f1f67c, lpOverlapped=0x0 | out: lpBuffer=0x328c020*, lpNumberOfBytesWritten=0x2f1f67c*=0x110102, lpOverlapped=0x0) returned 1 [0054.141] WriteFile (in: hFile=0x318, lpBuffer=0x328c020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x2f1f67c, lpOverlapped=0x0 | out: lpBuffer=0x328c020*, lpNumberOfBytesWritten=0x2f1f67c*=0x110102, lpOverlapped=0x0) returned 1 [0054.381] WriteFile (in: hFile=0x318, lpBuffer=0x328c020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x2f1f67c, lpOverlapped=0x0 | out: lpBuffer=0x328c020*, lpNumberOfBytesWritten=0x2f1f67c*=0x110102, lpOverlapped=0x0) returned 1 [0054.394] WriteFile (in: hFile=0x318, lpBuffer=0x328c020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x2f1f67c, lpOverlapped=0x0 | out: lpBuffer=0x328c020*, lpNumberOfBytesWritten=0x2f1f67c*=0x110102, lpOverlapped=0x0) returned 1 [0054.406] WriteFile (in: hFile=0x318, lpBuffer=0x328c020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x2f1f67c, lpOverlapped=0x0 | out: lpBuffer=0x328c020*, lpNumberOfBytesWritten=0x2f1f67c*=0x110102, lpOverlapped=0x0) returned 1 [0054.589] WriteFile (in: hFile=0x318, lpBuffer=0x328c020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x2f1f67c, lpOverlapped=0x0 | out: lpBuffer=0x328c020*, lpNumberOfBytesWritten=0x2f1f67c*=0x110102, lpOverlapped=0x0) returned 1 [0054.600] WriteFile (in: hFile=0x318, lpBuffer=0x328c020*, nNumberOfBytesToWrite=0x587f0, lpNumberOfBytesWritten=0x2f1f67c, lpOverlapped=0x0 | out: lpBuffer=0x328c020*, lpNumberOfBytesWritten=0x2f1f67c*=0x587f0, lpOverlapped=0x0) returned 1 [0054.601] FlushFileBuffers (hFile=0x318) returned 1 [0055.627] FlushFileBuffers (hFile=0x304) returned 1 [0056.107] CloseHandle (hObject=0x318) returned 1 [0058.239] CloseHandle (hObject=0x304) returned 1 [0060.612] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZMAIN.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzmain.accde")) returned 1 [0060.614] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0061.022] ResetEvent (hEvent=0x2d4) returned 1 [0061.022] SetEvent (hEvent=0x2d8) returned 1 [0061.022] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\configuration.sqlite" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\configuration\\configuration.sqlite"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x30c [0061.024] GetFileSizeEx (in: hFile=0x30c, lpFileSize=0x2f1f948 | out: lpFileSize=0x2f1f948*=88064) returned 1 [0061.024] CloseHandle (hObject=0x30c) returned 1 [0061.024] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\configuration.sqlite" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\configuration\\configuration.sqlite")) returned 0x20 [0061.024] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\configuration.sqlite" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\configuration\\configuration.sqlite")) returned 0x20 [0061.024] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\configuration.sqlite.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\configuration\\configuration.sqlite.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0061.024] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\configuration.sqlite" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\configuration\\configuration.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0061.024] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0061.328] ResetEvent (hEvent=0x2d4) returned 1 [0061.328] SetEvent (hEvent=0x2d8) returned 1 [0061.328] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\configuration.sqlite" (normalized: "c:\\program files\\windowsapps\\microsoft.bingnews_4.6.169.0_x86__8wekyb3d8bbwe\\configuration\\configuration.sqlite"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0061.328] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x2f1f948 | out: lpFileSize=0x2f1f948*=110592) returned 1 [0061.328] CloseHandle (hObject=0x304) returned 1 [0061.328] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\configuration.sqlite" (normalized: "c:\\program files\\windowsapps\\microsoft.bingnews_4.6.169.0_x86__8wekyb3d8bbwe\\configuration\\configuration.sqlite")) returned 0x20 [0061.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\configuration.sqlite" (normalized: "c:\\program files\\windowsapps\\microsoft.bingnews_4.6.169.0_x86__8wekyb3d8bbwe\\configuration\\configuration.sqlite")) returned 0x20 [0061.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\configuration.sqlite.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\windowsapps\\microsoft.bingnews_4.6.169.0_x86__8wekyb3d8bbwe\\configuration\\configuration.sqlite.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0061.329] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\configuration.sqlite" (normalized: "c:\\program files\\windowsapps\\microsoft.bingnews_4.6.169.0_x86__8wekyb3d8bbwe\\configuration\\configuration.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0061.329] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0061.371] ResetEvent (hEvent=0x2d4) returned 1 [0061.371] SetEvent (hEvent=0x2d8) returned 1 [0061.371] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\configuration.sqlite" (normalized: "c:\\program files\\windowsapps\\microsoft.bingsports_4.6.169.0_x86__8wekyb3d8bbwe\\configuration\\configuration.sqlite"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0061.371] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x2f1f948 | out: lpFileSize=0x2f1f948*=146432) returned 1 [0061.371] CloseHandle (hObject=0x304) returned 1 [0061.371] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\configuration.sqlite" (normalized: "c:\\program files\\windowsapps\\microsoft.bingsports_4.6.169.0_x86__8wekyb3d8bbwe\\configuration\\configuration.sqlite")) returned 0x20 [0061.371] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\configuration.sqlite" (normalized: "c:\\program files\\windowsapps\\microsoft.bingsports_4.6.169.0_x86__8wekyb3d8bbwe\\configuration\\configuration.sqlite")) returned 0x20 [0061.371] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\configuration.sqlite.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\windowsapps\\microsoft.bingsports_4.6.169.0_x86__8wekyb3d8bbwe\\configuration\\configuration.sqlite.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0061.371] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\configuration.sqlite" (normalized: "c:\\program files\\windowsapps\\microsoft.bingsports_4.6.169.0_x86__8wekyb3d8bbwe\\configuration\\configuration.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0061.372] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) returned 0x0 [0061.734] ResetEvent (hEvent=0x2d4) returned 1 [0061.734] SetEvent (hEvent=0x2d8) returned 1 [0061.734] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Configuration\\configuration.sqlite" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\configuration\\configuration.sqlite"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0061.735] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x2f1f948 | out: lpFileSize=0x2f1f948*=147456) returned 1 [0061.735] CloseHandle (hObject=0x304) returned 1 [0061.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Configuration\\configuration.sqlite" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\configuration\\configuration.sqlite")) returned 0x20 [0061.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Configuration\\configuration.sqlite" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\configuration\\configuration.sqlite")) returned 0x20 [0061.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Configuration\\configuration.sqlite.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\configuration\\configuration.sqlite.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0061.736] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Configuration\\configuration.sqlite" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\configuration\\configuration.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0061.736] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xffffffff) Thread: id = 32 os_tid = 0xcdc Thread: id = 33 os_tid = 0xb98 Process: id = "2" image_name = "shaofao.exe" filename = "c:\\users\\fd1hvy\\desktop\\shaofao.exe" page_root = "0xe6b1000" os_pid = "0xf68" os_integrity_level = "0x2000" os_privileges = "0x40800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0xd60" cmd_line = "\"C:\\Users\\FD1HVy\\Desktop\\shaofao.exe\"" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103c1" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 3 os_tid = 0xf44 [0035.152] GetProcessHeap () returned 0x570000 [0035.152] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x30) returned 0x5865d0 [0035.152] GetProcessHeap () returned 0x570000 [0035.152] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x3400) returned 0x586788 [0035.155] GetProcessHeap () returned 0x570000 [0035.155] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x204) returned 0x589b90 [0035.155] GetProcessHeap () returned 0x570000 [0035.155] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x57a9b8 [0035.155] GetTickCount () returned 0x1149627 [0035.156] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x4ff9e8 | out: lpWSAData=0x4ff9e8) returned 0 [0035.160] GetProcessHeap () returned 0x570000 [0035.160] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x1c) returned 0x573fc0 [0035.160] GetProcessHeap () returned 0x570000 [0035.160] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x1c) returned 0x574298 [0035.160] GetVersion () returned 0x23f00206 [0035.160] GetCurrentProcess () returned 0xffffffff [0035.160] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x4ff93c | out: TokenHandle=0x4ff93c*=0x1ec) returned 1 [0035.160] GetTokenInformation (in: TokenHandle=0x1ec, TokenInformationClass=0x14, TokenInformation=0x4ff934, TokenInformationLength=0x4, ReturnLength=0x4ff938 | out: TokenInformation=0x4ff934, ReturnLength=0x4ff938) returned 1 [0035.160] CloseHandle (hObject=0x1ec) returned 1 [0035.160] GetProcessHeap () returned 0x570000 [0035.160] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5743f8 [0035.160] GetProcessHeap () returned 0x570000 [0035.160] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1e) returned 0x572b10 [0035.160] GetProcessHeap () returned 0x570000 [0035.160] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x1e) returned 0x570568 [0035.160] GetProcessHeap () returned 0x570000 [0035.160] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x90) returned 0x578788 [0035.160] GetProcessHeap () returned 0x570000 [0035.160] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x578788 | out: hHeap=0x570000) returned 1 [0035.160] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x572b10, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0035.160] GetProcessHeap () returned 0x570000 [0035.160] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x570568 | out: hHeap=0x570000) returned 1 [0035.160] GetProcessHeap () returned 0x570000 [0035.160] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5743f8 | out: hHeap=0x570000) returned 1 [0035.160] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x4ff8dc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x4ff8dc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0035.161] GetProcessHeap () returned 0x570000 [0035.161] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x572b10 | out: hHeap=0x570000) returned 1 [0035.161] GetProcessHeap () returned 0x570000 [0035.161] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x40) returned 0x57de10 [0035.161] GetProcessHeap () returned 0x570000 [0035.161] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x3a) returned 0x57e050 [0035.161] GetProcessHeap () returned 0x570000 [0035.161] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x57e050, Size=0x72) returned 0x572db0 [0035.161] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x0 [0035.161] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000000") returned 0x1ec [0035.161] WaitForSingleObject (hHandle=0x1ec, dwMilliseconds=0x0) returned 0x0 [0035.161] GetProcessHeap () returned 0x570000 [0035.161] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57de10 | out: hHeap=0x570000) returned 1 [0035.161] GetProcessHeap () returned 0x570000 [0035.161] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x572db0 | out: hHeap=0x570000) returned 1 [0035.161] GetProcessHeap () returned 0x570000 [0035.161] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x572b10 [0035.161] GetProcessHeap () returned 0x570000 [0035.161] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1e) returned 0x5743f8 [0035.161] GetProcessHeap () returned 0x570000 [0035.161] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x1e) returned 0x570568 [0035.161] GetProcessHeap () returned 0x570000 [0035.161] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x90) returned 0x578788 [0035.161] GetProcessHeap () returned 0x570000 [0035.161] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x578788 | out: hHeap=0x570000) returned 1 [0035.161] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x5743f8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0035.161] GetProcessHeap () returned 0x570000 [0035.161] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x570568 | out: hHeap=0x570000) returned 1 [0035.161] GetProcessHeap () returned 0x570000 [0035.161] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x572b10 | out: hHeap=0x570000) returned 1 [0035.161] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x4ff8c4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x4ff8c4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0035.162] GetProcessHeap () returned 0x570000 [0035.162] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5743f8 | out: hHeap=0x570000) returned 1 [0035.162] GetProcessHeap () returned 0x570000 [0035.162] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x40) returned 0x57de10 [0035.162] GetProcessHeap () returned 0x570000 [0035.162] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x3a) returned 0x57e128 [0035.162] GetProcessHeap () returned 0x570000 [0035.162] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x57e128, Size=0x72) returned 0x58e8a8 [0035.162] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x1f0 [0035.162] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0x0) returned 0x102 [0035.162] CloseHandle (hObject=0x1f0) returned 1 [0035.162] GetProcessHeap () returned 0x570000 [0035.162] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57de10 | out: hHeap=0x570000) returned 1 [0035.162] GetProcessHeap () returned 0x570000 [0035.162] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e8a8 | out: hHeap=0x570000) returned 1 [0035.162] GetProcessHeap () returned 0x570000 [0035.162] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x60) returned 0x572db0 [0035.162] GetProcessHeap () returned 0x570000 [0035.162] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5743f8 [0035.162] GetProcessHeap () returned 0x570000 [0035.162] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1e) returned 0x572b10 [0035.162] GetProcessHeap () returned 0x570000 [0035.162] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x1e) returned 0x570568 [0035.162] GetProcessHeap () returned 0x570000 [0035.162] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x90) returned 0x578788 [0035.162] GetProcessHeap () returned 0x570000 [0035.162] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x578788 | out: hHeap=0x570000) returned 1 [0035.162] ExpandEnvironmentStringsW (in: lpSrc="%localappdata%", lpDst=0x572b10, nSize=0xf | out: lpDst="") returned 0x1e [0035.162] GetProcessHeap () returned 0x570000 [0035.162] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x570568 | out: hHeap=0x570000) returned 1 [0035.163] GetProcessHeap () returned 0x570000 [0035.163] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x572b10, Size=0x3a) returned 0x574850 [0035.163] GetProcessHeap () returned 0x570000 [0035.163] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x3a) returned 0x57dd38 [0035.163] GetProcessHeap () returned 0x570000 [0035.163] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x90) returned 0x578788 [0035.163] GetProcessHeap () returned 0x570000 [0035.163] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x578788 | out: hHeap=0x570000) returned 1 [0035.163] ExpandEnvironmentStringsW (in: lpSrc="%localappdata%", lpDst=0x574850, nSize=0x1d | out: lpDst="") returned 0x1e [0035.163] GetProcessHeap () returned 0x570000 [0035.163] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57dd38 | out: hHeap=0x570000) returned 1 [0035.163] GetProcessHeap () returned 0x570000 [0035.163] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x574850, Size=0x72) returned 0x574438 [0035.163] GetProcessHeap () returned 0x570000 [0035.163] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x72) returned 0x58f128 [0035.163] GetProcessHeap () returned 0x570000 [0035.163] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x90) returned 0x578788 [0035.163] GetProcessHeap () returned 0x570000 [0035.163] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x578788 | out: hHeap=0x570000) returned 1 [0035.163] ExpandEnvironmentStringsW (in: lpSrc="%localappdata%", lpDst=0x574438, nSize=0x39 | out: lpDst="C:\\Users\\FD1HVy\\AppData\\Local") returned 0x1e [0035.163] GetProcessHeap () returned 0x570000 [0035.163] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f128 | out: hHeap=0x570000) returned 1 [0035.163] GetProcessHeap () returned 0x570000 [0035.163] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5743f8 | out: hHeap=0x570000) returned 1 [0035.163] GetProcessHeap () returned 0x570000 [0035.163] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x40) returned 0x57da68 [0035.163] GetProcessHeap () returned 0x570000 [0035.163] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x3e) returned 0x57dbd0 [0035.163] GetProcessHeap () returned 0x570000 [0035.163] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x3e) returned 0x57e050 [0035.164] GetProcessHeap () returned 0x570000 [0035.164] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x90) returned 0x578788 [0035.164] GetProcessHeap () returned 0x570000 [0035.164] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x10) returned 0x57a9e8 [0035.164] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x4ff81c | out: phkResult=0x4ff81c*=0x1f4) returned 0x0 [0035.164] RegQueryValueExW (in: hKey=0x1f4, lpValueName="Startup", lpReserved=0x0, lpType=0x4ff818, lpData=0x57e050, lpcbData=0x4ff820*=0x3e | out: lpType=0x4ff818*=0x2, lpData=0x57e050*=0x47, lpcbData=0x4ff820*=0x98) returned 0xea [0035.164] RegCloseKey (hKey=0x1f4) returned 0x0 [0035.164] GetProcessHeap () returned 0x570000 [0035.164] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57a9e8 | out: hHeap=0x570000) returned 1 [0035.164] GetProcessHeap () returned 0x570000 [0035.164] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x578788 | out: hHeap=0x570000) returned 1 [0035.164] GetProcessHeap () returned 0x570000 [0035.165] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57e050 | out: hHeap=0x570000) returned 1 [0035.165] GetProcessHeap () returned 0x570000 [0035.165] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x57dbd0, Size=0x7a) returned 0x578788 [0035.165] GetProcessHeap () returned 0x570000 [0035.165] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x7a) returned 0x57acb8 [0035.165] GetProcessHeap () returned 0x570000 [0035.165] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x90) returned 0x57b418 [0035.165] GetProcessHeap () returned 0x570000 [0035.165] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x10) returned 0x57a9e8 [0035.165] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x4ff81c | out: phkResult=0x4ff81c*=0x1f4) returned 0x0 [0035.165] RegQueryValueExW (in: hKey=0x1f4, lpValueName="Startup", lpReserved=0x0, lpType=0x4ff818, lpData=0x57acb8, lpcbData=0x4ff820*=0x7a | out: lpType=0x4ff818*=0x2, lpData=0x57acb8*=0x18, lpcbData=0x4ff820*=0x98) returned 0xea [0035.165] RegCloseKey (hKey=0x1f4) returned 0x0 [0035.165] GetProcessHeap () returned 0x570000 [0035.165] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57a9e8 | out: hHeap=0x570000) returned 1 [0035.165] GetProcessHeap () returned 0x570000 [0035.165] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b418 | out: hHeap=0x570000) returned 1 [0035.165] GetProcessHeap () returned 0x570000 [0035.165] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57acb8 | out: hHeap=0x570000) returned 1 [0035.165] GetProcessHeap () returned 0x570000 [0035.165] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x578788, Size=0xf2) returned 0x578f50 [0035.165] GetProcessHeap () returned 0x570000 [0035.165] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xf2) returned 0x578d38 [0035.165] GetProcessHeap () returned 0x570000 [0035.165] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x90) returned 0x578788 [0035.165] GetProcessHeap () returned 0x570000 [0035.165] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x10) returned 0x57a9e8 [0035.165] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x4ff81c | out: phkResult=0x4ff81c*=0x1f4) returned 0x0 [0035.165] RegQueryValueExW (in: hKey=0x1f4, lpValueName="Startup", lpReserved=0x0, lpType=0x4ff818, lpData=0x578d38, lpcbData=0x4ff820*=0xf2 | out: lpType=0x4ff818*=0x2, lpData="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x4ff820*=0x98) returned 0x0 [0035.165] RegCloseKey (hKey=0x1f4) returned 0x0 [0035.166] GetProcessHeap () returned 0x570000 [0035.166] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57a9e8 | out: hHeap=0x570000) returned 1 [0035.166] GetProcessHeap () returned 0x570000 [0035.166] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1e) returned 0x58f380 [0035.166] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x4ff81c | out: phkResult=0x4ff81c*=0x1f4) returned 0x0 [0035.166] RegQueryValueExW (in: hKey=0x1f4, lpValueName="Common Startup", lpReserved=0x0, lpType=0x4ff818, lpData=0x578dd0, lpcbData=0x4ff820*=0x5a | out: lpType=0x4ff818*=0x0, lpData=0x578dd0*=0x1a, lpcbData=0x4ff820*=0x5a) returned 0x2 [0035.166] RegCloseKey (hKey=0x1f4) returned 0x0 [0035.166] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x4ff830 | out: phkResult=0x4ff830*=0x1f4) returned 0x0 [0035.166] RegQueryValueExW (in: hKey=0x1f4, lpValueName="Common Startup", lpReserved=0x0, lpType=0x4ff82c, lpData=0x578dd0, lpcbData=0x4ff834*=0x5a | out: lpType=0x4ff82c*=0x2, lpData=0x578dd0*=0x1a, lpcbData=0x4ff834*=0x78) returned 0xea [0035.166] RegCloseKey (hKey=0x1f4) returned 0x0 [0035.166] GetProcessHeap () returned 0x570000 [0035.166] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f380 | out: hHeap=0x570000) returned 1 [0035.166] GetProcessHeap () returned 0x570000 [0035.166] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x578788 | out: hHeap=0x570000) returned 1 [0035.166] GetProcessHeap () returned 0x570000 [0035.166] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x578d38 | out: hHeap=0x570000) returned 1 [0035.166] GetProcessHeap () returned 0x570000 [0035.166] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x578f50, Size=0x1e2) returned 0x58f710 [0035.166] GetProcessHeap () returned 0x570000 [0035.166] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x1e2) returned 0x58f900 [0035.166] GetProcessHeap () returned 0x570000 [0035.166] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x90) returned 0x578788 [0035.166] GetProcessHeap () returned 0x570000 [0035.166] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x10) returned 0x57a9e8 [0035.166] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x4ff81c | out: phkResult=0x4ff81c*=0x1f4) returned 0x0 [0035.166] RegQueryValueExW (in: hKey=0x1f4, lpValueName="Startup", lpReserved=0x0, lpType=0x4ff818, lpData=0x58f900, lpcbData=0x4ff820*=0x1e2 | out: lpType=0x4ff818*=0x2, lpData="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x4ff820*=0x98) returned 0x0 [0035.166] RegCloseKey (hKey=0x1f4) returned 0x0 [0035.166] GetProcessHeap () returned 0x570000 [0035.166] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57a9e8 | out: hHeap=0x570000) returned 1 [0035.166] GetProcessHeap () returned 0x570000 [0035.166] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1e) returned 0x58f3a8 [0035.166] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x4ff81c | out: phkResult=0x4ff81c*=0x1f4) returned 0x0 [0035.167] RegQueryValueExW (in: hKey=0x1f4, lpValueName="Common Startup", lpReserved=0x0, lpType=0x4ff818, lpData=0x58f998, lpcbData=0x4ff820*=0x14a | out: lpType=0x4ff818*=0x0, lpData=0x58f998*=0x0, lpcbData=0x4ff820*=0x14a) returned 0x2 [0035.167] RegCloseKey (hKey=0x1f4) returned 0x0 [0035.167] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x4ff830 | out: phkResult=0x4ff830*=0x1f4) returned 0x0 [0035.167] RegQueryValueExW (in: hKey=0x1f4, lpValueName="Common Startup", lpReserved=0x0, lpType=0x4ff82c, lpData=0x58f998, lpcbData=0x4ff834*=0x14a | out: lpType=0x4ff82c*=0x2, lpData="%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x4ff834*=0x78) returned 0x0 [0035.167] RegCloseKey (hKey=0x1f4) returned 0x0 [0035.167] GetProcessHeap () returned 0x570000 [0035.167] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f3a8 | out: hHeap=0x570000) returned 1 [0035.167] GetProcessHeap () returned 0x570000 [0035.167] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x578788 | out: hHeap=0x570000) returned 1 [0035.167] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup;%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpDst=0x58f710, nSize=0xf1 | out: lpDst="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup;C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned 0x8b [0035.167] GetProcessHeap () returned 0x570000 [0035.167] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f900 | out: hHeap=0x570000) returned 1 [0035.167] GetProcessHeap () returned 0x570000 [0035.167] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57da68 | out: hHeap=0x570000) returned 1 [0035.167] GetProcessHeap () returned 0x570000 [0035.167] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20a) returned 0x58f900 [0035.167] GetProcessHeap () returned 0x570000 [0035.167] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20a) returned 0x58fb18 [0035.167] GetProcessHeap () returned 0x570000 [0035.167] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20a) returned 0x58fd30 [0035.167] GetProcessHeap () returned 0x570000 [0035.167] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20a) returned 0x58ff48 [0035.167] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x58f900, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\shaofao.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\shaofao.exe")) returned 0x23 [0035.167] GetProcessHeap () returned 0x570000 [0035.167] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20a) returned 0x590160 [0035.167] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x590160, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\shaofao.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\shaofao.exe")) returned 0x23 [0035.167] GetProcessHeap () returned 0x570000 [0035.167] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590160 | out: hHeap=0x570000) returned 1 [0035.167] GetProcessHeap () returned 0x570000 [0035.167] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20a) returned 0x590160 [0035.167] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x590160, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\shaofao.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\shaofao.exe")) returned 0x23 [0035.167] GetProcessHeap () returned 0x570000 [0035.167] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590160 | out: hHeap=0x570000) returned 1 [0035.167] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\shaofao.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\shaofao.exe"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\shaofao.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\shaofao.exe"), bFailIfExists=0) returned 1 [0035.351] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x20106, phkResult=0x4ff918 | out: phkResult=0x4ff918*=0x1f4) returned 0x0 [0035.356] RegSetValueExW (hKey=0x1f4, lpValueName="shaofao", Reserved=0x0, dwType=0x1, lpData=0x58fb18, cbData=0x52) returned 0x5 [0035.356] RegCloseKey (hKey=0x1f4) returned 0x0 [0035.356] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x20106, phkResult=0x4ff914 | out: phkResult=0x4ff914*=0x1f4) returned 0x0 [0035.356] RegSetValueExW (in: hKey=0x1f4, lpValueName="shaofao", Reserved=0x0, dwType=0x1, lpData="C:\\Users\\FD1HVy\\AppData\\Local\\shaofao.exe", cbData=0x52 | out: lpData="C:\\Users\\FD1HVy\\AppData\\Local\\shaofao.exe") returned 0x0 [0035.368] RegCloseKey (hKey=0x1f4) returned 0x0 [0035.368] GetProcessHeap () returned 0x570000 [0035.368] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x118) returned 0x57a680 [0035.368] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\shaofao.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\shaofao.exe"), lpNewFileName="c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\shaofao.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\shaofao.exe"), bFailIfExists=1) returned 1 [0035.393] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\shaofao.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\shaofao.exe"), lpNewFileName="c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\shaofao.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\shaofao.exe"), bFailIfExists=1) returned 0 [0035.395] GetProcessHeap () returned 0x570000 [0035.395] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57a680 | out: hHeap=0x570000) returned 1 [0035.395] GetProcessHeap () returned 0x570000 [0035.395] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f900 | out: hHeap=0x570000) returned 1 [0035.395] GetProcessHeap () returned 0x570000 [0035.395] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58fb18 | out: hHeap=0x570000) returned 1 [0035.395] GetProcessHeap () returned 0x570000 [0035.395] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58fd30 | out: hHeap=0x570000) returned 1 [0035.395] GetProcessHeap () returned 0x570000 [0035.395] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ff48 | out: hHeap=0x570000) returned 1 [0035.395] GetProcessHeap () returned 0x570000 [0035.395] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x572db0 | out: hHeap=0x570000) returned 1 [0035.395] GetProcessHeap () returned 0x570000 [0035.395] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x574438 | out: hHeap=0x570000) returned 1 [0035.395] GetProcessHeap () returned 0x570000 [0035.395] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f710 | out: hHeap=0x570000) returned 1 [0035.395] GetProcessHeap () returned 0x570000 [0035.395] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58f6c8 [0035.395] GetProcessHeap () returned 0x570000 [0035.395] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1e) returned 0x58f4e8 [0035.395] GetProcessHeap () returned 0x570000 [0035.395] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x1e) returned 0x58f330 [0035.395] GetProcessHeap () returned 0x570000 [0035.395] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x90) returned 0x578788 [0035.395] GetProcessHeap () returned 0x570000 [0035.395] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x578788 | out: hHeap=0x570000) returned 1 [0035.395] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x58f4e8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0035.395] GetProcessHeap () returned 0x570000 [0035.395] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f330 | out: hHeap=0x570000) returned 1 [0035.395] GetProcessHeap () returned 0x570000 [0035.395] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f6c8 | out: hHeap=0x570000) returned 1 [0035.396] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x4ff934, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x4ff934*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0035.396] GetProcessHeap () returned 0x570000 [0035.396] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f4e8 | out: hHeap=0x570000) returned 1 [0035.396] GetProcessHeap () returned 0x570000 [0035.396] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x28) returned 0x580368 [0035.396] GetProcessHeap () returned 0x570000 [0035.396] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x57abf8 [0035.396] GetProcessHeap () returned 0x570000 [0035.396] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x60) returned 0x572db0 [0035.396] GetProcessHeap () returned 0x570000 [0035.396] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x60) returned 0x574438 [0035.396] GetProcessHeap () returned 0x570000 [0035.396] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x574438, Size=0xbe) returned 0x57b418 [0035.396] GetProcessHeap () returned 0x570000 [0035.396] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x578358 [0035.396] GetProcessHeap () returned 0x570000 [0035.396] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x180) returned 0x57a458 [0035.396] GetProcessHeap () returned 0x570000 [0035.396] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x250) returned 0x58f710 [0035.396] GetProcessHeap () returned 0x570000 [0035.396] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x90) returned 0x578788 [0035.396] GetProcessHeap () returned 0x570000 [0035.396] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x84) returned 0x574438 [0035.396] GetProcessHeap () returned 0x570000 [0035.396] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x84) returned 0x57acb8 [0035.396] GetProcessHeap () returned 0x570000 [0035.396] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x90) returned 0x57b2e8 [0035.396] GetProcessHeap () returned 0x570000 [0035.396] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b2e8 | out: hHeap=0x570000) returned 1 [0035.396] ExpandEnvironmentStringsW (in: lpSrc="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys", lpDst=0x574438, nSize=0x42 | out: lpDst="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys") returned 0x42 [0035.396] GetProcessHeap () returned 0x570000 [0035.396] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57acb8 | out: hHeap=0x570000) returned 1 [0035.396] GetProcessHeap () returned 0x570000 [0035.396] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x578788 | out: hHeap=0x570000) returned 1 [0035.396] GetProcessHeap () returned 0x570000 [0035.397] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xc0) returned 0x57b2e8 [0035.397] GetProcessHeap () returned 0x570000 [0035.397] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb2) returned 0x57a1f8 [0035.397] GetProcessHeap () returned 0x570000 [0035.397] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xb2) returned 0x57a0b8 [0035.397] GetProcessHeap () returned 0x570000 [0035.397] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x90) returned 0x578788 [0035.397] GetProcessHeap () returned 0x570000 [0035.397] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x578788 | out: hHeap=0x570000) returned 1 [0035.397] ExpandEnvironmentStringsW (in: lpSrc="C:\\Windows;C:\\ProgramData\\microsoft\\windows\\caches;C:\\Users\\WR\\microsoft\\windows\\caches;", lpDst=0x57a1f8, nSize=0x59 | out: lpDst="C:\\Windows;C:\\ProgramData\\microsoft\\windows\\caches;C:\\Users\\WR\\microsoft\\windows\\caches;") returned 0x59 [0035.397] GetProcessHeap () returned 0x570000 [0035.397] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57a0b8 | out: hHeap=0x570000) returned 1 [0035.397] GetProcessHeap () returned 0x570000 [0035.397] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b2e8 | out: hHeap=0x570000) returned 1 [0035.397] GetProcessHeap () returned 0x570000 [0035.397] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20a) returned 0x58f968 [0035.397] GetProcessHeap () returned 0x570000 [0035.397] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20a) returned 0x58fb80 [0035.397] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x58fb80, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\shaofao.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\shaofao.exe")) returned 0x23 [0035.397] GetProcessHeap () returned 0x570000 [0035.397] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58fb80 | out: hHeap=0x570000) returned 1 [0035.397] GetProcessHeap () returned 0x570000 [0035.397] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x174) returned 0x58fb80 [0035.397] GetProcessHeap () returned 0x570000 [0035.397] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x58fb80, Size=0x3c2) returned 0x58fb80 [0035.397] GetProcessHeap () returned 0x570000 [0035.397] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x86) returned 0x578788 [0035.397] GetProcessHeap () returned 0x570000 [0035.397] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x578788, Size=0x9e) returned 0x578788 [0035.397] GetProcessHeap () returned 0x570000 [0035.397] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xb4) returned 0x57b2e8 [0035.397] GetProcessHeap () returned 0x570000 [0035.397] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f968 | out: hHeap=0x570000) returned 1 [0035.397] GetProcessHeap () returned 0x570000 [0035.397] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57a458 | out: hHeap=0x570000) returned 1 [0035.397] GetProcessHeap () returned 0x570000 [0035.397] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f710 | out: hHeap=0x570000) returned 1 [0035.397] GetProcessHeap () returned 0x570000 [0035.397] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x574438 | out: hHeap=0x570000) returned 1 [0035.398] GetProcessHeap () returned 0x570000 [0035.398] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57a1f8 | out: hHeap=0x570000) returned 1 [0035.398] GetProcessHeap () returned 0x570000 [0035.398] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57abf8 | out: hHeap=0x570000) returned 1 [0035.398] GetProcessHeap () returned 0x570000 [0035.398] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x572db0 | out: hHeap=0x570000) returned 1 [0035.398] GetProcessHeap () returned 0x570000 [0035.398] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58f448 [0035.398] GetProcessHeap () returned 0x570000 [0035.398] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1e) returned 0x58f4e8 [0035.398] GetProcessHeap () returned 0x570000 [0035.398] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x1e) returned 0x58f6c8 [0035.398] GetProcessHeap () returned 0x570000 [0035.398] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x90) returned 0x57acb8 [0035.398] GetProcessHeap () returned 0x570000 [0035.398] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57acb8 | out: hHeap=0x570000) returned 1 [0035.398] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x58f4e8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0035.398] GetProcessHeap () returned 0x570000 [0035.398] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f6c8 | out: hHeap=0x570000) returned 1 [0035.398] GetProcessHeap () returned 0x570000 [0035.398] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f448 | out: hHeap=0x570000) returned 1 [0035.398] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x4ff934, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x4ff934*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0035.398] GetProcessHeap () returned 0x570000 [0035.398] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f4e8 | out: hHeap=0x570000) returned 1 [0035.398] GetProcessHeap () returned 0x570000 [0035.398] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x28) returned 0x5805a8 [0035.398] GetProcessHeap () returned 0x570000 [0035.398] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x578298 [0035.398] GetProcessHeap () returned 0x570000 [0035.398] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x60) returned 0x572db0 [0035.398] GetProcessHeap () returned 0x570000 [0035.398] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x60) returned 0x574438 [0035.398] GetProcessHeap () returned 0x570000 [0035.398] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x574438, Size=0xbe) returned 0x57a1f8 [0035.398] GetProcessHeap () returned 0x570000 [0035.399] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x5781a8 [0035.399] GetProcessHeap () returned 0x570000 [0035.399] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x180) returned 0x57a458 [0035.399] GetProcessHeap () returned 0x570000 [0035.399] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x250) returned 0x58f710 [0035.399] GetProcessHeap () returned 0x570000 [0035.399] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x90) returned 0x57acb8 [0035.399] GetProcessHeap () returned 0x570000 [0035.399] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x84) returned 0x574438 [0035.399] GetProcessHeap () returned 0x570000 [0035.399] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x84) returned 0x57a0b8 [0035.399] GetProcessHeap () returned 0x570000 [0035.399] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x90) returned 0x57b1a0 [0035.399] GetProcessHeap () returned 0x570000 [0035.399] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b1a0 | out: hHeap=0x570000) returned 1 [0035.399] ExpandEnvironmentStringsW (in: lpSrc="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys", lpDst=0x574438, nSize=0x42 | out: lpDst="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys") returned 0x42 [0035.399] GetProcessHeap () returned 0x570000 [0035.399] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57a0b8 | out: hHeap=0x570000) returned 1 [0035.399] GetProcessHeap () returned 0x570000 [0035.399] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57acb8 | out: hHeap=0x570000) returned 1 [0035.399] GetProcessHeap () returned 0x570000 [0035.399] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xc0) returned 0x57a0b8 [0035.399] GetProcessHeap () returned 0x570000 [0035.399] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb2) returned 0x57b1a0 [0035.399] GetProcessHeap () returned 0x570000 [0035.399] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xb2) returned 0x573d40 [0035.399] GetProcessHeap () returned 0x570000 [0035.399] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x90) returned 0x57acb8 [0035.399] GetProcessHeap () returned 0x570000 [0035.399] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57acb8 | out: hHeap=0x570000) returned 1 [0035.399] ExpandEnvironmentStringsW (in: lpSrc="C:\\Windows;C:\\ProgramData\\microsoft\\windows\\caches;C:\\Users\\WR\\microsoft\\windows\\caches;", lpDst=0x57b1a0, nSize=0x59 | out: lpDst="C:\\Windows;C:\\ProgramData\\microsoft\\windows\\caches;C:\\Users\\WR\\microsoft\\windows\\caches;") returned 0x59 [0035.399] GetProcessHeap () returned 0x570000 [0035.399] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x573d40 | out: hHeap=0x570000) returned 1 [0035.399] GetProcessHeap () returned 0x570000 [0035.399] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57a0b8 | out: hHeap=0x570000) returned 1 [0035.399] GetProcessHeap () returned 0x570000 [0035.399] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20a) returned 0x58f968 [0035.399] GetProcessHeap () returned 0x570000 [0035.399] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20a) returned 0x58ff50 [0035.399] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x58ff50, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\shaofao.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\shaofao.exe")) returned 0x23 [0035.399] GetProcessHeap () returned 0x570000 [0035.400] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ff50 | out: hHeap=0x570000) returned 1 [0035.400] GetProcessHeap () returned 0x570000 [0035.400] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x174) returned 0x58ff50 [0035.400] GetProcessHeap () returned 0x570000 [0035.400] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x252) returned 0x5900d0 [0035.400] GetProcessHeap () returned 0x570000 [0035.400] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x86) returned 0x57acb8 [0035.400] GetProcessHeap () returned 0x570000 [0035.400] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x57acb8, Size=0x9e) returned 0x57acb8 [0035.400] GetProcessHeap () returned 0x570000 [0035.400] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xb4) returned 0x57a0b8 [0035.400] GetProcessHeap () returned 0x570000 [0035.400] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f968 | out: hHeap=0x570000) returned 1 [0035.400] GetProcessHeap () returned 0x570000 [0035.400] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57a458 | out: hHeap=0x570000) returned 1 [0035.400] GetProcessHeap () returned 0x570000 [0035.400] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f710 | out: hHeap=0x570000) returned 1 [0035.400] GetProcessHeap () returned 0x570000 [0035.400] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x574438 | out: hHeap=0x570000) returned 1 [0035.400] GetProcessHeap () returned 0x570000 [0035.400] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b1a0 | out: hHeap=0x570000) returned 1 [0035.400] GetProcessHeap () returned 0x570000 [0035.400] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x578298 | out: hHeap=0x570000) returned 1 [0035.400] GetProcessHeap () returned 0x570000 [0035.400] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x572db0 | out: hHeap=0x570000) returned 1 [0035.400] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x1242013, lpParameter=0x4ff960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f4 [0035.401] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x1241fab, lpParameter=0x4ff970, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f8 [0035.401] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x1241e4e, lpParameter=0x4ff97c, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21c [0035.402] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x1241859, lpParameter=0x4ff970, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x220 [0035.402] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x124197c, lpParameter=0x4ff970, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x224 [0035.402] WaitForSingleObject (hHandle=0x220, dwMilliseconds=0xffffffff) returned 0x0 [0036.012] WaitForMultipleObjects (nCount=0x4, lpHandles=0x4ff988*=0x1f4, bWaitAll=1, dwMilliseconds=0xffffffff) Thread: id = 4 os_tid = 0xf60 Thread: id = 5 os_tid = 0xe40 [0035.404] GetVersion () returned 0x23f00206 [0035.404] GetCurrentProcess () returned 0xffffffff [0035.404] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0xcdfce4 | out: TokenHandle=0xcdfce4*=0x228) returned 1 [0035.405] GetTokenInformation (in: TokenHandle=0x228, TokenInformationClass=0x14, TokenInformation=0xcdfcdc, TokenInformationLength=0x4, ReturnLength=0xcdfce0 | out: TokenInformation=0xcdfcdc, ReturnLength=0xcdfce0) returned 1 [0035.405] CloseHandle (hObject=0x228) returned 1 [0035.405] GetProcessHeap () returned 0x570000 [0035.405] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58f4e8 [0035.405] GetProcessHeap () returned 0x570000 [0035.405] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1e) returned 0x58f510 [0035.405] GetProcessHeap () returned 0x570000 [0035.405] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x1e) returned 0x58f538 [0035.405] GetProcessHeap () returned 0x570000 [0035.405] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x90) returned 0x57b1a0 [0035.405] GetProcessHeap () returned 0x570000 [0035.405] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b1a0 | out: hHeap=0x570000) returned 1 [0035.405] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x58f510, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0035.405] GetProcessHeap () returned 0x570000 [0035.405] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f538 | out: hHeap=0x570000) returned 1 [0035.405] GetProcessHeap () returned 0x570000 [0035.405] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f4e8 | out: hHeap=0x570000) returned 1 [0035.405] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xcdfc6c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xcdfc6c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0035.405] GetProcessHeap () returned 0x570000 [0035.405] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f510 | out: hHeap=0x570000) returned 1 [0035.405] GetProcessHeap () returned 0x570000 [0035.405] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x40) returned 0x57dbd0 [0035.405] GetProcessHeap () returned 0x570000 [0035.405] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x3a) returned 0x57de58 [0035.405] GetProcessHeap () returned 0x570000 [0035.405] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x57de58, Size=0x72) returned 0x58e428 [0035.405] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x228 [0035.405] WaitForSingleObject (hHandle=0x228, dwMilliseconds=0x0) returned 0x102 [0035.406] CloseHandle (hObject=0x228) returned 1 [0035.406] GetProcessHeap () returned 0x570000 [0035.406] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57dbd0 | out: hHeap=0x570000) returned 1 [0035.406] GetProcessHeap () returned 0x570000 [0035.406] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e428 | out: hHeap=0x570000) returned 1 [0035.406] Sleep (dwMilliseconds=0x3e8) [0036.426] GetProcessHeap () returned 0x570000 [0036.426] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58f560 [0036.426] GetProcessHeap () returned 0x570000 [0036.426] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1e) returned 0x5abc60 [0036.426] GetProcessHeap () returned 0x570000 [0036.426] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x1e) returned 0x5abdf0 [0036.426] GetProcessHeap () returned 0x570000 [0036.426] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x90) returned 0x578f50 [0036.426] GetProcessHeap () returned 0x570000 [0036.426] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x578f50 | out: hHeap=0x570000) returned 1 [0036.426] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x5abc60, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0036.426] GetProcessHeap () returned 0x570000 [0036.426] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abdf0 | out: hHeap=0x570000) returned 1 [0036.426] GetProcessHeap () returned 0x570000 [0036.426] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f560 | out: hHeap=0x570000) returned 1 [0036.426] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xcdfc6c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xcdfc6c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0036.426] GetProcessHeap () returned 0x570000 [0036.426] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abc60 | out: hHeap=0x570000) returned 1 [0036.426] GetProcessHeap () returned 0x570000 [0036.426] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x40) returned 0x57dab0 [0036.427] GetProcessHeap () returned 0x570000 [0036.427] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x3a) returned 0x57df30 [0036.427] GetProcessHeap () returned 0x570000 [0036.427] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x57df30, Size=0x72) returned 0x58f1a8 [0036.427] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2d0 [0036.427] WaitForSingleObject (hHandle=0x2d0, dwMilliseconds=0x0) returned 0x102 [0036.427] CloseHandle (hObject=0x2d0) returned 1 [0036.427] GetProcessHeap () returned 0x570000 [0036.427] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57dab0 | out: hHeap=0x570000) returned 1 [0036.427] GetProcessHeap () returned 0x570000 [0036.427] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f1a8 | out: hHeap=0x570000) returned 1 [0036.427] Sleep (dwMilliseconds=0x3e8) [0037.475] GetProcessHeap () returned 0x570000 [0037.475] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5abc60 [0037.475] GetProcessHeap () returned 0x570000 [0037.475] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1e) returned 0x5abee0 [0037.475] GetProcessHeap () returned 0x570000 [0037.475] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x1e) returned 0x5abe18 [0037.475] GetProcessHeap () returned 0x570000 [0037.475] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x90) returned 0x57b200 [0037.475] GetProcessHeap () returned 0x570000 [0037.475] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b200 | out: hHeap=0x570000) returned 1 [0037.475] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x5abee0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0037.475] GetProcessHeap () returned 0x570000 [0037.475] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abe18 | out: hHeap=0x570000) returned 1 [0037.476] GetProcessHeap () returned 0x570000 [0037.476] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abc60 | out: hHeap=0x570000) returned 1 [0037.476] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xcdfc6c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xcdfc6c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0037.476] GetProcessHeap () returned 0x570000 [0037.476] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abee0 | out: hHeap=0x570000) returned 1 [0037.476] GetProcessHeap () returned 0x570000 [0037.476] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x40) returned 0x57dab0 [0037.476] GetProcessHeap () returned 0x570000 [0037.476] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x3a) returned 0x57da68 [0037.476] GetProcessHeap () returned 0x570000 [0037.476] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x57da68, Size=0x72) returned 0x58e3a8 [0037.476] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2dc [0037.476] WaitForSingleObject (hHandle=0x2dc, dwMilliseconds=0x0) returned 0x102 [0037.476] CloseHandle (hObject=0x2dc) returned 1 [0037.476] GetProcessHeap () returned 0x570000 [0037.476] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57dab0 | out: hHeap=0x570000) returned 1 [0037.476] GetProcessHeap () returned 0x570000 [0037.476] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e3a8 | out: hHeap=0x570000) returned 1 [0037.476] Sleep (dwMilliseconds=0x3e8) [0038.493] GetProcessHeap () returned 0x570000 [0038.493] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5abdc8 [0038.493] GetProcessHeap () returned 0x570000 [0038.493] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1e) returned 0x5abe90 [0038.493] GetProcessHeap () returned 0x570000 [0038.493] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x1e) returned 0x5abdf0 [0038.493] GetProcessHeap () returned 0x570000 [0038.493] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x90) returned 0x57b200 [0038.493] GetProcessHeap () returned 0x570000 [0038.493] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b200 | out: hHeap=0x570000) returned 1 [0038.493] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x5abe90, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0038.493] GetProcessHeap () returned 0x570000 [0038.493] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abdf0 | out: hHeap=0x570000) returned 1 [0038.493] GetProcessHeap () returned 0x570000 [0038.493] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abdc8 | out: hHeap=0x570000) returned 1 [0038.493] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xcdfc6c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xcdfc6c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0038.494] GetProcessHeap () returned 0x570000 [0038.494] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abe90 | out: hHeap=0x570000) returned 1 [0038.494] GetProcessHeap () returned 0x570000 [0038.494] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x40) returned 0x57da68 [0038.494] GetProcessHeap () returned 0x570000 [0038.494] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x3a) returned 0x57dab0 [0038.494] GetProcessHeap () returned 0x570000 [0038.494] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x57dab0, Size=0x72) returned 0x58ee28 [0038.494] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2dc [0038.494] WaitForSingleObject (hHandle=0x2dc, dwMilliseconds=0x0) returned 0x102 [0038.494] CloseHandle (hObject=0x2dc) returned 1 [0038.494] GetProcessHeap () returned 0x570000 [0038.494] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57da68 | out: hHeap=0x570000) returned 1 [0038.494] GetProcessHeap () returned 0x570000 [0038.494] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ee28 | out: hHeap=0x570000) returned 1 [0038.494] Sleep (dwMilliseconds=0x3e8) [0039.507] GetProcessHeap () returned 0x570000 [0039.507] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5abd50 [0039.507] GetProcessHeap () returned 0x570000 [0039.508] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1e) returned 0x5abda0 [0039.508] GetProcessHeap () returned 0x570000 [0039.508] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x1e) returned 0x5abee0 [0039.508] GetProcessHeap () returned 0x570000 [0039.508] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x90) returned 0x57b200 [0039.508] GetProcessHeap () returned 0x570000 [0039.508] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b200 | out: hHeap=0x570000) returned 1 [0039.508] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x5abda0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0039.508] GetProcessHeap () returned 0x570000 [0039.508] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abee0 | out: hHeap=0x570000) returned 1 [0039.508] GetProcessHeap () returned 0x570000 [0039.508] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abd50 | out: hHeap=0x570000) returned 1 [0039.508] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xcdfc6c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xcdfc6c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0039.509] GetProcessHeap () returned 0x570000 [0039.509] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abda0 | out: hHeap=0x570000) returned 1 [0039.509] GetProcessHeap () returned 0x570000 [0039.509] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x40) returned 0x57da68 [0039.509] GetProcessHeap () returned 0x570000 [0039.509] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x3a) returned 0x57dab0 [0039.509] GetProcessHeap () returned 0x570000 [0039.509] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x57dab0, Size=0x72) returned 0x58eba8 [0039.509] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2dc [0039.509] WaitForSingleObject (hHandle=0x2dc, dwMilliseconds=0x0) returned 0x102 [0039.509] CloseHandle (hObject=0x2dc) returned 1 [0039.509] GetProcessHeap () returned 0x570000 [0039.509] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57da68 | out: hHeap=0x570000) returned 1 [0039.509] GetProcessHeap () returned 0x570000 [0039.509] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58eba8 | out: hHeap=0x570000) returned 1 [0039.509] Sleep (dwMilliseconds=0x3e8) [0041.454] GetProcessHeap () returned 0x570000 [0041.454] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5abf08 [0041.454] GetProcessHeap () returned 0x570000 [0041.454] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1e) returned 0x5abdf0 [0041.454] GetProcessHeap () returned 0x570000 [0041.454] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x1e) returned 0x5abc88 [0041.454] GetProcessHeap () returned 0x570000 [0041.454] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x90) returned 0x57b200 [0041.454] GetProcessHeap () returned 0x570000 [0041.454] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b200 | out: hHeap=0x570000) returned 1 [0041.454] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x5abdf0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0041.454] GetProcessHeap () returned 0x570000 [0041.454] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abc88 | out: hHeap=0x570000) returned 1 [0041.454] GetProcessHeap () returned 0x570000 [0041.454] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abf08 | out: hHeap=0x570000) returned 1 [0041.454] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xcdfc6c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xcdfc6c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0041.454] GetProcessHeap () returned 0x570000 [0041.454] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abdf0 | out: hHeap=0x570000) returned 1 [0041.454] GetProcessHeap () returned 0x570000 [0041.454] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x40) returned 0x57da68 [0041.454] GetProcessHeap () returned 0x570000 [0041.454] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x3a) returned 0x57dab0 [0041.454] GetProcessHeap () returned 0x570000 [0041.455] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x57dab0, Size=0x72) returned 0x58eca8 [0041.455] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2dc [0041.455] WaitForSingleObject (hHandle=0x2dc, dwMilliseconds=0x0) returned 0x102 [0041.455] CloseHandle (hObject=0x2dc) returned 1 [0041.455] GetProcessHeap () returned 0x570000 [0041.455] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57da68 | out: hHeap=0x570000) returned 1 [0041.455] GetProcessHeap () returned 0x570000 [0041.455] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58eca8 | out: hHeap=0x570000) returned 1 [0041.455] Sleep (dwMilliseconds=0x3e8) [0042.497] GetProcessHeap () returned 0x570000 [0042.497] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5abd00 [0042.497] GetProcessHeap () returned 0x570000 [0042.497] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1e) returned 0x5abe40 [0042.497] GetProcessHeap () returned 0x570000 [0042.497] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x1e) returned 0x5abe18 [0042.497] GetProcessHeap () returned 0x570000 [0042.497] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x90) returned 0x57b200 [0042.497] GetProcessHeap () returned 0x570000 [0042.497] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b200 | out: hHeap=0x570000) returned 1 [0042.497] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x5abe40, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0042.497] GetProcessHeap () returned 0x570000 [0042.497] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abe18 | out: hHeap=0x570000) returned 1 [0042.497] GetProcessHeap () returned 0x570000 [0042.497] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abd00 | out: hHeap=0x570000) returned 1 [0042.497] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xcdfc6c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xcdfc6c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0042.497] GetProcessHeap () returned 0x570000 [0042.497] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abe40 | out: hHeap=0x570000) returned 1 [0042.497] GetProcessHeap () returned 0x570000 [0042.497] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x40) returned 0x57da68 [0042.497] GetProcessHeap () returned 0x570000 [0042.497] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x3a) returned 0x57dab0 [0042.497] GetProcessHeap () returned 0x570000 [0042.497] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x57dab0, Size=0x72) returned 0x58f0a8 [0042.497] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2dc [0042.497] WaitForSingleObject (hHandle=0x2dc, dwMilliseconds=0x0) returned 0x102 [0042.498] CloseHandle (hObject=0x2dc) returned 1 [0042.498] GetProcessHeap () returned 0x570000 [0042.498] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57da68 | out: hHeap=0x570000) returned 1 [0042.498] GetProcessHeap () returned 0x570000 [0042.498] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f0a8 | out: hHeap=0x570000) returned 1 [0042.498] Sleep (dwMilliseconds=0x3e8) [0043.516] GetProcessHeap () returned 0x570000 [0043.516] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5abda0 [0043.516] GetProcessHeap () returned 0x570000 [0043.516] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1e) returned 0x5abcb0 [0043.516] GetProcessHeap () returned 0x570000 [0043.516] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x1e) returned 0x5abc60 [0043.516] GetProcessHeap () returned 0x570000 [0043.516] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x90) returned 0x57b200 [0043.516] GetProcessHeap () returned 0x570000 [0043.516] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b200 | out: hHeap=0x570000) returned 1 [0043.516] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x5abcb0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0043.516] GetProcessHeap () returned 0x570000 [0043.516] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abc60 | out: hHeap=0x570000) returned 1 [0043.516] GetProcessHeap () returned 0x570000 [0043.516] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abda0 | out: hHeap=0x570000) returned 1 [0043.516] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xcdfc6c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xcdfc6c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0043.516] GetProcessHeap () returned 0x570000 [0043.516] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abcb0 | out: hHeap=0x570000) returned 1 [0043.517] GetProcessHeap () returned 0x570000 [0043.517] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x40) returned 0x57da68 [0043.517] GetProcessHeap () returned 0x570000 [0043.517] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x3a) returned 0x57dab0 [0043.517] GetProcessHeap () returned 0x570000 [0043.517] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x57dab0, Size=0x72) returned 0x58eda8 [0043.517] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2dc [0043.517] WaitForSingleObject (hHandle=0x2dc, dwMilliseconds=0x0) returned 0x102 [0043.517] CloseHandle (hObject=0x2dc) returned 1 [0043.517] GetProcessHeap () returned 0x570000 [0043.517] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57da68 | out: hHeap=0x570000) returned 1 [0043.517] GetProcessHeap () returned 0x570000 [0043.517] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58eda8 | out: hHeap=0x570000) returned 1 [0043.517] Sleep (dwMilliseconds=0x3e8) [0044.761] GetProcessHeap () returned 0x570000 [0044.761] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5abcb0 [0044.761] GetProcessHeap () returned 0x570000 [0044.761] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1e) returned 0x5abee0 [0044.761] GetProcessHeap () returned 0x570000 [0044.761] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x1e) returned 0x5abda0 [0044.761] GetProcessHeap () returned 0x570000 [0044.761] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x90) returned 0x57b200 [0044.761] GetProcessHeap () returned 0x570000 [0044.761] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b200 | out: hHeap=0x570000) returned 1 [0044.761] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x5abee0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0044.761] GetProcessHeap () returned 0x570000 [0044.761] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abda0 | out: hHeap=0x570000) returned 1 [0044.761] GetProcessHeap () returned 0x570000 [0044.761] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abcb0 | out: hHeap=0x570000) returned 1 [0044.761] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xcdfc6c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xcdfc6c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0044.762] GetProcessHeap () returned 0x570000 [0044.762] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abee0 | out: hHeap=0x570000) returned 1 [0044.762] GetProcessHeap () returned 0x570000 [0044.762] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x40) returned 0x57da68 [0044.762] GetProcessHeap () returned 0x570000 [0044.762] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x3a) returned 0x57dab0 [0044.762] GetProcessHeap () returned 0x570000 [0044.762] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x57dab0, Size=0x72) returned 0x58e5a8 [0044.762] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2dc [0044.762] WaitForSingleObject (hHandle=0x2dc, dwMilliseconds=0x0) returned 0x102 [0044.762] CloseHandle (hObject=0x2dc) returned 1 [0044.762] GetProcessHeap () returned 0x570000 [0044.762] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57da68 | out: hHeap=0x570000) returned 1 [0044.762] GetProcessHeap () returned 0x570000 [0044.762] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e5a8 | out: hHeap=0x570000) returned 1 [0044.762] Sleep (dwMilliseconds=0x3e8) [0046.135] GetProcessHeap () returned 0x570000 [0046.135] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5abf08 [0046.135] GetProcessHeap () returned 0x570000 [0046.135] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1e) returned 0x5abc60 [0046.135] GetProcessHeap () returned 0x570000 [0046.135] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x1e) returned 0x5abc88 [0046.135] GetProcessHeap () returned 0x570000 [0046.135] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x90) returned 0x57b200 [0046.135] GetProcessHeap () returned 0x570000 [0046.135] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b200 | out: hHeap=0x570000) returned 1 [0046.135] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x5abc60, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0046.135] GetProcessHeap () returned 0x570000 [0046.135] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abc88 | out: hHeap=0x570000) returned 1 [0046.135] GetProcessHeap () returned 0x570000 [0046.135] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abf08 | out: hHeap=0x570000) returned 1 [0046.135] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xcdfc6c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xcdfc6c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0046.135] GetProcessHeap () returned 0x570000 [0046.135] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abc60 | out: hHeap=0x570000) returned 1 [0046.135] GetProcessHeap () returned 0x570000 [0046.135] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x40) returned 0x57da68 [0046.135] GetProcessHeap () returned 0x570000 [0046.135] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x3a) returned 0x57dab0 [0046.135] GetProcessHeap () returned 0x570000 [0046.135] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x57dab0, Size=0x72) returned 0x58eea8 [0046.135] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2dc [0046.135] WaitForSingleObject (hHandle=0x2dc, dwMilliseconds=0x0) returned 0x102 [0046.135] CloseHandle (hObject=0x2dc) returned 1 [0046.135] GetProcessHeap () returned 0x570000 [0046.135] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57da68 | out: hHeap=0x570000) returned 1 [0046.136] GetProcessHeap () returned 0x570000 [0046.136] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58eea8 | out: hHeap=0x570000) returned 1 [0046.136] Sleep (dwMilliseconds=0x3e8) [0047.542] GetProcessHeap () returned 0x570000 [0047.542] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5abd78 [0047.542] GetProcessHeap () returned 0x570000 [0047.542] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1e) returned 0x5abda0 [0047.542] GetProcessHeap () returned 0x570000 [0047.542] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x1e) returned 0x5abeb8 [0047.542] GetProcessHeap () returned 0x570000 [0047.542] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x90) returned 0x57b200 [0047.542] GetProcessHeap () returned 0x570000 [0047.542] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b200 | out: hHeap=0x570000) returned 1 [0047.542] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x5abda0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0047.542] GetProcessHeap () returned 0x570000 [0047.542] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abeb8 | out: hHeap=0x570000) returned 1 [0047.542] GetProcessHeap () returned 0x570000 [0047.542] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abd78 | out: hHeap=0x570000) returned 1 [0047.542] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xcdfc6c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xcdfc6c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0047.542] GetProcessHeap () returned 0x570000 [0047.542] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abda0 | out: hHeap=0x570000) returned 1 [0047.542] GetProcessHeap () returned 0x570000 [0047.542] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x40) returned 0x57da68 [0047.542] GetProcessHeap () returned 0x570000 [0047.542] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x3a) returned 0x57dab0 [0047.542] GetProcessHeap () returned 0x570000 [0047.542] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x57dab0, Size=0x72) returned 0x58eca8 [0047.543] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2dc [0047.543] WaitForSingleObject (hHandle=0x2dc, dwMilliseconds=0x0) returned 0x102 [0047.543] CloseHandle (hObject=0x2dc) returned 1 [0047.543] GetProcessHeap () returned 0x570000 [0047.543] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57da68 | out: hHeap=0x570000) returned 1 [0047.543] GetProcessHeap () returned 0x570000 [0047.543] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58eca8 | out: hHeap=0x570000) returned 1 [0047.543] Sleep (dwMilliseconds=0x3e8) [0049.079] GetProcessHeap () returned 0x570000 [0049.079] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5abe18 [0049.079] GetProcessHeap () returned 0x570000 [0049.079] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1e) returned 0x5abee0 [0049.079] GetProcessHeap () returned 0x570000 [0049.079] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x1e) returned 0x5abe90 [0049.079] GetProcessHeap () returned 0x570000 [0049.079] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x90) returned 0x57b200 [0049.079] GetProcessHeap () returned 0x570000 [0049.079] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b200 | out: hHeap=0x570000) returned 1 [0049.079] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x5abee0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0049.079] GetProcessHeap () returned 0x570000 [0049.079] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abe90 | out: hHeap=0x570000) returned 1 [0049.079] GetProcessHeap () returned 0x570000 [0049.079] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abe18 | out: hHeap=0x570000) returned 1 [0049.079] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xcdfc6c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xcdfc6c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0049.080] GetProcessHeap () returned 0x570000 [0049.080] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abee0 | out: hHeap=0x570000) returned 1 [0049.080] GetProcessHeap () returned 0x570000 [0049.080] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x40) returned 0x57db40 [0049.080] GetProcessHeap () returned 0x570000 [0049.080] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x3a) returned 0x57da68 [0049.080] GetProcessHeap () returned 0x570000 [0049.080] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x57da68, Size=0x72) returned 0x58e428 [0049.080] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2dc [0049.080] WaitForSingleObject (hHandle=0x2dc, dwMilliseconds=0x0) returned 0x102 [0049.080] CloseHandle (hObject=0x2dc) returned 1 [0049.080] GetProcessHeap () returned 0x570000 [0049.080] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57db40 | out: hHeap=0x570000) returned 1 [0049.080] GetProcessHeap () returned 0x570000 [0049.080] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e428 | out: hHeap=0x570000) returned 1 [0049.080] Sleep (dwMilliseconds=0x3e8) [0051.524] GetProcessHeap () returned 0x570000 [0051.524] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5abda0 [0051.524] GetProcessHeap () returned 0x570000 [0051.524] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1e) returned 0x5abee0 [0051.524] GetProcessHeap () returned 0x570000 [0051.524] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x1e) returned 0x5abe18 [0051.524] GetProcessHeap () returned 0x570000 [0051.524] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x90) returned 0x57b200 [0051.524] GetProcessHeap () returned 0x570000 [0051.524] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b200 | out: hHeap=0x570000) returned 1 [0051.524] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x5abee0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0051.524] GetProcessHeap () returned 0x570000 [0051.524] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abe18 | out: hHeap=0x570000) returned 1 [0051.524] GetProcessHeap () returned 0x570000 [0051.524] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abda0 | out: hHeap=0x570000) returned 1 [0051.524] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xcdfc6c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xcdfc6c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0051.525] GetProcessHeap () returned 0x570000 [0051.525] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abee0 | out: hHeap=0x570000) returned 1 [0051.525] GetProcessHeap () returned 0x570000 [0051.525] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x40) returned 0x57da68 [0051.525] GetProcessHeap () returned 0x570000 [0051.525] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x3a) returned 0x57dab0 [0051.525] GetProcessHeap () returned 0x570000 [0051.525] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x57dab0, Size=0x72) returned 0x58eba8 [0051.525] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2dc [0051.525] WaitForSingleObject (hHandle=0x2dc, dwMilliseconds=0x0) returned 0x102 [0051.525] CloseHandle (hObject=0x2dc) returned 1 [0051.525] GetProcessHeap () returned 0x570000 [0051.525] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57da68 | out: hHeap=0x570000) returned 1 [0051.525] GetProcessHeap () returned 0x570000 [0051.525] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58eba8 | out: hHeap=0x570000) returned 1 [0051.525] Sleep (dwMilliseconds=0x3e8) [0052.836] GetProcessHeap () returned 0x570000 [0052.836] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5abeb8 [0052.836] GetProcessHeap () returned 0x570000 [0052.836] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1e) returned 0x5abe40 [0052.836] GetProcessHeap () returned 0x570000 [0052.836] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x1e) returned 0x5abd78 [0052.836] GetProcessHeap () returned 0x570000 [0052.836] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x90) returned 0x578fa8 [0052.836] GetProcessHeap () returned 0x570000 [0052.836] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x578fa8 | out: hHeap=0x570000) returned 1 [0052.836] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x5abe40, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0052.836] GetProcessHeap () returned 0x570000 [0052.836] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abd78 | out: hHeap=0x570000) returned 1 [0052.836] GetProcessHeap () returned 0x570000 [0052.836] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abeb8 | out: hHeap=0x570000) returned 1 [0052.836] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xcdfc6c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xcdfc6c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0052.836] GetProcessHeap () returned 0x570000 [0052.836] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abe40 | out: hHeap=0x570000) returned 1 [0052.836] GetProcessHeap () returned 0x570000 [0052.836] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x40) returned 0x57da68 [0052.836] GetProcessHeap () returned 0x570000 [0052.836] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x3a) returned 0x57dab0 [0052.836] GetProcessHeap () returned 0x570000 [0052.836] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x57dab0, Size=0x72) returned 0x58eba8 [0052.836] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2e0 [0052.837] WaitForSingleObject (hHandle=0x2e0, dwMilliseconds=0x0) returned 0x102 [0052.837] CloseHandle (hObject=0x2e0) returned 1 [0052.837] GetProcessHeap () returned 0x570000 [0052.837] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57da68 | out: hHeap=0x570000) returned 1 [0052.837] GetProcessHeap () returned 0x570000 [0052.837] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58eba8 | out: hHeap=0x570000) returned 1 [0052.837] Sleep (dwMilliseconds=0x3e8) [0054.152] GetProcessHeap () returned 0x570000 [0054.152] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5abcd8 [0054.152] GetProcessHeap () returned 0x570000 [0054.153] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1e) returned 0x5abee0 [0054.153] GetProcessHeap () returned 0x570000 [0054.162] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x1e) returned 0x5abd28 [0054.163] GetProcessHeap () returned 0x570000 [0054.163] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x90) returned 0x578fa8 [0054.163] GetProcessHeap () returned 0x570000 [0054.163] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x578fa8 | out: hHeap=0x570000) returned 1 [0054.163] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x5abee0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0054.163] GetProcessHeap () returned 0x570000 [0054.163] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abd28 | out: hHeap=0x570000) returned 1 [0054.163] GetProcessHeap () returned 0x570000 [0054.163] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abcd8 | out: hHeap=0x570000) returned 1 [0054.163] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xcdfc6c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xcdfc6c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0054.163] GetProcessHeap () returned 0x570000 [0054.164] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abee0 | out: hHeap=0x570000) returned 1 [0054.164] GetProcessHeap () returned 0x570000 [0054.164] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x40) returned 0x57da68 [0054.164] GetProcessHeap () returned 0x570000 [0054.164] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x3a) returned 0x57dab0 [0054.164] GetProcessHeap () returned 0x570000 [0054.164] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x57dab0, Size=0x72) returned 0x58f128 [0054.164] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2e0 [0054.164] WaitForSingleObject (hHandle=0x2e0, dwMilliseconds=0x0) returned 0x102 [0054.164] CloseHandle (hObject=0x2e0) returned 1 [0054.164] GetProcessHeap () returned 0x570000 [0054.164] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57da68 | out: hHeap=0x570000) returned 1 [0054.164] GetProcessHeap () returned 0x570000 [0054.164] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f128 | out: hHeap=0x570000) returned 1 [0054.164] Sleep (dwMilliseconds=0x3e8) [0055.614] GetProcessHeap () returned 0x570000 [0055.614] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5abdf0 [0055.614] GetProcessHeap () returned 0x570000 [0055.614] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1e) returned 0x5abda0 [0055.614] GetProcessHeap () returned 0x570000 [0055.614] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x1e) returned 0x5abf08 [0055.614] GetProcessHeap () returned 0x570000 [0055.614] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x90) returned 0x578fa8 [0055.614] GetProcessHeap () returned 0x570000 [0055.614] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x578fa8 | out: hHeap=0x570000) returned 1 [0055.614] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x5abda0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0055.614] GetProcessHeap () returned 0x570000 [0055.614] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abf08 | out: hHeap=0x570000) returned 1 [0055.614] GetProcessHeap () returned 0x570000 [0055.614] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abdf0 | out: hHeap=0x570000) returned 1 [0055.614] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xcdfc6c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xcdfc6c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0055.614] GetProcessHeap () returned 0x570000 [0055.614] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abda0 | out: hHeap=0x570000) returned 1 [0055.614] GetProcessHeap () returned 0x570000 [0055.614] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x40) returned 0x57da68 [0055.614] GetProcessHeap () returned 0x570000 [0055.614] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x3a) returned 0x57dab0 [0055.614] GetProcessHeap () returned 0x570000 [0055.615] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x57dab0, Size=0x72) returned 0x58ea28 [0055.615] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2e0 [0055.615] WaitForSingleObject (hHandle=0x2e0, dwMilliseconds=0x0) returned 0x102 [0055.615] CloseHandle (hObject=0x2e0) returned 1 [0055.615] GetProcessHeap () returned 0x570000 [0055.615] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57da68 | out: hHeap=0x570000) returned 1 [0055.615] GetProcessHeap () returned 0x570000 [0055.615] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ea28 | out: hHeap=0x570000) returned 1 [0055.615] Sleep (dwMilliseconds=0x3e8) [0056.974] GetProcessHeap () returned 0x570000 [0056.974] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5abe90 [0056.974] GetProcessHeap () returned 0x570000 [0056.974] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1e) returned 0x5abcd8 [0056.974] GetProcessHeap () returned 0x570000 [0056.974] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x1e) returned 0x5abda0 [0056.974] GetProcessHeap () returned 0x570000 [0056.974] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x90) returned 0x578fa8 [0056.974] GetProcessHeap () returned 0x570000 [0056.974] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x578fa8 | out: hHeap=0x570000) returned 1 [0056.974] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x5abcd8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0056.974] GetProcessHeap () returned 0x570000 [0056.974] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abda0 | out: hHeap=0x570000) returned 1 [0056.975] GetProcessHeap () returned 0x570000 [0056.975] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abe90 | out: hHeap=0x570000) returned 1 [0056.975] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xcdfc6c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xcdfc6c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0056.975] GetProcessHeap () returned 0x570000 [0056.975] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abcd8 | out: hHeap=0x570000) returned 1 [0056.975] GetProcessHeap () returned 0x570000 [0056.975] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x40) returned 0x57da68 [0056.975] GetProcessHeap () returned 0x570000 [0056.975] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x3a) returned 0x57db40 [0056.975] GetProcessHeap () returned 0x570000 [0056.975] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x57db40, Size=0x72) returned 0x58e8a8 [0056.975] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2e0 [0056.975] WaitForSingleObject (hHandle=0x2e0, dwMilliseconds=0x0) returned 0x102 [0056.975] CloseHandle (hObject=0x2e0) returned 1 [0056.975] GetProcessHeap () returned 0x570000 [0056.975] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57da68 | out: hHeap=0x570000) returned 1 [0056.975] GetProcessHeap () returned 0x570000 [0056.975] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e8a8 | out: hHeap=0x570000) returned 1 [0056.975] Sleep (dwMilliseconds=0x3e8) [0058.337] GetProcessHeap () returned 0x570000 [0058.337] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5abd50 [0058.337] GetProcessHeap () returned 0x570000 [0058.337] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1e) returned 0x5abee0 [0058.337] GetProcessHeap () returned 0x570000 [0058.337] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x1e) returned 0x5abc60 [0058.337] GetProcessHeap () returned 0x570000 [0058.337] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x90) returned 0x578fa8 [0058.337] GetProcessHeap () returned 0x570000 [0058.337] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x578fa8 | out: hHeap=0x570000) returned 1 [0058.337] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x5abee0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0058.337] GetProcessHeap () returned 0x570000 [0058.337] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abc60 | out: hHeap=0x570000) returned 1 [0058.337] GetProcessHeap () returned 0x570000 [0058.337] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abd50 | out: hHeap=0x570000) returned 1 [0058.337] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xcdfc6c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xcdfc6c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0058.338] GetProcessHeap () returned 0x570000 [0058.338] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abee0 | out: hHeap=0x570000) returned 1 [0058.338] GetProcessHeap () returned 0x570000 [0058.338] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x40) returned 0x57da68 [0058.338] GetProcessHeap () returned 0x570000 [0058.338] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x3a) returned 0x57dab0 [0058.338] GetProcessHeap () returned 0x570000 [0058.338] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x57dab0, Size=0x72) returned 0x58ee28 [0058.338] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2e0 [0058.338] WaitForSingleObject (hHandle=0x2e0, dwMilliseconds=0x0) returned 0x102 [0058.338] CloseHandle (hObject=0x2e0) returned 1 [0058.338] GetProcessHeap () returned 0x570000 [0058.338] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57da68 | out: hHeap=0x570000) returned 1 [0058.338] GetProcessHeap () returned 0x570000 [0058.338] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ee28 | out: hHeap=0x570000) returned 1 [0058.338] Sleep (dwMilliseconds=0x3e8) [0059.667] GetProcessHeap () returned 0x570000 [0059.667] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5abdf0 [0059.667] GetProcessHeap () returned 0x570000 [0059.667] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1e) returned 0x5abc88 [0059.667] GetProcessHeap () returned 0x570000 [0059.667] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x1e) returned 0x5abcb0 [0059.667] GetProcessHeap () returned 0x570000 [0059.667] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x90) returned 0x578fa8 [0059.667] GetProcessHeap () returned 0x570000 [0059.667] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x578fa8 | out: hHeap=0x570000) returned 1 [0059.667] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x5abc88, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0059.667] GetProcessHeap () returned 0x570000 [0059.667] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abcb0 | out: hHeap=0x570000) returned 1 [0059.667] GetProcessHeap () returned 0x570000 [0059.667] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abdf0 | out: hHeap=0x570000) returned 1 [0059.667] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xcdfc6c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xcdfc6c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0060.468] GetProcessHeap () returned 0x570000 [0060.468] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abc88 | out: hHeap=0x570000) returned 1 [0060.468] GetProcessHeap () returned 0x570000 [0060.468] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x40) returned 0x57da68 [0060.468] GetProcessHeap () returned 0x570000 [0060.468] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x3a) returned 0x57db40 [0060.468] GetProcessHeap () returned 0x570000 [0060.468] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x57db40, Size=0x72) returned 0x58ef28 [0060.468] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2e0 [0060.468] WaitForSingleObject (hHandle=0x2e0, dwMilliseconds=0x0) returned 0x102 [0060.468] CloseHandle (hObject=0x2e0) returned 1 [0060.468] GetProcessHeap () returned 0x570000 [0060.468] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57da68 | out: hHeap=0x570000) returned 1 [0060.468] GetProcessHeap () returned 0x570000 [0060.468] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ef28 | out: hHeap=0x570000) returned 1 [0060.468] Sleep (dwMilliseconds=0x3e8) [0062.086] GetProcessHeap () returned 0x570000 [0062.086] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5abe90 [0062.086] GetProcessHeap () returned 0x570000 [0062.086] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1e) returned 0x5abcb0 [0062.086] GetProcessHeap () returned 0x570000 [0062.086] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x1e) returned 0x5abc60 [0062.086] GetProcessHeap () returned 0x570000 [0062.086] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x90) returned 0x578fa8 [0062.086] GetProcessHeap () returned 0x570000 [0062.086] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x578fa8 | out: hHeap=0x570000) returned 1 [0062.086] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x5abcb0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0062.086] GetProcessHeap () returned 0x570000 [0062.086] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abc60 | out: hHeap=0x570000) returned 1 [0062.086] GetProcessHeap () returned 0x570000 [0062.086] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abe90 | out: hHeap=0x570000) returned 1 [0062.086] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xcdfc6c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xcdfc6c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0062.087] GetProcessHeap () returned 0x570000 [0062.087] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abcb0 | out: hHeap=0x570000) returned 1 [0062.087] GetProcessHeap () returned 0x570000 [0062.087] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x40) returned 0x57da68 [0062.087] GetProcessHeap () returned 0x570000 [0062.087] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x3a) returned 0x57dab0 [0062.087] GetProcessHeap () returned 0x570000 [0062.087] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x57dab0, Size=0x72) returned 0x58e528 [0062.087] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2e0 [0062.087] WaitForSingleObject (hHandle=0x2e0, dwMilliseconds=0x0) returned 0x102 [0062.087] CloseHandle (hObject=0x2e0) returned 1 [0062.087] GetProcessHeap () returned 0x570000 [0062.087] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57da68 | out: hHeap=0x570000) returned 1 [0062.088] GetProcessHeap () returned 0x570000 [0062.088] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e528 | out: hHeap=0x570000) returned 1 [0062.088] Sleep (dwMilliseconds=0x3e8) [0063.165] GetProcessHeap () returned 0x570000 [0063.165] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5abc60 [0063.166] GetProcessHeap () returned 0x570000 [0063.166] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1e) returned 0x5abc88 [0063.166] GetProcessHeap () returned 0x570000 [0063.166] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x1e) returned 0x5abee0 [0063.166] GetProcessHeap () returned 0x570000 [0063.166] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x90) returned 0x578fa8 [0063.166] GetProcessHeap () returned 0x570000 [0063.166] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x578fa8 | out: hHeap=0x570000) returned 1 [0063.166] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x5abc88, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0063.166] GetProcessHeap () returned 0x570000 [0063.166] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abee0 | out: hHeap=0x570000) returned 1 [0063.166] GetProcessHeap () returned 0x570000 [0063.166] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abc60 | out: hHeap=0x570000) returned 1 [0063.167] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xcdfc6c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xcdfc6c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0063.169] GetProcessHeap () returned 0x570000 [0063.169] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abc88 | out: hHeap=0x570000) returned 1 [0063.169] GetProcessHeap () returned 0x570000 [0063.169] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x40) returned 0x57da68 [0063.169] GetProcessHeap () returned 0x570000 [0063.169] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x3a) returned 0x57dab0 [0063.169] GetProcessHeap () returned 0x570000 [0063.169] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x57dab0, Size=0x72) returned 0x58ef28 [0063.169] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2e0 [0063.169] WaitForSingleObject (hHandle=0x2e0, dwMilliseconds=0x0) returned 0x102 [0063.169] CloseHandle (hObject=0x2e0) returned 1 [0063.171] GetProcessHeap () returned 0x570000 [0063.171] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57da68 | out: hHeap=0x570000) returned 1 [0063.171] GetProcessHeap () returned 0x570000 [0063.174] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ef28 | out: hHeap=0x570000) returned 1 [0063.178] Sleep (dwMilliseconds=0x3e8) [0064.388] GetProcessHeap () returned 0x570000 [0064.388] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5abeb8 [0064.388] GetProcessHeap () returned 0x570000 [0064.388] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1e) returned 0x5abe90 [0064.389] GetProcessHeap () returned 0x570000 [0064.389] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x1e) returned 0x5abd78 [0064.389] GetProcessHeap () returned 0x570000 [0064.389] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x90) returned 0x578fa8 [0064.389] GetProcessHeap () returned 0x570000 [0064.389] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x578fa8 | out: hHeap=0x570000) returned 1 [0064.389] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x5abe90, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0064.389] GetProcessHeap () returned 0x570000 [0064.389] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abd78 | out: hHeap=0x570000) returned 1 [0064.389] GetProcessHeap () returned 0x570000 [0064.389] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abeb8 | out: hHeap=0x570000) returned 1 [0064.389] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xcdfc6c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xcdfc6c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0064.389] GetProcessHeap () returned 0x570000 [0064.389] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abe90 | out: hHeap=0x570000) returned 1 [0064.389] GetProcessHeap () returned 0x570000 [0064.389] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x40) returned 0x57da68 [0064.389] GetProcessHeap () returned 0x570000 [0064.389] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x3a) returned 0x57dab0 [0064.389] GetProcessHeap () returned 0x570000 [0064.389] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x57dab0, Size=0x72) returned 0x58eca8 [0064.389] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2e0 [0064.389] WaitForSingleObject (hHandle=0x2e0, dwMilliseconds=0x0) returned 0x102 [0064.389] CloseHandle (hObject=0x2e0) returned 1 [0064.389] GetProcessHeap () returned 0x570000 [0064.389] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57da68 | out: hHeap=0x570000) returned 1 [0064.389] GetProcessHeap () returned 0x570000 [0064.390] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58eca8 | out: hHeap=0x570000) returned 1 [0064.390] Sleep (dwMilliseconds=0x3e8) [0065.647] GetProcessHeap () returned 0x570000 [0065.647] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5abf08 [0065.647] GetProcessHeap () returned 0x570000 [0065.647] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1e) returned 0x5abe90 [0065.647] GetProcessHeap () returned 0x570000 [0065.647] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x1e) returned 0x5abda0 [0065.647] GetProcessHeap () returned 0x570000 [0065.648] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x90) returned 0x578fa8 [0065.648] GetProcessHeap () returned 0x570000 [0065.648] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x578fa8 | out: hHeap=0x570000) returned 1 [0065.648] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x5abe90, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0065.648] GetProcessHeap () returned 0x570000 [0065.648] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abda0 | out: hHeap=0x570000) returned 1 [0065.648] GetProcessHeap () returned 0x570000 [0065.648] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abf08 | out: hHeap=0x570000) returned 1 [0065.648] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xcdfc6c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xcdfc6c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0065.648] GetProcessHeap () returned 0x570000 [0065.648] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abe90 | out: hHeap=0x570000) returned 1 [0065.648] GetProcessHeap () returned 0x570000 [0065.648] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x40) returned 0x57da68 [0065.648] GetProcessHeap () returned 0x570000 [0065.648] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x3a) returned 0x57dab0 [0065.648] GetProcessHeap () returned 0x570000 [0065.648] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x57dab0, Size=0x72) returned 0x58e9a8 [0065.648] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2e0 [0065.648] WaitForSingleObject (hHandle=0x2e0, dwMilliseconds=0x0) returned 0x102 [0065.648] CloseHandle (hObject=0x2e0) returned 1 [0065.648] GetProcessHeap () returned 0x570000 [0065.648] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57da68 | out: hHeap=0x570000) returned 1 [0065.648] GetProcessHeap () returned 0x570000 [0065.648] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e9a8 | out: hHeap=0x570000) returned 1 [0065.648] Sleep (dwMilliseconds=0x3e8) [0066.714] GetProcessHeap () returned 0x570000 [0066.718] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5abe90 [0066.722] GetProcessHeap () returned 0x570000 [0066.722] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1e) returned 0x5abd28 [0066.724] GetProcessHeap () returned 0x570000 [0066.724] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x1e) returned 0x5abd50 [0066.728] GetProcessHeap () returned 0x570000 [0066.728] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x90) returned 0x573b78 [0066.731] GetProcessHeap () returned 0x570000 [0066.732] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x573b78 | out: hHeap=0x570000) returned 1 [0066.734] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x5abd28, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0066.736] GetProcessHeap () returned 0x570000 [0066.736] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abd50 | out: hHeap=0x570000) returned 1 [0066.738] GetProcessHeap () returned 0x570000 [0066.742] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abe90 | out: hHeap=0x570000) returned 1 [0066.742] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xcdfc6c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xcdfc6c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0066.742] GetProcessHeap () returned 0x570000 [0066.742] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abd28 | out: hHeap=0x570000) returned 1 [0066.742] GetProcessHeap () returned 0x570000 [0066.742] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x40) returned 0x57da68 [0066.742] GetProcessHeap () returned 0x570000 [0066.742] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x3a) returned 0x57dab0 [0066.742] GetProcessHeap () returned 0x570000 [0066.742] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x57dab0, Size=0x72) returned 0x58eaa8 [0066.742] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x268 [0066.742] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0x0) returned 0x102 [0066.742] CloseHandle (hObject=0x268) returned 1 [0066.742] GetProcessHeap () returned 0x570000 [0066.742] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57da68 | out: hHeap=0x570000) returned 1 [0066.742] GetProcessHeap () returned 0x570000 [0066.742] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58eaa8 | out: hHeap=0x570000) returned 1 [0066.742] Sleep (dwMilliseconds=0x3e8) [0067.831] GetProcessHeap () returned 0x570000 [0067.831] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5abee0 [0067.831] GetProcessHeap () returned 0x570000 [0067.831] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1e) returned 0x5abc60 [0067.831] GetProcessHeap () returned 0x570000 [0067.831] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x1e) returned 0x5abcd8 [0067.831] GetProcessHeap () returned 0x570000 [0067.831] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x90) returned 0x57a6f8 [0067.831] GetProcessHeap () returned 0x570000 [0067.831] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57a6f8 | out: hHeap=0x570000) returned 1 [0067.831] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x5abc60, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0067.831] GetProcessHeap () returned 0x570000 [0067.831] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abcd8 | out: hHeap=0x570000) returned 1 [0067.831] GetProcessHeap () returned 0x570000 [0067.831] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abee0 | out: hHeap=0x570000) returned 1 [0067.831] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xcdfc6c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xcdfc6c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0067.831] GetProcessHeap () returned 0x570000 [0067.831] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abc60 | out: hHeap=0x570000) returned 1 [0067.831] GetProcessHeap () returned 0x570000 [0067.831] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x40) returned 0x57e050 [0067.831] GetProcessHeap () returned 0x570000 [0067.831] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x3a) returned 0x57da68 [0067.831] GetProcessHeap () returned 0x570000 [0067.831] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x57da68, Size=0x72) returned 0x58f228 [0067.832] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x268 [0067.832] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0x0) returned 0x102 [0067.832] CloseHandle (hObject=0x268) returned 1 [0067.832] GetProcessHeap () returned 0x570000 [0067.832] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57e050 | out: hHeap=0x570000) returned 1 [0067.832] GetProcessHeap () returned 0x570000 [0067.832] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f228 | out: hHeap=0x570000) returned 1 [0067.832] Sleep (dwMilliseconds=0x3e8) [0069.124] GetProcessHeap () returned 0x570000 [0069.124] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5abcb0 [0069.124] GetProcessHeap () returned 0x570000 [0069.124] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1e) returned 0x5abd50 [0069.124] GetProcessHeap () returned 0x570000 [0069.124] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x1e) returned 0x5abd00 [0069.124] GetProcessHeap () returned 0x570000 [0069.124] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x90) returned 0x57a6f8 [0069.124] GetProcessHeap () returned 0x570000 [0069.124] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57a6f8 | out: hHeap=0x570000) returned 1 [0069.124] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x5abd50, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0069.124] GetProcessHeap () returned 0x570000 [0069.124] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abd00 | out: hHeap=0x570000) returned 1 [0069.124] GetProcessHeap () returned 0x570000 [0069.125] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abcb0 | out: hHeap=0x570000) returned 1 [0069.125] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xcdfc6c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xcdfc6c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0069.125] GetProcessHeap () returned 0x570000 [0069.125] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abd50 | out: hHeap=0x570000) returned 1 [0069.125] GetProcessHeap () returned 0x570000 [0069.125] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x40) returned 0x57db40 [0069.125] GetProcessHeap () returned 0x570000 [0069.125] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x3a) returned 0x57e050 [0069.125] GetProcessHeap () returned 0x570000 [0069.125] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x57e050, Size=0x72) returned 0x58ef28 [0069.125] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x268 [0069.125] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0x0) returned 0x102 [0069.125] CloseHandle (hObject=0x268) returned 1 [0069.125] GetProcessHeap () returned 0x570000 [0069.125] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57db40 | out: hHeap=0x570000) returned 1 [0069.125] GetProcessHeap () returned 0x570000 [0069.125] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ef28 | out: hHeap=0x570000) returned 1 [0069.125] Sleep (dwMilliseconds=0x3e8) [0070.265] GetProcessHeap () returned 0x570000 [0070.265] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5abd28 [0070.265] GetProcessHeap () returned 0x570000 [0070.265] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1e) returned 0x5abc60 [0070.265] GetProcessHeap () returned 0x570000 [0070.265] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x1e) returned 0x5abee0 [0070.265] GetProcessHeap () returned 0x570000 [0070.265] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x90) returned 0x57a6f8 [0070.265] GetProcessHeap () returned 0x570000 [0070.265] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57a6f8 | out: hHeap=0x570000) returned 1 [0070.265] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x5abc60, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0070.265] GetProcessHeap () returned 0x570000 [0070.265] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abee0 | out: hHeap=0x570000) returned 1 [0070.265] GetProcessHeap () returned 0x570000 [0070.265] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abd28 | out: hHeap=0x570000) returned 1 [0070.265] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xcdfc6c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xcdfc6c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0070.265] GetProcessHeap () returned 0x570000 [0070.265] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5abc60 | out: hHeap=0x570000) returned 1 [0070.265] GetProcessHeap () returned 0x570000 [0070.265] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x40) returned 0x57e050 [0070.265] GetProcessHeap () returned 0x570000 [0070.265] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x3a) returned 0x57da68 [0070.265] GetProcessHeap () returned 0x570000 [0070.265] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x57da68, Size=0x72) returned 0x58eca8 [0070.265] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x268 [0070.266] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0x0) returned 0x102 [0070.266] CloseHandle (hObject=0x268) returned 1 [0070.266] GetProcessHeap () returned 0x570000 [0070.266] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57e050 | out: hHeap=0x570000) returned 1 [0070.266] GetProcessHeap () returned 0x570000 [0070.266] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58eca8 | out: hHeap=0x570000) returned 1 [0070.266] Sleep (dwMilliseconds=0x3e8) Thread: id = 6 os_tid = 0xe88 [0035.406] GetProcessHeap () returned 0x570000 [0035.406] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x440) returned 0x5914d8 [0035.406] GetProcessHeap () returned 0x570000 [0035.406] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x434) returned 0x591920 [0035.406] GetProcessHeap () returned 0x570000 [0035.406] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x591920 | out: hHeap=0x570000) returned 1 [0035.406] GetProcessHeap () returned 0x570000 [0035.430] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5914d8 | out: hHeap=0x570000) returned 1 Thread: id = 7 os_tid = 0x2e8 [0035.431] GetProcessHeap () returned 0x570000 [0035.431] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x21a) returned 0x5914d8 [0035.431] GetProcessHeap () returned 0x570000 [0035.431] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x28) returned 0x5805d8 [0035.431] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x228 [0035.431] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x22c [0035.431] GetComputerNameW (in: lpBuffer=0x5914e8, nSize=0xf9f8e8 | out: lpBuffer="NQDPDE", nSize=0xf9f8e8) returned 1 [0035.431] GetProcessHeap () returned 0x570000 [0035.431] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58f3d0 [0035.431] GetProcessHeap () returned 0x570000 [0035.431] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x4000) returned 0x591700 [0035.431] GetProcessHeap () returned 0x570000 [0035.431] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10000) returned 0x595708 [0035.432] WNetOpenEnumW (in: dwScope=0x1, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0xf9f89c | out: lphEnum=0xf9f89c*=0x57a3b8) returned 0x0 [0036.458] WNetEnumResourceW (in: hEnum=0x57a3b8, lpcCount=0xf9f890, lpBuffer=0x591700, lpBufferSize=0xf9f8a4 | out: lpcCount=0xf9f890, lpBuffer=0x591700, lpBufferSize=0xf9f8a4) returned 0x103 [0036.458] WNetCloseEnum (hEnum=0x57a3b8) returned 0x0 [0036.458] GetProcessHeap () returned 0x570000 [0036.458] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x591700 | out: hHeap=0x570000) returned 1 [0036.458] GetProcessHeap () returned 0x570000 [0036.458] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x595708 | out: hHeap=0x570000) returned 1 [0036.458] GetProcessHeap () returned 0x570000 [0036.458] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x4000) returned 0x5ac558 [0036.459] GetProcessHeap () returned 0x570000 [0036.459] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10000) returned 0x591700 [0036.459] WNetOpenEnumW (in: dwScope=0x4, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0xf9f884 | out: lphEnum=0xf9f884*=0x580cf0) returned 0x0 [0036.459] WNetEnumResourceW (in: hEnum=0x580cf0, lpcCount=0xf9f878, lpBuffer=0x5ac558, lpBufferSize=0xf9f88c | out: lpcCount=0xf9f878, lpBuffer=0x5ac558, lpBufferSize=0xf9f88c) returned 0x103 [0036.459] WNetCloseEnum (hEnum=0x580cf0) returned 0x0 [0036.459] GetProcessHeap () returned 0x570000 [0036.459] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5ac558 | out: hHeap=0x570000) returned 1 [0036.459] GetProcessHeap () returned 0x570000 [0036.459] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x591700 | out: hHeap=0x570000) returned 1 [0036.459] GetProcessHeap () returned 0x570000 [0036.459] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x4000) returned 0x5ac558 [0036.459] GetProcessHeap () returned 0x570000 [0036.459] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10000) returned 0x591700 [0036.459] WNetOpenEnumW (in: dwScope=0x5, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0xf9f86c | out: lphEnum=0xf9f86c*=0x57a3b8) returned 0x0 [0052.168] WNetEnumResourceW (in: hEnum=0x57a3b8, lpcCount=0xf9f860, lpBuffer=0x5ac558, lpBufferSize=0xf9f874 | out: lpcCount=0xf9f860, lpBuffer=0x5ac558, lpBufferSize=0xf9f874) returned 0x0 [0052.168] GetProcessHeap () returned 0x570000 [0052.168] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x4000) returned 0x5a1708 [0052.168] GetProcessHeap () returned 0x570000 [0052.168] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10000) returned 0x5b0560 [0052.169] WNetOpenEnumW (in: dwScope=0x5, dwType=0x0, dwUsage=0x0, lpNetResource=0x5ac558, lphEnum=0xf9f824 | out: lphEnum=0xf9f824*=0x578f50) returned 0x0 [0067.085] WNetEnumResourceW (in: hEnum=0x578f50, lpcCount=0xf9f818, lpBuffer=0x5a1708, lpBufferSize=0xf9f82c | out: lpcCount=0xf9f818, lpBuffer=0x5a1708, lpBufferSize=0xf9f82c) returned 0x0 [0067.085] WNetEnumResourceW (in: hEnum=0x578f50, lpcCount=0xf9f818, lpBuffer=0x5a1708, lpBufferSize=0xf9f82c | out: lpcCount=0xf9f818, lpBuffer=0x5a1708, lpBufferSize=0xf9f82c) returned 0x103 [0067.085] WNetCloseEnum (hEnum=0x578f50) returned 0x0 [0067.085] GetProcessHeap () returned 0x570000 [0067.085] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1708 | out: hHeap=0x570000) returned 1 [0067.085] GetProcessHeap () returned 0x570000 [0067.085] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5b0560 | out: hHeap=0x570000) returned 1 [0067.086] WNetEnumResourceW (in: hEnum=0x57a3b8, lpcCount=0xf9f860, lpBuffer=0x5ac558, lpBufferSize=0xf9f874 | out: lpcCount=0xf9f860, lpBuffer=0x5ac558, lpBufferSize=0xf9f874) returned 0x103 [0067.086] WNetCloseEnum (hEnum=0x57a3b8) returned 0x0 [0067.086] GetProcessHeap () returned 0x570000 [0067.086] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5ac558 | out: hHeap=0x570000) returned 1 [0067.087] GetProcessHeap () returned 0x570000 [0067.087] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x591700 | out: hHeap=0x570000) returned 1 [0067.087] GetProcessHeap () returned 0x570000 [0067.087] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x4000) returned 0x5c2c48 [0067.087] GetProcessHeap () returned 0x570000 [0067.087] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10000) returned 0x591700 [0067.087] WNetOpenEnumW (in: dwScope=0x3, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0xf9f89c | out: lphEnum=0xf9f89c*=0x580e90) returned 0x0 [0067.087] WNetEnumResourceW (in: hEnum=0x580e90, lpcCount=0xf9f890, lpBuffer=0x5c2c48, lpBufferSize=0xf9f8a4 | out: lpcCount=0xf9f890, lpBuffer=0x5c2c48, lpBufferSize=0xf9f8a4) returned 0x103 [0067.088] WNetCloseEnum (hEnum=0x580e90) returned 0x0 [0067.088] GetProcessHeap () returned 0x570000 [0067.088] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5c2c48 | out: hHeap=0x570000) returned 1 [0067.088] GetProcessHeap () returned 0x570000 [0067.088] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x591700 | out: hHeap=0x570000) returned 1 [0067.088] GetProcessHeap () returned 0x570000 [0067.088] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x4000) returned 0x5c2c48 [0067.088] GetProcessHeap () returned 0x570000 [0067.088] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10000) returned 0x591700 [0067.088] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0xf9f884 | out: lphEnum=0xf9f884*=0x582860) returned 0x0 [0067.089] WNetEnumResourceW (in: hEnum=0x582860, lpcCount=0xf9f878, lpBuffer=0x5c2c48, lpBufferSize=0xf9f88c | out: lpcCount=0xf9f878, lpBuffer=0x5c2c48, lpBufferSize=0xf9f88c) returned 0x0 [0067.089] GetProcessHeap () returned 0x570000 [0067.089] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x4000) returned 0x5a1708 [0067.089] GetProcessHeap () returned 0x570000 [0067.089] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10000) returned 0x5ac558 [0067.089] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x5c2c88, lphEnum=0xf9f83c | out: lphEnum=0xf9f83c*=0x0) returned 0x4c6 [0067.090] GetProcessHeap () returned 0x570000 [0067.090] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5a1708 | out: hHeap=0x570000) returned 1 [0067.090] GetProcessHeap () returned 0x570000 [0067.090] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5ac558 | out: hHeap=0x570000) returned 1 [0067.091] GetProcessHeap () returned 0x570000 [0067.091] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x4000) returned 0x5a1708 [0067.091] GetProcessHeap () returned 0x570000 [0067.091] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10000) returned 0x5ac558 [0067.091] WNetOpenEnumW (dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x5c2c68, lphEnum=0xf9f83c) Thread: id = 8 os_tid = 0x37c [0035.802] GetLogicalDrives () returned 0x4 [0035.802] GetProcessHeap () returned 0x570000 [0035.802] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x40) returned 0x57e008 [0035.802] GetProcessHeap () returned 0x570000 [0035.802] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x28) returned 0x5802a8 [0035.802] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x240 [0035.802] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x244 [0035.802] GetProcessHeap () returned 0x570000 [0035.802] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58f358 [0035.802] GetProcessHeap () returned 0x570000 [0035.802] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1e) returned 0x58f588 [0035.802] GetProcessHeap () returned 0x570000 [0035.802] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x1e) returned 0x58f420 [0035.802] GetProcessHeap () returned 0x570000 [0035.802] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x90) returned 0x57b1a0 [0035.802] GetProcessHeap () returned 0x570000 [0035.802] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b1a0 | out: hHeap=0x570000) returned 1 [0035.802] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x58f588, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0035.802] GetProcessHeap () returned 0x570000 [0035.802] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f420 | out: hHeap=0x570000) returned 1 [0035.802] GetProcessHeap () returned 0x570000 [0035.802] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f358 | out: hHeap=0x570000) returned 1 [0035.802] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x10dfe3c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x10dfe3c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0035.803] GetProcessHeap () returned 0x570000 [0035.803] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f588 | out: hHeap=0x570000) returned 1 [0035.803] WaitForSingleObject (hHandle=0x244, dwMilliseconds=0xffffffff) returned 0x0 [0035.803] CloseHandle (hObject=0x244) returned 1 [0035.803] CloseHandle (hObject=0x240) returned 1 [0035.803] GetProcessHeap () returned 0x570000 [0035.803] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5802a8 | out: hHeap=0x570000) returned 1 [0035.803] GetProcessHeap () returned 0x570000 [0035.803] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57e008 | out: hHeap=0x570000) returned 1 Thread: id = 9 os_tid = 0xd6c [0035.800] GetLogicalDrives () returned 0x4 [0035.800] GetProcessHeap () returned 0x570000 [0035.800] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58f358 [0035.800] GetProcessHeap () returned 0x570000 [0035.800] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1e) returned 0x58f380 [0035.800] GetProcessHeap () returned 0x570000 [0035.800] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x1e) returned 0x58f420 [0035.800] GetProcessHeap () returned 0x570000 [0035.800] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x90) returned 0x57b1a0 [0035.800] GetProcessHeap () returned 0x570000 [0035.800] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b1a0 | out: hHeap=0x570000) returned 1 [0035.800] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x58f380, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0035.800] GetProcessHeap () returned 0x570000 [0035.800] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f420 | out: hHeap=0x570000) returned 1 [0035.800] GetProcessHeap () returned 0x570000 [0035.800] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f358 | out: hHeap=0x570000) returned 1 [0035.800] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x121feb4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x121feb4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0035.800] GetProcessHeap () returned 0x570000 [0035.800] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f380 | out: hHeap=0x570000) returned 1 [0035.800] GetProcessHeap () returned 0x570000 [0035.800] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x40) returned 0x57dd38 [0035.800] GetProcessHeap () returned 0x570000 [0035.800] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x28) returned 0x5804b8 [0035.801] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x240 [0035.801] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x244 [0035.801] CloseHandle (hObject=0x244) returned 1 [0035.801] CloseHandle (hObject=0x240) returned 1 [0035.801] GetProcessHeap () returned 0x570000 [0035.801] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5804b8 | out: hHeap=0x570000) returned 1 [0035.801] GetProcessHeap () returned 0x570000 [0035.801] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57dd38 | out: hHeap=0x570000) returned 1 Thread: id = 34 os_tid = 0xf08 Thread: id = 35 os_tid = 0x7bc Process: id = "3" image_name = "cmd.exe" filename = "c:\\windows\\system32\\cmd.exe" page_root = "0x47ed1000" os_pid = "0xc70" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0xd60" cmd_line = "\"C:\\WINDOWS\\system32\\cmd.exe\"" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "64" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103c1" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 11 os_tid = 0x15c [0043.868] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff748b20000 [0043.868] __set_app_type (_Type=0x1) [0043.868] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x7ff748b36d00) returned 0x0 [0043.868] __getmainargs (in: _Argc=0x7ff748b59200, _Argv=0x7ff748b59208, _Env=0x7ff748b59210, _DoWildCard=0, _StartInfo=0x7ff748b5921c | out: _Argc=0x7ff748b59200, _Argv=0x7ff748b59208, _Env=0x7ff748b59210) returned 0 [0043.868] _onexit (_Func=0x7ff748b37fd0) returned 0x7ff748b37fd0 [0043.868] _onexit (_Func=0x7ff748b37fe0) returned 0x7ff748b37fe0 [0043.868] _onexit (_Func=0x7ff748b37ff0) returned 0x7ff748b37ff0 [0043.868] _onexit (_Func=0x7ff748b38000) returned 0x7ff748b38000 [0043.869] _onexit (_Func=0x7ff748b38010) returned 0x7ff748b38010 [0043.869] _onexit (_Func=0x7ff748b38020) returned 0x7ff748b38020 [0043.869] GetCurrentThreadId () returned 0x15c [0043.869] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x15c) returned 0x70 [0043.869] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x7ff92fdd0000 [0043.869] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="SetThreadUILanguage") returned 0x7ff92fdea990 [0043.869] SetThreadUILanguage (LangId=0x0) returned 0x409 [0043.902] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0043.902] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x2302fef878 | out: phkResult=0x2302fef878*=0x0) returned 0x2 [0043.902] VirtualQuery (in: lpAddress=0x2302fef864, lpBuffer=0x2302fef7e0, dwLength=0x30 | out: lpBuffer=0x2302fef7e0*(BaseAddress=0x2302fef000, AllocationBase=0x2302ef0000, AllocationProtect=0x4, __alignment1=0xffffb78a, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.902] VirtualQuery (in: lpAddress=0x2302ef0000, lpBuffer=0x2302fef7e0, dwLength=0x30 | out: lpBuffer=0x2302fef7e0*(BaseAddress=0x2302ef0000, AllocationBase=0x2302ef0000, AllocationProtect=0x4, __alignment1=0xffffb78a, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.902] VirtualQuery (in: lpAddress=0x2302ef1000, lpBuffer=0x2302fef7e0, dwLength=0x30 | out: lpBuffer=0x2302fef7e0*(BaseAddress=0x2302ef1000, AllocationBase=0x2302ef0000, AllocationProtect=0x4, __alignment1=0xffffb78a, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.902] VirtualQuery (in: lpAddress=0x2302ef4000, lpBuffer=0x2302fef7e0, dwLength=0x30 | out: lpBuffer=0x2302fef7e0*(BaseAddress=0x2302ef4000, AllocationBase=0x2302ef0000, AllocationProtect=0x4, __alignment1=0xffffb78a, RegionSize=0xfc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0043.902] VirtualQuery (in: lpAddress=0x2302ff0000, lpBuffer=0x2302fef7e0, dwLength=0x30 | out: lpBuffer=0x2302fef7e0*(BaseAddress=0x2302ff0000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0xffffb78a, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0043.902] GetConsoleOutputCP () returned 0x1b5 [0043.914] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff748b5fbb0 | out: lpCPInfo=0x7ff748b5fbb0) returned 1 [0043.914] SetConsoleCtrlHandler (HandlerRoutine=0x7ff748b48150, Add=1) returned 1 [0043.915] _get_osfhandle (_FileHandle=1) returned 0x25c [0043.915] GetConsoleMode (in: hConsoleHandle=0x25c, lpMode=0x7ff748b5fc04 | out: lpMode=0x7ff748b5fc04) returned 0 [0043.915] _get_osfhandle (_FileHandle=0) returned 0x258 [0043.915] GetConsoleMode (in: hConsoleHandle=0x258, lpMode=0x7ff748b5fc00 | out: lpMode=0x7ff748b5fc00) returned 0 [0043.915] _get_osfhandle (_FileHandle=1) returned 0x25c [0043.915] SetConsoleMode (hConsoleHandle=0x25c, dwMode=0x0) returned 0 [0043.915] _get_osfhandle (_FileHandle=1) returned 0x25c [0043.915] GetConsoleMode (in: hConsoleHandle=0x25c, lpMode=0x7ff748b5fc08 | out: lpMode=0x7ff748b5fc08) returned 0 [0043.915] _get_osfhandle (_FileHandle=0) returned 0x258 [0043.915] GetConsoleMode (in: hConsoleHandle=0x258, lpMode=0x7ff748b5fc0c | out: lpMode=0x7ff748b5fc0c) returned 0 [0043.915] GetEnvironmentStringsW () returned 0x13c7aa65a10* [0043.915] GetProcessHeap () returned 0x13c7aa60000 [0043.915] RtlAllocateHeap (HeapHandle=0x13c7aa60000, Flags=0x8, Size=0xa7c) returned 0x13c7aa664a0 [0043.915] FreeEnvironmentStringsA (penv="A") returned 1 [0043.915] GetProcessHeap () returned 0x13c7aa60000 [0043.915] RtlAllocateHeap (HeapHandle=0x13c7aa60000, Flags=0x8, Size=0x8) returned 0x13c7aa66f30 [0043.915] GetEnvironmentStringsW () returned 0x13c7aa65a10* [0043.915] GetProcessHeap () returned 0x13c7aa60000 [0043.915] RtlAllocateHeap (HeapHandle=0x13c7aa60000, Flags=0x8, Size=0xa7c) returned 0x13c7aa66f50 [0043.916] FreeEnvironmentStringsA (penv="A") returned 1 [0043.916] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x2302fee728 | out: phkResult=0x2302fee728*=0x7c) returned 0x0 [0043.916] RegQueryValueExW (in: hKey=0x7c, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x2302fee720, lpData=0x2302fee740, lpcbData=0x2302fee724*=0x1000 | out: lpType=0x2302fee720*=0x0, lpData=0x2302fee740*=0x4, lpcbData=0x2302fee724*=0x1000) returned 0x2 [0043.916] RegQueryValueExW (in: hKey=0x7c, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x2302fee720, lpData=0x2302fee740, lpcbData=0x2302fee724*=0x1000 | out: lpType=0x2302fee720*=0x4, lpData=0x2302fee740*=0x1, lpcbData=0x2302fee724*=0x4) returned 0x0 [0043.916] RegQueryValueExW (in: hKey=0x7c, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x2302fee720, lpData=0x2302fee740, lpcbData=0x2302fee724*=0x1000 | out: lpType=0x2302fee720*=0x0, lpData=0x2302fee740*=0x1, lpcbData=0x2302fee724*=0x1000) returned 0x2 [0043.916] RegQueryValueExW (in: hKey=0x7c, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x2302fee720, lpData=0x2302fee740, lpcbData=0x2302fee724*=0x1000 | out: lpType=0x2302fee720*=0x4, lpData=0x2302fee740*=0x0, lpcbData=0x2302fee724*=0x4) returned 0x0 [0043.916] RegQueryValueExW (in: hKey=0x7c, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x2302fee720, lpData=0x2302fee740, lpcbData=0x2302fee724*=0x1000 | out: lpType=0x2302fee720*=0x4, lpData=0x2302fee740*=0x40, lpcbData=0x2302fee724*=0x4) returned 0x0 [0043.916] RegQueryValueExW (in: hKey=0x7c, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x2302fee720, lpData=0x2302fee740, lpcbData=0x2302fee724*=0x1000 | out: lpType=0x2302fee720*=0x4, lpData=0x2302fee740*=0x40, lpcbData=0x2302fee724*=0x4) returned 0x0 [0043.916] RegQueryValueExW (in: hKey=0x7c, lpValueName="AutoRun", lpReserved=0x0, lpType=0x2302fee720, lpData=0x2302fee740, lpcbData=0x2302fee724*=0x1000 | out: lpType=0x2302fee720*=0x0, lpData=0x2302fee740*=0x40, lpcbData=0x2302fee724*=0x1000) returned 0x2 [0043.916] RegCloseKey (hKey=0x7c) returned 0x0 [0043.916] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x2302fee728 | out: phkResult=0x2302fee728*=0x7c) returned 0x0 [0043.916] RegQueryValueExW (in: hKey=0x7c, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x2302fee720, lpData=0x2302fee740, lpcbData=0x2302fee724*=0x1000 | out: lpType=0x2302fee720*=0x0, lpData=0x2302fee740*=0x40, lpcbData=0x2302fee724*=0x1000) returned 0x2 [0043.916] RegQueryValueExW (in: hKey=0x7c, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x2302fee720, lpData=0x2302fee740, lpcbData=0x2302fee724*=0x1000 | out: lpType=0x2302fee720*=0x4, lpData=0x2302fee740*=0x1, lpcbData=0x2302fee724*=0x4) returned 0x0 [0043.916] RegQueryValueExW (in: hKey=0x7c, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x2302fee720, lpData=0x2302fee740, lpcbData=0x2302fee724*=0x1000 | out: lpType=0x2302fee720*=0x0, lpData=0x2302fee740*=0x1, lpcbData=0x2302fee724*=0x1000) returned 0x2 [0043.916] RegQueryValueExW (in: hKey=0x7c, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x2302fee720, lpData=0x2302fee740, lpcbData=0x2302fee724*=0x1000 | out: lpType=0x2302fee720*=0x4, lpData=0x2302fee740*=0x0, lpcbData=0x2302fee724*=0x4) returned 0x0 [0043.916] RegQueryValueExW (in: hKey=0x7c, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x2302fee720, lpData=0x2302fee740, lpcbData=0x2302fee724*=0x1000 | out: lpType=0x2302fee720*=0x4, lpData=0x2302fee740*=0x9, lpcbData=0x2302fee724*=0x4) returned 0x0 [0043.916] RegQueryValueExW (in: hKey=0x7c, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x2302fee720, lpData=0x2302fee740, lpcbData=0x2302fee724*=0x1000 | out: lpType=0x2302fee720*=0x4, lpData=0x2302fee740*=0x9, lpcbData=0x2302fee724*=0x4) returned 0x0 [0043.916] RegQueryValueExW (in: hKey=0x7c, lpValueName="AutoRun", lpReserved=0x0, lpType=0x2302fee720, lpData=0x2302fee740, lpcbData=0x2302fee724*=0x1000 | out: lpType=0x2302fee720*=0x0, lpData=0x2302fee740*=0x9, lpcbData=0x2302fee724*=0x1000) returned 0x2 [0043.916] RegCloseKey (hKey=0x7c) returned 0x0 [0043.916] time (in: timer=0x0 | out: timer=0x0) returned 0x5d7ade05 [0043.916] srand (_Seed=0x5d7ade05) [0043.916] GetCommandLineW () returned="\"C:\\WINDOWS\\system32\\cmd.exe\"" [0043.916] malloc (_Size=0x4000) returned 0x13c7ada54f0 [0043.917] GetCommandLineW () returned="\"C:\\WINDOWS\\system32\\cmd.exe\"" [0043.917] malloc (_Size=0xffce) returned 0x13c7ac30080 [0043.917] ??_V@YAXPEAX@Z () returned 0x13c7ac30080 [0043.918] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x13c7ac30080 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.918] malloc (_Size=0xffce) returned 0x13c7ac40060 [0043.918] ??_V@YAXPEAX@Z () returned 0x13c7ac40060 [0043.919] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x13c7ac40060, nSize=0x7fe7 | out: lpFilename="C:\\WINDOWS\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe")) returned 0x1b [0043.919] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x7ff748b5bb90, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0043.919] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff748b5bb90, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0043.919] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x7ff748b5bb90, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0043.919] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0043.919] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0043.919] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0043.919] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0043.919] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0043.919] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0043.919] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0043.919] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0043.919] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0043.919] GetProcessHeap () returned 0x13c7aa60000 [0043.919] RtlFreeHeap (HeapHandle=0x13c7aa60000, Flags=0x0, BaseAddress=0x13c7aa664a0) returned 1 [0043.919] GetEnvironmentStringsW () returned 0x13c7aa65a10* [0043.919] GetProcessHeap () returned 0x13c7aa60000 [0043.919] RtlAllocateHeap (HeapHandle=0x13c7aa60000, Flags=0x8, Size=0xa94) returned 0x13c7aa67a10 [0043.919] FreeEnvironmentStringsA (penv="A") returned 1 [0043.919] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x7ff748b5bb90, nSize=0x2000 | out: lpBuffer="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1b [0043.919] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x7ff748b5bb90, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0043.919] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0043.920] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0043.920] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0043.920] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0043.920] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0043.920] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0043.920] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0043.920] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0043.920] malloc (_Size=0xffce) returned 0x13c7ac50040 [0043.920] ??_V@YAXPEAX@Z () returned 0x13c7ac50040 [0043.920] GetProcessHeap () returned 0x13c7aa60000 [0043.920] RtlAllocateHeap (HeapHandle=0x13c7aa60000, Flags=0x8, Size=0x40) returned 0x13c7aa684b0 [0043.920] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x13c7ac50040 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.921] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x7fe7, lpBuffer=0x13c7ac50040, lpFilePart=0x2302fef2a0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x2302fef2a0*="Desktop") returned 0x17 [0043.921] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0043.921] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x2302feefd0 | out: lpFindFileData=0x2302feefd0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x13c7aa68500 [0043.921] FindClose (in: hFindFile=0x13c7aa68500 | out: hFindFile=0x13c7aa68500) returned 1 [0043.922] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy", lpFindFileData=0x2302feefd0 | out: lpFindFileData=0x2302feefd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9de5855d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9de5855d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD1HVy", cAlternateFileName="")) returned 0x13c7aa68500 [0043.922] FindClose (in: hFindFile=0x13c7aa68500 | out: hFindFile=0x13c7aa68500) returned 1 [0043.922] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", lpFindFileData=0x2302feefd0 | out: lpFindFileData=0x2302feefd0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x520b0c35, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x520b0c35, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x13c7aa68500 [0043.922] FindClose (in: hFindFile=0x13c7aa68500 | out: hFindFile=0x13c7aa68500) returned 1 [0043.922] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0043.922] SetCurrentDirectoryW (lpPathName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 1 [0043.922] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\FD1HVy\\Desktop") returned 1 [0043.922] GetProcessHeap () returned 0x13c7aa60000 [0043.922] RtlFreeHeap (HeapHandle=0x13c7aa60000, Flags=0x0, BaseAddress=0x13c7aa67a10) returned 1 [0043.922] GetEnvironmentStringsW () returned 0x13c7aa60fc0* [0043.922] GetProcessHeap () returned 0x13c7aa60000 [0043.922] RtlAllocateHeap (HeapHandle=0x13c7aa60000, Flags=0x8, Size=0xacc) returned 0x13c7aa68500 [0043.922] FreeEnvironmentStringsA (penv="=") returned 1 [0043.922] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x13c7ac30080 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.922] GetProcessHeap () returned 0x13c7aa60000 [0043.922] RtlFreeHeap (HeapHandle=0x13c7aa60000, Flags=0x0, BaseAddress=0x13c7aa684b0) returned 1 [0043.922] ??_V@YAXPEAX@Z () returned 0x1 [0043.922] ??_V@YAXPEAX@Z () returned 0x1 [0043.922] GetProcessHeap () returned 0x13c7aa60000 [0043.922] RtlAllocateHeap (HeapHandle=0x13c7aa60000, Flags=0x8, Size=0x4016) returned 0x13c7aa68fe0 [0043.923] GetProcessHeap () returned 0x13c7aa60000 [0043.923] RtlFreeHeap (HeapHandle=0x13c7aa60000, Flags=0x0, BaseAddress=0x13c7aa68fe0) returned 1 [0043.923] GetConsoleOutputCP () returned 0x1b5 [0043.982] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff748b5fbb0 | out: lpCPInfo=0x7ff748b5fbb0) returned 1 [0043.982] GetUserDefaultLCID () returned 0x409 [0043.983] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x7ff748b5bb78, cchData=8 | out: lpLCData=":") returned 2 [0043.983] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x2302fef660, cchData=128 | out: lpLCData="0") returned 2 [0043.983] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x2302fef660, cchData=128 | out: lpLCData="0") returned 2 [0043.983] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x2302fef660, cchData=128 | out: lpLCData="1") returned 2 [0043.983] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x7ff748b5bb68, cchData=8 | out: lpLCData="/") returned 2 [0043.983] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x7ff748b5bb00, cchData=32 | out: lpLCData="Mon") returned 4 [0043.983] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x7ff748b5bac0, cchData=32 | out: lpLCData="Tue") returned 4 [0043.983] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x7ff748b5ba80, cchData=32 | out: lpLCData="Wed") returned 4 [0043.983] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x7ff748b5ba40, cchData=32 | out: lpLCData="Thu") returned 4 [0043.983] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x7ff748b5ba00, cchData=32 | out: lpLCData="Fri") returned 4 [0043.983] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x7ff748b5b9c0, cchData=32 | out: lpLCData="Sat") returned 4 [0043.983] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x7ff748b5b980, cchData=32 | out: lpLCData="Sun") returned 4 [0043.983] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x7ff748b5bb58, cchData=8 | out: lpLCData=".") returned 2 [0043.983] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x7ff748b5bb40, cchData=8 | out: lpLCData=",") returned 2 [0043.983] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0043.985] GetProcessHeap () returned 0x13c7aa60000 [0043.985] RtlAllocateHeap (HeapHandle=0x13c7aa60000, Flags=0x0, Size=0x20c) returned 0x13c7aa66560 [0043.985] GetConsoleTitleW (in: lpConsoleTitle=0x13c7aa66560, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0043.990] _get_osfhandle (_FileHandle=1) returned 0x25c [0043.990] GetFileType (hFile=0x25c) returned 0x3 [0043.997] ApiSetQueryApiSetPresence () returned 0x0 [0043.997] ResolveDelayLoadedAPI () returned 0x7ff91abfd990 [0044.094] BrandingFormatString () returned 0x13c7aa61850 [0044.099] GetVersion () returned 0x3ad7000a [0044.099] _vsnwprintf (in: _Buffer=0x2302fef7c0, _BufferCount=0x1f, _Format="%d.%d.%04d", _ArgList=0x2302fef758 | out: _Buffer="10.0.15063") returned 10 [0044.099] _get_osfhandle (_FileHandle=1) returned 0x25c [0044.099] GetFileType (hFile=0x25c) returned 0x3 [0044.099] FormatMessageW (in: dwFlags=0x1a00, lpSource=0x0, dwMessageId=0x2350, dwLanguageId=0x0, lpBuffer=0x7ff748b67f60, nSize=0x2000, Arguments=0x0 | out: lpBuffer="Microsoft Windows [Version %1]") returned 0x1e [0044.100] FormatMessageW (in: dwFlags=0x1800, lpSource=0x0, dwMessageId=0x2350, dwLanguageId=0x0, lpBuffer=0x7ff748b67f60, nSize=0x2000, Arguments=0x2302fef760 | out: lpBuffer="Microsoft Windows [Version 10.0.15063]") returned 0x26 [0044.100] _get_osfhandle (_FileHandle=1) returned 0x25c [0044.100] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Windows [Version 10.0.15063]", cchWideChar=-1, lpMultiByteStr=0x7ff748b59970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Windows [Version 10.0.15063]", lpUsedDefaultChar=0x0) returned 39 [0044.100] WriteFile (in: hFile=0x25c, lpBuffer=0x7ff748b59970*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x2302fef6b8, lpOverlapped=0x0 | out: lpBuffer=0x7ff748b59970*, lpNumberOfBytesWritten=0x2302fef6b8*=0x26, lpOverlapped=0x0) returned 1 [0044.100] _vsnwprintf (in: _Buffer=0x7ff748b67f60, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0x2302fef788 | out: _Buffer="\r\n") returned 2 [0044.100] _get_osfhandle (_FileHandle=1) returned 0x25c [0044.100] GetFileType (hFile=0x25c) returned 0x3 [0044.100] _get_osfhandle (_FileHandle=1) returned 0x25c [0044.100] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x7ff748b59970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3 [0044.100] WriteFile (in: hFile=0x25c, lpBuffer=0x7ff748b59970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x2302fef758, lpOverlapped=0x0 | out: lpBuffer=0x7ff748b59970*, lpNumberOfBytesWritten=0x2302fef758*=0x2, lpOverlapped=0x0) returned 1 [0044.100] _vsnwprintf (in: _Buffer=0x7ff748b67f60, _BufferCount=0x1fff, _Format="%s", _ArgList=0x2302fef788 | out: _Buffer="(c) 2017 Microsoft Corporation. All rights reserved.") returned 52 [0044.100] _get_osfhandle (_FileHandle=1) returned 0x25c [0044.100] GetFileType (hFile=0x25c) returned 0x3 [0044.100] _get_osfhandle (_FileHandle=1) returned 0x25c [0044.100] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="(c) 2017 Microsoft Corporation. All rights reserved.", cchWideChar=-1, lpMultiByteStr=0x7ff748b59970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="(c) 2017 Microsoft Corporation. All rights reserved.", lpUsedDefaultChar=0x0) returned 53 [0044.100] WriteFile (in: hFile=0x25c, lpBuffer=0x7ff748b59970*, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0x2302fef758, lpOverlapped=0x0 | out: lpBuffer=0x7ff748b59970*, lpNumberOfBytesWritten=0x2302fef758*=0x34, lpOverlapped=0x0) returned 1 [0044.100] _vsnwprintf (in: _Buffer=0x7ff748b67f60, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0x2302fef788 | out: _Buffer="\r\n") returned 2 [0044.100] _get_osfhandle (_FileHandle=1) returned 0x25c [0044.100] GetFileType (hFile=0x25c) returned 0x3 [0044.100] _get_osfhandle (_FileHandle=1) returned 0x25c [0044.100] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x7ff748b59970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3 [0044.100] WriteFile (in: hFile=0x25c, lpBuffer=0x7ff748b59970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x2302fef758, lpOverlapped=0x0 | out: lpBuffer=0x7ff748b59970*, lpNumberOfBytesWritten=0x2302fef758*=0x2, lpOverlapped=0x0) returned 1 [0044.101] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x7ff92fdd0000 [0044.101] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CopyFileExW") returned 0x7ff92fdee830 [0044.101] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="IsDebuggerPresent") returned 0x7ff92fdee300 [0044.101] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="SetConsoleInputExeNameW") returned 0x7ff92f1b0a40 [0044.101] ??_V@YAXPEAX@Z () returned 0x1 [0044.101] _get_osfhandle (_FileHandle=0) returned 0x258 [0044.102] GetFileType (hFile=0x258) returned 0x3 [0044.102] _setmode (_FileHandle=0, _Mode=32768) returned 16384 [0044.102] NtOpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x8, OpenAsSelf=0, TokenHandle=0x2302fef5c8 | out: TokenHandle=0x2302fef5c8*=0x0) returned 0xc000007c [0044.102] NtOpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x8, TokenHandle=0x2302fef5c8 | out: TokenHandle=0x2302fef5c8*=0x94) returned 0x0 [0044.102] NtQueryInformationToken (in: TokenHandle=0x94, TokenInformationClass=0x12, TokenInformation=0x2302fef578, TokenInformationLength=0x4, ReturnLength=0x2302fef580 | out: TokenInformation=0x2302fef578, ReturnLength=0x2302fef580) returned 0x0 [0044.102] NtQueryInformationToken (in: TokenHandle=0x94, TokenInformationClass=0x1a, TokenInformation=0x2302fef580, TokenInformationLength=0x4, ReturnLength=0x2302fef578 | out: TokenInformation=0x2302fef580, ReturnLength=0x2302fef578) returned 0x0 [0044.102] NtClose (Handle=0x94) returned 0x0 [0044.102] FormatMessageW (in: dwFlags=0x1900, lpSource=0x0, dwMessageId=0x40002748, dwLanguageId=0x0, lpBuffer=0x2302fef590, nSize=0x0, Arguments=0x2302fef598 | out: lpBuffer="茠窦ļ") returned 0xf [0044.102] GetProcessHeap () returned 0x13c7aa60000 [0044.102] RtlAllocateHeap (HeapHandle=0x13c7aa60000, Flags=0x8, Size=0x218) returned 0x13c7aa66c30 [0044.103] GetConsoleTitleW (in: lpConsoleTitle=0x2302fef5e0, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0044.222] wcsstr (_Str="C:\\WINDOWS\\system32\\cmd.exe", _SubStr="Administrator: ") returned 0x0 [0044.222] SetConsoleTitleW (lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe") returned 1 [0044.379] GetProcessHeap () returned 0x13c7aa60000 [0044.379] RtlFreeHeap (HeapHandle=0x13c7aa60000, Flags=0x0, BaseAddress=0x13c7aa66c30) returned 1 [0044.379] LocalFree (hMem=0x13c7aa68320) returned 0x0 [0044.380] _vsnwprintf (in: _Buffer=0x7ff748b67f60, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0x2302fef408 | out: _Buffer="\r\n") returned 2 [0044.380] _get_osfhandle (_FileHandle=1) returned 0x25c [0044.380] GetFileType (hFile=0x25c) returned 0x3 [0044.380] _get_osfhandle (_FileHandle=1) returned 0x25c [0044.380] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x7ff748b59970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3 [0044.380] WriteFile (in: hFile=0x25c, lpBuffer=0x7ff748b59970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x2302fef3d8, lpOverlapped=0x0 | out: lpBuffer=0x7ff748b59970*, lpNumberOfBytesWritten=0x2302fef3d8*=0x2, lpOverlapped=0x0) returned 1 [0044.381] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x7ff748b5bb90, nSize=0x2000 | out: lpBuffer="$P$G") returned 0x4 [0044.381] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x13c7ac30080 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.381] malloc (_Size=0x107ce) returned 0x13c7ac40060 [0044.381] _vsnwprintf (in: _Buffer=0x13c7ac40060, _BufferCount=0x83e5, _Format="%s", _ArgList=0x2302fef418 | out: _Buffer="C:\\Users\\FD1HVy\\Desktop") returned 23 [0044.381] _vsnwprintf (in: _Buffer=0x13c7ac4008e, _BufferCount=0x83ce, _Format="%c", _ArgList=0x2302fef418 | out: _Buffer=">") returned 1 [0044.381] _get_osfhandle (_FileHandle=1) returned 0x25c [0044.381] GetFileType (hFile=0x25c) returned 0x3 [0044.381] _get_osfhandle (_FileHandle=1) returned 0x25c [0044.381] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Users\\FD1HVy\\Desktop>", cchWideChar=-1, lpMultiByteStr=0x7ff748b59970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\FD1HVy\\Desktop>", lpUsedDefaultChar=0x0) returned 25 [0044.381] WriteFile (in: hFile=0x25c, lpBuffer=0x7ff748b59970*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x2302fef408, lpOverlapped=0x0 | out: lpBuffer=0x7ff748b59970*, lpNumberOfBytesWritten=0x2302fef408*=0x18, lpOverlapped=0x0) returned 1 [0044.381] _get_osfhandle (_FileHandle=0) returned 0x258 [0044.381] GetFileType (hFile=0x258) returned 0x3 [0044.381] _get_osfhandle (_FileHandle=0) returned 0x258 [0044.382] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0044.382] ReadFile (in: hFile=0x258, lpBuffer=0x7ff748b59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2302fef768, lpOverlapped=0x0 | out: lpBuffer=0x7ff748b59970*, lpNumberOfBytesRead=0x2302fef768*=0x1, lpOverlapped=0x0) returned 1 [0044.382] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff748b59970, cbMultiByte=1, lpWideCharStr=0x7ff748b63c30, cchWideChar=1 | out: lpWideCharStr="n") returned 1 [0044.382] _get_osfhandle (_FileHandle=0) returned 0x258 [0044.382] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0044.382] ReadFile (in: hFile=0x258, lpBuffer=0x7ff748b59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2302fef768, lpOverlapped=0x0 | out: lpBuffer=0x7ff748b59970*, lpNumberOfBytesRead=0x2302fef768*=0x1, lpOverlapped=0x0) returned 1 [0044.382] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff748b59970, cbMultiByte=1, lpWideCharStr=0x7ff748b63c32, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0044.382] _get_osfhandle (_FileHandle=0) returned 0x258 [0044.382] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0044.382] ReadFile (in: hFile=0x258, lpBuffer=0x7ff748b59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2302fef768, lpOverlapped=0x0 | out: lpBuffer=0x7ff748b59970*, lpNumberOfBytesRead=0x2302fef768*=0x1, lpOverlapped=0x0) returned 1 [0044.382] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff748b59970, cbMultiByte=1, lpWideCharStr=0x7ff748b63c34, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0044.382] _get_osfhandle (_FileHandle=0) returned 0x258 [0044.382] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0044.382] ReadFile (in: hFile=0x258, lpBuffer=0x7ff748b59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2302fef768, lpOverlapped=0x0 | out: lpBuffer=0x7ff748b59970*, lpNumberOfBytesRead=0x2302fef768*=0x1, lpOverlapped=0x0) returned 1 [0044.382] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff748b59970, cbMultiByte=1, lpWideCharStr=0x7ff748b63c36, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0044.382] _get_osfhandle (_FileHandle=0) returned 0x258 [0044.383] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0044.383] ReadFile (in: hFile=0x258, lpBuffer=0x7ff748b59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2302fef768, lpOverlapped=0x0 | out: lpBuffer=0x7ff748b59970*, lpNumberOfBytesRead=0x2302fef768*=0x1, lpOverlapped=0x0) returned 1 [0044.383] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff748b59970, cbMultiByte=1, lpWideCharStr=0x7ff748b63c38, cchWideChar=1 | out: lpWideCharStr="h") returned 1 [0044.383] _get_osfhandle (_FileHandle=0) returned 0x258 [0044.383] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0044.383] ReadFile (in: hFile=0x258, lpBuffer=0x7ff748b59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2302fef768, lpOverlapped=0x0 | out: lpBuffer=0x7ff748b59970*, lpNumberOfBytesRead=0x2302fef768*=0x1, lpOverlapped=0x0) returned 1 [0044.383] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff748b59970, cbMultiByte=1, lpWideCharStr=0x7ff748b63c3a, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0044.383] _get_osfhandle (_FileHandle=0) returned 0x258 [0044.383] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0044.383] ReadFile (in: hFile=0x258, lpBuffer=0x7ff748b59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2302fef768, lpOverlapped=0x0 | out: lpBuffer=0x7ff748b59970*, lpNumberOfBytesRead=0x2302fef768*=0x1, lpOverlapped=0x0) returned 1 [0044.383] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff748b59970, cbMultiByte=1, lpWideCharStr=0x7ff748b63c3c, cchWideChar=1 | out: lpWideCharStr="a") returned 1 [0044.383] _get_osfhandle (_FileHandle=0) returned 0x258 [0044.383] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0044.383] ReadFile (in: hFile=0x258, lpBuffer=0x7ff748b59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2302fef768, lpOverlapped=0x0 | out: lpBuffer=0x7ff748b59970*, lpNumberOfBytesRead=0x2302fef768*=0x1, lpOverlapped=0x0) returned 1 [0044.383] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff748b59970, cbMultiByte=1, lpWideCharStr=0x7ff748b63c3e, cchWideChar=1 | out: lpWideCharStr="d") returned 1 [0044.383] _get_osfhandle (_FileHandle=0) returned 0x258 [0044.383] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0044.383] ReadFile (in: hFile=0x258, lpBuffer=0x7ff748b59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2302fef768, lpOverlapped=0x0 | out: lpBuffer=0x7ff748b59970*, lpNumberOfBytesRead=0x2302fef768*=0x1, lpOverlapped=0x0) returned 1 [0044.383] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff748b59970, cbMultiByte=1, lpWideCharStr=0x7ff748b63c40, cchWideChar=1 | out: lpWideCharStr="v") returned 1 [0044.383] _get_osfhandle (_FileHandle=0) returned 0x258 [0044.383] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0044.383] ReadFile (in: hFile=0x258, lpBuffer=0x7ff748b59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2302fef768, lpOverlapped=0x0 | out: lpBuffer=0x7ff748b59970*, lpNumberOfBytesRead=0x2302fef768*=0x1, lpOverlapped=0x0) returned 1 [0044.383] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff748b59970, cbMultiByte=1, lpWideCharStr=0x7ff748b63c42, cchWideChar=1 | out: lpWideCharStr="f") returned 1 [0044.383] _get_osfhandle (_FileHandle=0) returned 0x258 [0044.383] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0044.383] ReadFile (in: hFile=0x258, lpBuffer=0x7ff748b59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2302fef768, lpOverlapped=0x0 | out: lpBuffer=0x7ff748b59970*, lpNumberOfBytesRead=0x2302fef768*=0x1, lpOverlapped=0x0) returned 1 [0044.383] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff748b59970, cbMultiByte=1, lpWideCharStr=0x7ff748b63c44, cchWideChar=1 | out: lpWideCharStr="i") returned 1 [0044.384] _get_osfhandle (_FileHandle=0) returned 0x258 [0044.384] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0044.384] ReadFile (in: hFile=0x258, lpBuffer=0x7ff748b59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2302fef768, lpOverlapped=0x0 | out: lpBuffer=0x7ff748b59970*, lpNumberOfBytesRead=0x2302fef768*=0x1, lpOverlapped=0x0) returned 1 [0044.384] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff748b59970, cbMultiByte=1, lpWideCharStr=0x7ff748b63c46, cchWideChar=1 | out: lpWideCharStr="r") returned 1 [0044.384] _get_osfhandle (_FileHandle=0) returned 0x258 [0044.384] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0044.384] ReadFile (in: hFile=0x258, lpBuffer=0x7ff748b59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2302fef768, lpOverlapped=0x0 | out: lpBuffer=0x7ff748b59970*, lpNumberOfBytesRead=0x2302fef768*=0x1, lpOverlapped=0x0) returned 1 [0044.384] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff748b59970, cbMultiByte=1, lpWideCharStr=0x7ff748b63c48, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0044.384] _get_osfhandle (_FileHandle=0) returned 0x258 [0044.384] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0044.384] ReadFile (in: hFile=0x258, lpBuffer=0x7ff748b59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2302fef768, lpOverlapped=0x0 | out: lpBuffer=0x7ff748b59970*, lpNumberOfBytesRead=0x2302fef768*=0x1, lpOverlapped=0x0) returned 1 [0044.384] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff748b59970, cbMultiByte=1, lpWideCharStr=0x7ff748b63c4a, cchWideChar=1 | out: lpWideCharStr="w") returned 1 [0044.384] _get_osfhandle (_FileHandle=0) returned 0x258 [0044.384] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0044.384] ReadFile (in: hFile=0x258, lpBuffer=0x7ff748b59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2302fef768, lpOverlapped=0x0 | out: lpBuffer=0x7ff748b59970*, lpNumberOfBytesRead=0x2302fef768*=0x1, lpOverlapped=0x0) returned 1 [0044.384] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff748b59970, cbMultiByte=1, lpWideCharStr=0x7ff748b63c4c, cchWideChar=1 | out: lpWideCharStr="a") returned 1 [0044.384] _get_osfhandle (_FileHandle=0) returned 0x258 [0044.384] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0044.384] ReadFile (in: hFile=0x258, lpBuffer=0x7ff748b59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2302fef768, lpOverlapped=0x0 | out: lpBuffer=0x7ff748b59970*, lpNumberOfBytesRead=0x2302fef768*=0x1, lpOverlapped=0x0) returned 1 [0044.384] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff748b59970, cbMultiByte=1, lpWideCharStr=0x7ff748b63c4e, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0044.384] _get_osfhandle (_FileHandle=0) returned 0x258 [0044.384] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0044.384] ReadFile (in: hFile=0x258, lpBuffer=0x7ff748b59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2302fef768, lpOverlapped=0x0 | out: lpBuffer=0x7ff748b59970*, lpNumberOfBytesRead=0x2302fef768*=0x1, lpOverlapped=0x0) returned 1 [0044.384] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff748b59970, cbMultiByte=1, lpWideCharStr=0x7ff748b63c50, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0044.384] _get_osfhandle (_FileHandle=0) returned 0x258 [0044.384] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0044.384] ReadFile (in: hFile=0x258, lpBuffer=0x7ff748b59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2302fef768, lpOverlapped=0x0 | out: lpBuffer=0x7ff748b59970*, lpNumberOfBytesRead=0x2302fef768*=0x1, lpOverlapped=0x0) returned 1 [0044.385] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff748b59970, cbMultiByte=1, lpWideCharStr=0x7ff748b63c52, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0044.385] _get_osfhandle (_FileHandle=0) returned 0x258 [0044.385] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0044.385] ReadFile (in: hFile=0x258, lpBuffer=0x7ff748b59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2302fef768, lpOverlapped=0x0 | out: lpBuffer=0x7ff748b59970*, lpNumberOfBytesRead=0x2302fef768*=0x1, lpOverlapped=0x0) returned 1 [0044.385] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff748b59970, cbMultiByte=1, lpWideCharStr=0x7ff748b63c54, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0044.385] _get_osfhandle (_FileHandle=0) returned 0x258 [0044.385] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0044.385] ReadFile (in: hFile=0x258, lpBuffer=0x7ff748b59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2302fef768, lpOverlapped=0x0 | out: lpBuffer=0x7ff748b59970*, lpNumberOfBytesRead=0x2302fef768*=0x1, lpOverlapped=0x0) returned 1 [0044.385] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff748b59970, cbMultiByte=1, lpWideCharStr=0x7ff748b63c56, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0044.385] _get_osfhandle (_FileHandle=0) returned 0x258 [0044.385] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0044.385] ReadFile (in: hFile=0x258, lpBuffer=0x7ff748b59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2302fef768, lpOverlapped=0x0 | out: lpBuffer=0x7ff748b59970*, lpNumberOfBytesRead=0x2302fef768*=0x1, lpOverlapped=0x0) returned 1 [0044.385] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff748b59970, cbMultiByte=1, lpWideCharStr=0x7ff748b63c58, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0044.385] _get_osfhandle (_FileHandle=0) returned 0x258 [0044.385] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0044.385] ReadFile (in: hFile=0x258, lpBuffer=0x7ff748b59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2302fef768, lpOverlapped=0x0 | out: lpBuffer=0x7ff748b59970*, lpNumberOfBytesRead=0x2302fef768*=0x1, lpOverlapped=0x0) returned 1 [0044.385] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff748b59970, cbMultiByte=1, lpWideCharStr=0x7ff748b63c5a, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0044.385] _get_osfhandle (_FileHandle=0) returned 0x258 [0044.385] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0044.385] ReadFile (in: hFile=0x258, lpBuffer=0x7ff748b59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2302fef768, lpOverlapped=0x0 | out: lpBuffer=0x7ff748b59970*, lpNumberOfBytesRead=0x2302fef768*=0x1, lpOverlapped=0x0) returned 1 [0044.385] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff748b59970, cbMultiByte=1, lpWideCharStr=0x7ff748b63c5c, cchWideChar=1 | out: lpWideCharStr="c") returned 1 [0044.385] _get_osfhandle (_FileHandle=0) returned 0x258 [0044.385] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0044.385] ReadFile (in: hFile=0x258, lpBuffer=0x7ff748b59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2302fef768, lpOverlapped=0x0 | out: lpBuffer=0x7ff748b59970*, lpNumberOfBytesRead=0x2302fef768*=0x1, lpOverlapped=0x0) returned 1 [0044.385] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff748b59970, cbMultiByte=1, lpWideCharStr=0x7ff748b63c5e, cchWideChar=1 | out: lpWideCharStr="u") returned 1 [0044.385] _get_osfhandle (_FileHandle=0) returned 0x258 [0044.385] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0044.386] ReadFile (in: hFile=0x258, lpBuffer=0x7ff748b59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2302fef768, lpOverlapped=0x0 | out: lpBuffer=0x7ff748b59970*, lpNumberOfBytesRead=0x2302fef768*=0x1, lpOverlapped=0x0) returned 1 [0044.386] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff748b59970, cbMultiByte=1, lpWideCharStr=0x7ff748b63c60, cchWideChar=1 | out: lpWideCharStr="r") returned 1 [0044.386] _get_osfhandle (_FileHandle=0) returned 0x258 [0044.386] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0044.386] ReadFile (in: hFile=0x258, lpBuffer=0x7ff748b59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2302fef768, lpOverlapped=0x0 | out: lpBuffer=0x7ff748b59970*, lpNumberOfBytesRead=0x2302fef768*=0x1, lpOverlapped=0x0) returned 1 [0044.386] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff748b59970, cbMultiByte=1, lpWideCharStr=0x7ff748b63c62, cchWideChar=1 | out: lpWideCharStr="r") returned 1 [0044.386] _get_osfhandle (_FileHandle=0) returned 0x258 [0044.386] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0044.386] ReadFile (in: hFile=0x258, lpBuffer=0x7ff748b59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2302fef768, lpOverlapped=0x0 | out: lpBuffer=0x7ff748b59970*, lpNumberOfBytesRead=0x2302fef768*=0x1, lpOverlapped=0x0) returned 1 [0044.386] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff748b59970, cbMultiByte=1, lpWideCharStr=0x7ff748b63c64, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0044.386] _get_osfhandle (_FileHandle=0) returned 0x258 [0044.386] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0044.386] ReadFile (in: hFile=0x258, lpBuffer=0x7ff748b59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2302fef768, lpOverlapped=0x0 | out: lpBuffer=0x7ff748b59970*, lpNumberOfBytesRead=0x2302fef768*=0x1, lpOverlapped=0x0) returned 1 [0044.386] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff748b59970, cbMultiByte=1, lpWideCharStr=0x7ff748b63c66, cchWideChar=1 | out: lpWideCharStr="n") returned 1 [0044.386] _get_osfhandle (_FileHandle=0) returned 0x258 [0044.386] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0044.386] ReadFile (in: hFile=0x258, lpBuffer=0x7ff748b59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2302fef768, lpOverlapped=0x0 | out: lpBuffer=0x7ff748b59970*, lpNumberOfBytesRead=0x2302fef768*=0x1, lpOverlapped=0x0) returned 1 [0044.386] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff748b59970, cbMultiByte=1, lpWideCharStr=0x7ff748b63c68, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0044.386] _get_osfhandle (_FileHandle=0) returned 0x258 [0044.386] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0044.386] ReadFile (in: hFile=0x258, lpBuffer=0x7ff748b59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2302fef768, lpOverlapped=0x0 | out: lpBuffer=0x7ff748b59970*, lpNumberOfBytesRead=0x2302fef768*=0x1, lpOverlapped=0x0) returned 1 [0044.386] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff748b59970, cbMultiByte=1, lpWideCharStr=0x7ff748b63c6a, cchWideChar=1 | out: lpWideCharStr="p") returned 1 [0044.386] _get_osfhandle (_FileHandle=0) returned 0x258 [0044.386] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0044.386] ReadFile (in: hFile=0x258, lpBuffer=0x7ff748b59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2302fef768, lpOverlapped=0x0 | out: lpBuffer=0x7ff748b59970*, lpNumberOfBytesRead=0x2302fef768*=0x1, lpOverlapped=0x0) returned 1 [0044.386] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff748b59970, cbMultiByte=1, lpWideCharStr=0x7ff748b63c6c, cchWideChar=1 | out: lpWideCharStr="r") returned 1 [0044.386] _get_osfhandle (_FileHandle=0) returned 0x258 [0044.387] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0044.387] ReadFile (in: hFile=0x258, lpBuffer=0x7ff748b59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2302fef768, lpOverlapped=0x0 | out: lpBuffer=0x7ff748b59970*, lpNumberOfBytesRead=0x2302fef768*=0x1, lpOverlapped=0x0) returned 1 [0044.387] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff748b59970, cbMultiByte=1, lpWideCharStr=0x7ff748b63c6e, cchWideChar=1 | out: lpWideCharStr="o") returned 1 [0044.387] _get_osfhandle (_FileHandle=0) returned 0x258 [0044.387] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0044.387] ReadFile (in: hFile=0x258, lpBuffer=0x7ff748b59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2302fef768, lpOverlapped=0x0 | out: lpBuffer=0x7ff748b59970*, lpNumberOfBytesRead=0x2302fef768*=0x1, lpOverlapped=0x0) returned 1 [0044.387] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff748b59970, cbMultiByte=1, lpWideCharStr=0x7ff748b63c70, cchWideChar=1 | out: lpWideCharStr="f") returned 1 [0044.387] _get_osfhandle (_FileHandle=0) returned 0x258 [0044.387] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0044.387] ReadFile (in: hFile=0x258, lpBuffer=0x7ff748b59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2302fef768, lpOverlapped=0x0 | out: lpBuffer=0x7ff748b59970*, lpNumberOfBytesRead=0x2302fef768*=0x1, lpOverlapped=0x0) returned 1 [0044.387] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff748b59970, cbMultiByte=1, lpWideCharStr=0x7ff748b63c72, cchWideChar=1 | out: lpWideCharStr="i") returned 1 [0044.387] _get_osfhandle (_FileHandle=0) returned 0x258 [0044.387] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0044.387] ReadFile (in: hFile=0x258, lpBuffer=0x7ff748b59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2302fef768, lpOverlapped=0x0 | out: lpBuffer=0x7ff748b59970*, lpNumberOfBytesRead=0x2302fef768*=0x1, lpOverlapped=0x0) returned 1 [0044.387] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff748b59970, cbMultiByte=1, lpWideCharStr=0x7ff748b63c74, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0044.387] _get_osfhandle (_FileHandle=0) returned 0x258 [0044.387] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0044.387] ReadFile (in: hFile=0x258, lpBuffer=0x7ff748b59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2302fef768, lpOverlapped=0x0 | out: lpBuffer=0x7ff748b59970*, lpNumberOfBytesRead=0x2302fef768*=0x1, lpOverlapped=0x0) returned 1 [0044.387] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff748b59970, cbMultiByte=1, lpWideCharStr=0x7ff748b63c76, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0044.387] _get_osfhandle (_FileHandle=0) returned 0x258 [0044.387] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0044.387] ReadFile (in: hFile=0x258, lpBuffer=0x7ff748b59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2302fef768, lpOverlapped=0x0 | out: lpBuffer=0x7ff748b59970*, lpNumberOfBytesRead=0x2302fef768*=0x1, lpOverlapped=0x0) returned 1 [0044.387] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff748b59970, cbMultiByte=1, lpWideCharStr=0x7ff748b63c78, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0044.387] _get_osfhandle (_FileHandle=0) returned 0x258 [0044.387] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0044.387] ReadFile (in: hFile=0x258, lpBuffer=0x7ff748b59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2302fef768, lpOverlapped=0x0 | out: lpBuffer=0x7ff748b59970*, lpNumberOfBytesRead=0x2302fef768*=0x1, lpOverlapped=0x0) returned 1 [0044.387] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff748b59970, cbMultiByte=1, lpWideCharStr=0x7ff748b63c7a, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0044.388] _get_osfhandle (_FileHandle=0) returned 0x258 [0044.388] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0044.388] ReadFile (in: hFile=0x258, lpBuffer=0x7ff748b59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2302fef768, lpOverlapped=0x0 | out: lpBuffer=0x7ff748b59970*, lpNumberOfBytesRead=0x2302fef768*=0x1, lpOverlapped=0x0) returned 1 [0044.388] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff748b59970, cbMultiByte=1, lpWideCharStr=0x7ff748b63c7c, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0044.388] _get_osfhandle (_FileHandle=0) returned 0x258 [0044.388] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0044.388] ReadFile (in: hFile=0x258, lpBuffer=0x7ff748b59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2302fef768, lpOverlapped=0x0 | out: lpBuffer=0x7ff748b59970*, lpNumberOfBytesRead=0x2302fef768*=0x1, lpOverlapped=0x0) returned 1 [0044.388] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff748b59970, cbMultiByte=1, lpWideCharStr=0x7ff748b63c7e, cchWideChar=1 | out: lpWideCharStr="a") returned 1 [0044.388] _get_osfhandle (_FileHandle=0) returned 0x258 [0044.388] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0044.388] ReadFile (in: hFile=0x258, lpBuffer=0x7ff748b59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2302fef768, lpOverlapped=0x0 | out: lpBuffer=0x7ff748b59970*, lpNumberOfBytesRead=0x2302fef768*=0x1, lpOverlapped=0x0) returned 1 [0044.388] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff748b59970, cbMultiByte=1, lpWideCharStr=0x7ff748b63c80, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0044.388] _get_osfhandle (_FileHandle=0) returned 0x258 [0044.388] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0044.388] ReadFile (in: hFile=0x258, lpBuffer=0x7ff748b59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2302fef768, lpOverlapped=0x0 | out: lpBuffer=0x7ff748b59970*, lpNumberOfBytesRead=0x2302fef768*=0x1, lpOverlapped=0x0) returned 1 [0044.388] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff748b59970, cbMultiByte=1, lpWideCharStr=0x7ff748b63c82, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0044.388] _get_osfhandle (_FileHandle=0) returned 0x258 [0044.388] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0044.388] ReadFile (in: hFile=0x258, lpBuffer=0x7ff748b59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2302fef768, lpOverlapped=0x0 | out: lpBuffer=0x7ff748b59970*, lpNumberOfBytesRead=0x2302fef768*=0x1, lpOverlapped=0x0) returned 1 [0044.388] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff748b59970, cbMultiByte=1, lpWideCharStr=0x7ff748b63c84, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0044.388] _get_osfhandle (_FileHandle=0) returned 0x258 [0044.388] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0044.388] ReadFile (in: hFile=0x258, lpBuffer=0x7ff748b59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2302fef768, lpOverlapped=0x0 | out: lpBuffer=0x7ff748b59970*, lpNumberOfBytesRead=0x2302fef768*=0x1, lpOverlapped=0x0) returned 1 [0044.388] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff748b59970, cbMultiByte=1, lpWideCharStr=0x7ff748b63c86, cchWideChar=1 | out: lpWideCharStr="o") returned 1 [0044.388] _get_osfhandle (_FileHandle=0) returned 0x258 [0044.388] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0044.388] ReadFile (in: hFile=0x258, lpBuffer=0x7ff748b59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2302fef768, lpOverlapped=0x0 | out: lpBuffer=0x7ff748b59970*, lpNumberOfBytesRead=0x2302fef768*=0x1, lpOverlapped=0x0) returned 1 [0044.389] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff748b59970, cbMultiByte=1, lpWideCharStr=0x7ff748b63c88, cchWideChar=1 | out: lpWideCharStr="f") returned 1 [0044.389] _get_osfhandle (_FileHandle=0) returned 0x258 [0044.389] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0044.389] ReadFile (in: hFile=0x258, lpBuffer=0x7ff748b59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2302fef768, lpOverlapped=0x0 | out: lpBuffer=0x7ff748b59970*, lpNumberOfBytesRead=0x2302fef768*=0x1, lpOverlapped=0x0) returned 1 [0044.389] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff748b59970, cbMultiByte=1, lpWideCharStr=0x7ff748b63c8a, cchWideChar=1 | out: lpWideCharStr="f") returned 1 [0044.389] _get_osfhandle (_FileHandle=0) returned 0x258 [0044.389] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0044.389] ReadFile (in: hFile=0x258, lpBuffer=0x7ff748b59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2302fef768, lpOverlapped=0x0 | out: lpBuffer=0x7ff748b59970*, lpNumberOfBytesRead=0x2302fef768*=0x1, lpOverlapped=0x0) returned 1 [0044.389] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff748b59970, cbMultiByte=1, lpWideCharStr=0x7ff748b63c8c, cchWideChar=1 | out: lpWideCharStr="\n") returned 1 [0044.390] _get_osfhandle (_FileHandle=0) returned 0x258 [0044.390] GetFileType (hFile=0x258) returned 0x3 [0044.390] _get_osfhandle (_FileHandle=0) returned 0x258 [0044.390] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0044.390] _get_osfhandle (_FileHandle=1) returned 0x25c [0044.390] GetFileType (hFile=0x25c) returned 0x3 [0044.390] _get_osfhandle (_FileHandle=1) returned 0x25c [0044.390] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="netsh advfirewall set currentprofile state off\n", cchWideChar=-1, lpMultiByteStr=0x7ff748b59970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netsh advfirewall set currentprofile state off\n", lpUsedDefaultChar=0x0) returned 48 [0044.390] WriteFile (in: hFile=0x25c, lpBuffer=0x7ff748b59970*, nNumberOfBytesToWrite=0x2f, lpNumberOfBytesWritten=0x2302fef708, lpOverlapped=0x0 | out: lpBuffer=0x7ff748b59970*, lpNumberOfBytesWritten=0x2302fef708*=0x2f, lpOverlapped=0x0) returned 1 [0044.390] GetProcessHeap () returned 0x13c7aa60000 [0044.390] RtlAllocateHeap (HeapHandle=0x13c7aa60000, Flags=0x8, Size=0x4012) returned 0x13c7aa68fe0 [0044.390] GetProcessHeap () returned 0x13c7aa60000 [0044.390] RtlFreeHeap (HeapHandle=0x13c7aa60000, Flags=0x0, BaseAddress=0x13c7aa68fe0) returned 1 [0044.391] _wcsicmp (_String1="netsh", _String2=")") returned 69 [0044.391] _wcsicmp (_String1="FOR", _String2="netsh") returned -8 [0044.391] _wcsicmp (_String1="FOR/?", _String2="netsh") returned -8 [0044.391] _wcsicmp (_String1="IF", _String2="netsh") returned -5 [0044.391] _wcsicmp (_String1="IF/?", _String2="netsh") returned -5 [0044.391] _wcsicmp (_String1="REM", _String2="netsh") returned 4 [0044.391] _wcsicmp (_String1="REM/?", _String2="netsh") returned 4 [0044.391] GetProcessHeap () returned 0x13c7aa60000 [0044.391] RtlAllocateHeap (HeapHandle=0x13c7aa60000, Flags=0x8, Size=0xb0) returned 0x13c7aa68320 [0044.391] GetProcessHeap () returned 0x13c7aa60000 [0044.391] RtlAllocateHeap (HeapHandle=0x13c7aa60000, Flags=0x8, Size=0x1c) returned 0x13c7aa66a80 [0044.392] GetProcessHeap () returned 0x13c7aa60000 [0044.392] RtlAllocateHeap (HeapHandle=0x13c7aa60000, Flags=0x8, Size=0x64) returned 0x13c7aa61850 [0044.392] GetConsoleOutputCP () returned 0x1b5 [0044.831] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff748b5fbb0 | out: lpCPInfo=0x7ff748b5fbb0) returned 1 [0044.831] SetThreadUILanguage (LangId=0x0) returned 0x409 [0044.935] GetConsoleTitleW (in: lpConsoleTitle=0x2302fef550, nSize=0x104 | out: lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe") returned 0x2b [0045.029] malloc (_Size=0xffce) returned 0x13c7ac50840 [0045.029] ??_V@YAXPEAX@Z () returned 0x13c7ac50840 [0045.030] malloc (_Size=0xffce) returned 0x13c7ac60820 [0045.030] ??_V@YAXPEAX@Z () returned 0x13c7ac60820 [0045.030] _wcsicmp (_String1="netsh", _String2="DIR") returned 10 [0045.030] _wcsicmp (_String1="netsh", _String2="ERASE") returned 9 [0045.031] _wcsicmp (_String1="netsh", _String2="DEL") returned 10 [0045.031] _wcsicmp (_String1="netsh", _String2="TYPE") returned -6 [0045.031] _wcsicmp (_String1="netsh", _String2="COPY") returned 11 [0045.031] _wcsicmp (_String1="netsh", _String2="CD") returned 11 [0045.031] _wcsicmp (_String1="netsh", _String2="CHDIR") returned 11 [0045.031] _wcsicmp (_String1="netsh", _String2="RENAME") returned -4 [0045.031] _wcsicmp (_String1="netsh", _String2="REN") returned -4 [0045.031] _wcsicmp (_String1="netsh", _String2="ECHO") returned 9 [0045.031] _wcsicmp (_String1="netsh", _String2="SET") returned -5 [0045.031] _wcsicmp (_String1="netsh", _String2="PAUSE") returned -2 [0045.031] _wcsicmp (_String1="netsh", _String2="DATE") returned 10 [0045.031] _wcsicmp (_String1="netsh", _String2="TIME") returned -6 [0045.031] _wcsicmp (_String1="netsh", _String2="PROMPT") returned -2 [0045.031] _wcsicmp (_String1="netsh", _String2="MD") returned 1 [0045.031] _wcsicmp (_String1="netsh", _String2="MKDIR") returned 1 [0045.031] _wcsicmp (_String1="netsh", _String2="RD") returned -4 [0045.031] _wcsicmp (_String1="netsh", _String2="RMDIR") returned -4 [0045.031] _wcsicmp (_String1="netsh", _String2="PATH") returned -2 [0045.031] _wcsicmp (_String1="netsh", _String2="GOTO") returned 7 [0045.031] _wcsicmp (_String1="netsh", _String2="SHIFT") returned -5 [0045.031] _wcsicmp (_String1="netsh", _String2="CLS") returned 11 [0045.031] _wcsicmp (_String1="netsh", _String2="CALL") returned 11 [0045.031] _wcsicmp (_String1="netsh", _String2="VERIFY") returned -8 [0045.031] _wcsicmp (_String1="netsh", _String2="VER") returned -8 [0045.031] _wcsicmp (_String1="netsh", _String2="VOL") returned -8 [0045.031] _wcsicmp (_String1="netsh", _String2="EXIT") returned 9 [0045.031] _wcsicmp (_String1="netsh", _String2="SETLOCAL") returned -5 [0045.031] _wcsicmp (_String1="netsh", _String2="ENDLOCAL") returned 9 [0045.031] _wcsicmp (_String1="netsh", _String2="TITLE") returned -6 [0045.031] _wcsicmp (_String1="netsh", _String2="START") returned -5 [0045.031] _wcsicmp (_String1="netsh", _String2="DPATH") returned 10 [0045.031] _wcsicmp (_String1="netsh", _String2="KEYS") returned 3 [0045.031] _wcsicmp (_String1="netsh", _String2="MOVE") returned 1 [0045.031] _wcsicmp (_String1="netsh", _String2="PUSHD") returned -2 [0045.031] _wcsicmp (_String1="netsh", _String2="POPD") returned -2 [0045.031] _wcsicmp (_String1="netsh", _String2="ASSOC") returned 13 [0045.031] _wcsicmp (_String1="netsh", _String2="FTYPE") returned 8 [0045.031] _wcsicmp (_String1="netsh", _String2="BREAK") returned 12 [0045.031] _wcsicmp (_String1="netsh", _String2="COLOR") returned 11 [0045.031] _wcsicmp (_String1="netsh", _String2="MKLINK") returned 1 [0045.032] _wcsicmp (_String1="netsh", _String2="DIR") returned 10 [0045.032] _wcsicmp (_String1="netsh", _String2="ERASE") returned 9 [0045.032] _wcsicmp (_String1="netsh", _String2="DEL") returned 10 [0045.032] _wcsicmp (_String1="netsh", _String2="TYPE") returned -6 [0045.032] _wcsicmp (_String1="netsh", _String2="COPY") returned 11 [0045.032] _wcsicmp (_String1="netsh", _String2="CD") returned 11 [0045.032] _wcsicmp (_String1="netsh", _String2="CHDIR") returned 11 [0045.032] _wcsicmp (_String1="netsh", _String2="RENAME") returned -4 [0045.032] _wcsicmp (_String1="netsh", _String2="REN") returned -4 [0045.032] _wcsicmp (_String1="netsh", _String2="ECHO") returned 9 [0045.032] _wcsicmp (_String1="netsh", _String2="SET") returned -5 [0045.032] _wcsicmp (_String1="netsh", _String2="PAUSE") returned -2 [0045.032] _wcsicmp (_String1="netsh", _String2="DATE") returned 10 [0045.032] _wcsicmp (_String1="netsh", _String2="TIME") returned -6 [0045.032] _wcsicmp (_String1="netsh", _String2="PROMPT") returned -2 [0045.032] _wcsicmp (_String1="netsh", _String2="MD") returned 1 [0045.032] _wcsicmp (_String1="netsh", _String2="MKDIR") returned 1 [0045.032] _wcsicmp (_String1="netsh", _String2="RD") returned -4 [0045.032] _wcsicmp (_String1="netsh", _String2="RMDIR") returned -4 [0045.032] _wcsicmp (_String1="netsh", _String2="PATH") returned -2 [0045.032] _wcsicmp (_String1="netsh", _String2="GOTO") returned 7 [0045.032] _wcsicmp (_String1="netsh", _String2="SHIFT") returned -5 [0045.032] _wcsicmp (_String1="netsh", _String2="CLS") returned 11 [0045.032] _wcsicmp (_String1="netsh", _String2="CALL") returned 11 [0045.032] _wcsicmp (_String1="netsh", _String2="VERIFY") returned -8 [0045.032] _wcsicmp (_String1="netsh", _String2="VER") returned -8 [0045.032] _wcsicmp (_String1="netsh", _String2="VOL") returned -8 [0045.032] _wcsicmp (_String1="netsh", _String2="EXIT") returned 9 [0045.032] _wcsicmp (_String1="netsh", _String2="SETLOCAL") returned -5 [0045.032] _wcsicmp (_String1="netsh", _String2="ENDLOCAL") returned 9 [0045.032] _wcsicmp (_String1="netsh", _String2="TITLE") returned -6 [0045.032] _wcsicmp (_String1="netsh", _String2="START") returned -5 [0045.032] _wcsicmp (_String1="netsh", _String2="DPATH") returned 10 [0045.032] _wcsicmp (_String1="netsh", _String2="KEYS") returned 3 [0045.032] _wcsicmp (_String1="netsh", _String2="MOVE") returned 1 [0045.032] _wcsicmp (_String1="netsh", _String2="PUSHD") returned -2 [0045.032] _wcsicmp (_String1="netsh", _String2="POPD") returned -2 [0045.032] _wcsicmp (_String1="netsh", _String2="ASSOC") returned 13 [0045.032] _wcsicmp (_String1="netsh", _String2="FTYPE") returned 8 [0045.033] _wcsicmp (_String1="netsh", _String2="BREAK") returned 12 [0045.033] _wcsicmp (_String1="netsh", _String2="COLOR") returned 11 [0045.033] _wcsicmp (_String1="netsh", _String2="MKLINK") returned 1 [0045.033] _wcsicmp (_String1="netsh", _String2="FOR") returned 8 [0045.033] _wcsicmp (_String1="netsh", _String2="IF") returned 5 [0045.033] _wcsicmp (_String1="netsh", _String2="REM") returned -4 [0045.033] ??_V@YAXPEAX@Z () returned 0x1 [0045.033] GetProcessHeap () returned 0x13c7aa60000 [0045.033] RtlAllocateHeap (HeapHandle=0x13c7aa60000, Flags=0x8, Size=0xffde) returned 0x13c7aa68fe0 [0045.034] GetProcessHeap () returned 0x13c7aa60000 [0045.034] RtlAllocateHeap (HeapHandle=0x13c7aa60000, Flags=0x8, Size=0x70) returned 0x13c7aa683e0 [0045.034] _wcsnicmp (_String1="nets", _String2="cmd ", _MaxCount=0x4) returned 11 [0045.034] malloc (_Size=0xffce) returned 0x13c7ac60820 [0045.034] ??_V@YAXPEAX@Z () returned 0x13c7ac60820 [0045.034] GetProcessHeap () returned 0x13c7aa60000 [0045.034] RtlAllocateHeap (HeapHandle=0x13c7aa60000, Flags=0x8, Size=0x1ffac) returned 0x13c7aa78fd0 [0045.036] SetErrorMode (uMode=0x0) returned 0x0 [0045.036] SetErrorMode (uMode=0x1) returned 0x0 [0045.036] GetFullPathNameW (in: lpFileName=".", nBufferLength=0xffce, lpBuffer=0x13c7aa78fe0, lpFilePart=0x2302feedd0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x2302feedd0*="Desktop") returned 0x17 [0045.036] SetErrorMode (uMode=0x0) returned 0x1 [0045.036] GetProcessHeap () returned 0x13c7aa60000 [0045.036] RtlReAllocateHeap (Heap=0x13c7aa60000, Flags=0x0, Ptr=0x13c7aa78fd0, Size=0x4c) returned 0x13c7aa78fd0 [0045.036] GetProcessHeap () returned 0x13c7aa60000 [0045.036] RtlSizeHeap (HeapHandle=0x13c7aa60000, Flags=0x0, MemoryPointer=0x13c7aa78fd0) returned 0x4c [0045.036] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x7ff748b5bb90, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0045.036] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0045.036] GetProcessHeap () returned 0x13c7aa60000 [0045.036] RtlAllocateHeap (HeapHandle=0x13c7aa60000, Flags=0x8, Size=0x1bc) returned 0x13c7aa66c30 [0045.036] GetProcessHeap () returned 0x13c7aa60000 [0045.036] RtlAllocateHeap (HeapHandle=0x13c7aa60000, Flags=0x8, Size=0x368) returned 0x13c7aa79030 [0045.045] GetProcessHeap () returned 0x13c7aa60000 [0045.045] RtlReAllocateHeap (Heap=0x13c7aa60000, Flags=0x0, Ptr=0x13c7aa79030, Size=0x1be) returned 0x13c7aa79030 [0045.045] GetProcessHeap () returned 0x13c7aa60000 [0045.045] RtlSizeHeap (HeapHandle=0x13c7aa60000, Flags=0x0, MemoryPointer=0x13c7aa79030) returned 0x1be [0045.045] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff748b5bb90, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0045.045] GetProcessHeap () returned 0x13c7aa60000 [0045.045] RtlAllocateHeap (HeapHandle=0x13c7aa60000, Flags=0x8, Size=0xe8) returned 0x13c7aa66e00 [0045.046] GetProcessHeap () returned 0x13c7aa60000 [0045.046] RtlReAllocateHeap (Heap=0x13c7aa60000, Flags=0x0, Ptr=0x13c7aa66e00, Size=0x7e) returned 0x13c7aa66e00 [0045.046] GetProcessHeap () returned 0x13c7aa60000 [0045.046] RtlSizeHeap (HeapHandle=0x13c7aa60000, Flags=0x0, MemoryPointer=0x13c7aa66e00) returned 0x7e [0045.047] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0045.047] FindFirstFileExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\netsh.*", fInfoLevelId=0x1, lpFindFileData=0x2302feeb40, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2302feeb40) returned 0xffffffffffffffff [0045.047] GetLastError () returned 0x2 [0045.047] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0045.047] FindFirstFileExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\netsh.*", fInfoLevelId=0x1, lpFindFileData=0x2302feeb40, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2302feeb40) returned 0xffffffffffffffff [0045.050] GetLastError () returned 0x2 [0045.050] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0045.050] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\netsh.*", fInfoLevelId=0x1, lpFindFileData=0x2302feeb40, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2302feeb40) returned 0x13c7aa66e90 [0045.050] GetProcessHeap () returned 0x13c7aa60000 [0045.050] RtlAllocateHeap (HeapHandle=0x13c7aa60000, Flags=0x0, Size=0x28) returned 0x13c7aa66ef0 [0045.050] FindClose (in: hFindFile=0x13c7aa66e90 | out: hFindFile=0x13c7aa66e90) returned 1 [0045.050] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\netsh.COM", fInfoLevelId=0x1, lpFindFileData=0x2302feeb40, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2302feeb40) returned 0xffffffffffffffff [0045.050] GetLastError () returned 0x2 [0045.050] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\netsh.EXE", fInfoLevelId=0x1, lpFindFileData=0x2302feeb40, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2302feeb40) returned 0x13c7aa66e90 [0045.051] GetProcessHeap () returned 0x13c7aa60000 [0045.051] RtlReAllocateHeap (Heap=0x13c7aa60000, Flags=0x0, Ptr=0x13c7aa66ef0, Size=0x8) returned 0x13c7aa66ef0 [0045.051] FindClose (in: hFindFile=0x13c7aa66e90 | out: hFindFile=0x13c7aa66e90) returned 1 [0045.051] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3 [0045.051] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2 [0045.051] ??_V@YAXPEAX@Z () returned 0x1 [0045.051] GetConsoleTitleW (in: lpConsoleTitle=0x2302fef0c0, nSize=0x104 | out: lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe") returned 0x2b [0045.082] GetProcessHeap () returned 0x13c7aa60000 [0045.082] RtlAllocateHeap (HeapHandle=0x13c7aa60000, Flags=0x8, Size=0x21c) returned 0x13c7aa79200 [0045.082] GetConsoleTitleW (in: lpConsoleTitle=0x13c7aa79210, nSize=0x104 | out: lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe") returned 0x2b [0045.222] GetProcessHeap () returned 0x13c7aa60000 [0045.222] RtlReAllocateHeap (Heap=0x13c7aa60000, Flags=0x0, Ptr=0x13c7aa79200, Size=0xd8) returned 0x13c7aa79200 [0045.222] GetProcessHeap () returned 0x13c7aa60000 [0045.222] RtlSizeHeap (HeapHandle=0x13c7aa60000, Flags=0x0, MemoryPointer=0x13c7aa79200) returned 0xd8 [0045.222] SetConsoleTitleW (lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe - netsh advfirewall set currentprofile state off") returned 1 [0045.263] GetProcessHeap () returned 0x13c7aa60000 [0045.263] RtlFreeHeap (HeapHandle=0x13c7aa60000, Flags=0x0, BaseAddress=0x13c7aa79200) returned 1 [0045.263] InitializeProcThreadAttributeList (in: lpAttributeList=0x2302feefe0, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x2302feeed0 | out: lpAttributeList=0x2302feefe0, lpSize=0x2302feeed0) returned 1 [0045.263] UpdateProcThreadAttribute (in: lpAttributeList=0x2302feefe0, dwFlags=0x0, Attribute=0x60001, lpValue=0x2302feeebc, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x2302feefe0, lpPreviousValue=0x0) returned 1 [0045.264] GetStartupInfoW (in: lpStartupInfo=0x2302feef70 | out: lpStartupInfo=0x2302feef70*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\WINDOWS\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x258, hStdOutput=0x25c, hStdError=0x25c)) [0045.264] GetProcessHeap () returned 0x13c7aa60000 [0045.264] RtlAllocateHeap (HeapHandle=0x13c7aa60000, Flags=0x8, Size=0x20) returned 0x13c7aa66e90 [0045.264] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0045.264] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0045.264] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0045.264] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0045.264] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0045.264] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0045.264] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0045.264] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0045.264] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0045.264] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0045.264] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0045.264] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0045.264] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0045.264] _wcsnicmp (_String1="COPYCMD", _String2="OneDriv", _MaxCount=0x7) returned -12 [0045.264] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0045.264] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0045.264] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0045.264] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0045.264] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0045.264] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0045.264] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0045.264] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0045.264] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0045.265] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0045.265] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0045.265] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0045.265] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0045.265] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0045.265] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0045.265] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0045.265] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0045.265] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0045.265] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0045.265] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0045.265] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0045.265] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0045.265] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0045.265] GetProcessHeap () returned 0x13c7aa60000 [0045.265] RtlFreeHeap (HeapHandle=0x13c7aa60000, Flags=0x0, BaseAddress=0x13c7aa66e90) returned 1 [0045.265] GetProcessHeap () returned 0x13c7aa60000 [0045.265] RtlAllocateHeap (HeapHandle=0x13c7aa60000, Flags=0x8, Size=0x12) returned 0x13c7aa66f10 [0045.265] _get_osfhandle (_FileHandle=1) returned 0x25c [0045.265] SetConsoleMode (hConsoleHandle=0x25c, dwMode=0x0) returned 0 [0045.265] _get_osfhandle (_FileHandle=0) returned 0x258 [0045.265] SetConsoleMode (hConsoleHandle=0x258, dwMode=0x0) returned 0 [0045.265] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\netsh.exe", lpCommandLine="netsh advfirewall set currentprofile state off", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\FD1HVy\\Desktop", lpStartupInfo=0x2302feef00*(cb=0x70, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="netsh advfirewall set currentprofile state off", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2302feeed8 | out: lpCommandLine="netsh advfirewall set currentprofile state off", lpProcessInformation=0x2302feeed8*(hProcess=0x98, hThread=0x94, dwProcessId=0xcf4, dwThreadId=0x7b4)) returned 1 [0045.664] CloseHandle (hObject=0x94) returned 1 [0045.664] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0045.664] GetProcessHeap () returned 0x13c7aa60000 [0045.664] RtlFreeHeap (HeapHandle=0x13c7aa60000, Flags=0x0, BaseAddress=0x13c7aa68500) returned 1 [0045.664] GetEnvironmentStringsW () returned 0x13c7aa68500* [0045.664] GetProcessHeap () returned 0x13c7aa60000 [0045.664] RtlAllocateHeap (HeapHandle=0x13c7aa60000, Flags=0x8, Size=0xacc) returned 0x13c7aa79520 [0045.664] FreeEnvironmentStringsA (penv="=") returned 1 [0045.664] LoadLibraryExW (lpLibFileName="NTDLL.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ff931f40000 [0045.664] GetProcAddress (hModule=0x7ff931f40000, lpProcName="NtQueryInformationProcess") returned 0x7ff931fe56b0 [0045.664] NtQueryInformationProcess (in: ProcessHandle=0x98, ProcessInformationClass=0x0, ProcessInformation=0x2302fee3d8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2302fee3d8, ReturnLength=0x0) returned 0x0 [0045.664] ReadProcessMemory (in: hProcess=0x98, lpBaseAddress=0x90de8b2000, lpBuffer=0x2302fee410, nSize=0x7a0, lpNumberOfBytesRead=0x2302fee3d0 | out: lpBuffer=0x2302fee410*, lpNumberOfBytesRead=0x2302fee3d0*=0x7a0) returned 1 [0045.665] WaitForSingleObject (hHandle=0x98, dwMilliseconds=0xffffffff) Thread: id = 17 os_tid = 0x4a0 Process: id = "4" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x10480000" os_pid = "0x468" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0xc70" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "64" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103c1" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 12 os_tid = 0xf5c Thread: id = 13 os_tid = 0xac4 Thread: id = 14 os_tid = 0x4a8 Thread: id = 15 os_tid = 0xa78 Thread: id = 16 os_tid = 0xd64 Process: id = "5" image_name = "netsh.exe" filename = "c:\\windows\\system32\\netsh.exe" page_root = "0x77d0000" os_pid = "0xcf4" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0xc70" cmd_line = "netsh advfirewall set currentprofile state off" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "64" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103c1" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 29 os_tid = 0x7b4 [0046.717] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff664f00000 [0046.717] __set_app_type (_Type=0x1) [0046.717] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x7ff664f0a1c0) returned 0x0 [0046.717] __wgetmainargs (in: _Argc=0x7ff664f17668, _Argv=0x7ff664f17670, _Env=0x7ff664f17678, _DoWildCard=0, _StartInfo=0x7ff664f17684 | out: _Argc=0x7ff664f17668, _Argv=0x7ff664f17670, _Env=0x7ff664f17678) returned 0 [0046.718] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0046.718] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff664f00000 [0046.718] _vsnwprintf (in: _Buffer=0x7ff664f19b00, _BufferCount=0x1fff, _Format="%s>", _ArgList=0x90deaf7338 | out: _Buffer="netsh>") returned 6 [0046.718] GetProcessHeap () returned 0x21ac6e60000 [0046.718] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6e540 [0046.718] GetProcessHeap () returned 0x21ac6e60000 [0046.718] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6ea20 [0046.718] GetProcessHeap () returned 0x21ac6e60000 [0046.718] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6eac0 [0046.718] GetProcessHeap () returned 0x21ac6e60000 [0046.718] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6e9a0 [0046.718] GetProcessHeap () returned 0x21ac6e60000 [0046.718] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6eb60 [0046.718] GetProcessHeap () returned 0x21ac6e60000 [0046.718] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6e8a0 [0046.718] GetProcessHeap () returned 0x21ac6e60000 [0046.718] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6e880 [0046.718] GetProcessHeap () returned 0x21ac6e60000 [0046.718] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6eba0 [0046.718] GetProcessHeap () returned 0x21ac6e60000 [0046.718] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6e820 [0046.718] GetProcessHeap () returned 0x21ac6e60000 [0046.719] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6e720 [0046.719] GetProcessHeap () returned 0x21ac6e60000 [0046.719] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6e900 [0046.719] GetProcessHeap () returned 0x21ac6e60000 [0046.719] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6eb00 [0046.719] GetProcessHeap () returned 0x21ac6e60000 [0046.719] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6e860 [0046.719] GetProcessHeap () returned 0x21ac6e60000 [0046.719] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6e980 [0046.719] GetProcessHeap () returned 0x21ac6e60000 [0046.719] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6ec60 [0046.719] GetProcessHeap () returned 0x21ac6e60000 [0046.719] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6ebe0 [0046.719] GetProcessHeap () returned 0x21ac6e60000 [0046.719] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6e5c0 [0046.719] GetProcessHeap () returned 0x21ac6e60000 [0046.719] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6e6c0 [0046.719] GetProcessHeap () returned 0x21ac6e60000 [0046.719] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6e7c0 [0046.719] GetProcessHeap () returned 0x21ac6e60000 [0046.719] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6e740 [0046.719] GetProcessHeap () returned 0x21ac6e60000 [0046.719] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6ebc0 [0046.719] GetProcessHeap () returned 0x21ac6e60000 [0046.719] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6ec00 [0046.719] GetProcessHeap () returned 0x21ac6e60000 [0046.719] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6eb20 [0046.719] GetProcessHeap () returned 0x21ac6e60000 [0046.719] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6e520 [0046.719] GetProcessHeap () returned 0x21ac6e60000 [0046.719] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6e6e0 [0046.719] GetProcessHeap () returned 0x21ac6e60000 [0046.719] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6e4e0 [0046.719] GetProcessHeap () returned 0x21ac6e60000 [0046.719] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6e920 [0046.719] GetProcessHeap () returned 0x21ac6e60000 [0046.719] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6eae0 [0046.719] GetProcessHeap () returned 0x21ac6e60000 [0046.719] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6e500 [0046.719] GetProcessHeap () returned 0x21ac6e60000 [0046.719] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6e760 [0046.719] GetProcessHeap () returned 0x21ac6e60000 [0046.719] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6e780 [0046.719] GetProcessHeap () returned 0x21ac6e60000 [0046.719] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6e700 [0046.719] GetProcessHeap () returned 0x21ac6e60000 [0046.719] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6e960 [0046.720] GetProcessHeap () returned 0x21ac6e60000 [0046.720] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6e7e0 [0046.720] GetProcessHeap () returned 0x21ac6e60000 [0046.720] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6e800 [0046.720] GetProcessHeap () returned 0x21ac6e60000 [0046.720] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6e7a0 [0046.720] GetProcessHeap () returned 0x21ac6e60000 [0046.720] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6e680 [0046.720] GetProcessHeap () returned 0x21ac6e60000 [0046.720] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6e840 [0046.720] GetProcessHeap () returned 0x21ac6e60000 [0046.720] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6ec20 [0046.720] GetProcessHeap () returned 0x21ac6e60000 [0046.720] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6eb40 [0046.720] GetProcessHeap () returned 0x21ac6e60000 [0046.720] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6e940 [0046.720] GetProcessHeap () returned 0x21ac6e60000 [0046.720] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6e560 [0046.720] GetProcessHeap () returned 0x21ac6e60000 [0046.720] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6e8c0 [0046.720] GetProcessHeap () returned 0x21ac6e60000 [0046.720] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6e600 [0046.720] GetProcessHeap () returned 0x21ac6e60000 [0046.720] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6e5e0 [0046.720] GetProcessHeap () returned 0x21ac6e60000 [0046.720] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6e9c0 [0046.720] GetProcessHeap () returned 0x21ac6e60000 [0046.720] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6e8e0 [0046.720] GetProcessHeap () returned 0x21ac6e60000 [0046.720] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6eb80 [0046.720] GetProcessHeap () returned 0x21ac6e60000 [0046.720] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6e9e0 [0046.720] GetProcessHeap () returned 0x21ac6e60000 [0046.720] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6ec40 [0046.720] GetProcessHeap () returned 0x21ac6e60000 [0046.720] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6e660 [0046.720] GetProcessHeap () returned 0x21ac6e60000 [0046.720] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6ea00 [0046.720] GetProcessHeap () returned 0x21ac6e60000 [0046.720] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6ea40 [0046.720] GetProcessHeap () returned 0x21ac6e60000 [0046.720] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6ea60 [0046.720] GetProcessHeap () returned 0x21ac6e60000 [0046.720] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6ea80 [0046.720] GetProcessHeap () returned 0x21ac6e60000 [0046.720] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6eaa0 [0046.720] GetProcessHeap () returned 0x21ac6e60000 [0046.720] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6e580 [0046.721] GetProcessHeap () returned 0x21ac6e60000 [0046.721] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6e5a0 [0046.721] GetProcessHeap () returned 0x21ac6e60000 [0046.721] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6e620 [0046.721] GetProcessHeap () returned 0x21ac6e60000 [0046.721] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6e640 [0046.721] GetProcessHeap () returned 0x21ac6e60000 [0046.721] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6e6a0 [0046.721] GetProcessHeap () returned 0x21ac6e60000 [0046.721] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6fa60 [0046.721] GetProcessHeap () returned 0x21ac6e60000 [0046.721] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6fea0 [0046.721] GetProcessHeap () returned 0x21ac6e60000 [0046.721] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6ff00 [0046.721] GetProcessHeap () returned 0x21ac6e60000 [0046.721] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6ff40 [0046.721] GetProcessHeap () returned 0x21ac6e60000 [0046.721] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70000 [0046.721] GetProcessHeap () returned 0x21ac6e60000 [0046.721] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6fe60 [0046.721] GetProcessHeap () returned 0x21ac6e60000 [0046.721] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6f920 [0046.721] GetProcessHeap () returned 0x21ac6e60000 [0046.721] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6f9c0 [0046.721] GetProcessHeap () returned 0x21ac6e60000 [0046.721] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6fce0 [0046.721] GetProcessHeap () returned 0x21ac6e60000 [0046.721] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6f9e0 [0046.721] GetProcessHeap () returned 0x21ac6e60000 [0046.721] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6fbc0 [0046.721] GetProcessHeap () returned 0x21ac6e60000 [0046.721] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6fcc0 [0046.721] GetProcessHeap () returned 0x21ac6e60000 [0046.721] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6fd20 [0046.721] GetProcessHeap () returned 0x21ac6e60000 [0046.721] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6fe80 [0046.721] GetProcessHeap () returned 0x21ac6e60000 [0046.721] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6fe40 [0046.721] GetProcessHeap () returned 0x21ac6e60000 [0046.721] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6fa40 [0046.721] GetProcessHeap () returned 0x21ac6e60000 [0046.721] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6fe20 [0046.721] GetProcessHeap () returned 0x21ac6e60000 [0046.721] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6fb40 [0046.721] GetProcessHeap () returned 0x21ac6e60000 [0046.722] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6fb80 [0046.722] GetProcessHeap () returned 0x21ac6e60000 [0046.722] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6fa80 [0046.722] GetProcessHeap () returned 0x21ac6e60000 [0046.722] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6fda0 [0046.722] GetProcessHeap () returned 0x21ac6e60000 [0046.722] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6fc20 [0046.722] GetProcessHeap () returned 0x21ac6e60000 [0046.722] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6fca0 [0046.722] GetProcessHeap () returned 0x21ac6e60000 [0046.722] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6fb60 [0046.722] GetProcessHeap () returned 0x21ac6e60000 [0046.722] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6ff20 [0046.722] GetProcessHeap () returned 0x21ac6e60000 [0046.722] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6faa0 [0046.722] GetProcessHeap () returned 0x21ac6e60000 [0046.722] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6ff80 [0046.722] GetProcessHeap () returned 0x21ac6e60000 [0046.722] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6fd00 [0046.722] GetProcessHeap () returned 0x21ac6e60000 [0046.722] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6fbe0 [0046.722] GetProcessHeap () returned 0x21ac6e60000 [0046.722] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6fd40 [0046.722] GetProcessHeap () returned 0x21ac6e60000 [0046.722] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6fe00 [0046.722] GetProcessHeap () returned 0x21ac6e60000 [0046.722] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6fec0 [0046.722] GetProcessHeap () returned 0x21ac6e60000 [0046.722] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6fd60 [0046.722] GetProcessHeap () returned 0x21ac6e60000 [0046.722] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6fba0 [0046.722] GetProcessHeap () returned 0x21ac6e60000 [0046.722] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6fac0 [0046.722] GetProcessHeap () returned 0x21ac6e60000 [0046.722] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6fae0 [0046.722] GetProcessHeap () returned 0x21ac6e60000 [0046.722] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6fa00 [0046.722] GetProcessHeap () returned 0x21ac6e60000 [0046.722] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6fdc0 [0046.722] GetProcessHeap () returned 0x21ac6e60000 [0046.722] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6ffa0 [0046.722] GetProcessHeap () returned 0x21ac6e60000 [0046.722] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6fde0 [0046.722] GetProcessHeap () returned 0x21ac6e60000 [0046.722] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6fee0 [0046.722] GetProcessHeap () returned 0x21ac6e60000 [0046.723] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6ffc0 [0046.723] GetProcessHeap () returned 0x21ac6e60000 [0046.723] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6fb00 [0046.723] GetProcessHeap () returned 0x21ac6e60000 [0046.723] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6f940 [0046.723] GetProcessHeap () returned 0x21ac6e60000 [0046.723] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6ff60 [0046.723] GetProcessHeap () returned 0x21ac6e60000 [0046.723] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6ffe0 [0046.723] GetProcessHeap () returned 0x21ac6e60000 [0046.723] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70020 [0046.723] GetProcessHeap () returned 0x21ac6e60000 [0046.723] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70040 [0046.723] GetProcessHeap () returned 0x21ac6e60000 [0046.723] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6fd80 [0046.723] GetProcessHeap () returned 0x21ac6e60000 [0046.723] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70060 [0046.723] GetProcessHeap () returned 0x21ac6e60000 [0046.723] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6fc00 [0046.723] GetProcessHeap () returned 0x21ac6e60000 [0046.723] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6fa20 [0046.723] GetProcessHeap () returned 0x21ac6e60000 [0046.723] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6f8e0 [0046.723] GetProcessHeap () returned 0x21ac6e60000 [0046.723] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6f960 [0046.723] GetProcessHeap () returned 0x21ac6e60000 [0046.723] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6fb20 [0046.723] GetProcessHeap () returned 0x21ac6e60000 [0046.723] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6f900 [0046.723] GetProcessHeap () returned 0x21ac6e60000 [0046.723] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6f980 [0046.723] GetProcessHeap () returned 0x21ac6e60000 [0046.723] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6f9a0 [0046.723] GetProcessHeap () returned 0x21ac6e60000 [0046.723] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6fc40 [0046.723] GetProcessHeap () returned 0x21ac6e60000 [0046.723] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6fc60 [0046.723] GetProcessHeap () returned 0x21ac6e60000 [0046.723] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e6fc80 [0046.723] GetProcessHeap () returned 0x21ac6e60000 [0046.723] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70590 [0046.723] GetProcessHeap () returned 0x21ac6e60000 [0046.723] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70570 [0046.723] GetProcessHeap () returned 0x21ac6e60000 [0046.723] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70650 [0046.724] GetProcessHeap () returned 0x21ac6e60000 [0046.724] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70350 [0046.724] GetProcessHeap () returned 0x21ac6e60000 [0046.724] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70250 [0046.724] GetProcessHeap () returned 0x21ac6e60000 [0046.724] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70790 [0046.724] GetProcessHeap () returned 0x21ac6e60000 [0046.724] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70310 [0046.724] GetProcessHeap () returned 0x21ac6e60000 [0046.724] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e702d0 [0046.724] GetProcessHeap () returned 0x21ac6e60000 [0046.724] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70290 [0046.724] GetProcessHeap () returned 0x21ac6e60000 [0046.724] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70430 [0046.724] GetProcessHeap () returned 0x21ac6e60000 [0046.724] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e707b0 [0046.724] GetProcessHeap () returned 0x21ac6e60000 [0046.724] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70610 [0046.724] GetProcessHeap () returned 0x21ac6e60000 [0046.724] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70450 [0046.724] GetProcessHeap () returned 0x21ac6e60000 [0046.724] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70850 [0046.724] GetProcessHeap () returned 0x21ac6e60000 [0046.724] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e701f0 [0046.724] GetProcessHeap () returned 0x21ac6e60000 [0046.724] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70230 [0046.724] GetProcessHeap () returned 0x21ac6e60000 [0046.724] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70670 [0046.724] GetProcessHeap () returned 0x21ac6e60000 [0046.724] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70630 [0046.724] GetProcessHeap () returned 0x21ac6e60000 [0046.724] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e705f0 [0046.724] GetProcessHeap () returned 0x21ac6e60000 [0046.724] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70830 [0046.724] GetProcessHeap () returned 0x21ac6e60000 [0046.724] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70190 [0046.724] GetProcessHeap () returned 0x21ac6e60000 [0046.724] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70510 [0046.724] GetProcessHeap () returned 0x21ac6e60000 [0046.724] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e707d0 [0046.724] GetProcessHeap () returned 0x21ac6e60000 [0046.724] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70690 [0046.724] GetProcessHeap () returned 0x21ac6e60000 [0046.724] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e704d0 [0046.724] GetProcessHeap () returned 0x21ac6e60000 [0046.725] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e701b0 [0046.725] GetProcessHeap () returned 0x21ac6e60000 [0046.725] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e707f0 [0046.725] GetProcessHeap () returned 0x21ac6e60000 [0046.725] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e706b0 [0046.725] GetProcessHeap () returned 0x21ac6e60000 [0046.725] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e702f0 [0046.725] GetProcessHeap () returned 0x21ac6e60000 [0046.725] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70870 [0046.725] GetProcessHeap () returned 0x21ac6e60000 [0046.725] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e702b0 [0046.725] GetProcessHeap () returned 0x21ac6e60000 [0046.725] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70370 [0046.725] GetProcessHeap () returned 0x21ac6e60000 [0046.725] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70330 [0046.725] GetProcessHeap () returned 0x21ac6e60000 [0046.725] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e704b0 [0046.725] GetProcessHeap () returned 0x21ac6e60000 [0046.725] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70470 [0046.725] GetProcessHeap () returned 0x21ac6e60000 [0046.725] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e700f0 [0046.725] GetProcessHeap () returned 0x21ac6e60000 [0046.725] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70810 [0046.725] GetProcessHeap () returned 0x21ac6e60000 [0046.725] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70390 [0046.725] GetProcessHeap () returned 0x21ac6e60000 [0046.725] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70110 [0046.725] GetProcessHeap () returned 0x21ac6e60000 [0046.725] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e706f0 [0046.725] GetProcessHeap () returned 0x21ac6e60000 [0046.725] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70210 [0046.725] GetProcessHeap () returned 0x21ac6e60000 [0046.725] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e706d0 [0046.725] GetProcessHeap () returned 0x21ac6e60000 [0046.725] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70490 [0046.725] GetProcessHeap () returned 0x21ac6e60000 [0046.725] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70130 [0046.725] GetProcessHeap () returned 0x21ac6e60000 [0046.725] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e704f0 [0046.725] GetProcessHeap () returned 0x21ac6e60000 [0046.725] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70150 [0046.726] GetProcessHeap () returned 0x21ac6e60000 [0046.726] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70170 [0046.726] GetProcessHeap () returned 0x21ac6e60000 [0046.726] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e705b0 [0046.726] GetProcessHeap () returned 0x21ac6e60000 [0046.726] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70530 [0046.726] GetProcessHeap () returned 0x21ac6e60000 [0046.726] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e703b0 [0046.726] GetProcessHeap () returned 0x21ac6e60000 [0046.726] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e701d0 [0046.726] GetProcessHeap () returned 0x21ac6e60000 [0046.726] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70270 [0046.726] GetProcessHeap () returned 0x21ac6e60000 [0046.726] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e703d0 [0046.726] GetProcessHeap () returned 0x21ac6e60000 [0046.726] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e705d0 [0046.726] GetProcessHeap () returned 0x21ac6e60000 [0046.726] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e703f0 [0046.726] GetProcessHeap () returned 0x21ac6e60000 [0046.726] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70410 [0046.726] GetProcessHeap () returned 0x21ac6e60000 [0046.726] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70550 [0046.726] GetProcessHeap () returned 0x21ac6e60000 [0046.726] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70710 [0046.726] GetProcessHeap () returned 0x21ac6e60000 [0046.726] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70730 [0046.726] GetProcessHeap () returned 0x21ac6e60000 [0046.726] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70750 [0046.726] GetProcessHeap () returned 0x21ac6e60000 [0046.726] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70770 [0046.726] GetProcessHeap () returned 0x21ac6e60000 [0046.726] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70920 [0046.726] GetProcessHeap () returned 0x21ac6e60000 [0046.726] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70aa0 [0046.726] GetProcessHeap () returned 0x21ac6e60000 [0046.726] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70cc0 [0046.726] GetProcessHeap () returned 0x21ac6e60000 [0046.726] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70f40 [0046.727] GetProcessHeap () returned 0x21ac6e60000 [0046.727] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70ca0 [0046.727] GetProcessHeap () returned 0x21ac6e60000 [0046.727] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70be0 [0046.727] GetProcessHeap () returned 0x21ac6e60000 [0046.727] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70c80 [0046.727] GetProcessHeap () returned 0x21ac6e60000 [0046.727] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70e80 [0046.727] GetProcessHeap () returned 0x21ac6e60000 [0046.727] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70ac0 [0046.727] GetProcessHeap () returned 0x21ac6e60000 [0046.727] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70ae0 [0046.727] GetProcessHeap () returned 0x21ac6e60000 [0046.727] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e709c0 [0046.727] GetProcessHeap () returned 0x21ac6e60000 [0046.727] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70f00 [0046.727] GetProcessHeap () returned 0x21ac6e60000 [0046.727] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70b00 [0046.727] GetProcessHeap () returned 0x21ac6e60000 [0046.727] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e71000 [0046.727] GetProcessHeap () returned 0x21ac6e60000 [0046.727] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70960 [0046.727] GetProcessHeap () returned 0x21ac6e60000 [0046.727] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70b20 [0046.727] GetProcessHeap () returned 0x21ac6e60000 [0046.727] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70d80 [0046.727] GetProcessHeap () returned 0x21ac6e60000 [0046.727] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e709a0 [0046.727] GetProcessHeap () returned 0x21ac6e60000 [0046.727] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70a20 [0046.727] GetProcessHeap () returned 0x21ac6e60000 [0046.727] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70da0 [0046.727] GetProcessHeap () returned 0x21ac6e60000 [0046.727] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70dc0 [0046.727] GetProcessHeap () returned 0x21ac6e60000 [0046.727] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70c40 [0046.727] GetProcessHeap () returned 0x21ac6e60000 [0046.727] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70c20 [0046.727] GetProcessHeap () returned 0x21ac6e60000 [0046.727] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70b40 [0046.727] GetProcessHeap () returned 0x21ac6e60000 [0046.727] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70d40 [0046.727] GetProcessHeap () returned 0x21ac6e60000 [0046.727] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70ba0 [0046.728] GetProcessHeap () returned 0x21ac6e60000 [0046.728] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70b60 [0046.728] GetProcessHeap () returned 0x21ac6e60000 [0046.728] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e70de0 [0046.728] _wcsicmp (_String1="netsh.exe", _String2="ipxmontr.dll") returned 5 [0046.728] _wcsicmp (_String1="netsh.exe", _String2="ipxpromn.dll") returned 5 [0046.728] GetProcessHeap () returned 0x21ac6e60000 [0046.728] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x28) returned 0x21ac6e68740 [0046.728] GetProcessHeap () returned 0x21ac6e60000 [0046.728] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x2) returned 0x21ac6e6dad0 [0046.728] GetProcessHeap () returned 0x21ac6e60000 [0046.728] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x14) returned 0x21ac6e70d60 [0046.728] _wcsupr (in: _String="netsh.exe" | out: _String="NETSH.EXE") returned="NETSH.EXE" [0046.728] GetProcessHeap () returned 0x21ac6e60000 [0046.728] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x0) returned 1 [0046.728] GetProcessHeap () returned 0x21ac6e60000 [0046.728] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x58) returned 0x21ac6e656c0 [0046.728] GetProcessHeap () returned 0x21ac6e60000 [0046.728] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x0) returned 1 [0046.728] GetProcessHeap () returned 0x21ac6e60000 [0046.728] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0xb0) returned 0x21ac6e65040 [0046.728] GetProcessHeap () returned 0x21ac6e60000 [0046.728] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6e656c0) returned 1 [0046.728] LoadLibraryExW (lpLibFileName="api-ms-win-appmodel-runtime-l1-1-0.dll", hFile=0x0, dwFlags=0x8) returned 0x7ff92e3f0000 [0046.904] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\NetSh", ulOptions=0x0, samDesired=0x20019, phkResult=0x90deaf72e8 | out: phkResult=0x90deaf72e8*=0xb4) returned 0x0 [0046.905] RegQueryInfoKeyW (in: hKey=0xb4, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x90deaf7320, lpcbMaxValueNameLen=0x90deaf7330, lpcbMaxValueLen=0x90deaf7328, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x90deaf7320*=0x14, lpcbMaxValueNameLen=0x90deaf7330, lpcbMaxValueLen=0x90deaf7328, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0046.905] GetProcessHeap () returned 0x21ac6e60000 [0046.905] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x8, Size=0x16) returned 0x21ac6e70940 [0046.905] GetProcessHeap () returned 0x21ac6e60000 [0046.905] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x8, Size=0x23) returned 0x21ac6e68770 [0046.905] RegEnumValueW (in: hKey=0xb4, dwIndex=0x0, lpValueName=0x21ac6e70940, lpcchValueName=0x90deaf72e0, lpReserved=0x0, lpType=0x0, lpData=0x21ac6e68770, lpcbData=0x90deaf7338 | out: lpValueName="2", lpcchValueName=0x90deaf72e0, lpType=0x0, lpData=0x21ac6e68770, lpcbData=0x90deaf7338) returned 0x0 [0046.905] _wcsicmp (_String1="ifmon.dll", _String2="ipxmontr.dll") returned -10 [0046.905] _wcsicmp (_String1="ifmon.dll", _String2="ipxpromn.dll") returned -10 [0046.905] GetProcessHeap () returned 0x21ac6e60000 [0046.905] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x50) returned 0x21ac6e716b0 [0046.905] GetProcessHeap () returned 0x21ac6e60000 [0046.905] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x4) returned 0x21ac6e6db80 [0046.905] GetProcessHeap () returned 0x21ac6e60000 [0046.905] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x14) returned 0x21ac6e70900 [0046.905] _wcsupr (in: _String="ifmon.dll" | out: _String="IFMON.DLL") returned="IFMON.DLL" [0046.905] GetProcessHeap () returned 0x21ac6e60000 [0046.905] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6e68740) returned 1 [0046.905] LoadLibraryExW (lpLibFileName="IFMON.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ff912610000 [0047.742] GetProcAddress (hModule=0x7ff912610000, lpProcName="InitHelperDll") returned 0x7ff912611310 [0047.742] InitHelperDll () returned 0x0 [0047.745] RegisterHelper () returned 0x0 [0047.745] GetProcessHeap () returned 0x21ac6e60000 [0047.745] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x108) returned 0x21ac6e642f0 [0047.745] GetProcessHeap () returned 0x21ac6e60000 [0047.745] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6e65040) returned 1 [0048.067] RegEnumValueW (in: hKey=0xb4, dwIndex=0x1, lpValueName=0x21ac6e70940, lpcchValueName=0x90deaf72e0, lpReserved=0x0, lpType=0x0, lpData=0x21ac6e68770, lpcbData=0x90deaf7338 | out: lpValueName="4", lpcchValueName=0x90deaf72e0, lpType=0x0, lpData=0x21ac6e68770, lpcbData=0x90deaf7338) returned 0x0 [0048.068] _wcsicmp (_String1="rasmontr.dll", _String2="ipxmontr.dll") returned 9 [0048.068] _wcsicmp (_String1="rasmontr.dll", _String2="ipxpromn.dll") returned 9 [0048.068] GetProcessHeap () returned 0x21ac6e60000 [0048.068] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x78) returned 0x21ac6e65040 [0048.068] GetProcessHeap () returned 0x21ac6e60000 [0048.068] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x4) returned 0x21ac6e6db90 [0048.068] GetProcessHeap () returned 0x21ac6e60000 [0048.068] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x1a) returned 0x21ac6e68920 [0048.068] _wcsupr (in: _String="rasmontr.dll" | out: _String="RASMONTR.DLL") returned="RASMONTR.DLL" [0048.068] GetProcessHeap () returned 0x21ac6e60000 [0048.068] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6e716b0) returned 1 [0048.068] LoadLibraryExW (lpLibFileName="RASMONTR.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ff912000000 [0051.625] LoadLibraryExA (lpLibFileName="MSVCRT.DLL", hFile=0x0, dwFlags=0x800) returned 0x7ff931a40000 [0051.625] GetVersion () returned 0x3ad7000a [0051.625] SetErrorMode (uMode=0x0) returned 0x0 [0051.625] SetErrorMode (uMode=0x8001) returned 0x0 [0051.625] LocalAlloc (uFlags=0x0, uBytes=0x2000) returned 0x21ac6e83080 [0051.626] LocalFree (hMem=0x21ac6e83080) returned 0x0 [0051.626] GetVersion () returned 0x3ad7000a [0051.627] GlobalLock (hMem=0x21ac8900008) returned 0x21ac6e83080 [0051.627] LocalAlloc (uFlags=0x40, uBytes=0x340) returned 0x21ac6e832a0 [0051.627] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x21ac6e797b0 [0051.627] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x21ac6e70e20 [0051.627] malloc (_Size=0x100) returned 0x21ac7156df0 [0051.627] __dllonexit () returned 0x7ff911c91200 [0051.627] __dllonexit () returned 0x7ff911c911f0 [0051.628] __dllonexit () returned 0x7ff911c91240 [0051.628] __dllonexit () returned 0x7ff911c912a0 [0051.628] __dllonexit () returned 0x7ff911c91390 [0051.628] __dllonexit () returned 0x7ff911c913a0 [0051.628] __dllonexit () returned 0x7ff911c91420 [0051.628] __dllonexit () returned 0x7ff911c914c0 [0051.628] __dllonexit () returned 0x7ff911c912c0 [0051.628] __dllonexit () returned 0x7ff911cb59c0 [0051.628] __dllonexit () returned 0x7ff911c912e0 [0051.628] __dllonexit () returned 0x7ff911c91470 [0051.628] __dllonexit () returned 0x7ff911c91490 [0051.629] __dllonexit () returned 0x7ff911c914e0 [0051.629] __dllonexit () returned 0x7ff911c91500 [0051.629] __dllonexit () returned 0x7ff911c91520 [0051.629] __dllonexit () returned 0x7ff911c91550 [0051.629] __dllonexit () returned 0x7ff911c91610 [0051.629] __dllonexit () returned 0x7ff911c91050 [0051.629] __dllonexit () returned 0x7ff911c91070 [0051.629] __dllonexit () returned 0x7ff911c91030 [0051.631] RegisterClipboardFormatW (lpszFormat="commctrl_DragListMsg") returned 0xc16d [0051.632] __dllonexit () returned 0x7ff911cb59a0 [0051.632] __dllonexit () returned 0x7ff911cb5980 [0051.632] __dllonexit () returned 0x7ff911cb59b0 [0051.632] __dllonexit () returned 0x7ff911cb5990 [0051.632] GetVersion () returned 0x3ad7000a [0051.632] GetVersion () returned 0x3ad7000a [0051.632] GetVersion () returned 0x3ad7000a [0051.632] __dllonexit () returned 0x7ff911ca28e0 [0051.633] __dllonexit () returned 0x7ff911ca2910 [0051.633] __dllonexit () returned 0x7ff911c91300 [0051.633] __dllonexit () returned 0x7ff911c913b0 [0051.633] __dllonexit () returned 0x7ff911c913d0 [0051.633] __dllonexit () returned 0x7ff911ca26e0 [0051.633] GetVersion () returned 0x3ad7000a [0051.633] GetProcessVersion (ProcessId=0x0) returned 0xa0000 [0051.633] GetSystemMetrics (nIndex=11) returned 32 [0051.633] GetSystemMetrics (nIndex=12) returned 32 [0051.633] GetSystemMetrics (nIndex=2) returned 17 [0051.633] GetSystemMetrics (nIndex=3) returned 17 [0051.633] GetDC (hWnd=0x0) returned 0x60100ce [0051.633] GetDeviceCaps (hdc=0x60100ce, index=88) returned 96 [0051.633] GetDeviceCaps (hdc=0x60100ce, index=90) returned 96 [0051.633] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1 [0051.634] GetSysColor (nIndex=15) returned 0xf0f0f0 [0051.634] GetSysColor (nIndex=16) returned 0xa0a0a0 [0051.634] GetSysColor (nIndex=20) returned 0xffffff [0051.634] GetSysColor (nIndex=18) returned 0x0 [0051.634] GetSysColor (nIndex=6) returned 0x646464 [0051.634] GetSysColorBrush (nIndex=15) returned 0x100072 [0051.634] GetSysColorBrush (nIndex=6) returned 0x10007a [0051.634] LoadCursorW (hInstance=0x0, lpCursorName=0x7f02) returned 0x10007 [0051.634] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0051.634] __dllonexit () returned 0x7ff911c91450 [0051.634] RegisterClipboardFormatW (lpszFormat="commdlg_FindReplace") returned 0xc16c [0051.634] __dllonexit () returned 0x7ff911ca26c0 [0051.634] RegisterClipboardFormatW (lpszFormat="Native") returned 0xc004 [0051.634] RegisterClipboardFormatW (lpszFormat="OwnerLink") returned 0xc003 [0051.634] RegisterClipboardFormatW (lpszFormat="ObjectLink") returned 0xc002 [0051.634] RegisterClipboardFormatW (lpszFormat="Embedded Object") returned 0xc00a [0051.634] RegisterClipboardFormatW (lpszFormat="Embed Source") returned 0xc00b [0051.634] RegisterClipboardFormatW (lpszFormat="Link Source") returned 0xc00d [0051.634] RegisterClipboardFormatW (lpszFormat="Object Descriptor") returned 0xc00e [0051.635] RegisterClipboardFormatW (lpszFormat="Link Source Descriptor") returned 0xc00f [0051.635] RegisterClipboardFormatW (lpszFormat="FileName") returned 0xc006 [0051.635] RegisterClipboardFormatW (lpszFormat="FileNameW") returned 0xc007 [0051.635] RegisterClipboardFormatW (lpszFormat="Rich Text Format") returned 0xc07a [0051.635] RegisterClipboardFormatW (lpszFormat="RichEdit Text and Objects") returned 0xc083 [0051.635] RegisterClipboardFormatW (lpszFormat="commdlg_FindReplace") returned 0xc16c [0051.635] __dllonexit () returned 0x7ff911cb59d0 [0051.635] __dllonexit () returned 0x7ff911cb59f0 [0051.635] __dllonexit () returned 0x7ff911cb5a00 [0051.636] __dllonexit () returned 0x7ff911cb5a10 [0051.636] __dllonexit () returned 0x7ff911cb5a20 [0051.636] GetCursorPos (in: lpPoint=0x7ff911dd5ae8 | out: lpPoint=0x7ff911dd5ae8*(x=282, y=738)) returned 1 [0051.636] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x21ac6e81540 [0051.636] LocalReAlloc (hMem=0x21ac6e70e20, uBytes=0x18, uFlags=0x2) returned 0x21ac6e653a0 [0051.636] GetCurrentThread () returned 0xfffffffffffffffe [0051.636] GetCurrentThreadId () returned 0x7b4 [0051.636] __dllonexit () returned 0x7ff911c91620 [0051.637] SetErrorMode (uMode=0x0) returned 0x8001 [0051.637] SetErrorMode (uMode=0x8001) returned 0x0 [0051.637] GetModuleFileNameW (in: hModule=0x7ff911c90000, lpFilename=0x90deaf62c0, nSize=0x104 | out: lpFilename="C:\\WINDOWS\\system32\\MFC42u.dll" (normalized: "c:\\windows\\system32\\mfc42u.dll")) returned 0x1e [0051.637] wcscpy_s (in: _Destination=0x90deaf64d0, _SizeInWords=0x104, _Source="MFC42u" | out: _Destination="MFC42u") returned 0x0 [0051.637] FindResourceW (hModule=0x7ff911c90000, lpName=0xe01, lpType=0x6) returned 0x21ac7090bb0 [0051.639] LoadStringW (in: hInstance=0x7ff911c90000, uID=0xe000, lpBuffer=0x90deaf66e0, cchBufferMax=256 | out: lpBuffer="") returned 0x0 [0051.639] wcscpy_s (in: _Destination=0x90deaf62f4, _SizeInWords=0x5, _Source=".HLP" | out: _Destination=".HLP") returned 0x0 [0051.639] wcscat_s (in: _Destination="MFC42u", _SizeInWords=0x104, _Source=".INI" | out: _Destination="MFC42u.INI") returned 0x0 [0051.641] malloc (_Size=0x80) returned 0x21ac7156e10 [0051.641] LocalAlloc (uFlags=0x40, uBytes=0x2100) returned 0x21ac6e835f0 [0051.641] GetSystemDirectoryA (in: lpBuffer=0x90deaf6960, uSize=0x112 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13 [0051.641] strcat_s (in: _Destination="C:\\WINDOWS\\system32", _SizeInBytes=0x112, _Source="\\MFC42" | out: _Destination="C:\\WINDOWS\\system32\\MFC42") returned 0x0 [0051.641] strcat_s (in: _Destination="C:\\WINDOWS\\system32\\MFC42", _SizeInBytes=0x112, _Source="LOC" | out: _Destination="C:\\WINDOWS\\system32\\MFC42LOC") returned 0x0 [0051.641] strcat_s (in: _Destination="C:\\WINDOWS\\system32\\MFC42LOC", _SizeInBytes=0x112, _Source=".DLL" | out: _Destination="C:\\WINDOWS\\system32\\MFC42LOC.DLL") returned 0x0 [0051.641] LoadLibraryExA (lpLibFileName="C:\\WINDOWS\\system32\\MFC42LOC.DLL", hFile=0x0, dwFlags=0x2) returned 0x0 [0051.877] GetProcAddress (hModule=0x7ff912000000, lpProcName="InitHelperDll") returned 0x7ff912015850 [0051.877] InitHelperDll () returned 0x0 [0051.878] RegisterHelper () returned 0x0 [0051.878] GetProcessHeap () returned 0x21ac6e60000 [0051.878] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x160) returned 0x21ac6e7d590 [0051.878] GetProcessHeap () returned 0x21ac6e60000 [0051.878] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6e642f0) returned 1 [0051.878] RegisterHelper () returned 0x0 [0051.878] GetProcessHeap () returned 0x21ac6e60000 [0051.878] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x1b8) returned 0x21ac6e7abc0 [0051.878] GetProcessHeap () returned 0x21ac6e60000 [0051.878] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6e7d590) returned 1 [0051.880] RegisterHelper () returned 0x0 [0051.880] GetProcessHeap () returned 0x21ac6e60000 [0051.880] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x210) returned 0x21ac6e7d590 [0051.880] GetProcessHeap () returned 0x21ac6e60000 [0051.880] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6e7abc0) returned 1 [0051.880] RegisterHelper () returned 0x0 [0051.880] GetProcessHeap () returned 0x21ac6e60000 [0051.880] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x268) returned 0x21ac6e7abc0 [0051.880] GetProcessHeap () returned 0x21ac6e60000 [0051.880] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6e7d590) returned 1 [0051.880] RegisterHelper () returned 0x0 [0051.880] GetProcessHeap () returned 0x21ac6e60000 [0051.880] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x2c0) returned 0x21ac6e85700 [0051.880] GetProcessHeap () returned 0x21ac6e60000 [0051.880] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6e7abc0) returned 1 [0051.880] RegEnumValueW (in: hKey=0xb4, dwIndex=0x2, lpValueName=0x21ac6e70940, lpcchValueName=0x90deaf72e0, lpReserved=0x0, lpType=0x0, lpData=0x21ac6e68770, lpcbData=0x90deaf7338 | out: lpValueName="authfwcfg", lpcchValueName=0x90deaf72e0, lpType=0x0, lpData=0x21ac6e68770, lpcbData=0x90deaf7338) returned 0x0 [0051.880] _wcsicmp (_String1="authfwcfg.dll", _String2="ipxmontr.dll") returned -8 [0051.880] _wcsicmp (_String1="authfwcfg.dll", _String2="ipxpromn.dll") returned -8 [0051.880] GetProcessHeap () returned 0x21ac6e60000 [0051.880] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0xa0) returned 0x21ac6e652e0 [0051.880] GetProcessHeap () returned 0x21ac6e60000 [0051.880] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x14) returned 0x21ac6e70fc0 [0051.880] GetProcessHeap () returned 0x21ac6e60000 [0051.880] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x1c) returned 0x21ac6e79960 [0051.880] _wcsupr (in: _String="authfwcfg.dll" | out: _String="AUTHFWCFG.DLL") returned="AUTHFWCFG.DLL" [0051.880] GetProcessHeap () returned 0x21ac6e60000 [0051.880] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6e65040) returned 1 [0051.880] LoadLibraryExW (lpLibFileName="AUTHFWCFG.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ff911960000 [0052.880] GetProcAddress (hModule=0x7ff911960000, lpProcName="InitHelperDll") returned 0x7ff911961430 [0052.880] InitHelperDll () returned 0x0 [0052.883] RegisterHelper () returned 0x0 [0052.883] GetProcessHeap () returned 0x21ac6e60000 [0052.883] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x318) returned 0x21ac6e861e0 [0052.883] GetProcessHeap () returned 0x21ac6e60000 [0052.883] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6e85700) returned 1 [0052.883] RegisterHelper () returned 0x0 [0052.883] GetProcessHeap () returned 0x21ac6e60000 [0052.883] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x370) returned 0x21ac6e86500 [0052.883] GetProcessHeap () returned 0x21ac6e60000 [0052.883] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6e861e0) returned 1 [0052.883] RegisterHelper () returned 0x0 [0052.883] GetProcessHeap () returned 0x21ac6e60000 [0052.883] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x3c8) returned 0x21ac6e86880 [0052.883] GetProcessHeap () returned 0x21ac6e60000 [0052.883] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6e86500) returned 1 [0052.883] RegisterHelper () returned 0x0 [0052.883] GetProcessHeap () returned 0x21ac6e60000 [0052.883] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x420) returned 0x21ac6e861e0 [0052.883] GetProcessHeap () returned 0x21ac6e60000 [0052.883] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6e86880) returned 1 [0052.884] RegisterHelper () returned 0x0 [0052.884] GetProcessHeap () returned 0x21ac6e60000 [0052.884] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x478) returned 0x21ac6e86610 [0052.884] GetProcessHeap () returned 0x21ac6e60000 [0052.884] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6e861e0) returned 1 [0052.884] RegEnumValueW (in: hKey=0xb4, dwIndex=0x3, lpValueName=0x21ac6e70940, lpcchValueName=0x90deaf72e0, lpReserved=0x0, lpType=0x0, lpData=0x21ac6e68770, lpcbData=0x90deaf7338 | out: lpValueName="dhcpclient", lpcchValueName=0x90deaf72e0, lpType=0x0, lpData=0x21ac6e68770, lpcbData=0x90deaf7338) returned 0x0 [0052.884] _wcsicmp (_String1="dhcpcmonitor.dll", _String2="ipxmontr.dll") returned -5 [0052.884] _wcsicmp (_String1="dhcpcmonitor.dll", _String2="ipxpromn.dll") returned -5 [0052.884] GetProcessHeap () returned 0x21ac6e60000 [0052.884] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0xc8) returned 0x21ac6e79090 [0052.884] GetProcessHeap () returned 0x21ac6e60000 [0052.884] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x16) returned 0x21ac6e85fc0 [0052.884] GetProcessHeap () returned 0x21ac6e60000 [0052.884] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x22) returned 0x21ac6e79a20 [0052.884] _wcsupr (in: _String="dhcpcmonitor.dll" | out: _String="DHCPCMONITOR.DLL") returned="DHCPCMONITOR.DLL" [0052.884] GetProcessHeap () returned 0x21ac6e60000 [0052.884] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6e652e0) returned 1 [0052.884] LoadLibraryExW (lpLibFileName="DHCPCMONITOR.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ff911950000 [0053.166] GetProcAddress (hModule=0x7ff911950000, lpProcName="InitHelperDll") returned 0x7ff911951610 [0053.166] InitHelperDll () returned 0x0 [0053.166] RegisterHelper () returned 0x0 [0053.166] GetProcessHeap () returned 0x21ac6e60000 [0053.166] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x4d0) returned 0x21ac6e872a0 [0053.166] GetProcessHeap () returned 0x21ac6e60000 [0053.166] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6e86610) returned 1 [0053.166] RegEnumValueW (in: hKey=0xb4, dwIndex=0x4, lpValueName=0x21ac6e70940, lpcchValueName=0x90deaf72e0, lpReserved=0x0, lpType=0x0, lpData=0x21ac6e68770, lpcbData=0x90deaf7338 | out: lpValueName="dot3cfg", lpcchValueName=0x90deaf72e0, lpType=0x0, lpData=0x21ac6e68770, lpcbData=0x90deaf7338) returned 0x0 [0053.166] _wcsicmp (_String1="dot3cfg.dll", _String2="ipxmontr.dll") returned -5 [0053.166] _wcsicmp (_String1="dot3cfg.dll", _String2="ipxpromn.dll") returned -5 [0053.166] GetProcessHeap () returned 0x21ac6e60000 [0053.166] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0xf0) returned 0x21ac6e642f0 [0053.166] GetProcessHeap () returned 0x21ac6e60000 [0053.167] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e85e80 [0053.167] GetProcessHeap () returned 0x21ac6e60000 [0053.167] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x18) returned 0x21ac6e85ea0 [0053.167] _wcsupr (in: _String="dot3cfg.dll" | out: _String="DOT3CFG.DLL") returned="DOT3CFG.DLL" [0053.167] GetProcessHeap () returned 0x21ac6e60000 [0053.167] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6e79090) returned 1 [0053.167] LoadLibraryExW (lpLibFileName="DOT3CFG.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ff911930000 [0054.541] GetProcAddress (hModule=0x7ff911930000, lpProcName="InitHelperDll") returned 0x7ff911931100 [0054.541] InitHelperDll () returned 0x0 [0054.541] RegisterHelper () returned 0x0 [0054.541] GetProcessHeap () returned 0x21ac6e60000 [0054.541] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x528) returned 0x21ac6e87b90 [0054.542] GetProcessHeap () returned 0x21ac6e60000 [0054.542] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6e872a0) returned 1 [0054.542] RegEnumValueW (in: hKey=0xb4, dwIndex=0x5, lpValueName=0x21ac6e70940, lpcchValueName=0x90deaf72e0, lpReserved=0x0, lpType=0x0, lpData=0x21ac6e68770, lpcbData=0x90deaf7338 | out: lpValueName="fwcfg", lpcchValueName=0x90deaf72e0, lpType=0x0, lpData=0x21ac6e68770, lpcbData=0x90deaf7338) returned 0x0 [0054.542] _wcsicmp (_String1="fwcfg.dll", _String2="ipxmontr.dll") returned -3 [0054.542] _wcsicmp (_String1="fwcfg.dll", _String2="ipxpromn.dll") returned -3 [0054.542] GetProcessHeap () returned 0x21ac6e60000 [0054.542] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x118) returned 0x21ac6e7d6d0 [0054.542] GetProcessHeap () returned 0x21ac6e60000 [0054.542] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0xc) returned 0x21ac6e85e20 [0054.542] GetProcessHeap () returned 0x21ac6e60000 [0054.542] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x14) returned 0x21ac6e85fe0 [0054.542] _wcsupr (in: _String="fwcfg.dll" | out: _String="FWCFG.DLL") returned="FWCFG.DLL" [0054.542] GetProcessHeap () returned 0x21ac6e60000 [0054.542] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6e642f0) returned 1 [0054.542] LoadLibraryExW (lpLibFileName="FWCFG.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ff911850000 [0054.555] GetProcAddress (hModule=0x7ff911850000, lpProcName="InitHelperDll") returned 0x7ff9118511f0 [0054.555] InitHelperDll () returned 0x0 [0054.555] RegisterHelper () returned 0x0 [0054.555] GetProcessHeap () returned 0x21ac6e60000 [0054.555] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x580) returned 0x21ac6e880c0 [0054.555] GetProcessHeap () returned 0x21ac6e60000 [0054.555] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6e87b90) returned 1 [0054.556] RegEnumValueW (in: hKey=0xb4, dwIndex=0x6, lpValueName=0x21ac6e70940, lpcchValueName=0x90deaf72e0, lpReserved=0x0, lpType=0x0, lpData=0x21ac6e68770, lpcbData=0x90deaf7338 | out: lpValueName="hnetmon", lpcchValueName=0x90deaf72e0, lpType=0x0, lpData=0x21ac6e68770, lpcbData=0x90deaf7338) returned 0x0 [0054.556] _wcsicmp (_String1="hnetmon.dll", _String2="ipxmontr.dll") returned -1 [0054.556] _wcsicmp (_String1="hnetmon.dll", _String2="ipxpromn.dll") returned -1 [0054.556] GetProcessHeap () returned 0x21ac6e60000 [0054.556] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x140) returned 0x21ac6e85700 [0054.556] GetProcessHeap () returned 0x21ac6e60000 [0054.556] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e860c0 [0054.556] GetProcessHeap () returned 0x21ac6e60000 [0054.556] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x18) returned 0x21ac6e861a0 [0054.556] _wcsupr (in: _String="hnetmon.dll" | out: _String="HNETMON.DLL") returned="HNETMON.DLL" [0054.556] GetProcessHeap () returned 0x21ac6e60000 [0054.556] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6e7d6d0) returned 1 [0054.556] LoadLibraryExW (lpLibFileName="HNETMON.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ff91a590000 [0055.751] GetProcAddress (hModule=0x7ff91a590000, lpProcName="InitHelperDll") returned 0x7ff91a592060 [0055.751] InitHelperDll () returned 0x0 [0055.752] RegisterHelper () returned 0x0 [0055.752] GetProcessHeap () returned 0x21ac6e60000 [0055.752] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x5d8) returned 0x21ac6e8fd00 [0055.752] GetProcessHeap () returned 0x21ac6e60000 [0055.752] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6e880c0) returned 1 [0055.752] RegEnumValueW (in: hKey=0xb4, dwIndex=0x7, lpValueName=0x21ac6e70940, lpcchValueName=0x90deaf72e0, lpReserved=0x0, lpType=0x0, lpData=0x21ac6e68770, lpcbData=0x90deaf7338 | out: lpValueName="netiohlp", lpcchValueName=0x90deaf72e0, lpType=0x0, lpData=0x21ac6e68770, lpcbData=0x90deaf7338) returned 0x0 [0055.752] _wcsicmp (_String1="netiohlp.dll", _String2="ipxmontr.dll") returned 5 [0055.752] _wcsicmp (_String1="netiohlp.dll", _String2="ipxpromn.dll") returned 5 [0055.752] GetProcessHeap () returned 0x21ac6e60000 [0055.752] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x168) returned 0x21ac6e85850 [0055.752] GetProcessHeap () returned 0x21ac6e60000 [0055.752] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x12) returned 0x21ac6e85c80 [0055.752] GetProcessHeap () returned 0x21ac6e60000 [0055.752] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x1a) returned 0x21ac6e86e70 [0055.752] _wcsupr (in: _String="netiohlp.dll" | out: _String="NETIOHLP.DLL") returned="NETIOHLP.DLL" [0055.752] GetProcessHeap () returned 0x21ac6e60000 [0055.752] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6e85700) returned 1 [0055.752] LoadLibraryExW (lpLibFileName="NETIOHLP.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ff911310000 [0056.658] GetProcAddress (hModule=0x7ff911310000, lpProcName="InitHelperDll") returned 0x7ff911325f80 [0056.658] InitHelperDll () returned 0x0 [0056.658] RegisterHelper () returned 0x0 [0056.658] GetProcessHeap () returned 0x21ac6e60000 [0056.658] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x630) returned 0x21ac6e90af0 [0056.658] GetProcessHeap () returned 0x21ac6e60000 [0056.658] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6e8fd00) returned 1 [0056.658] RegisterHelper () returned 0x0 [0056.658] GetProcessHeap () returned 0x21ac6e60000 [0056.658] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x688) returned 0x21ac6e91130 [0056.658] GetProcessHeap () returned 0x21ac6e60000 [0056.658] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6e90af0) returned 1 [0056.659] RegisterHelper () returned 0x0 [0056.659] GetProcessHeap () returned 0x21ac6e60000 [0056.659] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x6e0) returned 0x21ac6e917c0 [0056.659] GetProcessHeap () returned 0x21ac6e60000 [0056.659] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6e91130) returned 1 [0056.659] RegisterHelper () returned 0x0 [0056.659] GetProcessHeap () returned 0x21ac6e60000 [0056.659] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x738) returned 0x21ac6e90af0 [0056.659] GetProcessHeap () returned 0x21ac6e60000 [0056.659] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6e917c0) returned 1 [0056.659] RegisterHelper () returned 0x0 [0056.659] GetProcessHeap () returned 0x21ac6e60000 [0056.659] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x790) returned 0x21ac6e91230 [0056.659] GetProcessHeap () returned 0x21ac6e60000 [0056.659] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6e90af0) returned 1 [0056.659] RegisterHelper () returned 0x0 [0056.659] GetProcessHeap () returned 0x21ac6e60000 [0056.659] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x7e8) returned 0x21ac6e919d0 [0056.659] GetProcessHeap () returned 0x21ac6e60000 [0056.659] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6e91230) returned 1 [0056.659] RegisterHelper () returned 0x0 [0056.659] GetProcessHeap () returned 0x21ac6e60000 [0056.659] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x840) returned 0x21ac6e921c0 [0056.659] GetProcessHeap () returned 0x21ac6e60000 [0056.659] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6e919d0) returned 1 [0056.659] RegisterHelper () returned 0x0 [0056.659] GetProcessHeap () returned 0x21ac6e60000 [0056.659] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x898) returned 0x21ac6e90af0 [0056.660] GetProcessHeap () returned 0x21ac6e60000 [0056.660] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6e921c0) returned 1 [0056.660] RegisterHelper () returned 0x0 [0056.660] GetProcessHeap () returned 0x21ac6e60000 [0056.660] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x8f0) returned 0x21ac6e91390 [0056.660] GetProcessHeap () returned 0x21ac6e60000 [0056.660] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6e90af0) returned 1 [0056.660] RegEnumValueW (in: hKey=0xb4, dwIndex=0x8, lpValueName=0x21ac6e70940, lpcchValueName=0x90deaf72e0, lpReserved=0x0, lpType=0x0, lpData=0x21ac6e68770, lpcbData=0x90deaf7338 | out: lpValueName="nettrace", lpcchValueName=0x90deaf72e0, lpType=0x0, lpData=0x21ac6e68770, lpcbData=0x90deaf7338) returned 0x0 [0056.660] _wcsicmp (_String1="nettrace.dll", _String2="ipxmontr.dll") returned 5 [0056.660] _wcsicmp (_String1="nettrace.dll", _String2="ipxpromn.dll") returned 5 [0056.660] GetProcessHeap () returned 0x21ac6e60000 [0056.660] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x190) returned 0x21ac6e7abc0 [0056.660] GetProcessHeap () returned 0x21ac6e60000 [0056.660] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x12) returned 0x21ac6e85ba0 [0056.660] GetProcessHeap () returned 0x21ac6e60000 [0056.660] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x1a) returned 0x21ac6e90750 [0056.660] _wcsupr (in: _String="nettrace.dll" | out: _String="NETTRACE.DLL") returned="NETTRACE.DLL" [0056.660] GetProcessHeap () returned 0x21ac6e60000 [0056.660] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6e85850) returned 1 [0056.660] LoadLibraryExW (lpLibFileName="NETTRACE.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ff911460000 [0057.726] GetProcAddress (hModule=0x7ff911460000, lpProcName="InitHelperDll") returned 0x7ff9114615d0 [0057.726] InitHelperDll () returned 0x0 [0057.726] RegisterHelper () returned 0x0 [0057.726] GetProcessHeap () returned 0x21ac6e60000 [0057.726] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x948) returned 0x21ac6ea64f0 [0057.726] GetProcessHeap () returned 0x21ac6e60000 [0057.726] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6e91390) returned 1 [0057.726] RegEnumValueW (in: hKey=0xb4, dwIndex=0x9, lpValueName=0x21ac6e70940, lpcchValueName=0x90deaf72e0, lpReserved=0x0, lpType=0x0, lpData=0x21ac6e68770, lpcbData=0x90deaf7338 | out: lpValueName="nshhttp", lpcchValueName=0x90deaf72e0, lpType=0x0, lpData=0x21ac6e68770, lpcbData=0x90deaf7338) returned 0x0 [0057.726] _wcsicmp (_String1="nshhttp.dll", _String2="ipxmontr.dll") returned 5 [0057.726] _wcsicmp (_String1="nshhttp.dll", _String2="ipxpromn.dll") returned 5 [0057.726] GetProcessHeap () returned 0x21ac6e60000 [0057.726] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x1b8) returned 0x21ac6e872a0 [0057.726] GetProcessHeap () returned 0x21ac6e60000 [0057.726] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e90b60 [0057.726] GetProcessHeap () returned 0x21ac6e60000 [0057.726] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x18) returned 0x21ac6e90d00 [0057.726] _wcsupr (in: _String="nshhttp.dll" | out: _String="NSHHTTP.DLL") returned="NSHHTTP.DLL" [0057.726] GetProcessHeap () returned 0x21ac6e60000 [0057.726] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6e7abc0) returned 1 [0057.726] LoadLibraryExW (lpLibFileName="NSHHTTP.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ff9113e0000 [0058.041] GetProcAddress (hModule=0x7ff9113e0000, lpProcName="InitHelperDll") returned 0x7ff9113e10e0 [0058.041] InitHelperDll () returned 0x0 [0058.041] RegisterHelper () returned 0x0 [0058.041] GetProcessHeap () returned 0x21ac6e60000 [0058.041] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x9a0) returned 0x21ac6ea6e40 [0058.041] GetProcessHeap () returned 0x21ac6e60000 [0058.041] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6ea64f0) returned 1 [0058.041] RegEnumValueW (in: hKey=0xb4, dwIndex=0xa, lpValueName=0x21ac6e70940, lpcchValueName=0x90deaf72e0, lpReserved=0x0, lpType=0x0, lpData=0x21ac6e68770, lpcbData=0x90deaf7338 | out: lpValueName="nshipsec", lpcchValueName=0x90deaf72e0, lpType=0x0, lpData=0x21ac6e68770, lpcbData=0x90deaf7338) returned 0x0 [0058.041] _wcsicmp (_String1="nshipsec.dll", _String2="ipxmontr.dll") returned 5 [0058.041] _wcsicmp (_String1="nshipsec.dll", _String2="ipxpromn.dll") returned 5 [0058.041] GetProcessHeap () returned 0x21ac6e60000 [0058.041] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x1e0) returned 0x21ac6e88050 [0058.041] GetProcessHeap () returned 0x21ac6e60000 [0058.041] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x12) returned 0x21ac6e90f80 [0058.041] GetProcessHeap () returned 0x21ac6e60000 [0058.042] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x1a) returned 0x21ac6e95190 [0058.042] _wcsupr (in: _String="nshipsec.dll" | out: _String="NSHIPSEC.DLL") returned="NSHIPSEC.DLL" [0058.042] GetProcessHeap () returned 0x21ac6e60000 [0058.042] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6e872a0) returned 1 [0058.042] LoadLibraryExW (lpLibFileName="NSHIPSEC.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ff911360000 [0061.421] GetProcAddress (hModule=0x7ff911360000, lpProcName="InitHelperDll") returned 0x7ff911361250 [0061.421] InitHelperDll () returned 0x0 [0061.421] RegisterHelper () returned 0x0 [0061.421] GetProcessHeap () returned 0x21ac6e60000 [0061.421] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x9f8) returned 0x21ac6ea9800 [0061.421] GetProcessHeap () returned 0x21ac6e60000 [0061.421] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6ea6e40) returned 1 [0061.421] RegisterHelper () returned 0x0 [0061.421] GetProcessHeap () returned 0x21ac6e60000 [0061.421] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0xa50) returned 0x21ac6ea64f0 [0061.421] GetProcessHeap () returned 0x21ac6e60000 [0061.421] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6ea9800) returned 1 [0061.421] RegisterHelper () returned 0x0 [0061.421] GetProcessHeap () returned 0x21ac6e60000 [0061.421] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0xaa8) returned 0x21ac6ea9800 [0061.421] GetProcessHeap () returned 0x21ac6e60000 [0061.421] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6ea64f0) returned 1 [0061.428] RegEnumValueW (in: hKey=0xb4, dwIndex=0xb, lpValueName=0x21ac6e70940, lpcchValueName=0x90deaf72e0, lpReserved=0x0, lpType=0x0, lpData=0x21ac6e68770, lpcbData=0x90deaf7338 | out: lpValueName="nshwfp", lpcchValueName=0x90deaf72e0, lpType=0x0, lpData=0x21ac6e68770, lpcbData=0x90deaf7338) returned 0x0 [0061.428] _wcsicmp (_String1="nshwfp.dll", _String2="ipxmontr.dll") returned 5 [0061.428] _wcsicmp (_String1="nshwfp.dll", _String2="ipxpromn.dll") returned 5 [0061.428] GetProcessHeap () returned 0x21ac6e60000 [0061.428] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x208) returned 0x21ac6ea7500 [0061.428] GetProcessHeap () returned 0x21ac6e60000 [0061.428] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0xe) returned 0x21ac6e90ea0 [0061.428] GetProcessHeap () returned 0x21ac6e60000 [0061.429] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x16) returned 0x21ac6e91160 [0061.429] _wcsupr (in: _String="nshwfp.dll" | out: _String="NSHWFP.DLL") returned="NSHWFP.DLL" [0061.429] GetProcessHeap () returned 0x21ac6e60000 [0061.429] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6e88050) returned 1 [0061.429] LoadLibraryExW (lpLibFileName="NSHWFP.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ff910b60000 [0062.425] GetProcAddress (hModule=0x7ff910b60000, lpProcName="InitHelperDll") returned 0x7ff910b610d0 [0062.425] InitHelperDll () returned 0x0 [0062.426] RegisterHelper () returned 0x0 [0062.426] GetProcessHeap () returned 0x21ac6e60000 [0062.426] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0xb00) returned 0x21ac6eabd80 [0062.426] GetProcessHeap () returned 0x21ac6e60000 [0062.426] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6ea9800) returned 1 [0062.426] RegEnumValueW (in: hKey=0xb4, dwIndex=0xc, lpValueName=0x21ac6e70940, lpcchValueName=0x90deaf72e0, lpReserved=0x0, lpType=0x0, lpData=0x21ac6e68770, lpcbData=0x90deaf7338 | out: lpValueName="p2pnetsh", lpcchValueName=0x90deaf72e0, lpType=0x0, lpData=0x21ac6e68770, lpcbData=0x90deaf7338) returned 0x0 [0062.427] _wcsicmp (_String1="p2pnetsh.dll", _String2="ipxmontr.dll") returned 7 [0062.427] _wcsicmp (_String1="p2pnetsh.dll", _String2="ipxpromn.dll") returned 7 [0062.427] GetProcessHeap () returned 0x21ac6e60000 [0062.427] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x230) returned 0x21ac6eac890 [0062.427] GetProcessHeap () returned 0x21ac6e60000 [0062.427] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x12) returned 0x21ac6e90ec0 [0062.427] GetProcessHeap () returned 0x21ac6e60000 [0062.427] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x1a) returned 0x21ac6eabc20 [0062.427] _wcsupr (in: _String="p2pnetsh.dll" | out: _String="P2PNETSH.DLL") returned="P2PNETSH.DLL" [0062.427] GetProcessHeap () returned 0x21ac6e60000 [0062.427] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6ea7500) returned 1 [0062.427] LoadLibraryExW (lpLibFileName="P2PNETSH.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ff910b20000 [0063.170] GetProcAddress (hModule=0x7ff910b20000, lpProcName="InitHelperDll") returned 0x7ff910b211e0 [0063.170] InitHelperDll () returned 0x0 [0063.170] RegisterHelper () returned 0x0 [0063.170] GetProcessHeap () returned 0x21ac6e60000 [0063.170] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0xb58) returned 0x21ac6eafaf0 [0063.170] GetProcessHeap () returned 0x21ac6e60000 [0063.170] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6eabd80) returned 1 [0063.170] RegisterHelper () returned 0x0 [0063.170] GetProcessHeap () returned 0x21ac6e60000 [0063.170] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0xbb0) returned 0x21ac6eb0650 [0063.170] GetProcessHeap () returned 0x21ac6e60000 [0063.170] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6eafaf0) returned 1 [0063.170] RegisterHelper () returned 0x0 [0063.170] GetProcessHeap () returned 0x21ac6e60000 [0063.170] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0xc08) returned 0x21ac6eb1210 [0063.170] GetProcessHeap () returned 0x21ac6e60000 [0063.170] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6eb0650) returned 1 [0063.170] RegisterHelper () returned 0x0 [0063.170] GetProcessHeap () returned 0x21ac6e60000 [0063.170] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0xc60) returned 0x21ac6eafaf0 [0063.170] GetProcessHeap () returned 0x21ac6e60000 [0063.170] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6eb1210) returned 1 [0063.175] RegisterHelper () returned 0x0 [0063.175] GetProcessHeap () returned 0x21ac6e60000 [0063.175] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0xcb8) returned 0x21ac6eb0760 [0063.175] GetProcessHeap () returned 0x21ac6e60000 [0063.175] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6eafaf0) returned 1 [0063.175] RegisterHelper () returned 0x0 [0063.175] GetProcessHeap () returned 0x21ac6e60000 [0063.175] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0xd10) returned 0x21ac6eb1420 [0063.175] GetProcessHeap () returned 0x21ac6e60000 [0063.175] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6eb0760) returned 1 [0063.175] RegisterHelper () returned 0x0 [0063.175] GetProcessHeap () returned 0x21ac6e60000 [0063.175] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0xd68) returned 0x21ac6eb2140 [0063.175] GetProcessHeap () returned 0x21ac6e60000 [0063.175] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6eb1420) returned 1 [0063.177] RegisterHelper () returned 0x0 [0063.177] GetProcessHeap () returned 0x21ac6e60000 [0063.177] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0xdc0) returned 0x21ac6eafaf0 [0063.178] GetProcessHeap () returned 0x21ac6e60000 [0063.178] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6eb2140) returned 1 [0063.178] RegEnumValueW (in: hKey=0xb4, dwIndex=0xd, lpValueName=0x21ac6e70940, lpcchValueName=0x90deaf72e0, lpReserved=0x0, lpType=0x0, lpData=0x21ac6e68770, lpcbData=0x90deaf7338 | out: lpValueName="rpc", lpcchValueName=0x90deaf72e0, lpType=0x0, lpData=0x21ac6e68770, lpcbData=0x90deaf7338) returned 0x0 [0063.178] _wcsicmp (_String1="rpcnsh.dll", _String2="ipxmontr.dll") returned 9 [0063.178] _wcsicmp (_String1="rpcnsh.dll", _String2="ipxpromn.dll") returned 9 [0063.178] GetProcessHeap () returned 0x21ac6e60000 [0063.178] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x258) returned 0x21ac6e91540 [0063.178] GetProcessHeap () returned 0x21ac6e60000 [0063.178] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x8) returned 0x21ac6e6dba0 [0063.178] GetProcessHeap () returned 0x21ac6e60000 [0063.178] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x16) returned 0x21ac6e91240 [0063.178] _wcsupr (in: _String="rpcnsh.dll" | out: _String="RPCNSH.DLL") returned="RPCNSH.DLL" [0063.178] GetProcessHeap () returned 0x21ac6e60000 [0063.178] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6eac890) returned 1 [0063.178] LoadLibraryExW (lpLibFileName="RPCNSH.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ff911350000 [0063.433] GetProcAddress (hModule=0x7ff911350000, lpProcName="InitHelperDll") returned 0x7ff911351010 [0063.433] InitHelperDll () returned 0x0 [0063.433] RegisterHelper () returned 0x0 [0063.433] GetProcessHeap () returned 0x21ac6e60000 [0063.433] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0xe18) returned 0x21ac6eb08c0 [0063.433] GetProcessHeap () returned 0x21ac6e60000 [0063.433] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6eafaf0) returned 1 [0063.433] RegisterHelper () returned 0x0 [0063.433] GetProcessHeap () returned 0x21ac6e60000 [0063.433] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0xe70) returned 0x21ac6eb16e0 [0063.433] GetProcessHeap () returned 0x21ac6e60000 [0063.433] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6eb08c0) returned 1 [0063.433] RegEnumValueW (in: hKey=0xb4, dwIndex=0xe, lpValueName=0x21ac6e70940, lpcchValueName=0x90deaf72e0, lpReserved=0x0, lpType=0x0, lpData=0x21ac6e68770, lpcbData=0x90deaf7338 | out: lpValueName="WcnNetsh", lpcchValueName=0x90deaf72e0, lpType=0x0, lpData=0x21ac6e68770, lpcbData=0x90deaf7338) returned 0x0 [0063.433] _wcsicmp (_String1="WcnNetsh.dll", _String2="ipxmontr.dll") returned 14 [0063.433] _wcsicmp (_String1="WcnNetsh.dll", _String2="ipxpromn.dll") returned 14 [0063.433] GetProcessHeap () returned 0x21ac6e60000 [0063.434] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x280) returned 0x21ac6e917a0 [0063.434] GetProcessHeap () returned 0x21ac6e60000 [0063.434] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x12) returned 0x21ac6e91260 [0063.434] GetProcessHeap () returned 0x21ac6e60000 [0063.434] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x1a) returned 0x21ac6eab860 [0063.434] _wcsupr (in: _String="WcnNetsh.dll" | out: _String="WCNNETSH.DLL") returned="WCNNETSH.DLL" [0063.434] GetProcessHeap () returned 0x21ac6e60000 [0063.434] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6e91540) returned 1 [0063.434] LoadLibraryExW (lpLibFileName="WCNNETSH.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ff910a30000 [0064.011] GetProcAddress (hModule=0x7ff910a30000, lpProcName="InitHelperDll") returned 0x7ff910a31680 [0064.011] InitHelperDll () returned 0x0 [0064.011] RegisterHelper () returned 0x0 [0064.011] GetProcessHeap () returned 0x21ac6e60000 [0064.011] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0xec8) returned 0x21ac6eafaf0 [0064.011] GetProcessHeap () returned 0x21ac6e60000 [0064.011] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6eb16e0) returned 1 [0064.012] RegEnumValueW (in: hKey=0xb4, dwIndex=0xf, lpValueName=0x21ac6e70940, lpcchValueName=0x90deaf72e0, lpReserved=0x0, lpType=0x0, lpData=0x21ac6e68770, lpcbData=0x90deaf7338 | out: lpValueName="whhelper", lpcchValueName=0x90deaf72e0, lpType=0x0, lpData=0x21ac6e68770, lpcbData=0x90deaf7338) returned 0x0 [0064.012] _wcsicmp (_String1="whhelper.dll", _String2="ipxmontr.dll") returned 14 [0064.012] _wcsicmp (_String1="whhelper.dll", _String2="ipxpromn.dll") returned 14 [0064.012] GetProcessHeap () returned 0x21ac6e60000 [0064.012] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x2a8) returned 0x21ac6eb2970 [0064.012] GetProcessHeap () returned 0x21ac6e60000 [0064.012] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x12) returned 0x21ac6e90bc0 [0064.012] GetProcessHeap () returned 0x21ac6e60000 [0064.012] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x1a) returned 0x21ac6eab8f0 [0064.012] _wcsupr (in: _String="whhelper.dll" | out: _String="WHHELPER.DLL") returned="WHHELPER.DLL" [0064.012] GetProcessHeap () returned 0x21ac6e60000 [0064.012] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6e917a0) returned 1 [0064.012] LoadLibraryExW (lpLibFileName="WHHELPER.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ff910a00000 [0064.393] GetProcAddress (hModule=0x7ff910a00000, lpProcName="InitHelperDll") returned 0x7ff910a014d0 [0064.393] InitHelperDll () returned 0x0 [0064.393] RegisterHelper () returned 0x0 [0064.393] GetProcessHeap () returned 0x21ac6e60000 [0064.393] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0xf20) returned 0x21ac6eb09c0 [0064.393] GetProcessHeap () returned 0x21ac6e60000 [0064.393] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6eafaf0) returned 1 [0064.393] RegEnumValueW (in: hKey=0xb4, dwIndex=0x10, lpValueName=0x21ac6e70940, lpcchValueName=0x90deaf72e0, lpReserved=0x0, lpType=0x0, lpData=0x21ac6e68770, lpcbData=0x90deaf7338 | out: lpValueName="wlancfg", lpcchValueName=0x90deaf72e0, lpType=0x0, lpData=0x21ac6e68770, lpcbData=0x90deaf7338) returned 0x0 [0064.393] _wcsicmp (_String1="wlancfg.dll", _String2="ipxmontr.dll") returned 14 [0064.393] _wcsicmp (_String1="wlancfg.dll", _String2="ipxpromn.dll") returned 14 [0064.393] GetProcessHeap () returned 0x21ac6e60000 [0064.393] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x2d0) returned 0x21ac6eb2c20 [0064.393] GetProcessHeap () returned 0x21ac6e60000 [0064.393] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e90c00 [0064.393] GetProcessHeap () returned 0x21ac6e60000 [0064.393] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x18) returned 0x21ac6e90c20 [0064.393] _wcsupr (in: _String="wlancfg.dll" | out: _String="WLANCFG.DLL") returned="WLANCFG.DLL" [0064.393] GetProcessHeap () returned 0x21ac6e60000 [0064.393] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6eb2970) returned 1 [0064.393] LoadLibraryExW (lpLibFileName="WLANCFG.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ff9109b0000 [0064.956] GetProcAddress (hModule=0x7ff9109b0000, lpProcName="InitHelperDll") returned 0x7ff9109b1320 [0064.956] InitHelperDll () returned 0x0 [0064.956] RegisterHelper () returned 0x0 [0064.956] GetProcessHeap () returned 0x21ac6e60000 [0064.956] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0xf78) returned 0x21ac6eb4f10 [0064.956] GetProcessHeap () returned 0x21ac6e60000 [0064.956] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6eb09c0) returned 1 [0064.956] RegEnumValueW (in: hKey=0xb4, dwIndex=0x11, lpValueName=0x21ac6e70940, lpcchValueName=0x90deaf72e0, lpReserved=0x0, lpType=0x0, lpData=0x21ac6e68770, lpcbData=0x90deaf7338 | out: lpValueName="wshelper", lpcchValueName=0x90deaf72e0, lpType=0x0, lpData=0x21ac6e68770, lpcbData=0x90deaf7338) returned 0x0 [0064.956] _wcsicmp (_String1="wshelper.dll", _String2="ipxmontr.dll") returned 14 [0064.956] _wcsicmp (_String1="wshelper.dll", _String2="ipxpromn.dll") returned 14 [0064.956] GetProcessHeap () returned 0x21ac6e60000 [0064.956] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x2f8) returned 0x21ac6e91540 [0064.956] GetProcessHeap () returned 0x21ac6e60000 [0064.956] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x12) returned 0x21ac6e90cc0 [0064.956] GetProcessHeap () returned 0x21ac6e60000 [0064.956] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x1a) returned 0x21ac6ea98b0 [0064.956] _wcsupr (in: _String="wshelper.dll" | out: _String="WSHELPER.DLL") returned="WSHELPER.DLL" [0064.957] GetProcessHeap () returned 0x21ac6e60000 [0064.957] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6eb2c20) returned 1 [0064.957] LoadLibraryExW (lpLibFileName="WSHELPER.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ff910910000 [0065.151] GetProcAddress (hModule=0x7ff910910000, lpProcName="InitHelperDll") returned 0x7ff910911030 [0065.151] InitHelperDll () returned 0x0 [0065.151] RegisterHelper () returned 0x0 [0065.151] GetProcessHeap () returned 0x21ac6e60000 [0065.151] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0xfd0) returned 0x21ac6eafaf0 [0065.151] GetProcessHeap () returned 0x21ac6e60000 [0065.151] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6eb4f10) returned 1 [0065.151] RegEnumValueW (in: hKey=0xb4, dwIndex=0x12, lpValueName=0x21ac6e70940, lpcchValueName=0x90deaf72e0, lpReserved=0x0, lpType=0x0, lpData=0x21ac6e68770, lpcbData=0x90deaf7338 | out: lpValueName="wwancfg", lpcchValueName=0x90deaf72e0, lpType=0x0, lpData=0x21ac6e68770, lpcbData=0x90deaf7338) returned 0x0 [0065.151] _wcsicmp (_String1="wwancfg.dll", _String2="ipxmontr.dll") returned 14 [0065.151] _wcsicmp (_String1="wwancfg.dll", _String2="ipxpromn.dll") returned 14 [0065.151] GetProcessHeap () returned 0x21ac6e60000 [0065.151] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x320) returned 0x21ac6e91840 [0065.151] GetProcessHeap () returned 0x21ac6e60000 [0065.151] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10) returned 0x21ac6e90ce0 [0065.151] GetProcessHeap () returned 0x21ac6e60000 [0065.152] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x18) returned 0x21ac6eabe30 [0065.152] _wcsupr (in: _String="wwancfg.dll" | out: _String="WWANCFG.DLL") returned="WWANCFG.DLL" [0065.152] GetProcessHeap () returned 0x21ac6e60000 [0065.152] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6e91540) returned 1 [0065.152] LoadLibraryExW (lpLibFileName="WWANCFG.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ff9108f0000 [0065.658] GetProcAddress (hModule=0x7ff9108f0000, lpProcName="InitHelperDll") returned 0x7ff9108f11d0 [0065.658] InitHelperDll () returned 0x0 [0065.658] RegisterHelper () returned 0x0 [0065.658] GetProcessHeap () returned 0x21ac6e60000 [0065.658] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x1028) returned 0x21ac6eb0ad0 [0065.658] GetProcessHeap () returned 0x21ac6e60000 [0065.658] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6eafaf0) returned 1 [0065.658] RegEnumValueW (in: hKey=0xb4, dwIndex=0x13, lpValueName=0x21ac6e70940, lpcchValueName=0x90deaf72e0, lpReserved=0x0, lpType=0x0, lpData=0x21ac6e68770, lpcbData=0x90deaf7338 | out: lpValueName="peerdistsh", lpcchValueName=0x90deaf72e0, lpType=0x0, lpData=0x21ac6e68770, lpcbData=0x90deaf7338) returned 0x0 [0065.658] _wcsicmp (_String1="peerdistsh.dll", _String2="ipxmontr.dll") returned 7 [0065.658] _wcsicmp (_String1="peerdistsh.dll", _String2="ipxpromn.dll") returned 7 [0065.658] GetProcessHeap () returned 0x21ac6e60000 [0065.658] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x348) returned 0x21ac6eb1b00 [0065.658] GetProcessHeap () returned 0x21ac6e60000 [0065.658] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x16) returned 0x21ac6eac1f0 [0065.658] GetProcessHeap () returned 0x21ac6e60000 [0065.658] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x1e) returned 0x21ac6ea9be0 [0065.658] _wcsupr (in: _String="peerdistsh.dll" | out: _String="PEERDISTSH.DLL") returned="PEERDISTSH.DLL" [0065.658] GetProcessHeap () returned 0x21ac6e60000 [0065.658] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6e91840) returned 1 [0065.658] LoadLibraryExW (lpLibFileName="PEERDISTSH.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ff910850000 [0066.032] GetProcAddress (hModule=0x7ff910850000, lpProcName="InitHelperDll") returned 0x7ff910851220 [0066.032] InitHelperDll () returned 0x0 [0066.033] RegisterHelper () returned 0x0 [0066.033] GetProcessHeap () returned 0x21ac6e60000 [0066.033] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x1080) returned 0x21ac6eb5fa0 [0066.034] GetProcessHeap () returned 0x21ac6e60000 [0066.034] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6eb0ad0) returned 1 [0066.034] RegisterHelper () returned 0x0 [0066.034] GetProcessHeap () returned 0x21ac6e60000 [0066.034] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x10d8) returned 0x21ac6eafaf0 [0066.034] GetProcessHeap () returned 0x21ac6e60000 [0066.034] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6eb5fa0) returned 1 [0066.034] RegCloseKey (hKey=0xb4) returned 0x0 [0066.034] GetProcessHeap () returned 0x21ac6e60000 [0066.034] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6e70940) returned 1 [0066.034] GetProcessHeap () returned 0x21ac6e60000 [0066.034] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6e68770) returned 1 [0066.035] GetProcessHeap () returned 0x21ac6e60000 [0066.035] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x70) returned 0x21ac6e7d590 [0066.035] GetProcessHeap () returned 0x21ac6e60000 [0066.035] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x0) returned 1 [0066.035] RegisterContext () returned 0x0 [0066.036] GetProcessHeap () returned 0x21ac6e60000 [0066.036] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x70) returned 0x21ac6ea7720 [0066.036] GetProcessHeap () returned 0x21ac6e60000 [0066.036] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x0) returned 1 [0066.036] RegisterContext () returned 0x0 [0066.038] _wcsicmp (_String1="ras", _String2="interface") returned 9 [0066.038] _wcsicmp (_String1="ras", _String2="interface") returned 9 [0066.038] GetProcessHeap () returned 0x21ac6e60000 [0066.038] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0xe0) returned 0x21ac6ea6cc0 [0066.038] GetProcessHeap () returned 0x21ac6e60000 [0066.038] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6ea7720) returned 1 [0066.126] RegisterContext () returned 0x0 [0066.126] GetProcessHeap () returned 0x21ac6e60000 [0066.126] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x70) returned 0x21ac6e64ac0 [0066.126] GetProcessHeap () returned 0x21ac6e60000 [0066.126] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x0) returned 1 [0066.127] RegisterContext () returned 0x0 [0066.127] _wcsicmp (_String1="ipv6", _String2="ip") returned 118 [0066.127] _wcsicmp (_String1="ipv6", _String2="ip") returned 118 [0066.127] GetProcessHeap () returned 0x21ac6e60000 [0066.127] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0xe0) returned 0x21ac6ea7170 [0066.127] GetProcessHeap () returned 0x21ac6e60000 [0066.127] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6e64ac0) returned 1 [0066.128] RegisterContext () returned 0x0 [0066.129] _wcsicmp (_String1="aaaa", _String2="ip") returned -8 [0066.129] _wcsicmp (_String1="aaaa", _String2="ipv6") returned -8 [0066.129] _wcsicmp (_String1="aaaa", _String2="ip") returned -8 [0066.129] GetProcessHeap () returned 0x21ac6e60000 [0066.129] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x150) returned 0x21ac6eb2d80 [0066.129] GetProcessHeap () returned 0x21ac6e60000 [0066.129] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6ea7170) returned 1 [0066.129] RegisterContext () returned 0x0 [0066.130] _wcsicmp (_String1="diagnostics", _String2="aaaa") returned 3 [0066.130] _wcsicmp (_String1="diagnostics", _String2="ip") returned -5 [0066.130] _wcsicmp (_String1="diagnostics", _String2="ipv6") returned -5 [0066.130] _wcsicmp (_String1="diagnostics", _String2="aaaa") returned 3 [0066.130] _wcsicmp (_String1="diagnostics", _String2="ip") returned -5 [0066.130] GetProcessHeap () returned 0x21ac6e60000 [0066.130] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x1c0) returned 0x21ac6e91720 [0066.130] GetProcessHeap () returned 0x21ac6e60000 [0066.130] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6eb2d80) returned 1 [0066.130] RegisterContext () returned 0x0 [0066.130] _wcsicmp (_String1="advfirewall", _String2="interface") returned -8 [0066.130] _wcsicmp (_String1="advfirewall", _String2="ras") returned -17 [0066.130] _wcsicmp (_String1="advfirewall", _String2="interface") returned -8 [0066.130] GetProcessHeap () returned 0x21ac6e60000 [0066.130] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x150) returned 0x21ac6eb2d80 [0066.130] GetProcessHeap () returned 0x21ac6e60000 [0066.130] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6ea6cc0) returned 1 [0066.131] RegisterContext () returned 0x0 [0066.131] GetProcessHeap () returned 0x21ac6e60000 [0066.131] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x70) returned 0x21ac6e64ac0 [0066.131] GetProcessHeap () returned 0x21ac6e60000 [0066.131] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x0) returned 1 [0066.131] RegisterContext () returned 0x0 [0066.131] _wcsicmp (_String1="firewall", _String2="consec") returned 3 [0066.131] _wcsicmp (_String1="firewall", _String2="consec") returned 3 [0066.131] GetProcessHeap () returned 0x21ac6e60000 [0066.131] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0xe0) returned 0x21ac6ea6900 [0066.131] GetProcessHeap () returned 0x21ac6e60000 [0066.131] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6e64ac0) returned 1 [0066.131] RegisterContext () returned 0x0 [0066.131] _wcsicmp (_String1="monitor", _String2="consec") returned 10 [0066.131] _wcsicmp (_String1="monitor", _String2="firewall") returned 7 [0066.131] _wcsicmp (_String1="monitor", _String2="consec") returned 10 [0066.131] _wcsicmp (_String1="monitor", _String2="firewall") returned 7 [0066.131] GetProcessHeap () returned 0x21ac6e60000 [0066.131] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x150) returned 0x21ac6e7abc0 [0066.131] GetProcessHeap () returned 0x21ac6e60000 [0066.131] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6ea6900) returned 1 [0066.131] RegisterContext () returned 0x0 [0066.131] _wcsicmp (_String1="mainmode", _String2="consec") returned 10 [0066.131] _wcsicmp (_String1="mainmode", _String2="firewall") returned 7 [0066.131] _wcsicmp (_String1="mainmode", _String2="monitor") returned -14 [0066.131] _wcsicmp (_String1="mainmode", _String2="consec") returned 10 [0066.131] _wcsicmp (_String1="mainmode", _String2="firewall") returned 7 [0066.131] _wcsicmp (_String1="mainmode", _String2="monitor") returned -14 [0066.131] GetProcessHeap () returned 0x21ac6e60000 [0066.131] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x1c0) returned 0x21ac6e918f0 [0066.132] GetProcessHeap () returned 0x21ac6e60000 [0066.132] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6e7abc0) returned 1 [0066.132] RegisterContext () returned 0x0 [0066.132] _wcsicmp (_String1="dhcpclient", _String2="advfirewall") returned 3 [0066.132] _wcsicmp (_String1="dhcpclient", _String2="interface") returned -5 [0066.132] _wcsicmp (_String1="dhcpclient", _String2="ras") returned -14 [0066.132] _wcsicmp (_String1="dhcpclient", _String2="advfirewall") returned 3 [0066.132] _wcsicmp (_String1="dhcpclient", _String2="interface") returned -5 [0066.132] GetProcessHeap () returned 0x21ac6e60000 [0066.132] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x1c0) returned 0x21ac6e91ac0 [0066.132] GetProcessHeap () returned 0x21ac6e60000 [0066.132] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6eb2d80) returned 1 [0066.132] RegisterContext () returned 0x0 [0066.132] _wcsicmp (_String1="lan", _String2="advfirewall") returned 11 [0066.132] _wcsicmp (_String1="lan", _String2="dhcpclient") returned 8 [0066.132] _wcsicmp (_String1="lan", _String2="interface") returned 3 [0066.132] _wcsicmp (_String1="lan", _String2="ras") returned -6 [0066.132] _wcsicmp (_String1="lan", _String2="advfirewall") returned 11 [0066.132] _wcsicmp (_String1="lan", _String2="dhcpclient") returned 8 [0066.132] _wcsicmp (_String1="lan", _String2="interface") returned 3 [0066.132] _wcsicmp (_String1="lan", _String2="ras") returned -6 [0066.132] GetProcessHeap () returned 0x21ac6e60000 [0066.132] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x230) returned 0x21ac6eb0bd0 [0066.132] GetProcessHeap () returned 0x21ac6e60000 [0066.132] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6e91ac0) returned 1 [0066.135] RegisterContext () returned 0x0 [0066.135] _wcsicmp (_String1="firewall", _String2="advfirewall") returned 5 [0066.135] _wcsicmp (_String1="firewall", _String2="dhcpclient") returned 2 [0066.135] _wcsicmp (_String1="firewall", _String2="interface") returned -3 [0066.135] _wcsicmp (_String1="firewall", _String2="lan") returned -6 [0066.135] _wcsicmp (_String1="firewall", _String2="ras") returned -12 [0066.135] _wcsicmp (_String1="firewall", _String2="advfirewall") returned 5 [0066.135] _wcsicmp (_String1="firewall", _String2="dhcpclient") returned 2 [0066.135] _wcsicmp (_String1="firewall", _String2="interface") returned -3 [0066.135] GetProcessHeap () returned 0x21ac6e60000 [0066.135] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x2a0) returned 0x21ac6eb1430 [0066.135] GetProcessHeap () returned 0x21ac6e60000 [0066.135] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6eb0bd0) returned 1 [0066.135] RegisterContext () returned 0x0 [0066.135] _wcsicmp (_String1="bridge", _String2="advfirewall") returned 1 [0066.135] _wcsicmp (_String1="bridge", _String2="dhcpclient") returned -2 [0066.136] _wcsicmp (_String1="bridge", _String2="firewall") returned -4 [0066.136] _wcsicmp (_String1="bridge", _String2="interface") returned -7 [0066.136] _wcsicmp (_String1="bridge", _String2="lan") returned -10 [0066.136] _wcsicmp (_String1="bridge", _String2="ras") returned -16 [0066.136] _wcsicmp (_String1="bridge", _String2="advfirewall") returned 1 [0066.136] _wcsicmp (_String1="bridge", _String2="dhcpclient") returned -2 [0066.136] GetProcessHeap () returned 0x21ac6e60000 [0066.136] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x310) returned 0x21ac6eb16e0 [0066.136] GetProcessHeap () returned 0x21ac6e60000 [0066.136] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6eb1430) returned 1 [0066.136] RegisterContext () returned 0x0 [0066.136] _wcsicmp (_String1="netio", _String2="advfirewall") returned 13 [0066.136] _wcsicmp (_String1="netio", _String2="bridge") returned 12 [0066.136] _wcsicmp (_String1="netio", _String2="dhcpclient") returned 10 [0066.136] _wcsicmp (_String1="netio", _String2="firewall") returned 8 [0066.136] _wcsicmp (_String1="netio", _String2="interface") returned 5 [0066.136] _wcsicmp (_String1="netio", _String2="lan") returned 2 [0066.136] _wcsicmp (_String1="netio", _String2="ras") returned -4 [0066.136] _wcsicmp (_String1="netio", _String2="advfirewall") returned 13 [0066.136] _wcsicmp (_String1="netio", _String2="bridge") returned 12 [0066.136] _wcsicmp (_String1="netio", _String2="dhcpclient") returned 10 [0066.136] _wcsicmp (_String1="netio", _String2="firewall") returned 8 [0066.136] _wcsicmp (_String1="netio", _String2="interface") returned 5 [0066.136] _wcsicmp (_String1="netio", _String2="lan") returned 2 [0066.136] _wcsicmp (_String1="netio", _String2="ras") returned -4 [0066.136] GetProcessHeap () returned 0x21ac6e60000 [0066.136] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x380) returned 0x21ac6eb0bd0 [0066.136] GetProcessHeap () returned 0x21ac6e60000 [0066.137] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6eb16e0) returned 1 [0066.137] RegisterContext () returned 0x0 [0066.137] _wcsicmp (_String1="dnsclient", _String2="advfirewall") returned 3 [0066.137] _wcsicmp (_String1="dnsclient", _String2="bridge") returned 2 [0066.137] _wcsicmp (_String1="dnsclient", _String2="dhcpclient") returned 6 [0066.137] _wcsicmp (_String1="dnsclient", _String2="firewall") returned -2 [0066.137] _wcsicmp (_String1="dnsclient", _String2="interface") returned -5 [0066.137] _wcsicmp (_String1="dnsclient", _String2="lan") returned -8 [0066.137] _wcsicmp (_String1="dnsclient", _String2="netio") returned -10 [0066.137] _wcsicmp (_String1="dnsclient", _String2="ras") returned -14 [0066.137] _wcsicmp (_String1="dnsclient", _String2="advfirewall") returned 3 [0066.137] _wcsicmp (_String1="dnsclient", _String2="bridge") returned 2 [0066.137] _wcsicmp (_String1="dnsclient", _String2="dhcpclient") returned 6 [0066.137] _wcsicmp (_String1="dnsclient", _String2="firewall") returned -2 [0066.137] GetProcessHeap () returned 0x21ac6e60000 [0066.137] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x3f0) returned 0x21ac6eb1430 [0066.137] GetProcessHeap () returned 0x21ac6e60000 [0066.137] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6eb0bd0) returned 1 [0066.137] RegisterContext () returned 0x0 [0066.137] _wcsicmp (_String1="namespace", _String2="advfirewall") returned 13 [0066.137] _wcsicmp (_String1="namespace", _String2="bridge") returned 12 [0066.137] _wcsicmp (_String1="namespace", _String2="dhcpclient") returned 10 [0066.137] _wcsicmp (_String1="namespace", _String2="dnsclient") returned 10 [0066.137] _wcsicmp (_String1="namespace", _String2="firewall") returned 8 [0066.137] _wcsicmp (_String1="namespace", _String2="interface") returned 5 [0066.137] _wcsicmp (_String1="namespace", _String2="lan") returned 2 [0066.137] _wcsicmp (_String1="namespace", _String2="netio") returned -4 [0066.137] _wcsicmp (_String1="namespace", _String2="ras") returned -4 [0066.137] _wcsicmp (_String1="namespace", _String2="advfirewall") returned 13 [0066.138] _wcsicmp (_String1="namespace", _String2="bridge") returned 12 [0066.138] _wcsicmp (_String1="namespace", _String2="dhcpclient") returned 10 [0066.138] _wcsicmp (_String1="namespace", _String2="dnsclient") returned 10 [0066.138] _wcsicmp (_String1="namespace", _String2="firewall") returned 8 [0066.138] _wcsicmp (_String1="namespace", _String2="interface") returned 5 [0066.138] _wcsicmp (_String1="namespace", _String2="lan") returned 2 [0066.138] _wcsicmp (_String1="namespace", _String2="netio") returned -4 [0066.138] GetProcessHeap () returned 0x21ac6e60000 [0066.138] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x460) returned 0x21ac6ebcc40 [0066.138] GetProcessHeap () returned 0x21ac6e60000 [0066.138] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6eb1430) returned 1 [0066.138] RegisterContext () returned 0x0 [0066.138] GetProcessHeap () returned 0x21ac6e60000 [0066.138] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x70) returned 0x21ac6e64ac0 [0066.138] GetProcessHeap () returned 0x21ac6e60000 [0066.138] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x0) returned 1 [0066.138] RegisterContext () returned 0x0 [0066.138] _wcsicmp (_String1="ipv6", _String2="ipv4") returned 2 [0066.138] _wcsicmp (_String1="ipv6", _String2="ipv4") returned 2 [0066.138] GetProcessHeap () returned 0x21ac6e60000 [0066.138] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0xe0) returned 0x21ac6ea7080 [0066.138] GetProcessHeap () returned 0x21ac6e60000 [0066.138] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6e64ac0) returned 1 [0066.141] RegisterContext () returned 0x0 [0066.141] _wcsicmp (_String1="6to4", _String2="ipv4") returned -51 [0066.142] _wcsicmp (_String1="6to4", _String2="ipv6") returned -51 [0066.142] _wcsicmp (_String1="6to4", _String2="ipv4") returned -51 [0066.142] GetProcessHeap () returned 0x21ac6e60000 [0066.142] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x150) returned 0x21ac6eb2d80 [0066.142] GetProcessHeap () returned 0x21ac6e60000 [0066.142] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6ea7080) returned 1 [0066.143] RegisterContext () returned 0x0 [0066.143] _wcsicmp (_String1="isatap", _String2="6to4") returned 51 [0066.143] _wcsicmp (_String1="isatap", _String2="ipv4") returned 3 [0066.143] _wcsicmp (_String1="isatap", _String2="ipv6") returned 3 [0066.143] _wcsicmp (_String1="isatap", _String2="6to4") returned 51 [0066.143] _wcsicmp (_String1="isatap", _String2="ipv4") returned 3 [0066.143] _wcsicmp (_String1="isatap", _String2="ipv6") returned 3 [0066.143] GetProcessHeap () returned 0x21ac6e60000 [0066.143] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x1c0) returned 0x21ac6e91ac0 [0066.143] GetProcessHeap () returned 0x21ac6e60000 [0066.143] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6eb2d80) returned 1 [0066.143] RegisterContext () returned 0x0 [0066.143] _wcsicmp (_String1="teredo", _String2="6to4") returned 62 [0066.143] _wcsicmp (_String1="teredo", _String2="ipv4") returned 11 [0066.143] _wcsicmp (_String1="teredo", _String2="ipv6") returned 11 [0066.143] _wcsicmp (_String1="teredo", _String2="isatap") returned 11 [0066.143] _wcsicmp (_String1="teredo", _String2="6to4") returned 62 [0066.143] _wcsicmp (_String1="teredo", _String2="ipv4") returned 11 [0066.143] _wcsicmp (_String1="teredo", _String2="ipv6") returned 11 [0066.143] _wcsicmp (_String1="teredo", _String2="isatap") returned 11 [0066.143] GetProcessHeap () returned 0x21ac6e60000 [0066.143] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x230) returned 0x21ac6eb0bd0 [0066.143] GetProcessHeap () returned 0x21ac6e60000 [0066.143] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6e91ac0) returned 1 [0066.144] RegisterContext () returned 0x0 [0066.144] _wcsicmp (_String1="portproxy", _String2="6to4") returned 58 [0066.144] _wcsicmp (_String1="portproxy", _String2="ipv4") returned 7 [0066.144] _wcsicmp (_String1="portproxy", _String2="ipv6") returned 7 [0066.144] _wcsicmp (_String1="portproxy", _String2="isatap") returned 7 [0066.144] _wcsicmp (_String1="portproxy", _String2="teredo") returned -4 [0066.144] _wcsicmp (_String1="portproxy", _String2="6to4") returned 58 [0066.144] _wcsicmp (_String1="portproxy", _String2="ipv4") returned 7 [0066.144] _wcsicmp (_String1="portproxy", _String2="ipv6") returned 7 [0066.144] _wcsicmp (_String1="portproxy", _String2="isatap") returned 7 [0066.144] _wcsicmp (_String1="portproxy", _String2="teredo") returned -4 [0066.144] GetProcessHeap () returned 0x21ac6e60000 [0066.144] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x2a0) returned 0x21ac6eb1430 [0066.144] GetProcessHeap () returned 0x21ac6e60000 [0066.144] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6eb0bd0) returned 1 [0066.144] RegisterContext () returned 0x0 [0066.144] GetProcessHeap () returned 0x21ac6e60000 [0066.144] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x70) returned 0x21ac6e64ac0 [0066.144] GetProcessHeap () returned 0x21ac6e60000 [0066.144] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x0) returned 1 [0066.144] RegisterContext () returned 0x0 [0066.144] _wcsicmp (_String1="isatap", _String2="6to4") returned 51 [0066.144] _wcsicmp (_String1="isatap", _String2="6to4") returned 51 [0066.144] GetProcessHeap () returned 0x21ac6e60000 [0066.144] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0xe0) returned 0x21ac6ea6720 [0066.144] GetProcessHeap () returned 0x21ac6e60000 [0066.144] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6e64ac0) returned 1 [0066.144] RegisterContext () returned 0x0 [0066.145] _wcsicmp (_String1="portproxy", _String2="6to4") returned 58 [0066.145] _wcsicmp (_String1="portproxy", _String2="ipv4") returned 7 [0066.145] _wcsicmp (_String1="portproxy", _String2="ipv6") returned 7 [0066.145] _wcsicmp (_String1="portproxy", _String2="isatap") returned 7 [0066.145] _wcsicmp (_String1="portproxy", _String2="portproxy") returned 0 [0066.145] RegisterContext () returned 0x0 [0066.145] _wcsicmp (_String1="httpstunnel", _String2="6to4") returned 50 [0066.145] _wcsicmp (_String1="httpstunnel", _String2="ipv4") returned -1 [0066.145] _wcsicmp (_String1="httpstunnel", _String2="ipv6") returned -1 [0066.145] _wcsicmp (_String1="httpstunnel", _String2="isatap") returned -1 [0066.145] _wcsicmp (_String1="httpstunnel", _String2="portproxy") returned -8 [0066.145] _wcsicmp (_String1="httpstunnel", _String2="teredo") returned -12 [0066.145] _wcsicmp (_String1="httpstunnel", _String2="6to4") returned 50 [0066.145] _wcsicmp (_String1="httpstunnel", _String2="ipv4") returned -1 [0066.145] GetProcessHeap () returned 0x21ac6e60000 [0066.145] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x310) returned 0x21ac6eb16e0 [0066.145] GetProcessHeap () returned 0x21ac6e60000 [0066.145] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6eb1430) returned 1 [0066.145] RegisterContext () returned 0x0 [0066.145] _wcsicmp (_String1="tcp", _String2="6to4") returned 62 [0066.145] _wcsicmp (_String1="tcp", _String2="httpstunnel") returned 12 [0066.145] _wcsicmp (_String1="tcp", _String2="ipv4") returned 11 [0066.145] _wcsicmp (_String1="tcp", _String2="ipv6") returned 11 [0066.145] _wcsicmp (_String1="tcp", _String2="isatap") returned 11 [0066.145] _wcsicmp (_String1="tcp", _String2="portproxy") returned 4 [0066.145] _wcsicmp (_String1="tcp", _String2="teredo") returned -2 [0066.145] _wcsicmp (_String1="tcp", _String2="6to4") returned 62 [0066.145] _wcsicmp (_String1="tcp", _String2="httpstunnel") returned 12 [0066.145] _wcsicmp (_String1="tcp", _String2="ipv4") returned 11 [0066.145] _wcsicmp (_String1="tcp", _String2="ipv6") returned 11 [0066.145] _wcsicmp (_String1="tcp", _String2="isatap") returned 11 [0066.146] _wcsicmp (_String1="tcp", _String2="portproxy") returned 4 [0066.146] _wcsicmp (_String1="tcp", _String2="teredo") returned -2 [0066.146] GetProcessHeap () returned 0x21ac6e60000 [0066.146] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x380) returned 0x21ac6eb0bd0 [0066.146] GetProcessHeap () returned 0x21ac6e60000 [0066.146] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6eb16e0) returned 1 [0066.146] RegisterContext () returned 0x0 [0066.147] _wcsicmp (_String1="trace", _String2="advfirewall") returned 19 [0066.147] _wcsicmp (_String1="trace", _String2="bridge") returned 18 [0066.147] _wcsicmp (_String1="trace", _String2="dhcpclient") returned 16 [0066.147] _wcsicmp (_String1="trace", _String2="dnsclient") returned 16 [0066.147] _wcsicmp (_String1="trace", _String2="firewall") returned 14 [0066.147] _wcsicmp (_String1="trace", _String2="interface") returned 11 [0066.147] _wcsicmp (_String1="trace", _String2="lan") returned 8 [0066.147] _wcsicmp (_String1="trace", _String2="namespace") returned 6 [0066.148] _wcsicmp (_String1="trace", _String2="netio") returned 6 [0066.148] _wcsicmp (_String1="trace", _String2="ras") returned 2 [0066.148] _wcsicmp (_String1="trace", _String2="advfirewall") returned 19 [0066.148] _wcsicmp (_String1="trace", _String2="bridge") returned 18 [0066.148] _wcsicmp (_String1="trace", _String2="dhcpclient") returned 16 [0066.148] _wcsicmp (_String1="trace", _String2="dnsclient") returned 16 [0066.148] _wcsicmp (_String1="trace", _String2="firewall") returned 14 [0066.148] _wcsicmp (_String1="trace", _String2="interface") returned 11 [0066.148] _wcsicmp (_String1="trace", _String2="lan") returned 8 [0066.148] _wcsicmp (_String1="trace", _String2="namespace") returned 6 [0066.148] _wcsicmp (_String1="trace", _String2="netio") returned 6 [0066.148] _wcsicmp (_String1="trace", _String2="ras") returned 2 [0066.148] GetProcessHeap () returned 0x21ac6e60000 [0066.148] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x4d0) returned 0x21ac6eb1430 [0066.148] GetProcessHeap () returned 0x21ac6e60000 [0066.148] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6ebcc40) returned 1 [0066.150] RegisterContext () returned 0x0 [0066.150] _wcsicmp (_String1="http", _String2="advfirewall") returned 7 [0066.150] _wcsicmp (_String1="http", _String2="bridge") returned 6 [0066.150] _wcsicmp (_String1="http", _String2="dhcpclient") returned 4 [0066.150] _wcsicmp (_String1="http", _String2="dnsclient") returned 4 [0066.150] _wcsicmp (_String1="http", _String2="firewall") returned 2 [0066.150] _wcsicmp (_String1="http", _String2="interface") returned -1 [0066.150] _wcsicmp (_String1="http", _String2="lan") returned -4 [0066.150] _wcsicmp (_String1="http", _String2="namespace") returned -6 [0066.150] _wcsicmp (_String1="http", _String2="netio") returned -6 [0066.150] _wcsicmp (_String1="http", _String2="ras") returned -10 [0066.150] _wcsicmp (_String1="http", _String2="trace") returned -12 [0066.150] _wcsicmp (_String1="http", _String2="advfirewall") returned 7 [0066.150] _wcsicmp (_String1="http", _String2="bridge") returned 6 [0066.150] _wcsicmp (_String1="http", _String2="dhcpclient") returned 4 [0066.150] _wcsicmp (_String1="http", _String2="dnsclient") returned 4 [0066.150] _wcsicmp (_String1="http", _String2="firewall") returned 2 [0066.150] _wcsicmp (_String1="http", _String2="interface") returned -1 [0066.150] GetProcessHeap () returned 0x21ac6e60000 [0066.150] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x540) returned 0x21ac6ebcc40 [0066.150] GetProcessHeap () returned 0x21ac6e60000 [0066.150] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6eb1430) returned 1 [0066.151] RegisterContext () returned 0x0 [0066.151] _wcsicmp (_String1="ipsec", _String2="advfirewall") returned 8 [0066.151] _wcsicmp (_String1="ipsec", _String2="bridge") returned 7 [0066.151] _wcsicmp (_String1="ipsec", _String2="dhcpclient") returned 5 [0066.151] _wcsicmp (_String1="ipsec", _String2="dnsclient") returned 5 [0066.151] _wcsicmp (_String1="ipsec", _String2="firewall") returned 3 [0066.151] _wcsicmp (_String1="ipsec", _String2="http") returned 1 [0066.151] _wcsicmp (_String1="ipsec", _String2="interface") returned 2 [0066.151] _wcsicmp (_String1="ipsec", _String2="lan") returned -3 [0066.151] _wcsicmp (_String1="ipsec", _String2="namespace") returned -5 [0066.151] _wcsicmp (_String1="ipsec", _String2="netio") returned -5 [0066.151] _wcsicmp (_String1="ipsec", _String2="ras") returned -9 [0066.151] _wcsicmp (_String1="ipsec", _String2="trace") returned -11 [0066.151] _wcsicmp (_String1="ipsec", _String2="advfirewall") returned 8 [0066.151] _wcsicmp (_String1="ipsec", _String2="bridge") returned 7 [0066.151] _wcsicmp (_String1="ipsec", _String2="dhcpclient") returned 5 [0066.151] _wcsicmp (_String1="ipsec", _String2="dnsclient") returned 5 [0066.151] _wcsicmp (_String1="ipsec", _String2="firewall") returned 3 [0066.151] _wcsicmp (_String1="ipsec", _String2="http") returned 1 [0066.151] _wcsicmp (_String1="ipsec", _String2="interface") returned 2 [0066.151] _wcsicmp (_String1="ipsec", _String2="lan") returned -3 [0066.151] GetProcessHeap () returned 0x21ac6e60000 [0066.151] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x5b0) returned 0x21ac6eb1430 [0066.151] GetProcessHeap () returned 0x21ac6e60000 [0066.151] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6ebcc40) returned 1 [0066.151] RegisterContext () returned 0x0 [0066.151] GetProcessHeap () returned 0x21ac6e60000 [0066.152] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x70) returned 0x21ac6eb0f60 [0066.152] GetProcessHeap () returned 0x21ac6e60000 [0066.152] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x0) returned 1 [0066.152] RegisterContext () returned 0x0 [0066.152] _wcsicmp (_String1="dynamic", _String2="static") returned -15 [0066.152] _wcsicmp (_String1="dynamic", _String2="static") returned -15 [0066.152] GetProcessHeap () returned 0x21ac6e60000 [0066.152] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0xe0) returned 0x21ac6ea6bd0 [0066.152] GetProcessHeap () returned 0x21ac6e60000 [0066.152] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6eb0f60) returned 1 [0066.152] RegisterContext () returned 0x0 [0066.152] _wcsicmp (_String1="static", _String2="dynamic") returned 15 [0066.152] _wcsicmp (_String1="static", _String2="static") returned 0 [0066.152] RegisterContext () returned 0x0 [0066.152] _wcsicmp (_String1="dynamic", _String2="dynamic") returned 0 [0066.152] RegisterContext () returned 0x0 [0066.153] _wcsicmp (_String1="wfp", _String2="advfirewall") returned 22 [0066.153] _wcsicmp (_String1="wfp", _String2="bridge") returned 21 [0066.153] _wcsicmp (_String1="wfp", _String2="dhcpclient") returned 19 [0066.153] _wcsicmp (_String1="wfp", _String2="dnsclient") returned 19 [0066.153] _wcsicmp (_String1="wfp", _String2="firewall") returned 17 [0066.153] _wcsicmp (_String1="wfp", _String2="http") returned 15 [0066.153] _wcsicmp (_String1="wfp", _String2="interface") returned 14 [0066.153] _wcsicmp (_String1="wfp", _String2="ipsec") returned 14 [0066.153] _wcsicmp (_String1="wfp", _String2="lan") returned 11 [0066.154] _wcsicmp (_String1="wfp", _String2="namespace") returned 9 [0066.154] _wcsicmp (_String1="wfp", _String2="netio") returned 9 [0066.154] _wcsicmp (_String1="wfp", _String2="ras") returned 5 [0066.154] _wcsicmp (_String1="wfp", _String2="trace") returned 3 [0066.154] _wcsicmp (_String1="wfp", _String2="advfirewall") returned 22 [0066.154] _wcsicmp (_String1="wfp", _String2="bridge") returned 21 [0066.154] _wcsicmp (_String1="wfp", _String2="dhcpclient") returned 19 [0066.154] _wcsicmp (_String1="wfp", _String2="dnsclient") returned 19 [0066.154] _wcsicmp (_String1="wfp", _String2="firewall") returned 17 [0066.154] _wcsicmp (_String1="wfp", _String2="http") returned 15 [0066.154] _wcsicmp (_String1="wfp", _String2="interface") returned 14 [0066.154] _wcsicmp (_String1="wfp", _String2="ipsec") returned 14 [0066.154] _wcsicmp (_String1="wfp", _String2="lan") returned 11 [0066.154] _wcsicmp (_String1="wfp", _String2="namespace") returned 9 [0066.154] _wcsicmp (_String1="wfp", _String2="netio") returned 9 [0066.154] _wcsicmp (_String1="wfp", _String2="ras") returned 5 [0066.154] _wcsicmp (_String1="wfp", _String2="trace") returned 3 [0066.154] GetProcessHeap () returned 0x21ac6e60000 [0066.154] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x620) returned 0x21ac6ebcec0 [0066.154] GetProcessHeap () returned 0x21ac6e60000 [0066.154] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6eb1430) returned 1 [0066.159] RegisterContext () returned 0x0 [0066.160] _wcsicmp (_String1="p2p", _String2="advfirewall") returned 15 [0066.160] _wcsicmp (_String1="p2p", _String2="bridge") returned 14 [0066.160] _wcsicmp (_String1="p2p", _String2="dhcpclient") returned 12 [0066.160] _wcsicmp (_String1="p2p", _String2="dnsclient") returned 12 [0066.160] _wcsicmp (_String1="p2p", _String2="firewall") returned 10 [0066.160] _wcsicmp (_String1="p2p", _String2="http") returned 8 [0066.160] _wcsicmp (_String1="p2p", _String2="interface") returned 7 [0066.160] _wcsicmp (_String1="p2p", _String2="ipsec") returned 7 [0066.160] _wcsicmp (_String1="p2p", _String2="lan") returned 4 [0066.160] _wcsicmp (_String1="p2p", _String2="namespace") returned 2 [0066.160] _wcsicmp (_String1="p2p", _String2="netio") returned 2 [0066.160] _wcsicmp (_String1="p2p", _String2="ras") returned -2 [0066.160] _wcsicmp (_String1="p2p", _String2="trace") returned -4 [0066.160] _wcsicmp (_String1="p2p", _String2="wfp") returned -7 [0066.160] _wcsicmp (_String1="p2p", _String2="advfirewall") returned 15 [0066.160] _wcsicmp (_String1="p2p", _String2="bridge") returned 14 [0066.160] _wcsicmp (_String1="p2p", _String2="dhcpclient") returned 12 [0066.160] _wcsicmp (_String1="p2p", _String2="dnsclient") returned 12 [0066.160] _wcsicmp (_String1="p2p", _String2="firewall") returned 10 [0066.160] _wcsicmp (_String1="p2p", _String2="http") returned 8 [0066.160] _wcsicmp (_String1="p2p", _String2="interface") returned 7 [0066.160] _wcsicmp (_String1="p2p", _String2="ipsec") returned 7 [0066.160] _wcsicmp (_String1="p2p", _String2="lan") returned 4 [0066.160] _wcsicmp (_String1="p2p", _String2="namespace") returned 2 [0066.160] _wcsicmp (_String1="p2p", _String2="netio") returned 2 [0066.160] _wcsicmp (_String1="p2p", _String2="ras") returned -2 [0066.160] GetProcessHeap () returned 0x21ac6e60000 [0066.160] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x690) returned 0x21ac6ebf500 [0066.160] GetProcessHeap () returned 0x21ac6e60000 [0066.160] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6ebcec0) returned 1 [0066.160] RegisterContext () returned 0x0 [0066.160] GetProcessHeap () returned 0x21ac6e60000 [0066.161] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x70) returned 0x21ac6eb0f60 [0066.161] GetProcessHeap () returned 0x21ac6e60000 [0066.161] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x0) returned 1 [0066.164] RegisterContext () returned 0x0 [0066.164] _wcsicmp (_String1="group", _String2="pnrp") returned -9 [0066.164] _wcsicmp (_String1="group", _String2="pnrp") returned -9 [0066.164] GetProcessHeap () returned 0x21ac6e60000 [0066.164] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0xe0) returned 0x21ac6ea6ae0 [0066.164] GetProcessHeap () returned 0x21ac6e60000 [0066.164] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6eb0f60) returned 1 [0066.165] RegisterContext () returned 0x0 [0066.165] _wcsicmp (_String1="idmgr", _String2="group") returned 2 [0066.165] _wcsicmp (_String1="idmgr", _String2="pnrp") returned -7 [0066.165] _wcsicmp (_String1="idmgr", _String2="group") returned 2 [0066.165] _wcsicmp (_String1="idmgr", _String2="pnrp") returned -7 [0066.165] GetProcessHeap () returned 0x21ac6e60000 [0066.165] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x150) returned 0x21ac6eb2d80 [0066.165] GetProcessHeap () returned 0x21ac6e60000 [0066.165] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6ea6ae0) returned 1 [0066.165] RegisterContext () returned 0x0 [0066.165] GetProcessHeap () returned 0x21ac6e60000 [0066.165] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x70) returned 0x21ac6eb0f60 [0066.165] GetProcessHeap () returned 0x21ac6e60000 [0066.165] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x0) returned 1 [0066.165] RegisterContext () returned 0x0 [0066.165] _wcsicmp (_String1="diagnostics", _String2="cloud") returned 1 [0066.165] _wcsicmp (_String1="diagnostics", _String2="cloud") returned 1 [0066.165] GetProcessHeap () returned 0x21ac6e60000 [0066.165] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0xe0) returned 0x21ac6ea6f90 [0066.165] GetProcessHeap () returned 0x21ac6e60000 [0066.165] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6eb0f60) returned 1 [0066.166] RegisterContext () returned 0x0 [0066.166] _wcsicmp (_String1="peer", _String2="cloud") returned 13 [0066.166] _wcsicmp (_String1="peer", _String2="diagnostics") returned 12 [0066.166] _wcsicmp (_String1="peer", _String2="cloud") returned 13 [0066.166] _wcsicmp (_String1="peer", _String2="diagnostics") returned 12 [0066.166] GetProcessHeap () returned 0x21ac6e60000 [0066.166] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x150) returned 0x21ac6e7abc0 [0066.166] GetProcessHeap () returned 0x21ac6e60000 [0066.166] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6ea6f90) returned 1 [0066.166] RegisterContext () returned 0x0 [0066.166] GetProcessHeap () returned 0x21ac6e60000 [0066.166] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x70) returned 0x21ac6eb0f60 [0066.166] GetProcessHeap () returned 0x21ac6e60000 [0066.166] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x0) returned 1 [0066.166] RegisterContext () returned 0x0 [0066.166] _wcsicmp (_String1="rpc", _String2="advfirewall") returned 17 [0066.166] _wcsicmp (_String1="rpc", _String2="bridge") returned 16 [0066.166] _wcsicmp (_String1="rpc", _String2="dhcpclient") returned 14 [0066.166] _wcsicmp (_String1="rpc", _String2="dnsclient") returned 14 [0066.166] _wcsicmp (_String1="rpc", _String2="firewall") returned 12 [0066.166] _wcsicmp (_String1="rpc", _String2="http") returned 10 [0066.166] _wcsicmp (_String1="rpc", _String2="interface") returned 9 [0066.166] _wcsicmp (_String1="rpc", _String2="ipsec") returned 9 [0066.166] _wcsicmp (_String1="rpc", _String2="lan") returned 6 [0066.166] _wcsicmp (_String1="rpc", _String2="namespace") returned 4 [0066.166] _wcsicmp (_String1="rpc", _String2="netio") returned 4 [0066.166] _wcsicmp (_String1="rpc", _String2="p2p") returned 2 [0066.166] _wcsicmp (_String1="rpc", _String2="ras") returned 15 [0066.166] _wcsicmp (_String1="rpc", _String2="trace") returned -2 [0066.166] _wcsicmp (_String1="rpc", _String2="wfp") returned -5 [0066.166] _wcsicmp (_String1="rpc", _String2="advfirewall") returned 17 [0066.167] _wcsicmp (_String1="rpc", _String2="bridge") returned 16 [0066.167] _wcsicmp (_String1="rpc", _String2="dhcpclient") returned 14 [0066.167] _wcsicmp (_String1="rpc", _String2="dnsclient") returned 14 [0066.167] _wcsicmp (_String1="rpc", _String2="firewall") returned 12 [0066.167] _wcsicmp (_String1="rpc", _String2="http") returned 10 [0066.167] _wcsicmp (_String1="rpc", _String2="interface") returned 9 [0066.167] _wcsicmp (_String1="rpc", _String2="ipsec") returned 9 [0066.167] _wcsicmp (_String1="rpc", _String2="lan") returned 6 [0066.167] _wcsicmp (_String1="rpc", _String2="namespace") returned 4 [0066.167] _wcsicmp (_String1="rpc", _String2="netio") returned 4 [0066.167] _wcsicmp (_String1="rpc", _String2="p2p") returned 2 [0066.167] _wcsicmp (_String1="rpc", _String2="ras") returned 15 [0066.167] _wcsicmp (_String1="rpc", _String2="trace") returned -2 [0066.167] GetProcessHeap () returned 0x21ac6e60000 [0066.167] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x700) returned 0x21ac6ebfba0 [0066.167] GetProcessHeap () returned 0x21ac6e60000 [0066.167] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6ebf500) returned 1 [0066.167] RegisterContext () returned 0x0 [0066.167] GetProcessHeap () returned 0x21ac6e60000 [0066.167] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x70) returned 0x21ac6e64440 [0066.167] GetProcessHeap () returned 0x21ac6e60000 [0066.167] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x0) returned 1 [0066.167] RegisterContext () returned 0x0 [0066.167] _wcsicmp (_String1="wcn", _String2="advfirewall") returned 22 [0066.167] _wcsicmp (_String1="wcn", _String2="bridge") returned 21 [0066.167] _wcsicmp (_String1="wcn", _String2="dhcpclient") returned 19 [0066.167] _wcsicmp (_String1="wcn", _String2="dnsclient") returned 19 [0066.167] _wcsicmp (_String1="wcn", _String2="firewall") returned 17 [0066.167] _wcsicmp (_String1="wcn", _String2="http") returned 15 [0066.167] _wcsicmp (_String1="wcn", _String2="interface") returned 14 [0066.167] _wcsicmp (_String1="wcn", _String2="ipsec") returned 14 [0066.167] _wcsicmp (_String1="wcn", _String2="lan") returned 11 [0066.168] _wcsicmp (_String1="wcn", _String2="namespace") returned 9 [0066.168] _wcsicmp (_String1="wcn", _String2="netio") returned 9 [0066.168] _wcsicmp (_String1="wcn", _String2="p2p") returned 7 [0066.168] _wcsicmp (_String1="wcn", _String2="ras") returned 5 [0066.168] _wcsicmp (_String1="wcn", _String2="rpc") returned 5 [0066.168] _wcsicmp (_String1="wcn", _String2="trace") returned 3 [0066.168] _wcsicmp (_String1="wcn", _String2="wfp") returned -3 [0066.168] _wcsicmp (_String1="wcn", _String2="advfirewall") returned 22 [0066.168] _wcsicmp (_String1="wcn", _String2="bridge") returned 21 [0066.168] _wcsicmp (_String1="wcn", _String2="dhcpclient") returned 19 [0066.168] _wcsicmp (_String1="wcn", _String2="dnsclient") returned 19 [0066.168] _wcsicmp (_String1="wcn", _String2="firewall") returned 17 [0066.168] _wcsicmp (_String1="wcn", _String2="http") returned 15 [0066.168] _wcsicmp (_String1="wcn", _String2="interface") returned 14 [0066.168] _wcsicmp (_String1="wcn", _String2="ipsec") returned 14 [0066.168] _wcsicmp (_String1="wcn", _String2="lan") returned 11 [0066.168] _wcsicmp (_String1="wcn", _String2="namespace") returned 9 [0066.168] _wcsicmp (_String1="wcn", _String2="netio") returned 9 [0066.168] _wcsicmp (_String1="wcn", _String2="p2p") returned 7 [0066.168] _wcsicmp (_String1="wcn", _String2="ras") returned 5 [0066.168] _wcsicmp (_String1="wcn", _String2="rpc") returned 5 [0066.168] _wcsicmp (_String1="wcn", _String2="trace") returned 3 [0066.168] _wcsicmp (_String1="wcn", _String2="wfp") returned -3 [0066.168] GetProcessHeap () returned 0x21ac6e60000 [0066.168] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x770) returned 0x21ac6ec02b0 [0066.168] GetProcessHeap () returned 0x21ac6e60000 [0066.168] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6ebfba0) returned 1 [0066.168] RegisterContext () returned 0x0 [0066.168] _wcsicmp (_String1="winhttp", _String2="advfirewall") returned 22 [0066.168] _wcsicmp (_String1="winhttp", _String2="bridge") returned 21 [0066.168] _wcsicmp (_String1="winhttp", _String2="dhcpclient") returned 19 [0066.168] _wcsicmp (_String1="winhttp", _String2="dnsclient") returned 19 [0066.168] _wcsicmp (_String1="winhttp", _String2="firewall") returned 17 [0066.169] _wcsicmp (_String1="winhttp", _String2="http") returned 15 [0066.169] _wcsicmp (_String1="winhttp", _String2="interface") returned 14 [0066.169] _wcsicmp (_String1="winhttp", _String2="ipsec") returned 14 [0066.169] _wcsicmp (_String1="winhttp", _String2="lan") returned 11 [0066.169] _wcsicmp (_String1="winhttp", _String2="namespace") returned 9 [0066.169] _wcsicmp (_String1="winhttp", _String2="netio") returned 9 [0066.169] _wcsicmp (_String1="winhttp", _String2="p2p") returned 7 [0066.169] _wcsicmp (_String1="winhttp", _String2="ras") returned 5 [0066.169] _wcsicmp (_String1="winhttp", _String2="rpc") returned 5 [0066.169] _wcsicmp (_String1="winhttp", _String2="trace") returned 3 [0066.169] _wcsicmp (_String1="winhttp", _String2="wcn") returned 6 [0066.169] _wcsicmp (_String1="winhttp", _String2="wfp") returned 3 [0066.169] _wcsicmp (_String1="winhttp", _String2="advfirewall") returned 22 [0066.169] _wcsicmp (_String1="winhttp", _String2="bridge") returned 21 [0066.169] _wcsicmp (_String1="winhttp", _String2="dhcpclient") returned 19 [0066.169] _wcsicmp (_String1="winhttp", _String2="dnsclient") returned 19 [0066.169] _wcsicmp (_String1="winhttp", _String2="firewall") returned 17 [0066.169] _wcsicmp (_String1="winhttp", _String2="http") returned 15 [0066.169] _wcsicmp (_String1="winhttp", _String2="interface") returned 14 [0066.169] _wcsicmp (_String1="winhttp", _String2="ipsec") returned 14 [0066.169] _wcsicmp (_String1="winhttp", _String2="lan") returned 11 [0066.169] _wcsicmp (_String1="winhttp", _String2="namespace") returned 9 [0066.169] _wcsicmp (_String1="winhttp", _String2="netio") returned 9 [0066.169] _wcsicmp (_String1="winhttp", _String2="p2p") returned 7 [0066.169] _wcsicmp (_String1="winhttp", _String2="ras") returned 5 [0066.169] _wcsicmp (_String1="winhttp", _String2="rpc") returned 5 [0066.169] _wcsicmp (_String1="winhttp", _String2="trace") returned 3 [0066.169] _wcsicmp (_String1="winhttp", _String2="wcn") returned 6 [0066.169] _wcsicmp (_String1="winhttp", _String2="wfp") returned 3 [0066.169] GetProcessHeap () returned 0x21ac6e60000 [0066.169] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x7e0) returned 0x21ac6ebf500 [0066.169] GetProcessHeap () returned 0x21ac6e60000 [0066.169] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6ec02b0) returned 1 [0066.169] RegisterContext () returned 0x0 [0066.170] _wcsicmp (_String1="wlan", _String2="advfirewall") returned 22 [0066.170] _wcsicmp (_String1="wlan", _String2="bridge") returned 21 [0066.170] _wcsicmp (_String1="wlan", _String2="dhcpclient") returned 19 [0066.170] _wcsicmp (_String1="wlan", _String2="dnsclient") returned 19 [0066.170] _wcsicmp (_String1="wlan", _String2="firewall") returned 17 [0066.170] _wcsicmp (_String1="wlan", _String2="http") returned 15 [0066.170] _wcsicmp (_String1="wlan", _String2="interface") returned 14 [0066.170] _wcsicmp (_String1="wlan", _String2="ipsec") returned 14 [0066.170] _wcsicmp (_String1="wlan", _String2="lan") returned 11 [0066.170] _wcsicmp (_String1="wlan", _String2="namespace") returned 9 [0066.170] _wcsicmp (_String1="wlan", _String2="netio") returned 9 [0066.170] _wcsicmp (_String1="wlan", _String2="p2p") returned 7 [0066.170] _wcsicmp (_String1="wlan", _String2="ras") returned 5 [0066.170] _wcsicmp (_String1="wlan", _String2="rpc") returned 5 [0066.170] _wcsicmp (_String1="wlan", _String2="trace") returned 3 [0066.170] _wcsicmp (_String1="wlan", _String2="wcn") returned 9 [0066.170] _wcsicmp (_String1="wlan", _String2="wfp") returned 6 [0066.170] _wcsicmp (_String1="wlan", _String2="winhttp") returned 3 [0066.170] _wcsicmp (_String1="wlan", _String2="advfirewall") returned 22 [0066.170] _wcsicmp (_String1="wlan", _String2="bridge") returned 21 [0066.170] _wcsicmp (_String1="wlan", _String2="dhcpclient") returned 19 [0066.170] _wcsicmp (_String1="wlan", _String2="dnsclient") returned 19 [0066.170] _wcsicmp (_String1="wlan", _String2="firewall") returned 17 [0066.170] _wcsicmp (_String1="wlan", _String2="http") returned 15 [0066.170] _wcsicmp (_String1="wlan", _String2="interface") returned 14 [0066.170] _wcsicmp (_String1="wlan", _String2="ipsec") returned 14 [0066.170] _wcsicmp (_String1="wlan", _String2="lan") returned 11 [0066.170] _wcsicmp (_String1="wlan", _String2="namespace") returned 9 [0066.170] _wcsicmp (_String1="wlan", _String2="netio") returned 9 [0066.170] _wcsicmp (_String1="wlan", _String2="p2p") returned 7 [0066.170] _wcsicmp (_String1="wlan", _String2="ras") returned 5 [0066.170] _wcsicmp (_String1="wlan", _String2="rpc") returned 5 [0066.170] _wcsicmp (_String1="wlan", _String2="trace") returned 3 [0066.170] _wcsicmp (_String1="wlan", _String2="wcn") returned 9 [0066.170] _wcsicmp (_String1="wlan", _String2="wfp") returned 6 [0066.170] _wcsicmp (_String1="wlan", _String2="winhttp") returned 3 [0066.170] GetProcessHeap () returned 0x21ac6e60000 [0066.171] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x850) returned 0x21ac6ebfcf0 [0066.171] GetProcessHeap () returned 0x21ac6e60000 [0066.531] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6ebf500) returned 1 [0066.532] RegisterContext () returned 0x0 [0066.532] _wcsicmp (_String1="winsock", _String2="advfirewall") returned 22 [0066.532] _wcsicmp (_String1="winsock", _String2="bridge") returned 21 [0066.532] _wcsicmp (_String1="winsock", _String2="dhcpclient") returned 19 [0066.532] _wcsicmp (_String1="winsock", _String2="dnsclient") returned 19 [0066.532] _wcsicmp (_String1="winsock", _String2="firewall") returned 17 [0066.532] _wcsicmp (_String1="winsock", _String2="http") returned 15 [0066.532] _wcsicmp (_String1="winsock", _String2="interface") returned 14 [0066.532] _wcsicmp (_String1="winsock", _String2="ipsec") returned 14 [0066.532] _wcsicmp (_String1="winsock", _String2="lan") returned 11 [0066.532] _wcsicmp (_String1="winsock", _String2="namespace") returned 9 [0066.532] _wcsicmp (_String1="winsock", _String2="netio") returned 9 [0066.532] _wcsicmp (_String1="winsock", _String2="p2p") returned 7 [0066.532] _wcsicmp (_String1="winsock", _String2="ras") returned 5 [0066.532] _wcsicmp (_String1="winsock", _String2="rpc") returned 5 [0066.532] _wcsicmp (_String1="winsock", _String2="trace") returned 3 [0066.532] _wcsicmp (_String1="winsock", _String2="wcn") returned 6 [0066.532] _wcsicmp (_String1="winsock", _String2="wfp") returned 3 [0066.532] _wcsicmp (_String1="winsock", _String2="winhttp") returned 11 [0066.532] _wcsicmp (_String1="winsock", _String2="wlan") returned -3 [0066.532] _wcsicmp (_String1="winsock", _String2="advfirewall") returned 22 [0066.532] _wcsicmp (_String1="winsock", _String2="bridge") returned 21 [0066.532] _wcsicmp (_String1="winsock", _String2="dhcpclient") returned 19 [0066.532] _wcsicmp (_String1="winsock", _String2="dnsclient") returned 19 [0066.532] _wcsicmp (_String1="winsock", _String2="firewall") returned 17 [0066.532] _wcsicmp (_String1="winsock", _String2="http") returned 15 [0066.532] _wcsicmp (_String1="winsock", _String2="interface") returned 14 [0066.532] _wcsicmp (_String1="winsock", _String2="ipsec") returned 14 [0066.532] _wcsicmp (_String1="winsock", _String2="lan") returned 11 [0066.532] _wcsicmp (_String1="winsock", _String2="namespace") returned 9 [0066.532] _wcsicmp (_String1="winsock", _String2="netio") returned 9 [0066.532] _wcsicmp (_String1="winsock", _String2="p2p") returned 7 [0066.533] _wcsicmp (_String1="winsock", _String2="ras") returned 5 [0066.533] _wcsicmp (_String1="winsock", _String2="rpc") returned 5 [0066.533] _wcsicmp (_String1="winsock", _String2="trace") returned 3 [0066.533] _wcsicmp (_String1="winsock", _String2="wcn") returned 6 [0066.533] _wcsicmp (_String1="winsock", _String2="wfp") returned 3 [0066.533] _wcsicmp (_String1="winsock", _String2="winhttp") returned 11 [0066.533] _wcsicmp (_String1="winsock", _String2="wlan") returned -3 [0066.533] GetProcessHeap () returned 0x21ac6e60000 [0066.533] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x8c0) returned 0x21ac6ec0550 [0066.533] GetProcessHeap () returned 0x21ac6e60000 [0066.533] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6ebfcf0) returned 1 [0066.533] RegisterContext () returned 0x0 [0066.533] _wcsicmp (_String1="mbn", _String2="advfirewall") returned 12 [0066.533] _wcsicmp (_String1="mbn", _String2="bridge") returned 11 [0066.533] _wcsicmp (_String1="mbn", _String2="dhcpclient") returned 9 [0066.533] _wcsicmp (_String1="mbn", _String2="dnsclient") returned 9 [0066.533] _wcsicmp (_String1="mbn", _String2="firewall") returned 7 [0066.533] _wcsicmp (_String1="mbn", _String2="http") returned 5 [0066.533] _wcsicmp (_String1="mbn", _String2="interface") returned 4 [0066.533] _wcsicmp (_String1="mbn", _String2="ipsec") returned 4 [0066.533] _wcsicmp (_String1="mbn", _String2="lan") returned 1 [0066.533] _wcsicmp (_String1="mbn", _String2="namespace") returned -1 [0066.533] _wcsicmp (_String1="mbn", _String2="netio") returned -1 [0066.533] _wcsicmp (_String1="mbn", _String2="p2p") returned -3 [0066.533] _wcsicmp (_String1="mbn", _String2="ras") returned -5 [0066.533] _wcsicmp (_String1="mbn", _String2="rpc") returned -5 [0066.533] _wcsicmp (_String1="mbn", _String2="trace") returned -7 [0066.533] _wcsicmp (_String1="mbn", _String2="wcn") returned -10 [0066.533] _wcsicmp (_String1="mbn", _String2="wfp") returned -10 [0066.533] _wcsicmp (_String1="mbn", _String2="winhttp") returned -10 [0066.533] _wcsicmp (_String1="mbn", _String2="winsock") returned -10 [0066.533] _wcsicmp (_String1="mbn", _String2="wlan") returned -10 [0066.533] _wcsicmp (_String1="mbn", _String2="advfirewall") returned 12 [0066.534] _wcsicmp (_String1="mbn", _String2="bridge") returned 11 [0066.534] _wcsicmp (_String1="mbn", _String2="dhcpclient") returned 9 [0066.534] _wcsicmp (_String1="mbn", _String2="dnsclient") returned 9 [0066.534] _wcsicmp (_String1="mbn", _String2="firewall") returned 7 [0066.534] _wcsicmp (_String1="mbn", _String2="http") returned 5 [0066.534] _wcsicmp (_String1="mbn", _String2="interface") returned 4 [0066.534] _wcsicmp (_String1="mbn", _String2="ipsec") returned 4 [0066.534] _wcsicmp (_String1="mbn", _String2="lan") returned 1 [0066.534] _wcsicmp (_String1="mbn", _String2="namespace") returned -1 [0066.534] GetProcessHeap () returned 0x21ac6e60000 [0066.534] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x930) returned 0x21ac6ebf500 [0066.534] GetProcessHeap () returned 0x21ac6e60000 [0066.534] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6ec0550) returned 1 [0067.177] RegisterContext () returned 0x0 [0067.177] _wcsicmp (_String1="branchcache", _String2="advfirewall") returned 1 [0067.177] _wcsicmp (_String1="branchcache", _String2="bridge") returned -8 [0067.177] _wcsicmp (_String1="branchcache", _String2="dhcpclient") returned -2 [0067.177] _wcsicmp (_String1="branchcache", _String2="dnsclient") returned -2 [0067.177] _wcsicmp (_String1="branchcache", _String2="firewall") returned -4 [0067.177] _wcsicmp (_String1="branchcache", _String2="http") returned -6 [0067.177] _wcsicmp (_String1="branchcache", _String2="interface") returned -7 [0067.177] _wcsicmp (_String1="branchcache", _String2="ipsec") returned -7 [0067.177] _wcsicmp (_String1="branchcache", _String2="lan") returned -10 [0067.178] _wcsicmp (_String1="branchcache", _String2="mbn") returned -11 [0067.178] _wcsicmp (_String1="branchcache", _String2="namespace") returned -12 [0067.178] _wcsicmp (_String1="branchcache", _String2="netio") returned -12 [0067.178] _wcsicmp (_String1="branchcache", _String2="p2p") returned -14 [0067.178] _wcsicmp (_String1="branchcache", _String2="ras") returned -16 [0067.178] _wcsicmp (_String1="branchcache", _String2="rpc") returned -16 [0067.178] _wcsicmp (_String1="branchcache", _String2="trace") returned -18 [0067.178] _wcsicmp (_String1="branchcache", _String2="wcn") returned -21 [0067.178] _wcsicmp (_String1="branchcache", _String2="wfp") returned -21 [0067.178] _wcsicmp (_String1="branchcache", _String2="winhttp") returned -21 [0067.178] _wcsicmp (_String1="branchcache", _String2="winsock") returned -21 [0067.178] _wcsicmp (_String1="branchcache", _String2="wlan") returned -21 [0067.178] _wcsicmp (_String1="branchcache", _String2="advfirewall") returned 1 [0067.178] _wcsicmp (_String1="branchcache", _String2="bridge") returned -8 [0067.178] GetProcessHeap () returned 0x21ac6e60000 [0067.178] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x9a0) returned 0x21ac6ec6e20 [0067.178] GetProcessHeap () returned 0x21ac6e60000 [0067.178] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6ebf500) returned 1 [0067.178] RegisterContext () returned 0x0 [0067.178] GetProcessHeap () returned 0x21ac6e60000 [0067.178] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x70) returned 0x21ac6ebd420 [0067.178] GetProcessHeap () returned 0x21ac6e60000 [0067.178] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x0) returned 1 [0067.178] LoadLibraryExW (lpLibFileName="mprmsg.dll", hFile=0x0, dwFlags=0x800) returned 0x7ff910820000 [0067.375] GetProcAddress (hModule=0x7ff910820000, lpProcName="MprmsgGetErrorString") returned 0x7ff910821040 [0067.375] SetConsoleCtrlHandler (HandlerRoutine=0x7ff664f08410, Add=1) returned 1 [0067.375] SetThreadUILanguage (LangId=0x0) returned 0x409 [0067.637] _wcsicmp (_String1="advfirewall", _String2="-?") returned 52 [0067.640] _wcsicmp (_String1="advfirewall", _String2="-h") returned 52 [0067.646] _wcsicmp (_String1="advfirewall", _String2="?") returned 34 [0067.648] _wcsicmp (_String1="advfirewall", _String2="/?") returned 50 [0067.668] _wcsicmp (_String1="advfirewall", _String2="-v") returned 52 [0067.668] _wcsicmp (_String1="advfirewall", _String2="-a") returned 52 [0067.672] _wcsicmp (_String1="advfirewall", _String2="-c") returned 52 [0067.678] _wcsicmp (_String1="advfirewall", _String2="-f") returned 52 [0067.678] _wcsicmp (_String1="advfirewall", _String2="-r") returned 52 [0067.678] _wcsicmp (_String1="advfirewall", _String2="-u") returned 52 [0067.678] _wcsicmp (_String1="advfirewall", _String2="-p") returned 52 [0067.679] GetVersionExW (in: lpVersionInformation=0x90deaf7370*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x90deaf7370*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x3ad7, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0067.679] _vsnwprintf (in: _Buffer=0x7ff664f17ca0, _BufferCount=0x103, _Format="%d.%d.%d", _ArgList=0x90deaf7338 | out: _Buffer="10.0.15063") returned 10 [0067.679] _vsnwprintf (in: _Buffer=0x7ff664f17eb0, _BufferCount=0x103, _Format="%d", _ArgList=0x90deaf7338 | out: _Buffer="15063") returned 5 [0067.679] _vsnwprintf (in: _Buffer=0x7ff664f180c0, _BufferCount=0x103, _Format="%d", _ArgList=0x90deaf7338 | out: _Buffer="0") returned 1 [0067.679] _vsnwprintf (in: _Buffer=0x7ff664f182d0, _BufferCount=0x103, _Format="%d", _ArgList=0x90deaf7338 | out: _Buffer="0") returned 1 [0067.679] GetProcessHeap () returned 0x21ac6e60000 [0067.679] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x18) returned 0x21ac6eac070 [0067.679] GetProcessHeap () returned 0x21ac6e60000 [0067.679] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x18) returned 0x21ac6eac170 [0067.679] GetProcessHeap () returned 0x21ac6e60000 [0067.679] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0xc) returned 0x21ac6eac2f0 [0067.679] GetProcessHeap () returned 0x21ac6e60000 [0067.679] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x18) returned 0x21ac6eabfd0 [0067.679] GetProcessHeap () returned 0x21ac6e60000 [0067.679] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0xc) returned 0x21ac6eac450 [0067.679] wcscpy_s (in: _Destination=0x21ac6eac450, _SizeInWords=0x6, _Source="netsh" | out: _Destination="netsh") returned 0x0 [0067.679] GetProcessHeap () returned 0x21ac6e60000 [0067.679] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6eac2f0) returned 1 [0067.679] GetProcessHeap () returned 0x21ac6e60000 [0067.679] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6eac170) returned 1 [0067.679] GetProcessHeap () returned 0x21ac6e60000 [0067.679] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x18) returned 0x21ac6eabf90 [0067.679] GetProcessHeap () returned 0x21ac6e60000 [0067.679] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x18) returned 0x21ac6eac4f0 [0067.680] GetProcessHeap () returned 0x21ac6e60000 [0067.680] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x52) returned 0x21ac6eb5140 [0067.680] GetProcessHeap () returned 0x21ac6e60000 [0067.680] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x18) returned 0x21ac6eac510 [0067.680] GetProcessHeap () returned 0x21ac6e60000 [0067.680] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x18) returned 0x21ac6eac2f0 [0067.680] wcscpy_s (in: _Destination=0x21ac6eac2f0, _SizeInWords=0xc, _Source="advfirewall" | out: _Destination="advfirewall") returned 0x0 [0067.680] GetProcessHeap () returned 0x21ac6e60000 [0067.680] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x18) returned 0x21ac6eac530 [0067.680] GetProcessHeap () returned 0x21ac6e60000 [0067.680] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x8) returned 0x21ac6eb1290 [0067.680] wcscpy_s (in: _Destination=0x21ac6eb1290, _SizeInWords=0x4, _Source="set" | out: _Destination="set") returned 0x0 [0067.680] GetProcessHeap () returned 0x21ac6e60000 [0067.680] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x18) returned 0x21ac6eabff0 [0067.680] GetProcessHeap () returned 0x21ac6e60000 [0067.680] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x1e) returned 0x21ac6ec0580 [0067.680] wcscpy_s (in: _Destination=0x21ac6ec0580, _SizeInWords=0xf, _Source="currentprofile" | out: _Destination="currentprofile") returned 0x0 [0067.680] GetProcessHeap () returned 0x21ac6e60000 [0067.680] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x18) returned 0x21ac6eac170 [0067.680] GetProcessHeap () returned 0x21ac6e60000 [0067.680] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0xc) returned 0x21ac6eac350 [0067.680] wcscpy_s (in: _Destination=0x21ac6eac350, _SizeInWords=0x6, _Source="state" | out: _Destination="state") returned 0x0 [0067.680] GetProcessHeap () returned 0x21ac6e60000 [0067.680] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x18) returned 0x21ac6eac390 [0067.680] GetProcessHeap () returned 0x21ac6e60000 [0067.680] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x8) returned 0x21ac6eb12a0 [0067.680] wcscpy_s (in: _Destination=0x21ac6eb12a0, _SizeInWords=0x4, _Source="off" | out: _Destination="off") returned 0x0 [0067.680] GetProcessHeap () returned 0x21ac6e60000 [0067.680] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6eb5140) returned 1 [0067.680] GetProcessHeap () returned 0x21ac6e60000 [0067.680] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6eac4f0) returned 1 [0067.680] GetProcessHeap () returned 0x21ac6e60000 [0067.680] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x18) returned 0x21ac6eabf30 [0067.680] GetProcessHeap () returned 0x21ac6e60000 [0067.680] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x18) returned 0x21ac6eac550 [0067.680] wcscpy_s (in: _Destination=0x21ac6eac550, _SizeInWords=0xc, _Source="advfirewall" | out: _Destination="advfirewall") returned 0x0 [0067.680] GetProcessHeap () returned 0x21ac6e60000 [0067.680] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6eac2f0) returned 1 [0067.680] GetProcessHeap () returned 0x21ac6e60000 [0067.680] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6eac510) returned 1 [0067.680] GetProcessHeap () returned 0x21ac6e60000 [0067.680] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x18) returned 0x21ac6eac2f0 [0067.680] GetProcessHeap () returned 0x21ac6e60000 [0067.681] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x18) returned 0x21ac6eabf50 [0067.681] wcscpy_s (in: _Destination=0x21ac6eabf50, _SizeInWords=0xc, _Source="advfirewall" | out: _Destination="advfirewall") returned 0x0 [0067.681] GetProcessHeap () returned 0x21ac6e60000 [0067.681] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6eac550) returned 1 [0067.681] GetProcessHeap () returned 0x21ac6e60000 [0067.681] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6eabf30) returned 1 [0067.681] GetProcessHeap () returned 0x21ac6e60000 [0067.681] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x18) returned 0x21ac6eabf30 [0067.681] GetProcessHeap () returned 0x21ac6e60000 [0067.681] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x8) returned 0x21ac6eb1080 [0067.681] wcscpy_s (in: _Destination=0x21ac6eb1080, _SizeInWords=0x4, _Source="set" | out: _Destination="set") returned 0x0 [0067.681] GetProcessHeap () returned 0x21ac6e60000 [0067.681] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6eb1290) returned 1 [0067.681] GetProcessHeap () returned 0x21ac6e60000 [0067.681] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6eac530) returned 1 [0067.681] GetProcessHeap () returned 0x21ac6e60000 [0067.681] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x18) returned 0x21ac6eabf70 [0067.681] GetProcessHeap () returned 0x21ac6e60000 [0067.681] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x1e) returned 0x21ac6ec0370 [0067.681] wcscpy_s (in: _Destination=0x21ac6ec0370, _SizeInWords=0xf, _Source="currentprofile" | out: _Destination="currentprofile") returned 0x0 [0067.681] GetProcessHeap () returned 0x21ac6e60000 [0067.681] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6ec0580) returned 1 [0067.681] GetProcessHeap () returned 0x21ac6e60000 [0067.681] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6eabff0) returned 1 [0067.681] GetProcessHeap () returned 0x21ac6e60000 [0067.681] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x18) returned 0x21ac6eac4f0 [0067.681] GetProcessHeap () returned 0x21ac6e60000 [0067.681] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0xc) returned 0x21ac6eabff0 [0067.681] wcscpy_s (in: _Destination=0x21ac6eabff0, _SizeInWords=0x6, _Source="state" | out: _Destination="state") returned 0x0 [0067.681] GetProcessHeap () returned 0x21ac6e60000 [0067.681] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6eac350) returned 1 [0067.681] GetProcessHeap () returned 0x21ac6e60000 [0067.681] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6eac170) returned 1 [0067.681] GetProcessHeap () returned 0x21ac6e60000 [0067.681] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x18) returned 0x21ac6eac510 [0067.681] GetProcessHeap () returned 0x21ac6e60000 [0067.681] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x8) returned 0x21ac6eb1250 [0067.681] wcscpy_s (in: _Destination=0x21ac6eb1250, _SizeInWords=0x4, _Source="off" | out: _Destination="off") returned 0x0 [0067.681] GetProcessHeap () returned 0x21ac6e60000 [0067.681] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6eb12a0) returned 1 [0067.682] GetProcessHeap () returned 0x21ac6e60000 [0067.682] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6eac390) returned 1 [0067.682] GetProcessHeap () returned 0x21ac6e60000 [0067.682] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x30) returned 0x21ac6ebc2c0 [0067.682] GetProcessHeap () returned 0x21ac6e60000 [0067.682] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0xc) returned 0x21ac6eabdd0 [0067.682] GetProcessHeap () returned 0x21ac6e60000 [0067.682] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x18) returned 0x21ac6eac530 [0067.682] GetProcessHeap () returned 0x21ac6e60000 [0067.682] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x8) returned 0x21ac6eb1100 [0067.682] GetProcessHeap () returned 0x21ac6e60000 [0067.682] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x1e) returned 0x21ac6ec0430 [0067.682] GetProcessHeap () returned 0x21ac6e60000 [0067.682] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0xc) returned 0x21ac6eac050 [0067.682] GetProcessHeap () returned 0x21ac6e60000 [0067.682] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x8) returned 0x21ac6eb1190 [0067.682] GetProcessHeap () returned 0x21ac6e60000 [0067.682] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0xc) returned 0x21ac6eac350 [0067.682] GetProcessHeap () returned 0x21ac6e60000 [0067.682] RtlReAllocateHeap (Heap=0x21ac6e60000, Flags=0x0, Ptr=0x21ac6eac350, Size=0xe) returned 0x21ac6eac550 [0067.682] GetProcessHeap () returned 0x21ac6e60000 [0067.682] RtlReAllocateHeap (Heap=0x21ac6e60000, Flags=0x0, Ptr=0x21ac6eac550, Size=0x24) returned 0x21ac6ebff80 [0067.682] GetProcessHeap () returned 0x21ac6e60000 [0067.682] RtlReAllocateHeap (Heap=0x21ac6e60000, Flags=0x0, Ptr=0x21ac6ebff80, Size=0x26) returned 0x21ac6ec0580 [0067.682] GetProcessHeap () returned 0x21ac6e60000 [0067.682] RtlReAllocateHeap (Heap=0x21ac6e60000, Flags=0x0, Ptr=0x21ac6ec0580, Size=0x2c) returned 0x21ac6ebc240 [0067.682] GetProcessHeap () returned 0x21ac6e60000 [0067.682] RtlReAllocateHeap (Heap=0x21ac6e60000, Flags=0x0, Ptr=0x21ac6ebc240, Size=0x2e) returned 0x21ac6ebc140 [0067.682] GetProcessHeap () returned 0x21ac6e60000 [0067.682] RtlReAllocateHeap (Heap=0x21ac6e60000, Flags=0x0, Ptr=0x21ac6ebc140, Size=0x4a) returned 0x21ac6eb5680 [0067.682] GetProcessHeap () returned 0x21ac6e60000 [0067.682] RtlReAllocateHeap (Heap=0x21ac6e60000, Flags=0x0, Ptr=0x21ac6eb5680, Size=0x4c) returned 0x21ac6eb5440 [0067.682] GetProcessHeap () returned 0x21ac6e60000 [0067.682] RtlReAllocateHeap (Heap=0x21ac6e60000, Flags=0x0, Ptr=0x21ac6eb5440, Size=0x56) returned 0x21ac6eb5020 [0067.682] GetProcessHeap () returned 0x21ac6e60000 [0067.683] RtlReAllocateHeap (Heap=0x21ac6e60000, Flags=0x0, Ptr=0x21ac6eb5020, Size=0x58) returned 0x21ac6eb5a40 [0067.683] GetProcessHeap () returned 0x21ac6e60000 [0067.683] RtlReAllocateHeap (Heap=0x21ac6e60000, Flags=0x0, Ptr=0x21ac6eb5a40, Size=0x5e) returned 0x21ac6eaa240 [0067.683] GetProcessHeap () returned 0x21ac6e60000 [0067.683] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6eaa240) returned 1 [0067.683] lstrcmpiW (lpString1="netsh", lpString2="namespace") returned 1 [0067.683] lstrcmpiW (lpString1="netsh", lpString2="branchcache") returned 1 [0067.683] lstrcmpiW (lpString1="netsh", lpString2="advfirewall") returned 1 [0067.683] lstrcmpiW (lpString1="netsh", lpString2="firewall") returned 1 [0067.683] lstrcmpiW (lpString1="netsh", lpString2="interface") returned 1 [0067.683] lstrcmpiW (lpString1="netsh", lpString2="dhcp") returned 1 [0067.683] lstrcmpiW (lpString1="netsh", lpString2="dnsclient") returned 1 [0067.683] lstrcmpiW (lpString1="netsh", lpString2="routing") returned -1 [0067.683] lstrcmpiW (lpString1="netsh", lpString2="ip") returned 1 [0067.683] lstrcmpiW (lpString1="netsh", lpString2="ipv6") returned 1 [0067.683] lstrcmpiW (lpString1="netsh", lpString2="aaaa") returned 1 [0067.683] lstrcmpiW (lpString1="netsh", lpString2="ras") returned -1 [0067.683] _wcsnicmp (_String1="advfirewall", _String2="dump", _MaxCount=0xb) returned -3 [0067.683] _wcsnicmp (_String1="advfirewall", _String2="help", _MaxCount=0xb) returned -7 [0067.683] _wcsnicmp (_String1="advfirewall", _String2="?", _MaxCount=0xb) returned 34 [0067.683] _wcsnicmp (_String1="advfirewall", _String2="exec", _MaxCount=0xb) returned -4 [0067.683] _wcsnicmp (_String1="advfirewall", _String2="advfirewall", _MaxCount=0xb) returned 0 [0067.684] lstrcmpiW (lpString1="advfirewall", lpString2="namespace") returned -1 [0067.684] lstrcmpiW (lpString1="advfirewall", lpString2="branchcache") returned -1 [0067.684] lstrcmpiW (lpString1="advfirewall", lpString2="advfirewall") returned 0 [0067.684] GetProcessHeap () returned 0x21ac6e60000 [0067.684] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x18) returned 0x21ac6eac170 [0067.684] GetProcessHeap () returned 0x21ac6e60000 [0067.684] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x18) returned 0x21ac6eac550 [0067.684] GetProcessHeap () returned 0x21ac6e60000 [0067.684] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x5e) returned 0x21ac6eaca40 [0067.684] GetProcessHeap () returned 0x21ac6e60000 [0067.684] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x18) returned 0x21ac6eac350 [0067.684] GetProcessHeap () returned 0x21ac6e60000 [0067.684] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0xc) returned 0x21ac6eac390 [0067.684] wcscpy_s (in: _Destination=0x21ac6eac390, _SizeInWords=0x6, _Source="netsh" | out: _Destination="netsh") returned 0x0 [0067.684] GetProcessHeap () returned 0x21ac6e60000 [0067.684] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x18) returned 0x21ac6e70940 [0067.684] GetProcessHeap () returned 0x21ac6e60000 [0067.684] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x18) returned 0x21ac6ec82f0 [0067.684] wcscpy_s (in: _Destination=0x21ac6ec82f0, _SizeInWords=0xc, _Source="advfirewall" | out: _Destination="advfirewall") returned 0x0 [0067.684] GetProcessHeap () returned 0x21ac6e60000 [0067.684] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x18) returned 0x21ac6ec8070 [0067.684] GetProcessHeap () returned 0x21ac6e60000 [0067.684] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x8) returned 0x21ac6eb1220 [0067.684] wcscpy_s (in: _Destination=0x21ac6eb1220, _SizeInWords=0x4, _Source="set" | out: _Destination="set") returned 0x0 [0067.684] GetProcessHeap () returned 0x21ac6e60000 [0067.684] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x18) returned 0x21ac6ec81d0 [0067.684] GetProcessHeap () returned 0x21ac6e60000 [0067.684] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x1e) returned 0x21ac6ebfec0 [0067.684] wcscpy_s (in: _Destination=0x21ac6ebfec0, _SizeInWords=0xf, _Source="currentprofile" | out: _Destination="currentprofile") returned 0x0 [0067.684] GetProcessHeap () returned 0x21ac6e60000 [0067.684] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x18) returned 0x21ac6ec81f0 [0067.684] GetProcessHeap () returned 0x21ac6e60000 [0067.684] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0xc) returned 0x21ac6ec8310 [0067.684] wcscpy_s (in: _Destination=0x21ac6ec8310, _SizeInWords=0x6, _Source="state" | out: _Destination="state") returned 0x0 [0067.684] GetProcessHeap () returned 0x21ac6e60000 [0067.684] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x18) returned 0x21ac6ec8030 [0067.684] GetProcessHeap () returned 0x21ac6e60000 [0067.684] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x8) returned 0x21ac6eb1370 [0067.684] wcscpy_s (in: _Destination=0x21ac6eb1370, _SizeInWords=0x4, _Source="off" | out: _Destination="off") returned 0x0 [0067.684] GetProcessHeap () returned 0x21ac6e60000 [0067.684] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6eaca40) returned 1 [0067.684] GetProcessHeap () returned 0x21ac6e60000 [0067.685] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6eac550) returned 1 [0067.685] GetProcessHeap () returned 0x21ac6e60000 [0067.685] RtlFreeHeap (HeapHandle=0x21ac6e60000, Flags=0x0, BaseAddress=0x21ac6ec82f0) returned 1 [0067.685] GetProcessHeap () returned 0x21ac6e60000 [0067.685] RtlAllocateHeap (HeapHandle=0x21ac6e60000, Flags=0x0, Size=0x18) returned 0x21ac6ec8390 [0067.685] lstrcmpiW (lpString1="advfirewall", lpString2="routing") returned -1 [0067.685] lstrcmpiW (lpString1="advfirewall", lpString2="ip") returned -1 [0067.685] lstrcmpiW (lpString1="advfirewall", lpString2="ipv6") returned -1 [0067.685] lstrcmpiW (lpString1="advfirewall", lpString2="aaaa") returned 1 [0067.685] lstrcmpiW (lpString1="advfirewall", lpString2="ras") returned -1 [0067.685] _wcsnicmp (_String1="set", _String2="dum", _MaxCount=0x3) returned 15 [0067.685] _wcsnicmp (_String1="set", _String2="hel", _MaxCount=0x3) returned 11 [0067.685] _wcsnicmp (_String1="set", _String2="?", _MaxCount=0x3) returned 52 [0067.685] _wcsnicmp (_String1="set", _String2="res", _MaxCount=0x3) returned 1 [0067.685] _wcsnicmp (_String1="set", _String2="imp", _MaxCount=0x3) returned 10 [0067.685] _wcsnicmp (_String1="set", _String2="exp", _MaxCount=0x3) returned 14 [0067.685] _wcsnicmp (_String1="set", _String2="con", _MaxCount=0x3) returned 16 [0067.685] _wcsnicmp (_String1="set", _String2="fir", _MaxCount=0x3) returned 13 [0067.685] _wcsnicmp (_String1="set", _String2="mai", _MaxCount=0x3) returned 6 [0067.685] _wcsnicmp (_String1="set", _String2="mon", _MaxCount=0x3) returned 6 [0067.685] _wcsnicmp (_String1="set", _String2="set", _MaxCount=0x3) returned 0 [0067.685] _wcsnicmp (_String1="currentprofile", _String2="help", _MaxCount=0xe) returned -5 [0067.685] _wcsnicmp (_String1="currentprofile", _String2="?", _MaxCount=0xe) returned 36 [0067.685] wcstok (in: _String="domainprofile", _Delimiter=" ", _Context=0x189e8382960 | out: _String="domainprofile", _Context=0x189e8382960) returned="domainprofile" [0067.685] _wcsnicmp (_String1="currentprofile", _String2="domainprofile", _MaxCount=0xe) returned -1 [0067.685] wcstok (in: _String="privateprofile", _Delimiter=" ", _Context=0x189e8382bd0 | out: _String="privateprofile", _Context=0x189e8382bd0) returned="privateprofile" [0067.685] _wcsnicmp (_String1="currentprofile", _String2="privateprofile", _MaxCount=0xe) returned -13 [0067.685] wcstok (in: _String="publicprofile", _Delimiter=" ", _Context=0x189e83826f0 | out: _String="publicprofile", _Context=0x189e83826f0) returned="publicprofile" [0067.685] _wcsnicmp (_String1="currentprofile", _String2="publicprofile", _MaxCount=0xe) returned -13 [0067.685] wcstok (in: _String="currentprofile", _Delimiter=" ", _Context=0x189e8382750 | out: _String="currentprofile", _Context=0x189e8382750) returned="currentprofile" [0067.685] _wcsnicmp (_String1="currentprofile", _String2="currentprofile", _MaxCount=0xe) returned 0 [0067.685] wcstok (in: _String=0x0, _Delimiter=" ", _Context=0x65 | out: _String=0x0, _Context=0x65) returned 0x0 [0067.685] lstrcmpiW (lpString1="advfirewall", lpString2="netsh") returned -1 [0067.685] LdrStandardizeSystemPath () returned 0x7ff664f0bfc4 Thread: id = 30 os_tid = 0xd30 Thread: id = 31 os_tid = 0xd14 Thread: id = 36 os_tid = 0xf94 Thread: id = 37 os_tid = 0xaf0 Thread: id = 38 os_tid = 0x824 Process: id = "6" image_name = "shaofao.exe" filename = "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\shaofao.exe" page_root = "0x5585a000" os_pid = "0xdb4" os_integrity_level = "0x2000" os_privileges = "0x40800000" monitor_reason = "autostart" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\shaofao.exe\" " cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00012070" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 39 os_tid = 0xdb8 [0124.334] GetProcessHeap () returned 0x8a0000 [0124.334] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x30) returned 0x8b34b0 [0124.334] GetProcessHeap () returned 0x8a0000 [0124.334] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x3400) returned 0x8bf7c8 [0124.339] GetProcessHeap () returned 0x8a0000 [0124.339] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x204) returned 0x8bd0f0 [0124.339] GetProcessHeap () returned 0x8a0000 [0124.339] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10) returned 0x8be318 [0124.339] GetTickCount () returned 0x11373ce [0124.339] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x6ff678 | out: lpWSAData=0x6ff678) returned 0 [0124.470] GetProcessHeap () returned 0x8a0000 [0124.470] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1c) returned 0x8ab0b8 [0124.470] GetProcessHeap () returned 0x8a0000 [0124.470] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1c) returned 0x8ab108 [0124.470] GetVersion () returned 0x23f00206 [0124.470] GetCurrentProcess () returned 0xffffffff [0124.470] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x6ff5cc | out: TokenHandle=0x6ff5cc*=0x20c) returned 1 [0124.470] GetTokenInformation (in: TokenHandle=0x20c, TokenInformationClass=0x14, TokenInformation=0x6ff5c4, TokenInformationLength=0x4, ReturnLength=0x6ff5c8 | out: TokenInformation=0x6ff5c4, ReturnLength=0x6ff5c8) returned 1 [0124.470] CloseHandle (hObject=0x20c) returned 1 [0124.470] GetProcessHeap () returned 0x8a0000 [0124.470] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8ab1a8 [0124.470] GetProcessHeap () returned 0x8a0000 [0124.470] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c70f0 [0124.470] GetProcessHeap () returned 0x8a0000 [0124.470] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c7118 [0124.470] GetProcessHeap () returned 0x8a0000 [0124.470] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x8b1e08 [0124.470] GetProcessHeap () returned 0x8a0000 [0124.470] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b1e08 | out: hHeap=0x8a0000) returned 1 [0124.471] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c70f0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0124.471] GetProcessHeap () returned 0x8a0000 [0124.471] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7118 | out: hHeap=0x8a0000) returned 1 [0124.471] GetProcessHeap () returned 0x8a0000 [0124.471] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8ab1a8 | out: hHeap=0x8a0000) returned 1 [0124.471] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x6ff56c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x6ff56c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0124.471] GetProcessHeap () returned 0x8a0000 [0124.471] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c70f0 | out: hHeap=0x8a0000) returned 1 [0124.471] GetProcessHeap () returned 0x8a0000 [0124.471] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x8b2890 [0124.471] GetProcessHeap () returned 0x8a0000 [0124.471] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x8b2a40 [0124.471] GetProcessHeap () returned 0x8a0000 [0124.471] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x8b2a40, Size=0x72) returned 0x8ae538 [0124.471] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x0 [0124.471] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000000") returned 0x20c [0124.471] WaitForSingleObject (hHandle=0x20c, dwMilliseconds=0x0) returned 0x0 [0124.472] GetProcessHeap () returned 0x8a0000 [0124.472] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b2890 | out: hHeap=0x8a0000) returned 1 [0124.472] GetProcessHeap () returned 0x8a0000 [0124.472] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8ae538 | out: hHeap=0x8a0000) returned 1 [0124.472] GetProcessHeap () returned 0x8a0000 [0124.472] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8ab1a8 [0124.472] GetProcessHeap () returned 0x8a0000 [0124.472] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c7348 [0124.472] GetProcessHeap () returned 0x8a0000 [0124.472] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c6f60 [0124.472] GetProcessHeap () returned 0x8a0000 [0124.472] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x8b1e08 [0124.472] GetProcessHeap () returned 0x8a0000 [0124.472] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b1e08 | out: hHeap=0x8a0000) returned 1 [0124.472] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c7348, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0124.472] GetProcessHeap () returned 0x8a0000 [0124.472] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c6f60 | out: hHeap=0x8a0000) returned 1 [0124.472] GetProcessHeap () returned 0x8a0000 [0124.472] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8ab1a8 | out: hHeap=0x8a0000) returned 1 [0124.472] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x6ff554, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x6ff554*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0124.472] GetProcessHeap () returned 0x8a0000 [0124.472] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7348 | out: hHeap=0x8a0000) returned 1 [0124.472] GetProcessHeap () returned 0x8a0000 [0124.472] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x8b2968 [0124.472] GetProcessHeap () returned 0x8a0000 [0124.472] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x8b2a88 [0124.472] GetProcessHeap () returned 0x8a0000 [0124.472] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x8b2a88, Size=0x72) returned 0x8c6f88 [0124.472] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0124.472] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x210 [0124.472] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0x0) returned 0x0 [0124.473] GetProcessHeap () returned 0x8a0000 [0124.473] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b2968 | out: hHeap=0x8a0000) returned 1 [0124.473] GetProcessHeap () returned 0x8a0000 [0124.473] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c6f88 | out: hHeap=0x8a0000) returned 1 [0124.473] ReleaseMutex (hMutex=0x210) returned 1 [0124.473] CloseHandle (hObject=0x210) returned 1 [0124.473] GetProcessHeap () returned 0x8a0000 [0124.473] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20a) returned 0x8c76e8 [0124.473] GetProcessHeap () returned 0x8a0000 [0124.473] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x50) returned 0x8ae538 [0124.473] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x74c00000 [0124.473] GetProcAddress (hModule=0x74c00000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x74c16b30 [0124.473] Wow64DisableWow64FsRedirection (in: OldValue=0x6ff5c8 | out: OldValue=0x6ff5c8*=0x0) returned 1 [0124.473] GetProcessHeap () returned 0x8a0000 [0124.473] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8ae538 | out: hHeap=0x8a0000) returned 1 [0124.473] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x8c76e8, nSize=0x104 | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\shaofao.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\shaofao.exe")) returned 0x48 [0124.473] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\shaofao.exe", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x6ff570*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x6ff5b8 | out: lpCommandLine="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\shaofao.exe", lpProcessInformation=0x6ff5b8*(hProcess=0x214, hThread=0x210, dwProcessId=0xdc8, dwThreadId=0xdcc)) returned 1 [0124.518] CloseHandle (hObject=0x214) returned 1 [0124.518] CloseHandle (hObject=0x210) returned 1 [0124.518] GetProcessHeap () returned 0x8a0000 [0124.518] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x50) returned 0x8ae538 [0124.518] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x74c00000 [0124.518] GetProcAddress (hModule=0x74c00000, lpProcName="Wow64RevertWow64FsRedirection") returned 0x74c16b50 [0124.518] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0124.518] GetProcessHeap () returned 0x8a0000 [0124.518] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8ae538 | out: hHeap=0x8a0000) returned 1 [0124.518] GetProcessHeap () returned 0x8a0000 [0124.518] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c76e8 | out: hHeap=0x8a0000) returned 1 [0124.518] Sleep (dwMilliseconds=0x1388) [0129.682] GetProcessHeap () returned 0x8a0000 [0129.682] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x60) returned 0x8ae538 [0129.682] GetProcessHeap () returned 0x8a0000 [0129.682] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8ab1a8 [0129.682] GetProcessHeap () returned 0x8a0000 [0129.682] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c81b0 [0129.682] GetProcessHeap () returned 0x8a0000 [0129.682] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c8200 [0129.682] GetProcessHeap () returned 0x8a0000 [0129.682] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x8b1e08 [0129.682] GetProcessHeap () returned 0x8a0000 [0129.682] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b1e08 | out: hHeap=0x8a0000) returned 1 [0129.682] ExpandEnvironmentStringsW (in: lpSrc="%localappdata%", lpDst=0x8c81b0, nSize=0xf | out: lpDst="") returned 0x1e [0129.682] GetProcessHeap () returned 0x8a0000 [0129.682] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8200 | out: hHeap=0x8a0000) returned 1 [0129.682] GetProcessHeap () returned 0x8a0000 [0129.682] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x8c81b0, Size=0x3a) returned 0x8b2890 [0129.682] GetProcessHeap () returned 0x8a0000 [0129.682] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x3a) returned 0x8b2ba8 [0129.682] GetProcessHeap () returned 0x8a0000 [0129.682] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x8b1e08 [0129.682] GetProcessHeap () returned 0x8a0000 [0129.682] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b1e08 | out: hHeap=0x8a0000) returned 1 [0129.682] ExpandEnvironmentStringsW (in: lpSrc="%localappdata%", lpDst=0x8b2890, nSize=0x1d | out: lpDst="") returned 0x1e [0129.682] GetProcessHeap () returned 0x8a0000 [0129.682] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b2ba8 | out: hHeap=0x8a0000) returned 1 [0129.682] GetProcessHeap () returned 0x8a0000 [0129.682] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x8b2890, Size=0x72) returned 0x8c7408 [0129.682] GetProcessHeap () returned 0x8a0000 [0129.682] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x72) returned 0x8c7588 [0129.682] GetProcessHeap () returned 0x8a0000 [0129.682] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x8b1e08 [0129.682] GetProcessHeap () returned 0x8a0000 [0129.682] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b1e08 | out: hHeap=0x8a0000) returned 1 [0129.682] ExpandEnvironmentStringsW (in: lpSrc="%localappdata%", lpDst=0x8c7408, nSize=0x39 | out: lpDst="C:\\Users\\FD1HVy\\AppData\\Local") returned 0x1e [0129.682] GetProcessHeap () returned 0x8a0000 [0129.682] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7588 | out: hHeap=0x8a0000) returned 1 [0129.682] GetProcessHeap () returned 0x8a0000 [0129.682] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8ab1a8 | out: hHeap=0x8a0000) returned 1 [0129.682] GetProcessHeap () returned 0x8a0000 [0129.683] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x8b2b60 [0129.683] GetProcessHeap () returned 0x8a0000 [0129.683] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3e) returned 0x8b2ba8 [0129.683] GetProcessHeap () returned 0x8a0000 [0129.683] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x3e) returned 0x8b2a40 [0129.683] GetProcessHeap () returned 0x8a0000 [0129.683] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x8b1e08 [0129.683] GetProcessHeap () returned 0x8a0000 [0129.683] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x10) returned 0x8be330 [0129.683] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x6ff4ac | out: phkResult=0x6ff4ac*=0x214) returned 0x0 [0129.683] RegQueryValueExW (in: hKey=0x214, lpValueName="Startup", lpReserved=0x0, lpType=0x6ff4a8, lpData=0x8b2a40, lpcbData=0x6ff4b0*=0x3e | out: lpType=0x6ff4a8*=0x2, lpData=0x8b2a40*=0x47, lpcbData=0x6ff4b0*=0x98) returned 0xea [0129.683] RegCloseKey (hKey=0x214) returned 0x0 [0129.683] GetProcessHeap () returned 0x8a0000 [0129.683] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8be330 | out: hHeap=0x8a0000) returned 1 [0129.683] GetProcessHeap () returned 0x8a0000 [0129.683] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b1e08 | out: hHeap=0x8a0000) returned 1 [0129.683] GetProcessHeap () returned 0x8a0000 [0129.683] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b2a40 | out: hHeap=0x8a0000) returned 1 [0129.683] GetProcessHeap () returned 0x8a0000 [0129.683] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x8b2ba8, Size=0x7a) returned 0x8b1e08 [0129.683] GetProcessHeap () returned 0x8a0000 [0129.683] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x7a) returned 0x8ae898 [0129.683] GetProcessHeap () returned 0x8a0000 [0129.683] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x8b2110 [0129.683] GetProcessHeap () returned 0x8a0000 [0129.683] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x10) returned 0x8c78e0 [0129.684] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x6ff4ac | out: phkResult=0x6ff4ac*=0x214) returned 0x0 [0129.684] RegQueryValueExW (in: hKey=0x214, lpValueName="Startup", lpReserved=0x0, lpType=0x6ff4a8, lpData=0x8ae898, lpcbData=0x6ff4b0*=0x7a | out: lpType=0x6ff4a8*=0x2, lpData=0x8ae898*=0x10, lpcbData=0x6ff4b0*=0x98) returned 0xea [0129.684] RegCloseKey (hKey=0x214) returned 0x0 [0129.684] GetProcessHeap () returned 0x8a0000 [0129.684] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c78e0 | out: hHeap=0x8a0000) returned 1 [0129.684] GetProcessHeap () returned 0x8a0000 [0129.684] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b2110 | out: hHeap=0x8a0000) returned 1 [0129.684] GetProcessHeap () returned 0x8a0000 [0129.684] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8ae898 | out: hHeap=0x8a0000) returned 1 [0129.684] GetProcessHeap () returned 0x8a0000 [0129.684] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x8b1e08, Size=0xf2) returned 0x8b1260 [0129.685] GetProcessHeap () returned 0x8a0000 [0129.685] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0xf2) returned 0x8b00f0 [0129.685] GetProcessHeap () returned 0x8a0000 [0129.685] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x8b1e08 [0129.685] GetProcessHeap () returned 0x8a0000 [0129.685] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x10) returned 0x8c79b8 [0129.685] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x6ff4ac | out: phkResult=0x6ff4ac*=0x214) returned 0x0 [0129.685] RegQueryValueExW (in: hKey=0x214, lpValueName="Startup", lpReserved=0x0, lpType=0x6ff4a8, lpData=0x8b00f0, lpcbData=0x6ff4b0*=0xf2 | out: lpType=0x6ff4a8*=0x2, lpData="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x6ff4b0*=0x98) returned 0x0 [0129.685] RegCloseKey (hKey=0x214) returned 0x0 [0129.685] GetProcessHeap () returned 0x8a0000 [0129.685] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c79b8 | out: hHeap=0x8a0000) returned 1 [0129.685] GetProcessHeap () returned 0x8a0000 [0129.685] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8ab1a8 [0129.685] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x6ff4ac | out: phkResult=0x6ff4ac*=0x214) returned 0x0 [0129.685] RegQueryValueExW (in: hKey=0x214, lpValueName="Common Startup", lpReserved=0x0, lpType=0x6ff4a8, lpData=0x8b0188, lpcbData=0x6ff4b0*=0x5a | out: lpType=0x6ff4a8*=0x0, lpData=0x8b0188*=0x1a, lpcbData=0x6ff4b0*=0x5a) returned 0x2 [0129.685] RegCloseKey (hKey=0x214) returned 0x0 [0129.685] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x6ff4c0 | out: phkResult=0x6ff4c0*=0x214) returned 0x0 [0129.685] RegQueryValueExW (in: hKey=0x214, lpValueName="Common Startup", lpReserved=0x0, lpType=0x6ff4bc, lpData=0x8b0188, lpcbData=0x6ff4c4*=0x5a | out: lpType=0x6ff4bc*=0x2, lpData=0x8b0188*=0x1a, lpcbData=0x6ff4c4*=0x78) returned 0xea [0129.685] RegCloseKey (hKey=0x214) returned 0x0 [0129.685] GetProcessHeap () returned 0x8a0000 [0129.685] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8ab1a8 | out: hHeap=0x8a0000) returned 1 [0129.685] GetProcessHeap () returned 0x8a0000 [0129.685] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b1e08 | out: hHeap=0x8a0000) returned 1 [0129.686] GetProcessHeap () returned 0x8a0000 [0129.686] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b00f0 | out: hHeap=0x8a0000) returned 1 [0129.686] GetProcessHeap () returned 0x8a0000 [0129.686] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x8b1260, Size=0x1e2) returned 0x8be5c8 [0129.686] GetProcessHeap () returned 0x8a0000 [0129.686] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e2) returned 0x8c85c8 [0129.686] GetProcessHeap () returned 0x8a0000 [0129.686] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x8b1e08 [0129.686] GetProcessHeap () returned 0x8a0000 [0129.686] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x10) returned 0x8c79b8 [0129.686] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x6ff4ac | out: phkResult=0x6ff4ac*=0x214) returned 0x0 [0129.686] RegQueryValueExW (in: hKey=0x214, lpValueName="Startup", lpReserved=0x0, lpType=0x6ff4a8, lpData=0x8c85c8, lpcbData=0x6ff4b0*=0x1e2 | out: lpType=0x6ff4a8*=0x2, lpData="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x6ff4b0*=0x98) returned 0x0 [0129.687] RegCloseKey (hKey=0x214) returned 0x0 [0129.687] GetProcessHeap () returned 0x8a0000 [0129.687] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c79b8 | out: hHeap=0x8a0000) returned 1 [0129.687] GetProcessHeap () returned 0x8a0000 [0129.687] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8ab1a8 [0129.687] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x6ff4ac | out: phkResult=0x6ff4ac*=0x214) returned 0x0 [0129.687] RegQueryValueExW (in: hKey=0x214, lpValueName="Common Startup", lpReserved=0x0, lpType=0x6ff4a8, lpData=0x8c8660, lpcbData=0x6ff4b0*=0x14a | out: lpType=0x6ff4a8*=0x0, lpData=0x8c8660*=0x0, lpcbData=0x6ff4b0*=0x14a) returned 0x2 [0129.687] RegCloseKey (hKey=0x214) returned 0x0 [0129.687] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x6ff4c0 | out: phkResult=0x6ff4c0*=0x214) returned 0x0 [0129.687] RegQueryValueExW (in: hKey=0x214, lpValueName="Common Startup", lpReserved=0x0, lpType=0x6ff4bc, lpData=0x8c8660, lpcbData=0x6ff4c4*=0x14a | out: lpType=0x6ff4bc*=0x2, lpData="%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x6ff4c4*=0x78) returned 0x0 [0129.687] RegCloseKey (hKey=0x214) returned 0x0 [0129.687] GetProcessHeap () returned 0x8a0000 [0129.687] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8ab1a8 | out: hHeap=0x8a0000) returned 1 [0129.687] GetProcessHeap () returned 0x8a0000 [0129.687] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b1e08 | out: hHeap=0x8a0000) returned 1 [0129.687] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup;%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpDst=0x8be5c8, nSize=0xf1 | out: lpDst="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup;C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned 0x8b [0129.687] GetProcessHeap () returned 0x8a0000 [0129.687] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c85c8 | out: hHeap=0x8a0000) returned 1 [0129.687] GetProcessHeap () returned 0x8a0000 [0129.687] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b2b60 | out: hHeap=0x8a0000) returned 1 [0129.687] GetProcessHeap () returned 0x8a0000 [0129.688] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20a) returned 0x8c85c8 [0129.688] GetProcessHeap () returned 0x8a0000 [0129.688] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20a) returned 0x8c87e0 [0129.688] GetProcessHeap () returned 0x8a0000 [0129.688] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20a) returned 0x8c89f8 [0129.688] GetProcessHeap () returned 0x8a0000 [0129.688] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20a) returned 0x8c8c10 [0129.688] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x8c85c8, nSize=0x104 | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\shaofao.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\shaofao.exe")) returned 0x48 [0129.688] GetProcessHeap () returned 0x8a0000 [0129.688] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20a) returned 0x8c8e28 [0129.688] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x8c8e28, nSize=0x104 | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\shaofao.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\shaofao.exe")) returned 0x48 [0129.688] GetProcessHeap () returned 0x8a0000 [0129.688] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8e28 | out: hHeap=0x8a0000) returned 1 [0129.688] GetProcessHeap () returned 0x8a0000 [0129.688] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20a) returned 0x8c8e28 [0129.688] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x8c8e28, nSize=0x104 | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\shaofao.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\shaofao.exe")) returned 0x48 [0129.688] GetProcessHeap () returned 0x8a0000 [0129.688] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8e28 | out: hHeap=0x8a0000) returned 1 [0129.688] CopyFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\shaofao.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\shaofao.exe"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\shaofao.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\shaofao.exe"), bFailIfExists=0) returned 1 [0129.712] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x20106, phkResult=0x6ff5a8 | out: phkResult=0x6ff5a8*=0x214) returned 0x0 [0129.712] RegSetValueExW (hKey=0x214, lpValueName="shaofao", Reserved=0x0, dwType=0x1, lpData=0x8c87e0, cbData=0x52) returned 0x5 [0129.712] RegCloseKey (hKey=0x214) returned 0x0 [0129.712] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x20106, phkResult=0x6ff5a4 | out: phkResult=0x6ff5a4*=0x214) returned 0x0 [0129.712] RegSetValueExW (in: hKey=0x214, lpValueName="shaofao", Reserved=0x0, dwType=0x1, lpData="C:\\Users\\FD1HVy\\AppData\\Local\\shaofao.exe", cbData=0x52 | out: lpData="C:\\Users\\FD1HVy\\AppData\\Local\\shaofao.exe") returned 0x0 [0129.713] RegCloseKey (hKey=0x214) returned 0x0 [0129.713] GetProcessHeap () returned 0x8a0000 [0129.713] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x118) returned 0x8b2bf0 [0129.713] CopyFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\shaofao.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\shaofao.exe"), lpNewFileName="c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\shaofao.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\shaofao.exe"), bFailIfExists=1) returned 0 [0129.713] CopyFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\shaofao.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\shaofao.exe"), lpNewFileName="c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\shaofao.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\shaofao.exe"), bFailIfExists=1) returned 0 [0129.714] GetProcessHeap () returned 0x8a0000 [0129.714] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b2bf0 | out: hHeap=0x8a0000) returned 1 [0129.714] GetProcessHeap () returned 0x8a0000 [0129.714] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c85c8 | out: hHeap=0x8a0000) returned 1 [0129.714] GetProcessHeap () returned 0x8a0000 [0129.714] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c87e0 | out: hHeap=0x8a0000) returned 1 [0129.714] GetProcessHeap () returned 0x8a0000 [0129.714] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c89f8 | out: hHeap=0x8a0000) returned 1 [0129.714] GetProcessHeap () returned 0x8a0000 [0129.714] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8c10 | out: hHeap=0x8a0000) returned 1 [0129.714] GetProcessHeap () returned 0x8a0000 [0129.714] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8ae538 | out: hHeap=0x8a0000) returned 1 [0129.714] GetProcessHeap () returned 0x8a0000 [0129.714] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7408 | out: hHeap=0x8a0000) returned 1 [0129.714] GetProcessHeap () returned 0x8a0000 [0129.714] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8be5c8 | out: hHeap=0x8a0000) returned 1 [0129.714] GetProcessHeap () returned 0x8a0000 [0129.714] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c80c0 [0129.714] GetProcessHeap () returned 0x8a0000 [0129.714] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c7eb8 [0129.714] GetProcessHeap () returned 0x8a0000 [0129.714] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c7f58 [0129.714] GetProcessHeap () returned 0x8a0000 [0129.714] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x8b1e08 [0129.714] GetProcessHeap () returned 0x8a0000 [0129.714] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b1e08 | out: hHeap=0x8a0000) returned 1 [0129.714] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c7eb8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0129.714] GetProcessHeap () returned 0x8a0000 [0129.714] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7f58 | out: hHeap=0x8a0000) returned 1 [0129.714] GetProcessHeap () returned 0x8a0000 [0129.714] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c80c0 | out: hHeap=0x8a0000) returned 1 [0129.714] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x6ff5c4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x6ff5c4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0129.715] GetProcessHeap () returned 0x8a0000 [0129.715] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7eb8 | out: hHeap=0x8a0000) returned 1 [0129.715] GetProcessHeap () returned 0x8a0000 [0129.715] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x28) returned 0x8b6cd8 [0129.715] GetProcessHeap () returned 0x8a0000 [0129.715] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10) returned 0x8c7808 [0129.715] GetProcessHeap () returned 0x8a0000 [0129.715] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x60) returned 0x8ae538 [0129.715] GetProcessHeap () returned 0x8a0000 [0129.715] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x60) returned 0x8b1e08 [0129.715] GetProcessHeap () returned 0x8a0000 [0129.715] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x8b1e08, Size=0xbe) returned 0x8b1638 [0129.715] GetProcessHeap () returned 0x8a0000 [0129.715] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10) returned 0x8c7760 [0129.715] GetProcessHeap () returned 0x8a0000 [0129.715] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x180) returned 0x8b2220 [0129.715] GetProcessHeap () returned 0x8a0000 [0129.715] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x250) returned 0x8c85c8 [0129.715] GetProcessHeap () returned 0x8a0000 [0129.715] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x8b1e08 [0129.715] GetProcessHeap () returned 0x8a0000 [0129.715] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x84) returned 0x8ae898 [0129.715] GetProcessHeap () returned 0x8a0000 [0129.715] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x84) returned 0x8b2110 [0129.715] GetProcessHeap () returned 0x8a0000 [0129.715] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x8aea38 [0129.715] GetProcessHeap () returned 0x8a0000 [0129.715] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8aea38 | out: hHeap=0x8a0000) returned 1 [0129.715] ExpandEnvironmentStringsW (in: lpSrc="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys", lpDst=0x8ae898, nSize=0x42 | out: lpDst="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys") returned 0x42 [0129.715] GetProcessHeap () returned 0x8a0000 [0129.715] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b2110 | out: hHeap=0x8a0000) returned 1 [0129.715] GetProcessHeap () returned 0x8a0000 [0129.715] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b1e08 | out: hHeap=0x8a0000) returned 1 [0129.715] GetProcessHeap () returned 0x8a0000 [0129.715] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0xc0) returned 0x8aea38 [0129.715] GetProcessHeap () returned 0x8a0000 [0129.715] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0xb2) returned 0x8b2f00 [0129.715] GetProcessHeap () returned 0x8a0000 [0129.716] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0xb2) returned 0x8b1500 [0129.736] GetProcessHeap () returned 0x8a0000 [0129.736] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x8b1e08 [0129.736] GetProcessHeap () returned 0x8a0000 [0129.736] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b1e08 | out: hHeap=0x8a0000) returned 1 [0129.736] ExpandEnvironmentStringsW (in: lpSrc="C:\\Windows;C:\\ProgramData\\microsoft\\windows\\caches;C:\\Users\\WR\\microsoft\\windows\\caches;", lpDst=0x8b2f00, nSize=0x59 | out: lpDst="C:\\Windows;C:\\ProgramData\\microsoft\\windows\\caches;C:\\Users\\WR\\microsoft\\windows\\caches;") returned 0x59 [0129.736] GetProcessHeap () returned 0x8a0000 [0129.736] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b1500 | out: hHeap=0x8a0000) returned 1 [0129.736] GetProcessHeap () returned 0x8a0000 [0129.736] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8aea38 | out: hHeap=0x8a0000) returned 1 [0129.736] GetProcessHeap () returned 0x8a0000 [0129.736] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20a) returned 0x8c8820 [0129.736] GetProcessHeap () returned 0x8a0000 [0129.736] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20a) returned 0x8c8a38 [0129.736] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x8c8a38, nSize=0x104 | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\shaofao.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\shaofao.exe")) returned 0x48 [0129.736] GetProcessHeap () returned 0x8a0000 [0129.736] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8a38 | out: hHeap=0x8a0000) returned 1 [0129.736] GetProcessHeap () returned 0x8a0000 [0129.736] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x174) returned 0x8b1760 [0129.736] GetProcessHeap () returned 0x8a0000 [0129.736] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x8b1760, Size=0x3c2) returned 0x8c8a38 [0129.737] GetProcessHeap () returned 0x8a0000 [0129.737] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x86) returned 0x8b1e08 [0129.737] GetProcessHeap () returned 0x8a0000 [0129.737] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x8b1e08, Size=0x9e) returned 0x8b1e08 [0129.737] GetProcessHeap () returned 0x8a0000 [0129.737] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0xb4) returned 0x8aea38 [0129.737] GetProcessHeap () returned 0x8a0000 [0129.737] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8820 | out: hHeap=0x8a0000) returned 1 [0129.737] GetProcessHeap () returned 0x8a0000 [0129.737] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b2220 | out: hHeap=0x8a0000) returned 1 [0129.737] GetProcessHeap () returned 0x8a0000 [0129.737] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c85c8 | out: hHeap=0x8a0000) returned 1 [0129.737] GetProcessHeap () returned 0x8a0000 [0129.737] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8ae898 | out: hHeap=0x8a0000) returned 1 [0129.737] GetProcessHeap () returned 0x8a0000 [0129.737] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b2f00 | out: hHeap=0x8a0000) returned 1 [0129.737] GetProcessHeap () returned 0x8a0000 [0129.737] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7808 | out: hHeap=0x8a0000) returned 1 [0129.737] GetProcessHeap () returned 0x8a0000 [0129.737] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8ae538 | out: hHeap=0x8a0000) returned 1 [0129.737] GetProcessHeap () returned 0x8a0000 [0129.737] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c7e40 [0129.737] GetProcessHeap () returned 0x8a0000 [0129.737] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c81b0 [0129.737] GetProcessHeap () returned 0x8a0000 [0129.737] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c80e8 [0129.737] GetProcessHeap () returned 0x8a0000 [0129.737] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x8ae898 [0129.737] GetProcessHeap () returned 0x8a0000 [0129.737] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8ae898 | out: hHeap=0x8a0000) returned 1 [0129.737] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c81b0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0129.737] GetProcessHeap () returned 0x8a0000 [0129.737] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c80e8 | out: hHeap=0x8a0000) returned 1 [0129.737] GetProcessHeap () returned 0x8a0000 [0129.737] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7e40 | out: hHeap=0x8a0000) returned 1 [0129.737] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x6ff5c4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x6ff5c4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0129.738] GetProcessHeap () returned 0x8a0000 [0129.738] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81b0 | out: hHeap=0x8a0000) returned 1 [0129.738] GetProcessHeap () returned 0x8a0000 [0129.738] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x28) returned 0x8b6be8 [0129.738] GetProcessHeap () returned 0x8a0000 [0129.738] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10) returned 0x8c7898 [0129.738] GetProcessHeap () returned 0x8a0000 [0129.738] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x60) returned 0x8ae538 [0129.738] GetProcessHeap () returned 0x8a0000 [0129.738] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x60) returned 0x8ae898 [0129.738] GetProcessHeap () returned 0x8a0000 [0129.738] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x8ae898, Size=0xbe) returned 0x8b2f00 [0129.738] GetProcessHeap () returned 0x8a0000 [0129.738] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10) returned 0x8c79b8 [0129.738] GetProcessHeap () returned 0x8a0000 [0129.738] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x180) returned 0x8b2220 [0129.738] GetProcessHeap () returned 0x8a0000 [0129.738] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x250) returned 0x8c85c8 [0129.738] GetProcessHeap () returned 0x8a0000 [0129.738] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x8ae898 [0129.738] GetProcessHeap () returned 0x8a0000 [0129.738] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x84) returned 0x8b2110 [0129.738] GetProcessHeap () returned 0x8a0000 [0129.738] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x84) returned 0x8b1500 [0129.738] GetProcessHeap () returned 0x8a0000 [0129.738] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x8b13c0 [0129.738] GetProcessHeap () returned 0x8a0000 [0129.738] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b13c0 | out: hHeap=0x8a0000) returned 1 [0129.738] ExpandEnvironmentStringsW (in: lpSrc="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys", lpDst=0x8b2110, nSize=0x42 | out: lpDst="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys") returned 0x42 [0129.738] GetProcessHeap () returned 0x8a0000 [0129.738] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b1500 | out: hHeap=0x8a0000) returned 1 [0129.738] GetProcessHeap () returned 0x8a0000 [0129.738] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8ae898 | out: hHeap=0x8a0000) returned 1 [0129.738] GetProcessHeap () returned 0x8a0000 [0129.738] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0xc0) returned 0x8b1500 [0129.738] GetProcessHeap () returned 0x8a0000 [0129.738] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0xb2) returned 0x8b13c0 [0129.738] GetProcessHeap () returned 0x8a0000 [0129.738] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0xb2) returned 0x8b2db8 [0129.738] GetProcessHeap () returned 0x8a0000 [0129.738] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x8ae898 [0129.739] GetProcessHeap () returned 0x8a0000 [0129.739] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8ae898 | out: hHeap=0x8a0000) returned 1 [0129.739] ExpandEnvironmentStringsW (in: lpSrc="C:\\Windows;C:\\ProgramData\\microsoft\\windows\\caches;C:\\Users\\WR\\microsoft\\windows\\caches;", lpDst=0x8b13c0, nSize=0x59 | out: lpDst="C:\\Windows;C:\\ProgramData\\microsoft\\windows\\caches;C:\\Users\\WR\\microsoft\\windows\\caches;") returned 0x59 [0129.739] GetProcessHeap () returned 0x8a0000 [0129.739] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b2db8 | out: hHeap=0x8a0000) returned 1 [0129.739] GetProcessHeap () returned 0x8a0000 [0129.739] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b1500 | out: hHeap=0x8a0000) returned 1 [0129.739] GetProcessHeap () returned 0x8a0000 [0129.739] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20a) returned 0x8c8820 [0129.739] GetProcessHeap () returned 0x8a0000 [0129.739] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20a) returned 0x8c8e08 [0129.739] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x8c8e08, nSize=0x104 | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\shaofao.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\shaofao.exe")) returned 0x48 [0129.739] GetProcessHeap () returned 0x8a0000 [0129.739] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8e08 | out: hHeap=0x8a0000) returned 1 [0129.739] GetProcessHeap () returned 0x8a0000 [0129.739] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x174) returned 0x8b1760 [0129.739] GetProcessHeap () returned 0x8a0000 [0129.739] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x252) returned 0x8c8e08 [0129.739] GetProcessHeap () returned 0x8a0000 [0129.739] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x86) returned 0x8ae898 [0129.739] GetProcessHeap () returned 0x8a0000 [0129.739] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x8ae898, Size=0x9e) returned 0x8ae898 [0129.739] GetProcessHeap () returned 0x8a0000 [0129.739] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0xb4) returned 0x8b1500 [0129.739] GetProcessHeap () returned 0x8a0000 [0129.739] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8820 | out: hHeap=0x8a0000) returned 1 [0129.739] GetProcessHeap () returned 0x8a0000 [0129.739] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b2220 | out: hHeap=0x8a0000) returned 1 [0129.739] GetProcessHeap () returned 0x8a0000 [0129.739] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c85c8 | out: hHeap=0x8a0000) returned 1 [0129.739] GetProcessHeap () returned 0x8a0000 [0129.739] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b2110 | out: hHeap=0x8a0000) returned 1 [0129.739] GetProcessHeap () returned 0x8a0000 [0129.739] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b13c0 | out: hHeap=0x8a0000) returned 1 [0129.739] GetProcessHeap () returned 0x8a0000 [0129.739] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7898 | out: hHeap=0x8a0000) returned 1 [0129.739] GetProcessHeap () returned 0x8a0000 [0129.739] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8ae538 | out: hHeap=0x8a0000) returned 1 [0129.739] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x262013, lpParameter=0x6ff5f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x214 [0129.740] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x261fab, lpParameter=0x6ff600, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21c [0129.740] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x261e4e, lpParameter=0x6ff60c, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x244 [0129.741] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x261859, lpParameter=0x6ff600, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x248 [0129.741] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x26197c, lpParameter=0x6ff600, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24c [0129.742] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0 [0156.993] WaitForMultipleObjects (nCount=0x4, lpHandles=0x6ff618*=0x214, bWaitAll=1, dwMilliseconds=0xffffffff) Thread: id = 40 os_tid = 0xdbc Thread: id = 70 os_tid = 0xe88 [0129.821] GetVersion () returned 0x23f00206 [0129.821] GetCurrentProcess () returned 0xffffffff [0129.821] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x241fa40 | out: TokenHandle=0x241fa40*=0x250) returned 1 [0129.821] GetTokenInformation (in: TokenHandle=0x250, TokenInformationClass=0x14, TokenInformation=0x241fa38, TokenInformationLength=0x4, ReturnLength=0x241fa3c | out: TokenInformation=0x241fa38, ReturnLength=0x241fa3c) returned 1 [0129.821] CloseHandle (hObject=0x250) returned 1 [0129.821] GetProcessHeap () returned 0x8a0000 [0129.821] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c8020 [0129.821] GetProcessHeap () returned 0x8a0000 [0129.821] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c8138 [0129.821] GetProcessHeap () returned 0x8a0000 [0129.821] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c7df0 [0129.821] GetProcessHeap () returned 0x8a0000 [0129.821] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x8b2110 [0129.821] GetProcessHeap () returned 0x8a0000 [0129.821] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b2110 | out: hHeap=0x8a0000) returned 1 [0129.821] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c8138, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0129.821] GetProcessHeap () returned 0x8a0000 [0129.821] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7df0 | out: hHeap=0x8a0000) returned 1 [0129.821] GetProcessHeap () returned 0x8a0000 [0129.821] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8020 | out: hHeap=0x8a0000) returned 1 [0129.821] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0129.822] GetProcessHeap () returned 0x8a0000 [0129.822] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8138 | out: hHeap=0x8a0000) returned 1 [0129.822] GetProcessHeap () returned 0x8a0000 [0129.822] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x8b2a88 [0129.822] GetProcessHeap () returned 0x8a0000 [0129.822] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x8b2b18 [0129.822] GetProcessHeap () returned 0x8a0000 [0129.822] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x8b2b18, Size=0x72) returned 0x8c6f88 [0129.822] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0129.822] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x250 [0129.822] WaitForSingleObject (hHandle=0x250, dwMilliseconds=0x0) returned 0x0 [0129.822] GetProcessHeap () returned 0x8a0000 [0129.822] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b2a88 | out: hHeap=0x8a0000) returned 1 [0129.822] GetProcessHeap () returned 0x8a0000 [0129.822] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c6f88 | out: hHeap=0x8a0000) returned 1 [0129.822] ReleaseMutex (hMutex=0x250) returned 1 [0129.822] CloseHandle (hObject=0x250) returned 1 [0129.822] Sleep (dwMilliseconds=0x3e8) [0131.088] GetProcessHeap () returned 0x8a0000 [0131.088] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c82a0 [0131.088] GetProcessHeap () returned 0x8a0000 [0131.088] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c81b0 [0131.088] GetProcessHeap () returned 0x8a0000 [0131.088] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c8070 [0131.088] GetProcessHeap () returned 0x8a0000 [0131.088] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x8b12c8 [0131.088] GetProcessHeap () returned 0x8a0000 [0131.088] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b12c8 | out: hHeap=0x8a0000) returned 1 [0131.088] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c81b0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0131.088] GetProcessHeap () returned 0x8a0000 [0131.088] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8070 | out: hHeap=0x8a0000) returned 1 [0131.089] GetProcessHeap () returned 0x8a0000 [0131.089] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c82a0 | out: hHeap=0x8a0000) returned 1 [0131.089] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0131.089] GetProcessHeap () returned 0x8a0000 [0131.089] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81b0 | out: hHeap=0x8a0000) returned 1 [0131.089] GetProcessHeap () returned 0x8a0000 [0131.089] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x9711e8 [0131.089] GetProcessHeap () returned 0x8a0000 [0131.089] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x970c90 [0131.089] GetProcessHeap () returned 0x8a0000 [0131.089] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x970c90, Size=0x72) returned 0x8c7408 [0131.089] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0131.100] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x35c [0131.109] WaitForSingleObject (hHandle=0x35c, dwMilliseconds=0x0) returned 0x0 [0131.109] GetProcessHeap () returned 0x8a0000 [0131.109] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x9711e8 | out: hHeap=0x8a0000) returned 1 [0131.109] GetProcessHeap () returned 0x8a0000 [0131.109] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7408 | out: hHeap=0x8a0000) returned 1 [0131.109] ReleaseMutex (hMutex=0x35c) returned 1 [0131.109] CloseHandle (hObject=0x35c) returned 1 [0131.109] Sleep (dwMilliseconds=0x3e8) [0132.251] GetProcessHeap () returned 0x8a0000 [0132.251] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c82a0 [0132.252] GetProcessHeap () returned 0x8a0000 [0132.252] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c8070 [0132.252] GetProcessHeap () returned 0x8a0000 [0132.252] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c81b0 [0132.252] GetProcessHeap () returned 0x8a0000 [0132.252] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x8b1260 [0132.304] GetProcessHeap () returned 0x8a0000 [0132.304] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b1260 | out: hHeap=0x8a0000) returned 1 [0132.304] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c8070, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0132.304] GetProcessHeap () returned 0x8a0000 [0132.304] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81b0 | out: hHeap=0x8a0000) returned 1 [0132.304] GetProcessHeap () returned 0x8a0000 [0132.304] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c82a0 | out: hHeap=0x8a0000) returned 1 [0132.304] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0132.305] GetProcessHeap () returned 0x8a0000 [0132.305] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8070 | out: hHeap=0x8a0000) returned 1 [0132.305] GetProcessHeap () returned 0x8a0000 [0132.305] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x970df8 [0132.305] GetProcessHeap () returned 0x8a0000 [0132.305] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x970ff0 [0132.305] GetProcessHeap () returned 0x8a0000 [0132.305] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x970ff0, Size=0x72) returned 0x8c7008 [0132.305] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0132.305] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x354 [0132.305] WaitForSingleObject (hHandle=0x354, dwMilliseconds=0x0) returned 0x0 [0132.305] GetProcessHeap () returned 0x8a0000 [0132.305] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x970df8 | out: hHeap=0x8a0000) returned 1 [0132.305] GetProcessHeap () returned 0x8a0000 [0132.305] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7008 | out: hHeap=0x8a0000) returned 1 [0132.305] ReleaseMutex (hMutex=0x354) returned 1 [0132.305] CloseHandle (hObject=0x354) returned 1 [0132.305] Sleep (dwMilliseconds=0x3e8) [0133.582] GetProcessHeap () returned 0x8a0000 [0133.598] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c82c8 [0133.598] GetProcessHeap () returned 0x8a0000 [0133.598] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c81d8 [0133.598] GetProcessHeap () returned 0x8a0000 [0133.598] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c8070 [0133.599] GetProcessHeap () returned 0x8a0000 [0133.599] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x9926a0 [0133.599] GetProcessHeap () returned 0x8a0000 [0133.599] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x9926a0 | out: hHeap=0x8a0000) returned 1 [0133.599] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c81d8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0133.599] GetProcessHeap () returned 0x8a0000 [0133.599] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8070 | out: hHeap=0x8a0000) returned 1 [0133.599] GetProcessHeap () returned 0x8a0000 [0133.599] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c82c8 | out: hHeap=0x8a0000) returned 1 [0133.599] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0133.624] GetProcessHeap () returned 0x8a0000 [0133.624] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81d8 | out: hHeap=0x8a0000) returned 1 [0133.624] GetProcessHeap () returned 0x8a0000 [0133.624] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x970c48 [0133.624] GetProcessHeap () returned 0x8a0000 [0133.624] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x971110 [0133.624] GetProcessHeap () returned 0x8a0000 [0133.624] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x971110, Size=0x72) returned 0x8c7508 [0133.624] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0133.624] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x370 [0133.625] WaitForSingleObject (hHandle=0x370, dwMilliseconds=0x0) returned 0x0 [0133.625] GetProcessHeap () returned 0x8a0000 [0133.625] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x970c48 | out: hHeap=0x8a0000) returned 1 [0133.625] GetProcessHeap () returned 0x8a0000 [0133.625] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7508 | out: hHeap=0x8a0000) returned 1 [0133.625] ReleaseMutex (hMutex=0x370) returned 1 [0133.625] CloseHandle (hObject=0x370) returned 1 [0133.626] Sleep (dwMilliseconds=0x3e8) [0134.874] GetProcessHeap () returned 0x8a0000 [0134.874] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c8070 [0134.874] GetProcessHeap () returned 0x8a0000 [0134.874] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c81b0 [0134.874] GetProcessHeap () returned 0x8a0000 [0134.874] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c81d8 [0134.875] GetProcessHeap () returned 0x8a0000 [0134.875] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x992278 [0134.875] GetProcessHeap () returned 0x8a0000 [0134.875] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x992278 | out: hHeap=0x8a0000) returned 1 [0134.875] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c81b0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0134.875] GetProcessHeap () returned 0x8a0000 [0134.875] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81d8 | out: hHeap=0x8a0000) returned 1 [0134.875] GetProcessHeap () returned 0x8a0000 [0134.875] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8070 | out: hHeap=0x8a0000) returned 1 [0134.875] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0134.875] GetProcessHeap () returned 0x8a0000 [0134.875] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81b0 | out: hHeap=0x8a0000) returned 1 [0134.875] GetProcessHeap () returned 0x8a0000 [0134.875] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x970e40 [0134.875] GetProcessHeap () returned 0x8a0000 [0134.875] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x970ff0 [0134.875] GetProcessHeap () returned 0x8a0000 [0134.875] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x970ff0, Size=0x72) returned 0x8c7588 [0134.875] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0134.875] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x378 [0134.876] WaitForSingleObject (hHandle=0x378, dwMilliseconds=0x0) returned 0x0 [0134.876] GetProcessHeap () returned 0x8a0000 [0134.876] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x970e40 | out: hHeap=0x8a0000) returned 1 [0134.876] GetProcessHeap () returned 0x8a0000 [0134.876] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7588 | out: hHeap=0x8a0000) returned 1 [0134.876] ReleaseMutex (hMutex=0x378) returned 1 [0134.876] CloseHandle (hObject=0x378) returned 1 [0134.876] Sleep (dwMilliseconds=0x3e8) [0136.174] GetProcessHeap () returned 0x8a0000 [0136.174] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c8070 [0136.174] GetProcessHeap () returned 0x8a0000 [0136.174] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c81b0 [0136.174] GetProcessHeap () returned 0x8a0000 [0136.174] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c82c8 [0136.174] GetProcessHeap () returned 0x8a0000 [0136.174] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x991c88 [0136.174] GetProcessHeap () returned 0x8a0000 [0136.174] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x991c88 | out: hHeap=0x8a0000) returned 1 [0136.176] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c81b0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0136.176] GetProcessHeap () returned 0x8a0000 [0136.176] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c82c8 | out: hHeap=0x8a0000) returned 1 [0136.176] GetProcessHeap () returned 0x8a0000 [0136.176] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8070 | out: hHeap=0x8a0000) returned 1 [0136.176] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0136.176] GetProcessHeap () returned 0x8a0000 [0136.176] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81b0 | out: hHeap=0x8a0000) returned 1 [0136.176] GetProcessHeap () returned 0x8a0000 [0136.176] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x970f60 [0136.176] GetProcessHeap () returned 0x8a0000 [0136.176] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x971038 [0136.177] GetProcessHeap () returned 0x8a0000 [0136.177] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x971038, Size=0x72) returned 0x8c7608 [0136.177] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0136.177] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x374 [0136.177] WaitForSingleObject (hHandle=0x374, dwMilliseconds=0x0) returned 0x0 [0136.177] GetProcessHeap () returned 0x8a0000 [0136.177] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x970f60 | out: hHeap=0x8a0000) returned 1 [0136.177] GetProcessHeap () returned 0x8a0000 [0136.177] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7608 | out: hHeap=0x8a0000) returned 1 [0136.177] ReleaseMutex (hMutex=0x374) returned 1 [0136.177] CloseHandle (hObject=0x374) returned 1 [0136.177] Sleep (dwMilliseconds=0x3e8) [0137.340] GetProcessHeap () returned 0x8a0000 [0137.340] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c81b0 [0137.340] GetProcessHeap () returned 0x8a0000 [0137.340] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c81d8 [0137.340] GetProcessHeap () returned 0x8a0000 [0137.340] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c8070 [0137.341] GetProcessHeap () returned 0x8a0000 [0137.352] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x9923a8 [0137.354] GetProcessHeap () returned 0x8a0000 [0137.354] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x9923a8 | out: hHeap=0x8a0000) returned 1 [0137.354] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c81d8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0137.354] GetProcessHeap () returned 0x8a0000 [0137.354] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8070 | out: hHeap=0x8a0000) returned 1 [0137.354] GetProcessHeap () returned 0x8a0000 [0137.354] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81b0 | out: hHeap=0x8a0000) returned 1 [0137.354] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0137.354] GetProcessHeap () returned 0x8a0000 [0137.355] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81d8 | out: hHeap=0x8a0000) returned 1 [0137.355] GetProcessHeap () returned 0x8a0000 [0137.355] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x9711a0 [0137.355] GetProcessHeap () returned 0x8a0000 [0137.355] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x9711e8 [0137.355] GetProcessHeap () returned 0x8a0000 [0137.355] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x9711e8, Size=0x72) returned 0x8c7488 [0137.355] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0137.355] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x374 [0137.355] WaitForSingleObject (hHandle=0x374, dwMilliseconds=0x0) returned 0x0 [0137.355] GetProcessHeap () returned 0x8a0000 [0137.355] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x9711a0 | out: hHeap=0x8a0000) returned 1 [0137.355] GetProcessHeap () returned 0x8a0000 [0137.355] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7488 | out: hHeap=0x8a0000) returned 1 [0137.355] ReleaseMutex (hMutex=0x374) returned 1 [0137.355] CloseHandle (hObject=0x374) returned 1 [0137.355] Sleep (dwMilliseconds=0x3e8) [0138.599] GetProcessHeap () returned 0x8a0000 [0138.599] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c8070 [0138.599] GetProcessHeap () returned 0x8a0000 [0138.599] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c81b0 [0138.599] GetProcessHeap () returned 0x8a0000 [0138.599] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c81d8 [0138.599] GetProcessHeap () returned 0x8a0000 [0138.599] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x992018 [0138.599] GetProcessHeap () returned 0x8a0000 [0138.599] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x992018 | out: hHeap=0x8a0000) returned 1 [0138.599] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c81b0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0138.599] GetProcessHeap () returned 0x8a0000 [0138.599] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81d8 | out: hHeap=0x8a0000) returned 1 [0138.599] GetProcessHeap () returned 0x8a0000 [0138.599] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8070 | out: hHeap=0x8a0000) returned 1 [0138.600] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0138.617] GetProcessHeap () returned 0x8a0000 [0138.617] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81b0 | out: hHeap=0x8a0000) returned 1 [0138.617] GetProcessHeap () returned 0x8a0000 [0138.621] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x971080 [0138.621] GetProcessHeap () returned 0x8a0000 [0138.621] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x970c00 [0138.621] GetProcessHeap () returned 0x8a0000 [0138.621] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x970c00, Size=0x72) returned 0x8c7588 [0138.621] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0138.621] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x36c [0138.621] WaitForSingleObject (hHandle=0x36c, dwMilliseconds=0x0) returned 0x0 [0138.622] GetProcessHeap () returned 0x8a0000 [0138.622] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x971080 | out: hHeap=0x8a0000) returned 1 [0138.622] GetProcessHeap () returned 0x8a0000 [0138.622] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7588 | out: hHeap=0x8a0000) returned 1 [0138.622] ReleaseMutex (hMutex=0x36c) returned 1 [0138.622] CloseHandle (hObject=0x36c) returned 1 [0138.623] Sleep (dwMilliseconds=0x3e8) [0139.856] GetProcessHeap () returned 0x8a0000 [0139.856] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c8070 [0139.856] GetProcessHeap () returned 0x8a0000 [0139.856] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c81b0 [0139.856] GetProcessHeap () returned 0x8a0000 [0139.856] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c81d8 [0139.856] GetProcessHeap () returned 0x8a0000 [0139.856] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x992278 [0139.856] GetProcessHeap () returned 0x8a0000 [0139.856] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x992278 | out: hHeap=0x8a0000) returned 1 [0139.856] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c81b0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0139.856] GetProcessHeap () returned 0x8a0000 [0139.856] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81d8 | out: hHeap=0x8a0000) returned 1 [0139.856] GetProcessHeap () returned 0x8a0000 [0139.856] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8070 | out: hHeap=0x8a0000) returned 1 [0139.856] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0139.856] GetProcessHeap () returned 0x8a0000 [0139.856] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81b0 | out: hHeap=0x8a0000) returned 1 [0139.856] GetProcessHeap () returned 0x8a0000 [0139.856] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x9711e8 [0139.856] GetProcessHeap () returned 0x8a0000 [0139.856] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x970e88 [0139.856] GetProcessHeap () returned 0x8a0000 [0139.857] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x970e88, Size=0x72) returned 0x8c7388 [0139.857] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0139.857] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x368 [0139.857] WaitForSingleObject (hHandle=0x368, dwMilliseconds=0x0) returned 0x0 [0139.857] GetProcessHeap () returned 0x8a0000 [0139.857] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x9711e8 | out: hHeap=0x8a0000) returned 1 [0139.857] GetProcessHeap () returned 0x8a0000 [0139.857] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7388 | out: hHeap=0x8a0000) returned 1 [0139.857] ReleaseMutex (hMutex=0x368) returned 1 [0139.857] CloseHandle (hObject=0x368) returned 1 [0139.857] Sleep (dwMilliseconds=0x3e8) [0141.240] GetProcessHeap () returned 0x8a0000 [0141.240] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c82c8 [0141.240] GetProcessHeap () returned 0x8a0000 [0141.240] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c8070 [0141.240] GetProcessHeap () returned 0x8a0000 [0141.240] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c81b0 [0141.240] GetProcessHeap () returned 0x8a0000 [0141.240] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x992868 [0141.240] GetProcessHeap () returned 0x8a0000 [0141.240] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x992868 | out: hHeap=0x8a0000) returned 1 [0141.240] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c8070, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0141.240] GetProcessHeap () returned 0x8a0000 [0141.241] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81b0 | out: hHeap=0x8a0000) returned 1 [0141.241] GetProcessHeap () returned 0x8a0000 [0141.241] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c82c8 | out: hHeap=0x8a0000) returned 1 [0141.241] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0141.241] GetProcessHeap () returned 0x8a0000 [0141.241] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8070 | out: hHeap=0x8a0000) returned 1 [0141.241] GetProcessHeap () returned 0x8a0000 [0141.241] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x970cd8 [0141.241] GetProcessHeap () returned 0x8a0000 [0141.241] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x971038 [0141.241] GetProcessHeap () returned 0x8a0000 [0141.241] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x971038, Size=0x72) returned 0x8c7288 [0141.241] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0141.241] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x348 [0141.241] WaitForSingleObject (hHandle=0x348, dwMilliseconds=0x0) returned 0x0 [0141.241] GetProcessHeap () returned 0x8a0000 [0141.241] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x970cd8 | out: hHeap=0x8a0000) returned 1 [0141.241] GetProcessHeap () returned 0x8a0000 [0141.241] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7288 | out: hHeap=0x8a0000) returned 1 [0141.241] ReleaseMutex (hMutex=0x348) returned 1 [0141.241] CloseHandle (hObject=0x348) returned 1 [0141.242] Sleep (dwMilliseconds=0x3e8) [0143.080] GetProcessHeap () returned 0x8a0000 [0143.080] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c82c8 [0143.080] GetProcessHeap () returned 0x8a0000 [0143.080] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c81b0 [0143.080] GetProcessHeap () returned 0x8a0000 [0143.081] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c8070 [0143.081] GetProcessHeap () returned 0x8a0000 [0143.081] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x9924d8 [0143.081] GetProcessHeap () returned 0x8a0000 [0143.081] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x9924d8 | out: hHeap=0x8a0000) returned 1 [0143.081] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c81b0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0143.081] GetProcessHeap () returned 0x8a0000 [0143.081] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8070 | out: hHeap=0x8a0000) returned 1 [0143.081] GetProcessHeap () returned 0x8a0000 [0143.081] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c82c8 | out: hHeap=0x8a0000) returned 1 [0143.081] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0143.081] GetProcessHeap () returned 0x8a0000 [0143.081] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81b0 | out: hHeap=0x8a0000) returned 1 [0143.081] GetProcessHeap () returned 0x8a0000 [0143.081] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x9710c8 [0143.081] GetProcessHeap () returned 0x8a0000 [0143.082] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x970ff0 [0143.082] GetProcessHeap () returned 0x8a0000 [0143.082] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x970ff0, Size=0x72) returned 0x8c7408 [0143.082] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0143.082] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x384 [0143.082] WaitForSingleObject (hHandle=0x384, dwMilliseconds=0x0) returned 0x0 [0143.082] GetProcessHeap () returned 0x8a0000 [0143.082] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x9710c8 | out: hHeap=0x8a0000) returned 1 [0143.082] GetProcessHeap () returned 0x8a0000 [0143.082] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7408 | out: hHeap=0x8a0000) returned 1 [0143.082] ReleaseMutex (hMutex=0x384) returned 1 [0143.082] CloseHandle (hObject=0x384) returned 1 [0143.082] Sleep (dwMilliseconds=0x3e8) [0144.329] GetProcessHeap () returned 0x8a0000 [0144.329] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c81d8 [0144.329] GetProcessHeap () returned 0x8a0000 [0144.329] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c82c8 [0144.329] GetProcessHeap () returned 0x8a0000 [0144.329] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c81b0 [0144.329] GetProcessHeap () returned 0x8a0000 [0144.329] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x9921e0 [0144.329] GetProcessHeap () returned 0x8a0000 [0144.329] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x9921e0 | out: hHeap=0x8a0000) returned 1 [0144.329] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c82c8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0144.329] GetProcessHeap () returned 0x8a0000 [0144.329] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81b0 | out: hHeap=0x8a0000) returned 1 [0144.329] GetProcessHeap () returned 0x8a0000 [0144.329] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81d8 | out: hHeap=0x8a0000) returned 1 [0144.329] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0144.330] GetProcessHeap () returned 0x8a0000 [0144.330] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c82c8 | out: hHeap=0x8a0000) returned 1 [0144.330] GetProcessHeap () returned 0x8a0000 [0144.330] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x970e88 [0144.330] GetProcessHeap () returned 0x8a0000 [0144.330] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x970f60 [0144.330] GetProcessHeap () returned 0x8a0000 [0144.330] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x970f60, Size=0x72) returned 0x8c7288 [0144.330] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0144.330] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x348 [0144.330] WaitForSingleObject (hHandle=0x348, dwMilliseconds=0x0) returned 0x0 [0144.330] GetProcessHeap () returned 0x8a0000 [0144.330] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x970e88 | out: hHeap=0x8a0000) returned 1 [0144.330] GetProcessHeap () returned 0x8a0000 [0144.331] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7288 | out: hHeap=0x8a0000) returned 1 [0144.331] ReleaseMutex (hMutex=0x348) returned 1 [0144.331] CloseHandle (hObject=0x348) returned 1 [0144.331] Sleep (dwMilliseconds=0x3e8) [0145.526] GetProcessHeap () returned 0x8a0000 [0145.526] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c82c8 [0145.526] GetProcessHeap () returned 0x8a0000 [0145.526] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c81d8 [0145.526] GetProcessHeap () returned 0x8a0000 [0145.526] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c8070 [0145.526] GetProcessHeap () returned 0x8a0000 [0145.527] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x992868 [0145.527] GetProcessHeap () returned 0x8a0000 [0145.527] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x992868 | out: hHeap=0x8a0000) returned 1 [0145.527] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c81d8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0145.527] GetProcessHeap () returned 0x8a0000 [0145.527] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8070 | out: hHeap=0x8a0000) returned 1 [0145.527] GetProcessHeap () returned 0x8a0000 [0145.527] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c82c8 | out: hHeap=0x8a0000) returned 1 [0145.527] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0145.528] GetProcessHeap () returned 0x8a0000 [0145.528] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81d8 | out: hHeap=0x8a0000) returned 1 [0145.528] GetProcessHeap () returned 0x8a0000 [0145.528] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x970e88 [0145.528] GetProcessHeap () returned 0x8a0000 [0145.528] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x970f60 [0145.528] GetProcessHeap () returned 0x8a0000 [0145.528] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x970f60, Size=0x72) returned 0x8c7088 [0145.528] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0145.529] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x374 [0145.529] WaitForSingleObject (hHandle=0x374, dwMilliseconds=0x0) returned 0x0 [0145.529] GetProcessHeap () returned 0x8a0000 [0145.529] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x970e88 | out: hHeap=0x8a0000) returned 1 [0145.529] GetProcessHeap () returned 0x8a0000 [0145.529] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7088 | out: hHeap=0x8a0000) returned 1 [0145.529] ReleaseMutex (hMutex=0x374) returned 1 [0145.529] CloseHandle (hObject=0x374) returned 1 [0145.529] Sleep (dwMilliseconds=0x3e8) [0146.857] GetProcessHeap () returned 0x8a0000 [0146.857] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c8070 [0146.857] GetProcessHeap () returned 0x8a0000 [0146.857] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c82c8 [0146.857] GetProcessHeap () returned 0x8a0000 [0146.857] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c81b0 [0146.857] GetProcessHeap () returned 0x8a0000 [0146.857] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x992608 [0146.858] GetProcessHeap () returned 0x8a0000 [0146.858] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x992608 | out: hHeap=0x8a0000) returned 1 [0146.858] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c82c8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0146.858] GetProcessHeap () returned 0x8a0000 [0146.858] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81b0 | out: hHeap=0x8a0000) returned 1 [0146.858] GetProcessHeap () returned 0x8a0000 [0146.858] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8070 | out: hHeap=0x8a0000) returned 1 [0146.858] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0146.858] GetProcessHeap () returned 0x8a0000 [0146.858] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c82c8 | out: hHeap=0x8a0000) returned 1 [0146.858] GetProcessHeap () returned 0x8a0000 [0146.858] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x970ed0 [0146.858] GetProcessHeap () returned 0x8a0000 [0146.858] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x9710c8 [0146.858] GetProcessHeap () returned 0x8a0000 [0146.859] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x9710c8, Size=0x72) returned 0x8c7008 [0146.859] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0146.859] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x378 [0146.860] WaitForSingleObject (hHandle=0x378, dwMilliseconds=0x0) returned 0x0 [0146.860] GetProcessHeap () returned 0x8a0000 [0146.860] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x970ed0 | out: hHeap=0x8a0000) returned 1 [0146.860] GetProcessHeap () returned 0x8a0000 [0146.860] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7008 | out: hHeap=0x8a0000) returned 1 [0146.860] ReleaseMutex (hMutex=0x378) returned 1 [0146.860] CloseHandle (hObject=0x378) returned 1 [0146.860] Sleep (dwMilliseconds=0x3e8) [0148.237] GetProcessHeap () returned 0x8a0000 [0148.237] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c82c8 [0148.238] GetProcessHeap () returned 0x8a0000 [0148.238] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c8070 [0148.238] GetProcessHeap () returned 0x8a0000 [0148.238] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c81b0 [0148.238] GetProcessHeap () returned 0x8a0000 [0148.238] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x9921e0 [0148.238] GetProcessHeap () returned 0x8a0000 [0148.238] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x9921e0 | out: hHeap=0x8a0000) returned 1 [0148.238] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c8070, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0148.238] GetProcessHeap () returned 0x8a0000 [0148.238] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81b0 | out: hHeap=0x8a0000) returned 1 [0148.239] GetProcessHeap () returned 0x8a0000 [0148.239] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c82c8 | out: hHeap=0x8a0000) returned 1 [0148.239] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0148.239] GetProcessHeap () returned 0x8a0000 [0148.239] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8070 | out: hHeap=0x8a0000) returned 1 [0148.239] GetProcessHeap () returned 0x8a0000 [0148.239] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x970cd8 [0148.239] GetProcessHeap () returned 0x8a0000 [0148.239] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x971230 [0148.239] GetProcessHeap () returned 0x8a0000 [0148.239] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x971230, Size=0x72) returned 0x8c7108 [0148.239] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0148.240] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x38c [0148.240] WaitForSingleObject (hHandle=0x38c, dwMilliseconds=0x0) returned 0x0 [0148.240] GetProcessHeap () returned 0x8a0000 [0148.240] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x970cd8 | out: hHeap=0x8a0000) returned 1 [0148.240] GetProcessHeap () returned 0x8a0000 [0148.240] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7108 | out: hHeap=0x8a0000) returned 1 [0148.240] ReleaseMutex (hMutex=0x38c) returned 1 [0148.240] CloseHandle (hObject=0x38c) returned 1 [0148.240] Sleep (dwMilliseconds=0x3e8) [0149.536] GetProcessHeap () returned 0x8a0000 [0149.536] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c8070 [0149.536] GetProcessHeap () returned 0x8a0000 [0149.536] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c81b0 [0149.536] GetProcessHeap () returned 0x8a0000 [0149.536] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c82c8 [0149.536] GetProcessHeap () returned 0x8a0000 [0149.536] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x992018 [0149.536] GetProcessHeap () returned 0x8a0000 [0149.536] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x992018 | out: hHeap=0x8a0000) returned 1 [0149.536] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c81b0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0149.536] GetProcessHeap () returned 0x8a0000 [0149.537] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c82c8 | out: hHeap=0x8a0000) returned 1 [0149.537] GetProcessHeap () returned 0x8a0000 [0149.537] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8070 | out: hHeap=0x8a0000) returned 1 [0149.537] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0149.537] GetProcessHeap () returned 0x8a0000 [0149.537] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81b0 | out: hHeap=0x8a0000) returned 1 [0149.537] GetProcessHeap () returned 0x8a0000 [0149.537] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x971080 [0149.537] GetProcessHeap () returned 0x8a0000 [0149.537] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x970fa8 [0149.537] GetProcessHeap () returned 0x8a0000 [0149.537] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x970fa8, Size=0x72) returned 0x8c7588 [0149.538] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0149.538] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x394 [0149.538] WaitForSingleObject (hHandle=0x394, dwMilliseconds=0x0) returned 0x0 [0149.538] GetProcessHeap () returned 0x8a0000 [0149.538] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x971080 | out: hHeap=0x8a0000) returned 1 [0149.538] GetProcessHeap () returned 0x8a0000 [0149.538] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7588 | out: hHeap=0x8a0000) returned 1 [0149.538] ReleaseMutex (hMutex=0x394) returned 1 [0149.538] CloseHandle (hObject=0x394) returned 1 [0149.538] Sleep (dwMilliseconds=0x3e8) [0150.884] GetProcessHeap () returned 0x8a0000 [0150.884] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c8070 [0150.884] GetProcessHeap () returned 0x8a0000 [0150.884] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c81b0 [0150.884] GetProcessHeap () returned 0x8a0000 [0150.884] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c81d8 [0150.884] GetProcessHeap () returned 0x8a0000 [0150.884] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x992a30 [0150.884] GetProcessHeap () returned 0x8a0000 [0150.884] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x992a30 | out: hHeap=0x8a0000) returned 1 [0150.884] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c81b0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0150.884] GetProcessHeap () returned 0x8a0000 [0150.884] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81d8 | out: hHeap=0x8a0000) returned 1 [0150.884] GetProcessHeap () returned 0x8a0000 [0150.884] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8070 | out: hHeap=0x8a0000) returned 1 [0150.884] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0150.885] GetProcessHeap () returned 0x8a0000 [0150.885] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81b0 | out: hHeap=0x8a0000) returned 1 [0150.885] GetProcessHeap () returned 0x8a0000 [0150.885] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x9711a0 [0150.885] GetProcessHeap () returned 0x8a0000 [0150.885] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x970e88 [0150.885] GetProcessHeap () returned 0x8a0000 [0150.885] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x970e88, Size=0x72) returned 0x8c7588 [0150.885] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0150.885] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x38c [0150.885] WaitForSingleObject (hHandle=0x38c, dwMilliseconds=0x0) returned 0x0 [0150.885] GetProcessHeap () returned 0x8a0000 [0150.885] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x9711a0 | out: hHeap=0x8a0000) returned 1 [0150.885] GetProcessHeap () returned 0x8a0000 [0150.885] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7588 | out: hHeap=0x8a0000) returned 1 [0150.885] ReleaseMutex (hMutex=0x38c) returned 1 [0150.885] CloseHandle (hObject=0x38c) returned 1 [0150.885] Sleep (dwMilliseconds=0x3e8) [0152.656] GetProcessHeap () returned 0x8a0000 [0152.656] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c8070 [0152.656] GetProcessHeap () returned 0x8a0000 [0152.656] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c82c8 [0152.656] GetProcessHeap () returned 0x8a0000 [0152.656] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c81b0 [0152.656] GetProcessHeap () returned 0x8a0000 [0152.656] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x992868 [0152.656] GetProcessHeap () returned 0x8a0000 [0152.656] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x992868 | out: hHeap=0x8a0000) returned 1 [0152.656] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c82c8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0152.656] GetProcessHeap () returned 0x8a0000 [0152.656] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81b0 | out: hHeap=0x8a0000) returned 1 [0152.656] GetProcessHeap () returned 0x8a0000 [0152.656] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8070 | out: hHeap=0x8a0000) returned 1 [0152.656] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0152.657] GetProcessHeap () returned 0x8a0000 [0152.657] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c82c8 | out: hHeap=0x8a0000) returned 1 [0152.657] GetProcessHeap () returned 0x8a0000 [0152.657] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x971038 [0152.657] GetProcessHeap () returned 0x8a0000 [0152.657] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x970ff0 [0152.657] GetProcessHeap () returned 0x8a0000 [0152.657] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x970ff0, Size=0x72) returned 0x8c7388 [0152.657] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0152.657] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x390 [0152.657] WaitForSingleObject (hHandle=0x390, dwMilliseconds=0x0) returned 0x0 [0152.657] GetProcessHeap () returned 0x8a0000 [0152.657] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x971038 | out: hHeap=0x8a0000) returned 1 [0152.657] GetProcessHeap () returned 0x8a0000 [0152.657] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7388 | out: hHeap=0x8a0000) returned 1 [0152.657] ReleaseMutex (hMutex=0x390) returned 1 [0152.657] CloseHandle (hObject=0x390) returned 1 [0152.657] Sleep (dwMilliseconds=0x3e8) [0154.028] GetProcessHeap () returned 0x8a0000 [0154.028] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c81b0 [0154.028] GetProcessHeap () returned 0x8a0000 [0154.028] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c8070 [0154.028] GetProcessHeap () returned 0x8a0000 [0154.028] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c82c8 [0154.028] GetProcessHeap () returned 0x8a0000 [0154.029] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x9921e0 [0154.029] GetProcessHeap () returned 0x8a0000 [0154.029] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x9921e0 | out: hHeap=0x8a0000) returned 1 [0154.029] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c8070, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0154.029] GetProcessHeap () returned 0x8a0000 [0154.029] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c82c8 | out: hHeap=0x8a0000) returned 1 [0154.029] GetProcessHeap () returned 0x8a0000 [0154.029] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81b0 | out: hHeap=0x8a0000) returned 1 [0154.029] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0154.029] GetProcessHeap () returned 0x8a0000 [0154.029] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8070 | out: hHeap=0x8a0000) returned 1 [0154.029] GetProcessHeap () returned 0x8a0000 [0154.029] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x970d68 [0154.029] GetProcessHeap () returned 0x8a0000 [0154.029] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x970cd8 [0154.029] GetProcessHeap () returned 0x8a0000 [0154.029] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x970cd8, Size=0x72) returned 0x8c6f88 [0154.029] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0154.029] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x390 [0154.029] WaitForSingleObject (hHandle=0x390, dwMilliseconds=0x0) returned 0x0 [0154.030] GetProcessHeap () returned 0x8a0000 [0154.030] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x970d68 | out: hHeap=0x8a0000) returned 1 [0154.030] GetProcessHeap () returned 0x8a0000 [0154.030] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c6f88 | out: hHeap=0x8a0000) returned 1 [0154.030] ReleaseMutex (hMutex=0x390) returned 1 [0154.030] CloseHandle (hObject=0x390) returned 1 [0154.030] Sleep (dwMilliseconds=0x3e8) [0155.269] GetProcessHeap () returned 0x8a0000 [0155.269] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c81b0 [0155.269] GetProcessHeap () returned 0x8a0000 [0155.269] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c81d8 [0155.269] GetProcessHeap () returned 0x8a0000 [0155.269] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c82c8 [0155.269] GetProcessHeap () returned 0x8a0000 [0155.269] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x992738 [0155.269] GetProcessHeap () returned 0x8a0000 [0155.269] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x992738 | out: hHeap=0x8a0000) returned 1 [0155.269] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c81d8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0155.269] GetProcessHeap () returned 0x8a0000 [0155.269] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c82c8 | out: hHeap=0x8a0000) returned 1 [0155.269] GetProcessHeap () returned 0x8a0000 [0155.269] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81b0 | out: hHeap=0x8a0000) returned 1 [0155.270] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0155.270] GetProcessHeap () returned 0x8a0000 [0155.270] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81d8 | out: hHeap=0x8a0000) returned 1 [0155.270] GetProcessHeap () returned 0x8a0000 [0155.270] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x9711a0 [0155.270] GetProcessHeap () returned 0x8a0000 [0155.270] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x970d68 [0155.270] GetProcessHeap () returned 0x8a0000 [0155.270] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x970d68, Size=0x72) returned 0x8c7188 [0155.270] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0155.270] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x398 [0155.270] WaitForSingleObject (hHandle=0x398, dwMilliseconds=0x0) returned 0x0 [0155.270] GetProcessHeap () returned 0x8a0000 [0155.270] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x9711a0 | out: hHeap=0x8a0000) returned 1 [0155.270] GetProcessHeap () returned 0x8a0000 [0155.270] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7188 | out: hHeap=0x8a0000) returned 1 [0155.271] ReleaseMutex (hMutex=0x398) returned 1 [0155.271] CloseHandle (hObject=0x398) returned 1 [0155.271] Sleep (dwMilliseconds=0x3e8) [0156.563] GetProcessHeap () returned 0x8a0000 [0156.563] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c8070 [0156.563] GetProcessHeap () returned 0x8a0000 [0156.563] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c81b0 [0156.563] GetProcessHeap () returned 0x8a0000 [0156.563] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c81d8 [0156.563] GetProcessHeap () returned 0x8a0000 [0156.563] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x992a30 [0156.563] GetProcessHeap () returned 0x8a0000 [0156.563] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x992a30 | out: hHeap=0x8a0000) returned 1 [0156.563] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c81b0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0156.563] GetProcessHeap () returned 0x8a0000 [0156.563] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81d8 | out: hHeap=0x8a0000) returned 1 [0156.564] GetProcessHeap () returned 0x8a0000 [0156.564] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8070 | out: hHeap=0x8a0000) returned 1 [0156.564] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0156.564] GetProcessHeap () returned 0x8a0000 [0156.564] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81b0 | out: hHeap=0x8a0000) returned 1 [0156.564] GetProcessHeap () returned 0x8a0000 [0156.564] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x970c00 [0156.564] GetProcessHeap () returned 0x8a0000 [0156.564] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x970df8 [0156.564] GetProcessHeap () returned 0x8a0000 [0156.564] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x970df8, Size=0x72) returned 0x8c7308 [0156.564] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x398 [0156.564] WaitForSingleObject (hHandle=0x398, dwMilliseconds=0x0) returned 0x102 [0156.565] CloseHandle (hObject=0x398) returned 1 [0156.565] GetProcessHeap () returned 0x8a0000 [0156.565] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x970c00 | out: hHeap=0x8a0000) returned 1 [0156.565] GetProcessHeap () returned 0x8a0000 [0156.565] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7308 | out: hHeap=0x8a0000) returned 1 [0156.565] Sleep (dwMilliseconds=0x3e8) [0157.604] GetProcessHeap () returned 0x8a0000 [0157.604] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c8070 [0157.604] GetProcessHeap () returned 0x8a0000 [0157.604] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c81b0 [0157.604] GetProcessHeap () returned 0x8a0000 [0157.604] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c81d8 [0157.604] GetProcessHeap () returned 0x8a0000 [0157.604] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x9920b0 [0157.604] GetProcessHeap () returned 0x8a0000 [0157.604] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x9920b0 | out: hHeap=0x8a0000) returned 1 [0157.604] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c81b0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0157.604] GetProcessHeap () returned 0x8a0000 [0157.604] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81d8 | out: hHeap=0x8a0000) returned 1 [0157.604] GetProcessHeap () returned 0x8a0000 [0157.604] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8070 | out: hHeap=0x8a0000) returned 1 [0157.604] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0157.605] GetProcessHeap () returned 0x8a0000 [0157.605] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81b0 | out: hHeap=0x8a0000) returned 1 [0157.605] GetProcessHeap () returned 0x8a0000 [0157.605] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x970ff0 [0157.605] GetProcessHeap () returned 0x8a0000 [0157.605] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x9711e8 [0157.605] GetProcessHeap () returned 0x8a0000 [0157.605] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x9711e8, Size=0x72) returned 0x8c7608 [0157.605] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2dc [0157.605] WaitForSingleObject (hHandle=0x2dc, dwMilliseconds=0x0) returned 0x102 [0157.605] CloseHandle (hObject=0x2dc) returned 1 [0157.605] GetProcessHeap () returned 0x8a0000 [0157.605] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x970ff0 | out: hHeap=0x8a0000) returned 1 [0157.605] GetProcessHeap () returned 0x8a0000 [0157.605] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7608 | out: hHeap=0x8a0000) returned 1 [0157.605] Sleep (dwMilliseconds=0x3e8) [0158.653] GetProcessHeap () returned 0x8a0000 [0158.653] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c8070 [0158.653] GetProcessHeap () returned 0x8a0000 [0158.654] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c81b0 [0158.654] GetProcessHeap () returned 0x8a0000 [0158.654] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c82c8 [0158.654] GetProcessHeap () returned 0x8a0000 [0158.654] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x991ee8 [0158.654] GetProcessHeap () returned 0x8a0000 [0158.654] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x991ee8 | out: hHeap=0x8a0000) returned 1 [0158.654] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c81b0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0158.654] GetProcessHeap () returned 0x8a0000 [0158.654] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c82c8 | out: hHeap=0x8a0000) returned 1 [0158.655] GetProcessHeap () returned 0x8a0000 [0158.655] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8070 | out: hHeap=0x8a0000) returned 1 [0158.655] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0158.655] GetProcessHeap () returned 0x8a0000 [0158.655] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81b0 | out: hHeap=0x8a0000) returned 1 [0158.655] GetProcessHeap () returned 0x8a0000 [0158.655] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x9711e8 [0158.655] GetProcessHeap () returned 0x8a0000 [0158.655] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x971038 [0158.655] GetProcessHeap () returned 0x8a0000 [0158.655] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x971038, Size=0x72) returned 0x8c7308 [0158.655] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x348 [0158.655] WaitForSingleObject (hHandle=0x348, dwMilliseconds=0x0) returned 0x102 [0158.655] CloseHandle (hObject=0x348) returned 1 [0158.655] GetProcessHeap () returned 0x8a0000 [0158.655] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x9711e8 | out: hHeap=0x8a0000) returned 1 [0158.655] GetProcessHeap () returned 0x8a0000 [0158.655] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7308 | out: hHeap=0x8a0000) returned 1 [0158.655] Sleep (dwMilliseconds=0x3e8) [0159.709] GetProcessHeap () returned 0x8a0000 [0159.710] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c8070 [0159.710] GetProcessHeap () returned 0x8a0000 [0159.710] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c81b0 [0159.710] GetProcessHeap () returned 0x8a0000 [0159.710] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c81d8 [0159.710] GetProcessHeap () returned 0x8a0000 [0159.710] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x9926a0 [0159.710] GetProcessHeap () returned 0x8a0000 [0159.710] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x9926a0 | out: hHeap=0x8a0000) returned 1 [0159.710] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c81b0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0159.710] GetProcessHeap () returned 0x8a0000 [0159.710] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81d8 | out: hHeap=0x8a0000) returned 1 [0159.710] GetProcessHeap () returned 0x8a0000 [0159.710] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8070 | out: hHeap=0x8a0000) returned 1 [0159.710] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0159.711] GetProcessHeap () returned 0x8a0000 [0159.711] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81b0 | out: hHeap=0x8a0000) returned 1 [0159.711] GetProcessHeap () returned 0x8a0000 [0159.711] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x971038 [0159.711] GetProcessHeap () returned 0x8a0000 [0159.711] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x970e40 [0159.711] GetProcessHeap () returned 0x8a0000 [0159.711] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x970e40, Size=0x72) returned 0x8c6f08 [0159.711] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2dc [0159.711] WaitForSingleObject (hHandle=0x2dc, dwMilliseconds=0x0) returned 0x102 [0159.711] CloseHandle (hObject=0x2dc) returned 1 [0159.711] GetProcessHeap () returned 0x8a0000 [0159.711] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x971038 | out: hHeap=0x8a0000) returned 1 [0159.711] GetProcessHeap () returned 0x8a0000 [0159.711] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c6f08 | out: hHeap=0x8a0000) returned 1 [0159.711] Sleep (dwMilliseconds=0x3e8) [0160.727] GetProcessHeap () returned 0x8a0000 [0160.727] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c8070 [0160.727] GetProcessHeap () returned 0x8a0000 [0160.727] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c81b0 [0160.727] GetProcessHeap () returned 0x8a0000 [0160.727] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c81d8 [0160.727] GetProcessHeap () returned 0x8a0000 [0160.727] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x9924d8 [0160.727] GetProcessHeap () returned 0x8a0000 [0160.727] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x9924d8 | out: hHeap=0x8a0000) returned 1 [0160.727] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c81b0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0160.728] GetProcessHeap () returned 0x8a0000 [0160.728] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81d8 | out: hHeap=0x8a0000) returned 1 [0160.728] GetProcessHeap () returned 0x8a0000 [0160.728] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8070 | out: hHeap=0x8a0000) returned 1 [0160.728] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0160.728] GetProcessHeap () returned 0x8a0000 [0160.728] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81b0 | out: hHeap=0x8a0000) returned 1 [0160.728] GetProcessHeap () returned 0x8a0000 [0160.728] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x970ed0 [0160.728] GetProcessHeap () returned 0x8a0000 [0160.728] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x970e88 [0160.728] GetProcessHeap () returned 0x8a0000 [0160.728] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x970e88, Size=0x72) returned 0x8c7188 [0160.728] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x28c [0160.728] WaitForSingleObject (hHandle=0x28c, dwMilliseconds=0x0) returned 0x102 [0160.728] CloseHandle (hObject=0x28c) returned 1 [0160.728] GetProcessHeap () returned 0x8a0000 [0160.728] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x970ed0 | out: hHeap=0x8a0000) returned 1 [0160.728] GetProcessHeap () returned 0x8a0000 [0160.728] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7188 | out: hHeap=0x8a0000) returned 1 [0160.729] Sleep (dwMilliseconds=0x3e8) [0162.117] GetProcessHeap () returned 0x8a0000 [0162.117] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c8070 [0162.117] GetProcessHeap () returned 0x8a0000 [0162.117] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c81b0 [0162.117] GetProcessHeap () returned 0x8a0000 [0162.117] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c81d8 [0162.117] GetProcessHeap () returned 0x8a0000 [0162.117] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x9927d0 [0162.117] GetProcessHeap () returned 0x8a0000 [0162.117] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x9927d0 | out: hHeap=0x8a0000) returned 1 [0162.117] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c81b0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0162.117] GetProcessHeap () returned 0x8a0000 [0162.117] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81d8 | out: hHeap=0x8a0000) returned 1 [0162.117] GetProcessHeap () returned 0x8a0000 [0162.117] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8070 | out: hHeap=0x8a0000) returned 1 [0162.117] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0162.117] GetProcessHeap () returned 0x8a0000 [0162.117] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81b0 | out: hHeap=0x8a0000) returned 1 [0162.117] GetProcessHeap () returned 0x8a0000 [0162.117] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x971038 [0162.117] GetProcessHeap () returned 0x8a0000 [0162.118] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x971158 [0162.118] GetProcessHeap () returned 0x8a0000 [0162.118] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x971158, Size=0x72) returned 0x8c6f88 [0162.118] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x28c [0162.118] WaitForSingleObject (hHandle=0x28c, dwMilliseconds=0x0) returned 0x102 [0162.118] CloseHandle (hObject=0x28c) returned 1 [0162.118] GetProcessHeap () returned 0x8a0000 [0162.118] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x971038 | out: hHeap=0x8a0000) returned 1 [0162.118] GetProcessHeap () returned 0x8a0000 [0162.118] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c6f88 | out: hHeap=0x8a0000) returned 1 [0162.118] Sleep (dwMilliseconds=0x3e8) [0163.376] GetProcessHeap () returned 0x8a0000 [0163.386] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c81b0 [0163.386] GetProcessHeap () returned 0x8a0000 [0163.386] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c8070 [0163.386] GetProcessHeap () returned 0x8a0000 [0163.386] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c81d8 [0163.386] GetProcessHeap () returned 0x8a0000 [0163.386] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x991db8 [0163.386] GetProcessHeap () returned 0x8a0000 [0163.386] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x991db8 | out: hHeap=0x8a0000) returned 1 [0163.386] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c8070, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0163.386] GetProcessHeap () returned 0x8a0000 [0163.386] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81d8 | out: hHeap=0x8a0000) returned 1 [0163.386] GetProcessHeap () returned 0x8a0000 [0163.387] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81b0 | out: hHeap=0x8a0000) returned 1 [0163.387] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0163.403] GetProcessHeap () returned 0x8a0000 [0163.403] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8070 | out: hHeap=0x8a0000) returned 1 [0163.403] GetProcessHeap () returned 0x8a0000 [0163.403] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x9711a0 [0163.403] GetProcessHeap () returned 0x8a0000 [0163.403] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x970fa8 [0163.403] GetProcessHeap () returned 0x8a0000 [0163.403] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x970fa8, Size=0x72) returned 0x8c7088 [0163.403] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x28c [0163.403] WaitForSingleObject (hHandle=0x28c, dwMilliseconds=0x0) returned 0x102 [0163.403] CloseHandle (hObject=0x28c) returned 1 [0163.403] GetProcessHeap () returned 0x8a0000 [0163.403] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x9711a0 | out: hHeap=0x8a0000) returned 1 [0163.404] GetProcessHeap () returned 0x8a0000 [0163.404] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7088 | out: hHeap=0x8a0000) returned 1 [0163.404] Sleep (dwMilliseconds=0x3e8) [0164.598] GetProcessHeap () returned 0x8a0000 [0164.598] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c8070 [0164.598] GetProcessHeap () returned 0x8a0000 [0164.598] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c81b0 [0164.598] GetProcessHeap () returned 0x8a0000 [0164.598] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c81d8 [0164.598] GetProcessHeap () returned 0x8a0000 [0164.598] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x991ee8 [0164.598] GetProcessHeap () returned 0x8a0000 [0164.598] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x991ee8 | out: hHeap=0x8a0000) returned 1 [0164.598] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c81b0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0164.598] GetProcessHeap () returned 0x8a0000 [0164.598] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81d8 | out: hHeap=0x8a0000) returned 1 [0164.598] GetProcessHeap () returned 0x8a0000 [0164.598] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8070 | out: hHeap=0x8a0000) returned 1 [0164.598] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0164.598] GetProcessHeap () returned 0x8a0000 [0164.598] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81b0 | out: hHeap=0x8a0000) returned 1 [0164.598] GetProcessHeap () returned 0x8a0000 [0164.599] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x970df8 [0164.599] GetProcessHeap () returned 0x8a0000 [0164.599] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x970cd8 [0164.599] GetProcessHeap () returned 0x8a0000 [0164.599] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x970cd8, Size=0x72) returned 0x8c7188 [0164.599] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x28c [0164.599] WaitForSingleObject (hHandle=0x28c, dwMilliseconds=0x0) returned 0x102 [0164.599] CloseHandle (hObject=0x28c) returned 1 [0164.599] GetProcessHeap () returned 0x8a0000 [0164.599] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x970df8 | out: hHeap=0x8a0000) returned 1 [0164.599] GetProcessHeap () returned 0x8a0000 [0164.599] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7188 | out: hHeap=0x8a0000) returned 1 [0164.599] Sleep (dwMilliseconds=0x3e8) [0165.967] GetProcessHeap () returned 0x8a0000 [0165.967] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c82c8 [0165.967] GetProcessHeap () returned 0x8a0000 [0165.967] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c8070 [0165.967] GetProcessHeap () returned 0x8a0000 [0165.967] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c81b0 [0165.967] GetProcessHeap () returned 0x8a0000 [0165.967] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x992608 [0165.967] GetProcessHeap () returned 0x8a0000 [0165.967] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x992608 | out: hHeap=0x8a0000) returned 1 [0165.967] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c8070, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0165.967] GetProcessHeap () returned 0x8a0000 [0165.967] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81b0 | out: hHeap=0x8a0000) returned 1 [0165.967] GetProcessHeap () returned 0x8a0000 [0165.967] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c82c8 | out: hHeap=0x8a0000) returned 1 [0165.967] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0165.968] GetProcessHeap () returned 0x8a0000 [0165.968] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8070 | out: hHeap=0x8a0000) returned 1 [0165.968] GetProcessHeap () returned 0x8a0000 [0165.968] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x971158 [0165.968] GetProcessHeap () returned 0x8a0000 [0165.968] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x971230 [0165.968] GetProcessHeap () returned 0x8a0000 [0165.968] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x971230, Size=0x72) returned 0x8c7388 [0165.968] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x28c [0165.968] WaitForSingleObject (hHandle=0x28c, dwMilliseconds=0x0) returned 0x102 [0165.968] CloseHandle (hObject=0x28c) returned 1 [0165.968] GetProcessHeap () returned 0x8a0000 [0165.968] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x971158 | out: hHeap=0x8a0000) returned 1 [0165.968] GetProcessHeap () returned 0x8a0000 [0165.968] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7388 | out: hHeap=0x8a0000) returned 1 [0165.968] Sleep (dwMilliseconds=0x3e8) [0167.168] GetProcessHeap () returned 0x8a0000 [0167.168] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c8070 [0167.169] GetProcessHeap () returned 0x8a0000 [0167.169] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c81b0 [0167.169] GetProcessHeap () returned 0x8a0000 [0167.169] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c81d8 [0167.169] GetProcessHeap () returned 0x8a0000 [0167.169] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x9927d0 [0167.169] GetProcessHeap () returned 0x8a0000 [0167.169] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x9927d0 | out: hHeap=0x8a0000) returned 1 [0167.169] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c81b0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0167.169] GetProcessHeap () returned 0x8a0000 [0167.169] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81d8 | out: hHeap=0x8a0000) returned 1 [0167.169] GetProcessHeap () returned 0x8a0000 [0167.169] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8070 | out: hHeap=0x8a0000) returned 1 [0167.169] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0167.169] GetProcessHeap () returned 0x8a0000 [0167.169] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81b0 | out: hHeap=0x8a0000) returned 1 [0167.169] GetProcessHeap () returned 0x8a0000 [0167.169] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x970e40 [0167.169] GetProcessHeap () returned 0x8a0000 [0167.169] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x970e88 [0167.169] GetProcessHeap () returned 0x8a0000 [0167.170] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x970e88, Size=0x72) returned 0x8c7388 [0167.170] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x28c [0167.170] WaitForSingleObject (hHandle=0x28c, dwMilliseconds=0x0) returned 0x102 [0167.170] CloseHandle (hObject=0x28c) returned 1 [0167.170] GetProcessHeap () returned 0x8a0000 [0167.170] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x970e40 | out: hHeap=0x8a0000) returned 1 [0167.170] GetProcessHeap () returned 0x8a0000 [0167.170] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7388 | out: hHeap=0x8a0000) returned 1 [0167.170] Sleep (dwMilliseconds=0x3e8) [0168.318] GetProcessHeap () returned 0x8a0000 [0168.319] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c82c8 [0168.319] GetProcessHeap () returned 0x8a0000 [0168.319] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c8070 [0168.319] GetProcessHeap () returned 0x8a0000 [0168.319] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c81b0 [0168.319] GetProcessHeap () returned 0x8a0000 [0168.319] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x992570 [0168.319] GetProcessHeap () returned 0x8a0000 [0168.319] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x992570 | out: hHeap=0x8a0000) returned 1 [0168.319] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c8070, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0168.319] GetProcessHeap () returned 0x8a0000 [0168.319] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81b0 | out: hHeap=0x8a0000) returned 1 [0168.319] GetProcessHeap () returned 0x8a0000 [0168.319] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c82c8 | out: hHeap=0x8a0000) returned 1 [0168.319] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0168.319] GetProcessHeap () returned 0x8a0000 [0168.319] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8070 | out: hHeap=0x8a0000) returned 1 [0168.319] GetProcessHeap () returned 0x8a0000 [0168.319] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x9710c8 [0168.319] GetProcessHeap () returned 0x8a0000 [0168.319] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x971158 [0168.319] GetProcessHeap () returned 0x8a0000 [0168.319] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x971158, Size=0x72) returned 0x8c7088 [0168.319] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x28c [0168.319] WaitForSingleObject (hHandle=0x28c, dwMilliseconds=0x0) returned 0x102 [0168.319] CloseHandle (hObject=0x28c) returned 1 [0168.319] GetProcessHeap () returned 0x8a0000 [0168.320] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x9710c8 | out: hHeap=0x8a0000) returned 1 [0168.320] GetProcessHeap () returned 0x8a0000 [0168.320] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7088 | out: hHeap=0x8a0000) returned 1 [0168.320] Sleep (dwMilliseconds=0x3e8) [0169.652] GetProcessHeap () returned 0x8a0000 [0169.652] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c81b0 [0169.652] GetProcessHeap () returned 0x8a0000 [0169.652] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c8070 [0169.652] GetProcessHeap () returned 0x8a0000 [0169.652] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c81d8 [0169.652] GetProcessHeap () returned 0x8a0000 [0169.652] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x992570 [0169.652] GetProcessHeap () returned 0x8a0000 [0169.652] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x992570 | out: hHeap=0x8a0000) returned 1 [0169.652] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c8070, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0169.652] GetProcessHeap () returned 0x8a0000 [0169.652] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81d8 | out: hHeap=0x8a0000) returned 1 [0169.653] GetProcessHeap () returned 0x8a0000 [0169.653] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81b0 | out: hHeap=0x8a0000) returned 1 [0169.653] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0169.653] GetProcessHeap () returned 0x8a0000 [0169.653] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8070 | out: hHeap=0x8a0000) returned 1 [0169.653] GetProcessHeap () returned 0x8a0000 [0169.653] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x970c00 [0169.653] GetProcessHeap () returned 0x8a0000 [0169.653] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x971230 [0169.653] GetProcessHeap () returned 0x8a0000 [0169.653] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x971230, Size=0x72) returned 0x8c7088 [0169.653] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x28c [0169.653] WaitForSingleObject (hHandle=0x28c, dwMilliseconds=0x0) returned 0x102 [0169.653] CloseHandle (hObject=0x28c) returned 1 [0169.653] GetProcessHeap () returned 0x8a0000 [0169.654] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x970c00 | out: hHeap=0x8a0000) returned 1 [0169.654] GetProcessHeap () returned 0x8a0000 [0169.654] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7088 | out: hHeap=0x8a0000) returned 1 [0169.654] Sleep (dwMilliseconds=0x3e8) [0170.730] GetProcessHeap () returned 0x8a0000 [0170.730] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c81b0 [0170.730] GetProcessHeap () returned 0x8a0000 [0170.730] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c8070 [0170.730] GetProcessHeap () returned 0x8a0000 [0170.730] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c82c8 [0170.730] GetProcessHeap () returned 0x8a0000 [0170.730] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x992278 [0170.730] GetProcessHeap () returned 0x8a0000 [0170.730] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x992278 | out: hHeap=0x8a0000) returned 1 [0170.730] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c8070, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0170.731] GetProcessHeap () returned 0x8a0000 [0170.731] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c82c8 | out: hHeap=0x8a0000) returned 1 [0170.731] GetProcessHeap () returned 0x8a0000 [0170.731] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81b0 | out: hHeap=0x8a0000) returned 1 [0170.731] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0170.731] GetProcessHeap () returned 0x8a0000 [0170.731] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8070 | out: hHeap=0x8a0000) returned 1 [0170.731] GetProcessHeap () returned 0x8a0000 [0170.731] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x971278 [0170.731] GetProcessHeap () returned 0x8a0000 [0170.731] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x970ff0 [0170.731] GetProcessHeap () returned 0x8a0000 [0170.731] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x970ff0, Size=0x72) returned 0x8c7588 [0170.731] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x28c [0170.731] WaitForSingleObject (hHandle=0x28c, dwMilliseconds=0x0) returned 0x102 [0170.731] CloseHandle (hObject=0x28c) returned 1 [0170.731] GetProcessHeap () returned 0x8a0000 [0170.731] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x971278 | out: hHeap=0x8a0000) returned 1 [0170.731] GetProcessHeap () returned 0x8a0000 [0170.731] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7588 | out: hHeap=0x8a0000) returned 1 [0170.731] Sleep (dwMilliseconds=0x3e8) [0171.926] GetProcessHeap () returned 0x8a0000 [0171.926] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c82c8 [0171.926] GetProcessHeap () returned 0x8a0000 [0171.926] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c81b0 [0171.926] GetProcessHeap () returned 0x8a0000 [0171.926] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c81d8 [0171.926] GetProcessHeap () returned 0x8a0000 [0171.926] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x992440 [0171.926] GetProcessHeap () returned 0x8a0000 [0171.926] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x992440 | out: hHeap=0x8a0000) returned 1 [0171.926] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c81b0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0171.926] GetProcessHeap () returned 0x8a0000 [0171.926] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81d8 | out: hHeap=0x8a0000) returned 1 [0171.926] GetProcessHeap () returned 0x8a0000 [0171.926] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c82c8 | out: hHeap=0x8a0000) returned 1 [0171.926] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0171.927] GetProcessHeap () returned 0x8a0000 [0171.927] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81b0 | out: hHeap=0x8a0000) returned 1 [0171.927] GetProcessHeap () returned 0x8a0000 [0171.927] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x970f18 [0171.927] GetProcessHeap () returned 0x8a0000 [0171.927] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x970d20 [0171.927] GetProcessHeap () returned 0x8a0000 [0171.927] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x970d20, Size=0x72) returned 0x8c7188 [0171.927] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x28c [0171.927] WaitForSingleObject (hHandle=0x28c, dwMilliseconds=0x0) returned 0x102 [0171.927] CloseHandle (hObject=0x28c) returned 1 [0171.927] GetProcessHeap () returned 0x8a0000 [0171.927] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x970f18 | out: hHeap=0x8a0000) returned 1 [0171.927] GetProcessHeap () returned 0x8a0000 [0171.927] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7188 | out: hHeap=0x8a0000) returned 1 [0171.927] Sleep (dwMilliseconds=0x3e8) [0173.367] GetProcessHeap () returned 0x8a0000 [0173.367] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c8070 [0173.367] GetProcessHeap () returned 0x8a0000 [0173.367] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c81b0 [0173.367] GetProcessHeap () returned 0x8a0000 [0173.367] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c81d8 [0173.367] GetProcessHeap () returned 0x8a0000 [0173.368] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x992148 [0173.368] GetProcessHeap () returned 0x8a0000 [0173.368] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x992148 | out: hHeap=0x8a0000) returned 1 [0173.368] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c81b0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0173.368] GetProcessHeap () returned 0x8a0000 [0173.368] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81d8 | out: hHeap=0x8a0000) returned 1 [0173.368] GetProcessHeap () returned 0x8a0000 [0173.368] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8070 | out: hHeap=0x8a0000) returned 1 [0173.368] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0173.368] GetProcessHeap () returned 0x8a0000 [0173.368] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81b0 | out: hHeap=0x8a0000) returned 1 [0173.368] GetProcessHeap () returned 0x8a0000 [0173.369] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x970f18 [0173.369] GetProcessHeap () returned 0x8a0000 [0173.369] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x970c90 [0173.369] GetProcessHeap () returned 0x8a0000 [0173.369] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x970c90, Size=0x72) returned 0x8c7308 [0173.369] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2f4 [0173.369] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0x0) returned 0x102 [0173.369] CloseHandle (hObject=0x2f4) returned 1 [0173.369] GetProcessHeap () returned 0x8a0000 [0173.369] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x970f18 | out: hHeap=0x8a0000) returned 1 [0173.369] GetProcessHeap () returned 0x8a0000 [0173.369] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7308 | out: hHeap=0x8a0000) returned 1 [0173.369] Sleep (dwMilliseconds=0x3e8) [0174.593] GetProcessHeap () returned 0x8a0000 [0174.593] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c82c8 [0174.593] GetProcessHeap () returned 0x8a0000 [0174.593] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c8070 [0174.593] GetProcessHeap () returned 0x8a0000 [0174.593] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c81b0 [0174.593] GetProcessHeap () returned 0x8a0000 [0174.593] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x9920b0 [0174.593] GetProcessHeap () returned 0x8a0000 [0174.593] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x9920b0 | out: hHeap=0x8a0000) returned 1 [0174.593] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c8070, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0174.593] GetProcessHeap () returned 0x8a0000 [0174.593] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81b0 | out: hHeap=0x8a0000) returned 1 [0174.593] GetProcessHeap () returned 0x8a0000 [0174.593] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c82c8 | out: hHeap=0x8a0000) returned 1 [0174.593] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0174.593] GetProcessHeap () returned 0x8a0000 [0174.593] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8070 | out: hHeap=0x8a0000) returned 1 [0174.593] GetProcessHeap () returned 0x8a0000 [0174.593] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x970e40 [0174.593] GetProcessHeap () returned 0x8a0000 [0174.593] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x970c90 [0174.594] GetProcessHeap () returned 0x8a0000 [0174.594] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x970c90, Size=0x72) returned 0x8c7408 [0174.594] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x5d8 [0174.594] WaitForSingleObject (hHandle=0x5d8, dwMilliseconds=0x0) returned 0x102 [0174.594] CloseHandle (hObject=0x5d8) returned 1 [0174.594] GetProcessHeap () returned 0x8a0000 [0174.594] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x970e40 | out: hHeap=0x8a0000) returned 1 [0174.594] GetProcessHeap () returned 0x8a0000 [0174.594] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7408 | out: hHeap=0x8a0000) returned 1 [0174.594] Sleep (dwMilliseconds=0x3e8) [0175.764] GetProcessHeap () returned 0x8a0000 [0175.764] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c8070 [0175.764] GetProcessHeap () returned 0x8a0000 [0175.764] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c82c8 [0175.764] GetProcessHeap () returned 0x8a0000 [0175.764] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c81b0 [0175.764] GetProcessHeap () returned 0x8a0000 [0175.764] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x96d408 [0175.764] GetProcessHeap () returned 0x8a0000 [0175.764] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x96d408 | out: hHeap=0x8a0000) returned 1 [0175.764] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c82c8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0175.764] GetProcessHeap () returned 0x8a0000 [0175.764] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81b0 | out: hHeap=0x8a0000) returned 1 [0175.764] GetProcessHeap () returned 0x8a0000 [0175.764] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8070 | out: hHeap=0x8a0000) returned 1 [0175.765] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0175.765] GetProcessHeap () returned 0x8a0000 [0175.765] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c82c8 | out: hHeap=0x8a0000) returned 1 [0175.765] GetProcessHeap () returned 0x8a0000 [0175.765] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x9711a0 [0175.765] GetProcessHeap () returned 0x8a0000 [0175.765] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x971158 [0175.765] GetProcessHeap () returned 0x8a0000 [0175.765] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x971158, Size=0x72) returned 0x8c7588 [0175.765] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2f0 [0175.765] WaitForSingleObject (hHandle=0x2f0, dwMilliseconds=0x0) returned 0x102 [0175.765] CloseHandle (hObject=0x2f0) returned 1 [0175.765] GetProcessHeap () returned 0x8a0000 [0175.765] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x9711a0 | out: hHeap=0x8a0000) returned 1 [0175.765] GetProcessHeap () returned 0x8a0000 [0175.765] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7588 | out: hHeap=0x8a0000) returned 1 [0175.765] Sleep (dwMilliseconds=0x3e8) [0176.905] GetProcessHeap () returned 0x8a0000 [0176.905] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c82c8 [0176.905] GetProcessHeap () returned 0x8a0000 [0176.905] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c8070 [0176.905] GetProcessHeap () returned 0x8a0000 [0176.905] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c81b0 [0176.905] GetProcessHeap () returned 0x8a0000 [0176.905] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x96d408 [0176.905] GetProcessHeap () returned 0x8a0000 [0176.905] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x96d408 | out: hHeap=0x8a0000) returned 1 [0176.905] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c8070, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0176.905] GetProcessHeap () returned 0x8a0000 [0176.905] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81b0 | out: hHeap=0x8a0000) returned 1 [0176.905] GetProcessHeap () returned 0x8a0000 [0176.905] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c82c8 | out: hHeap=0x8a0000) returned 1 [0176.905] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0176.905] GetProcessHeap () returned 0x8a0000 [0176.905] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8070 | out: hHeap=0x8a0000) returned 1 [0176.905] GetProcessHeap () returned 0x8a0000 [0176.905] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x9710c8 [0176.906] GetProcessHeap () returned 0x8a0000 [0176.906] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x970c90 [0176.906] GetProcessHeap () returned 0x8a0000 [0176.906] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x970c90, Size=0x72) returned 0x8c7288 [0176.906] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2f0 [0176.906] WaitForSingleObject (hHandle=0x2f0, dwMilliseconds=0x0) returned 0x102 [0176.906] CloseHandle (hObject=0x2f0) returned 1 [0176.906] GetProcessHeap () returned 0x8a0000 [0176.906] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x9710c8 | out: hHeap=0x8a0000) returned 1 [0176.906] GetProcessHeap () returned 0x8a0000 [0176.906] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7288 | out: hHeap=0x8a0000) returned 1 [0176.906] Sleep (dwMilliseconds=0x3e8) [0178.059] GetProcessHeap () returned 0x8a0000 [0178.059] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c81b0 [0178.059] GetProcessHeap () returned 0x8a0000 [0178.059] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c81d8 [0178.059] GetProcessHeap () returned 0x8a0000 [0178.059] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c82c8 [0178.059] GetProcessHeap () returned 0x8a0000 [0178.059] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x96db28 [0178.059] GetProcessHeap () returned 0x8a0000 [0178.059] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x96db28 | out: hHeap=0x8a0000) returned 1 [0178.059] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c81d8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0178.059] GetProcessHeap () returned 0x8a0000 [0178.059] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c82c8 | out: hHeap=0x8a0000) returned 1 [0178.059] GetProcessHeap () returned 0x8a0000 [0178.059] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81b0 | out: hHeap=0x8a0000) returned 1 [0178.059] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0178.060] GetProcessHeap () returned 0x8a0000 [0178.060] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81d8 | out: hHeap=0x8a0000) returned 1 [0178.060] GetProcessHeap () returned 0x8a0000 [0178.060] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x970ff0 [0178.060] GetProcessHeap () returned 0x8a0000 [0178.060] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x970e40 [0178.060] GetProcessHeap () returned 0x8a0000 [0178.060] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x970e40, Size=0x72) returned 0x8c6f08 [0178.060] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2f0 [0178.060] WaitForSingleObject (hHandle=0x2f0, dwMilliseconds=0x0) returned 0x102 [0178.060] CloseHandle (hObject=0x2f0) returned 1 [0178.060] GetProcessHeap () returned 0x8a0000 [0178.060] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x970ff0 | out: hHeap=0x8a0000) returned 1 [0178.060] GetProcessHeap () returned 0x8a0000 [0178.060] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c6f08 | out: hHeap=0x8a0000) returned 1 [0178.060] Sleep (dwMilliseconds=0x3e8) [0179.150] GetProcessHeap () returned 0x8a0000 [0179.150] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c8070 [0179.150] GetProcessHeap () returned 0x8a0000 [0179.150] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c81b0 [0179.150] GetProcessHeap () returned 0x8a0000 [0179.150] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c81d8 [0179.150] GetProcessHeap () returned 0x8a0000 [0179.150] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x96db28 [0179.150] GetProcessHeap () returned 0x8a0000 [0179.150] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x96db28 | out: hHeap=0x8a0000) returned 1 [0179.150] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c81b0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0179.150] GetProcessHeap () returned 0x8a0000 [0179.150] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81d8 | out: hHeap=0x8a0000) returned 1 [0179.150] GetProcessHeap () returned 0x8a0000 [0179.150] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8070 | out: hHeap=0x8a0000) returned 1 [0179.150] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0179.151] GetProcessHeap () returned 0x8a0000 [0179.151] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81b0 | out: hHeap=0x8a0000) returned 1 [0179.151] GetProcessHeap () returned 0x8a0000 [0179.151] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x9710c8 [0179.151] GetProcessHeap () returned 0x8a0000 [0179.151] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x970c90 [0179.151] GetProcessHeap () returned 0x8a0000 [0179.151] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x970c90, Size=0x72) returned 0x8c7408 [0179.151] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2f0 [0179.151] WaitForSingleObject (hHandle=0x2f0, dwMilliseconds=0x0) returned 0x102 [0179.151] CloseHandle (hObject=0x2f0) returned 1 [0179.151] GetProcessHeap () returned 0x8a0000 [0179.151] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x9710c8 | out: hHeap=0x8a0000) returned 1 [0179.151] GetProcessHeap () returned 0x8a0000 [0179.151] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7408 | out: hHeap=0x8a0000) returned 1 [0179.151] Sleep (dwMilliseconds=0x3e8) [0180.291] GetProcessHeap () returned 0x8a0000 [0180.291] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c8070 [0180.291] GetProcessHeap () returned 0x8a0000 [0180.291] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c81b0 [0180.291] GetProcessHeap () returned 0x8a0000 [0180.291] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c82c8 [0180.291] GetProcessHeap () returned 0x8a0000 [0180.291] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x96d4a0 [0180.291] GetProcessHeap () returned 0x8a0000 [0180.291] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x96d4a0 | out: hHeap=0x8a0000) returned 1 [0180.291] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c81b0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0180.291] GetProcessHeap () returned 0x8a0000 [0180.291] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c82c8 | out: hHeap=0x8a0000) returned 1 [0180.291] GetProcessHeap () returned 0x8a0000 [0180.291] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8070 | out: hHeap=0x8a0000) returned 1 [0180.291] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0180.292] GetProcessHeap () returned 0x8a0000 [0180.292] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81b0 | out: hHeap=0x8a0000) returned 1 [0180.292] GetProcessHeap () returned 0x8a0000 [0180.292] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x970c90 [0180.292] GetProcessHeap () returned 0x8a0000 [0180.292] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x970cd8 [0180.292] GetProcessHeap () returned 0x8a0000 [0180.292] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x970cd8, Size=0x72) returned 0x8c7508 [0180.292] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2f0 [0180.292] WaitForSingleObject (hHandle=0x2f0, dwMilliseconds=0x0) returned 0x102 [0180.292] CloseHandle (hObject=0x2f0) returned 1 [0180.292] GetProcessHeap () returned 0x8a0000 [0180.292] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x970c90 | out: hHeap=0x8a0000) returned 1 [0180.292] GetProcessHeap () returned 0x8a0000 [0180.292] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7508 | out: hHeap=0x8a0000) returned 1 [0180.292] Sleep (dwMilliseconds=0x3e8) [0181.552] GetProcessHeap () returned 0x8a0000 [0181.552] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c82c8 [0181.552] GetProcessHeap () returned 0x8a0000 [0181.552] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c8070 [0181.552] GetProcessHeap () returned 0x8a0000 [0181.552] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c81b0 [0181.552] GetProcessHeap () returned 0x8a0000 [0181.552] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x96d110 [0181.552] GetProcessHeap () returned 0x8a0000 [0181.552] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x96d110 | out: hHeap=0x8a0000) returned 1 [0181.552] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c8070, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0181.553] GetProcessHeap () returned 0x8a0000 [0181.553] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81b0 | out: hHeap=0x8a0000) returned 1 [0181.553] GetProcessHeap () returned 0x8a0000 [0181.553] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c82c8 | out: hHeap=0x8a0000) returned 1 [0181.553] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0181.553] GetProcessHeap () returned 0x8a0000 [0181.553] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8070 | out: hHeap=0x8a0000) returned 1 [0181.553] GetProcessHeap () returned 0x8a0000 [0181.553] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x970f60 [0181.553] GetProcessHeap () returned 0x8a0000 [0181.553] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x971110 [0181.553] GetProcessHeap () returned 0x8a0000 [0181.553] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x971110, Size=0x72) returned 0x8c7008 [0181.553] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2f0 [0181.553] WaitForSingleObject (hHandle=0x2f0, dwMilliseconds=0x0) returned 0x102 [0181.553] CloseHandle (hObject=0x2f0) returned 1 [0181.554] GetProcessHeap () returned 0x8a0000 [0181.554] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x970f60 | out: hHeap=0x8a0000) returned 1 [0181.554] GetProcessHeap () returned 0x8a0000 [0181.554] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7008 | out: hHeap=0x8a0000) returned 1 [0181.554] Sleep (dwMilliseconds=0x3e8) [0182.694] GetProcessHeap () returned 0x8a0000 [0182.694] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c8070 [0182.695] GetProcessHeap () returned 0x8a0000 [0182.695] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c81b0 [0182.695] GetProcessHeap () returned 0x8a0000 [0182.695] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c81d8 [0182.695] GetProcessHeap () returned 0x8a0000 [0182.695] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x96d700 [0182.695] GetProcessHeap () returned 0x8a0000 [0182.695] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x96d700 | out: hHeap=0x8a0000) returned 1 [0182.695] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c81b0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0182.695] GetProcessHeap () returned 0x8a0000 [0182.695] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81d8 | out: hHeap=0x8a0000) returned 1 [0182.695] GetProcessHeap () returned 0x8a0000 [0182.695] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8070 | out: hHeap=0x8a0000) returned 1 [0182.695] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0182.695] GetProcessHeap () returned 0x8a0000 [0182.696] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81b0 | out: hHeap=0x8a0000) returned 1 [0182.696] GetProcessHeap () returned 0x8a0000 [0182.696] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x970c90 [0182.696] GetProcessHeap () returned 0x8a0000 [0182.696] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x970e88 [0182.696] GetProcessHeap () returned 0x8a0000 [0182.696] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x970e88, Size=0x72) returned 0x8c6f08 [0182.696] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2f0 [0182.696] WaitForSingleObject (hHandle=0x2f0, dwMilliseconds=0x0) returned 0x102 [0182.696] CloseHandle (hObject=0x2f0) returned 1 [0182.696] GetProcessHeap () returned 0x8a0000 [0182.696] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x970c90 | out: hHeap=0x8a0000) returned 1 [0182.696] GetProcessHeap () returned 0x8a0000 [0182.696] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c6f08 | out: hHeap=0x8a0000) returned 1 [0182.696] Sleep (dwMilliseconds=0x3e8) [0183.893] GetProcessHeap () returned 0x8a0000 [0183.893] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c8070 [0183.893] GetProcessHeap () returned 0x8a0000 [0183.893] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c81b0 [0183.893] GetProcessHeap () returned 0x8a0000 [0183.893] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c81d8 [0183.893] GetProcessHeap () returned 0x8a0000 [0183.893] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x96deb8 [0183.893] GetProcessHeap () returned 0x8a0000 [0183.893] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x96deb8 | out: hHeap=0x8a0000) returned 1 [0183.893] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c81b0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0183.893] GetProcessHeap () returned 0x8a0000 [0183.893] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81d8 | out: hHeap=0x8a0000) returned 1 [0183.893] GetProcessHeap () returned 0x8a0000 [0183.893] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8070 | out: hHeap=0x8a0000) returned 1 [0183.893] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0183.894] GetProcessHeap () returned 0x8a0000 [0183.895] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81b0 | out: hHeap=0x8a0000) returned 1 [0183.895] GetProcessHeap () returned 0x8a0000 [0183.895] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x970ff0 [0183.895] GetProcessHeap () returned 0x8a0000 [0183.895] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x970c90 [0183.895] GetProcessHeap () returned 0x8a0000 [0183.895] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x970c90, Size=0x72) returned 0x8c7508 [0183.895] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2f0 [0183.895] WaitForSingleObject (hHandle=0x2f0, dwMilliseconds=0x0) returned 0x102 [0183.895] CloseHandle (hObject=0x2f0) returned 1 [0183.895] GetProcessHeap () returned 0x8a0000 [0183.895] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x970ff0 | out: hHeap=0x8a0000) returned 1 [0183.895] GetProcessHeap () returned 0x8a0000 [0183.895] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7508 | out: hHeap=0x8a0000) returned 1 [0183.895] Sleep (dwMilliseconds=0x3e8) [0185.089] GetProcessHeap () returned 0x8a0000 [0185.089] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c82c8 [0185.089] GetProcessHeap () returned 0x8a0000 [0185.089] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c7df0 [0185.089] GetProcessHeap () returned 0x8a0000 [0185.089] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c8070 [0185.089] GetProcessHeap () returned 0x8a0000 [0185.089] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x96d700 [0185.089] GetProcessHeap () returned 0x8a0000 [0185.089] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x96d700 | out: hHeap=0x8a0000) returned 1 [0185.089] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c7df0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0185.089] GetProcessHeap () returned 0x8a0000 [0185.089] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8070 | out: hHeap=0x8a0000) returned 1 [0185.089] GetProcessHeap () returned 0x8a0000 [0185.089] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c82c8 | out: hHeap=0x8a0000) returned 1 [0185.089] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0185.090] GetProcessHeap () returned 0x8a0000 [0185.090] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7df0 | out: hHeap=0x8a0000) returned 1 [0185.090] GetProcessHeap () returned 0x8a0000 [0185.090] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x970f18 [0185.090] GetProcessHeap () returned 0x8a0000 [0185.090] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x9711e8 [0185.090] GetProcessHeap () returned 0x8a0000 [0185.090] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x9711e8, Size=0x72) returned 0x8c7408 [0185.090] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2f0 [0185.090] WaitForSingleObject (hHandle=0x2f0, dwMilliseconds=0x0) returned 0x102 [0185.090] CloseHandle (hObject=0x2f0) returned 1 [0185.090] GetProcessHeap () returned 0x8a0000 [0185.090] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x970f18 | out: hHeap=0x8a0000) returned 1 [0185.090] GetProcessHeap () returned 0x8a0000 [0185.090] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7408 | out: hHeap=0x8a0000) returned 1 [0185.090] Sleep (dwMilliseconds=0x3e8) [0186.215] GetProcessHeap () returned 0x8a0000 [0186.215] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c8070 [0186.215] GetProcessHeap () returned 0x8a0000 [0186.216] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c81b0 [0186.216] GetProcessHeap () returned 0x8a0000 [0186.216] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c7df0 [0186.216] GetProcessHeap () returned 0x8a0000 [0186.216] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x96d370 [0186.216] GetProcessHeap () returned 0x8a0000 [0186.216] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x96d370 | out: hHeap=0x8a0000) returned 1 [0186.216] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c81b0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0186.216] GetProcessHeap () returned 0x8a0000 [0186.216] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7df0 | out: hHeap=0x8a0000) returned 1 [0186.216] GetProcessHeap () returned 0x8a0000 [0186.216] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8070 | out: hHeap=0x8a0000) returned 1 [0186.216] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0186.216] GetProcessHeap () returned 0x8a0000 [0186.216] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81b0 | out: hHeap=0x8a0000) returned 1 [0186.216] GetProcessHeap () returned 0x8a0000 [0186.216] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x970f60 [0186.216] GetProcessHeap () returned 0x8a0000 [0186.216] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x970d68 [0186.216] GetProcessHeap () returned 0x8a0000 [0186.216] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x970d68, Size=0x72) returned 0x8c7488 [0186.216] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2f0 [0186.217] WaitForSingleObject (hHandle=0x2f0, dwMilliseconds=0x0) returned 0x102 [0186.217] CloseHandle (hObject=0x2f0) returned 1 [0186.217] GetProcessHeap () returned 0x8a0000 [0186.217] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x970f60 | out: hHeap=0x8a0000) returned 1 [0186.217] GetProcessHeap () returned 0x8a0000 [0186.217] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7488 | out: hHeap=0x8a0000) returned 1 [0186.217] Sleep (dwMilliseconds=0x3e8) [0188.347] GetProcessHeap () returned 0x8a0000 [0188.347] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c8070 [0188.347] GetProcessHeap () returned 0x8a0000 [0188.347] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c81b0 [0188.347] GetProcessHeap () returned 0x8a0000 [0188.347] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c81d8 [0188.347] GetProcessHeap () returned 0x8a0000 [0188.347] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x96d5d0 [0188.347] GetProcessHeap () returned 0x8a0000 [0188.347] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x96d5d0 | out: hHeap=0x8a0000) returned 1 [0188.347] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c81b0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0188.347] GetProcessHeap () returned 0x8a0000 [0188.347] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81d8 | out: hHeap=0x8a0000) returned 1 [0188.347] GetProcessHeap () returned 0x8a0000 [0188.347] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8070 | out: hHeap=0x8a0000) returned 1 [0188.347] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0188.347] GetProcessHeap () returned 0x8a0000 [0188.348] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81b0 | out: hHeap=0x8a0000) returned 1 [0188.348] GetProcessHeap () returned 0x8a0000 [0188.348] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x970e88 [0188.348] GetProcessHeap () returned 0x8a0000 [0188.348] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x970d20 [0188.348] GetProcessHeap () returned 0x8a0000 [0188.348] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x970d20, Size=0x72) returned 0x8c7388 [0188.348] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x300 [0188.348] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0x0) returned 0x102 [0188.348] CloseHandle (hObject=0x300) returned 1 [0188.348] GetProcessHeap () returned 0x8a0000 [0188.348] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x970e88 | out: hHeap=0x8a0000) returned 1 [0188.348] GetProcessHeap () returned 0x8a0000 [0188.348] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7388 | out: hHeap=0x8a0000) returned 1 [0188.348] Sleep (dwMilliseconds=0x3e8) [0189.475] GetProcessHeap () returned 0x8a0000 [0189.475] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c82c8 [0189.475] GetProcessHeap () returned 0x8a0000 [0189.476] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c8070 [0189.476] GetProcessHeap () returned 0x8a0000 [0189.476] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c81b0 [0189.476] GetProcessHeap () returned 0x8a0000 [0189.476] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x96dbc0 [0189.476] GetProcessHeap () returned 0x8a0000 [0189.476] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x96dbc0 | out: hHeap=0x8a0000) returned 1 [0189.476] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c8070, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0189.476] GetProcessHeap () returned 0x8a0000 [0189.476] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81b0 | out: hHeap=0x8a0000) returned 1 [0189.476] GetProcessHeap () returned 0x8a0000 [0189.476] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c82c8 | out: hHeap=0x8a0000) returned 1 [0189.476] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0189.476] GetProcessHeap () returned 0x8a0000 [0189.476] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8070 | out: hHeap=0x8a0000) returned 1 [0189.476] GetProcessHeap () returned 0x8a0000 [0189.476] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x971080 [0189.476] GetProcessHeap () returned 0x8a0000 [0189.476] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x9711e8 [0189.476] GetProcessHeap () returned 0x8a0000 [0189.476] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x9711e8, Size=0x72) returned 0x8c7588 [0189.476] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x300 [0189.476] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0x0) returned 0x102 [0189.477] CloseHandle (hObject=0x300) returned 1 [0189.477] GetProcessHeap () returned 0x8a0000 [0189.477] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x971080 | out: hHeap=0x8a0000) returned 1 [0189.477] GetProcessHeap () returned 0x8a0000 [0189.477] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7588 | out: hHeap=0x8a0000) returned 1 [0189.477] Sleep (dwMilliseconds=0x3e8) [0190.585] GetProcessHeap () returned 0x8a0000 [0190.585] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c8070 [0190.585] GetProcessHeap () returned 0x8a0000 [0190.585] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c81b0 [0190.585] GetProcessHeap () returned 0x8a0000 [0190.585] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c82c8 [0190.585] GetProcessHeap () returned 0x8a0000 [0190.585] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x96d538 [0190.585] GetProcessHeap () returned 0x8a0000 [0190.585] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x96d538 | out: hHeap=0x8a0000) returned 1 [0190.585] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c81b0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0190.586] GetProcessHeap () returned 0x8a0000 [0190.586] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c82c8 | out: hHeap=0x8a0000) returned 1 [0190.586] GetProcessHeap () returned 0x8a0000 [0190.605] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8070 | out: hHeap=0x8a0000) returned 1 [0190.605] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0190.605] GetProcessHeap () returned 0x8a0000 [0190.605] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81b0 | out: hHeap=0x8a0000) returned 1 [0190.605] GetProcessHeap () returned 0x8a0000 [0190.605] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x970f60 [0190.605] GetProcessHeap () returned 0x8a0000 [0190.605] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x971080 [0190.605] GetProcessHeap () returned 0x8a0000 [0190.605] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x971080, Size=0x72) returned 0x8c7008 [0190.605] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x308 [0190.605] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x0) returned 0x102 [0190.605] CloseHandle (hObject=0x308) returned 1 [0190.605] GetProcessHeap () returned 0x8a0000 [0190.605] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x970f60 | out: hHeap=0x8a0000) returned 1 [0190.606] GetProcessHeap () returned 0x8a0000 [0190.606] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7008 | out: hHeap=0x8a0000) returned 1 [0190.606] Sleep (dwMilliseconds=0x3e8) [0191.908] GetProcessHeap () returned 0x8a0000 [0191.908] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c82c8 [0191.909] GetProcessHeap () returned 0x8a0000 [0191.909] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c7df0 [0191.909] GetProcessHeap () returned 0x8a0000 [0191.909] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c8070 [0191.909] GetProcessHeap () returned 0x8a0000 [0191.909] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x96d960 [0191.909] GetProcessHeap () returned 0x8a0000 [0191.909] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x96d960 | out: hHeap=0x8a0000) returned 1 [0191.909] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c7df0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0191.909] GetProcessHeap () returned 0x8a0000 [0191.909] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8070 | out: hHeap=0x8a0000) returned 1 [0191.909] GetProcessHeap () returned 0x8a0000 [0191.909] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c82c8 | out: hHeap=0x8a0000) returned 1 [0191.909] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0191.909] GetProcessHeap () returned 0x8a0000 [0191.909] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7df0 | out: hHeap=0x8a0000) returned 1 [0191.909] GetProcessHeap () returned 0x8a0000 [0191.909] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x9710c8 [0191.909] GetProcessHeap () returned 0x8a0000 [0191.909] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x970ff0 [0191.909] GetProcessHeap () returned 0x8a0000 [0191.909] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x970ff0, Size=0x72) returned 0x8c7108 [0191.909] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x308 [0191.909] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x0) returned 0x102 [0191.910] CloseHandle (hObject=0x308) returned 1 [0191.910] GetProcessHeap () returned 0x8a0000 [0191.910] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x9710c8 | out: hHeap=0x8a0000) returned 1 [0191.910] GetProcessHeap () returned 0x8a0000 [0191.910] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7108 | out: hHeap=0x8a0000) returned 1 [0191.910] Sleep (dwMilliseconds=0x3e8) [0193.324] GetProcessHeap () returned 0x8a0000 [0193.324] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c82c8 [0193.324] GetProcessHeap () returned 0x8a0000 [0193.324] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c81d8 [0193.324] GetProcessHeap () returned 0x8a0000 [0193.324] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c7df0 [0193.324] GetProcessHeap () returned 0x8a0000 [0193.324] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x96d4a0 [0193.324] GetProcessHeap () returned 0x8a0000 [0193.324] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x96d4a0 | out: hHeap=0x8a0000) returned 1 [0193.324] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c81d8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0193.324] GetProcessHeap () returned 0x8a0000 [0193.324] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7df0 | out: hHeap=0x8a0000) returned 1 [0193.324] GetProcessHeap () returned 0x8a0000 [0193.324] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c82c8 | out: hHeap=0x8a0000) returned 1 [0193.324] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0193.325] GetProcessHeap () returned 0x8a0000 [0193.325] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81d8 | out: hHeap=0x8a0000) returned 1 [0193.325] GetProcessHeap () returned 0x8a0000 [0193.325] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x970d20 [0193.325] GetProcessHeap () returned 0x8a0000 [0193.325] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x9710c8 [0193.325] GetProcessHeap () returned 0x8a0000 [0193.325] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x9710c8, Size=0x72) returned 0x8c7308 [0193.325] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x308 [0193.325] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x0) returned 0x102 [0193.325] CloseHandle (hObject=0x308) returned 1 [0193.325] GetProcessHeap () returned 0x8a0000 [0193.325] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x970d20 | out: hHeap=0x8a0000) returned 1 [0193.325] GetProcessHeap () returned 0x8a0000 [0193.325] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7308 | out: hHeap=0x8a0000) returned 1 [0193.325] Sleep (dwMilliseconds=0x3e8) [0194.670] GetProcessHeap () returned 0x8a0000 [0194.670] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c82c8 [0194.670] GetProcessHeap () returned 0x8a0000 [0194.670] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c81d8 [0194.670] GetProcessHeap () returned 0x8a0000 [0194.670] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c7df0 [0194.670] GetProcessHeap () returned 0x8a0000 [0194.670] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x96dd88 [0194.670] GetProcessHeap () returned 0x8a0000 [0194.670] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x96dd88 | out: hHeap=0x8a0000) returned 1 [0194.670] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c81d8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0194.670] GetProcessHeap () returned 0x8a0000 [0194.670] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7df0 | out: hHeap=0x8a0000) returned 1 [0194.670] GetProcessHeap () returned 0x8a0000 [0194.670] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c82c8 | out: hHeap=0x8a0000) returned 1 [0194.670] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0194.670] GetProcessHeap () returned 0x8a0000 [0194.670] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81d8 | out: hHeap=0x8a0000) returned 1 [0194.670] GetProcessHeap () returned 0x8a0000 [0194.670] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x970f18 [0194.670] GetProcessHeap () returned 0x8a0000 [0194.670] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x970e88 [0194.670] GetProcessHeap () returned 0x8a0000 [0194.670] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x970e88, Size=0x72) returned 0x8c7388 [0194.670] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x30c [0194.671] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x0) returned 0x102 [0194.671] CloseHandle (hObject=0x30c) returned 1 [0194.671] GetProcessHeap () returned 0x8a0000 [0194.671] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x970f18 | out: hHeap=0x8a0000) returned 1 [0194.671] GetProcessHeap () returned 0x8a0000 [0194.671] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7388 | out: hHeap=0x8a0000) returned 1 [0194.671] Sleep (dwMilliseconds=0x3e8) [0195.935] GetProcessHeap () returned 0x8a0000 [0195.935] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c8368 [0195.936] GetProcessHeap () returned 0x8a0000 [0195.936] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c8390 [0195.936] GetProcessHeap () returned 0x8a0000 [0195.936] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c84a8 [0195.936] GetProcessHeap () returned 0x8a0000 [0195.936] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x96d110 [0195.936] GetProcessHeap () returned 0x8a0000 [0195.936] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x96d110 | out: hHeap=0x8a0000) returned 1 [0195.936] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c8390, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0195.936] GetProcessHeap () returned 0x8a0000 [0195.936] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c84a8 | out: hHeap=0x8a0000) returned 1 [0195.936] GetProcessHeap () returned 0x8a0000 [0195.936] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8368 | out: hHeap=0x8a0000) returned 1 [0195.936] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0195.936] GetProcessHeap () returned 0x8a0000 [0195.936] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8390 | out: hHeap=0x8a0000) returned 1 [0195.936] GetProcessHeap () returned 0x8a0000 [0195.936] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x971230 [0195.936] GetProcessHeap () returned 0x8a0000 [0195.936] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x971080 [0195.936] GetProcessHeap () returned 0x8a0000 [0195.937] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x971080, Size=0x72) returned 0x8c6f08 [0195.937] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x360 [0195.937] WaitForSingleObject (hHandle=0x360, dwMilliseconds=0x0) returned 0x102 [0195.937] CloseHandle (hObject=0x360) returned 1 [0195.937] GetProcessHeap () returned 0x8a0000 [0195.937] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x971230 | out: hHeap=0x8a0000) returned 1 [0195.937] GetProcessHeap () returned 0x8a0000 [0195.937] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c6f08 | out: hHeap=0x8a0000) returned 1 [0195.937] Sleep (dwMilliseconds=0x3e8) [0197.062] GetProcessHeap () returned 0x8a0000 [0197.062] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c81d8 [0197.062] GetProcessHeap () returned 0x8a0000 [0197.062] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c82c8 [0197.063] GetProcessHeap () returned 0x8a0000 [0197.063] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c7df0 [0197.063] GetProcessHeap () returned 0x8a0000 [0197.063] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x96dd88 [0197.063] GetProcessHeap () returned 0x8a0000 [0197.063] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x96dd88 | out: hHeap=0x8a0000) returned 1 [0197.063] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c82c8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0197.063] GetProcessHeap () returned 0x8a0000 [0197.063] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7df0 | out: hHeap=0x8a0000) returned 1 [0197.063] GetProcessHeap () returned 0x8a0000 [0197.063] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81d8 | out: hHeap=0x8a0000) returned 1 [0197.063] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0197.063] GetProcessHeap () returned 0x8a0000 [0197.063] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c82c8 | out: hHeap=0x8a0000) returned 1 [0197.063] GetProcessHeap () returned 0x8a0000 [0197.063] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x971158 [0197.063] GetProcessHeap () returned 0x8a0000 [0197.063] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x970ff0 [0197.063] GetProcessHeap () returned 0x8a0000 [0197.063] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x970ff0, Size=0x72) returned 0x8c7488 [0197.063] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x5bc [0197.063] WaitForSingleObject (hHandle=0x5bc, dwMilliseconds=0x0) returned 0x102 [0197.064] CloseHandle (hObject=0x5bc) returned 1 [0197.064] GetProcessHeap () returned 0x8a0000 [0197.064] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x971158 | out: hHeap=0x8a0000) returned 1 [0197.064] GetProcessHeap () returned 0x8a0000 [0197.064] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7488 | out: hHeap=0x8a0000) returned 1 [0197.064] Sleep (dwMilliseconds=0x3e8) [0198.211] GetProcessHeap () returned 0x8a0000 [0198.211] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c81d8 [0198.211] GetProcessHeap () returned 0x8a0000 [0198.211] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c7df0 [0198.211] GetProcessHeap () returned 0x8a0000 [0198.211] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c8368 [0198.211] GetProcessHeap () returned 0x8a0000 [0198.211] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x96d8c8 [0198.211] GetProcessHeap () returned 0x8a0000 [0198.211] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x96d8c8 | out: hHeap=0x8a0000) returned 1 [0198.211] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c7df0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0198.211] GetProcessHeap () returned 0x8a0000 [0198.211] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8368 | out: hHeap=0x8a0000) returned 1 [0198.211] GetProcessHeap () returned 0x8a0000 [0198.211] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81d8 | out: hHeap=0x8a0000) returned 1 [0198.211] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0198.211] GetProcessHeap () returned 0x8a0000 [0198.211] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7df0 | out: hHeap=0x8a0000) returned 1 [0198.211] GetProcessHeap () returned 0x8a0000 [0198.211] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x970df8 [0198.211] GetProcessHeap () returned 0x8a0000 [0198.211] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x970e40 [0198.212] GetProcessHeap () returned 0x8a0000 [0198.212] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x970e40, Size=0x72) returned 0x8c7188 [0198.212] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x3e4 [0198.212] WaitForSingleObject (hHandle=0x3e4, dwMilliseconds=0x0) returned 0x102 [0198.212] CloseHandle (hObject=0x3e4) returned 1 [0198.212] GetProcessHeap () returned 0x8a0000 [0198.212] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x970df8 | out: hHeap=0x8a0000) returned 1 [0198.212] GetProcessHeap () returned 0x8a0000 [0198.212] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7188 | out: hHeap=0x8a0000) returned 1 [0198.212] Sleep (dwMilliseconds=0x3e8) [0199.349] GetProcessHeap () returned 0x8a0000 [0199.349] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c7df0 [0199.349] GetProcessHeap () returned 0x8a0000 [0199.349] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c81d8 [0199.349] GetProcessHeap () returned 0x8a0000 [0199.349] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c8390 [0199.349] GetProcessHeap () returned 0x8a0000 [0199.349] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x96d960 [0199.349] GetProcessHeap () returned 0x8a0000 [0199.349] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x96d960 | out: hHeap=0x8a0000) returned 1 [0199.349] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c81d8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0199.349] GetProcessHeap () returned 0x8a0000 [0199.349] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8390 | out: hHeap=0x8a0000) returned 1 [0199.349] GetProcessHeap () returned 0x8a0000 [0199.349] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7df0 | out: hHeap=0x8a0000) returned 1 [0199.349] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0199.350] GetProcessHeap () returned 0x8a0000 [0199.350] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81d8 | out: hHeap=0x8a0000) returned 1 [0199.350] GetProcessHeap () returned 0x8a0000 [0199.350] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x970c90 [0199.350] GetProcessHeap () returned 0x8a0000 [0199.350] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x970e88 [0199.350] GetProcessHeap () returned 0x8a0000 [0199.350] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x970e88, Size=0x72) returned 0x8c7308 [0199.350] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x368 [0199.350] WaitForSingleObject (hHandle=0x368, dwMilliseconds=0x0) returned 0x102 [0199.350] CloseHandle (hObject=0x368) returned 1 [0199.350] GetProcessHeap () returned 0x8a0000 [0199.350] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x970c90 | out: hHeap=0x8a0000) returned 1 [0199.350] GetProcessHeap () returned 0x8a0000 [0199.350] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7308 | out: hHeap=0x8a0000) returned 1 [0199.350] Sleep (dwMilliseconds=0x3e8) [0200.501] GetProcessHeap () returned 0x8a0000 [0200.501] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c81d8 [0200.501] GetProcessHeap () returned 0x8a0000 [0200.508] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c7df0 [0200.508] GetProcessHeap () returned 0x8a0000 [0200.508] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c8368 [0200.508] GetProcessHeap () returned 0x8a0000 [0200.508] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x96d798 [0200.508] GetProcessHeap () returned 0x8a0000 [0200.508] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x96d798 | out: hHeap=0x8a0000) returned 1 [0200.510] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c7df0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0200.510] GetProcessHeap () returned 0x8a0000 [0200.510] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8368 | out: hHeap=0x8a0000) returned 1 [0200.510] GetProcessHeap () returned 0x8a0000 [0200.510] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81d8 | out: hHeap=0x8a0000) returned 1 [0200.510] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0200.547] GetProcessHeap () returned 0x8a0000 [0200.548] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7df0 | out: hHeap=0x8a0000) returned 1 [0200.548] GetProcessHeap () returned 0x8a0000 [0200.548] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x970ed0 [0200.548] GetProcessHeap () returned 0x8a0000 [0200.567] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x970df8 [0200.567] GetProcessHeap () returned 0x8a0000 [0200.567] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x970df8, Size=0x72) returned 0x8c7108 [0200.567] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x368 [0200.569] WaitForSingleObject (hHandle=0x368, dwMilliseconds=0x0) returned 0x102 [0200.569] CloseHandle (hObject=0x368) returned 1 [0200.569] GetProcessHeap () returned 0x8a0000 [0200.577] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x970ed0 | out: hHeap=0x8a0000) returned 1 [0200.577] GetProcessHeap () returned 0x8a0000 [0200.577] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7108 | out: hHeap=0x8a0000) returned 1 [0200.586] Sleep (dwMilliseconds=0x3e8) [0203.475] GetProcessHeap () returned 0x8a0000 [0203.475] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c81d8 [0203.486] GetProcessHeap () returned 0x8a0000 [0203.486] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c7df0 [0203.486] GetProcessHeap () returned 0x8a0000 [0203.486] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c84f8 [0203.486] GetProcessHeap () returned 0x8a0000 [0203.486] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x96da90 [0203.486] GetProcessHeap () returned 0x8a0000 [0203.486] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x96da90 | out: hHeap=0x8a0000) returned 1 [0203.486] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c7df0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0203.495] GetProcessHeap () returned 0x8a0000 [0203.495] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c84f8 | out: hHeap=0x8a0000) returned 1 [0203.496] GetProcessHeap () returned 0x8a0000 [0203.496] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81d8 | out: hHeap=0x8a0000) returned 1 [0203.496] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0203.602] GetProcessHeap () returned 0x8a0000 [0203.602] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7df0 | out: hHeap=0x8a0000) returned 1 [0203.602] GetProcessHeap () returned 0x8a0000 [0203.602] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x970d20 [0203.602] GetProcessHeap () returned 0x8a0000 [0203.603] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x971110 [0203.603] GetProcessHeap () returned 0x8a0000 [0203.603] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x971110, Size=0x72) returned 0x8c7008 [0203.603] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x368 [0203.603] WaitForSingleObject (hHandle=0x368, dwMilliseconds=0x0) returned 0x102 [0203.603] CloseHandle (hObject=0x368) returned 1 [0203.603] GetProcessHeap () returned 0x8a0000 [0203.603] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x970d20 | out: hHeap=0x8a0000) returned 1 [0203.603] GetProcessHeap () returned 0x8a0000 [0203.603] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7008 | out: hHeap=0x8a0000) returned 1 [0203.603] Sleep (dwMilliseconds=0x3e8) [0204.679] GetProcessHeap () returned 0x8a0000 [0204.679] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c81d8 [0204.679] GetProcessHeap () returned 0x8a0000 [0204.680] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c7df0 [0204.680] GetProcessHeap () returned 0x8a0000 [0204.680] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c8390 [0204.680] GetProcessHeap () returned 0x8a0000 [0204.680] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x96dd88 [0204.680] GetProcessHeap () returned 0x8a0000 [0204.680] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x96dd88 | out: hHeap=0x8a0000) returned 1 [0204.680] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c7df0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0204.680] GetProcessHeap () returned 0x8a0000 [0204.680] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8390 | out: hHeap=0x8a0000) returned 1 [0204.680] GetProcessHeap () returned 0x8a0000 [0204.680] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81d8 | out: hHeap=0x8a0000) returned 1 [0204.680] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0204.680] GetProcessHeap () returned 0x8a0000 [0204.680] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7df0 | out: hHeap=0x8a0000) returned 1 [0204.680] GetProcessHeap () returned 0x8a0000 [0204.680] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x970e40 [0204.680] GetProcessHeap () returned 0x8a0000 [0204.680] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x970c90 [0204.680] GetProcessHeap () returned 0x8a0000 [0204.680] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x970c90, Size=0x72) returned 0x8c7288 [0204.680] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x368 [0204.680] WaitForSingleObject (hHandle=0x368, dwMilliseconds=0x0) returned 0x102 [0204.680] CloseHandle (hObject=0x368) returned 1 [0204.680] GetProcessHeap () returned 0x8a0000 [0204.680] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x970e40 | out: hHeap=0x8a0000) returned 1 [0204.680] GetProcessHeap () returned 0x8a0000 [0204.681] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7288 | out: hHeap=0x8a0000) returned 1 [0204.681] Sleep (dwMilliseconds=0x3e8) [0205.881] GetProcessHeap () returned 0x8a0000 [0205.881] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c81d8 [0205.881] GetProcessHeap () returned 0x8a0000 [0205.881] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c7df0 [0205.881] GetProcessHeap () returned 0x8a0000 [0205.881] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c8548 [0205.881] GetProcessHeap () returned 0x8a0000 [0205.881] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x96d538 [0205.881] GetProcessHeap () returned 0x8a0000 [0205.881] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x96d538 | out: hHeap=0x8a0000) returned 1 [0205.881] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c7df0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0205.881] GetProcessHeap () returned 0x8a0000 [0205.881] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8548 | out: hHeap=0x8a0000) returned 1 [0205.881] GetProcessHeap () returned 0x8a0000 [0205.881] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81d8 | out: hHeap=0x8a0000) returned 1 [0205.881] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0205.881] GetProcessHeap () returned 0x8a0000 [0205.881] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7df0 | out: hHeap=0x8a0000) returned 1 [0205.881] GetProcessHeap () returned 0x8a0000 [0205.881] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x970df8 [0205.881] GetProcessHeap () returned 0x8a0000 [0205.881] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x970f18 [0205.881] GetProcessHeap () returned 0x8a0000 [0205.881] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x970f18, Size=0x72) returned 0x8c6f88 [0205.881] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x368 [0205.881] WaitForSingleObject (hHandle=0x368, dwMilliseconds=0x0) returned 0x102 [0205.881] CloseHandle (hObject=0x368) returned 1 [0205.882] GetProcessHeap () returned 0x8a0000 [0205.882] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x970df8 | out: hHeap=0x8a0000) returned 1 [0205.882] GetProcessHeap () returned 0x8a0000 [0205.882] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c6f88 | out: hHeap=0x8a0000) returned 1 [0205.882] Sleep (dwMilliseconds=0x3e8) [0206.942] GetProcessHeap () returned 0x8a0000 [0206.942] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c7df0 [0206.942] GetProcessHeap () returned 0x8a0000 [0206.942] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c81d8 [0206.942] GetProcessHeap () returned 0x8a0000 [0206.942] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c84a8 [0206.942] GetProcessHeap () returned 0x8a0000 [0206.942] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x96d9f8 [0206.942] GetProcessHeap () returned 0x8a0000 [0206.942] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x96d9f8 | out: hHeap=0x8a0000) returned 1 [0206.942] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c81d8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0206.942] GetProcessHeap () returned 0x8a0000 [0206.942] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c84a8 | out: hHeap=0x8a0000) returned 1 [0206.942] GetProcessHeap () returned 0x8a0000 [0206.942] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7df0 | out: hHeap=0x8a0000) returned 1 [0206.942] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0206.943] GetProcessHeap () returned 0x8a0000 [0206.943] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81d8 | out: hHeap=0x8a0000) returned 1 [0206.943] GetProcessHeap () returned 0x8a0000 [0206.943] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x9710c8 [0206.943] GetProcessHeap () returned 0x8a0000 [0206.943] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x970f60 [0206.943] GetProcessHeap () returned 0x8a0000 [0206.943] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x970f60, Size=0x72) returned 0x8c7308 [0206.943] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x368 [0206.943] WaitForSingleObject (hHandle=0x368, dwMilliseconds=0x0) returned 0x102 [0206.943] CloseHandle (hObject=0x368) returned 1 [0206.943] GetProcessHeap () returned 0x8a0000 [0206.943] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x9710c8 | out: hHeap=0x8a0000) returned 1 [0206.943] GetProcessHeap () returned 0x8a0000 [0206.943] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7308 | out: hHeap=0x8a0000) returned 1 [0206.943] Sleep (dwMilliseconds=0x3e8) [0208.429] GetProcessHeap () returned 0x8a0000 [0208.499] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c81d8 [0208.499] GetProcessHeap () returned 0x8a0000 [0208.499] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c7df0 [0208.503] GetProcessHeap () returned 0x8a0000 [0208.503] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c8570 [0208.505] GetProcessHeap () returned 0x8a0000 [0208.505] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x96d5d0 [0208.511] GetProcessHeap () returned 0x8a0000 [0208.511] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x96d5d0 | out: hHeap=0x8a0000) returned 1 [0208.511] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c7df0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0208.511] GetProcessHeap () returned 0x8a0000 [0208.511] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8570 | out: hHeap=0x8a0000) returned 1 [0208.511] GetProcessHeap () returned 0x8a0000 [0208.511] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81d8 | out: hHeap=0x8a0000) returned 1 [0208.511] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0208.515] GetProcessHeap () returned 0x8a0000 [0208.515] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7df0 | out: hHeap=0x8a0000) returned 1 [0208.515] GetProcessHeap () returned 0x8a0000 [0208.515] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x971230 [0208.515] GetProcessHeap () returned 0x8a0000 [0208.515] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x970ed0 [0208.515] GetProcessHeap () returned 0x8a0000 [0208.515] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x970ed0, Size=0x72) returned 0x8c7388 [0208.516] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x368 [0208.517] WaitForSingleObject (hHandle=0x368, dwMilliseconds=0x0) returned 0x102 [0208.517] CloseHandle (hObject=0x368) returned 1 [0208.518] GetProcessHeap () returned 0x8a0000 [0208.518] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x971230 | out: hHeap=0x8a0000) returned 1 [0208.518] GetProcessHeap () returned 0x8a0000 [0208.526] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7388 | out: hHeap=0x8a0000) returned 1 [0208.527] Sleep (dwMilliseconds=0x3e8) [0209.592] GetProcessHeap () returned 0x8a0000 [0209.592] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c84f8 [0209.592] GetProcessHeap () returned 0x8a0000 [0209.592] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c84a8 [0209.592] GetProcessHeap () returned 0x8a0000 [0209.592] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c8408 [0209.592] GetProcessHeap () returned 0x8a0000 [0209.592] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x96dcf0 [0209.592] GetProcessHeap () returned 0x8a0000 [0209.592] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x96dcf0 | out: hHeap=0x8a0000) returned 1 [0209.592] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c84a8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0209.592] GetProcessHeap () returned 0x8a0000 [0209.592] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8408 | out: hHeap=0x8a0000) returned 1 [0209.592] GetProcessHeap () returned 0x8a0000 [0209.592] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c84f8 | out: hHeap=0x8a0000) returned 1 [0209.592] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0209.592] GetProcessHeap () returned 0x8a0000 [0209.592] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c84a8 | out: hHeap=0x8a0000) returned 1 [0209.592] GetProcessHeap () returned 0x8a0000 [0209.592] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x970ed0 [0209.593] GetProcessHeap () returned 0x8a0000 [0209.593] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x971278 [0209.593] GetProcessHeap () returned 0x8a0000 [0209.593] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x971278, Size=0x72) returned 0x8c6f08 [0209.593] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x448 [0209.593] WaitForSingleObject (hHandle=0x448, dwMilliseconds=0x0) returned 0x102 [0209.593] CloseHandle (hObject=0x448) returned 1 [0209.593] GetProcessHeap () returned 0x8a0000 [0209.593] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x970ed0 | out: hHeap=0x8a0000) returned 1 [0209.593] GetProcessHeap () returned 0x8a0000 [0209.593] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c6f08 | out: hHeap=0x8a0000) returned 1 [0209.593] Sleep (dwMilliseconds=0x3e8) [0210.626] GetProcessHeap () returned 0x8a0000 [0210.626] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c8480 [0210.626] GetProcessHeap () returned 0x8a0000 [0210.626] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c8368 [0210.626] GetProcessHeap () returned 0x8a0000 [0210.626] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c83e0 [0210.626] GetProcessHeap () returned 0x8a0000 [0210.626] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x96d9f8 [0210.626] GetProcessHeap () returned 0x8a0000 [0210.626] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x96d9f8 | out: hHeap=0x8a0000) returned 1 [0210.626] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c8368, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0210.626] GetProcessHeap () returned 0x8a0000 [0210.626] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c83e0 | out: hHeap=0x8a0000) returned 1 [0210.626] GetProcessHeap () returned 0x8a0000 [0210.626] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8480 | out: hHeap=0x8a0000) returned 1 [0210.626] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0210.627] GetProcessHeap () returned 0x8a0000 [0210.627] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8368 | out: hHeap=0x8a0000) returned 1 [0210.627] GetProcessHeap () returned 0x8a0000 [0210.627] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x971158 [0210.627] GetProcessHeap () returned 0x8a0000 [0210.627] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x971278 [0210.627] GetProcessHeap () returned 0x8a0000 [0210.627] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x971278, Size=0x72) returned 0x8c7008 [0210.627] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x360 [0210.627] WaitForSingleObject (hHandle=0x360, dwMilliseconds=0x0) returned 0x102 [0210.627] CloseHandle (hObject=0x360) returned 1 [0210.627] GetProcessHeap () returned 0x8a0000 [0210.627] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x971158 | out: hHeap=0x8a0000) returned 1 [0210.627] GetProcessHeap () returned 0x8a0000 [0210.627] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7008 | out: hHeap=0x8a0000) returned 1 [0210.627] Sleep (dwMilliseconds=0x3e8) [0211.635] GetProcessHeap () returned 0x8a0000 [0211.635] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c8368 [0211.635] GetProcessHeap () returned 0x8a0000 [0211.635] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c8430 [0211.635] GetProcessHeap () returned 0x8a0000 [0211.635] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c8390 [0211.635] GetProcessHeap () returned 0x8a0000 [0211.635] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x8e6d78 [0211.635] GetProcessHeap () returned 0x8a0000 [0211.635] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8e6d78 | out: hHeap=0x8a0000) returned 1 [0211.635] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c8430, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0211.635] GetProcessHeap () returned 0x8a0000 [0211.635] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8390 | out: hHeap=0x8a0000) returned 1 [0211.635] GetProcessHeap () returned 0x8a0000 [0211.635] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8368 | out: hHeap=0x8a0000) returned 1 [0211.635] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0211.636] GetProcessHeap () returned 0x8a0000 [0211.636] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8430 | out: hHeap=0x8a0000) returned 1 [0211.636] GetProcessHeap () returned 0x8a0000 [0211.636] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x970e40 [0211.636] GetProcessHeap () returned 0x8a0000 [0211.636] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x970cd8 [0211.636] GetProcessHeap () returned 0x8a0000 [0211.636] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x970cd8, Size=0x72) returned 0x8c7188 [0211.636] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x360 [0211.636] WaitForSingleObject (hHandle=0x360, dwMilliseconds=0x0) returned 0x102 [0211.636] CloseHandle (hObject=0x360) returned 1 [0211.636] GetProcessHeap () returned 0x8a0000 [0211.636] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x970e40 | out: hHeap=0x8a0000) returned 1 [0211.636] GetProcessHeap () returned 0x8a0000 [0211.636] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7188 | out: hHeap=0x8a0000) returned 1 [0211.636] Sleep (dwMilliseconds=0x3e8) [0213.277] GetProcessHeap () returned 0x8a0000 [0213.277] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c8570 [0213.285] GetProcessHeap () returned 0x8a0000 [0213.285] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c8548 [0213.285] GetProcessHeap () returned 0x8a0000 [0213.287] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c8368 [0213.287] GetProcessHeap () returned 0x8a0000 [0213.288] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x8e6e10 [0213.288] GetProcessHeap () returned 0x8a0000 [0213.288] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8e6e10 | out: hHeap=0x8a0000) returned 1 [0213.288] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c8548, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0213.288] GetProcessHeap () returned 0x8a0000 [0213.289] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8368 | out: hHeap=0x8a0000) returned 1 [0213.289] GetProcessHeap () returned 0x8a0000 [0213.289] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8570 | out: hHeap=0x8a0000) returned 1 [0213.289] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0213.290] GetProcessHeap () returned 0x8a0000 [0213.290] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8548 | out: hHeap=0x8a0000) returned 1 [0213.290] GetProcessHeap () returned 0x8a0000 [0213.290] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x970df8 [0213.290] GetProcessHeap () returned 0x8a0000 [0213.290] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x970e40 [0213.290] GetProcessHeap () returned 0x8a0000 [0213.290] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x970e40, Size=0x72) returned 0x8c7188 [0213.290] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x360 [0213.290] WaitForSingleObject (hHandle=0x360, dwMilliseconds=0x0) returned 0x102 [0213.290] CloseHandle (hObject=0x360) returned 1 [0213.290] GetProcessHeap () returned 0x8a0000 [0213.290] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x970df8 | out: hHeap=0x8a0000) returned 1 [0213.290] GetProcessHeap () returned 0x8a0000 [0213.290] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7188 | out: hHeap=0x8a0000) returned 1 [0213.290] Sleep (dwMilliseconds=0x3e8) [0214.822] GetProcessHeap () returned 0x8a0000 [0214.822] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c8480 [0214.822] GetProcessHeap () returned 0x8a0000 [0214.822] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c84a8 [0214.822] GetProcessHeap () returned 0x8a0000 [0214.822] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c8368 [0214.822] GetProcessHeap () returned 0x8a0000 [0214.822] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x8e6b18 [0214.822] GetProcessHeap () returned 0x8a0000 [0214.822] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8e6b18 | out: hHeap=0x8a0000) returned 1 [0214.822] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c84a8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0214.822] GetProcessHeap () returned 0x8a0000 [0214.822] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8368 | out: hHeap=0x8a0000) returned 1 [0214.822] GetProcessHeap () returned 0x8a0000 [0214.822] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8480 | out: hHeap=0x8a0000) returned 1 [0214.822] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0214.822] GetProcessHeap () returned 0x8a0000 [0214.822] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c84a8 | out: hHeap=0x8a0000) returned 1 [0214.822] GetProcessHeap () returned 0x8a0000 [0214.822] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x971110 [0214.823] GetProcessHeap () returned 0x8a0000 [0214.823] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x970f18 [0214.823] GetProcessHeap () returned 0x8a0000 [0214.823] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x970f18, Size=0x72) returned 0x8c7108 [0214.823] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x360 [0214.823] WaitForSingleObject (hHandle=0x360, dwMilliseconds=0x0) returned 0x102 [0214.823] CloseHandle (hObject=0x360) returned 1 [0214.823] GetProcessHeap () returned 0x8a0000 [0214.823] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x971110 | out: hHeap=0x8a0000) returned 1 [0214.823] GetProcessHeap () returned 0x8a0000 [0214.823] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7108 | out: hHeap=0x8a0000) returned 1 [0214.823] Sleep (dwMilliseconds=0x3e8) [0216.503] GetProcessHeap () returned 0x8a0000 [0216.503] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c8368 [0216.503] GetProcessHeap () returned 0x8a0000 [0216.503] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c8408 [0216.503] GetProcessHeap () returned 0x8a0000 [0216.503] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c84a8 [0216.503] GetProcessHeap () returned 0x8a0000 [0216.503] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x8e6d78 [0216.503] GetProcessHeap () returned 0x8a0000 [0216.503] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8e6d78 | out: hHeap=0x8a0000) returned 1 [0216.503] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c8408, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0216.503] GetProcessHeap () returned 0x8a0000 [0216.503] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c84a8 | out: hHeap=0x8a0000) returned 1 [0216.503] GetProcessHeap () returned 0x8a0000 [0216.503] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8368 | out: hHeap=0x8a0000) returned 1 [0216.503] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0216.503] GetProcessHeap () returned 0x8a0000 [0216.504] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8408 | out: hHeap=0x8a0000) returned 1 [0216.504] GetProcessHeap () returned 0x8a0000 [0216.504] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x970cd8 [0216.504] GetProcessHeap () returned 0x8a0000 [0216.504] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x971158 [0216.505] GetProcessHeap () returned 0x8a0000 [0216.513] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x971158, Size=0x72) returned 0x8c7588 [0216.513] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x360 [0216.513] WaitForSingleObject (hHandle=0x360, dwMilliseconds=0x0) returned 0x102 [0216.513] CloseHandle (hObject=0x360) returned 1 [0216.513] GetProcessHeap () returned 0x8a0000 [0216.513] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x970cd8 | out: hHeap=0x8a0000) returned 1 [0216.513] GetProcessHeap () returned 0x8a0000 [0216.513] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7588 | out: hHeap=0x8a0000) returned 1 [0216.513] Sleep (dwMilliseconds=0x3e8) [0217.766] GetProcessHeap () returned 0x8a0000 [0217.766] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c8430 [0217.767] GetProcessHeap () returned 0x8a0000 [0217.767] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c84a8 [0217.767] GetProcessHeap () returned 0x8a0000 [0217.767] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c84d0 [0217.767] GetProcessHeap () returned 0x8a0000 [0217.767] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x8e7070 [0217.767] GetProcessHeap () returned 0x8a0000 [0217.774] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8e7070 | out: hHeap=0x8a0000) returned 1 [0217.774] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c84a8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0217.774] GetProcessHeap () returned 0x8a0000 [0217.774] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c84d0 | out: hHeap=0x8a0000) returned 1 [0217.774] GetProcessHeap () returned 0x8a0000 [0217.774] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8430 | out: hHeap=0x8a0000) returned 1 [0217.774] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0217.787] GetProcessHeap () returned 0x8a0000 [0217.787] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c84a8 | out: hHeap=0x8a0000) returned 1 [0217.787] GetProcessHeap () returned 0x8a0000 [0217.787] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x971278 [0217.787] GetProcessHeap () returned 0x8a0000 [0217.789] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x970c90 [0217.789] GetProcessHeap () returned 0x8a0000 [0217.790] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x970c90, Size=0x72) returned 0x8c7108 [0217.790] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x360 [0217.790] WaitForSingleObject (hHandle=0x360, dwMilliseconds=0x0) returned 0x102 [0217.790] CloseHandle (hObject=0x360) returned 1 [0217.790] GetProcessHeap () returned 0x8a0000 [0217.790] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x971278 | out: hHeap=0x8a0000) returned 1 [0217.790] GetProcessHeap () returned 0x8a0000 [0217.790] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7108 | out: hHeap=0x8a0000) returned 1 [0217.791] Sleep (dwMilliseconds=0x3e8) [0219.573] GetProcessHeap () returned 0x8a0000 [0219.573] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c8480 [0219.573] GetProcessHeap () returned 0x8a0000 [0219.573] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c83e0 [0219.573] GetProcessHeap () returned 0x8a0000 [0219.573] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c8368 [0219.573] GetProcessHeap () returned 0x8a0000 [0219.573] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x8e6fd8 [0219.573] GetProcessHeap () returned 0x8a0000 [0219.573] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8e6fd8 | out: hHeap=0x8a0000) returned 1 [0219.573] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c83e0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0219.573] GetProcessHeap () returned 0x8a0000 [0219.573] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8368 | out: hHeap=0x8a0000) returned 1 [0219.573] GetProcessHeap () returned 0x8a0000 [0219.573] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8480 | out: hHeap=0x8a0000) returned 1 [0219.573] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0219.573] GetProcessHeap () returned 0x8a0000 [0219.573] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c83e0 | out: hHeap=0x8a0000) returned 1 [0219.574] GetProcessHeap () returned 0x8a0000 [0219.574] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x970ff0 [0219.574] GetProcessHeap () returned 0x8a0000 [0219.574] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x971080 [0219.574] GetProcessHeap () returned 0x8a0000 [0219.574] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x971080, Size=0x72) returned 0x8c7308 [0219.574] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x360 [0219.574] WaitForSingleObject (hHandle=0x360, dwMilliseconds=0x0) returned 0x102 [0219.574] CloseHandle (hObject=0x360) returned 1 [0219.574] GetProcessHeap () returned 0x8a0000 [0219.574] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x970ff0 | out: hHeap=0x8a0000) returned 1 [0219.574] GetProcessHeap () returned 0x8a0000 [0219.574] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7308 | out: hHeap=0x8a0000) returned 1 [0219.574] Sleep (dwMilliseconds=0x3e8) [0220.677] GetProcessHeap () returned 0x8a0000 [0220.677] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c8368 [0220.677] GetProcessHeap () returned 0x8a0000 [0220.677] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c8570 [0220.677] GetProcessHeap () returned 0x8a0000 [0220.678] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c8458 [0220.678] GetProcessHeap () returned 0x8a0000 [0220.678] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x8e6ea8 [0220.678] GetProcessHeap () returned 0x8a0000 [0220.678] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8e6ea8 | out: hHeap=0x8a0000) returned 1 [0220.678] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c8570, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0220.678] GetProcessHeap () returned 0x8a0000 [0220.678] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8458 | out: hHeap=0x8a0000) returned 1 [0220.678] GetProcessHeap () returned 0x8a0000 [0220.678] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8368 | out: hHeap=0x8a0000) returned 1 [0220.678] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0220.679] GetProcessHeap () returned 0x8a0000 [0220.679] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8570 | out: hHeap=0x8a0000) returned 1 [0220.680] GetProcessHeap () returned 0x8a0000 [0220.680] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x970c90 [0220.680] GetProcessHeap () returned 0x8a0000 [0220.680] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x970e40 [0220.680] GetProcessHeap () returned 0x8a0000 [0220.687] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x970e40, Size=0x72) returned 0x8c7208 [0220.692] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x368 [0220.692] WaitForSingleObject (hHandle=0x368, dwMilliseconds=0x0) returned 0x102 [0220.692] CloseHandle (hObject=0x368) returned 1 [0220.692] GetProcessHeap () returned 0x8a0000 [0220.692] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x970c90 | out: hHeap=0x8a0000) returned 1 [0220.692] GetProcessHeap () returned 0x8a0000 [0220.692] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7208 | out: hHeap=0x8a0000) returned 1 [0220.693] Sleep (dwMilliseconds=0x3e8) [0222.009] GetProcessHeap () returned 0x8a0000 [0222.009] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c84d0 [0222.009] GetProcessHeap () returned 0x8a0000 [0222.009] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c8548 [0222.009] GetProcessHeap () returned 0x8a0000 [0222.009] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c8480 [0222.009] GetProcessHeap () returned 0x8a0000 [0222.009] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x8e6d78 [0222.009] GetProcessHeap () returned 0x8a0000 [0222.009] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8e6d78 | out: hHeap=0x8a0000) returned 1 [0222.009] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c8548, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0222.009] GetProcessHeap () returned 0x8a0000 [0222.009] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8480 | out: hHeap=0x8a0000) returned 1 [0222.009] GetProcessHeap () returned 0x8a0000 [0222.009] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c84d0 | out: hHeap=0x8a0000) returned 1 [0222.009] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0222.009] GetProcessHeap () returned 0x8a0000 [0222.009] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8548 | out: hHeap=0x8a0000) returned 1 [0222.009] GetProcessHeap () returned 0x8a0000 [0222.009] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x9711a0 [0222.009] GetProcessHeap () returned 0x8a0000 [0222.010] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x970ff0 [0222.010] GetProcessHeap () returned 0x8a0000 [0222.010] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x970ff0, Size=0x72) returned 0x8c7388 [0222.010] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x360 [0222.010] WaitForSingleObject (hHandle=0x360, dwMilliseconds=0x0) returned 0x102 [0222.010] CloseHandle (hObject=0x360) returned 1 [0222.010] GetProcessHeap () returned 0x8a0000 [0222.010] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x9711a0 | out: hHeap=0x8a0000) returned 1 [0222.010] GetProcessHeap () returned 0x8a0000 [0222.010] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7388 | out: hHeap=0x8a0000) returned 1 [0222.010] Sleep (dwMilliseconds=0x3e8) [0223.092] GetProcessHeap () returned 0x8a0000 [0223.095] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c8368 [0223.095] GetProcessHeap () returned 0x8a0000 [0223.095] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c84f8 [0223.096] GetProcessHeap () returned 0x8a0000 [0223.096] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c83e0 [0223.096] GetProcessHeap () returned 0x8a0000 [0223.096] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x8e6ea8 [0223.096] GetProcessHeap () returned 0x8a0000 [0223.096] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8e6ea8 | out: hHeap=0x8a0000) returned 1 [0223.096] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c84f8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0223.096] GetProcessHeap () returned 0x8a0000 [0223.096] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c83e0 | out: hHeap=0x8a0000) returned 1 [0223.096] GetProcessHeap () returned 0x8a0000 [0223.096] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8368 | out: hHeap=0x8a0000) returned 1 [0223.096] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0223.106] GetProcessHeap () returned 0x8a0000 [0223.106] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c84f8 | out: hHeap=0x8a0000) returned 1 [0223.106] GetProcessHeap () returned 0x8a0000 [0223.108] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x9711a0 [0223.108] GetProcessHeap () returned 0x8a0000 [0223.108] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x970c90 [0223.108] GetProcessHeap () returned 0x8a0000 [0223.108] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x970c90, Size=0x72) returned 0x8c7008 [0223.108] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x628 [0223.108] WaitForSingleObject (hHandle=0x628, dwMilliseconds=0x0) returned 0x102 [0223.109] CloseHandle (hObject=0x628) returned 1 [0223.109] GetProcessHeap () returned 0x8a0000 [0223.109] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x9711a0 | out: hHeap=0x8a0000) returned 1 [0223.119] GetProcessHeap () returned 0x8a0000 [0223.119] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7008 | out: hHeap=0x8a0000) returned 1 [0223.120] Sleep (dwMilliseconds=0x3e8) [0224.209] GetProcessHeap () returned 0x8a0000 [0224.209] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c8430 [0224.209] GetProcessHeap () returned 0x8a0000 [0224.209] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c8368 [0224.209] GetProcessHeap () returned 0x8a0000 [0224.209] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c8458 [0224.209] GetProcessHeap () returned 0x8a0000 [0224.209] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x8e7108 [0224.209] GetProcessHeap () returned 0x8a0000 [0224.209] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8e7108 | out: hHeap=0x8a0000) returned 1 [0224.209] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c8368, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0224.210] GetProcessHeap () returned 0x8a0000 [0224.217] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8458 | out: hHeap=0x8a0000) returned 1 [0224.217] GetProcessHeap () returned 0x8a0000 [0224.217] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8430 | out: hHeap=0x8a0000) returned 1 [0224.217] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x241f9c8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x241f9c8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0224.230] GetProcessHeap () returned 0x8a0000 [0224.230] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8368 | out: hHeap=0x8a0000) returned 1 [0224.230] GetProcessHeap () returned 0x8a0000 [0224.230] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x970e40 [0224.230] GetProcessHeap () returned 0x8a0000 [0224.231] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x3a) returned 0x970c90 [0224.231] GetProcessHeap () returned 0x8a0000 [0224.232] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x970c90, Size=0x72) returned 0x8c6f08 [0224.238] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x468 [0224.241] WaitForSingleObject (hHandle=0x468, dwMilliseconds=0x0) returned 0x102 [0224.242] CloseHandle (hObject=0x468) returned 1 [0224.248] GetProcessHeap () returned 0x8a0000 [0224.248] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x970e40 | out: hHeap=0x8a0000) returned 1 [0224.248] GetProcessHeap () returned 0x8a0000 [0224.248] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c6f08 | out: hHeap=0x8a0000) returned 1 [0224.251] Sleep (dwMilliseconds=0x3e8) Thread: id = 71 os_tid = 0xe8c [0129.823] GetProcessHeap () returned 0x8a0000 [0129.823] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x440) returned 0x8c9e08 [0129.823] GetProcessHeap () returned 0x8a0000 [0129.823] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x434) returned 0x8ca250 [0129.823] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x250 [0129.830] Process32FirstW (in: hSnapshot=0x250, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0129.830] Process32NextW (in: hSnapshot=0x250, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0129.831] Process32NextW (in: hSnapshot=0x250, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0129.831] Process32NextW (in: hSnapshot=0x250, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0129.831] Process32NextW (in: hSnapshot=0x250, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0129.832] Process32NextW (in: hSnapshot=0x250, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0129.832] Process32NextW (in: hSnapshot=0x250, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0129.832] Process32NextW (in: hSnapshot=0x250, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0129.833] Process32NextW (in: hSnapshot=0x250, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0129.833] Process32NextW (in: hSnapshot=0x250, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0129.833] Process32NextW (in: hSnapshot=0x250, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0129.834] Process32NextW (in: hSnapshot=0x250, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0129.834] Process32NextW (in: hSnapshot=0x250, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0129.834] Process32NextW (in: hSnapshot=0x250, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0129.835] Process32NextW (in: hSnapshot=0x250, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0129.835] Process32NextW (in: hSnapshot=0x250, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0129.835] Process32NextW (in: hSnapshot=0x250, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0129.836] Process32NextW (in: hSnapshot=0x250, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x40, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0129.836] Process32NextW (in: hSnapshot=0x250, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0129.836] Process32NextW (in: hSnapshot=0x250, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0129.837] Process32NextW (in: hSnapshot=0x250, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0129.837] Process32NextW (in: hSnapshot=0x250, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0129.838] Process32NextW (in: hSnapshot=0x250, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0129.838] Process32NextW (in: hSnapshot=0x250, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0129.838] Process32NextW (in: hSnapshot=0x250, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0129.839] Process32NextW (in: hSnapshot=0x250, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0129.839] Process32NextW (in: hSnapshot=0x250, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0129.839] Process32NextW (in: hSnapshot=0x250, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0129.840] Process32NextW (in: hSnapshot=0x250, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0129.840] Process32NextW (in: hSnapshot=0x250, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0129.840] Process32NextW (in: hSnapshot=0x250, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0129.843] Process32NextW (in: hSnapshot=0x250, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0129.843] Process32NextW (in: hSnapshot=0x250, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0129.844] Process32NextW (in: hSnapshot=0x250, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4d, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0129.844] Process32NextW (in: hSnapshot=0x250, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0129.845] Process32NextW (in: hSnapshot=0x250, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0129.845] Process32NextW (in: hSnapshot=0x250, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0129.845] Process32NextW (in: hSnapshot=0x250, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0129.846] Process32NextW (in: hSnapshot=0x250, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0129.846] Process32NextW (in: hSnapshot=0x250, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0129.847] Process32NextW (in: hSnapshot=0x250, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xdb4, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0129.847] Process32NextW (in: hSnapshot=0x250, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x19c, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0129.848] Process32NextW (in: hSnapshot=0x250, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x19c, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0129.848] Process32NextW (in: hSnapshot=0x250, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x19c, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 0 [0129.848] CloseHandle (hObject=0x250) returned 1 [0129.848] Sleep (dwMilliseconds=0x1f4) [0130.562] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x33c [0130.568] Process32FirstW (in: hSnapshot=0x33c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0130.569] Process32NextW (in: hSnapshot=0x33c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0130.569] Process32NextW (in: hSnapshot=0x33c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0130.569] Process32NextW (in: hSnapshot=0x33c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0130.570] Process32NextW (in: hSnapshot=0x33c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0130.570] Process32NextW (in: hSnapshot=0x33c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0130.571] Process32NextW (in: hSnapshot=0x33c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0130.571] Process32NextW (in: hSnapshot=0x33c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0130.571] Process32NextW (in: hSnapshot=0x33c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0130.572] Process32NextW (in: hSnapshot=0x33c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0130.572] Process32NextW (in: hSnapshot=0x33c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0130.572] Process32NextW (in: hSnapshot=0x33c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.573] Process32NextW (in: hSnapshot=0x33c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.573] Process32NextW (in: hSnapshot=0x33c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0130.574] Process32NextW (in: hSnapshot=0x33c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.574] Process32NextW (in: hSnapshot=0x33c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.575] Process32NextW (in: hSnapshot=0x33c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.575] Process32NextW (in: hSnapshot=0x33c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x40, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.575] Process32NextW (in: hSnapshot=0x33c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.576] Process32NextW (in: hSnapshot=0x33c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.576] Process32NextW (in: hSnapshot=0x33c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.577] Process32NextW (in: hSnapshot=0x33c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.577] Process32NextW (in: hSnapshot=0x33c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.577] Process32NextW (in: hSnapshot=0x33c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.578] Process32NextW (in: hSnapshot=0x33c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0130.578] Process32NextW (in: hSnapshot=0x33c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.578] Process32NextW (in: hSnapshot=0x33c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0130.579] Process32NextW (in: hSnapshot=0x33c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0130.579] Process32NextW (in: hSnapshot=0x33c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0130.580] Process32NextW (in: hSnapshot=0x33c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0130.580] Process32NextW (in: hSnapshot=0x33c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.580] Process32NextW (in: hSnapshot=0x33c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0130.581] Process32NextW (in: hSnapshot=0x33c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0130.581] Process32NextW (in: hSnapshot=0x33c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4d, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0130.582] Process32NextW (in: hSnapshot=0x33c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0130.582] Process32NextW (in: hSnapshot=0x33c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0130.582] Process32NextW (in: hSnapshot=0x33c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0130.583] Process32NextW (in: hSnapshot=0x33c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0130.583] Process32NextW (in: hSnapshot=0x33c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0130.584] Process32NextW (in: hSnapshot=0x33c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0130.585] Process32NextW (in: hSnapshot=0x33c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xdb4, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0130.585] Process32NextW (in: hSnapshot=0x33c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x19c, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0130.586] Process32NextW (in: hSnapshot=0x33c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x19c, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0130.586] Process32NextW (in: hSnapshot=0x33c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x19c, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 0 [0130.587] CloseHandle (hObject=0x33c) returned 1 [0130.587] Sleep (dwMilliseconds=0x1f4) [0131.362] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x364 [0131.367] Process32FirstW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0131.368] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0131.368] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0131.368] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0131.369] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0131.369] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0131.370] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0131.370] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0131.370] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0131.371] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0131.371] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0131.372] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0131.372] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0131.372] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0131.373] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0131.373] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0131.374] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0131.374] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x40, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0131.374] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0131.375] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0131.375] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0131.376] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0131.376] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0131.376] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0131.377] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0131.377] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0131.378] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0131.378] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0131.378] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0131.379] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0131.379] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0131.379] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0131.380] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0131.380] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0131.381] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0131.381] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0131.382] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0131.382] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0131.382] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0131.383] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0131.383] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xdb4, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0131.384] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x19c, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0131.384] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x19c, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0131.384] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x19c, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 0 [0131.385] CloseHandle (hObject=0x364) returned 1 [0131.385] Sleep (dwMilliseconds=0x1f4) [0132.090] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x350 [0132.094] Process32FirstW (in: hSnapshot=0x350, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0132.094] Process32NextW (in: hSnapshot=0x350, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0132.095] Process32NextW (in: hSnapshot=0x350, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0132.095] Process32NextW (in: hSnapshot=0x350, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0132.096] Process32NextW (in: hSnapshot=0x350, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0132.096] Process32NextW (in: hSnapshot=0x350, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0132.096] Process32NextW (in: hSnapshot=0x350, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0132.097] Process32NextW (in: hSnapshot=0x350, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0132.097] Process32NextW (in: hSnapshot=0x350, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0132.098] Process32NextW (in: hSnapshot=0x350, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0132.098] Process32NextW (in: hSnapshot=0x350, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0132.098] Process32NextW (in: hSnapshot=0x350, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.099] Process32NextW (in: hSnapshot=0x350, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.099] Process32NextW (in: hSnapshot=0x350, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0132.100] Process32NextW (in: hSnapshot=0x350, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.100] Process32NextW (in: hSnapshot=0x350, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.100] Process32NextW (in: hSnapshot=0x350, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.101] Process32NextW (in: hSnapshot=0x350, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x40, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.101] Process32NextW (in: hSnapshot=0x350, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.102] Process32NextW (in: hSnapshot=0x350, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.102] Process32NextW (in: hSnapshot=0x350, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.102] Process32NextW (in: hSnapshot=0x350, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.103] Process32NextW (in: hSnapshot=0x350, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.103] Process32NextW (in: hSnapshot=0x350, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.104] Process32NextW (in: hSnapshot=0x350, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0132.104] Process32NextW (in: hSnapshot=0x350, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.104] Process32NextW (in: hSnapshot=0x350, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0132.105] Process32NextW (in: hSnapshot=0x350, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0132.105] Process32NextW (in: hSnapshot=0x350, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0132.106] Process32NextW (in: hSnapshot=0x350, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0132.106] Process32NextW (in: hSnapshot=0x350, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.106] Process32NextW (in: hSnapshot=0x350, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0132.107] Process32NextW (in: hSnapshot=0x350, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0132.107] Process32NextW (in: hSnapshot=0x350, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0132.107] Process32NextW (in: hSnapshot=0x350, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0132.108] Process32NextW (in: hSnapshot=0x350, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0132.108] Process32NextW (in: hSnapshot=0x350, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0132.109] Process32NextW (in: hSnapshot=0x350, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0132.109] Process32NextW (in: hSnapshot=0x350, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0132.109] Process32NextW (in: hSnapshot=0x350, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0132.110] Process32NextW (in: hSnapshot=0x350, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xdb4, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0132.110] Process32NextW (in: hSnapshot=0x350, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x19c, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0132.111] Process32NextW (in: hSnapshot=0x350, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x19c, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0132.111] Process32NextW (in: hSnapshot=0x350, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x19c, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 0 [0132.112] CloseHandle (hObject=0x350) returned 1 [0132.112] Sleep (dwMilliseconds=0x1f4) [0132.810] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x348 [0132.955] Process32FirstW (in: hSnapshot=0x348, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0132.955] Process32NextW (in: hSnapshot=0x348, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0132.955] Process32NextW (in: hSnapshot=0x348, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0132.956] Process32NextW (in: hSnapshot=0x348, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0132.956] Process32NextW (in: hSnapshot=0x348, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0132.957] Process32NextW (in: hSnapshot=0x348, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0132.957] Process32NextW (in: hSnapshot=0x348, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0132.957] Process32NextW (in: hSnapshot=0x348, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0132.958] Process32NextW (in: hSnapshot=0x348, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0132.958] Process32NextW (in: hSnapshot=0x348, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0132.959] Process32NextW (in: hSnapshot=0x348, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0132.959] Process32NextW (in: hSnapshot=0x348, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.959] Process32NextW (in: hSnapshot=0x348, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.960] Process32NextW (in: hSnapshot=0x348, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0132.960] Process32NextW (in: hSnapshot=0x348, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.961] Process32NextW (in: hSnapshot=0x348, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.961] Process32NextW (in: hSnapshot=0x348, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.961] Process32NextW (in: hSnapshot=0x348, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.962] Process32NextW (in: hSnapshot=0x348, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.962] Process32NextW (in: hSnapshot=0x348, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.963] Process32NextW (in: hSnapshot=0x348, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.963] Process32NextW (in: hSnapshot=0x348, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.964] Process32NextW (in: hSnapshot=0x348, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.964] Process32NextW (in: hSnapshot=0x348, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.964] Process32NextW (in: hSnapshot=0x348, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0132.965] Process32NextW (in: hSnapshot=0x348, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.965] Process32NextW (in: hSnapshot=0x348, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0132.966] Process32NextW (in: hSnapshot=0x348, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0132.966] Process32NextW (in: hSnapshot=0x348, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0132.966] Process32NextW (in: hSnapshot=0x348, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0132.967] Process32NextW (in: hSnapshot=0x348, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0132.967] Process32NextW (in: hSnapshot=0x348, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0132.968] Process32NextW (in: hSnapshot=0x348, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0132.968] Process32NextW (in: hSnapshot=0x348, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0132.968] Process32NextW (in: hSnapshot=0x348, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0132.969] Process32NextW (in: hSnapshot=0x348, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0132.969] Process32NextW (in: hSnapshot=0x348, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0132.970] Process32NextW (in: hSnapshot=0x348, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0132.970] Process32NextW (in: hSnapshot=0x348, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0132.970] Process32NextW (in: hSnapshot=0x348, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0132.971] Process32NextW (in: hSnapshot=0x348, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xdb4, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0132.971] Process32NextW (in: hSnapshot=0x348, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x19c, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0132.972] Process32NextW (in: hSnapshot=0x348, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x19c, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0132.972] Process32NextW (in: hSnapshot=0x348, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0132.973] Process32NextW (in: hSnapshot=0x348, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0132.973] CloseHandle (hObject=0x348) returned 1 [0132.973] Sleep (dwMilliseconds=0x1f4) [0133.910] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x370 [0133.915] Process32FirstW (in: hSnapshot=0x370, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0133.916] Process32NextW (in: hSnapshot=0x370, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0133.916] Process32NextW (in: hSnapshot=0x370, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0133.916] Process32NextW (in: hSnapshot=0x370, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0133.917] Process32NextW (in: hSnapshot=0x370, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0133.917] Process32NextW (in: hSnapshot=0x370, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0133.918] Process32NextW (in: hSnapshot=0x370, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0133.918] Process32NextW (in: hSnapshot=0x370, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0133.918] Process32NextW (in: hSnapshot=0x370, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0133.919] Process32NextW (in: hSnapshot=0x370, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0133.919] Process32NextW (in: hSnapshot=0x370, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0133.920] Process32NextW (in: hSnapshot=0x370, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.920] Process32NextW (in: hSnapshot=0x370, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.920] Process32NextW (in: hSnapshot=0x370, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0133.921] Process32NextW (in: hSnapshot=0x370, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.921] Process32NextW (in: hSnapshot=0x370, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.921] Process32NextW (in: hSnapshot=0x370, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.922] Process32NextW (in: hSnapshot=0x370, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.922] Process32NextW (in: hSnapshot=0x370, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.923] Process32NextW (in: hSnapshot=0x370, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.924] Process32NextW (in: hSnapshot=0x370, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.924] Process32NextW (in: hSnapshot=0x370, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.925] Process32NextW (in: hSnapshot=0x370, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.925] Process32NextW (in: hSnapshot=0x370, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.925] Process32NextW (in: hSnapshot=0x370, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0133.926] Process32NextW (in: hSnapshot=0x370, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.926] Process32NextW (in: hSnapshot=0x370, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0133.927] Process32NextW (in: hSnapshot=0x370, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0133.927] Process32NextW (in: hSnapshot=0x370, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0133.928] Process32NextW (in: hSnapshot=0x370, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0133.928] Process32NextW (in: hSnapshot=0x370, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.928] Process32NextW (in: hSnapshot=0x370, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0133.929] Process32NextW (in: hSnapshot=0x370, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0133.929] Process32NextW (in: hSnapshot=0x370, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0133.930] Process32NextW (in: hSnapshot=0x370, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0133.930] Process32NextW (in: hSnapshot=0x370, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0133.930] Process32NextW (in: hSnapshot=0x370, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0133.931] Process32NextW (in: hSnapshot=0x370, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0133.931] Process32NextW (in: hSnapshot=0x370, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0133.932] Process32NextW (in: hSnapshot=0x370, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0133.932] Process32NextW (in: hSnapshot=0x370, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xdb4, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0133.933] Process32NextW (in: hSnapshot=0x370, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x19c, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0133.934] Process32NextW (in: hSnapshot=0x370, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x19c, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0133.934] Process32NextW (in: hSnapshot=0x370, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0133.934] Process32NextW (in: hSnapshot=0x370, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0133.935] CloseHandle (hObject=0x370) returned 1 [0133.935] Sleep (dwMilliseconds=0x1f4) [0134.696] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x378 [0134.701] Process32FirstW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0134.703] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0134.703] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0134.703] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0134.704] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0134.704] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0134.705] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0134.705] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0134.706] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0134.706] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0134.707] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0134.707] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.708] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.708] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0134.709] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.710] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.710] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.711] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.711] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.712] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.713] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.713] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.713] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.714] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.714] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0134.715] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.715] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0134.715] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0134.716] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0134.716] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0134.717] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.717] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0134.718] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0134.718] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0134.719] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0134.719] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0134.719] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0134.720] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0134.720] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0134.721] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0134.722] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xdb4, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0134.722] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x19c, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0134.723] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x19c, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0134.723] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0134.723] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0134.724] CloseHandle (hObject=0x378) returned 1 [0134.724] Sleep (dwMilliseconds=0x1f4) [0135.475] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x334 [0135.560] Process32FirstW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0135.560] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0135.561] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0135.561] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0135.561] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0135.562] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0135.562] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0135.563] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0135.563] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0135.564] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0135.564] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0135.565] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.565] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.566] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0135.566] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.567] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.567] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.568] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.568] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.568] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.569] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.569] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.570] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.570] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.571] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0135.571] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.571] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0135.572] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0135.572] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0135.572] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0135.573] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0135.573] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0135.574] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0135.574] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0135.575] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0135.575] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0135.576] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0135.576] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0135.577] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0135.577] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0135.578] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xdb4, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0135.578] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x19c, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0135.579] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x19c, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0135.579] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0135.579] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0135.580] CloseHandle (hObject=0x334) returned 1 [0135.580] Sleep (dwMilliseconds=0x1f4) [0136.178] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x374 [0136.183] Process32FirstW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0136.183] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0136.183] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0136.184] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0136.184] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0136.185] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0136.186] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0136.186] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0136.186] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0136.187] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0136.187] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0136.188] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0136.188] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0136.189] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0136.189] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0136.189] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0136.190] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0136.190] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0136.191] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0136.191] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0136.191] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0136.192] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0136.192] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0136.193] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0136.193] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0136.193] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0136.194] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0136.194] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0136.195] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0136.195] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0136.196] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0136.196] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0136.197] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0136.197] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x48, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0136.198] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0136.198] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0136.199] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0136.199] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0136.199] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0136.200] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0136.200] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xdb4, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0136.201] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x19c, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0136.201] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x19c, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0136.201] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0136.202] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0136.202] CloseHandle (hObject=0x374) returned 1 [0136.202] Sleep (dwMilliseconds=0x1f4) [0136.907] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x380 [0136.925] Process32FirstW (in: hSnapshot=0x380, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0136.926] Process32NextW (in: hSnapshot=0x380, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0136.926] Process32NextW (in: hSnapshot=0x380, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0136.927] Process32NextW (in: hSnapshot=0x380, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0136.927] Process32NextW (in: hSnapshot=0x380, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0136.927] Process32NextW (in: hSnapshot=0x380, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0136.928] Process32NextW (in: hSnapshot=0x380, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0136.928] Process32NextW (in: hSnapshot=0x380, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0136.928] Process32NextW (in: hSnapshot=0x380, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0136.929] Process32NextW (in: hSnapshot=0x380, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0136.929] Process32NextW (in: hSnapshot=0x380, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0136.929] Process32NextW (in: hSnapshot=0x380, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0136.930] Process32NextW (in: hSnapshot=0x380, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0136.930] Process32NextW (in: hSnapshot=0x380, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0136.931] Process32NextW (in: hSnapshot=0x380, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0136.931] Process32NextW (in: hSnapshot=0x380, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0136.931] Process32NextW (in: hSnapshot=0x380, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0136.932] Process32NextW (in: hSnapshot=0x380, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0136.932] Process32NextW (in: hSnapshot=0x380, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0136.933] Process32NextW (in: hSnapshot=0x380, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0136.933] Process32NextW (in: hSnapshot=0x380, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0136.933] Process32NextW (in: hSnapshot=0x380, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0136.934] Process32NextW (in: hSnapshot=0x380, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0136.934] Process32NextW (in: hSnapshot=0x380, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0136.934] Process32NextW (in: hSnapshot=0x380, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0136.935] Process32NextW (in: hSnapshot=0x380, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0136.935] Process32NextW (in: hSnapshot=0x380, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0136.936] Process32NextW (in: hSnapshot=0x380, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0136.936] Process32NextW (in: hSnapshot=0x380, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0136.936] Process32NextW (in: hSnapshot=0x380, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0136.937] Process32NextW (in: hSnapshot=0x380, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0136.937] Process32NextW (in: hSnapshot=0x380, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0136.937] Process32NextW (in: hSnapshot=0x380, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0136.938] Process32NextW (in: hSnapshot=0x380, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x48, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0136.938] Process32NextW (in: hSnapshot=0x380, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0136.938] Process32NextW (in: hSnapshot=0x380, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0136.939] Process32NextW (in: hSnapshot=0x380, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0136.939] Process32NextW (in: hSnapshot=0x380, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0136.940] Process32NextW (in: hSnapshot=0x380, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0136.940] Process32NextW (in: hSnapshot=0x380, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0136.940] Process32NextW (in: hSnapshot=0x380, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xdb4, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0136.941] Process32NextW (in: hSnapshot=0x380, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x19c, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0136.941] Process32NextW (in: hSnapshot=0x380, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x19c, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0136.941] Process32NextW (in: hSnapshot=0x380, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0136.942] Process32NextW (in: hSnapshot=0x380, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0136.942] CloseHandle (hObject=0x380) returned 1 [0136.942] Sleep (dwMilliseconds=0x1f4) [0137.618] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x364 [0137.621] Process32FirstW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0137.622] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0137.622] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0137.623] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0137.623] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0137.623] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0137.624] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0137.624] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0137.624] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0137.625] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0137.625] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0137.626] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0137.626] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0137.626] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0137.627] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0137.627] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0137.627] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0137.628] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0137.628] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0137.629] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0137.629] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0137.629] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0137.630] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0137.630] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0137.630] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0137.631] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0137.631] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0137.631] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0137.632] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0137.632] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0137.633] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0137.633] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0137.633] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0137.634] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x48, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0137.634] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0137.634] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0137.635] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0137.635] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0137.636] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0137.636] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0137.636] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xdb4, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0137.637] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x19c, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0137.637] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x19c, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0137.637] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0137.638] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0137.638] CloseHandle (hObject=0x364) returned 1 [0137.638] Sleep (dwMilliseconds=0x1f4) [0138.367] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x364 [0138.371] Process32FirstW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0138.372] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0138.372] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0138.372] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0138.373] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0138.373] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0138.373] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0138.374] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0138.374] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0138.375] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0138.375] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0138.375] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0138.376] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0138.376] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0138.376] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0138.377] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0138.377] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0138.378] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0138.378] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0138.379] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0138.379] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0138.379] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0138.380] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0138.380] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0138.381] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0138.381] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0138.381] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0138.382] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0138.382] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0138.382] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0138.383] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0138.383] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0138.384] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0138.384] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x48, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0138.384] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0138.385] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0138.385] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0138.385] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0138.386] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0138.386] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0138.387] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xdb4, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0138.387] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x19c, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0138.387] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0138.388] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0138.388] CloseHandle (hObject=0x364) returned 1 [0138.388] Sleep (dwMilliseconds=0x1f4) [0139.118] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x374 [0139.122] Process32FirstW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0139.122] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0139.122] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0139.123] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0139.123] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0139.123] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0139.124] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0139.124] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0139.125] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0139.125] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0139.125] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0139.126] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0139.126] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0139.126] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0139.127] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0139.127] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0139.128] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0139.128] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0139.128] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0139.129] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0139.129] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0139.129] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0139.130] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0139.130] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0139.130] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0139.131] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0139.131] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0139.132] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0139.132] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0139.132] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0139.133] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0139.133] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0139.134] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0139.134] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x48, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0139.134] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0139.135] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0139.135] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0139.135] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0139.136] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0139.136] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0139.136] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xdb4, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0139.137] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x19c, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0139.137] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0139.138] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0139.138] CloseHandle (hObject=0x374) returned 1 [0139.138] Sleep (dwMilliseconds=0x1f4) [0139.857] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x368 [0139.861] Process32FirstW (in: hSnapshot=0x368, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0139.861] Process32NextW (in: hSnapshot=0x368, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0139.862] Process32NextW (in: hSnapshot=0x368, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0139.862] Process32NextW (in: hSnapshot=0x368, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0139.863] Process32NextW (in: hSnapshot=0x368, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0139.863] Process32NextW (in: hSnapshot=0x368, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0139.863] Process32NextW (in: hSnapshot=0x368, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0139.864] Process32NextW (in: hSnapshot=0x368, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0139.864] Process32NextW (in: hSnapshot=0x368, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0139.864] Process32NextW (in: hSnapshot=0x368, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0139.865] Process32NextW (in: hSnapshot=0x368, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0139.865] Process32NextW (in: hSnapshot=0x368, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0139.865] Process32NextW (in: hSnapshot=0x368, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0139.866] Process32NextW (in: hSnapshot=0x368, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0139.866] Process32NextW (in: hSnapshot=0x368, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0139.867] Process32NextW (in: hSnapshot=0x368, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0139.867] Process32NextW (in: hSnapshot=0x368, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0139.868] Process32NextW (in: hSnapshot=0x368, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0139.868] Process32NextW (in: hSnapshot=0x368, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0139.868] Process32NextW (in: hSnapshot=0x368, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0139.869] Process32NextW (in: hSnapshot=0x368, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0139.869] Process32NextW (in: hSnapshot=0x368, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0139.869] Process32NextW (in: hSnapshot=0x368, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0139.870] Process32NextW (in: hSnapshot=0x368, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0139.870] Process32NextW (in: hSnapshot=0x368, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0139.871] Process32NextW (in: hSnapshot=0x368, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0139.871] Process32NextW (in: hSnapshot=0x368, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0139.871] Process32NextW (in: hSnapshot=0x368, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0139.872] Process32NextW (in: hSnapshot=0x368, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0139.872] Process32NextW (in: hSnapshot=0x368, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0139.872] Process32NextW (in: hSnapshot=0x368, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0139.873] Process32NextW (in: hSnapshot=0x368, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0139.873] Process32NextW (in: hSnapshot=0x368, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0139.874] Process32NextW (in: hSnapshot=0x368, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x48, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0139.874] Process32NextW (in: hSnapshot=0x368, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0139.874] Process32NextW (in: hSnapshot=0x368, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0139.875] Process32NextW (in: hSnapshot=0x368, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0139.875] Process32NextW (in: hSnapshot=0x368, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0139.875] Process32NextW (in: hSnapshot=0x368, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0139.876] Process32NextW (in: hSnapshot=0x368, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0139.876] Process32NextW (in: hSnapshot=0x368, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xdb4, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0139.877] Process32NextW (in: hSnapshot=0x368, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x19c, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0139.877] Process32NextW (in: hSnapshot=0x368, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0139.877] Process32NextW (in: hSnapshot=0x368, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0139.878] CloseHandle (hObject=0x368) returned 1 [0139.878] Sleep (dwMilliseconds=0x1f4) [0140.609] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x378 [0140.651] Process32FirstW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0140.651] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0140.652] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0140.652] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0140.652] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0140.653] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0140.653] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0140.653] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0140.654] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0140.654] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0140.655] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0140.655] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0140.655] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0140.656] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0140.656] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0140.656] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0140.657] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0140.657] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0140.658] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0140.658] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0140.658] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0140.659] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0140.659] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0140.659] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0140.660] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0140.660] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0140.661] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0140.661] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0140.661] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0140.662] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0140.662] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0140.662] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0140.663] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0140.663] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x48, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0140.664] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0140.664] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0140.666] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0140.666] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0140.667] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0140.667] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0140.667] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xdb4, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0140.668] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x19c, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0140.668] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0140.669] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0140.669] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0140.669] CloseHandle (hObject=0x378) returned 1 [0140.669] Sleep (dwMilliseconds=0x1f4) [0141.395] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x36c [0141.400] Process32FirstW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0141.400] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0141.401] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0141.401] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0141.401] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0141.402] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0141.402] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0141.403] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0141.403] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0141.403] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0141.404] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0141.404] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0141.404] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0141.405] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0141.405] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0141.405] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0141.406] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0141.406] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0141.407] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0141.407] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0141.407] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0141.408] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0141.408] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0141.408] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0141.409] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0141.410] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0141.410] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0141.410] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0141.411] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0141.411] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0141.411] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0141.412] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0141.412] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0141.413] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x44, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0141.413] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0141.413] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0141.414] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0141.414] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0141.414] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0141.415] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0141.415] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xdb4, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0141.416] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x19c, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0141.416] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0141.416] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0141.417] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0141.417] CloseHandle (hObject=0x36c) returned 1 [0141.417] Sleep (dwMilliseconds=0x1f4) [0142.519] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x334 [0142.774] Process32FirstW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0142.783] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0142.792] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0142.803] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0142.819] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0142.839] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0142.849] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0142.863] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0142.885] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0142.902] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0142.902] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0142.903] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0142.903] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0142.903] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0142.904] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0142.904] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0142.905] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0142.905] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0142.906] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0142.906] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0142.906] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0142.907] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0142.907] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0142.908] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0142.908] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0142.909] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0142.910] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0142.910] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0142.911] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0142.912] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0142.912] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0142.913] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0142.913] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0142.914] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x44, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0142.915] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0142.915] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0142.916] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0142.916] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0142.917] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0143.179] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0143.180] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xdb4, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0143.180] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x19c, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0143.181] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0143.181] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0143.181] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0143.182] CloseHandle (hObject=0x334) returned 1 [0143.182] Sleep (dwMilliseconds=0x1f4) [0144.114] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x36c [0144.118] Process32FirstW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0144.119] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0144.119] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0144.120] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0144.120] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0144.120] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0144.121] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0144.121] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0144.122] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0144.122] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0144.122] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0144.123] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0144.123] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0144.124] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0144.124] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0144.125] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0144.125] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0144.126] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0144.126] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0144.126] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0144.127] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0144.127] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0144.128] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0144.128] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0144.129] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0144.129] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0144.129] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0144.130] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0144.130] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0144.131] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0144.131] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0144.132] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0144.132] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0144.132] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x44, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0144.133] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0144.133] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0144.134] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0144.134] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0144.135] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0144.135] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0144.135] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xdb4, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0144.136] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x19c, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0144.136] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0144.137] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0144.137] Process32NextW (in: hSnapshot=0x36c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0144.138] CloseHandle (hObject=0x36c) returned 1 [0144.138] Sleep (dwMilliseconds=0x1f4) [0144.848] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x334 [0144.855] Process32FirstW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0144.855] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0144.856] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0144.856] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0144.857] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0144.858] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0144.858] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0144.858] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0144.859] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0144.860] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0144.860] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0144.861] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0144.861] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0144.861] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0144.862] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0144.862] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0144.863] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0144.863] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0144.864] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0144.864] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0144.864] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0144.865] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0144.865] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0144.866] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0144.866] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0144.866] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0144.867] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0144.867] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0144.868] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0144.868] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0144.868] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0144.869] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0144.869] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0144.870] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x44, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0144.870] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0144.871] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0144.871] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0144.871] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0144.872] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0144.872] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0144.873] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xdb4, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0144.873] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x19c, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0144.874] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0144.875] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0144.875] Process32NextW (in: hSnapshot=0x334, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0144.876] CloseHandle (hObject=0x334) returned 1 [0144.876] Sleep (dwMilliseconds=0x1f4) [0145.609] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x374 [0145.616] Process32FirstW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0145.617] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0145.617] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0145.618] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0145.619] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0145.619] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0145.620] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0145.621] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0145.621] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0145.622] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0145.622] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0145.623] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0145.623] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0145.623] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0145.624] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0145.624] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0145.625] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0145.625] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0145.625] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0145.626] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0145.626] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0145.627] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0145.627] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0145.627] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0145.628] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0145.628] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0145.629] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0145.629] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0145.630] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0145.630] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0145.631] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0145.631] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0145.632] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0145.632] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x44, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0145.633] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0145.634] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0145.634] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0145.635] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0145.635] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0145.636] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0145.636] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xdb4, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0145.637] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x19c, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0145.637] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0145.638] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0145.638] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0145.640] CloseHandle (hObject=0x374) returned 1 [0145.640] Sleep (dwMilliseconds=0x1f4) [0146.262] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x378 [0146.945] Process32FirstW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0146.945] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0146.946] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0146.946] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0146.946] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0146.947] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0146.947] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0146.948] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0146.948] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0146.948] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0146.949] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0146.949] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0146.950] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0146.950] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0146.951] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0146.951] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0146.951] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0146.952] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0146.952] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0146.953] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0146.953] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0146.954] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0146.954] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0146.955] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0146.955] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0146.955] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0146.956] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0146.956] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0146.957] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0146.957] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0146.958] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0146.958] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0146.958] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0146.959] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x44, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0146.959] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0146.960] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0146.960] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0146.960] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0146.961] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0146.961] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0146.962] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xdb4, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0146.962] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x19c, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0146.962] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0146.963] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0146.963] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0146.964] CloseHandle (hObject=0x378) returned 1 [0146.964] Sleep (dwMilliseconds=0x1f4) [0147.882] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x374 [0147.887] Process32FirstW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0147.887] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0147.888] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0147.888] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0147.889] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0147.889] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0147.889] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0147.890] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0147.890] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0147.891] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0147.891] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0147.891] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0147.892] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0147.892] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0147.893] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0147.893] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0147.894] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0147.894] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0147.894] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0147.895] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0147.895] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0147.896] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0147.896] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0147.897] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0147.897] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0147.898] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0147.898] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0147.899] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0147.899] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0147.899] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0147.900] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0147.900] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0147.901] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0147.901] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x43, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0147.901] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0147.902] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0147.902] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0147.903] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0147.903] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0147.904] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0147.904] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xdb4, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0147.904] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x19c, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0147.905] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0147.905] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0147.906] Process32NextW (in: hSnapshot=0x374, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0147.906] CloseHandle (hObject=0x374) returned 1 [0147.906] Sleep (dwMilliseconds=0x1f4) [0148.517] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x378 [0148.522] Process32FirstW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0148.522] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0148.522] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0148.523] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0148.523] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0148.524] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0148.524] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0148.525] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0148.525] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0148.525] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0148.526] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0148.526] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0148.527] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0148.527] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0148.528] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0148.528] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0148.528] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0148.529] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0148.529] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0148.530] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0148.530] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0148.530] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0148.531] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0148.532] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0148.532] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0148.533] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0148.533] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0148.534] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0148.534] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0148.534] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0148.535] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0148.535] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0148.536] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0148.536] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x43, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0148.537] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0148.537] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0148.537] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0148.538] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0148.538] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0148.539] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0148.539] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xdb4, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0148.539] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x19c, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0148.540] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0148.540] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0148.541] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0148.541] CloseHandle (hObject=0x378) returned 1 [0148.541] Sleep (dwMilliseconds=0x1f4) [0149.207] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x394 [0149.212] Process32FirstW (in: hSnapshot=0x394, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0149.212] Process32NextW (in: hSnapshot=0x394, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0149.213] Process32NextW (in: hSnapshot=0x394, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0149.213] Process32NextW (in: hSnapshot=0x394, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0149.213] Process32NextW (in: hSnapshot=0x394, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0149.214] Process32NextW (in: hSnapshot=0x394, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0149.215] Process32NextW (in: hSnapshot=0x394, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0149.215] Process32NextW (in: hSnapshot=0x394, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0149.215] Process32NextW (in: hSnapshot=0x394, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0149.216] Process32NextW (in: hSnapshot=0x394, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0149.216] Process32NextW (in: hSnapshot=0x394, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0149.217] Process32NextW (in: hSnapshot=0x394, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0149.217] Process32NextW (in: hSnapshot=0x394, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0149.218] Process32NextW (in: hSnapshot=0x394, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0149.218] Process32NextW (in: hSnapshot=0x394, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0149.218] Process32NextW (in: hSnapshot=0x394, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0149.219] Process32NextW (in: hSnapshot=0x394, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0149.219] Process32NextW (in: hSnapshot=0x394, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0149.220] Process32NextW (in: hSnapshot=0x394, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0149.220] Process32NextW (in: hSnapshot=0x394, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0149.220] Process32NextW (in: hSnapshot=0x394, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0149.221] Process32NextW (in: hSnapshot=0x394, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0149.221] Process32NextW (in: hSnapshot=0x394, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0149.222] Process32NextW (in: hSnapshot=0x394, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0149.222] Process32NextW (in: hSnapshot=0x394, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0149.222] Process32NextW (in: hSnapshot=0x394, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0149.223] Process32NextW (in: hSnapshot=0x394, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0149.223] Process32NextW (in: hSnapshot=0x394, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0149.224] Process32NextW (in: hSnapshot=0x394, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0149.224] Process32NextW (in: hSnapshot=0x394, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0149.225] Process32NextW (in: hSnapshot=0x394, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0149.225] Process32NextW (in: hSnapshot=0x394, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0149.225] Process32NextW (in: hSnapshot=0x394, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0149.226] Process32NextW (in: hSnapshot=0x394, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x43, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0149.226] Process32NextW (in: hSnapshot=0x394, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0149.227] Process32NextW (in: hSnapshot=0x394, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0149.227] Process32NextW (in: hSnapshot=0x394, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0149.228] Process32NextW (in: hSnapshot=0x394, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0149.228] Process32NextW (in: hSnapshot=0x394, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0149.229] Process32NextW (in: hSnapshot=0x394, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0149.229] Process32NextW (in: hSnapshot=0x394, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xdb4, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0149.229] Process32NextW (in: hSnapshot=0x394, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x19c, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0149.230] Process32NextW (in: hSnapshot=0x394, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0149.230] Process32NextW (in: hSnapshot=0x394, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0149.231] Process32NextW (in: hSnapshot=0x394, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0149.231] CloseHandle (hObject=0x394) returned 1 [0149.231] Sleep (dwMilliseconds=0x1f4) [0149.925] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x398 [0149.929] Process32FirstW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0149.930] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0149.930] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0149.931] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0149.931] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0149.932] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0149.932] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0149.932] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0149.933] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0149.933] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0149.934] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0149.934] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0149.935] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0149.935] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0149.935] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0149.936] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0149.936] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0149.937] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0149.937] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0149.938] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0149.938] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0149.939] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0149.939] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0149.940] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0149.940] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0149.941] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0149.941] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0149.941] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0149.942] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0149.942] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0149.943] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0149.943] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0149.943] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0149.944] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x43, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0149.944] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0149.945] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0149.945] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0149.946] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0149.946] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0149.946] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0149.947] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xdb4, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0149.947] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x19c, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0149.948] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0149.948] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0149.949] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0149.949] CloseHandle (hObject=0x398) returned 1 [0149.949] Sleep (dwMilliseconds=0x1f4) [0150.803] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x38c [0150.810] Process32FirstW (in: hSnapshot=0x38c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0150.811] Process32NextW (in: hSnapshot=0x38c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0150.811] Process32NextW (in: hSnapshot=0x38c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0150.812] Process32NextW (in: hSnapshot=0x38c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0150.813] Process32NextW (in: hSnapshot=0x38c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0150.813] Process32NextW (in: hSnapshot=0x38c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0150.814] Process32NextW (in: hSnapshot=0x38c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0150.814] Process32NextW (in: hSnapshot=0x38c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0150.815] Process32NextW (in: hSnapshot=0x38c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0150.816] Process32NextW (in: hSnapshot=0x38c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0150.816] Process32NextW (in: hSnapshot=0x38c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0150.817] Process32NextW (in: hSnapshot=0x38c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0150.817] Process32NextW (in: hSnapshot=0x38c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0150.818] Process32NextW (in: hSnapshot=0x38c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0150.819] Process32NextW (in: hSnapshot=0x38c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0150.819] Process32NextW (in: hSnapshot=0x38c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0150.821] Process32NextW (in: hSnapshot=0x38c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0150.821] Process32NextW (in: hSnapshot=0x38c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0150.822] Process32NextW (in: hSnapshot=0x38c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0150.822] Process32NextW (in: hSnapshot=0x38c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0150.823] Process32NextW (in: hSnapshot=0x38c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0150.823] Process32NextW (in: hSnapshot=0x38c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0150.824] Process32NextW (in: hSnapshot=0x38c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0150.824] Process32NextW (in: hSnapshot=0x38c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0150.825] Process32NextW (in: hSnapshot=0x38c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0150.826] Process32NextW (in: hSnapshot=0x38c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0150.826] Process32NextW (in: hSnapshot=0x38c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0150.827] Process32NextW (in: hSnapshot=0x38c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0150.827] Process32NextW (in: hSnapshot=0x38c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0150.828] Process32NextW (in: hSnapshot=0x38c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0150.829] Process32NextW (in: hSnapshot=0x38c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0150.829] Process32NextW (in: hSnapshot=0x38c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0150.830] Process32NextW (in: hSnapshot=0x38c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0150.830] Process32NextW (in: hSnapshot=0x38c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x43, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0150.831] Process32NextW (in: hSnapshot=0x38c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0150.831] Process32NextW (in: hSnapshot=0x38c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0150.832] Process32NextW (in: hSnapshot=0x38c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0150.833] Process32NextW (in: hSnapshot=0x38c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0150.833] Process32NextW (in: hSnapshot=0x38c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0150.834] Process32NextW (in: hSnapshot=0x38c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0150.834] Process32NextW (in: hSnapshot=0x38c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xdb4, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0150.834] Process32NextW (in: hSnapshot=0x38c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x19c, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0150.835] Process32NextW (in: hSnapshot=0x38c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0150.835] Process32NextW (in: hSnapshot=0x38c, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0150.836] CloseHandle (hObject=0x38c) returned 1 [0150.836] Sleep (dwMilliseconds=0x1f4) [0151.492] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x378 [0151.498] Process32FirstW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0151.498] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0151.499] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0151.499] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0151.500] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0151.500] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0151.500] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0151.501] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0151.501] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0151.502] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0151.502] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0151.503] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0151.503] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0151.504] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0151.504] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0151.505] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0151.505] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0151.505] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0151.506] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0151.506] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0151.507] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0151.507] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0151.508] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0151.508] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0151.508] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0151.509] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0151.509] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0151.510] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0151.510] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0151.510] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0151.511] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0151.511] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0151.512] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0151.512] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3e, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0151.513] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0151.513] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0151.514] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0151.514] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0151.514] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0151.515] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0151.515] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xdb4, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0151.516] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x19c, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0151.516] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0151.517] Process32NextW (in: hSnapshot=0x378, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0151.517] CloseHandle (hObject=0x378) returned 1 [0151.517] Sleep (dwMilliseconds=0x1f4) [0152.669] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x390 [0152.673] Process32FirstW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0152.673] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0152.674] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0152.674] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0152.675] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0152.675] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0152.675] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0152.676] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0152.676] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0152.677] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0152.677] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0152.678] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0152.678] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0152.678] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0152.679] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0152.679] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0152.680] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0152.680] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0152.681] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0152.681] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0152.682] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0152.682] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0152.683] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0152.683] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0152.683] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0152.684] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0152.684] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0152.685] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0152.685] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0152.686] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0152.686] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0152.686] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0152.687] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0152.687] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3b, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0152.688] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0152.688] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0152.688] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0152.689] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0152.689] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0152.690] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0152.690] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xdb4, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0152.691] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x19c, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0152.691] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0152.692] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0152.692] CloseHandle (hObject=0x390) returned 1 [0152.692] Sleep (dwMilliseconds=0x1f4) [0153.640] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x364 [0153.648] Process32FirstW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0153.648] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0153.649] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0153.649] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0153.649] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0153.650] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0153.651] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0153.651] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0153.652] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0153.652] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0153.652] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0153.653] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0153.653] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0153.654] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0153.654] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0153.654] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0153.655] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0153.655] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0153.656] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0153.656] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0153.656] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0153.657] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0153.657] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0153.658] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0153.658] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0153.659] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0153.659] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0153.659] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0153.660] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0153.660] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0153.661] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0153.661] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0153.662] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0153.662] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3b, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0153.662] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0153.663] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0153.663] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0153.664] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0153.665] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0153.678] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0153.679] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xdb4, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0153.679] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x19c, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0153.680] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0153.680] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0153.681] Process32NextW (in: hSnapshot=0x364, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 0 [0153.683] CloseHandle (hObject=0x364) returned 1 [0153.683] Sleep (dwMilliseconds=0x1f4) [0154.328] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x398 [0154.346] Process32FirstW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0154.347] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0154.347] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0154.348] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0154.348] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0154.348] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0154.349] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0154.349] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0154.349] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0154.350] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0154.351] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0154.351] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0154.351] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0154.352] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0154.352] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0154.353] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0154.353] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0154.354] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0154.354] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0154.354] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0154.355] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0154.355] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0154.356] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0154.356] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0154.356] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0154.357] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0154.357] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0154.358] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0154.358] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0154.359] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0154.359] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0154.359] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0154.360] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0154.360] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0154.361] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0154.361] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0154.362] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0154.362] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0154.362] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0154.363] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0154.363] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xdb4, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0154.364] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x19c, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0154.364] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0154.365] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0154.365] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 0 [0154.365] CloseHandle (hObject=0x398) returned 1 [0154.365] Sleep (dwMilliseconds=0x1f4) [0154.983] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x390 [0154.988] Process32FirstW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0154.990] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0154.990] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0154.991] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0154.991] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0154.991] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0154.992] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0154.992] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0154.993] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0154.993] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0154.993] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0154.994] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0154.994] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0154.995] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0154.995] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0154.996] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0154.996] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0154.996] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0154.997] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0154.997] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0154.998] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0154.998] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0154.999] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0154.999] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0155.000] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0155.000] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0155.001] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0155.001] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0155.002] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0155.002] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0155.002] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0155.003] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0155.003] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0155.004] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0155.004] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0155.005] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0155.005] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0155.006] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0155.006] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0155.006] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0155.007] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xdb4, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0155.007] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x19c, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0155.008] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0155.008] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0155.009] Process32NextW (in: hSnapshot=0x390, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 0 [0155.009] CloseHandle (hObject=0x390) returned 1 [0155.009] Sleep (dwMilliseconds=0x1f4) [0155.861] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x398 [0155.866] Process32FirstW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0155.866] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0155.867] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0155.867] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0155.867] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0155.868] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0155.868] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0155.869] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0155.869] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0155.870] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0155.870] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0155.871] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0155.871] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0155.871] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0155.872] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0155.872] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0155.873] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0155.873] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0155.874] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0155.874] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0155.874] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0155.875] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0155.875] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0155.876] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0155.876] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0155.877] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0155.877] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0155.877] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0155.878] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0155.878] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0155.879] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0155.879] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0155.880] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0155.880] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0155.881] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0155.881] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0155.881] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0155.882] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0155.882] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0155.883] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0155.883] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xdb4, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0155.884] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x19c, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0155.884] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0155.884] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0155.885] Process32NextW (in: hSnapshot=0x398, lppe=0x251f694 | out: lppe=0x251f694*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 0 [0155.885] CloseHandle (hObject=0x398) returned 1 [0155.885] Sleep (dwMilliseconds=0x1f4) [0156.605] GetProcessHeap () returned 0x8a0000 [0156.605] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8ca250 | out: hHeap=0x8a0000) returned 1 [0156.605] GetProcessHeap () returned 0x8a0000 [0156.605] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c9e08 | out: hHeap=0x8a0000) returned 1 Thread: id = 72 os_tid = 0xe90 [0129.849] GetProcessHeap () returned 0x8a0000 [0129.849] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x21a) returned 0x8caf70 [0129.849] GetProcessHeap () returned 0x8a0000 [0129.849] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x28) returned 0x8b6ca8 [0129.849] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x250 [0129.849] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x254 [0129.849] GetComputerNameW (in: lpBuffer=0x8caf80, nSize=0x261f8b4 | out: lpBuffer="NQDPDE", nSize=0x261f8b4) returned 1 [0129.851] GetProcessHeap () returned 0x8a0000 [0129.851] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c7df0 [0129.851] GetProcessHeap () returned 0x8a0000 [0129.851] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x4000) returned 0x8cb198 [0129.851] GetProcessHeap () returned 0x8a0000 [0129.851] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x8cf1a0 [0129.851] WNetOpenEnumW (in: dwScope=0x1, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x261f86c | out: lphEnum=0x261f86c*=0x8b18e0) returned 0x0 [0130.559] WNetEnumResourceW (in: hEnum=0x8b18e0, lpcCount=0x261f860, lpBuffer=0x8cb198, lpBufferSize=0x261f874 | out: lpcCount=0x261f860, lpBuffer=0x8cb198, lpBufferSize=0x261f874) returned 0x103 [0130.559] WNetCloseEnum (hEnum=0x8b18e0) returned 0x0 [0130.559] GetProcessHeap () returned 0x8a0000 [0130.559] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8cb198 | out: hHeap=0x8a0000) returned 1 [0130.559] GetProcessHeap () returned 0x8a0000 [0130.559] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8cf1a0 | out: hHeap=0x8a0000) returned 1 [0130.559] GetProcessHeap () returned 0x8a0000 [0130.559] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x4000) returned 0x3670080 [0130.559] GetProcessHeap () returned 0x8a0000 [0130.559] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x8cb198 [0130.559] WNetOpenEnumW (in: dwScope=0x4, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x261f854 | out: lphEnum=0x261f854*=0x8b8438) returned 0x0 [0130.560] WNetEnumResourceW (in: hEnum=0x8b8438, lpcCount=0x261f848, lpBuffer=0x3670080, lpBufferSize=0x261f85c | out: lpcCount=0x261f848, lpBuffer=0x3670080, lpBufferSize=0x261f85c) returned 0x103 [0130.560] WNetCloseEnum (hEnum=0x8b8438) returned 0x0 [0130.561] GetProcessHeap () returned 0x8a0000 [0130.561] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3670080 | out: hHeap=0x8a0000) returned 1 [0130.561] GetProcessHeap () returned 0x8a0000 [0130.561] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8cb198 | out: hHeap=0x8a0000) returned 1 [0130.561] GetProcessHeap () returned 0x8a0000 [0130.561] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x4000) returned 0x3670080 [0130.561] GetProcessHeap () returned 0x8a0000 [0130.561] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x8cb198 [0130.561] WNetOpenEnumW (in: dwScope=0x5, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x261f83c | out: lphEnum=0x261f83c*=0x8b18e0) returned 0x0 [0144.647] WNetEnumResourceW (in: hEnum=0x8b18e0, lpcCount=0x261f830, lpBuffer=0x3670080, lpBufferSize=0x261f844 | out: lpcCount=0x261f830, lpBuffer=0x3670080, lpBufferSize=0x261f844) returned 0x0 [0144.648] GetProcessHeap () returned 0x8a0000 [0144.648] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x4000) returned 0x36b40a8 [0144.648] GetProcessHeap () returned 0x8a0000 [0144.648] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b80b0 [0144.648] WNetOpenEnumW (in: dwScope=0x5, dwType=0x0, dwUsage=0x0, lpNetResource=0x3670080, lphEnum=0x261f7f4 | out: lphEnum=0x261f7f4*=0x94a0b8) returned 0x0 [0158.636] WNetEnumResourceW (in: hEnum=0x94a0b8, lpcCount=0x261f7e8, lpBuffer=0x36b40a8, lpBufferSize=0x261f7fc | out: lpcCount=0x261f7e8, lpBuffer=0x36b40a8, lpBufferSize=0x261f7fc) returned 0x0 [0158.637] WNetEnumResourceW (in: hEnum=0x94a0b8, lpcCount=0x261f7e8, lpBuffer=0x36b40a8, lpBufferSize=0x261f7fc | out: lpcCount=0x261f7e8, lpBuffer=0x36b40a8, lpBufferSize=0x261f7fc) returned 0x103 [0158.637] WNetCloseEnum (hEnum=0x94a0b8) returned 0x0 [0158.639] GetProcessHeap () returned 0x8a0000 [0158.639] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0158.639] GetProcessHeap () returned 0x8a0000 [0158.639] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b80b0 | out: hHeap=0x8a0000) returned 1 [0158.642] WNetEnumResourceW (in: hEnum=0x8b18e0, lpcCount=0x261f830, lpBuffer=0x3670080, lpBufferSize=0x261f844 | out: lpcCount=0x261f830, lpBuffer=0x3670080, lpBufferSize=0x261f844) returned 0x103 [0158.642] WNetCloseEnum (hEnum=0x8b18e0) returned 0x0 [0158.642] GetProcessHeap () returned 0x8a0000 [0158.642] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3670080 | out: hHeap=0x8a0000) returned 1 [0158.643] GetProcessHeap () returned 0x8a0000 [0158.643] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8cb198 | out: hHeap=0x8a0000) returned 1 [0158.645] GetProcessHeap () returned 0x8a0000 [0158.645] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x4000) returned 0x8cb198 [0158.646] GetProcessHeap () returned 0x8a0000 [0158.646] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0158.646] WNetOpenEnumW (in: dwScope=0x3, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x261f86c | out: lphEnum=0x261f86c*=0x8b8558) returned 0x0 [0158.648] WNetEnumResourceW (in: hEnum=0x8b8558, lpcCount=0x261f860, lpBuffer=0x8cb198, lpBufferSize=0x261f874 | out: lpcCount=0x261f860, lpBuffer=0x8cb198, lpBufferSize=0x261f874) returned 0x103 [0158.648] WNetCloseEnum (hEnum=0x8b8558) returned 0x0 [0158.648] GetProcessHeap () returned 0x8a0000 [0158.648] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8cb198 | out: hHeap=0x8a0000) returned 1 [0158.648] GetProcessHeap () returned 0x8a0000 [0158.648] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0158.649] GetProcessHeap () returned 0x8a0000 [0158.649] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x4000) returned 0x3ac0068 [0158.649] GetProcessHeap () returned 0x8a0000 [0158.649] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x8cb198 [0158.649] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x261f854 | out: lphEnum=0x261f854*=0x993580) returned 0x0 [0158.649] WNetEnumResourceW (in: hEnum=0x993580, lpcCount=0x261f848, lpBuffer=0x3ac0068, lpBufferSize=0x261f85c | out: lpcCount=0x261f848, lpBuffer=0x3ac0068, lpBufferSize=0x261f85c) returned 0x0 [0158.650] GetProcessHeap () returned 0x8a0000 [0158.650] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x4000) returned 0x3ac4070 [0158.650] GetProcessHeap () returned 0x8a0000 [0158.650] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ad4090 [0158.650] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x3ac00a8, lphEnum=0x261f80c | out: lphEnum=0x261f80c*=0x0) returned 0x4c6 [0158.651] GetProcessHeap () returned 0x8a0000 [0158.651] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac4070 | out: hHeap=0x8a0000) returned 1 [0158.651] GetProcessHeap () returned 0x8a0000 [0158.651] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ad4090 | out: hHeap=0x8a0000) returned 1 [0158.652] GetProcessHeap () returned 0x8a0000 [0158.652] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x4000) returned 0x3ac4070 [0158.652] GetProcessHeap () returned 0x8a0000 [0158.652] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ad4090 [0158.653] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x3ac0088, lphEnum=0x261f80c | out: lphEnum=0x261f80c*=0x0) returned 0x4b8 [0172.082] GetProcessHeap () returned 0x8a0000 [0172.082] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac4070 | out: hHeap=0x8a0000) returned 1 [0172.082] GetProcessHeap () returned 0x8a0000 [0172.082] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ad4090 | out: hHeap=0x8a0000) returned 1 [0172.083] GetProcessHeap () returned 0x8a0000 [0172.083] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x4000) returned 0x3ac4070 [0172.084] GetProcessHeap () returned 0x8a0000 [0172.084] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ad4090 [0172.084] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x3ac0068, lphEnum=0x261f80c | out: lphEnum=0x261f80c*=0x8b8558) returned 0x0 [0172.087] WNetEnumResourceW (in: hEnum=0x8b8558, lpcCount=0x261f800, lpBuffer=0x3ac4070, lpBufferSize=0x261f814 | out: lpcCount=0x261f800, lpBuffer=0x3ac4070, lpBufferSize=0x261f814) returned 0x103 [0172.088] WNetCloseEnum (hEnum=0x8b8558) returned 0x0 [0172.088] GetProcessHeap () returned 0x8a0000 [0172.088] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac4070 | out: hHeap=0x8a0000) returned 1 [0172.088] GetProcessHeap () returned 0x8a0000 [0172.088] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ad4090 | out: hHeap=0x8a0000) returned 1 [0172.088] WNetEnumResourceW (in: hEnum=0x993580, lpcCount=0x261f848, lpBuffer=0x3ac0068, lpBufferSize=0x261f85c | out: lpcCount=0x261f848, lpBuffer=0x3ac0068, lpBufferSize=0x261f85c) returned 0x103 [0172.088] WNetCloseEnum (hEnum=0x993580) returned 0x0 [0172.088] GetProcessHeap () returned 0x8a0000 [0172.088] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0172.089] GetProcessHeap () returned 0x8a0000 [0172.089] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8cb198 | out: hHeap=0x8a0000) returned 1 [0172.089] GetProcessHeap () returned 0x8a0000 [0172.089] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x3a98) returned 0x36eb0d8 [0172.091] GetIpAddrTable (in: pIpAddrTable=0x36eb0d8, pdwSize=0x261f84c, bOrder=0 | out: pIpAddrTable=0x36eb0d8, pdwSize=0x261f84c) returned 0x0 [0172.886] htonl (hostlong=0xda00a8c0) returned 0xc0a800da [0172.886] htonl (hostlong=0xda00a8c0) returned 0xc0a800da [0172.886] htonl (hostlong=0xffffff) returned 0xffffff00 [0172.886] htons (hostshort=0x1bd) returned 0xbd01 [0172.886] GetProcessHeap () returned 0x8a0000 [0172.887] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x800) returned 0x8e12a0 [0172.887] GetProcessHeap () returned 0x8a0000 [0172.887] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x800) returned 0x8e6af0 [0172.887] htonl (hostlong=0xc0a80000) returned 0xa8c0 [0172.887] socket (af=2, type=1, protocol=6) returned 0x2f0 [0173.472] ioctlsocket (in: s=0x2f0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.472] connect (s=0x2f0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.0"), namelen=16) returned -1 [0173.482] WSAGetLastError () returned 10035 [0173.482] htonl (hostlong=0xc0a80001) returned 0x100a8c0 [0173.482] socket (af=2, type=1, protocol=6) returned 0x304 [0173.483] ioctlsocket (in: s=0x304, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.483] connect (s=0x304, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.1"), namelen=16) returned -1 [0173.483] WSAGetLastError () returned 10035 [0173.483] htonl (hostlong=0xc0a80002) returned 0x200a8c0 [0173.483] socket (af=2, type=1, protocol=6) returned 0x300 [0173.484] ioctlsocket (in: s=0x300, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.484] connect (s=0x300, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.2"), namelen=16) returned -1 [0173.485] WSAGetLastError () returned 10035 [0173.485] htonl (hostlong=0xc0a80003) returned 0x300a8c0 [0173.485] socket (af=2, type=1, protocol=6) returned 0x2fc [0173.485] ioctlsocket (in: s=0x2fc, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.485] connect (s=0x2fc, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.3"), namelen=16) returned -1 [0173.486] WSAGetLastError () returned 10035 [0173.486] htonl (hostlong=0xc0a80004) returned 0x400a8c0 [0173.486] socket (af=2, type=1, protocol=6) returned 0x308 [0173.486] ioctlsocket (in: s=0x308, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.486] connect (s=0x308, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.4"), namelen=16) returned -1 [0173.487] WSAGetLastError () returned 10035 [0173.487] htonl (hostlong=0xc0a80005) returned 0x500a8c0 [0173.487] socket (af=2, type=1, protocol=6) returned 0x30c [0173.487] ioctlsocket (in: s=0x30c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.487] connect (s=0x30c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.5"), namelen=16) returned -1 [0173.488] WSAGetLastError () returned 10035 [0173.488] htonl (hostlong=0xc0a80006) returned 0x600a8c0 [0173.489] socket (af=2, type=1, protocol=6) returned 0x310 [0173.489] ioctlsocket (in: s=0x310, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.489] connect (s=0x310, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.6"), namelen=16) returned -1 [0173.490] WSAGetLastError () returned 10035 [0173.490] htonl (hostlong=0xc0a80007) returned 0x700a8c0 [0173.490] socket (af=2, type=1, protocol=6) returned 0x31c [0173.490] ioctlsocket (in: s=0x31c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.490] connect (s=0x31c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.7"), namelen=16) returned -1 [0173.491] WSAGetLastError () returned 10035 [0173.491] htonl (hostlong=0xc0a80008) returned 0x800a8c0 [0173.491] socket (af=2, type=1, protocol=6) returned 0x35c [0173.491] ioctlsocket (in: s=0x35c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.491] connect (s=0x35c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.8"), namelen=16) returned -1 [0173.492] WSAGetLastError () returned 10035 [0173.492] htonl (hostlong=0xc0a80009) returned 0x900a8c0 [0173.492] socket (af=2, type=1, protocol=6) returned 0x358 [0173.493] ioctlsocket (in: s=0x358, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.493] connect (s=0x358, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.9"), namelen=16) returned -1 [0173.494] WSAGetLastError () returned 10035 [0173.494] htonl (hostlong=0xc0a8000a) returned 0xa00a8c0 [0173.494] socket (af=2, type=1, protocol=6) returned 0x360 [0173.494] ioctlsocket (in: s=0x360, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.494] connect (s=0x360, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.10"), namelen=16) returned -1 [0173.495] WSAGetLastError () returned 10035 [0173.495] htonl (hostlong=0xc0a8000b) returned 0xb00a8c0 [0173.495] socket (af=2, type=1, protocol=6) returned 0x368 [0173.495] ioctlsocket (in: s=0x368, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.495] connect (s=0x368, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.11"), namelen=16) returned -1 [0173.496] WSAGetLastError () returned 10035 [0173.496] htonl (hostlong=0xc0a8000c) returned 0xc00a8c0 [0173.496] socket (af=2, type=1, protocol=6) returned 0x36c [0173.496] ioctlsocket (in: s=0x36c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.496] connect (s=0x36c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.12"), namelen=16) returned -1 [0173.497] WSAGetLastError () returned 10035 [0173.497] htonl (hostlong=0xc0a8000d) returned 0xd00a8c0 [0173.497] socket (af=2, type=1, protocol=6) returned 0x344 [0173.498] ioctlsocket (in: s=0x344, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.498] connect (s=0x344, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.13"), namelen=16) returned -1 [0173.499] WSAGetLastError () returned 10035 [0173.499] htonl (hostlong=0xc0a8000e) returned 0xe00a8c0 [0173.499] socket (af=2, type=1, protocol=6) returned 0x384 [0173.499] ioctlsocket (in: s=0x384, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.499] connect (s=0x384, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.14"), namelen=16) returned -1 [0173.653] WSAGetLastError () returned 10035 [0173.653] htonl (hostlong=0xc0a8000f) returned 0xf00a8c0 [0173.653] socket (af=2, type=1, protocol=6) returned 0x374 [0173.654] ioctlsocket (in: s=0x374, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.654] connect (s=0x374, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.15"), namelen=16) returned -1 [0173.655] WSAGetLastError () returned 10035 [0173.655] htonl (hostlong=0xc0a80010) returned 0x1000a8c0 [0173.655] socket (af=2, type=1, protocol=6) returned 0x364 [0173.655] ioctlsocket (in: s=0x364, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.655] connect (s=0x364, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.16"), namelen=16) returned -1 [0173.656] WSAGetLastError () returned 10035 [0173.656] htonl (hostlong=0xc0a80011) returned 0x1100a8c0 [0173.656] socket (af=2, type=1, protocol=6) returned 0x390 [0173.656] ioctlsocket (in: s=0x390, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.656] connect (s=0x390, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.17"), namelen=16) returned -1 [0173.657] WSAGetLastError () returned 10035 [0173.657] htonl (hostlong=0xc0a80012) returned 0x1200a8c0 [0173.658] socket (af=2, type=1, protocol=6) returned 0x37c [0173.658] ioctlsocket (in: s=0x37c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.658] connect (s=0x37c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.18"), namelen=16) returned -1 [0173.659] WSAGetLastError () returned 10035 [0173.659] htonl (hostlong=0xc0a80013) returned 0x1300a8c0 [0173.659] socket (af=2, type=1, protocol=6) returned 0x2f8 [0173.659] ioctlsocket (in: s=0x2f8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.659] connect (s=0x2f8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.19"), namelen=16) returned -1 [0173.660] WSAGetLastError () returned 10035 [0173.660] htonl (hostlong=0xc0a80014) returned 0x1400a8c0 [0173.660] socket (af=2, type=1, protocol=6) returned 0x34c [0173.660] ioctlsocket (in: s=0x34c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.660] connect (s=0x34c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.20"), namelen=16) returned -1 [0173.661] WSAGetLastError () returned 10035 [0173.661] htonl (hostlong=0xc0a80015) returned 0x1500a8c0 [0173.661] socket (af=2, type=1, protocol=6) returned 0x350 [0173.662] ioctlsocket (in: s=0x350, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.662] connect (s=0x350, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.21"), namelen=16) returned -1 [0173.663] WSAGetLastError () returned 10035 [0173.663] htonl (hostlong=0xc0a80016) returned 0x1600a8c0 [0173.663] socket (af=2, type=1, protocol=6) returned 0x354 [0173.663] ioctlsocket (in: s=0x354, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.663] connect (s=0x354, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.22"), namelen=16) returned -1 [0173.664] WSAGetLastError () returned 10035 [0173.664] htonl (hostlong=0xc0a80017) returned 0x1700a8c0 [0173.664] socket (af=2, type=1, protocol=6) returned 0x380 [0173.664] ioctlsocket (in: s=0x380, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.664] connect (s=0x380, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.23"), namelen=16) returned -1 [0173.665] WSAGetLastError () returned 10035 [0173.665] htonl (hostlong=0xc0a80018) returned 0x1800a8c0 [0173.665] socket (af=2, type=1, protocol=6) returned 0x370 [0173.665] ioctlsocket (in: s=0x370, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.666] connect (s=0x370, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.24"), namelen=16) returned -1 [0173.666] WSAGetLastError () returned 10035 [0173.666] htonl (hostlong=0xc0a80019) returned 0x1900a8c0 [0173.667] socket (af=2, type=1, protocol=6) returned 0x38c [0173.667] ioctlsocket (in: s=0x38c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.667] connect (s=0x38c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.25"), namelen=16) returned -1 [0173.668] WSAGetLastError () returned 10035 [0173.668] htonl (hostlong=0xc0a8001a) returned 0x1a00a8c0 [0173.668] socket (af=2, type=1, protocol=6) returned 0x394 [0173.668] ioctlsocket (in: s=0x394, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.668] connect (s=0x394, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.26"), namelen=16) returned -1 [0173.669] WSAGetLastError () returned 10035 [0173.669] htonl (hostlong=0xc0a8001b) returned 0x1b00a8c0 [0173.669] socket (af=2, type=1, protocol=6) returned 0x398 [0173.669] ioctlsocket (in: s=0x398, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.669] connect (s=0x398, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.27"), namelen=16) returned -1 [0173.673] WSAGetLastError () returned 10035 [0173.673] htonl (hostlong=0xc0a8001c) returned 0x1c00a8c0 [0173.673] socket (af=2, type=1, protocol=6) returned 0x39c [0173.673] ioctlsocket (in: s=0x39c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.673] connect (s=0x39c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.28"), namelen=16) returned -1 [0173.674] WSAGetLastError () returned 10035 [0173.674] htonl (hostlong=0xc0a8001d) returned 0x1d00a8c0 [0173.674] socket (af=2, type=1, protocol=6) returned 0x3a0 [0173.674] ioctlsocket (in: s=0x3a0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.674] connect (s=0x3a0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.29"), namelen=16) returned -1 [0173.675] WSAGetLastError () returned 10035 [0173.675] htonl (hostlong=0xc0a8001e) returned 0x1e00a8c0 [0173.675] socket (af=2, type=1, protocol=6) returned 0x3a4 [0173.675] ioctlsocket (in: s=0x3a4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.675] connect (s=0x3a4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.30"), namelen=16) returned -1 [0173.676] WSAGetLastError () returned 10035 [0173.676] htonl (hostlong=0xc0a8001f) returned 0x1f00a8c0 [0173.676] socket (af=2, type=1, protocol=6) returned 0x3a8 [0173.677] ioctlsocket (in: s=0x3a8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.677] connect (s=0x3a8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.31"), namelen=16) returned -1 [0173.678] WSAGetLastError () returned 10035 [0173.678] htonl (hostlong=0xc0a80020) returned 0x2000a8c0 [0173.678] socket (af=2, type=1, protocol=6) returned 0x3ac [0173.678] ioctlsocket (in: s=0x3ac, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.678] connect (s=0x3ac, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.32"), namelen=16) returned -1 [0173.679] WSAGetLastError () returned 10035 [0173.679] htonl (hostlong=0xc0a80021) returned 0x2100a8c0 [0173.679] socket (af=2, type=1, protocol=6) returned 0x3b0 [0173.679] ioctlsocket (in: s=0x3b0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.679] connect (s=0x3b0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.33"), namelen=16) returned -1 [0173.680] WSAGetLastError () returned 10035 [0173.680] htonl (hostlong=0xc0a80022) returned 0x2200a8c0 [0173.680] socket (af=2, type=1, protocol=6) returned 0x3b4 [0173.680] ioctlsocket (in: s=0x3b4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.681] connect (s=0x3b4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.34"), namelen=16) returned -1 [0173.682] WSAGetLastError () returned 10035 [0173.682] htonl (hostlong=0xc0a80023) returned 0x2300a8c0 [0173.682] socket (af=2, type=1, protocol=6) returned 0x3b8 [0173.682] ioctlsocket (in: s=0x3b8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.682] connect (s=0x3b8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.35"), namelen=16) returned -1 [0173.683] WSAGetLastError () returned 10035 [0173.683] htonl (hostlong=0xc0a80024) returned 0x2400a8c0 [0173.683] socket (af=2, type=1, protocol=6) returned 0x3bc [0173.683] ioctlsocket (in: s=0x3bc, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.683] connect (s=0x3bc, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.36"), namelen=16) returned -1 [0173.684] WSAGetLastError () returned 10035 [0173.684] htonl (hostlong=0xc0a80025) returned 0x2500a8c0 [0173.684] socket (af=2, type=1, protocol=6) returned 0x3c0 [0173.684] ioctlsocket (in: s=0x3c0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.684] connect (s=0x3c0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.37"), namelen=16) returned -1 [0173.686] WSAGetLastError () returned 10035 [0173.686] htonl (hostlong=0xc0a80026) returned 0x2600a8c0 [0173.686] socket (af=2, type=1, protocol=6) returned 0x3c4 [0173.686] ioctlsocket (in: s=0x3c4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.686] connect (s=0x3c4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.38"), namelen=16) returned -1 [0173.687] WSAGetLastError () returned 10035 [0173.688] htonl (hostlong=0xc0a80027) returned 0x2700a8c0 [0173.688] socket (af=2, type=1, protocol=6) returned 0x3c8 [0173.688] ioctlsocket (in: s=0x3c8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.689] connect (s=0x3c8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.39"), namelen=16) returned -1 [0173.689] WSAGetLastError () returned 10035 [0173.689] htonl (hostlong=0xc0a80028) returned 0x2800a8c0 [0173.689] socket (af=2, type=1, protocol=6) returned 0x3cc [0173.690] ioctlsocket (in: s=0x3cc, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.690] connect (s=0x3cc, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.40"), namelen=16) returned -1 [0173.691] WSAGetLastError () returned 10035 [0173.691] htonl (hostlong=0xc0a80029) returned 0x2900a8c0 [0173.691] socket (af=2, type=1, protocol=6) returned 0x3d0 [0173.691] ioctlsocket (in: s=0x3d0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.691] connect (s=0x3d0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.41"), namelen=16) returned -1 [0173.692] WSAGetLastError () returned 10035 [0173.692] htonl (hostlong=0xc0a8002a) returned 0x2a00a8c0 [0173.692] socket (af=2, type=1, protocol=6) returned 0x3d4 [0173.692] ioctlsocket (in: s=0x3d4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.692] connect (s=0x3d4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.42"), namelen=16) returned -1 [0173.693] WSAGetLastError () returned 10035 [0173.693] htonl (hostlong=0xc0a8002b) returned 0x2b00a8c0 [0173.693] socket (af=2, type=1, protocol=6) returned 0x3d8 [0173.694] ioctlsocket (in: s=0x3d8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.694] connect (s=0x3d8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.43"), namelen=16) returned -1 [0173.695] WSAGetLastError () returned 10035 [0173.695] htonl (hostlong=0xc0a8002c) returned 0x2c00a8c0 [0173.695] socket (af=2, type=1, protocol=6) returned 0x3dc [0173.695] ioctlsocket (in: s=0x3dc, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.695] connect (s=0x3dc, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.44"), namelen=16) returned -1 [0173.697] WSAGetLastError () returned 10035 [0173.697] htonl (hostlong=0xc0a8002d) returned 0x2d00a8c0 [0173.697] socket (af=2, type=1, protocol=6) returned 0x3e0 [0173.697] ioctlsocket (in: s=0x3e0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.697] connect (s=0x3e0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.45"), namelen=16) returned -1 [0173.698] WSAGetLastError () returned 10035 [0173.698] htonl (hostlong=0xc0a8002e) returned 0x2e00a8c0 [0173.698] socket (af=2, type=1, protocol=6) returned 0x3e4 [0173.698] ioctlsocket (in: s=0x3e4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.698] connect (s=0x3e4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.46"), namelen=16) returned -1 [0173.699] WSAGetLastError () returned 10035 [0173.699] htonl (hostlong=0xc0a8002f) returned 0x2f00a8c0 [0173.699] socket (af=2, type=1, protocol=6) returned 0x3e8 [0173.699] ioctlsocket (in: s=0x3e8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.699] connect (s=0x3e8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.47"), namelen=16) returned -1 [0173.700] WSAGetLastError () returned 10035 [0173.700] htonl (hostlong=0xc0a80030) returned 0x3000a8c0 [0173.700] socket (af=2, type=1, protocol=6) returned 0x3ec [0173.701] ioctlsocket (in: s=0x3ec, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.701] connect (s=0x3ec, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.48"), namelen=16) returned -1 [0173.702] WSAGetLastError () returned 10035 [0173.702] htonl (hostlong=0xc0a80031) returned 0x3100a8c0 [0173.702] socket (af=2, type=1, protocol=6) returned 0x3f0 [0173.702] ioctlsocket (in: s=0x3f0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.702] connect (s=0x3f0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.49"), namelen=16) returned -1 [0173.703] WSAGetLastError () returned 10035 [0173.703] htonl (hostlong=0xc0a80032) returned 0x3200a8c0 [0173.703] socket (af=2, type=1, protocol=6) returned 0x3f4 [0173.703] ioctlsocket (in: s=0x3f4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.703] connect (s=0x3f4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.50"), namelen=16) returned -1 [0173.704] WSAGetLastError () returned 10035 [0173.704] htonl (hostlong=0xc0a80033) returned 0x3300a8c0 [0173.704] socket (af=2, type=1, protocol=6) returned 0x3f8 [0173.705] ioctlsocket (in: s=0x3f8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.705] connect (s=0x3f8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.51"), namelen=16) returned -1 [0173.706] WSAGetLastError () returned 10035 [0173.706] htonl (hostlong=0xc0a80034) returned 0x3400a8c0 [0173.706] socket (af=2, type=1, protocol=6) returned 0x3fc [0173.706] ioctlsocket (in: s=0x3fc, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.706] connect (s=0x3fc, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.52"), namelen=16) returned -1 [0173.707] WSAGetLastError () returned 10035 [0173.707] htonl (hostlong=0xc0a80035) returned 0x3500a8c0 [0173.707] socket (af=2, type=1, protocol=6) returned 0x404 [0173.708] ioctlsocket (in: s=0x404, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.708] connect (s=0x404, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.53"), namelen=16) returned -1 [0173.709] WSAGetLastError () returned 10035 [0173.709] htonl (hostlong=0xc0a80036) returned 0x3600a8c0 [0173.709] socket (af=2, type=1, protocol=6) returned 0x408 [0173.709] ioctlsocket (in: s=0x408, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.709] connect (s=0x408, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.54"), namelen=16) returned -1 [0173.905] WSAGetLastError () returned 10035 [0173.906] htonl (hostlong=0xc0a80037) returned 0x3700a8c0 [0173.906] socket (af=2, type=1, protocol=6) returned 0x40c [0173.906] ioctlsocket (in: s=0x40c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.906] connect (s=0x40c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.55"), namelen=16) returned -1 [0173.907] WSAGetLastError () returned 10035 [0173.907] htonl (hostlong=0xc0a80038) returned 0x3800a8c0 [0173.907] socket (af=2, type=1, protocol=6) returned 0x410 [0173.907] ioctlsocket (in: s=0x410, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.907] connect (s=0x410, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.56"), namelen=16) returned -1 [0173.908] WSAGetLastError () returned 10035 [0173.908] htonl (hostlong=0xc0a80039) returned 0x3900a8c0 [0173.908] socket (af=2, type=1, protocol=6) returned 0x414 [0173.909] ioctlsocket (in: s=0x414, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.909] connect (s=0x414, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.57"), namelen=16) returned -1 [0173.910] WSAGetLastError () returned 10035 [0173.910] htonl (hostlong=0xc0a8003a) returned 0x3a00a8c0 [0173.910] socket (af=2, type=1, protocol=6) returned 0x418 [0173.910] ioctlsocket (in: s=0x418, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.910] connect (s=0x418, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.58"), namelen=16) returned -1 [0173.911] WSAGetLastError () returned 10035 [0173.911] htonl (hostlong=0xc0a8003b) returned 0x3b00a8c0 [0173.911] socket (af=2, type=1, protocol=6) returned 0x41c [0173.912] ioctlsocket (in: s=0x41c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.912] connect (s=0x41c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.59"), namelen=16) returned -1 [0173.913] WSAGetLastError () returned 10035 [0173.913] htonl (hostlong=0xc0a8003c) returned 0x3c00a8c0 [0173.913] socket (af=2, type=1, protocol=6) returned 0x420 [0173.913] ioctlsocket (in: s=0x420, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.913] connect (s=0x420, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.60"), namelen=16) returned -1 [0173.914] WSAGetLastError () returned 10035 [0173.914] htonl (hostlong=0xc0a8003d) returned 0x3d00a8c0 [0173.914] socket (af=2, type=1, protocol=6) returned 0x424 [0173.915] ioctlsocket (in: s=0x424, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.915] connect (s=0x424, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.61"), namelen=16) returned -1 [0173.916] WSAGetLastError () returned 10035 [0173.916] htonl (hostlong=0xc0a8003e) returned 0x3e00a8c0 [0173.916] socket (af=2, type=1, protocol=6) returned 0x428 [0173.916] ioctlsocket (in: s=0x428, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.916] connect (s=0x428, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.62"), namelen=16) returned -1 [0173.924] WSAGetLastError () returned 10035 [0173.924] htonl (hostlong=0xc0a8003f) returned 0x3f00a8c0 [0173.924] socket (af=2, type=1, protocol=6) returned 0x42c [0173.925] ioctlsocket (in: s=0x42c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.925] connect (s=0x42c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.63"), namelen=16) returned -1 [0173.927] WSAGetLastError () returned 10035 [0173.927] htonl (hostlong=0xc0a80040) returned 0x4000a8c0 [0173.927] socket (af=2, type=1, protocol=6) returned 0x430 [0173.927] ioctlsocket (in: s=0x430, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.927] connect (s=0x430, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.64"), namelen=16) returned -1 [0173.928] WSAGetLastError () returned 10035 [0173.928] htonl (hostlong=0xc0a80041) returned 0x4100a8c0 [0173.928] socket (af=2, type=1, protocol=6) returned 0x434 [0173.929] ioctlsocket (in: s=0x434, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.929] connect (s=0x434, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.65"), namelen=16) returned -1 [0173.930] WSAGetLastError () returned 10035 [0173.930] htonl (hostlong=0xc0a80042) returned 0x4200a8c0 [0173.930] socket (af=2, type=1, protocol=6) returned 0x438 [0173.930] ioctlsocket (in: s=0x438, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.930] connect (s=0x438, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.66"), namelen=16) returned -1 [0173.934] WSAGetLastError () returned 10035 [0173.934] htonl (hostlong=0xc0a80043) returned 0x4300a8c0 [0173.934] socket (af=2, type=1, protocol=6) returned 0x43c [0173.934] ioctlsocket (in: s=0x43c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.934] connect (s=0x43c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.67"), namelen=16) returned -1 [0173.936] WSAGetLastError () returned 10035 [0173.936] htonl (hostlong=0xc0a80044) returned 0x4400a8c0 [0173.936] socket (af=2, type=1, protocol=6) returned 0x440 [0173.936] ioctlsocket (in: s=0x440, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.936] connect (s=0x440, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.68"), namelen=16) returned -1 [0173.937] WSAGetLastError () returned 10035 [0173.937] htonl (hostlong=0xc0a80045) returned 0x4500a8c0 [0173.938] socket (af=2, type=1, protocol=6) returned 0x444 [0173.938] ioctlsocket (in: s=0x444, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.938] connect (s=0x444, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.69"), namelen=16) returned -1 [0173.939] WSAGetLastError () returned 10035 [0173.939] htonl (hostlong=0xc0a80046) returned 0x4600a8c0 [0173.939] socket (af=2, type=1, protocol=6) returned 0x448 [0173.939] ioctlsocket (in: s=0x448, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.939] connect (s=0x448, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.70"), namelen=16) returned -1 [0173.941] WSAGetLastError () returned 10035 [0173.941] htonl (hostlong=0xc0a80047) returned 0x4700a8c0 [0173.941] socket (af=2, type=1, protocol=6) returned 0x44c [0173.941] ioctlsocket (in: s=0x44c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.941] connect (s=0x44c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.71"), namelen=16) returned -1 [0173.942] WSAGetLastError () returned 10035 [0173.942] htonl (hostlong=0xc0a80048) returned 0x4800a8c0 [0173.942] socket (af=2, type=1, protocol=6) returned 0x450 [0173.942] ioctlsocket (in: s=0x450, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.942] connect (s=0x450, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.72"), namelen=16) returned -1 [0173.943] WSAGetLastError () returned 10035 [0173.943] htonl (hostlong=0xc0a80049) returned 0x4900a8c0 [0173.943] socket (af=2, type=1, protocol=6) returned 0x454 [0173.944] ioctlsocket (in: s=0x454, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.944] connect (s=0x454, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.73"), namelen=16) returned -1 [0173.945] WSAGetLastError () returned 10035 [0173.945] htonl (hostlong=0xc0a8004a) returned 0x4a00a8c0 [0173.945] socket (af=2, type=1, protocol=6) returned 0x458 [0173.945] ioctlsocket (in: s=0x458, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.945] connect (s=0x458, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.74"), namelen=16) returned -1 [0173.946] WSAGetLastError () returned 10035 [0173.946] htonl (hostlong=0xc0a8004b) returned 0x4b00a8c0 [0173.946] socket (af=2, type=1, protocol=6) returned 0x45c [0173.947] ioctlsocket (in: s=0x45c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.947] connect (s=0x45c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.75"), namelen=16) returned -1 [0173.948] WSAGetLastError () returned 10035 [0173.948] htonl (hostlong=0xc0a8004c) returned 0x4c00a8c0 [0173.948] socket (af=2, type=1, protocol=6) returned 0x460 [0173.948] ioctlsocket (in: s=0x460, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.948] connect (s=0x460, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.76"), namelen=16) returned -1 [0173.949] WSAGetLastError () returned 10035 [0173.949] htonl (hostlong=0xc0a8004d) returned 0x4d00a8c0 [0173.949] socket (af=2, type=1, protocol=6) returned 0x464 [0173.951] ioctlsocket (in: s=0x464, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.980] connect (s=0x464, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.77"), namelen=16) returned -1 [0173.981] WSAGetLastError () returned 10035 [0173.981] htonl (hostlong=0xc0a8004e) returned 0x4e00a8c0 [0173.981] socket (af=2, type=1, protocol=6) returned 0x468 [0173.981] ioctlsocket (in: s=0x468, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.981] connect (s=0x468, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.78"), namelen=16) returned -1 [0173.982] WSAGetLastError () returned 10035 [0173.983] htonl (hostlong=0xc0a8004f) returned 0x4f00a8c0 [0173.983] socket (af=2, type=1, protocol=6) returned 0x46c [0173.983] ioctlsocket (in: s=0x46c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.983] connect (s=0x46c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.79"), namelen=16) returned -1 [0173.984] WSAGetLastError () returned 10035 [0173.984] htonl (hostlong=0xc0a80050) returned 0x5000a8c0 [0173.984] socket (af=2, type=1, protocol=6) returned 0x470 [0173.984] ioctlsocket (in: s=0x470, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.984] connect (s=0x470, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.80"), namelen=16) returned -1 [0173.985] WSAGetLastError () returned 10035 [0173.985] htonl (hostlong=0xc0a80051) returned 0x5100a8c0 [0173.985] socket (af=2, type=1, protocol=6) returned 0x474 [0173.985] ioctlsocket (in: s=0x474, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.986] connect (s=0x474, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.81"), namelen=16) returned -1 [0173.986] WSAGetLastError () returned 10035 [0173.987] htonl (hostlong=0xc0a80052) returned 0x5200a8c0 [0173.987] socket (af=2, type=1, protocol=6) returned 0x478 [0173.987] ioctlsocket (in: s=0x478, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.987] connect (s=0x478, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.82"), namelen=16) returned -1 [0173.988] WSAGetLastError () returned 10035 [0173.988] htonl (hostlong=0xc0a80053) returned 0x5300a8c0 [0173.988] socket (af=2, type=1, protocol=6) returned 0x47c [0173.988] ioctlsocket (in: s=0x47c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.988] connect (s=0x47c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.83"), namelen=16) returned -1 [0173.989] WSAGetLastError () returned 10035 [0173.989] htonl (hostlong=0xc0a80054) returned 0x5400a8c0 [0173.990] socket (af=2, type=1, protocol=6) returned 0x480 [0173.990] ioctlsocket (in: s=0x480, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.990] connect (s=0x480, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.84"), namelen=16) returned -1 [0173.991] WSAGetLastError () returned 10035 [0173.991] htonl (hostlong=0xc0a80055) returned 0x5500a8c0 [0173.991] socket (af=2, type=1, protocol=6) returned 0x484 [0173.991] ioctlsocket (in: s=0x484, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.991] connect (s=0x484, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.85"), namelen=16) returned -1 [0173.992] WSAGetLastError () returned 10035 [0173.992] htonl (hostlong=0xc0a80056) returned 0x5600a8c0 [0173.992] socket (af=2, type=1, protocol=6) returned 0x488 [0173.993] ioctlsocket (in: s=0x488, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0173.993] connect (s=0x488, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.86"), namelen=16) returned -1 [0174.182] WSAGetLastError () returned 10035 [0174.182] htonl (hostlong=0xc0a80057) returned 0x5700a8c0 [0174.182] socket (af=2, type=1, protocol=6) returned 0x48c [0174.183] ioctlsocket (in: s=0x48c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.183] connect (s=0x48c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.87"), namelen=16) returned -1 [0174.184] WSAGetLastError () returned 10035 [0174.184] htonl (hostlong=0xc0a80058) returned 0x5800a8c0 [0174.184] socket (af=2, type=1, protocol=6) returned 0x490 [0174.184] ioctlsocket (in: s=0x490, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.184] connect (s=0x490, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.88"), namelen=16) returned -1 [0174.185] WSAGetLastError () returned 10035 [0174.186] htonl (hostlong=0xc0a80059) returned 0x5900a8c0 [0174.186] socket (af=2, type=1, protocol=6) returned 0x494 [0174.187] ioctlsocket (in: s=0x494, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.187] connect (s=0x494, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.89"), namelen=16) returned -1 [0174.188] WSAGetLastError () returned 10035 [0174.188] htonl (hostlong=0xc0a8005a) returned 0x5a00a8c0 [0174.188] socket (af=2, type=1, protocol=6) returned 0x498 [0174.188] ioctlsocket (in: s=0x498, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.188] connect (s=0x498, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.90"), namelen=16) returned -1 [0174.189] WSAGetLastError () returned 10035 [0174.189] htonl (hostlong=0xc0a8005b) returned 0x5b00a8c0 [0174.189] socket (af=2, type=1, protocol=6) returned 0x49c [0174.189] ioctlsocket (in: s=0x49c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.189] connect (s=0x49c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.91"), namelen=16) returned -1 [0174.190] WSAGetLastError () returned 10035 [0174.190] htonl (hostlong=0xc0a8005c) returned 0x5c00a8c0 [0174.190] socket (af=2, type=1, protocol=6) returned 0x4a0 [0174.190] ioctlsocket (in: s=0x4a0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.190] connect (s=0x4a0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.92"), namelen=16) returned -1 [0174.194] WSAGetLastError () returned 10035 [0174.194] htonl (hostlong=0xc0a8005d) returned 0x5d00a8c0 [0174.194] socket (af=2, type=1, protocol=6) returned 0x4a4 [0174.194] ioctlsocket (in: s=0x4a4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.194] connect (s=0x4a4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.93"), namelen=16) returned -1 [0174.195] WSAGetLastError () returned 10035 [0174.195] htonl (hostlong=0xc0a8005e) returned 0x5e00a8c0 [0174.195] socket (af=2, type=1, protocol=6) returned 0x4a8 [0174.195] ioctlsocket (in: s=0x4a8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.195] connect (s=0x4a8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.94"), namelen=16) returned -1 [0174.196] WSAGetLastError () returned 10035 [0174.196] htonl (hostlong=0xc0a8005f) returned 0x5f00a8c0 [0174.196] socket (af=2, type=1, protocol=6) returned 0x4ac [0174.197] ioctlsocket (in: s=0x4ac, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.197] connect (s=0x4ac, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.95"), namelen=16) returned -1 [0174.198] WSAGetLastError () returned 10035 [0174.198] htonl (hostlong=0xc0a80060) returned 0x6000a8c0 [0174.198] socket (af=2, type=1, protocol=6) returned 0x4b0 [0174.198] ioctlsocket (in: s=0x4b0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.198] connect (s=0x4b0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.96"), namelen=16) returned -1 [0174.199] WSAGetLastError () returned 10035 [0174.199] htonl (hostlong=0xc0a80061) returned 0x6100a8c0 [0174.199] socket (af=2, type=1, protocol=6) returned 0x4b4 [0174.199] ioctlsocket (in: s=0x4b4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.199] connect (s=0x4b4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.97"), namelen=16) returned -1 [0174.200] WSAGetLastError () returned 10035 [0174.200] htonl (hostlong=0xc0a80062) returned 0x6200a8c0 [0174.200] socket (af=2, type=1, protocol=6) returned 0x4b8 [0174.201] ioctlsocket (in: s=0x4b8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.201] connect (s=0x4b8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.98"), namelen=16) returned -1 [0174.202] WSAGetLastError () returned 10035 [0174.202] htonl (hostlong=0xc0a80063) returned 0x6300a8c0 [0174.202] socket (af=2, type=1, protocol=6) returned 0x4bc [0174.202] ioctlsocket (in: s=0x4bc, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.202] connect (s=0x4bc, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.99"), namelen=16) returned -1 [0174.203] WSAGetLastError () returned 10035 [0174.203] htonl (hostlong=0xc0a80064) returned 0x6400a8c0 [0174.203] socket (af=2, type=1, protocol=6) returned 0x4c0 [0174.203] ioctlsocket (in: s=0x4c0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.203] connect (s=0x4c0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.100"), namelen=16) returned -1 [0174.204] WSAGetLastError () returned 10035 [0174.204] htonl (hostlong=0xc0a80065) returned 0x6500a8c0 [0174.204] socket (af=2, type=1, protocol=6) returned 0x4c4 [0174.205] ioctlsocket (in: s=0x4c4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.205] connect (s=0x4c4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.101"), namelen=16) returned -1 [0174.206] WSAGetLastError () returned 10035 [0174.206] htonl (hostlong=0xc0a80066) returned 0x6600a8c0 [0174.206] socket (af=2, type=1, protocol=6) returned 0x4c8 [0174.206] ioctlsocket (in: s=0x4c8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.206] connect (s=0x4c8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.102"), namelen=16) returned -1 [0174.207] WSAGetLastError () returned 10035 [0174.207] htonl (hostlong=0xc0a80067) returned 0x6700a8c0 [0174.207] socket (af=2, type=1, protocol=6) returned 0x4cc [0174.207] ioctlsocket (in: s=0x4cc, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.207] connect (s=0x4cc, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.103"), namelen=16) returned -1 [0174.208] WSAGetLastError () returned 10035 [0174.208] htonl (hostlong=0xc0a80068) returned 0x6800a8c0 [0174.208] socket (af=2, type=1, protocol=6) returned 0x4d0 [0174.208] ioctlsocket (in: s=0x4d0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.208] connect (s=0x4d0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.104"), namelen=16) returned -1 [0174.209] WSAGetLastError () returned 10035 [0174.209] htonl (hostlong=0xc0a80069) returned 0x6900a8c0 [0174.210] socket (af=2, type=1, protocol=6) returned 0x4d4 [0174.210] ioctlsocket (in: s=0x4d4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.210] connect (s=0x4d4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.105"), namelen=16) returned -1 [0174.211] WSAGetLastError () returned 10035 [0174.211] htonl (hostlong=0xc0a8006a) returned 0x6a00a8c0 [0174.211] socket (af=2, type=1, protocol=6) returned 0x4d8 [0174.211] ioctlsocket (in: s=0x4d8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.211] connect (s=0x4d8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.106"), namelen=16) returned -1 [0174.212] WSAGetLastError () returned 10035 [0174.212] htonl (hostlong=0xc0a8006b) returned 0x6b00a8c0 [0174.212] socket (af=2, type=1, protocol=6) returned 0x4dc [0174.212] ioctlsocket (in: s=0x4dc, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.212] connect (s=0x4dc, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.107"), namelen=16) returned -1 [0174.213] WSAGetLastError () returned 10035 [0174.213] htonl (hostlong=0xc0a8006c) returned 0x6c00a8c0 [0174.213] socket (af=2, type=1, protocol=6) returned 0x4e0 [0174.213] ioctlsocket (in: s=0x4e0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.213] connect (s=0x4e0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.108"), namelen=16) returned -1 [0174.214] WSAGetLastError () returned 10035 [0174.214] htonl (hostlong=0xc0a8006d) returned 0x6d00a8c0 [0174.214] socket (af=2, type=1, protocol=6) returned 0x4e4 [0174.215] ioctlsocket (in: s=0x4e4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.215] connect (s=0x4e4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.109"), namelen=16) returned -1 [0174.216] WSAGetLastError () returned 10035 [0174.216] htonl (hostlong=0xc0a8006e) returned 0x6e00a8c0 [0174.216] socket (af=2, type=1, protocol=6) returned 0x4e8 [0174.216] ioctlsocket (in: s=0x4e8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.216] connect (s=0x4e8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.110"), namelen=16) returned -1 [0174.217] WSAGetLastError () returned 10035 [0174.217] htonl (hostlong=0xc0a8006f) returned 0x6f00a8c0 [0174.217] socket (af=2, type=1, protocol=6) returned 0x4ec [0174.218] ioctlsocket (in: s=0x4ec, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.218] connect (s=0x4ec, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.111"), namelen=16) returned -1 [0174.219] WSAGetLastError () returned 10035 [0174.219] htonl (hostlong=0xc0a80070) returned 0x7000a8c0 [0174.219] socket (af=2, type=1, protocol=6) returned 0x4f0 [0174.219] ioctlsocket (in: s=0x4f0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.219] connect (s=0x4f0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.112"), namelen=16) returned -1 [0174.220] WSAGetLastError () returned 10035 [0174.220] htonl (hostlong=0xc0a80071) returned 0x7100a8c0 [0174.220] socket (af=2, type=1, protocol=6) returned 0x4f4 [0174.220] ioctlsocket (in: s=0x4f4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.220] connect (s=0x4f4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.113"), namelen=16) returned -1 [0174.221] WSAGetLastError () returned 10035 [0174.221] htonl (hostlong=0xc0a80072) returned 0x7200a8c0 [0174.221] socket (af=2, type=1, protocol=6) returned 0x4f8 [0174.221] ioctlsocket (in: s=0x4f8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.221] connect (s=0x4f8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.114"), namelen=16) returned -1 [0174.222] WSAGetLastError () returned 10035 [0174.222] htonl (hostlong=0xc0a80073) returned 0x7300a8c0 [0174.222] socket (af=2, type=1, protocol=6) returned 0x4fc [0174.223] ioctlsocket (in: s=0x4fc, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.223] connect (s=0x4fc, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.115"), namelen=16) returned -1 [0174.224] WSAGetLastError () returned 10035 [0174.224] htonl (hostlong=0xc0a80074) returned 0x7400a8c0 [0174.224] socket (af=2, type=1, protocol=6) returned 0x500 [0174.224] ioctlsocket (in: s=0x500, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.224] connect (s=0x500, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.116"), namelen=16) returned -1 [0174.225] WSAGetLastError () returned 10035 [0174.225] htonl (hostlong=0xc0a80075) returned 0x7500a8c0 [0174.225] socket (af=2, type=1, protocol=6) returned 0x504 [0174.225] ioctlsocket (in: s=0x504, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.225] connect (s=0x504, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.117"), namelen=16) returned -1 [0174.226] WSAGetLastError () returned 10035 [0174.226] htonl (hostlong=0xc0a80076) returned 0x7600a8c0 [0174.226] socket (af=2, type=1, protocol=6) returned 0x508 [0174.226] ioctlsocket (in: s=0x508, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.226] connect (s=0x508, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.118"), namelen=16) returned -1 [0174.227] WSAGetLastError () returned 10035 [0174.227] htonl (hostlong=0xc0a80077) returned 0x7700a8c0 [0174.227] socket (af=2, type=1, protocol=6) returned 0x50c [0174.227] ioctlsocket (in: s=0x50c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.227] connect (s=0x50c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.119"), namelen=16) returned -1 [0174.228] WSAGetLastError () returned 10035 [0174.228] htonl (hostlong=0xc0a80078) returned 0x7800a8c0 [0174.228] socket (af=2, type=1, protocol=6) returned 0x510 [0174.229] ioctlsocket (in: s=0x510, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.229] connect (s=0x510, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.120"), namelen=16) returned -1 [0174.230] WSAGetLastError () returned 10035 [0174.230] htonl (hostlong=0xc0a80079) returned 0x7900a8c0 [0174.230] socket (af=2, type=1, protocol=6) returned 0x514 [0174.230] ioctlsocket (in: s=0x514, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.230] connect (s=0x514, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.121"), namelen=16) returned -1 [0174.231] WSAGetLastError () returned 10035 [0174.231] htonl (hostlong=0xc0a8007a) returned 0x7a00a8c0 [0174.231] socket (af=2, type=1, protocol=6) returned 0x518 [0174.231] ioctlsocket (in: s=0x518, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.231] connect (s=0x518, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.122"), namelen=16) returned -1 [0174.232] WSAGetLastError () returned 10035 [0174.232] htonl (hostlong=0xc0a8007b) returned 0x7b00a8c0 [0174.232] socket (af=2, type=1, protocol=6) returned 0x51c [0174.233] ioctlsocket (in: s=0x51c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.233] connect (s=0x51c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.123"), namelen=16) returned -1 [0174.234] WSAGetLastError () returned 10035 [0174.234] htonl (hostlong=0xc0a8007c) returned 0x7c00a8c0 [0174.234] socket (af=2, type=1, protocol=6) returned 0x520 [0174.234] ioctlsocket (in: s=0x520, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.234] connect (s=0x520, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.124"), namelen=16) returned -1 [0174.235] WSAGetLastError () returned 10035 [0174.235] htonl (hostlong=0xc0a8007d) returned 0x7d00a8c0 [0174.235] socket (af=2, type=1, protocol=6) returned 0x524 [0174.235] ioctlsocket (in: s=0x524, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.235] connect (s=0x524, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.125"), namelen=16) returned -1 [0174.236] WSAGetLastError () returned 10035 [0174.236] htonl (hostlong=0xc0a8007e) returned 0x7e00a8c0 [0174.236] socket (af=2, type=1, protocol=6) returned 0x528 [0174.236] ioctlsocket (in: s=0x528, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.236] connect (s=0x528, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.126"), namelen=16) returned -1 [0174.237] WSAGetLastError () returned 10035 [0174.237] htonl (hostlong=0xc0a8007f) returned 0x7f00a8c0 [0174.237] socket (af=2, type=1, protocol=6) returned 0x52c [0174.238] ioctlsocket (in: s=0x52c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.238] connect (s=0x52c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.127"), namelen=16) returned -1 [0174.239] WSAGetLastError () returned 10035 [0174.239] htonl (hostlong=0xc0a80080) returned 0x8000a8c0 [0174.239] socket (af=2, type=1, protocol=6) returned 0x530 [0174.239] ioctlsocket (in: s=0x530, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.239] connect (s=0x530, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.128"), namelen=16) returned -1 [0174.486] WSAGetLastError () returned 10035 [0174.486] htonl (hostlong=0xc0a80081) returned 0x8100a8c0 [0174.486] socket (af=2, type=1, protocol=6) returned 0x534 [0174.486] ioctlsocket (in: s=0x534, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.487] connect (s=0x534, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.129"), namelen=16) returned -1 [0174.487] WSAGetLastError () returned 10035 [0174.487] htonl (hostlong=0xc0a80082) returned 0x8200a8c0 [0174.487] socket (af=2, type=1, protocol=6) returned 0x538 [0174.488] ioctlsocket (in: s=0x538, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.488] connect (s=0x538, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.130"), namelen=16) returned -1 [0174.488] WSAGetLastError () returned 10035 [0174.488] htonl (hostlong=0xc0a80083) returned 0x8300a8c0 [0174.488] socket (af=2, type=1, protocol=6) returned 0x53c [0174.489] ioctlsocket (in: s=0x53c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.489] connect (s=0x53c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.131"), namelen=16) returned -1 [0174.489] WSAGetLastError () returned 10035 [0174.489] htonl (hostlong=0xc0a80084) returned 0x8400a8c0 [0174.489] socket (af=2, type=1, protocol=6) returned 0x540 [0174.489] ioctlsocket (in: s=0x540, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.490] connect (s=0x540, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.132"), namelen=16) returned -1 [0174.490] WSAGetLastError () returned 10035 [0174.490] htonl (hostlong=0xc0a80085) returned 0x8500a8c0 [0174.490] socket (af=2, type=1, protocol=6) returned 0x544 [0174.490] ioctlsocket (in: s=0x544, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.490] connect (s=0x544, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.133"), namelen=16) returned -1 [0174.491] WSAGetLastError () returned 10035 [0174.491] htonl (hostlong=0xc0a80086) returned 0x8600a8c0 [0174.491] socket (af=2, type=1, protocol=6) returned 0x548 [0174.491] ioctlsocket (in: s=0x548, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.491] connect (s=0x548, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.134"), namelen=16) returned -1 [0174.492] WSAGetLastError () returned 10035 [0174.492] htonl (hostlong=0xc0a80087) returned 0x8700a8c0 [0174.492] socket (af=2, type=1, protocol=6) returned 0x54c [0174.492] ioctlsocket (in: s=0x54c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.492] connect (s=0x54c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.135"), namelen=16) returned -1 [0174.493] WSAGetLastError () returned 10035 [0174.493] htonl (hostlong=0xc0a80088) returned 0x8800a8c0 [0174.493] socket (af=2, type=1, protocol=6) returned 0x550 [0174.493] ioctlsocket (in: s=0x550, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.493] connect (s=0x550, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.136"), namelen=16) returned -1 [0174.494] WSAGetLastError () returned 10035 [0174.494] htonl (hostlong=0xc0a80089) returned 0x8900a8c0 [0174.494] socket (af=2, type=1, protocol=6) returned 0x554 [0174.494] ioctlsocket (in: s=0x554, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.494] connect (s=0x554, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.137"), namelen=16) returned -1 [0174.495] WSAGetLastError () returned 10035 [0174.495] htonl (hostlong=0xc0a8008a) returned 0x8a00a8c0 [0174.495] socket (af=2, type=1, protocol=6) returned 0x558 [0174.495] ioctlsocket (in: s=0x558, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.495] connect (s=0x558, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.138"), namelen=16) returned -1 [0174.496] WSAGetLastError () returned 10035 [0174.496] htonl (hostlong=0xc0a8008b) returned 0x8b00a8c0 [0174.496] socket (af=2, type=1, protocol=6) returned 0x55c [0174.496] ioctlsocket (in: s=0x55c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.496] connect (s=0x55c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.139"), namelen=16) returned -1 [0174.497] WSAGetLastError () returned 10035 [0174.497] htonl (hostlong=0xc0a8008c) returned 0x8c00a8c0 [0174.497] socket (af=2, type=1, protocol=6) returned 0x560 [0174.497] ioctlsocket (in: s=0x560, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.497] connect (s=0x560, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.140"), namelen=16) returned -1 [0174.498] WSAGetLastError () returned 10035 [0174.498] htonl (hostlong=0xc0a8008d) returned 0x8d00a8c0 [0174.498] socket (af=2, type=1, protocol=6) returned 0x564 [0174.498] ioctlsocket (in: s=0x564, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.498] connect (s=0x564, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.141"), namelen=16) returned -1 [0174.499] WSAGetLastError () returned 10035 [0174.499] htonl (hostlong=0xc0a8008e) returned 0x8e00a8c0 [0174.499] socket (af=2, type=1, protocol=6) returned 0x568 [0174.499] ioctlsocket (in: s=0x568, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.499] connect (s=0x568, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.142"), namelen=16) returned -1 [0174.500] WSAGetLastError () returned 10035 [0174.500] htonl (hostlong=0xc0a8008f) returned 0x8f00a8c0 [0174.500] socket (af=2, type=1, protocol=6) returned 0x56c [0174.500] ioctlsocket (in: s=0x56c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.500] connect (s=0x56c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.143"), namelen=16) returned -1 [0174.501] WSAGetLastError () returned 10035 [0174.501] htonl (hostlong=0xc0a80090) returned 0x9000a8c0 [0174.501] socket (af=2, type=1, protocol=6) returned 0x570 [0174.501] ioctlsocket (in: s=0x570, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.501] connect (s=0x570, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.144"), namelen=16) returned -1 [0174.502] WSAGetLastError () returned 10035 [0174.502] htonl (hostlong=0xc0a80091) returned 0x9100a8c0 [0174.502] socket (af=2, type=1, protocol=6) returned 0x574 [0174.502] ioctlsocket (in: s=0x574, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.502] connect (s=0x574, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.145"), namelen=16) returned -1 [0174.503] WSAGetLastError () returned 10035 [0174.503] htonl (hostlong=0xc0a80092) returned 0x9200a8c0 [0174.503] socket (af=2, type=1, protocol=6) returned 0x578 [0174.503] ioctlsocket (in: s=0x578, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.503] connect (s=0x578, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.146"), namelen=16) returned -1 [0174.504] WSAGetLastError () returned 10035 [0174.504] htonl (hostlong=0xc0a80093) returned 0x9300a8c0 [0174.504] socket (af=2, type=1, protocol=6) returned 0x57c [0174.504] ioctlsocket (in: s=0x57c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.504] connect (s=0x57c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.147"), namelen=16) returned -1 [0174.505] WSAGetLastError () returned 10035 [0174.505] htonl (hostlong=0xc0a80094) returned 0x9400a8c0 [0174.505] socket (af=2, type=1, protocol=6) returned 0x580 [0174.505] ioctlsocket (in: s=0x580, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.505] connect (s=0x580, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.148"), namelen=16) returned -1 [0174.506] WSAGetLastError () returned 10035 [0174.506] htonl (hostlong=0xc0a80095) returned 0x9500a8c0 [0174.506] socket (af=2, type=1, protocol=6) returned 0x584 [0174.506] ioctlsocket (in: s=0x584, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.506] connect (s=0x584, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.149"), namelen=16) returned -1 [0174.506] WSAGetLastError () returned 10035 [0174.506] htonl (hostlong=0xc0a80096) returned 0x9600a8c0 [0174.506] socket (af=2, type=1, protocol=6) returned 0x588 [0174.507] ioctlsocket (in: s=0x588, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.507] connect (s=0x588, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.150"), namelen=16) returned -1 [0174.507] WSAGetLastError () returned 10035 [0174.507] htonl (hostlong=0xc0a80097) returned 0x9700a8c0 [0174.507] socket (af=2, type=1, protocol=6) returned 0x58c [0174.508] ioctlsocket (in: s=0x58c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.508] connect (s=0x58c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.151"), namelen=16) returned -1 [0174.508] WSAGetLastError () returned 10035 [0174.508] htonl (hostlong=0xc0a80098) returned 0x9800a8c0 [0174.509] socket (af=2, type=1, protocol=6) returned 0x590 [0174.509] ioctlsocket (in: s=0x590, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.509] connect (s=0x590, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.152"), namelen=16) returned -1 [0174.509] WSAGetLastError () returned 10035 [0174.509] htonl (hostlong=0xc0a80099) returned 0x9900a8c0 [0174.509] socket (af=2, type=1, protocol=6) returned 0x594 [0174.510] ioctlsocket (in: s=0x594, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.510] connect (s=0x594, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.153"), namelen=16) returned -1 [0174.510] WSAGetLastError () returned 10035 [0174.510] htonl (hostlong=0xc0a8009a) returned 0x9a00a8c0 [0174.510] socket (af=2, type=1, protocol=6) returned 0x598 [0174.511] ioctlsocket (in: s=0x598, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.511] connect (s=0x598, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.154"), namelen=16) returned -1 [0174.511] WSAGetLastError () returned 10035 [0174.511] htonl (hostlong=0xc0a8009b) returned 0x9b00a8c0 [0174.511] socket (af=2, type=1, protocol=6) returned 0x59c [0174.512] ioctlsocket (in: s=0x59c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.512] connect (s=0x59c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.155"), namelen=16) returned -1 [0174.512] WSAGetLastError () returned 10035 [0174.512] htonl (hostlong=0xc0a8009c) returned 0x9c00a8c0 [0174.512] socket (af=2, type=1, protocol=6) returned 0x5a0 [0174.513] ioctlsocket (in: s=0x5a0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.513] connect (s=0x5a0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.156"), namelen=16) returned -1 [0174.514] WSAGetLastError () returned 10035 [0174.514] htonl (hostlong=0xc0a8009d) returned 0x9d00a8c0 [0174.514] socket (af=2, type=1, protocol=6) returned 0x5a4 [0174.514] ioctlsocket (in: s=0x5a4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.514] connect (s=0x5a4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.157"), namelen=16) returned -1 [0174.514] WSAGetLastError () returned 10035 [0174.515] htonl (hostlong=0xc0a8009e) returned 0x9e00a8c0 [0174.515] socket (af=2, type=1, protocol=6) returned 0x5a8 [0174.515] ioctlsocket (in: s=0x5a8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.515] connect (s=0x5a8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.158"), namelen=16) returned -1 [0174.515] WSAGetLastError () returned 10035 [0174.515] htonl (hostlong=0xc0a8009f) returned 0x9f00a8c0 [0174.515] socket (af=2, type=1, protocol=6) returned 0x5ac [0174.516] ioctlsocket (in: s=0x5ac, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.516] connect (s=0x5ac, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.159"), namelen=16) returned -1 [0174.519] WSAGetLastError () returned 10035 [0174.519] htonl (hostlong=0xc0a800a0) returned 0xa000a8c0 [0174.519] socket (af=2, type=1, protocol=6) returned 0x5b0 [0174.519] ioctlsocket (in: s=0x5b0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.519] connect (s=0x5b0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.160"), namelen=16) returned -1 [0174.520] WSAGetLastError () returned 10035 [0174.520] htonl (hostlong=0xc0a800a1) returned 0xa100a8c0 [0174.520] socket (af=2, type=1, protocol=6) returned 0x5b4 [0174.520] ioctlsocket (in: s=0x5b4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.521] connect (s=0x5b4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.161"), namelen=16) returned -1 [0174.521] WSAGetLastError () returned 10035 [0174.521] htonl (hostlong=0xc0a800a2) returned 0xa200a8c0 [0174.521] socket (af=2, type=1, protocol=6) returned 0x5b8 [0174.521] ioctlsocket (in: s=0x5b8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.521] connect (s=0x5b8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.162"), namelen=16) returned -1 [0174.522] WSAGetLastError () returned 10035 [0174.522] htonl (hostlong=0xc0a800a3) returned 0xa300a8c0 [0174.522] socket (af=2, type=1, protocol=6) returned 0x5bc [0174.522] ioctlsocket (in: s=0x5bc, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.522] connect (s=0x5bc, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.163"), namelen=16) returned -1 [0174.523] WSAGetLastError () returned 10035 [0174.523] htonl (hostlong=0xc0a800a4) returned 0xa400a8c0 [0174.523] socket (af=2, type=1, protocol=6) returned 0x5c0 [0174.523] ioctlsocket (in: s=0x5c0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.523] connect (s=0x5c0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.164"), namelen=16) returned -1 [0174.524] WSAGetLastError () returned 10035 [0174.524] htonl (hostlong=0xc0a800a5) returned 0xa500a8c0 [0174.524] socket (af=2, type=1, protocol=6) returned 0x5c4 [0174.524] ioctlsocket (in: s=0x5c4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.524] connect (s=0x5c4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.165"), namelen=16) returned -1 [0174.525] WSAGetLastError () returned 10035 [0174.525] htonl (hostlong=0xc0a800a6) returned 0xa600a8c0 [0174.525] socket (af=2, type=1, protocol=6) returned 0x5c8 [0174.525] ioctlsocket (in: s=0x5c8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.525] connect (s=0x5c8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.166"), namelen=16) returned -1 [0174.526] WSAGetLastError () returned 10035 [0174.526] htonl (hostlong=0xc0a800a7) returned 0xa700a8c0 [0174.526] socket (af=2, type=1, protocol=6) returned 0x5cc [0174.526] ioctlsocket (in: s=0x5cc, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.526] connect (s=0x5cc, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.167"), namelen=16) returned -1 [0174.527] WSAGetLastError () returned 10035 [0174.527] htonl (hostlong=0xc0a800a8) returned 0xa800a8c0 [0174.527] socket (af=2, type=1, protocol=6) returned 0x5d0 [0174.527] ioctlsocket (in: s=0x5d0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.527] connect (s=0x5d0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.168"), namelen=16) returned -1 [0174.528] WSAGetLastError () returned 10035 [0174.528] htonl (hostlong=0xc0a800a9) returned 0xa900a8c0 [0174.528] socket (af=2, type=1, protocol=6) returned 0x5d4 [0174.528] ioctlsocket (in: s=0x5d4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.528] connect (s=0x5d4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.169"), namelen=16) returned -1 [0174.709] WSAGetLastError () returned 10035 [0174.709] htonl (hostlong=0xc0a800aa) returned 0xaa00a8c0 [0174.709] socket (af=2, type=1, protocol=6) returned 0x5d8 [0174.709] ioctlsocket (in: s=0x5d8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.709] connect (s=0x5d8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.170"), namelen=16) returned -1 [0174.711] WSAGetLastError () returned 10035 [0174.711] htonl (hostlong=0xc0a800ab) returned 0xab00a8c0 [0174.711] socket (af=2, type=1, protocol=6) returned 0x5dc [0174.711] ioctlsocket (in: s=0x5dc, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.711] connect (s=0x5dc, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.171"), namelen=16) returned -1 [0174.712] WSAGetLastError () returned 10035 [0174.712] htonl (hostlong=0xc0a800ac) returned 0xac00a8c0 [0174.712] socket (af=2, type=1, protocol=6) returned 0x5e0 [0174.712] ioctlsocket (in: s=0x5e0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.712] connect (s=0x5e0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.172"), namelen=16) returned -1 [0174.713] WSAGetLastError () returned 10035 [0174.713] htonl (hostlong=0xc0a800ad) returned 0xad00a8c0 [0174.713] socket (af=2, type=1, protocol=6) returned 0x5e4 [0174.713] ioctlsocket (in: s=0x5e4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.713] connect (s=0x5e4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.173"), namelen=16) returned -1 [0174.714] WSAGetLastError () returned 10035 [0174.714] htonl (hostlong=0xc0a800ae) returned 0xae00a8c0 [0174.714] socket (af=2, type=1, protocol=6) returned 0x5e8 [0174.715] ioctlsocket (in: s=0x5e8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.715] connect (s=0x5e8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.174"), namelen=16) returned -1 [0174.716] WSAGetLastError () returned 10035 [0174.716] htonl (hostlong=0xc0a800af) returned 0xaf00a8c0 [0174.716] socket (af=2, type=1, protocol=6) returned 0x5ec [0174.716] ioctlsocket (in: s=0x5ec, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.716] connect (s=0x5ec, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.175"), namelen=16) returned -1 [0174.717] WSAGetLastError () returned 10035 [0174.717] htonl (hostlong=0xc0a800b0) returned 0xb000a8c0 [0174.717] socket (af=2, type=1, protocol=6) returned 0x5f0 [0174.717] ioctlsocket (in: s=0x5f0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.717] connect (s=0x5f0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.176"), namelen=16) returned -1 [0174.718] WSAGetLastError () returned 10035 [0174.718] htonl (hostlong=0xc0a800b1) returned 0xb100a8c0 [0174.718] socket (af=2, type=1, protocol=6) returned 0x5f4 [0174.718] ioctlsocket (in: s=0x5f4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.718] connect (s=0x5f4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.177"), namelen=16) returned -1 [0174.719] WSAGetLastError () returned 10035 [0174.719] htonl (hostlong=0xc0a800b2) returned 0xb200a8c0 [0174.719] socket (af=2, type=1, protocol=6) returned 0x5f8 [0174.720] ioctlsocket (in: s=0x5f8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.720] connect (s=0x5f8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.178"), namelen=16) returned -1 [0174.722] WSAGetLastError () returned 10035 [0174.722] htonl (hostlong=0xc0a800b3) returned 0xb300a8c0 [0174.722] socket (af=2, type=1, protocol=6) returned 0x5fc [0174.722] ioctlsocket (in: s=0x5fc, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.723] connect (s=0x5fc, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.179"), namelen=16) returned -1 [0174.723] WSAGetLastError () returned 10035 [0174.723] htonl (hostlong=0xc0a800b4) returned 0xb400a8c0 [0174.723] socket (af=2, type=1, protocol=6) returned 0x600 [0174.724] ioctlsocket (in: s=0x600, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.724] connect (s=0x600, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.180"), namelen=16) returned -1 [0174.725] WSAGetLastError () returned 10035 [0174.725] htonl (hostlong=0xc0a800b5) returned 0xb500a8c0 [0174.725] socket (af=2, type=1, protocol=6) returned 0x604 [0174.725] ioctlsocket (in: s=0x604, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.725] connect (s=0x604, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.181"), namelen=16) returned -1 [0174.726] WSAGetLastError () returned 10035 [0174.726] htonl (hostlong=0xc0a800b6) returned 0xb600a8c0 [0174.726] socket (af=2, type=1, protocol=6) returned 0x608 [0174.726] ioctlsocket (in: s=0x608, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.726] connect (s=0x608, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.182"), namelen=16) returned -1 [0174.727] WSAGetLastError () returned 10035 [0174.727] htonl (hostlong=0xc0a800b7) returned 0xb700a8c0 [0174.727] socket (af=2, type=1, protocol=6) returned 0x60c [0174.727] ioctlsocket (in: s=0x60c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.727] connect (s=0x60c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.183"), namelen=16) returned -1 [0174.728] WSAGetLastError () returned 10035 [0174.728] htonl (hostlong=0xc0a800b8) returned 0xb800a8c0 [0174.728] socket (af=2, type=1, protocol=6) returned 0x610 [0174.729] ioctlsocket (in: s=0x610, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.729] connect (s=0x610, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.184"), namelen=16) returned -1 [0174.730] WSAGetLastError () returned 10035 [0174.730] htonl (hostlong=0xc0a800b9) returned 0xb900a8c0 [0174.730] socket (af=2, type=1, protocol=6) returned 0x614 [0174.730] ioctlsocket (in: s=0x614, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.730] connect (s=0x614, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.185"), namelen=16) returned -1 [0174.731] WSAGetLastError () returned 10035 [0174.731] htonl (hostlong=0xc0a800ba) returned 0xba00a8c0 [0174.731] socket (af=2, type=1, protocol=6) returned 0x618 [0174.731] ioctlsocket (in: s=0x618, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.731] connect (s=0x618, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.186"), namelen=16) returned -1 [0174.733] WSAGetLastError () returned 10035 [0174.733] htonl (hostlong=0xc0a800bb) returned 0xbb00a8c0 [0174.733] socket (af=2, type=1, protocol=6) returned 0x61c [0174.733] ioctlsocket (in: s=0x61c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.733] connect (s=0x61c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.187"), namelen=16) returned -1 [0174.734] WSAGetLastError () returned 10035 [0174.734] htonl (hostlong=0xc0a800bc) returned 0xbc00a8c0 [0174.734] socket (af=2, type=1, protocol=6) returned 0x620 [0174.734] ioctlsocket (in: s=0x620, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.734] connect (s=0x620, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.188"), namelen=16) returned -1 [0174.735] WSAGetLastError () returned 10035 [0174.735] htonl (hostlong=0xc0a800bd) returned 0xbd00a8c0 [0174.735] socket (af=2, type=1, protocol=6) returned 0x624 [0174.735] ioctlsocket (in: s=0x624, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.735] connect (s=0x624, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.189"), namelen=16) returned -1 [0174.737] WSAGetLastError () returned 10035 [0174.737] htonl (hostlong=0xc0a800be) returned 0xbe00a8c0 [0174.737] socket (af=2, type=1, protocol=6) returned 0x628 [0174.737] ioctlsocket (in: s=0x628, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.738] connect (s=0x628, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.190"), namelen=16) returned -1 [0174.739] WSAGetLastError () returned 10035 [0174.739] htonl (hostlong=0xc0a800bf) returned 0xbf00a8c0 [0174.739] socket (af=2, type=1, protocol=6) returned 0x62c [0174.739] ioctlsocket (in: s=0x62c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.739] connect (s=0x62c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.191"), namelen=16) returned -1 [0174.741] WSAGetLastError () returned 10035 [0174.741] htonl (hostlong=0xc0a800c0) returned 0xc000a8c0 [0174.741] socket (af=2, type=1, protocol=6) returned 0x630 [0174.741] ioctlsocket (in: s=0x630, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.741] connect (s=0x630, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.192"), namelen=16) returned -1 [0174.742] WSAGetLastError () returned 10035 [0174.742] htonl (hostlong=0xc0a800c1) returned 0xc100a8c0 [0174.742] socket (af=2, type=1, protocol=6) returned 0x634 [0174.743] ioctlsocket (in: s=0x634, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.743] connect (s=0x634, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.193"), namelen=16) returned -1 [0174.744] WSAGetLastError () returned 10035 [0174.744] htonl (hostlong=0xc0a800c2) returned 0xc200a8c0 [0174.744] socket (af=2, type=1, protocol=6) returned 0x638 [0174.744] ioctlsocket (in: s=0x638, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.744] connect (s=0x638, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.194"), namelen=16) returned -1 [0174.745] WSAGetLastError () returned 10035 [0174.745] htonl (hostlong=0xc0a800c3) returned 0xc300a8c0 [0174.745] socket (af=2, type=1, protocol=6) returned 0x63c [0174.746] ioctlsocket (in: s=0x63c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.746] connect (s=0x63c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.195"), namelen=16) returned -1 [0174.747] WSAGetLastError () returned 10035 [0174.747] htonl (hostlong=0xc0a800c4) returned 0xc400a8c0 [0174.747] socket (af=2, type=1, protocol=6) returned 0x640 [0174.747] ioctlsocket (in: s=0x640, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.747] connect (s=0x640, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.196"), namelen=16) returned -1 [0174.748] WSAGetLastError () returned 10035 [0174.748] htonl (hostlong=0xc0a800c5) returned 0xc500a8c0 [0174.748] socket (af=2, type=1, protocol=6) returned 0x644 [0174.749] ioctlsocket (in: s=0x644, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.749] connect (s=0x644, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.197"), namelen=16) returned -1 [0174.750] WSAGetLastError () returned 10035 [0174.750] htonl (hostlong=0xc0a800c6) returned 0xc600a8c0 [0174.750] socket (af=2, type=1, protocol=6) returned 0x648 [0174.750] ioctlsocket (in: s=0x648, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.750] connect (s=0x648, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.198"), namelen=16) returned -1 [0174.751] WSAGetLastError () returned 10035 [0174.751] htonl (hostlong=0xc0a800c7) returned 0xc700a8c0 [0174.751] socket (af=2, type=1, protocol=6) returned 0x64c [0174.751] ioctlsocket (in: s=0x64c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.751] connect (s=0x64c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.199"), namelen=16) returned -1 [0174.752] WSAGetLastError () returned 10035 [0174.752] htonl (hostlong=0xc0a800c8) returned 0xc800a8c0 [0174.752] socket (af=2, type=1, protocol=6) returned 0x650 [0174.752] ioctlsocket (in: s=0x650, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.752] connect (s=0x650, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.200"), namelen=16) returned -1 [0174.753] WSAGetLastError () returned 10035 [0174.753] htonl (hostlong=0xc0a800c9) returned 0xc900a8c0 [0174.753] socket (af=2, type=1, protocol=6) returned 0x654 [0174.753] ioctlsocket (in: s=0x654, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.753] connect (s=0x654, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.201"), namelen=16) returned -1 [0174.754] WSAGetLastError () returned 10035 [0174.754] htonl (hostlong=0xc0a800ca) returned 0xca00a8c0 [0174.754] socket (af=2, type=1, protocol=6) returned 0x658 [0174.755] ioctlsocket (in: s=0x658, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.755] connect (s=0x658, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.202"), namelen=16) returned -1 [0174.756] WSAGetLastError () returned 10035 [0174.756] htonl (hostlong=0xc0a800cb) returned 0xcb00a8c0 [0174.756] socket (af=2, type=1, protocol=6) returned 0x65c [0174.756] ioctlsocket (in: s=0x65c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.756] connect (s=0x65c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.203"), namelen=16) returned -1 [0174.757] WSAGetLastError () returned 10035 [0174.757] htonl (hostlong=0xc0a800cc) returned 0xcc00a8c0 [0174.757] socket (af=2, type=1, protocol=6) returned 0x660 [0174.757] ioctlsocket (in: s=0x660, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.757] connect (s=0x660, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.204"), namelen=16) returned -1 [0174.758] WSAGetLastError () returned 10035 [0174.758] htonl (hostlong=0xc0a800cd) returned 0xcd00a8c0 [0174.758] socket (af=2, type=1, protocol=6) returned 0x664 [0174.758] ioctlsocket (in: s=0x664, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.758] connect (s=0x664, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.205"), namelen=16) returned -1 [0174.760] WSAGetLastError () returned 10035 [0174.760] htonl (hostlong=0xc0a800ce) returned 0xce00a8c0 [0174.760] socket (af=2, type=1, protocol=6) returned 0x668 [0174.761] ioctlsocket (in: s=0x668, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.761] connect (s=0x668, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.206"), namelen=16) returned -1 [0174.761] WSAGetLastError () returned 10035 [0174.761] htonl (hostlong=0xc0a800cf) returned 0xcf00a8c0 [0174.762] socket (af=2, type=1, protocol=6) returned 0x66c [0174.762] ioctlsocket (in: s=0x66c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.762] connect (s=0x66c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.207"), namelen=16) returned -1 [0174.763] WSAGetLastError () returned 10035 [0174.763] htonl (hostlong=0xc0a800d0) returned 0xd000a8c0 [0174.763] socket (af=2, type=1, protocol=6) returned 0x670 [0174.763] ioctlsocket (in: s=0x670, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.763] connect (s=0x670, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.208"), namelen=16) returned -1 [0174.764] WSAGetLastError () returned 10035 [0174.764] htonl (hostlong=0xc0a800d1) returned 0xd100a8c0 [0174.764] socket (af=2, type=1, protocol=6) returned 0x674 [0174.764] ioctlsocket (in: s=0x674, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.764] connect (s=0x674, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.209"), namelen=16) returned -1 [0174.765] WSAGetLastError () returned 10035 [0174.765] htonl (hostlong=0xc0a800d2) returned 0xd200a8c0 [0174.765] socket (af=2, type=1, protocol=6) returned 0x678 [0174.765] ioctlsocket (in: s=0x678, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.765] connect (s=0x678, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.210"), namelen=16) returned -1 [0174.766] WSAGetLastError () returned 10035 [0174.766] htonl (hostlong=0xc0a800d3) returned 0xd300a8c0 [0174.766] socket (af=2, type=1, protocol=6) returned 0x67c [0174.767] ioctlsocket (in: s=0x67c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.767] connect (s=0x67c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.211"), namelen=16) returned -1 [0174.768] WSAGetLastError () returned 10035 [0174.768] htonl (hostlong=0xc0a800d4) returned 0xd400a8c0 [0174.768] socket (af=2, type=1, protocol=6) returned 0x680 [0174.768] ioctlsocket (in: s=0x680, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.768] connect (s=0x680, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.212"), namelen=16) returned -1 [0174.950] WSAGetLastError () returned 10035 [0174.950] htonl (hostlong=0xc0a800d5) returned 0xd500a8c0 [0174.950] socket (af=2, type=1, protocol=6) returned 0x684 [0174.950] ioctlsocket (in: s=0x684, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.950] connect (s=0x684, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.213"), namelen=16) returned -1 [0174.951] WSAGetLastError () returned 10035 [0174.951] htonl (hostlong=0xc0a800d6) returned 0xd600a8c0 [0174.951] socket (af=2, type=1, protocol=6) returned 0x688 [0174.952] ioctlsocket (in: s=0x688, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.952] connect (s=0x688, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.214"), namelen=16) returned -1 [0174.953] WSAGetLastError () returned 10035 [0174.953] htonl (hostlong=0xc0a800d7) returned 0xd700a8c0 [0174.953] socket (af=2, type=1, protocol=6) returned 0x68c [0174.953] ioctlsocket (in: s=0x68c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.953] connect (s=0x68c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.215"), namelen=16) returned -1 [0174.954] WSAGetLastError () returned 10035 [0174.954] htonl (hostlong=0xc0a800d8) returned 0xd800a8c0 [0174.954] socket (af=2, type=1, protocol=6) returned 0x690 [0174.954] ioctlsocket (in: s=0x690, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.954] connect (s=0x690, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.216"), namelen=16) returned -1 [0174.955] WSAGetLastError () returned 10035 [0174.955] htonl (hostlong=0xc0a800d9) returned 0xd900a8c0 [0174.955] socket (af=2, type=1, protocol=6) returned 0x694 [0174.955] ioctlsocket (in: s=0x694, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0174.955] connect (s=0x694, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.217"), namelen=16) returned -1 [0174.957] WSAGetLastError () returned 10035 [0174.957] GetTickCount () returned 0x1143980 [0174.957] GetTickCount () returned 0x1143980 [0174.957] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.958] GetTickCount () returned 0x1143980 [0174.958] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.958] GetTickCount () returned 0x1143980 [0174.958] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.958] GetTickCount () returned 0x1143980 [0174.958] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.958] GetTickCount () returned 0x1143980 [0174.958] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.958] GetTickCount () returned 0x1143980 [0174.958] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.958] GetTickCount () returned 0x1143980 [0174.958] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.958] GetTickCount () returned 0x1143980 [0174.958] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.958] GetTickCount () returned 0x1143980 [0174.958] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.958] GetTickCount () returned 0x1143980 [0174.958] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.958] GetTickCount () returned 0x1143980 [0174.958] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.959] GetTickCount () returned 0x1143980 [0174.959] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.959] GetTickCount () returned 0x1143980 [0174.959] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.959] GetTickCount () returned 0x1143980 [0174.959] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.959] GetTickCount () returned 0x1143980 [0174.959] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.959] GetTickCount () returned 0x1143980 [0174.959] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.959] GetTickCount () returned 0x1143980 [0174.959] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.959] GetTickCount () returned 0x1143980 [0174.959] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.959] GetTickCount () returned 0x1143980 [0174.959] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.959] GetTickCount () returned 0x1143980 [0174.959] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.959] GetTickCount () returned 0x1143980 [0174.959] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.959] GetTickCount () returned 0x1143980 [0174.959] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.959] GetTickCount () returned 0x1143980 [0174.959] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.959] GetTickCount () returned 0x1143980 [0174.959] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.959] GetTickCount () returned 0x1143980 [0174.959] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.959] GetTickCount () returned 0x1143980 [0174.959] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.959] GetTickCount () returned 0x1143980 [0174.959] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.959] GetTickCount () returned 0x1143980 [0174.959] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.959] GetTickCount () returned 0x1143980 [0174.959] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.959] GetTickCount () returned 0x1143980 [0174.959] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.959] GetTickCount () returned 0x1143980 [0174.959] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.959] GetTickCount () returned 0x1143980 [0174.959] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.960] GetTickCount () returned 0x1143980 [0174.960] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.960] GetTickCount () returned 0x1143980 [0174.960] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.960] GetTickCount () returned 0x1143980 [0174.960] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.960] GetTickCount () returned 0x1143980 [0174.960] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.960] GetTickCount () returned 0x1143980 [0174.960] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.960] GetTickCount () returned 0x1143980 [0174.960] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.960] GetTickCount () returned 0x1143980 [0174.960] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.960] GetTickCount () returned 0x1143980 [0174.960] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.960] GetTickCount () returned 0x1143980 [0174.960] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.960] GetTickCount () returned 0x1143980 [0174.960] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.960] GetTickCount () returned 0x1143980 [0174.960] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.960] GetTickCount () returned 0x1143980 [0174.960] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.960] GetTickCount () returned 0x1143980 [0174.960] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.960] GetTickCount () returned 0x1143980 [0174.960] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.960] GetTickCount () returned 0x1143980 [0174.960] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.960] GetTickCount () returned 0x1143980 [0174.960] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.960] GetTickCount () returned 0x1143980 [0174.960] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.960] GetTickCount () returned 0x1143980 [0174.960] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.960] GetTickCount () returned 0x1143980 [0174.960] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.960] GetTickCount () returned 0x1143980 [0174.960] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.960] GetTickCount () returned 0x1143980 [0174.961] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.961] GetTickCount () returned 0x1143980 [0174.961] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.961] GetTickCount () returned 0x1143980 [0174.961] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.961] GetTickCount () returned 0x1143980 [0174.961] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.961] GetTickCount () returned 0x1143980 [0174.961] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.961] GetTickCount () returned 0x1143980 [0174.961] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.961] GetTickCount () returned 0x1143980 [0174.961] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.961] GetTickCount () returned 0x1143980 [0174.961] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.961] GetTickCount () returned 0x1143980 [0174.961] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.961] GetTickCount () returned 0x1143980 [0174.961] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.961] GetTickCount () returned 0x1143980 [0174.961] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.961] GetTickCount () returned 0x1143980 [0174.961] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.961] GetTickCount () returned 0x1143980 [0174.961] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.961] GetTickCount () returned 0x1143980 [0174.961] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.961] GetTickCount () returned 0x1143980 [0174.961] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.961] GetTickCount () returned 0x1143980 [0174.961] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.961] GetTickCount () returned 0x1143980 [0174.961] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.961] GetTickCount () returned 0x1143980 [0174.961] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.961] GetTickCount () returned 0x1143980 [0174.961] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.961] GetTickCount () returned 0x1143980 [0174.961] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.961] GetTickCount () returned 0x1143980 [0174.961] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.962] GetTickCount () returned 0x1143980 [0174.962] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.962] GetTickCount () returned 0x1143980 [0174.962] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.962] GetTickCount () returned 0x1143980 [0174.962] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.962] GetTickCount () returned 0x1143980 [0174.962] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.962] GetTickCount () returned 0x1143980 [0174.962] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.962] GetTickCount () returned 0x1143980 [0174.962] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.962] GetTickCount () returned 0x1143980 [0174.962] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.962] GetTickCount () returned 0x1143980 [0174.962] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.962] GetTickCount () returned 0x1143980 [0174.962] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.962] GetTickCount () returned 0x1143980 [0174.962] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.962] GetTickCount () returned 0x1143980 [0174.962] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.962] GetTickCount () returned 0x1143980 [0174.962] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.962] GetTickCount () returned 0x1143980 [0174.962] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.962] GetTickCount () returned 0x1143980 [0174.962] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.962] GetTickCount () returned 0x1143980 [0174.962] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.962] GetTickCount () returned 0x1143980 [0174.962] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.962] GetTickCount () returned 0x1143980 [0174.962] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.962] GetTickCount () returned 0x1143980 [0174.962] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.962] GetTickCount () returned 0x1143980 [0174.962] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.962] GetTickCount () returned 0x1143980 [0174.962] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.962] GetTickCount () returned 0x1143980 [0174.963] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.963] GetTickCount () returned 0x1143980 [0174.963] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.963] GetTickCount () returned 0x1143980 [0174.963] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.963] GetTickCount () returned 0x1143980 [0174.963] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.963] GetTickCount () returned 0x1143980 [0174.963] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.963] GetTickCount () returned 0x1143980 [0174.963] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.963] GetTickCount () returned 0x1143980 [0174.963] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.963] GetTickCount () returned 0x1143980 [0174.963] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.963] GetTickCount () returned 0x1143980 [0174.963] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.963] GetTickCount () returned 0x1143980 [0174.963] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.963] GetTickCount () returned 0x1143980 [0174.963] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.963] GetTickCount () returned 0x1143980 [0174.963] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.963] GetTickCount () returned 0x1143980 [0174.963] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.963] GetTickCount () returned 0x1143980 [0174.963] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.963] GetTickCount () returned 0x1143980 [0174.963] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.963] GetTickCount () returned 0x1143980 [0174.963] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.963] GetTickCount () returned 0x1143980 [0174.963] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.963] GetTickCount () returned 0x1143980 [0174.963] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.963] GetTickCount () returned 0x1143980 [0174.963] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.963] GetTickCount () returned 0x1143980 [0174.963] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.963] GetTickCount () returned 0x1143980 [0174.963] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.963] GetTickCount () returned 0x1143980 [0174.964] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.964] GetTickCount () returned 0x1143980 [0174.964] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.964] GetTickCount () returned 0x1143980 [0174.964] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.964] GetTickCount () returned 0x1143980 [0174.964] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.964] GetTickCount () returned 0x1143980 [0174.964] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.964] GetTickCount () returned 0x1143980 [0174.964] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.964] GetTickCount () returned 0x1143980 [0174.964] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.964] GetTickCount () returned 0x1143980 [0174.964] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.964] GetTickCount () returned 0x1143980 [0174.964] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.964] GetTickCount () returned 0x1143980 [0174.964] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.964] GetTickCount () returned 0x1143980 [0174.964] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.964] GetTickCount () returned 0x1143980 [0174.964] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.964] GetTickCount () returned 0x1143980 [0174.964] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.964] GetTickCount () returned 0x1143980 [0174.964] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.964] GetTickCount () returned 0x1143980 [0174.964] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.964] GetTickCount () returned 0x1143980 [0174.964] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.964] GetTickCount () returned 0x1143980 [0174.964] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.964] GetTickCount () returned 0x1143980 [0174.964] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.964] GetTickCount () returned 0x1143980 [0174.964] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.964] GetTickCount () returned 0x1143980 [0174.964] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.964] GetTickCount () returned 0x1143980 [0174.964] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.965] GetTickCount () returned 0x1143980 [0174.965] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.965] GetTickCount () returned 0x1143980 [0174.965] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.965] GetTickCount () returned 0x1143980 [0174.965] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.965] GetTickCount () returned 0x1143980 [0174.965] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.965] GetTickCount () returned 0x1143980 [0174.965] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.965] GetTickCount () returned 0x1143980 [0174.965] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.965] GetTickCount () returned 0x1143980 [0174.965] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.965] GetTickCount () returned 0x1143980 [0174.965] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.965] GetTickCount () returned 0x1143980 [0174.965] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.965] GetTickCount () returned 0x1143980 [0174.965] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.965] GetTickCount () returned 0x1143980 [0174.965] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.965] GetTickCount () returned 0x1143980 [0174.965] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.965] GetTickCount () returned 0x1143980 [0174.965] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.965] GetTickCount () returned 0x1143980 [0174.965] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.965] GetTickCount () returned 0x1143980 [0174.965] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.965] GetTickCount () returned 0x1143980 [0174.965] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.965] GetTickCount () returned 0x1143980 [0174.965] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.965] GetTickCount () returned 0x1143980 [0174.965] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.965] GetTickCount () returned 0x1143980 [0174.965] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.965] GetTickCount () returned 0x1143980 [0174.965] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.965] GetTickCount () returned 0x1143980 [0174.966] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.966] GetTickCount () returned 0x1143980 [0174.966] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.966] GetTickCount () returned 0x1143980 [0174.966] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.966] GetTickCount () returned 0x1143980 [0174.966] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.966] GetTickCount () returned 0x1143980 [0174.966] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.966] GetTickCount () returned 0x1143980 [0174.966] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.966] GetTickCount () returned 0x1143980 [0174.966] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.966] GetTickCount () returned 0x1143980 [0174.966] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.966] GetTickCount () returned 0x1143980 [0174.966] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.966] GetTickCount () returned 0x1143980 [0174.966] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.966] GetTickCount () returned 0x1143980 [0174.966] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.966] GetTickCount () returned 0x1143980 [0174.966] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.966] GetTickCount () returned 0x1143980 [0174.966] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.966] GetTickCount () returned 0x1143980 [0174.966] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.966] GetTickCount () returned 0x1143980 [0174.966] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.966] GetTickCount () returned 0x1143980 [0174.966] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.966] GetTickCount () returned 0x1143980 [0174.966] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.966] GetTickCount () returned 0x1143980 [0174.966] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.966] GetTickCount () returned 0x1143980 [0174.966] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.966] GetTickCount () returned 0x1143980 [0174.966] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.966] GetTickCount () returned 0x1143980 [0174.966] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.966] GetTickCount () returned 0x1143980 [0174.967] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.967] GetTickCount () returned 0x1143980 [0174.967] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.967] GetTickCount () returned 0x1143980 [0174.967] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.967] GetTickCount () returned 0x1143980 [0174.967] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.967] GetTickCount () returned 0x1143980 [0174.967] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.967] GetTickCount () returned 0x1143980 [0174.967] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.967] GetTickCount () returned 0x1143980 [0174.967] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.967] GetTickCount () returned 0x1143980 [0174.967] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.967] GetTickCount () returned 0x1143980 [0174.967] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.967] GetTickCount () returned 0x1143980 [0174.967] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.967] GetTickCount () returned 0x1143980 [0174.967] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.967] GetTickCount () returned 0x1143980 [0174.967] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.967] GetTickCount () returned 0x1143980 [0174.967] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.967] GetTickCount () returned 0x1143980 [0174.967] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.967] GetTickCount () returned 0x1143980 [0174.967] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.967] GetTickCount () returned 0x1143980 [0174.967] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.967] GetTickCount () returned 0x1143980 [0174.967] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.967] GetTickCount () returned 0x1143980 [0174.967] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.967] GetTickCount () returned 0x1143980 [0174.967] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.967] GetTickCount () returned 0x1143980 [0174.967] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.967] GetTickCount () returned 0x1143980 [0174.967] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.968] GetTickCount () returned 0x1143980 [0174.968] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.968] GetTickCount () returned 0x1143980 [0174.968] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.968] GetTickCount () returned 0x1143980 [0174.968] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.968] GetTickCount () returned 0x1143980 [0174.968] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.968] GetTickCount () returned 0x1143980 [0174.968] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.968] GetTickCount () returned 0x1143980 [0174.968] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.968] GetTickCount () returned 0x1143980 [0174.968] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.968] GetTickCount () returned 0x1143980 [0174.968] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.968] GetTickCount () returned 0x1143980 [0174.968] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.968] GetTickCount () returned 0x1143980 [0174.968] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.968] GetTickCount () returned 0x1143980 [0174.968] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.968] GetTickCount () returned 0x1143980 [0174.968] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.968] GetTickCount () returned 0x1143980 [0174.968] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.968] GetTickCount () returned 0x1143980 [0174.968] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.968] GetTickCount () returned 0x1143980 [0174.968] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.968] GetTickCount () returned 0x1143980 [0174.968] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.968] GetTickCount () returned 0x1143980 [0174.968] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.968] GetTickCount () returned 0x1143980 [0174.968] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.968] GetTickCount () returned 0x1143980 [0174.968] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.968] GetTickCount () returned 0x1143980 [0174.968] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.968] GetTickCount () returned 0x1143980 [0174.968] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.969] GetTickCount () returned 0x1143980 [0174.969] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.969] GetTickCount () returned 0x1143980 [0174.969] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.969] GetTickCount () returned 0x1143980 [0174.969] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.969] GetTickCount () returned 0x1143980 [0174.969] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.969] GetTickCount () returned 0x1143980 [0174.969] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.969] GetTickCount () returned 0x1143980 [0174.969] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.969] GetTickCount () returned 0x1143980 [0174.969] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.969] GetTickCount () returned 0x1143980 [0174.969] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.969] GetTickCount () returned 0x1143980 [0174.969] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.969] GetTickCount () returned 0x1143980 [0174.969] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.969] GetTickCount () returned 0x1143980 [0174.969] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.969] GetTickCount () returned 0x1143980 [0174.969] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.969] GetTickCount () returned 0x1143980 [0174.969] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.969] GetTickCount () returned 0x1143980 [0174.969] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.969] GetTickCount () returned 0x1143980 [0174.969] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.969] GetTickCount () returned 0x1143980 [0174.969] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.969] GetTickCount () returned 0x1143980 [0174.969] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.969] GetTickCount () returned 0x1143980 [0174.969] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.969] GetTickCount () returned 0x1143980 [0174.969] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.969] GetTickCount () returned 0x1143980 [0174.969] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.970] GetTickCount () returned 0x1143980 [0174.970] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.970] GetTickCount () returned 0x1143980 [0174.970] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.970] GetTickCount () returned 0x1143980 [0174.970] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.970] GetTickCount () returned 0x1143980 [0174.970] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.970] GetTickCount () returned 0x1143980 [0174.970] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.970] GetTickCount () returned 0x1143980 [0174.970] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.970] GetTickCount () returned 0x1143980 [0174.970] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.970] GetTickCount () returned 0x1143980 [0174.970] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.970] GetTickCount () returned 0x1143980 [0174.970] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.970] GetTickCount () returned 0x1143980 [0174.970] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.970] GetTickCount () returned 0x1143980 [0174.970] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0174.970] GetTickCount () returned 0x1143980 [0174.971] getsockopt (in: s=0x694, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0174.972] recv (in: s=0x694, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0174.972] WSAGetLastError () returned 10057 [0174.972] closesocket (s=0x694) returned 0 [0174.973] getsockopt (in: s=0x690, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0174.973] recv (in: s=0x690, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0174.973] WSAGetLastError () returned 10057 [0174.973] closesocket (s=0x690) returned 0 [0174.973] getsockopt (in: s=0x68c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0174.973] recv (in: s=0x68c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0174.973] WSAGetLastError () returned 10057 [0174.973] closesocket (s=0x68c) returned 0 [0174.974] getsockopt (in: s=0x688, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0174.974] recv (in: s=0x688, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0174.974] WSAGetLastError () returned 10057 [0174.974] closesocket (s=0x688) returned 0 [0174.974] getsockopt (in: s=0x684, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0174.974] recv (in: s=0x684, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0174.974] WSAGetLastError () returned 10057 [0174.974] closesocket (s=0x684) returned 0 [0174.974] getsockopt (in: s=0x680, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0174.974] recv (in: s=0x680, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0174.974] WSAGetLastError () returned 10057 [0174.974] closesocket (s=0x680) returned 0 [0174.975] getsockopt (in: s=0x67c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0174.975] recv (in: s=0x67c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0174.975] WSAGetLastError () returned 10057 [0174.975] closesocket (s=0x67c) returned 0 [0174.975] getsockopt (in: s=0x678, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0174.975] recv (in: s=0x678, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0174.975] WSAGetLastError () returned 10057 [0174.975] closesocket (s=0x678) returned 0 [0174.976] getsockopt (in: s=0x674, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0174.976] recv (in: s=0x674, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0174.976] WSAGetLastError () returned 10057 [0174.976] closesocket (s=0x674) returned 0 [0174.976] getsockopt (in: s=0x670, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0174.976] recv (in: s=0x670, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0174.976] WSAGetLastError () returned 10057 [0174.976] closesocket (s=0x670) returned 0 [0174.976] getsockopt (in: s=0x66c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0174.976] recv (in: s=0x66c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0174.976] WSAGetLastError () returned 10057 [0174.976] closesocket (s=0x66c) returned 0 [0174.977] getsockopt (in: s=0x668, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0174.977] recv (in: s=0x668, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0174.977] WSAGetLastError () returned 10057 [0174.977] closesocket (s=0x668) returned 0 [0174.977] getsockopt (in: s=0x664, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0174.977] recv (in: s=0x664, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0174.977] WSAGetLastError () returned 10057 [0174.977] closesocket (s=0x664) returned 0 [0174.978] getsockopt (in: s=0x660, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0174.978] recv (in: s=0x660, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0174.978] WSAGetLastError () returned 10057 [0174.978] closesocket (s=0x660) returned 0 [0174.978] getsockopt (in: s=0x65c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0174.978] recv (in: s=0x65c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0174.978] WSAGetLastError () returned 10057 [0174.978] closesocket (s=0x65c) returned 0 [0174.978] getsockopt (in: s=0x658, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0174.978] recv (in: s=0x658, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0174.978] WSAGetLastError () returned 10057 [0174.979] closesocket (s=0x658) returned 0 [0174.979] getsockopt (in: s=0x654, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0174.979] recv (in: s=0x654, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0174.979] WSAGetLastError () returned 10057 [0174.979] closesocket (s=0x654) returned 0 [0174.979] getsockopt (in: s=0x650, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0174.979] recv (in: s=0x650, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0174.979] WSAGetLastError () returned 10057 [0174.979] closesocket (s=0x650) returned 0 [0174.980] getsockopt (in: s=0x64c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0174.980] recv (in: s=0x64c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0174.980] WSAGetLastError () returned 10057 [0174.980] closesocket (s=0x64c) returned 0 [0174.980] getsockopt (in: s=0x648, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0174.980] recv (in: s=0x648, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0174.980] WSAGetLastError () returned 10057 [0174.980] closesocket (s=0x648) returned 0 [0174.981] getsockopt (in: s=0x644, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0174.981] recv (in: s=0x644, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0174.981] WSAGetLastError () returned 10057 [0174.981] closesocket (s=0x644) returned 0 [0174.981] getsockopt (in: s=0x640, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0174.981] recv (in: s=0x640, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0174.981] WSAGetLastError () returned 10057 [0174.981] closesocket (s=0x640) returned 0 [0174.981] getsockopt (in: s=0x63c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0174.981] recv (in: s=0x63c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0174.982] WSAGetLastError () returned 10057 [0174.982] closesocket (s=0x63c) returned 0 [0174.982] getsockopt (in: s=0x638, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0174.982] recv (in: s=0x638, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0174.982] WSAGetLastError () returned 10057 [0174.982] closesocket (s=0x638) returned 0 [0174.982] getsockopt (in: s=0x634, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0174.982] recv (in: s=0x634, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0174.982] WSAGetLastError () returned 10057 [0174.982] closesocket (s=0x634) returned 0 [0174.983] getsockopt (in: s=0x630, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0174.983] recv (in: s=0x630, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0174.983] WSAGetLastError () returned 10057 [0174.983] closesocket (s=0x630) returned 0 [0174.983] getsockopt (in: s=0x62c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0174.983] recv (in: s=0x62c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0174.983] WSAGetLastError () returned 10057 [0174.983] closesocket (s=0x62c) returned 0 [0174.983] getsockopt (in: s=0x628, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0174.983] recv (in: s=0x628, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0174.984] WSAGetLastError () returned 10057 [0174.984] closesocket (s=0x628) returned 0 [0174.984] getsockopt (in: s=0x624, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0174.984] recv (in: s=0x624, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0174.984] WSAGetLastError () returned 10057 [0174.984] closesocket (s=0x624) returned 0 [0174.984] getsockopt (in: s=0x620, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0174.984] recv (in: s=0x620, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0174.984] WSAGetLastError () returned 10057 [0174.984] closesocket (s=0x620) returned 0 [0174.986] getsockopt (in: s=0x61c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0174.986] recv (in: s=0x61c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0174.986] WSAGetLastError () returned 10057 [0174.986] closesocket (s=0x61c) returned 0 [0174.986] getsockopt (in: s=0x618, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0174.986] recv (in: s=0x618, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0174.987] WSAGetLastError () returned 10057 [0174.987] closesocket (s=0x618) returned 0 [0174.987] getsockopt (in: s=0x614, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0174.987] recv (in: s=0x614, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0174.987] WSAGetLastError () returned 10057 [0174.987] closesocket (s=0x614) returned 0 [0174.987] getsockopt (in: s=0x610, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0174.987] recv (in: s=0x610, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0174.987] WSAGetLastError () returned 10057 [0174.987] closesocket (s=0x610) returned 0 [0174.988] getsockopt (in: s=0x60c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0174.988] recv (in: s=0x60c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0174.988] WSAGetLastError () returned 10057 [0174.988] closesocket (s=0x60c) returned 0 [0174.988] getsockopt (in: s=0x608, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0174.988] recv (in: s=0x608, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0174.988] WSAGetLastError () returned 10057 [0174.988] closesocket (s=0x608) returned 0 [0174.988] getsockopt (in: s=0x604, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0174.989] recv (in: s=0x604, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0174.989] WSAGetLastError () returned 10057 [0174.989] closesocket (s=0x604) returned 0 [0174.989] getsockopt (in: s=0x600, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0174.989] recv (in: s=0x600, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0174.989] WSAGetLastError () returned 10057 [0174.989] closesocket (s=0x600) returned 0 [0174.989] getsockopt (in: s=0x5fc, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0174.989] recv (in: s=0x5fc, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0174.989] WSAGetLastError () returned 10057 [0174.989] closesocket (s=0x5fc) returned 0 [0174.990] getsockopt (in: s=0x5f8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0174.990] recv (in: s=0x5f8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0174.990] WSAGetLastError () returned 10057 [0174.990] closesocket (s=0x5f8) returned 0 [0174.990] getsockopt (in: s=0x5f4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0174.990] recv (in: s=0x5f4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0174.990] WSAGetLastError () returned 10057 [0174.990] closesocket (s=0x5f4) returned 0 [0174.991] getsockopt (in: s=0x5f0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0174.991] recv (in: s=0x5f0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0174.991] WSAGetLastError () returned 10057 [0174.991] closesocket (s=0x5f0) returned 0 [0174.991] getsockopt (in: s=0x5ec, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0174.991] recv (in: s=0x5ec, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0174.991] WSAGetLastError () returned 10057 [0174.991] closesocket (s=0x5ec) returned 0 [0174.991] getsockopt (in: s=0x5e8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0174.991] recv (in: s=0x5e8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0174.991] WSAGetLastError () returned 10057 [0174.991] closesocket (s=0x5e8) returned 0 [0174.992] getsockopt (in: s=0x5e4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0174.992] recv (in: s=0x5e4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0174.992] WSAGetLastError () returned 10057 [0174.992] closesocket (s=0x5e4) returned 0 [0174.992] getsockopt (in: s=0x5e0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0174.992] recv (in: s=0x5e0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0174.992] WSAGetLastError () returned 10057 [0174.992] closesocket (s=0x5e0) returned 0 [0174.993] getsockopt (in: s=0x5dc, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0174.993] recv (in: s=0x5dc, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0174.993] WSAGetLastError () returned 10057 [0174.993] closesocket (s=0x5dc) returned 0 [0175.060] getsockopt (in: s=0x5d8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.060] recv (in: s=0x5d8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.060] WSAGetLastError () returned 10057 [0175.060] closesocket (s=0x5d8) returned 0 [0175.102] getsockopt (in: s=0x5d4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.106] recv (in: s=0x5d4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.106] WSAGetLastError () returned 10057 [0175.106] closesocket (s=0x5d4) returned 0 [0175.107] getsockopt (in: s=0x5d0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.107] recv (in: s=0x5d0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.107] WSAGetLastError () returned 10057 [0175.107] closesocket (s=0x5d0) returned 0 [0175.107] getsockopt (in: s=0x5cc, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.107] recv (in: s=0x5cc, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.107] WSAGetLastError () returned 10057 [0175.107] closesocket (s=0x5cc) returned 0 [0175.107] getsockopt (in: s=0x5c8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.107] recv (in: s=0x5c8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.107] WSAGetLastError () returned 10057 [0175.108] closesocket (s=0x5c8) returned 0 [0175.108] getsockopt (in: s=0x5c4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.108] recv (in: s=0x5c4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.108] WSAGetLastError () returned 10057 [0175.108] closesocket (s=0x5c4) returned 0 [0175.108] getsockopt (in: s=0x5c0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.108] recv (in: s=0x5c0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.108] WSAGetLastError () returned 10057 [0175.108] closesocket (s=0x5c0) returned 0 [0175.109] getsockopt (in: s=0x5bc, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.109] recv (in: s=0x5bc, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.109] WSAGetLastError () returned 10057 [0175.109] closesocket (s=0x5bc) returned 0 [0175.109] getsockopt (in: s=0x5b8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.109] recv (in: s=0x5b8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.109] WSAGetLastError () returned 10057 [0175.109] closesocket (s=0x5b8) returned 0 [0175.109] getsockopt (in: s=0x5b4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.110] recv (in: s=0x5b4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.110] WSAGetLastError () returned 10057 [0175.110] closesocket (s=0x5b4) returned 0 [0175.110] getsockopt (in: s=0x5b0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.110] recv (in: s=0x5b0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.110] WSAGetLastError () returned 10057 [0175.110] closesocket (s=0x5b0) returned 0 [0175.110] getsockopt (in: s=0x5ac, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.110] recv (in: s=0x5ac, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.110] WSAGetLastError () returned 10057 [0175.110] closesocket (s=0x5ac) returned 0 [0175.112] getsockopt (in: s=0x5a8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.112] recv (in: s=0x5a8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.112] WSAGetLastError () returned 10057 [0175.112] closesocket (s=0x5a8) returned 0 [0175.112] getsockopt (in: s=0x5a4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.112] recv (in: s=0x5a4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.113] WSAGetLastError () returned 10057 [0175.113] closesocket (s=0x5a4) returned 0 [0175.113] getsockopt (in: s=0x5a0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.113] recv (in: s=0x5a0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.113] WSAGetLastError () returned 10057 [0175.113] closesocket (s=0x5a0) returned 0 [0175.113] getsockopt (in: s=0x59c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.113] recv (in: s=0x59c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.113] WSAGetLastError () returned 10057 [0175.113] closesocket (s=0x59c) returned 0 [0175.114] getsockopt (in: s=0x598, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.114] recv (in: s=0x598, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.114] WSAGetLastError () returned 10057 [0175.114] closesocket (s=0x598) returned 0 [0175.114] getsockopt (in: s=0x594, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.114] recv (in: s=0x594, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.114] WSAGetLastError () returned 10057 [0175.114] closesocket (s=0x594) returned 0 [0175.115] getsockopt (in: s=0x590, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.115] recv (in: s=0x590, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.115] WSAGetLastError () returned 10057 [0175.115] closesocket (s=0x590) returned 0 [0175.115] getsockopt (in: s=0x58c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.115] recv (in: s=0x58c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.115] WSAGetLastError () returned 10057 [0175.115] closesocket (s=0x58c) returned 0 [0175.115] getsockopt (in: s=0x588, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.115] recv (in: s=0x588, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.115] WSAGetLastError () returned 10057 [0175.115] closesocket (s=0x588) returned 0 [0175.116] getsockopt (in: s=0x584, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.116] recv (in: s=0x584, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.116] WSAGetLastError () returned 10057 [0175.116] closesocket (s=0x584) returned 0 [0175.116] getsockopt (in: s=0x580, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.116] recv (in: s=0x580, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.116] WSAGetLastError () returned 10057 [0175.116] closesocket (s=0x580) returned 0 [0175.117] getsockopt (in: s=0x57c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.117] recv (in: s=0x57c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.117] WSAGetLastError () returned 10057 [0175.117] closesocket (s=0x57c) returned 0 [0175.117] getsockopt (in: s=0x578, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.117] recv (in: s=0x578, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.117] WSAGetLastError () returned 10057 [0175.117] closesocket (s=0x578) returned 0 [0175.117] getsockopt (in: s=0x574, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.117] recv (in: s=0x574, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.117] WSAGetLastError () returned 10057 [0175.117] closesocket (s=0x574) returned 0 [0175.118] getsockopt (in: s=0x570, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.118] recv (in: s=0x570, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.118] WSAGetLastError () returned 10057 [0175.118] closesocket (s=0x570) returned 0 [0175.118] getsockopt (in: s=0x56c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.118] recv (in: s=0x56c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.118] WSAGetLastError () returned 10057 [0175.118] closesocket (s=0x56c) returned 0 [0175.119] getsockopt (in: s=0x568, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.119] recv (in: s=0x568, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.119] WSAGetLastError () returned 10057 [0175.119] closesocket (s=0x568) returned 0 [0175.119] getsockopt (in: s=0x564, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.119] recv (in: s=0x564, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.119] WSAGetLastError () returned 10057 [0175.119] closesocket (s=0x564) returned 0 [0175.119] getsockopt (in: s=0x560, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.119] recv (in: s=0x560, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.119] WSAGetLastError () returned 10057 [0175.119] closesocket (s=0x560) returned 0 [0175.120] getsockopt (in: s=0x55c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.120] recv (in: s=0x55c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.120] WSAGetLastError () returned 10057 [0175.120] closesocket (s=0x55c) returned 0 [0175.120] getsockopt (in: s=0x558, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.120] recv (in: s=0x558, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.120] WSAGetLastError () returned 10057 [0175.120] closesocket (s=0x558) returned 0 [0175.121] getsockopt (in: s=0x554, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.121] recv (in: s=0x554, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.121] WSAGetLastError () returned 10057 [0175.121] closesocket (s=0x554) returned 0 [0175.121] getsockopt (in: s=0x550, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.121] recv (in: s=0x550, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.121] WSAGetLastError () returned 10057 [0175.121] closesocket (s=0x550) returned 0 [0175.121] getsockopt (in: s=0x54c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.121] recv (in: s=0x54c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.122] WSAGetLastError () returned 10057 [0175.122] closesocket (s=0x54c) returned 0 [0175.122] getsockopt (in: s=0x548, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.122] recv (in: s=0x548, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.122] WSAGetLastError () returned 10057 [0175.122] closesocket (s=0x548) returned 0 [0175.122] getsockopt (in: s=0x544, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.122] recv (in: s=0x544, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.122] WSAGetLastError () returned 10057 [0175.122] closesocket (s=0x544) returned 0 [0175.123] getsockopt (in: s=0x540, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.123] recv (in: s=0x540, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.123] WSAGetLastError () returned 10057 [0175.123] closesocket (s=0x540) returned 0 [0175.123] getsockopt (in: s=0x53c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.123] recv (in: s=0x53c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.123] WSAGetLastError () returned 10057 [0175.123] closesocket (s=0x53c) returned 0 [0175.123] getsockopt (in: s=0x538, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.124] recv (in: s=0x538, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.124] WSAGetLastError () returned 10057 [0175.124] closesocket (s=0x538) returned 0 [0175.124] getsockopt (in: s=0x534, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.124] recv (in: s=0x534, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.124] WSAGetLastError () returned 10057 [0175.124] closesocket (s=0x534) returned 0 [0175.124] getsockopt (in: s=0x530, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.124] recv (in: s=0x530, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.124] WSAGetLastError () returned 10057 [0175.124] closesocket (s=0x530) returned 0 [0175.125] getsockopt (in: s=0x52c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.125] recv (in: s=0x52c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.125] WSAGetLastError () returned 10057 [0175.125] closesocket (s=0x52c) returned 0 [0175.125] getsockopt (in: s=0x528, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.125] recv (in: s=0x528, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.125] WSAGetLastError () returned 10057 [0175.125] closesocket (s=0x528) returned 0 [0175.126] getsockopt (in: s=0x524, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.126] recv (in: s=0x524, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.126] WSAGetLastError () returned 10057 [0175.126] closesocket (s=0x524) returned 0 [0175.126] getsockopt (in: s=0x520, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.126] recv (in: s=0x520, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.126] WSAGetLastError () returned 10057 [0175.126] closesocket (s=0x520) returned 0 [0175.126] getsockopt (in: s=0x51c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.126] recv (in: s=0x51c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.126] WSAGetLastError () returned 10057 [0175.128] closesocket (s=0x51c) returned 0 [0175.128] getsockopt (in: s=0x518, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.128] recv (in: s=0x518, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.128] WSAGetLastError () returned 10057 [0175.129] closesocket (s=0x518) returned 0 [0175.129] getsockopt (in: s=0x514, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.129] recv (in: s=0x514, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.129] WSAGetLastError () returned 10057 [0175.129] closesocket (s=0x514) returned 0 [0175.129] getsockopt (in: s=0x510, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.129] recv (in: s=0x510, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.129] WSAGetLastError () returned 10057 [0175.129] closesocket (s=0x510) returned 0 [0175.131] getsockopt (in: s=0x50c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.131] recv (in: s=0x50c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.131] WSAGetLastError () returned 10057 [0175.131] closesocket (s=0x50c) returned 0 [0175.132] getsockopt (in: s=0x508, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.132] recv (in: s=0x508, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.132] WSAGetLastError () returned 10057 [0175.132] closesocket (s=0x508) returned 0 [0175.132] getsockopt (in: s=0x504, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.132] recv (in: s=0x504, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.132] WSAGetLastError () returned 10057 [0175.132] closesocket (s=0x504) returned 0 [0175.133] getsockopt (in: s=0x500, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.133] recv (in: s=0x500, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.133] WSAGetLastError () returned 10057 [0175.133] closesocket (s=0x500) returned 0 [0175.133] getsockopt (in: s=0x4fc, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.133] recv (in: s=0x4fc, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.133] WSAGetLastError () returned 10057 [0175.133] closesocket (s=0x4fc) returned 0 [0175.134] getsockopt (in: s=0x4f8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.134] recv (in: s=0x4f8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.134] WSAGetLastError () returned 10057 [0175.134] closesocket (s=0x4f8) returned 0 [0175.134] getsockopt (in: s=0x4f4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.134] recv (in: s=0x4f4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.134] WSAGetLastError () returned 10057 [0175.134] closesocket (s=0x4f4) returned 0 [0175.135] getsockopt (in: s=0x4f0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.135] recv (in: s=0x4f0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.135] WSAGetLastError () returned 10057 [0175.135] closesocket (s=0x4f0) returned 0 [0175.136] getsockopt (in: s=0x4ec, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.136] recv (in: s=0x4ec, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.136] WSAGetLastError () returned 10057 [0175.136] closesocket (s=0x4ec) returned 0 [0175.136] getsockopt (in: s=0x4e8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.136] recv (in: s=0x4e8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.136] WSAGetLastError () returned 10057 [0175.136] closesocket (s=0x4e8) returned 0 [0175.136] getsockopt (in: s=0x4e4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.137] recv (in: s=0x4e4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.137] WSAGetLastError () returned 10057 [0175.137] closesocket (s=0x4e4) returned 0 [0175.137] getsockopt (in: s=0x4e0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.137] recv (in: s=0x4e0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.137] WSAGetLastError () returned 10057 [0175.137] closesocket (s=0x4e0) returned 0 [0175.137] getsockopt (in: s=0x4dc, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.137] recv (in: s=0x4dc, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.138] WSAGetLastError () returned 10057 [0175.138] closesocket (s=0x4dc) returned 0 [0175.138] getsockopt (in: s=0x4d8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.138] recv (in: s=0x4d8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.138] WSAGetLastError () returned 10057 [0175.138] closesocket (s=0x4d8) returned 0 [0175.139] getsockopt (in: s=0x4d4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.139] recv (in: s=0x4d4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.139] WSAGetLastError () returned 10057 [0175.139] closesocket (s=0x4d4) returned 0 [0175.139] getsockopt (in: s=0x4d0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.139] recv (in: s=0x4d0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.139] WSAGetLastError () returned 10057 [0175.139] closesocket (s=0x4d0) returned 0 [0175.140] getsockopt (in: s=0x4cc, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.140] recv (in: s=0x4cc, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.140] WSAGetLastError () returned 10057 [0175.140] closesocket (s=0x4cc) returned 0 [0175.140] getsockopt (in: s=0x4c8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.140] recv (in: s=0x4c8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.140] WSAGetLastError () returned 10057 [0175.140] closesocket (s=0x4c8) returned 0 [0175.141] getsockopt (in: s=0x4c4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.141] recv (in: s=0x4c4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.141] WSAGetLastError () returned 10057 [0175.141] closesocket (s=0x4c4) returned 0 [0175.141] getsockopt (in: s=0x4c0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.141] recv (in: s=0x4c0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.141] WSAGetLastError () returned 10057 [0175.141] closesocket (s=0x4c0) returned 0 [0175.142] getsockopt (in: s=0x4bc, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.142] recv (in: s=0x4bc, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.142] WSAGetLastError () returned 10057 [0175.142] closesocket (s=0x4bc) returned 0 [0175.142] getsockopt (in: s=0x4b8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.142] recv (in: s=0x4b8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.142] WSAGetLastError () returned 10057 [0175.142] closesocket (s=0x4b8) returned 0 [0175.143] getsockopt (in: s=0x4b4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.143] recv (in: s=0x4b4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.143] WSAGetLastError () returned 10057 [0175.143] closesocket (s=0x4b4) returned 0 [0175.144] getsockopt (in: s=0x4b0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.144] recv (in: s=0x4b0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.144] WSAGetLastError () returned 10057 [0175.144] closesocket (s=0x4b0) returned 0 [0175.145] getsockopt (in: s=0x4ac, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.145] recv (in: s=0x4ac, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.145] WSAGetLastError () returned 10057 [0175.145] closesocket (s=0x4ac) returned 0 [0175.146] getsockopt (in: s=0x4a8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.146] recv (in: s=0x4a8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.146] WSAGetLastError () returned 10057 [0175.146] closesocket (s=0x4a8) returned 0 [0175.147] getsockopt (in: s=0x4a4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.147] recv (in: s=0x4a4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.147] WSAGetLastError () returned 10057 [0175.147] closesocket (s=0x4a4) returned 0 [0175.147] getsockopt (in: s=0x4a0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.147] recv (in: s=0x4a0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.147] WSAGetLastError () returned 10057 [0175.147] closesocket (s=0x4a0) returned 0 [0175.148] getsockopt (in: s=0x49c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.148] recv (in: s=0x49c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.148] WSAGetLastError () returned 10057 [0175.148] closesocket (s=0x49c) returned 0 [0175.149] getsockopt (in: s=0x498, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.149] recv (in: s=0x498, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.149] WSAGetLastError () returned 10057 [0175.149] closesocket (s=0x498) returned 0 [0175.149] getsockopt (in: s=0x494, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.149] recv (in: s=0x494, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.149] WSAGetLastError () returned 10057 [0175.149] closesocket (s=0x494) returned 0 [0175.150] getsockopt (in: s=0x490, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.150] recv (in: s=0x490, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.150] WSAGetLastError () returned 10057 [0175.150] closesocket (s=0x490) returned 0 [0175.150] getsockopt (in: s=0x48c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.150] recv (in: s=0x48c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.150] WSAGetLastError () returned 10057 [0175.150] closesocket (s=0x48c) returned 0 [0175.151] getsockopt (in: s=0x488, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.151] recv (in: s=0x488, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.151] WSAGetLastError () returned 10057 [0175.151] closesocket (s=0x488) returned 0 [0175.151] getsockopt (in: s=0x484, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.151] recv (in: s=0x484, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.151] WSAGetLastError () returned 10057 [0175.151] closesocket (s=0x484) returned 0 [0175.153] getsockopt (in: s=0x480, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.153] recv (in: s=0x480, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.153] WSAGetLastError () returned 10057 [0175.153] closesocket (s=0x480) returned 0 [0175.153] getsockopt (in: s=0x47c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.153] recv (in: s=0x47c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.153] WSAGetLastError () returned 10057 [0175.153] closesocket (s=0x47c) returned 0 [0175.154] getsockopt (in: s=0x478, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.154] recv (in: s=0x478, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.154] WSAGetLastError () returned 10057 [0175.154] closesocket (s=0x478) returned 0 [0175.154] getsockopt (in: s=0x474, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.154] recv (in: s=0x474, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.154] WSAGetLastError () returned 10057 [0175.154] closesocket (s=0x474) returned 0 [0175.155] getsockopt (in: s=0x470, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.155] recv (in: s=0x470, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.155] WSAGetLastError () returned 10057 [0175.155] closesocket (s=0x470) returned 0 [0175.155] getsockopt (in: s=0x46c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.155] recv (in: s=0x46c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.155] WSAGetLastError () returned 10057 [0175.155] closesocket (s=0x46c) returned 0 [0175.156] getsockopt (in: s=0x468, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.156] recv (in: s=0x468, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.156] WSAGetLastError () returned 10057 [0175.156] closesocket (s=0x468) returned 0 [0175.157] getsockopt (in: s=0x464, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.157] recv (in: s=0x464, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.157] WSAGetLastError () returned 10057 [0175.157] closesocket (s=0x464) returned 0 [0175.158] getsockopt (in: s=0x460, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.158] recv (in: s=0x460, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.158] WSAGetLastError () returned 10057 [0175.158] closesocket (s=0x460) returned 0 [0175.158] getsockopt (in: s=0x45c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.158] recv (in: s=0x45c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.158] WSAGetLastError () returned 10057 [0175.158] closesocket (s=0x45c) returned 0 [0175.159] getsockopt (in: s=0x458, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.159] recv (in: s=0x458, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.159] WSAGetLastError () returned 10057 [0175.159] closesocket (s=0x458) returned 0 [0175.160] getsockopt (in: s=0x454, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.160] recv (in: s=0x454, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.160] WSAGetLastError () returned 10057 [0175.160] closesocket (s=0x454) returned 0 [0175.317] getsockopt (in: s=0x450, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.333] recv (in: s=0x450, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.333] WSAGetLastError () returned 10057 [0175.333] closesocket (s=0x450) returned 0 [0175.361] getsockopt (in: s=0x44c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.361] recv (in: s=0x44c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.361] WSAGetLastError () returned 10057 [0175.361] closesocket (s=0x44c) returned 0 [0175.362] getsockopt (in: s=0x448, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.362] recv (in: s=0x448, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.362] WSAGetLastError () returned 10057 [0175.362] closesocket (s=0x448) returned 0 [0175.362] getsockopt (in: s=0x444, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.362] recv (in: s=0x444, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.362] WSAGetLastError () returned 10057 [0175.362] closesocket (s=0x444) returned 0 [0175.363] getsockopt (in: s=0x440, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.363] recv (in: s=0x440, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.363] WSAGetLastError () returned 10057 [0175.363] closesocket (s=0x440) returned 0 [0175.363] getsockopt (in: s=0x43c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.363] recv (in: s=0x43c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.364] WSAGetLastError () returned 10057 [0175.364] closesocket (s=0x43c) returned 0 [0175.364] getsockopt (in: s=0x438, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.364] recv (in: s=0x438, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.364] WSAGetLastError () returned 10057 [0175.364] closesocket (s=0x438) returned 0 [0175.365] getsockopt (in: s=0x434, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.365] recv (in: s=0x434, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.365] WSAGetLastError () returned 10057 [0175.365] closesocket (s=0x434) returned 0 [0175.365] getsockopt (in: s=0x430, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.365] recv (in: s=0x430, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.365] WSAGetLastError () returned 10057 [0175.365] closesocket (s=0x430) returned 0 [0175.366] getsockopt (in: s=0x42c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.366] recv (in: s=0x42c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.366] WSAGetLastError () returned 10057 [0175.366] closesocket (s=0x42c) returned 0 [0175.366] getsockopt (in: s=0x428, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.366] recv (in: s=0x428, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.366] WSAGetLastError () returned 10057 [0175.366] closesocket (s=0x428) returned 0 [0175.367] getsockopt (in: s=0x424, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.367] recv (in: s=0x424, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.367] WSAGetLastError () returned 10057 [0175.367] closesocket (s=0x424) returned 0 [0175.367] getsockopt (in: s=0x420, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.367] recv (in: s=0x420, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.367] WSAGetLastError () returned 10057 [0175.367] closesocket (s=0x420) returned 0 [0175.368] getsockopt (in: s=0x41c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.368] recv (in: s=0x41c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.368] WSAGetLastError () returned 10057 [0175.368] closesocket (s=0x41c) returned 0 [0175.368] getsockopt (in: s=0x418, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.369] recv (in: s=0x418, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.369] WSAGetLastError () returned 10057 [0175.369] closesocket (s=0x418) returned 0 [0175.369] getsockopt (in: s=0x414, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.369] recv (in: s=0x414, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.369] WSAGetLastError () returned 10057 [0175.369] closesocket (s=0x414) returned 0 [0175.370] getsockopt (in: s=0x410, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.370] recv (in: s=0x410, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.370] WSAGetLastError () returned 10057 [0175.370] closesocket (s=0x410) returned 0 [0175.370] getsockopt (in: s=0x40c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.370] recv (in: s=0x40c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.370] WSAGetLastError () returned 10057 [0175.370] closesocket (s=0x40c) returned 0 [0175.371] getsockopt (in: s=0x408, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.371] recv (in: s=0x408, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.371] WSAGetLastError () returned 10057 [0175.371] closesocket (s=0x408) returned 0 [0175.371] getsockopt (in: s=0x404, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.371] recv (in: s=0x404, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.371] WSAGetLastError () returned 10057 [0175.371] closesocket (s=0x404) returned 0 [0175.372] getsockopt (in: s=0x3fc, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.372] recv (in: s=0x3fc, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.372] WSAGetLastError () returned 10057 [0175.372] closesocket (s=0x3fc) returned 0 [0175.372] getsockopt (in: s=0x3f8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.372] recv (in: s=0x3f8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.372] WSAGetLastError () returned 10057 [0175.372] closesocket (s=0x3f8) returned 0 [0175.373] getsockopt (in: s=0x3f4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.373] recv (in: s=0x3f4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.373] WSAGetLastError () returned 10057 [0175.373] closesocket (s=0x3f4) returned 0 [0175.373] getsockopt (in: s=0x3f0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.373] recv (in: s=0x3f0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.373] WSAGetLastError () returned 10057 [0175.373] closesocket (s=0x3f0) returned 0 [0175.374] getsockopt (in: s=0x3ec, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.374] recv (in: s=0x3ec, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.374] WSAGetLastError () returned 10057 [0175.374] closesocket (s=0x3ec) returned 0 [0175.374] getsockopt (in: s=0x3e8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.374] recv (in: s=0x3e8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.374] WSAGetLastError () returned 10057 [0175.374] closesocket (s=0x3e8) returned 0 [0175.375] getsockopt (in: s=0x3e4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.375] recv (in: s=0x3e4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.375] WSAGetLastError () returned 10057 [0175.375] closesocket (s=0x3e4) returned 0 [0175.375] getsockopt (in: s=0x3e0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.375] recv (in: s=0x3e0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.375] WSAGetLastError () returned 10057 [0175.375] closesocket (s=0x3e0) returned 0 [0175.375] getsockopt (in: s=0x3dc, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.375] recv (in: s=0x3dc, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.375] WSAGetLastError () returned 10057 [0175.376] closesocket (s=0x3dc) returned 0 [0175.376] getsockopt (in: s=0x3d8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.376] recv (in: s=0x3d8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.376] WSAGetLastError () returned 10057 [0175.376] closesocket (s=0x3d8) returned 0 [0175.376] getsockopt (in: s=0x3d4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.376] recv (in: s=0x3d4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.376] WSAGetLastError () returned 10057 [0175.376] closesocket (s=0x3d4) returned 0 [0175.377] getsockopt (in: s=0x3d0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.377] recv (in: s=0x3d0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.377] WSAGetLastError () returned 10057 [0175.377] closesocket (s=0x3d0) returned 0 [0175.377] getsockopt (in: s=0x3cc, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.377] recv (in: s=0x3cc, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.377] WSAGetLastError () returned 10057 [0175.377] closesocket (s=0x3cc) returned 0 [0175.378] getsockopt (in: s=0x3c8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.378] recv (in: s=0x3c8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.378] WSAGetLastError () returned 10057 [0175.378] closesocket (s=0x3c8) returned 0 [0175.378] getsockopt (in: s=0x3c4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.378] recv (in: s=0x3c4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.378] WSAGetLastError () returned 10057 [0175.378] closesocket (s=0x3c4) returned 0 [0175.378] getsockopt (in: s=0x3c0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.378] recv (in: s=0x3c0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.378] WSAGetLastError () returned 10057 [0175.378] closesocket (s=0x3c0) returned 0 [0175.379] getsockopt (in: s=0x3bc, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.379] recv (in: s=0x3bc, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.379] WSAGetLastError () returned 10057 [0175.379] closesocket (s=0x3bc) returned 0 [0175.379] getsockopt (in: s=0x3b8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.379] recv (in: s=0x3b8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.379] WSAGetLastError () returned 10057 [0175.379] closesocket (s=0x3b8) returned 0 [0175.380] getsockopt (in: s=0x3b4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.380] recv (in: s=0x3b4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.380] WSAGetLastError () returned 10057 [0175.380] closesocket (s=0x3b4) returned 0 [0175.380] getsockopt (in: s=0x3b0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.380] recv (in: s=0x3b0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.380] WSAGetLastError () returned 10057 [0175.380] closesocket (s=0x3b0) returned 0 [0175.381] getsockopt (in: s=0x3ac, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.381] recv (in: s=0x3ac, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.381] WSAGetLastError () returned 10057 [0175.381] closesocket (s=0x3ac) returned 0 [0175.381] getsockopt (in: s=0x3a8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.381] recv (in: s=0x3a8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.381] WSAGetLastError () returned 10057 [0175.381] closesocket (s=0x3a8) returned 0 [0175.382] getsockopt (in: s=0x3a4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.382] recv (in: s=0x3a4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.382] WSAGetLastError () returned 10057 [0175.382] closesocket (s=0x3a4) returned 0 [0175.382] getsockopt (in: s=0x3a0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.382] recv (in: s=0x3a0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.382] WSAGetLastError () returned 10057 [0175.382] closesocket (s=0x3a0) returned 0 [0175.382] getsockopt (in: s=0x39c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.382] recv (in: s=0x39c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.382] WSAGetLastError () returned 10057 [0175.382] closesocket (s=0x39c) returned 0 [0175.383] getsockopt (in: s=0x398, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.383] recv (in: s=0x398, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.383] WSAGetLastError () returned 10057 [0175.383] closesocket (s=0x398) returned 0 [0175.383] getsockopt (in: s=0x394, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.383] recv (in: s=0x394, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.383] WSAGetLastError () returned 10057 [0175.383] closesocket (s=0x394) returned 0 [0175.384] getsockopt (in: s=0x38c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.384] recv (in: s=0x38c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.384] WSAGetLastError () returned 10057 [0175.384] closesocket (s=0x38c) returned 0 [0175.384] getsockopt (in: s=0x370, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.384] recv (in: s=0x370, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.384] WSAGetLastError () returned 10057 [0175.384] closesocket (s=0x370) returned 0 [0175.384] getsockopt (in: s=0x380, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.385] recv (in: s=0x380, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.385] WSAGetLastError () returned 10057 [0175.385] closesocket (s=0x380) returned 0 [0175.385] getsockopt (in: s=0x354, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.385] recv (in: s=0x354, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.385] WSAGetLastError () returned 10057 [0175.385] closesocket (s=0x354) returned 0 [0175.385] getsockopt (in: s=0x350, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.385] recv (in: s=0x350, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.385] WSAGetLastError () returned 10057 [0175.385] closesocket (s=0x350) returned 0 [0175.386] getsockopt (in: s=0x34c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.386] recv (in: s=0x34c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.386] WSAGetLastError () returned 10057 [0175.386] closesocket (s=0x34c) returned 0 [0175.386] getsockopt (in: s=0x2f8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.386] recv (in: s=0x2f8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.386] WSAGetLastError () returned 10057 [0175.386] closesocket (s=0x2f8) returned 0 [0175.387] getsockopt (in: s=0x37c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.387] recv (in: s=0x37c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.387] WSAGetLastError () returned 10057 [0175.387] closesocket (s=0x37c) returned 0 [0175.387] getsockopt (in: s=0x390, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.387] recv (in: s=0x390, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.387] WSAGetLastError () returned 10057 [0175.387] closesocket (s=0x390) returned 0 [0175.387] getsockopt (in: s=0x364, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.387] recv (in: s=0x364, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.387] WSAGetLastError () returned 10057 [0175.387] closesocket (s=0x364) returned 0 [0175.388] getsockopt (in: s=0x374, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.388] recv (in: s=0x374, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.388] WSAGetLastError () returned 10057 [0175.388] closesocket (s=0x374) returned 0 [0175.388] getsockopt (in: s=0x384, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.388] recv (in: s=0x384, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.388] WSAGetLastError () returned 10057 [0175.388] closesocket (s=0x384) returned 0 [0175.389] getsockopt (in: s=0x344, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.389] recv (in: s=0x344, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.389] WSAGetLastError () returned 10057 [0175.389] closesocket (s=0x344) returned 0 [0175.389] getsockopt (in: s=0x36c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.389] recv (in: s=0x36c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.389] WSAGetLastError () returned 10057 [0175.389] closesocket (s=0x36c) returned 0 [0175.389] getsockopt (in: s=0x368, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.389] recv (in: s=0x368, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.390] WSAGetLastError () returned 10057 [0175.390] closesocket (s=0x368) returned 0 [0175.390] getsockopt (in: s=0x360, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.390] recv (in: s=0x360, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.390] WSAGetLastError () returned 10057 [0175.390] closesocket (s=0x360) returned 0 [0175.390] getsockopt (in: s=0x358, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.390] recv (in: s=0x358, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.390] WSAGetLastError () returned 10057 [0175.390] closesocket (s=0x358) returned 0 [0175.391] getsockopt (in: s=0x35c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.391] recv (in: s=0x35c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.391] WSAGetLastError () returned 10057 [0175.391] closesocket (s=0x35c) returned 0 [0175.391] getsockopt (in: s=0x31c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.391] recv (in: s=0x31c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.391] WSAGetLastError () returned 10057 [0175.391] closesocket (s=0x31c) returned 0 [0175.392] getsockopt (in: s=0x310, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.392] recv (in: s=0x310, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.392] WSAGetLastError () returned 10057 [0175.392] closesocket (s=0x310) returned 0 [0175.392] getsockopt (in: s=0x30c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.392] recv (in: s=0x30c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.392] WSAGetLastError () returned 10057 [0175.392] closesocket (s=0x30c) returned 0 [0175.393] getsockopt (in: s=0x308, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.393] recv (in: s=0x308, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.393] WSAGetLastError () returned 10057 [0175.393] closesocket (s=0x308) returned 0 [0175.393] getsockopt (in: s=0x2fc, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.393] recv (in: s=0x2fc, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.393] WSAGetLastError () returned 10057 [0175.393] closesocket (s=0x2fc) returned 0 [0175.394] getsockopt (in: s=0x300, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.394] recv (in: s=0x300, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.394] WSAGetLastError () returned 10057 [0175.394] closesocket (s=0x300) returned 0 [0175.394] getsockopt (in: s=0x304, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.394] recv (in: s=0x304, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.394] WSAGetLastError () returned 10057 [0175.394] closesocket (s=0x304) returned 0 [0175.394] getsockopt (in: s=0x2f0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0175.394] recv (in: s=0x2f0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0175.394] WSAGetLastError () returned 10057 [0175.394] closesocket (s=0x2f0) returned 0 [0175.395] GetProcessHeap () returned 0x8a0000 [0175.395] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8e12a0 | out: hHeap=0x8a0000) returned 1 [0175.395] GetProcessHeap () returned 0x8a0000 [0175.395] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8e6af0 | out: hHeap=0x8a0000) returned 1 [0175.395] htons (hostshort=0x1bd) returned 0xbd01 [0175.395] GetProcessHeap () returned 0x8a0000 [0175.395] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x800) returned 0x8e12a0 [0175.395] GetProcessHeap () returned 0x8a0000 [0175.395] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x800) returned 0x96e0f0 [0175.395] htonl (hostlong=0xc0a800db) returned 0xdb00a8c0 [0175.395] socket (af=2, type=1, protocol=6) returned 0x2f0 [0175.395] ioctlsocket (in: s=0x2f0, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0175.395] connect (s=0x2f0, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.219"), namelen=16) returned -1 [0175.396] WSAGetLastError () returned 10035 [0175.396] htonl (hostlong=0xc0a800dc) returned 0xdc00a8c0 [0175.396] socket (af=2, type=1, protocol=6) returned 0x304 [0175.397] ioctlsocket (in: s=0x304, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0175.397] connect (s=0x304, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.220"), namelen=16) returned -1 [0175.398] WSAGetLastError () returned 10035 [0175.398] htonl (hostlong=0xc0a800dd) returned 0xdd00a8c0 [0175.398] socket (af=2, type=1, protocol=6) returned 0x300 [0175.398] ioctlsocket (in: s=0x300, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0175.398] connect (s=0x300, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.221"), namelen=16) returned -1 [0175.399] WSAGetLastError () returned 10035 [0175.399] htonl (hostlong=0xc0a800de) returned 0xde00a8c0 [0175.399] socket (af=2, type=1, protocol=6) returned 0x2fc [0175.399] ioctlsocket (in: s=0x2fc, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0175.399] connect (s=0x2fc, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.222"), namelen=16) returned -1 [0175.400] WSAGetLastError () returned 10035 [0175.400] htonl (hostlong=0xc0a800df) returned 0xdf00a8c0 [0175.400] socket (af=2, type=1, protocol=6) returned 0x308 [0175.400] ioctlsocket (in: s=0x308, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0175.400] connect (s=0x308, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.223"), namelen=16) returned -1 [0175.401] WSAGetLastError () returned 10035 [0175.401] htonl (hostlong=0xc0a800e0) returned 0xe000a8c0 [0175.401] socket (af=2, type=1, protocol=6) returned 0x30c [0175.401] ioctlsocket (in: s=0x30c, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0175.401] connect (s=0x30c, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.224"), namelen=16) returned -1 [0175.402] WSAGetLastError () returned 10035 [0175.402] htonl (hostlong=0xc0a800e1) returned 0xe100a8c0 [0175.402] socket (af=2, type=1, protocol=6) returned 0x310 [0175.402] ioctlsocket (in: s=0x310, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0175.402] connect (s=0x310, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.225"), namelen=16) returned -1 [0175.403] WSAGetLastError () returned 10035 [0175.403] htonl (hostlong=0xc0a800e2) returned 0xe200a8c0 [0175.403] socket (af=2, type=1, protocol=6) returned 0x31c [0175.403] ioctlsocket (in: s=0x31c, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0175.403] connect (s=0x31c, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.226"), namelen=16) returned -1 [0175.404] WSAGetLastError () returned 10035 [0175.404] htonl (hostlong=0xc0a800e3) returned 0xe300a8c0 [0175.404] socket (af=2, type=1, protocol=6) returned 0x35c [0175.405] ioctlsocket (in: s=0x35c, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0175.405] connect (s=0x35c, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.227"), namelen=16) returned -1 [0175.406] WSAGetLastError () returned 10035 [0175.406] htonl (hostlong=0xc0a800e4) returned 0xe400a8c0 [0175.406] socket (af=2, type=1, protocol=6) returned 0x358 [0175.406] ioctlsocket (in: s=0x358, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0175.406] connect (s=0x358, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.228"), namelen=16) returned -1 [0175.407] WSAGetLastError () returned 10035 [0175.407] htonl (hostlong=0xc0a800e5) returned 0xe500a8c0 [0175.407] socket (af=2, type=1, protocol=6) returned 0x360 [0175.407] ioctlsocket (in: s=0x360, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0175.407] connect (s=0x360, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.229"), namelen=16) returned -1 [0175.408] WSAGetLastError () returned 10035 [0175.408] htonl (hostlong=0xc0a800e6) returned 0xe600a8c0 [0175.408] socket (af=2, type=1, protocol=6) returned 0x368 [0175.408] ioctlsocket (in: s=0x368, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0175.408] connect (s=0x368, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.230"), namelen=16) returned -1 [0175.479] WSAGetLastError () returned 10035 [0175.479] htonl (hostlong=0xc0a800e7) returned 0xe700a8c0 [0175.479] socket (af=2, type=1, protocol=6) returned 0x36c [0175.479] ioctlsocket (in: s=0x36c, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0175.479] connect (s=0x36c, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.231"), namelen=16) returned -1 [0175.480] WSAGetLastError () returned 10035 [0175.480] htonl (hostlong=0xc0a800e8) returned 0xe800a8c0 [0175.480] socket (af=2, type=1, protocol=6) returned 0x344 [0175.480] ioctlsocket (in: s=0x344, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0175.480] connect (s=0x344, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.232"), namelen=16) returned -1 [0175.481] WSAGetLastError () returned 10035 [0175.481] htonl (hostlong=0xc0a800e9) returned 0xe900a8c0 [0175.481] socket (af=2, type=1, protocol=6) returned 0x384 [0175.481] ioctlsocket (in: s=0x384, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0175.481] connect (s=0x384, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.233"), namelen=16) returned -1 [0175.482] WSAGetLastError () returned 10035 [0175.482] htonl (hostlong=0xc0a800ea) returned 0xea00a8c0 [0175.482] socket (af=2, type=1, protocol=6) returned 0x374 [0175.483] ioctlsocket (in: s=0x374, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0175.483] connect (s=0x374, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.234"), namelen=16) returned -1 [0175.483] WSAGetLastError () returned 10035 [0175.483] htonl (hostlong=0xc0a800eb) returned 0xeb00a8c0 [0175.484] socket (af=2, type=1, protocol=6) returned 0x364 [0175.484] ioctlsocket (in: s=0x364, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0175.484] connect (s=0x364, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.235"), namelen=16) returned -1 [0175.485] WSAGetLastError () returned 10035 [0175.485] htonl (hostlong=0xc0a800ec) returned 0xec00a8c0 [0175.485] socket (af=2, type=1, protocol=6) returned 0x390 [0175.485] ioctlsocket (in: s=0x390, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0175.485] connect (s=0x390, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.236"), namelen=16) returned -1 [0175.486] WSAGetLastError () returned 10035 [0175.486] htonl (hostlong=0xc0a800ed) returned 0xed00a8c0 [0175.486] socket (af=2, type=1, protocol=6) returned 0x37c [0175.486] ioctlsocket (in: s=0x37c, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0175.486] connect (s=0x37c, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.237"), namelen=16) returned -1 [0175.487] WSAGetLastError () returned 10035 [0175.487] htonl (hostlong=0xc0a800ee) returned 0xee00a8c0 [0175.487] socket (af=2, type=1, protocol=6) returned 0x2f8 [0175.487] ioctlsocket (in: s=0x2f8, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0175.487] connect (s=0x2f8, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.238"), namelen=16) returned -1 [0175.488] WSAGetLastError () returned 10035 [0175.488] htonl (hostlong=0xc0a800ef) returned 0xef00a8c0 [0175.488] socket (af=2, type=1, protocol=6) returned 0x34c [0175.488] ioctlsocket (in: s=0x34c, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0175.488] connect (s=0x34c, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.239"), namelen=16) returned -1 [0175.489] WSAGetLastError () returned 10035 [0175.489] htonl (hostlong=0xc0a800f0) returned 0xf000a8c0 [0175.489] socket (af=2, type=1, protocol=6) returned 0x350 [0175.490] ioctlsocket (in: s=0x350, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0175.490] connect (s=0x350, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.240"), namelen=16) returned -1 [0175.491] WSAGetLastError () returned 10035 [0175.491] htonl (hostlong=0xc0a800f1) returned 0xf100a8c0 [0175.491] socket (af=2, type=1, protocol=6) returned 0x354 [0175.491] ioctlsocket (in: s=0x354, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0175.491] connect (s=0x354, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.241"), namelen=16) returned -1 [0175.492] WSAGetLastError () returned 10035 [0175.492] htonl (hostlong=0xc0a800f2) returned 0xf200a8c0 [0175.492] socket (af=2, type=1, protocol=6) returned 0x380 [0175.492] ioctlsocket (in: s=0x380, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0175.492] connect (s=0x380, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.242"), namelen=16) returned -1 [0175.493] WSAGetLastError () returned 10035 [0175.493] htonl (hostlong=0xc0a800f3) returned 0xf300a8c0 [0175.493] socket (af=2, type=1, protocol=6) returned 0x370 [0175.493] ioctlsocket (in: s=0x370, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0175.493] connect (s=0x370, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.243"), namelen=16) returned -1 [0175.494] WSAGetLastError () returned 10035 [0175.494] htonl (hostlong=0xc0a800f4) returned 0xf400a8c0 [0175.494] socket (af=2, type=1, protocol=6) returned 0x38c [0175.494] ioctlsocket (in: s=0x38c, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0175.494] connect (s=0x38c, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.244"), namelen=16) returned -1 [0175.495] WSAGetLastError () returned 10035 [0175.495] htonl (hostlong=0xc0a800f5) returned 0xf500a8c0 [0175.495] socket (af=2, type=1, protocol=6) returned 0x394 [0175.495] ioctlsocket (in: s=0x394, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0175.496] connect (s=0x394, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.245"), namelen=16) returned -1 [0175.496] WSAGetLastError () returned 10035 [0175.496] htonl (hostlong=0xc0a800f6) returned 0xf600a8c0 [0175.496] socket (af=2, type=1, protocol=6) returned 0x398 [0175.497] ioctlsocket (in: s=0x398, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0175.497] connect (s=0x398, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.246"), namelen=16) returned -1 [0175.498] WSAGetLastError () returned 10035 [0175.498] htonl (hostlong=0xc0a800f7) returned 0xf700a8c0 [0175.498] socket (af=2, type=1, protocol=6) returned 0x39c [0175.498] ioctlsocket (in: s=0x39c, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0175.498] connect (s=0x39c, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.247"), namelen=16) returned -1 [0175.499] WSAGetLastError () returned 10035 [0175.499] htonl (hostlong=0xc0a800f8) returned 0xf800a8c0 [0175.499] socket (af=2, type=1, protocol=6) returned 0x3a0 [0175.499] ioctlsocket (in: s=0x3a0, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0175.499] connect (s=0x3a0, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.248"), namelen=16) returned -1 [0175.500] WSAGetLastError () returned 10035 [0175.500] htonl (hostlong=0xc0a800f9) returned 0xf900a8c0 [0175.500] socket (af=2, type=1, protocol=6) returned 0x3a4 [0175.500] ioctlsocket (in: s=0x3a4, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0175.500] connect (s=0x3a4, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.249"), namelen=16) returned -1 [0175.501] WSAGetLastError () returned 10035 [0175.501] htonl (hostlong=0xc0a800fa) returned 0xfa00a8c0 [0175.501] socket (af=2, type=1, protocol=6) returned 0x3a8 [0175.501] ioctlsocket (in: s=0x3a8, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0175.501] connect (s=0x3a8, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.250"), namelen=16) returned -1 [0175.502] WSAGetLastError () returned 10035 [0175.502] htonl (hostlong=0xc0a800fb) returned 0xfb00a8c0 [0175.502] socket (af=2, type=1, protocol=6) returned 0x3ac [0175.502] ioctlsocket (in: s=0x3ac, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0175.503] connect (s=0x3ac, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.251"), namelen=16) returned -1 [0175.503] WSAGetLastError () returned 10035 [0175.504] htonl (hostlong=0xc0a800fc) returned 0xfc00a8c0 [0175.504] socket (af=2, type=1, protocol=6) returned 0x3b0 [0175.504] ioctlsocket (in: s=0x3b0, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0175.504] connect (s=0x3b0, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.252"), namelen=16) returned -1 [0175.505] WSAGetLastError () returned 10035 [0175.505] htonl (hostlong=0xc0a800fd) returned 0xfd00a8c0 [0175.505] socket (af=2, type=1, protocol=6) returned 0x3b4 [0175.505] ioctlsocket (in: s=0x3b4, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0175.505] connect (s=0x3b4, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.253"), namelen=16) returned -1 [0175.506] WSAGetLastError () returned 10035 [0175.506] htonl (hostlong=0xc0a800fe) returned 0xfe00a8c0 [0175.506] socket (af=2, type=1, protocol=6) returned 0x3b8 [0175.506] ioctlsocket (in: s=0x3b8, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0175.506] connect (s=0x3b8, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.254"), namelen=16) returned -1 [0175.507] WSAGetLastError () returned 10035 [0175.507] GetTickCount () returned 0x1143ba3 [0175.507] GetTickCount () returned 0x1143ba3 [0175.507] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.507] GetTickCount () returned 0x1143ba3 [0175.507] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.507] GetTickCount () returned 0x1143ba3 [0175.507] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.507] GetTickCount () returned 0x1143ba3 [0175.507] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.507] GetTickCount () returned 0x1143ba3 [0175.507] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.507] GetTickCount () returned 0x1143ba3 [0175.507] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.507] GetTickCount () returned 0x1143ba3 [0175.507] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.507] GetTickCount () returned 0x1143ba3 [0175.507] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.507] GetTickCount () returned 0x1143ba3 [0175.507] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.508] GetTickCount () returned 0x1143ba3 [0175.508] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.508] GetTickCount () returned 0x1143ba3 [0175.508] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.508] GetTickCount () returned 0x1143ba3 [0175.508] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.508] GetTickCount () returned 0x1143ba3 [0175.508] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.508] GetTickCount () returned 0x1143ba3 [0175.508] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.508] GetTickCount () returned 0x1143ba3 [0175.508] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.508] GetTickCount () returned 0x1143ba3 [0175.508] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.508] GetTickCount () returned 0x1143ba3 [0175.508] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.508] GetTickCount () returned 0x1143ba3 [0175.508] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.508] GetTickCount () returned 0x1143ba3 [0175.508] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.508] GetTickCount () returned 0x1143ba3 [0175.508] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.508] GetTickCount () returned 0x1143ba3 [0175.508] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.508] GetTickCount () returned 0x1143ba3 [0175.508] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.508] GetTickCount () returned 0x1143ba3 [0175.508] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.508] GetTickCount () returned 0x1143ba3 [0175.508] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.508] GetTickCount () returned 0x1143ba3 [0175.508] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.508] GetTickCount () returned 0x1143ba3 [0175.508] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.508] GetTickCount () returned 0x1143ba3 [0175.508] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.508] GetTickCount () returned 0x1143ba3 [0175.508] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.508] GetTickCount () returned 0x1143ba3 [0175.508] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.508] GetTickCount () returned 0x1143ba3 [0175.508] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.509] GetTickCount () returned 0x1143ba3 [0175.509] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.509] GetTickCount () returned 0x1143ba3 [0175.509] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.509] GetTickCount () returned 0x1143ba3 [0175.509] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.509] GetTickCount () returned 0x1143ba3 [0175.509] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.509] GetTickCount () returned 0x1143ba3 [0175.509] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.509] GetTickCount () returned 0x1143ba3 [0175.509] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.509] GetTickCount () returned 0x1143ba3 [0175.509] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.509] GetTickCount () returned 0x1143ba3 [0175.509] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.509] GetTickCount () returned 0x1143ba3 [0175.509] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.509] GetTickCount () returned 0x1143ba3 [0175.509] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.509] GetTickCount () returned 0x1143ba3 [0175.509] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.509] GetTickCount () returned 0x1143ba3 [0175.509] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.509] GetTickCount () returned 0x1143ba3 [0175.509] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.509] GetTickCount () returned 0x1143ba3 [0175.509] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.509] GetTickCount () returned 0x1143ba3 [0175.509] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.509] GetTickCount () returned 0x1143ba3 [0175.509] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.509] GetTickCount () returned 0x1143ba3 [0175.509] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.509] GetTickCount () returned 0x1143ba3 [0175.509] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.509] GetTickCount () returned 0x1143ba3 [0175.509] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.509] GetTickCount () returned 0x1143ba3 [0175.509] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.510] GetTickCount () returned 0x1143ba3 [0175.510] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.510] GetTickCount () returned 0x1143ba3 [0175.510] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.510] GetTickCount () returned 0x1143ba3 [0175.510] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.510] GetTickCount () returned 0x1143ba3 [0175.510] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.510] GetTickCount () returned 0x1143ba3 [0175.510] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.510] GetTickCount () returned 0x1143ba3 [0175.510] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.510] GetTickCount () returned 0x1143ba3 [0175.510] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.510] GetTickCount () returned 0x1143ba3 [0175.510] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.510] GetTickCount () returned 0x1143ba3 [0175.510] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.510] GetTickCount () returned 0x1143ba3 [0175.510] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.510] GetTickCount () returned 0x1143ba3 [0175.510] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.510] GetTickCount () returned 0x1143ba3 [0175.510] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.510] GetTickCount () returned 0x1143ba3 [0175.510] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.510] GetTickCount () returned 0x1143ba3 [0175.510] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.510] GetTickCount () returned 0x1143ba3 [0175.510] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.510] GetTickCount () returned 0x1143ba3 [0175.510] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.510] GetTickCount () returned 0x1143ba3 [0175.510] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.510] GetTickCount () returned 0x1143ba3 [0175.510] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.510] GetTickCount () returned 0x1143ba3 [0175.510] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.510] GetTickCount () returned 0x1143ba3 [0175.510] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.510] GetTickCount () returned 0x1143ba3 [0175.510] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.511] GetTickCount () returned 0x1143ba3 [0175.511] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.511] GetTickCount () returned 0x1143ba3 [0175.511] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.511] GetTickCount () returned 0x1143ba3 [0175.511] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.511] GetTickCount () returned 0x1143ba3 [0175.511] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.511] GetTickCount () returned 0x1143ba3 [0175.511] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.511] GetTickCount () returned 0x1143ba3 [0175.511] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.511] GetTickCount () returned 0x1143ba3 [0175.511] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.511] GetTickCount () returned 0x1143ba3 [0175.511] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.511] GetTickCount () returned 0x1143ba3 [0175.511] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.511] GetTickCount () returned 0x1143ba3 [0175.511] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.511] GetTickCount () returned 0x1143ba3 [0175.511] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.511] GetTickCount () returned 0x1143ba3 [0175.511] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.511] GetTickCount () returned 0x1143ba3 [0175.511] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.511] GetTickCount () returned 0x1143ba3 [0175.511] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.511] GetTickCount () returned 0x1143ba3 [0175.511] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.511] GetTickCount () returned 0x1143ba3 [0175.511] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.511] GetTickCount () returned 0x1143ba3 [0175.511] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.511] GetTickCount () returned 0x1143ba3 [0175.511] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.511] GetTickCount () returned 0x1143ba3 [0175.511] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.511] GetTickCount () returned 0x1143ba3 [0175.511] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.511] GetTickCount () returned 0x1143ba3 [0175.512] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.512] GetTickCount () returned 0x1143ba3 [0175.512] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.512] GetTickCount () returned 0x1143ba3 [0175.512] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.512] GetTickCount () returned 0x1143ba3 [0175.512] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.512] GetTickCount () returned 0x1143ba3 [0175.512] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.512] GetTickCount () returned 0x1143ba3 [0175.512] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.512] GetTickCount () returned 0x1143ba3 [0175.512] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.512] GetTickCount () returned 0x1143ba3 [0175.512] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.512] GetTickCount () returned 0x1143ba3 [0175.512] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.512] GetTickCount () returned 0x1143ba3 [0175.512] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.512] GetTickCount () returned 0x1143ba3 [0175.512] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.512] GetTickCount () returned 0x1143ba3 [0175.512] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.512] GetTickCount () returned 0x1143ba3 [0175.512] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.512] GetTickCount () returned 0x1143ba3 [0175.512] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.512] GetTickCount () returned 0x1143ba3 [0175.512] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.512] GetTickCount () returned 0x1143ba3 [0175.512] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.512] GetTickCount () returned 0x1143ba3 [0175.512] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.512] GetTickCount () returned 0x1143ba3 [0175.512] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.512] GetTickCount () returned 0x1143ba3 [0175.512] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.512] GetTickCount () returned 0x1143ba3 [0175.512] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.512] GetTickCount () returned 0x1143ba3 [0175.512] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.512] GetTickCount () returned 0x1143ba3 [0175.513] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.513] GetTickCount () returned 0x1143ba3 [0175.513] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.513] GetTickCount () returned 0x1143ba3 [0175.513] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.513] GetTickCount () returned 0x1143ba3 [0175.513] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.513] GetTickCount () returned 0x1143ba3 [0175.513] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.513] GetTickCount () returned 0x1143ba3 [0175.513] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.513] GetTickCount () returned 0x1143ba3 [0175.513] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.513] GetTickCount () returned 0x1143ba3 [0175.513] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.513] GetTickCount () returned 0x1143ba3 [0175.513] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.513] GetTickCount () returned 0x1143ba3 [0175.513] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.513] GetTickCount () returned 0x1143ba3 [0175.513] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.513] GetTickCount () returned 0x1143ba3 [0175.513] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.513] GetTickCount () returned 0x1143ba3 [0175.513] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.513] GetTickCount () returned 0x1143ba3 [0175.513] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.513] GetTickCount () returned 0x1143ba3 [0175.513] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.513] GetTickCount () returned 0x1143ba3 [0175.513] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.513] GetTickCount () returned 0x1143ba3 [0175.513] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.513] GetTickCount () returned 0x1143ba3 [0175.513] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.513] GetTickCount () returned 0x1143ba3 [0175.513] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.513] GetTickCount () returned 0x1143ba3 [0175.513] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.513] GetTickCount () returned 0x1143ba3 [0175.513] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.514] GetTickCount () returned 0x1143ba3 [0175.514] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.514] GetTickCount () returned 0x1143ba3 [0175.514] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.514] GetTickCount () returned 0x1143ba3 [0175.514] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.514] GetTickCount () returned 0x1143ba3 [0175.514] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.514] GetTickCount () returned 0x1143ba3 [0175.514] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.514] GetTickCount () returned 0x1143ba3 [0175.514] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.514] GetTickCount () returned 0x1143ba3 [0175.514] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.514] GetTickCount () returned 0x1143ba3 [0175.514] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.514] GetTickCount () returned 0x1143ba3 [0175.514] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.514] GetTickCount () returned 0x1143ba3 [0175.514] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.514] GetTickCount () returned 0x1143ba3 [0175.514] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.514] GetTickCount () returned 0x1143ba3 [0175.514] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.514] GetTickCount () returned 0x1143ba3 [0175.514] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.514] GetTickCount () returned 0x1143ba3 [0175.514] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.514] GetTickCount () returned 0x1143ba3 [0175.514] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.514] GetTickCount () returned 0x1143ba3 [0175.514] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.514] GetTickCount () returned 0x1143ba3 [0175.514] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.514] GetTickCount () returned 0x1143ba3 [0175.514] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.514] GetTickCount () returned 0x1143ba3 [0175.514] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.514] GetTickCount () returned 0x1143ba3 [0175.514] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.514] GetTickCount () returned 0x1143ba3 [0175.515] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.515] GetTickCount () returned 0x1143ba3 [0175.515] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.515] GetTickCount () returned 0x1143ba3 [0175.515] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.515] GetTickCount () returned 0x1143ba3 [0175.515] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.515] GetTickCount () returned 0x1143ba3 [0175.515] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.515] GetTickCount () returned 0x1143ba3 [0175.515] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.515] GetTickCount () returned 0x1143ba3 [0175.515] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.515] GetTickCount () returned 0x1143ba3 [0175.515] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.515] GetTickCount () returned 0x1143ba3 [0175.515] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.515] GetTickCount () returned 0x1143ba3 [0175.515] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.515] GetTickCount () returned 0x1143ba3 [0175.515] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.515] GetTickCount () returned 0x1143ba3 [0175.515] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.515] GetTickCount () returned 0x1143ba3 [0175.515] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.515] GetTickCount () returned 0x1143ba3 [0175.515] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.515] GetTickCount () returned 0x1143ba3 [0175.515] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.515] GetTickCount () returned 0x1143ba3 [0175.515] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.515] GetTickCount () returned 0x1143ba3 [0175.515] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.515] GetTickCount () returned 0x1143ba3 [0175.515] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.515] GetTickCount () returned 0x1143ba3 [0175.515] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.515] GetTickCount () returned 0x1143ba3 [0175.515] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.515] GetTickCount () returned 0x1143ba3 [0175.515] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.516] GetTickCount () returned 0x1143ba3 [0175.516] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.516] GetTickCount () returned 0x1143ba3 [0175.516] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.516] GetTickCount () returned 0x1143ba3 [0175.516] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.516] GetTickCount () returned 0x1143ba3 [0175.516] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.516] GetTickCount () returned 0x1143ba3 [0175.516] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.516] GetTickCount () returned 0x1143ba3 [0175.516] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.516] GetTickCount () returned 0x1143ba3 [0175.516] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.516] GetTickCount () returned 0x1143ba3 [0175.516] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.516] GetTickCount () returned 0x1143ba3 [0175.516] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.516] GetTickCount () returned 0x1143ba3 [0175.516] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.516] GetTickCount () returned 0x1143ba3 [0175.516] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.516] GetTickCount () returned 0x1143ba3 [0175.516] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.516] GetTickCount () returned 0x1143ba3 [0175.516] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.516] GetTickCount () returned 0x1143ba3 [0175.516] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.516] GetTickCount () returned 0x1143ba3 [0175.516] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.516] GetTickCount () returned 0x1143ba3 [0175.516] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.516] GetTickCount () returned 0x1143ba3 [0175.516] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.516] GetTickCount () returned 0x1143ba3 [0175.516] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.517] GetTickCount () returned 0x1143bb2 [0175.517] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.517] GetTickCount () returned 0x1143bb2 [0175.517] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.517] GetTickCount () returned 0x1143bb2 [0175.517] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.517] GetTickCount () returned 0x1143bb2 [0175.517] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.517] GetTickCount () returned 0x1143bb2 [0175.517] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.517] GetTickCount () returned 0x1143bb2 [0175.517] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.517] GetTickCount () returned 0x1143bb2 [0175.517] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.517] GetTickCount () returned 0x1143bb2 [0175.517] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.517] GetTickCount () returned 0x1143bb2 [0175.517] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.517] GetTickCount () returned 0x1143bb2 [0175.517] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.517] GetTickCount () returned 0x1143bb2 [0175.517] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.517] GetTickCount () returned 0x1143bb2 [0175.517] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.517] GetTickCount () returned 0x1143bb2 [0175.517] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.517] GetTickCount () returned 0x1143bb2 [0175.517] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.517] GetTickCount () returned 0x1143bb2 [0175.517] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.517] GetTickCount () returned 0x1143bb2 [0175.517] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.517] GetTickCount () returned 0x1143bb2 [0175.517] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.517] GetTickCount () returned 0x1143bb2 [0175.518] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.518] GetTickCount () returned 0x1143bb2 [0175.518] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.518] GetTickCount () returned 0x1143bb2 [0175.518] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.518] GetTickCount () returned 0x1143bb2 [0175.518] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.518] GetTickCount () returned 0x1143bb2 [0175.518] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.518] GetTickCount () returned 0x1143bb2 [0175.518] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.518] GetTickCount () returned 0x1143bb2 [0175.518] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.518] GetTickCount () returned 0x1143bb2 [0175.518] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.518] GetTickCount () returned 0x1143bb2 [0175.518] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.518] GetTickCount () returned 0x1143bb2 [0175.518] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.518] GetTickCount () returned 0x1143bb2 [0175.518] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.518] GetTickCount () returned 0x1143bb2 [0175.518] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.518] GetTickCount () returned 0x1143bb2 [0175.518] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.518] GetTickCount () returned 0x1143bb2 [0175.518] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.518] GetTickCount () returned 0x1143bb2 [0175.518] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.518] GetTickCount () returned 0x1143bb2 [0175.518] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.518] GetTickCount () returned 0x1143bb2 [0175.518] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.518] GetTickCount () returned 0x1143bb2 [0175.518] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.518] GetTickCount () returned 0x1143bb2 [0175.518] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.518] GetTickCount () returned 0x1143bb2 [0175.518] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.518] GetTickCount () returned 0x1143bb2 [0175.518] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.518] GetTickCount () returned 0x1143bb2 [0175.519] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.519] GetTickCount () returned 0x1143bb2 [0175.519] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.519] GetTickCount () returned 0x1143bb2 [0175.519] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.519] GetTickCount () returned 0x1143bb2 [0175.519] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.519] GetTickCount () returned 0x1143bb2 [0175.519] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.519] GetTickCount () returned 0x1143bb2 [0175.519] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.519] GetTickCount () returned 0x1143bb2 [0175.519] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.519] GetTickCount () returned 0x1143bb2 [0175.519] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.519] GetTickCount () returned 0x1143bb2 [0175.519] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.519] GetTickCount () returned 0x1143bb2 [0175.519] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.519] GetTickCount () returned 0x1143bb2 [0175.519] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.519] GetTickCount () returned 0x1143bb2 [0175.519] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.519] GetTickCount () returned 0x1143bb2 [0175.519] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.519] GetTickCount () returned 0x1143bb2 [0175.519] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.519] GetTickCount () returned 0x1143bb2 [0175.519] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.519] GetTickCount () returned 0x1143bb2 [0175.519] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.519] GetTickCount () returned 0x1143bb2 [0175.519] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.519] GetTickCount () returned 0x1143bb2 [0175.519] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.519] GetTickCount () returned 0x1143bb2 [0175.519] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0175.519] GetTickCount () returned 0x1143bb2 [0175.520] getsockopt (in: s=0x3b8, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0175.520] recv (in: s=0x3b8, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0175.520] WSAGetLastError () returned 10057 [0175.520] closesocket (s=0x3b8) returned 0 [0175.520] getsockopt (in: s=0x3b4, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0175.520] recv (in: s=0x3b4, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0175.520] WSAGetLastError () returned 10057 [0175.520] closesocket (s=0x3b4) returned 0 [0175.521] getsockopt (in: s=0x3b0, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0175.521] recv (in: s=0x3b0, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0175.521] WSAGetLastError () returned 10057 [0175.521] closesocket (s=0x3b0) returned 0 [0175.521] getsockopt (in: s=0x3ac, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0175.521] recv (in: s=0x3ac, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0175.521] WSAGetLastError () returned 10057 [0175.521] closesocket (s=0x3ac) returned 0 [0175.521] getsockopt (in: s=0x3a8, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0175.521] recv (in: s=0x3a8, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0175.521] WSAGetLastError () returned 10057 [0175.521] closesocket (s=0x3a8) returned 0 [0175.522] getsockopt (in: s=0x3a4, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0175.522] recv (in: s=0x3a4, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0175.522] WSAGetLastError () returned 10057 [0175.522] closesocket (s=0x3a4) returned 0 [0175.522] getsockopt (in: s=0x3a0, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0175.522] recv (in: s=0x3a0, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0175.522] WSAGetLastError () returned 10057 [0175.522] closesocket (s=0x3a0) returned 0 [0175.523] getsockopt (in: s=0x39c, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0175.523] recv (in: s=0x39c, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0175.523] WSAGetLastError () returned 10057 [0175.523] closesocket (s=0x39c) returned 0 [0175.523] getsockopt (in: s=0x398, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0175.523] recv (in: s=0x398, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0175.523] WSAGetLastError () returned 10057 [0175.523] closesocket (s=0x398) returned 0 [0175.523] getsockopt (in: s=0x394, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0175.523] recv (in: s=0x394, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0175.524] WSAGetLastError () returned 10057 [0175.524] closesocket (s=0x394) returned 0 [0175.616] getsockopt (in: s=0x38c, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0175.616] recv (in: s=0x38c, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0175.616] WSAGetLastError () returned 10057 [0175.617] closesocket (s=0x38c) returned 0 [0175.679] getsockopt (in: s=0x370, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0175.679] recv (in: s=0x370, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0175.679] WSAGetLastError () returned 10057 [0175.679] closesocket (s=0x370) returned 0 [0175.679] getsockopt (in: s=0x380, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0175.679] recv (in: s=0x380, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0175.679] WSAGetLastError () returned 10057 [0175.679] closesocket (s=0x380) returned 0 [0175.680] getsockopt (in: s=0x354, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0175.680] recv (in: s=0x354, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0175.680] WSAGetLastError () returned 10057 [0175.680] closesocket (s=0x354) returned 0 [0175.680] getsockopt (in: s=0x350, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0175.680] recv (in: s=0x350, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0175.680] WSAGetLastError () returned 10057 [0175.680] closesocket (s=0x350) returned 0 [0175.680] getsockopt (in: s=0x34c, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0175.680] recv (in: s=0x34c, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0175.680] WSAGetLastError () returned 10057 [0175.680] closesocket (s=0x34c) returned 0 [0175.681] getsockopt (in: s=0x2f8, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0175.681] recv (in: s=0x2f8, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0175.681] WSAGetLastError () returned 10057 [0175.681] closesocket (s=0x2f8) returned 0 [0175.681] getsockopt (in: s=0x37c, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0175.681] recv (in: s=0x37c, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0175.681] WSAGetLastError () returned 10057 [0175.681] closesocket (s=0x37c) returned 0 [0175.682] getsockopt (in: s=0x390, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0175.682] recv (in: s=0x390, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0175.682] WSAGetLastError () returned 10057 [0175.682] closesocket (s=0x390) returned 0 [0175.682] getsockopt (in: s=0x364, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0175.682] recv (in: s=0x364, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0175.682] WSAGetLastError () returned 10057 [0175.682] closesocket (s=0x364) returned 0 [0175.682] getsockopt (in: s=0x374, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0175.682] recv (in: s=0x374, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0175.683] WSAGetLastError () returned 10057 [0175.683] closesocket (s=0x374) returned 0 [0175.683] getsockopt (in: s=0x384, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0175.683] recv (in: s=0x384, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0175.683] WSAGetLastError () returned 10057 [0175.683] closesocket (s=0x384) returned 0 [0175.683] getsockopt (in: s=0x344, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0175.683] recv (in: s=0x344, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0175.683] WSAGetLastError () returned 10057 [0175.683] closesocket (s=0x344) returned 0 [0175.684] getsockopt (in: s=0x36c, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0175.684] recv (in: s=0x36c, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0175.684] WSAGetLastError () returned 10057 [0175.684] closesocket (s=0x36c) returned 0 [0175.684] getsockopt (in: s=0x368, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0175.684] recv (in: s=0x368, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0175.684] WSAGetLastError () returned 10057 [0175.684] closesocket (s=0x368) returned 0 [0175.684] getsockopt (in: s=0x360, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0175.685] recv (in: s=0x360, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0175.685] WSAGetLastError () returned 10057 [0175.685] closesocket (s=0x360) returned 0 [0175.685] getsockopt (in: s=0x358, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0175.685] recv (in: s=0x358, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0175.685] WSAGetLastError () returned 10057 [0175.685] closesocket (s=0x358) returned 0 [0175.685] getsockopt (in: s=0x35c, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0175.685] recv (in: s=0x35c, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0175.685] WSAGetLastError () returned 10057 [0175.685] closesocket (s=0x35c) returned 0 [0175.686] getsockopt (in: s=0x31c, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0175.686] recv (in: s=0x31c, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0175.686] WSAGetLastError () returned 10057 [0175.686] closesocket (s=0x31c) returned 0 [0175.686] getsockopt (in: s=0x310, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0175.686] recv (in: s=0x310, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0175.686] WSAGetLastError () returned 10057 [0175.686] closesocket (s=0x310) returned 0 [0175.687] getsockopt (in: s=0x30c, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0175.687] recv (in: s=0x30c, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0175.687] WSAGetLastError () returned 10057 [0175.687] closesocket (s=0x30c) returned 0 [0175.687] getsockopt (in: s=0x308, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0175.687] recv (in: s=0x308, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0175.687] WSAGetLastError () returned 10057 [0175.687] closesocket (s=0x308) returned 0 [0175.687] getsockopt (in: s=0x2fc, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0175.687] recv (in: s=0x2fc, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0175.687] WSAGetLastError () returned 10057 [0175.687] closesocket (s=0x2fc) returned 0 [0175.688] getsockopt (in: s=0x300, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0175.688] recv (in: s=0x300, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0175.688] WSAGetLastError () returned 10057 [0175.688] closesocket (s=0x300) returned 0 [0175.688] getsockopt (in: s=0x304, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0175.688] recv (in: s=0x304, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0175.688] WSAGetLastError () returned 10057 [0175.688] closesocket (s=0x304) returned 0 [0175.689] getsockopt (in: s=0x2f0, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0175.689] recv (in: s=0x2f0, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0175.689] WSAGetLastError () returned 10057 [0175.689] closesocket (s=0x2f0) returned 0 [0175.689] GetProcessHeap () returned 0x8a0000 [0175.689] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8e12a0 | out: hHeap=0x8a0000) returned 1 [0175.689] GetProcessHeap () returned 0x8a0000 [0175.689] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x96e0f0 | out: hHeap=0x8a0000) returned 1 [0175.689] htonl (hostlong=0x100007f) returned 0x7f000001 [0175.689] GetProcessHeap () returned 0x8a0000 [0175.689] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36eb0d8 | out: hHeap=0x8a0000) returned 1 [0175.689] WaitForSingleObject (hHandle=0x254, dwMilliseconds=0xffffffff) returned 0x0 [0175.689] GetProcessHeap () returned 0x8a0000 [0175.689] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7df0 | out: hHeap=0x8a0000) returned 1 [0175.689] Sleep (dwMilliseconds=0x2710) [0185.861] GetProcessHeap () returned 0x8a0000 [0185.861] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x4000) returned 0x8cf5e0 [0185.873] GetProcessHeap () returned 0x8a0000 [0185.873] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0185.891] WNetOpenEnumW (in: dwScope=0x1, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x261f86c | out: lphEnum=0x261f86c*=0x8e8f70) returned 0x0 [0186.221] WNetEnumResourceW (in: hEnum=0x8e8f70, lpcCount=0x261f860, lpBuffer=0x8cf5e0, lpBufferSize=0x261f874 | out: lpcCount=0x261f860, lpBuffer=0x8cf5e0, lpBufferSize=0x261f874) returned 0x103 [0186.221] WNetCloseEnum (hEnum=0x8e8f70) returned 0x0 [0186.221] GetProcessHeap () returned 0x8a0000 [0186.221] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8cf5e0 | out: hHeap=0x8a0000) returned 1 [0186.221] GetProcessHeap () returned 0x8a0000 [0186.221] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0186.223] GetProcessHeap () returned 0x8a0000 [0186.223] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x4000) returned 0x8cf5e0 [0186.223] GetProcessHeap () returned 0x8a0000 [0186.223] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0186.223] WNetOpenEnumW (in: dwScope=0x4, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x261f854 | out: lphEnum=0x261f854*=0x8b83f8) returned 0x0 [0186.224] WNetEnumResourceW (in: hEnum=0x8b83f8, lpcCount=0x261f848, lpBuffer=0x8cf5e0, lpBufferSize=0x261f85c | out: lpcCount=0x261f848, lpBuffer=0x8cf5e0, lpBufferSize=0x261f85c) returned 0x103 [0186.225] WNetCloseEnum (hEnum=0x8b83f8) returned 0x0 [0186.225] GetProcessHeap () returned 0x8a0000 [0186.225] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8cf5e0 | out: hHeap=0x8a0000) returned 1 [0186.225] GetProcessHeap () returned 0x8a0000 [0186.225] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0186.225] GetProcessHeap () returned 0x8a0000 [0186.225] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x4000) returned 0x8cf5e0 [0186.226] GetProcessHeap () returned 0x8a0000 [0186.226] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0186.226] WNetOpenEnumW (in: dwScope=0x5, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x261f83c | out: lphEnum=0x261f83c*=0x96a1e0) returned 0x0 [0193.744] WNetEnumResourceW (in: hEnum=0x96a1e0, lpcCount=0x261f830, lpBuffer=0x8cf5e0, lpBufferSize=0x261f844 | out: lpcCount=0x261f830, lpBuffer=0x8cf5e0, lpBufferSize=0x261f844) returned 0x0 [0193.745] GetProcessHeap () returned 0x8a0000 [0193.745] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x4000) returned 0x8d35e8 [0193.745] GetProcessHeap () returned 0x8a0000 [0193.745] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ad4090 [0193.746] WNetOpenEnumW (in: dwScope=0x5, dwType=0x0, dwUsage=0x0, lpNetResource=0x8cf600, lphEnum=0x261f7f4 | out: lphEnum=0x261f7f4*=0x0) returned 0x57 [0193.746] GetProcessHeap () returned 0x8a0000 [0193.746] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8d35e8 | out: hHeap=0x8a0000) returned 1 [0193.746] GetProcessHeap () returned 0x8a0000 [0193.746] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ad4090 | out: hHeap=0x8a0000) returned 1 [0193.747] GetProcessHeap () returned 0x8a0000 [0193.747] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x4000) returned 0x8d35e8 [0193.747] GetProcessHeap () returned 0x8a0000 [0193.747] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ad4090 [0193.747] WNetOpenEnumW (in: dwScope=0x5, dwType=0x0, dwUsage=0x0, lpNetResource=0x8cf5e0, lphEnum=0x261f7f4 | out: lphEnum=0x261f7f4*=0x96a238) returned 0x0 [0194.326] WNetEnumResourceW (in: hEnum=0x96a238, lpcCount=0x261f7e8, lpBuffer=0x8d35e8, lpBufferSize=0x261f7fc | out: lpcCount=0x261f7e8, lpBuffer=0x8d35e8, lpBufferSize=0x261f7fc) returned 0x0 [0194.326] WNetEnumResourceW (in: hEnum=0x96a238, lpcCount=0x261f7e8, lpBuffer=0x8d35e8, lpBufferSize=0x261f7fc | out: lpcCount=0x261f7e8, lpBuffer=0x8d35e8, lpBufferSize=0x261f7fc) returned 0x103 [0194.326] WNetCloseEnum (hEnum=0x96a238) returned 0x0 [0194.327] GetProcessHeap () returned 0x8a0000 [0194.327] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8d35e8 | out: hHeap=0x8a0000) returned 1 [0194.327] GetProcessHeap () returned 0x8a0000 [0194.327] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ad4090 | out: hHeap=0x8a0000) returned 1 [0194.328] WNetEnumResourceW (in: hEnum=0x96a1e0, lpcCount=0x261f830, lpBuffer=0x8cf5e0, lpBufferSize=0x261f844 | out: lpcCount=0x261f830, lpBuffer=0x8cf5e0, lpBufferSize=0x261f844) returned 0x103 [0194.328] WNetCloseEnum (hEnum=0x96a1e0) returned 0x0 [0194.328] GetProcessHeap () returned 0x8a0000 [0194.328] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8cf5e0 | out: hHeap=0x8a0000) returned 1 [0194.328] GetProcessHeap () returned 0x8a0000 [0194.328] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0194.329] GetProcessHeap () returned 0x8a0000 [0194.329] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x4000) returned 0x8cf5e0 [0194.329] GetProcessHeap () returned 0x8a0000 [0194.329] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0194.329] WNetOpenEnumW (in: dwScope=0x3, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x261f86c | out: lphEnum=0x261f86c*=0x8b8578) returned 0x0 [0194.330] WNetEnumResourceW (in: hEnum=0x8b8578, lpcCount=0x261f860, lpBuffer=0x8cf5e0, lpBufferSize=0x261f874 | out: lpcCount=0x261f860, lpBuffer=0x8cf5e0, lpBufferSize=0x261f874) returned 0x103 [0194.331] WNetCloseEnum (hEnum=0x8b8578) returned 0x0 [0194.331] GetProcessHeap () returned 0x8a0000 [0194.331] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8cf5e0 | out: hHeap=0x8a0000) returned 1 [0194.331] GetProcessHeap () returned 0x8a0000 [0194.331] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0194.331] GetProcessHeap () returned 0x8a0000 [0194.331] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x4000) returned 0x8cf5e0 [0194.332] GetProcessHeap () returned 0x8a0000 [0194.332] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0194.332] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x261f854 | out: lphEnum=0x261f854*=0x9936c0) returned 0x0 [0194.332] WNetEnumResourceW (in: hEnum=0x9936c0, lpcCount=0x261f848, lpBuffer=0x8cf5e0, lpBufferSize=0x261f85c | out: lpcCount=0x261f848, lpBuffer=0x8cf5e0, lpBufferSize=0x261f85c) returned 0x0 [0194.332] GetProcessHeap () returned 0x8a0000 [0194.332] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x4000) returned 0x8d35e8 [0194.332] GetProcessHeap () returned 0x8a0000 [0194.332] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ad4090 [0194.333] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x8cf620, lphEnum=0x261f80c | out: lphEnum=0x261f80c*=0x0) returned 0x4c6 [0194.334] GetProcessHeap () returned 0x8a0000 [0194.334] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8d35e8 | out: hHeap=0x8a0000) returned 1 [0194.334] GetProcessHeap () returned 0x8a0000 [0194.334] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ad4090 | out: hHeap=0x8a0000) returned 1 [0194.335] GetProcessHeap () returned 0x8a0000 [0194.335] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x4000) returned 0x8d35e8 [0194.335] GetProcessHeap () returned 0x8a0000 [0194.335] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ad4090 [0194.336] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x8cf600, lphEnum=0x261f80c | out: lphEnum=0x261f80c*=0x8b8278) returned 0x0 [0195.449] WNetEnumResourceW (in: hEnum=0x8b8278, lpcCount=0x261f800, lpBuffer=0x8d35e8, lpBufferSize=0x261f814 | out: lpcCount=0x261f800, lpBuffer=0x8d35e8, lpBufferSize=0x261f814) returned 0x0 [0195.449] GetProcessHeap () returned 0x8a0000 [0195.449] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x4000) returned 0x3ae4098 [0195.449] GetProcessHeap () returned 0x8a0000 [0195.449] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x9712d8 [0195.450] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x8d35e8, lphEnum=0x261f7c4 | out: lphEnum=0x261f7c4*=0x8b83f8) returned 0x0 [0195.456] WNetEnumResourceW (in: hEnum=0x8b83f8, lpcCount=0x261f7b8, lpBuffer=0x3ae4098, lpBufferSize=0x261f7cc | out: lpcCount=0x261f7b8, lpBuffer=0x3ae4098, lpBufferSize=0x261f7cc) returned 0x0 [0195.456] GetProcessHeap () returned 0x8a0000 [0195.456] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x4000) returned 0x3ae80a0 [0195.456] GetProcessHeap () returned 0x8a0000 [0195.456] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x9812e0 [0195.456] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x3ae4098, lphEnum=0x261f77c | out: lphEnum=0x261f77c*=0x8b85f8) returned 0x0 [0196.328] WNetEnumResourceW (in: hEnum=0x8b85f8, lpcCount=0x261f770, lpBuffer=0x3ae80a0, lpBufferSize=0x261f784 | out: lpcCount=0x261f770, lpBuffer=0x3ae80a0, lpBufferSize=0x261f784) returned 0x103 [0196.328] WNetCloseEnum (hEnum=0x8b85f8) returned 0x0 [0196.328] GetProcessHeap () returned 0x8a0000 [0196.328] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ae80a0 | out: hHeap=0x8a0000) returned 1 [0196.328] GetProcessHeap () returned 0x8a0000 [0196.328] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x9812e0 | out: hHeap=0x8a0000) returned 1 [0196.329] WNetEnumResourceW (in: hEnum=0x8b83f8, lpcCount=0x261f7b8, lpBuffer=0x3ae4098, lpBufferSize=0x261f7cc | out: lpcCount=0x261f7b8, lpBuffer=0x3ae4098, lpBufferSize=0x261f7cc) returned 0x103 [0196.330] WNetCloseEnum (hEnum=0x8b83f8) returned 0x0 [0196.330] GetProcessHeap () returned 0x8a0000 [0196.330] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ae4098 | out: hHeap=0x8a0000) returned 1 [0196.330] GetProcessHeap () returned 0x8a0000 [0196.330] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x9712d8 | out: hHeap=0x8a0000) returned 1 [0196.331] WNetEnumResourceW (in: hEnum=0x8b8278, lpcCount=0x261f800, lpBuffer=0x8d35e8, lpBufferSize=0x261f814 | out: lpcCount=0x261f800, lpBuffer=0x8d35e8, lpBufferSize=0x261f814) returned 0x103 [0196.331] WNetCloseEnum (hEnum=0x8b8278) returned 0x0 [0196.331] GetProcessHeap () returned 0x8a0000 [0196.331] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8d35e8 | out: hHeap=0x8a0000) returned 1 [0196.331] GetProcessHeap () returned 0x8a0000 [0196.331] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ad4090 | out: hHeap=0x8a0000) returned 1 [0196.332] GetProcessHeap () returned 0x8a0000 [0196.332] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x4000) returned 0x8d35e8 [0196.333] GetProcessHeap () returned 0x8a0000 [0196.333] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ad4090 [0196.333] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x8cf5e0, lphEnum=0x261f80c | out: lphEnum=0x261f80c*=0x8b83f8) returned 0x0 [0196.334] WNetEnumResourceW (in: hEnum=0x8b83f8, lpcCount=0x261f800, lpBuffer=0x8d35e8, lpBufferSize=0x261f814 | out: lpcCount=0x261f800, lpBuffer=0x8d35e8, lpBufferSize=0x261f814) returned 0x103 [0196.335] WNetCloseEnum (hEnum=0x8b83f8) returned 0x0 [0196.335] GetProcessHeap () returned 0x8a0000 [0196.335] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8d35e8 | out: hHeap=0x8a0000) returned 1 [0196.335] GetProcessHeap () returned 0x8a0000 [0196.335] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ad4090 | out: hHeap=0x8a0000) returned 1 [0196.335] WNetEnumResourceW (in: hEnum=0x9936c0, lpcCount=0x261f848, lpBuffer=0x8cf5e0, lpBufferSize=0x261f85c | out: lpcCount=0x261f848, lpBuffer=0x8cf5e0, lpBufferSize=0x261f85c) returned 0x103 [0196.335] WNetCloseEnum (hEnum=0x9936c0) returned 0x0 [0196.335] GetProcessHeap () returned 0x8a0000 [0196.335] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8cf5e0 | out: hHeap=0x8a0000) returned 1 [0196.336] GetProcessHeap () returned 0x8a0000 [0196.336] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0196.336] GetProcessHeap () returned 0x8a0000 [0196.336] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x3a98) returned 0x36eb0d8 [0196.336] GetIpAddrTable (in: pIpAddrTable=0x36eb0d8, pdwSize=0x261f84c, bOrder=0 | out: pIpAddrTable=0x36eb0d8, pdwSize=0x261f84c) returned 0x0 [0196.344] htonl (hostlong=0xda00a8c0) returned 0xc0a800da [0196.344] htonl (hostlong=0xda00a8c0) returned 0xc0a800da [0196.344] htonl (hostlong=0xffffff) returned 0xffffff00 [0196.344] htons (hostshort=0x1bd) returned 0xbd01 [0196.344] GetProcessHeap () returned 0x8a0000 [0196.344] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x800) returned 0x8e6af0 [0196.344] GetProcessHeap () returned 0x8a0000 [0196.344] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x800) returned 0x8d7dc0 [0196.344] htonl (hostlong=0xc0a80000) returned 0xa8c0 [0196.344] socket (af=2, type=1, protocol=6) returned 0x368 [0196.345] ioctlsocket (in: s=0x368, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.501] connect (s=0x368, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.0"), namelen=16) returned -1 [0196.505] WSAGetLastError () returned 10035 [0196.505] htonl (hostlong=0xc0a80001) returned 0x100a8c0 [0196.505] socket (af=2, type=1, protocol=6) returned 0x360 [0196.505] ioctlsocket (in: s=0x360, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.505] connect (s=0x360, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.1"), namelen=16) returned -1 [0196.506] WSAGetLastError () returned 10035 [0196.506] htonl (hostlong=0xc0a80002) returned 0x200a8c0 [0196.506] socket (af=2, type=1, protocol=6) returned 0x36c [0196.506] ioctlsocket (in: s=0x36c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.506] connect (s=0x36c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.2"), namelen=16) returned -1 [0196.507] WSAGetLastError () returned 10035 [0196.507] htonl (hostlong=0xc0a80003) returned 0x300a8c0 [0196.507] socket (af=2, type=1, protocol=6) returned 0x344 [0196.507] ioctlsocket (in: s=0x344, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.507] connect (s=0x344, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.3"), namelen=16) returned -1 [0196.508] WSAGetLastError () returned 10035 [0196.508] htonl (hostlong=0xc0a80004) returned 0x400a8c0 [0196.508] socket (af=2, type=1, protocol=6) returned 0x384 [0196.508] ioctlsocket (in: s=0x384, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.508] connect (s=0x384, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.4"), namelen=16) returned -1 [0196.508] WSAGetLastError () returned 10035 [0196.508] htonl (hostlong=0xc0a80005) returned 0x500a8c0 [0196.509] socket (af=2, type=1, protocol=6) returned 0x374 [0196.509] ioctlsocket (in: s=0x374, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.509] connect (s=0x374, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.5"), namelen=16) returned -1 [0196.509] WSAGetLastError () returned 10035 [0196.509] htonl (hostlong=0xc0a80006) returned 0x600a8c0 [0196.509] socket (af=2, type=1, protocol=6) returned 0x364 [0196.510] ioctlsocket (in: s=0x364, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.510] connect (s=0x364, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.6"), namelen=16) returned -1 [0196.510] WSAGetLastError () returned 10035 [0196.510] htonl (hostlong=0xc0a80007) returned 0x700a8c0 [0196.510] socket (af=2, type=1, protocol=6) returned 0x390 [0196.511] ioctlsocket (in: s=0x390, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.511] connect (s=0x390, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.7"), namelen=16) returned -1 [0196.511] WSAGetLastError () returned 10035 [0196.511] htonl (hostlong=0xc0a80008) returned 0x800a8c0 [0196.511] socket (af=2, type=1, protocol=6) returned 0x37c [0196.512] ioctlsocket (in: s=0x37c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.512] connect (s=0x37c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.8"), namelen=16) returned -1 [0196.512] WSAGetLastError () returned 10035 [0196.512] htonl (hostlong=0xc0a80009) returned 0x900a8c0 [0196.512] socket (af=2, type=1, protocol=6) returned 0x2f8 [0196.512] ioctlsocket (in: s=0x2f8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.512] connect (s=0x2f8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.9"), namelen=16) returned -1 [0196.513] WSAGetLastError () returned 10035 [0196.513] htonl (hostlong=0xc0a8000a) returned 0xa00a8c0 [0196.513] socket (af=2, type=1, protocol=6) returned 0x34c [0196.513] ioctlsocket (in: s=0x34c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.513] connect (s=0x34c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.10"), namelen=16) returned -1 [0196.514] WSAGetLastError () returned 10035 [0196.514] htonl (hostlong=0xc0a8000b) returned 0xb00a8c0 [0196.514] socket (af=2, type=1, protocol=6) returned 0x350 [0196.514] ioctlsocket (in: s=0x350, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.514] connect (s=0x350, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.11"), namelen=16) returned -1 [0196.515] WSAGetLastError () returned 10035 [0196.515] htonl (hostlong=0xc0a8000c) returned 0xc00a8c0 [0196.515] socket (af=2, type=1, protocol=6) returned 0x354 [0196.515] ioctlsocket (in: s=0x354, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.515] connect (s=0x354, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.12"), namelen=16) returned -1 [0196.516] WSAGetLastError () returned 10035 [0196.516] htonl (hostlong=0xc0a8000d) returned 0xd00a8c0 [0196.516] socket (af=2, type=1, protocol=6) returned 0x380 [0196.516] ioctlsocket (in: s=0x380, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.516] connect (s=0x380, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.13"), namelen=16) returned -1 [0196.517] WSAGetLastError () returned 10035 [0196.517] htonl (hostlong=0xc0a8000e) returned 0xe00a8c0 [0196.517] socket (af=2, type=1, protocol=6) returned 0x370 [0196.517] ioctlsocket (in: s=0x370, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.517] connect (s=0x370, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.14"), namelen=16) returned -1 [0196.518] WSAGetLastError () returned 10035 [0196.518] htonl (hostlong=0xc0a8000f) returned 0xf00a8c0 [0196.518] socket (af=2, type=1, protocol=6) returned 0x38c [0196.518] ioctlsocket (in: s=0x38c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.518] connect (s=0x38c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.15"), namelen=16) returned -1 [0196.519] WSAGetLastError () returned 10035 [0196.519] htonl (hostlong=0xc0a80010) returned 0x1000a8c0 [0196.519] socket (af=2, type=1, protocol=6) returned 0x394 [0196.519] ioctlsocket (in: s=0x394, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.519] connect (s=0x394, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.16"), namelen=16) returned -1 [0196.520] WSAGetLastError () returned 10035 [0196.520] htonl (hostlong=0xc0a80011) returned 0x1100a8c0 [0196.520] socket (af=2, type=1, protocol=6) returned 0x398 [0196.520] ioctlsocket (in: s=0x398, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.520] connect (s=0x398, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.17"), namelen=16) returned -1 [0196.521] WSAGetLastError () returned 10035 [0196.521] htonl (hostlong=0xc0a80012) returned 0x1200a8c0 [0196.521] socket (af=2, type=1, protocol=6) returned 0x39c [0196.521] ioctlsocket (in: s=0x39c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.521] connect (s=0x39c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.18"), namelen=16) returned -1 [0196.522] WSAGetLastError () returned 10035 [0196.522] htonl (hostlong=0xc0a80013) returned 0x1300a8c0 [0196.522] socket (af=2, type=1, protocol=6) returned 0x3a0 [0196.522] ioctlsocket (in: s=0x3a0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.522] connect (s=0x3a0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.19"), namelen=16) returned -1 [0196.522] WSAGetLastError () returned 10035 [0196.522] htonl (hostlong=0xc0a80014) returned 0x1400a8c0 [0196.522] socket (af=2, type=1, protocol=6) returned 0x3a4 [0196.523] ioctlsocket (in: s=0x3a4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.523] connect (s=0x3a4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.20"), namelen=16) returned -1 [0196.523] WSAGetLastError () returned 10035 [0196.523] htonl (hostlong=0xc0a80015) returned 0x1500a8c0 [0196.523] socket (af=2, type=1, protocol=6) returned 0x3a8 [0196.524] ioctlsocket (in: s=0x3a8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.524] connect (s=0x3a8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.21"), namelen=16) returned -1 [0196.524] WSAGetLastError () returned 10035 [0196.524] htonl (hostlong=0xc0a80016) returned 0x1600a8c0 [0196.524] socket (af=2, type=1, protocol=6) returned 0x3ac [0196.524] ioctlsocket (in: s=0x3ac, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.525] connect (s=0x3ac, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.22"), namelen=16) returned -1 [0196.525] WSAGetLastError () returned 10035 [0196.525] htonl (hostlong=0xc0a80017) returned 0x1700a8c0 [0196.525] socket (af=2, type=1, protocol=6) returned 0x3b0 [0196.525] ioctlsocket (in: s=0x3b0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.526] connect (s=0x3b0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.23"), namelen=16) returned -1 [0196.526] WSAGetLastError () returned 10035 [0196.526] htonl (hostlong=0xc0a80018) returned 0x1800a8c0 [0196.526] socket (af=2, type=1, protocol=6) returned 0x3b4 [0196.526] ioctlsocket (in: s=0x3b4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.527] connect (s=0x3b4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.24"), namelen=16) returned -1 [0196.527] WSAGetLastError () returned 10035 [0196.527] htonl (hostlong=0xc0a80019) returned 0x1900a8c0 [0196.527] socket (af=2, type=1, protocol=6) returned 0x3b8 [0196.527] ioctlsocket (in: s=0x3b8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.527] connect (s=0x3b8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.25"), namelen=16) returned -1 [0196.528] WSAGetLastError () returned 10035 [0196.528] htonl (hostlong=0xc0a8001a) returned 0x1a00a8c0 [0196.528] socket (af=2, type=1, protocol=6) returned 0x3bc [0196.528] ioctlsocket (in: s=0x3bc, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.528] connect (s=0x3bc, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.26"), namelen=16) returned -1 [0196.529] WSAGetLastError () returned 10035 [0196.529] htonl (hostlong=0xc0a8001b) returned 0x1b00a8c0 [0196.529] socket (af=2, type=1, protocol=6) returned 0x3c0 [0196.529] ioctlsocket (in: s=0x3c0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.529] connect (s=0x3c0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.27"), namelen=16) returned -1 [0196.530] WSAGetLastError () returned 10035 [0196.530] htonl (hostlong=0xc0a8001c) returned 0x1c00a8c0 [0196.530] socket (af=2, type=1, protocol=6) returned 0x3c4 [0196.530] ioctlsocket (in: s=0x3c4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.530] connect (s=0x3c4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.28"), namelen=16) returned -1 [0196.531] WSAGetLastError () returned 10035 [0196.531] htonl (hostlong=0xc0a8001d) returned 0x1d00a8c0 [0196.531] socket (af=2, type=1, protocol=6) returned 0x3c8 [0196.531] ioctlsocket (in: s=0x3c8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.531] connect (s=0x3c8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.29"), namelen=16) returned -1 [0196.532] WSAGetLastError () returned 10035 [0196.532] htonl (hostlong=0xc0a8001e) returned 0x1e00a8c0 [0196.532] socket (af=2, type=1, protocol=6) returned 0x3cc [0196.532] ioctlsocket (in: s=0x3cc, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.532] connect (s=0x3cc, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.30"), namelen=16) returned -1 [0196.532] WSAGetLastError () returned 10035 [0196.532] htonl (hostlong=0xc0a8001f) returned 0x1f00a8c0 [0196.532] socket (af=2, type=1, protocol=6) returned 0x3d0 [0196.533] ioctlsocket (in: s=0x3d0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.533] connect (s=0x3d0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.31"), namelen=16) returned -1 [0196.534] WSAGetLastError () returned 10035 [0196.534] htonl (hostlong=0xc0a80020) returned 0x2000a8c0 [0196.534] socket (af=2, type=1, protocol=6) returned 0x3d4 [0196.534] ioctlsocket (in: s=0x3d4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.534] connect (s=0x3d4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.32"), namelen=16) returned -1 [0196.534] WSAGetLastError () returned 10035 [0196.535] htonl (hostlong=0xc0a80021) returned 0x2100a8c0 [0196.535] socket (af=2, type=1, protocol=6) returned 0x3d8 [0196.535] ioctlsocket (in: s=0x3d8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.535] connect (s=0x3d8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.33"), namelen=16) returned -1 [0196.535] WSAGetLastError () returned 10035 [0196.535] htonl (hostlong=0xc0a80022) returned 0x2200a8c0 [0196.535] socket (af=2, type=1, protocol=6) returned 0x3dc [0196.536] ioctlsocket (in: s=0x3dc, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.536] connect (s=0x3dc, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.34"), namelen=16) returned -1 [0196.536] WSAGetLastError () returned 10035 [0196.536] htonl (hostlong=0xc0a80023) returned 0x2300a8c0 [0196.536] socket (af=2, type=1, protocol=6) returned 0x3e0 [0196.536] ioctlsocket (in: s=0x3e0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.537] connect (s=0x3e0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.35"), namelen=16) returned -1 [0196.537] WSAGetLastError () returned 10035 [0196.537] htonl (hostlong=0xc0a80024) returned 0x2400a8c0 [0196.537] socket (af=2, type=1, protocol=6) returned 0x3e4 [0196.537] ioctlsocket (in: s=0x3e4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.537] connect (s=0x3e4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.36"), namelen=16) returned -1 [0196.538] WSAGetLastError () returned 10035 [0196.538] htonl (hostlong=0xc0a80025) returned 0x2500a8c0 [0196.538] socket (af=2, type=1, protocol=6) returned 0x3e8 [0196.538] ioctlsocket (in: s=0x3e8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.538] connect (s=0x3e8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.37"), namelen=16) returned -1 [0196.539] WSAGetLastError () returned 10035 [0196.539] htonl (hostlong=0xc0a80026) returned 0x2600a8c0 [0196.539] socket (af=2, type=1, protocol=6) returned 0x3ec [0196.539] ioctlsocket (in: s=0x3ec, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.539] connect (s=0x3ec, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.38"), namelen=16) returned -1 [0196.540] WSAGetLastError () returned 10035 [0196.540] htonl (hostlong=0xc0a80027) returned 0x2700a8c0 [0196.540] socket (af=2, type=1, protocol=6) returned 0x3f0 [0196.540] ioctlsocket (in: s=0x3f0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.540] connect (s=0x3f0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.39"), namelen=16) returned -1 [0196.686] WSAGetLastError () returned 10035 [0196.686] htonl (hostlong=0xc0a80028) returned 0x2800a8c0 [0196.686] socket (af=2, type=1, protocol=6) returned 0x3f4 [0196.688] ioctlsocket (in: s=0x3f4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.688] connect (s=0x3f4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.40"), namelen=16) returned -1 [0196.691] WSAGetLastError () returned 10035 [0196.691] htonl (hostlong=0xc0a80029) returned 0x2900a8c0 [0196.691] socket (af=2, type=1, protocol=6) returned 0x3f8 [0196.692] ioctlsocket (in: s=0x3f8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.692] connect (s=0x3f8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.41"), namelen=16) returned -1 [0196.692] WSAGetLastError () returned 10035 [0196.692] htonl (hostlong=0xc0a8002a) returned 0x2a00a8c0 [0196.692] socket (af=2, type=1, protocol=6) returned 0x3fc [0196.693] ioctlsocket (in: s=0x3fc, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.693] connect (s=0x3fc, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.42"), namelen=16) returned -1 [0196.693] WSAGetLastError () returned 10035 [0196.693] htonl (hostlong=0xc0a8002b) returned 0x2b00a8c0 [0196.694] socket (af=2, type=1, protocol=6) returned 0x404 [0196.694] ioctlsocket (in: s=0x404, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.694] connect (s=0x404, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.43"), namelen=16) returned -1 [0196.694] WSAGetLastError () returned 10035 [0196.694] htonl (hostlong=0xc0a8002c) returned 0x2c00a8c0 [0196.695] socket (af=2, type=1, protocol=6) returned 0x408 [0196.695] ioctlsocket (in: s=0x408, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.695] connect (s=0x408, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.44"), namelen=16) returned -1 [0196.696] WSAGetLastError () returned 10035 [0196.696] htonl (hostlong=0xc0a8002d) returned 0x2d00a8c0 [0196.696] socket (af=2, type=1, protocol=6) returned 0x40c [0196.696] ioctlsocket (in: s=0x40c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.696] connect (s=0x40c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.45"), namelen=16) returned -1 [0196.697] WSAGetLastError () returned 10035 [0196.697] htonl (hostlong=0xc0a8002e) returned 0x2e00a8c0 [0196.697] socket (af=2, type=1, protocol=6) returned 0x410 [0196.697] ioctlsocket (in: s=0x410, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.697] connect (s=0x410, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.46"), namelen=16) returned -1 [0196.697] WSAGetLastError () returned 10035 [0196.698] htonl (hostlong=0xc0a8002f) returned 0x2f00a8c0 [0196.698] socket (af=2, type=1, protocol=6) returned 0x414 [0196.698] ioctlsocket (in: s=0x414, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.698] connect (s=0x414, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.47"), namelen=16) returned -1 [0196.698] WSAGetLastError () returned 10035 [0196.698] htonl (hostlong=0xc0a80030) returned 0x3000a8c0 [0196.699] socket (af=2, type=1, protocol=6) returned 0x418 [0196.699] ioctlsocket (in: s=0x418, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.699] connect (s=0x418, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.48"), namelen=16) returned -1 [0196.700] WSAGetLastError () returned 10035 [0196.700] htonl (hostlong=0xc0a80031) returned 0x3100a8c0 [0196.700] socket (af=2, type=1, protocol=6) returned 0x41c [0196.700] ioctlsocket (in: s=0x41c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.700] connect (s=0x41c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.49"), namelen=16) returned -1 [0196.701] WSAGetLastError () returned 10035 [0196.701] htonl (hostlong=0xc0a80032) returned 0x3200a8c0 [0196.701] socket (af=2, type=1, protocol=6) returned 0x420 [0196.701] ioctlsocket (in: s=0x420, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.701] connect (s=0x420, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.50"), namelen=16) returned -1 [0196.702] WSAGetLastError () returned 10035 [0196.702] htonl (hostlong=0xc0a80033) returned 0x3300a8c0 [0196.702] socket (af=2, type=1, protocol=6) returned 0x424 [0196.702] ioctlsocket (in: s=0x424, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.702] connect (s=0x424, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.51"), namelen=16) returned -1 [0196.703] WSAGetLastError () returned 10035 [0196.703] htonl (hostlong=0xc0a80034) returned 0x3400a8c0 [0196.703] socket (af=2, type=1, protocol=6) returned 0x428 [0196.703] ioctlsocket (in: s=0x428, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.703] connect (s=0x428, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.52"), namelen=16) returned -1 [0196.704] WSAGetLastError () returned 10035 [0196.704] htonl (hostlong=0xc0a80035) returned 0x3500a8c0 [0196.704] socket (af=2, type=1, protocol=6) returned 0x42c [0196.704] ioctlsocket (in: s=0x42c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.704] connect (s=0x42c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.53"), namelen=16) returned -1 [0196.705] WSAGetLastError () returned 10035 [0196.705] htonl (hostlong=0xc0a80036) returned 0x3600a8c0 [0196.705] socket (af=2, type=1, protocol=6) returned 0x430 [0196.705] ioctlsocket (in: s=0x430, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.705] connect (s=0x430, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.54"), namelen=16) returned -1 [0196.706] WSAGetLastError () returned 10035 [0196.706] htonl (hostlong=0xc0a80037) returned 0x3700a8c0 [0196.706] socket (af=2, type=1, protocol=6) returned 0x434 [0196.706] ioctlsocket (in: s=0x434, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.706] connect (s=0x434, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.55"), namelen=16) returned -1 [0196.707] WSAGetLastError () returned 10035 [0196.707] htonl (hostlong=0xc0a80038) returned 0x3800a8c0 [0196.707] socket (af=2, type=1, protocol=6) returned 0x438 [0196.707] ioctlsocket (in: s=0x438, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.707] connect (s=0x438, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.56"), namelen=16) returned -1 [0196.708] WSAGetLastError () returned 10035 [0196.708] htonl (hostlong=0xc0a80039) returned 0x3900a8c0 [0196.708] socket (af=2, type=1, protocol=6) returned 0x43c [0196.708] ioctlsocket (in: s=0x43c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.708] connect (s=0x43c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.57"), namelen=16) returned -1 [0196.709] WSAGetLastError () returned 10035 [0196.709] htonl (hostlong=0xc0a8003a) returned 0x3a00a8c0 [0196.709] socket (af=2, type=1, protocol=6) returned 0x440 [0196.709] ioctlsocket (in: s=0x440, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.709] connect (s=0x440, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.58"), namelen=16) returned -1 [0196.710] WSAGetLastError () returned 10035 [0196.710] htonl (hostlong=0xc0a8003b) returned 0x3b00a8c0 [0196.710] socket (af=2, type=1, protocol=6) returned 0x444 [0196.710] ioctlsocket (in: s=0x444, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.710] connect (s=0x444, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.59"), namelen=16) returned -1 [0196.711] WSAGetLastError () returned 10035 [0196.711] htonl (hostlong=0xc0a8003c) returned 0x3c00a8c0 [0196.711] socket (af=2, type=1, protocol=6) returned 0x448 [0196.711] ioctlsocket (in: s=0x448, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.711] connect (s=0x448, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.60"), namelen=16) returned -1 [0196.712] WSAGetLastError () returned 10035 [0196.712] htonl (hostlong=0xc0a8003d) returned 0x3d00a8c0 [0196.712] socket (af=2, type=1, protocol=6) returned 0x44c [0196.712] ioctlsocket (in: s=0x44c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.712] connect (s=0x44c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.61"), namelen=16) returned -1 [0196.713] WSAGetLastError () returned 10035 [0196.713] htonl (hostlong=0xc0a8003e) returned 0x3e00a8c0 [0196.713] socket (af=2, type=1, protocol=6) returned 0x450 [0196.713] ioctlsocket (in: s=0x450, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.713] connect (s=0x450, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.62"), namelen=16) returned -1 [0196.714] WSAGetLastError () returned 10035 [0196.714] htonl (hostlong=0xc0a8003f) returned 0x3f00a8c0 [0196.714] socket (af=2, type=1, protocol=6) returned 0x454 [0196.714] ioctlsocket (in: s=0x454, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.714] connect (s=0x454, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.63"), namelen=16) returned -1 [0196.715] WSAGetLastError () returned 10035 [0196.715] htonl (hostlong=0xc0a80040) returned 0x4000a8c0 [0196.715] socket (af=2, type=1, protocol=6) returned 0x458 [0196.715] ioctlsocket (in: s=0x458, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.715] connect (s=0x458, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.64"), namelen=16) returned -1 [0196.716] WSAGetLastError () returned 10035 [0196.716] htonl (hostlong=0xc0a80041) returned 0x4100a8c0 [0196.716] socket (af=2, type=1, protocol=6) returned 0x45c [0196.716] ioctlsocket (in: s=0x45c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.716] connect (s=0x45c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.65"), namelen=16) returned -1 [0196.717] WSAGetLastError () returned 10035 [0196.717] htonl (hostlong=0xc0a80042) returned 0x4200a8c0 [0196.717] socket (af=2, type=1, protocol=6) returned 0x460 [0196.717] ioctlsocket (in: s=0x460, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.717] connect (s=0x460, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.66"), namelen=16) returned -1 [0196.718] WSAGetLastError () returned 10035 [0196.718] htonl (hostlong=0xc0a80043) returned 0x4300a8c0 [0196.718] socket (af=2, type=1, protocol=6) returned 0x464 [0196.718] ioctlsocket (in: s=0x464, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.718] connect (s=0x464, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.67"), namelen=16) returned -1 [0196.719] WSAGetLastError () returned 10035 [0196.719] htonl (hostlong=0xc0a80044) returned 0x4400a8c0 [0196.719] socket (af=2, type=1, protocol=6) returned 0x468 [0196.719] ioctlsocket (in: s=0x468, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.719] connect (s=0x468, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.68"), namelen=16) returned -1 [0196.720] WSAGetLastError () returned 10035 [0196.720] htonl (hostlong=0xc0a80045) returned 0x4500a8c0 [0196.720] socket (af=2, type=1, protocol=6) returned 0x46c [0196.721] ioctlsocket (in: s=0x46c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.721] connect (s=0x46c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.69"), namelen=16) returned -1 [0196.721] WSAGetLastError () returned 10035 [0196.721] htonl (hostlong=0xc0a80046) returned 0x4600a8c0 [0196.721] socket (af=2, type=1, protocol=6) returned 0x470 [0196.722] ioctlsocket (in: s=0x470, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.722] connect (s=0x470, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.70"), namelen=16) returned -1 [0196.722] WSAGetLastError () returned 10035 [0196.722] htonl (hostlong=0xc0a80047) returned 0x4700a8c0 [0196.722] socket (af=2, type=1, protocol=6) returned 0x474 [0196.722] ioctlsocket (in: s=0x474, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.722] connect (s=0x474, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.71"), namelen=16) returned -1 [0196.841] WSAGetLastError () returned 10035 [0196.841] htonl (hostlong=0xc0a80048) returned 0x4800a8c0 [0196.841] socket (af=2, type=1, protocol=6) returned 0x478 [0196.842] ioctlsocket (in: s=0x478, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.842] connect (s=0x478, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.72"), namelen=16) returned -1 [0196.842] WSAGetLastError () returned 10035 [0196.842] htonl (hostlong=0xc0a80049) returned 0x4900a8c0 [0196.843] socket (af=2, type=1, protocol=6) returned 0x47c [0196.843] ioctlsocket (in: s=0x47c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.843] connect (s=0x47c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.73"), namelen=16) returned -1 [0196.843] WSAGetLastError () returned 10035 [0196.844] htonl (hostlong=0xc0a8004a) returned 0x4a00a8c0 [0196.844] socket (af=2, type=1, protocol=6) returned 0x480 [0196.844] ioctlsocket (in: s=0x480, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.844] connect (s=0x480, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.74"), namelen=16) returned -1 [0196.845] WSAGetLastError () returned 10035 [0196.845] htonl (hostlong=0xc0a8004b) returned 0x4b00a8c0 [0196.845] socket (af=2, type=1, protocol=6) returned 0x484 [0196.845] ioctlsocket (in: s=0x484, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.845] connect (s=0x484, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.75"), namelen=16) returned -1 [0196.846] WSAGetLastError () returned 10035 [0196.846] htonl (hostlong=0xc0a8004c) returned 0x4c00a8c0 [0196.846] socket (af=2, type=1, protocol=6) returned 0x488 [0196.846] ioctlsocket (in: s=0x488, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.846] connect (s=0x488, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.76"), namelen=16) returned -1 [0196.846] WSAGetLastError () returned 10035 [0196.847] htonl (hostlong=0xc0a8004d) returned 0x4d00a8c0 [0196.847] socket (af=2, type=1, protocol=6) returned 0x48c [0196.847] ioctlsocket (in: s=0x48c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.847] connect (s=0x48c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.77"), namelen=16) returned -1 [0196.847] WSAGetLastError () returned 10035 [0196.847] htonl (hostlong=0xc0a8004e) returned 0x4e00a8c0 [0196.847] socket (af=2, type=1, protocol=6) returned 0x490 [0196.848] ioctlsocket (in: s=0x490, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.848] connect (s=0x490, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.78"), namelen=16) returned -1 [0196.848] WSAGetLastError () returned 10035 [0196.848] htonl (hostlong=0xc0a8004f) returned 0x4f00a8c0 [0196.848] socket (af=2, type=1, protocol=6) returned 0x494 [0196.849] ioctlsocket (in: s=0x494, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.849] connect (s=0x494, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.79"), namelen=16) returned -1 [0196.849] WSAGetLastError () returned 10035 [0196.849] htonl (hostlong=0xc0a80050) returned 0x5000a8c0 [0196.849] socket (af=2, type=1, protocol=6) returned 0x498 [0196.850] ioctlsocket (in: s=0x498, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.850] connect (s=0x498, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.80"), namelen=16) returned -1 [0196.850] WSAGetLastError () returned 10035 [0196.850] htonl (hostlong=0xc0a80051) returned 0x5100a8c0 [0196.850] socket (af=2, type=1, protocol=6) returned 0x49c [0196.851] ioctlsocket (in: s=0x49c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.851] connect (s=0x49c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.81"), namelen=16) returned -1 [0196.851] WSAGetLastError () returned 10035 [0196.851] htonl (hostlong=0xc0a80052) returned 0x5200a8c0 [0196.851] socket (af=2, type=1, protocol=6) returned 0x4a0 [0196.852] ioctlsocket (in: s=0x4a0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.852] connect (s=0x4a0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.82"), namelen=16) returned -1 [0196.852] WSAGetLastError () returned 10035 [0196.852] htonl (hostlong=0xc0a80053) returned 0x5300a8c0 [0196.852] socket (af=2, type=1, protocol=6) returned 0x4a4 [0196.853] ioctlsocket (in: s=0x4a4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.853] connect (s=0x4a4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.83"), namelen=16) returned -1 [0196.853] WSAGetLastError () returned 10035 [0196.853] htonl (hostlong=0xc0a80054) returned 0x5400a8c0 [0196.853] socket (af=2, type=1, protocol=6) returned 0x4a8 [0196.854] ioctlsocket (in: s=0x4a8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.854] connect (s=0x4a8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.84"), namelen=16) returned -1 [0196.854] WSAGetLastError () returned 10035 [0196.854] htonl (hostlong=0xc0a80055) returned 0x5500a8c0 [0196.854] socket (af=2, type=1, protocol=6) returned 0x4ac [0196.855] ioctlsocket (in: s=0x4ac, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.855] connect (s=0x4ac, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.85"), namelen=16) returned -1 [0196.855] WSAGetLastError () returned 10035 [0196.855] htonl (hostlong=0xc0a80056) returned 0x5600a8c0 [0196.855] socket (af=2, type=1, protocol=6) returned 0x4b0 [0196.856] ioctlsocket (in: s=0x4b0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.856] connect (s=0x4b0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.86"), namelen=16) returned -1 [0196.856] WSAGetLastError () returned 10035 [0196.856] htonl (hostlong=0xc0a80057) returned 0x5700a8c0 [0196.856] socket (af=2, type=1, protocol=6) returned 0x4b4 [0196.856] ioctlsocket (in: s=0x4b4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.856] connect (s=0x4b4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.87"), namelen=16) returned -1 [0196.857] WSAGetLastError () returned 10035 [0196.857] htonl (hostlong=0xc0a80058) returned 0x5800a8c0 [0196.857] socket (af=2, type=1, protocol=6) returned 0x4b8 [0196.857] ioctlsocket (in: s=0x4b8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.858] connect (s=0x4b8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.88"), namelen=16) returned -1 [0196.858] WSAGetLastError () returned 10035 [0196.858] htonl (hostlong=0xc0a80059) returned 0x5900a8c0 [0196.858] socket (af=2, type=1, protocol=6) returned 0x4bc [0196.858] ioctlsocket (in: s=0x4bc, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.859] connect (s=0x4bc, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.89"), namelen=16) returned -1 [0196.859] WSAGetLastError () returned 10035 [0196.859] htonl (hostlong=0xc0a8005a) returned 0x5a00a8c0 [0196.859] socket (af=2, type=1, protocol=6) returned 0x4c0 [0196.859] ioctlsocket (in: s=0x4c0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.860] connect (s=0x4c0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.90"), namelen=16) returned -1 [0196.860] WSAGetLastError () returned 10035 [0196.860] htonl (hostlong=0xc0a8005b) returned 0x5b00a8c0 [0196.860] socket (af=2, type=1, protocol=6) returned 0x4c4 [0196.860] ioctlsocket (in: s=0x4c4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.861] connect (s=0x4c4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.91"), namelen=16) returned -1 [0196.862] WSAGetLastError () returned 10035 [0196.862] htonl (hostlong=0xc0a8005c) returned 0x5c00a8c0 [0196.862] socket (af=2, type=1, protocol=6) returned 0x4c8 [0196.862] ioctlsocket (in: s=0x4c8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.862] connect (s=0x4c8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.92"), namelen=16) returned -1 [0196.863] WSAGetLastError () returned 10035 [0196.863] htonl (hostlong=0xc0a8005d) returned 0x5d00a8c0 [0196.863] socket (af=2, type=1, protocol=6) returned 0x4cc [0196.863] ioctlsocket (in: s=0x4cc, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.863] connect (s=0x4cc, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.93"), namelen=16) returned -1 [0196.864] WSAGetLastError () returned 10035 [0196.864] htonl (hostlong=0xc0a8005e) returned 0x5e00a8c0 [0196.864] socket (af=2, type=1, protocol=6) returned 0x4d0 [0196.864] ioctlsocket (in: s=0x4d0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.864] connect (s=0x4d0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.94"), namelen=16) returned -1 [0196.865] WSAGetLastError () returned 10035 [0196.865] htonl (hostlong=0xc0a8005f) returned 0x5f00a8c0 [0196.865] socket (af=2, type=1, protocol=6) returned 0x4d4 [0196.865] ioctlsocket (in: s=0x4d4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.865] connect (s=0x4d4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.95"), namelen=16) returned -1 [0196.866] WSAGetLastError () returned 10035 [0196.866] htonl (hostlong=0xc0a80060) returned 0x6000a8c0 [0196.866] socket (af=2, type=1, protocol=6) returned 0x4d8 [0196.866] ioctlsocket (in: s=0x4d8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.866] connect (s=0x4d8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.96"), namelen=16) returned -1 [0196.867] WSAGetLastError () returned 10035 [0196.867] htonl (hostlong=0xc0a80061) returned 0x6100a8c0 [0196.867] socket (af=2, type=1, protocol=6) returned 0x4dc [0196.867] ioctlsocket (in: s=0x4dc, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.867] connect (s=0x4dc, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.97"), namelen=16) returned -1 [0196.868] WSAGetLastError () returned 10035 [0196.868] htonl (hostlong=0xc0a80062) returned 0x6200a8c0 [0196.868] socket (af=2, type=1, protocol=6) returned 0x4e0 [0196.868] ioctlsocket (in: s=0x4e0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.868] connect (s=0x4e0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.98"), namelen=16) returned -1 [0196.869] WSAGetLastError () returned 10035 [0196.869] htonl (hostlong=0xc0a80063) returned 0x6300a8c0 [0196.869] socket (af=2, type=1, protocol=6) returned 0x4e4 [0196.869] ioctlsocket (in: s=0x4e4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.869] connect (s=0x4e4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.99"), namelen=16) returned -1 [0196.870] WSAGetLastError () returned 10035 [0196.870] htonl (hostlong=0xc0a80064) returned 0x6400a8c0 [0196.870] socket (af=2, type=1, protocol=6) returned 0x4e8 [0196.870] ioctlsocket (in: s=0x4e8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.870] connect (s=0x4e8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.100"), namelen=16) returned -1 [0196.871] WSAGetLastError () returned 10035 [0196.871] htonl (hostlong=0xc0a80065) returned 0x6500a8c0 [0196.871] socket (af=2, type=1, protocol=6) returned 0x4ec [0196.871] ioctlsocket (in: s=0x4ec, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.871] connect (s=0x4ec, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.101"), namelen=16) returned -1 [0196.872] WSAGetLastError () returned 10035 [0196.872] htonl (hostlong=0xc0a80066) returned 0x6600a8c0 [0196.872] socket (af=2, type=1, protocol=6) returned 0x4f0 [0196.872] ioctlsocket (in: s=0x4f0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.872] connect (s=0x4f0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.102"), namelen=16) returned -1 [0196.872] WSAGetLastError () returned 10035 [0196.872] htonl (hostlong=0xc0a80067) returned 0x6700a8c0 [0196.873] socket (af=2, type=1, protocol=6) returned 0x4f4 [0196.873] ioctlsocket (in: s=0x4f4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.873] connect (s=0x4f4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.103"), namelen=16) returned -1 [0196.873] WSAGetLastError () returned 10035 [0196.873] htonl (hostlong=0xc0a80068) returned 0x6800a8c0 [0196.873] socket (af=2, type=1, protocol=6) returned 0x4f8 [0196.874] ioctlsocket (in: s=0x4f8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.874] connect (s=0x4f8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.104"), namelen=16) returned -1 [0196.874] WSAGetLastError () returned 10035 [0196.874] htonl (hostlong=0xc0a80069) returned 0x6900a8c0 [0196.874] socket (af=2, type=1, protocol=6) returned 0x4fc [0196.875] ioctlsocket (in: s=0x4fc, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.875] connect (s=0x4fc, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.105"), namelen=16) returned -1 [0196.875] WSAGetLastError () returned 10035 [0196.875] htonl (hostlong=0xc0a8006a) returned 0x6a00a8c0 [0196.875] socket (af=2, type=1, protocol=6) returned 0x500 [0196.876] ioctlsocket (in: s=0x500, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.876] connect (s=0x500, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.106"), namelen=16) returned -1 [0196.876] WSAGetLastError () returned 10035 [0196.876] htonl (hostlong=0xc0a8006b) returned 0x6b00a8c0 [0196.876] socket (af=2, type=1, protocol=6) returned 0x504 [0196.877] ioctlsocket (in: s=0x504, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.877] connect (s=0x504, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.107"), namelen=16) returned -1 [0196.877] WSAGetLastError () returned 10035 [0196.877] htonl (hostlong=0xc0a8006c) returned 0x6c00a8c0 [0196.877] socket (af=2, type=1, protocol=6) returned 0x508 [0196.877] ioctlsocket (in: s=0x508, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.878] connect (s=0x508, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.108"), namelen=16) returned -1 [0196.878] WSAGetLastError () returned 10035 [0196.878] htonl (hostlong=0xc0a8006d) returned 0x6d00a8c0 [0196.878] socket (af=2, type=1, protocol=6) returned 0x50c [0196.879] ioctlsocket (in: s=0x50c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.879] connect (s=0x50c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.109"), namelen=16) returned -1 [0196.879] WSAGetLastError () returned 10035 [0196.879] htonl (hostlong=0xc0a8006e) returned 0x6e00a8c0 [0196.879] socket (af=2, type=1, protocol=6) returned 0x510 [0196.880] ioctlsocket (in: s=0x510, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0196.880] connect (s=0x510, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.110"), namelen=16) returned -1 [0197.001] WSAGetLastError () returned 10035 [0197.001] htonl (hostlong=0xc0a8006f) returned 0x6f00a8c0 [0197.001] socket (af=2, type=1, protocol=6) returned 0x514 [0197.001] ioctlsocket (in: s=0x514, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.001] connect (s=0x514, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.111"), namelen=16) returned -1 [0197.002] WSAGetLastError () returned 10035 [0197.002] htonl (hostlong=0xc0a80070) returned 0x7000a8c0 [0197.002] socket (af=2, type=1, protocol=6) returned 0x518 [0197.003] ioctlsocket (in: s=0x518, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.003] connect (s=0x518, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.112"), namelen=16) returned -1 [0197.003] WSAGetLastError () returned 10035 [0197.003] htonl (hostlong=0xc0a80071) returned 0x7100a8c0 [0197.003] socket (af=2, type=1, protocol=6) returned 0x51c [0197.004] ioctlsocket (in: s=0x51c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.004] connect (s=0x51c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.113"), namelen=16) returned -1 [0197.004] WSAGetLastError () returned 10035 [0197.004] htonl (hostlong=0xc0a80072) returned 0x7200a8c0 [0197.004] socket (af=2, type=1, protocol=6) returned 0x520 [0197.005] ioctlsocket (in: s=0x520, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.005] connect (s=0x520, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.114"), namelen=16) returned -1 [0197.005] WSAGetLastError () returned 10035 [0197.005] htonl (hostlong=0xc0a80073) returned 0x7300a8c0 [0197.005] socket (af=2, type=1, protocol=6) returned 0x524 [0197.006] ioctlsocket (in: s=0x524, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.006] connect (s=0x524, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.115"), namelen=16) returned -1 [0197.006] WSAGetLastError () returned 10035 [0197.006] htonl (hostlong=0xc0a80074) returned 0x7400a8c0 [0197.006] socket (af=2, type=1, protocol=6) returned 0x528 [0197.007] ioctlsocket (in: s=0x528, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.007] connect (s=0x528, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.116"), namelen=16) returned -1 [0197.007] WSAGetLastError () returned 10035 [0197.007] htonl (hostlong=0xc0a80075) returned 0x7500a8c0 [0197.007] socket (af=2, type=1, protocol=6) returned 0x52c [0197.007] ioctlsocket (in: s=0x52c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.008] connect (s=0x52c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.117"), namelen=16) returned -1 [0197.008] WSAGetLastError () returned 10035 [0197.008] htonl (hostlong=0xc0a80076) returned 0x7600a8c0 [0197.008] socket (af=2, type=1, protocol=6) returned 0x530 [0197.008] ioctlsocket (in: s=0x530, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.009] connect (s=0x530, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.118"), namelen=16) returned -1 [0197.009] WSAGetLastError () returned 10035 [0197.009] htonl (hostlong=0xc0a80077) returned 0x7700a8c0 [0197.009] socket (af=2, type=1, protocol=6) returned 0x534 [0197.009] ioctlsocket (in: s=0x534, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.010] connect (s=0x534, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.119"), namelen=16) returned -1 [0197.010] WSAGetLastError () returned 10035 [0197.010] htonl (hostlong=0xc0a80078) returned 0x7800a8c0 [0197.010] socket (af=2, type=1, protocol=6) returned 0x538 [0197.010] ioctlsocket (in: s=0x538, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.010] connect (s=0x538, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.120"), namelen=16) returned -1 [0197.011] WSAGetLastError () returned 10035 [0197.011] htonl (hostlong=0xc0a80079) returned 0x7900a8c0 [0197.011] socket (af=2, type=1, protocol=6) returned 0x53c [0197.011] ioctlsocket (in: s=0x53c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.011] connect (s=0x53c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.121"), namelen=16) returned -1 [0197.012] WSAGetLastError () returned 10035 [0197.012] htonl (hostlong=0xc0a8007a) returned 0x7a00a8c0 [0197.012] socket (af=2, type=1, protocol=6) returned 0x540 [0197.012] ioctlsocket (in: s=0x540, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.012] connect (s=0x540, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.122"), namelen=16) returned -1 [0197.013] WSAGetLastError () returned 10035 [0197.013] htonl (hostlong=0xc0a8007b) returned 0x7b00a8c0 [0197.013] socket (af=2, type=1, protocol=6) returned 0x544 [0197.013] ioctlsocket (in: s=0x544, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.013] connect (s=0x544, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.123"), namelen=16) returned -1 [0197.014] WSAGetLastError () returned 10035 [0197.014] htonl (hostlong=0xc0a8007c) returned 0x7c00a8c0 [0197.014] socket (af=2, type=1, protocol=6) returned 0x548 [0197.014] ioctlsocket (in: s=0x548, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.014] connect (s=0x548, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.124"), namelen=16) returned -1 [0197.015] WSAGetLastError () returned 10035 [0197.015] htonl (hostlong=0xc0a8007d) returned 0x7d00a8c0 [0197.015] socket (af=2, type=1, protocol=6) returned 0x54c [0197.015] ioctlsocket (in: s=0x54c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.015] connect (s=0x54c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.125"), namelen=16) returned -1 [0197.016] WSAGetLastError () returned 10035 [0197.016] htonl (hostlong=0xc0a8007e) returned 0x7e00a8c0 [0197.016] socket (af=2, type=1, protocol=6) returned 0x550 [0197.016] ioctlsocket (in: s=0x550, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.016] connect (s=0x550, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.126"), namelen=16) returned -1 [0197.017] WSAGetLastError () returned 10035 [0197.017] htonl (hostlong=0xc0a8007f) returned 0x7f00a8c0 [0197.017] socket (af=2, type=1, protocol=6) returned 0x554 [0197.017] ioctlsocket (in: s=0x554, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.017] connect (s=0x554, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.127"), namelen=16) returned -1 [0197.018] WSAGetLastError () returned 10035 [0197.018] htonl (hostlong=0xc0a80080) returned 0x8000a8c0 [0197.018] socket (af=2, type=1, protocol=6) returned 0x558 [0197.018] ioctlsocket (in: s=0x558, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.018] connect (s=0x558, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.128"), namelen=16) returned -1 [0197.019] WSAGetLastError () returned 10035 [0197.019] htonl (hostlong=0xc0a80081) returned 0x8100a8c0 [0197.019] socket (af=2, type=1, protocol=6) returned 0x55c [0197.019] ioctlsocket (in: s=0x55c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.019] connect (s=0x55c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.129"), namelen=16) returned -1 [0197.020] WSAGetLastError () returned 10035 [0197.020] htonl (hostlong=0xc0a80082) returned 0x8200a8c0 [0197.020] socket (af=2, type=1, protocol=6) returned 0x560 [0197.020] ioctlsocket (in: s=0x560, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.020] connect (s=0x560, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.130"), namelen=16) returned -1 [0197.021] WSAGetLastError () returned 10035 [0197.021] htonl (hostlong=0xc0a80083) returned 0x8300a8c0 [0197.021] socket (af=2, type=1, protocol=6) returned 0x564 [0197.021] ioctlsocket (in: s=0x564, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.021] connect (s=0x564, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.131"), namelen=16) returned -1 [0197.023] WSAGetLastError () returned 10035 [0197.023] htonl (hostlong=0xc0a80084) returned 0x8400a8c0 [0197.023] socket (af=2, type=1, protocol=6) returned 0x568 [0197.023] ioctlsocket (in: s=0x568, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.024] connect (s=0x568, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.132"), namelen=16) returned -1 [0197.024] WSAGetLastError () returned 10035 [0197.024] htonl (hostlong=0xc0a80085) returned 0x8500a8c0 [0197.024] socket (af=2, type=1, protocol=6) returned 0x56c [0197.024] ioctlsocket (in: s=0x56c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.024] connect (s=0x56c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.133"), namelen=16) returned -1 [0197.025] WSAGetLastError () returned 10035 [0197.025] htonl (hostlong=0xc0a80086) returned 0x8600a8c0 [0197.025] socket (af=2, type=1, protocol=6) returned 0x570 [0197.025] ioctlsocket (in: s=0x570, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.025] connect (s=0x570, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.134"), namelen=16) returned -1 [0197.026] WSAGetLastError () returned 10035 [0197.026] htonl (hostlong=0xc0a80087) returned 0x8700a8c0 [0197.026] socket (af=2, type=1, protocol=6) returned 0x574 [0197.026] ioctlsocket (in: s=0x574, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.026] connect (s=0x574, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.135"), namelen=16) returned -1 [0197.027] WSAGetLastError () returned 10035 [0197.027] htonl (hostlong=0xc0a80088) returned 0x8800a8c0 [0197.027] socket (af=2, type=1, protocol=6) returned 0x578 [0197.027] ioctlsocket (in: s=0x578, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.027] connect (s=0x578, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.136"), namelen=16) returned -1 [0197.028] WSAGetLastError () returned 10035 [0197.028] htonl (hostlong=0xc0a80089) returned 0x8900a8c0 [0197.028] socket (af=2, type=1, protocol=6) returned 0x57c [0197.028] ioctlsocket (in: s=0x57c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.028] connect (s=0x57c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.137"), namelen=16) returned -1 [0197.029] WSAGetLastError () returned 10035 [0197.029] htonl (hostlong=0xc0a8008a) returned 0x8a00a8c0 [0197.029] socket (af=2, type=1, protocol=6) returned 0x580 [0197.029] ioctlsocket (in: s=0x580, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.029] connect (s=0x580, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.138"), namelen=16) returned -1 [0197.030] WSAGetLastError () returned 10035 [0197.030] htonl (hostlong=0xc0a8008b) returned 0x8b00a8c0 [0197.030] socket (af=2, type=1, protocol=6) returned 0x584 [0197.030] ioctlsocket (in: s=0x584, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.030] connect (s=0x584, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.139"), namelen=16) returned -1 [0197.031] WSAGetLastError () returned 10035 [0197.031] htonl (hostlong=0xc0a8008c) returned 0x8c00a8c0 [0197.031] socket (af=2, type=1, protocol=6) returned 0x588 [0197.031] ioctlsocket (in: s=0x588, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.031] connect (s=0x588, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.140"), namelen=16) returned -1 [0197.032] WSAGetLastError () returned 10035 [0197.032] htonl (hostlong=0xc0a8008d) returned 0x8d00a8c0 [0197.032] socket (af=2, type=1, protocol=6) returned 0x58c [0197.032] ioctlsocket (in: s=0x58c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.032] connect (s=0x58c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.141"), namelen=16) returned -1 [0197.033] WSAGetLastError () returned 10035 [0197.033] htonl (hostlong=0xc0a8008e) returned 0x8e00a8c0 [0197.033] socket (af=2, type=1, protocol=6) returned 0x590 [0197.033] ioctlsocket (in: s=0x590, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.034] connect (s=0x590, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.142"), namelen=16) returned -1 [0197.034] WSAGetLastError () returned 10035 [0197.034] htonl (hostlong=0xc0a8008f) returned 0x8f00a8c0 [0197.034] socket (af=2, type=1, protocol=6) returned 0x594 [0197.034] ioctlsocket (in: s=0x594, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.034] connect (s=0x594, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.143"), namelen=16) returned -1 [0197.035] WSAGetLastError () returned 10035 [0197.035] htonl (hostlong=0xc0a80090) returned 0x9000a8c0 [0197.035] socket (af=2, type=1, protocol=6) returned 0x598 [0197.036] ioctlsocket (in: s=0x598, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.036] connect (s=0x598, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.144"), namelen=16) returned -1 [0197.036] WSAGetLastError () returned 10035 [0197.036] htonl (hostlong=0xc0a80091) returned 0x9100a8c0 [0197.036] socket (af=2, type=1, protocol=6) returned 0x59c [0197.036] ioctlsocket (in: s=0x59c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.037] connect (s=0x59c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.145"), namelen=16) returned -1 [0197.037] WSAGetLastError () returned 10035 [0197.037] htonl (hostlong=0xc0a80092) returned 0x9200a8c0 [0197.037] socket (af=2, type=1, protocol=6) returned 0x5a0 [0197.037] ioctlsocket (in: s=0x5a0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.037] connect (s=0x5a0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.146"), namelen=16) returned -1 [0197.038] WSAGetLastError () returned 10035 [0197.038] htonl (hostlong=0xc0a80093) returned 0x9300a8c0 [0197.038] socket (af=2, type=1, protocol=6) returned 0x5a4 [0197.038] ioctlsocket (in: s=0x5a4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.038] connect (s=0x5a4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.147"), namelen=16) returned -1 [0197.039] WSAGetLastError () returned 10035 [0197.039] htonl (hostlong=0xc0a80094) returned 0x9400a8c0 [0197.039] socket (af=2, type=1, protocol=6) returned 0x5a8 [0197.039] ioctlsocket (in: s=0x5a8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.039] connect (s=0x5a8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.148"), namelen=16) returned -1 [0197.040] WSAGetLastError () returned 10035 [0197.040] htonl (hostlong=0xc0a80095) returned 0x9500a8c0 [0197.040] socket (af=2, type=1, protocol=6) returned 0x5ac [0197.040] ioctlsocket (in: s=0x5ac, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.040] connect (s=0x5ac, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.149"), namelen=16) returned -1 [0197.041] WSAGetLastError () returned 10035 [0197.041] htonl (hostlong=0xc0a80096) returned 0x9600a8c0 [0197.041] socket (af=2, type=1, protocol=6) returned 0x5b0 [0197.041] ioctlsocket (in: s=0x5b0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.041] connect (s=0x5b0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.150"), namelen=16) returned -1 [0197.042] WSAGetLastError () returned 10035 [0197.042] htonl (hostlong=0xc0a80097) returned 0x9700a8c0 [0197.042] socket (af=2, type=1, protocol=6) returned 0x5b4 [0197.042] ioctlsocket (in: s=0x5b4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.042] connect (s=0x5b4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.151"), namelen=16) returned -1 [0197.043] WSAGetLastError () returned 10035 [0197.043] htonl (hostlong=0xc0a80098) returned 0x9800a8c0 [0197.043] socket (af=2, type=1, protocol=6) returned 0x5b8 [0197.043] ioctlsocket (in: s=0x5b8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.043] connect (s=0x5b8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.152"), namelen=16) returned -1 [0197.101] WSAGetLastError () returned 10035 [0197.101] htonl (hostlong=0xc0a80099) returned 0x9900a8c0 [0197.101] socket (af=2, type=1, protocol=6) returned 0x5bc [0197.101] ioctlsocket (in: s=0x5bc, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.101] connect (s=0x5bc, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.153"), namelen=16) returned -1 [0197.102] WSAGetLastError () returned 10035 [0197.102] htonl (hostlong=0xc0a8009a) returned 0x9a00a8c0 [0197.102] socket (af=2, type=1, protocol=6) returned 0x5c0 [0197.102] ioctlsocket (in: s=0x5c0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.102] connect (s=0x5c0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.154"), namelen=16) returned -1 [0197.103] WSAGetLastError () returned 10035 [0197.103] htonl (hostlong=0xc0a8009b) returned 0x9b00a8c0 [0197.103] socket (af=2, type=1, protocol=6) returned 0x5c4 [0197.103] ioctlsocket (in: s=0x5c4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.103] connect (s=0x5c4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.155"), namelen=16) returned -1 [0197.104] WSAGetLastError () returned 10035 [0197.104] htonl (hostlong=0xc0a8009c) returned 0x9c00a8c0 [0197.104] socket (af=2, type=1, protocol=6) returned 0x5c8 [0197.104] ioctlsocket (in: s=0x5c8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.104] connect (s=0x5c8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.156"), namelen=16) returned -1 [0197.105] WSAGetLastError () returned 10035 [0197.105] htonl (hostlong=0xc0a8009d) returned 0x9d00a8c0 [0197.105] socket (af=2, type=1, protocol=6) returned 0x5cc [0197.105] ioctlsocket (in: s=0x5cc, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.105] connect (s=0x5cc, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.157"), namelen=16) returned -1 [0197.106] WSAGetLastError () returned 10035 [0197.106] htonl (hostlong=0xc0a8009e) returned 0x9e00a8c0 [0197.106] socket (af=2, type=1, protocol=6) returned 0x5d0 [0197.106] ioctlsocket (in: s=0x5d0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.106] connect (s=0x5d0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.158"), namelen=16) returned -1 [0197.107] WSAGetLastError () returned 10035 [0197.107] htonl (hostlong=0xc0a8009f) returned 0x9f00a8c0 [0197.107] socket (af=2, type=1, protocol=6) returned 0x5d4 [0197.107] ioctlsocket (in: s=0x5d4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.107] connect (s=0x5d4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.159"), namelen=16) returned -1 [0197.108] WSAGetLastError () returned 10035 [0197.108] htonl (hostlong=0xc0a800a0) returned 0xa000a8c0 [0197.108] socket (af=2, type=1, protocol=6) returned 0x5d8 [0197.108] ioctlsocket (in: s=0x5d8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.108] connect (s=0x5d8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.160"), namelen=16) returned -1 [0197.109] WSAGetLastError () returned 10035 [0197.109] htonl (hostlong=0xc0a800a1) returned 0xa100a8c0 [0197.109] socket (af=2, type=1, protocol=6) returned 0x5dc [0197.109] ioctlsocket (in: s=0x5dc, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.109] connect (s=0x5dc, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.161"), namelen=16) returned -1 [0197.110] WSAGetLastError () returned 10035 [0197.110] htonl (hostlong=0xc0a800a2) returned 0xa200a8c0 [0197.110] socket (af=2, type=1, protocol=6) returned 0x5e0 [0197.110] ioctlsocket (in: s=0x5e0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.110] connect (s=0x5e0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.162"), namelen=16) returned -1 [0197.111] WSAGetLastError () returned 10035 [0197.111] htonl (hostlong=0xc0a800a3) returned 0xa300a8c0 [0197.111] socket (af=2, type=1, protocol=6) returned 0x5e4 [0197.111] ioctlsocket (in: s=0x5e4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.111] connect (s=0x5e4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.163"), namelen=16) returned -1 [0197.112] WSAGetLastError () returned 10035 [0197.112] htonl (hostlong=0xc0a800a4) returned 0xa400a8c0 [0197.112] socket (af=2, type=1, protocol=6) returned 0x5e8 [0197.112] ioctlsocket (in: s=0x5e8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.112] connect (s=0x5e8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.164"), namelen=16) returned -1 [0197.113] WSAGetLastError () returned 10035 [0197.113] htonl (hostlong=0xc0a800a5) returned 0xa500a8c0 [0197.113] socket (af=2, type=1, protocol=6) returned 0x5ec [0197.113] ioctlsocket (in: s=0x5ec, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.113] connect (s=0x5ec, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.165"), namelen=16) returned -1 [0197.114] WSAGetLastError () returned 10035 [0197.114] htonl (hostlong=0xc0a800a6) returned 0xa600a8c0 [0197.114] socket (af=2, type=1, protocol=6) returned 0x5f0 [0197.114] ioctlsocket (in: s=0x5f0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.114] connect (s=0x5f0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.166"), namelen=16) returned -1 [0197.115] WSAGetLastError () returned 10035 [0197.115] htonl (hostlong=0xc0a800a7) returned 0xa700a8c0 [0197.115] socket (af=2, type=1, protocol=6) returned 0x5f4 [0197.115] ioctlsocket (in: s=0x5f4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.115] connect (s=0x5f4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.167"), namelen=16) returned -1 [0197.116] WSAGetLastError () returned 10035 [0197.116] htonl (hostlong=0xc0a800a8) returned 0xa800a8c0 [0197.116] socket (af=2, type=1, protocol=6) returned 0x5f8 [0197.116] ioctlsocket (in: s=0x5f8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.116] connect (s=0x5f8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.168"), namelen=16) returned -1 [0197.117] WSAGetLastError () returned 10035 [0197.117] htonl (hostlong=0xc0a800a9) returned 0xa900a8c0 [0197.117] socket (af=2, type=1, protocol=6) returned 0x5fc [0197.118] ioctlsocket (in: s=0x5fc, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.118] connect (s=0x5fc, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.169"), namelen=16) returned -1 [0197.118] WSAGetLastError () returned 10035 [0197.118] htonl (hostlong=0xc0a800aa) returned 0xaa00a8c0 [0197.118] socket (af=2, type=1, protocol=6) returned 0x600 [0197.119] ioctlsocket (in: s=0x600, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.119] connect (s=0x600, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.170"), namelen=16) returned -1 [0197.119] WSAGetLastError () returned 10035 [0197.119] htonl (hostlong=0xc0a800ab) returned 0xab00a8c0 [0197.119] socket (af=2, type=1, protocol=6) returned 0x604 [0197.120] ioctlsocket (in: s=0x604, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.120] connect (s=0x604, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.171"), namelen=16) returned -1 [0197.120] WSAGetLastError () returned 10035 [0197.120] htonl (hostlong=0xc0a800ac) returned 0xac00a8c0 [0197.120] socket (af=2, type=1, protocol=6) returned 0x608 [0197.121] ioctlsocket (in: s=0x608, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.121] connect (s=0x608, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.172"), namelen=16) returned -1 [0197.121] WSAGetLastError () returned 10035 [0197.121] htonl (hostlong=0xc0a800ad) returned 0xad00a8c0 [0197.121] socket (af=2, type=1, protocol=6) returned 0x60c [0197.121] ioctlsocket (in: s=0x60c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.121] connect (s=0x60c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.173"), namelen=16) returned -1 [0197.122] WSAGetLastError () returned 10035 [0197.122] htonl (hostlong=0xc0a800ae) returned 0xae00a8c0 [0197.122] socket (af=2, type=1, protocol=6) returned 0x610 [0197.122] ioctlsocket (in: s=0x610, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.123] connect (s=0x610, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.174"), namelen=16) returned -1 [0197.123] WSAGetLastError () returned 10035 [0197.123] htonl (hostlong=0xc0a800af) returned 0xaf00a8c0 [0197.123] socket (af=2, type=1, protocol=6) returned 0x614 [0197.123] ioctlsocket (in: s=0x614, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.124] connect (s=0x614, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.175"), namelen=16) returned -1 [0197.124] WSAGetLastError () returned 10035 [0197.124] htonl (hostlong=0xc0a800b0) returned 0xb000a8c0 [0197.124] socket (af=2, type=1, protocol=6) returned 0x618 [0197.125] ioctlsocket (in: s=0x618, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.125] connect (s=0x618, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.176"), namelen=16) returned -1 [0197.126] WSAGetLastError () returned 10035 [0197.126] htonl (hostlong=0xc0a800b1) returned 0xb100a8c0 [0197.126] socket (af=2, type=1, protocol=6) returned 0x61c [0197.126] ioctlsocket (in: s=0x61c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.126] connect (s=0x61c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.177"), namelen=16) returned -1 [0197.127] WSAGetLastError () returned 10035 [0197.127] htonl (hostlong=0xc0a800b2) returned 0xb200a8c0 [0197.127] socket (af=2, type=1, protocol=6) returned 0x620 [0197.127] ioctlsocket (in: s=0x620, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.127] connect (s=0x620, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.178"), namelen=16) returned -1 [0197.128] WSAGetLastError () returned 10035 [0197.128] htonl (hostlong=0xc0a800b3) returned 0xb300a8c0 [0197.128] socket (af=2, type=1, protocol=6) returned 0x624 [0197.128] ioctlsocket (in: s=0x624, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.128] connect (s=0x624, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.179"), namelen=16) returned -1 [0197.129] WSAGetLastError () returned 10035 [0197.129] htonl (hostlong=0xc0a800b4) returned 0xb400a8c0 [0197.129] socket (af=2, type=1, protocol=6) returned 0x628 [0197.129] ioctlsocket (in: s=0x628, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.129] connect (s=0x628, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.180"), namelen=16) returned -1 [0197.130] WSAGetLastError () returned 10035 [0197.130] htonl (hostlong=0xc0a800b5) returned 0xb500a8c0 [0197.130] socket (af=2, type=1, protocol=6) returned 0x62c [0197.130] ioctlsocket (in: s=0x62c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.130] connect (s=0x62c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.181"), namelen=16) returned -1 [0197.131] WSAGetLastError () returned 10035 [0197.131] htonl (hostlong=0xc0a800b6) returned 0xb600a8c0 [0197.131] socket (af=2, type=1, protocol=6) returned 0x630 [0197.131] ioctlsocket (in: s=0x630, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.131] connect (s=0x630, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.182"), namelen=16) returned -1 [0197.132] WSAGetLastError () returned 10035 [0197.132] htonl (hostlong=0xc0a800b7) returned 0xb700a8c0 [0197.132] socket (af=2, type=1, protocol=6) returned 0x634 [0197.132] ioctlsocket (in: s=0x634, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.132] connect (s=0x634, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.183"), namelen=16) returned -1 [0197.133] WSAGetLastError () returned 10035 [0197.133] htonl (hostlong=0xc0a800b8) returned 0xb800a8c0 [0197.133] socket (af=2, type=1, protocol=6) returned 0x638 [0197.133] ioctlsocket (in: s=0x638, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.133] connect (s=0x638, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.184"), namelen=16) returned -1 [0197.134] WSAGetLastError () returned 10035 [0197.134] htonl (hostlong=0xc0a800b9) returned 0xb900a8c0 [0197.134] socket (af=2, type=1, protocol=6) returned 0x63c [0197.134] ioctlsocket (in: s=0x63c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.134] connect (s=0x63c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.185"), namelen=16) returned -1 [0197.134] WSAGetLastError () returned 10035 [0197.135] htonl (hostlong=0xc0a800ba) returned 0xba00a8c0 [0197.135] socket (af=2, type=1, protocol=6) returned 0x640 [0197.135] ioctlsocket (in: s=0x640, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.135] connect (s=0x640, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.186"), namelen=16) returned -1 [0197.136] WSAGetLastError () returned 10035 [0197.136] htonl (hostlong=0xc0a800bb) returned 0xbb00a8c0 [0197.136] socket (af=2, type=1, protocol=6) returned 0x644 [0197.136] ioctlsocket (in: s=0x644, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.136] connect (s=0x644, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.187"), namelen=16) returned -1 [0197.136] WSAGetLastError () returned 10035 [0197.136] htonl (hostlong=0xc0a800bc) returned 0xbc00a8c0 [0197.137] socket (af=2, type=1, protocol=6) returned 0x648 [0197.137] ioctlsocket (in: s=0x648, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.137] connect (s=0x648, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.188"), namelen=16) returned -1 [0197.137] WSAGetLastError () returned 10035 [0197.137] htonl (hostlong=0xc0a800bd) returned 0xbd00a8c0 [0197.137] socket (af=2, type=1, protocol=6) returned 0x64c [0197.138] ioctlsocket (in: s=0x64c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.138] connect (s=0x64c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.189"), namelen=16) returned -1 [0197.138] WSAGetLastError () returned 10035 [0197.138] htonl (hostlong=0xc0a800be) returned 0xbe00a8c0 [0197.138] socket (af=2, type=1, protocol=6) returned 0x650 [0197.138] ioctlsocket (in: s=0x650, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.139] connect (s=0x650, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.190"), namelen=16) returned -1 [0197.139] WSAGetLastError () returned 10035 [0197.139] htonl (hostlong=0xc0a800bf) returned 0xbf00a8c0 [0197.139] socket (af=2, type=1, protocol=6) returned 0x654 [0197.139] ioctlsocket (in: s=0x654, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.139] connect (s=0x654, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.191"), namelen=16) returned -1 [0197.140] WSAGetLastError () returned 10035 [0197.140] htonl (hostlong=0xc0a800c0) returned 0xc000a8c0 [0197.140] socket (af=2, type=1, protocol=6) returned 0x658 [0197.140] ioctlsocket (in: s=0x658, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.140] connect (s=0x658, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.192"), namelen=16) returned -1 [0197.141] WSAGetLastError () returned 10035 [0197.141] htonl (hostlong=0xc0a800c1) returned 0xc100a8c0 [0197.141] socket (af=2, type=1, protocol=6) returned 0x65c [0197.141] ioctlsocket (in: s=0x65c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.141] connect (s=0x65c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.193"), namelen=16) returned -1 [0197.229] WSAGetLastError () returned 10035 [0197.229] htonl (hostlong=0xc0a800c2) returned 0xc200a8c0 [0197.229] socket (af=2, type=1, protocol=6) returned 0x660 [0197.229] ioctlsocket (in: s=0x660, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.229] connect (s=0x660, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.194"), namelen=16) returned -1 [0197.230] WSAGetLastError () returned 10035 [0197.230] htonl (hostlong=0xc0a800c3) returned 0xc300a8c0 [0197.230] socket (af=2, type=1, protocol=6) returned 0x664 [0197.230] ioctlsocket (in: s=0x664, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.231] connect (s=0x664, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.195"), namelen=16) returned -1 [0197.231] WSAGetLastError () returned 10035 [0197.231] htonl (hostlong=0xc0a800c4) returned 0xc400a8c0 [0197.231] socket (af=2, type=1, protocol=6) returned 0x668 [0197.232] ioctlsocket (in: s=0x668, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.232] connect (s=0x668, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.196"), namelen=16) returned -1 [0197.232] WSAGetLastError () returned 10035 [0197.232] htonl (hostlong=0xc0a800c5) returned 0xc500a8c0 [0197.232] socket (af=2, type=1, protocol=6) returned 0x66c [0197.233] ioctlsocket (in: s=0x66c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.233] connect (s=0x66c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.197"), namelen=16) returned -1 [0197.233] WSAGetLastError () returned 10035 [0197.233] htonl (hostlong=0xc0a800c6) returned 0xc600a8c0 [0197.234] socket (af=2, type=1, protocol=6) returned 0x670 [0197.234] ioctlsocket (in: s=0x670, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.234] connect (s=0x670, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.198"), namelen=16) returned -1 [0197.235] WSAGetLastError () returned 10035 [0197.235] htonl (hostlong=0xc0a800c7) returned 0xc700a8c0 [0197.235] socket (af=2, type=1, protocol=6) returned 0x674 [0197.235] ioctlsocket (in: s=0x674, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.235] connect (s=0x674, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.199"), namelen=16) returned -1 [0197.236] WSAGetLastError () returned 10035 [0197.236] htonl (hostlong=0xc0a800c8) returned 0xc800a8c0 [0197.236] socket (af=2, type=1, protocol=6) returned 0x678 [0197.246] ioctlsocket (in: s=0x678, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.246] connect (s=0x678, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.200"), namelen=16) returned -1 [0197.246] WSAGetLastError () returned 10035 [0197.246] htonl (hostlong=0xc0a800c9) returned 0xc900a8c0 [0197.246] socket (af=2, type=1, protocol=6) returned 0x67c [0197.247] ioctlsocket (in: s=0x67c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.247] connect (s=0x67c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.201"), namelen=16) returned -1 [0197.248] WSAGetLastError () returned 10035 [0197.248] htonl (hostlong=0xc0a800ca) returned 0xca00a8c0 [0197.248] socket (af=2, type=1, protocol=6) returned 0x680 [0197.248] ioctlsocket (in: s=0x680, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.248] connect (s=0x680, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.202"), namelen=16) returned -1 [0197.249] WSAGetLastError () returned 10035 [0197.249] htonl (hostlong=0xc0a800cb) returned 0xcb00a8c0 [0197.249] socket (af=2, type=1, protocol=6) returned 0x684 [0197.249] ioctlsocket (in: s=0x684, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.249] connect (s=0x684, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.203"), namelen=16) returned -1 [0197.250] WSAGetLastError () returned 10035 [0197.250] htonl (hostlong=0xc0a800cc) returned 0xcc00a8c0 [0197.250] socket (af=2, type=1, protocol=6) returned 0x688 [0197.250] ioctlsocket (in: s=0x688, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.250] connect (s=0x688, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.204"), namelen=16) returned -1 [0197.251] WSAGetLastError () returned 10035 [0197.251] htonl (hostlong=0xc0a800cd) returned 0xcd00a8c0 [0197.251] socket (af=2, type=1, protocol=6) returned 0x68c [0197.251] ioctlsocket (in: s=0x68c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.251] connect (s=0x68c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.205"), namelen=16) returned -1 [0197.252] WSAGetLastError () returned 10035 [0197.252] htonl (hostlong=0xc0a800ce) returned 0xce00a8c0 [0197.252] socket (af=2, type=1, protocol=6) returned 0x690 [0197.252] ioctlsocket (in: s=0x690, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.252] connect (s=0x690, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.206"), namelen=16) returned -1 [0197.253] WSAGetLastError () returned 10035 [0197.253] htonl (hostlong=0xc0a800cf) returned 0xcf00a8c0 [0197.253] socket (af=2, type=1, protocol=6) returned 0x694 [0197.253] ioctlsocket (in: s=0x694, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.253] connect (s=0x694, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.207"), namelen=16) returned -1 [0197.254] WSAGetLastError () returned 10035 [0197.254] htonl (hostlong=0xc0a800d0) returned 0xd000a8c0 [0197.254] socket (af=2, type=1, protocol=6) returned 0x698 [0197.255] ioctlsocket (in: s=0x698, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.255] connect (s=0x698, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.208"), namelen=16) returned -1 [0197.256] WSAGetLastError () returned 10035 [0197.256] htonl (hostlong=0xc0a800d1) returned 0xd100a8c0 [0197.256] socket (af=2, type=1, protocol=6) returned 0x69c [0197.256] ioctlsocket (in: s=0x69c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.256] connect (s=0x69c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.209"), namelen=16) returned -1 [0197.257] WSAGetLastError () returned 10035 [0197.257] htonl (hostlong=0xc0a800d2) returned 0xd200a8c0 [0197.257] socket (af=2, type=1, protocol=6) returned 0x6a0 [0197.257] ioctlsocket (in: s=0x6a0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.257] connect (s=0x6a0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.210"), namelen=16) returned -1 [0197.258] WSAGetLastError () returned 10035 [0197.258] htonl (hostlong=0xc0a800d3) returned 0xd300a8c0 [0197.258] socket (af=2, type=1, protocol=6) returned 0x6a4 [0197.258] ioctlsocket (in: s=0x6a4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.258] connect (s=0x6a4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.211"), namelen=16) returned -1 [0197.259] WSAGetLastError () returned 10035 [0197.259] htonl (hostlong=0xc0a800d4) returned 0xd400a8c0 [0197.259] socket (af=2, type=1, protocol=6) returned 0x6a8 [0197.259] ioctlsocket (in: s=0x6a8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.259] connect (s=0x6a8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.212"), namelen=16) returned -1 [0197.260] WSAGetLastError () returned 10035 [0197.260] htonl (hostlong=0xc0a800d5) returned 0xd500a8c0 [0197.260] socket (af=2, type=1, protocol=6) returned 0x6ac [0197.260] ioctlsocket (in: s=0x6ac, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.260] connect (s=0x6ac, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.213"), namelen=16) returned -1 [0197.261] WSAGetLastError () returned 10035 [0197.261] htonl (hostlong=0xc0a800d6) returned 0xd600a8c0 [0197.261] socket (af=2, type=1, protocol=6) returned 0x6b0 [0197.261] ioctlsocket (in: s=0x6b0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.261] connect (s=0x6b0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.214"), namelen=16) returned -1 [0197.262] WSAGetLastError () returned 10035 [0197.262] htonl (hostlong=0xc0a800d7) returned 0xd700a8c0 [0197.262] socket (af=2, type=1, protocol=6) returned 0x6b4 [0197.262] ioctlsocket (in: s=0x6b4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.263] connect (s=0x6b4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.215"), namelen=16) returned -1 [0197.263] WSAGetLastError () returned 10035 [0197.263] htonl (hostlong=0xc0a800d8) returned 0xd800a8c0 [0197.263] socket (af=2, type=1, protocol=6) returned 0x6b8 [0197.264] ioctlsocket (in: s=0x6b8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.264] connect (s=0x6b8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.216"), namelen=16) returned -1 [0197.264] WSAGetLastError () returned 10035 [0197.264] htonl (hostlong=0xc0a800d9) returned 0xd900a8c0 [0197.265] socket (af=2, type=1, protocol=6) returned 0x6bc [0197.265] ioctlsocket (in: s=0x6bc, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0197.265] connect (s=0x6bc, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.217"), namelen=16) returned -1 [0197.266] WSAGetLastError () returned 10035 [0197.266] GetTickCount () returned 0x1149099 [0197.266] GetTickCount () returned 0x1149099 [0197.266] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.266] GetTickCount () returned 0x1149099 [0197.266] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.266] GetTickCount () returned 0x1149099 [0197.266] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.267] GetTickCount () returned 0x1149099 [0197.267] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.267] GetTickCount () returned 0x1149099 [0197.267] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.267] GetTickCount () returned 0x1149099 [0197.267] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.267] GetTickCount () returned 0x11490a8 [0197.267] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.267] GetTickCount () returned 0x11490a8 [0197.267] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.267] GetTickCount () returned 0x11490a8 [0197.267] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.267] GetTickCount () returned 0x11490a8 [0197.267] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.268] GetTickCount () returned 0x11490a8 [0197.268] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.268] GetTickCount () returned 0x11490a8 [0197.268] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.268] GetTickCount () returned 0x11490a8 [0197.268] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.268] GetTickCount () returned 0x11490a8 [0197.268] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.268] GetTickCount () returned 0x11490a8 [0197.268] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.268] GetTickCount () returned 0x11490a8 [0197.268] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.268] GetTickCount () returned 0x11490a8 [0197.268] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.268] GetTickCount () returned 0x11490a8 [0197.268] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.268] GetTickCount () returned 0x11490a8 [0197.268] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.268] GetTickCount () returned 0x11490a8 [0197.268] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.269] GetTickCount () returned 0x11490a8 [0197.269] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.269] GetTickCount () returned 0x11490a8 [0197.269] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.269] GetTickCount () returned 0x11490a8 [0197.269] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.269] GetTickCount () returned 0x11490a8 [0197.269] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.269] GetTickCount () returned 0x11490a8 [0197.269] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.269] GetTickCount () returned 0x11490a8 [0197.269] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.269] GetTickCount () returned 0x11490a8 [0197.269] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.269] GetTickCount () returned 0x11490a8 [0197.269] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.269] GetTickCount () returned 0x11490a8 [0197.269] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.269] GetTickCount () returned 0x11490a8 [0197.269] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.269] GetTickCount () returned 0x11490a8 [0197.269] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.269] GetTickCount () returned 0x11490a8 [0197.269] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.269] GetTickCount () returned 0x11490a8 [0197.269] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.269] GetTickCount () returned 0x11490a8 [0197.269] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.269] GetTickCount () returned 0x11490a8 [0197.269] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.270] GetTickCount () returned 0x11490a8 [0197.270] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.270] GetTickCount () returned 0x11490a8 [0197.270] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.270] GetTickCount () returned 0x11490a8 [0197.270] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.270] GetTickCount () returned 0x11490a8 [0197.270] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.270] GetTickCount () returned 0x11490a8 [0197.270] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.270] GetTickCount () returned 0x11490a8 [0197.270] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.270] GetTickCount () returned 0x11490a8 [0197.270] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.270] GetTickCount () returned 0x11490a8 [0197.270] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.270] GetTickCount () returned 0x11490a8 [0197.270] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.270] GetTickCount () returned 0x11490a8 [0197.270] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.270] GetTickCount () returned 0x11490a8 [0197.270] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.270] GetTickCount () returned 0x11490a8 [0197.270] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.270] GetTickCount () returned 0x11490a8 [0197.270] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.270] GetTickCount () returned 0x11490a8 [0197.270] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.270] GetTickCount () returned 0x11490a8 [0197.271] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.271] GetTickCount () returned 0x11490a8 [0197.271] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.271] GetTickCount () returned 0x11490a8 [0197.271] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.271] GetTickCount () returned 0x11490a8 [0197.271] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.271] GetTickCount () returned 0x11490a8 [0197.271] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.271] GetTickCount () returned 0x11490a8 [0197.271] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.271] GetTickCount () returned 0x11490a8 [0197.271] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.271] GetTickCount () returned 0x11490a8 [0197.271] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.271] GetTickCount () returned 0x11490a8 [0197.271] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.271] GetTickCount () returned 0x11490a8 [0197.271] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.271] GetTickCount () returned 0x11490a8 [0197.271] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.271] GetTickCount () returned 0x11490a8 [0197.271] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.271] GetTickCount () returned 0x11490a8 [0197.271] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.271] GetTickCount () returned 0x11490a8 [0197.272] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.272] GetTickCount () returned 0x11490a8 [0197.272] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.272] GetTickCount () returned 0x11490a8 [0197.272] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.272] GetTickCount () returned 0x11490a8 [0197.272] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.272] GetTickCount () returned 0x11490a8 [0197.272] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.272] GetTickCount () returned 0x11490a8 [0197.272] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.272] GetTickCount () returned 0x11490a8 [0197.272] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.272] GetTickCount () returned 0x11490a8 [0197.272] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.272] GetTickCount () returned 0x11490a8 [0197.272] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.272] GetTickCount () returned 0x11490a8 [0197.272] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.272] GetTickCount () returned 0x11490a8 [0197.272] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.272] GetTickCount () returned 0x11490a8 [0197.272] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.273] GetTickCount () returned 0x11490a8 [0197.273] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.273] GetTickCount () returned 0x11490a8 [0197.273] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.273] GetTickCount () returned 0x11490a8 [0197.273] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.273] GetTickCount () returned 0x11490a8 [0197.273] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.273] GetTickCount () returned 0x11490a8 [0197.273] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.273] GetTickCount () returned 0x11490a8 [0197.273] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.273] GetTickCount () returned 0x11490a8 [0197.273] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.273] GetTickCount () returned 0x11490a8 [0197.273] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.273] GetTickCount () returned 0x11490a8 [0197.273] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.273] GetTickCount () returned 0x11490a8 [0197.273] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.274] GetTickCount () returned 0x11490a8 [0197.274] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.274] GetTickCount () returned 0x11490a8 [0197.274] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.274] GetTickCount () returned 0x11490a8 [0197.274] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.274] GetTickCount () returned 0x11490a8 [0197.274] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.274] GetTickCount () returned 0x11490a8 [0197.274] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.274] GetTickCount () returned 0x11490a8 [0197.274] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.274] GetTickCount () returned 0x11490a8 [0197.274] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.274] GetTickCount () returned 0x11490a8 [0197.274] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.274] GetTickCount () returned 0x11490a8 [0197.274] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.274] GetTickCount () returned 0x11490a8 [0197.274] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.274] GetTickCount () returned 0x11490a8 [0197.274] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.274] GetTickCount () returned 0x11490a8 [0197.274] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.275] GetTickCount () returned 0x11490a8 [0197.275] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.275] GetTickCount () returned 0x11490a8 [0197.275] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.275] GetTickCount () returned 0x11490a8 [0197.275] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.275] GetTickCount () returned 0x11490a8 [0197.275] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.275] GetTickCount () returned 0x11490a8 [0197.275] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.275] GetTickCount () returned 0x11490a8 [0197.275] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.275] GetTickCount () returned 0x11490a8 [0197.275] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.275] GetTickCount () returned 0x11490a8 [0197.275] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.275] GetTickCount () returned 0x11490a8 [0197.275] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.275] GetTickCount () returned 0x11490a8 [0197.275] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.275] GetTickCount () returned 0x11490a8 [0197.275] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.275] GetTickCount () returned 0x11490a8 [0197.275] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.275] GetTickCount () returned 0x11490a8 [0197.275] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.276] GetTickCount () returned 0x11490a8 [0197.276] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.276] GetTickCount () returned 0x11490a8 [0197.276] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.276] GetTickCount () returned 0x11490a8 [0197.276] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.276] GetTickCount () returned 0x11490a8 [0197.276] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.276] GetTickCount () returned 0x11490a8 [0197.276] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.276] GetTickCount () returned 0x11490a8 [0197.276] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.276] GetTickCount () returned 0x11490a8 [0197.276] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.276] GetTickCount () returned 0x11490a8 [0197.276] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.276] GetTickCount () returned 0x11490a8 [0197.276] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.276] GetTickCount () returned 0x11490a8 [0197.276] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.276] GetTickCount () returned 0x11490a8 [0197.276] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.276] GetTickCount () returned 0x11490a8 [0197.276] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.276] GetTickCount () returned 0x11490a8 [0197.276] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.276] GetTickCount () returned 0x11490a8 [0197.276] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.277] GetTickCount () returned 0x11490a8 [0197.277] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.277] GetTickCount () returned 0x11490a8 [0197.277] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.277] GetTickCount () returned 0x11490a8 [0197.277] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.277] GetTickCount () returned 0x11490a8 [0197.277] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.277] GetTickCount () returned 0x11490a8 [0197.277] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.277] GetTickCount () returned 0x11490a8 [0197.277] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.277] GetTickCount () returned 0x11490a8 [0197.277] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.277] GetTickCount () returned 0x11490a8 [0197.277] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.277] GetTickCount () returned 0x11490a8 [0197.277] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.277] GetTickCount () returned 0x11490a8 [0197.277] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.277] GetTickCount () returned 0x11490a8 [0197.277] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.277] GetTickCount () returned 0x11490a8 [0197.277] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.277] GetTickCount () returned 0x11490a8 [0197.277] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.277] GetTickCount () returned 0x11490a8 [0197.278] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.278] GetTickCount () returned 0x11490a8 [0197.278] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.278] GetTickCount () returned 0x11490a8 [0197.278] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.278] GetTickCount () returned 0x11490a8 [0197.278] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.278] GetTickCount () returned 0x11490a8 [0197.278] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.278] GetTickCount () returned 0x11490a8 [0197.278] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.278] GetTickCount () returned 0x11490a8 [0197.278] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.278] GetTickCount () returned 0x11490a8 [0197.278] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.278] GetTickCount () returned 0x11490a8 [0197.278] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.278] GetTickCount () returned 0x11490a8 [0197.278] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.278] GetTickCount () returned 0x11490a8 [0197.278] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.278] GetTickCount () returned 0x11490a8 [0197.278] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.278] GetTickCount () returned 0x11490a8 [0197.278] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.278] GetTickCount () returned 0x11490a8 [0197.278] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.278] GetTickCount () returned 0x11490a8 [0197.279] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.279] GetTickCount () returned 0x11490a8 [0197.279] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.279] GetTickCount () returned 0x11490a8 [0197.279] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.279] GetTickCount () returned 0x11490a8 [0197.279] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.279] GetTickCount () returned 0x11490a8 [0197.279] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.279] GetTickCount () returned 0x11490a8 [0197.279] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.279] GetTickCount () returned 0x11490a8 [0197.279] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.279] GetTickCount () returned 0x11490a8 [0197.279] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.279] GetTickCount () returned 0x11490a8 [0197.279] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.279] GetTickCount () returned 0x11490a8 [0197.279] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.279] GetTickCount () returned 0x11490a8 [0197.279] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.279] GetTickCount () returned 0x11490a8 [0197.279] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.279] GetTickCount () returned 0x11490a8 [0197.279] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.279] GetTickCount () returned 0x11490a8 [0197.279] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.279] GetTickCount () returned 0x11490a8 [0197.280] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.280] GetTickCount () returned 0x11490a8 [0197.280] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.280] GetTickCount () returned 0x11490a8 [0197.280] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.280] GetTickCount () returned 0x11490a8 [0197.280] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.280] GetTickCount () returned 0x11490a8 [0197.280] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.280] GetTickCount () returned 0x11490a8 [0197.280] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.280] GetTickCount () returned 0x11490a8 [0197.280] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.280] GetTickCount () returned 0x11490a8 [0197.280] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.280] GetTickCount () returned 0x11490a8 [0197.280] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.280] GetTickCount () returned 0x11490a8 [0197.280] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.280] GetTickCount () returned 0x11490a8 [0197.280] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.280] GetTickCount () returned 0x11490a8 [0197.280] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.280] GetTickCount () returned 0x11490a8 [0197.280] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.280] GetTickCount () returned 0x11490a8 [0197.281] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.281] GetTickCount () returned 0x11490a8 [0197.281] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.281] GetTickCount () returned 0x11490a8 [0197.281] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.281] GetTickCount () returned 0x11490a8 [0197.281] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.281] GetTickCount () returned 0x11490a8 [0197.281] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.281] GetTickCount () returned 0x11490a8 [0197.281] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.281] GetTickCount () returned 0x11490a8 [0197.281] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.281] GetTickCount () returned 0x11490a8 [0197.281] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.281] GetTickCount () returned 0x11490a8 [0197.281] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.281] GetTickCount () returned 0x11490a8 [0197.281] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.281] GetTickCount () returned 0x11490a8 [0197.281] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.281] GetTickCount () returned 0x11490a8 [0197.281] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.281] GetTickCount () returned 0x11490a8 [0197.281] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.281] GetTickCount () returned 0x11490a8 [0197.281] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.282] GetTickCount () returned 0x11490a8 [0197.282] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.282] GetTickCount () returned 0x11490a8 [0197.282] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.282] GetTickCount () returned 0x11490a8 [0197.282] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.282] GetTickCount () returned 0x11490a8 [0197.282] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.282] GetTickCount () returned 0x11490a8 [0197.282] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.282] GetTickCount () returned 0x11490a8 [0197.282] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.282] GetTickCount () returned 0x11490a8 [0197.282] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.282] GetTickCount () returned 0x11490a8 [0197.282] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.282] GetTickCount () returned 0x11490a8 [0197.282] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.282] GetTickCount () returned 0x11490a8 [0197.282] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.282] GetTickCount () returned 0x11490a8 [0197.282] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.282] GetTickCount () returned 0x11490a8 [0197.282] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.282] GetTickCount () returned 0x11490a8 [0197.282] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.282] GetTickCount () returned 0x11490a8 [0197.282] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.283] GetTickCount () returned 0x11490a8 [0197.283] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.283] GetTickCount () returned 0x11490a8 [0197.283] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.408] GetTickCount () returned 0x1149135 [0197.408] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.408] GetTickCount () returned 0x1149135 [0197.408] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.408] GetTickCount () returned 0x1149135 [0197.408] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.408] GetTickCount () returned 0x1149135 [0197.408] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.408] GetTickCount () returned 0x1149135 [0197.408] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.408] GetTickCount () returned 0x1149135 [0197.408] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.408] GetTickCount () returned 0x1149135 [0197.408] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.408] GetTickCount () returned 0x1149135 [0197.408] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.408] GetTickCount () returned 0x1149135 [0197.408] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.408] GetTickCount () returned 0x1149135 [0197.408] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.408] GetTickCount () returned 0x1149135 [0197.408] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.408] GetTickCount () returned 0x1149135 [0197.409] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.409] GetTickCount () returned 0x1149135 [0197.409] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.409] GetTickCount () returned 0x1149135 [0197.409] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.409] GetTickCount () returned 0x1149135 [0197.409] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.409] GetTickCount () returned 0x1149135 [0197.409] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.409] GetTickCount () returned 0x1149135 [0197.409] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.409] GetTickCount () returned 0x1149135 [0197.409] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.409] GetTickCount () returned 0x1149135 [0197.409] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.409] GetTickCount () returned 0x1149135 [0197.409] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.409] GetTickCount () returned 0x1149135 [0197.409] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.409] GetTickCount () returned 0x1149135 [0197.409] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.409] GetTickCount () returned 0x1149135 [0197.409] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.409] GetTickCount () returned 0x1149135 [0197.409] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.409] GetTickCount () returned 0x1149135 [0197.409] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.409] GetTickCount () returned 0x1149135 [0197.409] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.409] GetTickCount () returned 0x1149135 [0197.409] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.409] GetTickCount () returned 0x1149135 [0197.409] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.409] GetTickCount () returned 0x1149135 [0197.409] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.409] GetTickCount () returned 0x1149135 [0197.409] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.409] GetTickCount () returned 0x1149135 [0197.410] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.410] GetTickCount () returned 0x1149135 [0197.410] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.410] GetTickCount () returned 0x1149135 [0197.410] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.410] GetTickCount () returned 0x1149135 [0197.410] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.410] GetTickCount () returned 0x1149135 [0197.410] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.410] GetTickCount () returned 0x1149135 [0197.410] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.410] GetTickCount () returned 0x1149135 [0197.410] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.410] GetTickCount () returned 0x1149135 [0197.410] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.410] GetTickCount () returned 0x1149135 [0197.410] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.410] GetTickCount () returned 0x1149135 [0197.410] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.410] GetTickCount () returned 0x1149135 [0197.410] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.410] GetTickCount () returned 0x1149135 [0197.410] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0197.410] GetTickCount () returned 0x1149135 [0197.411] getsockopt (in: s=0x6bc, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.411] recv (in: s=0x6bc, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.411] WSAGetLastError () returned 10057 [0197.411] closesocket (s=0x6bc) returned 0 [0197.412] getsockopt (in: s=0x6b8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.412] recv (in: s=0x6b8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.412] WSAGetLastError () returned 10057 [0197.412] closesocket (s=0x6b8) returned 0 [0197.412] getsockopt (in: s=0x6b4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.412] recv (in: s=0x6b4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.412] WSAGetLastError () returned 10057 [0197.412] closesocket (s=0x6b4) returned 0 [0197.413] getsockopt (in: s=0x6b0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.413] recv (in: s=0x6b0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.413] WSAGetLastError () returned 10057 [0197.413] closesocket (s=0x6b0) returned 0 [0197.413] getsockopt (in: s=0x6ac, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.413] recv (in: s=0x6ac, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.413] WSAGetLastError () returned 10057 [0197.413] closesocket (s=0x6ac) returned 0 [0197.414] getsockopt (in: s=0x6a8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.414] recv (in: s=0x6a8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.414] WSAGetLastError () returned 10057 [0197.414] closesocket (s=0x6a8) returned 0 [0197.414] getsockopt (in: s=0x6a4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.414] recv (in: s=0x6a4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.414] WSAGetLastError () returned 10057 [0197.414] closesocket (s=0x6a4) returned 0 [0197.414] getsockopt (in: s=0x6a0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.414] recv (in: s=0x6a0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.414] WSAGetLastError () returned 10057 [0197.415] closesocket (s=0x6a0) returned 0 [0197.415] getsockopt (in: s=0x69c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.415] recv (in: s=0x69c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.415] WSAGetLastError () returned 10057 [0197.415] closesocket (s=0x69c) returned 0 [0197.415] getsockopt (in: s=0x698, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.415] recv (in: s=0x698, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.415] WSAGetLastError () returned 10057 [0197.415] closesocket (s=0x698) returned 0 [0197.416] getsockopt (in: s=0x694, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.416] recv (in: s=0x694, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.416] WSAGetLastError () returned 10057 [0197.416] closesocket (s=0x694) returned 0 [0197.416] getsockopt (in: s=0x690, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.416] recv (in: s=0x690, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.416] WSAGetLastError () returned 10057 [0197.416] closesocket (s=0x690) returned 0 [0197.417] getsockopt (in: s=0x68c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.417] recv (in: s=0x68c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.417] WSAGetLastError () returned 10057 [0197.417] closesocket (s=0x68c) returned 0 [0197.417] getsockopt (in: s=0x688, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.417] recv (in: s=0x688, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.417] WSAGetLastError () returned 10057 [0197.417] closesocket (s=0x688) returned 0 [0197.417] getsockopt (in: s=0x684, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.418] recv (in: s=0x684, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.418] WSAGetLastError () returned 10057 [0197.418] closesocket (s=0x684) returned 0 [0197.418] getsockopt (in: s=0x680, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.418] recv (in: s=0x680, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.418] WSAGetLastError () returned 10057 [0197.418] closesocket (s=0x680) returned 0 [0197.418] getsockopt (in: s=0x67c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.418] recv (in: s=0x67c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.418] WSAGetLastError () returned 10057 [0197.418] closesocket (s=0x67c) returned 0 [0197.419] getsockopt (in: s=0x678, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.419] recv (in: s=0x678, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.419] WSAGetLastError () returned 10057 [0197.419] closesocket (s=0x678) returned 0 [0197.419] getsockopt (in: s=0x674, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.419] recv (in: s=0x674, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.419] WSAGetLastError () returned 10057 [0197.419] closesocket (s=0x674) returned 0 [0197.420] getsockopt (in: s=0x670, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.420] recv (in: s=0x670, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.420] WSAGetLastError () returned 10057 [0197.420] closesocket (s=0x670) returned 0 [0197.420] getsockopt (in: s=0x66c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.420] recv (in: s=0x66c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.420] WSAGetLastError () returned 10057 [0197.420] closesocket (s=0x66c) returned 0 [0197.421] getsockopt (in: s=0x668, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.421] recv (in: s=0x668, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.421] WSAGetLastError () returned 10057 [0197.421] closesocket (s=0x668) returned 0 [0197.421] getsockopt (in: s=0x664, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.421] recv (in: s=0x664, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.421] WSAGetLastError () returned 10057 [0197.421] closesocket (s=0x664) returned 0 [0197.421] getsockopt (in: s=0x660, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.421] recv (in: s=0x660, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.422] WSAGetLastError () returned 10057 [0197.422] closesocket (s=0x660) returned 0 [0197.422] getsockopt (in: s=0x65c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.422] recv (in: s=0x65c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.422] WSAGetLastError () returned 10057 [0197.422] closesocket (s=0x65c) returned 0 [0197.422] getsockopt (in: s=0x658, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.422] recv (in: s=0x658, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.422] WSAGetLastError () returned 10057 [0197.422] closesocket (s=0x658) returned 0 [0197.423] getsockopt (in: s=0x654, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.423] recv (in: s=0x654, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.423] WSAGetLastError () returned 10057 [0197.423] closesocket (s=0x654) returned 0 [0197.423] getsockopt (in: s=0x650, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.423] recv (in: s=0x650, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.423] WSAGetLastError () returned 10057 [0197.423] closesocket (s=0x650) returned 0 [0197.424] getsockopt (in: s=0x64c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.424] recv (in: s=0x64c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.424] WSAGetLastError () returned 10057 [0197.424] closesocket (s=0x64c) returned 0 [0197.424] getsockopt (in: s=0x648, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.424] recv (in: s=0x648, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.424] WSAGetLastError () returned 10057 [0197.424] closesocket (s=0x648) returned 0 [0197.425] getsockopt (in: s=0x644, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.425] recv (in: s=0x644, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.425] WSAGetLastError () returned 10057 [0197.425] closesocket (s=0x644) returned 0 [0197.425] getsockopt (in: s=0x640, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.425] recv (in: s=0x640, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.425] WSAGetLastError () returned 10057 [0197.425] closesocket (s=0x640) returned 0 [0197.426] getsockopt (in: s=0x63c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.426] recv (in: s=0x63c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.426] WSAGetLastError () returned 10057 [0197.426] closesocket (s=0x63c) returned 0 [0197.426] getsockopt (in: s=0x638, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.426] recv (in: s=0x638, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.426] WSAGetLastError () returned 10057 [0197.426] closesocket (s=0x638) returned 0 [0197.426] getsockopt (in: s=0x634, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.427] recv (in: s=0x634, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.427] WSAGetLastError () returned 10057 [0197.427] closesocket (s=0x634) returned 0 [0197.427] getsockopt (in: s=0x630, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.427] recv (in: s=0x630, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.427] WSAGetLastError () returned 10057 [0197.427] closesocket (s=0x630) returned 0 [0197.427] getsockopt (in: s=0x62c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.427] recv (in: s=0x62c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.427] WSAGetLastError () returned 10057 [0197.427] closesocket (s=0x62c) returned 0 [0197.428] getsockopt (in: s=0x628, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.428] recv (in: s=0x628, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.428] WSAGetLastError () returned 10057 [0197.428] closesocket (s=0x628) returned 0 [0197.428] getsockopt (in: s=0x624, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.428] recv (in: s=0x624, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.428] WSAGetLastError () returned 10057 [0197.428] closesocket (s=0x624) returned 0 [0197.429] getsockopt (in: s=0x620, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.429] recv (in: s=0x620, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.429] WSAGetLastError () returned 10057 [0197.429] closesocket (s=0x620) returned 0 [0197.429] getsockopt (in: s=0x61c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.429] recv (in: s=0x61c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.429] WSAGetLastError () returned 10057 [0197.429] closesocket (s=0x61c) returned 0 [0197.430] getsockopt (in: s=0x618, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.430] recv (in: s=0x618, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.430] WSAGetLastError () returned 10057 [0197.430] closesocket (s=0x618) returned 0 [0197.430] getsockopt (in: s=0x614, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.430] recv (in: s=0x614, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.430] WSAGetLastError () returned 10057 [0197.430] closesocket (s=0x614) returned 0 [0197.431] getsockopt (in: s=0x610, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.431] recv (in: s=0x610, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.431] WSAGetLastError () returned 10057 [0197.431] closesocket (s=0x610) returned 0 [0197.431] getsockopt (in: s=0x60c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.431] recv (in: s=0x60c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.431] WSAGetLastError () returned 10057 [0197.431] closesocket (s=0x60c) returned 0 [0197.431] getsockopt (in: s=0x608, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.431] recv (in: s=0x608, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.431] WSAGetLastError () returned 10057 [0197.431] closesocket (s=0x608) returned 0 [0197.432] getsockopt (in: s=0x604, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.432] recv (in: s=0x604, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.432] WSAGetLastError () returned 10057 [0197.432] closesocket (s=0x604) returned 0 [0197.432] getsockopt (in: s=0x600, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.432] recv (in: s=0x600, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.432] WSAGetLastError () returned 10057 [0197.432] closesocket (s=0x600) returned 0 [0197.433] getsockopt (in: s=0x5fc, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.433] recv (in: s=0x5fc, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.433] WSAGetLastError () returned 10057 [0197.433] closesocket (s=0x5fc) returned 0 [0197.433] getsockopt (in: s=0x5f8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.433] recv (in: s=0x5f8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.433] WSAGetLastError () returned 10057 [0197.433] closesocket (s=0x5f8) returned 0 [0197.434] getsockopt (in: s=0x5f4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.434] recv (in: s=0x5f4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.434] WSAGetLastError () returned 10057 [0197.434] closesocket (s=0x5f4) returned 0 [0197.434] getsockopt (in: s=0x5f0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.434] recv (in: s=0x5f0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.434] WSAGetLastError () returned 10057 [0197.434] closesocket (s=0x5f0) returned 0 [0197.435] getsockopt (in: s=0x5ec, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.435] recv (in: s=0x5ec, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.435] WSAGetLastError () returned 10057 [0197.435] closesocket (s=0x5ec) returned 0 [0197.435] getsockopt (in: s=0x5e8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.435] recv (in: s=0x5e8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.435] WSAGetLastError () returned 10057 [0197.435] closesocket (s=0x5e8) returned 0 [0197.435] getsockopt (in: s=0x5e4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.435] recv (in: s=0x5e4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.436] WSAGetLastError () returned 10057 [0197.436] closesocket (s=0x5e4) returned 0 [0197.436] getsockopt (in: s=0x5e0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.436] recv (in: s=0x5e0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.436] WSAGetLastError () returned 10057 [0197.436] closesocket (s=0x5e0) returned 0 [0197.436] getsockopt (in: s=0x5dc, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.436] recv (in: s=0x5dc, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.436] WSAGetLastError () returned 10057 [0197.436] closesocket (s=0x5dc) returned 0 [0197.437] getsockopt (in: s=0x5d8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.437] recv (in: s=0x5d8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.437] WSAGetLastError () returned 10057 [0197.437] closesocket (s=0x5d8) returned 0 [0197.437] getsockopt (in: s=0x5d4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.437] recv (in: s=0x5d4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.437] WSAGetLastError () returned 10057 [0197.437] closesocket (s=0x5d4) returned 0 [0197.438] getsockopt (in: s=0x5d0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.438] recv (in: s=0x5d0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.438] WSAGetLastError () returned 10057 [0197.438] closesocket (s=0x5d0) returned 0 [0197.438] getsockopt (in: s=0x5cc, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.438] recv (in: s=0x5cc, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.438] WSAGetLastError () returned 10057 [0197.438] closesocket (s=0x5cc) returned 0 [0197.438] getsockopt (in: s=0x5c8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.439] recv (in: s=0x5c8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.439] WSAGetLastError () returned 10057 [0197.439] closesocket (s=0x5c8) returned 0 [0197.439] getsockopt (in: s=0x5c4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.439] recv (in: s=0x5c4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.439] WSAGetLastError () returned 10057 [0197.439] closesocket (s=0x5c4) returned 0 [0197.439] getsockopt (in: s=0x5c0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.439] recv (in: s=0x5c0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.439] WSAGetLastError () returned 10057 [0197.440] closesocket (s=0x5c0) returned 0 [0197.440] getsockopt (in: s=0x5bc, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.440] recv (in: s=0x5bc, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.440] WSAGetLastError () returned 10057 [0197.440] closesocket (s=0x5bc) returned 0 [0197.440] getsockopt (in: s=0x5b8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.440] recv (in: s=0x5b8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.440] WSAGetLastError () returned 10057 [0197.440] closesocket (s=0x5b8) returned 0 [0197.441] getsockopt (in: s=0x5b4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.441] recv (in: s=0x5b4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.441] WSAGetLastError () returned 10057 [0197.441] closesocket (s=0x5b4) returned 0 [0197.441] getsockopt (in: s=0x5b0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.441] recv (in: s=0x5b0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.441] WSAGetLastError () returned 10057 [0197.441] closesocket (s=0x5b0) returned 0 [0197.442] getsockopt (in: s=0x5ac, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.442] recv (in: s=0x5ac, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.442] WSAGetLastError () returned 10057 [0197.442] closesocket (s=0x5ac) returned 0 [0197.442] getsockopt (in: s=0x5a8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.442] recv (in: s=0x5a8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.442] WSAGetLastError () returned 10057 [0197.442] closesocket (s=0x5a8) returned 0 [0197.443] getsockopt (in: s=0x5a4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.443] recv (in: s=0x5a4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.443] WSAGetLastError () returned 10057 [0197.443] closesocket (s=0x5a4) returned 0 [0197.443] getsockopt (in: s=0x5a0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.443] recv (in: s=0x5a0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.443] WSAGetLastError () returned 10057 [0197.443] closesocket (s=0x5a0) returned 0 [0197.443] getsockopt (in: s=0x59c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.443] recv (in: s=0x59c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.444] WSAGetLastError () returned 10057 [0197.444] closesocket (s=0x59c) returned 0 [0197.444] getsockopt (in: s=0x598, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.444] recv (in: s=0x598, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.444] WSAGetLastError () returned 10057 [0197.444] closesocket (s=0x598) returned 0 [0197.444] getsockopt (in: s=0x594, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.444] recv (in: s=0x594, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.444] WSAGetLastError () returned 10057 [0197.444] closesocket (s=0x594) returned 0 [0197.445] getsockopt (in: s=0x590, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.445] recv (in: s=0x590, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.445] WSAGetLastError () returned 10057 [0197.445] closesocket (s=0x590) returned 0 [0197.445] getsockopt (in: s=0x58c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.445] recv (in: s=0x58c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.445] WSAGetLastError () returned 10057 [0197.445] closesocket (s=0x58c) returned 0 [0197.446] getsockopt (in: s=0x588, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.446] recv (in: s=0x588, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.446] WSAGetLastError () returned 10057 [0197.446] closesocket (s=0x588) returned 0 [0197.446] getsockopt (in: s=0x584, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.446] recv (in: s=0x584, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.446] WSAGetLastError () returned 10057 [0197.446] closesocket (s=0x584) returned 0 [0197.447] getsockopt (in: s=0x580, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.447] recv (in: s=0x580, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.447] WSAGetLastError () returned 10057 [0197.447] closesocket (s=0x580) returned 0 [0197.447] getsockopt (in: s=0x57c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.447] recv (in: s=0x57c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.447] WSAGetLastError () returned 10057 [0197.447] closesocket (s=0x57c) returned 0 [0197.447] getsockopt (in: s=0x578, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.447] recv (in: s=0x578, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.448] WSAGetLastError () returned 10057 [0197.448] closesocket (s=0x578) returned 0 [0197.448] getsockopt (in: s=0x574, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.448] recv (in: s=0x574, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.448] WSAGetLastError () returned 10057 [0197.448] closesocket (s=0x574) returned 0 [0197.448] getsockopt (in: s=0x570, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.448] recv (in: s=0x570, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.448] WSAGetLastError () returned 10057 [0197.448] closesocket (s=0x570) returned 0 [0197.449] getsockopt (in: s=0x56c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.449] recv (in: s=0x56c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.449] WSAGetLastError () returned 10057 [0197.449] closesocket (s=0x56c) returned 0 [0197.449] getsockopt (in: s=0x568, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.449] recv (in: s=0x568, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.449] WSAGetLastError () returned 10057 [0197.449] closesocket (s=0x568) returned 0 [0197.450] getsockopt (in: s=0x564, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.450] recv (in: s=0x564, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.450] WSAGetLastError () returned 10057 [0197.450] closesocket (s=0x564) returned 0 [0197.450] getsockopt (in: s=0x560, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.450] recv (in: s=0x560, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.450] WSAGetLastError () returned 10057 [0197.450] closesocket (s=0x560) returned 0 [0197.451] getsockopt (in: s=0x55c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.451] recv (in: s=0x55c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.451] WSAGetLastError () returned 10057 [0197.451] closesocket (s=0x55c) returned 0 [0197.451] getsockopt (in: s=0x558, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.451] recv (in: s=0x558, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.451] WSAGetLastError () returned 10057 [0197.451] closesocket (s=0x558) returned 0 [0197.451] getsockopt (in: s=0x554, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.451] recv (in: s=0x554, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.451] WSAGetLastError () returned 10057 [0197.452] closesocket (s=0x554) returned 0 [0197.452] getsockopt (in: s=0x550, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.452] recv (in: s=0x550, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.452] WSAGetLastError () returned 10057 [0197.452] closesocket (s=0x550) returned 0 [0197.452] getsockopt (in: s=0x54c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.452] recv (in: s=0x54c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.452] WSAGetLastError () returned 10057 [0197.452] closesocket (s=0x54c) returned 0 [0197.620] getsockopt (in: s=0x548, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.620] recv (in: s=0x548, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.621] WSAGetLastError () returned 10057 [0197.621] closesocket (s=0x548) returned 0 [0197.621] getsockopt (in: s=0x544, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.621] recv (in: s=0x544, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.621] WSAGetLastError () returned 10057 [0197.621] closesocket (s=0x544) returned 0 [0197.621] getsockopt (in: s=0x540, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.621] recv (in: s=0x540, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.621] WSAGetLastError () returned 10057 [0197.622] closesocket (s=0x540) returned 0 [0197.622] getsockopt (in: s=0x53c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.622] recv (in: s=0x53c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.622] WSAGetLastError () returned 10057 [0197.622] closesocket (s=0x53c) returned 0 [0197.622] getsockopt (in: s=0x538, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.622] recv (in: s=0x538, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.622] WSAGetLastError () returned 10057 [0197.622] closesocket (s=0x538) returned 0 [0197.623] getsockopt (in: s=0x534, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.623] recv (in: s=0x534, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.623] WSAGetLastError () returned 10057 [0197.623] closesocket (s=0x534) returned 0 [0197.623] getsockopt (in: s=0x530, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.623] recv (in: s=0x530, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.623] WSAGetLastError () returned 10057 [0197.623] closesocket (s=0x530) returned 0 [0197.624] getsockopt (in: s=0x52c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.624] recv (in: s=0x52c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.624] WSAGetLastError () returned 10057 [0197.624] closesocket (s=0x52c) returned 0 [0197.624] getsockopt (in: s=0x528, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.624] recv (in: s=0x528, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.624] WSAGetLastError () returned 10057 [0197.624] closesocket (s=0x528) returned 0 [0197.624] getsockopt (in: s=0x524, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.625] recv (in: s=0x524, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.625] WSAGetLastError () returned 10057 [0197.625] closesocket (s=0x524) returned 0 [0197.625] getsockopt (in: s=0x520, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.625] recv (in: s=0x520, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.625] WSAGetLastError () returned 10057 [0197.625] closesocket (s=0x520) returned 0 [0197.625] getsockopt (in: s=0x51c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.625] recv (in: s=0x51c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.625] WSAGetLastError () returned 10057 [0197.625] closesocket (s=0x51c) returned 0 [0197.626] getsockopt (in: s=0x518, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.626] recv (in: s=0x518, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.626] WSAGetLastError () returned 10057 [0197.626] closesocket (s=0x518) returned 0 [0197.627] getsockopt (in: s=0x514, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.627] recv (in: s=0x514, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.627] WSAGetLastError () returned 10057 [0197.627] closesocket (s=0x514) returned 0 [0197.627] getsockopt (in: s=0x510, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.627] recv (in: s=0x510, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.627] WSAGetLastError () returned 10057 [0197.627] closesocket (s=0x510) returned 0 [0197.628] getsockopt (in: s=0x50c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.628] recv (in: s=0x50c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.628] WSAGetLastError () returned 10057 [0197.628] closesocket (s=0x50c) returned 0 [0197.628] getsockopt (in: s=0x508, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.628] recv (in: s=0x508, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.628] WSAGetLastError () returned 10057 [0197.628] closesocket (s=0x508) returned 0 [0197.629] getsockopt (in: s=0x504, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.629] recv (in: s=0x504, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.629] WSAGetLastError () returned 10057 [0197.629] closesocket (s=0x504) returned 0 [0197.629] getsockopt (in: s=0x500, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.629] recv (in: s=0x500, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.629] WSAGetLastError () returned 10057 [0197.629] closesocket (s=0x500) returned 0 [0197.630] getsockopt (in: s=0x4fc, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.630] recv (in: s=0x4fc, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.630] WSAGetLastError () returned 10057 [0197.630] closesocket (s=0x4fc) returned 0 [0197.630] getsockopt (in: s=0x4f8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.630] recv (in: s=0x4f8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.630] WSAGetLastError () returned 10057 [0197.630] closesocket (s=0x4f8) returned 0 [0197.630] getsockopt (in: s=0x4f4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.630] recv (in: s=0x4f4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.630] WSAGetLastError () returned 10057 [0197.631] closesocket (s=0x4f4) returned 0 [0197.631] getsockopt (in: s=0x4f0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.631] recv (in: s=0x4f0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.631] WSAGetLastError () returned 10057 [0197.631] closesocket (s=0x4f0) returned 0 [0197.631] getsockopt (in: s=0x4ec, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.631] recv (in: s=0x4ec, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.631] WSAGetLastError () returned 10057 [0197.631] closesocket (s=0x4ec) returned 0 [0197.632] getsockopt (in: s=0x4e8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.632] recv (in: s=0x4e8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.632] WSAGetLastError () returned 10057 [0197.632] closesocket (s=0x4e8) returned 0 [0197.632] getsockopt (in: s=0x4e4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.632] recv (in: s=0x4e4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.632] WSAGetLastError () returned 10057 [0197.632] closesocket (s=0x4e4) returned 0 [0197.633] getsockopt (in: s=0x4e0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.633] recv (in: s=0x4e0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.633] WSAGetLastError () returned 10057 [0197.633] closesocket (s=0x4e0) returned 0 [0197.633] getsockopt (in: s=0x4dc, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.633] recv (in: s=0x4dc, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.633] WSAGetLastError () returned 10057 [0197.633] closesocket (s=0x4dc) returned 0 [0197.634] getsockopt (in: s=0x4d8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.634] recv (in: s=0x4d8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.634] WSAGetLastError () returned 10057 [0197.634] closesocket (s=0x4d8) returned 0 [0197.634] getsockopt (in: s=0x4d4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.634] recv (in: s=0x4d4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.634] WSAGetLastError () returned 10057 [0197.634] closesocket (s=0x4d4) returned 0 [0197.634] getsockopt (in: s=0x4d0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.634] recv (in: s=0x4d0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.635] WSAGetLastError () returned 10057 [0197.635] closesocket (s=0x4d0) returned 0 [0197.635] getsockopt (in: s=0x4cc, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.635] recv (in: s=0x4cc, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.635] WSAGetLastError () returned 10057 [0197.635] closesocket (s=0x4cc) returned 0 [0197.635] getsockopt (in: s=0x4c8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.635] recv (in: s=0x4c8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.636] WSAGetLastError () returned 10057 [0197.636] closesocket (s=0x4c8) returned 0 [0197.636] getsockopt (in: s=0x4c4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.636] recv (in: s=0x4c4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.636] WSAGetLastError () returned 10057 [0197.636] closesocket (s=0x4c4) returned 0 [0197.636] getsockopt (in: s=0x4c0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.636] recv (in: s=0x4c0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.636] WSAGetLastError () returned 10057 [0197.636] closesocket (s=0x4c0) returned 0 [0197.637] getsockopt (in: s=0x4bc, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.637] recv (in: s=0x4bc, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.637] WSAGetLastError () returned 10057 [0197.637] closesocket (s=0x4bc) returned 0 [0197.637] getsockopt (in: s=0x4b8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.637] recv (in: s=0x4b8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.637] WSAGetLastError () returned 10057 [0197.637] closesocket (s=0x4b8) returned 0 [0197.638] getsockopt (in: s=0x4b4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.638] recv (in: s=0x4b4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.638] WSAGetLastError () returned 10057 [0197.638] closesocket (s=0x4b4) returned 0 [0197.638] getsockopt (in: s=0x4b0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.638] recv (in: s=0x4b0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.638] WSAGetLastError () returned 10057 [0197.638] closesocket (s=0x4b0) returned 0 [0197.639] getsockopt (in: s=0x4ac, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.639] recv (in: s=0x4ac, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.639] WSAGetLastError () returned 10057 [0197.639] closesocket (s=0x4ac) returned 0 [0197.639] getsockopt (in: s=0x4a8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.639] recv (in: s=0x4a8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.639] WSAGetLastError () returned 10057 [0197.639] closesocket (s=0x4a8) returned 0 [0197.639] getsockopt (in: s=0x4a4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.639] recv (in: s=0x4a4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.640] WSAGetLastError () returned 10057 [0197.640] closesocket (s=0x4a4) returned 0 [0197.640] getsockopt (in: s=0x4a0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.640] recv (in: s=0x4a0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.640] WSAGetLastError () returned 10057 [0197.640] closesocket (s=0x4a0) returned 0 [0197.640] getsockopt (in: s=0x49c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.640] recv (in: s=0x49c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.640] WSAGetLastError () returned 10057 [0197.640] closesocket (s=0x49c) returned 0 [0197.641] getsockopt (in: s=0x498, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.641] recv (in: s=0x498, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.641] WSAGetLastError () returned 10057 [0197.641] closesocket (s=0x498) returned 0 [0197.641] getsockopt (in: s=0x494, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.641] recv (in: s=0x494, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.641] WSAGetLastError () returned 10057 [0197.641] closesocket (s=0x494) returned 0 [0197.642] getsockopt (in: s=0x490, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.642] recv (in: s=0x490, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.642] WSAGetLastError () returned 10057 [0197.642] closesocket (s=0x490) returned 0 [0197.642] getsockopt (in: s=0x48c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.642] recv (in: s=0x48c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.642] WSAGetLastError () returned 10057 [0197.642] closesocket (s=0x48c) returned 0 [0197.643] getsockopt (in: s=0x488, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.643] recv (in: s=0x488, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.643] WSAGetLastError () returned 10057 [0197.643] closesocket (s=0x488) returned 0 [0197.643] getsockopt (in: s=0x484, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.643] recv (in: s=0x484, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.643] WSAGetLastError () returned 10057 [0197.643] closesocket (s=0x484) returned 0 [0197.644] getsockopt (in: s=0x480, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.644] recv (in: s=0x480, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.644] WSAGetLastError () returned 10057 [0197.644] closesocket (s=0x480) returned 0 [0197.644] getsockopt (in: s=0x47c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.644] recv (in: s=0x47c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.644] WSAGetLastError () returned 10057 [0197.644] closesocket (s=0x47c) returned 0 [0197.644] getsockopt (in: s=0x478, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.644] recv (in: s=0x478, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.644] WSAGetLastError () returned 10057 [0197.644] closesocket (s=0x478) returned 0 [0197.645] getsockopt (in: s=0x474, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.645] recv (in: s=0x474, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.645] WSAGetLastError () returned 10057 [0197.645] closesocket (s=0x474) returned 0 [0197.645] getsockopt (in: s=0x470, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.645] recv (in: s=0x470, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.645] WSAGetLastError () returned 10057 [0197.645] closesocket (s=0x470) returned 0 [0197.646] getsockopt (in: s=0x46c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.646] recv (in: s=0x46c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.646] WSAGetLastError () returned 10057 [0197.646] closesocket (s=0x46c) returned 0 [0197.646] getsockopt (in: s=0x468, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.646] recv (in: s=0x468, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.646] WSAGetLastError () returned 10057 [0197.646] closesocket (s=0x468) returned 0 [0197.647] getsockopt (in: s=0x464, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.647] recv (in: s=0x464, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.647] WSAGetLastError () returned 10057 [0197.647] closesocket (s=0x464) returned 0 [0197.647] getsockopt (in: s=0x460, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.647] recv (in: s=0x460, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.647] WSAGetLastError () returned 10057 [0197.647] closesocket (s=0x460) returned 0 [0197.647] getsockopt (in: s=0x45c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.648] recv (in: s=0x45c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.648] WSAGetLastError () returned 10057 [0197.648] closesocket (s=0x45c) returned 0 [0197.648] getsockopt (in: s=0x458, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.648] recv (in: s=0x458, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.648] WSAGetLastError () returned 10057 [0197.648] closesocket (s=0x458) returned 0 [0197.648] getsockopt (in: s=0x454, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.648] recv (in: s=0x454, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.648] WSAGetLastError () returned 10057 [0197.648] closesocket (s=0x454) returned 0 [0197.649] getsockopt (in: s=0x450, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.649] recv (in: s=0x450, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.649] WSAGetLastError () returned 10057 [0197.649] closesocket (s=0x450) returned 0 [0197.649] getsockopt (in: s=0x44c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.649] recv (in: s=0x44c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.649] WSAGetLastError () returned 10057 [0197.649] closesocket (s=0x44c) returned 0 [0197.650] getsockopt (in: s=0x448, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.650] recv (in: s=0x448, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.650] WSAGetLastError () returned 10057 [0197.650] closesocket (s=0x448) returned 0 [0197.650] getsockopt (in: s=0x444, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.650] recv (in: s=0x444, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.650] WSAGetLastError () returned 10057 [0197.650] closesocket (s=0x444) returned 0 [0197.651] getsockopt (in: s=0x440, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.651] recv (in: s=0x440, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.651] WSAGetLastError () returned 10057 [0197.651] closesocket (s=0x440) returned 0 [0197.651] getsockopt (in: s=0x43c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.651] recv (in: s=0x43c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.651] WSAGetLastError () returned 10057 [0197.651] closesocket (s=0x43c) returned 0 [0197.651] getsockopt (in: s=0x438, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.651] recv (in: s=0x438, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.652] WSAGetLastError () returned 10057 [0197.652] closesocket (s=0x438) returned 0 [0197.652] getsockopt (in: s=0x434, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.652] recv (in: s=0x434, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.652] WSAGetLastError () returned 10057 [0197.652] closesocket (s=0x434) returned 0 [0197.652] getsockopt (in: s=0x430, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.652] recv (in: s=0x430, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.652] WSAGetLastError () returned 10057 [0197.652] closesocket (s=0x430) returned 0 [0197.653] getsockopt (in: s=0x42c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.653] recv (in: s=0x42c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.653] WSAGetLastError () returned 10057 [0197.653] closesocket (s=0x42c) returned 0 [0197.653] getsockopt (in: s=0x428, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.653] recv (in: s=0x428, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.653] WSAGetLastError () returned 10057 [0197.653] closesocket (s=0x428) returned 0 [0197.654] getsockopt (in: s=0x424, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.654] recv (in: s=0x424, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.654] WSAGetLastError () returned 10057 [0197.654] closesocket (s=0x424) returned 0 [0197.654] getsockopt (in: s=0x420, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.654] recv (in: s=0x420, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.654] WSAGetLastError () returned 10057 [0197.654] closesocket (s=0x420) returned 0 [0197.655] getsockopt (in: s=0x41c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.655] recv (in: s=0x41c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.655] WSAGetLastError () returned 10057 [0197.655] closesocket (s=0x41c) returned 0 [0197.655] getsockopt (in: s=0x418, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.655] recv (in: s=0x418, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.655] WSAGetLastError () returned 10057 [0197.655] closesocket (s=0x418) returned 0 [0197.656] getsockopt (in: s=0x414, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.656] recv (in: s=0x414, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.656] WSAGetLastError () returned 10057 [0197.656] closesocket (s=0x414) returned 0 [0197.656] getsockopt (in: s=0x410, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.656] recv (in: s=0x410, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.656] WSAGetLastError () returned 10057 [0197.656] closesocket (s=0x410) returned 0 [0197.657] getsockopt (in: s=0x40c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.657] recv (in: s=0x40c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.657] WSAGetLastError () returned 10057 [0197.657] closesocket (s=0x40c) returned 0 [0197.657] getsockopt (in: s=0x408, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.657] recv (in: s=0x408, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.657] WSAGetLastError () returned 10057 [0197.657] closesocket (s=0x408) returned 0 [0197.658] getsockopt (in: s=0x404, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.658] recv (in: s=0x404, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.658] WSAGetLastError () returned 10057 [0197.658] closesocket (s=0x404) returned 0 [0197.658] getsockopt (in: s=0x3fc, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.658] recv (in: s=0x3fc, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.658] WSAGetLastError () returned 10057 [0197.658] closesocket (s=0x3fc) returned 0 [0197.659] getsockopt (in: s=0x3f8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.659] recv (in: s=0x3f8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.659] WSAGetLastError () returned 10057 [0197.659] closesocket (s=0x3f8) returned 0 [0197.659] getsockopt (in: s=0x3f4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.659] recv (in: s=0x3f4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.659] WSAGetLastError () returned 10057 [0197.659] closesocket (s=0x3f4) returned 0 [0197.659] getsockopt (in: s=0x3f0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.659] recv (in: s=0x3f0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.659] WSAGetLastError () returned 10057 [0197.660] closesocket (s=0x3f0) returned 0 [0197.660] getsockopt (in: s=0x3ec, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.660] recv (in: s=0x3ec, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.660] WSAGetLastError () returned 10057 [0197.660] closesocket (s=0x3ec) returned 0 [0197.660] getsockopt (in: s=0x3e8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.660] recv (in: s=0x3e8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.660] WSAGetLastError () returned 10057 [0197.661] closesocket (s=0x3e8) returned 0 [0197.661] getsockopt (in: s=0x3e4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.661] recv (in: s=0x3e4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.661] WSAGetLastError () returned 10057 [0197.661] closesocket (s=0x3e4) returned 0 [0197.661] getsockopt (in: s=0x3e0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.661] recv (in: s=0x3e0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.661] WSAGetLastError () returned 10057 [0197.661] closesocket (s=0x3e0) returned 0 [0197.662] getsockopt (in: s=0x3dc, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.662] recv (in: s=0x3dc, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.662] WSAGetLastError () returned 10057 [0197.662] closesocket (s=0x3dc) returned 0 [0197.662] getsockopt (in: s=0x3d8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.662] recv (in: s=0x3d8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.662] WSAGetLastError () returned 10057 [0197.662] closesocket (s=0x3d8) returned 0 [0197.663] getsockopt (in: s=0x3d4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.663] recv (in: s=0x3d4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.663] WSAGetLastError () returned 10057 [0197.663] closesocket (s=0x3d4) returned 0 [0197.663] getsockopt (in: s=0x3d0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.663] recv (in: s=0x3d0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.663] WSAGetLastError () returned 10057 [0197.663] closesocket (s=0x3d0) returned 0 [0197.664] getsockopt (in: s=0x3cc, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.664] recv (in: s=0x3cc, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.664] WSAGetLastError () returned 10057 [0197.664] closesocket (s=0x3cc) returned 0 [0197.664] getsockopt (in: s=0x3c8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.664] recv (in: s=0x3c8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.664] WSAGetLastError () returned 10057 [0197.664] closesocket (s=0x3c8) returned 0 [0197.664] getsockopt (in: s=0x3c4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.664] recv (in: s=0x3c4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.665] WSAGetLastError () returned 10057 [0197.665] closesocket (s=0x3c4) returned 0 [0197.665] getsockopt (in: s=0x3c0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.665] recv (in: s=0x3c0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.665] WSAGetLastError () returned 10057 [0197.665] closesocket (s=0x3c0) returned 0 [0197.665] getsockopt (in: s=0x3bc, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.665] recv (in: s=0x3bc, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.665] WSAGetLastError () returned 10057 [0197.665] closesocket (s=0x3bc) returned 0 [0197.666] getsockopt (in: s=0x3b8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0197.666] recv (in: s=0x3b8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0197.666] WSAGetLastError () returned 10057 [0197.666] closesocket (s=0x3b8) returned 0 [0198.030] getsockopt (in: s=0x3b4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0198.030] recv (in: s=0x3b4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0198.030] WSAGetLastError () returned 10057 [0198.030] closesocket (s=0x3b4) returned 0 [0198.030] getsockopt (in: s=0x3b0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0198.030] recv (in: s=0x3b0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0198.030] WSAGetLastError () returned 10057 [0198.030] closesocket (s=0x3b0) returned 0 [0198.031] getsockopt (in: s=0x3ac, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0198.031] recv (in: s=0x3ac, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0198.031] WSAGetLastError () returned 10057 [0198.031] closesocket (s=0x3ac) returned 0 [0198.031] getsockopt (in: s=0x3a8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0198.031] recv (in: s=0x3a8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0198.031] WSAGetLastError () returned 10057 [0198.031] closesocket (s=0x3a8) returned 0 [0198.032] getsockopt (in: s=0x3a4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0198.032] recv (in: s=0x3a4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0198.032] WSAGetLastError () returned 10057 [0198.032] closesocket (s=0x3a4) returned 0 [0198.032] getsockopt (in: s=0x3a0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0198.032] recv (in: s=0x3a0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0198.032] WSAGetLastError () returned 10057 [0198.032] closesocket (s=0x3a0) returned 0 [0198.033] getsockopt (in: s=0x39c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0198.033] recv (in: s=0x39c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0198.033] WSAGetLastError () returned 10057 [0198.033] closesocket (s=0x39c) returned 0 [0198.033] getsockopt (in: s=0x398, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0198.033] recv (in: s=0x398, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0198.033] WSAGetLastError () returned 10057 [0198.033] closesocket (s=0x398) returned 0 [0198.034] getsockopt (in: s=0x394, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0198.034] recv (in: s=0x394, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0198.034] WSAGetLastError () returned 10057 [0198.034] closesocket (s=0x394) returned 0 [0198.034] getsockopt (in: s=0x38c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0198.034] recv (in: s=0x38c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0198.034] WSAGetLastError () returned 10057 [0198.034] closesocket (s=0x38c) returned 0 [0198.035] getsockopt (in: s=0x370, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0198.035] recv (in: s=0x370, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0198.035] WSAGetLastError () returned 10057 [0198.035] closesocket (s=0x370) returned 0 [0198.035] getsockopt (in: s=0x380, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0198.035] recv (in: s=0x380, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0198.035] WSAGetLastError () returned 10057 [0198.035] closesocket (s=0x380) returned 0 [0198.035] getsockopt (in: s=0x354, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0198.035] recv (in: s=0x354, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0198.035] WSAGetLastError () returned 10057 [0198.035] closesocket (s=0x354) returned 0 [0198.036] getsockopt (in: s=0x350, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0198.036] recv (in: s=0x350, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0198.036] WSAGetLastError () returned 10057 [0198.036] closesocket (s=0x350) returned 0 [0198.036] getsockopt (in: s=0x34c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0198.036] recv (in: s=0x34c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0198.036] WSAGetLastError () returned 10057 [0198.036] closesocket (s=0x34c) returned 0 [0198.037] getsockopt (in: s=0x2f8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0198.037] recv (in: s=0x2f8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0198.037] WSAGetLastError () returned 10057 [0198.037] closesocket (s=0x2f8) returned 0 [0198.037] getsockopt (in: s=0x37c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0198.037] recv (in: s=0x37c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0198.037] WSAGetLastError () returned 10057 [0198.037] closesocket (s=0x37c) returned 0 [0198.038] getsockopt (in: s=0x390, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0198.038] recv (in: s=0x390, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0198.038] WSAGetLastError () returned 10057 [0198.038] closesocket (s=0x390) returned 0 [0198.038] getsockopt (in: s=0x364, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0198.038] recv (in: s=0x364, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0198.038] WSAGetLastError () returned 10057 [0198.038] closesocket (s=0x364) returned 0 [0198.038] getsockopt (in: s=0x374, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0198.038] recv (in: s=0x374, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0198.039] WSAGetLastError () returned 10057 [0198.039] closesocket (s=0x374) returned 0 [0198.039] getsockopt (in: s=0x384, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0198.039] recv (in: s=0x384, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0198.039] WSAGetLastError () returned 10057 [0198.039] closesocket (s=0x384) returned 0 [0198.039] getsockopt (in: s=0x344, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0198.039] recv (in: s=0x344, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0198.039] WSAGetLastError () returned 10057 [0198.039] closesocket (s=0x344) returned 0 [0198.040] getsockopt (in: s=0x36c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0198.040] recv (in: s=0x36c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0198.040] WSAGetLastError () returned 10057 [0198.040] closesocket (s=0x36c) returned 0 [0198.040] getsockopt (in: s=0x360, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0198.040] recv (in: s=0x360, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0198.040] WSAGetLastError () returned 10057 [0198.040] closesocket (s=0x360) returned 0 [0198.041] getsockopt (in: s=0x368, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0198.041] recv (in: s=0x368, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0198.041] WSAGetLastError () returned 10057 [0198.041] closesocket (s=0x368) returned 0 [0198.041] GetProcessHeap () returned 0x8a0000 [0198.041] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8e6af0 | out: hHeap=0x8a0000) returned 1 [0198.041] GetProcessHeap () returned 0x8a0000 [0198.041] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8d7dc0 | out: hHeap=0x8a0000) returned 1 [0198.041] htons (hostshort=0x1bd) returned 0xbd01 [0198.041] GetProcessHeap () returned 0x8a0000 [0198.041] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x800) returned 0x8d3d80 [0198.041] GetProcessHeap () returned 0x8a0000 [0198.041] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x800) returned 0x8d2d70 [0198.041] htonl (hostlong=0xc0a800db) returned 0xdb00a8c0 [0198.041] socket (af=2, type=1, protocol=6) returned 0x368 [0198.042] ioctlsocket (in: s=0x368, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0198.042] connect (s=0x368, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.219"), namelen=16) returned -1 [0198.043] WSAGetLastError () returned 10035 [0198.043] htonl (hostlong=0xc0a800dc) returned 0xdc00a8c0 [0198.043] socket (af=2, type=1, protocol=6) returned 0x360 [0198.043] ioctlsocket (in: s=0x360, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0198.043] connect (s=0x360, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.220"), namelen=16) returned -1 [0198.043] WSAGetLastError () returned 10035 [0198.044] htonl (hostlong=0xc0a800dd) returned 0xdd00a8c0 [0198.044] socket (af=2, type=1, protocol=6) returned 0x36c [0198.044] ioctlsocket (in: s=0x36c, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0198.044] connect (s=0x36c, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.221"), namelen=16) returned -1 [0198.044] WSAGetLastError () returned 10035 [0198.044] htonl (hostlong=0xc0a800de) returned 0xde00a8c0 [0198.044] socket (af=2, type=1, protocol=6) returned 0x344 [0198.045] ioctlsocket (in: s=0x344, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0198.045] connect (s=0x344, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.222"), namelen=16) returned -1 [0198.045] WSAGetLastError () returned 10035 [0198.045] htonl (hostlong=0xc0a800df) returned 0xdf00a8c0 [0198.045] socket (af=2, type=1, protocol=6) returned 0x384 [0198.046] ioctlsocket (in: s=0x384, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0198.046] connect (s=0x384, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.223"), namelen=16) returned -1 [0198.046] WSAGetLastError () returned 10035 [0198.046] htonl (hostlong=0xc0a800e0) returned 0xe000a8c0 [0198.046] socket (af=2, type=1, protocol=6) returned 0x374 [0198.047] ioctlsocket (in: s=0x374, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0198.047] connect (s=0x374, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.224"), namelen=16) returned -1 [0198.047] WSAGetLastError () returned 10035 [0198.047] htonl (hostlong=0xc0a800e1) returned 0xe100a8c0 [0198.047] socket (af=2, type=1, protocol=6) returned 0x364 [0198.047] ioctlsocket (in: s=0x364, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0198.047] connect (s=0x364, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.225"), namelen=16) returned -1 [0198.048] WSAGetLastError () returned 10035 [0198.048] htonl (hostlong=0xc0a800e2) returned 0xe200a8c0 [0198.048] socket (af=2, type=1, protocol=6) returned 0x390 [0198.048] ioctlsocket (in: s=0x390, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0198.048] connect (s=0x390, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.226"), namelen=16) returned -1 [0198.049] WSAGetLastError () returned 10035 [0198.049] htonl (hostlong=0xc0a800e3) returned 0xe300a8c0 [0198.049] socket (af=2, type=1, protocol=6) returned 0x37c [0198.049] ioctlsocket (in: s=0x37c, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0198.049] connect (s=0x37c, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.227"), namelen=16) returned -1 [0198.050] WSAGetLastError () returned 10035 [0198.050] htonl (hostlong=0xc0a800e4) returned 0xe400a8c0 [0198.050] socket (af=2, type=1, protocol=6) returned 0x2f8 [0198.050] ioctlsocket (in: s=0x2f8, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0198.050] connect (s=0x2f8, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.228"), namelen=16) returned -1 [0198.051] WSAGetLastError () returned 10035 [0198.051] htonl (hostlong=0xc0a800e5) returned 0xe500a8c0 [0198.051] socket (af=2, type=1, protocol=6) returned 0x34c [0198.051] ioctlsocket (in: s=0x34c, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0198.051] connect (s=0x34c, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.229"), namelen=16) returned -1 [0198.052] WSAGetLastError () returned 10035 [0198.052] htonl (hostlong=0xc0a800e6) returned 0xe600a8c0 [0198.052] socket (af=2, type=1, protocol=6) returned 0x350 [0198.052] ioctlsocket (in: s=0x350, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0198.052] connect (s=0x350, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.230"), namelen=16) returned -1 [0198.053] WSAGetLastError () returned 10035 [0198.053] htonl (hostlong=0xc0a800e7) returned 0xe700a8c0 [0198.053] socket (af=2, type=1, protocol=6) returned 0x354 [0198.053] ioctlsocket (in: s=0x354, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0198.053] connect (s=0x354, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.231"), namelen=16) returned -1 [0198.054] WSAGetLastError () returned 10035 [0198.054] htonl (hostlong=0xc0a800e8) returned 0xe800a8c0 [0198.054] socket (af=2, type=1, protocol=6) returned 0x380 [0198.054] ioctlsocket (in: s=0x380, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0198.054] connect (s=0x380, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.232"), namelen=16) returned -1 [0198.055] WSAGetLastError () returned 10035 [0198.055] htonl (hostlong=0xc0a800e9) returned 0xe900a8c0 [0198.055] socket (af=2, type=1, protocol=6) returned 0x370 [0198.055] ioctlsocket (in: s=0x370, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0198.055] connect (s=0x370, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.233"), namelen=16) returned -1 [0198.056] WSAGetLastError () returned 10035 [0198.056] htonl (hostlong=0xc0a800ea) returned 0xea00a8c0 [0198.056] socket (af=2, type=1, protocol=6) returned 0x38c [0198.056] ioctlsocket (in: s=0x38c, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0198.056] connect (s=0x38c, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.234"), namelen=16) returned -1 [0198.056] WSAGetLastError () returned 10035 [0198.056] htonl (hostlong=0xc0a800eb) returned 0xeb00a8c0 [0198.057] socket (af=2, type=1, protocol=6) returned 0x394 [0198.057] ioctlsocket (in: s=0x394, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0198.057] connect (s=0x394, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.235"), namelen=16) returned -1 [0198.057] WSAGetLastError () returned 10035 [0198.057] htonl (hostlong=0xc0a800ec) returned 0xec00a8c0 [0198.057] socket (af=2, type=1, protocol=6) returned 0x398 [0198.058] ioctlsocket (in: s=0x398, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0198.058] connect (s=0x398, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.236"), namelen=16) returned -1 [0198.058] WSAGetLastError () returned 10035 [0198.058] htonl (hostlong=0xc0a800ed) returned 0xed00a8c0 [0198.058] socket (af=2, type=1, protocol=6) returned 0x39c [0198.058] ioctlsocket (in: s=0x39c, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0198.058] connect (s=0x39c, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.237"), namelen=16) returned -1 [0198.059] WSAGetLastError () returned 10035 [0198.059] htonl (hostlong=0xc0a800ee) returned 0xee00a8c0 [0198.059] socket (af=2, type=1, protocol=6) returned 0x3a0 [0198.059] ioctlsocket (in: s=0x3a0, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0198.059] connect (s=0x3a0, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.238"), namelen=16) returned -1 [0198.060] WSAGetLastError () returned 10035 [0198.060] htonl (hostlong=0xc0a800ef) returned 0xef00a8c0 [0198.060] socket (af=2, type=1, protocol=6) returned 0x3a4 [0198.060] ioctlsocket (in: s=0x3a4, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0198.060] connect (s=0x3a4, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.239"), namelen=16) returned -1 [0198.061] WSAGetLastError () returned 10035 [0198.061] htonl (hostlong=0xc0a800f0) returned 0xf000a8c0 [0198.061] socket (af=2, type=1, protocol=6) returned 0x3a8 [0198.061] ioctlsocket (in: s=0x3a8, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0198.061] connect (s=0x3a8, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.240"), namelen=16) returned -1 [0198.062] WSAGetLastError () returned 10035 [0198.062] htonl (hostlong=0xc0a800f1) returned 0xf100a8c0 [0198.062] socket (af=2, type=1, protocol=6) returned 0x3ac [0198.062] ioctlsocket (in: s=0x3ac, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0198.062] connect (s=0x3ac, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.241"), namelen=16) returned -1 [0198.063] WSAGetLastError () returned 10035 [0198.063] htonl (hostlong=0xc0a800f2) returned 0xf200a8c0 [0198.063] socket (af=2, type=1, protocol=6) returned 0x3b0 [0198.063] ioctlsocket (in: s=0x3b0, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0198.063] connect (s=0x3b0, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.242"), namelen=16) returned -1 [0198.064] WSAGetLastError () returned 10035 [0198.064] htonl (hostlong=0xc0a800f3) returned 0xf300a8c0 [0198.064] socket (af=2, type=1, protocol=6) returned 0x3b4 [0198.064] ioctlsocket (in: s=0x3b4, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0198.064] connect (s=0x3b4, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.243"), namelen=16) returned -1 [0198.065] WSAGetLastError () returned 10035 [0198.065] htonl (hostlong=0xc0a800f4) returned 0xf400a8c0 [0198.065] socket (af=2, type=1, protocol=6) returned 0x3b8 [0198.065] ioctlsocket (in: s=0x3b8, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0198.065] connect (s=0x3b8, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.244"), namelen=16) returned -1 [0198.066] WSAGetLastError () returned 10035 [0198.066] htonl (hostlong=0xc0a800f5) returned 0xf500a8c0 [0198.066] socket (af=2, type=1, protocol=6) returned 0x3bc [0198.066] ioctlsocket (in: s=0x3bc, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0198.066] connect (s=0x3bc, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.245"), namelen=16) returned -1 [0198.067] WSAGetLastError () returned 10035 [0198.067] htonl (hostlong=0xc0a800f6) returned 0xf600a8c0 [0198.067] socket (af=2, type=1, protocol=6) returned 0x3c0 [0198.067] ioctlsocket (in: s=0x3c0, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0198.067] connect (s=0x3c0, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.246"), namelen=16) returned -1 [0198.067] WSAGetLastError () returned 10035 [0198.068] htonl (hostlong=0xc0a800f7) returned 0xf700a8c0 [0198.068] socket (af=2, type=1, protocol=6) returned 0x3c4 [0198.068] ioctlsocket (in: s=0x3c4, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0198.068] connect (s=0x3c4, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.247"), namelen=16) returned -1 [0198.068] WSAGetLastError () returned 10035 [0198.068] htonl (hostlong=0xc0a800f8) returned 0xf800a8c0 [0198.068] socket (af=2, type=1, protocol=6) returned 0x3c8 [0198.069] ioctlsocket (in: s=0x3c8, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0198.069] connect (s=0x3c8, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.248"), namelen=16) returned -1 [0198.069] WSAGetLastError () returned 10035 [0198.069] htonl (hostlong=0xc0a800f9) returned 0xf900a8c0 [0198.069] socket (af=2, type=1, protocol=6) returned 0x3cc [0198.070] ioctlsocket (in: s=0x3cc, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0198.070] connect (s=0x3cc, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.249"), namelen=16) returned -1 [0198.070] WSAGetLastError () returned 10035 [0198.070] htonl (hostlong=0xc0a800fa) returned 0xfa00a8c0 [0198.070] socket (af=2, type=1, protocol=6) returned 0x3d0 [0198.070] ioctlsocket (in: s=0x3d0, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0198.070] connect (s=0x3d0, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.250"), namelen=16) returned -1 [0198.071] WSAGetLastError () returned 10035 [0198.071] htonl (hostlong=0xc0a800fb) returned 0xfb00a8c0 [0198.071] socket (af=2, type=1, protocol=6) returned 0x3d4 [0198.071] ioctlsocket (in: s=0x3d4, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0198.071] connect (s=0x3d4, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.251"), namelen=16) returned -1 [0198.072] WSAGetLastError () returned 10035 [0198.072] htonl (hostlong=0xc0a800fc) returned 0xfc00a8c0 [0198.072] socket (af=2, type=1, protocol=6) returned 0x3d8 [0198.072] ioctlsocket (in: s=0x3d8, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0198.072] connect (s=0x3d8, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.252"), namelen=16) returned -1 [0198.073] WSAGetLastError () returned 10035 [0198.073] htonl (hostlong=0xc0a800fd) returned 0xfd00a8c0 [0198.073] socket (af=2, type=1, protocol=6) returned 0x3dc [0198.073] ioctlsocket (in: s=0x3dc, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0198.073] connect (s=0x3dc, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.253"), namelen=16) returned -1 [0198.074] WSAGetLastError () returned 10035 [0198.074] htonl (hostlong=0xc0a800fe) returned 0xfe00a8c0 [0198.074] socket (af=2, type=1, protocol=6) returned 0x3e0 [0198.074] ioctlsocket (in: s=0x3e0, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0198.074] connect (s=0x3e0, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.254"), namelen=16) returned -1 [0198.214] WSAGetLastError () returned 10035 [0198.214] GetTickCount () returned 0x1149452 [0198.214] GetTickCount () returned 0x1149452 [0198.214] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.214] GetTickCount () returned 0x1149452 [0198.214] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.214] GetTickCount () returned 0x1149452 [0198.214] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.214] GetTickCount () returned 0x1149452 [0198.214] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.214] GetTickCount () returned 0x1149452 [0198.214] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.214] GetTickCount () returned 0x1149452 [0198.214] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.214] GetTickCount () returned 0x1149452 [0198.214] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.214] GetTickCount () returned 0x1149452 [0198.214] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.214] GetTickCount () returned 0x1149452 [0198.214] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.214] GetTickCount () returned 0x1149452 [0198.214] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.214] GetTickCount () returned 0x1149452 [0198.214] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.214] GetTickCount () returned 0x1149452 [0198.214] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.214] GetTickCount () returned 0x1149452 [0198.214] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.214] GetTickCount () returned 0x1149452 [0198.214] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.214] GetTickCount () returned 0x1149452 [0198.214] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.214] GetTickCount () returned 0x1149452 [0198.214] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.214] GetTickCount () returned 0x1149452 [0198.214] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.214] GetTickCount () returned 0x1149452 [0198.214] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.215] GetTickCount () returned 0x1149452 [0198.215] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.215] GetTickCount () returned 0x1149452 [0198.215] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.215] GetTickCount () returned 0x1149452 [0198.215] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.215] GetTickCount () returned 0x1149452 [0198.215] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.215] GetTickCount () returned 0x1149452 [0198.215] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.215] GetTickCount () returned 0x1149452 [0198.215] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.215] GetTickCount () returned 0x1149452 [0198.215] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.215] GetTickCount () returned 0x1149452 [0198.215] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.215] GetTickCount () returned 0x1149452 [0198.215] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.215] GetTickCount () returned 0x1149452 [0198.215] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.215] GetTickCount () returned 0x1149452 [0198.215] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.215] GetTickCount () returned 0x1149452 [0198.215] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.215] GetTickCount () returned 0x1149452 [0198.215] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.215] GetTickCount () returned 0x1149452 [0198.215] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.215] GetTickCount () returned 0x1149452 [0198.215] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.215] GetTickCount () returned 0x1149452 [0198.215] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.215] GetTickCount () returned 0x1149452 [0198.215] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.215] GetTickCount () returned 0x1149452 [0198.215] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.215] GetTickCount () returned 0x1149452 [0198.215] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.215] GetTickCount () returned 0x1149452 [0198.215] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.216] GetTickCount () returned 0x1149452 [0198.216] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.216] GetTickCount () returned 0x1149452 [0198.216] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.216] GetTickCount () returned 0x1149452 [0198.216] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.216] GetTickCount () returned 0x1149452 [0198.216] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.216] GetTickCount () returned 0x1149452 [0198.216] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.216] GetTickCount () returned 0x1149452 [0198.216] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.216] GetTickCount () returned 0x1149452 [0198.216] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.216] GetTickCount () returned 0x1149452 [0198.216] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.216] GetTickCount () returned 0x1149452 [0198.216] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.216] GetTickCount () returned 0x1149452 [0198.216] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.216] GetTickCount () returned 0x1149452 [0198.216] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.216] GetTickCount () returned 0x1149452 [0198.216] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.216] GetTickCount () returned 0x1149452 [0198.216] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.216] GetTickCount () returned 0x1149452 [0198.216] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.216] GetTickCount () returned 0x1149452 [0198.216] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.216] GetTickCount () returned 0x1149452 [0198.216] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.216] GetTickCount () returned 0x1149452 [0198.216] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.216] GetTickCount () returned 0x1149452 [0198.216] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.216] GetTickCount () returned 0x1149452 [0198.216] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.216] GetTickCount () returned 0x1149452 [0198.216] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.216] GetTickCount () returned 0x1149452 [0198.217] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.217] GetTickCount () returned 0x1149452 [0198.217] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.217] GetTickCount () returned 0x1149452 [0198.217] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.217] GetTickCount () returned 0x1149452 [0198.217] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.217] GetTickCount () returned 0x1149452 [0198.217] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.217] GetTickCount () returned 0x1149452 [0198.217] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.217] GetTickCount () returned 0x1149452 [0198.217] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.217] GetTickCount () returned 0x1149452 [0198.217] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.217] GetTickCount () returned 0x1149452 [0198.217] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.217] GetTickCount () returned 0x1149452 [0198.217] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.217] GetTickCount () returned 0x1149452 [0198.217] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.217] GetTickCount () returned 0x1149452 [0198.217] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.217] GetTickCount () returned 0x1149452 [0198.217] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.217] GetTickCount () returned 0x1149452 [0198.217] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.217] GetTickCount () returned 0x1149452 [0198.217] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.217] GetTickCount () returned 0x1149452 [0198.217] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.217] GetTickCount () returned 0x1149452 [0198.217] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.217] GetTickCount () returned 0x1149452 [0198.217] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.217] GetTickCount () returned 0x1149452 [0198.217] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.217] GetTickCount () returned 0x1149452 [0198.217] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.218] GetTickCount () returned 0x1149452 [0198.218] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.218] GetTickCount () returned 0x1149452 [0198.218] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.218] GetTickCount () returned 0x1149452 [0198.218] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.218] GetTickCount () returned 0x1149452 [0198.218] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.218] GetTickCount () returned 0x1149452 [0198.218] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.218] GetTickCount () returned 0x1149452 [0198.218] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.218] GetTickCount () returned 0x1149452 [0198.218] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.218] GetTickCount () returned 0x1149452 [0198.218] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.218] GetTickCount () returned 0x1149452 [0198.218] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.218] GetTickCount () returned 0x1149452 [0198.218] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.218] GetTickCount () returned 0x1149452 [0198.218] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.218] GetTickCount () returned 0x1149452 [0198.218] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.218] GetTickCount () returned 0x1149452 [0198.218] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.218] GetTickCount () returned 0x1149452 [0198.218] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.218] GetTickCount () returned 0x1149452 [0198.218] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.218] GetTickCount () returned 0x1149452 [0198.218] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.218] GetTickCount () returned 0x1149452 [0198.218] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.218] GetTickCount () returned 0x1149452 [0198.218] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.218] GetTickCount () returned 0x1149452 [0198.218] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.218] GetTickCount () returned 0x1149452 [0198.218] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.218] GetTickCount () returned 0x1149452 [0198.219] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.219] GetTickCount () returned 0x1149452 [0198.219] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.219] GetTickCount () returned 0x1149452 [0198.219] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.219] GetTickCount () returned 0x1149452 [0198.219] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.219] GetTickCount () returned 0x1149452 [0198.219] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.219] GetTickCount () returned 0x1149452 [0198.219] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.219] GetTickCount () returned 0x1149452 [0198.219] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.219] GetTickCount () returned 0x1149452 [0198.219] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.219] GetTickCount () returned 0x1149452 [0198.219] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.219] GetTickCount () returned 0x1149452 [0198.219] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.219] GetTickCount () returned 0x1149452 [0198.219] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.219] GetTickCount () returned 0x1149452 [0198.219] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.219] GetTickCount () returned 0x1149452 [0198.219] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.219] GetTickCount () returned 0x1149452 [0198.219] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.219] GetTickCount () returned 0x1149452 [0198.219] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.219] GetTickCount () returned 0x1149452 [0198.219] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.219] GetTickCount () returned 0x1149452 [0198.219] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.219] GetTickCount () returned 0x1149452 [0198.219] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.219] GetTickCount () returned 0x1149452 [0198.219] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.219] GetTickCount () returned 0x1149452 [0198.219] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.219] GetTickCount () returned 0x1149452 [0198.220] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.220] GetTickCount () returned 0x1149452 [0198.220] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.220] GetTickCount () returned 0x1149452 [0198.220] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.220] GetTickCount () returned 0x1149452 [0198.220] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.220] GetTickCount () returned 0x1149452 [0198.220] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.220] GetTickCount () returned 0x1149452 [0198.220] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.220] GetTickCount () returned 0x1149452 [0198.220] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.220] GetTickCount () returned 0x1149452 [0198.220] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.220] GetTickCount () returned 0x1149452 [0198.220] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.220] GetTickCount () returned 0x1149452 [0198.220] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.220] GetTickCount () returned 0x1149452 [0198.220] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.220] GetTickCount () returned 0x1149452 [0198.220] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.220] GetTickCount () returned 0x1149452 [0198.220] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.220] GetTickCount () returned 0x1149452 [0198.221] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.221] GetTickCount () returned 0x1149461 [0198.221] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.221] GetTickCount () returned 0x1149461 [0198.221] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.221] GetTickCount () returned 0x1149461 [0198.221] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.221] GetTickCount () returned 0x1149461 [0198.221] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.221] GetTickCount () returned 0x1149461 [0198.221] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.221] GetTickCount () returned 0x1149461 [0198.221] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.221] GetTickCount () returned 0x1149461 [0198.221] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.221] GetTickCount () returned 0x1149461 [0198.221] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.221] GetTickCount () returned 0x1149461 [0198.221] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.221] GetTickCount () returned 0x1149461 [0198.221] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.221] GetTickCount () returned 0x1149461 [0198.221] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.221] GetTickCount () returned 0x1149461 [0198.221] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.221] GetTickCount () returned 0x1149461 [0198.221] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.221] GetTickCount () returned 0x1149461 [0198.221] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.221] GetTickCount () returned 0x1149461 [0198.221] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.221] GetTickCount () returned 0x1149461 [0198.221] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.221] GetTickCount () returned 0x1149461 [0198.221] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.221] GetTickCount () returned 0x1149461 [0198.221] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.221] GetTickCount () returned 0x1149461 [0198.221] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.221] GetTickCount () returned 0x1149461 [0198.222] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.222] GetTickCount () returned 0x1149461 [0198.222] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.222] GetTickCount () returned 0x1149461 [0198.222] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.222] GetTickCount () returned 0x1149461 [0198.222] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.222] GetTickCount () returned 0x1149461 [0198.222] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.222] GetTickCount () returned 0x1149461 [0198.222] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.222] GetTickCount () returned 0x1149461 [0198.222] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.222] GetTickCount () returned 0x1149461 [0198.222] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.222] GetTickCount () returned 0x1149461 [0198.222] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.222] GetTickCount () returned 0x1149461 [0198.222] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.222] GetTickCount () returned 0x1149461 [0198.222] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.222] GetTickCount () returned 0x1149461 [0198.222] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.222] GetTickCount () returned 0x1149461 [0198.222] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.222] GetTickCount () returned 0x1149461 [0198.222] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.222] GetTickCount () returned 0x1149461 [0198.222] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.222] GetTickCount () returned 0x1149461 [0198.222] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.222] GetTickCount () returned 0x1149461 [0198.222] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.222] GetTickCount () returned 0x1149461 [0198.222] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.222] GetTickCount () returned 0x1149461 [0198.222] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.222] GetTickCount () returned 0x1149461 [0198.222] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.222] GetTickCount () returned 0x1149461 [0198.222] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.223] GetTickCount () returned 0x1149461 [0198.223] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.223] GetTickCount () returned 0x1149461 [0198.223] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.223] GetTickCount () returned 0x1149461 [0198.223] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.223] GetTickCount () returned 0x1149461 [0198.223] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.223] GetTickCount () returned 0x1149461 [0198.223] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.223] GetTickCount () returned 0x1149461 [0198.223] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.223] GetTickCount () returned 0x1149461 [0198.223] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.223] GetTickCount () returned 0x1149461 [0198.223] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.223] GetTickCount () returned 0x1149461 [0198.223] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.223] GetTickCount () returned 0x1149461 [0198.223] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.223] GetTickCount () returned 0x1149461 [0198.223] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.223] GetTickCount () returned 0x1149461 [0198.223] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.223] GetTickCount () returned 0x1149461 [0198.223] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.223] GetTickCount () returned 0x1149461 [0198.223] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.223] GetTickCount () returned 0x1149461 [0198.223] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.223] GetTickCount () returned 0x1149461 [0198.223] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.223] GetTickCount () returned 0x1149461 [0198.223] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.223] GetTickCount () returned 0x1149461 [0198.223] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.223] GetTickCount () returned 0x1149461 [0198.223] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.223] GetTickCount () returned 0x1149461 [0198.223] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.224] GetTickCount () returned 0x1149461 [0198.224] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.224] GetTickCount () returned 0x1149461 [0198.224] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.224] GetTickCount () returned 0x1149461 [0198.224] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.224] GetTickCount () returned 0x1149461 [0198.224] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.224] GetTickCount () returned 0x1149461 [0198.224] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.224] GetTickCount () returned 0x1149461 [0198.224] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.224] GetTickCount () returned 0x1149461 [0198.224] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.224] GetTickCount () returned 0x1149461 [0198.224] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.224] GetTickCount () returned 0x1149461 [0198.224] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.224] GetTickCount () returned 0x1149461 [0198.224] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.224] GetTickCount () returned 0x1149461 [0198.224] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.224] GetTickCount () returned 0x1149461 [0198.224] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.224] GetTickCount () returned 0x1149461 [0198.224] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.224] GetTickCount () returned 0x1149461 [0198.224] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.224] GetTickCount () returned 0x1149461 [0198.224] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.224] GetTickCount () returned 0x1149461 [0198.224] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.224] GetTickCount () returned 0x1149461 [0198.224] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.224] GetTickCount () returned 0x1149461 [0198.224] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.224] GetTickCount () returned 0x1149461 [0198.224] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.224] GetTickCount () returned 0x1149461 [0198.224] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.225] GetTickCount () returned 0x1149461 [0198.225] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.225] GetTickCount () returned 0x1149461 [0198.225] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.225] GetTickCount () returned 0x1149461 [0198.225] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.225] GetTickCount () returned 0x1149461 [0198.225] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.225] GetTickCount () returned 0x1149461 [0198.225] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.225] GetTickCount () returned 0x1149461 [0198.225] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.225] GetTickCount () returned 0x1149461 [0198.225] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.225] GetTickCount () returned 0x1149461 [0198.225] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.225] GetTickCount () returned 0x1149461 [0198.225] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.225] GetTickCount () returned 0x1149461 [0198.225] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.225] GetTickCount () returned 0x1149461 [0198.225] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.225] GetTickCount () returned 0x1149461 [0198.225] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.225] GetTickCount () returned 0x1149461 [0198.225] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.225] GetTickCount () returned 0x1149461 [0198.225] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.225] GetTickCount () returned 0x1149461 [0198.225] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.225] GetTickCount () returned 0x1149461 [0198.225] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.225] GetTickCount () returned 0x1149461 [0198.225] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.225] GetTickCount () returned 0x1149461 [0198.225] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.225] GetTickCount () returned 0x1149461 [0198.225] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.225] GetTickCount () returned 0x1149461 [0198.225] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.226] GetTickCount () returned 0x1149461 [0198.226] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.226] GetTickCount () returned 0x1149461 [0198.226] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.226] GetTickCount () returned 0x1149461 [0198.226] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.226] GetTickCount () returned 0x1149461 [0198.226] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.226] GetTickCount () returned 0x1149461 [0198.226] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.226] GetTickCount () returned 0x1149461 [0198.226] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.226] GetTickCount () returned 0x1149461 [0198.226] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.226] GetTickCount () returned 0x1149461 [0198.226] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.226] GetTickCount () returned 0x1149461 [0198.226] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.226] GetTickCount () returned 0x1149461 [0198.226] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.226] GetTickCount () returned 0x1149461 [0198.226] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.226] GetTickCount () returned 0x1149461 [0198.226] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.226] GetTickCount () returned 0x1149461 [0198.226] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.226] GetTickCount () returned 0x1149461 [0198.226] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.226] GetTickCount () returned 0x1149461 [0198.226] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.226] GetTickCount () returned 0x1149461 [0198.226] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.226] GetTickCount () returned 0x1149461 [0198.226] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0198.226] GetTickCount () returned 0x1149461 [0198.227] getsockopt (in: s=0x3e0, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0198.227] recv (in: s=0x3e0, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0198.227] WSAGetLastError () returned 10057 [0198.227] closesocket (s=0x3e0) returned 0 [0198.227] getsockopt (in: s=0x3dc, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0198.227] recv (in: s=0x3dc, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0198.228] WSAGetLastError () returned 10057 [0198.228] closesocket (s=0x3dc) returned 0 [0198.228] getsockopt (in: s=0x3d8, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0198.228] recv (in: s=0x3d8, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0198.228] WSAGetLastError () returned 10057 [0198.228] closesocket (s=0x3d8) returned 0 [0198.228] getsockopt (in: s=0x3d4, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0198.228] recv (in: s=0x3d4, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0198.228] WSAGetLastError () returned 10057 [0198.228] closesocket (s=0x3d4) returned 0 [0198.229] getsockopt (in: s=0x3d0, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0198.229] recv (in: s=0x3d0, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0198.229] WSAGetLastError () returned 10057 [0198.229] closesocket (s=0x3d0) returned 0 [0198.229] getsockopt (in: s=0x3cc, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0198.229] recv (in: s=0x3cc, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0198.229] WSAGetLastError () returned 10057 [0198.229] closesocket (s=0x3cc) returned 0 [0198.230] getsockopt (in: s=0x3c8, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0198.230] recv (in: s=0x3c8, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0198.230] WSAGetLastError () returned 10057 [0198.230] closesocket (s=0x3c8) returned 0 [0198.230] getsockopt (in: s=0x3c4, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0198.230] recv (in: s=0x3c4, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0198.230] WSAGetLastError () returned 10057 [0198.230] closesocket (s=0x3c4) returned 0 [0198.230] getsockopt (in: s=0x3c0, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0198.230] recv (in: s=0x3c0, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0198.230] WSAGetLastError () returned 10057 [0198.230] closesocket (s=0x3c0) returned 0 [0198.231] getsockopt (in: s=0x3bc, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0198.231] recv (in: s=0x3bc, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0198.231] WSAGetLastError () returned 10057 [0198.231] closesocket (s=0x3bc) returned 0 [0198.231] getsockopt (in: s=0x3b8, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0198.231] recv (in: s=0x3b8, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0198.231] WSAGetLastError () returned 10057 [0198.231] closesocket (s=0x3b8) returned 0 [0198.232] getsockopt (in: s=0x3b4, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0198.232] recv (in: s=0x3b4, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0198.232] WSAGetLastError () returned 10057 [0198.232] closesocket (s=0x3b4) returned 0 [0198.232] getsockopt (in: s=0x3b0, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0198.232] recv (in: s=0x3b0, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0198.232] WSAGetLastError () returned 10057 [0198.232] closesocket (s=0x3b0) returned 0 [0198.233] getsockopt (in: s=0x3ac, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0198.233] recv (in: s=0x3ac, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0198.233] WSAGetLastError () returned 10057 [0198.233] closesocket (s=0x3ac) returned 0 [0198.233] getsockopt (in: s=0x3a8, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0198.233] recv (in: s=0x3a8, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0198.233] WSAGetLastError () returned 10057 [0198.233] closesocket (s=0x3a8) returned 0 [0198.233] getsockopt (in: s=0x3a4, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0198.233] recv (in: s=0x3a4, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0198.233] WSAGetLastError () returned 10057 [0198.233] closesocket (s=0x3a4) returned 0 [0198.234] getsockopt (in: s=0x3a0, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0198.234] recv (in: s=0x3a0, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0198.234] WSAGetLastError () returned 10057 [0198.234] closesocket (s=0x3a0) returned 0 [0198.234] getsockopt (in: s=0x39c, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0198.234] recv (in: s=0x39c, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0198.234] WSAGetLastError () returned 10057 [0198.234] closesocket (s=0x39c) returned 0 [0198.235] getsockopt (in: s=0x398, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0198.235] recv (in: s=0x398, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0198.235] WSAGetLastError () returned 10057 [0198.235] closesocket (s=0x398) returned 0 [0198.235] getsockopt (in: s=0x394, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0198.235] recv (in: s=0x394, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0198.235] WSAGetLastError () returned 10057 [0198.235] closesocket (s=0x394) returned 0 [0198.236] getsockopt (in: s=0x38c, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0198.236] recv (in: s=0x38c, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0198.236] WSAGetLastError () returned 10057 [0198.236] closesocket (s=0x38c) returned 0 [0198.236] getsockopt (in: s=0x370, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0198.236] recv (in: s=0x370, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0198.236] WSAGetLastError () returned 10057 [0198.236] closesocket (s=0x370) returned 0 [0198.236] getsockopt (in: s=0x380, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0198.236] recv (in: s=0x380, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0198.237] WSAGetLastError () returned 10057 [0198.237] closesocket (s=0x380) returned 0 [0198.237] getsockopt (in: s=0x354, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0198.237] recv (in: s=0x354, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0198.237] WSAGetLastError () returned 10057 [0198.237] closesocket (s=0x354) returned 0 [0198.237] getsockopt (in: s=0x350, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0198.237] recv (in: s=0x350, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0198.237] WSAGetLastError () returned 10057 [0198.237] closesocket (s=0x350) returned 0 [0198.238] getsockopt (in: s=0x34c, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0198.238] recv (in: s=0x34c, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0198.238] WSAGetLastError () returned 10057 [0198.238] closesocket (s=0x34c) returned 0 [0198.238] getsockopt (in: s=0x2f8, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0198.238] recv (in: s=0x2f8, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0198.238] WSAGetLastError () returned 10057 [0198.238] closesocket (s=0x2f8) returned 0 [0198.239] getsockopt (in: s=0x37c, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0198.239] recv (in: s=0x37c, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0198.239] WSAGetLastError () returned 10057 [0198.239] closesocket (s=0x37c) returned 0 [0198.239] getsockopt (in: s=0x390, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0198.239] recv (in: s=0x390, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0198.239] WSAGetLastError () returned 10057 [0198.239] closesocket (s=0x390) returned 0 [0198.239] getsockopt (in: s=0x364, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0198.239] recv (in: s=0x364, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0198.240] WSAGetLastError () returned 10057 [0198.240] closesocket (s=0x364) returned 0 [0198.240] getsockopt (in: s=0x374, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0198.240] recv (in: s=0x374, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0198.240] WSAGetLastError () returned 10057 [0198.240] closesocket (s=0x374) returned 0 [0198.240] getsockopt (in: s=0x384, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0198.240] recv (in: s=0x384, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0198.240] WSAGetLastError () returned 10057 [0198.240] closesocket (s=0x384) returned 0 [0198.241] getsockopt (in: s=0x344, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0198.241] recv (in: s=0x344, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0198.241] WSAGetLastError () returned 10057 [0198.241] closesocket (s=0x344) returned 0 [0198.241] getsockopt (in: s=0x36c, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0198.241] recv (in: s=0x36c, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0198.241] WSAGetLastError () returned 10057 [0198.241] closesocket (s=0x36c) returned 0 [0198.242] getsockopt (in: s=0x360, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0198.242] recv (in: s=0x360, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0198.242] WSAGetLastError () returned 10057 [0198.242] closesocket (s=0x360) returned 0 [0198.242] getsockopt (in: s=0x368, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0198.242] recv (in: s=0x368, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0198.242] WSAGetLastError () returned 10057 [0198.242] closesocket (s=0x368) returned 0 [0198.242] GetProcessHeap () returned 0x8a0000 [0198.242] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8d3d80 | out: hHeap=0x8a0000) returned 1 [0198.243] GetProcessHeap () returned 0x8a0000 [0198.243] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8d2d70 | out: hHeap=0x8a0000) returned 1 [0198.243] htonl (hostlong=0x100007f) returned 0x7f000001 [0198.243] GetProcessHeap () returned 0x8a0000 [0198.243] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36eb0d8 | out: hHeap=0x8a0000) returned 1 [0198.243] WaitForSingleObject (hHandle=0x254, dwMilliseconds=0xffffffff) returned 0x0 [0198.243] Sleep (dwMilliseconds=0x2710) [0208.578] GetProcessHeap () returned 0x8a0000 [0208.578] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x4000) returned 0x3ac0068 [0208.585] GetProcessHeap () returned 0x8a0000 [0208.585] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ad4090 [0208.598] WNetOpenEnumW (in: dwScope=0x1, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x261f86c | out: lphEnum=0x261f86c*=0x96a238) returned 0x0 [0209.441] WNetEnumResourceW (in: hEnum=0x96a238, lpcCount=0x261f860, lpBuffer=0x3ac0068, lpBufferSize=0x261f874 | out: lpcCount=0x261f860, lpBuffer=0x3ac0068, lpBufferSize=0x261f874) returned 0x103 [0209.441] WNetCloseEnum (hEnum=0x96a238) returned 0x0 [0209.441] GetProcessHeap () returned 0x8a0000 [0209.441] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0209.441] GetProcessHeap () returned 0x8a0000 [0209.441] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ad4090 | out: hHeap=0x8a0000) returned 1 [0209.442] GetProcessHeap () returned 0x8a0000 [0209.442] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x4000) returned 0x3ac0068 [0209.443] GetProcessHeap () returned 0x8a0000 [0209.443] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ad4090 [0209.443] WNetOpenEnumW (in: dwScope=0x4, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x261f854 | out: lphEnum=0x261f854*=0x8b83f8) returned 0x0 [0209.444] WNetEnumResourceW (in: hEnum=0x8b83f8, lpcCount=0x261f848, lpBuffer=0x3ac0068, lpBufferSize=0x261f85c | out: lpcCount=0x261f848, lpBuffer=0x3ac0068, lpBufferSize=0x261f85c) returned 0x103 [0209.445] WNetCloseEnum (hEnum=0x8b83f8) returned 0x0 [0209.445] GetProcessHeap () returned 0x8a0000 [0209.445] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0209.445] GetProcessHeap () returned 0x8a0000 [0209.445] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ad4090 | out: hHeap=0x8a0000) returned 1 [0209.445] GetProcessHeap () returned 0x8a0000 [0209.445] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x4000) returned 0x3ac0068 [0209.446] GetProcessHeap () returned 0x8a0000 [0209.446] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ad4090 [0209.446] WNetOpenEnumW (in: dwScope=0x5, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x261f83c | out: lphEnum=0x261f83c*=0x96a238) returned 0x0 [0209.453] WNetEnumResourceW (in: hEnum=0x96a238, lpcCount=0x261f830, lpBuffer=0x3ac0068, lpBufferSize=0x261f844 | out: lpcCount=0x261f830, lpBuffer=0x3ac0068, lpBufferSize=0x261f844) returned 0x0 [0209.453] GetProcessHeap () returned 0x8a0000 [0209.453] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x4000) returned 0x3ac4070 [0209.453] GetProcessHeap () returned 0x8a0000 [0209.453] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ae4098 [0209.453] WNetOpenEnumW (in: dwScope=0x5, dwType=0x0, dwUsage=0x0, lpNetResource=0x3ac0088, lphEnum=0x261f7f4 | out: lphEnum=0x261f7f4*=0x0) returned 0x57 [0209.453] GetProcessHeap () returned 0x8a0000 [0209.453] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac4070 | out: hHeap=0x8a0000) returned 1 [0209.453] GetProcessHeap () returned 0x8a0000 [0209.453] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ae4098 | out: hHeap=0x8a0000) returned 1 [0209.454] GetProcessHeap () returned 0x8a0000 [0209.454] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x4000) returned 0x3ac4070 [0209.454] GetProcessHeap () returned 0x8a0000 [0209.454] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ae4098 [0209.455] WNetOpenEnumW (in: dwScope=0x5, dwType=0x0, dwUsage=0x0, lpNetResource=0x3ac0068, lphEnum=0x261f7f4 | out: lphEnum=0x261f7f4*=0x8c9d90) returned 0x0 [0209.459] WNetEnumResourceW (in: hEnum=0x8c9d90, lpcCount=0x261f7e8, lpBuffer=0x3ac4070, lpBufferSize=0x261f7fc | out: lpcCount=0x261f7e8, lpBuffer=0x3ac4070, lpBufferSize=0x261f7fc) returned 0x0 [0209.459] WNetEnumResourceW (in: hEnum=0x8c9d90, lpcCount=0x261f7e8, lpBuffer=0x3ac4070, lpBufferSize=0x261f7fc | out: lpcCount=0x261f7e8, lpBuffer=0x3ac4070, lpBufferSize=0x261f7fc) returned 0x103 [0209.459] WNetCloseEnum (hEnum=0x8c9d90) returned 0x0 [0209.459] GetProcessHeap () returned 0x8a0000 [0209.459] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac4070 | out: hHeap=0x8a0000) returned 1 [0209.459] GetProcessHeap () returned 0x8a0000 [0209.459] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ae4098 | out: hHeap=0x8a0000) returned 1 [0209.460] WNetEnumResourceW (in: hEnum=0x96a238, lpcCount=0x261f830, lpBuffer=0x3ac0068, lpBufferSize=0x261f844 | out: lpcCount=0x261f830, lpBuffer=0x3ac0068, lpBufferSize=0x261f844) returned 0x103 [0209.460] WNetCloseEnum (hEnum=0x96a238) returned 0x0 [0209.460] GetProcessHeap () returned 0x8a0000 [0209.460] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0209.460] GetProcessHeap () returned 0x8a0000 [0209.460] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ad4090 | out: hHeap=0x8a0000) returned 1 [0209.461] GetProcessHeap () returned 0x8a0000 [0209.461] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x4000) returned 0x3ac0068 [0209.462] GetProcessHeap () returned 0x8a0000 [0209.462] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ad4090 [0209.462] WNetOpenEnumW (in: dwScope=0x3, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x261f86c | out: lphEnum=0x261f86c*=0x8b8578) returned 0x0 [0209.463] WNetEnumResourceW (in: hEnum=0x8b8578, lpcCount=0x261f860, lpBuffer=0x3ac0068, lpBufferSize=0x261f874 | out: lpcCount=0x261f860, lpBuffer=0x3ac0068, lpBufferSize=0x261f874) returned 0x103 [0209.463] WNetCloseEnum (hEnum=0x8b8578) returned 0x0 [0209.463] GetProcessHeap () returned 0x8a0000 [0209.463] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0209.463] GetProcessHeap () returned 0x8a0000 [0209.463] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ad4090 | out: hHeap=0x8a0000) returned 1 [0209.464] GetProcessHeap () returned 0x8a0000 [0209.464] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x4000) returned 0x3ac0068 [0209.464] GetProcessHeap () returned 0x8a0000 [0209.464] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ad4090 [0209.465] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x261f854 | out: lphEnum=0x261f854*=0x9936c0) returned 0x0 [0209.465] WNetEnumResourceW (in: hEnum=0x9936c0, lpcCount=0x261f848, lpBuffer=0x3ac0068, lpBufferSize=0x261f85c | out: lpcCount=0x261f848, lpBuffer=0x3ac0068, lpBufferSize=0x261f85c) returned 0x0 [0209.465] GetProcessHeap () returned 0x8a0000 [0209.465] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x4000) returned 0x3ac4070 [0209.465] GetProcessHeap () returned 0x8a0000 [0209.465] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ae4098 [0209.465] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x3ac00a8, lphEnum=0x261f80c | out: lphEnum=0x261f80c*=0x0) returned 0x4c6 [0209.466] GetProcessHeap () returned 0x8a0000 [0209.466] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac4070 | out: hHeap=0x8a0000) returned 1 [0209.466] GetProcessHeap () returned 0x8a0000 [0209.466] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ae4098 | out: hHeap=0x8a0000) returned 1 [0209.466] GetProcessHeap () returned 0x8a0000 [0209.466] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x4000) returned 0x3ac4070 [0209.466] GetProcessHeap () returned 0x8a0000 [0209.466] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ae4098 [0209.467] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x3ac0088, lphEnum=0x261f80c | out: lphEnum=0x261f80c*=0x8b83f8) returned 0x0 [0209.473] WNetEnumResourceW (in: hEnum=0x8b83f8, lpcCount=0x261f800, lpBuffer=0x3ac4070, lpBufferSize=0x261f814 | out: lpcCount=0x261f800, lpBuffer=0x3ac4070, lpBufferSize=0x261f814) returned 0x0 [0209.473] GetProcessHeap () returned 0x8a0000 [0209.473] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x4000) returned 0x3ac8078 [0209.473] GetProcessHeap () returned 0x8a0000 [0209.473] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x9712d8 [0209.474] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x3ac4070, lphEnum=0x261f7c4 | out: lphEnum=0x261f7c4*=0x8b85b8) returned 0x0 [0209.476] WNetEnumResourceW (in: hEnum=0x8b85b8, lpcCount=0x261f7b8, lpBuffer=0x3ac8078, lpBufferSize=0x261f7cc | out: lpcCount=0x261f7b8, lpBuffer=0x3ac8078, lpBufferSize=0x261f7cc) returned 0x0 [0209.477] GetProcessHeap () returned 0x8a0000 [0209.477] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x4000) returned 0x9812e0 [0209.477] GetProcessHeap () returned 0x8a0000 [0209.477] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0209.477] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x3ac8078, lphEnum=0x261f77c | out: lphEnum=0x261f77c*=0x8b8278) returned 0x0 [0209.483] WNetEnumResourceW (in: hEnum=0x8b8278, lpcCount=0x261f770, lpBuffer=0x9812e0, lpBufferSize=0x261f784 | out: lpcCount=0x261f770, lpBuffer=0x9812e0, lpBufferSize=0x261f784) returned 0x103 [0209.483] WNetCloseEnum (hEnum=0x8b8278) returned 0x0 [0209.483] GetProcessHeap () returned 0x8a0000 [0209.483] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x9812e0 | out: hHeap=0x8a0000) returned 1 [0209.483] GetProcessHeap () returned 0x8a0000 [0209.483] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0209.484] WNetEnumResourceW (in: hEnum=0x8b85b8, lpcCount=0x261f7b8, lpBuffer=0x3ac8078, lpBufferSize=0x261f7cc | out: lpcCount=0x261f7b8, lpBuffer=0x3ac8078, lpBufferSize=0x261f7cc) returned 0x103 [0209.484] WNetCloseEnum (hEnum=0x8b85b8) returned 0x0 [0209.484] GetProcessHeap () returned 0x8a0000 [0209.484] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac8078 | out: hHeap=0x8a0000) returned 1 [0209.484] GetProcessHeap () returned 0x8a0000 [0209.484] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x9712d8 | out: hHeap=0x8a0000) returned 1 [0209.485] WNetEnumResourceW (in: hEnum=0x8b83f8, lpcCount=0x261f800, lpBuffer=0x3ac4070, lpBufferSize=0x261f814 | out: lpcCount=0x261f800, lpBuffer=0x3ac4070, lpBufferSize=0x261f814) returned 0x103 [0209.485] WNetCloseEnum (hEnum=0x8b83f8) returned 0x0 [0209.485] GetProcessHeap () returned 0x8a0000 [0209.485] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac4070 | out: hHeap=0x8a0000) returned 1 [0209.485] GetProcessHeap () returned 0x8a0000 [0209.485] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ae4098 | out: hHeap=0x8a0000) returned 1 [0209.486] GetProcessHeap () returned 0x8a0000 [0209.486] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x4000) returned 0x3ac4070 [0209.486] GetProcessHeap () returned 0x8a0000 [0209.486] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ae4098 [0209.487] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x3ac0068, lphEnum=0x261f80c | out: lphEnum=0x261f80c*=0x8b82d8) returned 0x0 [0209.488] WNetEnumResourceW (in: hEnum=0x8b82d8, lpcCount=0x261f800, lpBuffer=0x3ac4070, lpBufferSize=0x261f814 | out: lpcCount=0x261f800, lpBuffer=0x3ac4070, lpBufferSize=0x261f814) returned 0x103 [0209.488] WNetCloseEnum (hEnum=0x8b82d8) returned 0x0 [0209.488] GetProcessHeap () returned 0x8a0000 [0209.488] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac4070 | out: hHeap=0x8a0000) returned 1 [0209.488] GetProcessHeap () returned 0x8a0000 [0209.488] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ae4098 | out: hHeap=0x8a0000) returned 1 [0209.488] WNetEnumResourceW (in: hEnum=0x9936c0, lpcCount=0x261f848, lpBuffer=0x3ac0068, lpBufferSize=0x261f85c | out: lpcCount=0x261f848, lpBuffer=0x3ac0068, lpBufferSize=0x261f85c) returned 0x103 [0209.488] WNetCloseEnum (hEnum=0x9936c0) returned 0x0 [0209.488] GetProcessHeap () returned 0x8a0000 [0209.488] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0209.489] GetProcessHeap () returned 0x8a0000 [0209.489] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ad4090 | out: hHeap=0x8a0000) returned 1 [0209.490] GetProcessHeap () returned 0x8a0000 [0209.490] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x3a98) returned 0x36eb0d8 [0209.490] GetIpAddrTable (in: pIpAddrTable=0x36eb0d8, pdwSize=0x261f84c, bOrder=0 | out: pIpAddrTable=0x36eb0d8, pdwSize=0x261f84c) returned 0x0 [0209.497] htonl (hostlong=0xda00a8c0) returned 0xc0a800da [0209.497] htonl (hostlong=0xda00a8c0) returned 0xc0a800da [0209.497] htonl (hostlong=0xffffff) returned 0xffffff00 [0209.497] htons (hostshort=0x1bd) returned 0xbd01 [0209.497] GetProcessHeap () returned 0x8a0000 [0209.497] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x800) returned 0x8d1d60 [0209.497] GetProcessHeap () returned 0x8a0000 [0209.497] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x800) returned 0x8d4588 [0209.497] htonl (hostlong=0xc0a80000) returned 0xa8c0 [0209.497] socket (af=2, type=1, protocol=6) returned 0x360 [0209.498] ioctlsocket (in: s=0x360, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.498] connect (s=0x360, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.0"), namelen=16) returned -1 [0209.500] WSAGetLastError () returned 10035 [0209.500] htonl (hostlong=0xc0a80001) returned 0x100a8c0 [0209.500] socket (af=2, type=1, protocol=6) returned 0x368 [0209.500] ioctlsocket (in: s=0x368, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.500] connect (s=0x368, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.1"), namelen=16) returned -1 [0209.501] WSAGetLastError () returned 10035 [0209.501] htonl (hostlong=0xc0a80002) returned 0x200a8c0 [0209.501] socket (af=2, type=1, protocol=6) returned 0x36c [0209.501] ioctlsocket (in: s=0x36c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.501] connect (s=0x36c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.2"), namelen=16) returned -1 [0209.502] WSAGetLastError () returned 10035 [0209.502] htonl (hostlong=0xc0a80003) returned 0x300a8c0 [0209.502] socket (af=2, type=1, protocol=6) returned 0x344 [0209.502] ioctlsocket (in: s=0x344, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.502] connect (s=0x344, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.3"), namelen=16) returned -1 [0209.503] WSAGetLastError () returned 10035 [0209.503] htonl (hostlong=0xc0a80004) returned 0x400a8c0 [0209.503] socket (af=2, type=1, protocol=6) returned 0x384 [0209.503] ioctlsocket (in: s=0x384, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.503] connect (s=0x384, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.4"), namelen=16) returned -1 [0209.504] WSAGetLastError () returned 10035 [0209.504] htonl (hostlong=0xc0a80005) returned 0x500a8c0 [0209.504] socket (af=2, type=1, protocol=6) returned 0x374 [0209.504] ioctlsocket (in: s=0x374, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.504] connect (s=0x374, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.5"), namelen=16) returned -1 [0209.505] WSAGetLastError () returned 10035 [0209.505] htonl (hostlong=0xc0a80006) returned 0x600a8c0 [0209.505] socket (af=2, type=1, protocol=6) returned 0x364 [0209.505] ioctlsocket (in: s=0x364, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.505] connect (s=0x364, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.6"), namelen=16) returned -1 [0209.506] WSAGetLastError () returned 10035 [0209.506] htonl (hostlong=0xc0a80007) returned 0x700a8c0 [0209.506] socket (af=2, type=1, protocol=6) returned 0x390 [0209.506] ioctlsocket (in: s=0x390, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.506] connect (s=0x390, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.7"), namelen=16) returned -1 [0209.507] WSAGetLastError () returned 10035 [0209.507] htonl (hostlong=0xc0a80008) returned 0x800a8c0 [0209.507] socket (af=2, type=1, protocol=6) returned 0x37c [0209.508] ioctlsocket (in: s=0x37c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.508] connect (s=0x37c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.8"), namelen=16) returned -1 [0209.508] WSAGetLastError () returned 10035 [0209.508] htonl (hostlong=0xc0a80009) returned 0x900a8c0 [0209.508] socket (af=2, type=1, protocol=6) returned 0x2f8 [0209.509] ioctlsocket (in: s=0x2f8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.509] connect (s=0x2f8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.9"), namelen=16) returned -1 [0209.509] WSAGetLastError () returned 10035 [0209.509] htonl (hostlong=0xc0a8000a) returned 0xa00a8c0 [0209.509] socket (af=2, type=1, protocol=6) returned 0x34c [0209.510] ioctlsocket (in: s=0x34c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.510] connect (s=0x34c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.10"), namelen=16) returned -1 [0209.510] WSAGetLastError () returned 10035 [0209.510] htonl (hostlong=0xc0a8000b) returned 0xb00a8c0 [0209.510] socket (af=2, type=1, protocol=6) returned 0x350 [0209.511] ioctlsocket (in: s=0x350, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.511] connect (s=0x350, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.11"), namelen=16) returned -1 [0209.511] WSAGetLastError () returned 10035 [0209.511] htonl (hostlong=0xc0a8000c) returned 0xc00a8c0 [0209.512] socket (af=2, type=1, protocol=6) returned 0x354 [0209.512] ioctlsocket (in: s=0x354, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.512] connect (s=0x354, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.12"), namelen=16) returned -1 [0209.513] WSAGetLastError () returned 10035 [0209.513] htonl (hostlong=0xc0a8000d) returned 0xd00a8c0 [0209.513] socket (af=2, type=1, protocol=6) returned 0x380 [0209.513] ioctlsocket (in: s=0x380, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.513] connect (s=0x380, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.13"), namelen=16) returned -1 [0209.514] WSAGetLastError () returned 10035 [0209.514] htonl (hostlong=0xc0a8000e) returned 0xe00a8c0 [0209.514] socket (af=2, type=1, protocol=6) returned 0x370 [0209.514] ioctlsocket (in: s=0x370, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.514] connect (s=0x370, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.14"), namelen=16) returned -1 [0209.515] WSAGetLastError () returned 10035 [0209.515] htonl (hostlong=0xc0a8000f) returned 0xf00a8c0 [0209.515] socket (af=2, type=1, protocol=6) returned 0x38c [0209.515] ioctlsocket (in: s=0x38c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.515] connect (s=0x38c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.15"), namelen=16) returned -1 [0209.516] WSAGetLastError () returned 10035 [0209.516] htonl (hostlong=0xc0a80010) returned 0x1000a8c0 [0209.516] socket (af=2, type=1, protocol=6) returned 0x394 [0209.516] ioctlsocket (in: s=0x394, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.516] connect (s=0x394, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.16"), namelen=16) returned -1 [0209.535] WSAGetLastError () returned 10035 [0209.535] htonl (hostlong=0xc0a80011) returned 0x1100a8c0 [0209.535] socket (af=2, type=1, protocol=6) returned 0x398 [0209.535] ioctlsocket (in: s=0x398, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.535] connect (s=0x398, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.17"), namelen=16) returned -1 [0209.536] WSAGetLastError () returned 10035 [0209.536] htonl (hostlong=0xc0a80012) returned 0x1200a8c0 [0209.536] socket (af=2, type=1, protocol=6) returned 0x39c [0209.536] ioctlsocket (in: s=0x39c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.536] connect (s=0x39c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.18"), namelen=16) returned -1 [0209.537] WSAGetLastError () returned 10035 [0209.537] htonl (hostlong=0xc0a80013) returned 0x1300a8c0 [0209.537] socket (af=2, type=1, protocol=6) returned 0x3a0 [0209.537] ioctlsocket (in: s=0x3a0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.537] connect (s=0x3a0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.19"), namelen=16) returned -1 [0209.538] WSAGetLastError () returned 10035 [0209.538] htonl (hostlong=0xc0a80014) returned 0x1400a8c0 [0209.538] socket (af=2, type=1, protocol=6) returned 0x3a4 [0209.538] ioctlsocket (in: s=0x3a4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.538] connect (s=0x3a4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.20"), namelen=16) returned -1 [0209.539] WSAGetLastError () returned 10035 [0209.539] htonl (hostlong=0xc0a80015) returned 0x1500a8c0 [0209.539] socket (af=2, type=1, protocol=6) returned 0x3a8 [0209.539] ioctlsocket (in: s=0x3a8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.539] connect (s=0x3a8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.21"), namelen=16) returned -1 [0209.540] WSAGetLastError () returned 10035 [0209.540] htonl (hostlong=0xc0a80016) returned 0x1600a8c0 [0209.540] socket (af=2, type=1, protocol=6) returned 0x3ac [0209.540] ioctlsocket (in: s=0x3ac, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.540] connect (s=0x3ac, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.22"), namelen=16) returned -1 [0209.541] WSAGetLastError () returned 10035 [0209.541] htonl (hostlong=0xc0a80017) returned 0x1700a8c0 [0209.541] socket (af=2, type=1, protocol=6) returned 0x3b0 [0209.541] ioctlsocket (in: s=0x3b0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.541] connect (s=0x3b0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.23"), namelen=16) returned -1 [0209.542] WSAGetLastError () returned 10035 [0209.542] htonl (hostlong=0xc0a80018) returned 0x1800a8c0 [0209.542] socket (af=2, type=1, protocol=6) returned 0x3b4 [0209.542] ioctlsocket (in: s=0x3b4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.542] connect (s=0x3b4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.24"), namelen=16) returned -1 [0209.543] WSAGetLastError () returned 10035 [0209.543] htonl (hostlong=0xc0a80019) returned 0x1900a8c0 [0209.543] socket (af=2, type=1, protocol=6) returned 0x3b8 [0209.543] ioctlsocket (in: s=0x3b8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.543] connect (s=0x3b8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.25"), namelen=16) returned -1 [0209.544] WSAGetLastError () returned 10035 [0209.544] htonl (hostlong=0xc0a8001a) returned 0x1a00a8c0 [0209.544] socket (af=2, type=1, protocol=6) returned 0x3bc [0209.544] ioctlsocket (in: s=0x3bc, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.544] connect (s=0x3bc, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.26"), namelen=16) returned -1 [0209.545] WSAGetLastError () returned 10035 [0209.545] htonl (hostlong=0xc0a8001b) returned 0x1b00a8c0 [0209.545] socket (af=2, type=1, protocol=6) returned 0x3c0 [0209.545] ioctlsocket (in: s=0x3c0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.545] connect (s=0x3c0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.27"), namelen=16) returned -1 [0209.546] WSAGetLastError () returned 10035 [0209.546] htonl (hostlong=0xc0a8001c) returned 0x1c00a8c0 [0209.546] socket (af=2, type=1, protocol=6) returned 0x3c4 [0209.546] ioctlsocket (in: s=0x3c4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.546] connect (s=0x3c4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.28"), namelen=16) returned -1 [0209.547] WSAGetLastError () returned 10035 [0209.547] htonl (hostlong=0xc0a8001d) returned 0x1d00a8c0 [0209.547] socket (af=2, type=1, protocol=6) returned 0x3c8 [0209.547] ioctlsocket (in: s=0x3c8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.547] connect (s=0x3c8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.29"), namelen=16) returned -1 [0209.547] WSAGetLastError () returned 10035 [0209.547] htonl (hostlong=0xc0a8001e) returned 0x1e00a8c0 [0209.548] socket (af=2, type=1, protocol=6) returned 0x3cc [0209.548] ioctlsocket (in: s=0x3cc, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.548] connect (s=0x3cc, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.30"), namelen=16) returned -1 [0209.548] WSAGetLastError () returned 10035 [0209.548] htonl (hostlong=0xc0a8001f) returned 0x1f00a8c0 [0209.548] socket (af=2, type=1, protocol=6) returned 0x3d0 [0209.549] ioctlsocket (in: s=0x3d0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.549] connect (s=0x3d0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.31"), namelen=16) returned -1 [0209.549] WSAGetLastError () returned 10035 [0209.549] htonl (hostlong=0xc0a80020) returned 0x2000a8c0 [0209.549] socket (af=2, type=1, protocol=6) returned 0x3d4 [0209.550] ioctlsocket (in: s=0x3d4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.550] connect (s=0x3d4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.32"), namelen=16) returned -1 [0209.560] WSAGetLastError () returned 10035 [0209.560] htonl (hostlong=0xc0a80021) returned 0x2100a8c0 [0209.560] socket (af=2, type=1, protocol=6) returned 0x3d8 [0209.560] ioctlsocket (in: s=0x3d8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.560] connect (s=0x3d8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.33"), namelen=16) returned -1 [0209.561] WSAGetLastError () returned 10035 [0209.561] htonl (hostlong=0xc0a80022) returned 0x2200a8c0 [0209.561] socket (af=2, type=1, protocol=6) returned 0x3dc [0209.561] ioctlsocket (in: s=0x3dc, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.561] connect (s=0x3dc, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.34"), namelen=16) returned -1 [0209.562] WSAGetLastError () returned 10035 [0209.562] htonl (hostlong=0xc0a80023) returned 0x2300a8c0 [0209.562] socket (af=2, type=1, protocol=6) returned 0x3e0 [0209.562] ioctlsocket (in: s=0x3e0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.562] connect (s=0x3e0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.35"), namelen=16) returned -1 [0209.563] WSAGetLastError () returned 10035 [0209.563] htonl (hostlong=0xc0a80024) returned 0x2400a8c0 [0209.563] socket (af=2, type=1, protocol=6) returned 0x3e4 [0209.563] ioctlsocket (in: s=0x3e4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.563] connect (s=0x3e4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.36"), namelen=16) returned -1 [0209.564] WSAGetLastError () returned 10035 [0209.564] htonl (hostlong=0xc0a80025) returned 0x2500a8c0 [0209.564] socket (af=2, type=1, protocol=6) returned 0x3e8 [0209.565] ioctlsocket (in: s=0x3e8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.565] connect (s=0x3e8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.37"), namelen=16) returned -1 [0209.566] WSAGetLastError () returned 10035 [0209.566] htonl (hostlong=0xc0a80026) returned 0x2600a8c0 [0209.566] socket (af=2, type=1, protocol=6) returned 0x3ec [0209.567] ioctlsocket (in: s=0x3ec, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.567] connect (s=0x3ec, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.38"), namelen=16) returned -1 [0209.567] WSAGetLastError () returned 10035 [0209.567] htonl (hostlong=0xc0a80027) returned 0x2700a8c0 [0209.568] socket (af=2, type=1, protocol=6) returned 0x3f0 [0209.568] ioctlsocket (in: s=0x3f0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.568] connect (s=0x3f0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.39"), namelen=16) returned -1 [0209.569] WSAGetLastError () returned 10035 [0209.569] htonl (hostlong=0xc0a80028) returned 0x2800a8c0 [0209.569] socket (af=2, type=1, protocol=6) returned 0x3f4 [0209.569] ioctlsocket (in: s=0x3f4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.569] connect (s=0x3f4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.40"), namelen=16) returned -1 [0209.570] WSAGetLastError () returned 10035 [0209.570] htonl (hostlong=0xc0a80029) returned 0x2900a8c0 [0209.570] socket (af=2, type=1, protocol=6) returned 0x3f8 [0209.570] ioctlsocket (in: s=0x3f8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.570] connect (s=0x3f8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.41"), namelen=16) returned -1 [0209.571] WSAGetLastError () returned 10035 [0209.571] htonl (hostlong=0xc0a8002a) returned 0x2a00a8c0 [0209.571] socket (af=2, type=1, protocol=6) returned 0x3fc [0209.571] ioctlsocket (in: s=0x3fc, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.571] connect (s=0x3fc, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.42"), namelen=16) returned -1 [0209.572] WSAGetLastError () returned 10035 [0209.572] htonl (hostlong=0xc0a8002b) returned 0x2b00a8c0 [0209.572] socket (af=2, type=1, protocol=6) returned 0x404 [0209.572] ioctlsocket (in: s=0x404, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.572] connect (s=0x404, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.43"), namelen=16) returned -1 [0209.573] WSAGetLastError () returned 10035 [0209.573] htonl (hostlong=0xc0a8002c) returned 0x2c00a8c0 [0209.573] socket (af=2, type=1, protocol=6) returned 0x408 [0209.573] ioctlsocket (in: s=0x408, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.573] connect (s=0x408, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.44"), namelen=16) returned -1 [0209.574] WSAGetLastError () returned 10035 [0209.574] htonl (hostlong=0xc0a8002d) returned 0x2d00a8c0 [0209.574] socket (af=2, type=1, protocol=6) returned 0x40c [0209.574] ioctlsocket (in: s=0x40c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.574] connect (s=0x40c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.45"), namelen=16) returned -1 [0209.575] WSAGetLastError () returned 10035 [0209.575] htonl (hostlong=0xc0a8002e) returned 0x2e00a8c0 [0209.575] socket (af=2, type=1, protocol=6) returned 0x410 [0209.575] ioctlsocket (in: s=0x410, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.575] connect (s=0x410, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.46"), namelen=16) returned -1 [0209.576] WSAGetLastError () returned 10035 [0209.576] htonl (hostlong=0xc0a8002f) returned 0x2f00a8c0 [0209.576] socket (af=2, type=1, protocol=6) returned 0x414 [0209.576] ioctlsocket (in: s=0x414, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.576] connect (s=0x414, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.47"), namelen=16) returned -1 [0209.577] WSAGetLastError () returned 10035 [0209.577] htonl (hostlong=0xc0a80030) returned 0x3000a8c0 [0209.577] socket (af=2, type=1, protocol=6) returned 0x418 [0209.578] ioctlsocket (in: s=0x418, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.578] connect (s=0x418, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.48"), namelen=16) returned -1 [0209.578] WSAGetLastError () returned 10035 [0209.579] htonl (hostlong=0xc0a80031) returned 0x3100a8c0 [0209.579] socket (af=2, type=1, protocol=6) returned 0x41c [0209.579] ioctlsocket (in: s=0x41c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.579] connect (s=0x41c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.49"), namelen=16) returned -1 [0209.580] WSAGetLastError () returned 10035 [0209.580] htonl (hostlong=0xc0a80032) returned 0x3200a8c0 [0209.580] socket (af=2, type=1, protocol=6) returned 0x420 [0209.580] ioctlsocket (in: s=0x420, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.580] connect (s=0x420, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.50"), namelen=16) returned -1 [0209.581] WSAGetLastError () returned 10035 [0209.581] htonl (hostlong=0xc0a80033) returned 0x3300a8c0 [0209.581] socket (af=2, type=1, protocol=6) returned 0x424 [0209.581] ioctlsocket (in: s=0x424, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.581] connect (s=0x424, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.51"), namelen=16) returned -1 [0209.582] WSAGetLastError () returned 10035 [0209.582] htonl (hostlong=0xc0a80034) returned 0x3400a8c0 [0209.582] socket (af=2, type=1, protocol=6) returned 0x428 [0209.582] ioctlsocket (in: s=0x428, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.582] connect (s=0x428, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.52"), namelen=16) returned -1 [0209.583] WSAGetLastError () returned 10035 [0209.583] htonl (hostlong=0xc0a80035) returned 0x3500a8c0 [0209.583] socket (af=2, type=1, protocol=6) returned 0x42c [0209.583] ioctlsocket (in: s=0x42c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.583] connect (s=0x42c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.53"), namelen=16) returned -1 [0209.584] WSAGetLastError () returned 10035 [0209.584] htonl (hostlong=0xc0a80036) returned 0x3600a8c0 [0209.584] socket (af=2, type=1, protocol=6) returned 0x430 [0209.584] ioctlsocket (in: s=0x430, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.584] connect (s=0x430, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.54"), namelen=16) returned -1 [0209.585] WSAGetLastError () returned 10035 [0209.585] htonl (hostlong=0xc0a80037) returned 0x3700a8c0 [0209.585] socket (af=2, type=1, protocol=6) returned 0x434 [0209.585] ioctlsocket (in: s=0x434, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.585] connect (s=0x434, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.55"), namelen=16) returned -1 [0209.586] WSAGetLastError () returned 10035 [0209.586] htonl (hostlong=0xc0a80038) returned 0x3800a8c0 [0209.586] socket (af=2, type=1, protocol=6) returned 0x438 [0209.586] ioctlsocket (in: s=0x438, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.586] connect (s=0x438, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.56"), namelen=16) returned -1 [0209.587] WSAGetLastError () returned 10035 [0209.587] htonl (hostlong=0xc0a80039) returned 0x3900a8c0 [0209.587] socket (af=2, type=1, protocol=6) returned 0x43c [0209.587] ioctlsocket (in: s=0x43c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.587] connect (s=0x43c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.57"), namelen=16) returned -1 [0209.588] WSAGetLastError () returned 10035 [0209.588] htonl (hostlong=0xc0a8003a) returned 0x3a00a8c0 [0209.588] socket (af=2, type=1, protocol=6) returned 0x440 [0209.588] ioctlsocket (in: s=0x440, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.588] connect (s=0x440, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.58"), namelen=16) returned -1 [0209.589] WSAGetLastError () returned 10035 [0209.589] htonl (hostlong=0xc0a8003b) returned 0x3b00a8c0 [0209.589] socket (af=2, type=1, protocol=6) returned 0x444 [0209.589] ioctlsocket (in: s=0x444, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.589] connect (s=0x444, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.59"), namelen=16) returned -1 [0209.593] WSAGetLastError () returned 10035 [0209.593] htonl (hostlong=0xc0a8003c) returned 0x3c00a8c0 [0209.593] socket (af=2, type=1, protocol=6) returned 0x448 [0209.593] ioctlsocket (in: s=0x448, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.593] connect (s=0x448, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.60"), namelen=16) returned -1 [0209.594] WSAGetLastError () returned 10035 [0209.594] htonl (hostlong=0xc0a8003d) returned 0x3d00a8c0 [0209.594] socket (af=2, type=1, protocol=6) returned 0x44c [0209.594] ioctlsocket (in: s=0x44c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.594] connect (s=0x44c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.61"), namelen=16) returned -1 [0209.595] WSAGetLastError () returned 10035 [0209.595] htonl (hostlong=0xc0a8003e) returned 0x3e00a8c0 [0209.595] socket (af=2, type=1, protocol=6) returned 0x450 [0209.595] ioctlsocket (in: s=0x450, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.595] connect (s=0x450, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.62"), namelen=16) returned -1 [0209.596] WSAGetLastError () returned 10035 [0209.596] htonl (hostlong=0xc0a8003f) returned 0x3f00a8c0 [0209.596] socket (af=2, type=1, protocol=6) returned 0x454 [0209.596] ioctlsocket (in: s=0x454, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.596] connect (s=0x454, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.63"), namelen=16) returned -1 [0209.597] WSAGetLastError () returned 10035 [0209.597] htonl (hostlong=0xc0a80040) returned 0x4000a8c0 [0209.597] socket (af=2, type=1, protocol=6) returned 0x458 [0209.597] ioctlsocket (in: s=0x458, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.597] connect (s=0x458, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.64"), namelen=16) returned -1 [0209.598] WSAGetLastError () returned 10035 [0209.598] htonl (hostlong=0xc0a80041) returned 0x4100a8c0 [0209.598] socket (af=2, type=1, protocol=6) returned 0x45c [0209.598] ioctlsocket (in: s=0x45c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.598] connect (s=0x45c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.65"), namelen=16) returned -1 [0209.599] WSAGetLastError () returned 10035 [0209.599] htonl (hostlong=0xc0a80042) returned 0x4200a8c0 [0209.599] socket (af=2, type=1, protocol=6) returned 0x460 [0209.599] ioctlsocket (in: s=0x460, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.599] connect (s=0x460, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.66"), namelen=16) returned -1 [0209.600] WSAGetLastError () returned 10035 [0209.600] htonl (hostlong=0xc0a80043) returned 0x4300a8c0 [0209.600] socket (af=2, type=1, protocol=6) returned 0x464 [0209.600] ioctlsocket (in: s=0x464, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.600] connect (s=0x464, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.67"), namelen=16) returned -1 [0209.601] WSAGetLastError () returned 10035 [0209.601] htonl (hostlong=0xc0a80044) returned 0x4400a8c0 [0209.601] socket (af=2, type=1, protocol=6) returned 0x468 [0209.601] ioctlsocket (in: s=0x468, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.601] connect (s=0x468, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.68"), namelen=16) returned -1 [0209.602] WSAGetLastError () returned 10035 [0209.602] htonl (hostlong=0xc0a80045) returned 0x4500a8c0 [0209.602] socket (af=2, type=1, protocol=6) returned 0x46c [0209.602] ioctlsocket (in: s=0x46c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.602] connect (s=0x46c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.69"), namelen=16) returned -1 [0209.603] WSAGetLastError () returned 10035 [0209.603] htonl (hostlong=0xc0a80046) returned 0x4600a8c0 [0209.603] socket (af=2, type=1, protocol=6) returned 0x470 [0209.603] ioctlsocket (in: s=0x470, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.603] connect (s=0x470, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.70"), namelen=16) returned -1 [0209.604] WSAGetLastError () returned 10035 [0209.604] htonl (hostlong=0xc0a80047) returned 0x4700a8c0 [0209.604] socket (af=2, type=1, protocol=6) returned 0x474 [0209.604] ioctlsocket (in: s=0x474, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.604] connect (s=0x474, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.71"), namelen=16) returned -1 [0209.605] WSAGetLastError () returned 10035 [0209.605] htonl (hostlong=0xc0a80048) returned 0x4800a8c0 [0209.605] socket (af=2, type=1, protocol=6) returned 0x478 [0209.605] ioctlsocket (in: s=0x478, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.605] connect (s=0x478, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.72"), namelen=16) returned -1 [0209.606] WSAGetLastError () returned 10035 [0209.606] htonl (hostlong=0xc0a80049) returned 0x4900a8c0 [0209.606] socket (af=2, type=1, protocol=6) returned 0x47c [0209.606] ioctlsocket (in: s=0x47c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.606] connect (s=0x47c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.73"), namelen=16) returned -1 [0209.607] WSAGetLastError () returned 10035 [0209.607] htonl (hostlong=0xc0a8004a) returned 0x4a00a8c0 [0209.607] socket (af=2, type=1, protocol=6) returned 0x480 [0209.607] ioctlsocket (in: s=0x480, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.607] connect (s=0x480, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.74"), namelen=16) returned -1 [0209.608] WSAGetLastError () returned 10035 [0209.608] htonl (hostlong=0xc0a8004b) returned 0x4b00a8c0 [0209.608] socket (af=2, type=1, protocol=6) returned 0x484 [0209.608] ioctlsocket (in: s=0x484, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.608] connect (s=0x484, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.75"), namelen=16) returned -1 [0209.609] WSAGetLastError () returned 10035 [0209.609] htonl (hostlong=0xc0a8004c) returned 0x4c00a8c0 [0209.609] socket (af=2, type=1, protocol=6) returned 0x488 [0209.609] ioctlsocket (in: s=0x488, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.609] connect (s=0x488, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.76"), namelen=16) returned -1 [0209.610] WSAGetLastError () returned 10035 [0209.610] htonl (hostlong=0xc0a8004d) returned 0x4d00a8c0 [0209.610] socket (af=2, type=1, protocol=6) returned 0x48c [0209.610] ioctlsocket (in: s=0x48c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.610] connect (s=0x48c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.77"), namelen=16) returned -1 [0209.611] WSAGetLastError () returned 10035 [0209.611] htonl (hostlong=0xc0a8004e) returned 0x4e00a8c0 [0209.611] socket (af=2, type=1, protocol=6) returned 0x490 [0209.611] ioctlsocket (in: s=0x490, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.611] connect (s=0x490, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.78"), namelen=16) returned -1 [0209.621] WSAGetLastError () returned 10035 [0209.621] htonl (hostlong=0xc0a8004f) returned 0x4f00a8c0 [0209.621] socket (af=2, type=1, protocol=6) returned 0x494 [0209.621] ioctlsocket (in: s=0x494, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.621] connect (s=0x494, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.79"), namelen=16) returned -1 [0209.622] WSAGetLastError () returned 10035 [0209.622] htonl (hostlong=0xc0a80050) returned 0x5000a8c0 [0209.622] socket (af=2, type=1, protocol=6) returned 0x498 [0209.623] ioctlsocket (in: s=0x498, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.623] connect (s=0x498, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.80"), namelen=16) returned -1 [0209.623] WSAGetLastError () returned 10035 [0209.623] htonl (hostlong=0xc0a80051) returned 0x5100a8c0 [0209.623] socket (af=2, type=1, protocol=6) returned 0x49c [0209.624] ioctlsocket (in: s=0x49c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.624] connect (s=0x49c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.81"), namelen=16) returned -1 [0209.624] WSAGetLastError () returned 10035 [0209.624] htonl (hostlong=0xc0a80052) returned 0x5200a8c0 [0209.624] socket (af=2, type=1, protocol=6) returned 0x4a0 [0209.625] ioctlsocket (in: s=0x4a0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.625] connect (s=0x4a0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.82"), namelen=16) returned -1 [0209.625] WSAGetLastError () returned 10035 [0209.625] htonl (hostlong=0xc0a80053) returned 0x5300a8c0 [0209.625] socket (af=2, type=1, protocol=6) returned 0x4a4 [0209.626] ioctlsocket (in: s=0x4a4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.626] connect (s=0x4a4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.83"), namelen=16) returned -1 [0209.626] WSAGetLastError () returned 10035 [0209.626] htonl (hostlong=0xc0a80054) returned 0x5400a8c0 [0209.626] socket (af=2, type=1, protocol=6) returned 0x4a8 [0209.627] ioctlsocket (in: s=0x4a8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.627] connect (s=0x4a8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.84"), namelen=16) returned -1 [0209.627] WSAGetLastError () returned 10035 [0209.627] htonl (hostlong=0xc0a80055) returned 0x5500a8c0 [0209.627] socket (af=2, type=1, protocol=6) returned 0x4ac [0209.628] ioctlsocket (in: s=0x4ac, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.628] connect (s=0x4ac, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.85"), namelen=16) returned -1 [0209.628] WSAGetLastError () returned 10035 [0209.629] htonl (hostlong=0xc0a80056) returned 0x5600a8c0 [0209.629] socket (af=2, type=1, protocol=6) returned 0x4b0 [0209.629] ioctlsocket (in: s=0x4b0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.629] connect (s=0x4b0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.86"), namelen=16) returned -1 [0209.629] WSAGetLastError () returned 10035 [0209.629] htonl (hostlong=0xc0a80057) returned 0x5700a8c0 [0209.630] socket (af=2, type=1, protocol=6) returned 0x4b4 [0209.630] ioctlsocket (in: s=0x4b4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.630] connect (s=0x4b4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.87"), namelen=16) returned -1 [0209.630] WSAGetLastError () returned 10035 [0209.630] htonl (hostlong=0xc0a80058) returned 0x5800a8c0 [0209.630] socket (af=2, type=1, protocol=6) returned 0x4b8 [0209.631] ioctlsocket (in: s=0x4b8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.631] connect (s=0x4b8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.88"), namelen=16) returned -1 [0209.631] WSAGetLastError () returned 10035 [0209.631] htonl (hostlong=0xc0a80059) returned 0x5900a8c0 [0209.631] socket (af=2, type=1, protocol=6) returned 0x4bc [0209.632] ioctlsocket (in: s=0x4bc, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.632] connect (s=0x4bc, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.89"), namelen=16) returned -1 [0209.632] WSAGetLastError () returned 10035 [0209.632] htonl (hostlong=0xc0a8005a) returned 0x5a00a8c0 [0209.632] socket (af=2, type=1, protocol=6) returned 0x4c0 [0209.633] ioctlsocket (in: s=0x4c0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.633] connect (s=0x4c0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.90"), namelen=16) returned -1 [0209.633] WSAGetLastError () returned 10035 [0209.633] htonl (hostlong=0xc0a8005b) returned 0x5b00a8c0 [0209.633] socket (af=2, type=1, protocol=6) returned 0x4c4 [0209.634] ioctlsocket (in: s=0x4c4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.634] connect (s=0x4c4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.91"), namelen=16) returned -1 [0209.634] WSAGetLastError () returned 10035 [0209.634] htonl (hostlong=0xc0a8005c) returned 0x5c00a8c0 [0209.634] socket (af=2, type=1, protocol=6) returned 0x4c8 [0209.635] ioctlsocket (in: s=0x4c8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.635] connect (s=0x4c8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.92"), namelen=16) returned -1 [0209.635] WSAGetLastError () returned 10035 [0209.635] htonl (hostlong=0xc0a8005d) returned 0x5d00a8c0 [0209.635] socket (af=2, type=1, protocol=6) returned 0x4cc [0209.636] ioctlsocket (in: s=0x4cc, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.636] connect (s=0x4cc, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.93"), namelen=16) returned -1 [0209.636] WSAGetLastError () returned 10035 [0209.636] htonl (hostlong=0xc0a8005e) returned 0x5e00a8c0 [0209.636] socket (af=2, type=1, protocol=6) returned 0x4d0 [0209.636] ioctlsocket (in: s=0x4d0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.637] connect (s=0x4d0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.94"), namelen=16) returned -1 [0209.652] WSAGetLastError () returned 10035 [0209.652] htonl (hostlong=0xc0a8005f) returned 0x5f00a8c0 [0209.652] socket (af=2, type=1, protocol=6) returned 0x4d4 [0209.652] ioctlsocket (in: s=0x4d4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.652] connect (s=0x4d4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.95"), namelen=16) returned -1 [0209.653] WSAGetLastError () returned 10035 [0209.653] htonl (hostlong=0xc0a80060) returned 0x6000a8c0 [0209.653] socket (af=2, type=1, protocol=6) returned 0x4d8 [0209.653] ioctlsocket (in: s=0x4d8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.653] connect (s=0x4d8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.96"), namelen=16) returned -1 [0209.654] WSAGetLastError () returned 10035 [0209.654] htonl (hostlong=0xc0a80061) returned 0x6100a8c0 [0209.654] socket (af=2, type=1, protocol=6) returned 0x4dc [0209.654] ioctlsocket (in: s=0x4dc, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.654] connect (s=0x4dc, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.97"), namelen=16) returned -1 [0209.655] WSAGetLastError () returned 10035 [0209.655] htonl (hostlong=0xc0a80062) returned 0x6200a8c0 [0209.655] socket (af=2, type=1, protocol=6) returned 0x4e0 [0209.655] ioctlsocket (in: s=0x4e0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.655] connect (s=0x4e0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.98"), namelen=16) returned -1 [0209.656] WSAGetLastError () returned 10035 [0209.656] htonl (hostlong=0xc0a80063) returned 0x6300a8c0 [0209.656] socket (af=2, type=1, protocol=6) returned 0x4e4 [0209.656] ioctlsocket (in: s=0x4e4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.656] connect (s=0x4e4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.99"), namelen=16) returned -1 [0209.657] WSAGetLastError () returned 10035 [0209.657] htonl (hostlong=0xc0a80064) returned 0x6400a8c0 [0209.657] socket (af=2, type=1, protocol=6) returned 0x4e8 [0209.657] ioctlsocket (in: s=0x4e8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.657] connect (s=0x4e8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.100"), namelen=16) returned -1 [0209.658] WSAGetLastError () returned 10035 [0209.658] htonl (hostlong=0xc0a80065) returned 0x6500a8c0 [0209.658] socket (af=2, type=1, protocol=6) returned 0x4ec [0209.658] ioctlsocket (in: s=0x4ec, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.658] connect (s=0x4ec, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.101"), namelen=16) returned -1 [0209.659] WSAGetLastError () returned 10035 [0209.659] htonl (hostlong=0xc0a80066) returned 0x6600a8c0 [0209.659] socket (af=2, type=1, protocol=6) returned 0x4f0 [0209.659] ioctlsocket (in: s=0x4f0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.659] connect (s=0x4f0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.102"), namelen=16) returned -1 [0209.660] WSAGetLastError () returned 10035 [0209.660] htonl (hostlong=0xc0a80067) returned 0x6700a8c0 [0209.660] socket (af=2, type=1, protocol=6) returned 0x4f4 [0209.660] ioctlsocket (in: s=0x4f4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.660] connect (s=0x4f4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.103"), namelen=16) returned -1 [0209.661] WSAGetLastError () returned 10035 [0209.661] htonl (hostlong=0xc0a80068) returned 0x6800a8c0 [0209.661] socket (af=2, type=1, protocol=6) returned 0x4f8 [0209.661] ioctlsocket (in: s=0x4f8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.661] connect (s=0x4f8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.104"), namelen=16) returned -1 [0209.662] WSAGetLastError () returned 10035 [0209.662] htonl (hostlong=0xc0a80069) returned 0x6900a8c0 [0209.662] socket (af=2, type=1, protocol=6) returned 0x4fc [0209.662] ioctlsocket (in: s=0x4fc, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.662] connect (s=0x4fc, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.105"), namelen=16) returned -1 [0209.663] WSAGetLastError () returned 10035 [0209.663] htonl (hostlong=0xc0a8006a) returned 0x6a00a8c0 [0209.663] socket (af=2, type=1, protocol=6) returned 0x500 [0209.663] ioctlsocket (in: s=0x500, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.663] connect (s=0x500, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.106"), namelen=16) returned -1 [0209.667] WSAGetLastError () returned 10035 [0209.667] htonl (hostlong=0xc0a8006b) returned 0x6b00a8c0 [0209.667] socket (af=2, type=1, protocol=6) returned 0x504 [0209.667] ioctlsocket (in: s=0x504, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.667] connect (s=0x504, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.107"), namelen=16) returned -1 [0209.668] WSAGetLastError () returned 10035 [0209.668] htonl (hostlong=0xc0a8006c) returned 0x6c00a8c0 [0209.668] socket (af=2, type=1, protocol=6) returned 0x508 [0209.668] ioctlsocket (in: s=0x508, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.668] connect (s=0x508, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.108"), namelen=16) returned -1 [0209.669] WSAGetLastError () returned 10035 [0209.669] htonl (hostlong=0xc0a8006d) returned 0x6d00a8c0 [0209.669] socket (af=2, type=1, protocol=6) returned 0x50c [0209.669] ioctlsocket (in: s=0x50c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.669] connect (s=0x50c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.109"), namelen=16) returned -1 [0209.670] WSAGetLastError () returned 10035 [0209.670] htonl (hostlong=0xc0a8006e) returned 0x6e00a8c0 [0209.670] socket (af=2, type=1, protocol=6) returned 0x510 [0209.670] ioctlsocket (in: s=0x510, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.670] connect (s=0x510, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.110"), namelen=16) returned -1 [0209.671] WSAGetLastError () returned 10035 [0209.671] htonl (hostlong=0xc0a8006f) returned 0x6f00a8c0 [0209.671] socket (af=2, type=1, protocol=6) returned 0x514 [0209.671] ioctlsocket (in: s=0x514, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.671] connect (s=0x514, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.111"), namelen=16) returned -1 [0209.672] WSAGetLastError () returned 10035 [0209.672] htonl (hostlong=0xc0a80070) returned 0x7000a8c0 [0209.672] socket (af=2, type=1, protocol=6) returned 0x518 [0209.672] ioctlsocket (in: s=0x518, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.672] connect (s=0x518, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.112"), namelen=16) returned -1 [0209.673] WSAGetLastError () returned 10035 [0209.673] htonl (hostlong=0xc0a80071) returned 0x7100a8c0 [0209.673] socket (af=2, type=1, protocol=6) returned 0x51c [0209.673] ioctlsocket (in: s=0x51c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.673] connect (s=0x51c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.113"), namelen=16) returned -1 [0209.674] WSAGetLastError () returned 10035 [0209.674] htonl (hostlong=0xc0a80072) returned 0x7200a8c0 [0209.674] socket (af=2, type=1, protocol=6) returned 0x520 [0209.674] ioctlsocket (in: s=0x520, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.674] connect (s=0x520, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.114"), namelen=16) returned -1 [0209.675] WSAGetLastError () returned 10035 [0209.675] htonl (hostlong=0xc0a80073) returned 0x7300a8c0 [0209.675] socket (af=2, type=1, protocol=6) returned 0x524 [0209.675] ioctlsocket (in: s=0x524, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.675] connect (s=0x524, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.115"), namelen=16) returned -1 [0209.676] WSAGetLastError () returned 10035 [0209.676] htonl (hostlong=0xc0a80074) returned 0x7400a8c0 [0209.676] socket (af=2, type=1, protocol=6) returned 0x528 [0209.676] ioctlsocket (in: s=0x528, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.676] connect (s=0x528, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.116"), namelen=16) returned -1 [0209.683] WSAGetLastError () returned 10035 [0209.683] htonl (hostlong=0xc0a80075) returned 0x7500a8c0 [0209.683] socket (af=2, type=1, protocol=6) returned 0x52c [0209.684] ioctlsocket (in: s=0x52c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.684] connect (s=0x52c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.117"), namelen=16) returned -1 [0209.685] WSAGetLastError () returned 10035 [0209.685] htonl (hostlong=0xc0a80076) returned 0x7600a8c0 [0209.685] socket (af=2, type=1, protocol=6) returned 0x530 [0209.685] ioctlsocket (in: s=0x530, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.685] connect (s=0x530, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.118"), namelen=16) returned -1 [0209.686] WSAGetLastError () returned 10035 [0209.686] htonl (hostlong=0xc0a80077) returned 0x7700a8c0 [0209.686] socket (af=2, type=1, protocol=6) returned 0x534 [0209.686] ioctlsocket (in: s=0x534, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.686] connect (s=0x534, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.119"), namelen=16) returned -1 [0209.687] WSAGetLastError () returned 10035 [0209.687] htonl (hostlong=0xc0a80078) returned 0x7800a8c0 [0209.687] socket (af=2, type=1, protocol=6) returned 0x538 [0209.687] ioctlsocket (in: s=0x538, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.687] connect (s=0x538, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.120"), namelen=16) returned -1 [0209.688] WSAGetLastError () returned 10035 [0209.688] htonl (hostlong=0xc0a80079) returned 0x7900a8c0 [0209.688] socket (af=2, type=1, protocol=6) returned 0x53c [0209.688] ioctlsocket (in: s=0x53c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.688] connect (s=0x53c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.121"), namelen=16) returned -1 [0209.689] WSAGetLastError () returned 10035 [0209.689] htonl (hostlong=0xc0a8007a) returned 0x7a00a8c0 [0209.689] socket (af=2, type=1, protocol=6) returned 0x540 [0209.689] ioctlsocket (in: s=0x540, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.689] connect (s=0x540, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.122"), namelen=16) returned -1 [0209.690] WSAGetLastError () returned 10035 [0209.690] htonl (hostlong=0xc0a8007b) returned 0x7b00a8c0 [0209.690] socket (af=2, type=1, protocol=6) returned 0x544 [0209.690] ioctlsocket (in: s=0x544, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.690] connect (s=0x544, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.123"), namelen=16) returned -1 [0209.691] WSAGetLastError () returned 10035 [0209.691] htonl (hostlong=0xc0a8007c) returned 0x7c00a8c0 [0209.691] socket (af=2, type=1, protocol=6) returned 0x548 [0209.691] ioctlsocket (in: s=0x548, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.691] connect (s=0x548, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.124"), namelen=16) returned -1 [0209.692] WSAGetLastError () returned 10035 [0209.692] htonl (hostlong=0xc0a8007d) returned 0x7d00a8c0 [0209.692] socket (af=2, type=1, protocol=6) returned 0x54c [0209.692] ioctlsocket (in: s=0x54c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.692] connect (s=0x54c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.125"), namelen=16) returned -1 [0209.693] WSAGetLastError () returned 10035 [0209.693] htonl (hostlong=0xc0a8007e) returned 0x7e00a8c0 [0209.693] socket (af=2, type=1, protocol=6) returned 0x550 [0209.693] ioctlsocket (in: s=0x550, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.693] connect (s=0x550, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.126"), namelen=16) returned -1 [0209.694] WSAGetLastError () returned 10035 [0209.694] htonl (hostlong=0xc0a8007f) returned 0x7f00a8c0 [0209.694] socket (af=2, type=1, protocol=6) returned 0x554 [0209.694] ioctlsocket (in: s=0x554, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.694] connect (s=0x554, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.127"), namelen=16) returned -1 [0209.695] WSAGetLastError () returned 10035 [0209.695] htonl (hostlong=0xc0a80080) returned 0x8000a8c0 [0209.695] socket (af=2, type=1, protocol=6) returned 0x558 [0209.695] ioctlsocket (in: s=0x558, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.695] connect (s=0x558, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.128"), namelen=16) returned -1 [0209.697] WSAGetLastError () returned 10035 [0209.697] htonl (hostlong=0xc0a80081) returned 0x8100a8c0 [0209.698] socket (af=2, type=1, protocol=6) returned 0x55c [0209.698] ioctlsocket (in: s=0x55c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.698] connect (s=0x55c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.129"), namelen=16) returned -1 [0209.698] WSAGetLastError () returned 10035 [0209.698] htonl (hostlong=0xc0a80082) returned 0x8200a8c0 [0209.698] socket (af=2, type=1, protocol=6) returned 0x560 [0209.699] ioctlsocket (in: s=0x560, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.699] connect (s=0x560, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.130"), namelen=16) returned -1 [0209.699] WSAGetLastError () returned 10035 [0209.699] htonl (hostlong=0xc0a80083) returned 0x8300a8c0 [0209.699] socket (af=2, type=1, protocol=6) returned 0x564 [0209.700] ioctlsocket (in: s=0x564, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.700] connect (s=0x564, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.131"), namelen=16) returned -1 [0209.701] WSAGetLastError () returned 10035 [0209.701] htonl (hostlong=0xc0a80084) returned 0x8400a8c0 [0209.701] socket (af=2, type=1, protocol=6) returned 0x568 [0209.701] ioctlsocket (in: s=0x568, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.701] connect (s=0x568, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.132"), namelen=16) returned -1 [0209.702] WSAGetLastError () returned 10035 [0209.702] htonl (hostlong=0xc0a80085) returned 0x8500a8c0 [0209.702] socket (af=2, type=1, protocol=6) returned 0x56c [0209.702] ioctlsocket (in: s=0x56c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.702] connect (s=0x56c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.133"), namelen=16) returned -1 [0209.703] WSAGetLastError () returned 10035 [0209.703] htonl (hostlong=0xc0a80086) returned 0x8600a8c0 [0209.703] socket (af=2, type=1, protocol=6) returned 0x570 [0209.703] ioctlsocket (in: s=0x570, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.703] connect (s=0x570, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.134"), namelen=16) returned -1 [0209.703] WSAGetLastError () returned 10035 [0209.704] htonl (hostlong=0xc0a80087) returned 0x8700a8c0 [0209.704] socket (af=2, type=1, protocol=6) returned 0x574 [0209.704] ioctlsocket (in: s=0x574, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.704] connect (s=0x574, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.135"), namelen=16) returned -1 [0209.704] WSAGetLastError () returned 10035 [0209.704] htonl (hostlong=0xc0a80088) returned 0x8800a8c0 [0209.705] socket (af=2, type=1, protocol=6) returned 0x578 [0209.705] ioctlsocket (in: s=0x578, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.705] connect (s=0x578, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.136"), namelen=16) returned -1 [0209.705] WSAGetLastError () returned 10035 [0209.705] htonl (hostlong=0xc0a80089) returned 0x8900a8c0 [0209.705] socket (af=2, type=1, protocol=6) returned 0x57c [0209.706] ioctlsocket (in: s=0x57c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.706] connect (s=0x57c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.137"), namelen=16) returned -1 [0209.706] WSAGetLastError () returned 10035 [0209.706] htonl (hostlong=0xc0a8008a) returned 0x8a00a8c0 [0209.707] socket (af=2, type=1, protocol=6) returned 0x580 [0209.707] ioctlsocket (in: s=0x580, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.707] connect (s=0x580, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.138"), namelen=16) returned -1 [0209.707] WSAGetLastError () returned 10035 [0209.707] htonl (hostlong=0xc0a8008b) returned 0x8b00a8c0 [0209.707] socket (af=2, type=1, protocol=6) returned 0x584 [0209.708] ioctlsocket (in: s=0x584, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.708] connect (s=0x584, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.139"), namelen=16) returned -1 [0209.708] WSAGetLastError () returned 10035 [0209.708] htonl (hostlong=0xc0a8008c) returned 0x8c00a8c0 [0209.708] socket (af=2, type=1, protocol=6) returned 0x588 [0209.709] ioctlsocket (in: s=0x588, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.709] connect (s=0x588, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.140"), namelen=16) returned -1 [0209.709] WSAGetLastError () returned 10035 [0209.709] htonl (hostlong=0xc0a8008d) returned 0x8d00a8c0 [0209.709] socket (af=2, type=1, protocol=6) returned 0x58c [0209.710] ioctlsocket (in: s=0x58c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.710] connect (s=0x58c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.141"), namelen=16) returned -1 [0209.710] WSAGetLastError () returned 10035 [0209.710] htonl (hostlong=0xc0a8008e) returned 0x8e00a8c0 [0209.710] socket (af=2, type=1, protocol=6) returned 0x590 [0209.711] ioctlsocket (in: s=0x590, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.711] connect (s=0x590, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.142"), namelen=16) returned -1 [0209.711] WSAGetLastError () returned 10035 [0209.711] htonl (hostlong=0xc0a8008f) returned 0x8f00a8c0 [0209.711] socket (af=2, type=1, protocol=6) returned 0x594 [0209.712] ioctlsocket (in: s=0x594, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.712] connect (s=0x594, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.143"), namelen=16) returned -1 [0209.712] WSAGetLastError () returned 10035 [0209.712] htonl (hostlong=0xc0a80090) returned 0x9000a8c0 [0209.712] socket (af=2, type=1, protocol=6) returned 0x598 [0209.713] ioctlsocket (in: s=0x598, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.713] connect (s=0x598, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.144"), namelen=16) returned -1 [0209.713] WSAGetLastError () returned 10035 [0209.714] htonl (hostlong=0xc0a80091) returned 0x9100a8c0 [0209.714] socket (af=2, type=1, protocol=6) returned 0x59c [0209.714] ioctlsocket (in: s=0x59c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.714] connect (s=0x59c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.145"), namelen=16) returned -1 [0209.714] WSAGetLastError () returned 10035 [0209.714] htonl (hostlong=0xc0a80092) returned 0x9200a8c0 [0209.714] socket (af=2, type=1, protocol=6) returned 0x5a0 [0209.715] ioctlsocket (in: s=0x5a0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.715] connect (s=0x5a0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.146"), namelen=16) returned -1 [0209.751] WSAGetLastError () returned 10035 [0209.751] htonl (hostlong=0xc0a80093) returned 0x9300a8c0 [0209.751] socket (af=2, type=1, protocol=6) returned 0x5a4 [0209.751] ioctlsocket (in: s=0x5a4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.751] connect (s=0x5a4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.147"), namelen=16) returned -1 [0209.752] WSAGetLastError () returned 10035 [0209.752] htonl (hostlong=0xc0a80094) returned 0x9400a8c0 [0209.752] socket (af=2, type=1, protocol=6) returned 0x5a8 [0209.752] ioctlsocket (in: s=0x5a8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.752] connect (s=0x5a8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.148"), namelen=16) returned -1 [0209.753] WSAGetLastError () returned 10035 [0209.753] htonl (hostlong=0xc0a80095) returned 0x9500a8c0 [0209.753] socket (af=2, type=1, protocol=6) returned 0x5ac [0209.753] ioctlsocket (in: s=0x5ac, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.753] connect (s=0x5ac, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.149"), namelen=16) returned -1 [0209.783] WSAGetLastError () returned 10035 [0209.783] htonl (hostlong=0xc0a80096) returned 0x9600a8c0 [0209.783] socket (af=2, type=1, protocol=6) returned 0x5b0 [0209.783] ioctlsocket (in: s=0x5b0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.783] connect (s=0x5b0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.150"), namelen=16) returned -1 [0209.784] WSAGetLastError () returned 10035 [0209.784] htonl (hostlong=0xc0a80097) returned 0x9700a8c0 [0209.784] socket (af=2, type=1, protocol=6) returned 0x5b4 [0209.784] ioctlsocket (in: s=0x5b4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.784] connect (s=0x5b4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.151"), namelen=16) returned -1 [0209.786] WSAGetLastError () returned 10035 [0209.786] htonl (hostlong=0xc0a80098) returned 0x9800a8c0 [0209.786] socket (af=2, type=1, protocol=6) returned 0x5b8 [0209.786] ioctlsocket (in: s=0x5b8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.786] connect (s=0x5b8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.152"), namelen=16) returned -1 [0209.787] WSAGetLastError () returned 10035 [0209.787] htonl (hostlong=0xc0a80099) returned 0x9900a8c0 [0209.787] socket (af=2, type=1, protocol=6) returned 0x5bc [0209.787] ioctlsocket (in: s=0x5bc, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.787] connect (s=0x5bc, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.153"), namelen=16) returned -1 [0209.788] WSAGetLastError () returned 10035 [0209.788] htonl (hostlong=0xc0a8009a) returned 0x9a00a8c0 [0209.788] socket (af=2, type=1, protocol=6) returned 0x5c0 [0209.788] ioctlsocket (in: s=0x5c0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.794] connect (s=0x5c0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.154"), namelen=16) returned -1 [0209.794] WSAGetLastError () returned 10035 [0209.794] htonl (hostlong=0xc0a8009b) returned 0x9b00a8c0 [0209.794] socket (af=2, type=1, protocol=6) returned 0x5c4 [0209.795] ioctlsocket (in: s=0x5c4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.795] connect (s=0x5c4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.155"), namelen=16) returned -1 [0209.795] WSAGetLastError () returned 10035 [0209.795] htonl (hostlong=0xc0a8009c) returned 0x9c00a8c0 [0209.795] socket (af=2, type=1, protocol=6) returned 0x5c8 [0209.796] ioctlsocket (in: s=0x5c8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.796] connect (s=0x5c8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.156"), namelen=16) returned -1 [0209.796] WSAGetLastError () returned 10035 [0209.796] htonl (hostlong=0xc0a8009d) returned 0x9d00a8c0 [0209.796] socket (af=2, type=1, protocol=6) returned 0x5cc [0209.797] ioctlsocket (in: s=0x5cc, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.797] connect (s=0x5cc, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.157"), namelen=16) returned -1 [0209.797] WSAGetLastError () returned 10035 [0209.797] htonl (hostlong=0xc0a8009e) returned 0x9e00a8c0 [0209.797] socket (af=2, type=1, protocol=6) returned 0x5d0 [0209.797] ioctlsocket (in: s=0x5d0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.798] connect (s=0x5d0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.158"), namelen=16) returned -1 [0209.798] WSAGetLastError () returned 10035 [0209.798] htonl (hostlong=0xc0a8009f) returned 0x9f00a8c0 [0209.798] socket (af=2, type=1, protocol=6) returned 0x5d4 [0209.798] ioctlsocket (in: s=0x5d4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.799] connect (s=0x5d4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.159"), namelen=16) returned -1 [0209.799] WSAGetLastError () returned 10035 [0209.799] htonl (hostlong=0xc0a800a0) returned 0xa000a8c0 [0209.799] socket (af=2, type=1, protocol=6) returned 0x5d8 [0209.799] ioctlsocket (in: s=0x5d8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.800] connect (s=0x5d8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.160"), namelen=16) returned -1 [0209.800] WSAGetLastError () returned 10035 [0209.800] htonl (hostlong=0xc0a800a1) returned 0xa100a8c0 [0209.800] socket (af=2, type=1, protocol=6) returned 0x5dc [0209.800] ioctlsocket (in: s=0x5dc, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.800] connect (s=0x5dc, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.161"), namelen=16) returned -1 [0209.801] WSAGetLastError () returned 10035 [0209.801] htonl (hostlong=0xc0a800a2) returned 0xa200a8c0 [0209.801] socket (af=2, type=1, protocol=6) returned 0x5e0 [0209.801] ioctlsocket (in: s=0x5e0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.802] connect (s=0x5e0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.162"), namelen=16) returned -1 [0209.802] WSAGetLastError () returned 10035 [0209.802] htonl (hostlong=0xc0a800a3) returned 0xa300a8c0 [0209.802] socket (af=2, type=1, protocol=6) returned 0x5e4 [0209.802] ioctlsocket (in: s=0x5e4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.802] connect (s=0x5e4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.163"), namelen=16) returned -1 [0209.803] WSAGetLastError () returned 10035 [0209.803] htonl (hostlong=0xc0a800a4) returned 0xa400a8c0 [0209.803] socket (af=2, type=1, protocol=6) returned 0x5e8 [0209.803] ioctlsocket (in: s=0x5e8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.804] connect (s=0x5e8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.164"), namelen=16) returned -1 [0209.804] WSAGetLastError () returned 10035 [0209.804] htonl (hostlong=0xc0a800a5) returned 0xa500a8c0 [0209.804] socket (af=2, type=1, protocol=6) returned 0x5ec [0209.805] ioctlsocket (in: s=0x5ec, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.805] connect (s=0x5ec, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.165"), namelen=16) returned -1 [0209.805] WSAGetLastError () returned 10035 [0209.805] htonl (hostlong=0xc0a800a6) returned 0xa600a8c0 [0209.805] socket (af=2, type=1, protocol=6) returned 0x5f0 [0209.806] ioctlsocket (in: s=0x5f0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.806] connect (s=0x5f0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.166"), namelen=16) returned -1 [0209.806] WSAGetLastError () returned 10035 [0209.806] htonl (hostlong=0xc0a800a7) returned 0xa700a8c0 [0209.806] socket (af=2, type=1, protocol=6) returned 0x5f4 [0209.807] ioctlsocket (in: s=0x5f4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.807] connect (s=0x5f4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.167"), namelen=16) returned -1 [0209.807] WSAGetLastError () returned 10035 [0209.807] htonl (hostlong=0xc0a800a8) returned 0xa800a8c0 [0209.807] socket (af=2, type=1, protocol=6) returned 0x5f8 [0209.808] ioctlsocket (in: s=0x5f8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.808] connect (s=0x5f8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.168"), namelen=16) returned -1 [0209.808] WSAGetLastError () returned 10035 [0209.808] htonl (hostlong=0xc0a800a9) returned 0xa900a8c0 [0209.808] socket (af=2, type=1, protocol=6) returned 0x5fc [0209.809] ioctlsocket (in: s=0x5fc, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.809] connect (s=0x5fc, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.169"), namelen=16) returned -1 [0209.810] WSAGetLastError () returned 10035 [0209.810] htonl (hostlong=0xc0a800aa) returned 0xaa00a8c0 [0209.810] socket (af=2, type=1, protocol=6) returned 0x600 [0209.810] ioctlsocket (in: s=0x600, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.810] connect (s=0x600, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.170"), namelen=16) returned -1 [0209.811] WSAGetLastError () returned 10035 [0209.811] htonl (hostlong=0xc0a800ab) returned 0xab00a8c0 [0209.811] socket (af=2, type=1, protocol=6) returned 0x604 [0209.811] ioctlsocket (in: s=0x604, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.811] connect (s=0x604, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.171"), namelen=16) returned -1 [0209.812] WSAGetLastError () returned 10035 [0209.812] htonl (hostlong=0xc0a800ac) returned 0xac00a8c0 [0209.812] socket (af=2, type=1, protocol=6) returned 0x608 [0209.812] ioctlsocket (in: s=0x608, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.812] connect (s=0x608, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.172"), namelen=16) returned -1 [0209.813] WSAGetLastError () returned 10035 [0209.813] htonl (hostlong=0xc0a800ad) returned 0xad00a8c0 [0209.813] socket (af=2, type=1, protocol=6) returned 0x60c [0209.813] ioctlsocket (in: s=0x60c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.813] connect (s=0x60c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.173"), namelen=16) returned -1 [0209.814] WSAGetLastError () returned 10035 [0209.814] htonl (hostlong=0xc0a800ae) returned 0xae00a8c0 [0209.814] socket (af=2, type=1, protocol=6) returned 0x610 [0209.814] ioctlsocket (in: s=0x610, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.814] connect (s=0x610, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.174"), namelen=16) returned -1 [0209.815] WSAGetLastError () returned 10035 [0209.815] htonl (hostlong=0xc0a800af) returned 0xaf00a8c0 [0209.815] socket (af=2, type=1, protocol=6) returned 0x614 [0209.815] ioctlsocket (in: s=0x614, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.815] connect (s=0x614, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.175"), namelen=16) returned -1 [0209.816] WSAGetLastError () returned 10035 [0209.816] htonl (hostlong=0xc0a800b0) returned 0xb000a8c0 [0209.816] socket (af=2, type=1, protocol=6) returned 0x618 [0209.816] ioctlsocket (in: s=0x618, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.816] connect (s=0x618, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.176"), namelen=16) returned -1 [0209.817] WSAGetLastError () returned 10035 [0209.817] htonl (hostlong=0xc0a800b1) returned 0xb100a8c0 [0209.817] socket (af=2, type=1, protocol=6) returned 0x61c [0209.817] ioctlsocket (in: s=0x61c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.817] connect (s=0x61c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.177"), namelen=16) returned -1 [0209.818] WSAGetLastError () returned 10035 [0209.818] htonl (hostlong=0xc0a800b2) returned 0xb200a8c0 [0209.818] socket (af=2, type=1, protocol=6) returned 0x620 [0209.818] ioctlsocket (in: s=0x620, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.818] connect (s=0x620, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.178"), namelen=16) returned -1 [0209.819] WSAGetLastError () returned 10035 [0209.819] htonl (hostlong=0xc0a800b3) returned 0xb300a8c0 [0209.819] socket (af=2, type=1, protocol=6) returned 0x624 [0209.819] ioctlsocket (in: s=0x624, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.819] connect (s=0x624, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.179"), namelen=16) returned -1 [0209.820] WSAGetLastError () returned 10035 [0209.820] htonl (hostlong=0xc0a800b4) returned 0xb400a8c0 [0209.820] socket (af=2, type=1, protocol=6) returned 0x628 [0209.820] ioctlsocket (in: s=0x628, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.820] connect (s=0x628, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.180"), namelen=16) returned -1 [0209.821] WSAGetLastError () returned 10035 [0209.821] htonl (hostlong=0xc0a800b5) returned 0xb500a8c0 [0209.821] socket (af=2, type=1, protocol=6) returned 0x62c [0209.821] ioctlsocket (in: s=0x62c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.821] connect (s=0x62c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.181"), namelen=16) returned -1 [0209.830] WSAGetLastError () returned 10035 [0209.830] htonl (hostlong=0xc0a800b6) returned 0xb600a8c0 [0209.830] socket (af=2, type=1, protocol=6) returned 0x630 [0209.830] ioctlsocket (in: s=0x630, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.830] connect (s=0x630, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.182"), namelen=16) returned -1 [0209.851] WSAGetLastError () returned 10035 [0209.851] htonl (hostlong=0xc0a800b7) returned 0xb700a8c0 [0209.851] socket (af=2, type=1, protocol=6) returned 0x634 [0209.852] ioctlsocket (in: s=0x634, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.852] connect (s=0x634, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.183"), namelen=16) returned -1 [0209.852] WSAGetLastError () returned 10035 [0209.853] htonl (hostlong=0xc0a800b8) returned 0xb800a8c0 [0209.853] socket (af=2, type=1, protocol=6) returned 0x638 [0209.853] ioctlsocket (in: s=0x638, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.853] connect (s=0x638, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.184"), namelen=16) returned -1 [0209.854] WSAGetLastError () returned 10035 [0209.854] htonl (hostlong=0xc0a800b9) returned 0xb900a8c0 [0209.854] socket (af=2, type=1, protocol=6) returned 0x63c [0209.854] ioctlsocket (in: s=0x63c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.854] connect (s=0x63c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.185"), namelen=16) returned -1 [0209.855] WSAGetLastError () returned 10035 [0209.855] htonl (hostlong=0xc0a800ba) returned 0xba00a8c0 [0209.855] socket (af=2, type=1, protocol=6) returned 0x640 [0209.855] ioctlsocket (in: s=0x640, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.855] connect (s=0x640, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.186"), namelen=16) returned -1 [0209.856] WSAGetLastError () returned 10035 [0209.856] htonl (hostlong=0xc0a800bb) returned 0xbb00a8c0 [0209.856] socket (af=2, type=1, protocol=6) returned 0x644 [0209.856] ioctlsocket (in: s=0x644, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.856] connect (s=0x644, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.187"), namelen=16) returned -1 [0209.857] WSAGetLastError () returned 10035 [0209.857] htonl (hostlong=0xc0a800bc) returned 0xbc00a8c0 [0209.857] socket (af=2, type=1, protocol=6) returned 0x648 [0209.857] ioctlsocket (in: s=0x648, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.857] connect (s=0x648, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.188"), namelen=16) returned -1 [0209.858] WSAGetLastError () returned 10035 [0209.858] htonl (hostlong=0xc0a800bd) returned 0xbd00a8c0 [0209.858] socket (af=2, type=1, protocol=6) returned 0x64c [0209.858] ioctlsocket (in: s=0x64c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.858] connect (s=0x64c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.189"), namelen=16) returned -1 [0209.858] WSAGetLastError () returned 10035 [0209.858] htonl (hostlong=0xc0a800be) returned 0xbe00a8c0 [0209.858] socket (af=2, type=1, protocol=6) returned 0x650 [0209.859] ioctlsocket (in: s=0x650, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.859] connect (s=0x650, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.190"), namelen=16) returned -1 [0209.902] WSAGetLastError () returned 10035 [0209.902] htonl (hostlong=0xc0a800bf) returned 0xbf00a8c0 [0209.902] socket (af=2, type=1, protocol=6) returned 0x654 [0209.902] ioctlsocket (in: s=0x654, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.902] connect (s=0x654, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.191"), namelen=16) returned -1 [0209.906] WSAGetLastError () returned 10035 [0209.906] htonl (hostlong=0xc0a800c0) returned 0xc000a8c0 [0209.906] socket (af=2, type=1, protocol=6) returned 0x658 [0209.906] ioctlsocket (in: s=0x658, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.907] connect (s=0x658, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.192"), namelen=16) returned -1 [0209.907] WSAGetLastError () returned 10035 [0209.907] htonl (hostlong=0xc0a800c1) returned 0xc100a8c0 [0209.907] socket (af=2, type=1, protocol=6) returned 0x65c [0209.908] ioctlsocket (in: s=0x65c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.908] connect (s=0x65c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.193"), namelen=16) returned -1 [0209.908] WSAGetLastError () returned 10035 [0209.908] htonl (hostlong=0xc0a800c2) returned 0xc200a8c0 [0209.909] socket (af=2, type=1, protocol=6) returned 0x660 [0209.909] ioctlsocket (in: s=0x660, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.909] connect (s=0x660, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.194"), namelen=16) returned -1 [0209.909] WSAGetLastError () returned 10035 [0209.910] htonl (hostlong=0xc0a800c3) returned 0xc300a8c0 [0209.910] socket (af=2, type=1, protocol=6) returned 0x664 [0209.910] ioctlsocket (in: s=0x664, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.910] connect (s=0x664, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.195"), namelen=16) returned -1 [0209.911] WSAGetLastError () returned 10035 [0209.911] htonl (hostlong=0xc0a800c4) returned 0xc400a8c0 [0209.911] socket (af=2, type=1, protocol=6) returned 0x668 [0209.911] ioctlsocket (in: s=0x668, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.911] connect (s=0x668, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.196"), namelen=16) returned -1 [0209.912] WSAGetLastError () returned 10035 [0209.912] htonl (hostlong=0xc0a800c5) returned 0xc500a8c0 [0209.912] socket (af=2, type=1, protocol=6) returned 0x66c [0209.912] ioctlsocket (in: s=0x66c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.912] connect (s=0x66c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.197"), namelen=16) returned -1 [0209.913] WSAGetLastError () returned 10035 [0209.913] htonl (hostlong=0xc0a800c6) returned 0xc600a8c0 [0209.913] socket (af=2, type=1, protocol=6) returned 0x670 [0209.913] ioctlsocket (in: s=0x670, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.913] connect (s=0x670, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.198"), namelen=16) returned -1 [0209.914] WSAGetLastError () returned 10035 [0209.914] htonl (hostlong=0xc0a800c7) returned 0xc700a8c0 [0209.914] socket (af=2, type=1, protocol=6) returned 0x674 [0209.914] ioctlsocket (in: s=0x674, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.914] connect (s=0x674, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.199"), namelen=16) returned -1 [0209.915] WSAGetLastError () returned 10035 [0209.915] htonl (hostlong=0xc0a800c8) returned 0xc800a8c0 [0209.915] socket (af=2, type=1, protocol=6) returned 0x678 [0209.915] ioctlsocket (in: s=0x678, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.915] connect (s=0x678, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.200"), namelen=16) returned -1 [0209.916] WSAGetLastError () returned 10035 [0209.916] htonl (hostlong=0xc0a800c9) returned 0xc900a8c0 [0209.916] socket (af=2, type=1, protocol=6) returned 0x67c [0209.916] ioctlsocket (in: s=0x67c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.916] connect (s=0x67c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.201"), namelen=16) returned -1 [0209.917] WSAGetLastError () returned 10035 [0209.917] htonl (hostlong=0xc0a800ca) returned 0xca00a8c0 [0209.917] socket (af=2, type=1, protocol=6) returned 0x680 [0209.917] ioctlsocket (in: s=0x680, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.917] connect (s=0x680, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.202"), namelen=16) returned -1 [0209.918] WSAGetLastError () returned 10035 [0209.918] htonl (hostlong=0xc0a800cb) returned 0xcb00a8c0 [0209.918] socket (af=2, type=1, protocol=6) returned 0x684 [0209.918] ioctlsocket (in: s=0x684, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.918] connect (s=0x684, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.203"), namelen=16) returned -1 [0209.919] WSAGetLastError () returned 10035 [0209.919] htonl (hostlong=0xc0a800cc) returned 0xcc00a8c0 [0209.919] socket (af=2, type=1, protocol=6) returned 0x688 [0209.919] ioctlsocket (in: s=0x688, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.919] connect (s=0x688, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.204"), namelen=16) returned -1 [0209.920] WSAGetLastError () returned 10035 [0209.920] htonl (hostlong=0xc0a800cd) returned 0xcd00a8c0 [0209.920] socket (af=2, type=1, protocol=6) returned 0x68c [0209.920] ioctlsocket (in: s=0x68c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.920] connect (s=0x68c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.205"), namelen=16) returned -1 [0209.921] WSAGetLastError () returned 10035 [0209.921] htonl (hostlong=0xc0a800ce) returned 0xce00a8c0 [0209.921] socket (af=2, type=1, protocol=6) returned 0x690 [0209.921] ioctlsocket (in: s=0x690, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.921] connect (s=0x690, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.206"), namelen=16) returned -1 [0209.922] WSAGetLastError () returned 10035 [0209.922] htonl (hostlong=0xc0a800cf) returned 0xcf00a8c0 [0209.922] socket (af=2, type=1, protocol=6) returned 0x694 [0209.922] ioctlsocket (in: s=0x694, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.922] connect (s=0x694, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.207"), namelen=16) returned -1 [0209.922] WSAGetLastError () returned 10035 [0209.922] htonl (hostlong=0xc0a800d0) returned 0xd000a8c0 [0209.923] socket (af=2, type=1, protocol=6) returned 0x698 [0209.923] ioctlsocket (in: s=0x698, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.923] connect (s=0x698, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.208"), namelen=16) returned -1 [0209.924] WSAGetLastError () returned 10035 [0209.924] htonl (hostlong=0xc0a800d1) returned 0xd100a8c0 [0209.924] socket (af=2, type=1, protocol=6) returned 0x69c [0209.924] ioctlsocket (in: s=0x69c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.924] connect (s=0x69c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.209"), namelen=16) returned -1 [0209.925] WSAGetLastError () returned 10035 [0209.925] htonl (hostlong=0xc0a800d2) returned 0xd200a8c0 [0209.925] socket (af=2, type=1, protocol=6) returned 0x6a0 [0209.925] ioctlsocket (in: s=0x6a0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.925] connect (s=0x6a0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.210"), namelen=16) returned -1 [0209.926] WSAGetLastError () returned 10035 [0209.926] htonl (hostlong=0xc0a800d3) returned 0xd300a8c0 [0209.926] socket (af=2, type=1, protocol=6) returned 0x6a4 [0209.926] ioctlsocket (in: s=0x6a4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.926] connect (s=0x6a4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.211"), namelen=16) returned -1 [0209.927] WSAGetLastError () returned 10035 [0209.927] htonl (hostlong=0xc0a800d4) returned 0xd400a8c0 [0209.927] socket (af=2, type=1, protocol=6) returned 0x6a8 [0209.927] ioctlsocket (in: s=0x6a8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.927] connect (s=0x6a8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.212"), namelen=16) returned -1 [0209.928] WSAGetLastError () returned 10035 [0209.928] htonl (hostlong=0xc0a800d5) returned 0xd500a8c0 [0209.928] socket (af=2, type=1, protocol=6) returned 0x6ac [0209.928] ioctlsocket (in: s=0x6ac, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.928] connect (s=0x6ac, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.213"), namelen=16) returned -1 [0209.929] WSAGetLastError () returned 10035 [0209.929] htonl (hostlong=0xc0a800d6) returned 0xd600a8c0 [0209.929] socket (af=2, type=1, protocol=6) returned 0x6b0 [0209.929] ioctlsocket (in: s=0x6b0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.929] connect (s=0x6b0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.214"), namelen=16) returned -1 [0209.930] WSAGetLastError () returned 10035 [0209.930] htonl (hostlong=0xc0a800d7) returned 0xd700a8c0 [0209.930] socket (af=2, type=1, protocol=6) returned 0x6b4 [0209.930] ioctlsocket (in: s=0x6b4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.930] connect (s=0x6b4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.215"), namelen=16) returned -1 [0209.931] WSAGetLastError () returned 10035 [0209.931] htonl (hostlong=0xc0a800d8) returned 0xd800a8c0 [0209.931] socket (af=2, type=1, protocol=6) returned 0x6b8 [0209.931] ioctlsocket (in: s=0x6b8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.931] connect (s=0x6b8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.216"), namelen=16) returned -1 [0209.932] WSAGetLastError () returned 10035 [0209.932] htonl (hostlong=0xc0a800d9) returned 0xd900a8c0 [0209.932] socket (af=2, type=1, protocol=6) returned 0x6bc [0209.932] ioctlsocket (in: s=0x6bc, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0209.932] connect (s=0x6bc, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.217"), namelen=16) returned -1 [0209.933] WSAGetLastError () returned 10035 [0209.933] GetTickCount () returned 0x114c228 [0209.933] GetTickCount () returned 0x114c228 [0209.933] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.933] GetTickCount () returned 0x114c228 [0209.933] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.934] GetTickCount () returned 0x114c228 [0209.934] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.934] GetTickCount () returned 0x114c228 [0209.934] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.934] GetTickCount () returned 0x114c228 [0209.934] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.934] GetTickCount () returned 0x114c228 [0209.934] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.934] GetTickCount () returned 0x114c228 [0209.934] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.934] GetTickCount () returned 0x114c228 [0209.934] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.934] GetTickCount () returned 0x114c228 [0209.934] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.934] GetTickCount () returned 0x114c228 [0209.934] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.934] GetTickCount () returned 0x114c228 [0209.934] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.934] GetTickCount () returned 0x114c228 [0209.934] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.934] GetTickCount () returned 0x114c228 [0209.934] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.934] GetTickCount () returned 0x114c228 [0209.934] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.934] GetTickCount () returned 0x114c228 [0209.934] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.934] GetTickCount () returned 0x114c228 [0209.934] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.934] GetTickCount () returned 0x114c228 [0209.935] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.935] GetTickCount () returned 0x114c228 [0209.935] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.935] GetTickCount () returned 0x114c228 [0209.935] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.935] GetTickCount () returned 0x114c228 [0209.935] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.935] GetTickCount () returned 0x114c228 [0209.935] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.935] GetTickCount () returned 0x114c228 [0209.935] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.935] GetTickCount () returned 0x114c228 [0209.935] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.935] GetTickCount () returned 0x114c228 [0209.935] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.935] GetTickCount () returned 0x114c228 [0209.935] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.935] GetTickCount () returned 0x114c228 [0209.935] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.935] GetTickCount () returned 0x114c228 [0209.935] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.935] GetTickCount () returned 0x114c228 [0209.935] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.935] GetTickCount () returned 0x114c228 [0209.935] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.935] GetTickCount () returned 0x114c228 [0209.935] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.935] GetTickCount () returned 0x114c228 [0209.935] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.935] GetTickCount () returned 0x114c228 [0209.935] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.935] GetTickCount () returned 0x114c228 [0209.935] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.935] GetTickCount () returned 0x114c228 [0209.935] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.935] GetTickCount () returned 0x114c228 [0209.935] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.935] GetTickCount () returned 0x114c228 [0209.935] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.935] GetTickCount () returned 0x114c228 [0209.935] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.935] GetTickCount () returned 0x114c228 [0209.936] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.936] GetTickCount () returned 0x114c228 [0209.936] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.936] GetTickCount () returned 0x114c228 [0209.936] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.936] GetTickCount () returned 0x114c228 [0209.936] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.936] GetTickCount () returned 0x114c228 [0209.936] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.936] GetTickCount () returned 0x114c228 [0209.936] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.936] GetTickCount () returned 0x114c228 [0209.936] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.936] GetTickCount () returned 0x114c228 [0209.936] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.936] GetTickCount () returned 0x114c228 [0209.936] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.936] GetTickCount () returned 0x114c228 [0209.936] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.936] GetTickCount () returned 0x114c228 [0209.936] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.936] GetTickCount () returned 0x114c228 [0209.936] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.936] GetTickCount () returned 0x114c228 [0209.936] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.936] GetTickCount () returned 0x114c228 [0209.936] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.936] GetTickCount () returned 0x114c228 [0209.936] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.936] GetTickCount () returned 0x114c228 [0209.936] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.936] GetTickCount () returned 0x114c228 [0209.936] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.936] GetTickCount () returned 0x114c228 [0209.936] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.936] GetTickCount () returned 0x114c228 [0209.936] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.936] GetTickCount () returned 0x114c228 [0209.936] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.936] GetTickCount () returned 0x114c228 [0209.936] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.937] GetTickCount () returned 0x114c228 [0209.937] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.937] GetTickCount () returned 0x114c228 [0209.937] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.937] GetTickCount () returned 0x114c228 [0209.937] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.937] GetTickCount () returned 0x114c228 [0209.937] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.937] GetTickCount () returned 0x114c228 [0209.937] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.937] GetTickCount () returned 0x114c228 [0209.937] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.937] GetTickCount () returned 0x114c228 [0209.937] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.937] GetTickCount () returned 0x114c228 [0209.937] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.937] GetTickCount () returned 0x114c228 [0209.937] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.937] GetTickCount () returned 0x114c228 [0209.937] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.937] GetTickCount () returned 0x114c228 [0209.937] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.937] GetTickCount () returned 0x114c228 [0209.937] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.937] GetTickCount () returned 0x114c228 [0209.937] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.937] GetTickCount () returned 0x114c228 [0209.937] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.937] GetTickCount () returned 0x114c228 [0209.937] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.937] GetTickCount () returned 0x114c228 [0209.937] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.937] GetTickCount () returned 0x114c228 [0209.937] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.937] GetTickCount () returned 0x114c228 [0209.937] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.937] GetTickCount () returned 0x114c228 [0209.937] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.937] GetTickCount () returned 0x114c228 [0209.937] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.938] GetTickCount () returned 0x114c228 [0209.938] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.938] GetTickCount () returned 0x114c228 [0209.938] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.938] GetTickCount () returned 0x114c228 [0209.938] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.938] GetTickCount () returned 0x114c228 [0209.938] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.938] GetTickCount () returned 0x114c228 [0209.938] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.938] GetTickCount () returned 0x114c228 [0209.938] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.938] GetTickCount () returned 0x114c228 [0209.938] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.938] GetTickCount () returned 0x114c228 [0209.938] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.938] GetTickCount () returned 0x114c228 [0209.938] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.938] GetTickCount () returned 0x114c228 [0209.938] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.938] GetTickCount () returned 0x114c228 [0209.938] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.938] GetTickCount () returned 0x114c228 [0209.938] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.938] GetTickCount () returned 0x114c228 [0209.938] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.938] GetTickCount () returned 0x114c228 [0209.938] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.938] GetTickCount () returned 0x114c228 [0209.938] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.938] GetTickCount () returned 0x114c228 [0209.938] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.938] GetTickCount () returned 0x114c228 [0209.938] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.938] GetTickCount () returned 0x114c228 [0209.938] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.938] GetTickCount () returned 0x114c228 [0209.938] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.938] GetTickCount () returned 0x114c228 [0209.938] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.938] GetTickCount () returned 0x114c228 [0209.939] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.939] GetTickCount () returned 0x114c228 [0209.939] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.939] GetTickCount () returned 0x114c228 [0209.939] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.939] GetTickCount () returned 0x114c228 [0209.939] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.939] GetTickCount () returned 0x114c228 [0209.939] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.939] GetTickCount () returned 0x114c228 [0209.939] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.939] GetTickCount () returned 0x114c228 [0209.939] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.939] GetTickCount () returned 0x114c228 [0209.939] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.939] GetTickCount () returned 0x114c228 [0209.939] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.939] GetTickCount () returned 0x114c228 [0209.939] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.939] GetTickCount () returned 0x114c228 [0209.939] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.939] GetTickCount () returned 0x114c228 [0209.939] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.939] GetTickCount () returned 0x114c228 [0209.939] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.939] GetTickCount () returned 0x114c228 [0209.939] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.939] GetTickCount () returned 0x114c228 [0209.939] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.939] GetTickCount () returned 0x114c228 [0209.939] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.939] GetTickCount () returned 0x114c228 [0209.939] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.939] GetTickCount () returned 0x114c228 [0209.939] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.939] GetTickCount () returned 0x114c228 [0209.939] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.939] GetTickCount () returned 0x114c228 [0209.939] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.939] GetTickCount () returned 0x114c228 [0209.939] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.940] GetTickCount () returned 0x114c228 [0209.940] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.940] GetTickCount () returned 0x114c228 [0209.940] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.940] GetTickCount () returned 0x114c228 [0209.940] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.940] GetTickCount () returned 0x114c228 [0209.940] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.940] GetTickCount () returned 0x114c228 [0209.940] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.940] GetTickCount () returned 0x114c228 [0209.940] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.940] GetTickCount () returned 0x114c228 [0209.940] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.940] GetTickCount () returned 0x114c228 [0209.940] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.940] GetTickCount () returned 0x114c228 [0209.940] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.940] GetTickCount () returned 0x114c228 [0209.940] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.940] GetTickCount () returned 0x114c228 [0209.940] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.940] GetTickCount () returned 0x114c228 [0209.940] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.940] GetTickCount () returned 0x114c228 [0209.940] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.940] GetTickCount () returned 0x114c228 [0209.940] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.940] GetTickCount () returned 0x114c228 [0209.940] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.940] GetTickCount () returned 0x114c228 [0209.940] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.940] GetTickCount () returned 0x114c228 [0209.940] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.940] GetTickCount () returned 0x114c228 [0209.940] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.940] GetTickCount () returned 0x114c228 [0209.940] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.940] GetTickCount () returned 0x114c228 [0209.940] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.941] GetTickCount () returned 0x114c228 [0209.941] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.941] GetTickCount () returned 0x114c228 [0209.941] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.941] GetTickCount () returned 0x114c228 [0209.941] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.941] GetTickCount () returned 0x114c228 [0209.941] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.941] GetTickCount () returned 0x114c228 [0209.941] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.941] GetTickCount () returned 0x114c228 [0209.941] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.941] GetTickCount () returned 0x114c228 [0209.941] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.941] GetTickCount () returned 0x114c228 [0209.941] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.941] GetTickCount () returned 0x114c228 [0209.941] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.941] GetTickCount () returned 0x114c228 [0209.941] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.941] GetTickCount () returned 0x114c228 [0209.941] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.941] GetTickCount () returned 0x114c228 [0209.941] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.941] GetTickCount () returned 0x114c228 [0209.941] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.941] GetTickCount () returned 0x114c228 [0209.941] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.941] GetTickCount () returned 0x114c228 [0209.941] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.941] GetTickCount () returned 0x114c228 [0209.941] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.941] GetTickCount () returned 0x114c228 [0209.941] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.941] GetTickCount () returned 0x114c228 [0209.941] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.941] GetTickCount () returned 0x114c228 [0209.941] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.941] GetTickCount () returned 0x114c228 [0209.941] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.942] GetTickCount () returned 0x114c228 [0209.942] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.942] GetTickCount () returned 0x114c228 [0209.942] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.942] GetTickCount () returned 0x114c228 [0209.942] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.942] GetTickCount () returned 0x114c228 [0209.942] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.942] GetTickCount () returned 0x114c228 [0209.942] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.942] GetTickCount () returned 0x114c228 [0209.942] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.942] GetTickCount () returned 0x114c228 [0209.942] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.942] GetTickCount () returned 0x114c228 [0209.942] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.942] GetTickCount () returned 0x114c228 [0209.942] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.942] GetTickCount () returned 0x114c228 [0209.942] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.942] GetTickCount () returned 0x114c228 [0209.942] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.942] GetTickCount () returned 0x114c228 [0209.942] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.942] GetTickCount () returned 0x114c228 [0209.942] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.942] GetTickCount () returned 0x114c228 [0209.942] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.942] GetTickCount () returned 0x114c228 [0209.942] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.944] GetTickCount () returned 0x114c228 [0209.944] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.944] GetTickCount () returned 0x114c228 [0209.944] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.944] GetTickCount () returned 0x114c228 [0209.944] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.944] GetTickCount () returned 0x114c228 [0209.944] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.944] GetTickCount () returned 0x114c228 [0209.944] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.944] GetTickCount () returned 0x114c228 [0209.944] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.944] GetTickCount () returned 0x114c228 [0209.944] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.944] GetTickCount () returned 0x114c228 [0209.944] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.944] GetTickCount () returned 0x114c228 [0209.944] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.944] GetTickCount () returned 0x114c228 [0209.944] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.944] GetTickCount () returned 0x114c228 [0209.944] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.944] GetTickCount () returned 0x114c228 [0209.944] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.944] GetTickCount () returned 0x114c228 [0209.944] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.944] GetTickCount () returned 0x114c228 [0209.944] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.944] GetTickCount () returned 0x114c228 [0209.944] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.944] GetTickCount () returned 0x114c228 [0209.944] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.944] GetTickCount () returned 0x114c228 [0209.944] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.944] GetTickCount () returned 0x114c228 [0209.944] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.944] GetTickCount () returned 0x114c228 [0209.945] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.945] GetTickCount () returned 0x114c228 [0209.945] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.945] GetTickCount () returned 0x114c228 [0209.945] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.945] GetTickCount () returned 0x114c228 [0209.945] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.945] GetTickCount () returned 0x114c228 [0209.945] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.945] GetTickCount () returned 0x114c228 [0209.945] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.945] GetTickCount () returned 0x114c228 [0209.945] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.945] GetTickCount () returned 0x114c228 [0209.945] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.945] GetTickCount () returned 0x114c228 [0209.945] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.945] GetTickCount () returned 0x114c228 [0209.945] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.945] GetTickCount () returned 0x114c228 [0209.945] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.945] GetTickCount () returned 0x114c228 [0209.945] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.945] GetTickCount () returned 0x114c228 [0209.945] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.945] GetTickCount () returned 0x114c228 [0209.945] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.945] GetTickCount () returned 0x114c228 [0209.945] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.945] GetTickCount () returned 0x114c228 [0209.945] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.945] GetTickCount () returned 0x114c228 [0209.945] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.945] GetTickCount () returned 0x114c228 [0209.945] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.945] GetTickCount () returned 0x114c228 [0209.945] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.945] GetTickCount () returned 0x114c228 [0209.945] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.945] GetTickCount () returned 0x114c228 [0209.946] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.946] GetTickCount () returned 0x114c228 [0209.946] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.946] GetTickCount () returned 0x114c228 [0209.946] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.946] GetTickCount () returned 0x114c228 [0209.946] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.946] GetTickCount () returned 0x114c228 [0209.946] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.946] GetTickCount () returned 0x114c228 [0209.946] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.946] GetTickCount () returned 0x114c228 [0209.946] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.946] GetTickCount () returned 0x114c228 [0209.946] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.946] GetTickCount () returned 0x114c228 [0209.946] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.946] GetTickCount () returned 0x114c228 [0209.946] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.946] GetTickCount () returned 0x114c228 [0209.946] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.946] GetTickCount () returned 0x114c228 [0209.946] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.946] GetTickCount () returned 0x114c228 [0209.946] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.946] GetTickCount () returned 0x114c228 [0209.946] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.946] GetTickCount () returned 0x114c228 [0209.946] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.946] GetTickCount () returned 0x114c228 [0209.946] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.946] GetTickCount () returned 0x114c228 [0209.946] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.946] GetTickCount () returned 0x114c228 [0209.946] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.946] GetTickCount () returned 0x114c228 [0209.946] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.946] GetTickCount () returned 0x114c228 [0209.946] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.946] GetTickCount () returned 0x114c228 [0209.947] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.947] GetTickCount () returned 0x114c228 [0209.947] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.947] GetTickCount () returned 0x114c228 [0209.947] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.947] GetTickCount () returned 0x114c228 [0209.947] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.947] GetTickCount () returned 0x114c228 [0209.947] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.947] GetTickCount () returned 0x114c228 [0209.947] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.947] GetTickCount () returned 0x114c228 [0209.947] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.947] GetTickCount () returned 0x114c228 [0209.947] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.947] GetTickCount () returned 0x114c228 [0209.947] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.947] GetTickCount () returned 0x114c228 [0209.947] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.947] GetTickCount () returned 0x114c228 [0209.947] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.947] GetTickCount () returned 0x114c228 [0209.947] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0209.947] GetTickCount () returned 0x114c228 [0209.947] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0210.009] GetTickCount () returned 0x114c267 [0210.009] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0210.009] GetTickCount () returned 0x114c267 [0210.009] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0210.009] GetTickCount () returned 0x114c267 [0210.009] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0210.009] GetTickCount () returned 0x114c267 [0210.009] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0210.009] GetTickCount () returned 0x114c267 [0210.010] getsockopt (in: s=0x6bc, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.010] recv (in: s=0x6bc, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.010] WSAGetLastError () returned 10057 [0210.011] closesocket (s=0x6bc) returned 0 [0210.011] getsockopt (in: s=0x6b8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.011] recv (in: s=0x6b8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.011] WSAGetLastError () returned 10057 [0210.011] closesocket (s=0x6b8) returned 0 [0210.012] getsockopt (in: s=0x6b4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.012] recv (in: s=0x6b4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.012] WSAGetLastError () returned 10057 [0210.012] closesocket (s=0x6b4) returned 0 [0210.012] getsockopt (in: s=0x6b0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.012] recv (in: s=0x6b0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.012] WSAGetLastError () returned 10057 [0210.012] closesocket (s=0x6b0) returned 0 [0210.012] getsockopt (in: s=0x6ac, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.012] recv (in: s=0x6ac, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.012] WSAGetLastError () returned 10057 [0210.013] closesocket (s=0x6ac) returned 0 [0210.013] getsockopt (in: s=0x6a8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.013] recv (in: s=0x6a8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.013] WSAGetLastError () returned 10057 [0210.013] closesocket (s=0x6a8) returned 0 [0210.013] getsockopt (in: s=0x6a4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.013] recv (in: s=0x6a4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.013] WSAGetLastError () returned 10057 [0210.013] closesocket (s=0x6a4) returned 0 [0210.014] getsockopt (in: s=0x6a0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.014] recv (in: s=0x6a0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.014] WSAGetLastError () returned 10057 [0210.014] closesocket (s=0x6a0) returned 0 [0210.014] getsockopt (in: s=0x69c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.014] recv (in: s=0x69c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.014] WSAGetLastError () returned 10057 [0210.014] closesocket (s=0x69c) returned 0 [0210.014] getsockopt (in: s=0x698, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.014] recv (in: s=0x698, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.014] WSAGetLastError () returned 10057 [0210.014] closesocket (s=0x698) returned 0 [0210.015] getsockopt (in: s=0x694, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.015] recv (in: s=0x694, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.015] WSAGetLastError () returned 10057 [0210.015] closesocket (s=0x694) returned 0 [0210.015] getsockopt (in: s=0x690, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.015] recv (in: s=0x690, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.015] WSAGetLastError () returned 10057 [0210.015] closesocket (s=0x690) returned 0 [0210.015] getsockopt (in: s=0x68c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.015] recv (in: s=0x68c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.015] WSAGetLastError () returned 10057 [0210.015] closesocket (s=0x68c) returned 0 [0210.016] getsockopt (in: s=0x688, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.016] recv (in: s=0x688, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.016] WSAGetLastError () returned 10057 [0210.016] closesocket (s=0x688) returned 0 [0210.016] getsockopt (in: s=0x684, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.016] recv (in: s=0x684, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.016] WSAGetLastError () returned 10057 [0210.016] closesocket (s=0x684) returned 0 [0210.016] getsockopt (in: s=0x680, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.016] recv (in: s=0x680, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.016] WSAGetLastError () returned 10057 [0210.016] closesocket (s=0x680) returned 0 [0210.017] getsockopt (in: s=0x67c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.017] recv (in: s=0x67c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.017] WSAGetLastError () returned 10057 [0210.017] closesocket (s=0x67c) returned 0 [0210.017] getsockopt (in: s=0x678, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.017] recv (in: s=0x678, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.017] WSAGetLastError () returned 10057 [0210.017] closesocket (s=0x678) returned 0 [0210.017] getsockopt (in: s=0x674, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.017] recv (in: s=0x674, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.017] WSAGetLastError () returned 10057 [0210.017] closesocket (s=0x674) returned 0 [0210.018] getsockopt (in: s=0x670, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.018] recv (in: s=0x670, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.018] WSAGetLastError () returned 10057 [0210.018] closesocket (s=0x670) returned 0 [0210.018] getsockopt (in: s=0x66c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.018] recv (in: s=0x66c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.018] WSAGetLastError () returned 10057 [0210.018] closesocket (s=0x66c) returned 0 [0210.018] getsockopt (in: s=0x668, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.018] recv (in: s=0x668, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.019] WSAGetLastError () returned 10057 [0210.019] closesocket (s=0x668) returned 0 [0210.019] getsockopt (in: s=0x664, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.019] recv (in: s=0x664, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.019] WSAGetLastError () returned 10057 [0210.019] closesocket (s=0x664) returned 0 [0210.019] getsockopt (in: s=0x660, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.019] recv (in: s=0x660, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.019] WSAGetLastError () returned 10057 [0210.019] closesocket (s=0x660) returned 0 [0210.019] getsockopt (in: s=0x65c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.020] recv (in: s=0x65c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.020] WSAGetLastError () returned 10057 [0210.020] closesocket (s=0x65c) returned 0 [0210.020] getsockopt (in: s=0x658, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.020] recv (in: s=0x658, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.020] WSAGetLastError () returned 10057 [0210.020] closesocket (s=0x658) returned 0 [0210.020] getsockopt (in: s=0x654, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.020] recv (in: s=0x654, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.020] WSAGetLastError () returned 10057 [0210.020] closesocket (s=0x654) returned 0 [0210.021] getsockopt (in: s=0x650, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.021] recv (in: s=0x650, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.021] WSAGetLastError () returned 10057 [0210.021] closesocket (s=0x650) returned 0 [0210.021] getsockopt (in: s=0x64c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.021] recv (in: s=0x64c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.021] WSAGetLastError () returned 10057 [0210.021] closesocket (s=0x64c) returned 0 [0210.021] getsockopt (in: s=0x648, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.021] recv (in: s=0x648, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.021] WSAGetLastError () returned 10057 [0210.021] closesocket (s=0x648) returned 0 [0210.022] getsockopt (in: s=0x644, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.022] recv (in: s=0x644, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.022] WSAGetLastError () returned 10057 [0210.022] closesocket (s=0x644) returned 0 [0210.022] getsockopt (in: s=0x640, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.022] recv (in: s=0x640, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.022] WSAGetLastError () returned 10057 [0210.022] closesocket (s=0x640) returned 0 [0210.022] getsockopt (in: s=0x63c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.022] recv (in: s=0x63c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.022] WSAGetLastError () returned 10057 [0210.022] closesocket (s=0x63c) returned 0 [0210.023] getsockopt (in: s=0x638, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.023] recv (in: s=0x638, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.023] WSAGetLastError () returned 10057 [0210.023] closesocket (s=0x638) returned 0 [0210.023] getsockopt (in: s=0x634, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.023] recv (in: s=0x634, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.023] WSAGetLastError () returned 10057 [0210.023] closesocket (s=0x634) returned 0 [0210.023] getsockopt (in: s=0x630, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.023] recv (in: s=0x630, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.023] WSAGetLastError () returned 10057 [0210.023] closesocket (s=0x630) returned 0 [0210.024] getsockopt (in: s=0x62c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.024] recv (in: s=0x62c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.024] WSAGetLastError () returned 10057 [0210.024] closesocket (s=0x62c) returned 0 [0210.024] getsockopt (in: s=0x628, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.024] recv (in: s=0x628, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.024] WSAGetLastError () returned 10057 [0210.024] closesocket (s=0x628) returned 0 [0210.024] getsockopt (in: s=0x624, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.024] recv (in: s=0x624, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.024] WSAGetLastError () returned 10057 [0210.024] closesocket (s=0x624) returned 0 [0210.025] getsockopt (in: s=0x620, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.025] recv (in: s=0x620, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.025] WSAGetLastError () returned 10057 [0210.025] closesocket (s=0x620) returned 0 [0210.025] getsockopt (in: s=0x61c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.025] recv (in: s=0x61c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.025] WSAGetLastError () returned 10057 [0210.025] closesocket (s=0x61c) returned 0 [0210.026] getsockopt (in: s=0x618, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.026] recv (in: s=0x618, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.026] WSAGetLastError () returned 10057 [0210.026] closesocket (s=0x618) returned 0 [0210.026] getsockopt (in: s=0x614, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.026] recv (in: s=0x614, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.026] WSAGetLastError () returned 10057 [0210.026] closesocket (s=0x614) returned 0 [0210.027] getsockopt (in: s=0x610, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.027] recv (in: s=0x610, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.027] WSAGetLastError () returned 10057 [0210.027] closesocket (s=0x610) returned 0 [0210.027] getsockopt (in: s=0x60c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.027] recv (in: s=0x60c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.027] WSAGetLastError () returned 10057 [0210.027] closesocket (s=0x60c) returned 0 [0210.027] getsockopt (in: s=0x608, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.027] recv (in: s=0x608, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.027] WSAGetLastError () returned 10057 [0210.027] closesocket (s=0x608) returned 0 [0210.028] getsockopt (in: s=0x604, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.028] recv (in: s=0x604, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.028] WSAGetLastError () returned 10057 [0210.028] closesocket (s=0x604) returned 0 [0210.028] getsockopt (in: s=0x600, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.028] recv (in: s=0x600, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.028] WSAGetLastError () returned 10057 [0210.028] closesocket (s=0x600) returned 0 [0210.028] getsockopt (in: s=0x5fc, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.028] recv (in: s=0x5fc, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.028] WSAGetLastError () returned 10057 [0210.028] closesocket (s=0x5fc) returned 0 [0210.029] getsockopt (in: s=0x5f8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.029] recv (in: s=0x5f8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.029] WSAGetLastError () returned 10057 [0210.029] closesocket (s=0x5f8) returned 0 [0210.029] getsockopt (in: s=0x5f4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.029] recv (in: s=0x5f4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.029] WSAGetLastError () returned 10057 [0210.029] closesocket (s=0x5f4) returned 0 [0210.029] getsockopt (in: s=0x5f0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.029] recv (in: s=0x5f0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.029] WSAGetLastError () returned 10057 [0210.029] closesocket (s=0x5f0) returned 0 [0210.030] getsockopt (in: s=0x5ec, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.030] recv (in: s=0x5ec, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.030] WSAGetLastError () returned 10057 [0210.030] closesocket (s=0x5ec) returned 0 [0210.030] getsockopt (in: s=0x5e8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.030] recv (in: s=0x5e8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.030] WSAGetLastError () returned 10057 [0210.030] closesocket (s=0x5e8) returned 0 [0210.030] getsockopt (in: s=0x5e4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.030] recv (in: s=0x5e4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.030] WSAGetLastError () returned 10057 [0210.031] closesocket (s=0x5e4) returned 0 [0210.031] getsockopt (in: s=0x5e0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.031] recv (in: s=0x5e0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.031] WSAGetLastError () returned 10057 [0210.031] closesocket (s=0x5e0) returned 0 [0210.031] getsockopt (in: s=0x5dc, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.031] recv (in: s=0x5dc, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.031] WSAGetLastError () returned 10057 [0210.031] closesocket (s=0x5dc) returned 0 [0210.031] getsockopt (in: s=0x5d8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.031] recv (in: s=0x5d8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.032] WSAGetLastError () returned 10057 [0210.032] closesocket (s=0x5d8) returned 0 [0210.032] getsockopt (in: s=0x5d4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.032] recv (in: s=0x5d4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.032] WSAGetLastError () returned 10057 [0210.032] closesocket (s=0x5d4) returned 0 [0210.032] getsockopt (in: s=0x5d0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.032] recv (in: s=0x5d0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.032] WSAGetLastError () returned 10057 [0210.032] closesocket (s=0x5d0) returned 0 [0210.033] getsockopt (in: s=0x5cc, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.033] recv (in: s=0x5cc, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.033] WSAGetLastError () returned 10057 [0210.033] closesocket (s=0x5cc) returned 0 [0210.033] getsockopt (in: s=0x5c8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.033] recv (in: s=0x5c8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.033] WSAGetLastError () returned 10057 [0210.033] closesocket (s=0x5c8) returned 0 [0210.033] getsockopt (in: s=0x5c4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.033] recv (in: s=0x5c4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.033] WSAGetLastError () returned 10057 [0210.033] closesocket (s=0x5c4) returned 0 [0210.034] getsockopt (in: s=0x5c0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.034] recv (in: s=0x5c0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.034] WSAGetLastError () returned 10057 [0210.034] closesocket (s=0x5c0) returned 0 [0210.034] getsockopt (in: s=0x5bc, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.034] recv (in: s=0x5bc, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.034] WSAGetLastError () returned 10057 [0210.034] closesocket (s=0x5bc) returned 0 [0210.034] getsockopt (in: s=0x5b8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.034] recv (in: s=0x5b8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.034] WSAGetLastError () returned 10057 [0210.034] closesocket (s=0x5b8) returned 0 [0210.035] getsockopt (in: s=0x5b4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.035] recv (in: s=0x5b4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.035] WSAGetLastError () returned 10057 [0210.035] closesocket (s=0x5b4) returned 0 [0210.035] getsockopt (in: s=0x5b0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.035] recv (in: s=0x5b0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.035] WSAGetLastError () returned 10057 [0210.035] closesocket (s=0x5b0) returned 0 [0210.035] getsockopt (in: s=0x5ac, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.035] recv (in: s=0x5ac, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.035] WSAGetLastError () returned 10057 [0210.035] closesocket (s=0x5ac) returned 0 [0210.036] getsockopt (in: s=0x5a8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.036] recv (in: s=0x5a8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.036] WSAGetLastError () returned 10057 [0210.036] closesocket (s=0x5a8) returned 0 [0210.036] getsockopt (in: s=0x5a4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.036] recv (in: s=0x5a4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.036] WSAGetLastError () returned 10057 [0210.036] closesocket (s=0x5a4) returned 0 [0210.036] getsockopt (in: s=0x5a0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.036] recv (in: s=0x5a0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.036] WSAGetLastError () returned 10057 [0210.036] closesocket (s=0x5a0) returned 0 [0210.037] getsockopt (in: s=0x59c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.037] recv (in: s=0x59c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.037] WSAGetLastError () returned 10057 [0210.037] closesocket (s=0x59c) returned 0 [0210.037] getsockopt (in: s=0x598, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.037] recv (in: s=0x598, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.037] WSAGetLastError () returned 10057 [0210.037] closesocket (s=0x598) returned 0 [0210.037] getsockopt (in: s=0x594, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.037] recv (in: s=0x594, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.037] WSAGetLastError () returned 10057 [0210.038] closesocket (s=0x594) returned 0 [0210.038] getsockopt (in: s=0x590, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.038] recv (in: s=0x590, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.038] WSAGetLastError () returned 10057 [0210.038] closesocket (s=0x590) returned 0 [0210.038] getsockopt (in: s=0x58c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.038] recv (in: s=0x58c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.038] WSAGetLastError () returned 10057 [0210.038] closesocket (s=0x58c) returned 0 [0210.038] getsockopt (in: s=0x588, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.038] recv (in: s=0x588, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.039] WSAGetLastError () returned 10057 [0210.039] closesocket (s=0x588) returned 0 [0210.039] getsockopt (in: s=0x584, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.039] recv (in: s=0x584, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.039] WSAGetLastError () returned 10057 [0210.039] closesocket (s=0x584) returned 0 [0210.039] getsockopt (in: s=0x580, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.039] recv (in: s=0x580, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.039] WSAGetLastError () returned 10057 [0210.039] closesocket (s=0x580) returned 0 [0210.040] getsockopt (in: s=0x57c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.040] recv (in: s=0x57c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.040] WSAGetLastError () returned 10057 [0210.040] closesocket (s=0x57c) returned 0 [0210.040] getsockopt (in: s=0x578, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.040] recv (in: s=0x578, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.040] WSAGetLastError () returned 10057 [0210.040] closesocket (s=0x578) returned 0 [0210.040] getsockopt (in: s=0x574, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.041] recv (in: s=0x574, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.041] WSAGetLastError () returned 10057 [0210.041] closesocket (s=0x574) returned 0 [0210.041] getsockopt (in: s=0x570, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.041] recv (in: s=0x570, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.041] WSAGetLastError () returned 10057 [0210.041] closesocket (s=0x570) returned 0 [0210.041] getsockopt (in: s=0x56c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.042] recv (in: s=0x56c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.042] WSAGetLastError () returned 10057 [0210.042] closesocket (s=0x56c) returned 0 [0210.042] getsockopt (in: s=0x568, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.042] recv (in: s=0x568, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.042] WSAGetLastError () returned 10057 [0210.042] closesocket (s=0x568) returned 0 [0210.042] getsockopt (in: s=0x564, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.042] recv (in: s=0x564, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.042] WSAGetLastError () returned 10057 [0210.042] closesocket (s=0x564) returned 0 [0210.043] getsockopt (in: s=0x560, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.043] recv (in: s=0x560, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.043] WSAGetLastError () returned 10057 [0210.043] closesocket (s=0x560) returned 0 [0210.043] getsockopt (in: s=0x55c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.043] recv (in: s=0x55c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.043] WSAGetLastError () returned 10057 [0210.043] closesocket (s=0x55c) returned 0 [0210.043] getsockopt (in: s=0x558, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.043] recv (in: s=0x558, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.043] WSAGetLastError () returned 10057 [0210.043] closesocket (s=0x558) returned 0 [0210.044] getsockopt (in: s=0x554, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.044] recv (in: s=0x554, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.044] WSAGetLastError () returned 10057 [0210.044] closesocket (s=0x554) returned 0 [0210.044] getsockopt (in: s=0x550, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.044] recv (in: s=0x550, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.044] WSAGetLastError () returned 10057 [0210.044] closesocket (s=0x550) returned 0 [0210.044] getsockopt (in: s=0x54c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.044] recv (in: s=0x54c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.044] WSAGetLastError () returned 10057 [0210.044] closesocket (s=0x54c) returned 0 [0210.045] getsockopt (in: s=0x548, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.045] recv (in: s=0x548, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.045] WSAGetLastError () returned 10057 [0210.045] closesocket (s=0x548) returned 0 [0210.045] getsockopt (in: s=0x544, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.045] recv (in: s=0x544, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.045] WSAGetLastError () returned 10057 [0210.045] closesocket (s=0x544) returned 0 [0210.045] getsockopt (in: s=0x540, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.045] recv (in: s=0x540, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.045] WSAGetLastError () returned 10057 [0210.045] closesocket (s=0x540) returned 0 [0210.046] getsockopt (in: s=0x53c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.046] recv (in: s=0x53c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.046] WSAGetLastError () returned 10057 [0210.046] closesocket (s=0x53c) returned 0 [0210.046] getsockopt (in: s=0x538, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.046] recv (in: s=0x538, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.046] WSAGetLastError () returned 10057 [0210.046] closesocket (s=0x538) returned 0 [0210.046] getsockopt (in: s=0x534, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.046] recv (in: s=0x534, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.046] WSAGetLastError () returned 10057 [0210.046] closesocket (s=0x534) returned 0 [0210.047] getsockopt (in: s=0x530, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.047] recv (in: s=0x530, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.047] WSAGetLastError () returned 10057 [0210.047] closesocket (s=0x530) returned 0 [0210.047] getsockopt (in: s=0x52c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.047] recv (in: s=0x52c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.047] WSAGetLastError () returned 10057 [0210.047] closesocket (s=0x52c) returned 0 [0210.047] getsockopt (in: s=0x528, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.047] recv (in: s=0x528, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.047] WSAGetLastError () returned 10057 [0210.048] closesocket (s=0x528) returned 0 [0210.048] getsockopt (in: s=0x524, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.048] recv (in: s=0x524, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.048] WSAGetLastError () returned 10057 [0210.048] closesocket (s=0x524) returned 0 [0210.048] getsockopt (in: s=0x520, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.048] recv (in: s=0x520, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.048] WSAGetLastError () returned 10057 [0210.048] closesocket (s=0x520) returned 0 [0210.051] getsockopt (in: s=0x51c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.051] recv (in: s=0x51c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.051] WSAGetLastError () returned 10057 [0210.051] closesocket (s=0x51c) returned 0 [0210.051] getsockopt (in: s=0x518, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.051] recv (in: s=0x518, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.052] WSAGetLastError () returned 10057 [0210.052] closesocket (s=0x518) returned 0 [0210.052] getsockopt (in: s=0x514, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.052] recv (in: s=0x514, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.052] WSAGetLastError () returned 10057 [0210.053] closesocket (s=0x514) returned 0 [0210.053] getsockopt (in: s=0x510, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.053] recv (in: s=0x510, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.053] WSAGetLastError () returned 10057 [0210.053] closesocket (s=0x510) returned 0 [0210.053] getsockopt (in: s=0x50c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.053] recv (in: s=0x50c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.053] WSAGetLastError () returned 10057 [0210.053] closesocket (s=0x50c) returned 0 [0210.054] getsockopt (in: s=0x508, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.054] recv (in: s=0x508, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.054] WSAGetLastError () returned 10057 [0210.054] closesocket (s=0x508) returned 0 [0210.054] getsockopt (in: s=0x504, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.054] recv (in: s=0x504, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.054] WSAGetLastError () returned 10057 [0210.054] closesocket (s=0x504) returned 0 [0210.054] getsockopt (in: s=0x500, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.054] recv (in: s=0x500, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.054] WSAGetLastError () returned 10057 [0210.054] closesocket (s=0x500) returned 0 [0210.055] getsockopt (in: s=0x4fc, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.055] recv (in: s=0x4fc, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.055] WSAGetLastError () returned 10057 [0210.055] closesocket (s=0x4fc) returned 0 [0210.055] getsockopt (in: s=0x4f8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.055] recv (in: s=0x4f8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.055] WSAGetLastError () returned 10057 [0210.055] closesocket (s=0x4f8) returned 0 [0210.066] getsockopt (in: s=0x4f4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.066] recv (in: s=0x4f4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.066] WSAGetLastError () returned 10057 [0210.066] closesocket (s=0x4f4) returned 0 [0210.067] getsockopt (in: s=0x4f0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.067] recv (in: s=0x4f0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.067] WSAGetLastError () returned 10057 [0210.067] closesocket (s=0x4f0) returned 0 [0210.067] getsockopt (in: s=0x4ec, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.067] recv (in: s=0x4ec, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.067] WSAGetLastError () returned 10057 [0210.067] closesocket (s=0x4ec) returned 0 [0210.067] getsockopt (in: s=0x4e8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.067] recv (in: s=0x4e8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.067] WSAGetLastError () returned 10057 [0210.068] closesocket (s=0x4e8) returned 0 [0210.068] getsockopt (in: s=0x4e4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.068] recv (in: s=0x4e4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.068] WSAGetLastError () returned 10057 [0210.068] closesocket (s=0x4e4) returned 0 [0210.068] getsockopt (in: s=0x4e0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.068] recv (in: s=0x4e0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.068] WSAGetLastError () returned 10057 [0210.068] closesocket (s=0x4e0) returned 0 [0210.069] getsockopt (in: s=0x4dc, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.069] recv (in: s=0x4dc, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.069] WSAGetLastError () returned 10057 [0210.069] closesocket (s=0x4dc) returned 0 [0210.069] getsockopt (in: s=0x4d8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.069] recv (in: s=0x4d8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.069] WSAGetLastError () returned 10057 [0210.069] closesocket (s=0x4d8) returned 0 [0210.069] getsockopt (in: s=0x4d4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.069] recv (in: s=0x4d4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.069] WSAGetLastError () returned 10057 [0210.069] closesocket (s=0x4d4) returned 0 [0210.070] getsockopt (in: s=0x4d0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.070] recv (in: s=0x4d0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.070] WSAGetLastError () returned 10057 [0210.070] closesocket (s=0x4d0) returned 0 [0210.070] getsockopt (in: s=0x4cc, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.070] recv (in: s=0x4cc, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.070] WSAGetLastError () returned 10057 [0210.070] closesocket (s=0x4cc) returned 0 [0210.070] getsockopt (in: s=0x4c8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.070] recv (in: s=0x4c8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.070] WSAGetLastError () returned 10057 [0210.070] closesocket (s=0x4c8) returned 0 [0210.071] getsockopt (in: s=0x4c4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.071] recv (in: s=0x4c4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.071] WSAGetLastError () returned 10057 [0210.071] closesocket (s=0x4c4) returned 0 [0210.071] getsockopt (in: s=0x4c0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.071] recv (in: s=0x4c0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.071] WSAGetLastError () returned 10057 [0210.071] closesocket (s=0x4c0) returned 0 [0210.071] getsockopt (in: s=0x4bc, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.071] recv (in: s=0x4bc, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.071] WSAGetLastError () returned 10057 [0210.071] closesocket (s=0x4bc) returned 0 [0210.072] getsockopt (in: s=0x4b8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.072] recv (in: s=0x4b8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.072] WSAGetLastError () returned 10057 [0210.072] closesocket (s=0x4b8) returned 0 [0210.072] getsockopt (in: s=0x4b4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.072] recv (in: s=0x4b4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.072] WSAGetLastError () returned 10057 [0210.073] closesocket (s=0x4b4) returned 0 [0210.073] getsockopt (in: s=0x4b0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.073] recv (in: s=0x4b0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.073] WSAGetLastError () returned 10057 [0210.073] closesocket (s=0x4b0) returned 0 [0210.073] getsockopt (in: s=0x4ac, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.073] recv (in: s=0x4ac, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.073] WSAGetLastError () returned 10057 [0210.073] closesocket (s=0x4ac) returned 0 [0210.074] getsockopt (in: s=0x4a8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.074] recv (in: s=0x4a8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.074] WSAGetLastError () returned 10057 [0210.074] closesocket (s=0x4a8) returned 0 [0210.074] getsockopt (in: s=0x4a4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.074] recv (in: s=0x4a4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.074] WSAGetLastError () returned 10057 [0210.074] closesocket (s=0x4a4) returned 0 [0210.075] getsockopt (in: s=0x4a0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.075] recv (in: s=0x4a0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.075] WSAGetLastError () returned 10057 [0210.075] closesocket (s=0x4a0) returned 0 [0210.075] getsockopt (in: s=0x49c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.075] recv (in: s=0x49c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.075] WSAGetLastError () returned 10057 [0210.075] closesocket (s=0x49c) returned 0 [0210.075] getsockopt (in: s=0x498, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.075] recv (in: s=0x498, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.075] WSAGetLastError () returned 10057 [0210.075] closesocket (s=0x498) returned 0 [0210.076] getsockopt (in: s=0x494, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.076] recv (in: s=0x494, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.076] WSAGetLastError () returned 10057 [0210.076] closesocket (s=0x494) returned 0 [0210.076] getsockopt (in: s=0x490, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.076] recv (in: s=0x490, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.076] WSAGetLastError () returned 10057 [0210.076] closesocket (s=0x490) returned 0 [0210.076] getsockopt (in: s=0x48c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.076] recv (in: s=0x48c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.077] WSAGetLastError () returned 10057 [0210.077] closesocket (s=0x48c) returned 0 [0210.077] getsockopt (in: s=0x488, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.077] recv (in: s=0x488, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.077] WSAGetLastError () returned 10057 [0210.077] closesocket (s=0x488) returned 0 [0210.077] getsockopt (in: s=0x484, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.077] recv (in: s=0x484, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.077] WSAGetLastError () returned 10057 [0210.077] closesocket (s=0x484) returned 0 [0210.078] getsockopt (in: s=0x480, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.078] recv (in: s=0x480, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.078] WSAGetLastError () returned 10057 [0210.078] closesocket (s=0x480) returned 0 [0210.078] getsockopt (in: s=0x47c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.078] recv (in: s=0x47c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.078] WSAGetLastError () returned 10057 [0210.078] closesocket (s=0x47c) returned 0 [0210.078] getsockopt (in: s=0x478, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.078] recv (in: s=0x478, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.078] WSAGetLastError () returned 10057 [0210.078] closesocket (s=0x478) returned 0 [0210.079] getsockopt (in: s=0x474, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.079] recv (in: s=0x474, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.079] WSAGetLastError () returned 10057 [0210.079] closesocket (s=0x474) returned 0 [0210.079] getsockopt (in: s=0x470, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.079] recv (in: s=0x470, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.079] WSAGetLastError () returned 10057 [0210.079] closesocket (s=0x470) returned 0 [0210.079] getsockopt (in: s=0x46c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.079] recv (in: s=0x46c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.080] WSAGetLastError () returned 10057 [0210.080] closesocket (s=0x46c) returned 0 [0210.080] getsockopt (in: s=0x468, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.080] recv (in: s=0x468, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.080] WSAGetLastError () returned 10057 [0210.080] closesocket (s=0x468) returned 0 [0210.080] getsockopt (in: s=0x464, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.080] recv (in: s=0x464, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.080] WSAGetLastError () returned 10057 [0210.080] closesocket (s=0x464) returned 0 [0210.081] getsockopt (in: s=0x460, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.081] recv (in: s=0x460, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.081] WSAGetLastError () returned 10057 [0210.081] closesocket (s=0x460) returned 0 [0210.081] getsockopt (in: s=0x45c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.081] recv (in: s=0x45c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.081] WSAGetLastError () returned 10057 [0210.081] closesocket (s=0x45c) returned 0 [0210.081] getsockopt (in: s=0x458, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.081] recv (in: s=0x458, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.081] WSAGetLastError () returned 10057 [0210.081] closesocket (s=0x458) returned 0 [0210.082] getsockopt (in: s=0x454, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.082] recv (in: s=0x454, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.082] WSAGetLastError () returned 10057 [0210.082] closesocket (s=0x454) returned 0 [0210.082] getsockopt (in: s=0x450, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.082] recv (in: s=0x450, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.082] WSAGetLastError () returned 10057 [0210.082] closesocket (s=0x450) returned 0 [0210.082] getsockopt (in: s=0x44c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.082] recv (in: s=0x44c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.082] WSAGetLastError () returned 10057 [0210.082] closesocket (s=0x44c) returned 0 [0210.083] getsockopt (in: s=0x448, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.083] recv (in: s=0x448, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.083] WSAGetLastError () returned 10057 [0210.083] closesocket (s=0x448) returned 0 [0210.083] getsockopt (in: s=0x444, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.083] recv (in: s=0x444, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.083] WSAGetLastError () returned 10057 [0210.083] closesocket (s=0x444) returned 0 [0210.083] getsockopt (in: s=0x440, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.083] recv (in: s=0x440, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.083] WSAGetLastError () returned 10057 [0210.083] closesocket (s=0x440) returned 0 [0210.084] getsockopt (in: s=0x43c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.084] recv (in: s=0x43c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.084] WSAGetLastError () returned 10057 [0210.084] closesocket (s=0x43c) returned 0 [0210.084] getsockopt (in: s=0x438, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.084] recv (in: s=0x438, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.084] WSAGetLastError () returned 10057 [0210.084] closesocket (s=0x438) returned 0 [0210.084] getsockopt (in: s=0x434, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.085] recv (in: s=0x434, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.085] WSAGetLastError () returned 10057 [0210.085] closesocket (s=0x434) returned 0 [0210.085] getsockopt (in: s=0x430, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.085] recv (in: s=0x430, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.085] WSAGetLastError () returned 10057 [0210.085] closesocket (s=0x430) returned 0 [0210.085] getsockopt (in: s=0x42c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.085] recv (in: s=0x42c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.085] WSAGetLastError () returned 10057 [0210.085] closesocket (s=0x42c) returned 0 [0210.086] getsockopt (in: s=0x428, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.086] recv (in: s=0x428, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.086] WSAGetLastError () returned 10057 [0210.086] closesocket (s=0x428) returned 0 [0210.086] getsockopt (in: s=0x424, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.086] recv (in: s=0x424, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.086] WSAGetLastError () returned 10057 [0210.086] closesocket (s=0x424) returned 0 [0210.086] getsockopt (in: s=0x420, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.086] recv (in: s=0x420, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.086] WSAGetLastError () returned 10057 [0210.086] closesocket (s=0x420) returned 0 [0210.087] getsockopt (in: s=0x41c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.087] recv (in: s=0x41c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.087] WSAGetLastError () returned 10057 [0210.087] closesocket (s=0x41c) returned 0 [0210.087] getsockopt (in: s=0x418, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.087] recv (in: s=0x418, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.087] WSAGetLastError () returned 10057 [0210.087] closesocket (s=0x418) returned 0 [0210.088] getsockopt (in: s=0x414, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.088] recv (in: s=0x414, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.088] WSAGetLastError () returned 10057 [0210.088] closesocket (s=0x414) returned 0 [0210.088] getsockopt (in: s=0x410, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.088] recv (in: s=0x410, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.088] WSAGetLastError () returned 10057 [0210.088] closesocket (s=0x410) returned 0 [0210.089] getsockopt (in: s=0x40c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.089] recv (in: s=0x40c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.089] WSAGetLastError () returned 10057 [0210.089] closesocket (s=0x40c) returned 0 [0210.089] getsockopt (in: s=0x408, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.089] recv (in: s=0x408, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.089] WSAGetLastError () returned 10057 [0210.089] closesocket (s=0x408) returned 0 [0210.089] getsockopt (in: s=0x404, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.090] recv (in: s=0x404, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.090] WSAGetLastError () returned 10057 [0210.090] closesocket (s=0x404) returned 0 [0210.090] getsockopt (in: s=0x3fc, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.090] recv (in: s=0x3fc, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.090] WSAGetLastError () returned 10057 [0210.090] closesocket (s=0x3fc) returned 0 [0210.090] getsockopt (in: s=0x3f8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.090] recv (in: s=0x3f8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.090] WSAGetLastError () returned 10057 [0210.090] closesocket (s=0x3f8) returned 0 [0210.091] getsockopt (in: s=0x3f4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.091] recv (in: s=0x3f4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.091] WSAGetLastError () returned 10057 [0210.091] closesocket (s=0x3f4) returned 0 [0210.091] getsockopt (in: s=0x3f0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.091] recv (in: s=0x3f0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.091] WSAGetLastError () returned 10057 [0210.091] closesocket (s=0x3f0) returned 0 [0210.091] getsockopt (in: s=0x3ec, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.091] recv (in: s=0x3ec, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.091] WSAGetLastError () returned 10057 [0210.091] closesocket (s=0x3ec) returned 0 [0210.092] getsockopt (in: s=0x3e8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.092] recv (in: s=0x3e8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.092] WSAGetLastError () returned 10057 [0210.092] closesocket (s=0x3e8) returned 0 [0210.092] getsockopt (in: s=0x3e4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.092] recv (in: s=0x3e4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.092] WSAGetLastError () returned 10057 [0210.092] closesocket (s=0x3e4) returned 0 [0210.092] getsockopt (in: s=0x3e0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.093] recv (in: s=0x3e0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.093] WSAGetLastError () returned 10057 [0210.093] closesocket (s=0x3e0) returned 0 [0210.093] getsockopt (in: s=0x3dc, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.093] recv (in: s=0x3dc, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.093] WSAGetLastError () returned 10057 [0210.093] closesocket (s=0x3dc) returned 0 [0210.093] getsockopt (in: s=0x3d8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.093] recv (in: s=0x3d8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.093] WSAGetLastError () returned 10057 [0210.093] closesocket (s=0x3d8) returned 0 [0210.094] getsockopt (in: s=0x3d4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.094] recv (in: s=0x3d4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.094] WSAGetLastError () returned 10057 [0210.094] closesocket (s=0x3d4) returned 0 [0210.094] getsockopt (in: s=0x3d0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.094] recv (in: s=0x3d0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.094] WSAGetLastError () returned 10057 [0210.094] closesocket (s=0x3d0) returned 0 [0210.095] getsockopt (in: s=0x3cc, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.095] recv (in: s=0x3cc, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.095] WSAGetLastError () returned 10057 [0210.095] closesocket (s=0x3cc) returned 0 [0210.095] getsockopt (in: s=0x3c8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.095] recv (in: s=0x3c8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.095] WSAGetLastError () returned 10057 [0210.095] closesocket (s=0x3c8) returned 0 [0210.095] getsockopt (in: s=0x3c4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.095] recv (in: s=0x3c4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.095] WSAGetLastError () returned 10057 [0210.095] closesocket (s=0x3c4) returned 0 [0210.096] getsockopt (in: s=0x3c0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.096] recv (in: s=0x3c0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.096] WSAGetLastError () returned 10057 [0210.096] closesocket (s=0x3c0) returned 0 [0210.096] getsockopt (in: s=0x3bc, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.096] recv (in: s=0x3bc, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.096] WSAGetLastError () returned 10057 [0210.096] closesocket (s=0x3bc) returned 0 [0210.096] getsockopt (in: s=0x3b8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.096] recv (in: s=0x3b8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.096] WSAGetLastError () returned 10057 [0210.097] closesocket (s=0x3b8) returned 0 [0210.097] getsockopt (in: s=0x3b4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.097] recv (in: s=0x3b4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.097] WSAGetLastError () returned 10057 [0210.097] closesocket (s=0x3b4) returned 0 [0210.097] getsockopt (in: s=0x3b0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.097] recv (in: s=0x3b0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.097] WSAGetLastError () returned 10057 [0210.097] closesocket (s=0x3b0) returned 0 [0210.098] getsockopt (in: s=0x3ac, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.098] recv (in: s=0x3ac, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.098] WSAGetLastError () returned 10057 [0210.098] closesocket (s=0x3ac) returned 0 [0210.098] getsockopt (in: s=0x3a8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.098] recv (in: s=0x3a8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.098] WSAGetLastError () returned 10057 [0210.098] closesocket (s=0x3a8) returned 0 [0210.099] getsockopt (in: s=0x3a4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.099] recv (in: s=0x3a4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.099] WSAGetLastError () returned 10057 [0210.099] closesocket (s=0x3a4) returned 0 [0210.099] getsockopt (in: s=0x3a0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.099] recv (in: s=0x3a0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.099] WSAGetLastError () returned 10057 [0210.099] closesocket (s=0x3a0) returned 0 [0210.100] getsockopt (in: s=0x39c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.100] recv (in: s=0x39c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.100] WSAGetLastError () returned 10057 [0210.100] closesocket (s=0x39c) returned 0 [0210.100] getsockopt (in: s=0x398, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.100] recv (in: s=0x398, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.100] WSAGetLastError () returned 10057 [0210.100] closesocket (s=0x398) returned 0 [0210.101] getsockopt (in: s=0x394, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.101] recv (in: s=0x394, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.101] WSAGetLastError () returned 10057 [0210.101] closesocket (s=0x394) returned 0 [0210.101] getsockopt (in: s=0x38c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.101] recv (in: s=0x38c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.101] WSAGetLastError () returned 10057 [0210.101] closesocket (s=0x38c) returned 0 [0210.102] getsockopt (in: s=0x370, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.102] recv (in: s=0x370, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.102] WSAGetLastError () returned 10057 [0210.102] closesocket (s=0x370) returned 0 [0210.102] getsockopt (in: s=0x380, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.102] recv (in: s=0x380, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.102] WSAGetLastError () returned 10057 [0210.102] closesocket (s=0x380) returned 0 [0210.103] getsockopt (in: s=0x354, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.103] recv (in: s=0x354, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.103] WSAGetLastError () returned 10057 [0210.103] closesocket (s=0x354) returned 0 [0210.103] getsockopt (in: s=0x350, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.103] recv (in: s=0x350, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.103] WSAGetLastError () returned 10057 [0210.103] closesocket (s=0x350) returned 0 [0210.104] getsockopt (in: s=0x34c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.104] recv (in: s=0x34c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.104] WSAGetLastError () returned 10057 [0210.104] closesocket (s=0x34c) returned 0 [0210.104] getsockopt (in: s=0x2f8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.105] recv (in: s=0x2f8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.105] WSAGetLastError () returned 10057 [0210.105] closesocket (s=0x2f8) returned 0 [0210.105] getsockopt (in: s=0x37c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.105] recv (in: s=0x37c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.105] WSAGetLastError () returned 10057 [0210.105] closesocket (s=0x37c) returned 0 [0210.106] getsockopt (in: s=0x390, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.106] recv (in: s=0x390, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.106] WSAGetLastError () returned 10057 [0210.106] closesocket (s=0x390) returned 0 [0210.106] getsockopt (in: s=0x364, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.106] recv (in: s=0x364, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.106] WSAGetLastError () returned 10057 [0210.106] closesocket (s=0x364) returned 0 [0210.107] getsockopt (in: s=0x374, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.107] recv (in: s=0x374, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.107] WSAGetLastError () returned 10057 [0210.107] closesocket (s=0x374) returned 0 [0210.107] getsockopt (in: s=0x384, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.107] recv (in: s=0x384, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.107] WSAGetLastError () returned 10057 [0210.107] closesocket (s=0x384) returned 0 [0210.107] getsockopt (in: s=0x344, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.108] recv (in: s=0x344, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.108] WSAGetLastError () returned 10057 [0210.108] closesocket (s=0x344) returned 0 [0210.108] getsockopt (in: s=0x36c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.108] recv (in: s=0x36c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.108] WSAGetLastError () returned 10057 [0210.108] closesocket (s=0x36c) returned 0 [0210.108] getsockopt (in: s=0x368, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.108] recv (in: s=0x368, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.109] WSAGetLastError () returned 10057 [0210.109] closesocket (s=0x368) returned 0 [0210.109] getsockopt (in: s=0x360, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0210.109] recv (in: s=0x360, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0210.109] WSAGetLastError () returned 10057 [0210.109] closesocket (s=0x360) returned 0 [0210.109] GetProcessHeap () returned 0x8a0000 [0210.109] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8d1d60 | out: hHeap=0x8a0000) returned 1 [0210.109] GetProcessHeap () returned 0x8a0000 [0210.109] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8d4588 | out: hHeap=0x8a0000) returned 1 [0210.110] htons (hostshort=0x1bd) returned 0xbd01 [0210.110] GetProcessHeap () returned 0x8a0000 [0210.110] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x800) returned 0x8d2568 [0210.110] GetProcessHeap () returned 0x8a0000 [0210.110] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x800) returned 0x8d3d80 [0210.110] htonl (hostlong=0xc0a800db) returned 0xdb00a8c0 [0210.110] socket (af=2, type=1, protocol=6) returned 0x360 [0210.110] ioctlsocket (in: s=0x360, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0210.110] connect (s=0x360, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.219"), namelen=16) returned -1 [0210.111] WSAGetLastError () returned 10035 [0210.111] htonl (hostlong=0xc0a800dc) returned 0xdc00a8c0 [0210.111] socket (af=2, type=1, protocol=6) returned 0x368 [0210.111] ioctlsocket (in: s=0x368, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0210.111] connect (s=0x368, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.220"), namelen=16) returned -1 [0210.113] WSAGetLastError () returned 10035 [0210.113] htonl (hostlong=0xc0a800dd) returned 0xdd00a8c0 [0210.113] socket (af=2, type=1, protocol=6) returned 0x36c [0210.113] ioctlsocket (in: s=0x36c, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0210.113] connect (s=0x36c, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.221"), namelen=16) returned -1 [0210.114] WSAGetLastError () returned 10035 [0210.114] htonl (hostlong=0xc0a800de) returned 0xde00a8c0 [0210.114] socket (af=2, type=1, protocol=6) returned 0x344 [0210.114] ioctlsocket (in: s=0x344, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0210.114] connect (s=0x344, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.222"), namelen=16) returned -1 [0210.115] WSAGetLastError () returned 10035 [0210.115] htonl (hostlong=0xc0a800df) returned 0xdf00a8c0 [0210.115] socket (af=2, type=1, protocol=6) returned 0x384 [0210.115] ioctlsocket (in: s=0x384, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0210.115] connect (s=0x384, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.223"), namelen=16) returned -1 [0210.116] WSAGetLastError () returned 10035 [0210.116] htonl (hostlong=0xc0a800e0) returned 0xe000a8c0 [0210.116] socket (af=2, type=1, protocol=6) returned 0x374 [0210.116] ioctlsocket (in: s=0x374, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0210.117] connect (s=0x374, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.224"), namelen=16) returned -1 [0210.117] WSAGetLastError () returned 10035 [0210.117] htonl (hostlong=0xc0a800e1) returned 0xe100a8c0 [0210.117] socket (af=2, type=1, protocol=6) returned 0x364 [0210.118] ioctlsocket (in: s=0x364, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0210.118] connect (s=0x364, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.225"), namelen=16) returned -1 [0210.118] WSAGetLastError () returned 10035 [0210.118] htonl (hostlong=0xc0a800e2) returned 0xe200a8c0 [0210.118] socket (af=2, type=1, protocol=6) returned 0x390 [0210.119] ioctlsocket (in: s=0x390, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0210.119] connect (s=0x390, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.226"), namelen=16) returned -1 [0210.120] WSAGetLastError () returned 10035 [0210.120] htonl (hostlong=0xc0a800e3) returned 0xe300a8c0 [0210.120] socket (af=2, type=1, protocol=6) returned 0x37c [0210.120] ioctlsocket (in: s=0x37c, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0210.120] connect (s=0x37c, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.227"), namelen=16) returned -1 [0210.121] WSAGetLastError () returned 10035 [0210.121] htonl (hostlong=0xc0a800e4) returned 0xe400a8c0 [0210.121] socket (af=2, type=1, protocol=6) returned 0x2f8 [0210.121] ioctlsocket (in: s=0x2f8, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0210.121] connect (s=0x2f8, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.228"), namelen=16) returned -1 [0210.122] WSAGetLastError () returned 10035 [0210.122] htonl (hostlong=0xc0a800e5) returned 0xe500a8c0 [0210.122] socket (af=2, type=1, protocol=6) returned 0x34c [0210.123] ioctlsocket (in: s=0x34c, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0210.123] connect (s=0x34c, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.229"), namelen=16) returned -1 [0210.123] WSAGetLastError () returned 10035 [0210.123] htonl (hostlong=0xc0a800e6) returned 0xe600a8c0 [0210.123] socket (af=2, type=1, protocol=6) returned 0x350 [0210.124] ioctlsocket (in: s=0x350, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0210.124] connect (s=0x350, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.230"), namelen=16) returned -1 [0210.124] WSAGetLastError () returned 10035 [0210.124] htonl (hostlong=0xc0a800e7) returned 0xe700a8c0 [0210.124] socket (af=2, type=1, protocol=6) returned 0x354 [0210.124] ioctlsocket (in: s=0x354, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0210.124] connect (s=0x354, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.231"), namelen=16) returned -1 [0210.125] WSAGetLastError () returned 10035 [0210.125] htonl (hostlong=0xc0a800e8) returned 0xe800a8c0 [0210.125] socket (af=2, type=1, protocol=6) returned 0x380 [0210.125] ioctlsocket (in: s=0x380, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0210.125] connect (s=0x380, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.232"), namelen=16) returned -1 [0210.126] WSAGetLastError () returned 10035 [0210.126] htonl (hostlong=0xc0a800e9) returned 0xe900a8c0 [0210.126] socket (af=2, type=1, protocol=6) returned 0x370 [0210.126] ioctlsocket (in: s=0x370, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0210.126] connect (s=0x370, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.233"), namelen=16) returned -1 [0210.127] WSAGetLastError () returned 10035 [0210.127] htonl (hostlong=0xc0a800ea) returned 0xea00a8c0 [0210.127] socket (af=2, type=1, protocol=6) returned 0x38c [0210.127] ioctlsocket (in: s=0x38c, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0210.127] connect (s=0x38c, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.234"), namelen=16) returned -1 [0210.128] WSAGetLastError () returned 10035 [0210.128] htonl (hostlong=0xc0a800eb) returned 0xeb00a8c0 [0210.128] socket (af=2, type=1, protocol=6) returned 0x394 [0210.128] ioctlsocket (in: s=0x394, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0210.128] connect (s=0x394, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.235"), namelen=16) returned -1 [0210.129] WSAGetLastError () returned 10035 [0210.129] htonl (hostlong=0xc0a800ec) returned 0xec00a8c0 [0210.129] socket (af=2, type=1, protocol=6) returned 0x398 [0210.129] ioctlsocket (in: s=0x398, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0210.129] connect (s=0x398, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.236"), namelen=16) returned -1 [0210.130] WSAGetLastError () returned 10035 [0210.130] htonl (hostlong=0xc0a800ed) returned 0xed00a8c0 [0210.130] socket (af=2, type=1, protocol=6) returned 0x39c [0210.130] ioctlsocket (in: s=0x39c, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0210.130] connect (s=0x39c, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.237"), namelen=16) returned -1 [0210.131] WSAGetLastError () returned 10035 [0210.131] htonl (hostlong=0xc0a800ee) returned 0xee00a8c0 [0210.131] socket (af=2, type=1, protocol=6) returned 0x3a0 [0210.131] ioctlsocket (in: s=0x3a0, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0210.131] connect (s=0x3a0, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.238"), namelen=16) returned -1 [0210.132] WSAGetLastError () returned 10035 [0210.132] htonl (hostlong=0xc0a800ef) returned 0xef00a8c0 [0210.132] socket (af=2, type=1, protocol=6) returned 0x3a4 [0210.132] ioctlsocket (in: s=0x3a4, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0210.132] connect (s=0x3a4, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.239"), namelen=16) returned -1 [0210.133] WSAGetLastError () returned 10035 [0210.133] htonl (hostlong=0xc0a800f0) returned 0xf000a8c0 [0210.133] socket (af=2, type=1, protocol=6) returned 0x3a8 [0210.133] ioctlsocket (in: s=0x3a8, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0210.133] connect (s=0x3a8, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.240"), namelen=16) returned -1 [0210.133] WSAGetLastError () returned 10035 [0210.133] htonl (hostlong=0xc0a800f1) returned 0xf100a8c0 [0210.133] socket (af=2, type=1, protocol=6) returned 0x3ac [0210.134] ioctlsocket (in: s=0x3ac, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0210.134] connect (s=0x3ac, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.241"), namelen=16) returned -1 [0210.158] WSAGetLastError () returned 10035 [0210.158] htonl (hostlong=0xc0a800f2) returned 0xf200a8c0 [0210.158] socket (af=2, type=1, protocol=6) returned 0x3b0 [0210.158] ioctlsocket (in: s=0x3b0, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0210.158] connect (s=0x3b0, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.242"), namelen=16) returned -1 [0210.159] WSAGetLastError () returned 10035 [0210.159] htonl (hostlong=0xc0a800f3) returned 0xf300a8c0 [0210.159] socket (af=2, type=1, protocol=6) returned 0x3b4 [0210.159] ioctlsocket (in: s=0x3b4, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0210.160] connect (s=0x3b4, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.243"), namelen=16) returned -1 [0210.160] WSAGetLastError () returned 10035 [0210.160] htonl (hostlong=0xc0a800f4) returned 0xf400a8c0 [0210.160] socket (af=2, type=1, protocol=6) returned 0x3b8 [0210.161] ioctlsocket (in: s=0x3b8, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0210.161] connect (s=0x3b8, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.244"), namelen=16) returned -1 [0210.161] WSAGetLastError () returned 10035 [0210.161] htonl (hostlong=0xc0a800f5) returned 0xf500a8c0 [0210.161] socket (af=2, type=1, protocol=6) returned 0x3bc [0210.162] ioctlsocket (in: s=0x3bc, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0210.162] connect (s=0x3bc, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.245"), namelen=16) returned -1 [0210.162] WSAGetLastError () returned 10035 [0210.162] htonl (hostlong=0xc0a800f6) returned 0xf600a8c0 [0210.162] socket (af=2, type=1, protocol=6) returned 0x3c0 [0210.162] ioctlsocket (in: s=0x3c0, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0210.162] connect (s=0x3c0, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.246"), namelen=16) returned -1 [0210.163] WSAGetLastError () returned 10035 [0210.163] htonl (hostlong=0xc0a800f7) returned 0xf700a8c0 [0210.163] socket (af=2, type=1, protocol=6) returned 0x3c4 [0210.163] ioctlsocket (in: s=0x3c4, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0210.163] connect (s=0x3c4, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.247"), namelen=16) returned -1 [0210.164] WSAGetLastError () returned 10035 [0210.164] htonl (hostlong=0xc0a800f8) returned 0xf800a8c0 [0210.164] socket (af=2, type=1, protocol=6) returned 0x3c8 [0210.164] ioctlsocket (in: s=0x3c8, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0210.164] connect (s=0x3c8, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.248"), namelen=16) returned -1 [0210.165] WSAGetLastError () returned 10035 [0210.165] htonl (hostlong=0xc0a800f9) returned 0xf900a8c0 [0210.165] socket (af=2, type=1, protocol=6) returned 0x3cc [0210.165] ioctlsocket (in: s=0x3cc, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0210.165] connect (s=0x3cc, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.249"), namelen=16) returned -1 [0210.166] WSAGetLastError () returned 10035 [0210.166] htonl (hostlong=0xc0a800fa) returned 0xfa00a8c0 [0210.166] socket (af=2, type=1, protocol=6) returned 0x3d0 [0210.168] ioctlsocket (in: s=0x3d0, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0210.168] connect (s=0x3d0, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.250"), namelen=16) returned -1 [0210.168] WSAGetLastError () returned 10035 [0210.169] htonl (hostlong=0xc0a800fb) returned 0xfb00a8c0 [0210.169] socket (af=2, type=1, protocol=6) returned 0x3d4 [0210.169] ioctlsocket (in: s=0x3d4, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0210.169] connect (s=0x3d4, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.251"), namelen=16) returned -1 [0210.169] WSAGetLastError () returned 10035 [0210.169] htonl (hostlong=0xc0a800fc) returned 0xfc00a8c0 [0210.170] socket (af=2, type=1, protocol=6) returned 0x3d8 [0210.170] ioctlsocket (in: s=0x3d8, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0210.170] connect (s=0x3d8, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.252"), namelen=16) returned -1 [0210.170] WSAGetLastError () returned 10035 [0210.170] htonl (hostlong=0xc0a800fd) returned 0xfd00a8c0 [0210.170] socket (af=2, type=1, protocol=6) returned 0x3dc [0210.171] ioctlsocket (in: s=0x3dc, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0210.171] connect (s=0x3dc, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.253"), namelen=16) returned -1 [0210.171] WSAGetLastError () returned 10035 [0210.171] htonl (hostlong=0xc0a800fe) returned 0xfe00a8c0 [0210.171] socket (af=2, type=1, protocol=6) returned 0x3e0 [0210.171] ioctlsocket (in: s=0x3e0, cmd=-2147195266, argp=0x261f800 | out: argp=0x261f800) returned 0 [0210.171] connect (s=0x3e0, name=0x261f7e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.254"), namelen=16) returned -1 [0210.172] WSAGetLastError () returned 10035 [0210.172] GetTickCount () returned 0x114c313 [0210.172] GetTickCount () returned 0x114c313 [0210.172] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.172] GetTickCount () returned 0x114c313 [0210.172] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.172] GetTickCount () returned 0x114c313 [0210.172] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.172] GetTickCount () returned 0x114c313 [0210.172] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.172] GetTickCount () returned 0x114c313 [0210.172] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.172] GetTickCount () returned 0x114c313 [0210.172] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.172] GetTickCount () returned 0x114c313 [0210.173] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.173] GetTickCount () returned 0x114c313 [0210.173] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.173] GetTickCount () returned 0x114c313 [0210.173] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.173] GetTickCount () returned 0x114c313 [0210.173] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.173] GetTickCount () returned 0x114c313 [0210.173] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.173] GetTickCount () returned 0x114c313 [0210.173] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.173] GetTickCount () returned 0x114c313 [0210.173] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.173] GetTickCount () returned 0x114c313 [0210.173] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.173] GetTickCount () returned 0x114c313 [0210.173] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.173] GetTickCount () returned 0x114c313 [0210.173] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.173] GetTickCount () returned 0x114c313 [0210.173] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.173] GetTickCount () returned 0x114c313 [0210.173] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.173] GetTickCount () returned 0x114c313 [0210.173] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.173] GetTickCount () returned 0x114c313 [0210.173] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.173] GetTickCount () returned 0x114c313 [0210.173] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.173] GetTickCount () returned 0x114c313 [0210.173] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.173] GetTickCount () returned 0x114c313 [0210.173] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.173] GetTickCount () returned 0x114c313 [0210.173] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.173] GetTickCount () returned 0x114c313 [0210.173] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.173] GetTickCount () returned 0x114c313 [0210.173] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.173] GetTickCount () returned 0x114c313 [0210.173] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.174] GetTickCount () returned 0x114c313 [0210.174] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.174] GetTickCount () returned 0x114c313 [0210.174] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.174] GetTickCount () returned 0x114c313 [0210.174] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.174] GetTickCount () returned 0x114c313 [0210.174] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.174] GetTickCount () returned 0x114c313 [0210.174] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.174] GetTickCount () returned 0x114c313 [0210.174] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.174] GetTickCount () returned 0x114c313 [0210.174] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.174] GetTickCount () returned 0x114c313 [0210.174] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.174] GetTickCount () returned 0x114c313 [0210.174] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.174] GetTickCount () returned 0x114c313 [0210.174] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.174] GetTickCount () returned 0x114c313 [0210.174] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.174] GetTickCount () returned 0x114c313 [0210.174] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.174] GetTickCount () returned 0x114c313 [0210.174] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.174] GetTickCount () returned 0x114c313 [0210.174] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.174] GetTickCount () returned 0x114c313 [0210.174] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.174] GetTickCount () returned 0x114c313 [0210.174] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.174] GetTickCount () returned 0x114c313 [0210.174] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.174] GetTickCount () returned 0x114c313 [0210.174] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.174] GetTickCount () returned 0x114c313 [0210.174] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.174] GetTickCount () returned 0x114c313 [0210.174] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.174] GetTickCount () returned 0x114c313 [0210.175] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.175] GetTickCount () returned 0x114c313 [0210.175] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.175] GetTickCount () returned 0x114c313 [0210.175] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.175] GetTickCount () returned 0x114c313 [0210.175] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.175] GetTickCount () returned 0x114c313 [0210.175] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.175] GetTickCount () returned 0x114c313 [0210.175] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.175] GetTickCount () returned 0x114c313 [0210.175] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.175] GetTickCount () returned 0x114c313 [0210.175] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.175] GetTickCount () returned 0x114c313 [0210.175] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.175] GetTickCount () returned 0x114c313 [0210.175] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.175] GetTickCount () returned 0x114c313 [0210.175] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.175] GetTickCount () returned 0x114c313 [0210.175] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.175] GetTickCount () returned 0x114c313 [0210.175] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.175] GetTickCount () returned 0x114c313 [0210.175] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.175] GetTickCount () returned 0x114c313 [0210.175] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.175] GetTickCount () returned 0x114c313 [0210.175] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.175] GetTickCount () returned 0x114c313 [0210.175] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.175] GetTickCount () returned 0x114c313 [0210.175] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.175] GetTickCount () returned 0x114c313 [0210.175] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.175] GetTickCount () returned 0x114c313 [0210.175] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.175] GetTickCount () returned 0x114c313 [0210.175] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.175] GetTickCount () returned 0x114c313 [0210.176] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.176] GetTickCount () returned 0x114c313 [0210.176] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.176] GetTickCount () returned 0x114c313 [0210.176] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.176] GetTickCount () returned 0x114c313 [0210.176] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.176] GetTickCount () returned 0x114c313 [0210.176] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.176] GetTickCount () returned 0x114c313 [0210.176] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.176] GetTickCount () returned 0x114c313 [0210.176] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.176] GetTickCount () returned 0x114c313 [0210.176] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.176] GetTickCount () returned 0x114c313 [0210.176] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.176] GetTickCount () returned 0x114c313 [0210.176] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.176] GetTickCount () returned 0x114c313 [0210.176] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.176] GetTickCount () returned 0x114c313 [0210.176] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.176] GetTickCount () returned 0x114c313 [0210.176] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.176] GetTickCount () returned 0x114c313 [0210.176] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.176] GetTickCount () returned 0x114c313 [0210.176] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.176] GetTickCount () returned 0x114c313 [0210.176] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.176] GetTickCount () returned 0x114c313 [0210.176] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.176] GetTickCount () returned 0x114c313 [0210.176] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.176] GetTickCount () returned 0x114c313 [0210.176] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.176] GetTickCount () returned 0x114c313 [0210.176] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.176] GetTickCount () returned 0x114c313 [0210.176] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.176] GetTickCount () returned 0x114c313 [0210.177] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.177] GetTickCount () returned 0x114c313 [0210.177] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.177] GetTickCount () returned 0x114c313 [0210.177] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.177] GetTickCount () returned 0x114c313 [0210.177] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.177] GetTickCount () returned 0x114c313 [0210.177] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.177] GetTickCount () returned 0x114c313 [0210.177] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.177] GetTickCount () returned 0x114c313 [0210.177] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.177] GetTickCount () returned 0x114c313 [0210.177] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.177] GetTickCount () returned 0x114c313 [0210.177] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.177] GetTickCount () returned 0x114c313 [0210.177] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.177] GetTickCount () returned 0x114c313 [0210.177] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.177] GetTickCount () returned 0x114c313 [0210.177] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.177] GetTickCount () returned 0x114c313 [0210.177] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.177] GetTickCount () returned 0x114c313 [0210.177] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.177] GetTickCount () returned 0x114c313 [0210.177] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.177] GetTickCount () returned 0x114c313 [0210.177] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.177] GetTickCount () returned 0x114c313 [0210.177] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.177] GetTickCount () returned 0x114c313 [0210.177] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.177] GetTickCount () returned 0x114c313 [0210.177] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.177] GetTickCount () returned 0x114c313 [0210.177] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.177] GetTickCount () returned 0x114c313 [0210.177] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.178] GetTickCount () returned 0x114c313 [0210.178] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.178] GetTickCount () returned 0x114c313 [0210.178] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.178] GetTickCount () returned 0x114c313 [0210.178] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.178] GetTickCount () returned 0x114c313 [0210.178] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.178] GetTickCount () returned 0x114c313 [0210.178] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.178] GetTickCount () returned 0x114c313 [0210.178] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.178] GetTickCount () returned 0x114c313 [0210.178] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.178] GetTickCount () returned 0x114c313 [0210.178] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.178] GetTickCount () returned 0x114c313 [0210.178] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.178] GetTickCount () returned 0x114c313 [0210.178] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.178] GetTickCount () returned 0x114c313 [0210.178] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.178] GetTickCount () returned 0x114c313 [0210.178] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.178] GetTickCount () returned 0x114c313 [0210.178] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.178] GetTickCount () returned 0x114c313 [0210.178] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.178] GetTickCount () returned 0x114c313 [0210.178] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.178] GetTickCount () returned 0x114c313 [0210.178] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.178] GetTickCount () returned 0x114c313 [0210.178] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.178] GetTickCount () returned 0x114c313 [0210.178] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.178] GetTickCount () returned 0x114c313 [0210.178] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.178] GetTickCount () returned 0x114c313 [0210.178] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.178] GetTickCount () returned 0x114c313 [0210.178] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.178] GetTickCount () returned 0x114c313 [0210.179] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.179] GetTickCount () returned 0x114c313 [0210.179] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.179] GetTickCount () returned 0x114c313 [0210.179] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.179] GetTickCount () returned 0x114c313 [0210.179] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.179] GetTickCount () returned 0x114c313 [0210.179] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.179] GetTickCount () returned 0x114c313 [0210.179] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.179] GetTickCount () returned 0x114c313 [0210.179] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.179] GetTickCount () returned 0x114c313 [0210.179] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.179] GetTickCount () returned 0x114c313 [0210.179] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.179] GetTickCount () returned 0x114c313 [0210.179] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.179] GetTickCount () returned 0x114c313 [0210.179] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.179] GetTickCount () returned 0x114c313 [0210.179] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.179] GetTickCount () returned 0x114c313 [0210.179] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.179] GetTickCount () returned 0x114c313 [0210.179] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.179] GetTickCount () returned 0x114c313 [0210.179] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.179] GetTickCount () returned 0x114c313 [0210.179] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.179] GetTickCount () returned 0x114c313 [0210.179] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.179] GetTickCount () returned 0x114c313 [0210.179] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.179] GetTickCount () returned 0x114c313 [0210.179] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.179] GetTickCount () returned 0x114c313 [0210.179] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.179] GetTickCount () returned 0x114c313 [0210.179] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.179] GetTickCount () returned 0x114c313 [0210.180] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.180] GetTickCount () returned 0x114c313 [0210.180] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.180] GetTickCount () returned 0x114c313 [0210.180] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.180] GetTickCount () returned 0x114c313 [0210.180] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.180] GetTickCount () returned 0x114c313 [0210.180] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.180] GetTickCount () returned 0x114c313 [0210.180] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.180] GetTickCount () returned 0x114c313 [0210.180] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.180] GetTickCount () returned 0x114c313 [0210.180] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.180] GetTickCount () returned 0x114c313 [0210.180] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.180] GetTickCount () returned 0x114c313 [0210.180] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.180] GetTickCount () returned 0x114c313 [0210.181] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.181] GetTickCount () returned 0x114c313 [0210.181] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.181] GetTickCount () returned 0x114c313 [0210.181] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.181] GetTickCount () returned 0x114c313 [0210.181] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.181] GetTickCount () returned 0x114c313 [0210.181] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.181] GetTickCount () returned 0x114c313 [0210.181] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.181] GetTickCount () returned 0x114c313 [0210.181] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.183] GetTickCount () returned 0x114c322 [0210.183] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.183] GetTickCount () returned 0x114c322 [0210.183] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.183] GetTickCount () returned 0x114c322 [0210.183] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.183] GetTickCount () returned 0x114c322 [0210.183] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.183] GetTickCount () returned 0x114c322 [0210.183] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.183] GetTickCount () returned 0x114c322 [0210.183] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.183] GetTickCount () returned 0x114c322 [0210.183] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.183] GetTickCount () returned 0x114c322 [0210.183] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.183] GetTickCount () returned 0x114c322 [0210.183] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.183] GetTickCount () returned 0x114c322 [0210.183] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.183] GetTickCount () returned 0x114c322 [0210.183] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.183] GetTickCount () returned 0x114c322 [0210.183] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.183] GetTickCount () returned 0x114c322 [0210.183] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.184] GetTickCount () returned 0x114c322 [0210.184] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.184] GetTickCount () returned 0x114c322 [0210.184] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.184] GetTickCount () returned 0x114c322 [0210.184] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.184] GetTickCount () returned 0x114c322 [0210.184] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.184] GetTickCount () returned 0x114c322 [0210.184] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.184] GetTickCount () returned 0x114c322 [0210.184] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.184] GetTickCount () returned 0x114c322 [0210.184] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.184] GetTickCount () returned 0x114c322 [0210.184] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.184] GetTickCount () returned 0x114c322 [0210.184] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.184] GetTickCount () returned 0x114c322 [0210.184] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.184] GetTickCount () returned 0x114c322 [0210.184] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.184] GetTickCount () returned 0x114c322 [0210.184] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.184] GetTickCount () returned 0x114c322 [0210.184] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.184] GetTickCount () returned 0x114c322 [0210.184] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.184] GetTickCount () returned 0x114c322 [0210.184] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.184] GetTickCount () returned 0x114c322 [0210.184] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.184] GetTickCount () returned 0x114c322 [0210.184] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.184] GetTickCount () returned 0x114c322 [0210.184] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.184] GetTickCount () returned 0x114c322 [0210.184] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.184] GetTickCount () returned 0x114c322 [0210.184] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.184] GetTickCount () returned 0x114c322 [0210.184] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.185] GetTickCount () returned 0x114c322 [0210.185] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.185] GetTickCount () returned 0x114c322 [0210.185] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.185] GetTickCount () returned 0x114c322 [0210.185] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.185] GetTickCount () returned 0x114c322 [0210.185] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.185] GetTickCount () returned 0x114c322 [0210.185] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.185] GetTickCount () returned 0x114c322 [0210.185] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.185] GetTickCount () returned 0x114c322 [0210.185] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.185] GetTickCount () returned 0x114c322 [0210.185] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.185] GetTickCount () returned 0x114c322 [0210.185] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.185] GetTickCount () returned 0x114c322 [0210.185] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.185] GetTickCount () returned 0x114c322 [0210.185] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.185] GetTickCount () returned 0x114c322 [0210.185] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.185] GetTickCount () returned 0x114c322 [0210.185] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.185] GetTickCount () returned 0x114c322 [0210.185] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.185] GetTickCount () returned 0x114c322 [0210.185] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.185] GetTickCount () returned 0x114c322 [0210.185] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.185] GetTickCount () returned 0x114c322 [0210.185] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.185] GetTickCount () returned 0x114c322 [0210.185] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.185] GetTickCount () returned 0x114c322 [0210.185] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.185] GetTickCount () returned 0x114c322 [0210.185] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.185] GetTickCount () returned 0x114c322 [0210.186] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.186] GetTickCount () returned 0x114c322 [0210.186] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.186] GetTickCount () returned 0x114c322 [0210.186] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.186] GetTickCount () returned 0x114c322 [0210.186] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.186] GetTickCount () returned 0x114c322 [0210.186] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.186] GetTickCount () returned 0x114c322 [0210.186] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.186] GetTickCount () returned 0x114c322 [0210.186] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.186] GetTickCount () returned 0x114c322 [0210.186] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.186] GetTickCount () returned 0x114c322 [0210.186] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.186] GetTickCount () returned 0x114c322 [0210.186] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.186] GetTickCount () returned 0x114c322 [0210.186] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.186] GetTickCount () returned 0x114c322 [0210.186] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.186] GetTickCount () returned 0x114c322 [0210.186] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.186] GetTickCount () returned 0x114c322 [0210.186] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.186] GetTickCount () returned 0x114c322 [0210.186] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.186] GetTickCount () returned 0x114c322 [0210.186] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.186] GetTickCount () returned 0x114c322 [0210.186] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.186] GetTickCount () returned 0x114c322 [0210.186] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.186] GetTickCount () returned 0x114c322 [0210.186] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.186] GetTickCount () returned 0x114c322 [0210.186] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.186] GetTickCount () returned 0x114c322 [0210.186] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.186] GetTickCount () returned 0x114c322 [0210.186] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.187] GetTickCount () returned 0x114c322 [0210.187] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.187] GetTickCount () returned 0x114c322 [0210.187] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.187] GetTickCount () returned 0x114c322 [0210.187] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.187] GetTickCount () returned 0x114c322 [0210.187] select (in: nfds=0, readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598, timeout=0x261f7a8 | out: readfds=0x261f6a0, writefds=0x0, exceptfds=0x261f598) returned -1 [0210.187] GetTickCount () returned 0x114c322 [0210.187] getsockopt (in: s=0x3e0, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0210.187] recv (in: s=0x3e0, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0210.187] WSAGetLastError () returned 10057 [0210.187] closesocket (s=0x3e0) returned 0 [0210.202] getsockopt (in: s=0x3dc, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0210.202] recv (in: s=0x3dc, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0210.202] WSAGetLastError () returned 10057 [0210.202] closesocket (s=0x3dc) returned 0 [0210.203] getsockopt (in: s=0x3d8, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0210.203] recv (in: s=0x3d8, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0210.203] WSAGetLastError () returned 10057 [0210.203] closesocket (s=0x3d8) returned 0 [0210.203] getsockopt (in: s=0x3d4, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0210.203] recv (in: s=0x3d4, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0210.203] WSAGetLastError () returned 10057 [0210.203] closesocket (s=0x3d4) returned 0 [0210.203] getsockopt (in: s=0x3d0, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0210.203] recv (in: s=0x3d0, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0210.203] WSAGetLastError () returned 10057 [0210.203] closesocket (s=0x3d0) returned 0 [0210.204] getsockopt (in: s=0x3cc, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0210.204] recv (in: s=0x3cc, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0210.204] WSAGetLastError () returned 10057 [0210.204] closesocket (s=0x3cc) returned 0 [0210.204] getsockopt (in: s=0x3c8, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0210.204] recv (in: s=0x3c8, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0210.204] WSAGetLastError () returned 10057 [0210.204] closesocket (s=0x3c8) returned 0 [0210.204] getsockopt (in: s=0x3c4, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0210.204] recv (in: s=0x3c4, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0210.205] WSAGetLastError () returned 10057 [0210.205] closesocket (s=0x3c4) returned 0 [0210.205] getsockopt (in: s=0x3c0, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0210.205] recv (in: s=0x3c0, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0210.205] WSAGetLastError () returned 10057 [0210.205] closesocket (s=0x3c0) returned 0 [0210.205] getsockopt (in: s=0x3bc, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0210.205] recv (in: s=0x3bc, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0210.205] WSAGetLastError () returned 10057 [0210.205] closesocket (s=0x3bc) returned 0 [0210.208] getsockopt (in: s=0x3b8, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0210.208] recv (in: s=0x3b8, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0210.208] WSAGetLastError () returned 10057 [0210.208] closesocket (s=0x3b8) returned 0 [0210.209] getsockopt (in: s=0x3b4, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0210.209] recv (in: s=0x3b4, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0210.209] WSAGetLastError () returned 10057 [0210.209] closesocket (s=0x3b4) returned 0 [0210.209] getsockopt (in: s=0x3b0, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0210.209] recv (in: s=0x3b0, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0210.209] WSAGetLastError () returned 10057 [0210.209] closesocket (s=0x3b0) returned 0 [0210.209] getsockopt (in: s=0x3ac, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0210.209] recv (in: s=0x3ac, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0210.209] WSAGetLastError () returned 10057 [0210.209] closesocket (s=0x3ac) returned 0 [0210.210] getsockopt (in: s=0x3a8, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0210.210] recv (in: s=0x3a8, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0210.210] WSAGetLastError () returned 10057 [0210.210] closesocket (s=0x3a8) returned 0 [0210.210] getsockopt (in: s=0x3a4, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0210.210] recv (in: s=0x3a4, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0210.210] WSAGetLastError () returned 10057 [0210.210] closesocket (s=0x3a4) returned 0 [0210.211] getsockopt (in: s=0x3a0, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0210.211] recv (in: s=0x3a0, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0210.211] WSAGetLastError () returned 10057 [0210.211] closesocket (s=0x3a0) returned 0 [0210.211] getsockopt (in: s=0x39c, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0210.211] recv (in: s=0x39c, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0210.211] WSAGetLastError () returned 10057 [0210.211] closesocket (s=0x39c) returned 0 [0210.211] getsockopt (in: s=0x398, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0210.211] recv (in: s=0x398, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0210.211] WSAGetLastError () returned 10057 [0210.211] closesocket (s=0x398) returned 0 [0210.212] getsockopt (in: s=0x394, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0210.212] recv (in: s=0x394, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0210.212] WSAGetLastError () returned 10057 [0210.212] closesocket (s=0x394) returned 0 [0210.228] getsockopt (in: s=0x38c, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0210.228] recv (in: s=0x38c, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0210.228] WSAGetLastError () returned 10057 [0210.228] closesocket (s=0x38c) returned 0 [0210.228] getsockopt (in: s=0x370, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0210.228] recv (in: s=0x370, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0210.228] WSAGetLastError () returned 10057 [0210.228] closesocket (s=0x370) returned 0 [0210.229] getsockopt (in: s=0x380, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0210.229] recv (in: s=0x380, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0210.229] WSAGetLastError () returned 10057 [0210.229] closesocket (s=0x380) returned 0 [0210.229] getsockopt (in: s=0x354, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0210.229] recv (in: s=0x354, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0210.229] WSAGetLastError () returned 10057 [0210.229] closesocket (s=0x354) returned 0 [0210.229] getsockopt (in: s=0x350, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0210.229] recv (in: s=0x350, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0210.229] WSAGetLastError () returned 10057 [0210.229] closesocket (s=0x350) returned 0 [0210.230] getsockopt (in: s=0x34c, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0210.230] recv (in: s=0x34c, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0210.230] WSAGetLastError () returned 10057 [0210.230] closesocket (s=0x34c) returned 0 [0210.230] getsockopt (in: s=0x2f8, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0210.230] recv (in: s=0x2f8, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0210.230] WSAGetLastError () returned 10057 [0210.230] closesocket (s=0x2f8) returned 0 [0210.230] getsockopt (in: s=0x37c, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0210.230] recv (in: s=0x37c, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0210.230] WSAGetLastError () returned 10057 [0210.231] closesocket (s=0x37c) returned 0 [0210.231] getsockopt (in: s=0x390, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0210.231] recv (in: s=0x390, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0210.231] WSAGetLastError () returned 10057 [0210.231] closesocket (s=0x390) returned 0 [0210.231] getsockopt (in: s=0x364, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0210.231] recv (in: s=0x364, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0210.231] WSAGetLastError () returned 10057 [0210.231] closesocket (s=0x364) returned 0 [0210.231] getsockopt (in: s=0x374, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0210.231] recv (in: s=0x374, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0210.232] WSAGetLastError () returned 10057 [0210.232] closesocket (s=0x374) returned 0 [0210.232] getsockopt (in: s=0x384, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0210.232] recv (in: s=0x384, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0210.232] WSAGetLastError () returned 10057 [0210.232] closesocket (s=0x384) returned 0 [0210.232] getsockopt (in: s=0x344, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0210.232] recv (in: s=0x344, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0210.232] WSAGetLastError () returned 10057 [0210.232] closesocket (s=0x344) returned 0 [0210.232] getsockopt (in: s=0x36c, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0210.232] recv (in: s=0x36c, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0210.233] WSAGetLastError () returned 10057 [0210.233] closesocket (s=0x36c) returned 0 [0210.233] getsockopt (in: s=0x368, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0210.233] recv (in: s=0x368, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0210.233] WSAGetLastError () returned 10057 [0210.233] closesocket (s=0x368) returned 0 [0210.233] getsockopt (in: s=0x360, level=65535, optname=4103, optval=0x261f810, optlen=0x261f7fc | out: optval="", optlen=0x261f7fc) returned 0 [0210.233] recv (in: s=0x360, buf=0x261f81f, len=1, flags=2 | out: buf=0x261f81f) returned -1 [0210.233] WSAGetLastError () returned 10057 [0210.233] closesocket (s=0x360) returned 0 [0210.234] GetProcessHeap () returned 0x8a0000 [0210.234] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8d2568 | out: hHeap=0x8a0000) returned 1 [0210.234] GetProcessHeap () returned 0x8a0000 [0210.234] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8d3d80 | out: hHeap=0x8a0000) returned 1 [0210.234] htonl (hostlong=0x100007f) returned 0x7f000001 [0210.234] GetProcessHeap () returned 0x8a0000 [0210.234] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36eb0d8 | out: hHeap=0x8a0000) returned 1 [0210.234] WaitForSingleObject (hHandle=0x254, dwMilliseconds=0xffffffff) returned 0x0 [0210.234] Sleep (dwMilliseconds=0x2710) [0220.354] GetProcessHeap () returned 0x8a0000 [0220.354] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x4000) returned 0x3ac0068 [0220.354] GetProcessHeap () returned 0x8a0000 [0220.355] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ad4090 [0220.355] WNetOpenEnumW (in: dwScope=0x1, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x261f86c | out: lphEnum=0x261f86c*=0x8c9918) returned 0x0 [0220.432] WNetEnumResourceW (in: hEnum=0x8c9918, lpcCount=0x261f860, lpBuffer=0x3ac0068, lpBufferSize=0x261f874 | out: lpcCount=0x261f860, lpBuffer=0x3ac0068, lpBufferSize=0x261f874) returned 0x103 [0220.433] WNetCloseEnum (hEnum=0x8c9918) returned 0x0 [0220.433] GetProcessHeap () returned 0x8a0000 [0220.433] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0220.433] GetProcessHeap () returned 0x8a0000 [0220.433] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ad4090 | out: hHeap=0x8a0000) returned 1 [0220.434] GetProcessHeap () returned 0x8a0000 [0220.434] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x4000) returned 0x3ac0068 [0220.434] GetProcessHeap () returned 0x8a0000 [0220.434] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ad4090 [0220.435] WNetOpenEnumW (in: dwScope=0x4, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x261f854 | out: lphEnum=0x261f854*=0x8b8578) returned 0x0 [0220.436] WNetEnumResourceW (in: hEnum=0x8b8578, lpcCount=0x261f848, lpBuffer=0x3ac0068, lpBufferSize=0x261f85c | out: lpcCount=0x261f848, lpBuffer=0x3ac0068, lpBufferSize=0x261f85c) returned 0x103 [0220.436] WNetCloseEnum (hEnum=0x8b8578) returned 0x0 [0220.436] GetProcessHeap () returned 0x8a0000 [0220.436] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0220.436] GetProcessHeap () returned 0x8a0000 [0220.436] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ad4090 | out: hHeap=0x8a0000) returned 1 [0220.437] GetProcessHeap () returned 0x8a0000 [0220.437] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x4000) returned 0x3ac0068 [0220.437] GetProcessHeap () returned 0x8a0000 [0220.438] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ad4090 [0220.442] WNetOpenEnumW (in: dwScope=0x5, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x261f83c | out: lphEnum=0x261f83c*=0x8c98c0) returned 0x0 [0220.650] WNetEnumResourceW (in: hEnum=0x8c98c0, lpcCount=0x261f830, lpBuffer=0x3ac0068, lpBufferSize=0x261f844 | out: lpcCount=0x261f830, lpBuffer=0x3ac0068, lpBufferSize=0x261f844) returned 0x0 [0220.651] GetProcessHeap () returned 0x8a0000 [0220.651] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x4000) returned 0x3ac4070 [0220.651] GetProcessHeap () returned 0x8a0000 [0220.651] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ae4098 [0220.651] WNetOpenEnumW (in: dwScope=0x5, dwType=0x0, dwUsage=0x0, lpNetResource=0x3ac0088, lphEnum=0x261f7f4 | out: lphEnum=0x261f7f4*=0x0) returned 0x57 [0220.651] GetProcessHeap () returned 0x8a0000 [0220.651] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac4070 | out: hHeap=0x8a0000) returned 1 [0220.651] GetProcessHeap () returned 0x8a0000 [0220.651] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ae4098 | out: hHeap=0x8a0000) returned 1 [0220.652] GetProcessHeap () returned 0x8a0000 [0220.652] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x4000) returned 0x3ac4070 [0220.652] GetProcessHeap () returned 0x8a0000 [0220.652] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ae4098 [0220.652] WNetOpenEnumW (in: dwScope=0x5, dwType=0x0, dwUsage=0x0, lpNetResource=0x3ac0068, lphEnum=0x261f7f4 | out: lphEnum=0x261f7f4*=0x8c9b80) returned 0x0 [0221.248] WNetEnumResourceW (in: hEnum=0x8c9b80, lpcCount=0x261f7e8, lpBuffer=0x3ac4070, lpBufferSize=0x261f7fc | out: lpcCount=0x261f7e8, lpBuffer=0x3ac4070, lpBufferSize=0x261f7fc) returned 0x0 [0221.248] WNetEnumResourceW (in: hEnum=0x8c9b80, lpcCount=0x261f7e8, lpBuffer=0x3ac4070, lpBufferSize=0x261f7fc | out: lpcCount=0x261f7e8, lpBuffer=0x3ac4070, lpBufferSize=0x261f7fc) returned 0x103 [0221.248] WNetCloseEnum (hEnum=0x8c9b80) returned 0x0 [0221.248] GetProcessHeap () returned 0x8a0000 [0221.248] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac4070 | out: hHeap=0x8a0000) returned 1 [0221.248] GetProcessHeap () returned 0x8a0000 [0221.248] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ae4098 | out: hHeap=0x8a0000) returned 1 [0221.249] WNetEnumResourceW (in: hEnum=0x8c98c0, lpcCount=0x261f830, lpBuffer=0x3ac0068, lpBufferSize=0x261f844 | out: lpcCount=0x261f830, lpBuffer=0x3ac0068, lpBufferSize=0x261f844) returned 0x103 [0221.250] WNetCloseEnum (hEnum=0x8c98c0) returned 0x0 [0221.250] GetProcessHeap () returned 0x8a0000 [0221.250] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0221.250] GetProcessHeap () returned 0x8a0000 [0221.250] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ad4090 | out: hHeap=0x8a0000) returned 1 [0221.251] GetProcessHeap () returned 0x8a0000 [0221.251] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x4000) returned 0x3ac0068 [0221.251] GetProcessHeap () returned 0x8a0000 [0221.251] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ad4090 [0221.252] WNetOpenEnumW (in: dwScope=0x3, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x261f86c | out: lphEnum=0x261f86c*=0x8b82d8) returned 0x0 [0221.252] WNetEnumResourceW (in: hEnum=0x8b82d8, lpcCount=0x261f860, lpBuffer=0x3ac0068, lpBufferSize=0x261f874 | out: lpcCount=0x261f860, lpBuffer=0x3ac0068, lpBufferSize=0x261f874) returned 0x103 [0221.253] WNetCloseEnum (hEnum=0x8b82d8) returned 0x0 [0221.253] GetProcessHeap () returned 0x8a0000 [0221.253] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0221.253] GetProcessHeap () returned 0x8a0000 [0221.253] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ad4090 | out: hHeap=0x8a0000) returned 1 [0221.253] GetProcessHeap () returned 0x8a0000 [0221.253] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x4000) returned 0x3ac0068 [0221.254] GetProcessHeap () returned 0x8a0000 [0221.254] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ad4090 [0221.254] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x261f854 | out: lphEnum=0x261f854*=0x993980) returned 0x0 [0221.254] WNetEnumResourceW (in: hEnum=0x993980, lpcCount=0x261f848, lpBuffer=0x3ac0068, lpBufferSize=0x261f85c | out: lpcCount=0x261f848, lpBuffer=0x3ac0068, lpBufferSize=0x261f85c) returned 0x0 [0221.255] GetProcessHeap () returned 0x8a0000 [0221.255] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x4000) returned 0x3ac4070 [0221.255] GetProcessHeap () returned 0x8a0000 [0221.255] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ae4098 [0221.255] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x3ac00a8, lphEnum=0x261f80c | out: lphEnum=0x261f80c*=0x0) returned 0x4c6 [0221.255] GetProcessHeap () returned 0x8a0000 [0221.255] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac4070 | out: hHeap=0x8a0000) returned 1 [0221.255] GetProcessHeap () returned 0x8a0000 [0221.255] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ae4098 | out: hHeap=0x8a0000) returned 1 [0221.256] GetProcessHeap () returned 0x8a0000 [0221.256] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x4000) returned 0x3ac4070 [0221.256] GetProcessHeap () returned 0x8a0000 [0221.256] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ae4098 [0221.256] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x3ac0088, lphEnum=0x261f80c | out: lphEnum=0x261f80c*=0x8b83f8) returned 0x0 [0222.229] WNetEnumResourceW (in: hEnum=0x8b83f8, lpcCount=0x261f800, lpBuffer=0x3ac4070, lpBufferSize=0x261f814 | out: lpcCount=0x261f800, lpBuffer=0x3ac4070, lpBufferSize=0x261f814) returned 0x0 [0222.229] GetProcessHeap () returned 0x8a0000 [0222.230] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x4000) returned 0x3ac8078 [0222.230] GetProcessHeap () returned 0x8a0000 [0222.230] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x9712d8 [0222.230] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x3ac4070, lphEnum=0x261f7c4 | out: lphEnum=0x261f7c4*=0x8b85b8) returned 0x0 [0222.236] WNetEnumResourceW (in: hEnum=0x8b85b8, lpcCount=0x261f7b8, lpBuffer=0x3ac8078, lpBufferSize=0x261f7cc | out: lpcCount=0x261f7b8, lpBuffer=0x3ac8078, lpBufferSize=0x261f7cc) returned 0x0 [0222.236] GetProcessHeap () returned 0x8a0000 [0222.236] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x4000) returned 0x9812e0 [0222.236] GetProcessHeap () returned 0x8a0000 [0222.236] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0222.237] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x3ac8078, lphEnum=0x261f77c | out: lphEnum=0x261f77c*=0x8b85f8) returned 0x0 [0222.278] WNetEnumResourceW (in: hEnum=0x8b85f8, lpcCount=0x261f770, lpBuffer=0x9812e0, lpBufferSize=0x261f784 | out: lpcCount=0x261f770, lpBuffer=0x9812e0, lpBufferSize=0x261f784) returned 0x103 [0222.278] WNetCloseEnum (hEnum=0x8b85f8) returned 0x0 [0222.278] GetProcessHeap () returned 0x8a0000 [0222.278] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x9812e0 | out: hHeap=0x8a0000) returned 1 [0222.278] GetProcessHeap () returned 0x8a0000 [0222.278] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0222.279] WNetEnumResourceW (in: hEnum=0x8b85b8, lpcCount=0x261f7b8, lpBuffer=0x3ac8078, lpBufferSize=0x261f7cc | out: lpcCount=0x261f7b8, lpBuffer=0x3ac8078, lpBufferSize=0x261f7cc) returned 0x103 [0222.279] WNetCloseEnum (hEnum=0x8b85b8) returned 0x0 [0222.279] GetProcessHeap () returned 0x8a0000 [0222.279] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac8078 | out: hHeap=0x8a0000) returned 1 [0222.279] GetProcessHeap () returned 0x8a0000 [0222.279] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x9712d8 | out: hHeap=0x8a0000) returned 1 [0222.280] WNetEnumResourceW (in: hEnum=0x8b83f8, lpcCount=0x261f800, lpBuffer=0x3ac4070, lpBufferSize=0x261f814 | out: lpcCount=0x261f800, lpBuffer=0x3ac4070, lpBufferSize=0x261f814) returned 0x103 [0222.280] WNetCloseEnum (hEnum=0x8b83f8) returned 0x0 [0222.280] GetProcessHeap () returned 0x8a0000 [0222.280] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac4070 | out: hHeap=0x8a0000) returned 1 [0222.280] GetProcessHeap () returned 0x8a0000 [0222.280] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ae4098 | out: hHeap=0x8a0000) returned 1 [0222.281] GetProcessHeap () returned 0x8a0000 [0222.281] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x4000) returned 0x3ac4070 [0222.281] GetProcessHeap () returned 0x8a0000 [0222.281] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ae4098 [0222.282] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x3ac0068, lphEnum=0x261f80c | out: lphEnum=0x261f80c*=0x8b83f8) returned 0x0 [0222.282] WNetEnumResourceW (in: hEnum=0x8b83f8, lpcCount=0x261f800, lpBuffer=0x3ac4070, lpBufferSize=0x261f814 | out: lpcCount=0x261f800, lpBuffer=0x3ac4070, lpBufferSize=0x261f814) returned 0x103 [0222.282] WNetCloseEnum (hEnum=0x8b83f8) returned 0x0 [0222.282] GetProcessHeap () returned 0x8a0000 [0222.282] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac4070 | out: hHeap=0x8a0000) returned 1 [0222.283] GetProcessHeap () returned 0x8a0000 [0222.283] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ae4098 | out: hHeap=0x8a0000) returned 1 [0222.283] WNetEnumResourceW (in: hEnum=0x993980, lpcCount=0x261f848, lpBuffer=0x3ac0068, lpBufferSize=0x261f85c | out: lpcCount=0x261f848, lpBuffer=0x3ac0068, lpBufferSize=0x261f85c) returned 0x103 [0222.283] WNetCloseEnum (hEnum=0x993980) returned 0x0 [0222.283] GetProcessHeap () returned 0x8a0000 [0222.283] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0222.284] GetProcessHeap () returned 0x8a0000 [0222.284] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ad4090 | out: hHeap=0x8a0000) returned 1 [0222.284] GetProcessHeap () returned 0x8a0000 [0222.285] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x3a98) returned 0x36eb0d8 [0222.285] GetIpAddrTable (in: pIpAddrTable=0x36eb0d8, pdwSize=0x261f84c, bOrder=0 | out: pIpAddrTable=0x36eb0d8, pdwSize=0x261f84c) returned 0x0 [0222.290] htonl (hostlong=0xda00a8c0) returned 0xc0a800da [0222.290] htonl (hostlong=0xda00a8c0) returned 0xc0a800da [0222.290] htonl (hostlong=0xffffff) returned 0xffffff00 [0222.290] htons (hostshort=0x1bd) returned 0xbd01 [0222.290] GetProcessHeap () returned 0x8a0000 [0222.290] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x800) returned 0x8d6db0 [0222.290] GetProcessHeap () returned 0x8a0000 [0222.290] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x800) returned 0x8d4588 [0222.290] htonl (hostlong=0xc0a80000) returned 0xa8c0 [0222.290] socket (af=2, type=1, protocol=6) returned 0x368 [0222.291] ioctlsocket (in: s=0x368, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.291] connect (s=0x368, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.0"), namelen=16) returned -1 [0222.293] WSAGetLastError () returned 10035 [0222.293] htonl (hostlong=0xc0a80001) returned 0x100a8c0 [0222.293] socket (af=2, type=1, protocol=6) returned 0x360 [0222.293] ioctlsocket (in: s=0x360, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.293] connect (s=0x360, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.1"), namelen=16) returned -1 [0222.294] WSAGetLastError () returned 10035 [0222.294] htonl (hostlong=0xc0a80002) returned 0x200a8c0 [0222.294] socket (af=2, type=1, protocol=6) returned 0x36c [0222.294] ioctlsocket (in: s=0x36c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.294] connect (s=0x36c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.2"), namelen=16) returned -1 [0222.359] WSAGetLastError () returned 10035 [0222.359] htonl (hostlong=0xc0a80003) returned 0x300a8c0 [0222.359] socket (af=2, type=1, protocol=6) returned 0x344 [0222.359] ioctlsocket (in: s=0x344, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.359] connect (s=0x344, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.3"), namelen=16) returned -1 [0222.361] WSAGetLastError () returned 10035 [0222.361] htonl (hostlong=0xc0a80004) returned 0x400a8c0 [0222.361] socket (af=2, type=1, protocol=6) returned 0x384 [0222.361] ioctlsocket (in: s=0x384, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.361] connect (s=0x384, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.4"), namelen=16) returned -1 [0222.362] WSAGetLastError () returned 10035 [0222.362] htonl (hostlong=0xc0a80005) returned 0x500a8c0 [0222.362] socket (af=2, type=1, protocol=6) returned 0x374 [0222.362] ioctlsocket (in: s=0x374, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.362] connect (s=0x374, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.5"), namelen=16) returned -1 [0222.362] WSAGetLastError () returned 10035 [0222.363] htonl (hostlong=0xc0a80006) returned 0x600a8c0 [0222.363] socket (af=2, type=1, protocol=6) returned 0x364 [0222.363] ioctlsocket (in: s=0x364, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.363] connect (s=0x364, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.6"), namelen=16) returned -1 [0222.363] WSAGetLastError () returned 10035 [0222.363] htonl (hostlong=0xc0a80007) returned 0x700a8c0 [0222.364] socket (af=2, type=1, protocol=6) returned 0x390 [0222.364] ioctlsocket (in: s=0x390, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.364] connect (s=0x390, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.7"), namelen=16) returned -1 [0222.364] WSAGetLastError () returned 10035 [0222.364] htonl (hostlong=0xc0a80008) returned 0x800a8c0 [0222.364] socket (af=2, type=1, protocol=6) returned 0x37c [0222.365] ioctlsocket (in: s=0x37c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.365] connect (s=0x37c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.8"), namelen=16) returned -1 [0222.365] WSAGetLastError () returned 10035 [0222.365] htonl (hostlong=0xc0a80009) returned 0x900a8c0 [0222.365] socket (af=2, type=1, protocol=6) returned 0x2f8 [0222.366] ioctlsocket (in: s=0x2f8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.366] connect (s=0x2f8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.9"), namelen=16) returned -1 [0222.366] WSAGetLastError () returned 10035 [0222.366] htonl (hostlong=0xc0a8000a) returned 0xa00a8c0 [0222.366] socket (af=2, type=1, protocol=6) returned 0x34c [0222.366] ioctlsocket (in: s=0x34c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.367] connect (s=0x34c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.10"), namelen=16) returned -1 [0222.367] WSAGetLastError () returned 10035 [0222.367] htonl (hostlong=0xc0a8000b) returned 0xb00a8c0 [0222.367] socket (af=2, type=1, protocol=6) returned 0x350 [0222.367] ioctlsocket (in: s=0x350, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.367] connect (s=0x350, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.11"), namelen=16) returned -1 [0222.368] WSAGetLastError () returned 10035 [0222.368] htonl (hostlong=0xc0a8000c) returned 0xc00a8c0 [0222.368] socket (af=2, type=1, protocol=6) returned 0x354 [0222.368] ioctlsocket (in: s=0x354, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.368] connect (s=0x354, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.12"), namelen=16) returned -1 [0222.371] WSAGetLastError () returned 10035 [0222.371] htonl (hostlong=0xc0a8000d) returned 0xd00a8c0 [0222.371] socket (af=2, type=1, protocol=6) returned 0x380 [0222.371] ioctlsocket (in: s=0x380, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.371] connect (s=0x380, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.13"), namelen=16) returned -1 [0222.372] WSAGetLastError () returned 10035 [0222.372] htonl (hostlong=0xc0a8000e) returned 0xe00a8c0 [0222.372] socket (af=2, type=1, protocol=6) returned 0x370 [0222.372] ioctlsocket (in: s=0x370, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.372] connect (s=0x370, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.14"), namelen=16) returned -1 [0222.373] WSAGetLastError () returned 10035 [0222.373] htonl (hostlong=0xc0a8000f) returned 0xf00a8c0 [0222.373] socket (af=2, type=1, protocol=6) returned 0x38c [0222.373] ioctlsocket (in: s=0x38c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.374] connect (s=0x38c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.15"), namelen=16) returned -1 [0222.374] WSAGetLastError () returned 10035 [0222.374] htonl (hostlong=0xc0a80010) returned 0x1000a8c0 [0222.374] socket (af=2, type=1, protocol=6) returned 0x394 [0222.375] ioctlsocket (in: s=0x394, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.375] connect (s=0x394, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.16"), namelen=16) returned -1 [0222.375] WSAGetLastError () returned 10035 [0222.375] htonl (hostlong=0xc0a80011) returned 0x1100a8c0 [0222.375] socket (af=2, type=1, protocol=6) returned 0x398 [0222.376] ioctlsocket (in: s=0x398, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.376] connect (s=0x398, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.17"), namelen=16) returned -1 [0222.376] WSAGetLastError () returned 10035 [0222.376] htonl (hostlong=0xc0a80012) returned 0x1200a8c0 [0222.376] socket (af=2, type=1, protocol=6) returned 0x39c [0222.377] ioctlsocket (in: s=0x39c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.377] connect (s=0x39c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.18"), namelen=16) returned -1 [0222.377] WSAGetLastError () returned 10035 [0222.377] htonl (hostlong=0xc0a80013) returned 0x1300a8c0 [0222.377] socket (af=2, type=1, protocol=6) returned 0x3a0 [0222.378] ioctlsocket (in: s=0x3a0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.378] connect (s=0x3a0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.19"), namelen=16) returned -1 [0222.378] WSAGetLastError () returned 10035 [0222.379] htonl (hostlong=0xc0a80014) returned 0x1400a8c0 [0222.379] socket (af=2, type=1, protocol=6) returned 0x3a4 [0222.379] ioctlsocket (in: s=0x3a4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.379] connect (s=0x3a4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.20"), namelen=16) returned -1 [0222.379] WSAGetLastError () returned 10035 [0222.379] htonl (hostlong=0xc0a80015) returned 0x1500a8c0 [0222.380] socket (af=2, type=1, protocol=6) returned 0x3a8 [0222.380] ioctlsocket (in: s=0x3a8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.380] connect (s=0x3a8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.21"), namelen=16) returned -1 [0222.380] WSAGetLastError () returned 10035 [0222.381] htonl (hostlong=0xc0a80016) returned 0x1600a8c0 [0222.381] socket (af=2, type=1, protocol=6) returned 0x3ac [0222.381] ioctlsocket (in: s=0x3ac, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.381] connect (s=0x3ac, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.22"), namelen=16) returned -1 [0222.381] WSAGetLastError () returned 10035 [0222.381] htonl (hostlong=0xc0a80017) returned 0x1700a8c0 [0222.381] socket (af=2, type=1, protocol=6) returned 0x3b0 [0222.382] ioctlsocket (in: s=0x3b0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.382] connect (s=0x3b0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.23"), namelen=16) returned -1 [0222.382] WSAGetLastError () returned 10035 [0222.382] htonl (hostlong=0xc0a80018) returned 0x1800a8c0 [0222.383] socket (af=2, type=1, protocol=6) returned 0x3b4 [0222.383] ioctlsocket (in: s=0x3b4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.383] connect (s=0x3b4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.24"), namelen=16) returned -1 [0222.383] WSAGetLastError () returned 10035 [0222.383] htonl (hostlong=0xc0a80019) returned 0x1900a8c0 [0222.383] socket (af=2, type=1, protocol=6) returned 0x3b8 [0222.384] ioctlsocket (in: s=0x3b8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.384] connect (s=0x3b8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.25"), namelen=16) returned -1 [0222.384] WSAGetLastError () returned 10035 [0222.384] htonl (hostlong=0xc0a8001a) returned 0x1a00a8c0 [0222.384] socket (af=2, type=1, protocol=6) returned 0x3bc [0222.385] ioctlsocket (in: s=0x3bc, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.385] connect (s=0x3bc, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.26"), namelen=16) returned -1 [0222.385] WSAGetLastError () returned 10035 [0222.385] htonl (hostlong=0xc0a8001b) returned 0x1b00a8c0 [0222.385] socket (af=2, type=1, protocol=6) returned 0x3c0 [0222.386] ioctlsocket (in: s=0x3c0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.386] connect (s=0x3c0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.27"), namelen=16) returned -1 [0222.386] WSAGetLastError () returned 10035 [0222.386] htonl (hostlong=0xc0a8001c) returned 0x1c00a8c0 [0222.386] socket (af=2, type=1, protocol=6) returned 0x3c4 [0222.387] ioctlsocket (in: s=0x3c4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.387] connect (s=0x3c4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.28"), namelen=16) returned -1 [0222.387] WSAGetLastError () returned 10035 [0222.387] htonl (hostlong=0xc0a8001d) returned 0x1d00a8c0 [0222.387] socket (af=2, type=1, protocol=6) returned 0x3c8 [0222.387] ioctlsocket (in: s=0x3c8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.388] connect (s=0x3c8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.29"), namelen=16) returned -1 [0222.388] WSAGetLastError () returned 10035 [0222.388] htonl (hostlong=0xc0a8001e) returned 0x1e00a8c0 [0222.388] socket (af=2, type=1, protocol=6) returned 0x3cc [0222.388] ioctlsocket (in: s=0x3cc, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.388] connect (s=0x3cc, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.30"), namelen=16) returned -1 [0222.389] WSAGetLastError () returned 10035 [0222.389] htonl (hostlong=0xc0a8001f) returned 0x1f00a8c0 [0222.389] socket (af=2, type=1, protocol=6) returned 0x3d0 [0222.389] ioctlsocket (in: s=0x3d0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.389] connect (s=0x3d0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.31"), namelen=16) returned -1 [0222.390] WSAGetLastError () returned 10035 [0222.390] htonl (hostlong=0xc0a80020) returned 0x2000a8c0 [0222.390] socket (af=2, type=1, protocol=6) returned 0x3d4 [0222.390] ioctlsocket (in: s=0x3d4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.390] connect (s=0x3d4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.32"), namelen=16) returned -1 [0222.391] WSAGetLastError () returned 10035 [0222.391] htonl (hostlong=0xc0a80021) returned 0x2100a8c0 [0222.391] socket (af=2, type=1, protocol=6) returned 0x3d8 [0222.391] ioctlsocket (in: s=0x3d8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.391] connect (s=0x3d8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.33"), namelen=16) returned -1 [0222.392] WSAGetLastError () returned 10035 [0222.392] htonl (hostlong=0xc0a80022) returned 0x2200a8c0 [0222.392] socket (af=2, type=1, protocol=6) returned 0x3dc [0222.392] ioctlsocket (in: s=0x3dc, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.392] connect (s=0x3dc, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.34"), namelen=16) returned -1 [0222.393] WSAGetLastError () returned 10035 [0222.393] htonl (hostlong=0xc0a80023) returned 0x2300a8c0 [0222.393] socket (af=2, type=1, protocol=6) returned 0x3e0 [0222.393] ioctlsocket (in: s=0x3e0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.393] connect (s=0x3e0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.35"), namelen=16) returned -1 [0222.394] WSAGetLastError () returned 10035 [0222.394] htonl (hostlong=0xc0a80024) returned 0x2400a8c0 [0222.394] socket (af=2, type=1, protocol=6) returned 0x3e4 [0222.394] ioctlsocket (in: s=0x3e4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.394] connect (s=0x3e4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.36"), namelen=16) returned -1 [0222.395] WSAGetLastError () returned 10035 [0222.395] htonl (hostlong=0xc0a80025) returned 0x2500a8c0 [0222.395] socket (af=2, type=1, protocol=6) returned 0x3e8 [0222.395] ioctlsocket (in: s=0x3e8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.395] connect (s=0x3e8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.37"), namelen=16) returned -1 [0222.396] WSAGetLastError () returned 10035 [0222.396] htonl (hostlong=0xc0a80026) returned 0x2600a8c0 [0222.396] socket (af=2, type=1, protocol=6) returned 0x3ec [0222.396] ioctlsocket (in: s=0x3ec, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.396] connect (s=0x3ec, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.38"), namelen=16) returned -1 [0222.397] WSAGetLastError () returned 10035 [0222.397] htonl (hostlong=0xc0a80027) returned 0x2700a8c0 [0222.397] socket (af=2, type=1, protocol=6) returned 0x3f0 [0222.397] ioctlsocket (in: s=0x3f0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.397] connect (s=0x3f0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.39"), namelen=16) returned -1 [0222.398] WSAGetLastError () returned 10035 [0222.398] htonl (hostlong=0xc0a80028) returned 0x2800a8c0 [0222.398] socket (af=2, type=1, protocol=6) returned 0x3f4 [0222.398] ioctlsocket (in: s=0x3f4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.398] connect (s=0x3f4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.40"), namelen=16) returned -1 [0222.399] WSAGetLastError () returned 10035 [0222.399] htonl (hostlong=0xc0a80029) returned 0x2900a8c0 [0222.399] socket (af=2, type=1, protocol=6) returned 0x3f8 [0222.399] ioctlsocket (in: s=0x3f8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.399] connect (s=0x3f8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.41"), namelen=16) returned -1 [0222.400] WSAGetLastError () returned 10035 [0222.400] htonl (hostlong=0xc0a8002a) returned 0x2a00a8c0 [0222.400] socket (af=2, type=1, protocol=6) returned 0x3fc [0222.400] ioctlsocket (in: s=0x3fc, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.400] connect (s=0x3fc, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.42"), namelen=16) returned -1 [0222.401] WSAGetLastError () returned 10035 [0222.401] htonl (hostlong=0xc0a8002b) returned 0x2b00a8c0 [0222.401] socket (af=2, type=1, protocol=6) returned 0x404 [0222.401] ioctlsocket (in: s=0x404, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.401] connect (s=0x404, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.43"), namelen=16) returned -1 [0222.402] WSAGetLastError () returned 10035 [0222.402] htonl (hostlong=0xc0a8002c) returned 0x2c00a8c0 [0222.402] socket (af=2, type=1, protocol=6) returned 0x408 [0222.402] ioctlsocket (in: s=0x408, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.402] connect (s=0x408, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.44"), namelen=16) returned -1 [0222.403] WSAGetLastError () returned 10035 [0222.403] htonl (hostlong=0xc0a8002d) returned 0x2d00a8c0 [0222.403] socket (af=2, type=1, protocol=6) returned 0x40c [0222.403] ioctlsocket (in: s=0x40c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.403] connect (s=0x40c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.45"), namelen=16) returned -1 [0222.404] WSAGetLastError () returned 10035 [0222.404] htonl (hostlong=0xc0a8002e) returned 0x2e00a8c0 [0222.404] socket (af=2, type=1, protocol=6) returned 0x410 [0222.404] ioctlsocket (in: s=0x410, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.404] connect (s=0x410, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.46"), namelen=16) returned -1 [0222.405] WSAGetLastError () returned 10035 [0222.405] htonl (hostlong=0xc0a8002f) returned 0x2f00a8c0 [0222.405] socket (af=2, type=1, protocol=6) returned 0x414 [0222.405] ioctlsocket (in: s=0x414, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.405] connect (s=0x414, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.47"), namelen=16) returned -1 [0222.406] WSAGetLastError () returned 10035 [0222.406] htonl (hostlong=0xc0a80030) returned 0x3000a8c0 [0222.406] socket (af=2, type=1, protocol=6) returned 0x418 [0222.407] ioctlsocket (in: s=0x418, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.407] connect (s=0x418, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.48"), namelen=16) returned -1 [0222.407] WSAGetLastError () returned 10035 [0222.407] htonl (hostlong=0xc0a80031) returned 0x3100a8c0 [0222.407] socket (af=2, type=1, protocol=6) returned 0x41c [0222.408] ioctlsocket (in: s=0x41c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.408] connect (s=0x41c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.49"), namelen=16) returned -1 [0222.424] WSAGetLastError () returned 10035 [0222.424] htonl (hostlong=0xc0a80032) returned 0x3200a8c0 [0222.424] socket (af=2, type=1, protocol=6) returned 0x420 [0222.424] ioctlsocket (in: s=0x420, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.424] connect (s=0x420, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.50"), namelen=16) returned -1 [0222.425] WSAGetLastError () returned 10035 [0222.425] htonl (hostlong=0xc0a80033) returned 0x3300a8c0 [0222.425] socket (af=2, type=1, protocol=6) returned 0x424 [0222.425] ioctlsocket (in: s=0x424, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.425] connect (s=0x424, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.51"), namelen=16) returned -1 [0222.426] WSAGetLastError () returned 10035 [0222.426] htonl (hostlong=0xc0a80034) returned 0x3400a8c0 [0222.426] socket (af=2, type=1, protocol=6) returned 0x428 [0222.426] ioctlsocket (in: s=0x428, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.426] connect (s=0x428, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.52"), namelen=16) returned -1 [0222.427] WSAGetLastError () returned 10035 [0222.427] htonl (hostlong=0xc0a80035) returned 0x3500a8c0 [0222.427] socket (af=2, type=1, protocol=6) returned 0x42c [0222.427] ioctlsocket (in: s=0x42c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.427] connect (s=0x42c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.53"), namelen=16) returned -1 [0222.428] WSAGetLastError () returned 10035 [0222.428] htonl (hostlong=0xc0a80036) returned 0x3600a8c0 [0222.428] socket (af=2, type=1, protocol=6) returned 0x430 [0222.428] ioctlsocket (in: s=0x430, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.428] connect (s=0x430, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.54"), namelen=16) returned -1 [0222.429] WSAGetLastError () returned 10035 [0222.429] htonl (hostlong=0xc0a80037) returned 0x3700a8c0 [0222.429] socket (af=2, type=1, protocol=6) returned 0x434 [0222.429] ioctlsocket (in: s=0x434, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.429] connect (s=0x434, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.55"), namelen=16) returned -1 [0222.430] WSAGetLastError () returned 10035 [0222.430] htonl (hostlong=0xc0a80038) returned 0x3800a8c0 [0222.430] socket (af=2, type=1, protocol=6) returned 0x438 [0222.430] ioctlsocket (in: s=0x438, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.430] connect (s=0x438, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.56"), namelen=16) returned -1 [0222.431] WSAGetLastError () returned 10035 [0222.431] htonl (hostlong=0xc0a80039) returned 0x3900a8c0 [0222.431] socket (af=2, type=1, protocol=6) returned 0x43c [0222.431] ioctlsocket (in: s=0x43c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.431] connect (s=0x43c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.57"), namelen=16) returned -1 [0222.432] WSAGetLastError () returned 10035 [0222.432] htonl (hostlong=0xc0a8003a) returned 0x3a00a8c0 [0222.432] socket (af=2, type=1, protocol=6) returned 0x440 [0222.432] ioctlsocket (in: s=0x440, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.432] connect (s=0x440, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.58"), namelen=16) returned -1 [0222.433] WSAGetLastError () returned 10035 [0222.433] htonl (hostlong=0xc0a8003b) returned 0x3b00a8c0 [0222.433] socket (af=2, type=1, protocol=6) returned 0x444 [0222.433] ioctlsocket (in: s=0x444, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.433] connect (s=0x444, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.59"), namelen=16) returned -1 [0222.436] WSAGetLastError () returned 10035 [0222.436] htonl (hostlong=0xc0a8003c) returned 0x3c00a8c0 [0222.436] socket (af=2, type=1, protocol=6) returned 0x448 [0222.436] ioctlsocket (in: s=0x448, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.436] connect (s=0x448, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.60"), namelen=16) returned -1 [0222.437] WSAGetLastError () returned 10035 [0222.437] htonl (hostlong=0xc0a8003d) returned 0x3d00a8c0 [0222.437] socket (af=2, type=1, protocol=6) returned 0x44c [0222.437] ioctlsocket (in: s=0x44c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.437] connect (s=0x44c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.61"), namelen=16) returned -1 [0222.439] WSAGetLastError () returned 10035 [0222.439] htonl (hostlong=0xc0a8003e) returned 0x3e00a8c0 [0222.439] socket (af=2, type=1, protocol=6) returned 0x450 [0222.439] ioctlsocket (in: s=0x450, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.439] connect (s=0x450, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.62"), namelen=16) returned -1 [0222.440] WSAGetLastError () returned 10035 [0222.440] htonl (hostlong=0xc0a8003f) returned 0x3f00a8c0 [0222.440] socket (af=2, type=1, protocol=6) returned 0x454 [0222.440] ioctlsocket (in: s=0x454, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.440] connect (s=0x454, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.63"), namelen=16) returned -1 [0222.441] WSAGetLastError () returned 10035 [0222.441] htonl (hostlong=0xc0a80040) returned 0x4000a8c0 [0222.441] socket (af=2, type=1, protocol=6) returned 0x458 [0222.441] ioctlsocket (in: s=0x458, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.441] connect (s=0x458, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.64"), namelen=16) returned -1 [0222.442] WSAGetLastError () returned 10035 [0222.442] htonl (hostlong=0xc0a80041) returned 0x4100a8c0 [0222.442] socket (af=2, type=1, protocol=6) returned 0x45c [0222.442] ioctlsocket (in: s=0x45c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.442] connect (s=0x45c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.65"), namelen=16) returned -1 [0222.443] WSAGetLastError () returned 10035 [0222.443] htonl (hostlong=0xc0a80042) returned 0x4200a8c0 [0222.443] socket (af=2, type=1, protocol=6) returned 0x460 [0222.443] ioctlsocket (in: s=0x460, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.443] connect (s=0x460, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.66"), namelen=16) returned -1 [0222.444] WSAGetLastError () returned 10035 [0222.444] htonl (hostlong=0xc0a80043) returned 0x4300a8c0 [0222.444] socket (af=2, type=1, protocol=6) returned 0x464 [0222.444] ioctlsocket (in: s=0x464, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.444] connect (s=0x464, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.67"), namelen=16) returned -1 [0222.446] WSAGetLastError () returned 10035 [0222.446] htonl (hostlong=0xc0a80044) returned 0x4400a8c0 [0222.446] socket (af=2, type=1, protocol=6) returned 0x468 [0222.446] ioctlsocket (in: s=0x468, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.447] connect (s=0x468, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.68"), namelen=16) returned -1 [0222.447] WSAGetLastError () returned 10035 [0222.447] htonl (hostlong=0xc0a80045) returned 0x4500a8c0 [0222.447] socket (af=2, type=1, protocol=6) returned 0x46c [0222.448] ioctlsocket (in: s=0x46c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.448] connect (s=0x46c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.69"), namelen=16) returned -1 [0222.448] WSAGetLastError () returned 10035 [0222.448] htonl (hostlong=0xc0a80046) returned 0x4600a8c0 [0222.448] socket (af=2, type=1, protocol=6) returned 0x470 [0222.449] ioctlsocket (in: s=0x470, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.449] connect (s=0x470, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.70"), namelen=16) returned -1 [0222.449] WSAGetLastError () returned 10035 [0222.449] htonl (hostlong=0xc0a80047) returned 0x4700a8c0 [0222.449] socket (af=2, type=1, protocol=6) returned 0x474 [0222.449] ioctlsocket (in: s=0x474, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.449] connect (s=0x474, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.71"), namelen=16) returned -1 [0222.450] WSAGetLastError () returned 10035 [0222.450] htonl (hostlong=0xc0a80048) returned 0x4800a8c0 [0222.450] socket (af=2, type=1, protocol=6) returned 0x478 [0222.450] ioctlsocket (in: s=0x478, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.450] connect (s=0x478, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.72"), namelen=16) returned -1 [0222.451] WSAGetLastError () returned 10035 [0222.451] htonl (hostlong=0xc0a80049) returned 0x4900a8c0 [0222.451] socket (af=2, type=1, protocol=6) returned 0x47c [0222.451] ioctlsocket (in: s=0x47c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.451] connect (s=0x47c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.73"), namelen=16) returned -1 [0222.452] WSAGetLastError () returned 10035 [0222.452] htonl (hostlong=0xc0a8004a) returned 0x4a00a8c0 [0222.452] socket (af=2, type=1, protocol=6) returned 0x480 [0222.452] ioctlsocket (in: s=0x480, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.452] connect (s=0x480, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.74"), namelen=16) returned -1 [0222.453] WSAGetLastError () returned 10035 [0222.453] htonl (hostlong=0xc0a8004b) returned 0x4b00a8c0 [0222.453] socket (af=2, type=1, protocol=6) returned 0x484 [0222.453] ioctlsocket (in: s=0x484, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.453] connect (s=0x484, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.75"), namelen=16) returned -1 [0222.454] WSAGetLastError () returned 10035 [0222.454] htonl (hostlong=0xc0a8004c) returned 0x4c00a8c0 [0222.454] socket (af=2, type=1, protocol=6) returned 0x488 [0222.454] ioctlsocket (in: s=0x488, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.454] connect (s=0x488, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.76"), namelen=16) returned -1 [0222.455] WSAGetLastError () returned 10035 [0222.455] htonl (hostlong=0xc0a8004d) returned 0x4d00a8c0 [0222.455] socket (af=2, type=1, protocol=6) returned 0x48c [0222.455] ioctlsocket (in: s=0x48c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.455] connect (s=0x48c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.77"), namelen=16) returned -1 [0222.456] WSAGetLastError () returned 10035 [0222.456] htonl (hostlong=0xc0a8004e) returned 0x4e00a8c0 [0222.456] socket (af=2, type=1, protocol=6) returned 0x490 [0222.456] ioctlsocket (in: s=0x490, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.456] connect (s=0x490, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.78"), namelen=16) returned -1 [0222.457] WSAGetLastError () returned 10035 [0222.457] htonl (hostlong=0xc0a8004f) returned 0x4f00a8c0 [0222.457] socket (af=2, type=1, protocol=6) returned 0x494 [0222.457] ioctlsocket (in: s=0x494, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.457] connect (s=0x494, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.79"), namelen=16) returned -1 [0222.458] WSAGetLastError () returned 10035 [0222.458] htonl (hostlong=0xc0a80050) returned 0x5000a8c0 [0222.458] socket (af=2, type=1, protocol=6) returned 0x498 [0222.458] ioctlsocket (in: s=0x498, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.458] connect (s=0x498, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.80"), namelen=16) returned -1 [0222.459] WSAGetLastError () returned 10035 [0222.459] htonl (hostlong=0xc0a80051) returned 0x5100a8c0 [0222.459] socket (af=2, type=1, protocol=6) returned 0x49c [0222.459] ioctlsocket (in: s=0x49c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.459] connect (s=0x49c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.81"), namelen=16) returned -1 [0222.460] WSAGetLastError () returned 10035 [0222.460] htonl (hostlong=0xc0a80052) returned 0x5200a8c0 [0222.460] socket (af=2, type=1, protocol=6) returned 0x4a0 [0222.460] ioctlsocket (in: s=0x4a0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.460] connect (s=0x4a0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.82"), namelen=16) returned -1 [0222.461] WSAGetLastError () returned 10035 [0222.461] htonl (hostlong=0xc0a80053) returned 0x5300a8c0 [0222.461] socket (af=2, type=1, protocol=6) returned 0x4a4 [0222.461] ioctlsocket (in: s=0x4a4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.461] connect (s=0x4a4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.83"), namelen=16) returned -1 [0222.462] WSAGetLastError () returned 10035 [0222.462] htonl (hostlong=0xc0a80054) returned 0x5400a8c0 [0222.462] socket (af=2, type=1, protocol=6) returned 0x4a8 [0222.462] ioctlsocket (in: s=0x4a8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.462] connect (s=0x4a8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.84"), namelen=16) returned -1 [0222.463] WSAGetLastError () returned 10035 [0222.463] htonl (hostlong=0xc0a80055) returned 0x5500a8c0 [0222.463] socket (af=2, type=1, protocol=6) returned 0x4ac [0222.463] ioctlsocket (in: s=0x4ac, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.463] connect (s=0x4ac, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.85"), namelen=16) returned -1 [0222.464] WSAGetLastError () returned 10035 [0222.464] htonl (hostlong=0xc0a80056) returned 0x5600a8c0 [0222.464] socket (af=2, type=1, protocol=6) returned 0x4b0 [0222.464] ioctlsocket (in: s=0x4b0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.464] connect (s=0x4b0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.86"), namelen=16) returned -1 [0222.465] WSAGetLastError () returned 10035 [0222.465] htonl (hostlong=0xc0a80057) returned 0x5700a8c0 [0222.465] socket (af=2, type=1, protocol=6) returned 0x4b4 [0222.465] ioctlsocket (in: s=0x4b4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.465] connect (s=0x4b4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.87"), namelen=16) returned -1 [0222.466] WSAGetLastError () returned 10035 [0222.466] htonl (hostlong=0xc0a80058) returned 0x5800a8c0 [0222.466] socket (af=2, type=1, protocol=6) returned 0x4b8 [0222.466] ioctlsocket (in: s=0x4b8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.466] connect (s=0x4b8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.88"), namelen=16) returned -1 [0222.467] WSAGetLastError () returned 10035 [0222.467] htonl (hostlong=0xc0a80059) returned 0x5900a8c0 [0222.467] socket (af=2, type=1, protocol=6) returned 0x4bc [0222.467] ioctlsocket (in: s=0x4bc, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.467] connect (s=0x4bc, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.89"), namelen=16) returned -1 [0222.468] WSAGetLastError () returned 10035 [0222.468] htonl (hostlong=0xc0a8005a) returned 0x5a00a8c0 [0222.468] socket (af=2, type=1, protocol=6) returned 0x4c0 [0222.468] ioctlsocket (in: s=0x4c0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.468] connect (s=0x4c0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.90"), namelen=16) returned -1 [0222.469] WSAGetLastError () returned 10035 [0222.469] htonl (hostlong=0xc0a8005b) returned 0x5b00a8c0 [0222.469] socket (af=2, type=1, protocol=6) returned 0x4c4 [0222.469] ioctlsocket (in: s=0x4c4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.469] connect (s=0x4c4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.91"), namelen=16) returned -1 [0222.470] WSAGetLastError () returned 10035 [0222.470] htonl (hostlong=0xc0a8005c) returned 0x5c00a8c0 [0222.470] socket (af=2, type=1, protocol=6) returned 0x4c8 [0222.470] ioctlsocket (in: s=0x4c8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.470] connect (s=0x4c8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.92"), namelen=16) returned -1 [0222.470] WSAGetLastError () returned 10035 [0222.470] htonl (hostlong=0xc0a8005d) returned 0x5d00a8c0 [0222.471] socket (af=2, type=1, protocol=6) returned 0x4cc [0222.471] ioctlsocket (in: s=0x4cc, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.471] connect (s=0x4cc, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.93"), namelen=16) returned -1 [0222.471] WSAGetLastError () returned 10035 [0222.471] htonl (hostlong=0xc0a8005e) returned 0x5e00a8c0 [0222.471] socket (af=2, type=1, protocol=6) returned 0x4d0 [0222.472] ioctlsocket (in: s=0x4d0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.472] connect (s=0x4d0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.94"), namelen=16) returned -1 [0222.472] WSAGetLastError () returned 10035 [0222.472] htonl (hostlong=0xc0a8005f) returned 0x5f00a8c0 [0222.472] socket (af=2, type=1, protocol=6) returned 0x4d4 [0222.473] ioctlsocket (in: s=0x4d4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.473] connect (s=0x4d4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.95"), namelen=16) returned -1 [0222.473] WSAGetLastError () returned 10035 [0222.473] htonl (hostlong=0xc0a80060) returned 0x6000a8c0 [0222.473] socket (af=2, type=1, protocol=6) returned 0x4d8 [0222.474] ioctlsocket (in: s=0x4d8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.474] connect (s=0x4d8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.96"), namelen=16) returned -1 [0222.764] WSAGetLastError () returned 10035 [0222.764] htonl (hostlong=0xc0a80061) returned 0x6100a8c0 [0222.764] socket (af=2, type=1, protocol=6) returned 0x4dc [0222.775] ioctlsocket (in: s=0x4dc, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.775] connect (s=0x4dc, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.97"), namelen=16) returned -1 [0222.788] WSAGetLastError () returned 10035 [0222.788] htonl (hostlong=0xc0a80062) returned 0x6200a8c0 [0222.796] socket (af=2, type=1, protocol=6) returned 0x4e0 [0222.799] ioctlsocket (in: s=0x4e0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.799] connect (s=0x4e0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.98"), namelen=16) returned -1 [0222.810] WSAGetLastError () returned 10035 [0222.810] htonl (hostlong=0xc0a80063) returned 0x6300a8c0 [0222.810] socket (af=2, type=1, protocol=6) returned 0x4e4 [0222.810] ioctlsocket (in: s=0x4e4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.810] connect (s=0x4e4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.99"), namelen=16) returned -1 [0222.828] WSAGetLastError () returned 10035 [0222.839] htonl (hostlong=0xc0a80064) returned 0x6400a8c0 [0222.839] socket (af=2, type=1, protocol=6) returned 0x4e8 [0222.847] ioctlsocket (in: s=0x4e8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.850] connect (s=0x4e8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.100"), namelen=16) returned -1 [0222.851] WSAGetLastError () returned 10035 [0222.851] htonl (hostlong=0xc0a80065) returned 0x6500a8c0 [0222.852] socket (af=2, type=1, protocol=6) returned 0x4ec [0222.852] ioctlsocket (in: s=0x4ec, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.852] connect (s=0x4ec, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.101"), namelen=16) returned -1 [0222.853] WSAGetLastError () returned 10035 [0222.853] htonl (hostlong=0xc0a80066) returned 0x6600a8c0 [0222.853] socket (af=2, type=1, protocol=6) returned 0x4f0 [0222.853] ioctlsocket (in: s=0x4f0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.853] connect (s=0x4f0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.102"), namelen=16) returned -1 [0222.854] WSAGetLastError () returned 10035 [0222.854] htonl (hostlong=0xc0a80067) returned 0x6700a8c0 [0222.854] socket (af=2, type=1, protocol=6) returned 0x4f4 [0222.854] ioctlsocket (in: s=0x4f4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.854] connect (s=0x4f4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.103"), namelen=16) returned -1 [0222.855] WSAGetLastError () returned 10035 [0222.855] htonl (hostlong=0xc0a80068) returned 0x6800a8c0 [0222.855] socket (af=2, type=1, protocol=6) returned 0x4f8 [0222.855] ioctlsocket (in: s=0x4f8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.855] connect (s=0x4f8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.104"), namelen=16) returned -1 [0222.856] WSAGetLastError () returned 10035 [0222.856] htonl (hostlong=0xc0a80069) returned 0x6900a8c0 [0222.856] socket (af=2, type=1, protocol=6) returned 0x4fc [0222.856] ioctlsocket (in: s=0x4fc, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.856] connect (s=0x4fc, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.105"), namelen=16) returned -1 [0222.857] WSAGetLastError () returned 10035 [0222.857] htonl (hostlong=0xc0a8006a) returned 0x6a00a8c0 [0222.857] socket (af=2, type=1, protocol=6) returned 0x500 [0222.857] ioctlsocket (in: s=0x500, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.857] connect (s=0x500, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.106"), namelen=16) returned -1 [0222.873] WSAGetLastError () returned 10035 [0222.873] htonl (hostlong=0xc0a8006b) returned 0x6b00a8c0 [0222.873] socket (af=2, type=1, protocol=6) returned 0x504 [0222.873] ioctlsocket (in: s=0x504, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.873] connect (s=0x504, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.107"), namelen=16) returned -1 [0222.874] WSAGetLastError () returned 10035 [0222.874] htonl (hostlong=0xc0a8006c) returned 0x6c00a8c0 [0222.874] socket (af=2, type=1, protocol=6) returned 0x508 [0222.875] ioctlsocket (in: s=0x508, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.875] connect (s=0x508, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.108"), namelen=16) returned -1 [0222.875] WSAGetLastError () returned 10035 [0222.875] htonl (hostlong=0xc0a8006d) returned 0x6d00a8c0 [0222.875] socket (af=2, type=1, protocol=6) returned 0x50c [0222.876] ioctlsocket (in: s=0x50c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.876] connect (s=0x50c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.109"), namelen=16) returned -1 [0222.876] WSAGetLastError () returned 10035 [0222.876] htonl (hostlong=0xc0a8006e) returned 0x6e00a8c0 [0222.877] socket (af=2, type=1, protocol=6) returned 0x510 [0222.877] ioctlsocket (in: s=0x510, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.877] connect (s=0x510, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.110"), namelen=16) returned -1 [0222.877] WSAGetLastError () returned 10035 [0222.878] htonl (hostlong=0xc0a8006f) returned 0x6f00a8c0 [0222.878] socket (af=2, type=1, protocol=6) returned 0x514 [0222.878] ioctlsocket (in: s=0x514, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.878] connect (s=0x514, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.111"), namelen=16) returned -1 [0222.878] WSAGetLastError () returned 10035 [0222.879] htonl (hostlong=0xc0a80070) returned 0x7000a8c0 [0222.879] socket (af=2, type=1, protocol=6) returned 0x518 [0222.879] ioctlsocket (in: s=0x518, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.879] connect (s=0x518, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.112"), namelen=16) returned -1 [0222.880] WSAGetLastError () returned 10035 [0222.880] htonl (hostlong=0xc0a80071) returned 0x7100a8c0 [0222.880] socket (af=2, type=1, protocol=6) returned 0x51c [0222.880] ioctlsocket (in: s=0x51c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.880] connect (s=0x51c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.113"), namelen=16) returned -1 [0222.881] WSAGetLastError () returned 10035 [0222.881] htonl (hostlong=0xc0a80072) returned 0x7200a8c0 [0222.881] socket (af=2, type=1, protocol=6) returned 0x520 [0222.881] ioctlsocket (in: s=0x520, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.881] connect (s=0x520, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.114"), namelen=16) returned -1 [0222.882] WSAGetLastError () returned 10035 [0222.882] htonl (hostlong=0xc0a80073) returned 0x7300a8c0 [0222.882] socket (af=2, type=1, protocol=6) returned 0x524 [0222.882] ioctlsocket (in: s=0x524, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.882] connect (s=0x524, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.115"), namelen=16) returned -1 [0222.883] WSAGetLastError () returned 10035 [0222.883] htonl (hostlong=0xc0a80074) returned 0x7400a8c0 [0222.883] socket (af=2, type=1, protocol=6) returned 0x528 [0222.883] ioctlsocket (in: s=0x528, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.883] connect (s=0x528, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.116"), namelen=16) returned -1 [0222.884] WSAGetLastError () returned 10035 [0222.884] htonl (hostlong=0xc0a80075) returned 0x7500a8c0 [0222.884] socket (af=2, type=1, protocol=6) returned 0x52c [0222.884] ioctlsocket (in: s=0x52c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.884] connect (s=0x52c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.117"), namelen=16) returned -1 [0222.885] WSAGetLastError () returned 10035 [0222.885] htonl (hostlong=0xc0a80076) returned 0x7600a8c0 [0222.885] socket (af=2, type=1, protocol=6) returned 0x530 [0222.885] ioctlsocket (in: s=0x530, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.885] connect (s=0x530, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.118"), namelen=16) returned -1 [0222.886] WSAGetLastError () returned 10035 [0222.886] htonl (hostlong=0xc0a80077) returned 0x7700a8c0 [0222.886] socket (af=2, type=1, protocol=6) returned 0x534 [0222.886] ioctlsocket (in: s=0x534, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.886] connect (s=0x534, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.119"), namelen=16) returned -1 [0222.887] WSAGetLastError () returned 10035 [0222.887] htonl (hostlong=0xc0a80078) returned 0x7800a8c0 [0222.887] socket (af=2, type=1, protocol=6) returned 0x538 [0222.887] ioctlsocket (in: s=0x538, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.887] connect (s=0x538, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.120"), namelen=16) returned -1 [0222.888] WSAGetLastError () returned 10035 [0222.888] htonl (hostlong=0xc0a80079) returned 0x7900a8c0 [0222.888] socket (af=2, type=1, protocol=6) returned 0x53c [0222.888] ioctlsocket (in: s=0x53c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.888] connect (s=0x53c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.121"), namelen=16) returned -1 [0222.891] WSAGetLastError () returned 10035 [0222.891] htonl (hostlong=0xc0a8007a) returned 0x7a00a8c0 [0222.891] socket (af=2, type=1, protocol=6) returned 0x540 [0222.892] ioctlsocket (in: s=0x540, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.892] connect (s=0x540, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.122"), namelen=16) returned -1 [0222.892] WSAGetLastError () returned 10035 [0222.892] htonl (hostlong=0xc0a8007b) returned 0x7b00a8c0 [0222.892] socket (af=2, type=1, protocol=6) returned 0x544 [0222.893] ioctlsocket (in: s=0x544, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.893] connect (s=0x544, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.123"), namelen=16) returned -1 [0222.893] WSAGetLastError () returned 10035 [0222.893] htonl (hostlong=0xc0a8007c) returned 0x7c00a8c0 [0222.893] socket (af=2, type=1, protocol=6) returned 0x548 [0222.894] ioctlsocket (in: s=0x548, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.894] connect (s=0x548, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.124"), namelen=16) returned -1 [0222.894] WSAGetLastError () returned 10035 [0222.894] htonl (hostlong=0xc0a8007d) returned 0x7d00a8c0 [0222.894] socket (af=2, type=1, protocol=6) returned 0x54c [0222.895] ioctlsocket (in: s=0x54c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.895] connect (s=0x54c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.125"), namelen=16) returned -1 [0222.895] WSAGetLastError () returned 10035 [0222.895] htonl (hostlong=0xc0a8007e) returned 0x7e00a8c0 [0222.895] socket (af=2, type=1, protocol=6) returned 0x550 [0222.896] ioctlsocket (in: s=0x550, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.896] connect (s=0x550, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.126"), namelen=16) returned -1 [0222.896] WSAGetLastError () returned 10035 [0222.896] htonl (hostlong=0xc0a8007f) returned 0x7f00a8c0 [0222.896] socket (af=2, type=1, protocol=6) returned 0x554 [0222.897] ioctlsocket (in: s=0x554, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.897] connect (s=0x554, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.127"), namelen=16) returned -1 [0222.897] WSAGetLastError () returned 10035 [0222.897] htonl (hostlong=0xc0a80080) returned 0x8000a8c0 [0222.897] socket (af=2, type=1, protocol=6) returned 0x558 [0222.898] ioctlsocket (in: s=0x558, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.898] connect (s=0x558, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.128"), namelen=16) returned -1 [0222.898] WSAGetLastError () returned 10035 [0222.898] htonl (hostlong=0xc0a80081) returned 0x8100a8c0 [0222.898] socket (af=2, type=1, protocol=6) returned 0x55c [0222.898] ioctlsocket (in: s=0x55c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.899] connect (s=0x55c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.129"), namelen=16) returned -1 [0222.899] WSAGetLastError () returned 10035 [0222.899] htonl (hostlong=0xc0a80082) returned 0x8200a8c0 [0222.899] socket (af=2, type=1, protocol=6) returned 0x560 [0222.899] ioctlsocket (in: s=0x560, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.899] connect (s=0x560, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.130"), namelen=16) returned -1 [0222.900] WSAGetLastError () returned 10035 [0222.900] htonl (hostlong=0xc0a80083) returned 0x8300a8c0 [0222.900] socket (af=2, type=1, protocol=6) returned 0x564 [0222.900] ioctlsocket (in: s=0x564, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.900] connect (s=0x564, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.131"), namelen=16) returned -1 [0222.901] WSAGetLastError () returned 10035 [0222.901] htonl (hostlong=0xc0a80084) returned 0x8400a8c0 [0222.901] socket (af=2, type=1, protocol=6) returned 0x568 [0222.901] ioctlsocket (in: s=0x568, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.901] connect (s=0x568, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.132"), namelen=16) returned -1 [0222.902] WSAGetLastError () returned 10035 [0222.902] htonl (hostlong=0xc0a80085) returned 0x8500a8c0 [0222.902] socket (af=2, type=1, protocol=6) returned 0x56c [0222.902] ioctlsocket (in: s=0x56c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.902] connect (s=0x56c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.133"), namelen=16) returned -1 [0222.903] WSAGetLastError () returned 10035 [0222.903] htonl (hostlong=0xc0a80086) returned 0x8600a8c0 [0222.903] socket (af=2, type=1, protocol=6) returned 0x570 [0222.903] ioctlsocket (in: s=0x570, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.903] connect (s=0x570, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.134"), namelen=16) returned -1 [0222.904] WSAGetLastError () returned 10035 [0222.904] htonl (hostlong=0xc0a80087) returned 0x8700a8c0 [0222.904] socket (af=2, type=1, protocol=6) returned 0x574 [0222.904] ioctlsocket (in: s=0x574, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.904] connect (s=0x574, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.135"), namelen=16) returned -1 [0222.981] WSAGetLastError () returned 10035 [0222.988] htonl (hostlong=0xc0a80088) returned 0x8800a8c0 [0222.988] socket (af=2, type=1, protocol=6) returned 0x578 [0222.991] ioctlsocket (in: s=0x578, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0222.991] connect (s=0x578, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.136"), namelen=16) returned -1 [0223.002] WSAGetLastError () returned 10035 [0223.008] htonl (hostlong=0xc0a80089) returned 0x8900a8c0 [0223.008] socket (af=2, type=1, protocol=6) returned 0x57c [0223.011] ioctlsocket (in: s=0x57c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.011] connect (s=0x57c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.137"), namelen=16) returned -1 [0223.024] WSAGetLastError () returned 10035 [0223.024] htonl (hostlong=0xc0a8008a) returned 0x8a00a8c0 [0223.025] socket (af=2, type=1, protocol=6) returned 0x580 [0223.025] ioctlsocket (in: s=0x580, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.025] connect (s=0x580, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.138"), namelen=16) returned -1 [0223.026] WSAGetLastError () returned 10035 [0223.026] htonl (hostlong=0xc0a8008b) returned 0x8b00a8c0 [0223.026] socket (af=2, type=1, protocol=6) returned 0x584 [0223.026] ioctlsocket (in: s=0x584, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.026] connect (s=0x584, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.139"), namelen=16) returned -1 [0223.027] WSAGetLastError () returned 10035 [0223.027] htonl (hostlong=0xc0a8008c) returned 0x8c00a8c0 [0223.027] socket (af=2, type=1, protocol=6) returned 0x588 [0223.027] ioctlsocket (in: s=0x588, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.027] connect (s=0x588, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.140"), namelen=16) returned -1 [0223.028] WSAGetLastError () returned 10035 [0223.028] htonl (hostlong=0xc0a8008d) returned 0x8d00a8c0 [0223.028] socket (af=2, type=1, protocol=6) returned 0x58c [0223.028] ioctlsocket (in: s=0x58c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.028] connect (s=0x58c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.141"), namelen=16) returned -1 [0223.029] WSAGetLastError () returned 10035 [0223.029] htonl (hostlong=0xc0a8008e) returned 0x8e00a8c0 [0223.029] socket (af=2, type=1, protocol=6) returned 0x590 [0223.029] ioctlsocket (in: s=0x590, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.029] connect (s=0x590, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.142"), namelen=16) returned -1 [0223.030] WSAGetLastError () returned 10035 [0223.030] htonl (hostlong=0xc0a8008f) returned 0x8f00a8c0 [0223.030] socket (af=2, type=1, protocol=6) returned 0x594 [0223.030] ioctlsocket (in: s=0x594, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.030] connect (s=0x594, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.143"), namelen=16) returned -1 [0223.031] WSAGetLastError () returned 10035 [0223.031] htonl (hostlong=0xc0a80090) returned 0x9000a8c0 [0223.031] socket (af=2, type=1, protocol=6) returned 0x598 [0223.031] ioctlsocket (in: s=0x598, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.031] connect (s=0x598, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.144"), namelen=16) returned -1 [0223.032] WSAGetLastError () returned 10035 [0223.032] htonl (hostlong=0xc0a80091) returned 0x9100a8c0 [0223.032] socket (af=2, type=1, protocol=6) returned 0x59c [0223.032] ioctlsocket (in: s=0x59c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.032] connect (s=0x59c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.145"), namelen=16) returned -1 [0223.033] WSAGetLastError () returned 10035 [0223.033] htonl (hostlong=0xc0a80092) returned 0x9200a8c0 [0223.033] socket (af=2, type=1, protocol=6) returned 0x5a0 [0223.033] ioctlsocket (in: s=0x5a0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.033] connect (s=0x5a0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.146"), namelen=16) returned -1 [0223.034] WSAGetLastError () returned 10035 [0223.034] htonl (hostlong=0xc0a80093) returned 0x9300a8c0 [0223.034] socket (af=2, type=1, protocol=6) returned 0x5a4 [0223.034] ioctlsocket (in: s=0x5a4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.034] connect (s=0x5a4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.147"), namelen=16) returned -1 [0223.035] WSAGetLastError () returned 10035 [0223.035] htonl (hostlong=0xc0a80094) returned 0x9400a8c0 [0223.035] socket (af=2, type=1, protocol=6) returned 0x5a8 [0223.035] ioctlsocket (in: s=0x5a8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.035] connect (s=0x5a8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.148"), namelen=16) returned -1 [0223.036] WSAGetLastError () returned 10035 [0223.036] htonl (hostlong=0xc0a80095) returned 0x9500a8c0 [0223.036] socket (af=2, type=1, protocol=6) returned 0x5ac [0223.036] ioctlsocket (in: s=0x5ac, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.036] connect (s=0x5ac, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.149"), namelen=16) returned -1 [0223.037] WSAGetLastError () returned 10035 [0223.037] htonl (hostlong=0xc0a80096) returned 0x9600a8c0 [0223.037] socket (af=2, type=1, protocol=6) returned 0x5b0 [0223.037] ioctlsocket (in: s=0x5b0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.037] connect (s=0x5b0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.150"), namelen=16) returned -1 [0223.038] WSAGetLastError () returned 10035 [0223.038] htonl (hostlong=0xc0a80097) returned 0x9700a8c0 [0223.038] socket (af=2, type=1, protocol=6) returned 0x5b4 [0223.038] ioctlsocket (in: s=0x5b4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.038] connect (s=0x5b4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.151"), namelen=16) returned -1 [0223.039] WSAGetLastError () returned 10035 [0223.039] htonl (hostlong=0xc0a80098) returned 0x9800a8c0 [0223.039] socket (af=2, type=1, protocol=6) returned 0x5b8 [0223.039] ioctlsocket (in: s=0x5b8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.039] connect (s=0x5b8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.152"), namelen=16) returned -1 [0223.040] WSAGetLastError () returned 10035 [0223.040] htonl (hostlong=0xc0a80099) returned 0x9900a8c0 [0223.040] socket (af=2, type=1, protocol=6) returned 0x5bc [0223.040] ioctlsocket (in: s=0x5bc, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.040] connect (s=0x5bc, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.153"), namelen=16) returned -1 [0223.040] WSAGetLastError () returned 10035 [0223.041] htonl (hostlong=0xc0a8009a) returned 0x9a00a8c0 [0223.041] socket (af=2, type=1, protocol=6) returned 0x5c0 [0223.041] ioctlsocket (in: s=0x5c0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.041] connect (s=0x5c0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.154"), namelen=16) returned -1 [0223.041] WSAGetLastError () returned 10035 [0223.041] htonl (hostlong=0xc0a8009b) returned 0x9b00a8c0 [0223.041] socket (af=2, type=1, protocol=6) returned 0x5c4 [0223.042] ioctlsocket (in: s=0x5c4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.042] connect (s=0x5c4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.155"), namelen=16) returned -1 [0223.042] WSAGetLastError () returned 10035 [0223.042] htonl (hostlong=0xc0a8009c) returned 0x9c00a8c0 [0223.042] socket (af=2, type=1, protocol=6) returned 0x5c8 [0223.043] ioctlsocket (in: s=0x5c8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.043] connect (s=0x5c8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.156"), namelen=16) returned -1 [0223.043] WSAGetLastError () returned 10035 [0223.043] htonl (hostlong=0xc0a8009d) returned 0x9d00a8c0 [0223.043] socket (af=2, type=1, protocol=6) returned 0x5cc [0223.043] ioctlsocket (in: s=0x5cc, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.044] connect (s=0x5cc, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.157"), namelen=16) returned -1 [0223.044] WSAGetLastError () returned 10035 [0223.044] htonl (hostlong=0xc0a8009e) returned 0x9e00a8c0 [0223.044] socket (af=2, type=1, protocol=6) returned 0x5d0 [0223.044] ioctlsocket (in: s=0x5d0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.044] connect (s=0x5d0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.158"), namelen=16) returned -1 [0223.045] WSAGetLastError () returned 10035 [0223.045] htonl (hostlong=0xc0a8009f) returned 0x9f00a8c0 [0223.045] socket (af=2, type=1, protocol=6) returned 0x5d4 [0223.045] ioctlsocket (in: s=0x5d4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.045] connect (s=0x5d4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.159"), namelen=16) returned -1 [0223.046] WSAGetLastError () returned 10035 [0223.046] htonl (hostlong=0xc0a800a0) returned 0xa000a8c0 [0223.046] socket (af=2, type=1, protocol=6) returned 0x5d8 [0223.046] ioctlsocket (in: s=0x5d8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.046] connect (s=0x5d8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.160"), namelen=16) returned -1 [0223.047] WSAGetLastError () returned 10035 [0223.047] htonl (hostlong=0xc0a800a1) returned 0xa100a8c0 [0223.047] socket (af=2, type=1, protocol=6) returned 0x5dc [0223.047] ioctlsocket (in: s=0x5dc, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.048] connect (s=0x5dc, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.161"), namelen=16) returned -1 [0223.048] WSAGetLastError () returned 10035 [0223.048] htonl (hostlong=0xc0a800a2) returned 0xa200a8c0 [0223.048] socket (af=2, type=1, protocol=6) returned 0x5e0 [0223.048] ioctlsocket (in: s=0x5e0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.049] connect (s=0x5e0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.162"), namelen=16) returned -1 [0223.049] WSAGetLastError () returned 10035 [0223.049] htonl (hostlong=0xc0a800a3) returned 0xa300a8c0 [0223.049] socket (af=2, type=1, protocol=6) returned 0x5e4 [0223.050] ioctlsocket (in: s=0x5e4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.050] connect (s=0x5e4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.163"), namelen=16) returned -1 [0223.050] WSAGetLastError () returned 10035 [0223.050] htonl (hostlong=0xc0a800a4) returned 0xa400a8c0 [0223.050] socket (af=2, type=1, protocol=6) returned 0x5e8 [0223.050] ioctlsocket (in: s=0x5e8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.050] connect (s=0x5e8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.164"), namelen=16) returned -1 [0223.051] WSAGetLastError () returned 10035 [0223.051] htonl (hostlong=0xc0a800a5) returned 0xa500a8c0 [0223.051] socket (af=2, type=1, protocol=6) returned 0x5ec [0223.051] ioctlsocket (in: s=0x5ec, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.051] connect (s=0x5ec, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.165"), namelen=16) returned -1 [0223.052] WSAGetLastError () returned 10035 [0223.052] htonl (hostlong=0xc0a800a6) returned 0xa600a8c0 [0223.052] socket (af=2, type=1, protocol=6) returned 0x5f0 [0223.052] ioctlsocket (in: s=0x5f0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.052] connect (s=0x5f0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.166"), namelen=16) returned -1 [0223.053] WSAGetLastError () returned 10035 [0223.053] htonl (hostlong=0xc0a800a7) returned 0xa700a8c0 [0223.053] socket (af=2, type=1, protocol=6) returned 0x5f4 [0223.053] ioctlsocket (in: s=0x5f4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.053] connect (s=0x5f4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.167"), namelen=16) returned -1 [0223.054] WSAGetLastError () returned 10035 [0223.054] htonl (hostlong=0xc0a800a8) returned 0xa800a8c0 [0223.054] socket (af=2, type=1, protocol=6) returned 0x5f8 [0223.054] ioctlsocket (in: s=0x5f8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.054] connect (s=0x5f8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.168"), namelen=16) returned -1 [0223.055] WSAGetLastError () returned 10035 [0223.055] htonl (hostlong=0xc0a800a9) returned 0xa900a8c0 [0223.055] socket (af=2, type=1, protocol=6) returned 0x5fc [0223.055] ioctlsocket (in: s=0x5fc, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.055] connect (s=0x5fc, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.169"), namelen=16) returned -1 [0223.056] WSAGetLastError () returned 10035 [0223.056] htonl (hostlong=0xc0a800aa) returned 0xaa00a8c0 [0223.056] socket (af=2, type=1, protocol=6) returned 0x600 [0223.056] ioctlsocket (in: s=0x600, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.056] connect (s=0x600, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.170"), namelen=16) returned -1 [0223.057] WSAGetLastError () returned 10035 [0223.057] htonl (hostlong=0xc0a800ab) returned 0xab00a8c0 [0223.057] socket (af=2, type=1, protocol=6) returned 0x604 [0223.057] ioctlsocket (in: s=0x604, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.057] connect (s=0x604, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.171"), namelen=16) returned -1 [0223.058] WSAGetLastError () returned 10035 [0223.058] htonl (hostlong=0xc0a800ac) returned 0xac00a8c0 [0223.058] socket (af=2, type=1, protocol=6) returned 0x608 [0223.058] ioctlsocket (in: s=0x608, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.058] connect (s=0x608, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.172"), namelen=16) returned -1 [0223.059] WSAGetLastError () returned 10035 [0223.059] htonl (hostlong=0xc0a800ad) returned 0xad00a8c0 [0223.059] socket (af=2, type=1, protocol=6) returned 0x60c [0223.059] ioctlsocket (in: s=0x60c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.059] connect (s=0x60c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.173"), namelen=16) returned -1 [0223.060] WSAGetLastError () returned 10035 [0223.060] htonl (hostlong=0xc0a800ae) returned 0xae00a8c0 [0223.060] socket (af=2, type=1, protocol=6) returned 0x610 [0223.060] ioctlsocket (in: s=0x610, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.060] connect (s=0x610, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.174"), namelen=16) returned -1 [0223.061] WSAGetLastError () returned 10035 [0223.061] htonl (hostlong=0xc0a800af) returned 0xaf00a8c0 [0223.061] socket (af=2, type=1, protocol=6) returned 0x614 [0223.061] ioctlsocket (in: s=0x614, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.061] connect (s=0x614, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.175"), namelen=16) returned -1 [0223.062] WSAGetLastError () returned 10035 [0223.062] htonl (hostlong=0xc0a800b0) returned 0xb000a8c0 [0223.062] socket (af=2, type=1, protocol=6) returned 0x618 [0223.062] ioctlsocket (in: s=0x618, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.062] connect (s=0x618, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.176"), namelen=16) returned -1 [0223.063] WSAGetLastError () returned 10035 [0223.063] htonl (hostlong=0xc0a800b1) returned 0xb100a8c0 [0223.063] socket (af=2, type=1, protocol=6) returned 0x61c [0223.063] ioctlsocket (in: s=0x61c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.063] connect (s=0x61c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.177"), namelen=16) returned -1 [0223.064] WSAGetLastError () returned 10035 [0223.064] htonl (hostlong=0xc0a800b2) returned 0xb200a8c0 [0223.064] socket (af=2, type=1, protocol=6) returned 0x620 [0223.064] ioctlsocket (in: s=0x620, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.064] connect (s=0x620, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.178"), namelen=16) returned -1 [0223.065] WSAGetLastError () returned 10035 [0223.065] htonl (hostlong=0xc0a800b3) returned 0xb300a8c0 [0223.065] socket (af=2, type=1, protocol=6) returned 0x624 [0223.065] ioctlsocket (in: s=0x624, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.065] connect (s=0x624, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.179"), namelen=16) returned -1 [0223.128] WSAGetLastError () returned 10035 [0223.128] htonl (hostlong=0xc0a800b4) returned 0xb400a8c0 [0223.128] socket (af=2, type=1, protocol=6) returned 0x628 [0223.132] ioctlsocket (in: s=0x628, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.141] connect (s=0x628, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.180"), namelen=16) returned -1 [0223.152] WSAGetLastError () returned 10035 [0223.152] htonl (hostlong=0xc0a800b5) returned 0xb500a8c0 [0223.152] socket (af=2, type=1, protocol=6) returned 0x62c [0223.152] ioctlsocket (in: s=0x62c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.152] connect (s=0x62c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.181"), namelen=16) returned -1 [0223.153] WSAGetLastError () returned 10035 [0223.153] htonl (hostlong=0xc0a800b6) returned 0xb600a8c0 [0223.153] socket (af=2, type=1, protocol=6) returned 0x630 [0223.153] ioctlsocket (in: s=0x630, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.153] connect (s=0x630, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.182"), namelen=16) returned -1 [0223.154] WSAGetLastError () returned 10035 [0223.154] htonl (hostlong=0xc0a800b7) returned 0xb700a8c0 [0223.154] socket (af=2, type=1, protocol=6) returned 0x634 [0223.154] ioctlsocket (in: s=0x634, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.154] connect (s=0x634, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.183"), namelen=16) returned -1 [0223.174] WSAGetLastError () returned 10035 [0223.174] htonl (hostlong=0xc0a800b8) returned 0xb800a8c0 [0223.174] socket (af=2, type=1, protocol=6) returned 0x638 [0223.175] ioctlsocket (in: s=0x638, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.175] connect (s=0x638, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.184"), namelen=16) returned -1 [0223.176] WSAGetLastError () returned 10035 [0223.176] htonl (hostlong=0xc0a800b9) returned 0xb900a8c0 [0223.177] socket (af=2, type=1, protocol=6) returned 0x63c [0223.196] ioctlsocket (in: s=0x63c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.196] connect (s=0x63c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.185"), namelen=16) returned -1 [0223.201] WSAGetLastError () returned 10035 [0223.207] htonl (hostlong=0xc0a800ba) returned 0xba00a8c0 [0223.207] socket (af=2, type=1, protocol=6) returned 0x640 [0223.208] ioctlsocket (in: s=0x640, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.211] connect (s=0x640, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.186"), namelen=16) returned -1 [0223.234] WSAGetLastError () returned 10035 [0223.234] htonl (hostlong=0xc0a800bb) returned 0xbb00a8c0 [0223.234] socket (af=2, type=1, protocol=6) returned 0x644 [0223.237] ioctlsocket (in: s=0x644, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.237] connect (s=0x644, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.187"), namelen=16) returned -1 [0223.239] WSAGetLastError () returned 10035 [0223.239] htonl (hostlong=0xc0a800bc) returned 0xbc00a8c0 [0223.239] socket (af=2, type=1, protocol=6) returned 0x648 [0223.247] ioctlsocket (in: s=0x648, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.247] connect (s=0x648, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.188"), namelen=16) returned -1 [0223.251] WSAGetLastError () returned 10035 [0223.252] htonl (hostlong=0xc0a800bd) returned 0xbd00a8c0 [0223.258] socket (af=2, type=1, protocol=6) returned 0x64c [0223.259] ioctlsocket (in: s=0x64c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.259] connect (s=0x64c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.189"), namelen=16) returned -1 [0223.264] WSAGetLastError () returned 10035 [0223.264] htonl (hostlong=0xc0a800be) returned 0xbe00a8c0 [0223.264] socket (af=2, type=1, protocol=6) returned 0x650 [0223.275] ioctlsocket (in: s=0x650, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.275] connect (s=0x650, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.190"), namelen=16) returned -1 [0223.277] WSAGetLastError () returned 10035 [0223.290] htonl (hostlong=0xc0a800bf) returned 0xbf00a8c0 [0223.291] socket (af=2, type=1, protocol=6) returned 0x654 [0223.472] ioctlsocket (in: s=0x654, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.481] connect (s=0x654, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.191"), namelen=16) returned -1 [0223.486] WSAGetLastError () returned 10035 [0223.486] htonl (hostlong=0xc0a800c0) returned 0xc000a8c0 [0223.493] socket (af=2, type=1, protocol=6) returned 0x658 [0223.496] ioctlsocket (in: s=0x658, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.497] connect (s=0x658, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.192"), namelen=16) returned -1 [0223.505] WSAGetLastError () returned 10035 [0223.505] htonl (hostlong=0xc0a800c1) returned 0xc100a8c0 [0223.505] socket (af=2, type=1, protocol=6) returned 0x65c [0223.509] ioctlsocket (in: s=0x65c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.509] connect (s=0x65c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.193"), namelen=16) returned -1 [0223.528] WSAGetLastError () returned 10035 [0223.528] htonl (hostlong=0xc0a800c2) returned 0xc200a8c0 [0223.528] socket (af=2, type=1, protocol=6) returned 0x660 [0223.529] ioctlsocket (in: s=0x660, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.535] connect (s=0x660, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.194"), namelen=16) returned -1 [0223.542] WSAGetLastError () returned 10035 [0223.559] htonl (hostlong=0xc0a800c3) returned 0xc300a8c0 [0223.559] socket (af=2, type=1, protocol=6) returned 0x664 [0223.562] ioctlsocket (in: s=0x664, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.562] connect (s=0x664, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.195"), namelen=16) returned -1 [0223.564] WSAGetLastError () returned 10035 [0223.564] htonl (hostlong=0xc0a800c4) returned 0xc400a8c0 [0223.571] socket (af=2, type=1, protocol=6) returned 0x668 [0223.574] ioctlsocket (in: s=0x668, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.574] connect (s=0x668, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.196"), namelen=16) returned -1 [0223.576] WSAGetLastError () returned 10035 [0223.585] htonl (hostlong=0xc0a800c5) returned 0xc500a8c0 [0223.585] socket (af=2, type=1, protocol=6) returned 0x66c [0223.586] ioctlsocket (in: s=0x66c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.586] connect (s=0x66c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.197"), namelen=16) returned -1 [0223.598] WSAGetLastError () returned 10035 [0223.604] htonl (hostlong=0xc0a800c6) returned 0xc600a8c0 [0223.604] socket (af=2, type=1, protocol=6) returned 0x670 [0223.604] ioctlsocket (in: s=0x670, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.604] connect (s=0x670, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.198"), namelen=16) returned -1 [0223.610] WSAGetLastError () returned 10035 [0223.610] htonl (hostlong=0xc0a800c7) returned 0xc700a8c0 [0223.610] socket (af=2, type=1, protocol=6) returned 0x674 [0223.610] ioctlsocket (in: s=0x674, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.610] connect (s=0x674, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.199"), namelen=16) returned -1 [0223.618] WSAGetLastError () returned 10035 [0223.618] htonl (hostlong=0xc0a800c8) returned 0xc800a8c0 [0223.618] socket (af=2, type=1, protocol=6) returned 0x678 [0223.623] ioctlsocket (in: s=0x678, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.623] connect (s=0x678, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.200"), namelen=16) returned -1 [0223.636] WSAGetLastError () returned 10035 [0223.636] htonl (hostlong=0xc0a800c9) returned 0xc900a8c0 [0223.636] socket (af=2, type=1, protocol=6) returned 0x67c [0223.637] ioctlsocket (in: s=0x67c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.637] connect (s=0x67c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.201"), namelen=16) returned -1 [0223.640] WSAGetLastError () returned 10035 [0223.646] htonl (hostlong=0xc0a800ca) returned 0xca00a8c0 [0223.646] socket (af=2, type=1, protocol=6) returned 0x680 [0223.646] ioctlsocket (in: s=0x680, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.650] connect (s=0x680, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.202"), namelen=16) returned -1 [0223.651] WSAGetLastError () returned 10035 [0223.652] htonl (hostlong=0xc0a800cb) returned 0xcb00a8c0 [0223.658] socket (af=2, type=1, protocol=6) returned 0x684 [0223.659] ioctlsocket (in: s=0x684, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.659] connect (s=0x684, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.203"), namelen=16) returned -1 [0223.664] WSAGetLastError () returned 10035 [0223.664] htonl (hostlong=0xc0a800cc) returned 0xcc00a8c0 [0223.664] socket (af=2, type=1, protocol=6) returned 0x688 [0223.664] ioctlsocket (in: s=0x688, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0223.665] connect (s=0x688, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.204"), namelen=16) returned -1 [0223.690] WSAGetLastError () returned 10035 [0223.691] htonl (hostlong=0xc0a800cd) returned 0xcd00a8c0 [0223.691] socket (af=2, type=1, protocol=6) returned 0x68c [0224.042] ioctlsocket (in: s=0x68c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0224.042] connect (s=0x68c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.205"), namelen=16) returned -1 [0224.043] WSAGetLastError () returned 10035 [0224.043] htonl (hostlong=0xc0a800ce) returned 0xce00a8c0 [0224.043] socket (af=2, type=1, protocol=6) returned 0x690 [0224.043] ioctlsocket (in: s=0x690, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0224.043] connect (s=0x690, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.206"), namelen=16) returned -1 [0224.044] WSAGetLastError () returned 10035 [0224.044] htonl (hostlong=0xc0a800cf) returned 0xcf00a8c0 [0224.044] socket (af=2, type=1, protocol=6) returned 0x694 [0224.044] ioctlsocket (in: s=0x694, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0224.044] connect (s=0x694, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.207"), namelen=16) returned -1 [0224.045] WSAGetLastError () returned 10035 [0224.045] htonl (hostlong=0xc0a800d0) returned 0xd000a8c0 [0224.045] socket (af=2, type=1, protocol=6) returned 0x698 [0224.045] ioctlsocket (in: s=0x698, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0224.045] connect (s=0x698, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.208"), namelen=16) returned -1 [0224.046] WSAGetLastError () returned 10035 [0224.046] htonl (hostlong=0xc0a800d1) returned 0xd100a8c0 [0224.046] socket (af=2, type=1, protocol=6) returned 0x69c [0224.046] ioctlsocket (in: s=0x69c, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0224.046] connect (s=0x69c, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.209"), namelen=16) returned -1 [0224.047] WSAGetLastError () returned 10035 [0224.047] htonl (hostlong=0xc0a800d2) returned 0xd200a8c0 [0224.047] socket (af=2, type=1, protocol=6) returned 0x6a0 [0224.047] ioctlsocket (in: s=0x6a0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0224.047] connect (s=0x6a0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.210"), namelen=16) returned -1 [0224.048] WSAGetLastError () returned 10035 [0224.048] htonl (hostlong=0xc0a800d3) returned 0xd300a8c0 [0224.048] socket (af=2, type=1, protocol=6) returned 0x6a4 [0224.048] ioctlsocket (in: s=0x6a4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0224.048] connect (s=0x6a4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.211"), namelen=16) returned -1 [0224.049] WSAGetLastError () returned 10035 [0224.049] htonl (hostlong=0xc0a800d4) returned 0xd400a8c0 [0224.049] socket (af=2, type=1, protocol=6) returned 0x6a8 [0224.049] ioctlsocket (in: s=0x6a8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0224.049] connect (s=0x6a8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.212"), namelen=16) returned -1 [0224.050] WSAGetLastError () returned 10035 [0224.050] htonl (hostlong=0xc0a800d5) returned 0xd500a8c0 [0224.050] socket (af=2, type=1, protocol=6) returned 0x6ac [0224.050] ioctlsocket (in: s=0x6ac, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0224.050] connect (s=0x6ac, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.213"), namelen=16) returned -1 [0224.051] WSAGetLastError () returned 10035 [0224.051] htonl (hostlong=0xc0a800d6) returned 0xd600a8c0 [0224.051] socket (af=2, type=1, protocol=6) returned 0x6b0 [0224.051] ioctlsocket (in: s=0x6b0, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0224.051] connect (s=0x6b0, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.214"), namelen=16) returned -1 [0224.052] WSAGetLastError () returned 10035 [0224.052] htonl (hostlong=0xc0a800d7) returned 0xd700a8c0 [0224.052] socket (af=2, type=1, protocol=6) returned 0x6b4 [0224.052] ioctlsocket (in: s=0x6b4, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0224.052] connect (s=0x6b4, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.215"), namelen=16) returned -1 [0224.053] WSAGetLastError () returned 10035 [0224.053] htonl (hostlong=0xc0a800d8) returned 0xd800a8c0 [0224.053] socket (af=2, type=1, protocol=6) returned 0x6b8 [0224.053] ioctlsocket (in: s=0x6b8, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0224.053] connect (s=0x6b8, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.216"), namelen=16) returned -1 [0224.054] WSAGetLastError () returned 10035 [0224.054] htonl (hostlong=0xc0a800d9) returned 0xd900a8c0 [0224.054] socket (af=2, type=1, protocol=6) returned 0x6bc [0224.054] ioctlsocket (in: s=0x6bc, cmd=-2147195266, argp=0x261f808 | out: argp=0x261f808) returned 0 [0224.054] connect (s=0x6bc, name=0x261f7f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.217"), namelen=16) returned -1 [0224.055] WSAGetLastError () returned 10035 [0224.055] GetTickCount () returned 0x114f946 [0224.055] GetTickCount () returned 0x114f946 [0224.055] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.055] GetTickCount () returned 0x114f946 [0224.055] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.055] GetTickCount () returned 0x114f946 [0224.055] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.055] GetTickCount () returned 0x114f946 [0224.055] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.056] GetTickCount () returned 0x114f946 [0224.056] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.056] GetTickCount () returned 0x114f946 [0224.056] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.056] GetTickCount () returned 0x114f946 [0224.056] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.056] GetTickCount () returned 0x114f946 [0224.056] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.056] GetTickCount () returned 0x114f946 [0224.056] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.056] GetTickCount () returned 0x114f946 [0224.056] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.056] GetTickCount () returned 0x114f946 [0224.056] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.056] GetTickCount () returned 0x114f946 [0224.056] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.056] GetTickCount () returned 0x114f946 [0224.056] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.056] GetTickCount () returned 0x114f946 [0224.056] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.056] GetTickCount () returned 0x114f946 [0224.056] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.056] GetTickCount () returned 0x114f946 [0224.056] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.056] GetTickCount () returned 0x114f946 [0224.056] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.056] GetTickCount () returned 0x114f946 [0224.056] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.056] GetTickCount () returned 0x114f946 [0224.056] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.056] GetTickCount () returned 0x114f946 [0224.056] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.056] GetTickCount () returned 0x114f946 [0224.056] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.056] GetTickCount () returned 0x114f946 [0224.057] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.057] GetTickCount () returned 0x114f946 [0224.057] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.057] GetTickCount () returned 0x114f946 [0224.057] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.057] GetTickCount () returned 0x114f946 [0224.057] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.057] GetTickCount () returned 0x114f946 [0224.057] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.057] GetTickCount () returned 0x114f946 [0224.057] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.057] GetTickCount () returned 0x114f946 [0224.057] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.057] GetTickCount () returned 0x114f946 [0224.057] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.057] GetTickCount () returned 0x114f946 [0224.057] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.057] GetTickCount () returned 0x114f946 [0224.057] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.057] GetTickCount () returned 0x114f946 [0224.057] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.057] GetTickCount () returned 0x114f946 [0224.057] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.057] GetTickCount () returned 0x114f946 [0224.057] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.057] GetTickCount () returned 0x114f946 [0224.057] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.057] GetTickCount () returned 0x114f946 [0224.057] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.057] GetTickCount () returned 0x114f946 [0224.057] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.057] GetTickCount () returned 0x114f946 [0224.057] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.057] GetTickCount () returned 0x114f946 [0224.057] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.057] GetTickCount () returned 0x114f946 [0224.057] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.057] GetTickCount () returned 0x114f946 [0224.057] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.057] GetTickCount () returned 0x114f946 [0224.058] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.058] GetTickCount () returned 0x114f946 [0224.058] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.058] GetTickCount () returned 0x114f946 [0224.058] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.058] GetTickCount () returned 0x114f946 [0224.058] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.058] GetTickCount () returned 0x114f946 [0224.058] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.058] GetTickCount () returned 0x114f946 [0224.058] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.058] GetTickCount () returned 0x114f946 [0224.058] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.058] GetTickCount () returned 0x114f946 [0224.058] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.058] GetTickCount () returned 0x114f946 [0224.058] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.058] GetTickCount () returned 0x114f946 [0224.058] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.058] GetTickCount () returned 0x114f946 [0224.058] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.058] GetTickCount () returned 0x114f946 [0224.058] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.058] GetTickCount () returned 0x114f946 [0224.058] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.058] GetTickCount () returned 0x114f946 [0224.058] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.058] GetTickCount () returned 0x114f946 [0224.058] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.058] GetTickCount () returned 0x114f946 [0224.058] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.058] GetTickCount () returned 0x114f946 [0224.058] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.058] GetTickCount () returned 0x114f946 [0224.058] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.058] GetTickCount () returned 0x114f946 [0224.058] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.058] GetTickCount () returned 0x114f946 [0224.058] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.058] GetTickCount () returned 0x114f946 [0224.058] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.058] GetTickCount () returned 0x114f946 [0224.059] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.059] GetTickCount () returned 0x114f946 [0224.059] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.059] GetTickCount () returned 0x114f946 [0224.059] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.059] GetTickCount () returned 0x114f946 [0224.059] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.059] GetTickCount () returned 0x114f946 [0224.059] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.059] GetTickCount () returned 0x114f946 [0224.059] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.059] GetTickCount () returned 0x114f946 [0224.059] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.059] GetTickCount () returned 0x114f946 [0224.059] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.059] GetTickCount () returned 0x114f946 [0224.059] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.059] GetTickCount () returned 0x114f946 [0224.059] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.059] GetTickCount () returned 0x114f946 [0224.059] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.059] GetTickCount () returned 0x114f946 [0224.059] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.059] GetTickCount () returned 0x114f946 [0224.059] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.059] GetTickCount () returned 0x114f946 [0224.059] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.059] GetTickCount () returned 0x114f946 [0224.059] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.059] GetTickCount () returned 0x114f946 [0224.059] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.059] GetTickCount () returned 0x114f946 [0224.059] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.059] GetTickCount () returned 0x114f946 [0224.059] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.059] GetTickCount () returned 0x114f946 [0224.059] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.059] GetTickCount () returned 0x114f946 [0224.059] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.059] GetTickCount () returned 0x114f946 [0224.059] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.060] GetTickCount () returned 0x114f946 [0224.060] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.060] GetTickCount () returned 0x114f946 [0224.060] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.060] GetTickCount () returned 0x114f946 [0224.060] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.060] GetTickCount () returned 0x114f946 [0224.060] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.060] GetTickCount () returned 0x114f946 [0224.060] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.060] GetTickCount () returned 0x114f946 [0224.060] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.060] GetTickCount () returned 0x114f946 [0224.060] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.060] GetTickCount () returned 0x114f946 [0224.060] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.060] GetTickCount () returned 0x114f946 [0224.060] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.060] GetTickCount () returned 0x114f946 [0224.060] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.060] GetTickCount () returned 0x114f946 [0224.060] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.060] GetTickCount () returned 0x114f946 [0224.060] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.060] GetTickCount () returned 0x114f946 [0224.060] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.060] GetTickCount () returned 0x114f946 [0224.060] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.060] GetTickCount () returned 0x114f946 [0224.060] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.060] GetTickCount () returned 0x114f946 [0224.060] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.060] GetTickCount () returned 0x114f946 [0224.060] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.060] GetTickCount () returned 0x114f946 [0224.060] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.060] GetTickCount () returned 0x114f946 [0224.060] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.060] GetTickCount () returned 0x114f946 [0224.060] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.060] GetTickCount () returned 0x114f946 [0224.061] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.061] GetTickCount () returned 0x114f946 [0224.061] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.061] GetTickCount () returned 0x114f946 [0224.061] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.061] GetTickCount () returned 0x114f946 [0224.061] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.061] GetTickCount () returned 0x114f946 [0224.061] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.061] GetTickCount () returned 0x114f946 [0224.061] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.061] GetTickCount () returned 0x114f946 [0224.061] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.061] GetTickCount () returned 0x114f946 [0224.061] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.061] GetTickCount () returned 0x114f946 [0224.061] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.061] GetTickCount () returned 0x114f946 [0224.061] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.061] GetTickCount () returned 0x114f946 [0224.061] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.061] GetTickCount () returned 0x114f946 [0224.061] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.061] GetTickCount () returned 0x114f946 [0224.061] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.061] GetTickCount () returned 0x114f946 [0224.061] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.061] GetTickCount () returned 0x114f946 [0224.061] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.061] GetTickCount () returned 0x114f946 [0224.061] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.061] GetTickCount () returned 0x114f946 [0224.061] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.061] GetTickCount () returned 0x114f946 [0224.061] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.061] GetTickCount () returned 0x114f946 [0224.061] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.061] GetTickCount () returned 0x114f946 [0224.061] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.062] GetTickCount () returned 0x114f946 [0224.062] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.062] GetTickCount () returned 0x114f946 [0224.062] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.062] GetTickCount () returned 0x114f946 [0224.062] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.062] GetTickCount () returned 0x114f946 [0224.062] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.062] GetTickCount () returned 0x114f946 [0224.062] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.062] GetTickCount () returned 0x114f946 [0224.062] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.062] GetTickCount () returned 0x114f946 [0224.062] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.062] GetTickCount () returned 0x114f946 [0224.062] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.062] GetTickCount () returned 0x114f946 [0224.062] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.062] GetTickCount () returned 0x114f946 [0224.062] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.062] GetTickCount () returned 0x114f946 [0224.062] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.062] GetTickCount () returned 0x114f946 [0224.062] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.062] GetTickCount () returned 0x114f946 [0224.062] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.062] GetTickCount () returned 0x114f946 [0224.062] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.062] GetTickCount () returned 0x114f946 [0224.062] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.062] GetTickCount () returned 0x114f946 [0224.062] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.062] GetTickCount () returned 0x114f946 [0224.062] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.062] GetTickCount () returned 0x114f946 [0224.062] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.062] GetTickCount () returned 0x114f946 [0224.062] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.062] GetTickCount () returned 0x114f946 [0224.062] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.062] GetTickCount () returned 0x114f946 [0224.063] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.063] GetTickCount () returned 0x114f946 [0224.063] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.063] GetTickCount () returned 0x114f955 [0224.063] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.064] GetTickCount () returned 0x114f955 [0224.069] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.069] GetTickCount () returned 0x114f955 [0224.069] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.069] GetTickCount () returned 0x114f955 [0224.069] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.069] GetTickCount () returned 0x114f955 [0224.069] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.069] GetTickCount () returned 0x114f955 [0224.069] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.069] GetTickCount () returned 0x114f955 [0224.069] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.069] GetTickCount () returned 0x114f955 [0224.069] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.069] GetTickCount () returned 0x114f955 [0224.069] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.069] GetTickCount () returned 0x114f955 [0224.069] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.069] GetTickCount () returned 0x114f955 [0224.069] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.069] GetTickCount () returned 0x114f955 [0224.069] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.069] GetTickCount () returned 0x114f955 [0224.069] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.069] GetTickCount () returned 0x114f955 [0224.069] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.069] GetTickCount () returned 0x114f955 [0224.069] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.069] GetTickCount () returned 0x114f955 [0224.069] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.069] GetTickCount () returned 0x114f955 [0224.069] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.069] GetTickCount () returned 0x114f955 [0224.069] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.069] GetTickCount () returned 0x114f955 [0224.069] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.069] GetTickCount () returned 0x114f955 [0224.069] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.069] GetTickCount () returned 0x114f955 [0224.070] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.070] GetTickCount () returned 0x114f955 [0224.070] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.070] GetTickCount () returned 0x114f955 [0224.070] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.070] GetTickCount () returned 0x114f955 [0224.070] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.070] GetTickCount () returned 0x114f955 [0224.070] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.070] GetTickCount () returned 0x114f955 [0224.070] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.070] GetTickCount () returned 0x114f955 [0224.070] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.070] GetTickCount () returned 0x114f955 [0224.070] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.070] GetTickCount () returned 0x114f955 [0224.070] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.070] GetTickCount () returned 0x114f955 [0224.070] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.070] GetTickCount () returned 0x114f955 [0224.070] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.070] GetTickCount () returned 0x114f955 [0224.070] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.070] GetTickCount () returned 0x114f955 [0224.070] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.070] GetTickCount () returned 0x114f955 [0224.070] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.070] GetTickCount () returned 0x114f955 [0224.070] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.070] GetTickCount () returned 0x114f955 [0224.070] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.070] GetTickCount () returned 0x114f955 [0224.070] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.070] GetTickCount () returned 0x114f955 [0224.070] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.070] GetTickCount () returned 0x114f955 [0224.070] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.070] GetTickCount () returned 0x114f955 [0224.070] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.070] GetTickCount () returned 0x114f955 [0224.070] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.071] GetTickCount () returned 0x114f955 [0224.071] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.071] GetTickCount () returned 0x114f955 [0224.071] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.071] GetTickCount () returned 0x114f955 [0224.071] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.071] GetTickCount () returned 0x114f955 [0224.071] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.071] GetTickCount () returned 0x114f955 [0224.071] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.071] GetTickCount () returned 0x114f955 [0224.071] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.071] GetTickCount () returned 0x114f955 [0224.071] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.071] GetTickCount () returned 0x114f955 [0224.071] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.071] GetTickCount () returned 0x114f955 [0224.071] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.071] GetTickCount () returned 0x114f955 [0224.071] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.071] GetTickCount () returned 0x114f955 [0224.071] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.071] GetTickCount () returned 0x114f955 [0224.071] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.071] GetTickCount () returned 0x114f955 [0224.071] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.071] GetTickCount () returned 0x114f955 [0224.071] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.071] GetTickCount () returned 0x114f955 [0224.071] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.071] GetTickCount () returned 0x114f955 [0224.071] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.071] GetTickCount () returned 0x114f955 [0224.071] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.071] GetTickCount () returned 0x114f955 [0224.071] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.071] GetTickCount () returned 0x114f955 [0224.071] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.071] GetTickCount () returned 0x114f955 [0224.071] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.072] GetTickCount () returned 0x114f955 [0224.072] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.072] GetTickCount () returned 0x114f955 [0224.072] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.072] GetTickCount () returned 0x114f955 [0224.072] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.072] GetTickCount () returned 0x114f955 [0224.072] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.072] GetTickCount () returned 0x114f955 [0224.072] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.072] GetTickCount () returned 0x114f955 [0224.072] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.072] GetTickCount () returned 0x114f955 [0224.072] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.072] GetTickCount () returned 0x114f955 [0224.072] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.072] GetTickCount () returned 0x114f955 [0224.072] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.072] GetTickCount () returned 0x114f955 [0224.072] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.072] GetTickCount () returned 0x114f955 [0224.072] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.072] GetTickCount () returned 0x114f955 [0224.072] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.072] GetTickCount () returned 0x114f955 [0224.072] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.072] GetTickCount () returned 0x114f955 [0224.072] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.072] GetTickCount () returned 0x114f955 [0224.072] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.072] GetTickCount () returned 0x114f955 [0224.072] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.072] GetTickCount () returned 0x114f955 [0224.072] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.072] GetTickCount () returned 0x114f955 [0224.072] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.072] GetTickCount () returned 0x114f955 [0224.072] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.072] GetTickCount () returned 0x114f955 [0224.072] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.072] GetTickCount () returned 0x114f955 [0224.073] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.073] GetTickCount () returned 0x114f955 [0224.073] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.073] GetTickCount () returned 0x114f955 [0224.073] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.073] GetTickCount () returned 0x114f955 [0224.073] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.073] GetTickCount () returned 0x114f955 [0224.073] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.073] GetTickCount () returned 0x114f955 [0224.073] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.073] GetTickCount () returned 0x114f955 [0224.073] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.073] GetTickCount () returned 0x114f955 [0224.073] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.073] GetTickCount () returned 0x114f955 [0224.073] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.073] GetTickCount () returned 0x114f955 [0224.073] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.073] GetTickCount () returned 0x114f955 [0224.073] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.073] GetTickCount () returned 0x114f955 [0224.073] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.073] GetTickCount () returned 0x114f955 [0224.073] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.073] GetTickCount () returned 0x114f955 [0224.073] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.073] GetTickCount () returned 0x114f955 [0224.073] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.073] GetTickCount () returned 0x114f955 [0224.073] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.073] GetTickCount () returned 0x114f955 [0224.073] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.073] GetTickCount () returned 0x114f955 [0224.073] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.073] GetTickCount () returned 0x114f955 [0224.073] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.073] GetTickCount () returned 0x114f955 [0224.073] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.073] GetTickCount () returned 0x114f955 [0224.074] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.074] GetTickCount () returned 0x114f955 [0224.074] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.074] GetTickCount () returned 0x114f955 [0224.074] select (in: nfds=0, readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0, timeout=0x261f7b0 | out: readfds=0x261f6a8, writefds=0x0, exceptfds=0x261f5a0) returned -1 [0224.074] GetTickCount () returned 0x114f955 [0224.074] getsockopt (in: s=0x6bc, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.074] recv (in: s=0x6bc, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.075] WSAGetLastError () returned 10057 [0224.075] closesocket (s=0x6bc) returned 0 [0224.075] getsockopt (in: s=0x6b8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.075] recv (in: s=0x6b8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.075] WSAGetLastError () returned 10057 [0224.075] closesocket (s=0x6b8) returned 0 [0224.076] getsockopt (in: s=0x6b4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.076] recv (in: s=0x6b4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.076] WSAGetLastError () returned 10057 [0224.076] closesocket (s=0x6b4) returned 0 [0224.076] getsockopt (in: s=0x6b0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.076] recv (in: s=0x6b0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.076] WSAGetLastError () returned 10057 [0224.076] closesocket (s=0x6b0) returned 0 [0224.076] getsockopt (in: s=0x6ac, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.076] recv (in: s=0x6ac, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.076] WSAGetLastError () returned 10057 [0224.076] closesocket (s=0x6ac) returned 0 [0224.077] getsockopt (in: s=0x6a8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.077] recv (in: s=0x6a8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.077] WSAGetLastError () returned 10057 [0224.077] closesocket (s=0x6a8) returned 0 [0224.077] getsockopt (in: s=0x6a4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.077] recv (in: s=0x6a4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.077] WSAGetLastError () returned 10057 [0224.077] closesocket (s=0x6a4) returned 0 [0224.077] getsockopt (in: s=0x6a0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.077] recv (in: s=0x6a0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.077] WSAGetLastError () returned 10057 [0224.078] closesocket (s=0x6a0) returned 0 [0224.078] getsockopt (in: s=0x69c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.078] recv (in: s=0x69c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.078] WSAGetLastError () returned 10057 [0224.078] closesocket (s=0x69c) returned 0 [0224.078] getsockopt (in: s=0x698, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.078] recv (in: s=0x698, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.078] WSAGetLastError () returned 10057 [0224.078] closesocket (s=0x698) returned 0 [0224.079] getsockopt (in: s=0x694, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.079] recv (in: s=0x694, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.079] WSAGetLastError () returned 10057 [0224.079] closesocket (s=0x694) returned 0 [0224.079] getsockopt (in: s=0x690, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.079] recv (in: s=0x690, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.079] WSAGetLastError () returned 10057 [0224.079] closesocket (s=0x690) returned 0 [0224.079] getsockopt (in: s=0x68c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.079] recv (in: s=0x68c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.079] WSAGetLastError () returned 10057 [0224.080] closesocket (s=0x68c) returned 0 [0224.080] getsockopt (in: s=0x688, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.080] recv (in: s=0x688, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.080] WSAGetLastError () returned 10057 [0224.080] closesocket (s=0x688) returned 0 [0224.080] getsockopt (in: s=0x684, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.080] recv (in: s=0x684, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.080] WSAGetLastError () returned 10057 [0224.080] closesocket (s=0x684) returned 0 [0224.080] getsockopt (in: s=0x680, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.080] recv (in: s=0x680, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.081] WSAGetLastError () returned 10057 [0224.081] closesocket (s=0x680) returned 0 [0224.081] getsockopt (in: s=0x67c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.081] recv (in: s=0x67c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.081] WSAGetLastError () returned 10057 [0224.081] closesocket (s=0x67c) returned 0 [0224.081] getsockopt (in: s=0x678, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.081] recv (in: s=0x678, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.081] WSAGetLastError () returned 10057 [0224.081] closesocket (s=0x678) returned 0 [0224.082] getsockopt (in: s=0x674, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.082] recv (in: s=0x674, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.082] WSAGetLastError () returned 10057 [0224.082] closesocket (s=0x674) returned 0 [0224.082] getsockopt (in: s=0x670, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.082] recv (in: s=0x670, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.082] WSAGetLastError () returned 10057 [0224.082] closesocket (s=0x670) returned 0 [0224.082] getsockopt (in: s=0x66c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.082] recv (in: s=0x66c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.082] WSAGetLastError () returned 10057 [0224.082] closesocket (s=0x66c) returned 0 [0224.083] getsockopt (in: s=0x668, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.083] recv (in: s=0x668, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.083] WSAGetLastError () returned 10057 [0224.083] closesocket (s=0x668) returned 0 [0224.083] getsockopt (in: s=0x664, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.083] recv (in: s=0x664, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.083] WSAGetLastError () returned 10057 [0224.083] closesocket (s=0x664) returned 0 [0224.083] getsockopt (in: s=0x660, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.083] recv (in: s=0x660, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.083] WSAGetLastError () returned 10057 [0224.083] closesocket (s=0x660) returned 0 [0224.084] getsockopt (in: s=0x65c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.084] recv (in: s=0x65c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.084] WSAGetLastError () returned 10057 [0224.084] closesocket (s=0x65c) returned 0 [0224.084] getsockopt (in: s=0x658, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.084] recv (in: s=0x658, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.084] WSAGetLastError () returned 10057 [0224.084] closesocket (s=0x658) returned 0 [0224.084] getsockopt (in: s=0x654, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.084] recv (in: s=0x654, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.084] WSAGetLastError () returned 10057 [0224.084] closesocket (s=0x654) returned 0 [0224.085] getsockopt (in: s=0x650, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.085] recv (in: s=0x650, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.085] WSAGetLastError () returned 10057 [0224.085] closesocket (s=0x650) returned 0 [0224.085] getsockopt (in: s=0x64c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.085] recv (in: s=0x64c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.085] WSAGetLastError () returned 10057 [0224.085] closesocket (s=0x64c) returned 0 [0224.085] getsockopt (in: s=0x648, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.085] recv (in: s=0x648, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.085] WSAGetLastError () returned 10057 [0224.085] closesocket (s=0x648) returned 0 [0224.086] getsockopt (in: s=0x644, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.086] recv (in: s=0x644, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.086] WSAGetLastError () returned 10057 [0224.086] closesocket (s=0x644) returned 0 [0224.086] getsockopt (in: s=0x640, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.086] recv (in: s=0x640, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.086] WSAGetLastError () returned 10057 [0224.086] closesocket (s=0x640) returned 0 [0224.141] getsockopt (in: s=0x63c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.141] recv (in: s=0x63c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.141] WSAGetLastError () returned 10057 [0224.141] closesocket (s=0x63c) returned 0 [0224.141] getsockopt (in: s=0x638, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.141] recv (in: s=0x638, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.141] WSAGetLastError () returned 10057 [0224.141] closesocket (s=0x638) returned 0 [0224.142] getsockopt (in: s=0x634, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.142] recv (in: s=0x634, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.142] WSAGetLastError () returned 10057 [0224.142] closesocket (s=0x634) returned 0 [0224.142] getsockopt (in: s=0x630, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.142] recv (in: s=0x630, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.142] WSAGetLastError () returned 10057 [0224.142] closesocket (s=0x630) returned 0 [0224.142] getsockopt (in: s=0x62c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.142] recv (in: s=0x62c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.142] WSAGetLastError () returned 10057 [0224.142] closesocket (s=0x62c) returned 0 [0224.143] getsockopt (in: s=0x628, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.143] recv (in: s=0x628, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.143] WSAGetLastError () returned 10057 [0224.143] closesocket (s=0x628) returned 0 [0224.143] getsockopt (in: s=0x624, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.143] recv (in: s=0x624, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.143] WSAGetLastError () returned 10057 [0224.143] closesocket (s=0x624) returned 0 [0224.143] getsockopt (in: s=0x620, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.143] recv (in: s=0x620, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.143] WSAGetLastError () returned 10057 [0224.143] closesocket (s=0x620) returned 0 [0224.144] getsockopt (in: s=0x61c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.144] recv (in: s=0x61c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.144] WSAGetLastError () returned 10057 [0224.144] closesocket (s=0x61c) returned 0 [0224.144] getsockopt (in: s=0x618, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.144] recv (in: s=0x618, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.144] WSAGetLastError () returned 10057 [0224.144] closesocket (s=0x618) returned 0 [0224.144] getsockopt (in: s=0x614, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.144] recv (in: s=0x614, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.144] WSAGetLastError () returned 10057 [0224.144] closesocket (s=0x614) returned 0 [0224.145] getsockopt (in: s=0x610, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.145] recv (in: s=0x610, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.145] WSAGetLastError () returned 10057 [0224.145] closesocket (s=0x610) returned 0 [0224.145] getsockopt (in: s=0x60c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.145] recv (in: s=0x60c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.145] WSAGetLastError () returned 10057 [0224.145] closesocket (s=0x60c) returned 0 [0224.145] getsockopt (in: s=0x608, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.145] recv (in: s=0x608, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.145] WSAGetLastError () returned 10057 [0224.145] closesocket (s=0x608) returned 0 [0224.146] getsockopt (in: s=0x604, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.146] recv (in: s=0x604, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.146] WSAGetLastError () returned 10057 [0224.146] closesocket (s=0x604) returned 0 [0224.146] getsockopt (in: s=0x600, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.146] recv (in: s=0x600, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.146] WSAGetLastError () returned 10057 [0224.146] closesocket (s=0x600) returned 0 [0224.147] getsockopt (in: s=0x5fc, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.147] recv (in: s=0x5fc, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.147] WSAGetLastError () returned 10057 [0224.147] closesocket (s=0x5fc) returned 0 [0224.147] getsockopt (in: s=0x5f8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.147] recv (in: s=0x5f8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.147] WSAGetLastError () returned 10057 [0224.147] closesocket (s=0x5f8) returned 0 [0224.147] getsockopt (in: s=0x5f4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.147] recv (in: s=0x5f4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.147] WSAGetLastError () returned 10057 [0224.147] closesocket (s=0x5f4) returned 0 [0224.148] getsockopt (in: s=0x5f0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.148] recv (in: s=0x5f0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.148] WSAGetLastError () returned 10057 [0224.148] closesocket (s=0x5f0) returned 0 [0224.148] getsockopt (in: s=0x5ec, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.148] recv (in: s=0x5ec, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.148] WSAGetLastError () returned 10057 [0224.148] closesocket (s=0x5ec) returned 0 [0224.148] getsockopt (in: s=0x5e8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.148] recv (in: s=0x5e8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.148] WSAGetLastError () returned 10057 [0224.148] closesocket (s=0x5e8) returned 0 [0224.149] getsockopt (in: s=0x5e4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.149] recv (in: s=0x5e4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.149] WSAGetLastError () returned 10057 [0224.149] closesocket (s=0x5e4) returned 0 [0224.149] getsockopt (in: s=0x5e0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.149] recv (in: s=0x5e0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.149] WSAGetLastError () returned 10057 [0224.149] closesocket (s=0x5e0) returned 0 [0224.149] getsockopt (in: s=0x5dc, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.149] recv (in: s=0x5dc, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.149] WSAGetLastError () returned 10057 [0224.149] closesocket (s=0x5dc) returned 0 [0224.150] getsockopt (in: s=0x5d8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.150] recv (in: s=0x5d8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.150] WSAGetLastError () returned 10057 [0224.150] closesocket (s=0x5d8) returned 0 [0224.150] getsockopt (in: s=0x5d4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.150] recv (in: s=0x5d4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.150] WSAGetLastError () returned 10057 [0224.150] closesocket (s=0x5d4) returned 0 [0224.150] getsockopt (in: s=0x5d0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.150] recv (in: s=0x5d0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.151] WSAGetLastError () returned 10057 [0224.151] closesocket (s=0x5d0) returned 0 [0224.151] getsockopt (in: s=0x5cc, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.151] recv (in: s=0x5cc, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.151] WSAGetLastError () returned 10057 [0224.151] closesocket (s=0x5cc) returned 0 [0224.151] getsockopt (in: s=0x5c8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.151] recv (in: s=0x5c8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.151] WSAGetLastError () returned 10057 [0224.151] closesocket (s=0x5c8) returned 0 [0224.151] getsockopt (in: s=0x5c4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.151] recv (in: s=0x5c4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.152] WSAGetLastError () returned 10057 [0224.152] closesocket (s=0x5c4) returned 0 [0224.152] getsockopt (in: s=0x5c0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.152] recv (in: s=0x5c0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.152] WSAGetLastError () returned 10057 [0224.152] closesocket (s=0x5c0) returned 0 [0224.152] getsockopt (in: s=0x5bc, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.152] recv (in: s=0x5bc, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.152] WSAGetLastError () returned 10057 [0224.152] closesocket (s=0x5bc) returned 0 [0224.153] getsockopt (in: s=0x5b8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.153] recv (in: s=0x5b8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.153] WSAGetLastError () returned 10057 [0224.153] closesocket (s=0x5b8) returned 0 [0224.153] getsockopt (in: s=0x5b4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.153] recv (in: s=0x5b4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.153] WSAGetLastError () returned 10057 [0224.153] closesocket (s=0x5b4) returned 0 [0224.153] getsockopt (in: s=0x5b0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.153] recv (in: s=0x5b0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.153] WSAGetLastError () returned 10057 [0224.153] closesocket (s=0x5b0) returned 0 [0224.154] getsockopt (in: s=0x5ac, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.154] recv (in: s=0x5ac, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.154] WSAGetLastError () returned 10057 [0224.154] closesocket (s=0x5ac) returned 0 [0224.154] getsockopt (in: s=0x5a8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.154] recv (in: s=0x5a8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.154] WSAGetLastError () returned 10057 [0224.154] closesocket (s=0x5a8) returned 0 [0224.154] getsockopt (in: s=0x5a4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.154] recv (in: s=0x5a4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.154] WSAGetLastError () returned 10057 [0224.154] closesocket (s=0x5a4) returned 0 [0224.155] getsockopt (in: s=0x5a0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.155] recv (in: s=0x5a0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.155] WSAGetLastError () returned 10057 [0224.155] closesocket (s=0x5a0) returned 0 [0224.155] getsockopt (in: s=0x59c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.155] recv (in: s=0x59c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.155] WSAGetLastError () returned 10057 [0224.155] closesocket (s=0x59c) returned 0 [0224.155] getsockopt (in: s=0x598, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.155] recv (in: s=0x598, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.155] WSAGetLastError () returned 10057 [0224.155] closesocket (s=0x598) returned 0 [0224.156] getsockopt (in: s=0x594, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.156] recv (in: s=0x594, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.156] WSAGetLastError () returned 10057 [0224.156] closesocket (s=0x594) returned 0 [0224.157] getsockopt (in: s=0x590, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.157] recv (in: s=0x590, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.157] WSAGetLastError () returned 10057 [0224.157] closesocket (s=0x590) returned 0 [0224.157] getsockopt (in: s=0x58c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.158] recv (in: s=0x58c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.158] WSAGetLastError () returned 10057 [0224.158] closesocket (s=0x58c) returned 0 [0224.158] getsockopt (in: s=0x588, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.158] recv (in: s=0x588, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.158] WSAGetLastError () returned 10057 [0224.158] closesocket (s=0x588) returned 0 [0224.158] getsockopt (in: s=0x584, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.158] recv (in: s=0x584, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.158] WSAGetLastError () returned 10057 [0224.158] closesocket (s=0x584) returned 0 [0224.159] getsockopt (in: s=0x580, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.159] recv (in: s=0x580, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.159] WSAGetLastError () returned 10057 [0224.159] closesocket (s=0x580) returned 0 [0224.159] getsockopt (in: s=0x57c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.159] recv (in: s=0x57c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.159] WSAGetLastError () returned 10057 [0224.159] closesocket (s=0x57c) returned 0 [0224.159] getsockopt (in: s=0x578, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.159] recv (in: s=0x578, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.159] WSAGetLastError () returned 10057 [0224.159] closesocket (s=0x578) returned 0 [0224.160] getsockopt (in: s=0x574, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.160] recv (in: s=0x574, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.160] WSAGetLastError () returned 10057 [0224.160] closesocket (s=0x574) returned 0 [0224.160] getsockopt (in: s=0x570, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.160] recv (in: s=0x570, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.160] WSAGetLastError () returned 10057 [0224.160] closesocket (s=0x570) returned 0 [0224.160] getsockopt (in: s=0x56c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.160] recv (in: s=0x56c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.160] WSAGetLastError () returned 10057 [0224.160] closesocket (s=0x56c) returned 0 [0224.161] getsockopt (in: s=0x568, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.161] recv (in: s=0x568, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.161] WSAGetLastError () returned 10057 [0224.161] closesocket (s=0x568) returned 0 [0224.161] getsockopt (in: s=0x564, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.161] recv (in: s=0x564, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.161] WSAGetLastError () returned 10057 [0224.161] closesocket (s=0x564) returned 0 [0224.161] getsockopt (in: s=0x560, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.161] recv (in: s=0x560, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.161] WSAGetLastError () returned 10057 [0224.161] closesocket (s=0x560) returned 0 [0224.162] getsockopt (in: s=0x55c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.162] recv (in: s=0x55c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.162] WSAGetLastError () returned 10057 [0224.162] closesocket (s=0x55c) returned 0 [0224.162] getsockopt (in: s=0x558, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.162] recv (in: s=0x558, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.162] WSAGetLastError () returned 10057 [0224.162] closesocket (s=0x558) returned 0 [0224.162] getsockopt (in: s=0x554, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.162] recv (in: s=0x554, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.162] WSAGetLastError () returned 10057 [0224.162] closesocket (s=0x554) returned 0 [0224.163] getsockopt (in: s=0x550, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.163] recv (in: s=0x550, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.163] WSAGetLastError () returned 10057 [0224.163] closesocket (s=0x550) returned 0 [0224.163] getsockopt (in: s=0x54c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.163] recv (in: s=0x54c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.163] WSAGetLastError () returned 10057 [0224.163] closesocket (s=0x54c) returned 0 [0224.163] getsockopt (in: s=0x548, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.163] recv (in: s=0x548, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.163] WSAGetLastError () returned 10057 [0224.163] closesocket (s=0x548) returned 0 [0224.164] getsockopt (in: s=0x544, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.164] recv (in: s=0x544, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.164] WSAGetLastError () returned 10057 [0224.164] closesocket (s=0x544) returned 0 [0224.164] getsockopt (in: s=0x540, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.164] recv (in: s=0x540, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.164] WSAGetLastError () returned 10057 [0224.164] closesocket (s=0x540) returned 0 [0224.164] getsockopt (in: s=0x53c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.164] recv (in: s=0x53c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.164] WSAGetLastError () returned 10057 [0224.165] closesocket (s=0x53c) returned 0 [0224.165] getsockopt (in: s=0x538, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.165] recv (in: s=0x538, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.165] WSAGetLastError () returned 10057 [0224.165] closesocket (s=0x538) returned 0 [0224.165] getsockopt (in: s=0x534, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.165] recv (in: s=0x534, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.165] WSAGetLastError () returned 10057 [0224.165] closesocket (s=0x534) returned 0 [0224.165] getsockopt (in: s=0x530, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.165] recv (in: s=0x530, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.166] WSAGetLastError () returned 10057 [0224.166] closesocket (s=0x530) returned 0 [0224.166] getsockopt (in: s=0x52c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.166] recv (in: s=0x52c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.166] WSAGetLastError () returned 10057 [0224.166] closesocket (s=0x52c) returned 0 [0224.166] getsockopt (in: s=0x528, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.166] recv (in: s=0x528, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.166] WSAGetLastError () returned 10057 [0224.166] closesocket (s=0x528) returned 0 [0224.167] getsockopt (in: s=0x524, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.167] recv (in: s=0x524, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.167] WSAGetLastError () returned 10057 [0224.167] closesocket (s=0x524) returned 0 [0224.167] getsockopt (in: s=0x520, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.167] recv (in: s=0x520, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.167] WSAGetLastError () returned 10057 [0224.167] closesocket (s=0x520) returned 0 [0224.167] getsockopt (in: s=0x51c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.167] recv (in: s=0x51c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.167] WSAGetLastError () returned 10057 [0224.167] closesocket (s=0x51c) returned 0 [0224.168] getsockopt (in: s=0x518, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.168] recv (in: s=0x518, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.168] WSAGetLastError () returned 10057 [0224.168] closesocket (s=0x518) returned 0 [0224.168] getsockopt (in: s=0x514, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.168] recv (in: s=0x514, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.168] WSAGetLastError () returned 10057 [0224.169] closesocket (s=0x514) returned 0 [0224.169] getsockopt (in: s=0x510, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.169] recv (in: s=0x510, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.169] WSAGetLastError () returned 10057 [0224.169] closesocket (s=0x510) returned 0 [0224.169] getsockopt (in: s=0x50c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.169] recv (in: s=0x50c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.169] WSAGetLastError () returned 10057 [0224.169] closesocket (s=0x50c) returned 0 [0224.169] getsockopt (in: s=0x508, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.170] recv (in: s=0x508, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.170] WSAGetLastError () returned 10057 [0224.170] closesocket (s=0x508) returned 0 [0224.170] getsockopt (in: s=0x504, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.170] recv (in: s=0x504, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.170] WSAGetLastError () returned 10057 [0224.170] closesocket (s=0x504) returned 0 [0224.170] getsockopt (in: s=0x500, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.170] recv (in: s=0x500, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.170] WSAGetLastError () returned 10057 [0224.170] closesocket (s=0x500) returned 0 [0224.171] getsockopt (in: s=0x4fc, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.171] recv (in: s=0x4fc, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.171] WSAGetLastError () returned 10057 [0224.171] closesocket (s=0x4fc) returned 0 [0224.171] getsockopt (in: s=0x4f8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.171] recv (in: s=0x4f8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.171] WSAGetLastError () returned 10057 [0224.171] closesocket (s=0x4f8) returned 0 [0224.171] getsockopt (in: s=0x4f4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.171] recv (in: s=0x4f4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.171] WSAGetLastError () returned 10057 [0224.171] closesocket (s=0x4f4) returned 0 [0224.172] getsockopt (in: s=0x4f0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.172] recv (in: s=0x4f0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.172] WSAGetLastError () returned 10057 [0224.172] closesocket (s=0x4f0) returned 0 [0224.172] getsockopt (in: s=0x4ec, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.172] recv (in: s=0x4ec, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.172] WSAGetLastError () returned 10057 [0224.172] closesocket (s=0x4ec) returned 0 [0224.193] getsockopt (in: s=0x4e8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.193] recv (in: s=0x4e8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.193] WSAGetLastError () returned 10057 [0224.193] closesocket (s=0x4e8) returned 0 [0224.193] getsockopt (in: s=0x4e4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.193] recv (in: s=0x4e4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.193] WSAGetLastError () returned 10057 [0224.193] closesocket (s=0x4e4) returned 0 [0224.194] getsockopt (in: s=0x4e0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.194] recv (in: s=0x4e0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.194] WSAGetLastError () returned 10057 [0224.194] closesocket (s=0x4e0) returned 0 [0224.194] getsockopt (in: s=0x4dc, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.194] recv (in: s=0x4dc, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.194] WSAGetLastError () returned 10057 [0224.194] closesocket (s=0x4dc) returned 0 [0224.194] getsockopt (in: s=0x4d8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.194] recv (in: s=0x4d8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.194] WSAGetLastError () returned 10057 [0224.194] closesocket (s=0x4d8) returned 0 [0224.195] getsockopt (in: s=0x4d4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.195] recv (in: s=0x4d4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.195] WSAGetLastError () returned 10057 [0224.195] closesocket (s=0x4d4) returned 0 [0224.195] getsockopt (in: s=0x4d0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.195] recv (in: s=0x4d0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.195] WSAGetLastError () returned 10057 [0224.195] closesocket (s=0x4d0) returned 0 [0224.195] getsockopt (in: s=0x4cc, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.195] recv (in: s=0x4cc, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.195] WSAGetLastError () returned 10057 [0224.195] closesocket (s=0x4cc) returned 0 [0224.196] getsockopt (in: s=0x4c8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.196] recv (in: s=0x4c8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.196] WSAGetLastError () returned 10057 [0224.196] closesocket (s=0x4c8) returned 0 [0224.196] getsockopt (in: s=0x4c4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.196] recv (in: s=0x4c4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.196] WSAGetLastError () returned 10057 [0224.196] closesocket (s=0x4c4) returned 0 [0224.196] getsockopt (in: s=0x4c0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.196] recv (in: s=0x4c0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.197] WSAGetLastError () returned 10057 [0224.197] closesocket (s=0x4c0) returned 0 [0224.197] getsockopt (in: s=0x4bc, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.197] recv (in: s=0x4bc, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.197] WSAGetLastError () returned 10057 [0224.197] closesocket (s=0x4bc) returned 0 [0224.197] getsockopt (in: s=0x4b8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.197] recv (in: s=0x4b8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.197] WSAGetLastError () returned 10057 [0224.197] closesocket (s=0x4b8) returned 0 [0224.198] getsockopt (in: s=0x4b4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.198] recv (in: s=0x4b4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.198] WSAGetLastError () returned 10057 [0224.198] closesocket (s=0x4b4) returned 0 [0224.198] getsockopt (in: s=0x4b0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.198] recv (in: s=0x4b0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.198] WSAGetLastError () returned 10057 [0224.198] closesocket (s=0x4b0) returned 0 [0224.198] getsockopt (in: s=0x4ac, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.198] recv (in: s=0x4ac, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.198] WSAGetLastError () returned 10057 [0224.198] closesocket (s=0x4ac) returned 0 [0224.199] getsockopt (in: s=0x4a8, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.199] recv (in: s=0x4a8, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.199] WSAGetLastError () returned 10057 [0224.199] closesocket (s=0x4a8) returned 0 [0224.199] getsockopt (in: s=0x4a4, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.199] recv (in: s=0x4a4, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.199] WSAGetLastError () returned 10057 [0224.199] closesocket (s=0x4a4) returned 0 [0224.199] getsockopt (in: s=0x4a0, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.199] recv (in: s=0x4a0, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.199] WSAGetLastError () returned 10057 [0224.200] closesocket (s=0x4a0) returned 0 [0224.200] getsockopt (in: s=0x49c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.200] recv (in: s=0x49c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.200] WSAGetLastError () returned 10057 [0224.200] closesocket (s=0x49c) returned 0 [0224.200] getsockopt (in: s=0x498, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.200] recv (in: s=0x498, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.200] WSAGetLastError () returned 10057 [0224.200] closesocket (s=0x498) returned 0 [0224.200] getsockopt (in: s=0x494, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.200] recv (in: s=0x494, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.201] WSAGetLastError () returned 10057 [0224.201] closesocket (s=0x494) returned 0 [0224.201] getsockopt (in: s=0x490, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.201] recv (in: s=0x490, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.201] WSAGetLastError () returned 10057 [0224.201] closesocket (s=0x490) returned 0 [0224.201] getsockopt (in: s=0x48c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.201] recv (in: s=0x48c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.201] WSAGetLastError () returned 10057 [0224.201] closesocket (s=0x48c) returned 0 [0224.202] getsockopt (in: s=0x488, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.202] recv (in: s=0x488, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.202] WSAGetLastError () returned 10057 [0224.202] closesocket (s=0x488) returned 0 [0224.202] getsockopt (in: s=0x484, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.202] recv (in: s=0x484, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.202] WSAGetLastError () returned 10057 [0224.202] closesocket (s=0x484) returned 0 [0224.202] getsockopt (in: s=0x480, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.202] recv (in: s=0x480, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.202] WSAGetLastError () returned 10057 [0224.202] closesocket (s=0x480) returned 0 [0224.203] getsockopt (in: s=0x47c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.203] recv (in: s=0x47c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.203] WSAGetLastError () returned 10057 [0224.203] closesocket (s=0x47c) returned 0 [0224.203] getsockopt (in: s=0x478, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.203] recv (in: s=0x478, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.203] WSAGetLastError () returned 10057 [0224.203] closesocket (s=0x478) returned 0 [0224.203] getsockopt (in: s=0x474, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.203] recv (in: s=0x474, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.203] WSAGetLastError () returned 10057 [0224.203] closesocket (s=0x474) returned 0 [0224.204] getsockopt (in: s=0x470, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.204] recv (in: s=0x470, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.204] WSAGetLastError () returned 10057 [0224.204] closesocket (s=0x470) returned 0 [0224.204] getsockopt (in: s=0x46c, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.204] recv (in: s=0x46c, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.204] WSAGetLastError () returned 10057 [0224.204] closesocket (s=0x46c) returned 0 [0224.204] getsockopt (in: s=0x468, level=65535, optname=4103, optval=0x261f818, optlen=0x261f804 | out: optval="", optlen=0x261f804) returned 0 [0224.204] recv (in: s=0x468, buf=0x261f827, len=1, flags=2 | out: buf=0x261f827) returned -1 [0224.205] WSAGetLastError () returned 10057 [0224.205] closesocket (s=0x468) Thread: id = 73 os_tid = 0xe94 [0129.927] GetLogicalDrives () returned 0x4 [0129.927] GetProcessHeap () returned 0x8a0000 [0129.927] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x8b2a40 [0129.927] GetProcessHeap () returned 0x8a0000 [0129.927] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x28) returned 0x8b6e58 [0129.927] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x290 [0129.927] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x294 [0129.928] GetProcessHeap () returned 0x8a0000 [0129.928] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c7e18 [0129.928] GetProcessHeap () returned 0x8a0000 [0129.928] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c82a0 [0129.928] GetProcessHeap () returned 0x8a0000 [0129.928] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c81b0 [0129.928] GetProcessHeap () returned 0x8a0000 [0129.928] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x8be718 [0129.928] GetProcessHeap () returned 0x8a0000 [0129.928] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8be718 | out: hHeap=0x8a0000) returned 1 [0129.928] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c82a0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0129.928] GetProcessHeap () returned 0x8a0000 [0129.928] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81b0 | out: hHeap=0x8a0000) returned 1 [0129.928] GetProcessHeap () returned 0x8a0000 [0129.928] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7e18 | out: hHeap=0x8a0000) returned 1 [0129.928] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x271fc74, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x271fc74*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0129.928] GetProcessHeap () returned 0x8a0000 [0129.928] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c82a0 | out: hHeap=0x8a0000) returned 1 [0129.928] GetProcessHeap () returned 0x8a0000 [0129.928] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10) returned 0x8c7a18 [0129.928] GetProcessHeap () returned 0x8a0000 [0129.928] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10) returned 0x8c7a48 [0129.928] GetProcessHeap () returned 0x8a0000 [0129.928] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10) returned 0x8c7a60 [0129.929] GetProcessHeap () returned 0x8a0000 [0129.929] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x8be718 [0129.929] GetProcessHeap () returned 0x8a0000 [0129.929] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10) returned 0x8c7a78 [0129.929] htonl (hostlong=0xb4197730) returned 0x307719b4 [0129.929] QueryPerformanceCounter (in: lpPerformanceCount=0x271fb70 | out: lpPerformanceCount=0x271fb70*=5766748701) returned 1 [0129.929] GetTickCount () returned 0x11389a8 [0129.929] GetCurrentProcessId () returned 0xdb4 [0129.929] GetCurrentThreadId () returned 0xe94 [0129.929] GetLocalTime (in: lpSystemTime=0x271fb58 | out: lpSystemTime=0x271fb58*(wYear=0x7e3, wMonth=0x9, wDayOfWeek=0x5, wDay=0xd, wHour=0x3, wMinute=0xa, wSecond=0x2, wMilliseconds=0x345)) [0129.929] SystemTimeToFileTime (in: lpSystemTime=0x271fb58, lpFileTime=0x271fb68 | out: lpFileTime=0x271fb68) returned 1 [0129.929] QueryPerformanceCounter (in: lpPerformanceCount=0x271fb70 | out: lpPerformanceCount=0x271fb70*=5766766328) returned 1 [0129.929] GetProcessHeap () returned 0x8a0000 [0129.929] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x28) returned 0x8b6af8 [0129.929] GetProcessHeap () returned 0x8a0000 [0129.929] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10) returned 0x8c7a90 [0129.929] GetProcessHeap () returned 0x8a0000 [0129.929] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x4) returned 0x8df618 [0129.929] GetProcessHeap () returned 0x8a0000 [0129.929] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x14) returned 0x8b8558 [0129.929] GetProcessHeap () returned 0x8a0000 [0129.929] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10) returned 0x8c7aa8 [0129.929] GetProcessHeap () returned 0x8a0000 [0129.929] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x80) returned 0x8aeca0 [0129.929] GetProcessHeap () returned 0x8a0000 [0129.929] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10) returned 0x8c7ac0 [0129.929] GetProcessHeap () returned 0x8a0000 [0129.929] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x82) returned 0x8b13c0 [0129.929] GetProcessHeap () returned 0x8a0000 [0129.929] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10) returned 0x8be330 [0129.929] GetProcessHeap () returned 0x8a0000 [0129.930] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x4) returned 0x8df628 [0129.930] GetProcessHeap () returned 0x8a0000 [0129.930] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10) returned 0x8e20e0 [0129.930] GetProcessHeap () returned 0x8a0000 [0129.930] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x80) returned 0x8b2db8 [0129.930] GetProcessHeap () returned 0x8a0000 [0129.930] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10) returned 0x8e22d8 [0129.930] GetProcessHeap () returned 0x8a0000 [0129.930] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x2) returned 0x8df758 [0129.930] GetProcessHeap () returned 0x8a0000 [0129.930] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x4) returned 0x8df648 [0129.930] GetProcessHeap () returned 0x8a0000 [0129.930] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10) returned 0x8e2260 [0129.930] GetProcessHeap () returned 0x8a0000 [0129.930] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x80) returned 0x8b1260 [0129.930] GetProcessHeap () returned 0x8a0000 [0129.930] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10) returned 0x8e21b8 [0129.930] GetProcessHeap () returned 0x8a0000 [0129.930] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x4) returned 0x8df608 [0129.930] GetProcessHeap () returned 0x8a0000 [0129.930] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x8df758, Size=0x82) returned 0x8b00f0 [0129.930] GetProcessHeap () returned 0x8a0000 [0129.930] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x8df608, Size=0x100) returned 0x8afb98 [0129.930] GetProcessHeap () returned 0x8a0000 [0129.930] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10) returned 0x8e2290 [0129.930] GetProcessHeap () returned 0x8a0000 [0129.930] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x82) returned 0x8e2528 [0129.930] GetProcessHeap () returned 0x8a0000 [0129.930] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10) returned 0x8e22f0 [0129.930] GetProcessHeap () returned 0x8a0000 [0129.930] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x82) returned 0x8e25b8 [0129.930] GetProcessHeap () returned 0x8a0000 [0129.930] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x8b00f0, Size=0x104) returned 0x8b00f0 [0129.931] GetProcessHeap () returned 0x8a0000 [0129.931] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x8afb98, Size=0x200) returned 0x8e2648 [0129.932] GetProcessHeap () returned 0x8a0000 [0129.932] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8df648 | out: hHeap=0x8a0000) returned 1 [0129.932] GetProcessHeap () returned 0x8a0000 [0129.932] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8e2648 | out: hHeap=0x8a0000) returned 1 [0129.932] GetProcessHeap () returned 0x8a0000 [0129.932] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8e21b8 | out: hHeap=0x8a0000) returned 1 [0129.932] GetProcessHeap () returned 0x8a0000 [0129.932] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b2db8 | out: hHeap=0x8a0000) returned 1 [0129.932] GetProcessHeap () returned 0x8a0000 [0129.932] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8e20e0 | out: hHeap=0x8a0000) returned 1 [0129.932] GetProcessHeap () returned 0x8a0000 [0129.932] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b1260 | out: hHeap=0x8a0000) returned 1 [0129.932] GetProcessHeap () returned 0x8a0000 [0129.932] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8e2260 | out: hHeap=0x8a0000) returned 1 [0129.932] GetProcessHeap () returned 0x8a0000 [0129.932] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b00f0 | out: hHeap=0x8a0000) returned 1 [0129.932] GetProcessHeap () returned 0x8a0000 [0129.932] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8e22d8 | out: hHeap=0x8a0000) returned 1 [0129.932] GetProcessHeap () returned 0x8a0000 [0129.932] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8e2528 | out: hHeap=0x8a0000) returned 1 [0129.932] GetProcessHeap () returned 0x8a0000 [0129.932] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8e2290 | out: hHeap=0x8a0000) returned 1 [0129.932] GetProcessHeap () returned 0x8a0000 [0129.932] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8e25b8 | out: hHeap=0x8a0000) returned 1 [0129.932] GetProcessHeap () returned 0x8a0000 [0129.932] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8e22f0 | out: hHeap=0x8a0000) returned 1 [0129.932] GetProcessHeap () returned 0x8a0000 [0129.932] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8df618 | out: hHeap=0x8a0000) returned 1 [0129.932] GetProcessHeap () returned 0x8a0000 [0129.933] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7a90 | out: hHeap=0x8a0000) returned 1 [0129.933] GetProcessHeap () returned 0x8a0000 [0129.933] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b13c0 | out: hHeap=0x8a0000) returned 1 [0129.933] GetProcessHeap () returned 0x8a0000 [0129.933] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7ac0 | out: hHeap=0x8a0000) returned 1 [0129.933] GetProcessHeap () returned 0x8a0000 [0129.933] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8aeca0 | out: hHeap=0x8a0000) returned 1 [0129.933] GetProcessHeap () returned 0x8a0000 [0129.933] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7aa8 | out: hHeap=0x8a0000) returned 1 [0129.933] GetProcessHeap () returned 0x8a0000 [0129.933] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8df628 | out: hHeap=0x8a0000) returned 1 [0129.933] GetProcessHeap () returned 0x8a0000 [0129.933] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8be330 | out: hHeap=0x8a0000) returned 1 [0129.933] GetProcessHeap () returned 0x8a0000 [0129.933] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b6af8 | out: hHeap=0x8a0000) returned 1 [0129.933] GetProcessHeap () returned 0x8a0000 [0129.933] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b8558 | out: hHeap=0x8a0000) returned 1 [0129.933] GetProcessHeap () returned 0x8a0000 [0129.933] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0xa4) returned 0x8b1150 [0129.933] GetProcessHeap () returned 0x8a0000 [0129.933] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7a48 | out: hHeap=0x8a0000) returned 1 [0129.933] GetProcessHeap () returned 0x8a0000 [0129.933] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7a60 | out: hHeap=0x8a0000) returned 1 [0129.933] GetProcessHeap () returned 0x8a0000 [0129.933] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8be718 | out: hHeap=0x8a0000) returned 1 [0129.933] GetProcessHeap () returned 0x8a0000 [0129.933] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7a78 | out: hHeap=0x8a0000) returned 1 [0129.933] GetProcessHeap () returned 0x8a0000 [0129.933] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7a18 | out: hHeap=0x8a0000) returned 1 [0129.933] GetProcessHeap () returned 0x8a0000 [0129.933] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x14) returned 0x8b82b8 [0129.933] GetProcessHeap () returned 0x8a0000 [0129.933] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0xe) returned 0x8c7a48 [0129.933] ResetEvent (hEvent=0x294) returned 1 [0129.933] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x264a4c, lpParameter=0x8b82b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x298 [0129.934] CloseHandle (hObject=0x298) returned 1 [0129.934] GetProcessHeap () returned 0x8a0000 [0129.934] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10) returned 0x8c7a78 [0129.934] GetProcessHeap () returned 0x8a0000 [0129.934] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10) returned 0x8c7a90 [0129.934] GetProcessHeap () returned 0x8a0000 [0129.935] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10) returned 0x8c7a60 [0129.935] GetProcessHeap () returned 0x8a0000 [0129.935] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x8be718 [0129.935] GetProcessHeap () returned 0x8a0000 [0129.935] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10) returned 0x8c7aa8 [0129.935] htonl (hostlong=0xb4197730) returned 0x307719b4 [0129.935] GetProcessHeap () returned 0x8a0000 [0129.935] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x28) returned 0x8b6af8 [0129.935] GetProcessHeap () returned 0x8a0000 [0129.935] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10) returned 0x8c7a18 [0129.935] GetProcessHeap () returned 0x8a0000 [0129.935] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x4) returned 0x8df638 [0129.935] GetProcessHeap () returned 0x8a0000 [0129.935] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x14) returned 0x8b85b8 [0129.935] GetProcessHeap () returned 0x8a0000 [0129.935] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10) returned 0x8c7ac0 [0129.935] GetProcessHeap () returned 0x8a0000 [0129.935] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x80) returned 0x8aeca0 [0129.935] GetProcessHeap () returned 0x8a0000 [0129.935] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10) returned 0x8be330 [0129.935] GetProcessHeap () returned 0x8a0000 [0129.935] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x82) returned 0x8b13c0 [0129.935] GetProcessHeap () returned 0x8a0000 [0129.935] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10) returned 0x8e2038 [0129.935] GetProcessHeap () returned 0x8a0000 [0129.935] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x4) returned 0x8df728 [0129.935] GetProcessHeap () returned 0x8a0000 [0129.935] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10) returned 0x8e1fa8 [0129.935] GetProcessHeap () returned 0x8a0000 [0129.935] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x80) returned 0x8b2db8 [0129.935] GetProcessHeap () returned 0x8a0000 [0129.935] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10) returned 0x8e1e70 [0129.936] GetProcessHeap () returned 0x8a0000 [0129.936] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x2) returned 0x8df6c8 [0129.936] GetProcessHeap () returned 0x8a0000 [0129.936] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x4) returned 0x8df608 [0129.936] GetProcessHeap () returned 0x8a0000 [0129.936] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10) returned 0x8e1fd8 [0129.936] GetProcessHeap () returned 0x8a0000 [0129.936] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x80) returned 0x8b1260 [0129.936] GetProcessHeap () returned 0x8a0000 [0129.936] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10) returned 0x8e1ff0 [0129.936] GetProcessHeap () returned 0x8a0000 [0129.936] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x4) returned 0x8df648 [0129.936] GetProcessHeap () returned 0x8a0000 [0129.936] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x8df6c8, Size=0x82) returned 0x8b00f0 [0129.936] GetProcessHeap () returned 0x8a0000 [0129.936] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x8df648, Size=0x100) returned 0x8afb98 [0129.936] GetProcessHeap () returned 0x8a0000 [0129.936] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10) returned 0x8e1ee8 [0129.936] GetProcessHeap () returned 0x8a0000 [0129.936] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x82) returned 0x8e2528 [0129.936] GetProcessHeap () returned 0x8a0000 [0129.936] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10) returned 0x8e1d98 [0129.936] GetProcessHeap () returned 0x8a0000 [0129.936] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x82) returned 0x8e25b8 [0129.936] GetProcessHeap () returned 0x8a0000 [0129.936] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x8b00f0, Size=0x104) returned 0x8b00f0 [0129.936] GetProcessHeap () returned 0x8a0000 [0129.936] RtlReAllocateHeap (Heap=0x8a0000, Flags=0x0, Ptr=0x8afb98, Size=0x200) returned 0x8e2648 [0129.938] GetProcessHeap () returned 0x8a0000 [0129.938] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8df608 | out: hHeap=0x8a0000) returned 1 [0129.938] GetProcessHeap () returned 0x8a0000 [0129.938] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8e2648 | out: hHeap=0x8a0000) returned 1 [0129.938] GetProcessHeap () returned 0x8a0000 [0129.938] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8e1ff0 | out: hHeap=0x8a0000) returned 1 [0129.938] GetProcessHeap () returned 0x8a0000 [0129.938] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b2db8 | out: hHeap=0x8a0000) returned 1 [0129.938] GetProcessHeap () returned 0x8a0000 [0129.938] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8e1fa8 | out: hHeap=0x8a0000) returned 1 [0129.938] GetProcessHeap () returned 0x8a0000 [0129.938] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b1260 | out: hHeap=0x8a0000) returned 1 [0129.938] GetProcessHeap () returned 0x8a0000 [0129.938] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8e1fd8 | out: hHeap=0x8a0000) returned 1 [0129.938] GetProcessHeap () returned 0x8a0000 [0129.938] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b00f0 | out: hHeap=0x8a0000) returned 1 [0129.938] GetProcessHeap () returned 0x8a0000 [0129.938] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8e1e70 | out: hHeap=0x8a0000) returned 1 [0129.938] GetProcessHeap () returned 0x8a0000 [0129.938] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8e2528 | out: hHeap=0x8a0000) returned 1 [0129.938] GetProcessHeap () returned 0x8a0000 [0129.938] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8e1ee8 | out: hHeap=0x8a0000) returned 1 [0129.938] GetProcessHeap () returned 0x8a0000 [0129.938] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8e25b8 | out: hHeap=0x8a0000) returned 1 [0129.938] GetProcessHeap () returned 0x8a0000 [0129.938] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8e1d98 | out: hHeap=0x8a0000) returned 1 [0129.938] GetProcessHeap () returned 0x8a0000 [0129.938] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8df638 | out: hHeap=0x8a0000) returned 1 [0129.938] GetProcessHeap () returned 0x8a0000 [0129.938] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7a18 | out: hHeap=0x8a0000) returned 1 [0129.938] GetProcessHeap () returned 0x8a0000 [0129.938] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b13c0 | out: hHeap=0x8a0000) returned 1 [0129.938] GetProcessHeap () returned 0x8a0000 [0129.938] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8be330 | out: hHeap=0x8a0000) returned 1 [0129.939] GetProcessHeap () returned 0x8a0000 [0129.939] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8aeca0 | out: hHeap=0x8a0000) returned 1 [0129.939] GetProcessHeap () returned 0x8a0000 [0129.939] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7ac0 | out: hHeap=0x8a0000) returned 1 [0129.939] GetProcessHeap () returned 0x8a0000 [0129.939] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8df728 | out: hHeap=0x8a0000) returned 1 [0129.939] GetProcessHeap () returned 0x8a0000 [0129.939] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8e2038 | out: hHeap=0x8a0000) returned 1 [0129.939] GetProcessHeap () returned 0x8a0000 [0129.939] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b6af8 | out: hHeap=0x8a0000) returned 1 [0129.939] GetProcessHeap () returned 0x8a0000 [0129.939] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b85b8 | out: hHeap=0x8a0000) returned 1 [0129.939] GetProcessHeap () returned 0x8a0000 [0129.939] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0xa4) returned 0x8b0230 [0129.939] GetProcessHeap () returned 0x8a0000 [0129.939] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7a90 | out: hHeap=0x8a0000) returned 1 [0129.939] GetProcessHeap () returned 0x8a0000 [0129.939] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7a60 | out: hHeap=0x8a0000) returned 1 [0129.939] GetProcessHeap () returned 0x8a0000 [0129.939] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8be718 | out: hHeap=0x8a0000) returned 1 [0129.939] GetProcessHeap () returned 0x8a0000 [0129.939] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7aa8 | out: hHeap=0x8a0000) returned 1 [0129.939] GetProcessHeap () returned 0x8a0000 [0129.939] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7a78 | out: hHeap=0x8a0000) returned 1 [0129.939] GetProcessHeap () returned 0x8a0000 [0129.939] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x14) returned 0x8b82d8 [0129.939] GetProcessHeap () returned 0x8a0000 [0129.939] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0xe) returned 0x8c7aa8 [0129.939] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x264a4c, lpParameter=0x8b82d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x298 [0129.940] CloseHandle (hObject=0x298) returned 1 [0129.941] WaitForSingleObject (hHandle=0x294, dwMilliseconds=0xffffffff) returned 0x0 [0156.966] CloseHandle (hObject=0x294) returned 1 [0156.967] CloseHandle (hObject=0x290) returned 1 [0156.967] GetProcessHeap () returned 0x8a0000 [0156.967] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b6e58 | out: hHeap=0x8a0000) returned 1 [0156.967] GetProcessHeap () returned 0x8a0000 [0156.967] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b2a40 | out: hHeap=0x8a0000) returned 1 Thread: id = 74 os_tid = 0xe98 [0130.059] GetLogicalDrives () returned 0x4 [0130.059] GetProcessHeap () returned 0x8a0000 [0130.059] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x20) returned 0x8c8020 [0130.059] GetProcessHeap () returned 0x8a0000 [0130.059] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x1e) returned 0x8c81b0 [0130.059] GetProcessHeap () returned 0x8a0000 [0130.059] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x1e) returned 0x8c7e18 [0130.059] GetProcessHeap () returned 0x8a0000 [0130.059] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x90) returned 0x8afb98 [0130.059] GetProcessHeap () returned 0x8a0000 [0130.059] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8afb98 | out: hHeap=0x8a0000) returned 1 [0130.059] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8c81b0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0130.059] GetProcessHeap () returned 0x8a0000 [0130.059] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7e18 | out: hHeap=0x8a0000) returned 1 [0130.059] GetProcessHeap () returned 0x8a0000 [0130.059] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c8020 | out: hHeap=0x8a0000) returned 1 [0130.059] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x285f754, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x285f754*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0130.060] GetProcessHeap () returned 0x8a0000 [0130.060] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c81b0 | out: hHeap=0x8a0000) returned 1 [0130.060] GetProcessHeap () returned 0x8a0000 [0130.060] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x40) returned 0x8b24e8 [0130.060] GetProcessHeap () returned 0x8a0000 [0130.060] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x28) returned 0x8e21a0 [0130.060] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2dc [0130.060] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2e0 [0130.060] GetLogicalDrives () returned 0x4 [0130.060] Sleep (dwMilliseconds=0x3e8) [0131.338] GetLogicalDrives () returned 0x4 [0131.338] Sleep (dwMilliseconds=0x3e8) [0132.590] GetLogicalDrives () returned 0x4 [0132.590] Sleep (dwMilliseconds=0x3e8) [0133.996] GetLogicalDrives () returned 0x4 [0133.996] Sleep (dwMilliseconds=0x3e8) [0135.167] GetLogicalDrives () returned 0x4 [0135.167] Sleep (dwMilliseconds=0x3e8) [0136.416] GetLogicalDrives () returned 0x4 [0136.416] Sleep (dwMilliseconds=0x3e8) [0137.563] GetLogicalDrives () returned 0x4 [0137.575] Sleep (dwMilliseconds=0x3e8) [0138.786] GetLogicalDrives () returned 0x4 [0138.786] Sleep (dwMilliseconds=0x3e8) [0140.336] GetLogicalDrives () returned 0x4 [0140.337] Sleep (dwMilliseconds=0x3e8) [0141.633] GetLogicalDrives () returned 0x4 [0141.633] Sleep (dwMilliseconds=0x3e8) [0143.127] GetLogicalDrives () returned 0x4 [0143.127] Sleep (dwMilliseconds=0x3e8) [0144.367] GetLogicalDrives () returned 0x4 [0144.367] Sleep (dwMilliseconds=0x3e8) [0145.571] GetLogicalDrives () returned 0x4 [0145.571] Sleep (dwMilliseconds=0x3e8) [0146.861] GetLogicalDrives () returned 0x4 [0146.861] Sleep (dwMilliseconds=0x3e8) [0148.237] GetLogicalDrives () returned 0x4 [0148.237] Sleep (dwMilliseconds=0x3e8) [0149.538] GetLogicalDrives () returned 0x4 [0149.538] Sleep (dwMilliseconds=0x3e8) [0150.884] GetLogicalDrives () returned 0x4 [0150.884] Sleep (dwMilliseconds=0x3e8) [0152.659] GetLogicalDrives () returned 0x4 [0152.659] Sleep (dwMilliseconds=0x3e8) [0154.028] GetLogicalDrives () returned 0x4 [0154.028] Sleep (dwMilliseconds=0x3e8) [0155.271] GetLogicalDrives () returned 0x4 [0155.271] Sleep (dwMilliseconds=0x3e8) [0156.563] GetLogicalDrives () returned 0x4 [0156.563] Sleep (dwMilliseconds=0x3e8) [0157.575] CloseHandle (hObject=0x2e0) returned 1 [0157.575] CloseHandle (hObject=0x2dc) returned 1 [0157.575] GetProcessHeap () returned 0x8a0000 [0157.575] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8e21a0 | out: hHeap=0x8a0000) returned 1 [0157.576] GetProcessHeap () returned 0x8a0000 [0157.576] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b24e8 | out: hHeap=0x8a0000) returned 1 Thread: id = 75 os_tid = 0xea4 [0130.060] GetProcessHeap () returned 0x8a0000 [0130.060] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x38) returned 0x8b9598 [0130.060] GetProcessHeap () returned 0x8a0000 [0130.060] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x18) returned 0x8b8558 [0130.060] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2e4 [0130.060] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2e8 [0130.060] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2ec [0130.060] GetProcessHeap () returned 0x8a0000 [0130.060] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x8e8978 [0130.061] GetProcessHeap () returned 0x8a0000 [0130.061] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x50) returned 0x8afb98 [0130.061] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x74c00000 [0130.061] GetProcAddress (hModule=0x74c00000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x74c16b30 [0130.061] Wow64DisableWow64FsRedirection (in: OldValue=0x2e9f9bc | out: OldValue=0x2e9f9bc*=0x0) returned 1 [0130.061] GetProcessHeap () returned 0x8a0000 [0130.061] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8afb98 | out: hHeap=0x8a0000) returned 1 [0130.061] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x1, lpStartAddress=0x2648ba, lpParameter=0x2e9f9c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2f0 [0130.062] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x1, lpStartAddress=0x2648ba, lpParameter=0x2e9f9c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2f4 [0130.062] GetProcessHeap () returned 0x8a0000 [0130.062] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x8f8980 [0130.063] FindFirstFileW (in: lpFileName="\\\\?\\C:\\*", lpFindFileData=0x2e9f730 | out: lpFindFileData=0x2e9f730*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x18afba5, dwReserved1=0x74889fc4, cFileName="$GetCurrent", cAlternateFileName="$GETCU~1")) returned 0x8b9218 [0130.063] GetProcessHeap () returned 0x8a0000 [0130.063] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x908988 [0130.064] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$GetCurrent\\*", lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x8b9298 [0130.068] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0130.069] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Logs", cAlternateFileName="")) returned 1 [0130.069] GetProcessHeap () returned 0x8a0000 [0130.069] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x93a288 [0130.069] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8b9358 [0130.074] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.075] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64f53c6d, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x64f53c6d, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x651b6235, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xa7e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="downlevel_2017_09_07_02_02_39_766.log.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="DOWNLE~1.PHO")) returned 1 [0130.075] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64fa031d, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x64fa031d, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6548b0ec, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x18a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="oobe_2017_09_07_03_08_57_737.log.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="OOBE_2~1.PHO")) returned 1 [0130.075] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x651dc470, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x651dc470, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x651dc470, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x142, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="PARTNE~1.PHO")) returned 1 [0130.075] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x651dc470, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x651dc470, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x651dc470, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x142, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="PARTNE~1.PHO")) returned 0 [0130.075] FindClose (in: hFindFile=0x8b9358 | out: hFindFile=0x8b9358) returned 1 [0130.077] GetProcessHeap () returned 0x8a0000 [0130.077] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x93a288 | out: hHeap=0x8a0000) returned 1 [0130.078] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SafeOS", cAlternateFileName="")) returned 1 [0130.078] GetProcessHeap () returned 0x8a0000 [0130.078] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x93a288 [0130.078] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8b9358 [0130.081] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.081] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x652026d9, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x652026d9, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x656c71aa, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x233d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentOOBE.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="GETCUR~1.PHO")) returned 1 [0130.082] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x654b10d4, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x654b10d4, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x654b10d4, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x1a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentRollback.ini.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="GETCUR~2.PHO")) returned 1 [0130.082] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x654b10d4, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x654b10d4, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x654d7324, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x362, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupComplete.cmd.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="PARTNE~1.PHO")) returned 1 [0130.082] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x654fd650, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x654fd650, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x65523810, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x142, dwReserved0=0x0, dwReserved1=0x0, cFileName="preoobe.cmd.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="PREOOB~1.PHO")) returned 1 [0130.082] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65523810, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x65523810, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x65844994, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPC~1.PHO")) returned 1 [0130.082] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65523810, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x65523810, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x65844994, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPC~1.PHO")) returned 0 [0130.090] FindClose (in: hFindFile=0x8b9358 | out: hFindFile=0x8b9358) returned 1 [0130.091] GetProcessHeap () returned 0x8a0000 [0130.091] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x93a288 | out: hHeap=0x8a0000) returned 1 [0130.091] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SafeOS", cAlternateFileName="")) returned 0 [0130.091] FindClose (in: hFindFile=0x8b9298 | out: hFindFile=0x8b9298) returned 1 [0130.092] GetProcessHeap () returned 0x8a0000 [0130.092] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x908988 | out: hHeap=0x8a0000) returned 1 [0130.092] FindNextFileW (in: hFindFile=0x8b9218, lpFindFileData=0x2e9f730 | out: lpFindFileData=0x2e9f730*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x18afba5, dwReserved1=0x74889fc4, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 1 [0130.093] GetProcessHeap () returned 0x8a0000 [0130.093] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x908988 [0130.093] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\*", lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x8b9358 [0130.093] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0130.093] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="S-1-5-18", cAlternateFileName="")) returned 1 [0130.093] GetProcessHeap () returned 0x8a0000 [0130.093] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0130.094] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-18\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0xae73cae3, ftCreationTime.dwLowDateTime=0x1d32742, ftCreationTime.dwHighDateTime=0x8a7a0a, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x16, nFileSizeHigh=0x2, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="䗺&")) returned 0xffffffff [0130.094] GetProcessHeap () returned 0x8a0000 [0130.094] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0130.094] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xedb73d12, ftLastAccessTime.dwHighDateTime=0x1d569cf, ftLastWriteTime.dwLowDateTime=0xedb73d12, ftLastWriteTime.dwHighDateTime=0x1d569cf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0130.094] GetProcessHeap () returned 0x8a0000 [0130.094] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0130.094] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xedb73d12, ftLastAccessTime.dwHighDateTime=0x1d569cf, ftLastWriteTime.dwLowDateTime=0xedb73d12, ftLastWriteTime.dwHighDateTime=0x1d569cf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8b9298 [0130.094] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xedb73d12, ftLastAccessTime.dwHighDateTime=0x1d569cf, ftLastWriteTime.dwLowDateTime=0xedb73d12, ftLastWriteTime.dwHighDateTime=0x1d569cf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.094] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xedb73d12, ftCreationTime.dwHighDateTime=0x1d569cf, ftLastAccessTime.dwLowDateTime=0xedb73d12, ftLastAccessTime.dwHighDateTime=0x1d569cf, ftLastWriteTime.dwLowDateTime=0xedb99c50, ftLastWriteTime.dwHighDateTime=0x1d569cf, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0130.094] SetEvent (hEvent=0x2e8) returned 1 [0130.094] ResetEvent (hEvent=0x2ec) returned 1 [0130.094] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x656ed40c, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x656ed40c, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x656ed40c, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="DESKTO~1.PHO")) returned 1 [0130.094] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x656ed40c, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x656ed40c, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x656ed40c, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="DESKTO~1.PHO")) returned 0 [0130.095] FindClose (in: hFindFile=0x8b9298 | out: hFindFile=0x8b9298) returned 1 [0130.095] GetProcessHeap () returned 0x8a0000 [0130.095] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0130.095] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xedb73d12, ftLastAccessTime.dwHighDateTime=0x1d569cf, ftLastWriteTime.dwLowDateTime=0xedb73d12, ftLastWriteTime.dwHighDateTime=0x1d569cf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 0 [0130.095] FindClose (in: hFindFile=0x8b9358 | out: hFindFile=0x8b9358) returned 1 [0130.095] GetProcessHeap () returned 0x8a0000 [0130.095] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x908988 | out: hHeap=0x8a0000) returned 1 [0130.096] FindNextFileW (in: hFindFile=0x8b9218, lpFindFileData=0x2e9f730 | out: lpFindFileData=0x2e9f730*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x18afba5, dwReserved1=0x74889fc4, cFileName="$WINRE_BACKUP_PARTITION.MARKER", cAlternateFileName="$WINRE~1.MAR")) returned 1 [0130.096] FindNextFileW (in: hFindFile=0x8b9218, lpFindFileData=0x2e9f730 | out: lpFindFileData=0x2e9f730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x735b6467, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x735b6467, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x18afba5, dwReserved1=0x74889fc4, cFileName="588bce7c90097ed212", cAlternateFileName="588BCE~1")) returned 1 [0130.096] GetProcessHeap () returned 0x8a0000 [0130.096] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x908988 [0130.096] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\*", lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x735b6467, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x735b6467, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x8b9298 [0130.099] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x735b6467, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x735b6467, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0130.101] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1025", cAlternateFileName="")) returned 1 [0130.101] GetProcessHeap () returned 0x8a0000 [0130.101] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x95a298 [0130.101] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8b9458 [0130.103] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.103] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65713655, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x65713655, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x65713655, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x1e82, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0130.103] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65713655, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x65713655, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x65a0e9c2, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x122f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0130.104] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6586ab75, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6586ab75, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6586ab75, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4462, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0130.104] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6586ab75, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6586ab75, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6586ab75, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4462, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0130.105] FindClose (in: hFindFile=0x8b9458 | out: hFindFile=0x8b9458) returned 1 [0130.106] GetProcessHeap () returned 0x8a0000 [0130.106] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x95a298 | out: hHeap=0x8a0000) returned 1 [0130.107] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1028", cAlternateFileName="")) returned 1 [0130.107] GetProcessHeap () returned 0x8a0000 [0130.107] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x95a298 [0130.107] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8b9458 [0130.110] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.110] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6586ab75, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6586ab75, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x65890deb, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x19a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0130.110] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65890deb, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x65890deb, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x65b65ec3, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xeea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0130.110] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65a34a3e, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x65a34a3e, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6602a9ec, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x3862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0130.110] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65a34a3e, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x65a34a3e, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6602a9ec, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x3862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0130.112] FindClose (in: hFindFile=0x8b9458 | out: hFindFile=0x8b9458) returned 1 [0130.113] GetProcessHeap () returned 0x8a0000 [0130.113] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x95a298 | out: hHeap=0x8a0000) returned 1 [0130.113] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1029", cAlternateFileName="")) returned 1 [0130.113] GetProcessHeap () returned 0x8a0000 [0130.113] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x95a298 [0130.113] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8b9458 [0130.117] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.117] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65b8bc9e, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x65b8bc9e, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x661a7e49, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xf82, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0130.117] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66052650, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x66052650, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x664c914e, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x13d52, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0130.117] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x661a7e49, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x661a7e49, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x667ea299, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0130.117] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x661a7e49, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x661a7e49, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x667ea299, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0130.119] FindClose (in: hFindFile=0x8b9458 | out: hFindFile=0x8b9458) returned 1 [0130.120] GetProcessHeap () returned 0x8a0000 [0130.120] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x95a298 | out: hHeap=0x8a0000) returned 1 [0130.120] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1030", cAlternateFileName="")) returned 1 [0130.120] GetProcessHeap () returned 0x8a0000 [0130.120] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x95a298 [0130.121] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8b9458 [0130.123] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.124] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x664c914e, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x664c914e, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x664ef16e, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xdf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0130.124] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x664ef16e, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x664ef16e, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x66e06329, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x130c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0130.124] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x667ea299, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x667ea299, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6731997a, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0130.124] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x667ea299, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x667ea299, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6731997a, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0130.125] FindClose (in: hFindFile=0x8b9458 | out: hFindFile=0x8b9458) returned 1 [0130.126] GetProcessHeap () returned 0x8a0000 [0130.126] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x95a298 | out: hHeap=0x8a0000) returned 1 [0130.127] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1031", cAlternateFileName="")) returned 1 [0130.127] GetProcessHeap () returned 0x8a0000 [0130.127] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x95a298 [0130.127] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8b9518 [0130.130] FindNextFileW (in: hFindFile=0x8b9518, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.130] FindNextFileW (in: hFindFile=0x8b9518, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66e06329, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x66e06329, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x66e2c2d1, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xe52, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0130.130] FindNextFileW (in: hFindFile=0x8b9518, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66e2c2d1, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x66e2c2d1, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x66e2c2d1, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x142b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0130.130] FindNextFileW (in: hFindFile=0x8b9518, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66e52a13, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x66e52a13, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x67b25a27, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0130.130] FindNextFileW (in: hFindFile=0x8b9518, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66e52a13, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x66e52a13, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x67b25a27, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0130.132] FindClose (in: hFindFile=0x8b9518 | out: hFindFile=0x8b9518) returned 1 [0130.132] GetProcessHeap () returned 0x8a0000 [0130.132] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x95a298 | out: hHeap=0x8a0000) returned 1 [0130.133] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1032", cAlternateFileName="")) returned 1 [0130.133] GetProcessHeap () returned 0x8a0000 [0130.133] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x95a298 [0130.133] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8b9418 [0130.144] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.151] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6731997a, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6731997a, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6731997a, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x23a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0130.166] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6734094a, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6734094a, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x67b4b99e, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x15212, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0130.166] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67b25a27, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x67b25a27, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6893af0f, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4c62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0130.177] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67b25a27, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x67b25a27, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6893af0f, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4c62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0130.177] FindClose (in: hFindFile=0x8b9418 | out: hFindFile=0x8b9418) returned 1 [0130.188] GetProcessHeap () returned 0x8a0000 [0130.188] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x95a298 | out: hHeap=0x8a0000) returned 1 [0130.188] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1033", cAlternateFileName="")) returned 1 [0130.188] GetProcessHeap () returned 0x8a0000 [0130.188] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0130.189] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8b9518 [0130.190] FindNextFileW (in: hFindFile=0x8b9518, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.190] FindNextFileW (in: hFindFile=0x8b9518, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67b4b99e, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x67b4b99e, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x67bbe180, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xd72, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0130.190] FindNextFileW (in: hFindFile=0x8b9518, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67bbe180, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x67bbe180, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x68bd5f2d, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x12ec2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0130.190] FindNextFileW (in: hFindFile=0x8b9518, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6894dcea, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6894dcea, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x68f1d55e, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4462, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0130.190] FindNextFileW (in: hFindFile=0x8b9518, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6894dcea, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6894dcea, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x68f1d55e, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4462, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0130.190] FindClose (in: hFindFile=0x8b9518 | out: hFindFile=0x8b9518) returned 1 [0130.191] GetProcessHeap () returned 0x8a0000 [0130.191] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0130.191] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1035", cAlternateFileName="")) returned 1 [0130.191] GetProcessHeap () returned 0x8a0000 [0130.191] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0130.192] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8b9418 [0130.192] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.192] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68c2247d, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x68c2247d, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x68c2247d, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xf72, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0130.192] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68c48624, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x68c48624, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x692184ff, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x12de2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0130.193] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68f43578, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x68f43578, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6923e3c3, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0130.193] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68f43578, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x68f43578, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6923e3c3, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0130.193] FindClose (in: hFindFile=0x8b9418 | out: hFindFile=0x8b9418) returned 1 [0130.193] GetProcessHeap () returned 0x8a0000 [0130.193] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0130.194] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1036", cAlternateFileName="")) returned 1 [0130.194] GetProcessHeap () returned 0x8a0000 [0130.194] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0130.194] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8b9418 [0130.195] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.195] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6923e3c3, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6923e3c3, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6923e3c3, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xec2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0130.195] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69264d11, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x69264d11, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6980e033, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x14522, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0130.195] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6928ce56, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6928ce56, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x69a70811, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0130.195] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6928ce56, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6928ce56, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x69a70811, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0130.195] FindClose (in: hFindFile=0x8b9418 | out: hFindFile=0x8b9418) returned 1 [0130.196] GetProcessHeap () returned 0x8a0000 [0130.196] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0130.196] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1037", cAlternateFileName="")) returned 1 [0130.196] GetProcessHeap () returned 0x8a0000 [0130.196] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0130.197] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8b9418 [0130.198] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.198] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x698341bf, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x698341bf, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6985a454, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x1bc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0130.198] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6985a454, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6985a454, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x69f0ee23, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x11a92, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0130.198] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69a9672e, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x69a9672e, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6a233686, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4262, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0130.198] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69a9672e, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x69a9672e, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6a233686, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4262, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0130.198] FindClose (in: hFindFile=0x8b9418 | out: hFindFile=0x8b9418) returned 1 [0130.199] GetProcessHeap () returned 0x8a0000 [0130.199] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0130.199] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1038", cAlternateFileName="")) returned 1 [0130.200] GetProcessHeap () returned 0x8a0000 [0130.200] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0130.200] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8b9418 [0130.201] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.201] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69f0ee23, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x69f0ee23, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x69f5b2fb, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x1192, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0130.201] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69f81571, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x69f81571, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6a4bc0f1, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x152b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0130.201] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a25ab3d, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6a25ab3d, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6a6abfba, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0130.201] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a25ab3d, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6a25ab3d, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6a6abfba, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0130.201] FindClose (in: hFindFile=0x8b9418 | out: hFindFile=0x8b9418) returned 1 [0130.202] GetProcessHeap () returned 0x8a0000 [0130.202] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0130.202] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1040", cAlternateFileName="")) returned 1 [0130.202] GetProcessHeap () returned 0x8a0000 [0130.202] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0130.203] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8b9458 [0130.204] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.204] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a4bc0f1, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6a4bc0f1, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6a4e20bb, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xf32, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0130.204] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a50834a, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6a50834a, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6ab869ca, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x139c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0130.204] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a6abfba, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6a6abfba, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6abada33, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0130.204] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a6abfba, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6a6abfba, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6abada33, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0130.204] FindClose (in: hFindFile=0x8b9458 | out: hFindFile=0x8b9458) returned 1 [0130.205] GetProcessHeap () returned 0x8a0000 [0130.205] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0130.205] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1041", cAlternateFileName="")) returned 1 [0130.205] GetProcessHeap () returned 0x8a0000 [0130.205] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0130.205] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8b9418 [0130.206] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.206] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6abada33, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6abada33, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6ac46d44, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x2882, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0130.206] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6abada33, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6abada33, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6ac1f0ad, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x10b92, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0130.206] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac1f0ad, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6ac1f0ad, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6acc60dd, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x3e62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0130.207] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac1f0ad, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6ac1f0ad, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6acc60dd, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x3e62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0130.207] FindClose (in: hFindFile=0x8b9418 | out: hFindFile=0x8b9418) returned 1 [0130.207] GetProcessHeap () returned 0x8a0000 [0130.207] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0130.208] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1042", cAlternateFileName="")) returned 1 [0130.208] GetProcessHeap () returned 0x8a0000 [0130.208] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0130.208] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8b9418 [0130.209] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.209] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac53d86, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6ac53d86, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6ac79aab, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x3282, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0130.209] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac9ff3b, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6ac9ff3b, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6ad1261c, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xffe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0130.209] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6acc60dd, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6acc60dd, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6ad1261c, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x3c62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0130.209] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6acc60dd, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6acc60dd, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6ad1261c, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x3c62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0130.209] FindClose (in: hFindFile=0x8b9418 | out: hFindFile=0x8b9418) returned 1 [0130.210] GetProcessHeap () returned 0x8a0000 [0130.210] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0130.210] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1043", cAlternateFileName="")) returned 1 [0130.210] GetProcessHeap () returned 0x8a0000 [0130.210] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0130.211] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8b9418 [0130.212] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.212] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ad38946, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6ad38946, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6ad5ea6e, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xed2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0130.212] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ad38946, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6ad38946, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6b3daccd, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x13822, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0130.212] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ad5ea6e, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6ad5ea6e, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6b4271b7, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4c62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0130.212] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ad5ea6e, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6ad5ea6e, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6b4271b7, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4c62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0130.212] FindClose (in: hFindFile=0x8b9418 | out: hFindFile=0x8b9418) returned 1 [0130.213] GetProcessHeap () returned 0x8a0000 [0130.213] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0130.213] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1044", cAlternateFileName="")) returned 1 [0130.214] GetProcessHeap () returned 0x8a0000 [0130.214] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0130.214] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8b9418 [0130.298] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.299] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b3daccd, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6b3daccd, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6b4011cf, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xce2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0130.299] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4011cf, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6b4011cf, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6b499891, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x136d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0130.299] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4271b7, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6b4271b7, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6b57e6c1, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4662, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0130.299] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4271b7, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6b4271b7, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6b57e6c1, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4662, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0130.299] FindClose (in: hFindFile=0x8b9418 | out: hFindFile=0x8b9418) returned 1 [0130.300] GetProcessHeap () returned 0x8a0000 [0130.300] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0130.300] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1045", cAlternateFileName="")) returned 1 [0130.300] GetProcessHeap () returned 0x8a0000 [0130.300] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0130.300] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8b9418 [0130.302] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.303] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4bfbf2, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6b4bfbf2, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6b4e5dc5, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x10c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0130.303] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b558715, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6b558715, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6b8ebd28, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x142d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0130.303] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b57e6c1, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6b57e6c1, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6b911f34, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0130.303] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b57e6c1, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6b57e6c1, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6b911f34, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0130.303] FindClose (in: hFindFile=0x8b9418 | out: hFindFile=0x8b9418) returned 1 [0130.427] GetProcessHeap () returned 0x8a0000 [0130.427] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0130.436] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1046", cAlternateFileName="")) returned 1 [0130.438] GetProcessHeap () returned 0x8a0000 [0130.438] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0130.446] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993580 [0130.461] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.461] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b8ebd28, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6b8ebd28, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6b9381e1, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xf62, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0130.461] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b911f34, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6b911f34, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6c1b6ac5, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x13c72, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0130.461] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b9381e1, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6b9381e1, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6c62ee60, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0130.461] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b9381e1, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6b9381e1, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6c62ee60, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0130.461] FindClose (in: hFindFile=0x993580 | out: hFindFile=0x993580) returned 1 [0130.462] GetProcessHeap () returned 0x8a0000 [0130.462] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0130.462] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1049", cAlternateFileName="")) returned 1 [0130.462] GetProcessHeap () returned 0x8a0000 [0130.462] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0130.462] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0130.463] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.463] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c1dcb21, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6c1dcb21, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6c202cb7, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xd5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0130.463] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c202cb7, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6c202cb7, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6c99c5ff, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x13f52, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0130.463] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c62ee60, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6c62ee60, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6cdc88dc, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0130.463] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c62ee60, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6c62ee60, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6cdc88dc, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0130.463] FindClose (in: hFindFile=0x9935c0 | out: hFindFile=0x9935c0) returned 1 [0130.464] GetProcessHeap () returned 0x8a0000 [0130.464] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0130.464] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1053", cAlternateFileName="")) returned 1 [0130.464] GetProcessHeap () returned 0x8a0000 [0130.464] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0130.464] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993580 [0130.465] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.465] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c99c5ff, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6c99c5ff, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6c9c26e3, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x1012, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0130.465] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c9c26e3, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6c9c26e3, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6d135ca5, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x13082, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0130.466] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cdc88dc, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6cdc88dc, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6d15bf23, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4662, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0130.466] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cdc88dc, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6cdc88dc, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6d15bf23, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4662, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0130.466] FindClose (in: hFindFile=0x993580 | out: hFindFile=0x993580) returned 1 [0130.466] GetProcessHeap () returned 0x8a0000 [0130.466] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0130.466] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1055", cAlternateFileName="")) returned 1 [0130.466] GetProcessHeap () returned 0x8a0000 [0130.467] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0130.467] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0130.467] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.467] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d15bf23, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6d15bf23, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6d1820d9, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x1012, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0130.467] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d15bf23, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6d15bf23, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6d1f4777, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x12d22, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0130.467] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d1820d9, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6d1820d9, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6d21aaa7, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4662, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0130.468] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d1820d9, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6d1820d9, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6d21aaa7, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4662, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0130.468] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0130.468] GetProcessHeap () returned 0x8a0000 [0130.468] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0130.468] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="2052", cAlternateFileName="")) returned 1 [0130.468] GetProcessHeap () returned 0x8a0000 [0130.468] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0130.469] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993780 [0130.469] FindNextFileW (in: hFindFile=0x993780, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.469] FindNextFileW (in: hFindFile=0x993780, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d1f4777, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6d1f4777, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6d266eef, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x17c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0130.469] FindNextFileW (in: hFindFile=0x993780, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d21aaa7, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6d21aaa7, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6d4ef748, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xee12, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0130.469] FindNextFileW (in: hFindFile=0x993780, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d266eef, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6d266eef, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6db57c2c, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x3862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0130.470] FindNextFileW (in: hFindFile=0x993780, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d266eef, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6d266eef, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6db57c2c, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x3862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0130.470] FindClose (in: hFindFile=0x993780 | out: hFindFile=0x993780) returned 1 [0130.470] GetProcessHeap () returned 0x8a0000 [0130.470] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0130.470] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="2070", cAlternateFileName="")) returned 1 [0130.470] GetProcessHeap () returned 0x8a0000 [0130.470] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0130.471] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993700 [0130.471] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.471] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d4ef748, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6d4ef748, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6d515bb8, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x10a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0130.471] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d53bc2f, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6d53bc2f, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6dff653a, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x13a82, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0130.471] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dc16ae9, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6dc16ae9, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6e33d937, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0130.471] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dc16ae9, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6dc16ae9, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6e33d937, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0130.471] FindClose (in: hFindFile=0x993700 | out: hFindFile=0x993700) returned 1 [0130.472] GetProcessHeap () returned 0x8a0000 [0130.472] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0130.472] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="3076", cAlternateFileName="")) returned 1 [0130.472] GetProcessHeap () returned 0x8a0000 [0130.472] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0130.472] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9934c0 [0130.473] FindNextFileW (in: hFindFile=0x9934c0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.473] FindNextFileW (in: hFindFile=0x9934c0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e01c7b1, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6e01c7b1, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6e6387e7, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x19a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0130.473] FindNextFileW (in: hFindFile=0x9934c0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e33d937, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6e33d937, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6e9cc286, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xeea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0130.474] FindNextFileW (in: hFindFile=0x9934c0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e6387e7, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6e6387e7, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6e9f22a3, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x3862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0130.474] FindNextFileW (in: hFindFile=0x9934c0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e6387e7, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6e6387e7, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6e9f22a3, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x3862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0130.474] FindClose (in: hFindFile=0x9934c0 | out: hFindFile=0x9934c0) returned 1 [0130.474] GetProcessHeap () returned 0x8a0000 [0130.474] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0130.474] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="3082", cAlternateFileName="")) returned 1 [0130.475] GetProcessHeap () returned 0x8a0000 [0130.475] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0130.475] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9938c0 [0130.476] FindNextFileW (in: hFindFile=0x9938c0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.476] FindNextFileW (in: hFindFile=0x9938c0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e9cc286, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6e9cc286, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6ea18527, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xcf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0130.476] FindNextFileW (in: hFindFile=0x9938c0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e9f22a3, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6e9f22a3, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6f00e45f, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x13982, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0130.476] FindNextFileW (in: hFindFile=0x9938c0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea18527, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6ea18527, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6f3ee02a, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0130.476] FindNextFileW (in: hFindFile=0x9938c0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea18527, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6ea18527, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6f3ee02a, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0130.476] FindClose (in: hFindFile=0x9938c0 | out: hFindFile=0x9938c0) returned 1 [0130.477] GetProcessHeap () returned 0x8a0000 [0130.477] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0130.477] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Client", cAlternateFileName="")) returned 1 [0130.477] GetProcessHeap () returned 0x8a0000 [0130.477] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0130.477] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0130.478] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.478] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f0347d7, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6f0347d7, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6f0347d7, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x31552, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="PARAME~1.PHO")) returned 1 [0130.478] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f080d45, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6f080d45, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6f080d45, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x9982, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="UIINFO~1.PHO")) returned 1 [0130.478] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f080d45, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6f080d45, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6f080d45, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x9982, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="UIINFO~1.PHO")) returned 0 [0130.478] FindClose (in: hFindFile=0x9937c0 | out: hFindFile=0x9937c0) returned 1 [0130.479] GetProcessHeap () returned 0x8a0000 [0130.479] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0130.479] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f0a6c01, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6f0a6c01, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6f62a403, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4002, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="DHtmlHeader.html.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="DHTMLH~1.PHO")) returned 1 [0130.479] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3ee02a, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6f3ee02a, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6f7a7db2, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x15ad2, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="DisplayIcon.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="DISPLA~1.PHO")) returned 1 [0130.479] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Extended", cAlternateFileName="")) returned 1 [0130.479] GetProcessHeap () returned 0x8a0000 [0130.479] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0130.479] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0130.480] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.480] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f62a403, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6f62a403, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6f9e3e71, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x16d92, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="PARAME~1.PHO")) returned 1 [0130.480] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7cddf9, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6f7cddf9, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6fcdedf8, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x9982, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="UIINFO~1.PHO")) returned 1 [0130.480] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7cddf9, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6f7cddf9, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6fcdedf8, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x9982, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="UIINFO~1.PHO")) returned 0 [0130.480] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0130.481] GetProcessHeap () returned 0x8a0000 [0130.481] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0130.481] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Graphics", cAlternateFileName="")) returned 1 [0130.481] GetProcessHeap () returned 0x8a0000 [0130.481] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0130.481] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0130.481] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.481] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9e3e71, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6f9e3e71, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x703727ac, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x572, dwReserved0=0x0, dwReserved1=0x0, cFileName="Print.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="PRINTI~1.PHO")) returned 1 [0130.481] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7034c570, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x7034c570, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x703727ac, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate1.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="ROTATE~1.PHO")) returned 1 [0130.481] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703727ac, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x703727ac, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x70759a15, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate2.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="ROTATE~2.PHO")) returned 1 [0130.481] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70621245, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x70621245, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x7083fba3, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate3.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="ROTATE~3.PHO")) returned 1 [0130.481] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70759a15, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x70759a15, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x709431f6, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate4.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="ROTATE~4.PHO")) returned 1 [0130.482] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7085d501, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x7085d501, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x7085d501, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate5.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="RO91DD~1.PHO")) returned 1 [0130.482] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7085d501, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x7085d501, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x7088374b, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate6.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="RO7940~1.PHO")) returned 1 [0130.482] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7088374b, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x7088374b, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x7088374b, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate7.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="RO2FD9~1.PHO")) returned 1 [0130.482] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x708a99ed, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x708a99ed, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x708a99ed, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate8.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="RO77B2~1.PHO")) returned 1 [0130.482] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x708a99ed, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x708a99ed, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x708cfc15, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x572, dwReserved0=0x0, dwReserved1=0x0, cFileName="Save.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SAVEIC~1.PHO")) returned 1 [0130.482] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x708cfc15, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x708cfc15, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x708cfc15, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x9062, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPI~1.PHO")) returned 1 [0130.482] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x708f5e15, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x708f5e15, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x70a9c5ea, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x2892, dwReserved0=0x0, dwReserved1=0x0, cFileName="stop.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="STOPIC~1.PHO")) returned 1 [0130.482] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x709431f6, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x709431f6, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x70a06ec4, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x572, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqMet.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SYSREQ~1.PHO")) returned 1 [0130.482] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a06ec4, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x70a06ec4, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x70a273ba, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x582, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqNotMet.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SYSREQ~2.PHO")) returned 1 [0130.482] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a273ba, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x70a273ba, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x70a4d56e, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x2892, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="WARNIC~1.PHO")) returned 1 [0130.482] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a273ba, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x70a273ba, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x70a4d56e, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x2892, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="WARNIC~1.PHO")) returned 0 [0130.482] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0130.482] GetProcessHeap () returned 0x8a0000 [0130.482] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0130.482] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a4d56e, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x70a4d56e, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x70c6a71a, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xf22, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="header.bmp.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="HEADER~1.PHO")) returned 1 [0130.482] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x70e53327, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xadd395d, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Core.mzz.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="NETFX_~1.PHO")) returned 1 [0130.483] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x71702dc2, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x290312, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Core_x64.msi.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="NETFX_~2.PHO")) returned 1 [0130.484] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x719d7a93, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x719d7a93, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x71ee87cd, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x11c112, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Core_x86.msi.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="NETFX_~3.PHO")) returned 1 [0130.484] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x7206612c, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x29e23d9, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Extended.mzz.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="NETFX_~4.PHO")) returned 1 [0130.484] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72124acc, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x72124acc, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x7259d21f, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xd5112, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Extended_x64.msi.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="NE086F~1.PHO")) returned 1 [0130.484] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725e96e9, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x725e96e9, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x728720c1, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x79112, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Extended_x86.msi.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="NE52D6~1.PHO")) returned 1 [0130.484] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x727ff9dc, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x727ff9dc, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x72825c32, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x427b2, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="ParameterInfo.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="PARAME~1.PHO")) returned 1 [0130.484] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7284becc, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x7284becc, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x7297d20d, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x2d312, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="RGB9RAST_x64.msi.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="RGB9RA~1.PHO")) returned 1 [0130.484] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728be6ca, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x728be6ca, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x72a87f11, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x17312, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="RGB9Rast_x86.msi.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="RGB9RA~2.PHO")) returned 1 [0130.484] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729a33b3, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x729a33b3, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x72afb0dd, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x13242, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Setup.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPE~1.PHO")) returned 1 [0130.484] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72aae3e5, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x72aae3e5, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x72c51b56, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xc5252, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SetupEngine.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPE~2.PHO")) returned 1 [0130.484] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b46dd2, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x72b46dd2, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x72cea48c, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x48252, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SetupUi.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPU~1.PHO")) returned 1 [0130.484] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72c9e2f6, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x72c9e2f6, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x731af060, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x76a2, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SetupUi.xsd.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPU~2.PHO")) returned 1 [0130.485] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72d109f5, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x72d109f5, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x72d5cc01, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x17862, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SetupUtility.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPU~3.PHO")) returned 1 [0130.485] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72d5cc01, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x72d5cc01, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x73162add, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xa182, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SplashScreen.bmp.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SPLASH~1.PHO")) returned 1 [0130.485] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73189035, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x73189035, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x732e02a2, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x23522, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="sqmapi.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SQMAPI~1.PHO")) returned 1 [0130.485] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x731d5506, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x731d5506, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x7339eecc, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x3802, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Strings.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="STRING~1.PHO")) returned 1 [0130.485] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x732e02a2, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x732e02a2, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x7341164b, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x98f2, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="UiInfo.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="UIINFO~1.PHO")) returned 1 [0130.485] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x733c5bea, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x733c5bea, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x7358ed35, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x19782, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="watermark.bmp.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="WATERM~1.PHO")) returned 1 [0130.485] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0x739487cc, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x5b5245, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows6.0-KB956250-v6001-x64.msu.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="WINDOW~1.PHO")) returned 1 [0130.485] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0x737cb317, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x2d7652, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows6.0-KB956250-v6001-x86.msu.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="WINDOW~2.PHO")) returned 1 [0130.485] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0x5b8e5700, ftLastWriteTime.dwHighDateTime=0x1cac6d1, nFileSizeHigh=0x0, nFileSizeLow=0x4db1ce, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows6.1-KB958488-v6001-x64.msu", cAlternateFileName="WINDOW~3.MSU")) returned 1 [0130.485] SetEvent (hEvent=0x2e8) returned 1 [0130.485] ResetEvent (hEvent=0x2ec) returned 1 [0130.485] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 1 [0130.486] FindNextFileW (in: hFindFile=0x8b9298, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 0 [0130.486] FindClose (in: hFindFile=0x8b9298 | out: hFindFile=0x8b9298) returned 1 [0130.486] GetProcessHeap () returned 0x8a0000 [0130.486] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x908988 | out: hHeap=0x8a0000) returned 1 [0130.487] FindNextFileW (in: hFindFile=0x8b9218, lpFindFileData=0x2e9f730 | out: lpFindFileData=0x2e9f730*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6fa258, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x18afba5, dwReserved1=0x74889fc4, cFileName="Boot", cAlternateFileName="")) returned 1 [0130.487] GetProcessHeap () returned 0x8a0000 [0130.487] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x908988 [0130.487] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\*", lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x993880 [0130.488] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0130.490] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xac3efa99, ftLastAccessTime.dwHighDateTime=0x1d4d5d3, ftLastWriteTime.dwLowDateTime=0xac3efa99, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="BCD", cAlternateFileName="")) returned 1 [0130.490] SetEvent (hEvent=0x2e8) returned 1 [0130.490] ResetEvent (hEvent=0x2ec) returned 1 [0130.490] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0130.490] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0130.490] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0130.490] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0130.490] GetProcessHeap () returned 0x8a0000 [0130.490] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0130.490] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\bg-BG\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993900 [0130.491] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.491] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.491] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0130.491] FindClose (in: hFindFile=0x993900 | out: hFindFile=0x993900) returned 1 [0130.492] GetProcessHeap () returned 0x8a0000 [0130.492] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0130.492] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4e6d79, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef4e6d79, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x175a0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="bootspaces.dll", cAlternateFileName="BOOTSP~1.DLL")) returned 1 [0130.492] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xef703e94, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0130.492] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef4fcd12, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x185a0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="bootvhd.dll", cAlternateFileName="")) returned 1 [0130.492] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0130.492] GetProcessHeap () returned 0x8a0000 [0130.492] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0130.492] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0130.493] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.493] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2109581d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.494] GetProcessHeap () returned 0x8a0000 [0130.494] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0130.494] GetProcessHeap () returned 0x8a0000 [0130.494] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0130.494] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\da-DK\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0130.685] GetProcessHeap () returned 0x8a0000 [0130.685] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0130.685] GetProcessHeap () returned 0x8a0000 [0130.685] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0130.686] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\de-DE\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b80 [0130.686] GetProcessHeap () returned 0x8a0000 [0130.686] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0130.686] GetProcessHeap () returned 0x8a0000 [0130.686] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0130.686] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\el-GR\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993700 [0130.687] GetProcessHeap () returned 0x8a0000 [0130.687] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0130.687] GetProcessHeap () returned 0x8a0000 [0130.687] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0130.687] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\en-GB\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0130.766] GetProcessHeap () returned 0x8a0000 [0130.766] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0130.766] GetProcessHeap () returned 0x8a0000 [0130.766] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0130.766] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\en-US\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993900 [0130.766] GetProcessHeap () returned 0x8a0000 [0130.766] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0130.766] GetProcessHeap () returned 0x8a0000 [0130.766] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0130.766] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\es-ES\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0130.767] GetProcessHeap () returned 0x8a0000 [0130.767] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0130.767] GetProcessHeap () returned 0x8a0000 [0130.767] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0130.767] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\es-MX\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0130.768] GetProcessHeap () returned 0x8a0000 [0130.768] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0130.768] GetProcessHeap () returned 0x8a0000 [0130.768] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0130.768] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\et-EE\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0130.768] GetProcessHeap () returned 0x8a0000 [0130.768] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0130.768] GetProcessHeap () returned 0x8a0000 [0130.768] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0130.768] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fi-FI\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0130.769] GetProcessHeap () returned 0x8a0000 [0130.769] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0130.770] GetProcessHeap () returned 0x8a0000 [0130.770] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0130.770] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Fonts\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0130.774] GetProcessHeap () returned 0x8a0000 [0130.774] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0130.774] GetProcessHeap () returned 0x8a0000 [0130.774] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0130.774] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fr-CA\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9934c0 [0130.775] GetProcessHeap () returned 0x8a0000 [0130.775] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0130.775] GetProcessHeap () returned 0x8a0000 [0130.775] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0130.775] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fr-FR\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0130.775] GetProcessHeap () returned 0x8a0000 [0130.775] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0130.775] GetProcessHeap () returned 0x8a0000 [0130.775] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0130.775] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\hr-HR\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b80 [0130.776] GetProcessHeap () returned 0x8a0000 [0130.776] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0130.776] GetProcessHeap () returned 0x8a0000 [0130.776] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0130.776] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\hu-HU\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0130.776] GetProcessHeap () returned 0x8a0000 [0130.776] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0130.776] GetProcessHeap () returned 0x8a0000 [0130.776] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0130.776] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\it-IT\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0130.777] GetProcessHeap () returned 0x8a0000 [0130.777] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0130.777] GetProcessHeap () returned 0x8a0000 [0130.777] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0130.777] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ja-JP\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9934c0 [0130.778] GetProcessHeap () returned 0x8a0000 [0130.778] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0130.778] GetProcessHeap () returned 0x8a0000 [0130.778] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0130.778] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ko-KR\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0130.783] GetProcessHeap () returned 0x8a0000 [0130.783] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0130.783] GetProcessHeap () returned 0x8a0000 [0130.783] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0130.783] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\lt-LT\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993580 [0130.784] GetProcessHeap () returned 0x8a0000 [0130.784] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0130.784] GetProcessHeap () returned 0x8a0000 [0130.784] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0130.784] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\lv-LV\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9934c0 [0130.785] GetProcessHeap () returned 0x8a0000 [0130.785] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0130.785] GetProcessHeap () returned 0x8a0000 [0130.785] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0130.785] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\nb-NO\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0130.786] GetProcessHeap () returned 0x8a0000 [0130.786] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0130.786] GetProcessHeap () returned 0x8a0000 [0130.786] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0130.786] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\nl-NL\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0130.786] GetProcessHeap () returned 0x8a0000 [0130.786] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0130.786] GetProcessHeap () returned 0x8a0000 [0130.786] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0130.786] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pl-PL\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993580 [0130.787] GetProcessHeap () returned 0x8a0000 [0130.787] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0130.787] GetProcessHeap () returned 0x8a0000 [0130.787] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0130.787] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pt-BR\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b80 [0130.788] GetProcessHeap () returned 0x8a0000 [0130.788] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0130.788] GetProcessHeap () returned 0x8a0000 [0130.788] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0130.788] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pt-PT\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0130.789] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.789] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.789] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6714dc, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0130.789] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6714dc, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0130.789] FindClose (in: hFindFile=0x993ac0 | out: hFindFile=0x993ac0) returned 1 [0130.789] GetProcessHeap () returned 0x8a0000 [0130.789] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0130.789] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="qps-ploc", cAlternateFileName="")) returned 1 [0130.789] GetProcessHeap () returned 0x8a0000 [0130.789] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0130.789] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993440 [0130.789] FindNextFileW (in: hFindFile=0x993440, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.789] FindNextFileW (in: hFindFile=0x993440, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12160, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.790] FindNextFileW (in: hFindFile=0x993440, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef684d85, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbd1a998, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xd398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0130.790] FindNextFileW (in: hFindFile=0x993440, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef684d85, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbd1a998, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xd398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0130.790] FindClose (in: hFindFile=0x993440 | out: hFindFile=0x993440) returned 1 [0130.790] GetProcessHeap () returned 0x8a0000 [0130.790] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0130.790] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1 [0130.790] GetProcessHeap () returned 0x8a0000 [0130.790] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0130.790] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Resources\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0130.791] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.791] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9abff9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef597530, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x169a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootres.dll", cAlternateFileName="")) returned 1 [0130.791] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0130.791] GetProcessHeap () returned 0x8a0000 [0130.791] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0130.791] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Resources\\en-US\\*", lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993500 [0130.792] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.792] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9baa67, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31acad58, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootres.dll.mui", cAlternateFileName="BOOTRE~1.MUI")) returned 1 [0130.792] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9baa67, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31acad58, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootres.dll.mui", cAlternateFileName="BOOTRE~1.MUI")) returned 0 [0130.792] FindClose (in: hFindFile=0x993500 | out: hFindFile=0x993500) returned 1 [0130.792] GetProcessHeap () returned 0x8a0000 [0130.792] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0130.792] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0130.792] FindClose (in: hFindFile=0x993ac0 | out: hFindFile=0x993ac0) returned 1 [0130.792] GetProcessHeap () returned 0x8a0000 [0130.792] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0130.793] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="ro-RO", cAlternateFileName="")) returned 1 [0130.793] GetProcessHeap () returned 0x8a0000 [0130.793] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0130.793] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ro-RO\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0130.794] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.794] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.794] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0130.794] FindClose (in: hFindFile=0x993a00 | out: hFindFile=0x993a00) returned 1 [0130.794] GetProcessHeap () returned 0x8a0000 [0130.794] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0130.794] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0130.794] GetProcessHeap () returned 0x8a0000 [0130.794] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0130.795] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ru-RU\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0130.795] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.795] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.795] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0130.795] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0130.795] FindClose (in: hFindFile=0x9935c0 | out: hFindFile=0x9935c0) returned 1 [0130.796] GetProcessHeap () returned 0x8a0000 [0130.796] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0130.796] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="sk-SK", cAlternateFileName="")) returned 1 [0130.796] GetProcessHeap () returned 0x8a0000 [0130.796] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0130.796] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sk-SK\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9938c0 [0130.796] FindNextFileW (in: hFindFile=0x9938c0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.796] FindNextFileW (in: hFindFile=0x9938c0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.796] FindNextFileW (in: hFindFile=0x9938c0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0130.796] FindClose (in: hFindFile=0x9938c0 | out: hFindFile=0x9938c0) returned 1 [0130.796] GetProcessHeap () returned 0x8a0000 [0130.796] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0130.796] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="sl-SI", cAlternateFileName="")) returned 1 [0130.796] GetProcessHeap () returned 0x8a0000 [0130.796] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0130.796] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sl-SI\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9938c0 [0130.797] FindNextFileW (in: hFindFile=0x9938c0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.797] FindNextFileW (in: hFindFile=0x9938c0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.797] FindNextFileW (in: hFindFile=0x9938c0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0130.797] FindClose (in: hFindFile=0x9938c0 | out: hFindFile=0x9938c0) returned 1 [0130.797] GetProcessHeap () returned 0x8a0000 [0130.797] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0130.797] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1 [0130.798] GetProcessHeap () returned 0x8a0000 [0130.798] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0130.798] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993580 [0130.798] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.798] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.798] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe318f070, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xaf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0130.798] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe318f070, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xaf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0130.798] FindClose (in: hFindFile=0x993580 | out: hFindFile=0x993580) returned 1 [0130.798] GetProcessHeap () returned 0x8a0000 [0130.798] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0130.798] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~2")) returned 1 [0130.798] GetProcessHeap () returned 0x8a0000 [0130.798] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0130.799] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sr-Latn-RS\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0130.800] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.800] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.800] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0130.800] FindClose (in: hFindFile=0x993ac0 | out: hFindFile=0x993ac0) returned 1 [0130.800] GetProcessHeap () returned 0x8a0000 [0130.800] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0130.800] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0130.800] GetProcessHeap () returned 0x8a0000 [0130.800] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0130.800] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sv-SE\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993740 [0130.802] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.802] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.802] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6a2250, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf98, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0130.802] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6a2250, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf98, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0130.802] FindClose (in: hFindFile=0x993740 | out: hFindFile=0x993740) returned 1 [0130.802] GetProcessHeap () returned 0x8a0000 [0130.802] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0130.802] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0130.802] GetProcessHeap () returned 0x8a0000 [0130.802] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0130.802] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\tr-TR\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0130.803] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.803] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12558, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.803] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6b5aca, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f4373a, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0130.803] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6b5aca, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f4373a, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0130.803] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0130.803] GetProcessHeap () returned 0x8a0000 [0130.803] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0130.803] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="uk-UA", cAlternateFileName="")) returned 1 [0130.803] GetProcessHeap () returned 0x8a0000 [0130.803] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0130.803] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\uk-UA\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9934c0 [0130.804] FindNextFileW (in: hFindFile=0x9934c0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.804] FindNextFileW (in: hFindFile=0x9934c0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.804] FindNextFileW (in: hFindFile=0x9934c0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0130.804] FindClose (in: hFindFile=0x9934c0 | out: hFindFile=0x9934c0) returned 1 [0130.804] GetProcessHeap () returned 0x8a0000 [0130.804] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0130.804] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef6c9427, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef6c9427, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1236, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="updaterevokesipolicy.p7b", cAlternateFileName="UPDATE~1.P7B")) returned 1 [0130.804] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0130.804] GetProcessHeap () returned 0x8a0000 [0130.805] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0130.805] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-CN\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0130.805] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.805] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.805] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6d7e9a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0130.805] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6d7e9a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0130.806] FindClose (in: hFindFile=0x993a00 | out: hFindFile=0x993a00) returned 1 [0130.806] GetProcessHeap () returned 0x8a0000 [0130.806] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0130.806] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0130.806] GetProcessHeap () returned 0x8a0000 [0130.806] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0130.806] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-HK\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0130.806] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.806] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf958, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.806] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x518ea25e, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe31db522, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xa558, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0130.806] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x518ea25e, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe31db522, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xa558, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0130.806] FindClose (in: hFindFile=0x993ac0 | out: hFindFile=0x993ac0) returned 1 [0130.806] GetProcessHeap () returned 0x8a0000 [0130.806] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0130.806] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0130.806] GetProcessHeap () returned 0x8a0000 [0130.806] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0130.806] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-TW\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993500 [0130.807] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.807] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.807] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa598, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0130.807] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa598, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0130.807] FindClose (in: hFindFile=0x993500 | out: hFindFile=0x993500) returned 1 [0130.808] GetProcessHeap () returned 0x8a0000 [0130.808] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0130.808] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0130.808] FindClose (in: hFindFile=0x993880 | out: hFindFile=0x993880) returned 1 [0130.808] GetProcessHeap () returned 0x8a0000 [0130.808] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x908988 | out: hHeap=0x8a0000) returned 1 [0130.808] FindNextFileW (in: hFindFile=0x8b9218, lpFindFileData=0x2e9f730 | out: lpFindFileData=0x2e9f730*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xe47a48a8, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfb90936b, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0x607da, dwReserved0=0x18afba5, dwReserved1=0x74889fc4, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0130.808] FindNextFileW (in: hFindFile=0x8b9218, lpFindFileData=0x2e9f730 | out: lpFindFileData=0x2e9f730*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5533ee0, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef9d0a0c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x18afba5, dwReserved1=0x74889fc4, cFileName="BOOTNXT", cAlternateFileName="")) returned 1 [0130.808] FindNextFileW (in: hFindFile=0x8b9218, lpFindFileData=0x2e9f730 | out: lpFindFileData=0x2e9f730*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xc4ee267e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4ee267e, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xf1c63cdd, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x18afba5, dwReserved1=0x74889fc4, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0130.808] FindNextFileW (in: hFindFile=0x8b9218, lpFindFileData=0x2e9f730 | out: lpFindFileData=0x2e9f730*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x74889fc4, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0130.808] FindNextFileW (in: hFindFile=0x8b9218, lpFindFileData=0x2e9f730 | out: lpFindFileData=0x2e9f730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x74889fc4, cFileName="ESD", cAlternateFileName="")) returned 1 [0130.808] GetProcessHeap () returned 0x8a0000 [0130.808] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x908988 [0130.808] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ESD\\*", lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x993680 [0131.072] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0131.072] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 0 [0131.072] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0131.072] GetProcessHeap () returned 0x8a0000 [0131.072] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x908988 | out: hHeap=0x8a0000) returned 1 [0131.072] FindNextFileW (in: hFindFile=0x8b9218, lpFindFileData=0x2e9f730 | out: lpFindFileData=0x2e9f730*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x7ef2dddf, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x7ef2dddf, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xd9ae9f82, ftLastWriteTime.dwHighDateTime=0x1d569cf, nFileSizeHigh=0x0, nFileSizeLow=0x332fe000, dwReserved0=0xa0000003, dwReserved1=0x74889fc4, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0131.072] FindNextFileW (in: hFindFile=0x8b9218, lpFindFileData=0x2e9f730 | out: lpFindFileData=0x2e9f730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x74889fc4, cFileName="Logs", cAlternateFileName="")) returned 1 [0131.072] GetProcessHeap () returned 0x8a0000 [0131.072] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x908988 [0131.072] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Logs\\*", lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0131.073] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0131.073] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5052fa31, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5052fa31, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Application.evtx", cAlternateFileName="APPLIC~1.EVT")) returned 1 [0131.073] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505ee5f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505ee5f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="HardwareEvents.evtx", cAlternateFileName="HARDWA~1.EVT")) returned 1 [0131.073] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505a2134, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505a2134, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Internet Explorer.evtx", cAlternateFileName="INTERN~1.EVT")) returned 1 [0131.073] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5057bed8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5057bed8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Key Management Service.evtx", cAlternateFileName="KEYMAN~1.EVT")) returned 1 [0131.073] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1dbd7c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1dbd7c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Client-Licensing-Platform%4Admin.evtx", cAlternateFileName="MICROS~1.EVT")) returned 1 [0131.074] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5d836e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5d836e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx", cAlternateFileName="MICROS~2.EVT")) returned 1 [0131.074] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9206ac5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9206ac5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9c0f529, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx", cAlternateFileName="MICROS~3.EVT")) returned 1 [0131.074] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppLocker%4EXE and DLL.evtx", cAlternateFileName="MICROS~4.EVT")) returned 1 [0131.074] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4169a7a, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4169a7a, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppLocker%4MSI and Script.evtx", cAlternateFileName="MI2EEA~1.EVT")) returned 1 [0131.074] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx", cAlternateFileName="MI07E1~1.EVT")) returned 1 [0131.074] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx", cAlternateFileName="MI8196~1.EVT")) returned 1 [0131.074] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd41b5f2d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd41b5f2d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppModel-Runtime%4Admin.evtx", cAlternateFileName="MIE36C~1.EVT")) returned 1 [0131.074] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd389efbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd389efbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppReadiness%4Admin.evtx", cAlternateFileName="MIC5CB~1.EVT")) returned 1 [0131.074] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd38c5212, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd38c5212, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppReadiness%4Operational.evtx", cAlternateFileName="MIF8AA~1.EVT")) returned 1 [0131.075] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppXDeployment%4Operational.evtx", cAlternateFileName="MI34FE~1.EVT")) returned 1 [0131.075] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x211000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppXDeploymentServer%4Operational.evtx", cAlternateFileName="MIA24C~1.EVT")) returned 1 [0131.075] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx", cAlternateFileName="MIDBEC~1.EVT")) returned 1 [0131.075] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85798667, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x85798667, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppxPackaging%4Operational.evtx", cAlternateFileName="MI54F1~1.EVT")) returned 1 [0131.075] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74d25ab, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74d25ab, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx", cAlternateFileName="MI111F~1.EVT")) returned 1 [0131.075] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f96ca4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe1f96ca4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Bits-Client%4Operational.evtx", cAlternateFileName="MI9465~1.EVT")) returned 1 [0131.075] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8783aa15, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8783aa15, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-CodeIntegrity%4Operational.evtx", cAlternateFileName="MI03A7~1.EVT")) returned 1 [0131.076] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3c71c5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3c71c5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx", cAlternateFileName="MI5CA2~1.EVT")) returned 1 [0131.076] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx", cAlternateFileName="MI5FD1~1.EVT")) returned 1 [0131.076] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Crypto-DPAPI%4Operational.evtx", cAlternateFileName="MI8BDF~1.EVT")) returned 1 [0131.076] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3ed420, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3ed420, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx", cAlternateFileName="MIAEBD~1.EVT")) returned 1 [0131.076] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cef47f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cef47f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-DeviceSetupManager%4Admin.evtx", cAlternateFileName="MIA726~1.EVT")) returned 1 [0131.076] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-DeviceSetupManager%4Operational.evtx", cAlternateFileName="MI08CB~1.EVT")) returned 1 [0131.076] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc967f17e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc967f17e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Dhcp-Client%4Admin.evtx", cAlternateFileName="MI8270~1.EVT")) returned 1 [0131.077] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc96cb64b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc96cb64b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Dhcpv6-Client%4Admin.evtx", cAlternateFileName="MIEBFF~1.EVT")) returned 1 [0131.077] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64aa7b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca64aa7b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Diagnosis-DPS%4Operational.evtx", cAlternateFileName="MI9F85~1.EVT")) returned 1 [0131.077] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd9ec80, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xfd9ec80, ftLastAccessTime.dwHighDateTime=0x1d1a04f, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Diagnostics-Performance%4Operational.evtx", cAlternateFileName="MIBE3D~1.EVT")) returned 1 [0131.077] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9658ef3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9658ef3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-GroupPolicy%4Operational.evtx", cAlternateFileName="MIE38D~1.EVT")) returned 1 [0131.077] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9dcc480, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9dcc480, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-HotspotAuth%4Operational.evtx", cAlternateFileName="MIE386~1.EVT")) returned 1 [0131.077] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b4bacf, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b4bacf, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx", cAlternateFileName="MI6B25~1.EVT")) returned 1 [0131.077] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb66288f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-International%4Operational.evtx", cAlternateFileName="MI854A~1.EVT")) returned 1 [0131.077] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x506ad1ac, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x506ad1ac, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Kernel-Boot%4Operational.evtx", cAlternateFileName="MI32CE~1.EVT")) returned 1 [0131.078] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Kernel-EventTracing%4Admin.evtx", cAlternateFileName="MIA934~1.EVT")) returned 1 [0131.078] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5071f8b0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5071f8b0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Kernel-PnP%4Configuration.evtx", cAlternateFileName="MIB32D~1.EVT")) returned 1 [0131.078] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8ebf6d7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc8ebf6d7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx", cAlternateFileName="MICA77~1.EVT")) returned 1 [0131.078] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5090f75d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5090f75d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx", cAlternateFileName="MI1E8D~1.EVT")) returned 1 [0131.078] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd75102f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd75102f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx", cAlternateFileName="MID067~1.EVT")) returned 1 [0131.078] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Kernel-WHEA%4Errors.evtx", cAlternateFileName="MIDE4D~1.EVT")) returned 1 [0131.078] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Kernel-WHEA%4Operational.evtx", cAlternateFileName="MI36C5~1.EVT")) returned 1 [0131.079] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59547c37, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x59547c37, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Known Folders API Service.evtx", cAlternateFileName="MI86D6~1.EVT")) returned 1 [0131.079] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb7386e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbb7386e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-LiveId%4Operational.evtx", cAlternateFileName="MI4C58~1.EVT")) returned 1 [0131.079] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93d06f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93d06f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-MUI%4Admin.evtx", cAlternateFileName="MI30D3~1.EVT")) returned 1 [0131.079] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93aa49b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93aa49b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-MUI%4Operational.evtx", cAlternateFileName="MI6F01~1.EVT")) returned 1 [0131.079] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9d33b19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9d33b19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-NCSI%4Operational.evtx", cAlternateFileName="MI483C~1.EVT")) returned 1 [0131.079] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbcf0ff2, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbcf0ff2, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-NetworkProfile%4Operational.evtx", cAlternateFileName="MIFC66~1.EVT")) returned 1 [0131.079] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ab3154, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ab3154, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Ntfs%4Operational.evtx", cAlternateFileName="MI6E98~1.EVT")) returned 1 [0131.080] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ad9393, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ad9393, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Ntfs%4WHC.evtx", cAlternateFileName="MIB2AC~1.EVT")) returned 1 [0131.080] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5fe5cb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5fe5cb, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx", cAlternateFileName="MI6AFE~1.EVT")) returned 1 [0131.080] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe24cdef0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe24cdef0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-ReadyBoost%4Operational.evtx", cAlternateFileName="MIB9D2~1.EVT")) returned 1 [0131.080] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd125335f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd125335f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx", cAlternateFileName="MI7A67~1.EVT")) returned 1 [0131.080] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-SettingSync%4Debug.evtx", cAlternateFileName="MI3773~1.EVT")) returned 1 [0131.080] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-SettingSync%4Operational.evtx", cAlternateFileName="MI36AA~1.EVT")) returned 1 [0131.080] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Shell-Core%4ActionCenter.evtx", cAlternateFileName="MI2E2E~1.EVT")) returned 1 [0131.080] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Shell-Core%4Operational.evtx", cAlternateFileName="MI1C6C~1.EVT")) returned 1 [0131.080] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-SmbClient%4Connectivity.evtx", cAlternateFileName="MI00FB~1.EVT")) returned 1 [0131.081] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97b042f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97b042f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-SMBClient%4Operational.evtx", cAlternateFileName="MID8B0~1.EVT")) returned 1 [0131.081] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-SmbClient%4Security.evtx", cAlternateFileName="MI8CEE~1.EVT")) returned 1 [0131.081] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb1ea1c9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb1ea1c9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-SMBServer%4Audit.evtx", cAlternateFileName="MIE3AD~1.EVT")) returned 1 [0131.081] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb19dd19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb19dd19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-SMBServer%4Connectivity.evtx", cAlternateFileName="MI8248~1.EVT")) returned 1 [0131.081] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb151873, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb151873, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-SMBServer%4Operational.evtx", cAlternateFileName="MI4B6B~1.EVT")) returned 1 [0131.082] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb177aca, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb177aca, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-SMBServer%4Security.evtx", cAlternateFileName="MI7709~1.EVT")) returned 1 [0131.082] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd751ea61, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd751ea61, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Store%4Operational.evtx", cAlternateFileName="MICEDD~1.EVT")) returned 1 [0131.082] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd0763ff, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd0763ff, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-TaskScheduler%4Maintenance.evtx", cAlternateFileName="MIE2F0~1.EVT")) returned 1 [0131.082] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5089d037, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5089d037, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx", cAlternateFileName="MIAB1D~1.EVT")) returned 1 [0131.082] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x508c32a6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x508c32a6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx", cAlternateFileName="MI62D3~1.EVT")) returned 1 [0131.082] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc14341c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc14341c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx", cAlternateFileName="MIEC03~1.EVT")) returned 1 [0131.082] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1b5b23, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1b5b23, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx", cAlternateFileName="MI1F5D~1.EVT")) returned 1 [0131.082] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74ac348, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74ac348, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-TWinUI%4Operational.evtx", cAlternateFileName="MIA925~1.EVT")) returned 1 [0131.082] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50aff605, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50aff605, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-User Profile Service%4Operational.evtx", cAlternateFileName="MI4D4C~1.EVT")) returned 1 [0131.083] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50981e6e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50981e6e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-UserPnp%4ActionCenter.evtx", cAlternateFileName="MI5FF0~1.EVT")) returned 1 [0131.083] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5095bc04, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5095bc04, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-UserPnp%4DeviceInstall.evtx", cAlternateFileName="MIBD88~1.EVT")) returned 1 [0131.083] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b97f64, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b97f64, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx", cAlternateFileName="MICC17~1.EVT")) returned 1 [0131.083] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc986efe1, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc986efe1, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Wcmsvc%4Operational.evtx", cAlternateFileName="MI72BF~1.EVT")) returned 1 [0131.083] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb426548, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb426548, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Windows Defender%4Operational.evtx", cAlternateFileName="MI7501~1.EVT")) returned 1 [0131.083] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb4729e7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb4729e7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Windows Defender%4WHC.evtx", cAlternateFileName="MIF226~1.EVT")) returned 1 [0131.083] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4b19353, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4b19353, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx", cAlternateFileName="MIDCC7~1.EVT")) returned 1 [0131.083] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9c9b1b6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9c9b1b6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx", cAlternateFileName="MI7771~1.EVT")) returned 1 [0131.084] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9df26e9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9df26e9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx", cAlternateFileName="MI4667~1.EVT")) returned 1 [0131.084] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd122d184, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd122d184, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Winlogon%4Operational.evtx", cAlternateFileName="MID6AB~1.EVT")) returned 1 [0131.084] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf164b9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcf164b9b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-WMI-Activity%4Operational.evtx", cAlternateFileName="MIFF83~1.EVT")) returned 1 [0131.084] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9a458f4, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Security.evtx", cAlternateFileName="SECURI~1.EVT")) returned 1 [0131.084] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a6db2c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x95a6db2c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Setup.evtx", cAlternateFileName="SETUP~1.EVT")) returned 1 [0131.084] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505097c4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505097c4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="System.evtx", cAlternateFileName="SYSTEM~1.EVT")) returned 1 [0131.084] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows PowerShell.evtx", cAlternateFileName="WINDOW~1.EVT")) returned 1 [0131.084] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows PowerShell.evtx", cAlternateFileName="WINDOW~1.EVT")) returned 0 [0131.084] FindClose (in: hFindFile=0x993a00 | out: hFindFile=0x993a00) returned 1 [0131.085] GetProcessHeap () returned 0x8a0000 [0131.085] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x908988 | out: hHeap=0x8a0000) returned 1 [0131.085] FindNextFileW (in: hFindFile=0x8b9218, lpFindFileData=0x2e9f730 | out: lpFindFileData=0x2e9f730*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6e97b025, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0x6e97b025, ftLastAccessTime.dwHighDateTime=0x1d3275c, ftLastWriteTime.dwLowDateTime=0xdb6ed807, ftLastWriteTime.dwHighDateTime=0x1d569cf, nFileSizeHigh=0x0, nFileSizeLow=0x28000000, dwReserved0=0xa0000003, dwReserved1=0x74889fc4, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0131.085] FindNextFileW (in: hFindFile=0x8b9218, lpFindFileData=0x2e9f730 | out: lpFindFileData=0x2e9f730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x74889fc4, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0131.085] GetProcessHeap () returned 0x8a0000 [0131.085] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x908988 [0131.085] FindFirstFileW (in: lpFileName="\\\\?\\C:\\PerfLogs\\*", lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows PowerShell.evtx", cAlternateFileName="䗺&")) returned 0xffffffff [0131.086] GetProcessHeap () returned 0x8a0000 [0131.086] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x908988 | out: hHeap=0x8a0000) returned 1 [0131.086] FindNextFileW (in: hFindFile=0x8b9218, lpFindFileData=0x2e9f730 | out: lpFindFileData=0x2e9f730*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x518874ca, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x518874ca, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x74889fc4, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0131.086] GetProcessHeap () returned 0x8a0000 [0131.086] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x908988 [0131.086] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\*", lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x518874ca, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x518874ca, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x9934c0 [0131.086] FindNextFileW (in: hFindFile=0x9934c0, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x518874ca, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x518874ca, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0131.086] FindNextFileW (in: hFindFile=0x9934c0, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1 [0131.086] GetProcessHeap () returned 0x8a0000 [0131.086] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0131.087] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9938c0 [0131.087] FindNextFileW (in: hFindFile=0x9938c0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.087] FindNextFileW (in: hFindFile=0x9938c0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESIGNER", cAlternateFileName="")) returned 1 [0131.087] GetProcessHeap () returned 0x8a0000 [0131.087] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x94a118 [0131.087] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\*", lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0131.090] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.090] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8c3a00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5c8c3a00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.OLB", cAlternateFileName="")) returned 1 [0131.090] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8c3a00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5c8c3a00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.OLB", cAlternateFileName="")) returned 0 [0131.090] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0131.090] GetProcessHeap () returned 0x8a0000 [0131.090] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x94a118 | out: hHeap=0x8a0000) returned 1 [0131.090] FindNextFileW (in: hFindFile=0x9938c0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft shared", cAlternateFileName="MICROS~1")) returned 1 [0131.090] GetProcessHeap () returned 0x8a0000 [0131.090] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x94a118 [0131.090] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\*", lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b80 [0131.090] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.090] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81028f76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x81028f76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClickToRun", cAlternateFileName="CLICKT~1")) returned 1 [0131.090] GetProcessHeap () returned 0x8a0000 [0131.090] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3674088 [0131.091] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\*", lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81028f76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x81028f76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0131.091] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81028f76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x81028f76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.092] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x809e6bf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x809e6bf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1 [0131.092] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x809e6bf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x809e6bf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1 [0131.092] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="API-MS~3.DLL")) returned 1 [0131.092] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="API-MS~4.DLL")) returned 1 [0131.092] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="APF10C~1.DLL")) returned 1 [0131.092] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1 [0131.092] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="APA632~1.DLL")) returned 1 [0131.092] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1 [0131.093] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x58c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="APFD9C~1.DLL")) returned 1 [0131.093] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="APC00F~1.DLL")) returned 1 [0131.093] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="AP0479~1.DLL")) returned 1 [0131.093] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="AP23C9~1.DLL")) returned 1 [0131.093] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1 [0131.093] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="APAE51~1.DLL")) returned 1 [0131.093] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x68c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1 [0131.093] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1 [0131.093] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="APFCAD~1.DLL")) returned 1 [0131.094] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="AP8F34~1.DLL")) returned 1 [0131.094] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="APD1B7~1.DLL")) returned 1 [0131.094] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="APBF0F~1.DLL")) returned 1 [0131.094] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="AP5E4C~1.DLL")) returned 1 [0131.094] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="AP80F4~1.DLL")) returned 1 [0131.094] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb979f700, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x27c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApiClient.dll", cAlternateFileName="APICLI~1.DLL")) returned 1 [0131.094] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9bc01200, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0xa02d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVCatalog.dll", cAlternateFileName="APPVCA~1.DLL")) returned 1 [0131.094] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x1f5ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="appvcleaner.exe", cAlternateFileName="APPVCL~1.EXE")) returned 1 [0131.095] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a330a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a330a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x4b0d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVFileSystemMetadata.dll", cAlternateFileName="APPVFI~1.DLL")) returned 1 [0131.095] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a330a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a330a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x2052d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVIntegration.dll", cAlternateFileName="APPVIN~1.DLL")) returned 1 [0131.095] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a59305, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a59305, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x726d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVIsvApi.dll", cAlternateFileName="APPVIS~1.DLL")) returned 1 [0131.095] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe1b7300, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0x60ea0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppvIsvStream32.dll", cAlternateFileName="APPVIS~2.DLL")) returned 1 [0131.095] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb5e67000, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x73aa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppvIsvStream64.dll", cAlternateFileName="APPVIS~3.DLL")) returned 1 [0131.095] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x336d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVIsvStreamingManager.dll", cAlternateFileName="APPVIS~4.DLL")) returned 1 [0131.096] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80aa57b9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80aa57b9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x1566d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVIsvSubsystemController.dll", cAlternateFileName="AP213A~1.DLL")) returned 1 [0131.096] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80aa57b9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80aa57b9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x18d60800, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0x1ae0a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppvIsvSubsystems32.dll", cAlternateFileName="AP3342~1.DLL")) returned 1 [0131.096] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80acba0b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80acba0b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbbdc5100, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x22e0a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppvIsvSubsystems64.dll", cAlternateFileName="AP4400~1.DLL")) returned 1 [0131.096] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80af1c6a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80af1c6a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x8a8d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVIsvVirtualization.dll", cAlternateFileName="AP485B~1.DLL")) returned 1 [0131.096] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80af1c6a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80af1c6a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x12cad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVManifest.dll", cAlternateFileName="APPVMA~1.DLL")) returned 1 [0131.096] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b17ebf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b17ebf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0xe76d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVOrchestration.dll", cAlternateFileName="APPVOR~1.DLL")) returned 1 [0131.096] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b17ebf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b17ebf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x13c4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVPolicy.dll", cAlternateFileName="APPVPO~1.DLL")) returned 1 [0131.096] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b17ebf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b17ebf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9e226c00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x7d0d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVScripting.dll", cAlternateFileName="APPVSC~1.DLL")) returned 1 [0131.096] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9e226c00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x406d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVShNotify.exe", cAlternateFileName="APPVSH~1.EXE")) returned 1 [0131.097] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x14115400, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0xc84c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2R32.dll", cAlternateFileName="")) returned 1 [0131.097] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb4b54300, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x127260, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2R64.dll", cAlternateFileName="")) returned 1 [0131.097] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8ee04f00, ftLastWriteTime.dwHighDateTime=0x1d0d67f, nFileSizeHigh=0x0, nFileSizeLow=0x1028, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RHeartbeatConfig.xml", cAlternateFileName="C2RHEA~1.XML")) returned 1 [0131.097] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb3841600, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RUI.en-us.dll", cAlternateFileName="C2RUIE~1.DLL")) returned 1 [0131.097] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x514a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="concrt140.dll", cAlternateFileName="CONCRT~1.DLL")) returned 1 [0131.097] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbd783a00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="i640.hash", cAlternateFileName="I640~1.HAS")) returned 1 [0131.097] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbc470d00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="i641033.hash", cAlternateFileName="I64103~1.HAS")) returned 1 [0131.098] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbe3eab00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x10ae80, dwReserved0=0x0, dwReserved1=0x0, cFileName="IntegratedOffice.exe", cAlternateFileName="INTEGR~1.EXE")) returned 1 [0131.098] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b8a5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b8a5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xa2e72000, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x578d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MavInject32.exe", cAlternateFileName="MAVINJ~1.EXE")) returned 1 [0131.098] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b8a5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b8a5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8745c00, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0x2ffa60, dwReserved0=0x0, dwReserved1=0x0, cFileName="mso20win32client.dll", cAlternateFileName="MSO20W~1.DLL")) returned 1 [0131.098] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80bb0837, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80bb0837, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xad6b600, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0x475e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="mso30win32client.dll", cAlternateFileName="MSO30W~1.DLL")) returned 1 [0131.098] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80bfccf1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80bfccf1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x307ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mso40uires.dll", cAlternateFileName="MSO40U~1.DLL")) returned 1 [0131.098] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c22f4a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80c22f4a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x10cc9700, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0x8e6060, dwReserved0=0x0, dwReserved1=0x0, cFileName="mso40uiwin32client.dll", cAlternateFileName="MSO40U~2.DLL")) returned 1 [0131.098] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x11fdc400, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0xee60, dwReserved0=0x0, dwReserved1=0x0, cFileName="msointl30.en-us.dll", cAlternateFileName="MSOINT~1.DLL")) returned 1 [0131.098] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c9565a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80c9565a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1909ea00, ftLastWriteTime.dwHighDateTime=0x1d098bf, nFileSizeHigh=0x0, nFileSizeLow=0xa12a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1 [0131.098] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cbb8b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80cbb8b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x9b0a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1 [0131.099] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cbb8b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80cbb8b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b6c4400, ftLastWriteTime.dwHighDateTime=0x1d098bf, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1 [0131.099] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cbb8b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80cbb8b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x5b1068, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeC2RClient.exe", cAlternateFileName="OFFICE~1.EXE")) returned 1 [0131.099] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d07d85, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d07d85, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0xf34d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeC2RCom.dll", cAlternateFileName="OFFICE~1.DLL")) returned 1 [0131.099] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d07d85, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d07d85, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbd0d7e00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x2a5e58, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeClickToRun.exe", cAlternateFileName="OFFICE~2.EXE")) returned 1 [0131.099] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3f141b52, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x12ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeUpdateSchedule.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0131.099] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3fa7ec8f, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x1162, dwReserved0=0x0, dwReserved1=0x0, cFileName="ServiceWatcherSchedule.xml", cAlternateFileName="SERVIC~1.XML")) returned 1 [0131.099] GetProcessHeap () returned 0x8a0000 [0131.099] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3674088 | out: hHeap=0x8a0000) returned 1 [0131.099] GetProcessHeap () returned 0x8a0000 [0131.099] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3674088 [0131.099] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\*", lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993900 [0131.102] GetProcessHeap () returned 0x8a0000 [0131.102] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0131.102] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05532b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993800 [0131.103] GetProcessHeap () returned 0x8a0000 [0131.103] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0131.103] GetProcessHeap () returned 0x8a0000 [0131.103] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0131.103] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0553f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0131.104] GetProcessHeap () returned 0x8a0000 [0131.104] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0131.104] GetProcessHeap () returned 0x8a0000 [0131.104] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0131.104] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0554b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0131.104] GetProcessHeap () returned 0x8a0000 [0131.104] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0131.104] GetProcessHeap () returned 0x8a0000 [0131.104] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0131.104] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05550d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0131.104] GetProcessHeap () returned 0x8a0000 [0131.104] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0131.104] GetProcessHeap () returned 0x8a0000 [0131.104] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0131.104] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0555b2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0131.105] GetProcessHeap () returned 0x8a0000 [0131.105] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0131.105] GetProcessHeap () returned 0x8a0000 [0131.105] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0131.105] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa055662c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993580 [0131.106] GetProcessHeap () returned 0x8a0000 [0131.106] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0131.106] GetProcessHeap () returned 0x8a0000 [0131.106] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0131.106] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0557085, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993580 [0131.106] GetProcessHeap () returned 0x8a0000 [0131.106] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0131.106] GetProcessHeap () returned 0x8a0000 [0131.106] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0131.106] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dd09d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993580 [0131.109] GetProcessHeap () returned 0x8a0000 [0131.109] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0131.109] GetProcessHeap () returned 0x8a0000 [0131.109] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0131.109] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05ddf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0131.422] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05ddf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.426] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.426] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.426] FindClose (in: hFindFile=0x9935c0 | out: hFindFile=0x9935c0) returned 1 [0131.426] GetProcessHeap () returned 0x8a0000 [0131.426] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0131.426] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dea14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-MX", cAlternateFileName="")) returned 1 [0131.426] GetProcessHeap () returned 0x8a0000 [0131.426] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0131.426] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dea14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0131.426] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dea14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.426] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2a46df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2a46df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2a46df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.427] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2a46df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2a46df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2a46df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.427] FindClose (in: hFindFile=0x993940 | out: hFindFile=0x993940) returned 1 [0131.427] GetProcessHeap () returned 0x8a0000 [0131.427] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0131.427] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df011, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et-EE", cAlternateFileName="")) returned 1 [0131.427] GetProcessHeap () returned 0x8a0000 [0131.427] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0131.427] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df011, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0131.427] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df011, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.427] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.427] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.427] FindClose (in: hFindFile=0x9935c0 | out: hFindFile=0x9935c0) returned 1 [0131.427] GetProcessHeap () returned 0x8a0000 [0131.427] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0131.427] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df7b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0131.427] GetProcessHeap () returned 0x8a0000 [0131.427] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0131.427] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df7b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0131.428] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df7b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.428] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.428] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.428] FindClose (in: hFindFile=0x993ac0 | out: hFindFile=0x993ac0) returned 1 [0131.428] GetProcessHeap () returned 0x8a0000 [0131.428] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0131.428] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8f49e8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd11f8841, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd11f8841, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x186b84, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickAnimation.avi", cAlternateFileName="")) returned 1 [0131.428] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8f49e8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd121ea9a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd121ea9a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xc4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickLearningWizard.exe", cAlternateFileName="")) returned 1 [0131.428] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0635c03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-CA", cAlternateFileName="")) returned 1 [0131.428] GetProcessHeap () returned 0x8a0000 [0131.428] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0131.428] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0635c03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0131.428] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0635c03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.428] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e126ecb, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e126ecb, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e126ecb, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.429] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e126ecb, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e126ecb, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e126ecb, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.429] FindClose (in: hFindFile=0x9939c0 | out: hFindFile=0x9939c0) returned 1 [0131.429] GetProcessHeap () returned 0x8a0000 [0131.429] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0131.429] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06369df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0131.429] GetProcessHeap () returned 0x8a0000 [0131.429] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0131.429] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06369df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0131.429] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06369df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.429] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.429] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.429] FindClose (in: hFindFile=0x9935c0 | out: hFindFile=0x9935c0) returned 1 [0131.429] GetProcessHeap () returned 0x8a0000 [0131.429] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0131.429] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0637839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fsdefinitions", cAlternateFileName="FSDEFI~1")) returned 1 [0131.429] GetProcessHeap () returned 0x8a0000 [0131.429] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0131.429] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0637839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0131.430] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0637839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.430] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638633, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxpad", cAlternateFileName="")) returned 1 [0131.430] GetProcessHeap () returned 0x8a0000 [0131.430] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d40b8 [0131.430] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\*", lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638633, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0131.430] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638633, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.430] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxbase.xml", cAlternateFileName="")) returned 1 [0131.430] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxbase.xml", cAlternateFileName="")) returned 0 [0131.430] FindClose (in: hFindFile=0x9935c0 | out: hFindFile=0x9935c0) returned 1 [0131.430] GetProcessHeap () returned 0x8a0000 [0131.430] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d40b8 | out: hHeap=0x8a0000) returned 1 [0131.430] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxpad.xml", cAlternateFileName="")) returned 1 [0131.430] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638c00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="insert", cAlternateFileName="")) returned 1 [0131.430] GetProcessHeap () returned 0x8a0000 [0131.431] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d40b8 [0131.431] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\*", lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638c00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993700 [0131.431] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638c00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.431] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x387, dwReserved0=0x0, dwReserved1=0x0, cFileName="insertbase.xml", cAlternateFileName="")) returned 1 [0131.431] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x387, dwReserved0=0x0, dwReserved1=0x0, cFileName="insertbase.xml", cAlternateFileName="")) returned 0 [0131.431] FindClose (in: hFindFile=0x993700 | out: hFindFile=0x993700) returned 1 [0131.431] GetProcessHeap () returned 0x8a0000 [0131.431] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d40b8 | out: hHeap=0x8a0000) returned 1 [0131.431] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="insert.xml", cAlternateFileName="")) returned 1 [0131.431] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa063932e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypad", cAlternateFileName="")) returned 1 [0131.431] GetProcessHeap () returned 0x8a0000 [0131.431] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d40b8 [0131.431] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\*", lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa063932e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0131.431] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa063932e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.431] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x180, dwReserved0=0x0, dwReserved1=0x0, cFileName="ea.xml", cAlternateFileName="")) returned 1 [0131.431] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x387, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypadbase.xml", cAlternateFileName="")) returned 1 [0131.431] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor-kor.xml", cAlternateFileName="")) returned 1 [0131.432] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor-kor.xml", cAlternateFileName="")) returned 0 [0131.432] FindClose (in: hFindFile=0x9939c0 | out: hFindFile=0x9939c0) returned 1 [0131.432] GetProcessHeap () returned 0x8a0000 [0131.432] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d40b8 | out: hHeap=0x8a0000) returned 1 [0131.432] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypad.xml", cAlternateFileName="")) returned 1 [0131.432] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cd023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="main", cAlternateFileName="")) returned 1 [0131.432] GetProcessHeap () returned 0x8a0000 [0131.432] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d40b8 [0131.432] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\*", lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cd023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993600 [0131.433] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cd023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.433] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd05, dwReserved0=0x0, dwReserved1=0x0, cFileName="base.xml", cAlternateFileName="")) returned 1 [0131.433] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="baseAltGr_rtl.xml", cAlternateFileName="")) returned 1 [0131.433] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_altgr.xml", cAlternateFileName="")) returned 1 [0131.433] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_ca.xml", cAlternateFileName="")) returned 1 [0131.434] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_heb.xml", cAlternateFileName="")) returned 1 [0131.434] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_jpn.xml", cAlternateFileName="")) returned 1 [0131.434] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_kor.xml", cAlternateFileName="")) returned 1 [0131.434] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_rtl.xml", cAlternateFileName="")) returned 1 [0131.434] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x40e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp.xml", cAlternateFileName="")) returned 1 [0131.434] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3af9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr.xml", cAlternateFileName="")) returned 1 [0131.434] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x264b, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-changjei.xml", cAlternateFileName="")) returned 1 [0131.435] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-dayi.xml", cAlternateFileName="")) returned 1 [0131.435] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-phonetic.xml", cAlternateFileName="")) returned 1 [0131.435] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-phonetic.xml", cAlternateFileName="")) returned 0 [0131.435] FindClose (in: hFindFile=0x993600 | out: hFindFile=0x993600) returned 1 [0131.436] GetProcessHeap () returned 0x8a0000 [0131.436] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d40b8 | out: hHeap=0x8a0000) returned 1 [0131.436] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xadda, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.xml", cAlternateFileName="")) returned 1 [0131.436] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cdb88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskclearui", cAlternateFileName="OSKCLE~1")) returned 1 [0131.436] GetProcessHeap () returned 0x8a0000 [0131.436] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d40b8 [0131.436] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\*", lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cdb88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0131.436] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cdb88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.436] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskclearuibase.xml", cAlternateFileName="")) returned 1 [0131.436] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskclearuibase.xml", cAlternateFileName="")) returned 0 [0131.436] FindClose (in: hFindFile=0x993940 | out: hFindFile=0x993940) returned 1 [0131.436] GetProcessHeap () returned 0x8a0000 [0131.436] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d40b8 | out: hHeap=0x8a0000) returned 1 [0131.436] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskclearui.xml", cAlternateFileName="")) returned 1 [0131.437] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenu", cAlternateFileName="")) returned 1 [0131.437] GetProcessHeap () returned 0x8a0000 [0131.437] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d40b8 [0131.437] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\*", lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0131.437] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.437] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenubase.xml", cAlternateFileName="")) returned 1 [0131.437] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenubase.xml", cAlternateFileName="")) returned 0 [0131.437] FindClose (in: hFindFile=0x9937c0 | out: hFindFile=0x9937c0) returned 1 [0131.437] GetProcessHeap () returned 0x8a0000 [0131.437] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d40b8 | out: hHeap=0x8a0000) returned 1 [0131.437] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenu.xml", cAlternateFileName="")) returned 1 [0131.437] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce7a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknav", cAlternateFileName="")) returned 1 [0131.437] GetProcessHeap () returned 0x8a0000 [0131.437] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d40b8 [0131.437] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\*", lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce7a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0131.438] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce7a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.438] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x42d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknavbase.xml", cAlternateFileName="")) returned 1 [0131.438] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x42d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknavbase.xml", cAlternateFileName="")) returned 0 [0131.438] FindClose (in: hFindFile=0x9935c0 | out: hFindFile=0x9935c0) returned 1 [0131.438] GetProcessHeap () returned 0x8a0000 [0131.438] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d40b8 | out: hHeap=0x8a0000) returned 1 [0131.438] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknav.xml", cAlternateFileName="")) returned 1 [0131.438] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ceb7f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpad", cAlternateFileName="OSKNUM~1")) returned 1 [0131.438] GetProcessHeap () returned 0x8a0000 [0131.438] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d40b8 [0131.438] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\*", lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ceb7f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0131.438] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ceb7f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.438] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x73d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpadbase.xml", cAlternateFileName="")) returned 1 [0131.438] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x73d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpadbase.xml", cAlternateFileName="")) returned 0 [0131.438] FindClose (in: hFindFile=0x9935c0 | out: hFindFile=0x9935c0) returned 1 [0131.439] GetProcessHeap () returned 0x8a0000 [0131.439] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d40b8 | out: hHeap=0x8a0000) returned 1 [0131.439] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpad.xml", cAlternateFileName="")) returned 1 [0131.439] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cef41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpred", cAlternateFileName="")) returned 1 [0131.439] GetProcessHeap () returned 0x8a0000 [0131.439] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d40b8 [0131.439] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\*", lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cef41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0131.439] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cef41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.439] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpredbase.xml", cAlternateFileName="")) returned 1 [0131.439] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpredbase.xml", cAlternateFileName="")) returned 0 [0131.439] FindClose (in: hFindFile=0x993a00 | out: hFindFile=0x993a00) returned 1 [0131.439] GetProcessHeap () returned 0x8a0000 [0131.439] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d40b8 | out: hHeap=0x8a0000) returned 1 [0131.439] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpred.xml", cAlternateFileName="")) returned 1 [0131.439] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf371, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols", cAlternateFileName="")) returned 1 [0131.439] GetProcessHeap () returned 0x8a0000 [0131.439] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d40b8 [0131.440] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\*", lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf371, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0131.440] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf371, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.440] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ea-sym.xml", cAlternateFileName="")) returned 1 [0131.440] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x325, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp-sym.xml", cAlternateFileName="")) returned 1 [0131.440] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeef, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbase.xml", cAlternateFileName="")) returned 1 [0131.440] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeef, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbase.xml", cAlternateFileName="")) returned 0 [0131.440] FindClose (in: hFindFile=0x993940 | out: hFindFile=0x993940) returned 1 [0131.440] GetProcessHeap () returned 0x8a0000 [0131.440] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d40b8 | out: hHeap=0x8a0000) returned 1 [0131.440] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols.xml", cAlternateFileName="")) returned 1 [0131.440] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols.xml", cAlternateFileName="")) returned 0 [0131.440] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0131.440] GetProcessHeap () returned 0x8a0000 [0131.440] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0131.441] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-IL", cAlternateFileName="")) returned 1 [0131.441] GetProcessHeap () returned 0x8a0000 [0131.441] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0131.441] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0131.442] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.442] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.442] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.442] FindClose (in: hFindFile=0x9935c0 | out: hFindFile=0x9935c0) returned 1 [0131.442] GetProcessHeap () returned 0x8a0000 [0131.442] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0131.442] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-HR", cAlternateFileName="")) returned 1 [0131.442] GetProcessHeap () returned 0x8a0000 [0131.442] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0131.442] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0131.442] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.442] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.443] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.443] FindClose (in: hFindFile=0x993ac0 | out: hFindFile=0x993ac0) returned 1 [0131.443] GetProcessHeap () returned 0x8a0000 [0131.443] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0131.443] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0131.443] GetProcessHeap () returned 0x8a0000 [0131.443] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0131.443] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0131.443] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.443] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.443] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.443] FindClose (in: hFindFile=0x9935c0 | out: hFindFile=0x9935c0) returned 1 [0131.443] GetProcessHeap () returned 0x8a0000 [0131.443] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0131.443] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8ce781, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe382bd1f, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe382bd1f, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb620, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrcommonlm.dat", cAlternateFileName="")) returned 1 [0131.443] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HWRCustomization", cAlternateFileName="HWRCUS~1")) returned 1 [0131.444] GetProcessHeap () returned 0x8a0000 [0131.444] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0131.444] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\HWRCustomization\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993780 [0131.444] FindNextFileW (in: hFindFile=0x993780, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.444] FindNextFileW (in: hFindFile=0x993780, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0131.444] FindClose (in: hFindFile=0x993780 | out: hFindFile=0x993780) returned 1 [0131.444] GetProcessHeap () returned 0x8a0000 [0131.444] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0131.444] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85c57278, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xb269cdea, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb269cdea, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x79bc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrenclm.dat", cAlternateFileName="")) returned 1 [0131.444] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8ce781, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe38781cd, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe38781cd, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x10cb30, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrlatinlm.dat", cAlternateFileName="")) returned 1 [0131.444] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85cc99ae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xb28b2edf, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb28b2edf, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2662f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrusalm.dat", cAlternateFileName="")) returned 1 [0131.444] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85cc99ae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xb281a570, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb281a570, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x339380, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrusash.dat", cAlternateFileName="")) returned 1 [0131.444] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x58400, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkDiv.dll", cAlternateFileName="")) returned 1 [0131.445] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1ecc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkObj.dll", cAlternateFileName="")) returned 1 [0131.445] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe467a929, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe467a929, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x59a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization.exe", cAlternateFileName="")) returned 1 [0131.445] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x972, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsar.xml", cAlternateFileName="")) returned 1 [0131.445] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa20, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscat.xml", cAlternateFileName="")) returned 1 [0131.445] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x99e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipschs.xml", cAlternateFileName="")) returned 1 [0131.445] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscht.xml", cAlternateFileName="")) returned 1 [0131.445] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscsy.xml", cAlternateFileName="")) returned 1 [0131.445] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsdan.xml", cAlternateFileName="")) returned 1 [0131.445] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsdeu.xml", cAlternateFileName="")) returned 1 [0131.446] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsel.xml", cAlternateFileName="")) returned 1 [0131.446] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsen.xml", cAlternateFileName="")) returned 1 [0131.446] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xbd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsesp.xml", cAlternateFileName="")) returned 1 [0131.446] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d14d081, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d14d081, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPSEventLogMsg.dll", cAlternateFileName="")) returned 1 [0131.446] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa62, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsfin.xml", cAlternateFileName="")) returned 1 [0131.446] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa44, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsfra.xml", cAlternateFileName="")) returned 1 [0131.446] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipshe.xml", cAlternateFileName="")) returned 1 [0131.446] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipshi.xml", cAlternateFileName="")) returned 1 [0131.446] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c96711d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipshrv.xml", cAlternateFileName="")) returned 1 [0131.447] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d14d081, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d14d081, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsid.xml", cAlternateFileName="")) returned 1 [0131.447] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9de, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsita.xml", cAlternateFileName="")) returned 1 [0131.447] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c96711d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c96711d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c96711d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9da, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsjpn.xml", cAlternateFileName="")) returned 1 [0131.447] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipskor.xml", cAlternateFileName="")) returned 1 [0131.447] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe462e472, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe462e472, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsMigrationPlugin.dll", cAlternateFileName="")) returned 1 [0131.447] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsnld.xml", cAlternateFileName="")) returned 1 [0131.447] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa14, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsnor.xml", cAlternateFileName="")) returned 1 [0131.447] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa28, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsplk.xml", cAlternateFileName="")) returned 1 [0131.448] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe46546cb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe46546cb, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1ec00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsPlugin.dll", cAlternateFileName="")) returned 1 [0131.448] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsptb.xml", cAlternateFileName="")) returned 1 [0131.448] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsptg.xml", cAlternateFileName="")) returned 1 [0131.448] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c96711d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c96711d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c96711d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsrom.xml", cAlternateFileName="")) returned 1 [0131.448] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsrus.xml", cAlternateFileName="")) returned 1 [0131.448] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssrb.xml", cAlternateFileName="")) returned 1 [0131.448] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssrl.xml", cAlternateFileName="")) returned 1 [0131.448] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssve.xml", cAlternateFileName="")) returned 1 [0131.448] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xaa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipstr.xml", cAlternateFileName="")) returned 1 [0131.448] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0769b1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0131.449] GetProcessHeap () returned 0x8a0000 [0131.449] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0131.449] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0769b1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993700 [0131.449] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0769b1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.449] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9592f9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e9592f9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e9592f9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.449] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9592f9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e9592f9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e9592f9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.449] FindClose (in: hFindFile=0x993700 | out: hFindFile=0x993700) returned 1 [0131.449] GetProcessHeap () returned 0x8a0000 [0131.449] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0131.449] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0131.449] GetProcessHeap () returned 0x8a0000 [0131.449] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0131.449] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0131.449] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.449] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9592f9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e9592f9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e9592f9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.449] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9592f9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e9592f9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e9592f9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.450] FindClose (in: hFindFile=0x993ac0 | out: hFindFile=0x993ac0) returned 1 [0131.450] GetProcessHeap () returned 0x8a0000 [0131.450] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0131.450] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0131.450] GetProcessHeap () returned 0x8a0000 [0131.450] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0131.450] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0131.450] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.450] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.450] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.450] FindClose (in: hFindFile=0x9935c0 | out: hFindFile=0x9935c0) returned 1 [0131.450] GetProcessHeap () returned 0x8a0000 [0131.450] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0131.450] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LanguageModel", cAlternateFileName="LANGUA~1")) returned 1 [0131.450] GetProcessHeap () returned 0x8a0000 [0131.450] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0131.450] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0131.450] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.451] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="chstic.dgml", cAlternateFileName="")) returned 1 [0131.451] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="chstic.dgml", cAlternateFileName="")) returned 0 [0131.451] FindClose (in: hFindFile=0x9935c0 | out: hFindFile=0x9935c0) returned 1 [0131.451] GetProcessHeap () returned 0x8a0000 [0131.451] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0131.451] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt-LT", cAlternateFileName="")) returned 1 [0131.451] GetProcessHeap () returned 0x8a0000 [0131.451] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0131.451] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993800 [0131.451] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.451] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.451] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.451] FindClose (in: hFindFile=0x993800 | out: hFindFile=0x993800) returned 1 [0131.451] GetProcessHeap () returned 0x8a0000 [0131.451] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0131.451] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv-LV", cAlternateFileName="")) returned 1 [0131.452] GetProcessHeap () returned 0x8a0000 [0131.452] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0131.452] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0131.452] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.452] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.452] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.452] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0131.452] GetProcessHeap () returned 0x8a0000 [0131.452] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0131.452] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a4376e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1f30e81, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1f30e81, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x19f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll", cAlternateFileName="")) returned 1 [0131.452] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463d4edd, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xc2004e62, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463d4edd, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x7b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Ink.dll", cAlternateFileName="")) returned 1 [0131.452] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a4376e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd51e08b5, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd51e08b5, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x178200, dwReserved0=0x0, dwReserved1=0x0, cFileName="mip.exe", cAlternateFileName="")) returned 1 [0131.453] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a1d507, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xde1acd8d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xde1acd8d, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x612e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mraut.dll", cAlternateFileName="")) returned 1 [0131.453] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwgst.dll", cAlternateFileName="")) returned 1 [0131.453] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8ce781, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe3805ad4, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe3805ad4, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x106a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwLatin.dll", cAlternateFileName="")) returned 1 [0131.453] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076bff5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0131.453] GetProcessHeap () returned 0x8a0000 [0131.453] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0131.453] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076bff5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0131.454] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076bff5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.454] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e90ce26, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e90ce26, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e90ce26, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.454] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e90ce26, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e90ce26, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e90ce26, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.454] FindClose (in: hFindFile=0x993a00 | out: hFindFile=0x993a00) returned 1 [0131.454] GetProcessHeap () returned 0x8a0000 [0131.454] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0131.454] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0131.454] GetProcessHeap () returned 0x8a0000 [0131.454] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0131.454] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0131.454] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.454] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.454] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.454] FindClose (in: hFindFile=0x9937c0 | out: hFindFile=0x9937c0) returned 1 [0131.455] GetProcessHeap () returned 0x8a0000 [0131.455] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0131.455] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0131.455] GetProcessHeap () returned 0x8a0000 [0131.455] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0131.455] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0131.455] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.455] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.455] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.455] FindClose (in: hFindFile=0x993ac0 | out: hFindFile=0x993ac0) returned 1 [0131.455] GetProcessHeap () returned 0x8a0000 [0131.455] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0131.455] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0131.455] GetProcessHeap () returned 0x8a0000 [0131.455] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0131.455] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0131.455] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.455] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.456] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.456] FindClose (in: hFindFile=0x9935c0 | out: hFindFile=0x9935c0) returned 1 [0131.456] GetProcessHeap () returned 0x8a0000 [0131.456] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0131.456] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0131.456] GetProcessHeap () returned 0x8a0000 [0131.456] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0131.456] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0131.456] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.456] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.456] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.456] FindClose (in: hFindFile=0x9935c0 | out: hFindFile=0x9935c0) returned 1 [0131.456] GetProcessHeap () returned 0x8a0000 [0131.456] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0131.456] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-RO", cAlternateFileName="")) returned 1 [0131.456] GetProcessHeap () returned 0x8a0000 [0131.456] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0131.456] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0131.457] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.457] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.457] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.457] FindClose (in: hFindFile=0x9935c0 | out: hFindFile=0x9935c0) returned 1 [0131.457] GetProcessHeap () returned 0x8a0000 [0131.457] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0131.457] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll", cAlternateFileName="")) returned 1 [0131.457] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0131.457] GetProcessHeap () returned 0x8a0000 [0131.457] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0131.457] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0131.457] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.457] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.457] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.458] FindClose (in: hFindFile=0x9935c0 | out: hFindFile=0x9935c0) returned 1 [0131.458] GetProcessHeap () returned 0x8a0000 [0131.458] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0131.458] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe46546cb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe46546cb, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.exe", cAlternateFileName="")) returned 1 [0131.458] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-SK", cAlternateFileName="")) returned 1 [0131.458] GetProcessHeap () returned 0x8a0000 [0131.458] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0131.458] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0131.458] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.458] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.458] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.458] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0131.458] GetProcessHeap () returned 0x8a0000 [0131.458] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0131.458] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-SI", cAlternateFileName="")) returned 1 [0131.458] GetProcessHeap () returned 0x8a0000 [0131.458] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0131.459] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0131.459] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.459] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.459] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.459] FindClose (in: hFindFile=0x9935c0 | out: hFindFile=0x9935c0) returned 1 [0131.459] GetProcessHeap () returned 0x8a0000 [0131.459] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0131.459] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~1")) returned 1 [0131.459] GetProcessHeap () returned 0x8a0000 [0131.459] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0131.459] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993780 [0131.656] FindNextFileW (in: hFindFile=0x993780, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.671] FindNextFileW (in: hFindFile=0x993780, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.672] FindNextFileW (in: hFindFile=0x993780, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.672] FindClose (in: hFindFile=0x993780 | out: hFindFile=0x993780) returned 1 [0131.673] GetProcessHeap () returned 0x8a0000 [0131.673] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0131.673] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0131.673] GetProcessHeap () returned 0x8a0000 [0131.673] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0131.673] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0131.673] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.673] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.673] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.673] FindClose (in: hFindFile=0x993ac0 | out: hFindFile=0x993ac0) returned 1 [0131.673] GetProcessHeap () returned 0x8a0000 [0131.673] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0131.673] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe467a929, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe467a929, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabIpsps.dll", cAlternateFileName="")) returned 1 [0131.673] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463d4edd, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x779da8e5, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463d4edd, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x3e9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tabskb.dll", cAlternateFileName="")) returned 1 [0131.673] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x5f780, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabTip.exe", cAlternateFileName="")) returned 1 [0131.674] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th-TH", cAlternateFileName="")) returned 1 [0131.674] GetProcessHeap () returned 0x8a0000 [0131.674] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0131.674] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0131.674] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.674] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.674] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.674] FindClose (in: hFindFile=0x9937c0 | out: hFindFile=0x9937c0) returned 1 [0131.674] GetProcessHeap () returned 0x8a0000 [0131.674] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0131.674] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1aad768, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1aad768, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x109400, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipRes.dll", cAlternateFileName="")) returned 1 [0131.674] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll", cAlternateFileName="")) returned 1 [0131.674] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79680792, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x79680792, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x79680792, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x101200, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipskins.dll", cAlternateFileName="")) returned 1 [0131.674] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7965a52d, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x7965a52d, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x7965a52d, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x9e1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tiptsf.dll", cAlternateFileName="")) returned 1 [0131.674] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463d4edd, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x6ebfe576, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463d4edd, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x17a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tpcps.dll", cAlternateFileName="")) returned 1 [0131.675] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0131.675] GetProcessHeap () returned 0x8a0000 [0131.675] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0131.675] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0131.675] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.675] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.675] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.675] FindClose (in: hFindFile=0x9935c0 | out: hFindFile=0x9935c0) returned 1 [0131.675] GetProcessHeap () returned 0x8a0000 [0131.675] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0131.675] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-UA", cAlternateFileName="")) returned 1 [0131.675] GetProcessHeap () returned 0x8a0000 [0131.675] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0131.676] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0131.676] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.676] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.676] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.676] FindClose (in: hFindFile=0x9939c0 | out: hFindFile=0x9939c0) returned 1 [0131.676] GetProcessHeap () returned 0x8a0000 [0131.676] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0131.676] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0131.676] GetProcessHeap () returned 0x8a0000 [0131.676] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0131.676] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0131.676] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.676] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.677] GetProcessHeap () returned 0x8a0000 [0131.677] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0131.677] GetProcessHeap () returned 0x8a0000 [0131.677] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0131.677] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0131.677] GetProcessHeap () returned 0x8a0000 [0131.677] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0131.677] GetProcessHeap () returned 0x8a0000 [0131.677] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3674088 | out: hHeap=0x8a0000) returned 1 [0131.678] GetProcessHeap () returned 0x8a0000 [0131.678] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3674088 [0131.678] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\*", lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0131.678] GetProcessHeap () returned 0x8a0000 [0131.678] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0131.678] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa098aa4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0131.679] GetProcessHeap () returned 0x8a0000 [0131.679] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0131.679] GetProcessHeap () returned 0x8a0000 [0131.679] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3674088 | out: hHeap=0x8a0000) returned 1 [0131.679] GetProcessHeap () returned 0x8a0000 [0131.679] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3674088 [0131.680] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\*", lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9f60362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993900 [0131.680] GetProcessHeap () returned 0x8a0000 [0131.680] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0131.680] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa0a26299, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda982389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0131.681] GetProcessHeap () returned 0x8a0000 [0131.681] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0131.681] GetProcessHeap () returned 0x8a0000 [0131.682] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3674088 | out: hHeap=0x8a0000) returned 1 [0131.682] GetProcessHeap () returned 0x8a0000 [0131.682] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3674088 [0131.682] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993780 [0131.683] GetProcessHeap () returned 0x8a0000 [0131.683] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3674088 | out: hHeap=0x8a0000) returned 1 [0131.683] GetProcessHeap () returned 0x8a0000 [0131.683] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3674088 [0131.683] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\*", lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0131.683] GetProcessHeap () returned 0x8a0000 [0131.683] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3674088 | out: hHeap=0x8a0000) returned 1 [0131.683] GetProcessHeap () returned 0x8a0000 [0131.683] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3674088 [0131.683] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\*", lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0131.684] GetProcessHeap () returned 0x8a0000 [0131.684] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3674088 | out: hHeap=0x8a0000) returned 1 [0131.685] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TextConv", cAlternateFileName="")) returned 1 [0131.685] GetProcessHeap () returned 0x8a0000 [0131.685] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3674088 [0131.685] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\*", lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0131.685] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.685] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0131.685] GetProcessHeap () returned 0x8a0000 [0131.685] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0131.685] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\en-US\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0131.685] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.685] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0131.685] FindClose (in: hFindFile=0x9935c0 | out: hFindFile=0x9935c0) returned 1 [0131.685] GetProcessHeap () returned 0x8a0000 [0131.685] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0131.686] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0131.686] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0131.686] GetProcessHeap () returned 0x8a0000 [0131.686] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3674088 | out: hHeap=0x8a0000) returned 1 [0131.686] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Triedit", cAlternateFileName="")) returned 1 [0131.686] GetProcessHeap () returned 0x8a0000 [0131.686] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3674088 [0131.687] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\*", lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0131.687] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.687] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0131.687] GetProcessHeap () returned 0x8a0000 [0131.687] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0131.687] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\en-US\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0131.687] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.687] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0131.687] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0131.687] GetProcessHeap () returned 0x8a0000 [0131.687] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0131.687] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0131.688] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0131.688] GetProcessHeap () returned 0x8a0000 [0131.688] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3674088 | out: hHeap=0x8a0000) returned 1 [0131.688] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC", cAlternateFileName="")) returned 1 [0131.688] GetProcessHeap () returned 0x8a0000 [0131.688] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3674088 [0131.689] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\*", lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0131.689] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.689] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8127e00, ftCreationTime.dwHighDateTime=0x1cbd076, ftLastAccessTime.dwLowDateTime=0xcd0a4098, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd8127e00, ftLastWriteTime.dwHighDateTime=0x1cbd076, nFileSizeHigh=0x0, nFileSizeLow=0xf1b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia100.dll", cAlternateFileName="")) returned 1 [0131.689] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfe87c00, ftCreationTime.dwHighDateTime=0x1cbfe36, ftLastAccessTime.dwLowDateTime=0x2ce22546, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xcfe87c00, ftLastWriteTime.dwHighDateTime=0x1cbfe36, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll", cAlternateFileName="")) returned 1 [0131.689] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfe87c00, ftCreationTime.dwHighDateTime=0x1cbfe36, ftLastAccessTime.dwLowDateTime=0x2ce22546, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xcfe87c00, ftLastWriteTime.dwHighDateTime=0x1cbfe36, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll", cAlternateFileName="")) returned 0 [0131.689] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0131.689] GetProcessHeap () returned 0x8a0000 [0131.689] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3674088 | out: hHeap=0x8a0000) returned 1 [0131.689] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX", cAlternateFileName="")) returned 1 [0131.689] GetProcessHeap () returned 0x8a0000 [0131.690] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3674088 [0131.690] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VGX\\*", lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993900 [0131.690] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.690] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a69a2a7, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xb3fd6e56, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x4a69a2a7, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0xf1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 1 [0131.690] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a69a2a7, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xb3fd6e56, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x4a69a2a7, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0xf1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 0 [0131.690] FindClose (in: hFindFile=0x993900 | out: hFindFile=0x993900) returned 1 [0131.690] GetProcessHeap () returned 0x8a0000 [0131.690] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3674088 | out: hHeap=0x8a0000) returned 1 [0131.690] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTO", cAlternateFileName="")) returned 1 [0131.690] GetProcessHeap () returned 0x8a0000 [0131.690] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3674088 [0131.690] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\*", lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0131.690] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.690] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aebd53e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0131.690] GetProcessHeap () returned 0x8a0000 [0131.690] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0131.690] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aebd53e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0131.910] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aebd53e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.911] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0131.911] GetProcessHeap () returned 0x8a0000 [0131.911] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d40b8 [0131.911] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\*", lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0131.911] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.911] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6d7a0a, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x30a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstallerUI.dll", cAlternateFileName="VSTOIN~1.DLL")) returned 1 [0131.911] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x5080, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1 [0131.911] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x5080, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 0 [0131.911] FindClose (in: hFindFile=0x9935c0 | out: hFindFile=0x9935c0) returned 1 [0131.911] GetProcessHeap () returned 0x8a0000 [0131.911] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d40b8 | out: hHeap=0x8a0000) returned 1 [0131.911] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x18888, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstaller.exe", cAlternateFileName="VSTOIN~1.EXE")) returned 1 [0131.912] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x59a70, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoader.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1 [0131.912] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xbee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="VSTOME~1.DLL")) returned 1 [0131.912] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xbee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="VSTOME~1.DLL")) returned 0 [0131.916] FindClose (in: hFindFile=0x993ac0 | out: hFindFile=0x993ac0) returned 1 [0131.916] GetProcessHeap () returned 0x8a0000 [0131.916] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0131.916] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x29080, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee.dll", cAlternateFileName="")) returned 1 [0131.916] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x4298, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee100.tlb", cAlternateFileName="VSTOEE~1.TLB")) returned 1 [0131.916] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x5898, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 1 [0131.916] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x5898, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 0 [0131.917] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0131.917] GetProcessHeap () returned 0x8a0000 [0131.917] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3674088 | out: hHeap=0x8a0000) returned 1 [0131.918] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTO", cAlternateFileName="")) returned 0 [0131.918] FindClose (in: hFindFile=0x993b80 | out: hFindFile=0x993b80) returned 1 [0131.918] GetProcessHeap () returned 0x8a0000 [0131.918] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x94a118 | out: hHeap=0x8a0000) returned 1 [0131.918] FindNextFileW (in: hFindFile=0x9938c0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0131.918] GetProcessHeap () returned 0x8a0000 [0131.918] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x94a118 [0131.918] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Services\\*", lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0131.918] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.918] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440ad34a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440ad34a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440ad34a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 1 [0131.918] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440ad34a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440ad34a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440ad34a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 0 [0131.918] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0131.919] GetProcessHeap () returned 0x8a0000 [0131.919] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x94a118 | out: hHeap=0x8a0000) returned 1 [0131.919] FindNextFileW (in: hFindFile=0x9938c0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1 [0131.919] GetProcessHeap () returned 0x8a0000 [0131.919] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x94a118 [0131.919] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\*", lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b80 [0131.922] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.924] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ado", cAlternateFileName="")) returned 1 [0131.924] GetProcessHeap () returned 0x8a0000 [0131.924] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0131.924] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\*", lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993900 [0131.926] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.926] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52a0c6a1, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x52a0c6a1, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x52a0c6a1, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3a08, dwReserved0=0x0, dwReserved1=0x0, cFileName="adojavas.inc", cAlternateFileName="")) returned 1 [0131.926] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529e643a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x529e643a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x529e643a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3b5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="adovbs.inc", cAlternateFileName="")) returned 1 [0131.926] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0131.927] GetProcessHeap () returned 0x8a0000 [0131.927] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0131.927] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\en-US\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993580 [0131.927] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.927] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9483e2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 1 [0131.927] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9483e2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 0 [0131.927] FindClose (in: hFindFile=0x993580 | out: hFindFile=0x993580) returned 1 [0131.927] GetProcessHeap () returned 0x8a0000 [0131.927] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0131.927] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll", cAlternateFileName="")) returned 1 [0131.927] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463fb128, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xced4b5c5, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x463fb128, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x12d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado15.dll", cAlternateFileName="")) returned 1 [0131.927] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado20.tlb", cAlternateFileName="")) returned 1 [0131.927] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado21.tlb", cAlternateFileName="")) returned 1 [0131.928] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado25.tlb", cAlternateFileName="")) returned 1 [0131.928] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado26.tlb", cAlternateFileName="")) returned 1 [0131.928] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado27.tlb", cAlternateFileName="")) returned 1 [0131.928] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c6f28a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4c6f28a5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4c6f28a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado28.tlb", cAlternateFileName="")) returned 1 [0131.928] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c6f28a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4c6f28a5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4c6f28a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado60.tlb", cAlternateFileName="")) returned 1 [0131.928] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463fb128, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xd005e363, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x463fb128, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x58e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd.dll", cAlternateFileName="")) returned 1 [0131.928] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437960ad, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x437960ad, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x437960ad, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd28.tlb", cAlternateFileName="")) returned 1 [0131.928] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msador15.dll", cAlternateFileName="")) returned 1 [0131.928] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x438ed65e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x438ed65e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x438ed65e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msador28.tlb", cAlternateFileName="")) returned 1 [0131.929] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463fb128, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xc5b43065, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x463fb128, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x62e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox.dll", cAlternateFileName="")) returned 1 [0131.929] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c5ad98, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43c5ad98, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43c5ad98, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox28.tlb", cAlternateFileName="")) returned 1 [0131.929] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437960ad, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x437960ad, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x437960ad, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x16400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 1 [0131.929] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437960ad, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x437960ad, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x437960ad, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x16400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 0 [0131.929] FindClose (in: hFindFile=0x993900 | out: hFindFile=0x993900) returned 1 [0131.929] GetProcessHeap () returned 0x8a0000 [0131.929] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0131.930] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DirectDB.dll", cAlternateFileName="")) returned 1 [0131.930] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0131.930] GetProcessHeap () returned 0x8a0000 [0131.930] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0131.931] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\en-US\\*", lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993580 [0131.931] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.931] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd86035, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75fdf500, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 1 [0131.931] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd86035, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75fdf500, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 0 [0131.931] FindClose (in: hFindFile=0x993580 | out: hFindFile=0x993580) returned 1 [0131.931] GetProcessHeap () returned 0x8a0000 [0131.931] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0131.932] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadc", cAlternateFileName="")) returned 1 [0131.932] GetProcessHeap () returned 0x8a0000 [0131.932] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0131.932] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\*", lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0131.935] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.935] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x276, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcjavas.inc", cAlternateFileName="")) returned 1 [0131.935] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41dce0ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41dce0ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41dce0ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x26f, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcvbs.inc", cAlternateFileName="")) returned 1 [0131.935] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0131.935] GetProcessHeap () returned 0x8a0000 [0131.935] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0131.936] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0131.937] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.937] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b99489e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll.mui", cAlternateFileName="")) returned 1 [0131.937] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9e0d51, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb2c9ec00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll.mui", cAlternateFileName="")) returned 1 [0131.937] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll.mui", cAlternateFileName="")) returned 1 [0131.937] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll.mui", cAlternateFileName="")) returned 1 [0131.937] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 1 [0131.937] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 0 [0131.937] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0131.937] GetProcessHeap () returned 0x8a0000 [0131.937] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0131.937] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadce.dll", cAlternateFileName="")) returned 1 [0131.938] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41dce0ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41dce0ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41dce0ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll", cAlternateFileName="")) returned 1 [0131.938] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3b400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadco.dll", cAlternateFileName="")) returned 1 [0131.938] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll", cAlternateFileName="")) returned 1 [0131.938] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x44400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadds.dll", cAlternateFileName="")) returned 1 [0131.938] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44060e78, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x44060e78, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x44060e78, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll", cAlternateFileName="")) returned 1 [0131.938] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d5b9b4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d5b9b4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d5b9b4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll", cAlternateFileName="")) returned 1 [0131.938] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d5b9b4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d5b9b4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d5b9b4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x57000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprst.dll", cAlternateFileName="")) returned 1 [0131.938] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44060e78, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x44060e78, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x44060e78, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x36200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdarem.dll", cAlternateFileName="")) returned 1 [0131.938] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4403ac10, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4403ac10, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4403ac10, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll", cAlternateFileName="")) returned 1 [0131.939] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 1 [0131.939] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 0 [0131.939] FindClose (in: hFindFile=0x993ac0 | out: hFindFile=0x993ac0) returned 1 [0131.941] GetProcessHeap () returned 0x8a0000 [0131.941] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0131.942] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ole DB", cAlternateFileName="OLEDB~1")) returned 1 [0131.942] GetProcessHeap () returned 0x8a0000 [0131.942] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0131.942] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\*", lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0131.944] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.945] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0131.946] GetProcessHeap () returned 0x8a0000 [0131.946] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0131.946] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0131.946] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.946] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll.mui", cAlternateFileName="")) returned 1 [0131.946] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9e0d51, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll.mui", cAlternateFileName="")) returned 1 [0131.946] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll.mui", cAlternateFileName="")) returned 1 [0131.946] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb65d7300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 1 [0131.946] ResetEvent (hEvent=0x2e4) returned 1 [0131.946] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0132.044] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb65d7300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 0 [0132.044] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0132.044] GetProcessHeap () returned 0x8a0000 [0132.044] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0132.044] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x18600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaosp.dll", cAlternateFileName="")) returned 1 [0132.044] ResetEvent (hEvent=0x2e4) returned 1 [0132.044] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0132.045] ResetEvent (hEvent=0x2e4) returned 1 [0132.045] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0132.046] ResetEvent (hEvent=0x2e4) returned 1 [0132.046] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0132.047] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5be00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaps.dll", cAlternateFileName="")) returned 1 [0132.047] ResetEvent (hEvent=0x2e4) returned 1 [0132.047] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0132.048] ResetEvent (hEvent=0x2e4) returned 1 [0132.048] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0132.049] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xaa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasql.dll", cAlternateFileName="")) returned 1 [0132.049] ResetEvent (hEvent=0x2e4) returned 1 [0132.049] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0132.052] ResetEvent (hEvent=0x2e4) returned 1 [0132.052] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0132.074] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll", cAlternateFileName="")) returned 1 [0132.074] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1ca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdatl3.dll", cAlternateFileName="")) returned 1 [0132.074] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msxactps.dll", cAlternateFileName="")) returned 1 [0132.074] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ce9283, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41ce9283, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41ce9283, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32.dll", cAlternateFileName="")) returned 1 [0132.074] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ce9283, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41ce9283, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41ce9283, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll", cAlternateFileName="")) returned 1 [0132.075] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ce9283, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41ce9283, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41ce9283, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x264c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbjvs.inc", cAlternateFileName="")) returned 1 [0132.075] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x26f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbvbs.inc", cAlternateFileName="")) returned 1 [0132.075] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c80ffc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43c80ffc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43c80ffc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.dll", cAlternateFileName="")) returned 1 [0132.075] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c80ffc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43c80ffc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43c80ffc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll", cAlternateFileName="")) returned 1 [0132.075] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4fa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.dll", cAlternateFileName="")) returned 1 [0132.075] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll", cAlternateFileName="")) returned 1 [0132.075] ResetEvent (hEvent=0x2e4) returned 1 [0132.075] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0132.077] ResetEvent (hEvent=0x2e4) returned 1 [0132.077] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0132.080] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll", cAlternateFileName="")) returned 0 [0132.080] FindClose (in: hFindFile=0x993ac0 | out: hFindFile=0x993ac0) returned 1 [0132.080] GetProcessHeap () returned 0x8a0000 [0132.080] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0132.081] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd0a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32.dll", cAlternateFileName="")) returned 1 [0132.082] ResetEvent (hEvent=0x2e4) returned 1 [0132.082] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0132.084] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 1 [0132.084] ResetEvent (hEvent=0x2e4) returned 1 [0132.084] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0132.086] ResetEvent (hEvent=0x2e4) returned 1 [0132.086] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0132.088] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 0 [0132.088] FindClose (in: hFindFile=0x993b80 | out: hFindFile=0x993b80) returned 1 [0132.088] GetProcessHeap () returned 0x8a0000 [0132.089] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x94a118 | out: hHeap=0x8a0000) returned 1 [0132.089] FindNextFileW (in: hFindFile=0x9938c0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 0 [0132.089] FindClose (in: hFindFile=0x9938c0 | out: hFindFile=0x9938c0) returned 1 [0132.089] GetProcessHeap () returned 0x8a0000 [0132.089] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0132.089] FindNextFileW (in: hFindFile=0x9934c0, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a307d95, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d0779b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d0779b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0132.089] ResetEvent (hEvent=0x2e4) returned 1 [0132.090] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0132.241] FindNextFileW (in: hFindFile=0x9934c0, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4ea7bdb9, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x4ea7bdb9, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0132.241] GetProcessHeap () returned 0x8a0000 [0132.241] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x94a118 [0132.302] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4ea7bdb9, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x4ea7bdb9, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0132.302] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4ea7bdb9, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x4ea7bdb9, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.302] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0132.302] GetProcessHeap () returned 0x8a0000 [0132.302] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0132.303] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\*", lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0132.303] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.303] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2dfe94, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x68e10600, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll.mui", cAlternateFileName="")) returned 1 [0132.303] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b3c4cb5, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75fdf500, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe.mui", cAlternateFileName="")) returned 1 [0132.303] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2212c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x74ccc800, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 1 [0132.304] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2212c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x74ccc800, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 0 [0132.304] FindClose (in: hFindFile=0x9939c0 | out: hFindFile=0x9939c0) returned 1 [0132.304] GetProcessHeap () returned 0x8a0000 [0132.304] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0132.304] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a4ec31b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a4ec31b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a4ec31b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExtExport.exe", cAlternateFileName="")) returned 1 [0132.304] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9b1003, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a9b1003, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a9b1003, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd400, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll", cAlternateFileName="")) returned 1 [0132.304] ResetEvent (hEvent=0x2e4) returned 1 [0132.304] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0132.342] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a49fe45, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a49fe45, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a49fe45, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="iediagcmd.exe", cAlternateFileName="")) returned 1 [0132.342] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a70c9a1, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xbc534b5e, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x4a70c9a1, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x7a800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe", cAlternateFileName="")) returned 1 [0132.342] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a49fe45, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a49fe45, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a49fe45, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x36c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ielowutil.exe", cAlternateFileName="")) returned 1 [0132.342] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a49fe45, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a49fe45, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a4c60b4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x63800, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEShims.dll", cAlternateFileName="")) returned 1 [0132.343] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa182b3a4, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa1c0b0e4, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x8ca44c00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc9340, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe", cAlternateFileName="")) returned 1 [0132.343] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0132.343] GetProcessHeap () returned 0x8a0000 [0132.343] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0132.343] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\images\\*", lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9938c0 [0132.343] FindNextFileW (in: hFindFile=0x9938c0, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.343] FindNextFileW (in: hFindFile=0x9938c0, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a55ea4d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a55ea4d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a55ea4d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0x0, cFileName="bing.ico", cAlternateFileName="")) returned 1 [0132.343] FindNextFileW (in: hFindFile=0x9938c0, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a55ea4d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a55ea4d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a55ea4d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0x0, cFileName="bing.ico", cAlternateFileName="")) returned 0 [0132.343] FindClose (in: hFindFile=0x9938c0 | out: hFindFile=0x9938c0) returned 1 [0132.343] GetProcessHeap () returned 0x8a0000 [0132.343] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0132.343] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGNUP", cAlternateFileName="")) returned 1 [0132.343] GetProcessHeap () returned 0x8a0000 [0132.343] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0132.343] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\SIGNUP\\*", lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0132.343] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.344] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30c952e, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x970b4468, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x970b4468, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 1 [0132.344] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30c952e, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x970b4468, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x970b4468, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 0 [0132.344] FindClose (in: hFindFile=0x993ac0 | out: hFindFile=0x993ac0) returned 1 [0132.344] GetProcessHeap () returned 0x8a0000 [0132.344] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0132.344] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9b1003, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a9b1003, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a9b1003, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc218, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0132.344] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f1d3140, ftCreationTime.dwHighDateTime=0x1d54fa8, ftLastAccessTime.dwLowDateTime=0x15d10020, ftLastAccessTime.dwHighDateTime=0x1d51e3b, ftLastWriteTime.dwLowDateTime=0x15d10020, ftLastWriteTime.dwHighDateTime=0x1d51e3b, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="treaty.exe", cAlternateFileName="")) returned 1 [0132.344] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f1d3140, ftCreationTime.dwHighDateTime=0x1d54fa8, ftLastAccessTime.dwLowDateTime=0x15d10020, ftLastAccessTime.dwHighDateTime=0x1d51e3b, ftLastWriteTime.dwLowDateTime=0x15d10020, ftLastWriteTime.dwHighDateTime=0x1d51e3b, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="treaty.exe", cAlternateFileName="")) returned 0 [0132.344] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0132.344] GetProcessHeap () returned 0x8a0000 [0132.344] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x94a118 | out: hHeap=0x8a0000) returned 1 [0132.345] FindNextFileW (in: hFindFile=0x9934c0, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa235ac5b, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa235ac5b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Java", cAlternateFileName="")) returned 1 [0132.345] GetProcessHeap () returned 0x8a0000 [0132.345] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x94a118 [0132.346] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa235ac5b, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa235ac5b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0132.346] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa235ac5b, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa235ac5b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.346] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre1.8.0_144", cAlternateFileName="JRE18~1.0_1")) returned 1 [0132.346] GetProcessHeap () returned 0x8a0000 [0132.346] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0132.347] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\*", lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993600 [0132.347] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.347] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bin", cAlternateFileName="")) returned 1 [0132.347] GetProcessHeap () returned 0x8a0000 [0132.347] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0132.347] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\*", lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0132.347] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.347] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x172440, dwReserved0=0x0, dwReserved1=0x0, cFileName="awt.dll", cAlternateFileName="")) returned 1 [0132.348] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bci.dll", cAlternateFileName="")) returned 1 [0132.348] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="dcpr.dll", cAlternateFileName="")) returned 1 [0132.348] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15040, dwReserved0=0x0, dwReserved1=0x0, cFileName="decora_sse.dll", cAlternateFileName="DECORA~1.DLL")) returned 1 [0132.348] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8f840, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy.dll", cAlternateFileName="")) returned 1 [0132.348] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2891a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dtplugin", cAlternateFileName="")) returned 1 [0132.348] GetProcessHeap () returned 0x8a0000 [0132.348] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36a40a0 [0132.348] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2891a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0132.348] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2891a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.348] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfa840, dwReserved0=0x0, dwReserved1=0x0, cFileName="deployJava1.dll", cAlternateFileName="DEPLOY~1.DLL")) returned 1 [0132.348] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11a640, dwReserved0=0x0, dwReserved1=0x0, cFileName="npdeployJava1.dll", cAlternateFileName="NPDEPL~1.DLL")) returned 1 [0132.349] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11a640, dwReserved0=0x0, dwReserved1=0x0, cFileName="npdeployJava1.dll", cAlternateFileName="NPDEPL~1.DLL")) returned 0 [0132.349] FindClose (in: hFindFile=0x993ac0 | out: hFindFile=0x993ac0) returned 1 [0132.349] GetProcessHeap () returned 0x8a0000 [0132.349] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36a40a0 | out: hHeap=0x8a0000) returned 1 [0132.349] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_shmem.dll", cAlternateFileName="")) returned 1 [0132.349] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6040, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_socket.dll", cAlternateFileName="DT_SOC~1.DLL")) returned 1 [0132.349] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21440, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.dll", cAlternateFileName="")) returned 1 [0132.349] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x43040, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontmanager.dll", cAlternateFileName="FONTMA~1.DLL")) returned 1 [0132.349] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2da40, dwReserved0=0x0, dwReserved1=0x0, cFileName="fxplugins.dll", cAlternateFileName="FXPLUG~1.DLL")) returned 1 [0132.349] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x40e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="glass.dll", cAlternateFileName="")) returned 1 [0132.349] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6f440, dwReserved0=0x0, dwReserved1=0x0, cFileName="glib-lite.dll", cAlternateFileName="GLIB-L~1.DLL")) returned 1 [0132.350] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x97440, dwReserved0=0x0, dwReserved1=0x0, cFileName="gstreamer-lite.dll", cAlternateFileName="GSTREA~1.DLL")) returned 1 [0132.350] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x26a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="hprof.dll", cAlternateFileName="")) returned 1 [0132.350] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e240, dwReserved0=0x0, dwReserved1=0x0, cFileName="instrument.dll", cAlternateFileName="INSTRU~1.DLL")) returned 1 [0132.350] ResetEvent (hEvent=0x2e4) returned 1 [0132.350] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0132.511] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="j2pcsc.dll", cAlternateFileName="")) returned 1 [0132.511] ResetEvent (hEvent=0x2e4) returned 1 [0132.512] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0132.513] ResetEvent (hEvent=0x2e4) returned 1 [0132.513] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0132.514] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf840, dwReserved0=0x0, dwReserved1=0x0, cFileName="j2pkcs11.dll", cAlternateFileName="")) returned 1 [0132.514] ResetEvent (hEvent=0x2e4) returned 1 [0132.514] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0132.515] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5240, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaas_nt.dll", cAlternateFileName="")) returned 1 [0132.515] ResetEvent (hEvent=0x2e4) returned 1 [0132.515] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0132.523] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8640, dwReserved0=0x0, dwReserved1=0x0, cFileName="jabswitch.exe", cAlternateFileName="JABSWI~1.EXE")) returned 1 [0132.523] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="java-rmi.exe", cAlternateFileName="")) returned 1 [0132.523] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.dll", cAlternateFileName="")) returned 1 [0132.523] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.exe", cAlternateFileName="")) returned 1 [0132.523] ResetEvent (hEvent=0x2e4) returned 1 [0132.523] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0132.527] ResetEvent (hEvent=0x2e4) returned 1 [0132.527] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0132.556] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="JavaAccessBridge-64.dll", cAlternateFileName="JAVAAC~1.DLL")) returned 1 [0132.556] ResetEvent (hEvent=0x2e4) returned 1 [0132.556] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0132.576] ResetEvent (hEvent=0x2e4) returned 1 [0132.576] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0132.586] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2dc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="javacpl.cpl", cAlternateFileName="")) returned 1 [0132.586] ResetEvent (hEvent=0x2e4) returned 1 [0132.586] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0132.607] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="javacpl.exe", cAlternateFileName="")) returned 1 [0132.608] ResetEvent (hEvent=0x2e4) returned 1 [0132.608] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0133.143] ResetEvent (hEvent=0x2e4) returned 1 [0133.144] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0133.151] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx_font.dll", cAlternateFileName="JAVAFX~1.DLL")) returned 1 [0133.151] ResetEvent (hEvent=0x2e4) returned 1 [0133.152] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0133.181] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x83640, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx_font_t2k.dll", cAlternateFileName="JAVAFX~2.DLL")) returned 1 [0133.181] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1f440, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx_iio.dll", cAlternateFileName="JAVAFX~3.DLL")) returned 1 [0133.181] ResetEvent (hEvent=0x2e4) returned 1 [0133.181] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0133.200] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaw.exe", cAlternateFileName="")) returned 1 [0133.200] ResetEvent (hEvent=0x2e4) returned 1 [0133.200] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0133.247] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e040, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.exe", cAlternateFileName="")) returned 1 [0133.247] ResetEvent (hEvent=0x2e4) returned 1 [0133.247] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0133.520] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440, dwReserved0=0x0, dwReserved1=0x0, cFileName="java_crw_demo.dll", cAlternateFileName="JAVA_C~1.DLL")) returned 1 [0133.520] ResetEvent (hEvent=0x2e4) returned 1 [0133.520] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0133.593] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jawt.dll", cAlternateFileName="")) returned 1 [0133.593] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="JAWTAccessBridge-64.dll", cAlternateFileName="JAWTAC~1.DLL")) returned 1 [0133.593] ResetEvent (hEvent=0x2e4) returned 1 [0133.593] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0133.609] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x31440, dwReserved0=0x0, dwReserved1=0x0, cFileName="jdwp.dll", cAlternateFileName="")) returned 1 [0133.609] ResetEvent (hEvent=0x2e4) returned 1 [0133.609] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0133.641] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr.dll", cAlternateFileName="")) returned 1 [0133.641] ResetEvent (hEvent=0x2e4) returned 1 [0133.641] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0133.666] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22240, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxmedia.dll", cAlternateFileName="")) returned 1 [0133.666] ResetEvent (hEvent=0x2e4) returned 1 [0133.666] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0133.685] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7511d3f, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7511d3f, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2794a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxwebkit.dll", cAlternateFileName="JFXWEB~1.DLL")) returned 1 [0133.685] ResetEvent (hEvent=0x2e4) returned 1 [0133.685] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0134.185] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jjs.exe", cAlternateFileName="")) returned 1 [0134.185] ResetEvent (hEvent=0x2e4) returned 1 [0134.186] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0134.390] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2aa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jli.dll", cAlternateFileName="")) returned 1 [0134.390] ResetEvent (hEvent=0x2e4) returned 1 [0134.390] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0134.548] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa897bfc2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x48440, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2iexp.dll", cAlternateFileName="")) returned 1 [0134.548] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa897bfc2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa897bfc2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1b640, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2launcher.exe", cAlternateFileName="JP2LAU~1.EXE")) returned 1 [0134.549] ResetEvent (hEvent=0x2e4) returned 1 [0134.549] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0134.582] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2native.dll", cAlternateFileName="JP2NAT~1.DLL")) returned 1 [0134.583] ResetEvent (hEvent=0x2e4) returned 1 [0134.583] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0134.594] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2ssv.dll", cAlternateFileName="")) returned 1 [0134.594] ResetEvent (hEvent=0x2e4) returned 1 [0134.595] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0134.621] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2d640, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpeg.dll", cAlternateFileName="")) returned 1 [0134.621] ResetEvent (hEvent=0x2e4) returned 1 [0134.621] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0134.647] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdt.dll", cAlternateFileName="")) returned 1 [0134.647] ResetEvent (hEvent=0x2e4) returned 1 [0134.647] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0134.670] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsound.dll", cAlternateFileName="")) returned 1 [0134.670] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsoundds.dll", cAlternateFileName="")) returned 1 [0134.670] ResetEvent (hEvent=0x2e4) returned 1 [0134.670] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0135.008] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x35e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="kcms.dll", cAlternateFileName="")) returned 1 [0135.008] ResetEvent (hEvent=0x2e4) returned 1 [0135.008] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0135.032] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="keytool.exe", cAlternateFileName="")) returned 1 [0135.032] ResetEvent (hEvent=0x2e4) returned 1 [0135.032] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0135.057] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="kinit.exe", cAlternateFileName="")) returned 1 [0135.057] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="klist.exe", cAlternateFileName="")) returned 1 [0135.057] ResetEvent (hEvent=0x2e4) returned 1 [0135.058] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0135.275] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="ktab.exe", cAlternateFileName="")) returned 1 [0135.275] ResetEvent (hEvent=0x2e4) returned 1 [0135.276] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0135.296] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39040, dwReserved0=0x0, dwReserved1=0x0, cFileName="lcms.dll", cAlternateFileName="")) returned 1 [0135.296] ResetEvent (hEvent=0x2e4) returned 1 [0135.296] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0135.325] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9040, dwReserved0=0x0, dwReserved1=0x0, cFileName="management.dll", cAlternateFileName="MANAGE~1.DLL")) returned 1 [0135.325] ResetEvent (hEvent=0x2e4) returned 1 [0135.325] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0135.346] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9fa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="mlib_image.dll", cAlternateFileName="MLIB_I~1.DLL")) returned 1 [0135.346] ResetEvent (hEvent=0x2e4) returned 1 [0135.346] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0135.359] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa12a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1 [0135.359] ResetEvent (hEvent=0x2e4) returned 1 [0135.359] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0135.378] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xca750, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1 [0135.378] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1 [0135.378] ResetEvent (hEvent=0x2e4) returned 1 [0135.378] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0135.394] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="net.dll", cAlternateFileName="")) returned 1 [0135.394] ResetEvent (hEvent=0x2e4) returned 1 [0135.394] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0135.480] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xec40, dwReserved0=0x0, dwReserved1=0x0, cFileName="nio.dll", cAlternateFileName="")) returned 1 [0135.480] ResetEvent (hEvent=0x2e4) returned 1 [0135.480] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0135.499] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="npt.dll", cAlternateFileName="")) returned 1 [0135.499] ResetEvent (hEvent=0x2e4) returned 1 [0135.499] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0135.515] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="orbd.exe", cAlternateFileName="")) returned 1 [0135.515] ResetEvent (hEvent=0x2e4) returned 1 [0135.515] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0135.536] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="pack200.exe", cAlternateFileName="")) returned 1 [0135.536] ResetEvent (hEvent=0x2e4) returned 1 [0135.536] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0135.550] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin2", cAlternateFileName="")) returned 1 [0135.550] GetProcessHeap () returned 0x8a0000 [0135.550] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0135.551] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0135.551] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.551] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xca750, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1 [0135.551] ResetEvent (hEvent=0x2e4) returned 1 [0135.551] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0135.723] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39440, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjp2.dll", cAlternateFileName="")) returned 1 [0135.723] ResetEvent (hEvent=0x2e4) returned 1 [0135.723] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0135.927] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39440, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjp2.dll", cAlternateFileName="")) returned 0 [0135.928] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0135.928] GetProcessHeap () returned 0x8a0000 [0135.928] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0135.928] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="policytool.exe", cAlternateFileName="POLICY~1.EXE")) returned 1 [0135.928] ResetEvent (hEvent=0x2e4) returned 1 [0135.928] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0135.948] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe040, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism_common.dll", cAlternateFileName="PRISM_~1.DLL")) returned 1 [0135.948] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1fe40, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism_d3d.dll", cAlternateFileName="PRISM_~2.DLL")) returned 1 [0135.948] ResetEvent (hEvent=0x2e4) returned 1 [0135.948] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0135.962] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism_sw.dll", cAlternateFileName="")) returned 1 [0135.962] ResetEvent (hEvent=0x2e4) returned 1 [0135.962] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0135.968] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.dll", cAlternateFileName="")) returned 1 [0135.969] ResetEvent (hEvent=0x2e4) returned 1 [0135.969] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0136.031] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="rmid.exe", cAlternateFileName="")) returned 1 [0136.031] ResetEvent (hEvent=0x2e4) returned 1 [0136.031] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0136.053] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8af971e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="rmiregistry.exe", cAlternateFileName="RMIREG~1.EXE")) returned 1 [0136.053] ResetEvent (hEvent=0x2e4) returned 1 [0136.053] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0136.211] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="server", cAlternateFileName="")) returned 1 [0136.211] GetProcessHeap () returned 0x8a0000 [0136.211] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0136.212] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0136.212] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.212] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xab35b530, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xab35b530, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xabaa88bc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11d0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="classes.jsa", cAlternateFileName="")) returned 1 [0136.212] ResetEvent (hEvent=0x2e4) returned 1 [0136.212] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0136.224] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x866c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.dll", cAlternateFileName="")) returned 1 [0136.226] ResetEvent (hEvent=0x2e4) returned 1 [0136.226] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0136.243] ResetEvent (hEvent=0x2e4) returned 1 [0136.243] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0136.276] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x58f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xusage.txt", cAlternateFileName="")) returned 1 [0136.277] ResetEvent (hEvent=0x2e4) returned 1 [0136.277] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0136.301] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x58f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xusage.txt", cAlternateFileName="")) returned 0 [0136.301] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0136.301] GetProcessHeap () returned 0x8a0000 [0136.301] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0136.301] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="servertool.exe", cAlternateFileName="SERVER~1.EXE")) returned 1 [0136.301] ResetEvent (hEvent=0x2e4) returned 1 [0136.301] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0136.319] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32040, dwReserved0=0x0, dwReserved1=0x0, cFileName="splashscreen.dll", cAlternateFileName="SPLASH~1.DLL")) returned 1 [0136.319] ResetEvent (hEvent=0x2e4) returned 1 [0136.319] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0136.338] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8ba40, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssv.dll", cAlternateFileName="")) returned 1 [0136.338] ResetEvent (hEvent=0x2e4) returned 1 [0136.338] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0136.424] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssvagent.exe", cAlternateFileName="")) returned 1 [0136.424] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21240, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunec.dll", cAlternateFileName="")) returned 1 [0136.424] ResetEvent (hEvent=0x2e4) returned 1 [0136.424] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0136.556] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunmscapi.dll", cAlternateFileName="SUNMSC~1.DLL")) returned 1 [0136.557] ResetEvent (hEvent=0x2e4) returned 1 [0136.557] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0136.570] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e440, dwReserved0=0x0, dwReserved1=0x0, cFileName="t2k.dll", cAlternateFileName="")) returned 1 [0136.570] ResetEvent (hEvent=0x2e4) returned 1 [0136.570] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0136.584] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="tnameserv.exe", cAlternateFileName="TNAMES~1.EXE")) returned 1 [0136.584] ResetEvent (hEvent=0x2e4) returned 1 [0136.584] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0136.745] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13840, dwReserved0=0x0, dwReserved1=0x0, cFileName="unpack.dll", cAlternateFileName="")) returned 1 [0136.745] ResetEvent (hEvent=0x2e4) returned 1 [0136.745] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0136.764] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x30240, dwReserved0=0x0, dwReserved1=0x0, cFileName="unpack200.exe", cAlternateFileName="UNPACK~1.EXE")) returned 1 [0136.764] ResetEvent (hEvent=0x2e4) returned 1 [0136.764] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0136.779] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc040, dwReserved0=0x0, dwReserved1=0x0, cFileName="verify.dll", cAlternateFileName="")) returned 1 [0136.780] ResetEvent (hEvent=0x2e4) returned 1 [0136.780] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0136.839] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="w2k_lsa_auth.dll", cAlternateFileName="W2K_LS~1.DLL")) returned 1 [0136.839] ResetEvent (hEvent=0x2e4) returned 1 [0136.839] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0136.878] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1ae40, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsAccessBridge-64.dll", cAlternateFileName="WINDOW~1.DLL")) returned 1 [0136.878] ResetEvent (hEvent=0x2e4) returned 1 [0136.878] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0137.167] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2f040, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsdetect.dll", cAlternateFileName="")) returned 1 [0137.167] ResetEvent (hEvent=0x2e4) returned 1 [0137.167] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0137.187] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13040, dwReserved0=0x0, dwReserved1=0x0, cFileName="zip.dll", cAlternateFileName="")) returned 1 [0137.187] ResetEvent (hEvent=0x2e4) returned 1 [0137.187] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0137.216] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13040, dwReserved0=0x0, dwReserved1=0x0, cFileName="zip.dll", cAlternateFileName="")) returned 0 [0137.216] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0137.216] GetProcessHeap () returned 0x8a0000 [0137.216] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0137.216] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcac, dwReserved0=0x0, dwReserved1=0x0, cFileName="COPYRIGHT", cAlternateFileName="COPYRI~1")) returned 1 [0137.216] ResetEvent (hEvent=0x2e4) returned 1 [0137.216] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0137.233] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lib", cAlternateFileName="")) returned 1 [0137.233] GetProcessHeap () returned 0x8a0000 [0137.233] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0137.234] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\*", lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993580 [0137.234] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.234] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x95, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.properties", cAlternateFileName="ACCESS~1.PRO")) returned 1 [0137.234] ResetEvent (hEvent=0x2e4) returned 1 [0137.234] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0137.346] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64", cAlternateFileName="")) returned 1 [0137.346] GetProcessHeap () returned 0x8a0000 [0137.346] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0137.347] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0137.348] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.348] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27a, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.cfg", cAlternateFileName="")) returned 1 [0137.348] ResetEvent (hEvent=0x2e4) returned 1 [0137.348] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0137.493] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27a, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.cfg", cAlternateFileName="")) returned 0 [0137.493] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0137.493] GetProcessHeap () returned 0x8a0000 [0137.493] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0137.493] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="applet", cAlternateFileName="")) returned 1 [0137.494] GetProcessHeap () returned 0x8a0000 [0137.494] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0137.494] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\applet\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0137.494] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.494] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0137.494] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0137.494] GetProcessHeap () returned 0x8a0000 [0137.494] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0137.494] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x562, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendars.properties", cAlternateFileName="CALEND~1.PRO")) returned 1 [0137.494] ResetEvent (hEvent=0x2e4) returned 1 [0137.494] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0137.521] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa7bbd53, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa7bbd53, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2e56fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="charsets.jar", cAlternateFileName="")) returned 1 [0137.521] ResetEvent (hEvent=0x2e4) returned 1 [0137.521] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0137.547] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x14983, dwReserved0=0x0, dwReserved1=0x0, cFileName="classlist", cAlternateFileName="CLASSL~1")) returned 1 [0137.547] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105e2a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cmm", cAlternateFileName="")) returned 1 [0137.547] GetProcessHeap () returned 0x8a0000 [0137.547] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0137.548] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105e2a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0137.548] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105e2a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.548] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc824, dwReserved0=0x0, dwReserved1=0x0, cFileName="CIEXYZ.pf", cAlternateFileName="")) returned 1 [0137.548] ResetEvent (hEvent=0x2e4) returned 1 [0137.548] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0137.569] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x278, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAY.pf", cAlternateFileName="")) returned 1 [0137.569] ResetEvent (hEvent=0x2e4) returned 1 [0137.569] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0137.715] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINEAR_RGB.pf", cAlternateFileName="LINEAR~1.PF")) returned 1 [0137.715] ResetEvent (hEvent=0x2e4) returned 1 [0137.715] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0137.739] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4302a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PYCC.pf", cAlternateFileName="")) returned 1 [0137.739] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="sRGB.pf", cAlternateFileName="")) returned 1 [0137.739] ResetEvent (hEvent=0x2e4) returned 1 [0137.739] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0137.755] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="sRGB.pf", cAlternateFileName="")) returned 0 [0137.755] FindClose (in: hFindFile=0x993ac0 | out: hFindFile=0x993ac0) returned 1 [0137.755] GetProcessHeap () returned 0x8a0000 [0137.755] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0137.755] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-types.properties", cAlternateFileName="CONTEN~1.PRO")) returned 1 [0137.755] ResetEvent (hEvent=0x2e4) returned 1 [0137.756] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0137.795] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x101a, dwReserved0=0x0, dwReserved1=0x0, cFileName="currency.data", cAlternateFileName="CURREN~1.DAT")) returned 1 [0137.796] ResetEvent (hEvent=0x2e4) returned 1 [0137.796] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0137.820] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy", cAlternateFileName="")) returned 1 [0137.820] GetProcessHeap () returned 0x8a0000 [0137.820] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0137.821] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0137.821] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.822] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x374c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ffjcext.zip", cAlternateFileName="")) returned 1 [0137.822] ResetEvent (hEvent=0x2e4) returned 1 [0137.822] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0137.837] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.properties", cAlternateFileName="MESSAG~1.PRO")) returned 1 [0137.837] ResetEvent (hEvent=0x2e4) returned 1 [0137.837] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0137.849] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_de.properties", cAlternateFileName="MESSAG~2.PRO")) returned 1 [0137.849] ResetEvent (hEvent=0x2e4) returned 1 [0137.849] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0137.874] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe10, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_es.properties", cAlternateFileName="MESSAG~3.PRO")) returned 1 [0137.874] ResetEvent (hEvent=0x2e4) returned 1 [0137.875] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0138.223] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_fr.properties", cAlternateFileName="MESSAG~4.PRO")) returned 1 [0138.223] ResetEvent (hEvent=0x2e4) returned 1 [0138.223] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0138.233] ResetEvent (hEvent=0x2e4) returned 1 [0138.233] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0138.305] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc97, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_it.properties", cAlternateFileName="MEC9EA~1.PRO")) returned 1 [0138.305] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x18cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_ja.properties", cAlternateFileName="ME4AF1~1.PRO")) returned 1 [0138.305] ResetEvent (hEvent=0x2e4) returned 1 [0138.305] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0138.314] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1650, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_ko.properties", cAlternateFileName="ME1706~1.PRO")) returned 1 [0138.314] ResetEvent (hEvent=0x2e4) returned 1 [0138.314] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0138.576] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_pt_BR.properties", cAlternateFileName="MED1E1~1.PRO")) returned 1 [0138.576] ResetEvent (hEvent=0x2e4) returned 1 [0138.576] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0138.614] ResetEvent (hEvent=0x2e4) returned 1 [0138.615] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0138.629] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_sv.properties", cAlternateFileName="ME0541~1.PRO")) returned 1 [0138.629] ResetEvent (hEvent=0x2e4) returned 1 [0138.629] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0138.734] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_CN.properties", cAlternateFileName="ME40CD~1.PRO")) returned 1 [0138.734] ResetEvent (hEvent=0x2e4) returned 1 [0138.735] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0138.964] ResetEvent (hEvent=0x2e4) returned 1 [0138.965] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0138.988] ResetEvent (hEvent=0x2e4) returned 1 [0138.988] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.238] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_HK.properties", cAlternateFileName="MEB8B5~1.PRO")) returned 1 [0139.238] ResetEvent (hEvent=0x2e4) returned 1 [0139.238] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.252] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_TW.properties", cAlternateFileName="MECC18~1.PRO")) returned 1 [0139.252] ResetEvent (hEvent=0x2e4) returned 1 [0139.252] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.401] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x218e, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash.gif", cAlternateFileName="")) returned 1 [0139.401] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bac, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash@2x.gif", cAlternateFileName="SPLASH~1.GIF")) returned 1 [0139.401] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash_11-lic.gif", cAlternateFileName="SPLASH~2.GIF")) returned 1 [0139.401] ResetEvent (hEvent=0x2e4) returned 1 [0139.401] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.407] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2fda, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash_11@2x-lic.gif", cAlternateFileName="SPLASH~3.GIF")) returned 1 [0139.407] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2fda, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash_11@2x-lic.gif", cAlternateFileName="SPLASH~3.GIF")) returned 0 [0139.407] FindClose (in: hFindFile=0x993ac0 | out: hFindFile=0x993ac0) returned 1 [0139.408] GetProcessHeap () returned 0x8a0000 [0139.408] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0139.409] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ed9405, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8ed9405, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa900a6f7, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ce7de, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy.jar", cAlternateFileName="")) returned 1 [0139.409] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa11bdb26, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ext", cAlternateFileName="")) returned 1 [0139.409] GetProcessHeap () returned 0x8a0000 [0139.409] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0139.409] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa11bdb26, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0139.410] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa11bdb26, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.410] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2de78, dwReserved0=0x0, dwReserved1=0x0, cFileName="access-bridge-64.jar", cAlternateFileName="ACCESS~1.JAR")) returned 1 [0139.410] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3ae816, dwReserved0=0x0, dwReserved1=0x0, cFileName="cldrdata.jar", cAlternateFileName="")) returned 1 [0139.411] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x205e, dwReserved0=0x0, dwReserved1=0x0, cFileName="dnsns.jar", cAlternateFileName="")) returned 1 [0139.411] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xade4, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaccess.jar", cAlternateFileName="")) returned 1 [0139.411] ResetEvent (hEvent=0x2e4) returned 1 [0139.411] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.418] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1166a99, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxrt.jar", cAlternateFileName="")) returned 1 [0139.419] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa8546b2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa8546b2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21a46d, dwReserved0=0x0, dwReserved1=0x0, cFileName="localedata.jar", cAlternateFileName="LOCALE~1.JAR")) returned 1 [0139.419] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="meta-index", cAlternateFileName="META-I~1")) returned 1 [0139.419] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1edd4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="nashorn.jar", cAlternateFileName="")) returned 1 [0139.419] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa4c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunec.jar", cAlternateFileName="")) returned 1 [0139.419] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x44661, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunjce_provider.jar", cAlternateFileName="SUNJCE~1.JAR")) returned 1 [0139.419] ResetEvent (hEvent=0x2e4) returned 1 [0139.419] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.423] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7fbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunmscapi.jar", cAlternateFileName="SUNMSC~1.JAR")) returned 1 [0139.423] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3d5bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunpkcs11.jar", cAlternateFileName="SUNPKC~1.JAR")) returned 1 [0139.423] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10d3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="zipfs.jar", cAlternateFileName="")) returned 1 [0139.424] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10d3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="zipfs.jar", cAlternateFileName="")) returned 0 [0139.424] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0139.424] GetProcessHeap () returned 0x8a0000 [0139.424] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0139.424] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="flavormap.properties", cAlternateFileName="FLAVOR~1.PRO")) returned 1 [0139.425] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xeba, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontconfig.bfc", cAlternateFileName="FONTCO~1.BFC")) returned 1 [0139.425] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2948, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontconfig.properties.src", cAlternateFileName="FONTCO~1.SRC")) returned 1 [0139.425] ResetEvent (hEvent=0x2e4) returned 1 [0139.425] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.429] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa122f229, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fonts", cAlternateFileName="")) returned 1 [0139.429] GetProcessHeap () returned 0x8a0000 [0139.429] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0139.429] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa122f229, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0139.430] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa122f229, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.430] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x12588, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightDemiBold.ttf", cAlternateFileName="LUCIDA~1.TTF")) returned 1 [0139.430] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x12574, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightDemiItalic.ttf", cAlternateFileName="LUCIDA~2.TTF")) returned 1 [0139.430] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13bd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightItalic.ttf", cAlternateFileName="LUCIDA~3.TTF")) returned 1 [0139.430] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5434c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightRegular.ttf", cAlternateFileName="LUCIDA~4.TTF")) returned 1 [0139.430] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4d9c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaSansDemiBold.ttf", cAlternateFileName="LU38C7~1.TTF")) returned 1 [0139.430] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xaa77c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaSansRegular.ttf", cAlternateFileName="LU761B~1.TTF")) returned 1 [0139.430] ResetEvent (hEvent=0x2e4) returned 1 [0139.430] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.439] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39254, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterBold.ttf", cAlternateFileName="LUE73B~1.TTF")) returned 1 [0139.439] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3b40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterRegular.ttf", cAlternateFileName="LUDBAB~1.TTF")) returned 1 [0139.439] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3b40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterRegular.ttf", cAlternateFileName="LUDBAB~1.TTF")) returned 0 [0139.439] FindClose (in: hFindFile=0x993ac0 | out: hFindFile=0x993ac0) returned 1 [0139.440] GetProcessHeap () returned 0x8a0000 [0139.440] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0139.440] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x368a, dwReserved0=0x0, dwReserved1=0x0, cFileName="hijrah-config-umalqura.properties", cAlternateFileName="HIJRAH~1.PRO")) returned 1 [0139.440] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0139.440] GetProcessHeap () returned 0x8a0000 [0139.440] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0139.440] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0139.441] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.441] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cursors", cAlternateFileName="")) returned 1 [0139.441] GetProcessHeap () returned 0x8a0000 [0139.441] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36a40a0 [0139.441] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\*", lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0139.442] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.442] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x500, dwReserved0=0x0, dwReserved1=0x0, cFileName="cursors.properties", cAlternateFileName="CURSOR~1.PRO")) returned 1 [0139.442] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="invalid32x32.gif", cAlternateFileName="INVALI~1.GIF")) returned 1 [0139.442] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_CopyDrop32x32.gif", cAlternateFileName="WIN32_~1.GIF")) returned 1 [0139.442] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_CopyNoDrop32x32.gif", cAlternateFileName="WIN32_~2.GIF")) returned 1 [0139.442] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_LinkDrop32x32.gif", cAlternateFileName="WIN32_~3.GIF")) returned 1 [0139.442] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_LinkNoDrop32x32.gif", cAlternateFileName="WIN32_~4.GIF")) returned 1 [0139.442] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x93, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_MoveDrop32x32.gif", cAlternateFileName="WI06CF~1.GIF")) returned 1 [0139.443] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_MoveNoDrop32x32.gif", cAlternateFileName="WIE2D6~1.GIF")) returned 1 [0139.443] ResetEvent (hEvent=0x2e4) returned 1 [0139.443] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.557] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9e7d0 | out: lpFindFileData=0x2e9e7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_MoveNoDrop32x32.gif", cAlternateFileName="WIE2D6~1.GIF")) returned 0 [0139.557] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0139.558] GetProcessHeap () returned 0x8a0000 [0139.558] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36a40a0 | out: hHeap=0x8a0000) returned 1 [0139.559] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cursors", cAlternateFileName="")) returned 0 [0139.559] FindClose (in: hFindFile=0x993ac0 | out: hFindFile=0x993ac0) returned 1 [0139.559] GetProcessHeap () returned 0x8a0000 [0139.559] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0139.560] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x38, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx.properties", cAlternateFileName="JAVAFX~1.PRO")) returned 1 [0139.560] ResetEvent (hEvent=0x2e4) returned 1 [0139.560] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.561] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8e40a9d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8e40a9d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8e66d0e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe6827, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.jar", cAlternateFileName="")) returned 1 [0139.561] ResetEvent (hEvent=0x2e4) returned 1 [0139.562] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.562] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c6de, dwReserved0=0x0, dwReserved1=0x0, cFileName="jce.jar", cAlternateFileName="")) returned 1 [0139.563] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1295634, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr", cAlternateFileName="")) returned 1 [0139.563] GetProcessHeap () returned 0x8a0000 [0139.563] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0139.564] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1295634, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0139.564] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1295634, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.564] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="default.jfc", cAlternateFileName="")) returned 1 [0139.565] ResetEvent (hEvent=0x2e4) returned 1 [0139.565] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.566] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e61, dwReserved0=0x0, dwReserved1=0x0, cFileName="profile.jfc", cAlternateFileName="")) returned 1 [0139.566] ResetEvent (hEvent=0x2e4) returned 1 [0139.566] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.567] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e61, dwReserved0=0x0, dwReserved1=0x0, cFileName="profile.jfc", cAlternateFileName="")) returned 0 [0139.567] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0139.567] GetProcessHeap () returned 0x8a0000 [0139.567] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0139.567] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x88dc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr.jar", cAlternateFileName="")) returned 1 [0139.568] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x848c, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxswt.jar", cAlternateFileName="")) returned 1 [0139.568] ResetEvent (hEvent=0x2e4) returned 1 [0139.568] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.569] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa76f896, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa76f896, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa76f896, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsse.jar", cAlternateFileName="")) returned 1 [0139.569] ResetEvent (hEvent=0x2e4) returned 1 [0139.569] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.570] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1082, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.hprof.txt", cAlternateFileName="JVMHPR~1.TXT")) returned 1 [0139.570] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x997, dwReserved0=0x0, dwReserved1=0x0, cFileName="logging.properties", cAlternateFileName="LOGGIN~1.PRO")) returned 1 [0139.570] ResetEvent (hEvent=0x2e4) returned 1 [0139.570] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.571] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="management", cAlternateFileName="MANAGE~1")) returned 1 [0139.571] GetProcessHeap () returned 0x8a0000 [0139.571] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0139.571] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0139.572] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.572] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="jmxremote.access", cAlternateFileName="JMXREM~1.ACC")) returned 1 [0139.572] ResetEvent (hEvent=0x2e4) returned 1 [0139.572] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.573] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb28, dwReserved0=0x0, dwReserved1=0x0, cFileName="jmxremote.password.template", cAlternateFileName="JMXREM~1.TEM")) returned 1 [0139.573] ResetEvent (hEvent=0x2e4) returned 1 [0139.573] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.574] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3926, dwReserved0=0x0, dwReserved1=0x0, cFileName="management.properties", cAlternateFileName="MANAGE~1.PRO")) returned 1 [0139.575] ResetEvent (hEvent=0x2e4) returned 1 [0139.575] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.576] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd30, dwReserved0=0x0, dwReserved1=0x0, cFileName="snmp.acl.template", cAlternateFileName="SNMPAC~1.TEM")) returned 1 [0139.576] ResetEvent (hEvent=0x2e4) returned 1 [0139.576] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.581] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd30, dwReserved0=0x0, dwReserved1=0x0, cFileName="snmp.acl.template", cAlternateFileName="SNMPAC~1.TEM")) returned 0 [0139.581] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0139.581] GetProcessHeap () returned 0x8a0000 [0139.581] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0139.581] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17d, dwReserved0=0x0, dwReserved1=0x0, cFileName="management-agent.jar", cAlternateFileName="MANAGE~1.JAR")) returned 1 [0139.582] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x84e, dwReserved0=0x0, dwReserved1=0x0, cFileName="meta-index", cAlternateFileName="META-I~1")) returned 1 [0139.582] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1170, dwReserved0=0x0, dwReserved1=0x0, cFileName="net.properties", cAlternateFileName="NET~1.PRO")) returned 1 [0139.582] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d81efe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8d81efe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8df45fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1d588b, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.jar", cAlternateFileName="")) returned 1 [0139.582] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xaec, dwReserved0=0x0, dwReserved1=0x0, cFileName="psfont.properties.ja", cAlternateFileName="PSFONT~1.JA")) returned 1 [0139.582] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2899, dwReserved0=0x0, dwReserved1=0x0, cFileName="psfontj2d.properties", cAlternateFileName="PSFONT~1.PRO")) returned 1 [0139.582] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x354add, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.jar", cAlternateFileName="RESOUR~1.JAR")) returned 1 [0139.582] ResetEvent (hEvent=0x2e4) returned 1 [0139.582] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.584] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa90a30aa, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa90a30aa, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa7233eb, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x340865b, dwReserved0=0x0, dwReserved1=0x0, cFileName="rt.jar", cAlternateFileName="")) returned 1 [0139.584] ResetEvent (hEvent=0x2e4) returned 1 [0139.584] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.587] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="security", cAlternateFileName="")) returned 1 [0139.587] GetProcessHeap () returned 0x8a0000 [0139.587] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0139.587] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993740 [0139.588] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.588] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="blacklist", cAlternateFileName="BLACKL~1")) returned 1 [0139.588] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="blacklisted.certs", cAlternateFileName="BLACKL~1.CER")) returned 1 [0139.589] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c0eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="cacerts", cAlternateFileName="")) returned 1 [0139.589] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.policy", cAlternateFileName="JAVA~1.POL")) returned 1 [0139.589] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eac, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.security", cAlternateFileName="JAVA~1.SEC")) returned 1 [0139.589] ResetEvent (hEvent=0x2e4) returned 1 [0139.589] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.596] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x62, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.policy", cAlternateFileName="JAVAWS~1.POL")) returned 1 [0139.596] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xdc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="local_policy.jar", cAlternateFileName="LOCAL_~1.JAR")) returned 1 [0139.596] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="trusted.libraries", cAlternateFileName="TRUSTE~1.LIB")) returned 1 [0139.596] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="US_export_policy.jar", cAlternateFileName="US_EXP~1.JAR")) returned 1 [0139.596] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="US_export_policy.jar", cAlternateFileName="US_EXP~1.JAR")) returned 0 [0139.596] FindClose (in: hFindFile=0x993740 | out: hFindFile=0x993740) returned 1 [0139.597] GetProcessHeap () returned 0x8a0000 [0139.597] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0139.597] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="sound.properties", cAlternateFileName="SOUND~1.PRO")) returned 1 [0139.597] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x19c1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="tzdb.dat", cAlternateFileName="")) returned 1 [0139.597] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x20d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tzmappings", cAlternateFileName="TZMAPP~1")) returned 1 [0139.597] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x20d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tzmappings", cAlternateFileName="TZMAPP~1")) returned 0 [0139.598] FindClose (in: hFindFile=0x993580 | out: hFindFile=0x993580) returned 1 [0139.598] GetProcessHeap () returned 0x8a0000 [0139.598] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0139.599] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICENSE", cAlternateFileName="")) returned 1 [0139.599] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="README.txt", cAlternateFileName="")) returned 1 [0139.599] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x210, dwReserved0=0x0, dwReserved1=0x0, cFileName="release", cAlternateFileName="")) returned 1 [0139.599] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="THIRDPARTYLICENSEREADME-JAVAFX.txt", cAlternateFileName="THIRDP~1.TXT")) returned 1 [0139.599] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2371c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THIRDPARTYLICENSEREADME.txt", cAlternateFileName="THIRDP~2.TXT")) returned 1 [0139.599] ResetEvent (hEvent=0x2e4) returned 1 [0139.599] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.603] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome.html", cAlternateFileName="WELCOM~1.HTM")) returned 1 [0139.603] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome.html", cAlternateFileName="WELCOM~1.HTM")) returned 0 [0139.603] FindClose (in: hFindFile=0x993600 | out: hFindFile=0x993600) returned 1 [0139.603] GetProcessHeap () returned 0x8a0000 [0139.603] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0139.604] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre1.8.0_144", cAlternateFileName="JRE18~1.0_1")) returned 0 [0139.604] FindClose (in: hFindFile=0x9935c0 | out: hFindFile=0x9935c0) returned 1 [0139.604] GetProcessHeap () returned 0x8a0000 [0139.604] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x94a118 | out: hHeap=0x8a0000) returned 1 [0139.605] FindNextFileW (in: hFindFile=0x9934c0, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf9dfb986, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft Office", cAlternateFileName="MICROS~2")) returned 1 [0139.605] GetProcessHeap () returned 0x8a0000 [0139.605] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x94a118 [0139.606] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\*", lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf9dfb986, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993780 [0139.606] FindNextFileW (in: hFindFile=0x993780, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf9dfb986, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.606] FindNextFileW (in: hFindFile=0x993780, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d6778e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf9e9425d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x5ab2f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.xml", cAlternateFileName="APPXMA~1.XML")) returned 1 [0139.606] FindNextFileW (in: hFindFile=0x993780, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSystemMetadata.xml", cAlternateFileName="FILESY~1.XML")) returned 1 [0139.606] FindNextFileW (in: hFindFile=0x993780, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office16", cAlternateFileName="")) returned 1 [0139.606] GetProcessHeap () returned 0x8a0000 [0139.606] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0139.606] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\*", lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993900 [0139.607] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.607] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xd9e7b530, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x2a9c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPP.HTM", cAlternateFileName="")) returned 1 [0139.607] ResetEvent (hEvent=0x2e4) returned 1 [0139.607] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.610] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ea17a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x17103, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPP.VBS", cAlternateFileName="")) returned 1 [0139.610] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x6a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPREARM.EXE", cAlternateFileName="OSPPRE~1.EXE")) returned 1 [0139.610] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xda9a8629, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x8df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLERROR.XML", cAlternateFileName="")) returned 1 [0139.610] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xda9a8629, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x8df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLERROR.XML", cAlternateFileName="")) returned 0 [0139.610] FindClose (in: hFindFile=0x993900 | out: hFindFile=0x993900) returned 1 [0139.610] GetProcessHeap () returned 0x8a0000 [0139.610] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0139.610] FindNextFileW (in: hFindFile=0x993780, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PackageManifests", cAlternateFileName="PACKAG~1")) returned 1 [0139.610] GetProcessHeap () returned 0x8a0000 [0139.610] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0139.610] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\*", lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0139.611] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.611] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5e91c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", cAlternateFileName="APA05A~1.XML")) returned 1 [0139.611] ResetEvent (hEvent=0x2e4) returned 1 [0139.611] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.614] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8351d7a8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8351d7a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", cAlternateFileName="APAD0B~1.XML")) returned 1 [0139.615] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc3863, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", cAlternateFileName="APEDE2~1.XML")) returned 1 [0139.615] ResetEvent (hEvent=0x2e4) returned 1 [0139.615] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.730] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP51DE~1.XML")) returned 1 [0139.730] ResetEvent (hEvent=0x2e4) returned 1 [0139.730] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.732] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x79381, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~4.XML")) returned 1 [0139.732] ResetEvent (hEvent=0x2e4) returned 1 [0139.732] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.735] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ecd099, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", cAlternateFileName="APCEE5~1.XML")) returned 1 [0139.735] ResetEvent (hEvent=0x2e4) returned 1 [0139.735] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.738] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3df10, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP557F~1.XML")) returned 1 [0139.738] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", cAlternateFileName="APE193~1.XML")) returned 1 [0139.738] ResetEvent (hEvent=0x2e4) returned 1 [0139.738] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.740] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x112a4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", cAlternateFileName="APC1E2~1.XML")) returned 1 [0139.740] ResetEvent (hEvent=0x2e4) returned 1 [0139.740] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.743] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4bfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", cAlternateFileName="APC422~1.XML")) returned 1 [0139.743] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xba5e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP2169~1.XML")) returned 1 [0139.743] ResetEvent (hEvent=0x2e4) returned 1 [0139.743] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.747] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP7BBA~1.XML")) returned 1 [0139.747] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", cAlternateFileName="APEF10~1.XML")) returned 1 [0139.747] ResetEvent (hEvent=0x2e4) returned 1 [0139.747] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.749] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", cAlternateFileName="AP5F49~1.XML")) returned 1 [0139.749] ResetEvent (hEvent=0x2e4) returned 1 [0139.750] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.752] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", cAlternateFileName="APB0FE~1.XML")) returned 1 [0139.752] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x34b4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP8AF5~1.XML")) returned 1 [0139.752] ResetEvent (hEvent=0x2e4) returned 1 [0139.752] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.753] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", cAlternateFileName="APF26A~1.XML")) returned 1 [0139.754] ResetEvent (hEvent=0x2e4) returned 1 [0139.754] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.756] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf33deae, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", cAlternateFileName="APC553~1.XML")) returned 1 [0139.756] ResetEvent (hEvent=0x2e4) returned 1 [0139.756] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.757] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf2f172d, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x53d21, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP9FA1~1.XML")) returned 1 [0139.757] ResetEvent (hEvent=0x2e4) returned 1 [0139.757] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.766] ResetEvent (hEvent=0x2e4) returned 1 [0139.766] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.767] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3a41, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP330B~1.XML")) returned 1 [0139.767] ResetEvent (hEvent=0x2e4) returned 1 [0139.767] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.770] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x573e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~1.XML")) returned 1 [0139.770] ResetEvent (hEvent=0x2e4) returned 1 [0139.770] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.772] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP6206~1.XML")) returned 1 [0139.772] ResetEvent (hEvent=0x2e4) returned 1 [0139.772] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.775] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfdea, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", cAlternateFileName="APD1EA~1.XML")) returned 1 [0139.775] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP6EFE~1.XML")) returned 1 [0139.775] ResetEvent (hEvent=0x2e4) returned 1 [0139.776] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.781] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf98c485a, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", cAlternateFileName="APB63F~1.XML")) returned 1 [0139.781] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", cAlternateFileName="APB913~1.XML")) returned 1 [0139.781] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP4637~1.XML")) returned 1 [0139.782] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x618a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP2FE2~1.XML")) returned 1 [0139.782] ResetEvent (hEvent=0x2e4) returned 1 [0139.782] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.784] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP2C4B~1.XML")) returned 1 [0139.784] ResetEvent (hEvent=0x2e4) returned 1 [0139.785] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.786] ResetEvent (hEvent=0x2e4) returned 1 [0139.786] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.787] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", cAlternateFileName="APF00A~1.XML")) returned 1 [0139.787] ResetEvent (hEvent=0x2e4) returned 1 [0139.787] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.789] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~2.XML")) returned 1 [0139.789] ResetEvent (hEvent=0x2e4) returned 1 [0139.789] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.791] ResetEvent (hEvent=0x2e4) returned 1 [0139.791] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.792] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP202C~1.XML")) returned 1 [0139.792] ResetEvent (hEvent=0x2e4) returned 1 [0139.792] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.794] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", cAlternateFileName="APBC30~1.XML")) returned 1 [0139.794] ResetEvent (hEvent=0x2e4) returned 1 [0139.794] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.795] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", cAlternateFileName="APCB35~1.XML")) returned 1 [0139.795] ResetEvent (hEvent=0x2e4) returned 1 [0139.795] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.797] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP5E1E~1.XML")) returned 1 [0139.797] ResetEvent (hEvent=0x2e4) returned 1 [0139.797] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.799] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x80e56, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~3.XML")) returned 1 [0139.799] ResetEvent (hEvent=0x2e4) returned 1 [0139.799] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.803] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", cAlternateFileName="APE0B7~1.XML")) returned 1 [0139.803] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP8BF9~1.XML")) returned 1 [0139.803] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x212876, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.common.xml", cAlternateFileName="AP3FD6~1.XML")) returned 1 [0139.804] ResetEvent (hEvent=0x2e4) returned 1 [0139.804] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.807] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2667, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifestLoc.en-us.xml", cAlternateFileName="AP942B~1.XML")) returned 1 [0139.807] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x175, dwReserved0=0x0, dwReserved1=0x0, cFileName="AuthoredExtensions.xml", cAlternateFileName="AUTHOR~1.XML")) returned 1 [0139.807] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x175, dwReserved0=0x0, dwReserved1=0x0, cFileName="AuthoredExtensions.xml", cAlternateFileName="AUTHOR~1.XML")) returned 0 [0139.807] FindClose (in: hFindFile=0x993940 | out: hFindFile=0x993940) returned 1 [0139.808] GetProcessHeap () returned 0x8a0000 [0139.808] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0139.808] FindNextFileW (in: hFindFile=0x993780, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0139.808] GetProcessHeap () returned 0x8a0000 [0139.808] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0139.808] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\*", lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993900 [0139.808] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.808] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2ca2e08, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="client", cAlternateFileName="")) returned 1 [0139.808] GetProcessHeap () returned 0x8a0000 [0139.808] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0139.809] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\*", lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2ca2e08, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993580 [0139.810] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2ca2e08, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.810] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0715cb9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0715cb9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0952017, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1 [0139.810] ResetEvent (hEvent=0x2e4) returned 1 [0139.811] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.812] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0952017, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0952017, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0a832cb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="API-MS~3.DLL")) returned 1 [0139.812] ResetEvent (hEvent=0x2e4) returned 1 [0139.812] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.819] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd089348e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd089348e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd09c4608, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1 [0139.819] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd115de42, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd115de42, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd158a009, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="AP750A~1.DLL")) returned 1 [0139.820] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0d0baf0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0d0baf0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0eaf4e3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="APF10C~1.DLL")) returned 1 [0139.820] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0c4cdf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0c4cdf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0df0820, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1 [0139.820] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0c26cd1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0c26cd1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0e62fac, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="APA632~1.DLL")) returned 1 [0139.820] ResetEvent (hEvent=0x2e4) returned 1 [0139.820] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.823] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd289cda7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd289cda7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2a1a592, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1 [0139.823] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0b8e391, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0b8e391, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0d7e20c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x58c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="APFD9C~1.DLL")) returned 1 [0139.823] ResetEvent (hEvent=0x2e4) returned 1 [0139.823] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.825] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0aa952a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0aa952a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0bda864, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="APC00F~1.DLL")) returned 1 [0139.825] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0aa952a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0aa952a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0c99389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="API-MS~4.DLL")) returned 1 [0139.825] ResetEvent (hEvent=0x2e4) returned 1 [0139.825] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.827] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0af5a16, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0af5a16, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0c4cdf5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="AP23C9~1.DLL")) returned 1 [0139.827] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1e086ac, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1e086ac, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2365abe, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1 [0139.828] ResetEvent (hEvent=0x2e4) returned 1 [0139.828] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.831] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1137cdf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1137cdf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1d23858, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="APAE51~1.DLL")) returned 1 [0139.832] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1006983, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1006983, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1242d5d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x68c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1 [0139.832] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0f9426a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0f9426a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd121c9ea, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1 [0139.832] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0f9426a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0f9426a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd139a18a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="APFCAD~1.DLL")) returned 1 [0139.832] ResetEvent (hEvent=0x2e4) returned 1 [0139.832] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.837] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0eaf4e3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0eaf4e3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd11d067c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="AP8F34~1.DLL")) returned 1 [0139.838] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0dca676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0dca676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1078ffd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="APD1B7~1.DLL")) returned 1 [0139.838] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0eaf4e3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0eaf4e3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd10c55e8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="APBF0F~1.DLL")) returned 1 [0139.838] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0dca676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0dca676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0f9426a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="AP5E4C~1.DLL")) returned 1 [0139.838] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1b7fe91, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1b7fe91, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1ec71c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="AP80F4~1.DLL")) returned 1 [0139.838] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1b59cda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1b59cda, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1f1370b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x34ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVDllSurrogate32.exe", cAlternateFileName="APPVDL~2.EXE")) returned 1 [0139.838] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd153dc41, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd153dc41, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1e2e85a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVDllSurrogate64.exe", cAlternateFileName="APPVDL~1.EXE")) returned 1 [0139.838] ResetEvent (hEvent=0x2e4) returned 1 [0139.838] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.843] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86813dc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86813dc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvStream32.dll", cAlternateFileName="APPVIS~1.DLL")) returned 1 [0139.843] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86813dc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86813dc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvStream64.dll", cAlternateFileName="APPVIS~2.DLL")) returned 1 [0139.843] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86813dc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86813dc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvSubsystems32.dll", cAlternateFileName="APPVIS~3.DLL")) returned 1 [0139.843] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x8683a0f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8683a0f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8683a0f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvSubsystems64.dll", cAlternateFileName="APPVIS~4.DLL")) returned 1 [0139.844] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd153dc41, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd153dc41, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1e7acf5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x69630, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppVLP.exe", cAlternateFileName="")) returned 1 [0139.844] ResetEvent (hEvent=0x2e4) returned 1 [0139.844] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.847] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x8683a0f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8683a0f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8683a0f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2R32.dll", cAlternateFileName="")) returned 1 [0139.847] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x8683a0f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8683a0f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8683a0f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2R64.dll", cAlternateFileName="")) returned 1 [0139.847] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd11f68b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd11f68b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd191da0e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x514a8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="concrt140.dll", cAlternateFileName="CONCRT~1.DLL")) returned 1 [0139.847] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1242d5d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1242d5d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1bcc41c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5644a0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="mfc140u.dll", cAlternateFileName="")) returned 1 [0139.847] ResetEvent (hEvent=0x2e4) returned 1 [0139.847] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.849] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1f5fb21, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd244aa14, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa12a8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1 [0139.849] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1ea0ff2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1ea0ff2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd20449b3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9b0a0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1 [0139.849] ResetEvent (hEvent=0x2e4) returned 1 [0139.849] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.851] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1e7acf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1e7acf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1fac086, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1 [0139.851] ResetEvent (hEvent=0x2e4) returned 1 [0139.851] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.852] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1e2e85a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1e2e85a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1f5fb21, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xefec0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ucrtbase.dll", cAlternateFileName="")) returned 1 [0139.852] ResetEvent (hEvent=0x2e4) returned 1 [0139.853] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0139.855] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2ca2e08, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2f0533c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5f4b0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="vccorlib140.dll", cAlternateFileName="VCCORL~1.DLL")) returned 1 [0139.855] ResetEvent (hEvent=0x2e4) returned 1 [0139.855] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.341] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2424784, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2424784, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd26acf16, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 1 [0140.341] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2424784, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2424784, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd26acf16, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 0 [0140.341] FindClose (in: hFindFile=0x993580 | out: hFindFile=0x993580) returned 1 [0140.342] GetProcessHeap () returned 0x8a0000 [0140.342] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0140.342] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLIPART", cAlternateFileName="")) returned 1 [0140.342] GetProcessHeap () returned 0x8a0000 [0140.342] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0140.342] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\*", lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993580 [0140.342] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.342] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="PUB60COR", cAlternateFileName="")) returned 1 [0140.342] GetProcessHeap () returned 0x8a0000 [0140.342] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36a40a0 [0140.342] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\*", lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993740 [0140.344] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.344] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2340, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00004_.GIF", cAlternateFileName="")) returned 1 [0140.344] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c30, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00011_.GIF", cAlternateFileName="")) returned 1 [0140.344] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a19, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00021_.GIF", cAlternateFileName="")) returned 1 [0140.344] ResetEvent (hEvent=0x2e4) returned 1 [0140.344] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.348] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00037_.GIF", cAlternateFileName="")) returned 1 [0140.348] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb58a9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb58a9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00038_.GIF", cAlternateFileName="")) returned 1 [0140.348] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb58a9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00040_.GIF", cAlternateFileName="")) returned 1 [0140.348] ResetEvent (hEvent=0x2e4) returned 1 [0140.348] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.351] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e06, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00052_.GIF", cAlternateFileName="")) returned 1 [0140.351] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e73, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00057_.GIF", cAlternateFileName="")) returned 1 [0140.351] ResetEvent (hEvent=0x2e4) returned 1 [0140.351] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.381] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x205, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00090_.GIF", cAlternateFileName="")) returned 1 [0140.381] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00092_.GIF", cAlternateFileName="")) returned 1 [0140.381] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x319e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00103_.GIF", cAlternateFileName="")) returned 1 [0140.381] ResetEvent (hEvent=0x2e4) returned 1 [0140.382] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.386] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00120_.GIF", cAlternateFileName="")) returned 1 [0140.386] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc44, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00126_.GIF", cAlternateFileName="")) returned 1 [0140.386] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00129_.GIF", cAlternateFileName="")) returned 1 [0140.386] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1485, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00130_.GIF", cAlternateFileName="")) returned 1 [0140.386] ResetEvent (hEvent=0x2e4) returned 1 [0140.386] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.390] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00135_.GIF", cAlternateFileName="")) returned 1 [0140.390] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x296f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00139_.GIF", cAlternateFileName="")) returned 1 [0140.390] ResetEvent (hEvent=0x2e4) returned 1 [0140.390] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.393] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3bcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00142_.GIF", cAlternateFileName="")) returned 1 [0140.393] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00154_.GIF", cAlternateFileName="")) returned 1 [0140.393] ResetEvent (hEvent=0x2e4) returned 1 [0140.393] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.397] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00157_.GIF", cAlternateFileName="")) returned 1 [0140.397] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00158_.GIF", cAlternateFileName="")) returned 1 [0140.397] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00160_.GIF", cAlternateFileName="")) returned 1 [0140.397] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00161_.GIF", cAlternateFileName="")) returned 1 [0140.398] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b48, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00163_.GIF", cAlternateFileName="")) returned 1 [0140.398] ResetEvent (hEvent=0x2e4) returned 1 [0140.398] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.402] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x33c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00164_.GIF", cAlternateFileName="")) returned 1 [0140.402] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2186, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00165_.GIF", cAlternateFileName="")) returned 1 [0140.402] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x131e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00167_.GIF", cAlternateFileName="")) returned 1 [0140.402] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00169_.GIF", cAlternateFileName="")) returned 1 [0140.402] ResetEvent (hEvent=0x2e4) returned 1 [0140.402] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.404] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2420, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00170_.GIF", cAlternateFileName="")) returned 1 [0140.405] ResetEvent (hEvent=0x2e4) returned 1 [0140.405] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.408] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1398, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00171_.GIF", cAlternateFileName="")) returned 1 [0140.408] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1126, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00172_.GIF", cAlternateFileName="")) returned 1 [0140.408] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00174_.GIF", cAlternateFileName="")) returned 1 [0140.408] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd32, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00175_.GIF", cAlternateFileName="")) returned 1 [0140.408] ResetEvent (hEvent=0x2e4) returned 1 [0140.408] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.409] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc30, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00176_.GIF", cAlternateFileName="")) returned 1 [0140.409] ResetEvent (hEvent=0x2e4) returned 1 [0140.409] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.413] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00010_.WMF", cAlternateFileName="")) returned 1 [0140.413] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00015_.WMF", cAlternateFileName="")) returned 1 [0140.413] ResetEvent (hEvent=0x2e4) returned 1 [0140.413] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.417] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1634, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00790_.WMF", cAlternateFileName="")) returned 1 [0140.417] ResetEvent (hEvent=0x2e4) returned 1 [0140.418] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.419] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5062, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00853_.WMF", cAlternateFileName="")) returned 1 [0140.419] ResetEvent (hEvent=0x2e4) returned 1 [0140.419] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.421] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a50, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00914_.WMF", cAlternateFileName="")) returned 1 [0140.421] ResetEvent (hEvent=0x2e4) returned 1 [0140.421] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.424] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x385c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00932_.WMF", cAlternateFileName="")) returned 1 [0140.424] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00965_.WMF", cAlternateFileName="")) returned 1 [0140.424] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd10, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01039_.WMF", cAlternateFileName="")) returned 1 [0140.425] ResetEvent (hEvent=0x2e4) returned 1 [0140.425] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.429] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x63c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01044_.WMF", cAlternateFileName="")) returned 1 [0140.429] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01060_.WMF", cAlternateFileName="")) returned 1 [0140.429] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x728, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01084_.WMF", cAlternateFileName="")) returned 1 [0140.430] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x66dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01173_.WMF", cAlternateFileName="")) returned 1 [0140.441] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01174_.WMF", cAlternateFileName="")) returned 1 [0140.441] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01184_.WMF", cAlternateFileName="")) returned 1 [0140.441] ResetEvent (hEvent=0x2e4) returned 1 [0140.441] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.444] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01216_.WMF", cAlternateFileName="")) returned 1 [0140.444] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01218_.WMF", cAlternateFileName="")) returned 1 [0140.444] ResetEvent (hEvent=0x2e4) returned 1 [0140.444] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.445] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01251_.WMF", cAlternateFileName="")) returned 1 [0140.445] ResetEvent (hEvent=0x2e4) returned 1 [0140.445] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.449] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ccc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01545_.WMF", cAlternateFileName="")) returned 1 [0140.449] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02122_.WMF", cAlternateFileName="")) returned 1 [0140.450] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02559_.WMF", cAlternateFileName="")) returned 1 [0140.450] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc89dc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x83c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02724_.WMF", cAlternateFileName="")) returned 1 [0140.450] ResetEvent (hEvent=0x2e4) returned 1 [0140.450] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.452] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2418, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN03500_.WMF", cAlternateFileName="")) returned 1 [0140.452] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x928, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04108_.WMF", cAlternateFileName="")) returned 1 [0140.452] ResetEvent (hEvent=0x2e4) returned 1 [0140.452] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.455] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04117_.WMF", cAlternateFileName="")) returned 1 [0140.455] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd58, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04134_.WMF", cAlternateFileName="")) returned 1 [0140.455] ResetEvent (hEvent=0x2e4) returned 1 [0140.455] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.459] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04174_.WMF", cAlternateFileName="")) returned 1 [0140.459] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04191_.WMF", cAlternateFileName="")) returned 1 [0140.459] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1204, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04195_.WMF", cAlternateFileName="")) returned 1 [0140.459] ResetEvent (hEvent=0x2e4) returned 1 [0140.459] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.463] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04196_.WMF", cAlternateFileName="")) returned 1 [0140.463] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04206_.WMF", cAlternateFileName="")) returned 1 [0140.463] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x212c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04225_.WMF", cAlternateFileName="")) returned 1 [0140.463] ResetEvent (hEvent=0x2e4) returned 1 [0140.463] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.671] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04235_.WMF", cAlternateFileName="")) returned 1 [0140.671] ResetEvent (hEvent=0x2e4) returned 1 [0140.671] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.672] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04267_.WMF", cAlternateFileName="")) returned 1 [0140.672] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04269_.WMF", cAlternateFileName="")) returned 1 [0140.672] ResetEvent (hEvent=0x2e4) returned 1 [0140.672] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.674] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04323_.WMF", cAlternateFileName="")) returned 1 [0140.674] ResetEvent (hEvent=0x2e4) returned 1 [0140.675] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.676] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd14, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04326_.WMF", cAlternateFileName="")) returned 1 [0140.676] ResetEvent (hEvent=0x2e4) returned 1 [0140.676] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.678] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04332_.WMF", cAlternateFileName="")) returned 1 [0140.678] ResetEvent (hEvent=0x2e4) returned 1 [0140.678] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.680] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04355_.WMF", cAlternateFileName="")) returned 1 [0140.680] ResetEvent (hEvent=0x2e4) returned 1 [0140.680] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.681] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04369_.WMF", cAlternateFileName="")) returned 1 [0140.681] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1384, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04384_.WMF", cAlternateFileName="")) returned 1 [0140.681] ResetEvent (hEvent=0x2e4) returned 1 [0140.681] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.683] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x138c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04385_.WMF", cAlternateFileName="")) returned 1 [0140.683] ResetEvent (hEvent=0x2e4) returned 1 [0140.683] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.685] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BABY_01.MID", cAlternateFileName="")) returned 1 [0140.685] ResetEvent (hEvent=0x2e4) returned 1 [0140.685] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.687] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1306, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00116_.WMF", cAlternateFileName="")) returned 1 [0140.687] ResetEvent (hEvent=0x2e4) returned 1 [0140.687] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.689] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6906, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00141_.WMF", cAlternateFileName="")) returned 1 [0140.689] ResetEvent (hEvent=0x2e4) returned 1 [0140.689] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.690] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7114, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00146_.WMF", cAlternateFileName="")) returned 1 [0140.690] ResetEvent (hEvent=0x2e4) returned 1 [0140.690] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.692] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00155_.WMF", cAlternateFileName="")) returned 1 [0140.692] ResetEvent (hEvent=0x2e4) returned 1 [0140.692] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.696] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x57f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00160_.WMF", cAlternateFileName="")) returned 1 [0140.696] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f34, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00173_.WMF", cAlternateFileName="")) returned 1 [0140.696] ResetEvent (hEvent=0x2e4) returned 1 [0140.696] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.699] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4354, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD05119_.WMF", cAlternateFileName="")) returned 1 [0140.699] ResetEvent (hEvent=0x2e4) returned 1 [0140.699] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.700] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ef0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD06102_.WMF", cAlternateFileName="")) returned 1 [0140.701] ResetEvent (hEvent=0x2e4) returned 1 [0140.701] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.702] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4124, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD06200_.WMF", cAlternateFileName="")) returned 1 [0140.702] ResetEvent (hEvent=0x2e4) returned 1 [0140.702] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.703] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x687c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07761_.WMF", cAlternateFileName="")) returned 1 [0140.704] ResetEvent (hEvent=0x2e4) returned 1 [0140.704] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.706] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x133c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07804_.WMF", cAlternateFileName="")) returned 1 [0140.706] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07831_.WMF", cAlternateFileName="")) returned 1 [0140.706] ResetEvent (hEvent=0x2e4) returned 1 [0140.706] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.707] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08758_.WMF", cAlternateFileName="")) returned 1 [0140.707] ResetEvent (hEvent=0x2e4) returned 1 [0140.707] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.709] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08773_.WMF", cAlternateFileName="")) returned 1 [0140.709] ResetEvent (hEvent=0x2e4) returned 1 [0140.709] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.710] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08808_.WMF", cAlternateFileName="")) returned 1 [0140.710] ResetEvent (hEvent=0x2e4) returned 1 [0140.710] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.712] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08868_.WMF", cAlternateFileName="")) returned 1 [0140.712] ResetEvent (hEvent=0x2e4) returned 1 [0140.712] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.714] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbaaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09031_.WMF", cAlternateFileName="")) returned 1 [0140.714] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09194_.WMF", cAlternateFileName="")) returned 1 [0140.714] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x504a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09662_.WMF", cAlternateFileName="")) returned 1 [0140.715] ResetEvent (hEvent=0x2e4) returned 1 [0140.715] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.720] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09664_.WMF", cAlternateFileName="")) returned 1 [0140.720] ResetEvent (hEvent=0x2e4) returned 1 [0140.720] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.722] ResetEvent (hEvent=0x2e4) returned 1 [0140.722] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.723] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10890_.GIF", cAlternateFileName="")) returned 1 [0140.724] ResetEvent (hEvent=0x2e4) returned 1 [0140.724] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.725] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4edd, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10972_.GIF", cAlternateFileName="")) returned 1 [0140.725] ResetEvent (hEvent=0x2e4) returned 1 [0140.725] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.728] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19563_.GIF", cAlternateFileName="")) returned 1 [0140.729] ResetEvent (hEvent=0x2e4) returned 1 [0140.729] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.732] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d75, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19582_.GIF", cAlternateFileName="")) returned 1 [0140.732] ResetEvent (hEvent=0x2e4) returned 1 [0140.732] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.734] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19695_.WMF", cAlternateFileName="")) returned 1 [0140.734] ResetEvent (hEvent=0x2e4) returned 1 [0140.734] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.735] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19827_.WMF", cAlternateFileName="")) returned 1 [0140.735] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2244, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19828_.WMF", cAlternateFileName="")) returned 1 [0140.735] ResetEvent (hEvent=0x2e4) returned 1 [0140.735] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.738] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3896, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19986_.WMF", cAlternateFileName="")) returned 1 [0140.739] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4780, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19988_.WMF", cAlternateFileName="")) returned 1 [0140.739] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b32, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD20013_.WMF", cAlternateFileName="")) returned 1 [0140.739] ResetEvent (hEvent=0x2e4) returned 1 [0140.739] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.742] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00008_.WMF", cAlternateFileName="")) returned 1 [0140.742] ResetEvent (hEvent=0x2e4) returned 1 [0140.742] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.745] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x265a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00012_.WMF", cAlternateFileName="")) returned 1 [0140.745] ResetEvent (hEvent=0x2e4) returned 1 [0140.745] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.785] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1eb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00045_.WMF", cAlternateFileName="")) returned 1 [0140.785] ResetEvent (hEvent=0x2e4) returned 1 [0140.785] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.786] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00098_.WMF", cAlternateFileName="")) returned 1 [0140.786] ResetEvent (hEvent=0x2e4) returned 1 [0140.786] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.790] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00105_.WMF", cAlternateFileName="")) returned 1 [0140.790] ResetEvent (hEvent=0x2e4) returned 1 [0140.790] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.792] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00122_.WMF", cAlternateFileName="")) returned 1 [0140.792] ResetEvent (hEvent=0x2e4) returned 1 [0140.792] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.796] ResetEvent (hEvent=0x2e4) returned 1 [0140.796] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.797] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00130_.WMF", cAlternateFileName="")) returned 1 [0140.797] ResetEvent (hEvent=0x2e4) returned 1 [0140.797] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.799] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00148_.WMF", cAlternateFileName="")) returned 1 [0140.799] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00152_.WMF", cAlternateFileName="")) returned 1 [0140.799] ResetEvent (hEvent=0x2e4) returned 1 [0140.799] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.802] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf92, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00194_.WMF", cAlternateFileName="")) returned 1 [0140.802] ResetEvent (hEvent=0x2e4) returned 1 [0140.802] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.804] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f86, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00195_.WMF", cAlternateFileName="")) returned 1 [0140.804] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2458, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00234_.WMF", cAlternateFileName="")) returned 1 [0140.804] ResetEvent (hEvent=0x2e4) returned 1 [0140.804] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.806] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00242_.WMF", cAlternateFileName="")) returned 1 [0140.806] ResetEvent (hEvent=0x2e4) returned 1 [0140.806] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.808] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x386c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00247_.WMF", cAlternateFileName="")) returned 1 [0140.808] ResetEvent (hEvent=0x2e4) returned 1 [0140.808] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.809] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00248_.WMF", cAlternateFileName="")) returned 1 [0140.809] ResetEvent (hEvent=0x2e4) returned 1 [0140.809] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.812] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1264, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00252_.WMF", cAlternateFileName="")) returned 1 [0140.813] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00254_.WMF", cAlternateFileName="")) returned 1 [0140.813] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00261_.WMF", cAlternateFileName="")) returned 1 [0140.813] ResetEvent (hEvent=0x2e4) returned 1 [0140.813] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.814] ResetEvent (hEvent=0x2e4) returned 1 [0140.814] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.816] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00262_.WMF", cAlternateFileName="")) returned 1 [0140.816] ResetEvent (hEvent=0x2e4) returned 1 [0140.816] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.818] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1678, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00265_.WMF", cAlternateFileName="")) returned 1 [0140.818] ResetEvent (hEvent=0x2e4) returned 1 [0140.818] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.820] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00267_.WMF", cAlternateFileName="")) returned 1 [0140.820] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1498, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00269_.WMF", cAlternateFileName="")) returned 1 [0140.821] ResetEvent (hEvent=0x2e4) returned 1 [0140.821] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.822] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00270_.WMF", cAlternateFileName="")) returned 1 [0140.822] ResetEvent (hEvent=0x2e4) returned 1 [0140.822] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.824] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00273_.WMF", cAlternateFileName="")) returned 1 [0140.824] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1044, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00274_.WMF", cAlternateFileName="")) returned 1 [0140.824] ResetEvent (hEvent=0x2e4) returned 1 [0140.824] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.827] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00296_.WMF", cAlternateFileName="")) returned 1 [0140.827] ResetEvent (hEvent=0x2e4) returned 1 [0140.827] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.828] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00390_.WMF", cAlternateFileName="")) returned 1 [0140.828] ResetEvent (hEvent=0x2e4) returned 1 [0140.828] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.830] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00392_.WMF", cAlternateFileName="")) returned 1 [0140.830] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b54, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00524_.WMF", cAlternateFileName="")) returned 1 [0140.830] ResetEvent (hEvent=0x2e4) returned 1 [0140.830] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.832] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2576, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00525_.WMF", cAlternateFileName="")) returned 1 [0140.832] ResetEvent (hEvent=0x2e4) returned 1 [0140.832] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.833] ResetEvent (hEvent=0x2e4) returned 1 [0140.833] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.834] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00526_.WMF", cAlternateFileName="")) returned 1 [0140.834] ResetEvent (hEvent=0x2e4) returned 1 [0140.834] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.836] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00648_.WMF", cAlternateFileName="")) returned 1 [0140.836] ResetEvent (hEvent=0x2e4) returned 1 [0140.836] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.839] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1138, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00921_.WMF", cAlternateFileName="")) returned 1 [0140.839] ResetEvent (hEvent=0x2e4) returned 1 [0140.839] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.841] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1870, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00923_.WMF", cAlternateFileName="")) returned 1 [0140.842] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c14, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00932_.WMF", cAlternateFileName="")) returned 1 [0140.842] ResetEvent (hEvent=0x2e4) returned 1 [0140.842] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.844] ResetEvent (hEvent=0x2e4) returned 1 [0140.844] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.845] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00985_.WMF", cAlternateFileName="")) returned 1 [0140.845] ResetEvent (hEvent=0x2e4) returned 1 [0140.845] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.847] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd16, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOAT.WMF", cAlternateFileName="")) returned 1 [0140.847] ResetEvent (hEvent=0x2e4) returned 1 [0140.847] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.848] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x714c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOATINST.WMF", cAlternateFileName="")) returned 1 [0140.848] ResetEvent (hEvent=0x2e4) returned 1 [0140.848] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.851] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x532, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00076_.WMF", cAlternateFileName="")) returned 1 [0140.851] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00078_.WMF", cAlternateFileName="")) returned 1 [0140.852] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f26, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00092_.WMF", cAlternateFileName="")) returned 1 [0140.852] ResetEvent (hEvent=0x2e4) returned 1 [0140.852] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.855] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x94a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00100_.WMF", cAlternateFileName="")) returned 1 [0140.855] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00135_.WMF", cAlternateFileName="")) returned 1 [0140.855] ResetEvent (hEvent=0x2e4) returned 1 [0140.855] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.861] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x876, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00136_.WMF", cAlternateFileName="")) returned 1 [0140.861] ResetEvent (hEvent=0x2e4) returned 1 [0140.861] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.864] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00145_.WMF", cAlternateFileName="")) returned 1 [0140.864] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00174_.WMF", cAlternateFileName="")) returned 1 [0140.864] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1370, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00184_.WMF", cAlternateFileName="")) returned 1 [0140.864] ResetEvent (hEvent=0x2e4) returned 1 [0140.864] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0 [0140.866] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2e9ea60 | out: lpFindFileData=0x2e9ea60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00186_.WMF", cAlternateFileName="")) returned 1 [0156.617] GetProcessHeap () returned 0x8a0000 [0156.617] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36a40a0 | out: hHeap=0x8a0000) returned 1 [0156.617] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1 [0156.617] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2e9ecf0 | out: lpFindFileData=0x2e9ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 0 [0156.617] FindClose (in: hFindFile=0x993580 | out: hFindFile=0x993580) returned 1 [0156.617] GetProcessHeap () returned 0x8a0000 [0156.617] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0156.617] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Themes 16", cAlternateFileName="DOCUME~1")) returned 1 [0156.617] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114f5747, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114f5747, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flattener", cAlternateFileName="FLATTE~1")) returned 1 [0156.617] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fre", cAlternateFileName="")) returned 1 [0156.617] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b2abe77, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b2abe77, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Integration", cAlternateFileName="INTEGR~1")) returned 1 [0156.618] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2687c83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee308135, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Licenses16", cAlternateFileName="LICENS~1")) returned 1 [0156.618] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee45f66d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x983c2c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="loc", cAlternateFileName="")) returned 1 [0156.618] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mcxml", cAlternateFileName="")) returned 1 [0156.618] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office16", cAlternateFileName="")) returned 1 [0156.618] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b1a0d3d, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rsod", cAlternateFileName="")) returned 1 [0156.618] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb48c20e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb48c20e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0156.618] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0156.618] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VFS", cAlternateFileName="")) returned 1 [0156.618] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2e9ef80 | out: lpFindFileData=0x2e9ef80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VFS", cAlternateFileName="")) returned 0 [0156.618] FindClose (in: hFindFile=0x993900 | out: hFindFile=0x993900) returned 1 [0156.619] GetProcessHeap () returned 0x8a0000 [0156.619] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0156.620] FindNextFileW (in: hFindFile=0x993780, lpFindFileData=0x2e9f210 | out: lpFindFileData=0x2e9f210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 0 [0156.620] FindClose (in: hFindFile=0x993780 | out: hFindFile=0x993780) returned 1 [0156.620] GetProcessHeap () returned 0x8a0000 [0156.620] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x94a118 | out: hHeap=0x8a0000) returned 1 [0156.620] FindNextFileW (in: hFindFile=0x9934c0, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x4dca02c6, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x4dca02c6, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft Office 15", cAlternateFileName="MICROS~1")) returned 1 [0156.620] FindNextFileW (in: hFindFile=0x9934c0, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe99e772e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xa7154510, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xf7d369cb, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Mozilla Firefox", cAlternateFileName="MOZILL~1")) returned 1 [0156.621] FindNextFileW (in: hFindFile=0x9934c0, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709c717f, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x709c717f, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x709c717f, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="MSBuild", cAlternateFileName="")) returned 1 [0156.621] FindNextFileW (in: hFindFile=0x9934c0, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709ed3a7, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x4dcec80c, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x4dcec80c, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Reference Assemblies", cAlternateFileName="REFERE~1")) returned 1 [0156.621] FindNextFileW (in: hFindFile=0x9934c0, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x59f2f4b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa73e1bbd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8390c831, ftLastWriteTime.dwHighDateTime=0x1d32735, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="rempl", cAlternateFileName="")) returned 1 [0156.621] FindNextFileW (in: hFindFile=0x9934c0, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd2709a20, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xa747e827, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2709a20, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Uninstall Information", cAlternateFileName="UNINST~1")) returned 1 [0156.621] FindNextFileW (in: hFindFile=0x9934c0, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4c509d45, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x4ea7bdb9, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x4ea7bdb9, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="UNP", cAlternateFileName="")) returned 1 [0156.621] FindNextFileW (in: hFindFile=0x9934c0, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4dca02c6, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x4dca02c6, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1 [0156.621] FindNextFileW (in: hFindFile=0x9934c0, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa8fde0ed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows Defender Advanced Threat Protection", cAlternateFileName="WIF4A9~1")) returned 1 [0156.621] FindNextFileW (in: hFindFile=0x9934c0, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4dca02c6, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x4dca02c6, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows Mail", cAlternateFileName="WINDOW~2")) returned 1 [0156.621] FindNextFileW (in: hFindFile=0x9934c0, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e4faee, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x4dcc6277, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x4dcc6277, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows Media Player", cAlternateFileName="WI54FB~1")) returned 1 [0156.621] FindNextFileW (in: hFindFile=0x9934c0, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa91c7efb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a4f7cc5, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows Multimedia Platform", cAlternateFileName="WINDOW~3")) returned 1 [0156.621] FindNextFileW (in: hFindFile=0x9934c0, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa91c8710, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows NT", cAlternateFileName="WINDOW~4")) returned 1 [0156.621] FindNextFileW (in: hFindFile=0x9934c0, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4dd389cd, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x4dd389cd, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows Photo Viewer", cAlternateFileName="WI8A19~1")) returned 1 [0156.621] FindNextFileW (in: hFindFile=0x9934c0, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92ac52c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a51df28, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows Portable Devices", cAlternateFileName="WIBFE5~1")) returned 1 [0156.622] FindNextFileW (in: hFindFile=0x9934c0, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92acc65, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows Security", cAlternateFileName="WIDB62~1")) returned 1 [0156.622] FindNextFileW (in: hFindFile=0x9934c0, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92aed1a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 1 [0156.622] FindNextFileW (in: hFindFile=0x9934c0, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8da88b6d, ftLastAccessTime.dwHighDateTime=0x1d3274e, ftLastWriteTime.dwLowDateTime=0x8da88b6d, ftLastWriteTime.dwHighDateTime=0x1d3274e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="WindowsApps", cAlternateFileName="WI7DB9~1")) returned 1 [0156.622] FindNextFileW (in: hFindFile=0x9934c0, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502b1c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="WindowsPowerShell", cAlternateFileName="WID5B1~1")) returned 1 [0156.622] FindNextFileW (in: hFindFile=0x9934c0, lpFindFileData=0x2e9f4a0 | out: lpFindFileData=0x2e9f4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502b1c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="WindowsPowerShell", cAlternateFileName="WID5B1~1")) returned 0 [0156.622] FindClose (in: hFindFile=0x9934c0 | out: hFindFile=0x9934c0) returned 1 [0156.622] GetProcessHeap () returned 0x8a0000 [0156.622] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x908988 | out: hHeap=0x8a0000) returned 1 [0156.622] FindNextFileW (in: hFindFile=0x8b9218, lpFindFileData=0x2e9f730 | out: lpFindFileData=0x2e9f730*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe7511354, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe7511354, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x74889fc4, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1 [0156.622] FindNextFileW (in: hFindFile=0x8b9218, lpFindFileData=0x2e9f730 | out: lpFindFileData=0x2e9f730*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x450f4738, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x74889fc4, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 1 [0156.622] FindNextFileW (in: hFindFile=0x8b9218, lpFindFileData=0x2e9f730 | out: lpFindFileData=0x2e9f730*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28e9c3a2, ftCreationTime.dwHighDateTime=0x1d32795, ftLastAccessTime.dwLowDateTime=0x1044dfc5, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x1044dfc5, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x74889fc4, cFileName="Recovery", cAlternateFileName="")) returned 1 [0156.622] FindNextFileW (in: hFindFile=0x8b9218, lpFindFileData=0x2e9f730 | out: lpFindFileData=0x2e9f730*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6ead2556, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0x6ead2556, ftLastAccessTime.dwHighDateTime=0x1d3275c, ftLastWriteTime.dwLowDateTime=0xdb6ed807, ftLastWriteTime.dwHighDateTime=0x1d569cf, nFileSizeHigh=0x0, nFileSizeLow=0x10000000, dwReserved0=0xa0000003, dwReserved1=0x74889fc4, cFileName="swapfile.sys", cAlternateFileName="")) returned 1 [0156.622] FindNextFileW (in: hFindFile=0x8b9218, lpFindFileData=0x2e9f730 | out: lpFindFileData=0x2e9f730*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x6e16f135, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0xb1ff7ba5, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xb1ff7ba5, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x74889fc4, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1 [0156.623] FindNextFileW (in: hFindFile=0x8b9218, lpFindFileData=0x2e9f730 | out: lpFindFileData=0x2e9f730*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x74889fc4, cFileName="Users", cAlternateFileName="")) returned 1 [0156.623] FindNextFileW (in: hFindFile=0x8b9218, lpFindFileData=0x2e9f730 | out: lpFindFileData=0x2e9f730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0xc838b81d, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0xc838b81d, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x74889fc4, cFileName="Windows", cAlternateFileName="")) returned 1 [0156.623] FindNextFileW (in: hFindFile=0x8b9218, lpFindFileData=0x2e9f730 | out: lpFindFileData=0x2e9f730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea34fa37, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xccdc86a8, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xccdc86a8, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x74889fc4, cFileName="Windows10Upgrade", cAlternateFileName="WINDOW~1")) returned 1 [0156.623] FindNextFileW (in: hFindFile=0x8b9218, lpFindFileData=0x2e9f730 | out: lpFindFileData=0x2e9f730*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea34fa37, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xccdc86a8, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xccdc86a8, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x74889fc4, cFileName="Windows10Upgrade", cAlternateFileName="WINDOW~1")) returned 0 [0156.623] FindClose (in: hFindFile=0x8b9218 | out: hFindFile=0x8b9218) returned 1 [0156.623] GetProcessHeap () returned 0x8a0000 [0156.623] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8f8980 | out: hHeap=0x8a0000) returned 1 [0156.624] SetEvent (hEvent=0x2e8) returned 1 [0156.624] SetEvent (hEvent=0x2e4) returned 1 [0156.624] SetEvent (hEvent=0x2ec) returned 1 [0156.624] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0156.624] SetEvent (hEvent=0x2e8) returned 1 [0156.624] SetEvent (hEvent=0x2e4) returned 1 [0156.624] SetEvent (hEvent=0x2ec) returned 1 [0156.624] WaitForMultipleObjects (nCount=0x2, lpHandles=0x2e9f9c8*=0x2f0, bWaitAll=1, dwMilliseconds=0xffffffff) returned 0x0 [0156.963] CloseHandle (hObject=0x2f4) returned 1 [0156.963] CloseHandle (hObject=0x2f0) returned 1 [0156.963] GetProcessHeap () returned 0x8a0000 [0156.963] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x50) returned 0x8b1260 [0156.963] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x74c00000 [0156.963] GetProcAddress (hModule=0x74c00000, lpProcName="Wow64RevertWow64FsRedirection") returned 0x74c16b50 [0156.963] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0156.963] GetProcessHeap () returned 0x8a0000 [0156.963] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b1260 | out: hHeap=0x8a0000) returned 1 [0156.963] CloseHandle (hObject=0x2e4) returned 1 [0156.964] CloseHandle (hObject=0x2e8) returned 1 [0156.964] CloseHandle (hObject=0x2ec) returned 1 [0156.964] GetProcessHeap () returned 0x8a0000 [0156.964] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8e8978 | out: hHeap=0x8a0000) returned 1 [0156.966] GetProcessHeap () returned 0x8a0000 [0156.966] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b8558 | out: hHeap=0x8a0000) returned 1 [0156.966] GetProcessHeap () returned 0x8a0000 [0156.966] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b9598 | out: hHeap=0x8a0000) returned 1 [0156.966] SetEvent (hEvent=0x294) returned 1 [0156.968] GetProcessHeap () returned 0x8a0000 [0156.968] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b1150 | out: hHeap=0x8a0000) returned 1 [0156.968] GetProcessHeap () returned 0x8a0000 [0156.968] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7a48 | out: hHeap=0x8a0000) returned 1 [0156.968] GetProcessHeap () returned 0x8a0000 [0156.968] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b82b8 | out: hHeap=0x8a0000) returned 1 Thread: id = 76 os_tid = 0xea8 [0130.065] GetProcessHeap () returned 0x8a0000 [0130.065] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x38) returned 0x8b9658 [0130.065] GetProcessHeap () returned 0x8a0000 [0130.065] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x18) returned 0x8b8578 [0130.065] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2fc [0130.065] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x300 [0130.065] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x304 [0130.065] GetProcessHeap () returned 0x8a0000 [0130.065] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x919270 [0130.066] GetProcessHeap () returned 0x8a0000 [0130.066] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x50) returned 0x8afb98 [0130.066] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x74c00000 [0130.066] GetProcAddress (hModule=0x74c00000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x74c16b30 [0130.066] Wow64DisableWow64FsRedirection (in: OldValue=0x2fdf824 | out: OldValue=0x2fdf824*=0x0) returned 1 [0130.066] GetProcessHeap () returned 0x8a0000 [0130.066] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8afb98 | out: hHeap=0x8a0000) returned 1 [0130.066] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x1, lpStartAddress=0x2648ba, lpParameter=0x2fdf828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x308 [0130.067] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x1, lpStartAddress=0x2648ba, lpParameter=0x2fdf828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x30c [0130.067] GetProcessHeap () returned 0x8a0000 [0130.067] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x929278 [0130.068] FindFirstFileW (in: lpFileName="\\\\?\\C:\\*", lpFindFileData=0x2fdf598 | out: lpFindFileData=0x2fdf598*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x18afba5, dwReserved1=0x74889fc4, cFileName="$GetCurrent", cAlternateFileName="$GETCU~1")) returned 0x8b9398 [0130.070] GetProcessHeap () returned 0x8a0000 [0130.070] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x94a290 [0130.071] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$GetCurrent\\*", lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x8b9418 [0130.072] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0130.072] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Logs", cAlternateFileName="")) returned 1 [0130.072] GetProcessHeap () returned 0x8a0000 [0130.072] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x95b2a0 [0130.073] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8b9458 [0130.074] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.074] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64f53c6d, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x64f53c6d, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x651b6235, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xa7e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="downlevel_2017_09_07_02_02_39_766.log.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="DOWNLE~1.PHO")) returned 1 [0130.074] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64fa031d, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x64fa031d, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6548b0ec, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x18a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="oobe_2017_09_07_03_08_57_737.log.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="OOBE_2~1.PHO")) returned 1 [0130.074] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x651dc470, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x651dc470, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x651dc470, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x142, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="PARTNE~1.PHO")) returned 1 [0130.074] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x651dc470, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x651dc470, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x651dc470, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x142, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="PARTNE~1.PHO")) returned 0 [0130.074] FindClose (in: hFindFile=0x8b9458 | out: hFindFile=0x8b9458) returned 1 [0130.075] GetProcessHeap () returned 0x8a0000 [0130.075] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x95b2a0 | out: hHeap=0x8a0000) returned 1 [0130.076] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SafeOS", cAlternateFileName="")) returned 1 [0130.076] GetProcessHeap () returned 0x8a0000 [0130.076] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x95b2a0 [0130.076] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8b9458 [0130.080] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.081] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x652026d9, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x652026d9, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x656c71aa, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x233d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentOOBE.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="GETCUR~1.PHO")) returned 1 [0130.081] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x654b10d4, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x654b10d4, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x654b10d4, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x1a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentRollback.ini.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="GETCUR~2.PHO")) returned 1 [0130.081] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x654b10d4, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x654b10d4, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x654d7324, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x362, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupComplete.cmd.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="PARTNE~1.PHO")) returned 1 [0130.081] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x654fd650, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x654fd650, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x65523810, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x142, dwReserved0=0x0, dwReserved1=0x0, cFileName="preoobe.cmd.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="PREOOB~1.PHO")) returned 1 [0130.081] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65523810, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x65523810, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x65844994, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPC~1.PHO")) returned 1 [0130.081] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65523810, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x65523810, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x65844994, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPC~1.PHO")) returned 0 [0130.081] FindClose (in: hFindFile=0x8b9458 | out: hFindFile=0x8b9458) returned 1 [0130.082] GetProcessHeap () returned 0x8a0000 [0130.082] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x95b2a0 | out: hHeap=0x8a0000) returned 1 [0130.082] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SafeOS", cAlternateFileName="")) returned 0 [0130.082] FindClose (in: hFindFile=0x8b9418 | out: hFindFile=0x8b9418) returned 1 [0130.083] GetProcessHeap () returned 0x8a0000 [0130.083] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x94a290 | out: hHeap=0x8a0000) returned 1 [0130.083] FindNextFileW (in: hFindFile=0x8b9398, lpFindFileData=0x2fdf598 | out: lpFindFileData=0x2fdf598*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x18afba5, dwReserved1=0x74889fc4, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 1 [0130.084] GetProcessHeap () returned 0x8a0000 [0130.084] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x94a290 [0130.084] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\*", lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x8b9518 [0130.084] FindNextFileW (in: hFindFile=0x8b9518, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0130.084] FindNextFileW (in: hFindFile=0x8b9518, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="S-1-5-18", cAlternateFileName="")) returned 1 [0130.085] GetProcessHeap () returned 0x8a0000 [0130.085] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x95a298 [0130.085] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-18\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0xae73cae3, ftCreationTime.dwLowDateTime=0x1d32742, ftCreationTime.dwHighDateTime=0x8a7a0a, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x16, nFileSizeHigh=0x2, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="䗺&")) returned 0xffffffff [0130.085] GetProcessHeap () returned 0x8a0000 [0130.085] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x95a298 | out: hHeap=0x8a0000) returned 1 [0130.085] FindNextFileW (in: hFindFile=0x8b9518, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xedb73d12, ftLastAccessTime.dwHighDateTime=0x1d569cf, ftLastWriteTime.dwLowDateTime=0xedb73d12, ftLastWriteTime.dwHighDateTime=0x1d569cf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0130.085] GetProcessHeap () returned 0x8a0000 [0130.085] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x95a298 [0130.085] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xedb73d12, ftLastAccessTime.dwHighDateTime=0x1d569cf, ftLastWriteTime.dwLowDateTime=0xedb73d12, ftLastWriteTime.dwHighDateTime=0x1d569cf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8b9418 [0130.085] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xedb73d12, ftLastAccessTime.dwHighDateTime=0x1d569cf, ftLastWriteTime.dwLowDateTime=0xedb73d12, ftLastWriteTime.dwHighDateTime=0x1d569cf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.085] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xedb73d12, ftCreationTime.dwHighDateTime=0x1d569cf, ftLastAccessTime.dwLowDateTime=0xedb73d12, ftLastAccessTime.dwHighDateTime=0x1d569cf, ftLastWriteTime.dwLowDateTime=0xedb99c50, ftLastWriteTime.dwHighDateTime=0x1d569cf, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0130.086] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x656ed40c, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x656ed40c, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x656ed40c, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="DESKTO~1.PHO")) returned 1 [0130.086] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x656ed40c, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x656ed40c, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x656ed40c, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="DESKTO~1.PHO")) returned 0 [0130.086] FindClose (in: hFindFile=0x8b9418 | out: hFindFile=0x8b9418) returned 1 [0130.086] GetProcessHeap () returned 0x8a0000 [0130.086] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x95a298 | out: hHeap=0x8a0000) returned 1 [0130.086] FindNextFileW (in: hFindFile=0x8b9518, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xedb73d12, ftLastAccessTime.dwHighDateTime=0x1d569cf, ftLastWriteTime.dwLowDateTime=0xedb73d12, ftLastWriteTime.dwHighDateTime=0x1d569cf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 0 [0130.086] FindClose (in: hFindFile=0x8b9518 | out: hFindFile=0x8b9518) returned 1 [0130.086] GetProcessHeap () returned 0x8a0000 [0130.087] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x94a290 | out: hHeap=0x8a0000) returned 1 [0130.087] FindNextFileW (in: hFindFile=0x8b9398, lpFindFileData=0x2fdf598 | out: lpFindFileData=0x2fdf598*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x18afba5, dwReserved1=0x74889fc4, cFileName="$WINRE_BACKUP_PARTITION.MARKER", cAlternateFileName="$WINRE~1.MAR")) returned 1 [0130.088] FindNextFileW (in: hFindFile=0x8b9398, lpFindFileData=0x2fdf598 | out: lpFindFileData=0x2fdf598*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x735b6467, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x735b6467, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x18afba5, dwReserved1=0x74889fc4, cFileName="588bce7c90097ed212", cAlternateFileName="588BCE~1")) returned 1 [0130.088] GetProcessHeap () returned 0x8a0000 [0130.088] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x94a290 [0130.088] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\*", lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x735b6467, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x735b6467, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x8b9358 [0130.098] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x735b6467, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x735b6467, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0130.100] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1025", cAlternateFileName="")) returned 1 [0130.100] GetProcessHeap () returned 0x8a0000 [0130.100] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0130.100] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8b9418 [0130.103] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.103] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65713655, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x65713655, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x65713655, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x1e82, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0130.103] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65713655, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x65713655, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x65a0e9c2, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x122f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0130.103] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6586ab75, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6586ab75, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6586ab75, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4462, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0130.103] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6586ab75, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6586ab75, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6586ab75, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4462, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0130.103] FindClose (in: hFindFile=0x8b9418 | out: hFindFile=0x8b9418) returned 1 [0130.104] GetProcessHeap () returned 0x8a0000 [0130.104] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0130.104] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1028", cAlternateFileName="")) returned 1 [0130.104] GetProcessHeap () returned 0x8a0000 [0130.104] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0130.105] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8b9418 [0130.109] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.109] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6586ab75, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6586ab75, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x65890deb, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x19a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0130.109] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65890deb, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x65890deb, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x65b65ec3, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xeea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0130.109] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65a34a3e, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x65a34a3e, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6602a9ec, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x3862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0130.110] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65a34a3e, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x65a34a3e, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6602a9ec, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x3862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0130.110] FindClose (in: hFindFile=0x8b9418 | out: hFindFile=0x8b9418) returned 1 [0130.110] GetProcessHeap () returned 0x8a0000 [0130.110] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0130.111] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1029", cAlternateFileName="")) returned 1 [0130.111] GetProcessHeap () returned 0x8a0000 [0130.111] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0130.111] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8b9418 [0130.116] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.116] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65b8bc9e, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x65b8bc9e, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x661a7e49, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xf82, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0130.116] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66052650, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x66052650, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x664c914e, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x13d52, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0130.117] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x661a7e49, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x661a7e49, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x667ea299, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0130.117] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x661a7e49, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x661a7e49, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x667ea299, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0130.117] FindClose (in: hFindFile=0x8b9418 | out: hFindFile=0x8b9418) returned 1 [0130.117] GetProcessHeap () returned 0x8a0000 [0130.117] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0130.118] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1030", cAlternateFileName="")) returned 1 [0130.118] GetProcessHeap () returned 0x8a0000 [0130.118] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0130.118] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8b9418 [0130.123] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.123] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x664c914e, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x664c914e, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x664ef16e, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xdf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0130.123] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x664ef16e, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x664ef16e, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x66e06329, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x130c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0130.123] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x667ea299, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x667ea299, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6731997a, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0130.123] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x667ea299, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x667ea299, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6731997a, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0130.123] FindClose (in: hFindFile=0x8b9418 | out: hFindFile=0x8b9418) returned 1 [0130.124] GetProcessHeap () returned 0x8a0000 [0130.124] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0130.124] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1031", cAlternateFileName="")) returned 1 [0130.124] GetProcessHeap () returned 0x8a0000 [0130.124] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0130.125] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8b9458 [0130.129] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.129] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66e06329, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x66e06329, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x66e2c2d1, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xe52, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0130.129] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66e2c2d1, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x66e2c2d1, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x66e2c2d1, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x142b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0130.129] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66e52a13, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x66e52a13, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x67b25a27, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0130.129] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66e52a13, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x66e52a13, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x67b25a27, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0130.130] FindClose (in: hFindFile=0x8b9458 | out: hFindFile=0x8b9458) returned 1 [0130.130] GetProcessHeap () returned 0x8a0000 [0130.130] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0130.131] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1032", cAlternateFileName="")) returned 1 [0130.131] GetProcessHeap () returned 0x8a0000 [0130.131] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0130.131] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8b9418 [0130.137] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.137] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6731997a, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6731997a, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6731997a, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x23a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0130.137] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6734094a, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6734094a, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x67b4b99e, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x15212, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0130.137] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67b25a27, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x67b25a27, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6893af0f, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4c62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0130.137] FindNextFileW (in: hFindFile=0x8b9418, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67b25a27, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x67b25a27, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6893af0f, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4c62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0130.137] FindClose (in: hFindFile=0x8b9418 | out: hFindFile=0x8b9418) returned 1 [0130.138] GetProcessHeap () returned 0x8a0000 [0130.138] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0130.139] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1033", cAlternateFileName="")) returned 1 [0130.139] GetProcessHeap () returned 0x8a0000 [0130.139] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0130.139] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8b9518 [0130.141] FindNextFileW (in: hFindFile=0x8b9518, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.141] FindNextFileW (in: hFindFile=0x8b9518, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67b4b99e, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x67b4b99e, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x67bbe180, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xd72, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0130.141] FindNextFileW (in: hFindFile=0x8b9518, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67bbe180, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x67bbe180, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x68bd5f2d, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x12ec2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0130.141] FindNextFileW (in: hFindFile=0x8b9518, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6894dcea, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6894dcea, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x68f1d55e, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4462, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0130.141] FindNextFileW (in: hFindFile=0x8b9518, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6894dcea, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6894dcea, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x68f1d55e, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4462, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0130.141] FindClose (in: hFindFile=0x8b9518 | out: hFindFile=0x8b9518) returned 1 [0130.142] GetProcessHeap () returned 0x8a0000 [0130.142] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0130.142] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1035", cAlternateFileName="")) returned 1 [0130.143] GetProcessHeap () returned 0x8a0000 [0130.143] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0130.143] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8b9458 [0130.145] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.145] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68c2247d, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x68c2247d, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x68c2247d, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xf72, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0130.145] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68c48624, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x68c48624, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x692184ff, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x12de2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0130.145] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68f43578, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x68f43578, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6923e3c3, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0130.145] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68f43578, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x68f43578, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6923e3c3, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0130.145] FindClose (in: hFindFile=0x8b9458 | out: hFindFile=0x8b9458) returned 1 [0130.146] GetProcessHeap () returned 0x8a0000 [0130.146] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0130.146] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1036", cAlternateFileName="")) returned 1 [0130.146] GetProcessHeap () returned 0x8a0000 [0130.146] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0130.147] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8b9458 [0130.149] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.149] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6923e3c3, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6923e3c3, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6923e3c3, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xec2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0130.149] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69264d11, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x69264d11, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6980e033, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x14522, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0130.149] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6928ce56, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6928ce56, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x69a70811, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0130.149] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6928ce56, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6928ce56, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x69a70811, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0130.149] FindClose (in: hFindFile=0x8b9458 | out: hFindFile=0x8b9458) returned 1 [0130.150] GetProcessHeap () returned 0x8a0000 [0130.150] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0130.151] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1037", cAlternateFileName="")) returned 1 [0130.151] GetProcessHeap () returned 0x8a0000 [0130.151] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0130.151] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8b9458 [0130.153] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.153] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x698341bf, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x698341bf, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6985a454, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x1bc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0130.153] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6985a454, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6985a454, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x69f0ee23, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x11a92, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0130.153] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69a9672e, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x69a9672e, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6a233686, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4262, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0130.153] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69a9672e, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x69a9672e, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6a233686, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4262, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0130.153] FindClose (in: hFindFile=0x8b9458 | out: hFindFile=0x8b9458) returned 1 [0130.154] GetProcessHeap () returned 0x8a0000 [0130.154] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0130.155] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1038", cAlternateFileName="")) returned 1 [0130.155] GetProcessHeap () returned 0x8a0000 [0130.155] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0130.155] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8b9458 [0130.158] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.158] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69f0ee23, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x69f0ee23, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x69f5b2fb, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x1192, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0130.158] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69f81571, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x69f81571, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6a4bc0f1, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x152b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0130.158] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a25ab3d, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6a25ab3d, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6a6abfba, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0130.158] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a25ab3d, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6a25ab3d, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6a6abfba, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0130.158] FindClose (in: hFindFile=0x8b9458 | out: hFindFile=0x8b9458) returned 1 [0130.159] GetProcessHeap () returned 0x8a0000 [0130.159] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0130.160] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1040", cAlternateFileName="")) returned 1 [0130.160] GetProcessHeap () returned 0x8a0000 [0130.160] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0130.160] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8b9518 [0130.162] FindNextFileW (in: hFindFile=0x8b9518, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.162] FindNextFileW (in: hFindFile=0x8b9518, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a4bc0f1, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6a4bc0f1, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6a4e20bb, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xf32, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0130.162] FindNextFileW (in: hFindFile=0x8b9518, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a50834a, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6a50834a, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6ab869ca, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x139c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0130.162] FindNextFileW (in: hFindFile=0x8b9518, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a6abfba, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6a6abfba, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6abada33, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0130.162] FindNextFileW (in: hFindFile=0x8b9518, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a6abfba, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6a6abfba, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6abada33, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0130.162] FindClose (in: hFindFile=0x8b9518 | out: hFindFile=0x8b9518) returned 1 [0130.163] GetProcessHeap () returned 0x8a0000 [0130.163] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0130.164] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1041", cAlternateFileName="")) returned 1 [0130.164] GetProcessHeap () returned 0x8a0000 [0130.164] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0130.164] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8b9458 [0130.166] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.167] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6abada33, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6abada33, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6ac46d44, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x2882, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0130.167] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6abada33, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6abada33, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6ac1f0ad, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x10b92, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0130.167] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac1f0ad, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6ac1f0ad, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6acc60dd, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x3e62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0130.167] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac1f0ad, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6ac1f0ad, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6acc60dd, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x3e62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0130.167] FindClose (in: hFindFile=0x8b9458 | out: hFindFile=0x8b9458) returned 1 [0130.168] GetProcessHeap () returned 0x8a0000 [0130.168] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0130.168] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1042", cAlternateFileName="")) returned 1 [0130.168] GetProcessHeap () returned 0x8a0000 [0130.168] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0130.169] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8b9458 [0130.171] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.172] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac53d86, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6ac53d86, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6ac79aab, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x3282, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0130.172] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac9ff3b, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6ac9ff3b, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6ad1261c, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xffe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0130.172] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6acc60dd, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6acc60dd, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6ad1261c, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x3c62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0130.172] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6acc60dd, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6acc60dd, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6ad1261c, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x3c62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0130.172] FindClose (in: hFindFile=0x8b9458 | out: hFindFile=0x8b9458) returned 1 [0130.173] GetProcessHeap () returned 0x8a0000 [0130.173] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0130.173] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1043", cAlternateFileName="")) returned 1 [0130.173] GetProcessHeap () returned 0x8a0000 [0130.173] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0130.173] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8b9458 [0130.175] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.175] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ad38946, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6ad38946, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6ad5ea6e, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xed2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0130.175] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ad38946, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6ad38946, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6b3daccd, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x13822, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0130.175] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ad5ea6e, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6ad5ea6e, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6b4271b7, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4c62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0130.175] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ad5ea6e, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6ad5ea6e, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6b4271b7, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4c62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0130.175] FindClose (in: hFindFile=0x8b9458 | out: hFindFile=0x8b9458) returned 1 [0130.176] GetProcessHeap () returned 0x8a0000 [0130.176] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0130.302] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1044", cAlternateFileName="")) returned 1 [0130.304] GetProcessHeap () returned 0x8a0000 [0130.304] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0130.304] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8b9458 [0130.305] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.305] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b3daccd, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6b3daccd, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6b4011cf, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xce2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0130.305] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4011cf, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6b4011cf, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6b499891, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x136d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0130.305] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4271b7, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6b4271b7, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6b57e6c1, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4662, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0130.305] FindNextFileW (in: hFindFile=0x8b9458, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4271b7, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6b4271b7, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6b57e6c1, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4662, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0130.305] FindClose (in: hFindFile=0x8b9458 | out: hFindFile=0x8b9458) returned 1 [0130.306] GetProcessHeap () returned 0x8a0000 [0130.306] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0130.306] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1045", cAlternateFileName="")) returned 1 [0130.306] GetProcessHeap () returned 0x8a0000 [0130.306] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0130.306] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0130.421] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.421] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4bfbf2, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6b4bfbf2, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6b4e5dc5, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x10c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0130.421] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b558715, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6b558715, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6b8ebd28, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x142d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0130.421] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b57e6c1, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6b57e6c1, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6b911f34, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0130.421] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b57e6c1, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6b57e6c1, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6b911f34, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0130.421] FindClose (in: hFindFile=0x993ac0 | out: hFindFile=0x993ac0) returned 1 [0130.422] GetProcessHeap () returned 0x8a0000 [0130.422] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0130.422] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1046", cAlternateFileName="")) returned 1 [0130.422] GetProcessHeap () returned 0x8a0000 [0130.422] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0130.422] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993580 [0130.424] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.425] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b8ebd28, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6b8ebd28, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6b9381e1, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xf62, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0130.425] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b911f34, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6b911f34, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6c1b6ac5, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x13c72, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0130.425] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b9381e1, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6b9381e1, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6c62ee60, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0130.425] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b9381e1, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6b9381e1, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6c62ee60, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0130.425] FindClose (in: hFindFile=0x993580 | out: hFindFile=0x993580) returned 1 [0130.426] GetProcessHeap () returned 0x8a0000 [0130.426] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0130.426] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1049", cAlternateFileName="")) returned 1 [0130.426] GetProcessHeap () returned 0x8a0000 [0130.426] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0130.426] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9934c0 [0130.427] FindNextFileW (in: hFindFile=0x9934c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.427] FindNextFileW (in: hFindFile=0x9934c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c1dcb21, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6c1dcb21, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6c202cb7, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xd5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0130.428] FindNextFileW (in: hFindFile=0x9934c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c202cb7, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6c202cb7, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6c99c5ff, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x13f52, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0130.428] FindNextFileW (in: hFindFile=0x9934c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c62ee60, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6c62ee60, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6cdc88dc, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0130.428] FindNextFileW (in: hFindFile=0x9934c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c62ee60, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6c62ee60, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6cdc88dc, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0130.428] FindClose (in: hFindFile=0x9934c0 | out: hFindFile=0x9934c0) returned 1 [0130.428] GetProcessHeap () returned 0x8a0000 [0130.429] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0130.429] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1053", cAlternateFileName="")) returned 1 [0130.429] GetProcessHeap () returned 0x8a0000 [0130.429] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0130.430] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9934c0 [0130.432] FindNextFileW (in: hFindFile=0x9934c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.432] FindNextFileW (in: hFindFile=0x9934c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c99c5ff, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6c99c5ff, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6c9c26e3, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x1012, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0130.432] FindNextFileW (in: hFindFile=0x9934c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c9c26e3, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6c9c26e3, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6d135ca5, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x13082, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0130.432] FindNextFileW (in: hFindFile=0x9934c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cdc88dc, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6cdc88dc, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6d15bf23, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4662, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0130.432] FindNextFileW (in: hFindFile=0x9934c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cdc88dc, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6cdc88dc, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6d15bf23, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4662, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0130.432] FindClose (in: hFindFile=0x9934c0 | out: hFindFile=0x9934c0) returned 1 [0130.433] GetProcessHeap () returned 0x8a0000 [0130.433] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0130.433] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1055", cAlternateFileName="")) returned 1 [0130.433] GetProcessHeap () returned 0x8a0000 [0130.433] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0130.433] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993580 [0130.436] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.436] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d15bf23, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6d15bf23, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6d1820d9, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x1012, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0130.436] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d15bf23, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6d15bf23, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6d1f4777, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x12d22, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0130.436] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d1820d9, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6d1820d9, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6d21aaa7, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4662, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0130.436] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d1820d9, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6d1820d9, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6d21aaa7, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4662, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0130.436] FindClose (in: hFindFile=0x993580 | out: hFindFile=0x993580) returned 1 [0130.437] GetProcessHeap () returned 0x8a0000 [0130.437] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0130.437] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="2052", cAlternateFileName="")) returned 1 [0130.437] GetProcessHeap () returned 0x8a0000 [0130.437] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0130.437] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0130.439] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.439] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d1f4777, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6d1f4777, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6d266eef, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x17c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0130.440] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d21aaa7, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6d21aaa7, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6d4ef748, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xee12, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0130.440] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d266eef, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6d266eef, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6db57c2c, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x3862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0130.440] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d266eef, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6d266eef, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6db57c2c, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x3862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0130.440] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0130.440] GetProcessHeap () returned 0x8a0000 [0130.441] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0130.441] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="2070", cAlternateFileName="")) returned 1 [0130.441] GetProcessHeap () returned 0x8a0000 [0130.441] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0130.441] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993580 [0130.442] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.444] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d4ef748, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6d4ef748, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6d515bb8, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x10a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0130.444] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d53bc2f, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6d53bc2f, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6dff653a, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x13a82, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0130.444] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dc16ae9, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6dc16ae9, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6e33d937, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0130.444] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dc16ae9, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6dc16ae9, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6e33d937, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0130.444] FindClose (in: hFindFile=0x993580 | out: hFindFile=0x993580) returned 1 [0130.445] GetProcessHeap () returned 0x8a0000 [0130.445] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0130.445] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="3076", cAlternateFileName="")) returned 1 [0130.445] GetProcessHeap () returned 0x8a0000 [0130.445] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0130.445] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993700 [0130.447] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.447] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e01c7b1, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6e01c7b1, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6e6387e7, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x19a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0130.447] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e33d937, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6e33d937, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6e9cc286, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xeea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0130.447] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e6387e7, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6e6387e7, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6e9f22a3, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x3862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0130.447] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e6387e7, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6e6387e7, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6e9f22a3, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x3862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0130.447] FindClose (in: hFindFile=0x993700 | out: hFindFile=0x993700) returned 1 [0130.448] GetProcessHeap () returned 0x8a0000 [0130.448] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0130.448] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="3082", cAlternateFileName="")) returned 1 [0130.448] GetProcessHeap () returned 0x8a0000 [0130.448] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0130.448] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9934c0 [0130.450] FindNextFileW (in: hFindFile=0x9934c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.450] FindNextFileW (in: hFindFile=0x9934c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e9cc286, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6e9cc286, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6ea18527, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xcf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0130.450] FindNextFileW (in: hFindFile=0x9934c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e9f22a3, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6e9f22a3, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6f00e45f, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x13982, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0130.450] FindNextFileW (in: hFindFile=0x9934c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea18527, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6ea18527, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6f3ee02a, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0130.450] FindNextFileW (in: hFindFile=0x9934c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea18527, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6ea18527, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6f3ee02a, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0130.450] FindClose (in: hFindFile=0x9934c0 | out: hFindFile=0x9934c0) returned 1 [0130.451] GetProcessHeap () returned 0x8a0000 [0130.451] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0130.451] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Client", cAlternateFileName="")) returned 1 [0130.451] GetProcessHeap () returned 0x8a0000 [0130.451] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0130.451] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9938c0 [0130.453] FindNextFileW (in: hFindFile=0x9938c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.453] FindNextFileW (in: hFindFile=0x9938c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f0347d7, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6f0347d7, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6f0347d7, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x31552, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="PARAME~1.PHO")) returned 1 [0130.453] FindNextFileW (in: hFindFile=0x9938c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f080d45, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6f080d45, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6f080d45, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x9982, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="UIINFO~1.PHO")) returned 1 [0130.453] FindNextFileW (in: hFindFile=0x9938c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f080d45, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6f080d45, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6f080d45, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x9982, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="UIINFO~1.PHO")) returned 0 [0130.453] FindClose (in: hFindFile=0x9938c0 | out: hFindFile=0x9938c0) returned 1 [0130.454] GetProcessHeap () returned 0x8a0000 [0130.454] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0130.454] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f0a6c01, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6f0a6c01, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6f62a403, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4002, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="DHtmlHeader.html.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="DHTMLH~1.PHO")) returned 1 [0130.454] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3ee02a, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6f3ee02a, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6f7a7db2, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x15ad2, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="DisplayIcon.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="DISPLA~1.PHO")) returned 1 [0130.454] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Extended", cAlternateFileName="")) returned 1 [0130.455] GetProcessHeap () returned 0x8a0000 [0130.455] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0130.455] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993600 [0130.456] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.456] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f62a403, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6f62a403, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6f9e3e71, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x16d92, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="PARAME~1.PHO")) returned 1 [0130.456] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7cddf9, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6f7cddf9, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6fcdedf8, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x9982, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="UIINFO~1.PHO")) returned 1 [0130.456] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7cddf9, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6f7cddf9, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6fcdedf8, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x9982, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="UIINFO~1.PHO")) returned 0 [0130.456] FindClose (in: hFindFile=0x993600 | out: hFindFile=0x993600) returned 1 [0130.457] GetProcessHeap () returned 0x8a0000 [0130.457] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0130.457] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Graphics", cAlternateFileName="")) returned 1 [0130.457] GetProcessHeap () returned 0x8a0000 [0130.457] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0130.457] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0130.459] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.460] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9e3e71, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6f9e3e71, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x703727ac, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x572, dwReserved0=0x0, dwReserved1=0x0, cFileName="Print.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="PRINTI~1.PHO")) returned 1 [0130.460] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7034c570, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x7034c570, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x703727ac, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate1.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="ROTATE~1.PHO")) returned 1 [0130.460] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703727ac, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x703727ac, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x70759a15, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate2.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="ROTATE~2.PHO")) returned 1 [0130.681] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70621245, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x70621245, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x7083fba3, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate3.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="ROTATE~3.PHO")) returned 1 [0130.681] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70759a15, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x70759a15, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x709431f6, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate4.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="ROTATE~4.PHO")) returned 1 [0130.681] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7085d501, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x7085d501, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x7085d501, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate5.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="RO91DD~1.PHO")) returned 1 [0130.681] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7085d501, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x7085d501, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x7088374b, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate6.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="RO7940~1.PHO")) returned 1 [0130.681] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7088374b, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x7088374b, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x7088374b, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate7.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="RO2FD9~1.PHO")) returned 1 [0130.682] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x708a99ed, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x708a99ed, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x708a99ed, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate8.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="RO77B2~1.PHO")) returned 1 [0130.682] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x708a99ed, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x708a99ed, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x708cfc15, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x572, dwReserved0=0x0, dwReserved1=0x0, cFileName="Save.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SAVEIC~1.PHO")) returned 1 [0130.682] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x708cfc15, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x708cfc15, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x708cfc15, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x9062, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPI~1.PHO")) returned 1 [0130.682] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x708f5e15, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x708f5e15, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x70a9c5ea, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x2892, dwReserved0=0x0, dwReserved1=0x0, cFileName="stop.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="STOPIC~1.PHO")) returned 1 [0130.682] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x709431f6, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x709431f6, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x70a06ec4, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x572, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqMet.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SYSREQ~1.PHO")) returned 1 [0130.682] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a06ec4, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x70a06ec4, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x70a273ba, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x582, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqNotMet.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SYSREQ~2.PHO")) returned 1 [0130.682] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a273ba, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x70a273ba, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x70a4d56e, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x2892, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="WARNIC~1.PHO")) returned 1 [0130.682] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a273ba, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x70a273ba, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x70a4d56e, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x2892, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="WARNIC~1.PHO")) returned 0 [0130.682] FindClose (in: hFindFile=0x993ac0 | out: hFindFile=0x993ac0) returned 1 [0130.683] GetProcessHeap () returned 0x8a0000 [0130.683] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0130.683] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a4d56e, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x70a4d56e, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x70c6a71a, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xf22, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="header.bmp.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="HEADER~1.PHO")) returned 1 [0130.683] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x70e53327, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xadd395d, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Core.mzz.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="NETFX_~1.PHO")) returned 1 [0130.683] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x71702dc2, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x290312, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Core_x64.msi.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="NETFX_~2.PHO")) returned 1 [0130.998] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x719d7a93, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x719d7a93, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x71ee87cd, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x11c112, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Core_x86.msi.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="NETFX_~3.PHO")) returned 1 [0131.031] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x7206612c, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x29e23d9, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Extended.mzz.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="NETFX_~4.PHO")) returned 1 [0131.031] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72124acc, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x72124acc, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x7259d21f, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xd5112, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Extended_x64.msi.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="NE086F~1.PHO")) returned 1 [0131.031] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725e96e9, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x725e96e9, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x728720c1, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x79112, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Extended_x86.msi.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="NE52D6~1.PHO")) returned 1 [0131.032] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x727ff9dc, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x727ff9dc, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x72825c32, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x427b2, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="ParameterInfo.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="PARAME~1.PHO")) returned 1 [0131.032] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7284becc, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x7284becc, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x7297d20d, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x2d312, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="RGB9RAST_x64.msi.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="RGB9RA~1.PHO")) returned 1 [0131.032] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728be6ca, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x728be6ca, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x72a87f11, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x17312, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="RGB9Rast_x86.msi.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="RGB9RA~2.PHO")) returned 1 [0131.032] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729a33b3, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x729a33b3, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x72afb0dd, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x13242, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Setup.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPE~1.PHO")) returned 1 [0131.032] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72aae3e5, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x72aae3e5, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x72c51b56, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xc5252, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SetupEngine.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPE~2.PHO")) returned 1 [0131.032] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b46dd2, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x72b46dd2, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x72cea48c, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x48252, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SetupUi.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPU~1.PHO")) returned 1 [0131.032] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72c9e2f6, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x72c9e2f6, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x731af060, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x76a2, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SetupUi.xsd.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPU~2.PHO")) returned 1 [0131.032] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72d109f5, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x72d109f5, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x72d5cc01, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x17862, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SetupUtility.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPU~3.PHO")) returned 1 [0131.032] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72d5cc01, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x72d5cc01, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x73162add, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xa182, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SplashScreen.bmp.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SPLASH~1.PHO")) returned 1 [0131.032] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73189035, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x73189035, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x732e02a2, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x23522, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="sqmapi.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SQMAPI~1.PHO")) returned 1 [0131.032] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x731d5506, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x731d5506, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x7339eecc, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x3802, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Strings.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="STRING~1.PHO")) returned 1 [0131.033] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x732e02a2, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x732e02a2, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x7341164b, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x98f2, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="UiInfo.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="UIINFO~1.PHO")) returned 1 [0131.033] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x733c5bea, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x733c5bea, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x7358ed35, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x19782, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="watermark.bmp.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="WATERM~1.PHO")) returned 1 [0131.033] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0x739487cc, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x5b5245, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows6.0-KB956250-v6001-x64.msu.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="WINDOW~1.PHO")) returned 1 [0131.033] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0x737cb317, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x2d7652, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows6.0-KB956250-v6001-x86.msu.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="WINDOW~2.PHO")) returned 1 [0131.033] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0x5b8e5700, ftLastWriteTime.dwHighDateTime=0x1cac6d1, nFileSizeHigh=0x0, nFileSizeLow=0x4db1ce, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows6.1-KB958488-v6001-x64.msu.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="WINDOW~3.PHO")) returned 1 [0131.033] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows6.1-KB958488-v6001-x86.msu.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="WINDOW~4.PHO")) returned 1 [0131.033] FindNextFileW (in: hFindFile=0x8b9358, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows6.1-KB958488-v6001-x86.msu.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="WINDOW~4.PHO")) returned 0 [0131.033] FindClose (in: hFindFile=0x8b9358 | out: hFindFile=0x8b9358) returned 1 [0131.033] GetProcessHeap () returned 0x8a0000 [0131.033] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x94a290 | out: hHeap=0x8a0000) returned 1 [0131.033] FindNextFileW (in: hFindFile=0x8b9398, lpFindFileData=0x2fdf598 | out: lpFindFileData=0x2fdf598*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6fa258, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x18afba5, dwReserved1=0x74889fc4, cFileName="Boot", cAlternateFileName="")) returned 1 [0131.033] GetProcessHeap () returned 0x8a0000 [0131.033] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0131.033] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\*", lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x993840 [0131.034] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0131.034] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xac3efa99, ftLastAccessTime.dwHighDateTime=0x1d4d5d3, ftLastWriteTime.dwLowDateTime=0xac3efa99, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="BCD", cAlternateFileName="")) returned 1 [0131.034] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0131.034] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0131.034] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0131.034] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0131.034] GetProcessHeap () returned 0x8a0000 [0131.034] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0131.035] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\bg-BG\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0131.035] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.035] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0131.035] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0131.035] FindClose (in: hFindFile=0x993880 | out: hFindFile=0x993880) returned 1 [0131.035] GetProcessHeap () returned 0x8a0000 [0131.035] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0131.035] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4e6d79, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef4e6d79, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x175a0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="bootspaces.dll", cAlternateFileName="BOOTSP~1.DLL")) returned 1 [0131.035] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xef703e94, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0131.035] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef4fcd12, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x185a0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="bootvhd.dll", cAlternateFileName="")) returned 1 [0131.035] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0131.035] GetProcessHeap () returned 0x8a0000 [0131.035] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0131.035] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993900 [0131.036] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.036] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2109581d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0131.036] GetProcessHeap () returned 0x8a0000 [0131.036] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0131.036] GetProcessHeap () returned 0x8a0000 [0131.036] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0131.036] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\da-DK\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0131.036] GetProcessHeap () returned 0x8a0000 [0131.036] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0131.036] GetProcessHeap () returned 0x8a0000 [0131.036] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0131.036] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\de-DE\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0131.036] GetProcessHeap () returned 0x8a0000 [0131.036] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0131.036] GetProcessHeap () returned 0x8a0000 [0131.036] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0131.036] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\el-GR\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b80 [0131.036] GetProcessHeap () returned 0x8a0000 [0131.036] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0131.037] GetProcessHeap () returned 0x8a0000 [0131.037] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0131.037] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\en-GB\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993700 [0131.037] GetProcessHeap () returned 0x8a0000 [0131.037] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0131.037] GetProcessHeap () returned 0x8a0000 [0131.037] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0131.037] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\en-US\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0131.037] GetProcessHeap () returned 0x8a0000 [0131.037] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0131.037] GetProcessHeap () returned 0x8a0000 [0131.037] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0131.037] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\es-ES\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993900 [0131.037] GetProcessHeap () returned 0x8a0000 [0131.037] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0131.037] GetProcessHeap () returned 0x8a0000 [0131.037] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0131.038] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\es-MX\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0131.038] GetProcessHeap () returned 0x8a0000 [0131.038] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0131.038] GetProcessHeap () returned 0x8a0000 [0131.038] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0131.038] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\et-EE\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0131.038] GetProcessHeap () returned 0x8a0000 [0131.038] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0131.038] GetProcessHeap () returned 0x8a0000 [0131.038] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0131.038] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fi-FI\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0131.038] GetProcessHeap () returned 0x8a0000 [0131.038] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0131.038] GetProcessHeap () returned 0x8a0000 [0131.038] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0131.038] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Fonts\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0131.040] GetProcessHeap () returned 0x8a0000 [0131.040] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0131.040] GetProcessHeap () returned 0x8a0000 [0131.040] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0131.040] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fr-CA\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0131.040] GetProcessHeap () returned 0x8a0000 [0131.040] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0131.040] GetProcessHeap () returned 0x8a0000 [0131.040] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0131.040] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fr-FR\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9934c0 [0131.040] GetProcessHeap () returned 0x8a0000 [0131.040] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0131.040] GetProcessHeap () returned 0x8a0000 [0131.040] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0131.040] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\hr-HR\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0131.040] GetProcessHeap () returned 0x8a0000 [0131.040] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0131.041] GetProcessHeap () returned 0x8a0000 [0131.041] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0131.041] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\hu-HU\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b80 [0131.041] GetProcessHeap () returned 0x8a0000 [0131.041] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0131.041] GetProcessHeap () returned 0x8a0000 [0131.041] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0131.041] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\it-IT\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0131.041] GetProcessHeap () returned 0x8a0000 [0131.041] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0131.041] GetProcessHeap () returned 0x8a0000 [0131.041] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0131.041] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ja-JP\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0131.041] GetProcessHeap () returned 0x8a0000 [0131.041] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0131.041] GetProcessHeap () returned 0x8a0000 [0131.041] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0131.041] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ko-KR\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9934c0 [0131.042] GetProcessHeap () returned 0x8a0000 [0131.042] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0131.042] GetProcessHeap () returned 0x8a0000 [0131.042] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0131.042] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\lt-LT\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0131.042] GetProcessHeap () returned 0x8a0000 [0131.042] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0131.042] GetProcessHeap () returned 0x8a0000 [0131.042] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0131.042] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\lv-LV\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993580 [0131.042] GetProcessHeap () returned 0x8a0000 [0131.042] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0131.042] GetProcessHeap () returned 0x8a0000 [0131.042] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0131.042] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\nb-NO\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9934c0 [0131.042] GetProcessHeap () returned 0x8a0000 [0131.042] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0131.042] GetProcessHeap () returned 0x8a0000 [0131.042] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0131.042] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\nl-NL\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0131.043] GetProcessHeap () returned 0x8a0000 [0131.043] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0131.043] GetProcessHeap () returned 0x8a0000 [0131.043] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0131.043] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pl-PL\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0131.043] GetProcessHeap () returned 0x8a0000 [0131.043] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0131.043] GetProcessHeap () returned 0x8a0000 [0131.043] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0131.043] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pt-BR\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993580 [0131.043] GetProcessHeap () returned 0x8a0000 [0131.043] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0131.043] GetProcessHeap () returned 0x8a0000 [0131.043] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0131.043] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pt-PT\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b80 [0131.043] GetProcessHeap () returned 0x8a0000 [0131.043] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0131.043] GetProcessHeap () returned 0x8a0000 [0131.043] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0131.043] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0131.044] GetProcessHeap () returned 0x8a0000 [0131.044] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0131.044] GetProcessHeap () returned 0x8a0000 [0131.044] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0131.044] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Resources\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9934c0 [0131.044] GetProcessHeap () returned 0x8a0000 [0131.044] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x94a118 [0131.044] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Resources\\en-US\\*", lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0131.044] GetProcessHeap () returned 0x8a0000 [0131.044] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x94a118 | out: hHeap=0x8a0000) returned 1 [0131.044] GetProcessHeap () returned 0x8a0000 [0131.044] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0131.044] GetProcessHeap () returned 0x8a0000 [0131.044] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0131.044] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ro-RO\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993500 [0131.044] GetProcessHeap () returned 0x8a0000 [0131.044] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0131.044] GetProcessHeap () returned 0x8a0000 [0131.044] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0131.044] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ru-RU\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0131.045] GetProcessHeap () returned 0x8a0000 [0131.045] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0131.045] GetProcessHeap () returned 0x8a0000 [0131.045] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0131.045] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sk-SK\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0131.045] GetProcessHeap () returned 0x8a0000 [0131.045] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0131.045] GetProcessHeap () returned 0x8a0000 [0131.045] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0131.045] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sl-SI\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9938c0 [0131.045] GetProcessHeap () returned 0x8a0000 [0131.045] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0131.045] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1 [0131.045] GetProcessHeap () returned 0x8a0000 [0131.045] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0131.045] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9938c0 [0131.046] FindNextFileW (in: hFindFile=0x9938c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.046] FindNextFileW (in: hFindFile=0x9938c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0131.046] FindNextFileW (in: hFindFile=0x9938c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe318f070, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xaf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0131.046] FindNextFileW (in: hFindFile=0x9938c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe318f070, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xaf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0131.046] FindClose (in: hFindFile=0x9938c0 | out: hFindFile=0x9938c0) returned 1 [0131.046] GetProcessHeap () returned 0x8a0000 [0131.046] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0131.046] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~2")) returned 1 [0131.046] GetProcessHeap () returned 0x8a0000 [0131.046] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0131.046] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sr-Latn-RS\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993580 [0131.046] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.046] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0131.046] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0131.046] FindClose (in: hFindFile=0x993580 | out: hFindFile=0x993580) returned 1 [0131.046] GetProcessHeap () returned 0x8a0000 [0131.046] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0131.046] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0131.047] GetProcessHeap () returned 0x8a0000 [0131.047] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0131.047] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sv-SE\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0131.047] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.047] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0131.047] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6a2250, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf98, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0131.047] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6a2250, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf98, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0131.047] FindClose (in: hFindFile=0x993ac0 | out: hFindFile=0x993ac0) returned 1 [0131.047] GetProcessHeap () returned 0x8a0000 [0131.047] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0131.047] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0131.047] GetProcessHeap () returned 0x8a0000 [0131.047] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0131.047] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\tr-TR\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993740 [0131.047] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.048] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12558, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0131.048] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6b5aca, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f4373a, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0131.048] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6b5aca, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f4373a, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0131.048] FindClose (in: hFindFile=0x993740 | out: hFindFile=0x993740) returned 1 [0131.048] GetProcessHeap () returned 0x8a0000 [0131.048] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0131.048] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="uk-UA", cAlternateFileName="")) returned 1 [0131.048] GetProcessHeap () returned 0x8a0000 [0131.048] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0131.048] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\uk-UA\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0131.048] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.048] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0131.048] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0131.048] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0131.048] GetProcessHeap () returned 0x8a0000 [0131.048] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0131.048] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef6c9427, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef6c9427, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1236, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="updaterevokesipolicy.p7b", cAlternateFileName="UPDATE~1.P7B")) returned 1 [0131.049] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0131.049] GetProcessHeap () returned 0x8a0000 [0131.049] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0131.049] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-CN\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9934c0 [0131.049] FindNextFileW (in: hFindFile=0x9934c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.049] FindNextFileW (in: hFindFile=0x9934c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0131.049] FindNextFileW (in: hFindFile=0x9934c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6d7e9a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0131.049] FindNextFileW (in: hFindFile=0x9934c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6d7e9a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0131.049] FindClose (in: hFindFile=0x9934c0 | out: hFindFile=0x9934c0) returned 1 [0131.049] GetProcessHeap () returned 0x8a0000 [0131.049] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0131.049] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0131.049] GetProcessHeap () returned 0x8a0000 [0131.049] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0131.049] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-HK\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0131.049] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.049] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf958, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0131.050] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x518ea25e, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe31db522, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xa558, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0131.050] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x518ea25e, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe31db522, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xa558, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0131.050] FindClose (in: hFindFile=0x993a00 | out: hFindFile=0x993a00) returned 1 [0131.050] GetProcessHeap () returned 0x8a0000 [0131.050] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0131.050] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0131.050] GetProcessHeap () returned 0x8a0000 [0131.050] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0131.050] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-TW\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0131.050] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.050] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0131.050] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa598, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0131.050] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa598, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0131.050] FindClose (in: hFindFile=0x993ac0 | out: hFindFile=0x993ac0) returned 1 [0131.050] GetProcessHeap () returned 0x8a0000 [0131.050] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0131.050] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0131.050] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0131.051] GetProcessHeap () returned 0x8a0000 [0131.051] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0131.051] FindNextFileW (in: hFindFile=0x8b9398, lpFindFileData=0x2fdf598 | out: lpFindFileData=0x2fdf598*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xe47a48a8, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfb90936b, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0x607da, dwReserved0=0x18afba5, dwReserved1=0x74889fc4, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0131.051] FindNextFileW (in: hFindFile=0x8b9398, lpFindFileData=0x2fdf598 | out: lpFindFileData=0x2fdf598*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5533ee0, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef9d0a0c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x18afba5, dwReserved1=0x74889fc4, cFileName="BOOTNXT", cAlternateFileName="")) returned 1 [0131.052] FindNextFileW (in: hFindFile=0x8b9398, lpFindFileData=0x2fdf598 | out: lpFindFileData=0x2fdf598*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xc4ee267e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4ee267e, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xf1c63cdd, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x18afba5, dwReserved1=0x74889fc4, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0131.052] FindNextFileW (in: hFindFile=0x8b9398, lpFindFileData=0x2fdf598 | out: lpFindFileData=0x2fdf598*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x74889fc4, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0131.052] FindNextFileW (in: hFindFile=0x8b9398, lpFindFileData=0x2fdf598 | out: lpFindFileData=0x2fdf598*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x74889fc4, cFileName="ESD", cAlternateFileName="")) returned 1 [0131.052] GetProcessHeap () returned 0x8a0000 [0131.052] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0131.052] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ESD\\*", lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x993500 [0131.056] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0131.056] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 0 [0131.056] FindClose (in: hFindFile=0x993500 | out: hFindFile=0x993500) returned 1 [0131.056] GetProcessHeap () returned 0x8a0000 [0131.056] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0131.056] FindNextFileW (in: hFindFile=0x8b9398, lpFindFileData=0x2fdf598 | out: lpFindFileData=0x2fdf598*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x7ef2dddf, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x7ef2dddf, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xd9ae9f82, ftLastWriteTime.dwHighDateTime=0x1d569cf, nFileSizeHigh=0x0, nFileSizeLow=0x332fe000, dwReserved0=0xa0000003, dwReserved1=0x74889fc4, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0131.056] FindNextFileW (in: hFindFile=0x8b9398, lpFindFileData=0x2fdf598 | out: lpFindFileData=0x2fdf598*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x74889fc4, cFileName="Logs", cAlternateFileName="")) returned 1 [0131.056] GetProcessHeap () returned 0x8a0000 [0131.056] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0131.056] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Logs\\*", lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x993640 [0131.061] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0131.067] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5052fa31, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5052fa31, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Application.evtx", cAlternateFileName="APPLIC~1.EVT")) returned 1 [0131.067] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505ee5f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505ee5f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="HardwareEvents.evtx", cAlternateFileName="HARDWA~1.EVT")) returned 1 [0131.067] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505a2134, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505a2134, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Internet Explorer.evtx", cAlternateFileName="INTERN~1.EVT")) returned 1 [0131.067] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5057bed8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5057bed8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Key Management Service.evtx", cAlternateFileName="KEYMAN~1.EVT")) returned 1 [0131.067] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1dbd7c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1dbd7c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Client-Licensing-Platform%4Admin.evtx", cAlternateFileName="MICROS~1.EVT")) returned 1 [0131.067] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5d836e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5d836e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx", cAlternateFileName="MICROS~2.EVT")) returned 1 [0131.067] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9206ac5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9206ac5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9c0f529, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx", cAlternateFileName="MICROS~3.EVT")) returned 1 [0131.067] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppLocker%4EXE and DLL.evtx", cAlternateFileName="MICROS~4.EVT")) returned 1 [0131.338] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4169a7a, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4169a7a, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppLocker%4MSI and Script.evtx", cAlternateFileName="MI2EEA~1.EVT")) returned 1 [0131.338] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx", cAlternateFileName="MI07E1~1.EVT")) returned 1 [0131.338] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx", cAlternateFileName="MI8196~1.EVT")) returned 1 [0131.338] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd41b5f2d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd41b5f2d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppModel-Runtime%4Admin.evtx", cAlternateFileName="MIE36C~1.EVT")) returned 1 [0131.338] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd389efbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd389efbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppReadiness%4Admin.evtx", cAlternateFileName="MIC5CB~1.EVT")) returned 1 [0131.338] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd38c5212, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd38c5212, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppReadiness%4Operational.evtx", cAlternateFileName="MIF8AA~1.EVT")) returned 1 [0131.338] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppXDeployment%4Operational.evtx", cAlternateFileName="MI34FE~1.EVT")) returned 1 [0131.338] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x211000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppXDeploymentServer%4Operational.evtx", cAlternateFileName="MIA24C~1.EVT")) returned 1 [0131.338] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx", cAlternateFileName="MIDBEC~1.EVT")) returned 1 [0131.339] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85798667, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x85798667, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppxPackaging%4Operational.evtx", cAlternateFileName="MI54F1~1.EVT")) returned 1 [0131.339] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74d25ab, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74d25ab, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx", cAlternateFileName="MI111F~1.EVT")) returned 1 [0131.339] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f96ca4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe1f96ca4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Bits-Client%4Operational.evtx", cAlternateFileName="MI9465~1.EVT")) returned 1 [0131.339] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8783aa15, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8783aa15, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-CodeIntegrity%4Operational.evtx", cAlternateFileName="MI03A7~1.EVT")) returned 1 [0131.339] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3c71c5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3c71c5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx", cAlternateFileName="MI5CA2~1.EVT")) returned 1 [0131.339] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx", cAlternateFileName="MI5FD1~1.EVT")) returned 1 [0131.339] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Crypto-DPAPI%4Operational.evtx", cAlternateFileName="MI8BDF~1.EVT")) returned 1 [0131.339] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3ed420, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3ed420, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx", cAlternateFileName="MIAEBD~1.EVT")) returned 1 [0131.340] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cef47f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cef47f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-DeviceSetupManager%4Admin.evtx", cAlternateFileName="MIA726~1.EVT")) returned 1 [0131.340] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-DeviceSetupManager%4Operational.evtx", cAlternateFileName="MI08CB~1.EVT")) returned 1 [0131.340] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc967f17e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc967f17e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Dhcp-Client%4Admin.evtx", cAlternateFileName="MI8270~1.EVT")) returned 1 [0131.340] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc96cb64b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc96cb64b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Dhcpv6-Client%4Admin.evtx", cAlternateFileName="MIEBFF~1.EVT")) returned 1 [0131.340] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64aa7b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca64aa7b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Diagnosis-DPS%4Operational.evtx", cAlternateFileName="MI9F85~1.EVT")) returned 1 [0131.340] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd9ec80, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xfd9ec80, ftLastAccessTime.dwHighDateTime=0x1d1a04f, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Diagnostics-Performance%4Operational.evtx", cAlternateFileName="MIBE3D~1.EVT")) returned 1 [0131.340] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9658ef3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9658ef3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-GroupPolicy%4Operational.evtx", cAlternateFileName="MIE38D~1.EVT")) returned 1 [0131.340] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9dcc480, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9dcc480, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-HotspotAuth%4Operational.evtx", cAlternateFileName="MIE386~1.EVT")) returned 1 [0131.340] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b4bacf, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b4bacf, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx", cAlternateFileName="MI6B25~1.EVT")) returned 1 [0131.340] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb66288f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-International%4Operational.evtx", cAlternateFileName="MI854A~1.EVT")) returned 1 [0131.340] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x506ad1ac, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x506ad1ac, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Kernel-Boot%4Operational.evtx", cAlternateFileName="MI32CE~1.EVT")) returned 1 [0131.340] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Kernel-EventTracing%4Admin.evtx", cAlternateFileName="MIA934~1.EVT")) returned 1 [0131.340] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5071f8b0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5071f8b0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Kernel-PnP%4Configuration.evtx", cAlternateFileName="MIB32D~1.EVT")) returned 1 [0131.340] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8ebf6d7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc8ebf6d7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx", cAlternateFileName="MICA77~1.EVT")) returned 1 [0131.341] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5090f75d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5090f75d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx", cAlternateFileName="MI1E8D~1.EVT")) returned 1 [0131.341] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd75102f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd75102f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx", cAlternateFileName="MID067~1.EVT")) returned 1 [0131.341] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Kernel-WHEA%4Errors.evtx", cAlternateFileName="MIDE4D~1.EVT")) returned 1 [0131.341] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Kernel-WHEA%4Operational.evtx", cAlternateFileName="MI36C5~1.EVT")) returned 1 [0131.341] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59547c37, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x59547c37, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Known Folders API Service.evtx", cAlternateFileName="MI86D6~1.EVT")) returned 1 [0131.341] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb7386e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbb7386e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-LiveId%4Operational.evtx", cAlternateFileName="MI4C58~1.EVT")) returned 1 [0131.341] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93d06f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93d06f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-MUI%4Admin.evtx", cAlternateFileName="MI30D3~1.EVT")) returned 1 [0131.341] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93aa49b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93aa49b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-MUI%4Operational.evtx", cAlternateFileName="MI6F01~1.EVT")) returned 1 [0131.342] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9d33b19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9d33b19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-NCSI%4Operational.evtx", cAlternateFileName="MI483C~1.EVT")) returned 1 [0131.342] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbcf0ff2, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbcf0ff2, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-NetworkProfile%4Operational.evtx", cAlternateFileName="MIFC66~1.EVT")) returned 1 [0131.342] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ab3154, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ab3154, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Ntfs%4Operational.evtx", cAlternateFileName="MI6E98~1.EVT")) returned 1 [0131.342] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ad9393, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ad9393, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Ntfs%4WHC.evtx", cAlternateFileName="MIB2AC~1.EVT")) returned 1 [0131.342] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5fe5cb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5fe5cb, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx", cAlternateFileName="MI6AFE~1.EVT")) returned 1 [0131.342] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe24cdef0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe24cdef0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-ReadyBoost%4Operational.evtx", cAlternateFileName="MIB9D2~1.EVT")) returned 1 [0131.342] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd125335f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd125335f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx", cAlternateFileName="MI7A67~1.EVT")) returned 1 [0131.342] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-SettingSync%4Debug.evtx", cAlternateFileName="MI3773~1.EVT")) returned 1 [0131.342] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-SettingSync%4Operational.evtx", cAlternateFileName="MI36AA~1.EVT")) returned 1 [0131.342] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Shell-Core%4ActionCenter.evtx", cAlternateFileName="MI2E2E~1.EVT")) returned 1 [0131.342] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Shell-Core%4Operational.evtx", cAlternateFileName="MI1C6C~1.EVT")) returned 1 [0131.342] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-SmbClient%4Connectivity.evtx", cAlternateFileName="MI00FB~1.EVT")) returned 1 [0131.342] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97b042f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97b042f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-SMBClient%4Operational.evtx", cAlternateFileName="MID8B0~1.EVT")) returned 1 [0131.342] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-SmbClient%4Security.evtx", cAlternateFileName="MI8CEE~1.EVT")) returned 1 [0131.343] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb1ea1c9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb1ea1c9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-SMBServer%4Audit.evtx", cAlternateFileName="MIE3AD~1.EVT")) returned 1 [0131.343] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb19dd19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb19dd19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-SMBServer%4Connectivity.evtx", cAlternateFileName="MI8248~1.EVT")) returned 1 [0131.343] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb151873, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb151873, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-SMBServer%4Operational.evtx", cAlternateFileName="MI4B6B~1.EVT")) returned 1 [0131.343] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb177aca, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb177aca, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-SMBServer%4Security.evtx", cAlternateFileName="MI7709~1.EVT")) returned 1 [0131.343] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd751ea61, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd751ea61, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Store%4Operational.evtx", cAlternateFileName="MICEDD~1.EVT")) returned 1 [0131.343] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd0763ff, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd0763ff, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-TaskScheduler%4Maintenance.evtx", cAlternateFileName="MIE2F0~1.EVT")) returned 1 [0131.346] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5089d037, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5089d037, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx", cAlternateFileName="MIAB1D~1.EVT")) returned 1 [0131.346] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x508c32a6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x508c32a6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx", cAlternateFileName="MI62D3~1.EVT")) returned 1 [0131.346] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc14341c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc14341c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx", cAlternateFileName="MIEC03~1.EVT")) returned 1 [0131.346] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1b5b23, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1b5b23, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx", cAlternateFileName="MI1F5D~1.EVT")) returned 1 [0131.346] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74ac348, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74ac348, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-TWinUI%4Operational.evtx", cAlternateFileName="MIA925~1.EVT")) returned 1 [0131.346] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50aff605, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50aff605, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-User Profile Service%4Operational.evtx", cAlternateFileName="MI4D4C~1.EVT")) returned 1 [0131.346] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50981e6e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50981e6e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-UserPnp%4ActionCenter.evtx", cAlternateFileName="MI5FF0~1.EVT")) returned 1 [0131.346] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5095bc04, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5095bc04, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-UserPnp%4DeviceInstall.evtx", cAlternateFileName="MIBD88~1.EVT")) returned 1 [0131.346] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b97f64, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b97f64, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx", cAlternateFileName="MICC17~1.EVT")) returned 1 [0131.346] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc986efe1, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc986efe1, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Wcmsvc%4Operational.evtx", cAlternateFileName="MI72BF~1.EVT")) returned 1 [0131.347] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb426548, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb426548, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Windows Defender%4Operational.evtx", cAlternateFileName="MI7501~1.EVT")) returned 1 [0131.347] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb4729e7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb4729e7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Windows Defender%4WHC.evtx", cAlternateFileName="MIF226~1.EVT")) returned 1 [0131.347] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4b19353, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4b19353, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx", cAlternateFileName="MIDCC7~1.EVT")) returned 1 [0131.347] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9c9b1b6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9c9b1b6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx", cAlternateFileName="MI7771~1.EVT")) returned 1 [0131.347] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9df26e9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9df26e9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx", cAlternateFileName="MI4667~1.EVT")) returned 1 [0131.347] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd122d184, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd122d184, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Winlogon%4Operational.evtx", cAlternateFileName="MID6AB~1.EVT")) returned 1 [0131.347] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf164b9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcf164b9b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-WMI-Activity%4Operational.evtx", cAlternateFileName="MIFF83~1.EVT")) returned 1 [0131.347] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9a458f4, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Security.evtx", cAlternateFileName="SECURI~1.EVT")) returned 1 [0131.347] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a6db2c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x95a6db2c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Setup.evtx", cAlternateFileName="SETUP~1.EVT")) returned 1 [0131.347] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505097c4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505097c4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="System.evtx", cAlternateFileName="SYSTEM~1.EVT")) returned 1 [0131.347] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows PowerShell.evtx", cAlternateFileName="WINDOW~1.EVT")) returned 1 [0131.347] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows PowerShell.evtx", cAlternateFileName="WINDOW~1.EVT")) returned 0 [0131.348] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0131.349] GetProcessHeap () returned 0x8a0000 [0131.349] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0131.349] FindNextFileW (in: hFindFile=0x8b9398, lpFindFileData=0x2fdf598 | out: lpFindFileData=0x2fdf598*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6e97b025, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0x6e97b025, ftLastAccessTime.dwHighDateTime=0x1d3275c, ftLastWriteTime.dwLowDateTime=0xdb6ed807, ftLastWriteTime.dwHighDateTime=0x1d569cf, nFileSizeHigh=0x0, nFileSizeLow=0x28000000, dwReserved0=0xa0000003, dwReserved1=0x74889fc4, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0131.349] FindNextFileW (in: hFindFile=0x8b9398, lpFindFileData=0x2fdf598 | out: lpFindFileData=0x2fdf598*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x74889fc4, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0131.349] GetProcessHeap () returned 0x8a0000 [0131.349] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0131.349] FindFirstFileW (in: lpFileName="\\\\?\\C:\\PerfLogs\\*", lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows PowerShell.evtx", cAlternateFileName="䗺&")) returned 0xffffffff [0131.349] GetProcessHeap () returned 0x8a0000 [0131.349] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0131.349] FindNextFileW (in: hFindFile=0x8b9398, lpFindFileData=0x2fdf598 | out: lpFindFileData=0x2fdf598*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x518874ca, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x518874ca, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x74889fc4, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0131.349] GetProcessHeap () returned 0x8a0000 [0131.349] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0131.349] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\*", lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x518874ca, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x518874ca, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x993880 [0131.349] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x518874ca, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x518874ca, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0131.349] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1 [0131.350] GetProcessHeap () returned 0x8a0000 [0131.350] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0131.352] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993500 [0131.353] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.353] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESIGNER", cAlternateFileName="")) returned 1 [0131.353] GetProcessHeap () returned 0x8a0000 [0131.353] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36a40a0 [0131.353] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\*", lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0131.353] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.353] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8c3a00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5c8c3a00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.OLB", cAlternateFileName="")) returned 1 [0131.353] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8c3a00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5c8c3a00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.OLB", cAlternateFileName="")) returned 0 [0131.353] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0131.354] GetProcessHeap () returned 0x8a0000 [0131.354] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36a40a0 | out: hHeap=0x8a0000) returned 1 [0131.354] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft shared", cAlternateFileName="MICROS~1")) returned 1 [0131.354] GetProcessHeap () returned 0x8a0000 [0131.354] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36a40a0 [0131.354] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\*", lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993580 [0131.354] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.354] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81028f76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x81028f76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClickToRun", cAlternateFileName="CLICKT~1")) returned 1 [0131.354] GetProcessHeap () returned 0x8a0000 [0131.354] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0131.354] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\*", lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81028f76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x81028f76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0131.355] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81028f76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x81028f76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.355] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x809e6bf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x809e6bf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1 [0131.355] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x809e6bf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x809e6bf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1 [0131.355] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="API-MS~3.DLL")) returned 1 [0131.355] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="API-MS~4.DLL")) returned 1 [0131.355] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="APF10C~1.DLL")) returned 1 [0131.355] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1 [0131.355] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="APA632~1.DLL")) returned 1 [0131.355] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1 [0131.355] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x58c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="APFD9C~1.DLL")) returned 1 [0131.355] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="APC00F~1.DLL")) returned 1 [0131.355] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="AP0479~1.DLL")) returned 1 [0131.355] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="AP23C9~1.DLL")) returned 1 [0131.356] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1 [0131.356] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="APAE51~1.DLL")) returned 1 [0131.356] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x68c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1 [0131.356] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1 [0131.356] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="APFCAD~1.DLL")) returned 1 [0131.356] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="AP8F34~1.DLL")) returned 1 [0131.356] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="APD1B7~1.DLL")) returned 1 [0131.356] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="APBF0F~1.DLL")) returned 1 [0131.356] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="AP5E4C~1.DLL")) returned 1 [0131.356] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="AP80F4~1.DLL")) returned 1 [0131.356] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb979f700, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x27c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApiClient.dll", cAlternateFileName="APICLI~1.DLL")) returned 1 [0131.356] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9bc01200, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0xa02d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVCatalog.dll", cAlternateFileName="APPVCA~1.DLL")) returned 1 [0131.356] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x1f5ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="appvcleaner.exe", cAlternateFileName="APPVCL~1.EXE")) returned 1 [0131.356] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a330a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a330a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x4b0d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVFileSystemMetadata.dll", cAlternateFileName="APPVFI~1.DLL")) returned 1 [0131.357] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a330a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a330a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x2052d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVIntegration.dll", cAlternateFileName="APPVIN~1.DLL")) returned 1 [0131.357] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a59305, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a59305, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x726d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVIsvApi.dll", cAlternateFileName="APPVIS~1.DLL")) returned 1 [0131.357] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe1b7300, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0x60ea0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppvIsvStream32.dll", cAlternateFileName="APPVIS~2.DLL")) returned 1 [0131.357] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb5e67000, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x73aa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppvIsvStream64.dll", cAlternateFileName="APPVIS~3.DLL")) returned 1 [0131.357] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x336d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVIsvStreamingManager.dll", cAlternateFileName="APPVIS~4.DLL")) returned 1 [0131.357] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80aa57b9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80aa57b9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x1566d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVIsvSubsystemController.dll", cAlternateFileName="AP213A~1.DLL")) returned 1 [0131.357] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80aa57b9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80aa57b9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x18d60800, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0x1ae0a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppvIsvSubsystems32.dll", cAlternateFileName="AP3342~1.DLL")) returned 1 [0131.357] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80acba0b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80acba0b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbbdc5100, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x22e0a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppvIsvSubsystems64.dll", cAlternateFileName="AP4400~1.DLL")) returned 1 [0131.357] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80af1c6a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80af1c6a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x8a8d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVIsvVirtualization.dll", cAlternateFileName="AP485B~1.DLL")) returned 1 [0131.357] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80af1c6a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80af1c6a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x12cad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVManifest.dll", cAlternateFileName="APPVMA~1.DLL")) returned 1 [0131.357] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b17ebf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b17ebf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0xe76d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVOrchestration.dll", cAlternateFileName="APPVOR~1.DLL")) returned 1 [0131.357] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b17ebf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b17ebf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x13c4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVPolicy.dll", cAlternateFileName="APPVPO~1.DLL")) returned 1 [0131.358] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b17ebf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b17ebf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9e226c00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x7d0d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVScripting.dll", cAlternateFileName="APPVSC~1.DLL")) returned 1 [0131.358] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9e226c00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x406d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVShNotify.exe", cAlternateFileName="APPVSH~1.EXE")) returned 1 [0131.358] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x14115400, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0xc84c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2R32.dll", cAlternateFileName="")) returned 1 [0131.358] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb4b54300, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x127260, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2R64.dll", cAlternateFileName="")) returned 1 [0131.358] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8ee04f00, ftLastWriteTime.dwHighDateTime=0x1d0d67f, nFileSizeHigh=0x0, nFileSizeLow=0x1028, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RHeartbeatConfig.xml", cAlternateFileName="C2RHEA~1.XML")) returned 1 [0131.358] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb3841600, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RUI.en-us.dll", cAlternateFileName="C2RUIE~1.DLL")) returned 1 [0131.358] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x514a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="concrt140.dll", cAlternateFileName="CONCRT~1.DLL")) returned 1 [0131.358] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbd783a00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="i640.hash", cAlternateFileName="I640~1.HAS")) returned 1 [0131.358] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbc470d00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="i641033.hash", cAlternateFileName="I64103~1.HAS")) returned 1 [0131.358] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbe3eab00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x10ae80, dwReserved0=0x0, dwReserved1=0x0, cFileName="IntegratedOffice.exe", cAlternateFileName="INTEGR~1.EXE")) returned 1 [0131.358] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b8a5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b8a5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xa2e72000, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x578d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MavInject32.exe", cAlternateFileName="MAVINJ~1.EXE")) returned 1 [0131.358] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b8a5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b8a5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8745c00, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0x2ffa60, dwReserved0=0x0, dwReserved1=0x0, cFileName="mso20win32client.dll", cAlternateFileName="MSO20W~1.DLL")) returned 1 [0131.358] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80bb0837, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80bb0837, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xad6b600, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0x475e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="mso30win32client.dll", cAlternateFileName="MSO30W~1.DLL")) returned 1 [0131.358] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80bfccf1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80bfccf1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x307ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mso40uires.dll", cAlternateFileName="MSO40U~1.DLL")) returned 1 [0131.358] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c22f4a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80c22f4a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x10cc9700, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0x8e6060, dwReserved0=0x0, dwReserved1=0x0, cFileName="mso40uiwin32client.dll", cAlternateFileName="MSO40U~2.DLL")) returned 1 [0131.359] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x11fdc400, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0xee60, dwReserved0=0x0, dwReserved1=0x0, cFileName="msointl30.en-us.dll", cAlternateFileName="MSOINT~1.DLL")) returned 1 [0131.359] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c9565a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80c9565a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1909ea00, ftLastWriteTime.dwHighDateTime=0x1d098bf, nFileSizeHigh=0x0, nFileSizeLow=0xa12a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1 [0131.359] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cbb8b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80cbb8b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x9b0a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1 [0131.359] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cbb8b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80cbb8b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b6c4400, ftLastWriteTime.dwHighDateTime=0x1d098bf, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1 [0131.359] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cbb8b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80cbb8b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x5b1068, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeC2RClient.exe", cAlternateFileName="OFFICE~1.EXE")) returned 1 [0131.359] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d07d85, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d07d85, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0xf34d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeC2RCom.dll", cAlternateFileName="OFFICE~1.DLL")) returned 1 [0131.359] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d07d85, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d07d85, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbd0d7e00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x2a5e58, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeClickToRun.exe", cAlternateFileName="OFFICE~2.EXE")) returned 1 [0131.359] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3f141b52, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x12ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeUpdateSchedule.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0131.359] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3fa7ec8f, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x1162, dwReserved0=0x0, dwReserved1=0x0, cFileName="ServiceWatcherSchedule.xml", cAlternateFileName="SERVIC~1.XML")) returned 1 [0131.359] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbe3eab00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x101458, dwReserved0=0x0, dwReserved1=0x0, cFileName="StreamServer.dll", cAlternateFileName="STREAM~1.DLL")) returned 1 [0131.359] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0xefec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ucrtbase.dll", cAlternateFileName="")) returned 1 [0131.359] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d7a486, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d7a486, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x5f4b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vccorlib140.dll", cAlternateFileName="VCCORL~1.DLL")) returned 1 [0131.359] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d7a486, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d7a486, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 1 [0131.359] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d7a486, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d7a486, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 0 [0131.361] FindClose (in: hFindFile=0x9937c0 | out: hFindFile=0x9937c0) returned 1 [0131.362] GetProcessHeap () returned 0x8a0000 [0131.362] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0131.362] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ink", cAlternateFileName="")) returned 1 [0131.362] GetProcessHeap () returned 0x8a0000 [0131.362] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0131.362] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\*", lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0131.385] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.385] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe462e472, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe462e472, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xc137d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Alphabet.xml", cAlternateFileName="")) returned 1 [0131.385] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05532b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-SA", cAlternateFileName="")) returned 1 [0131.385] GetProcessHeap () returned 0x8a0000 [0131.385] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0131.386] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05532b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993740 [0131.386] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05532b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.386] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.386] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.386] FindClose (in: hFindFile=0x993740 | out: hFindFile=0x993740) returned 1 [0131.386] GetProcessHeap () returned 0x8a0000 [0131.386] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0131.386] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0553f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0131.386] GetProcessHeap () returned 0x8a0000 [0131.386] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0131.386] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0553f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993740 [0131.386] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0553f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.386] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.387] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.387] FindClose (in: hFindFile=0x993740 | out: hFindFile=0x993740) returned 1 [0131.387] GetProcessHeap () returned 0x8a0000 [0131.387] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0131.387] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe46546cb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe46546cb, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x69a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content.xml", cAlternateFileName="")) returned 1 [0131.387] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0554b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0131.387] GetProcessHeap () returned 0x8a0000 [0131.387] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0131.387] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0554b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0131.387] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0554b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.387] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e316e09, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e316e09, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e316e09, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.387] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e316e09, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e316e09, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e316e09, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.387] FindClose (in: hFindFile=0x9939c0 | out: hFindFile=0x9939c0) returned 1 [0131.387] GetProcessHeap () returned 0x8a0000 [0131.387] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0131.387] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05550d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0131.387] GetProcessHeap () returned 0x8a0000 [0131.387] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0131.387] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05550d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0131.388] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05550d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.388] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2f0ba2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2f0ba2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2f0ba2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.388] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2f0ba2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2f0ba2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2f0ba2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.388] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0131.388] GetProcessHeap () returned 0x8a0000 [0131.388] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0131.388] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0555b2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0131.388] GetProcessHeap () returned 0x8a0000 [0131.388] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0131.388] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0555b2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0131.388] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0555b2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.388] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2f0ba2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2f0ba2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2f0ba2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.388] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2f0ba2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2f0ba2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2f0ba2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.388] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0131.388] GetProcessHeap () returned 0x8a0000 [0131.388] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0131.388] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa055662c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0131.388] GetProcessHeap () returned 0x8a0000 [0131.388] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0131.389] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa055662c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0131.389] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa055662c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.389] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.389] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.389] FindClose (in: hFindFile=0x9935c0 | out: hFindFile=0x9935c0) returned 1 [0131.389] GetProcessHeap () returned 0x8a0000 [0131.389] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0131.389] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0557085, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB", cAlternateFileName="")) returned 1 [0131.389] GetProcessHeap () returned 0x8a0000 [0131.389] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0131.389] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0557085, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0131.389] GetProcessHeap () returned 0x8a0000 [0131.389] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0131.389] GetProcessHeap () returned 0x8a0000 [0131.389] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0131.389] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dd09d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0131.392] GetProcessHeap () returned 0x8a0000 [0131.392] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0131.392] GetProcessHeap () returned 0x8a0000 [0131.392] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0131.392] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05ddf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0131.392] GetProcessHeap () returned 0x8a0000 [0131.392] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0131.392] GetProcessHeap () returned 0x8a0000 [0131.392] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0131.392] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dea14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0131.393] GetProcessHeap () returned 0x8a0000 [0131.393] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0131.393] GetProcessHeap () returned 0x8a0000 [0131.393] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0131.393] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df011, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0131.393] GetProcessHeap () returned 0x8a0000 [0131.393] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0131.393] GetProcessHeap () returned 0x8a0000 [0131.393] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0131.393] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df7b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0131.395] GetProcessHeap () returned 0x8a0000 [0131.395] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0131.395] GetProcessHeap () returned 0x8a0000 [0131.395] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0131.395] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0635c03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993700 [0131.396] GetProcessHeap () returned 0x8a0000 [0131.396] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0131.396] GetProcessHeap () returned 0x8a0000 [0131.396] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0131.396] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06369df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993780 [0131.396] GetProcessHeap () returned 0x8a0000 [0131.396] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0131.396] GetProcessHeap () returned 0x8a0000 [0131.396] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0131.396] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0637839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0131.398] GetProcessHeap () returned 0x8a0000 [0131.398] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d40b8 [0131.398] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638633, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0131.399] GetProcessHeap () returned 0x8a0000 [0131.399] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d40b8 | out: hHeap=0x8a0000) returned 1 [0131.399] GetProcessHeap () returned 0x8a0000 [0131.399] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d40b8 [0131.399] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638c00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0131.399] GetProcessHeap () returned 0x8a0000 [0131.399] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d40b8 | out: hHeap=0x8a0000) returned 1 [0131.399] GetProcessHeap () returned 0x8a0000 [0131.399] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d40b8 [0131.399] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa063932e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0131.400] GetProcessHeap () returned 0x8a0000 [0131.400] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d40b8 | out: hHeap=0x8a0000) returned 1 [0131.400] GetProcessHeap () returned 0x8a0000 [0131.400] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d40b8 [0131.400] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cd023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0131.402] GetProcessHeap () returned 0x8a0000 [0131.402] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d40b8 | out: hHeap=0x8a0000) returned 1 [0131.402] GetProcessHeap () returned 0x8a0000 [0131.402] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d40b8 [0131.402] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cdb88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993600 [0131.403] GetProcessHeap () returned 0x8a0000 [0131.403] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d40b8 | out: hHeap=0x8a0000) returned 1 [0131.403] GetProcessHeap () returned 0x8a0000 [0131.403] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d40b8 [0131.403] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0131.404] GetProcessHeap () returned 0x8a0000 [0131.404] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d40b8 | out: hHeap=0x8a0000) returned 1 [0131.404] GetProcessHeap () returned 0x8a0000 [0131.404] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d40b8 [0131.404] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce7a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0131.404] GetProcessHeap () returned 0x8a0000 [0131.404] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d40b8 | out: hHeap=0x8a0000) returned 1 [0131.404] GetProcessHeap () returned 0x8a0000 [0131.404] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d40b8 [0131.404] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ceb7f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0131.404] GetProcessHeap () returned 0x8a0000 [0131.404] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d40b8 | out: hHeap=0x8a0000) returned 1 [0131.404] GetProcessHeap () returned 0x8a0000 [0131.404] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d40b8 [0131.404] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cef41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0131.405] GetProcessHeap () returned 0x8a0000 [0131.405] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d40b8 | out: hHeap=0x8a0000) returned 1 [0131.405] GetProcessHeap () returned 0x8a0000 [0131.405] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d40b8 [0131.405] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf371, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0131.405] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf371, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.406] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ea-sym.xml", cAlternateFileName="")) returned 1 [0131.406] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x325, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp-sym.xml", cAlternateFileName="")) returned 1 [0131.406] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeef, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbase.xml", cAlternateFileName="")) returned 1 [0131.406] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeef, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbase.xml", cAlternateFileName="")) returned 0 [0131.406] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0131.406] GetProcessHeap () returned 0x8a0000 [0131.406] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d40b8 | out: hHeap=0x8a0000) returned 1 [0131.406] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols.xml", cAlternateFileName="")) returned 1 [0131.406] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols.xml", cAlternateFileName="")) returned 0 [0131.406] FindClose (in: hFindFile=0x993ac0 | out: hFindFile=0x993ac0) returned 1 [0131.406] GetProcessHeap () returned 0x8a0000 [0131.406] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0131.407] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-IL", cAlternateFileName="")) returned 1 [0131.407] GetProcessHeap () returned 0x8a0000 [0131.407] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0131.408] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0131.408] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.408] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.408] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.408] FindClose (in: hFindFile=0x9935c0 | out: hFindFile=0x9935c0) returned 1 [0131.408] GetProcessHeap () returned 0x8a0000 [0131.408] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0131.408] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-HR", cAlternateFileName="")) returned 1 [0131.408] GetProcessHeap () returned 0x8a0000 [0131.408] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0131.408] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0131.408] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.408] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.409] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.409] FindClose (in: hFindFile=0x9937c0 | out: hFindFile=0x9937c0) returned 1 [0131.409] GetProcessHeap () returned 0x8a0000 [0131.409] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0131.409] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0131.409] GetProcessHeap () returned 0x8a0000 [0131.409] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0131.409] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0131.409] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.409] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.409] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.409] FindClose (in: hFindFile=0x9939c0 | out: hFindFile=0x9939c0) returned 1 [0131.409] GetProcessHeap () returned 0x8a0000 [0131.409] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0131.409] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8ce781, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe382bd1f, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe382bd1f, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb620, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrcommonlm.dat", cAlternateFileName="")) returned 1 [0131.409] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HWRCustomization", cAlternateFileName="HWRCUS~1")) returned 1 [0131.410] GetProcessHeap () returned 0x8a0000 [0131.410] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0131.410] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\HWRCustomization\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993600 [0131.410] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.410] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0131.410] FindClose (in: hFindFile=0x993600 | out: hFindFile=0x993600) returned 1 [0131.410] GetProcessHeap () returned 0x8a0000 [0131.410] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0131.410] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85c57278, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xb269cdea, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb269cdea, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x79bc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrenclm.dat", cAlternateFileName="")) returned 1 [0131.410] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8ce781, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe38781cd, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe38781cd, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x10cb30, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrlatinlm.dat", cAlternateFileName="")) returned 1 [0131.410] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85cc99ae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xb28b2edf, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb28b2edf, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2662f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrusalm.dat", cAlternateFileName="")) returned 1 [0131.410] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85cc99ae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xb281a570, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb281a570, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x339380, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrusash.dat", cAlternateFileName="")) returned 1 [0131.410] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x58400, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkDiv.dll", cAlternateFileName="")) returned 1 [0131.410] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1ecc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkObj.dll", cAlternateFileName="")) returned 1 [0131.411] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe467a929, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe467a929, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x59a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization.exe", cAlternateFileName="")) returned 1 [0131.411] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x972, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsar.xml", cAlternateFileName="")) returned 1 [0131.411] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa20, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscat.xml", cAlternateFileName="")) returned 1 [0131.411] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x99e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipschs.xml", cAlternateFileName="")) returned 1 [0131.411] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscht.xml", cAlternateFileName="")) returned 1 [0131.412] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscsy.xml", cAlternateFileName="")) returned 1 [0131.412] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsdan.xml", cAlternateFileName="")) returned 1 [0131.412] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsdeu.xml", cAlternateFileName="")) returned 1 [0131.412] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsel.xml", cAlternateFileName="")) returned 1 [0131.412] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsen.xml", cAlternateFileName="")) returned 1 [0131.412] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xbd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsesp.xml", cAlternateFileName="")) returned 1 [0131.412] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d14d081, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d14d081, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPSEventLogMsg.dll", cAlternateFileName="")) returned 1 [0131.412] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa62, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsfin.xml", cAlternateFileName="")) returned 1 [0131.412] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa44, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsfra.xml", cAlternateFileName="")) returned 1 [0131.412] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipshe.xml", cAlternateFileName="")) returned 1 [0131.412] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipshi.xml", cAlternateFileName="")) returned 1 [0131.412] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c96711d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipshrv.xml", cAlternateFileName="")) returned 1 [0131.412] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d14d081, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d14d081, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsid.xml", cAlternateFileName="")) returned 1 [0131.412] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9de, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsita.xml", cAlternateFileName="")) returned 1 [0131.413] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c96711d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c96711d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c96711d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9da, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsjpn.xml", cAlternateFileName="")) returned 1 [0131.413] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipskor.xml", cAlternateFileName="")) returned 1 [0131.413] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe462e472, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe462e472, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsMigrationPlugin.dll", cAlternateFileName="")) returned 1 [0131.413] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsnld.xml", cAlternateFileName="")) returned 1 [0131.413] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa14, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsnor.xml", cAlternateFileName="")) returned 1 [0131.413] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa28, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsplk.xml", cAlternateFileName="")) returned 1 [0131.413] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe46546cb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe46546cb, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1ec00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsPlugin.dll", cAlternateFileName="")) returned 1 [0131.413] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsptb.xml", cAlternateFileName="")) returned 1 [0131.413] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsptg.xml", cAlternateFileName="")) returned 1 [0131.413] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c96711d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c96711d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c96711d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsrom.xml", cAlternateFileName="")) returned 1 [0131.413] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsrus.xml", cAlternateFileName="")) returned 1 [0131.413] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssrb.xml", cAlternateFileName="")) returned 1 [0131.414] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssrl.xml", cAlternateFileName="")) returned 1 [0131.414] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssve.xml", cAlternateFileName="")) returned 1 [0131.414] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xaa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipstr.xml", cAlternateFileName="")) returned 1 [0131.414] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0769b1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0131.414] GetProcessHeap () returned 0x8a0000 [0131.414] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0131.414] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0769b1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0131.414] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0769b1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.415] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9592f9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e9592f9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e9592f9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.415] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9592f9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e9592f9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e9592f9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.415] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0131.415] GetProcessHeap () returned 0x8a0000 [0131.415] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0131.415] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0131.415] GetProcessHeap () returned 0x8a0000 [0131.415] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0131.415] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0131.415] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.415] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9592f9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e9592f9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e9592f9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.415] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9592f9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e9592f9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e9592f9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.415] FindClose (in: hFindFile=0x9937c0 | out: hFindFile=0x9937c0) returned 1 [0131.417] GetProcessHeap () returned 0x8a0000 [0131.417] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0131.417] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0131.417] GetProcessHeap () returned 0x8a0000 [0131.417] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0131.417] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0131.417] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.417] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.417] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.417] FindClose (in: hFindFile=0x993940 | out: hFindFile=0x993940) returned 1 [0131.417] GetProcessHeap () returned 0x8a0000 [0131.417] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0131.417] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LanguageModel", cAlternateFileName="LANGUA~1")) returned 1 [0131.417] GetProcessHeap () returned 0x8a0000 [0131.417] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0131.417] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0131.418] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.418] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="chstic.dgml", cAlternateFileName="")) returned 1 [0131.418] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="chstic.dgml", cAlternateFileName="")) returned 0 [0131.418] FindClose (in: hFindFile=0x9935c0 | out: hFindFile=0x9935c0) returned 1 [0131.418] GetProcessHeap () returned 0x8a0000 [0131.418] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0131.418] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt-LT", cAlternateFileName="")) returned 1 [0131.419] GetProcessHeap () returned 0x8a0000 [0131.419] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0131.419] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0131.419] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.419] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.419] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.419] FindClose (in: hFindFile=0x993ac0 | out: hFindFile=0x993ac0) returned 1 [0131.419] GetProcessHeap () returned 0x8a0000 [0131.419] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0131.419] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv-LV", cAlternateFileName="")) returned 1 [0131.420] GetProcessHeap () returned 0x8a0000 [0131.420] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0131.420] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993600 [0131.420] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.420] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.420] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.420] FindClose (in: hFindFile=0x993600 | out: hFindFile=0x993600) returned 1 [0131.420] GetProcessHeap () returned 0x8a0000 [0131.420] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0131.420] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a4376e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1f30e81, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1f30e81, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x19f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll", cAlternateFileName="")) returned 1 [0131.420] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463d4edd, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xc2004e62, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463d4edd, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x7b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Ink.dll", cAlternateFileName="")) returned 1 [0131.420] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a4376e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd51e08b5, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd51e08b5, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x178200, dwReserved0=0x0, dwReserved1=0x0, cFileName="mip.exe", cAlternateFileName="")) returned 1 [0131.420] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a1d507, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xde1acd8d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xde1acd8d, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x612e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mraut.dll", cAlternateFileName="")) returned 1 [0131.420] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwgst.dll", cAlternateFileName="")) returned 1 [0131.420] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8ce781, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe3805ad4, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe3805ad4, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x106a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwLatin.dll", cAlternateFileName="")) returned 1 [0131.421] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076bff5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0131.421] GetProcessHeap () returned 0x8a0000 [0131.421] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0131.421] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076bff5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0131.421] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076bff5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.421] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e90ce26, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e90ce26, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e90ce26, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.421] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e90ce26, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e90ce26, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e90ce26, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.421] FindClose (in: hFindFile=0x993940 | out: hFindFile=0x993940) returned 1 [0131.421] GetProcessHeap () returned 0x8a0000 [0131.422] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0131.422] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0131.422] GetProcessHeap () returned 0x8a0000 [0131.422] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0131.422] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0131.423] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.423] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.423] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.423] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0131.423] GetProcessHeap () returned 0x8a0000 [0131.423] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0131.423] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0131.423] GetProcessHeap () returned 0x8a0000 [0131.423] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0131.423] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993700 [0131.423] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.423] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.423] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.423] FindClose (in: hFindFile=0x993700 | out: hFindFile=0x993700) returned 1 [0131.424] GetProcessHeap () returned 0x8a0000 [0131.424] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0131.424] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0131.424] GetProcessHeap () returned 0x8a0000 [0131.424] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0131.424] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993600 [0131.424] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.424] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.424] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.424] FindClose (in: hFindFile=0x993600 | out: hFindFile=0x993600) returned 1 [0131.424] GetProcessHeap () returned 0x8a0000 [0131.424] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0131.424] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0131.424] GetProcessHeap () returned 0x8a0000 [0131.424] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0131.424] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0131.424] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.425] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.425] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.425] FindClose (in: hFindFile=0x993ac0 | out: hFindFile=0x993ac0) returned 1 [0131.425] GetProcessHeap () returned 0x8a0000 [0131.425] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0131.425] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-RO", cAlternateFileName="")) returned 1 [0131.425] GetProcessHeap () returned 0x8a0000 [0131.425] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0131.425] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0131.426] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.426] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.633] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.634] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0131.634] GetProcessHeap () returned 0x8a0000 [0131.634] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0131.634] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll", cAlternateFileName="")) returned 1 [0131.634] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0131.634] GetProcessHeap () returned 0x8a0000 [0131.634] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0131.634] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0131.634] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.635] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.635] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.635] FindClose (in: hFindFile=0x9935c0 | out: hFindFile=0x9935c0) returned 1 [0131.635] GetProcessHeap () returned 0x8a0000 [0131.635] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0131.635] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe46546cb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe46546cb, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.exe", cAlternateFileName="")) returned 1 [0131.635] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-SK", cAlternateFileName="")) returned 1 [0131.635] GetProcessHeap () returned 0x8a0000 [0131.635] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0131.635] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0131.635] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.635] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.635] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.635] FindClose (in: hFindFile=0x993940 | out: hFindFile=0x993940) returned 1 [0131.635] GetProcessHeap () returned 0x8a0000 [0131.635] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0131.636] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-SI", cAlternateFileName="")) returned 1 [0131.636] GetProcessHeap () returned 0x8a0000 [0131.636] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0131.636] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0131.636] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.636] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.636] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.636] FindClose (in: hFindFile=0x9935c0 | out: hFindFile=0x9935c0) returned 1 [0131.636] GetProcessHeap () returned 0x8a0000 [0131.636] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0131.636] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~1")) returned 1 [0131.636] GetProcessHeap () returned 0x8a0000 [0131.636] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0131.636] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993700 [0131.637] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.637] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.637] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.637] FindClose (in: hFindFile=0x993700 | out: hFindFile=0x993700) returned 1 [0131.637] GetProcessHeap () returned 0x8a0000 [0131.637] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0131.637] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0131.638] GetProcessHeap () returned 0x8a0000 [0131.638] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0131.638] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0131.638] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.638] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.638] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.638] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0131.638] GetProcessHeap () returned 0x8a0000 [0131.638] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0131.638] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe467a929, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe467a929, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabIpsps.dll", cAlternateFileName="")) returned 1 [0131.638] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463d4edd, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x779da8e5, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463d4edd, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x3e9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tabskb.dll", cAlternateFileName="")) returned 1 [0131.638] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x5f780, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabTip.exe", cAlternateFileName="")) returned 1 [0131.639] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th-TH", cAlternateFileName="")) returned 1 [0131.639] GetProcessHeap () returned 0x8a0000 [0131.639] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0131.639] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993600 [0131.640] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.640] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.640] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.640] FindClose (in: hFindFile=0x993600 | out: hFindFile=0x993600) returned 1 [0131.640] GetProcessHeap () returned 0x8a0000 [0131.640] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0131.640] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1aad768, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1aad768, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x109400, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipRes.dll", cAlternateFileName="")) returned 1 [0131.640] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll", cAlternateFileName="")) returned 1 [0131.640] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79680792, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x79680792, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x79680792, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x101200, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipskins.dll", cAlternateFileName="")) returned 1 [0131.640] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7965a52d, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x7965a52d, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x7965a52d, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x9e1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tiptsf.dll", cAlternateFileName="")) returned 1 [0131.640] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463d4edd, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x6ebfe576, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463d4edd, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x17a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tpcps.dll", cAlternateFileName="")) returned 1 [0131.640] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0131.640] GetProcessHeap () returned 0x8a0000 [0131.640] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0131.640] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993700 [0131.641] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.641] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.641] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.641] FindClose (in: hFindFile=0x993700 | out: hFindFile=0x993700) returned 1 [0131.641] GetProcessHeap () returned 0x8a0000 [0131.641] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0131.641] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-UA", cAlternateFileName="")) returned 1 [0131.641] GetProcessHeap () returned 0x8a0000 [0131.641] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0131.641] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0131.642] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.642] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.642] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.642] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0131.642] GetProcessHeap () returned 0x8a0000 [0131.642] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0131.642] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0131.642] GetProcessHeap () returned 0x8a0000 [0131.642] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0131.642] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0131.642] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.642] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.643] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.643] FindClose (in: hFindFile=0x9935c0 | out: hFindFile=0x9935c0) returned 1 [0131.643] GetProcessHeap () returned 0x8a0000 [0131.643] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0131.643] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0131.643] GetProcessHeap () returned 0x8a0000 [0131.643] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0131.643] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0131.643] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.643] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e0daa01, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e0daa01, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0131.643] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e0daa01, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e0daa01, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0131.643] FindClose (in: hFindFile=0x993940 | out: hFindFile=0x993940) returned 1 [0131.643] GetProcessHeap () returned 0x8a0000 [0131.643] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0131.643] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0131.643] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0131.644] GetProcessHeap () returned 0x8a0000 [0131.644] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0131.644] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSInfo", cAlternateFileName="")) returned 1 [0131.644] GetProcessHeap () returned 0x8a0000 [0131.644] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0131.645] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\*", lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0131.645] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.645] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa098aa4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0131.646] GetProcessHeap () returned 0x8a0000 [0131.646] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0131.646] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa098aa4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0131.646] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa098aa4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.646] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x73430dfb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x261f2e00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 1 [0131.646] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x73430dfb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x261f2e00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 0 [0131.647] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0131.647] GetProcessHeap () returned 0x8a0000 [0131.647] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0131.647] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463aec8d, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x63793f1, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463aec8d, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x5a600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 1 [0131.647] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463aec8d, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x63793f1, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463aec8d, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x5a600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 0 [0131.647] FindClose (in: hFindFile=0x9937c0 | out: hFindFile=0x9937c0) returned 1 [0131.647] GetProcessHeap () returned 0x8a0000 [0131.647] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0131.648] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9f60362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE16", cAlternateFileName="")) returned 1 [0131.648] GetProcessHeap () returned 0x8a0000 [0131.648] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0131.648] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\*", lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9f60362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0131.649] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9f60362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.649] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9e7b530, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x58cd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICLUA.EXE", cAlternateFileName="")) returned 1 [0131.649] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa0a26299, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda982389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Setup Controller", cAlternateFileName="OFFICE~1")) returned 1 [0131.649] GetProcessHeap () returned 0x8a0000 [0131.649] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0131.649] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa0a26299, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda982389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0131.651] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa0a26299, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda982389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.651] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e1fe00, ftCreationTime.dwHighDateTime=0x1d0d79d, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x69e1fe00, ftLastWriteTime.dwHighDateTime=0x1d0d79d, nFileSizeHigh=0x0, nFileSizeLow=0x168258, dwReserved0=0x0, dwReserved1=0x0, cFileName="pidgenx.dll", cAlternateFileName="")) returned 1 [0131.651] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e1fe00, ftCreationTime.dwHighDateTime=0x1d0d79d, ftLastAccessTime.dwLowDateTime=0xda982389, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x69e1fe00, ftLastWriteTime.dwHighDateTime=0x1d0d79d, nFileSizeHigh=0x0, nFileSizeLow=0x902bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0131.651] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig.companion.dll", cAlternateFileName="PKEYCO~1.DLL")) returned 1 [0131.652] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig.companion.dll", cAlternateFileName="PKEYCO~1.DLL")) returned 0 [0131.652] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0131.652] GetProcessHeap () returned 0x8a0000 [0131.652] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0131.652] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa0a26299, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda982389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Setup Controller", cAlternateFileName="OFFICE~1")) returned 0 [0131.652] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0131.652] GetProcessHeap () returned 0x8a0000 [0131.653] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0131.653] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1 [0131.653] GetProcessHeap () returned 0x8a0000 [0131.653] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0131.654] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0131.655] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.655] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0131.655] FindClose (in: hFindFile=0x993940 | out: hFindFile=0x993940) returned 1 [0131.655] GetProcessHeap () returned 0x8a0000 [0131.655] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0131.655] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Source Engine", cAlternateFileName="SOURCE~1")) returned 1 [0131.656] GetProcessHeap () returned 0x8a0000 [0131.656] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0131.656] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\*", lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0131.656] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.656] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3ba48, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSE.EXE", cAlternateFileName="")) returned 1 [0131.656] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3ba48, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSE.EXE", cAlternateFileName="")) returned 0 [0131.656] FindClose (in: hFindFile=0x993940 | out: hFindFile=0x993940) returned 1 [0131.657] GetProcessHeap () returned 0x8a0000 [0131.657] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0131.657] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0131.657] GetProcessHeap () returned 0x8a0000 [0131.657] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0131.657] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\*", lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0131.658] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.658] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.htm", cAlternateFileName="")) returned 1 [0131.658] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.jpg", cAlternateFileName="")) returned 1 [0131.658] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a3ecc0a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d2da05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d2da05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0131.658] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.htm", cAlternateFileName="")) returned 1 [0131.659] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.jpg", cAlternateFileName="")) returned 1 [0131.659] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Green Bubbles.htm", cAlternateFileName="")) returned 1 [0131.659] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1906, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenBubbles.jpg", cAlternateFileName="")) returned 1 [0131.659] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hand Prints.htm", cAlternateFileName="")) returned 1 [0131.659] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x107e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HandPrints.jpg", cAlternateFileName="")) returned 1 [0131.659] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Orange Circles.htm", cAlternateFileName="")) returned 1 [0131.659] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x18ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrangeCircles.jpg", cAlternateFileName="")) returned 1 [0131.659] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.htm", cAlternateFileName="")) returned 1 [0131.659] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.jpg", cAlternateFileName="")) returned 1 [0131.659] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96dccc65, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.htm", cAlternateFileName="")) returned 1 [0131.659] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96dccc65, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96dccc65, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96dccc65, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.jpg", cAlternateFileName="")) returned 1 [0131.659] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shades of Blue.htm", cAlternateFileName="")) returned 1 [0131.659] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShadesOfBlue.jpg", cAlternateFileName="")) returned 1 [0131.659] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Soft Blue.htm", cAlternateFileName="")) returned 1 [0131.659] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2949, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.jpg", cAlternateFileName="")) returned 1 [0131.660] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.htm", cAlternateFileName="")) returned 1 [0131.660] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 1 [0131.660] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 0 [0131.660] FindClose (in: hFindFile=0x9937c0 | out: hFindFile=0x9937c0) returned 1 [0131.660] GetProcessHeap () returned 0x8a0000 [0131.660] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0131.661] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TextConv", cAlternateFileName="")) returned 1 [0131.661] GetProcessHeap () returned 0x8a0000 [0131.661] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0131.661] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\*", lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0131.661] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.661] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0131.661] GetProcessHeap () returned 0x8a0000 [0131.661] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0131.661] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\en-US\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0131.661] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.661] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0131.661] FindClose (in: hFindFile=0x9937c0 | out: hFindFile=0x9937c0) returned 1 [0131.661] GetProcessHeap () returned 0x8a0000 [0131.661] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0131.661] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0131.662] FindClose (in: hFindFile=0x993ac0 | out: hFindFile=0x993ac0) returned 1 [0131.662] GetProcessHeap () returned 0x8a0000 [0131.662] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0131.662] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Triedit", cAlternateFileName="")) returned 1 [0131.662] GetProcessHeap () returned 0x8a0000 [0131.662] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0131.663] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\*", lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0131.664] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.664] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0131.664] GetProcessHeap () returned 0x8a0000 [0131.664] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0131.664] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\en-US\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0131.664] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.664] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0131.664] FindClose (in: hFindFile=0x993ac0 | out: hFindFile=0x993ac0) returned 1 [0131.664] GetProcessHeap () returned 0x8a0000 [0131.664] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0131.664] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0131.664] FindClose (in: hFindFile=0x993a00 | out: hFindFile=0x993a00) returned 1 [0131.665] GetProcessHeap () returned 0x8a0000 [0131.665] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0131.665] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC", cAlternateFileName="")) returned 1 [0131.665] GetProcessHeap () returned 0x8a0000 [0131.665] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0131.666] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\*", lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993700 [0131.667] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.667] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8127e00, ftCreationTime.dwHighDateTime=0x1cbd076, ftLastAccessTime.dwLowDateTime=0xcd0a4098, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd8127e00, ftLastWriteTime.dwHighDateTime=0x1cbd076, nFileSizeHigh=0x0, nFileSizeLow=0xf1b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia100.dll", cAlternateFileName="")) returned 1 [0131.667] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfe87c00, ftCreationTime.dwHighDateTime=0x1cbfe36, ftLastAccessTime.dwLowDateTime=0x2ce22546, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xcfe87c00, ftLastWriteTime.dwHighDateTime=0x1cbfe36, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll", cAlternateFileName="")) returned 1 [0131.667] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfe87c00, ftCreationTime.dwHighDateTime=0x1cbfe36, ftLastAccessTime.dwLowDateTime=0x2ce22546, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xcfe87c00, ftLastWriteTime.dwHighDateTime=0x1cbfe36, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll", cAlternateFileName="")) returned 0 [0131.667] FindClose (in: hFindFile=0x993700 | out: hFindFile=0x993700) returned 1 [0131.667] GetProcessHeap () returned 0x8a0000 [0131.667] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0131.667] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX", cAlternateFileName="")) returned 1 [0131.667] GetProcessHeap () returned 0x8a0000 [0131.667] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0131.667] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VGX\\*", lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0131.668] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.668] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a69a2a7, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xb3fd6e56, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x4a69a2a7, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0xf1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 1 [0131.668] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a69a2a7, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xb3fd6e56, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x4a69a2a7, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0xf1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 0 [0131.668] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0131.668] GetProcessHeap () returned 0x8a0000 [0131.668] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0131.668] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTO", cAlternateFileName="")) returned 1 [0131.668] GetProcessHeap () returned 0x8a0000 [0131.668] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0131.668] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\*", lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0131.668] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.668] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aebd53e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0131.668] GetProcessHeap () returned 0x8a0000 [0131.668] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0131.668] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aebd53e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993740 [0131.671] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aebd53e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.671] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0131.671] GetProcessHeap () returned 0x8a0000 [0131.671] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d40b8 [0131.672] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0131.909] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.909] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6d7a0a, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x30a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstallerUI.dll", cAlternateFileName="VSTOIN~1.DLL")) returned 1 [0131.909] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x5080, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1 [0131.909] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x5080, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 0 [0131.910] FindClose (in: hFindFile=0x993ac0 | out: hFindFile=0x993ac0) returned 1 [0131.910] GetProcessHeap () returned 0x8a0000 [0131.910] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d40b8 | out: hHeap=0x8a0000) returned 1 [0131.910] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x18888, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstaller.exe", cAlternateFileName="VSTOIN~1.EXE")) returned 1 [0131.910] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x59a70, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoader.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1 [0131.912] GetProcessHeap () returned 0x8a0000 [0131.912] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0131.912] GetProcessHeap () returned 0x8a0000 [0131.913] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0131.913] GetProcessHeap () returned 0x8a0000 [0131.913] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36a40a0 | out: hHeap=0x8a0000) returned 1 [0131.914] GetProcessHeap () returned 0x8a0000 [0131.914] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36a40a0 [0131.915] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Services\\*", lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993580 [0131.915] GetProcessHeap () returned 0x8a0000 [0131.915] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36a40a0 | out: hHeap=0x8a0000) returned 1 [0131.916] GetProcessHeap () returned 0x8a0000 [0131.916] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36a40a0 [0131.916] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\*", lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0131.921] GetProcessHeap () returned 0x8a0000 [0131.921] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3674088 [0131.921] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\*", lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0131.923] GetProcessHeap () returned 0x8a0000 [0131.923] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0131.923] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\en-US\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993900 [0131.925] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.925] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9483e2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 1 [0131.925] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9483e2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 0 [0131.925] FindClose (in: hFindFile=0x993900 | out: hFindFile=0x993900) returned 1 [0131.925] GetProcessHeap () returned 0x8a0000 [0131.925] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0131.925] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll", cAlternateFileName="")) returned 1 [0131.925] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463fb128, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xced4b5c5, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x463fb128, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x12d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado15.dll", cAlternateFileName="")) returned 1 [0131.925] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado20.tlb", cAlternateFileName="")) returned 1 [0131.925] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado21.tlb", cAlternateFileName="")) returned 1 [0131.925] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado25.tlb", cAlternateFileName="")) returned 1 [0131.925] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado26.tlb", cAlternateFileName="")) returned 1 [0131.925] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado27.tlb", cAlternateFileName="")) returned 1 [0131.925] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c6f28a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4c6f28a5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4c6f28a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado28.tlb", cAlternateFileName="")) returned 1 [0131.925] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c6f28a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4c6f28a5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4c6f28a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado60.tlb", cAlternateFileName="")) returned 1 [0131.926] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463fb128, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xd005e363, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x463fb128, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x58e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd.dll", cAlternateFileName="")) returned 1 [0131.926] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437960ad, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x437960ad, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x437960ad, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd28.tlb", cAlternateFileName="")) returned 1 [0131.926] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msador15.dll", cAlternateFileName="")) returned 1 [0131.926] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x438ed65e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x438ed65e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x438ed65e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msador28.tlb", cAlternateFileName="")) returned 1 [0131.926] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463fb128, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xc5b43065, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x463fb128, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x62e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox.dll", cAlternateFileName="")) returned 1 [0131.926] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c5ad98, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43c5ad98, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43c5ad98, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox28.tlb", cAlternateFileName="")) returned 1 [0131.926] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437960ad, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x437960ad, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x437960ad, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x16400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 1 [0131.926] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437960ad, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x437960ad, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x437960ad, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x16400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 0 [0131.929] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0131.932] GetProcessHeap () returned 0x8a0000 [0131.932] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3674088 | out: hHeap=0x8a0000) returned 1 [0131.932] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DirectDB.dll", cAlternateFileName="")) returned 1 [0131.932] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0131.932] GetProcessHeap () returned 0x8a0000 [0131.932] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3674088 [0131.932] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\en-US\\*", lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0131.932] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.933] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd86035, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75fdf500, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 1 [0131.933] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd86035, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75fdf500, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 0 [0131.933] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0131.933] GetProcessHeap () returned 0x8a0000 [0131.933] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3674088 | out: hHeap=0x8a0000) returned 1 [0131.933] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadc", cAlternateFileName="")) returned 1 [0131.933] GetProcessHeap () returned 0x8a0000 [0131.933] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3674088 [0131.933] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\*", lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0131.936] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.939] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x276, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcjavas.inc", cAlternateFileName="")) returned 1 [0131.939] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41dce0ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41dce0ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41dce0ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x26f, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcvbs.inc", cAlternateFileName="")) returned 1 [0131.939] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0131.939] GetProcessHeap () returned 0x8a0000 [0131.939] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0131.939] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0131.939] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.939] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b99489e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll.mui", cAlternateFileName="")) returned 1 [0131.939] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9e0d51, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb2c9ec00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll.mui", cAlternateFileName="")) returned 1 [0131.939] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll.mui", cAlternateFileName="")) returned 1 [0131.940] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll.mui", cAlternateFileName="")) returned 1 [0131.940] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 1 [0131.940] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 0 [0131.940] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0131.940] GetProcessHeap () returned 0x8a0000 [0131.940] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0131.940] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadce.dll", cAlternateFileName="")) returned 1 [0131.940] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41dce0ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41dce0ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41dce0ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll", cAlternateFileName="")) returned 1 [0131.940] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3b400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadco.dll", cAlternateFileName="")) returned 1 [0131.940] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll", cAlternateFileName="")) returned 1 [0131.940] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x44400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadds.dll", cAlternateFileName="")) returned 1 [0131.940] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44060e78, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x44060e78, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x44060e78, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll", cAlternateFileName="")) returned 1 [0131.940] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d5b9b4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d5b9b4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d5b9b4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll", cAlternateFileName="")) returned 1 [0131.940] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d5b9b4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d5b9b4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d5b9b4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x57000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprst.dll", cAlternateFileName="")) returned 1 [0131.940] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44060e78, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x44060e78, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x44060e78, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x36200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdarem.dll", cAlternateFileName="")) returned 1 [0131.940] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4403ac10, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4403ac10, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4403ac10, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll", cAlternateFileName="")) returned 1 [0131.941] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 1 [0131.941] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 0 [0131.941] FindClose (in: hFindFile=0x9939c0 | out: hFindFile=0x9939c0) returned 1 [0131.944] GetProcessHeap () returned 0x8a0000 [0131.944] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3674088 | out: hHeap=0x8a0000) returned 1 [0131.944] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ole DB", cAlternateFileName="OLEDB~1")) returned 1 [0131.944] GetProcessHeap () returned 0x8a0000 [0131.944] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3674088 [0131.944] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\*", lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0131.944] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.944] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0131.945] GetProcessHeap () returned 0x8a0000 [0131.945] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0131.945] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993580 [0131.947] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.947] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll.mui", cAlternateFileName="")) returned 1 [0131.947] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9e0d51, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll.mui", cAlternateFileName="")) returned 1 [0131.947] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll.mui", cAlternateFileName="")) returned 1 [0131.947] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb65d7300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 1 [0131.947] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb65d7300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 0 [0131.947] FindClose (in: hFindFile=0x993580 | out: hFindFile=0x993580) returned 1 [0131.947] GetProcessHeap () returned 0x8a0000 [0131.947] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0131.947] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x18600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaosp.dll", cAlternateFileName="")) returned 1 [0131.947] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5be00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaps.dll", cAlternateFileName="")) returned 1 [0131.947] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xaa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasql.dll", cAlternateFileName="")) returned 1 [0131.947] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll", cAlternateFileName="")) returned 1 [0131.947] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1ca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdatl3.dll", cAlternateFileName="")) returned 1 [0131.948] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msxactps.dll", cAlternateFileName="")) returned 1 [0131.948] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ce9283, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41ce9283, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41ce9283, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32.dll", cAlternateFileName="")) returned 1 [0131.948] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ce9283, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41ce9283, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41ce9283, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll", cAlternateFileName="")) returned 1 [0131.948] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ce9283, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41ce9283, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41ce9283, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x264c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbjvs.inc", cAlternateFileName="")) returned 1 [0131.948] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x26f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbvbs.inc", cAlternateFileName="")) returned 1 [0131.948] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c80ffc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43c80ffc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43c80ffc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.dll", cAlternateFileName="")) returned 1 [0131.948] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c80ffc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43c80ffc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43c80ffc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll", cAlternateFileName="")) returned 1 [0131.948] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4fa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.dll", cAlternateFileName="")) returned 1 [0131.948] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll", cAlternateFileName="")) returned 1 [0131.948] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll", cAlternateFileName="")) returned 0 [0131.948] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0131.948] GetProcessHeap () returned 0x8a0000 [0131.948] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3674088 | out: hHeap=0x8a0000) returned 1 [0131.949] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd0a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32.dll", cAlternateFileName="")) returned 1 [0131.949] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 1 [0131.949] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 0 [0131.949] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0131.949] GetProcessHeap () returned 0x8a0000 [0131.950] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36a40a0 | out: hHeap=0x8a0000) returned 1 [0131.950] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 0 [0131.950] FindClose (in: hFindFile=0x993500 | out: hFindFile=0x993500) returned 1 [0131.950] GetProcessHeap () returned 0x8a0000 [0131.950] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0131.951] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a307d95, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d0779b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d0779b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0131.951] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4ea7bdb9, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x4ea7bdb9, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0131.951] GetProcessHeap () returned 0x8a0000 [0131.951] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3674088 [0131.951] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4ea7bdb9, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x4ea7bdb9, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993500 [0131.955] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4ea7bdb9, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x4ea7bdb9, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.955] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0131.955] GetProcessHeap () returned 0x8a0000 [0131.955] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d40b8 [0131.956] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\*", lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0131.956] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.956] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2dfe94, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x68e10600, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll.mui", cAlternateFileName="")) returned 1 [0131.956] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b3c4cb5, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75fdf500, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe.mui", cAlternateFileName="")) returned 1 [0131.956] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2212c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x74ccc800, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 1 [0131.956] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2212c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x74ccc800, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 0 [0131.956] FindClose (in: hFindFile=0x9939c0 | out: hFindFile=0x9939c0) returned 1 [0131.956] GetProcessHeap () returned 0x8a0000 [0131.956] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d40b8 | out: hHeap=0x8a0000) returned 1 [0131.956] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a4ec31b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a4ec31b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a4ec31b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExtExport.exe", cAlternateFileName="")) returned 1 [0131.956] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9b1003, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a9b1003, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a9b1003, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd400, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll", cAlternateFileName="")) returned 1 [0131.957] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a49fe45, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a49fe45, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a49fe45, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="iediagcmd.exe", cAlternateFileName="")) returned 1 [0131.957] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a70c9a1, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xbc534b5e, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x4a70c9a1, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x7a800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe", cAlternateFileName="")) returned 1 [0131.957] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a49fe45, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a49fe45, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a49fe45, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x36c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ielowutil.exe", cAlternateFileName="")) returned 1 [0131.957] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a49fe45, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a49fe45, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a4c60b4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x63800, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEShims.dll", cAlternateFileName="")) returned 1 [0131.957] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa182b3a4, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa1c0b0e4, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x8ca44c00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc9340, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe", cAlternateFileName="")) returned 1 [0131.957] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0131.957] GetProcessHeap () returned 0x8a0000 [0131.957] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d40b8 [0131.957] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\images\\*", lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993580 [0131.957] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.957] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a55ea4d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a55ea4d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a55ea4d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0x0, cFileName="bing.ico", cAlternateFileName="")) returned 1 [0131.957] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a55ea4d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a55ea4d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a55ea4d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0x0, cFileName="bing.ico", cAlternateFileName="")) returned 0 [0131.957] FindClose (in: hFindFile=0x993580 | out: hFindFile=0x993580) returned 1 [0131.958] GetProcessHeap () returned 0x8a0000 [0131.958] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d40b8 | out: hHeap=0x8a0000) returned 1 [0131.958] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGNUP", cAlternateFileName="")) returned 1 [0131.958] GetProcessHeap () returned 0x8a0000 [0131.958] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d40b8 [0131.958] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\SIGNUP\\*", lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0131.958] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.958] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30c952e, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x970b4468, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x970b4468, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 1 [0131.958] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30c952e, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x970b4468, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x970b4468, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 0 [0131.958] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0131.958] GetProcessHeap () returned 0x8a0000 [0131.958] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d40b8 | out: hHeap=0x8a0000) returned 1 [0131.958] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9b1003, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a9b1003, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a9b1003, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc218, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0131.958] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f1d3140, ftCreationTime.dwHighDateTime=0x1d54fa8, ftLastAccessTime.dwLowDateTime=0x15d10020, ftLastAccessTime.dwHighDateTime=0x1d51e3b, ftLastWriteTime.dwLowDateTime=0x15d10020, ftLastWriteTime.dwHighDateTime=0x1d51e3b, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="treaty.exe", cAlternateFileName="")) returned 1 [0131.958] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f1d3140, ftCreationTime.dwHighDateTime=0x1d54fa8, ftLastAccessTime.dwLowDateTime=0x15d10020, ftLastAccessTime.dwHighDateTime=0x1d51e3b, ftLastWriteTime.dwLowDateTime=0x15d10020, ftLastWriteTime.dwHighDateTime=0x1d51e3b, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="treaty.exe", cAlternateFileName="")) returned 0 [0131.958] FindClose (in: hFindFile=0x993500 | out: hFindFile=0x993500) returned 1 [0131.959] GetProcessHeap () returned 0x8a0000 [0131.959] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3674088 | out: hHeap=0x8a0000) returned 1 [0131.959] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa235ac5b, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa235ac5b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Java", cAlternateFileName="")) returned 1 [0131.959] GetProcessHeap () returned 0x8a0000 [0131.959] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3674088 [0131.960] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa235ac5b, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa235ac5b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993500 [0131.960] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa235ac5b, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa235ac5b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.961] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre1.8.0_144", cAlternateFileName="JRE18~1.0_1")) returned 1 [0131.961] GetProcessHeap () returned 0x8a0000 [0131.961] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d40b8 [0131.961] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\*", lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993580 [0131.964] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.964] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bin", cAlternateFileName="")) returned 1 [0131.964] GetProcessHeap () returned 0x8a0000 [0131.964] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0131.964] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\*", lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993740 [0131.967] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.968] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x172440, dwReserved0=0x0, dwReserved1=0x0, cFileName="awt.dll", cAlternateFileName="")) returned 1 [0131.968] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bci.dll", cAlternateFileName="")) returned 1 [0131.968] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="dcpr.dll", cAlternateFileName="")) returned 1 [0131.968] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15040, dwReserved0=0x0, dwReserved1=0x0, cFileName="decora_sse.dll", cAlternateFileName="DECORA~1.DLL")) returned 1 [0131.968] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8f840, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy.dll", cAlternateFileName="")) returned 1 [0132.151] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2891a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dtplugin", cAlternateFileName="")) returned 1 [0132.151] GetProcessHeap () returned 0x8a0000 [0132.151] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0132.152] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2891a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0132.153] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2891a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.153] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfa840, dwReserved0=0x0, dwReserved1=0x0, cFileName="deployJava1.dll", cAlternateFileName="DEPLOY~1.DLL")) returned 1 [0132.153] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11a640, dwReserved0=0x0, dwReserved1=0x0, cFileName="npdeployJava1.dll", cAlternateFileName="NPDEPL~1.DLL")) returned 1 [0132.153] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11a640, dwReserved0=0x0, dwReserved1=0x0, cFileName="npdeployJava1.dll", cAlternateFileName="NPDEPL~1.DLL")) returned 0 [0132.153] FindClose (in: hFindFile=0x9935c0 | out: hFindFile=0x9935c0) returned 1 [0132.153] GetProcessHeap () returned 0x8a0000 [0132.153] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0132.153] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_shmem.dll", cAlternateFileName="")) returned 1 [0132.154] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6040, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_socket.dll", cAlternateFileName="DT_SOC~1.DLL")) returned 1 [0132.154] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21440, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.dll", cAlternateFileName="")) returned 1 [0132.154] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x43040, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontmanager.dll", cAlternateFileName="FONTMA~1.DLL")) returned 1 [0132.154] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2da40, dwReserved0=0x0, dwReserved1=0x0, cFileName="fxplugins.dll", cAlternateFileName="FXPLUG~1.DLL")) returned 1 [0132.154] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x40e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="glass.dll", cAlternateFileName="")) returned 1 [0132.154] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6f440, dwReserved0=0x0, dwReserved1=0x0, cFileName="glib-lite.dll", cAlternateFileName="GLIB-L~1.DLL")) returned 1 [0132.154] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x97440, dwReserved0=0x0, dwReserved1=0x0, cFileName="gstreamer-lite.dll", cAlternateFileName="GSTREA~1.DLL")) returned 1 [0132.154] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x26a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="hprof.dll", cAlternateFileName="")) returned 1 [0132.154] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e240, dwReserved0=0x0, dwReserved1=0x0, cFileName="instrument.dll", cAlternateFileName="INSTRU~1.DLL")) returned 1 [0132.154] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="j2pcsc.dll", cAlternateFileName="")) returned 1 [0132.154] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf840, dwReserved0=0x0, dwReserved1=0x0, cFileName="j2pkcs11.dll", cAlternateFileName="")) returned 1 [0132.154] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5240, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaas_nt.dll", cAlternateFileName="")) returned 1 [0132.155] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8640, dwReserved0=0x0, dwReserved1=0x0, cFileName="jabswitch.exe", cAlternateFileName="JABSWI~1.EXE")) returned 1 [0132.155] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="java-rmi.exe", cAlternateFileName="")) returned 1 [0132.155] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.dll", cAlternateFileName="")) returned 1 [0132.155] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.exe", cAlternateFileName="")) returned 1 [0132.155] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="JavaAccessBridge-64.dll", cAlternateFileName="JAVAAC~1.DLL")) returned 1 [0132.155] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2dc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="javacpl.cpl", cAlternateFileName="")) returned 1 [0132.155] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="javacpl.exe", cAlternateFileName="")) returned 1 [0132.155] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx_font.dll", cAlternateFileName="JAVAFX~1.DLL")) returned 1 [0132.155] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x83640, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx_font_t2k.dll", cAlternateFileName="JAVAFX~2.DLL")) returned 1 [0132.155] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1f440, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx_iio.dll", cAlternateFileName="JAVAFX~3.DLL")) returned 1 [0132.155] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaw.exe", cAlternateFileName="")) returned 1 [0132.155] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e040, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.exe", cAlternateFileName="")) returned 1 [0132.155] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440, dwReserved0=0x0, dwReserved1=0x0, cFileName="java_crw_demo.dll", cAlternateFileName="JAVA_C~1.DLL")) returned 1 [0132.155] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jawt.dll", cAlternateFileName="")) returned 1 [0132.156] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="JAWTAccessBridge-64.dll", cAlternateFileName="JAWTAC~1.DLL")) returned 1 [0132.158] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x31440, dwReserved0=0x0, dwReserved1=0x0, cFileName="jdwp.dll", cAlternateFileName="")) returned 1 [0132.158] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr.dll", cAlternateFileName="")) returned 1 [0132.158] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22240, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxmedia.dll", cAlternateFileName="")) returned 1 [0132.158] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7511d3f, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7511d3f, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2794a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxwebkit.dll", cAlternateFileName="JFXWEB~1.DLL")) returned 1 [0132.158] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jjs.exe", cAlternateFileName="")) returned 1 [0132.158] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2aa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jli.dll", cAlternateFileName="")) returned 1 [0132.159] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa897bfc2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x48440, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2iexp.dll", cAlternateFileName="")) returned 1 [0132.159] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa897bfc2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa897bfc2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1b640, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2launcher.exe", cAlternateFileName="JP2LAU~1.EXE")) returned 1 [0132.159] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2native.dll", cAlternateFileName="JP2NAT~1.DLL")) returned 1 [0132.159] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2ssv.dll", cAlternateFileName="")) returned 1 [0132.159] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2d640, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpeg.dll", cAlternateFileName="")) returned 1 [0132.159] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdt.dll", cAlternateFileName="")) returned 1 [0132.159] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsound.dll", cAlternateFileName="")) returned 1 [0132.159] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsoundds.dll", cAlternateFileName="")) returned 1 [0132.159] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x35e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="kcms.dll", cAlternateFileName="")) returned 1 [0132.159] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="keytool.exe", cAlternateFileName="")) returned 1 [0132.159] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="kinit.exe", cAlternateFileName="")) returned 1 [0132.159] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="klist.exe", cAlternateFileName="")) returned 1 [0132.159] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="ktab.exe", cAlternateFileName="")) returned 1 [0132.159] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39040, dwReserved0=0x0, dwReserved1=0x0, cFileName="lcms.dll", cAlternateFileName="")) returned 1 [0132.159] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9040, dwReserved0=0x0, dwReserved1=0x0, cFileName="management.dll", cAlternateFileName="MANAGE~1.DLL")) returned 1 [0132.160] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9fa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="mlib_image.dll", cAlternateFileName="MLIB_I~1.DLL")) returned 1 [0132.160] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa12a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1 [0132.160] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xca750, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1 [0132.160] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1 [0132.160] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="net.dll", cAlternateFileName="")) returned 1 [0132.160] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xec40, dwReserved0=0x0, dwReserved1=0x0, cFileName="nio.dll", cAlternateFileName="")) returned 1 [0132.160] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="npt.dll", cAlternateFileName="")) returned 1 [0132.160] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="orbd.exe", cAlternateFileName="")) returned 1 [0132.160] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="pack200.exe", cAlternateFileName="")) returned 1 [0132.160] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin2", cAlternateFileName="")) returned 1 [0132.160] GetProcessHeap () returned 0x8a0000 [0132.160] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0132.160] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0132.161] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.161] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xca750, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1 [0132.161] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39440, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjp2.dll", cAlternateFileName="")) returned 1 [0132.162] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39440, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjp2.dll", cAlternateFileName="")) returned 0 [0132.162] FindClose (in: hFindFile=0x9935c0 | out: hFindFile=0x9935c0) returned 1 [0132.162] GetProcessHeap () returned 0x8a0000 [0132.162] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0132.162] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="policytool.exe", cAlternateFileName="POLICY~1.EXE")) returned 1 [0132.162] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe040, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism_common.dll", cAlternateFileName="PRISM_~1.DLL")) returned 1 [0132.162] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1fe40, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism_d3d.dll", cAlternateFileName="PRISM_~2.DLL")) returned 1 [0132.163] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism_sw.dll", cAlternateFileName="")) returned 1 [0132.163] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.dll", cAlternateFileName="")) returned 1 [0132.163] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="rmid.exe", cAlternateFileName="")) returned 1 [0132.163] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8af971e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="rmiregistry.exe", cAlternateFileName="RMIREG~1.EXE")) returned 1 [0132.163] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="server", cAlternateFileName="")) returned 1 [0132.163] GetProcessHeap () returned 0x8a0000 [0132.163] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0132.163] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0132.164] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.164] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xab35b530, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xab35b530, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xabaa88bc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11d0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="classes.jsa", cAlternateFileName="")) returned 1 [0132.164] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x866c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.dll", cAlternateFileName="")) returned 1 [0132.164] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x58f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xusage.txt", cAlternateFileName="")) returned 1 [0132.164] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x58f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xusage.txt", cAlternateFileName="")) returned 0 [0132.164] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0132.165] GetProcessHeap () returned 0x8a0000 [0132.165] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0132.165] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="servertool.exe", cAlternateFileName="SERVER~1.EXE")) returned 1 [0132.165] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32040, dwReserved0=0x0, dwReserved1=0x0, cFileName="splashscreen.dll", cAlternateFileName="SPLASH~1.DLL")) returned 1 [0132.165] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8ba40, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssv.dll", cAlternateFileName="")) returned 1 [0132.165] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssvagent.exe", cAlternateFileName="")) returned 1 [0132.165] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21240, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunec.dll", cAlternateFileName="")) returned 1 [0132.165] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunmscapi.dll", cAlternateFileName="SUNMSC~1.DLL")) returned 1 [0132.165] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e440, dwReserved0=0x0, dwReserved1=0x0, cFileName="t2k.dll", cAlternateFileName="")) returned 1 [0132.165] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="tnameserv.exe", cAlternateFileName="TNAMES~1.EXE")) returned 1 [0132.165] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13840, dwReserved0=0x0, dwReserved1=0x0, cFileName="unpack.dll", cAlternateFileName="")) returned 1 [0132.165] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x30240, dwReserved0=0x0, dwReserved1=0x0, cFileName="unpack200.exe", cAlternateFileName="UNPACK~1.EXE")) returned 1 [0132.165] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc040, dwReserved0=0x0, dwReserved1=0x0, cFileName="verify.dll", cAlternateFileName="")) returned 1 [0132.165] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="w2k_lsa_auth.dll", cAlternateFileName="W2K_LS~1.DLL")) returned 1 [0132.166] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1ae40, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsAccessBridge-64.dll", cAlternateFileName="WINDOW~1.DLL")) returned 1 [0132.166] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2f040, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsdetect.dll", cAlternateFileName="")) returned 1 [0132.166] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13040, dwReserved0=0x0, dwReserved1=0x0, cFileName="zip.dll", cAlternateFileName="")) returned 1 [0132.166] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13040, dwReserved0=0x0, dwReserved1=0x0, cFileName="zip.dll", cAlternateFileName="")) returned 0 [0132.166] FindClose (in: hFindFile=0x993740 | out: hFindFile=0x993740) returned 1 [0132.166] GetProcessHeap () returned 0x8a0000 [0132.166] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0132.168] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcac, dwReserved0=0x0, dwReserved1=0x0, cFileName="COPYRIGHT", cAlternateFileName="COPYRI~1")) returned 1 [0132.168] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lib", cAlternateFileName="")) returned 1 [0132.168] GetProcessHeap () returned 0x8a0000 [0132.168] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0132.168] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\*", lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993700 [0132.170] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.171] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x95, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.properties", cAlternateFileName="ACCESS~1.PRO")) returned 1 [0132.171] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64", cAlternateFileName="")) returned 1 [0132.171] GetProcessHeap () returned 0x8a0000 [0132.171] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x94a118 [0132.172] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0132.173] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.173] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27a, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.cfg", cAlternateFileName="")) returned 1 [0132.173] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27a, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.cfg", cAlternateFileName="")) returned 0 [0132.173] FindClose (in: hFindFile=0x993940 | out: hFindFile=0x993940) returned 1 [0132.174] GetProcessHeap () returned 0x8a0000 [0132.174] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x94a118 | out: hHeap=0x8a0000) returned 1 [0132.174] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="applet", cAlternateFileName="")) returned 1 [0132.174] GetProcessHeap () returned 0x8a0000 [0132.174] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x94a118 [0132.174] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\applet\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0132.175] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.175] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0132.175] FindClose (in: hFindFile=0x9935c0 | out: hFindFile=0x9935c0) returned 1 [0132.175] GetProcessHeap () returned 0x8a0000 [0132.175] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x94a118 | out: hHeap=0x8a0000) returned 1 [0132.175] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x562, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendars.properties", cAlternateFileName="CALEND~1.PRO")) returned 1 [0132.175] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa7bbd53, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa7bbd53, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2e56fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="charsets.jar", cAlternateFileName="")) returned 1 [0132.175] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x14983, dwReserved0=0x0, dwReserved1=0x0, cFileName="classlist", cAlternateFileName="CLASSL~1")) returned 1 [0132.175] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105e2a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cmm", cAlternateFileName="")) returned 1 [0132.175] GetProcessHeap () returned 0x8a0000 [0132.175] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x94a118 [0132.175] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105e2a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0132.176] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105e2a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.176] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc824, dwReserved0=0x0, dwReserved1=0x0, cFileName="CIEXYZ.pf", cAlternateFileName="")) returned 1 [0132.176] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x278, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAY.pf", cAlternateFileName="")) returned 1 [0132.176] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINEAR_RGB.pf", cAlternateFileName="LINEAR~1.PF")) returned 1 [0132.176] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4302a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PYCC.pf", cAlternateFileName="")) returned 1 [0132.176] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="sRGB.pf", cAlternateFileName="")) returned 1 [0132.176] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="sRGB.pf", cAlternateFileName="")) returned 0 [0132.177] FindClose (in: hFindFile=0x993ac0 | out: hFindFile=0x993ac0) returned 1 [0132.177] GetProcessHeap () returned 0x8a0000 [0132.177] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x94a118 | out: hHeap=0x8a0000) returned 1 [0132.177] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-types.properties", cAlternateFileName="CONTEN~1.PRO")) returned 1 [0132.177] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x101a, dwReserved0=0x0, dwReserved1=0x0, cFileName="currency.data", cAlternateFileName="CURREN~1.DAT")) returned 1 [0132.177] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy", cAlternateFileName="")) returned 1 [0132.177] GetProcessHeap () returned 0x8a0000 [0132.177] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x94a118 [0132.177] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b80 [0132.179] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.179] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x374c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ffjcext.zip", cAlternateFileName="")) returned 1 [0132.179] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.properties", cAlternateFileName="MESSAG~1.PRO")) returned 1 [0132.179] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_de.properties", cAlternateFileName="MESSAG~2.PRO")) returned 1 [0132.179] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe10, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_es.properties", cAlternateFileName="MESSAG~3.PRO")) returned 1 [0132.179] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_fr.properties", cAlternateFileName="MESSAG~4.PRO")) returned 1 [0132.179] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc97, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_it.properties", cAlternateFileName="MEC9EA~1.PRO")) returned 1 [0132.179] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x18cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_ja.properties", cAlternateFileName="ME4AF1~1.PRO")) returned 1 [0132.180] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1650, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_ko.properties", cAlternateFileName="ME1706~1.PRO")) returned 1 [0132.180] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_pt_BR.properties", cAlternateFileName="MED1E1~1.PRO")) returned 1 [0132.180] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_sv.properties", cAlternateFileName="ME0541~1.PRO")) returned 1 [0132.180] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_CN.properties", cAlternateFileName="ME40CD~1.PRO")) returned 1 [0132.181] GetProcessHeap () returned 0x8a0000 [0132.181] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x94a118 | out: hHeap=0x8a0000) returned 1 [0132.181] GetProcessHeap () returned 0x8a0000 [0132.181] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x94a118 [0132.181] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa11bdb26, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993900 [0132.184] GetProcessHeap () returned 0x8a0000 [0132.184] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x94a118 | out: hHeap=0x8a0000) returned 1 [0132.184] GetProcessHeap () returned 0x8a0000 [0132.184] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x94a118 [0132.184] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa122f229, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0132.187] GetProcessHeap () returned 0x8a0000 [0132.187] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x94a118 | out: hHeap=0x8a0000) returned 1 [0132.187] GetProcessHeap () returned 0x8a0000 [0132.187] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x94a118 [0132.187] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0132.188] GetProcessHeap () returned 0x8a0000 [0132.188] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3684090 [0132.188] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0132.191] GetProcessHeap () returned 0x8a0000 [0132.191] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3684090 | out: hHeap=0x8a0000) returned 1 [0132.191] GetProcessHeap () returned 0x8a0000 [0132.191] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x94a118 | out: hHeap=0x8a0000) returned 1 [0132.350] GetProcessHeap () returned 0x8a0000 [0132.350] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36a40a0 [0132.350] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1295634, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993780 [0132.351] GetProcessHeap () returned 0x8a0000 [0132.351] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36a40a0 | out: hHeap=0x8a0000) returned 1 [0132.351] GetProcessHeap () returned 0x8a0000 [0132.351] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36a40a0 [0132.351] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0132.354] GetProcessHeap () returned 0x8a0000 [0132.354] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36a40a0 | out: hHeap=0x8a0000) returned 1 [0132.354] GetProcessHeap () returned 0x8a0000 [0132.354] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36a40a0 [0132.354] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0132.357] GetProcessHeap () returned 0x8a0000 [0132.357] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36a40a0 | out: hHeap=0x8a0000) returned 1 [0132.357] GetProcessHeap () returned 0x8a0000 [0132.357] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0132.358] GetProcessHeap () returned 0x8a0000 [0132.358] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d40b8 | out: hHeap=0x8a0000) returned 1 [0132.359] GetProcessHeap () returned 0x8a0000 [0132.359] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3674088 | out: hHeap=0x8a0000) returned 1 [0132.360] GetProcessHeap () returned 0x8a0000 [0132.360] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3674088 [0132.360] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf9dfb986, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993500 [0132.360] GetProcessHeap () returned 0x8a0000 [0132.360] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0132.361] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\*", lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0132.361] GetProcessHeap () returned 0x8a0000 [0132.361] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0132.361] GetProcessHeap () returned 0x8a0000 [0132.361] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0132.361] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\*", lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0132.366] GetProcessHeap () returned 0x8a0000 [0132.366] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0132.366] GetProcessHeap () returned 0x8a0000 [0132.366] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0132.366] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\*", lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9938c0 [0132.366] GetProcessHeap () returned 0x8a0000 [0132.366] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36a40a0 [0132.367] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\*", lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2ca2e08, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993800 [0132.372] GetProcessHeap () returned 0x8a0000 [0132.372] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36a40a0 | out: hHeap=0x8a0000) returned 1 [0132.373] GetProcessHeap () returned 0x8a0000 [0132.373] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36a40a0 [0132.373] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\*", lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b80 [0132.374] GetProcessHeap () returned 0x8a0000 [0132.374] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0132.374] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0132.658] GetProcessHeap () returned 0x8a0000 [0132.658] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0132.658] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1 [0132.659] GetProcessHeap () returned 0x8a0000 [0132.659] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0132.659] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993580 [0132.660] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.660] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Backgrounds", cAlternateFileName="BACKGR~1")) returned 1 [0132.660] GetProcessHeap () returned 0x8a0000 [0132.660] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0132.660] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0132.662] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.662] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11030b47, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11030b47, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11030b47, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf77, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143743.GIF", cAlternateFileName="")) returned 1 [0132.662] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10c77030, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143744.GIF", cAlternateFileName="")) returned 1 [0132.662] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10c77030, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143745.GIF", cAlternateFileName="")) returned 1 [0132.662] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10c77030, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x595, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143746.GIF", cAlternateFileName="")) returned 1 [0132.663] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1107d049, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143748.GIF", cAlternateFileName="")) returned 1 [0132.663] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1107d049, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1323, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143749.GIF", cAlternateFileName="")) returned 1 [0132.663] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1107d049, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143750.GIF", cAlternateFileName="")) returned 1 [0132.663] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1107d049, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x412, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143752.GIF", cAlternateFileName="")) returned 1 [0132.663] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1107d049, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143753.GIF", cAlternateFileName="")) returned 1 [0132.663] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1107d049, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143754.GIF", cAlternateFileName="")) returned 1 [0132.663] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143758.GIF", cAlternateFileName="")) returned 1 [0132.663] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x124a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00516L.GIF", cAlternateFileName="")) returned 1 [0132.663] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1107d049, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2017, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00531L.GIF", cAlternateFileName="")) returned 1 [0132.663] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11030b47, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11030b47, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11030b47, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00673L.GIF", cAlternateFileName="")) returned 1 [0132.663] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2026, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00703L.GIF", cAlternateFileName="")) returned 1 [0132.663] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2313, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00760L.GIF", cAlternateFileName="")) returned 1 [0132.663] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00780L.GIF", cAlternateFileName="")) returned 1 [0132.664] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110a3267, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110a3267, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01741L.GIF", cAlternateFileName="")) returned 1 [0132.664] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02039_.GIF", cAlternateFileName="")) returned 1 [0132.664] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x987, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02055_.GIF", cAlternateFileName="")) returned 1 [0132.664] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37d, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02073_.GIF", cAlternateFileName="")) returned 1 [0132.664] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x516, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02074_.GIF", cAlternateFileName="")) returned 1 [0132.664] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02077_.GIF", cAlternateFileName="")) returned 1 [0132.664] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1107d049, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x996, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02082_.GIF", cAlternateFileName="")) returned 1 [0132.664] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110c9494, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110c9494, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110ef705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x90c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02085_.GIF", cAlternateFileName="")) returned 1 [0132.664] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110ef705, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110ef705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110ef705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x581, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02097_.GIF", cAlternateFileName="")) returned 1 [0132.664] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110ef705, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110ef705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110ef705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02106_.GIF", cAlternateFileName="")) returned 1 [0132.664] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1113bba3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02116_.GIF", cAlternateFileName="")) returned 1 [0132.664] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110c9494, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110c9494, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110c9494, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x97f, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02134_.GIF", cAlternateFileName="")) returned 1 [0132.664] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110a3267, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110a3267, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110c9494, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x579, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02187_.GIF", cAlternateFileName="")) returned 1 [0132.665] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110a3267, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110a3267, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4abc, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02198_.GIF", cAlternateFileName="")) returned 1 [0132.665] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110a3267, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110a3267, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1653, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02201_.GIF", cAlternateFileName="")) returned 1 [0132.665] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110a3267, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110a3267, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110c9494, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x136b, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02214_.GIF", cAlternateFileName="")) returned 1 [0132.665] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110a3267, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110a3267, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110ef705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02218_.GIF", cAlternateFileName="")) returned 1 [0132.665] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110a3267, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110a3267, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110ef705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02218_.GIF", cAlternateFileName="")) returned 0 [0132.665] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0132.666] GetProcessHeap () returned 0x8a0000 [0132.666] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0132.666] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Backgrounds", cAlternateFileName="BACKGR~1")) returned 0 [0132.666] FindClose (in: hFindFile=0x993580 | out: hFindFile=0x993580) returned 1 [0132.666] GetProcessHeap () returned 0x8a0000 [0132.666] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0132.667] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 0 [0132.667] FindClose (in: hFindFile=0x993b80 | out: hFindFile=0x993b80) returned 1 [0132.667] GetProcessHeap () returned 0x8a0000 [0132.667] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36a40a0 | out: hHeap=0x8a0000) returned 1 [0132.668] FindNextFileW (in: hFindFile=0x9938c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Themes 16", cAlternateFileName="DOCUME~1")) returned 1 [0132.668] GetProcessHeap () returned 0x8a0000 [0132.668] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36a40a0 [0132.668] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\*", lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0132.670] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.670] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110ef705, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110ef705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11161e0e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb447d, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Facet.thmx", cAlternateFileName="FACET~1.THM")) returned 1 [0132.670] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110ef705, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110ef705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1132ba98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3495ac, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Integral.thmx", cAlternateFileName="INTEGR~1.THM")) returned 1 [0132.670] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11161e0e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11161e0e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1132ba98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1855eb, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Ion Boardroom.thmx", cAlternateFileName="IONBOA~1.THM")) returned 1 [0132.670] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1118806a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1118806a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x111ae2aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c09db, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Ion.thmx", cAlternateFileName="ION~1.THM")) returned 1 [0132.670] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1118806a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1118806a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x111fa76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f98b, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Office Theme.thmx", cAlternateFileName="OFFICE~1.THM")) returned 1 [0132.670] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x111d450b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x111d450b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1132ba98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84d621, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Organic.thmx", cAlternateFileName="ORGANI~1.THM")) returned 1 [0132.670] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1132ba98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1160070a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18c4dc, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Retrospect.thmx", cAlternateFileName="RETROS~1.THM")) returned 1 [0132.670] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115b4243, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd322a, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Slice.thmx", cAlternateFileName="SLICE~1.THM")) returned 1 [0132.670] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Theme Colors", cAlternateFileName="THEMEC~1")) returned 1 [0132.671] GetProcessHeap () returned 0x8a0000 [0132.671] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0132.671] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0132.673] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.673] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x115da4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aspect.xml", cAlternateFileName="")) returned 1 [0132.673] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x115da4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Blue Green.xml", cAlternateFileName="BLUEGR~1.XML")) returned 1 [0132.673] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1132ba98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1132ba98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Blue II.xml", cAlternateFileName="BLUEII~1.XML")) returned 1 [0132.673] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11377f40, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Blue Warm.xml", cAlternateFileName="BLUEWA~1.XML")) returned 1 [0132.673] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11377f40, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Blue.xml", cAlternateFileName="")) returned 1 [0132.673] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1132ba98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11377f40, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grayscale.xml", cAlternateFileName="GRAYSC~1.XML")) returned 1 [0132.673] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1132ba98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1132ba98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="Green Yellow.xml", cAlternateFileName="GREENY~1.XML")) returned 1 [0132.673] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1132ba98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1132ba98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Green.xml", cAlternateFileName="")) returned 1 [0132.674] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114108ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Marquee.xml", cAlternateFileName="")) returned 1 [0132.674] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1139e160, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Median.xml", cAlternateFileName="")) returned 1 [0132.674] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1139e160, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office 2007 - 2010.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0132.674] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1139e160, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Orange Red.xml", cAlternateFileName="ORANGE~1.XML")) returned 1 [0132.674] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1139e160, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Orange.xml", cAlternateFileName="")) returned 1 [0132.674] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1139e160, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paper.xml", cAlternateFileName="")) returned 1 [0132.674] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11377f40, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Red Orange.xml", cAlternateFileName="REDORA~1.XML")) returned 1 [0132.674] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11436ace, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Red Violet.xml", cAlternateFileName="REDVIO~1.XML")) returned 1 [0132.674] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1139e160, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Red.xml", cAlternateFileName="")) returned 1 [0132.674] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11377f40, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slipstream.xml", cAlternateFileName="SLIPST~1.XML")) returned 1 [0132.674] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Violet II.xml", cAlternateFileName="VIOLET~1.XML")) returned 1 [0132.675] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114108ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Violet.xml", cAlternateFileName="")) returned 1 [0132.675] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114108ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yellow Orange.xml", cAlternateFileName="YELLOW~1.XML")) returned 1 [0132.675] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114108ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yellow.xml", cAlternateFileName="")) returned 1 [0132.675] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114108ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yellow.xml", cAlternateFileName="")) returned 0 [0132.675] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0132.676] GetProcessHeap () returned 0x8a0000 [0132.676] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0132.676] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Theme Effects", cAlternateFileName="THEMEE~1")) returned 1 [0132.676] GetProcessHeap () returned 0x8a0000 [0132.676] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0132.676] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0132.678] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.678] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114108ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbaeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Banded Edge.eftx", cAlternateFileName="BANDED~1.EFT")) returned 1 [0132.678] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1139e160, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1139e160, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114108ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x530f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extreme Shadow.eftx", cAlternateFileName="EXTREM~1.EFT")) returned 1 [0132.678] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1139e160, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1139e160, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114108ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51933, dwReserved0=0x0, dwReserved1=0x0, cFileName="Frosted Glass.eftx", cAlternateFileName="FROSTE~1.EFT")) returned 1 [0132.678] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1139e160, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1139e160, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1145cd4f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51cbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="Glossy.eftx", cAlternateFileName="GLOSSY~1.EFT")) returned 1 [0132.678] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd44b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Glow Edge.eftx", cAlternateFileName="GLOWED~1.EFT")) returned 1 [0132.678] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11436ace, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11436ace, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x56208, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grunge Texture.eftx", cAlternateFileName="GRUNGE~1.EFT")) returned 1 [0132.678] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11436ace, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11436ace, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xafab, dwReserved0=0x0, dwReserved1=0x0, cFileName="Inset.eftx", cAlternateFileName="INSET~1.EFT")) returned 1 [0132.678] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114108ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Milk Glass.eftx", cAlternateFileName="MILKGL~1.EFT")) returned 1 [0132.678] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11436ace, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb0ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office 2007 - 2010.eftx", cAlternateFileName="OFFICE~1.EFT")) returned 1 [0132.679] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11436ace, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1145cd4f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbcee, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reflection.eftx", cAlternateFileName="REFLEC~1.EFT")) returned 1 [0132.679] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11436ace, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x480a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Riblet.eftx", cAlternateFileName="RIBLET~1.EFT")) returned 1 [0132.679] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d753, dwReserved0=0x0, dwReserved1=0x0, cFileName="Smokey Glass.eftx", cAlternateFileName="SMOKEY~1.EFT")) returned 1 [0132.679] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb17b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Subtle Solids.eftx", cAlternateFileName="SUBTLE~1.EFT")) returned 1 [0132.679] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xde70, dwReserved0=0x0, dwReserved1=0x0, cFileName="Top Shadow.eftx", cAlternateFileName="TOPSHA~1.EFT")) returned 1 [0132.679] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xde70, dwReserved0=0x0, dwReserved1=0x0, cFileName="Top Shadow.eftx", cAlternateFileName="TOPSHA~1.EFT")) returned 0 [0132.679] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0133.016] GetProcessHeap () returned 0x8a0000 [0133.016] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0133.016] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Theme Fonts", cAlternateFileName="THEMEF~1")) returned 1 [0133.016] GetProcessHeap () returned 0x8a0000 [0133.016] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0133.017] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0133.019] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.019] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Arial Black-Arial.xml", cAlternateFileName="ARIALB~1.XML")) returned 1 [0133.019] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xde1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Arial-Times New Roman.xml", cAlternateFileName="ARIAL-~1.XML")) returned 1 [0133.019] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11436ace, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11436ace, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Arial.xml", cAlternateFileName="")) returned 1 [0133.019] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11436ace, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Calibri Light-Constantia.xml", cAlternateFileName="CALIBR~1.XML")) returned 1 [0133.019] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Calibri-Cambria.xml", cAlternateFileName="CALIBR~2.XML")) returned 1 [0133.020] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11436ace, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1145cd4f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Calibri.xml", cAlternateFileName="")) returned 1 [0133.020] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11436ace, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11436ace, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xde4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cambria.xml", cAlternateFileName="")) returned 1 [0133.020] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Candara.xml", cAlternateFileName="")) returned 1 [0133.020] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1151b8e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1151b8e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11567da2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe38, dwReserved0=0x0, dwReserved1=0x0, cFileName="Century Gothic-Palatino Linotype.xml", cAlternateFileName="CENTUR~3.XML")) returned 1 [0133.020] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Century Gothic.xml", cAlternateFileName="CENTUR~2.XML")) returned 1 [0133.020] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Century Schoolbook.xml", cAlternateFileName="CENTUR~1.XML")) returned 1 [0133.020] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdda, dwReserved0=0x0, dwReserved1=0x0, cFileName="Consolas-Verdana.xml", cAlternateFileName="CONSOL~1.XML")) returned 1 [0133.020] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Constantia-Franklin Gothic Book.xml", cAlternateFileName="CONSTA~1.XML")) returned 1 [0133.020] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Corbel.xml", cAlternateFileName="")) returned 1 [0133.020] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xde3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Franklin Gothic.xml", cAlternateFileName="FRANKL~1.XML")) returned 1 [0133.020] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garamond-TrebuchetMs.xml", cAlternateFileName="GARAMO~1.XML")) returned 1 [0133.020] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garamond.xml", cAlternateFileName="")) returned 1 [0133.020] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Georgia.xml", cAlternateFileName="")) returned 1 [0133.020] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x115da4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xea1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gill Sans MT.xml", cAlternateFileName="GILLSA~1.XML")) returned 1 [0133.021] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11541b08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe35, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office 2007 - 2010.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0133.021] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xde1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Times New Roman-Arial.xml", cAlternateFileName="TIMESN~1.XML")) returned 1 [0133.021] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11567da2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="TrebuchetMs.xml", cAlternateFileName="TREBUC~1.XML")) returned 1 [0133.021] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1151b8e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1151b8e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11567da2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tw Cen MT-Rockwell.xml", cAlternateFileName="TWCENM~2.XML")) returned 1 [0133.021] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xea0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tw Cen MT.xml", cAlternateFileName="TWCENM~1.XML")) returned 1 [0133.021] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xea0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tw Cen MT.xml", cAlternateFileName="TWCENM~1.XML")) returned 0 [0133.021] FindClose (in: hFindFile=0x993a00 | out: hFindFile=0x993a00) returned 1 [0133.022] GetProcessHeap () returned 0x8a0000 [0133.022] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0133.022] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11567da2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc7c1, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Wisp.thmx", cAlternateFileName="WISP~1.THM")) returned 1 [0133.022] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11567da2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc7c1, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Wisp.thmx", cAlternateFileName="WISP~1.THM")) returned 0 [0133.022] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0133.022] GetProcessHeap () returned 0x8a0000 [0133.022] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36a40a0 | out: hHeap=0x8a0000) returned 1 [0133.023] FindNextFileW (in: hFindFile=0x9938c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114f5747, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114f5747, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flattener", cAlternateFileName="FLATTE~1")) returned 1 [0133.023] GetProcessHeap () returned 0x8a0000 [0133.023] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36a40a0 [0133.024] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Flattener\\*", lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114f5747, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114f5747, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993900 [0133.026] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114f5747, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114f5747, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.027] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa937f07, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa937f07, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfae22cc9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="APDEA0~1.DLL")) returned 1 [0133.027] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf035e09d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf035e09d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf035e09d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1 [0133.027] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5c164a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5c164a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5c164a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="AP6221~1.DLL")) returned 1 [0133.027] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5a3de35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a3de35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a6407d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="AP750A~1.DLL")) returned 1 [0133.028] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1814809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="API-MS~3.DLL")) returned 1 [0133.028] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbdee689, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbdee689, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbdee689, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1 [0133.028] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x37acc11, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37acc11, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37acc11, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="APA632~1.DLL")) returned 1 [0133.028] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x44a38de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x44a38de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x44a38de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1 [0133.028] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d8c51, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42d8c51, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42d8c51, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x58c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="APFD9C~1.DLL")) returned 1 [0133.028] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4cd5a2f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4cd5a2f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4cd5a2f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="APC00F~1.DLL")) returned 1 [0133.028] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7667bd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7667bd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7b78b8d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="AP0479~1.DLL")) returned 1 [0133.028] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf483611a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf483611a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4a25fae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="AP23C9~1.DLL")) returned 1 [0133.028] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4903b8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4903b8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x54ef2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1 [0133.028] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf63ed72c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf63ed72c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6a7bf80, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x72c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="APAE51~1.DLL")) returned 1 [0133.028] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6971e7c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6971e7c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6971e7c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x68c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1 [0133.028] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18d43c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18d43c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18d43c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11ec0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1 [0133.028] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd8e49f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd8e49f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1 [0133.028] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d9e0b3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d9e0b3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d9e0b3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="AP8F34~1.DLL")) returned 1 [0133.029] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ac3289, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ac3289, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="API-MS~4.DLL")) returned 1 [0133.029] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbdc8437, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbdc8437, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbdc8437, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="APBF0F~1.DLL")) returned 1 [0133.029] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34d6ecb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf34d6ecb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf3b3f424, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="AP5E4C~1.DLL")) returned 1 [0133.029] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x68b32cb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68b32cb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x68b32cb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="AP80F4~1.DLL")) returned 1 [0133.029] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42b29f3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42b29f3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3f6d8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppVFileSystemMetadata.dll", cAlternateFileName="APPVFI~1.DLL")) returned 1 [0133.029] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45d3b76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf45d3b76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x115b4243, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf5ed8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppVManifest.dll", cAlternateFileName="APPVMA~1.DLL")) returned 1 [0133.029] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6cde4ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6cde4ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x115b4243, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bf6d8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppVOpcServices.dll", cAlternateFileName="APPVOP~1.DLL")) returned 1 [0133.030] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf466c4e5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf466c4e5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4692737, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x221, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppVOpcServices.dll.manifest", cAlternateFileName="APPVOP~1.MAN")) returned 1 [0133.030] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5f4ff2d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5f4ff2d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11541b08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d2d8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppVPackaging.dll", cAlternateFileName="APPVPA~1.DLL")) returned 1 [0133.030] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf13037fa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf13037fa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1565dae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppVPackaging.dll.manifest", cAlternateFileName="APPVPA~1.MAN")) returned 1 [0133.030] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x48a9e4d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x48a9e4d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x48cfa7d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f8d8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppVStreamMap.dll", cAlternateFileName="APPVST~1.DLL")) returned 1 [0133.030] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114f5747, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114f5747, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11567da2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb0f, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="CommonSequencingProperties.xml", cAlternateFileName="COMMON~1.XML")) returned 1 [0133.030] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffdb5707, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffdb5707, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffdb5707, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3b740, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="concrt140.dll", cAlternateFileName="CONCRT~1.DLL")) returned 1 [0133.030] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa68949f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa68949f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa6d5947, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb260, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Flattener.exe", cAlternateFileName="FLATTE~1.EXE")) returned 1 [0133.030] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa5ca8ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5ca8ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa68949f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Flattener.exe.config", cAlternateFileName="FLATTE~1.CON")) returned 1 [0133.030] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6e5cc4e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x178d8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Microsoft.AppV.Eventing.dll", cAlternateFileName="MI9EC4~1.DLL")) returned 1 [0133.030] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa6d5947, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa6d5947, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa82ce6a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc0d8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Microsoft.AppV.Modernizer.Common.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0133.030] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x58cd8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Microsoft.AppV.Modernizer.CSharp.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0133.030] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9862502, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9862502, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9888767, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6924d8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Microsoft.AppV.Modernizer.ManagedCpp.dll", cAlternateFileName="MI5FC8~1.DLL")) returned 1 [0133.030] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4266542, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4266542, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42b29f3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11e60, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Microsoft.Tools.BinaryStore.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0133.030] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a7cf13, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a7cf13, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7a60, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Microsoft.Tools.Office.C2R.Common.dll", cAlternateFileName="MI509C~1.DLL")) returned 1 [0133.031] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf480feb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf480feb5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf483611a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x206c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Microsoft.Tools.Office.C2R.Packager.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0133.031] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b5bbeb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b5bbeb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x11567da2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f2b0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1 [0133.031] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa178468, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa178468, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa2cf9c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6b538, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1 [0133.031] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf44c8b33, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf44c8b33, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xec8b0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1 [0133.031] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e310c7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e310c7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e572fe, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xdbcc0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ucrtbase.dll", cAlternateFileName="")) returned 1 [0133.031] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80d6078, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x412b0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="vccorlib140.dll", cAlternateFileName="VCCORL~1.DLL")) returned 1 [0133.031] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6223b13, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6223b13, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14d50, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 1 [0133.031] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6223b13, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6223b13, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14d50, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 0 [0133.031] FindClose (in: hFindFile=0x993900 | out: hFindFile=0x993900) returned 1 [0133.032] GetProcessHeap () returned 0x8a0000 [0133.032] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36a40a0 | out: hHeap=0x8a0000) returned 1 [0133.032] FindNextFileW (in: hFindFile=0x9938c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fre", cAlternateFileName="")) returned 1 [0133.032] GetProcessHeap () returned 0x8a0000 [0133.032] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36a40a0 [0133.032] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\fre\\*", lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0133.034] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.034] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1158e0a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1158e0a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1158e0a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e8fb, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="StartMenu_Win10.mp4", cAlternateFileName="STARTM~2.MP4")) returned 1 [0133.034] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11567da2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11567da2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1158e0a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ce1b, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="StartMenu_Win10_RTL.mp4", cAlternateFileName="STARTM~1.MP4")) returned 1 [0133.034] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11541b08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11541b08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115b4243, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7600b, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="StartMenu_Win7.wmv", cAlternateFileName="STARTM~2.WMV")) returned 1 [0133.034] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11541b08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11541b08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1160070a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc8b14, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="StartMenu_Win7_RTL.wmv", cAlternateFileName="STARTM~1.WMV")) returned 1 [0133.034] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x115da4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19768, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="StartMenu_Win8.mp4", cAlternateFileName="STARTM~4.MP4")) returned 1 [0133.034] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x115b4243, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115b4243, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115b4243, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19a00, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="StartMenu_Win8_RTL.mp4", cAlternateFileName="STARTM~3.MP4")) returned 1 [0133.035] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x115b4243, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115b4243, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115b4243, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19a00, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="StartMenu_Win8_RTL.mp4", cAlternateFileName="STARTM~3.MP4")) returned 0 [0133.035] FindClose (in: hFindFile=0x993ac0 | out: hFindFile=0x993ac0) returned 1 [0133.035] GetProcessHeap () returned 0x8a0000 [0133.035] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36a40a0 | out: hHeap=0x8a0000) returned 1 [0133.035] FindNextFileW (in: hFindFile=0x9938c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b2abe77, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b2abe77, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Integration", cAlternateFileName="INTEGR~1")) returned 1 [0133.035] GetProcessHeap () returned 0x8a0000 [0133.036] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36a40a0 [0133.036] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Integration\\*", lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b2abe77, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b2abe77, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993580 [0133.038] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b2abe77, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b2abe77, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.040] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe33a4c67, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe33a4c67, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3607185, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc61000, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2RInt.16.msi", cAlternateFileName="C2RINT~1.MSI")) returned 1 [0133.040] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe384358e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe384358e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3acbcd3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2RIntLoc.en-us.16.msi", cAlternateFileName="C2RINT~2.MSI")) returned 1 [0133.040] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd23fe538, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd23fe538, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2686ce0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x91f0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2RManifest.Access.Access.x-none.msi.16.x-none.xml", cAlternateFileName="C25A45~1.XML")) returned 1 [0133.040] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd32bedda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd32bedda, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd356d87a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe71c, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2RManifest.accessmui.msi.16.en-us.xml", cAlternateFileName="C222C2~1.XML")) returned 1 [0133.040] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2daddbf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2daddbf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd31d9ff6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7fa, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2RManifest.accessmuiset.msi.16.en-us.xml", cAlternateFileName="C2FB2E~1.XML")) returned 1 [0133.040] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd23fe538, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd23fe538, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd26f9444, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3f14, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml", cAlternateFileName="C2RMAN~4.XML")) returned 1 [0133.040] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2dfa2a2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2dfa2a2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd31415cd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x265a, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2RManifest.dcfmui.msi.16.en-us.xml", cAlternateFileName="C206B0~1.XML")) returned 1 [0133.040] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1ff851e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1ff851e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd252f7b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x39d9c, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml", cAlternateFileName="C2RMAN~3.XML")) returned 1 [0133.041] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd3200239, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd3200239, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd330b2e9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8f70, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2RManifest.excelmui.msi.16.en-us.xml", cAlternateFileName="C2D2CD~1.XML")) returned 1 [0133.041] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1f5fb21, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd23fe538, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8f8e, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml", cAlternateFileName="C2RMAN~1.XML")) returned 1 [0133.041] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd31415cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd31415cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3298bbd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x180e, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2RManifest.groovemui.msi.16.en-us.xml", cAlternateFileName="C26024~1.XML")) returned 1 [0133.041] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1ff851e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1ff851e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd257bc65, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1979c, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml", cAlternateFileName="C2RMAN~2.XML")) returned 1 [0133.041] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd31415cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd31415cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd32bedda, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5b94, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2RManifest.lyncmui.msi.16.en-us.xml", cAlternateFileName="C2FCD6~1.XML")) returned 1 [0133.041] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd32bedda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd32bedda, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3593a88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6b4a, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2RManifest.office32mui.msi.16.en-us.xml", cAlternateFileName="C2BADD~1.XML")) returned 1 [0133.041] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2b97d2d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2b97d2d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2cc8f5f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4f3f4, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2RManifest.office32ww.msi.16.x-none.xml", cAlternateFileName="C2EBFE~1.XML")) returned 1 [0133.041] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd356d87a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd356d87a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd36c4db5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19870, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2RManifest.officemui.msi.16.en-us.xml", cAlternateFileName="C29059~1.XML")) returned 1 [0133.041] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd375d6d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd375d6d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd38424c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7fa, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2RManifest.officemuiset.msi.16.en-us.xml", cAlternateFileName="C2467F~1.XML")) returned 1 [0133.041] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd276bb03, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd276bb03, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd295b9b9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17b3c, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml", cAlternateFileName="C21839~1.XML")) returned 1 [0133.041] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd360620a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd360620a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd375d6d3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4a4a, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2RManifest.onenotemui.msi.16.en-us.xml", cAlternateFileName="C24C3D~1.XML")) returned 1 [0133.041] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd276bb03, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd276bb03, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd29a7ddb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5f6, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml", cAlternateFileName="C24EFF~1.XML")) returned 1 [0133.041] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd3593a88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd3593a88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3678904, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b28, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2RManifest.osmmui.msi.16.en-us.xml", cAlternateFileName="C25F09~1.XML")) returned 1 [0133.042] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd26acf16, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd26acf16, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd28c2fa3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x906, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml", cAlternateFileName="C22C6F~1.XML")) returned 1 [0133.042] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd356d87a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd356d87a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd362c40f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b8a, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2RManifest.osmuxmui.msi.16.en-us.xml", cAlternateFileName="C21C45~1.XML")) returned 1 [0133.042] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd257bc65, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd257bc65, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd276bb03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17194, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml", cAlternateFileName="C29151~1.XML")) returned 1 [0133.042] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd36c4db5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd36c4db5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3783951, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17984, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2RManifest.outlookmui.msi.16.en-us.xml", cAlternateFileName="C2C4E2~1.XML")) returned 1 [0133.043] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd257bc65, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd257bc65, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd27de170, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xafddc, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml", cAlternateFileName="C280EB~1.XML")) returned 1 [0133.043] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd26acf16, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd26acf16, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd290f4ec, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x195a4, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml", cAlternateFileName="C222CA~1.XML")) returned 1 [0133.043] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd33f011b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd33f011b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd35dffce, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x689e, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2RManifest.powerpointmui.msi.16.en-us.xml", cAlternateFileName="C27FF4~1.XML")) returned 1 [0133.043] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b17ac3e, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b17ac3e, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7446, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2RManifest.Project.Project.x-none.msi.16.x-none.xml", cAlternateFileName="C2E87B~1.XML")) returned 1 [0133.043] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b2abe77, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b2abe77, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b2d20ad, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x809e, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2RManifest.projectmui.msi.16.en-us.xml", cAlternateFileName="C26005~1.XML")) returned 1 [0133.043] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd375d6d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd375d6d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd397382c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x63ae, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2RManifest.Proof.Culture.msi.16.en-us.xml", cAlternateFileName="C2B3EB~1.XML")) returned 1 [0133.043] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd36eafd9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd36eafd9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd37a9bb2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fee, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2RManifest.Proof.Culture.msi.16.es-es.xml", cAlternateFileName="C23127~1.XML")) returned 1 [0133.043] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd38424c0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd38424c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3999a72, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fee, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2RManifest.Proof.Culture.msi.16.fr-fr.xml", cAlternateFileName="C2BAB3~1.XML")) returned 1 [0133.043] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd36c4db5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd36c4db5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd37f6035, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7fa, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2RManifest.proofing.msi.16.en-us.xml", cAlternateFileName="C24618~1.XML")) returned 1 [0133.043] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd295b9b9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd295b9b9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2b97d2d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12e4a, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml", cAlternateFileName="C2C6D1~1.XML")) returned 1 [0133.043] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd362c40f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd362c40f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd37374c5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3734, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2RManifest.publishermui.msi.16.en-us.xml", cAlternateFileName="C26B0A~1.XML")) returned 1 [0133.043] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd28c2fa3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd28c2fa3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd29ce0e8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb27ee, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2RManifest.shared.Office.x-none.msi.16.x-none.xml", cAlternateFileName="C2A7B5~1.XML")) returned 1 [0133.043] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1159842, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1159842, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x11cbd0e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2aafe, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml", cAlternateFileName="C2668D~1.XML")) returned 1 [0133.044] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1159842, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1159842, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1218203, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xf0cb4, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2RManifest.visiomui.msi.16.en-us.xml", cAlternateFileName="C2A712~1.XML")) returned 1 [0133.044] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2c30669, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2c30669, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2dd401b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1536e, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2RManifest.Word.Word.x-none.msi.16.x-none.xml", cAlternateFileName="C29B2F~1.XML")) returned 1 [0133.044] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd39e5e8b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd39e5e8b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3a7e818, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x130fe, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2RManifest.wordmui.msi.16.en-us.xml", cAlternateFileName="C2EB7A~1.XML")) returned 1 [0133.044] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2c30669, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2c30669, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2dfa2a2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12c470, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Integrator.exe", cAlternateFileName="INTEGR~1.EXE")) returned 1 [0133.044] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf073ddf4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1158e0a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x128ed2a1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e22a8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="OneDriveSetup.exe", cAlternateFileName="ONEDRI~1.EXE")) returned 1 [0133.044] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xef3b8917, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef3b8917, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xef4774a9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x18ad800, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="QFE31927.msp", cAlternateFileName="")) returned 1 [0133.044] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee75a612, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee75a612, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xef109ec5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x18ad800, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="QFE31928.msp", cAlternateFileName="")) returned 1 [0133.044] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd44a0845, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd44a0845, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd455f44d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc0e000, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="SPPRedist.msi", cAlternateFileName="SPPRED~1.MSI")) returned 1 [0133.044] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x51c07e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x51c07e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x51c07e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfa976, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~4.MSU")) returned 1 [0133.044] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6c46ba0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c46ba0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c46ba0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x97da2, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x86.msu", cAlternateFileName="WI4D05~1.MSU")) returned 1 [0133.044] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x59b433, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x59b433, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5c164a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14902e, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Windows8-RT-KB2999226-x64.msu", cAlternateFileName="WINDOW~3.MSU")) returned 1 [0133.044] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d50bdc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d50bdc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6d50bdc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x96388, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Windows8-RT-KB2999226-x86.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0133.045] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5f9c329, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5f9c329, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5fc257f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf2d1d, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Windows8.1-KB2999226-x64.msu", cAlternateFileName="WI2C39~1.MSU")) returned 1 [0133.045] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7c37773, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7c37773, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7c37773, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x91809, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Windows8.1-KB2999226-x86.msu", cAlternateFileName="WINDOW~2.MSU")) returned 1 [0133.045] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7c37773, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7c37773, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7c37773, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x91809, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Windows8.1-KB2999226-x86.msu", cAlternateFileName="WINDOW~2.MSU")) returned 0 [0133.045] FindClose (in: hFindFile=0x993580 | out: hFindFile=0x993580) returned 1 [0133.046] GetProcessHeap () returned 0x8a0000 [0133.046] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36a40a0 | out: hHeap=0x8a0000) returned 1 [0133.046] FindNextFileW (in: hFindFile=0x9938c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2687c83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee308135, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Licenses16", cAlternateFileName="LICENS~1")) returned 1 [0133.046] GetProcessHeap () returned 0x8a0000 [0133.046] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36a40a0 [0133.046] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Licenses16\\*", lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2687c83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee308135, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0133.049] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2687c83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee308135, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.053] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe282b673, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe282b673, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2910498, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5127, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AccessR_Grace-ppd.xrm-ms", cAlternateFileName="ACCESS~3.XRM")) returned 1 [0133.053] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe274684a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe274684a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe289dd92, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d4a, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AccessR_Grace-ul-oob.xrm-ms", cAlternateFileName="ACCESS~2.XRM")) returned 1 [0133.053] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe274684a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe274684a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe28c3fe1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x298f, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AccessR_OEM_Perp-pl.xrm-ms", cAlternateFileName="ACCESS~1.XRM")) returned 1 [0133.053] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2d3c6cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2d3c6cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2f5281c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x512c, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AccessR_OEM_Perp-ppd.xrm-ms", cAlternateFileName="AC6D20~1.XRM")) returned 1 [0133.053] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2d16476, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2d16476, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2f06362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d43, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AccessR_OEM_Perp-ul-oob.xrm-ms", cAlternateFileName="AC1492~1.XRM")) returned 1 [0133.053] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2d16476, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2d16476, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2f9ecf2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ddc, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AccessR_OEM_Perp-ul-phn.xrm-ms", cAlternateFileName="ACAD72~1.XRM")) returned 1 [0133.053] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2b4c7d1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2b4c7d1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2d88bc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2987, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AccessR_Retail-pl.xrm-ms", cAlternateFileName="AC7E42~1.XRM")) returned 1 [0133.053] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe29cf0c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe29cf0c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2d16476, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x512a, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AccessR_Retail-ppd.xrm-ms", cAlternateFileName="AC6686~1.XRM")) returned 1 [0133.053] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe29366eb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe29366eb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe29cf0c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d3b, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AccessR_Retail-ul-oob.xrm-ms", cAlternateFileName="ACCESS~4.XRM")) returned 1 [0133.053] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2b4c7d1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2b4c7d1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2dd500f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4dd4, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AccessR_Retail-ul-phn.xrm-ms", cAlternateFileName="ACAF89~1.XRM")) returned 1 [0133.053] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe29a8e16, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe29a8e16, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2cf0288, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b87, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AccessR_Trial-pl.xrm-ms", cAlternateFileName="AC69E2~1.XRM")) returned 1 [0133.054] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2982ba2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2982ba2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2b72a71, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x51a5, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AccessR_Trial-ppd.xrm-ms", cAlternateFileName="AC7797~1.XRM")) returned 1 [0134.101] GetProcessHeap () returned 0x8a0000 [0134.101] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36a40a0 | out: hHeap=0x8a0000) returned 1 [0134.101] GetProcessHeap () returned 0x8a0000 [0134.101] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36a40a0 [0134.101] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\loc\\*", lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee45f66d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x983c2c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0134.102] GetProcessHeap () returned 0x8a0000 [0134.102] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36a40a0 | out: hHeap=0x8a0000) returned 1 [0134.102] GetProcessHeap () returned 0x8a0000 [0134.103] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36a40a0 [0134.103] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\mcxml\\*", lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993900 [0134.104] GetProcessHeap () returned 0x8a0000 [0134.104] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0134.104] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92201bc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3b8c7ea5, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b8c7ea5, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993580 [0134.255] GetProcessHeap () returned 0x8a0000 [0134.255] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0134.255] GetProcessHeap () returned 0x8a0000 [0134.255] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0134.255] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\mcxml\\es-es\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99dfc61, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99dfc61, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99dfc61, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0134.256] GetProcessHeap () returned 0x8a0000 [0134.256] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0134.256] GetProcessHeap () returned 0x8a0000 [0134.256] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0134.256] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\mcxml\\fr-fr\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99473dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99473dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99473dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0134.257] GetProcessHeap () returned 0x8a0000 [0134.257] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0134.257] GetProcessHeap () returned 0x8a0000 [0134.257] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0134.257] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1164cbcb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0134.262] GetProcessHeap () returned 0x8a0000 [0134.262] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0134.262] GetProcessHeap () returned 0x8a0000 [0134.262] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36a40a0 | out: hHeap=0x8a0000) returned 1 [0134.264] GetProcessHeap () returned 0x8a0000 [0134.264] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36a40a0 [0134.265] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\*", lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993740 [0134.269] GetProcessHeap () returned 0x8a0000 [0134.269] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0134.269] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x66a98a1b, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x66a98a1b, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993800 [0134.271] GetProcessHeap () returned 0x8a0000 [0134.271] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0134.271] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ac4a8a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ac4a8a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ac4a8a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0134.271] GetProcessHeap () returned 0x8a0000 [0134.271] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0134.272] GetProcessHeap () returned 0x8a0000 [0134.272] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0134.272] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1697068, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x99937c0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99937c0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0134.276] GetProcessHeap () returned 0x8a0000 [0134.276] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0134.286] GetProcessHeap () returned 0x8a0000 [0134.286] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0134.287] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc7c11d2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0134.291] GetProcessHeap () returned 0x8a0000 [0134.291] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0134.291] GetProcessHeap () returned 0x8a0000 [0134.291] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0134.291] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993580 [0134.445] GetProcessHeap () returned 0x8a0000 [0134.445] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0134.445] GetProcessHeap () returned 0x8a0000 [0134.445] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0134.445] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993900 [0134.449] GetProcessHeap () returned 0x8a0000 [0134.449] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0134.471] GetProcessHeap () returned 0x8a0000 [0134.471] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0134.473] GetProcessHeap () returned 0x8a0000 [0134.473] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0134.474] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1036\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d440f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d440f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d440f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993580 [0134.475] GetProcessHeap () returned 0x8a0000 [0134.476] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0134.476] GetProcessHeap () returned 0x8a0000 [0134.476] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0134.476] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\3082\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d440f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d440f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d440f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0134.476] GetProcessHeap () returned 0x8a0000 [0134.476] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0134.476] GetProcessHeap () returned 0x8a0000 [0134.476] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0134.476] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1295fc19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x12985c4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993700 [0134.478] GetProcessHeap () returned 0x8a0000 [0134.478] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0134.478] GetProcessHeap () returned 0x8a0000 [0134.478] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0134.478] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1335b74d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1335b74d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993780 [0134.482] GetProcessHeap () returned 0x8a0000 [0134.482] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0134.482] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb6c7584, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x33860, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ACCWIZ.DLL", cAlternateFileName="")) returned 1 [0134.483] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xce758538, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe107a061, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe15188c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x91aa0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ACEDAO.DLL", cAlternateFileName="")) returned 1 [0134.483] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc7c5a96a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133819a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ADDINS", cAlternateFileName="")) returned 1 [0134.483] GetProcessHeap () returned 0x8a0000 [0134.483] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0134.483] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc7c5a96a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133819a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0134.487] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc7c5a96a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133819a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.487] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a7cf13, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a7cf13, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d6d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCOLK.DLL", cAlternateFileName="")) returned 1 [0134.487] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc7c5a96a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc7c5a96a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc7c80c48, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x23460, dwReserved0=0x0, dwReserved1=0x0, cFileName="ColleagueImport.dll", cAlternateFileName="COLLEA~1.DLL")) returned 1 [0134.487] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xafa146a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xafa146a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FAXEXT.ECF", cAlternateFileName="")) returned 1 [0134.487] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd42039, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd42039, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Power Query for Excel Integrated", cAlternateFileName="MICROS~1")) returned 1 [0134.487] GetProcessHeap () returned 0x8a0000 [0134.487] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0134.487] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd42039, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd42039, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0134.490] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd42039, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd42039, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.490] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x895576a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x895576a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bin", cAlternateFileName="")) returned 1 [0134.490] GetProcessHeap () returned 0x8a0000 [0134.490] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d40b8 [0134.490] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x895576a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x895576a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993580 [0134.493] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x895576a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x895576a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.494] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0134.494] GetProcessHeap () returned 0x8a0000 [0134.494] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0134.495] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ar\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0134.726] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.726] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0134.726] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1945af2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1945af2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2caa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0134.726] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7d7750, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7d7750, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7d7750, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0134.726] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e0ae4d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e0ae4d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e0ae4d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa0aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0134.726] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e0ae4d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e0ae4d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e0ae4d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa0aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 0 [0134.726] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0134.727] GetProcessHeap () returned 0x8a0000 [0134.727] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0134.727] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf480feb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x18157e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18157e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0134.727] GetProcessHeap () returned 0x8a0000 [0134.727] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0134.727] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bg\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf480feb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x18157e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18157e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0134.730] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf480feb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x18157e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18157e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.730] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3f7b55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3f7b55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x54ef2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0134.730] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf480feb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf480feb5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf483611a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x31040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0134.730] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18157e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18157e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18157e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0134.730] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9a9d821, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9a9d821, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb0aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0134.730] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9a9d821, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9a9d821, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb0aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 0 [0134.730] FindClose (in: hFindFile=0x9939c0 | out: hFindFile=0x9939c0) returned 1 [0134.731] GetProcessHeap () returned 0x8a0000 [0134.731] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0134.731] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x61b241f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x61b241f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0134.731] GetProcessHeap () returned 0x8a0000 [0134.731] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0134.732] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x61b241f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x61b241f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0134.734] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x61b241f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x61b241f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.734] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4cfbc75, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4cfbc75, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0134.734] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x61b241f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x61b241f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x61b241f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0134.734] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x33040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0134.734] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3f46636, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3f46636, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3f46636, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8aaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0134.734] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3f46636, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3f46636, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3f46636, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8aaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 0 [0134.734] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0134.735] GetProcessHeap () returned 0x8a0000 [0134.735] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0134.735] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf134fca5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ee20e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ee20e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0134.735] GetProcessHeap () returned 0x8a0000 [0134.735] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0134.735] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cs\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf134fca5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ee20e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ee20e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0134.738] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf134fca5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ee20e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ee20e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.738] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2ee20e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2ee20e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2f5480d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0134.738] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf134fca5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf134fca5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf145ad52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x26aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0134.738] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb654e78, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb654e78, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb67b102, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x32aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0134.738] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1887f3e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1887f3e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ae17b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0134.738] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1887f3e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1887f3e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ae17b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 0 [0134.738] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0134.739] GetProcessHeap () returned 0x8a0000 [0134.739] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0134.739] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c164a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6866e01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6866e01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0134.739] GetProcessHeap () returned 0x8a0000 [0134.739] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0134.739] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\da\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c164a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6866e01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6866e01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0134.744] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c164a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6866e01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6866e01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.744] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x605aed7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x605aed7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6081126, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0134.744] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56d17f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56d17f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56d17f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0134.744] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6866e01, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6866e01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6866e01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0134.744] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5c164a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5c164a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5c164a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0134.744] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5c164a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5c164a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5c164a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0134.744] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0134.745] GetProcessHeap () returned 0x8a0000 [0134.745] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0134.745] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0134.745] GetProcessHeap () returned 0x8a0000 [0134.745] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0134.745] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\de\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0134.748] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.748] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff31e88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf003cf13, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0134.748] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x22a9f7a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22a9f7a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0134.748] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x624ad43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x33aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0134.748] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5eb74f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5eb74f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5f4ff2d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x91040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0134.748] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5eb74f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5eb74f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5f4ff2d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x91040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 0 [0134.748] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0134.749] GetProcessHeap () returned 0x8a0000 [0134.749] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0134.749] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf472b09c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf472b09c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf475131d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4fe050, dwReserved0=0x0, dwReserved1=0x0, cFileName="DocumentFormat.OpenXml.dll", cAlternateFileName="DOCUME~1.DLL")) returned 1 [0134.749] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0134.749] GetProcessHeap () returned 0x8a0000 [0134.749] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0134.749] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\el\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0134.752] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.752] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x231c662, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x231c662, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x231c662, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0134.752] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6c93006, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x33040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0134.752] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1dbe1c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1dbe1c1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1dbe1c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x42040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0134.752] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf00d5872, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00d5872, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbcaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0134.752] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf00d5872, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00d5872, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbcaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0134.752] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0134.753] GetProcessHeap () returned 0x8a0000 [0134.753] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0134.753] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0134.753] GetProcessHeap () returned 0x8a0000 [0134.753] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0134.753] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\es\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0134.756] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.756] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18157e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18157e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1887f3e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0134.756] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6e5cc4e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0134.756] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf47e9c8f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4a25fae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x32aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0134.756] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa2f5c0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa2f5c0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa2f5c0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8baa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0134.765] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa2f5c0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa2f5c0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa2f5c0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8baa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 0 [0134.765] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0134.766] GetProcessHeap () returned 0x8a0000 [0134.766] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0134.766] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8719376, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8719376, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0134.766] GetProcessHeap () returned 0x8a0000 [0134.766] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0134.766] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\et\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8719376, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8719376, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0134.769] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8719376, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8719376, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.769] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x381f2dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x381f2dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0134.769] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc70564d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc70564d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc70564d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x26040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0134.769] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8719376, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x8719376, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x91adba5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0134.769] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0df27d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0df27d3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x85040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0134.769] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0df27d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0df27d3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x85040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0134.769] FindClose (in: hFindFile=0x993a00 | out: hFindFile=0x993a00) returned 1 [0134.770] GetProcessHeap () returned 0x8a0000 [0134.770] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0134.770] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x69980f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69980f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu", cAlternateFileName="")) returned 1 [0134.770] GetProcessHeap () returned 0x8a0000 [0134.770] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0134.770] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\eu\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x69980f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69980f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0134.888] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x69980f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69980f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.888] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf41f3e26, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0134.888] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa39cfa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa39cfa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa39cfa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0134.888] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x69980f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x69980f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69980f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0134.888] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1920897, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1920897, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x196cd32, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x87aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0134.888] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1920897, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1920897, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x196cd32, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x87aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 0 [0134.888] FindClose (in: hFindFile=0x993940 | out: hFindFile=0x993940) returned 1 [0134.889] GetProcessHeap () returned 0x8a0000 [0134.889] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0134.889] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56d17f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56d17f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56d17f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="EventSource.dll", cAlternateFileName="EVENTS~1.DLL")) returned 1 [0134.889] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6bae279, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bae279, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0134.889] GetProcessHeap () returned 0x8a0000 [0134.889] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0134.889] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fi\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6bae279, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bae279, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0134.892] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6bae279, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bae279, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.892] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf47e9c8f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf480feb5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0134.892] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6bae279, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6bae279, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bae279, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0134.892] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4c3d17b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4c3d17b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4c63313, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0134.892] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x595a0ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x595a0ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59cc74e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x89040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0134.892] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x595a0ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x595a0ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59cc74e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x89040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 0 [0134.893] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0134.894] GetProcessHeap () returned 0x8a0000 [0134.894] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0134.894] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0134.894] GetProcessHeap () returned 0x8a0000 [0134.894] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0134.894] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fr\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0134.896] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.896] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6bad1cb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6bad1cb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6bd3439, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x10040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0134.896] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4ba375b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4ba375b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x29040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0134.896] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0134.896] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd42039, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd42039, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8faa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0134.896] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd42039, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd42039, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8faa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0134.896] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0134.897] GetProcessHeap () returned 0x8a0000 [0134.897] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0134.897] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e0a643, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x675bda6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x675bda6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gl", cAlternateFileName="")) returned 1 [0134.897] GetProcessHeap () returned 0x8a0000 [0134.897] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0134.897] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gl\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e0a643, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x675bda6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x675bda6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0134.900] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e0a643, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x675bda6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x675bda6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.900] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1e0a643, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1e0a643, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0134.900] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5e78ac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5e78ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5e78ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0134.900] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x675bda6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x675bda6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6781ff8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0134.900] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb67b102, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb67b102, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb6c7584, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8a040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0134.900] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb67b102, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb67b102, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb6c7584, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8a040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 0 [0134.900] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0134.901] GetProcessHeap () returned 0x8a0000 [0134.901] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0134.901] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c8cf9c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0134.901] GetProcessHeap () returned 0x8a0000 [0134.901] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0134.901] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\he\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c8cf9c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993780 [0134.904] FindNextFileW (in: hFindFile=0x993780, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c8cf9c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.904] FindNextFileW (in: hFindFile=0x993780, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6e5cc4e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0134.904] FindNextFileW (in: hFindFile=0x993780, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1c8cf9c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c8cf9c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c8cf9c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2aaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0134.904] FindNextFileW (in: hFindFile=0x993780, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf41f3e26, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41f3e26, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4266542, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x37aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0134.904] FindNextFileW (in: hFindFile=0x993780, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x98040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0134.904] FindNextFileW (in: hFindFile=0x993780, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x98040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 0 [0134.904] FindClose (in: hFindFile=0x993780 | out: hFindFile=0x993780) returned 1 [0134.905] GetProcessHeap () returned 0x8a0000 [0134.905] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0134.905] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf43e3cb7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0134.905] GetProcessHeap () returned 0x8a0000 [0134.905] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0134.905] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hi\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf43e3cb7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0134.907] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf43e3cb7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.907] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf43e3cb7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf43e3cb7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4409f1c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0134.907] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6c93006, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x36040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0134.907] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80fc2c4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80fc2c4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80fc2c4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x46aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0134.907] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa4733b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa4733b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa4995f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd2040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0134.907] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa4733b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa4733b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa4995f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd2040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 0 [0134.908] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0134.908] GetProcessHeap () returned 0x8a0000 [0134.908] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0134.909] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0134.909] GetProcessHeap () returned 0x8a0000 [0134.909] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0134.909] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hr\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0134.911] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.911] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0134.911] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x95505c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x95505c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a13a8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0134.911] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b61d36, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0134.911] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17ef5ba, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17ef5ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18157e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x87040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0134.911] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17ef5ba, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17ef5ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18157e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x87040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 0 [0134.911] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0134.913] GetProcessHeap () returned 0x8a0000 [0134.913] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0134.913] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ebbef3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ebbef3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0134.913] GetProcessHeap () returned 0x8a0000 [0134.913] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0134.913] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hu\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ebbef3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ebbef3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0134.914] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ebbef3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ebbef3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.914] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf75a8fbb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf75a8fbb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf75a8fbb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0134.914] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2ebbef3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2ebbef3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ebbef3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0134.915] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1945af2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1945af2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x33aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0134.915] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2d943c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2d943c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2ff666, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x92aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0134.915] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2d943c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2d943c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2ff666, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x92aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 0 [0134.915] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0134.916] GetProcessHeap () returned 0x8a0000 [0134.916] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0134.916] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc43098a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc43098a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0134.916] GetProcessHeap () returned 0x8a0000 [0134.916] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0134.916] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\id\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc43098a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc43098a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0134.918] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc43098a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc43098a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.918] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefee59ce, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff0bc27, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xdaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0134.918] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x25aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0134.918] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d9d08d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d9d08d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf755cb7d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x31040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0134.918] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc43098a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc43098a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc43098a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x87040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0134.918] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc43098a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc43098a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc43098a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x87040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 0 [0134.918] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0134.919] GetProcessHeap () returned 0x8a0000 [0134.919] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0134.919] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa89f599, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6270fd0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6270fd0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0134.919] GetProcessHeap () returned 0x8a0000 [0134.919] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0134.919] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\it\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa89f599, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6270fd0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6270fd0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993800 [0134.922] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa89f599, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6270fd0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6270fd0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.922] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc240ad7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc240ad7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0134.923] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5fc257f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5fc257f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6034d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0134.923] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6270fd0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6270fd0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6270fd0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0134.923] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa89f599, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa89f599, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfae22cc9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8caa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0134.923] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa89f599, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa89f599, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfae22cc9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8caa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0134.923] FindClose (in: hFindFile=0x993800 | out: hFindFile=0x993800) returned 1 [0134.924] GetProcessHeap () returned 0x8a0000 [0134.924] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0134.924] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x91adba5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x91adba5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0134.924] GetProcessHeap () returned 0x8a0000 [0134.924] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0134.924] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ja\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x91adba5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x91adba5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b80 [0135.030] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x91adba5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x91adba5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.030] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d05722, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d05722, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d05722, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0135.036] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x91adba5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x91adba5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x91d3da7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0135.047] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12dd5ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1329a43, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x36aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0135.047] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbda21cf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbda21cf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbda21cf, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x94aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0135.047] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbda21cf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbda21cf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbda21cf, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x94aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 0 [0135.047] FindClose (in: hFindFile=0x993b80 | out: hFindFile=0x993b80) returned 1 [0135.050] GetProcessHeap () returned 0x8a0000 [0135.089] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0135.089] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd09866, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6d2b978, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d2b978, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kk", cAlternateFileName="")) returned 1 [0135.089] GetProcessHeap () returned 0x8a0000 [0135.089] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0135.089] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kk\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd09866, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6d2b978, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d2b978, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0135.091] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd09866, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6d2b978, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d2b978, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.091] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd2face, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd2face, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd2face, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x10aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0135.091] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d2b978, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d2b978, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d2b978, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0135.091] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x51c07e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x51c07e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x51c07e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0135.092] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56f7a52, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56f7a52, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x595a0ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0135.092] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56f7a52, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56f7a52, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x595a0ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 0 [0135.092] FindClose (in: hFindFile=0x993a00 | out: hFindFile=0x993a00) returned 1 [0135.093] GetProcessHeap () returned 0x8a0000 [0135.093] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0135.093] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12b7378, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x5101cbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0135.093] GetProcessHeap () returned 0x8a0000 [0135.093] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0135.093] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ko\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12b7378, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x5101cbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0135.096] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12b7378, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x5101cbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.096] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf99462e6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99462e6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99462e6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0135.096] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4b0be25, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4b0be25, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4c3d17b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0135.096] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf12b7378, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12b7378, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf12dd5ae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x34040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0135.096] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5101cbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5101cbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0135.096] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5101cbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5101cbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 0 [0135.096] FindClose (in: hFindFile=0x9937c0 | out: hFindFile=0x9937c0) returned 1 [0135.097] GetProcessHeap () returned 0x8a0000 [0135.097] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0135.097] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6bad1cb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x22f6470, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0135.097] GetProcessHeap () returned 0x8a0000 [0135.097] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0135.097] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lt\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6bad1cb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x22f6470, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0135.100] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6bad1cb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x22f6470, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.100] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbc97147, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbc97147, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbce360e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0135.100] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x22f6470, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22f6470, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0135.100] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6bad1cb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6bad1cb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6bad1cb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x32aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0135.100] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa853100, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa853100, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa853100, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8b040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0135.100] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa853100, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa853100, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa853100, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8b040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 0 [0135.100] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0135.101] GetProcessHeap () returned 0x8a0000 [0135.101] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0135.101] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x59f29de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59f29de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0135.101] GetProcessHeap () returned 0x8a0000 [0135.101] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0135.101] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lv\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x59f29de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59f29de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0135.104] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x59f29de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59f29de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.104] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x59f29de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x59f29de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59f29de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0135.104] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffddb96c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffddb96c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffddb96c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0135.104] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf00d5872, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00d5872, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x32aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0135.104] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf8f7076d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf8f7076d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99462e6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8e040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0135.104] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf8f7076d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf8f7076d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99462e6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8e040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 0 [0135.105] FindClose (in: hFindFile=0x9939c0 | out: hFindFile=0x9939c0) returned 1 [0135.105] GetProcessHeap () returned 0x8a0000 [0135.105] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0135.105] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80afe67, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80afe67, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80afe67, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xee40, dwReserved0=0x0, dwReserved1=0x0, cFileName="mashupcompression.dll", cAlternateFileName="MASHUP~1.DLL")) returned 1 [0135.106] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5afc9d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5afc9d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf618b1a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa08b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Data.Edm.NetFX35.dll", cAlternateFileName="MIE429~1.DLL")) returned 1 [0135.106] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5174318, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5174318, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5174318, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1610c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Data.OData.NetFX35.dll", cAlternateFileName="MI37F8~1.DLL")) returned 1 [0135.106] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6aef645, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aef645, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b15891, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Data.OData.Query.NetFX35.dll", cAlternateFileName="MI8F9F~1.DLL")) returned 1 [0135.106] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfe368d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xfe368d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1698075, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Exchange.WebServices.dll", cAlternateFileName="MIE0C3~1.DLL")) returned 1 [0135.106] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x670f8d9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x670f8d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x670f8d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x217840, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.dll", cAlternateFileName="MI0E0A~1.DLL")) returned 1 [0135.106] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45f9db0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf45f9db0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf45f9db0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6840, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.EditorRibbon.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0135.106] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4d20ecd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4d20ecd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a3de35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x32a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Initialization.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0135.107] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7bc5054, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7bc5054, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7bc5054, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14840, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Models.dll", cAlternateFileName="MIC507~1.DLL")) returned 1 [0135.107] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfcfa9f2d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcfa9f2d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffd42fe2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x23a5040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.dll", cAlternateFileName="MI7BEA~1.DLL")) returned 1 [0135.107] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa8619f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa8619f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb91216, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Container.exe", cAlternateFileName="MICROS~2.EXE")) returned 1 [0135.107] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88e2fa3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x88e2fa3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x92201bc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5070, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Container.NetFX40.exe", cAlternateFileName="MICROS~3.EXE")) returned 1 [0135.107] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d76e38, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d76e38, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6de953e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Container.NetFX45.exe", cAlternateFileName="MICROS~1.EXE")) returned 1 [0135.107] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7b9ee02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7b9ee02, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7b9ee02, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1e0ea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.dll", cAlternateFileName="MI8E0B~1.DLL")) returned 1 [0135.107] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6bd443f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6bd443f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bd443f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc2040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.XmlSerializers.dll", cAlternateFileName="MI7AD6~1.DLL")) returned 1 [0135.107] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b87f8e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b87f8e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bae279, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.OAuth.dll", cAlternateFileName="MIADE9~1.DLL")) returned 1 [0135.107] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4704e3d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4704e3d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf472b09c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.OleDbInterop.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0135.107] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd42039, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd42039, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13240, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.OleDbProvider.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0135.107] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6ea9118, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6ea9118, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7642a1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23f640, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.ScriptDom.dll", cAlternateFileName="MIC995~1.DLL")) returned 1 [0135.107] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbda21cf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbda21cf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbdc8437, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x20aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Storage.XmlSerializers.dll", cAlternateFileName="MID814~1.DLL")) returned 1 [0135.108] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3760836, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3760836, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x481440, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.dll", cAlternateFileName="MIE629~1.DLL")) returned 1 [0135.108] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x73ee48, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x73ee48, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x73ee48, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14dac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.OData.Core.NetFX35.dll", cAlternateFileName="MIDAD6~1.DLL")) returned 1 [0135.108] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x48f5cfa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x48f5cfa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x48f5cfa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb8058, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.OData.Edm.NetFX35.dll", cAlternateFileName="MIF00B~1.DLL")) returned 1 [0135.108] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6aef645, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aef645, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b058, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.Excel.dll", cAlternateFileName="MIDE30~1.DLL")) returned 1 [0135.108] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc40a725, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc40a725, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc40a725, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xedac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.Outlook.dll", cAlternateFileName="MIDB50~1.DLL")) returned 1 [0135.108] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2b31ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2b31ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1e4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Spatial.NetFX35.dll", cAlternateFileName="MI069E~1.DLL")) returned 1 [0135.108] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5afc9d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5afc9d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5e43de4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5a0a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.WindowsAzure.StorageClient.dll", cAlternateFileName="MI3285~1.DLL")) returned 1 [0135.108] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0135.108] GetProcessHeap () returned 0x8a0000 [0135.108] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0135.108] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ms\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993780 [0135.111] FindNextFileW (in: hFindFile=0x993780, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.112] FindNextFileW (in: hFindFile=0x993780, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a2a905, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a2a905, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0135.112] FindNextFileW (in: hFindFile=0x993780, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0135.112] FindNextFileW (in: hFindFile=0x993780, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbe60d8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbe60d8f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbe60d8f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x31040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0135.112] FindNextFileW (in: hFindFile=0x993780, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffd42fe2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd42fe2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffd6924a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x88aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0135.112] FindNextFileW (in: hFindFile=0x993780, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffd42fe2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd42fe2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffd6924a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x88aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 0 [0135.112] FindClose (in: hFindFile=0x993780 | out: hFindFile=0x993780) returned 1 [0135.113] GetProcessHeap () returned 0x8a0000 [0135.113] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0135.113] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0822be8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0135.113] GetProcessHeap () returned 0x8a0000 [0135.113] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0135.113] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nl\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0822be8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0135.116] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0822be8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.116] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc0c33db, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc0c33db, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0135.116] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc34bb5b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc34bb5b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc34bb5b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0135.116] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b61d36, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0135.116] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0822be8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0822be8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0822be8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8daa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0135.117] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0822be8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0822be8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0822be8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8daa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0135.117] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0135.117] GetProcessHeap () returned 0x8a0000 [0135.117] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0135.118] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4409f1c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8680a1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0135.118] GetProcessHeap () returned 0x8a0000 [0135.118] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0135.118] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\no\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4409f1c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8680a1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0135.120] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4409f1c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8680a1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.120] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45f9db0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf45f9db0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4620012, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0135.120] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4409f1c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4409f1c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4409f1c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0135.120] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8680a1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x8680a1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0135.120] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc5ae112, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc5ae112, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc5d437d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x87040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0135.120] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc5ae112, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc5ae112, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc5d437d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x87040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 0 [0135.120] FindClose (in: hFindFile=0x993940 | out: hFindFile=0x993940) returned 1 [0135.122] GetProcessHeap () returned 0x8a0000 [0135.122] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0135.122] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa879350, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa879350, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6daa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office.dll", cAlternateFileName="")) returned 1 [0135.122] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf854e731, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0135.122] GetProcessHeap () returned 0x8a0000 [0135.122] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0135.122] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pl\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf854e731, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0135.125] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf854e731, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.125] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4c895d2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4c895d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4caf7cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0135.125] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x865a7d2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0135.125] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaac403, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaac403, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1698075, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x33aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0135.125] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf854e731, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf854e731, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf8574958, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8eaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0135.125] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf854e731, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf854e731, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf8574958, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8eaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0135.125] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0135.126] GetProcessHeap () returned 0x8a0000 [0135.126] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0135.126] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf755cb7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6bfa6d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bfa6d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0135.126] GetProcessHeap () returned 0x8a0000 [0135.126] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0135.126] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-BR\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf755cb7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6bfa6d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bfa6d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0135.244] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf755cb7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6bfa6d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bfa6d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.244] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc0c33db, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc0c33db, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc0e95c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0135.244] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ea37c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ea37c1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x26aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0135.244] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7582db3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7582db3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7582db3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x32040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0135.244] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6bfa6d9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6bfa6d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bfa6d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8aaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0135.244] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6bfa6d9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6bfa6d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bfa6d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8aaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 0 [0135.244] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0135.245] GetProcessHeap () returned 0x8a0000 [0135.245] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0135.245] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-pt", cAlternateFileName="")) returned 1 [0135.245] GetProcessHeap () returned 0x8a0000 [0135.245] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0135.245] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-pt\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993780 [0135.248] FindNextFileW (in: hFindFile=0x993780, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.248] FindNextFileW (in: hFindFile=0x993780, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc70564d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc70564d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc72b8a6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0135.249] FindNextFileW (in: hFindFile=0x993780, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6e5cc4e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e82eb0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0135.249] FindNextFileW (in: hFindFile=0x993780, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4ba375b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4ba375b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x33040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0135.250] GetProcessHeap () returned 0x8a0000 [0135.250] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0135.250] GetProcessHeap () returned 0x8a0000 [0135.250] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0135.250] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ro\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0135.256] GetProcessHeap () returned 0x8a0000 [0135.256] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0135.256] GetProcessHeap () returned 0x8a0000 [0135.256] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0135.256] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ru\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf13037fa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf71003, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf71003, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993900 [0135.282] GetProcessHeap () returned 0x8a0000 [0135.282] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0135.282] GetProcessHeap () returned 0x8a0000 [0135.282] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0135.282] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sk\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993780 [0135.287] GetProcessHeap () returned 0x8a0000 [0135.287] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0135.287] GetProcessHeap () returned 0x8a0000 [0135.287] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0135.287] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sl\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0135.295] GetProcessHeap () returned 0x8a0000 [0135.295] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0135.295] GetProcessHeap () returned 0x8a0000 [0135.295] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0135.295] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf05741b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x4cd5a2f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4cd5a2f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0135.309] GetProcessHeap () returned 0x8a0000 [0135.309] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0135.309] GetProcessHeap () returned 0x8a0000 [0135.309] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0135.309] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6aee686, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6d05722, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d05722, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0135.314] GetProcessHeap () returned 0x8a0000 [0135.314] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0135.314] GetProcessHeap () returned 0x8a0000 [0135.314] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0135.314] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn-CS\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0135.317] GetProcessHeap () returned 0x8a0000 [0135.317] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0135.317] GetProcessHeap () returned 0x8a0000 [0135.317] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0135.317] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sv\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa25d2ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x670f8d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x670f8d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0135.331] GetProcessHeap () returned 0x8a0000 [0135.331] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0135.331] GetProcessHeap () returned 0x8a0000 [0135.331] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0135.331] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\th\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1860d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0135.335] GetProcessHeap () returned 0x8a0000 [0135.335] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0135.335] GetProcessHeap () returned 0x8a0000 [0135.335] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0135.335] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tr\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x453c2a7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x453c2a7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0135.581] GetProcessHeap () returned 0x8a0000 [0135.581] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0135.581] GetProcessHeap () returned 0x8a0000 [0135.581] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0135.581] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uk\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x37f90ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37f90ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993900 [0135.585] GetProcessHeap () returned 0x8a0000 [0135.585] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0135.585] GetProcessHeap () returned 0x8a0000 [0135.585] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0135.585] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\vi\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4692737, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x4abf9f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4abf9f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0135.588] GetProcessHeap () returned 0x8a0000 [0135.588] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0135.588] GetProcessHeap () returned 0x8a0000 [0135.589] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0135.589] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANS\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e56af1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x680214, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x680214, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b80 [0135.591] GetProcessHeap () returned 0x8a0000 [0135.591] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0135.591] GetProcessHeap () returned 0x8a0000 [0135.591] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0135.592] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANT\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00af60a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5581c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa5581c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0135.595] GetProcessHeap () returned 0x8a0000 [0135.595] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0135.595] GetProcessHeap () returned 0x8a0000 [0135.595] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d40b8 | out: hHeap=0x8a0000) returned 1 [0135.596] GetProcessHeap () returned 0x8a0000 [0135.596] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0135.597] GetProcessHeap () returned 0x8a0000 [0135.597] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0135.597] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power Map Excel Add-in\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf016e209, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b80 [0135.600] GetProcessHeap () returned 0x8a0000 [0135.600] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0135.600] GetProcessHeap () returned 0x8a0000 [0135.600] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0135.601] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993700 [0135.604] GetProcessHeap () returned 0x8a0000 [0135.604] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0135.604] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ar\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0135.607] GetProcessHeap () returned 0x8a0000 [0135.607] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0135.607] GetProcessHeap () returned 0x8a0000 [0135.607] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0135.607] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\bg\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133819a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993900 [0135.610] GetProcessHeap () returned 0x8a0000 [0135.610] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0135.610] GetProcessHeap () returned 0x8a0000 [0135.610] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0135.611] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ca\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42d8c51, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0135.613] GetProcessHeap () returned 0x8a0000 [0135.613] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0135.613] GetProcessHeap () returned 0x8a0000 [0135.613] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0135.613] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\cs\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9a9d821, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b80 [0135.618] GetProcessHeap () returned 0x8a0000 [0135.618] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0135.619] GetProcessHeap () returned 0x8a0000 [0135.619] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0135.619] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a6473, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0135.622] GetProcessHeap () returned 0x8a0000 [0135.622] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0135.622] GetProcessHeap () returned 0x8a0000 [0135.622] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0135.622] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\de\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b80 [0135.768] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.768] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x44a38de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x44a38de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4eb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0135.768] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37acc11, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0135.768] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0135.768] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x91adba5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x91adba5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x91d3da7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0135.768] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x133f40a9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x502f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.de.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0135.768] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x133f40a9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x502f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.de.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0135.768] FindClose (in: hFindFile=0x993b80 | out: hFindFile=0x993b80) returned 1 [0135.769] GetProcessHeap () returned 0x8a0000 [0135.769] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0135.769] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf46b8986, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0135.769] GetProcessHeap () returned 0x8a0000 [0135.769] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0135.769] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\el\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf46b8986, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b80 [0135.771] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf46b8986, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.772] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf46b8986, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf46b8986, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc5240, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0135.772] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80afe67, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80afe67, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80afe67, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1b040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0135.772] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6e5cc4e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0135.772] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6165f55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6165f55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0135.772] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1341a2e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15365236, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x53c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.el.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0135.772] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1341a2e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15365236, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x53c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.el.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0135.772] FindClose (in: hFindFile=0x993b80 | out: hFindFile=0x993b80) returned 1 [0135.773] GetProcessHeap () returned 0x8a0000 [0135.773] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0135.773] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7582db3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0135.773] GetProcessHeap () returned 0x8a0000 [0135.773] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0135.773] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\es\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7582db3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993580 [0135.776] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7582db3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.776] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf75a8fbb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf75a8fbb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x153fdb85, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4e58, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0135.776] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x38b7c4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x38b7c4a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x38b7c4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13080, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0135.776] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb654e78, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb654e78, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb654e78, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0135.776] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x29f7370, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x29f7370, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2f5480d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4918, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0135.776] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1341a2e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1395164b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f18d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.es.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0135.776] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1341a2e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1395164b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f18d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.es.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0135.776] FindClose (in: hFindFile=0x993580 | out: hFindFile=0x993580) returned 1 [0135.777] GetProcessHeap () returned 0x8a0000 [0135.777] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0135.777] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b0f72e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0135.777] GetProcessHeap () returned 0x8a0000 [0135.777] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0135.777] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b0f72e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b80 [0135.779] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b0f72e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.779] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b3bafd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b3bafd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc3e58, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0135.780] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b0f72e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b0f72e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b0f72e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0135.780] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d04716, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d04716, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6d04716, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0135.780] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc72b8a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc72b8a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcb7dd00, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6af8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0135.780] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x13440553, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e9db, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.et.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0135.780] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x13440553, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e9db, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.et.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0135.780] FindClose (in: hFindFile=0x993b80 | out: hFindFile=0x993b80) returned 1 [0135.781] GetProcessHeap () returned 0x8a0000 [0135.781] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0135.781] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6d2a978, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu", cAlternateFileName="")) returned 1 [0135.781] GetProcessHeap () returned 0x8a0000 [0135.781] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0135.781] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\eu\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6d2a978, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993800 [0135.783] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6d2a978, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.783] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7c5d9c5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7c5d9c5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4658, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0135.783] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x67a8250, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67a8250, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0135.783] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x37f90ac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37f90ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37f90ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0135.783] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d2a978, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d2a978, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6d2a978, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0135.783] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1341a2e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4edc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.eu.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0135.784] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1341a2e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4edc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.eu.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0135.784] FindClose (in: hFindFile=0x993800 | out: hFindFile=0x993800) returned 1 [0135.785] GetProcessHeap () returned 0x8a0000 [0135.785] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0135.785] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x138defa8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x138defa8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0135.785] GetProcessHeap () returned 0x8a0000 [0135.785] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0135.785] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fi\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x138defa8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x138defa8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b80 [0135.787] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x138defa8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x138defa8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.787] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf18f9628, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x13977942, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4258, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0135.788] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa5581c0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5581c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa68949f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0135.788] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6c1f8d1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6c1f8d1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c45b55, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0135.788] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6aee686, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6aee686, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6aee686, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0135.788] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x138defa8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x138defa8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13bd9da3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f39d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.fi.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0135.788] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x138defa8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x138defa8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13bd9da3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f39d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.fi.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0135.788] FindClose (in: hFindFile=0x993b80 | out: hFindFile=0x993b80) returned 1 [0135.789] GetProcessHeap () returned 0x8a0000 [0135.789] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0135.789] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0135.789] GetProcessHeap () returned 0x8a0000 [0135.789] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0135.789] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fr\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0135.791] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.791] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7582db3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7582db3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x152a6704, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0135.791] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5127e7d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5127e7d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5127e7d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0135.791] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ea37c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ea37c1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0135.791] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0135.791] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x13440553, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x152a6704, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fb53, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.fr.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0135.791] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x13440553, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x152a6704, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fb53, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.fr.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0135.791] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0135.792] GetProcessHeap () returned 0x8a0000 [0135.792] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0135.792] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ac3a61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13aced2b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13aced2b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gl", cAlternateFileName="")) returned 1 [0135.792] GetProcessHeap () returned 0x8a0000 [0135.792] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0135.792] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\gl\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ac3a61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13aced2b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13aced2b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993580 [0135.795] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ac3a61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13aced2b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13aced2b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.795] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfcb7dd00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcb7dd00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4a58, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0135.795] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbe3ab3a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbe3ab3a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbe3ab3a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0135.795] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ac3a61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ac3a61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0135.795] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4caf7cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4caf7cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4caf7cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4918, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0135.795] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x13aced2b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x13aced2b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13b67741, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f09b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.gl.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0135.795] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x13aced2b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x13aced2b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13b67741, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f09b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.gl.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0135.795] FindClose (in: hFindFile=0x993580 | out: hFindFile=0x993580) returned 1 [0135.796] GetProcessHeap () returned 0x8a0000 [0135.796] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0135.796] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a98712, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13a8299e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13a8299e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0135.796] GetProcessHeap () returned 0x8a0000 [0135.796] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0135.796] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\he\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a98712, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13a8299e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13a8299e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b80 [0135.800] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a98712, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13a8299e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13a8299e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.800] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6c6bda4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6c6bda4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x13bb3be0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc3440, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0135.800] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6bae279, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6bae279, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bd443f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0135.800] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4a98712, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4a98712, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4abe91a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0135.800] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61b1409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61b1409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61d7668, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5240, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0135.800] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x13a8299e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x13a8299e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13aa8b23, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fd42, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.he.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0135.801] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x13a8299e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x13a8299e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13aa8b23, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fd42, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.he.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0135.801] FindClose (in: hFindFile=0x993b80 | out: hFindFile=0x993b80) returned 1 [0135.801] GetProcessHeap () returned 0x8a0000 [0135.801] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0135.801] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa806c3d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1428e945, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1428e945, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0135.802] GetProcessHeap () returned 0x8a0000 [0135.802] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0135.802] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hi\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa806c3d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1428e945, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1428e945, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993580 [0135.804] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa806c3d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1428e945, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1428e945, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.804] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1466e4fb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc3ea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0135.804] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa806c3d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa806c3d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa853100, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1c040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0135.804] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfcc3c8ab, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcc3c8ab, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcc62b13, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0135.804] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6866e01, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6866e01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6866e01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0135.804] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1428e945, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1428e945, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x142b4b24, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51e14, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.hi.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0135.804] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1428e945, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1428e945, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x142b4b24, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51e14, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.hi.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0135.804] FindClose (in: hFindFile=0x993580 | out: hFindFile=0x993580) returned 1 [0135.805] GetProcessHeap () returned 0x8a0000 [0135.805] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0135.805] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13b67741, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13b67741, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0135.805] GetProcessHeap () returned 0x8a0000 [0135.805] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0135.805] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hr\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13b67741, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13b67741, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993580 [0135.807] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13b67741, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13b67741, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.807] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7beb2bc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x14268686, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc40d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0135.807] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfaf07af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf07af2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaf2dd35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12088, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0135.807] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7beb2bc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7beb2bc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0135.807] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e310c7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e310c7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e7d566, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0135.808] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x13b67741, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x13b67741, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1428e945, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f598, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.hr.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0135.808] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x13b67741, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x13b67741, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1428e945, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f598, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.hr.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0135.808] FindClose (in: hFindFile=0x993580 | out: hFindFile=0x993580) returned 1 [0135.808] GetProcessHeap () returned 0x8a0000 [0135.808] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0135.808] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6164f96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14648313, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14648313, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0135.809] GetProcessHeap () returned 0x8a0000 [0135.809] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0135.809] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6164f96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14648313, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14648313, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0136.060] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6164f96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14648313, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14648313, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.060] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5eb74f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5eb74f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x152a6704, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4c78, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0136.060] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa911c96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa911c96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa937f07, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0136.060] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6164f96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6164f96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf618b1a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0136.060] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x54ef2e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x54ef2e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x575324, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4d20, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0136.060] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x14648313, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x14648313, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1466e4fb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50d09, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.hu.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0136.060] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x14648313, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x14648313, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1466e4fb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50d09, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.hu.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0136.060] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0136.061] GetProcessHeap () returned 0x8a0000 [0136.061] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0136.062] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1434d390, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1434d390, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0136.062] GetProcessHeap () returned 0x8a0000 [0136.062] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0136.062] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\id\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1434d390, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1434d390, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0136.065] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1434d390, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1434d390, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.065] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2ff666, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2ff666, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1466e4fb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4658, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0136.065] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf43e3cb7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf43e3cb7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4409f1c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0136.065] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4620012, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4620012, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0136.065] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf18f9628, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf18f9628, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6b10, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0136.065] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1434d390, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1434d390, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14589889, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4df89, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.id.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0136.065] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1434d390, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1434d390, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14589889, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4df89, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.id.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0136.065] FindClose (in: hFindFile=0x993940 | out: hFindFile=0x993940) returned 1 [0136.066] GetProcessHeap () returned 0x8a0000 [0136.066] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0136.066] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf964b3dd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14969496, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14969496, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0136.067] GetProcessHeap () returned 0x8a0000 [0136.067] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0136.067] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\it\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf964b3dd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14969496, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14969496, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993580 [0136.069] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf964b3dd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14969496, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14969496, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.069] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6840bbc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6840bbc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x152f2ade, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4e58, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0136.070] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x865a7d2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0136.070] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf99b89f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99b89f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99b89f6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0136.070] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf964b3dd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf964b3dd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99462e6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4eb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0136.070] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x14969496, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x14969496, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14a01eaa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f0e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.it.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0136.070] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x14969496, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x14969496, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14a01eaa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f0e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.it.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0136.070] FindClose (in: hFindFile=0x993580 | out: hFindFile=0x993580) returned 1 [0136.071] GetProcessHeap () returned 0x8a0000 [0136.071] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0136.071] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf15d84bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x146e0bdc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x146e0bdc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0136.071] GetProcessHeap () returned 0x8a0000 [0136.071] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0136.071] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ja\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf15d84bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x146e0bdc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x146e0bdc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b80 [0136.073] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf15d84bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x146e0bdc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x146e0bdc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.073] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf15d84bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf15d84bd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1498f816, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc1c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0136.073] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4ba375b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4bc999b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0136.073] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x680214, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x680214, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x680214, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0136.074] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf311d3eb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf311d3eb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf311d3eb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0136.074] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x146e0bdc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x146e0bdc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14969496, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50074, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.ja.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0136.074] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x146e0bdc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x146e0bdc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14969496, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50074, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.ja.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0136.074] FindClose (in: hFindFile=0x993b80 | out: hFindFile=0x993b80) returned 1 [0136.075] GetProcessHeap () returned 0x8a0000 [0136.075] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0136.075] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfae6f174, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14b330aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14b330aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kk", cAlternateFileName="")) returned 1 [0136.075] GetProcessHeap () returned 0x8a0000 [0136.075] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0136.075] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\kk\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfae6f174, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14b330aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14b330aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0136.078] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfae6f174, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14b330aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14b330aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.078] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc34bb5b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc34bb5b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x14bf1c4b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0136.078] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfae6f174, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfae6f174, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfae6f174, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0136.078] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2d943c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2d943c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2d943c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0136.078] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb8dd674, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb8dd674, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb8dd674, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0136.078] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x14b330aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x14b330aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x515e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.kk.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0136.078] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x14b330aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x14b330aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x515e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.kk.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0136.078] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0136.079] GetProcessHeap () returned 0x8a0000 [0136.079] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0136.079] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14ac0994, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14ac0994, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0136.079] GetProcessHeap () returned 0x8a0000 [0136.079] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0136.079] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ko\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14ac0994, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14ac0994, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993580 [0136.081] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14ac0994, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14ac0994, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.081] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x14b330aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc18a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0136.081] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf99b89f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99b89f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9a04f26, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0136.081] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6aef645, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aef645, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b15891, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0136.081] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5afc9d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5afc9d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5e43de4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0136.081] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x14ac0994, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x14ac0994, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14bcb9e3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4eec6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.ko.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0136.081] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x14ac0994, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x14ac0994, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14bcb9e3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4eec6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.ko.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0136.081] FindClose (in: hFindFile=0x993580 | out: hFindFile=0x993580) returned 1 [0136.082] GetProcessHeap () returned 0x8a0000 [0136.082] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0136.082] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7b529d9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x152a6704, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x152a6704, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0136.083] GetProcessHeap () returned 0x8a0000 [0136.083] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0136.083] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lt\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7b529d9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x152a6704, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x152a6704, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0136.085] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7b529d9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x152a6704, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x152a6704, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.086] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb6089d0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb6089d0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x152f2ade, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc42c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0136.086] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5101cbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5101cbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0136.086] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9992797, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9992797, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9992797, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0136.086] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7b78b8d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7b78b8d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7b9ee02, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4918, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0136.086] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x152a6704, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x152a6704, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15bbd5ad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f98b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.lt.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0136.086] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x152a6704, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x152a6704, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15bbd5ad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f98b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.lt.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0136.086] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0136.087] GetProcessHeap () returned 0x8a0000 [0136.087] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0136.087] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf035e09d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0136.087] GetProcessHeap () returned 0x8a0000 [0136.087] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0136.087] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lv\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf035e09d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993580 [0136.089] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf035e09d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.089] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf035e09d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf035e09d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1662bb01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc3ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0136.089] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0dcc568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0dcc568, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0dcc568, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0136.089] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc62081b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc62081b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc646a83, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0136.089] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf475131d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf475131d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf475131d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4928, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0136.089] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1525a179, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f891, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.lv.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0136.089] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1525a179, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f891, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.lv.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0136.089] FindClose (in: hFindFile=0x993580 | out: hFindFile=0x993580) returned 1 [0136.090] GetProcessHeap () returned 0x8a0000 [0136.090] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0136.090] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42b29f3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42d8c51, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15f460, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0136.090] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1525a179, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3fa6c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Reporting.AdHoc.Shell.Bootstrapper.xap", cAlternateFileName="MICROS~1.XAP")) returned 1 [0136.090] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x22a9f7a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22a9f7a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22a9f7a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Reporting.Common.dll", cAlternateFileName="MIB9B1~1.DLL")) returned 1 [0136.091] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x670f8d9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x670f8d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x670f8d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c478, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.dll", cAlternateFileName="MID48A~1.DLL")) returned 1 [0136.091] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7d7750, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7d7750, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7d7750, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.Entry.Interfaces.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0136.091] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaac403, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaac403, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf71003, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf710, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0136.091] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x860e337, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x860e337, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10c60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Authorization.dll", cAlternateFileName="MIBBB9~1.DLL")) returned 1 [0136.091] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4c3d17b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4c3d17b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4c63313, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfc60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Interfaces.dll", cAlternateFileName="MI2DB2~1.DLL")) returned 1 [0136.091] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7641936, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7641936, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7beb2bc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5556e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ProgressiveProcessing.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0136.091] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42fef17, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15ab259c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ab259c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0136.091] GetProcessHeap () returned 0x8a0000 [0136.091] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0136.091] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ms\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42fef17, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15ab259c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ab259c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0136.093] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42fef17, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15ab259c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ab259c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.093] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42fef17, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42fef17, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x15b24c93, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc3ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0136.093] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8719376, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x8719376, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8719376, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0136.093] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x61fe8c4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x61fe8c4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0136.093] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0136.094] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15ab259c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15ab259c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ad884b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e046, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.ms.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0136.094] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15ab259c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15ab259c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ad884b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e046, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.ms.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0136.094] FindClose (in: hFindFile=0x993a00 | out: hFindFile=0x993a00) returned 1 [0136.094] GetProcessHeap () returned 0x8a0000 [0136.094] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0136.094] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x718b80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15a3fea8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15a3fea8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0136.095] GetProcessHeap () returned 0x8a0000 [0136.095] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0136.095] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\nl\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x718b80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15a3fea8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15a3fea8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0136.098] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x718b80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15a3fea8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15a3fea8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.098] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4d48116, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4d48116, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ab259c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc46b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0136.098] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x718b80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x718b80, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x718b80, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0136.098] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x718b80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x718b80, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x718b80, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0136.203] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18d43c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18d43c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1920897, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4eb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0136.203] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15a3fea8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15a3fea8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ab259c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f5cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.nl.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0136.218] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15a3fea8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15a3fea8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ab259c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f5cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.nl.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0136.219] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0136.220] GetProcessHeap () returned 0x8a0000 [0136.220] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0136.220] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15b71118, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b71118, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0136.229] GetProcessHeap () returned 0x8a0000 [0136.229] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0136.229] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\no\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15b71118, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b71118, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993900 [0136.250] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15b71118, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b71118, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.250] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf18f9628, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x15b9737d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4258, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0136.250] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf458770a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf458770a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf45d3b76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0136.251] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8719376, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x8719376, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x97efe5f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0136.251] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc43098a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc43098a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc43098a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x70b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0136.251] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15b71118, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15b71118, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b71118, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e5d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.no.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0136.251] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15b71118, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15b71118, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b71118, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e5d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.no.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0136.251] FindClose (in: hFindFile=0x993900 | out: hFindFile=0x993900) returned 1 [0136.252] GetProcessHeap () returned 0x8a0000 [0136.252] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0136.252] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf44c8b33, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15b24c93, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b24c93, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0136.252] GetProcessHeap () returned 0x8a0000 [0136.252] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0136.252] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pl\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf44c8b33, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15b24c93, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b24c93, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993900 [0136.254] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf44c8b33, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15b24c93, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b24c93, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.255] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7c83c72, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7c83c72, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x15b9737d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4858, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0136.255] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4620012, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4620012, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4620012, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0136.255] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf44c8b33, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf44c8b33, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44c8b33, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0136.255] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x231c662, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x231c662, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x231c662, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b30, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0136.255] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15b24c93, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15b24c93, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b4aee2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x505dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.pl.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0136.255] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15b24c93, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15b24c93, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b4aee2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x505dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.pl.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0136.255] FindClose (in: hFindFile=0x993900 | out: hFindFile=0x993900) returned 1 [0136.256] GetProcessHeap () returned 0x8a0000 [0136.256] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0136.256] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15bbd5ad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15bbd5ad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt", cAlternateFileName="")) returned 1 [0136.256] GetProcessHeap () returned 0x8a0000 [0136.256] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0136.257] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15bbd5ad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15bbd5ad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993580 [0136.259] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15bbd5ad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15bbd5ad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.259] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc32591f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc32591f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1624bdaa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0136.259] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4cd4a32, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4cd4a32, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4cd4a32, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0136.259] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x443f20, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x443f20, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4903b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0136.259] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff0bc27, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff31e88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4eb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0136.260] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15bbd5ad, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15bbd5ad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15cc8628, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f281, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.pt.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0136.260] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15bbd5ad, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15bbd5ad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15cc8628, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f281, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.pt.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0136.260] FindClose (in: hFindFile=0x993580 | out: hFindFile=0x993580) returned 1 [0136.261] GetProcessHeap () returned 0x8a0000 [0136.261] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0136.261] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf475131d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15be380c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15be380c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0136.261] GetProcessHeap () returned 0x8a0000 [0136.261] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0136.261] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt-PT\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf475131d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15be380c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15be380c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0136.263] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf475131d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15be380c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15be380c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.263] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7beb2bc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x15e45dad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc46c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0136.263] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x29f7370, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x29f7370, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2f5480d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0136.263] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0136.263] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf475131d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf475131d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf475131d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0136.264] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15be380c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15be380c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d14b21, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f3b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.pt-PT.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0136.264] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15be380c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15be380c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d14b21, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f3b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.pt-PT.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0136.264] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0136.264] GetProcessHeap () returned 0x8a0000 [0136.265] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0136.265] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6ac83cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15d3adab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d3adab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0136.265] GetProcessHeap () returned 0x8a0000 [0136.265] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0136.265] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ro\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6ac83cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15d3adab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d3adab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993580 [0136.273] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6ac83cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15d3adab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d3adab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.273] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6aa3169, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aa3169, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x161d962a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4c60, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0136.273] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6aee686, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6aee686, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6aee686, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0136.273] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaac403, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaac403, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf71003, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0136.273] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x98ae9c2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x98ae9c2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x98ae9c2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0136.273] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15d3adab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15d3adab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d871e6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fd7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.ro.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0136.273] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15d3adab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15d3adab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d871e6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fd7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.ro.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0136.273] FindClose (in: hFindFile=0x993580 | out: hFindFile=0x993580) returned 1 [0136.274] GetProcessHeap () returned 0x8a0000 [0136.274] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0136.274] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe00baf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15d14b21, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d14b21, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0136.274] GetProcessHeap () returned 0x8a0000 [0136.274] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0136.274] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ru\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe00baf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15d14b21, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d14b21, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993780 [0136.282] FindNextFileW (in: hFindFile=0x993780, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe00baf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15d14b21, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d14b21, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.282] FindNextFileW (in: hFindFile=0x993780, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d50bdc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d50bdc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x15d3adab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0136.282] FindNextFileW (in: hFindFile=0x993780, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45d3b76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf45d3b76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf45f9db0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0136.282] FindNextFileW (in: hFindFile=0x993780, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc0e95c0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc0e95c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc21a8ad, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0136.282] FindNextFileW (in: hFindFile=0x993780, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefe00baf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefe00baf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00d5872, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0136.282] FindNextFileW (in: hFindFile=0x993780, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15d14b21, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15d14b21, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d3adab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x530d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.ru.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0136.282] FindNextFileW (in: hFindFile=0x993780, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15d14b21, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15d14b21, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d3adab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x530d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.ru.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0136.282] FindClose (in: hFindFile=0x993780 | out: hFindFile=0x993780) returned 1 [0136.283] GetProcessHeap () returned 0x8a0000 [0136.283] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0136.283] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6c6bda4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15e92299, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e92299, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0136.284] GetProcessHeap () returned 0x8a0000 [0136.284] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0136.284] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sk\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6c6bda4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15e92299, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e92299, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0136.287] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6c6bda4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15e92299, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e92299, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.287] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6c6bda4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6c6bda4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x15ede724, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4658, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0136.287] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb86af90, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb86af90, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb86af90, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13070, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0136.288] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6781ff8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6781ff8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0136.288] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x68ff786, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68ff786, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69259a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4928, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0136.288] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15e92299, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15e92299, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15eb84b3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50264, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.sk.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0136.288] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15e92299, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15e92299, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15eb84b3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50264, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.sk.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0136.288] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0136.289] GetProcessHeap () returned 0x8a0000 [0136.289] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0136.289] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b359a5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15e45dad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e45dad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0136.289] GetProcessHeap () returned 0x8a0000 [0136.289] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0136.289] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sl\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b359a5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15e45dad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e45dad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993580 [0136.297] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b359a5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15e45dad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e45dad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.297] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b359a5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b359a5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x15e92299, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4868, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0136.298] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d8c51, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42d8c51, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42d8c51, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12070, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0136.298] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd09866, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd09866, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd09866, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0136.298] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5f4ff2d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5f4ff2d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5f76153, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4940, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0136.298] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15e45dad, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15e45dad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e6c018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f8bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.sl.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0136.298] FindNextFileW (in: hFindFile=0x993580, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15e45dad, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15e45dad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e6c018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f8bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.sl.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0136.298] FindClose (in: hFindFile=0x993580 | out: hFindFile=0x993580) returned 1 [0136.299] GetProcessHeap () returned 0x8a0000 [0136.299] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0136.299] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15f04999, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15f04999, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-cyrl", cAlternateFileName="")) returned 1 [0136.299] GetProcessHeap () returned 0x8a0000 [0136.299] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0136.299] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-cyrl\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15f04999, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15f04999, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0136.310] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15f04999, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15f04999, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.310] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a2a905, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1600fa20, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc40a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0136.310] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5ab1579, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5ab1579, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0136.310] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d05722, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d05722, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d05722, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0136.310] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d50bdc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d50bdc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6d50bdc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0136.310] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15f04999, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15f04999, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15f9d2e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51f6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.sr-cyrl.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0136.310] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15f04999, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15f04999, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15f9d2e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51f6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.sr-cyrl.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0136.310] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0136.311] GetProcessHeap () returned 0x8a0000 [0136.311] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0136.312] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa879350, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x160a83ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x160a83ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-latn", cAlternateFileName="")) returned 1 [0136.312] GetProcessHeap () returned 0x8a0000 [0136.313] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0136.313] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-latn\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa879350, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x160a83ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x160a83ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0136.437] GetProcessHeap () returned 0x8a0000 [0136.437] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0136.437] GetProcessHeap () returned 0x8a0000 [0136.437] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0136.438] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-Latn-CS\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf45f9db0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15ede724, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ede724, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0136.440] GetProcessHeap () returned 0x8a0000 [0136.440] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0136.440] GetProcessHeap () returned 0x8a0000 [0136.441] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0136.441] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sv\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16035c5a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16035c5a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0136.443] GetProcessHeap () returned 0x8a0000 [0136.443] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0136.443] GetProcessHeap () returned 0x8a0000 [0136.443] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0136.443] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\th\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c66c57, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16166f59, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16166f59, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0136.446] GetProcessHeap () returned 0x8a0000 [0136.446] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0136.446] GetProcessHeap () returned 0x8a0000 [0136.446] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0136.446] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16140cde, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16140cde, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0136.450] GetProcessHeap () returned 0x8a0000 [0136.450] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0136.450] GetProcessHeap () returned 0x8a0000 [0136.450] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0136.450] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\uk\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7b9ee02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x161d962a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993780 [0136.453] GetProcessHeap () returned 0x8a0000 [0136.453] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0136.453] GetProcessHeap () returned 0x8a0000 [0136.453] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0136.453] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\vi\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf637b042, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x161d962a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993580 [0136.456] GetProcessHeap () returned 0x8a0000 [0136.456] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0136.456] GetProcessHeap () returned 0x8a0000 [0136.457] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0136.457] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHS\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4c15e5f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x163ef7bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x163ef7bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0136.459] GetProcessHeap () returned 0x8a0000 [0136.459] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0136.459] GetProcessHeap () returned 0x8a0000 [0136.459] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0136.459] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x164159c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x164159c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0136.462] GetProcessHeap () returned 0x8a0000 [0136.462] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0136.462] GetProcessHeap () returned 0x8a0000 [0136.462] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0136.462] GetProcessHeap () returned 0x8a0000 [0136.462] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0136.463] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993780 [0136.467] GetProcessHeap () returned 0x8a0000 [0136.467] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0136.467] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x163ef7bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x163ef7bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993800 [0136.471] GetProcessHeap () returned 0x8a0000 [0136.471] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0136.471] GetProcessHeap () returned 0x8a0000 [0136.471] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0136.471] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x165b9401, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x165b9401, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0136.474] GetProcessHeap () returned 0x8a0000 [0136.474] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0136.474] GetProcessHeap () returned 0x8a0000 [0136.474] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0136.474] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16605845, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16605845, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0136.578] GetProcessHeap () returned 0x8a0000 [0136.578] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0136.578] GetProcessHeap () returned 0x8a0000 [0136.579] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0136.579] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x164ae360, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0136.621] GetProcessHeap () returned 0x8a0000 [0136.621] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0136.621] GetProcessHeap () returned 0x8a0000 [0136.621] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0136.621] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16651cf9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16651cf9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b80 [0136.625] GetProcessHeap () returned 0x8a0000 [0136.625] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0136.625] GetProcessHeap () returned 0x8a0000 [0136.625] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0136.625] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf10a1263, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1662bb01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1662bb01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993580 [0136.628] GetProcessHeap () returned 0x8a0000 [0136.629] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0136.629] GetProcessHeap () returned 0x8a0000 [0136.629] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0136.629] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0136.632] GetProcessHeap () returned 0x8a0000 [0136.632] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0136.632] GetProcessHeap () returned 0x8a0000 [0136.632] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0136.632] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff580e7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0136.636] GetProcessHeap () returned 0x8a0000 [0136.636] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0136.636] GetProcessHeap () returned 0x8a0000 [0136.636] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0136.636] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0136.637] GetProcessHeap () returned 0x8a0000 [0136.637] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0136.637] GetProcessHeap () returned 0x8a0000 [0136.637] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0136.637] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993580 [0136.641] GetProcessHeap () returned 0x8a0000 [0136.641] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0136.641] GetProcessHeap () returned 0x8a0000 [0136.641] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0136.641] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1480f75, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993580 [0136.644] GetProcessHeap () returned 0x8a0000 [0136.644] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0136.644] GetProcessHeap () returned 0x8a0000 [0136.644] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0136.645] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0194432, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0136.648] GetProcessHeap () returned 0x8a0000 [0136.648] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0136.648] GetProcessHeap () returned 0x8a0000 [0136.648] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0136.648] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993800 [0136.651] GetProcessHeap () returned 0x8a0000 [0136.651] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0136.651] GetProcessHeap () returned 0x8a0000 [0136.651] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0136.651] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf458770a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993580 [0136.655] GetProcessHeap () returned 0x8a0000 [0136.655] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0136.655] GetProcessHeap () returned 0x8a0000 [0136.655] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0136.655] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf05741b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0136.849] GetProcessHeap () returned 0x8a0000 [0136.849] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0136.849] GetProcessHeap () returned 0x8a0000 [0136.850] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0136.850] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0136.881] GetProcessHeap () returned 0x8a0000 [0136.881] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0136.881] GetProcessHeap () returned 0x8a0000 [0136.881] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0136.881] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0136.890] GetProcessHeap () returned 0x8a0000 [0136.890] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0136.890] GetProcessHeap () returned 0x8a0000 [0136.890] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0136.890] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0f23aa6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0136.893] GetProcessHeap () returned 0x8a0000 [0136.893] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0136.893] GetProcessHeap () returned 0x8a0000 [0136.893] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0136.893] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe4d066, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0136.896] GetProcessHeap () returned 0x8a0000 [0136.896] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0136.896] GetProcessHeap () returned 0x8a0000 [0136.896] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0136.896] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf158c060, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993580 [0136.899] GetProcessHeap () returned 0x8a0000 [0136.899] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0136.899] GetProcessHeap () returned 0x8a0000 [0136.899] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0136.899] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1bce2f5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0136.902] GetProcessHeap () returned 0x8a0000 [0136.902] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0136.902] GetProcessHeap () returned 0x8a0000 [0136.902] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0136.902] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0136.905] GetProcessHeap () returned 0x8a0000 [0136.905] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0136.905] GetProcessHeap () returned 0x8a0000 [0136.905] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0136.905] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0136.908] GetProcessHeap () returned 0x8a0000 [0136.908] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0136.908] GetProcessHeap () returned 0x8a0000 [0136.908] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0136.908] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ko\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe4d066, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993800 [0136.911] GetProcessHeap () returned 0x8a0000 [0136.911] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0136.911] GetProcessHeap () returned 0x8a0000 [0136.911] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0136.911] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lt\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0136.914] GetProcessHeap () returned 0x8a0000 [0136.914] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0136.914] GetProcessHeap () returned 0x8a0000 [0136.914] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0136.914] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lv\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf10a1263, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0136.917] GetProcessHeap () returned 0x8a0000 [0136.917] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0136.918] GetProcessHeap () returned 0x8a0000 [0136.918] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0136.918] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ms\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0136.921] GetProcessHeap () returned 0x8a0000 [0136.921] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0136.921] GetProcessHeap () returned 0x8a0000 [0136.921] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0136.921] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\nl\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03d07a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167f56e9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0137.031] GetProcessHeap () returned 0x8a0000 [0137.031] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0137.031] GetProcessHeap () returned 0x8a0000 [0137.031] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0137.031] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\no\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf45d3b76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0137.034] GetProcessHeap () returned 0x8a0000 [0137.034] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0137.034] GetProcessHeap () returned 0x8a0000 [0137.034] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0137.034] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pl\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0137.038] GetProcessHeap () returned 0x8a0000 [0137.038] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0137.038] GetProcessHeap () returned 0x8a0000 [0137.038] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0137.038] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0137.041] GetProcessHeap () returned 0x8a0000 [0137.041] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0137.041] GetProcessHeap () returned 0x8a0000 [0137.041] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0137.041] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt-PT\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe00baf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0137.044] GetProcessHeap () returned 0x8a0000 [0137.044] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0137.044] GetProcessHeap () returned 0x8a0000 [0137.044] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0137.044] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88e2fa3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x88e2fa3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993700 [0137.046] GetProcessHeap () returned 0x8a0000 [0137.046] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0137.047] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1025\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf145ad52, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf145ad52, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf145ad52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b80 [0137.048] GetProcessHeap () returned 0x8a0000 [0137.048] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0137.048] GetProcessHeap () returned 0x8a0000 [0137.048] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0137.048] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1026\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefee59ce, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefee59ce, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0137.048] GetProcessHeap () returned 0x8a0000 [0137.048] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0137.048] GetProcessHeap () returned 0x8a0000 [0137.048] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0137.048] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\10266\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1755c61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1755c61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1755c61, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993580 [0137.049] GetProcessHeap () returned 0x8a0000 [0137.049] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0137.049] GetProcessHeap () returned 0x8a0000 [0137.049] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0137.049] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1027\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4266542, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4266542, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4266542, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0137.050] GetProcessHeap () returned 0x8a0000 [0137.050] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0137.050] GetProcessHeap () returned 0x8a0000 [0137.050] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0137.050] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1028\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffd42fe2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd42fe2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffd42fe2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0137.051] GetProcessHeap () returned 0x8a0000 [0137.051] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0137.051] GetProcessHeap () returned 0x8a0000 [0137.051] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0137.051] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1029\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf632eb9d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf632eb9d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf632eb9d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0137.052] GetProcessHeap () returned 0x8a0000 [0137.052] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0137.052] GetProcessHeap () returned 0x8a0000 [0137.052] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0137.052] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1030\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaf7a22a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf7a22a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaf7a22a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0137.053] GetProcessHeap () returned 0x8a0000 [0137.053] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0137.053] GetProcessHeap () returned 0x8a0000 [0137.053] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0137.053] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1031\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x633d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0137.054] GetProcessHeap () returned 0x8a0000 [0137.054] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0137.054] GetProcessHeap () returned 0x8a0000 [0137.054] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0137.054] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1032\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e6a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x51e6a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x51e6a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993900 [0137.055] GetProcessHeap () returned 0x8a0000 [0137.055] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0137.055] GetProcessHeap () returned 0x8a0000 [0137.055] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0137.055] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1033\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42d8c51, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42fef17, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42fef17, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0137.056] GetProcessHeap () returned 0x8a0000 [0137.056] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0137.056] GetProcessHeap () returned 0x8a0000 [0137.056] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0137.056] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1035\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a56cbe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a7cf13, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0137.057] GetProcessHeap () returned 0x8a0000 [0137.057] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0137.057] GetProcessHeap () returned 0x8a0000 [0137.057] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0137.057] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1036\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa911c96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa911c96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa911c96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0137.058] GetProcessHeap () returned 0x8a0000 [0137.058] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0137.058] GetProcessHeap () returned 0x8a0000 [0137.058] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0137.058] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1037\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67a8250, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67a8250, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0137.059] GetProcessHeap () returned 0x8a0000 [0137.059] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0137.059] GetProcessHeap () returned 0x8a0000 [0137.059] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0137.059] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1038\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88e2fa3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x88e2fa3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x88e2fa3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0137.060] GetProcessHeap () returned 0x8a0000 [0137.060] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0137.060] GetProcessHeap () returned 0x8a0000 [0137.060] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0137.060] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1040\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x381f2dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x381f2dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0137.061] GetProcessHeap () returned 0x8a0000 [0137.061] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0137.062] GetProcessHeap () returned 0x8a0000 [0137.062] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0137.062] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1041\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6355df6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0137.062] GetProcessHeap () returned 0x8a0000 [0137.062] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0137.062] GetProcessHeap () returned 0x8a0000 [0137.063] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0137.063] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1042\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf048f354, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf048f354, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf048f354, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b80 [0137.063] GetProcessHeap () returned 0x8a0000 [0137.063] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0137.063] GetProcessHeap () returned 0x8a0000 [0137.063] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0137.063] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1043\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x303975a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993900 [0137.066] GetProcessHeap () returned 0x8a0000 [0137.066] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0137.066] GetProcessHeap () returned 0x8a0000 [0137.066] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0137.066] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1044\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf61d7668, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0137.067] GetProcessHeap () returned 0x8a0000 [0137.067] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0137.067] GetProcessHeap () returned 0x8a0000 [0137.067] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0137.067] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1045\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2ebae3b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2ebae3b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993580 [0137.067] GetProcessHeap () returned 0x8a0000 [0137.067] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0137.067] GetProcessHeap () returned 0x8a0000 [0137.067] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0137.067] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1046\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1887f3e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1887f3e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1887f3e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0137.151] GetProcessHeap () returned 0x8a0000 [0137.151] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0137.151] GetProcessHeap () returned 0x8a0000 [0137.151] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0137.151] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1048\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5a8a2df, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a8a2df, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a8a2df, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0137.152] GetProcessHeap () returned 0x8a0000 [0137.152] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0137.152] GetProcessHeap () returned 0x8a0000 [0137.152] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0137.152] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1049\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b87f8e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b87f8e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b87f8e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993580 [0137.153] GetProcessHeap () returned 0x8a0000 [0137.153] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0137.153] GetProcessHeap () returned 0x8a0000 [0137.153] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0137.153] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1050\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfcc62b13, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcc62b13, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcc62b13, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0137.154] GetProcessHeap () returned 0x8a0000 [0137.154] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0137.154] GetProcessHeap () returned 0x8a0000 [0137.154] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0137.154] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1051\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x303975a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993580 [0137.155] GetProcessHeap () returned 0x8a0000 [0137.155] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0137.155] GetProcessHeap () returned 0x8a0000 [0137.155] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0137.155] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1053\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6bd3439, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6bd3439, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6bd3439, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0137.157] GetProcessHeap () returned 0x8a0000 [0137.157] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0137.157] GetProcessHeap () returned 0x8a0000 [0137.157] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0137.157] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1054\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf443017d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf443017d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf443017d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993580 [0137.159] GetProcessHeap () returned 0x8a0000 [0137.159] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0137.159] GetProcessHeap () returned 0x8a0000 [0137.159] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0137.159] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1055\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0089415, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0089415, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0137.159] GetProcessHeap () returned 0x8a0000 [0137.159] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0137.159] GetProcessHeap () returned 0x8a0000 [0137.159] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0137.159] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1057\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0137.161] GetProcessHeap () returned 0x8a0000 [0137.161] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0137.161] GetProcessHeap () returned 0x8a0000 [0137.161] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0137.161] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1058\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993800 [0137.161] GetProcessHeap () returned 0x8a0000 [0137.162] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0137.162] GetProcessHeap () returned 0x8a0000 [0137.162] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0137.162] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1060\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf99b89f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99b89f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99b89f6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0137.165] GetProcessHeap () returned 0x8a0000 [0137.165] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0137.165] GetProcessHeap () returned 0x8a0000 [0137.165] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0137.165] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1061\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc2d943c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2d943c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2d943c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0137.166] GetProcessHeap () returned 0x8a0000 [0137.166] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0137.166] GetProcessHeap () returned 0x8a0000 [0137.166] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0137.166] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1062\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1992fb3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992fb3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992fb3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0137.170] GetProcessHeap () returned 0x8a0000 [0137.170] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0137.170] GetProcessHeap () returned 0x8a0000 [0137.170] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0137.170] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1063\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56853a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993900 [0137.176] GetProcessHeap () returned 0x8a0000 [0137.176] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0137.176] GetProcessHeap () returned 0x8a0000 [0137.176] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0137.176] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1066\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80d6078, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0137.177] GetProcessHeap () returned 0x8a0000 [0137.177] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0137.177] GetProcessHeap () returned 0x8a0000 [0137.178] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0137.178] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1069\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffe01c35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffe01c35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffe01c35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0137.179] GetProcessHeap () returned 0x8a0000 [0137.179] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0137.179] GetProcessHeap () returned 0x8a0000 [0137.179] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0137.179] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1081\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5afc9d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5afc9d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5afc9d3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993580 [0137.181] GetProcessHeap () returned 0x8a0000 [0137.181] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0137.181] GetProcessHeap () returned 0x8a0000 [0137.181] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0137.181] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1086\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a2268a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7abb0bc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7abb0bc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0137.186] GetProcessHeap () returned 0x8a0000 [0137.186] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0137.187] GetProcessHeap () returned 0x8a0000 [0137.187] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0137.187] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1087\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6355df6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993580 [0137.192] GetProcessHeap () returned 0x8a0000 [0137.192] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0137.192] GetProcessHeap () returned 0x8a0000 [0137.192] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0137.192] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1110\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf61fd8b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0137.193] GetProcessHeap () returned 0x8a0000 [0137.193] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0137.193] GetProcessHeap () returned 0x8a0000 [0137.193] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0137.193] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2052\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc47ce76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc47ce76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc47ce76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0137.194] GetProcessHeap () returned 0x8a0000 [0137.194] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0137.194] GetProcessHeap () returned 0x8a0000 [0137.194] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0137.194] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2070\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c40a24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c40a24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c40a24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0137.195] GetProcessHeap () returned 0x8a0000 [0137.195] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0137.195] GetProcessHeap () returned 0x8a0000 [0137.195] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0137.195] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2074\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993580 [0137.195] GetProcessHeap () returned 0x8a0000 [0137.195] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0137.195] GetProcessHeap () returned 0x8a0000 [0137.196] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0137.196] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\3082\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0137.196] GetProcessHeap () returned 0x8a0000 [0137.196] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0137.196] GetProcessHeap () returned 0x8a0000 [0137.196] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0137.197] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\9242\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67ce4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67ce4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67ce4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b80 [0137.204] GetProcessHeap () returned 0x8a0000 [0137.204] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0137.204] GetProcessHeap () returned 0x8a0000 [0137.204] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0137.205] GetProcessHeap () returned 0x8a0000 [0137.205] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0137.205] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ro\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0137.214] GetProcessHeap () returned 0x8a0000 [0137.214] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0137.214] GetProcessHeap () returned 0x8a0000 [0137.214] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a80050 [0137.214] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ru\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993580 [0137.224] GetProcessHeap () returned 0x8a0000 [0137.224] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a80050 | out: hHeap=0x8a0000) returned 1 [0137.224] GetProcessHeap () returned 0x8a0000 [0137.224] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0137.225] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sk\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff580e7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0137.228] GetProcessHeap () returned 0x8a0000 [0137.228] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0137.228] GetProcessHeap () returned 0x8a0000 [0137.228] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0137.228] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sl\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe99511, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0137.244] GetProcessHeap () returned 0x8a0000 [0137.244] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0137.244] GetProcessHeap () returned 0x8a0000 [0137.244] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0137.244] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-cyrl\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b5bbeb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0137.358] GetProcessHeap () returned 0x8a0000 [0137.358] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0137.358] GetProcessHeap () returned 0x8a0000 [0137.358] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0137.358] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-latn\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0137.361] GetProcessHeap () returned 0x8a0000 [0137.361] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0137.362] GetProcessHeap () returned 0x8a0000 [0137.362] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0137.362] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-Latn-CS\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0137.364] GetProcessHeap () returned 0x8a0000 [0137.364] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0137.364] GetProcessHeap () returned 0x8a0000 [0137.364] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0137.364] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sv\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02eb98a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993900 [0137.367] GetProcessHeap () returned 0x8a0000 [0137.367] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0137.367] GetProcessHeap () returned 0x8a0000 [0137.367] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0137.368] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\th\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefebf763, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993900 [0137.371] GetProcessHeap () returned 0x8a0000 [0137.371] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0137.371] GetProcessHeap () returned 0x8a0000 [0137.371] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0137.371] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tr\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c40a24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16867e02, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16867e02, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0137.373] GetProcessHeap () returned 0x8a0000 [0137.373] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0137.374] GetProcessHeap () returned 0x8a0000 [0137.374] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0137.374] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\uk\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1565dae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0137.376] GetProcessHeap () returned 0x8a0000 [0137.376] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0137.377] GetProcessHeap () returned 0x8a0000 [0137.377] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0137.377] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\vi\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf164abda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0137.380] GetProcessHeap () returned 0x8a0000 [0137.380] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0137.380] GetProcessHeap () returned 0x8a0000 [0137.380] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0137.380] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHS\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefebf763, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0137.383] GetProcessHeap () returned 0x8a0000 [0137.383] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0137.383] GetProcessHeap () returned 0x8a0000 [0137.383] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0137.383] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHT\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0137.386] GetProcessHeap () returned 0x8a0000 [0137.386] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0137.386] GetProcessHeap () returned 0x8a0000 [0137.386] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0137.387] GetProcessHeap () returned 0x8a0000 [0137.387] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0137.387] GetProcessHeap () returned 0x8a0000 [0137.387] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0137.387] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2ad8211, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x17728794, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17728794, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0137.389] GetProcessHeap () returned 0x8a0000 [0137.390] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0137.390] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x176dc2d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17774bfd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17774bfd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0137.391] GetProcessHeap () returned 0x8a0000 [0137.391] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0137.391] GetProcessHeap () returned 0x8a0000 [0137.391] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0137.391] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2ad8211, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc38b3c05, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc3bd4d47, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993900 [0137.394] GetProcessHeap () returned 0x8a0000 [0137.394] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0137.394] GetProcessHeap () returned 0x8a0000 [0137.394] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0137.394] GetProcessHeap () returned 0x8a0000 [0137.395] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0137.395] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x17774bfd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17774bfd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0137.505] GetProcessHeap () returned 0x8a0000 [0137.505] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0137.506] GetProcessHeap () returned 0x8a0000 [0137.506] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0137.506] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1774e9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1774e9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0137.509] GetProcessHeap () returned 0x8a0000 [0137.509] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0137.511] GetProcessHeap () returned 0x8a0000 [0137.511] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0137.511] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec4ee541, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0137.513] GetProcessHeap () returned 0x8a0000 [0137.513] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0137.513] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec4ee541, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf477755d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4cd4a32, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993800 [0137.519] GetProcessHeap () returned 0x8a0000 [0137.519] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0137.519] GetProcessHeap () returned 0x8a0000 [0137.519] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0137.520] GetProcessHeap () returned 0x8a0000 [0137.520] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0137.520] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d9058b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993900 [0137.523] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d9058b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.523] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d9058b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0137.524] GetProcessHeap () returned 0x8a0000 [0137.524] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0137.524] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\1033\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d9058b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0137.524] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d9058b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.524] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4db6809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16", cAlternateFileName="")) returned 1 [0137.524] GetProcessHeap () returned 0x8a0000 [0137.524] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0137.525] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\1033\\16\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4db6809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993780 [0137.525] FindNextFileW (in: hFindFile=0x993780, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4db6809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.525] FindNextFileW (in: hFindFile=0x993780, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc4db6809, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4db6809, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4db6809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x388cc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Built-In Building Blocks.dotx", cAlternateFileName="BUILT-~1.DOT")) returned 1 [0137.525] FindNextFileW (in: hFindFile=0x993780, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc4db6809, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4db6809, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4db6809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x388cc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Built-In Building Blocks.dotx", cAlternateFileName="BUILT-~1.DOT")) returned 0 [0137.525] FindClose (in: hFindFile=0x993780 | out: hFindFile=0x993780) returned 1 [0137.525] GetProcessHeap () returned 0x8a0000 [0137.525] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0137.525] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4db6809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16", cAlternateFileName="")) returned 0 [0137.526] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0137.526] GetProcessHeap () returned 0x8a0000 [0137.526] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0137.527] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d9058b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0137.527] FindClose (in: hFindFile=0x993900 | out: hFindFile=0x993900) returned 1 [0137.527] GetProcessHeap () returned 0x8a0000 [0137.527] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0137.527] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4d40834, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x17dec0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="DRILLDWN.DLL", cAlternateFileName="")) returned 1 [0137.527] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x3e7feda, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x344a8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="DWGCNV.DLL", cAlternateFileName="")) returned 1 [0137.527] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4e2564e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x899050, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="DWGDP.DLL", cAlternateFileName="")) returned 1 [0137.527] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1beddbb, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1beddbb, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1beddbb, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x374a8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ELECTRICAL.VSL", cAlternateFileName="ELECTR~1.VSL")) returned 1 [0137.527] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb6c7584, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x25cc8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="EMABLT32.DLL", cAlternateFileName="")) returned 1 [0137.527] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc7c80c48, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc7c80c48, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdb141e15, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5d10a0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="EMSMDB32.DLL", cAlternateFileName="")) returned 1 [0137.527] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x17d4481d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10860, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="EntityDataHandler.dll", cAlternateFileName="ENTITY~1.DLL")) returned 1 [0137.527] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x17d4481d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50a60, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="EntityPicker.dll", cAlternateFileName="ENTITY~2.DLL")) returned 1 [0137.527] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x4cfbc75, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ac68, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ENVELOPE.DLL", cAlternateFileName="")) returned 1 [0137.527] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc2fe923e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd4264503, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd52eea7d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x20d8840, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="EXCEL.EXE", cAlternateFileName="")) returned 1 [0137.527] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc54b7686, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc54b7686, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc54dd8eb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x61f, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="excel.exe.manifest", cAlternateFileName="EXCELE~1.MAN")) returned 1 [0137.527] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x17d4481d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="EXCEL.VisualElementsManifest.xml", cAlternateFileName="EXCELV~1.XML")) returned 1 [0137.528] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe1c8beb8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee3a0b07, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd8e49f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1cc72a0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="excelcnv.exe", cAlternateFileName="")) returned 1 [0137.528] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe238cd90, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe238cd90, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe24be028, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x62c, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="excelcnv.exe.manifest", cAlternateFileName="EXCELC~1.MAN")) returned 1 [0137.528] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x16440, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="excelcnvpxy.dll", cAlternateFileName="EXCELC~1.DLL")) returned 1 [0137.528] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x17d4481d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x67030, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="EXSEC32.DLL", cAlternateFileName="")) returned 1 [0137.528] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x17d1e5ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1469b, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ExtensibleApp.xap", cAlternateFileName="EXTENS~1.XAP")) returned 1 [0137.528] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4dd9107, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x16da48, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="FACILITY.DLL", cAlternateFileName="")) returned 1 [0137.528] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a3de35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2ccc0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="FilterModule.dll", cAlternateFileName="FILTER~1.DLL")) returned 1 [0137.534] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2497e17, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2497e17, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2687c83, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc5640, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="FIRSTRUN.EXE", cAlternateFileName="")) returned 1 [0137.534] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x190c9cfa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="FIRSTRUN.VisualElementsManifest.xml", cAlternateFileName="FIRSTR~1.XML")) returned 1 [0137.534] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca90ec5a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca90ec5a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="FORMS", cAlternateFileName="")) returned 1 [0137.534] GetProcessHeap () returned 0x8a0000 [0137.534] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0137.534] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca90ec5a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca90ec5a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0137.535] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca90ec5a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca90ec5a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.535] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb548de7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff0bc27, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0137.535] GetProcessHeap () returned 0x8a0000 [0137.535] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0137.536] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb548de7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff0bc27, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0137.539] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb548de7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff0bc27, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.544] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca90ec5a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb7cf588, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACTIVITL.ICO", cAlternateFileName="")) returned 1 [0137.544] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca90ec5a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb43bdd5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACTIVITS.ICO", cAlternateFileName="")) returned 1 [0137.544] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca90ec5a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb7cf588, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACTIVITY.CFG", cAlternateFileName="")) returned 1 [0137.544] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca90ec5a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb43bdd5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x315, dwReserved0=0x0, dwReserved1=0x0, cFileName="APPT.CFG", cAlternateFileName="")) returned 1 [0137.544] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca90ec5a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb7cf588, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="APPTL.ICO", cAlternateFileName="")) returned 1 [0137.544] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca90ec5a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb7cf588, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="APPTS.ICO", cAlternateFileName="")) returned 1 [0137.544] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca90ec5a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb43bdd5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x140, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNFNOT.CFG", cAlternateFileName="")) returned 1 [0137.544] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb43bdd5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNFNOT.ICO", cAlternateFileName="")) returned 1 [0137.545] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb7cf588, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb7cf588, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb7cf588, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNFRES.CFG", cAlternateFileName="")) returned 1 [0137.545] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb43bdd5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONFLICT.ICO", cAlternateFileName="")) returned 1 [0137.545] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb7a9345, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb7a9345, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb7cf588, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x30f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTACT.CFG", cAlternateFileName="")) returned 1 [0137.545] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb43bdd5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTACTL.ICO", cAlternateFileName="")) returned 1 [0137.545] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb43bdd5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTACTS.ICO", cAlternateFileName="")) returned 1 [0137.545] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb7cf588, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb7cf588, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb7cf588, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x325, dwReserved0=0x0, dwReserved1=0x0, cFileName="DISTLIST.CFG", cAlternateFileName="")) returned 1 [0137.545] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb7a9345, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb7a9345, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb7cf588, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="DISTLSTL.ICO", cAlternateFileName="")) returned 1 [0137.545] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb7cf588, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb7cf588, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb7cf588, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DISTLSTS.ICO", cAlternateFileName="")) returned 1 [0137.545] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb7cf588, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb7cf588, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb7cf588, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOC.CFG", cAlternateFileName="")) returned 1 [0137.545] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb7a9345, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb7a9345, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb7cf588, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOCL.ICO", cAlternateFileName="")) returned 1 [0137.545] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb43bdd5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOCS.ICO", cAlternateFileName="")) returned 1 [0137.545] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb7a9345, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb7a9345, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb7cf588, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x346, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXITEM.CFG", cAlternateFileName="")) returned 1 [0137.545] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb548de7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb548de7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb5e174f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXITEML.ICO", cAlternateFileName="")) returned 1 [0137.545] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff0bc27, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff0bc27, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXITEMS.ICO", cAlternateFileName="")) returned 1 [0137.545] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb7a9345, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb7a9345, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb7a9345, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x268, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOMAIL.CFG", cAlternateFileName="")) returned 1 [0137.546] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb7a9345, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb7a9345, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb7a9345, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOML.ICO", cAlternateFileName="")) returned 1 [0137.546] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb43bdd5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOMS.ICO", cAlternateFileName="")) returned 1 [0137.546] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb7a9345, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb7a9345, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb7a9345, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x31b, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPM.CFG", cAlternateFileName="")) returned 1 [0137.546] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb7a9345, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb7a9345, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb7a9345, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPML.ICO", cAlternateFileName="")) returned 1 [0137.546] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb43bdd5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPMS.ICO", cAlternateFileName="")) returned 1 [0137.546] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb43bdd5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="MMSL.ICO", cAlternateFileName="")) returned 1 [0137.546] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8be, dwReserved0=0x0, dwReserved1=0x0, cFileName="MMSS.ICO", cAlternateFileName="")) returned 1 [0137.546] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x30d, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOTE.CFG", cAlternateFileName="")) returned 1 [0137.546] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOTEL.ICO", cAlternateFileName="")) returned 1 [0137.546] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb43bdd5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOTES.ICO", cAlternateFileName="")) returned 1 [0137.546] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb43bdd5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x267, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSMMS.CFG", cAlternateFileName="")) returned 1 [0137.546] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb43bdd5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x25b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSSMS.CFG", cAlternateFileName="")) returned 1 [0137.553] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb43bdd5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="OOFL.ICO", cAlternateFileName="")) returned 1 [0137.553] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb43bdd5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="OOFS.ICO", cAlternateFileName="")) returned 1 [0137.553] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb43bdd5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x33c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OOFTMPL.CFG", cAlternateFileName="")) returned 1 [0137.553] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb43bdd5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x309, dwReserved0=0x0, dwReserved1=0x0, cFileName="POST.CFG", cAlternateFileName="")) returned 1 [0137.553] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x309, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTIT.CFG", cAlternateFileName="")) returned 1 [0137.553] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTITL.ICO", cAlternateFileName="")) returned 1 [0137.553] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTITS.ICO", cAlternateFileName="")) returned 1 [0137.553] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTL.ICO", cAlternateFileName="")) returned 1 [0137.553] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTS.ICO", cAlternateFileName="")) returned 1 [0137.553] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x328, dwReserved0=0x0, dwReserved1=0x0, cFileName="RCLRPT.CFG", cAlternateFileName="")) returned 1 [0137.553] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x651, dwReserved0=0x0, dwReserved1=0x0, cFileName="REC.CFG", cAlternateFileName="")) returned 1 [0137.553] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECL.ICO", cAlternateFileName="")) returned 1 [0137.554] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECS.ICO", cAlternateFileName="")) returned 1 [0137.554] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x30b, dwReserved0=0x0, dwReserved1=0x0, cFileName="REMOTE.CFG", cAlternateFileName="")) returned 1 [0137.554] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="REMOTEL.ICO", cAlternateFileName="")) returned 1 [0137.554] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="REMOTES.ICO", cAlternateFileName="")) returned 1 [0137.554] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x33a, dwReserved0=0x0, dwReserved1=0x0, cFileName="REPLTMPL.CFG", cAlternateFileName="")) returned 1 [0137.554] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x30d, dwReserved0=0x0, dwReserved1=0x0, cFileName="REPORT.CFG", cAlternateFileName="")) returned 1 [0137.554] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="REPORTL.ICO", cAlternateFileName="")) returned 1 [0137.554] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="REPORTS.ICO", cAlternateFileName="")) returned 1 [0137.554] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x30b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RESEND.CFG", cAlternateFileName="")) returned 1 [0137.554] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="RESENDL.ICO", cAlternateFileName="")) returned 1 [0137.554] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="RESENDS.ICO", cAlternateFileName="")) returned 1 [0137.554] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x314, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSITEM.CFG", cAlternateFileName="")) returned 1 [0137.554] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4881c8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4881c8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4881c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSITEML.ICO", cAlternateFileName="")) returned 1 [0137.554] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4881c8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4881c8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4881c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSITEMS.ICO", cAlternateFileName="")) returned 1 [0137.554] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4881c8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4881c8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4881c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDCNCLL.ICO", cAlternateFileName="")) returned 1 [0137.555] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4881c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDCNCLS.ICO", cAlternateFileName="")) returned 1 [0137.555] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4881c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDREQL.ICO", cAlternateFileName="")) returned 1 [0137.555] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDREQS.ICO", cAlternateFileName="")) returned 1 [0137.555] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4881c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESNL.ICO", cAlternateFileName="")) returned 1 [0137.555] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4881c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESNS.ICO", cAlternateFileName="")) returned 1 [0137.555] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESPL.ICO", cAlternateFileName="")) returned 1 [0137.555] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESPS.ICO", cAlternateFileName="")) returned 1 [0137.556] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4881c8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4881c8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESTL.ICO", cAlternateFileName="")) returned 1 [0137.556] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4881c8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4881c8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4881c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESTS.ICO", cAlternateFileName="")) returned 1 [0137.556] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4881c8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4881c8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x335, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHDCNCL.CFG", cAlternateFileName="")) returned 1 [0137.556] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4881c8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4881c8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4881c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4af, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHDREQ.CFG", cAlternateFileName="")) returned 1 [0137.557] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4881c8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4881c8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4881c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x343, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHDRESN.CFG", cAlternateFileName="")) returned 1 [0137.557] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4881c8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4881c8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4881c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x341, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHDRESP.CFG", cAlternateFileName="")) returned 1 [0137.557] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4881c8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4881c8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4881c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x348, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHDREST.CFG", cAlternateFileName="")) returned 1 [0137.557] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4881c8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4881c8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4881c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x298, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECREC.CFG", cAlternateFileName="")) returned 1 [0137.557] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4881c8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4881c8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4881c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECRECL.ICO", cAlternateFileName="")) returned 1 [0137.557] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4881c8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4881c8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4881c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECRECS.ICO", cAlternateFileName="")) returned 1 [0137.557] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x287, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECURE.CFG", cAlternateFileName="")) returned 1 [0137.557] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECURL.ICO", cAlternateFileName="")) returned 1 [0137.557] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECURS.ICO", cAlternateFileName="")) returned 1 [0137.557] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x303, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHARING.CFG", cAlternateFileName="")) returned 1 [0137.557] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x298, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGN.CFG", cAlternateFileName="")) returned 1 [0137.557] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4881c8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4881c8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGNL.ICO", cAlternateFileName="")) returned 1 [0137.557] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGNS.ICO", cAlternateFileName="")) returned 1 [0137.557] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMIMEE.CFG", cAlternateFileName="")) returned 1 [0137.558] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4881c8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4881c8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x29c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMIMES.CFG", cAlternateFileName="")) returned 1 [0137.558] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4881c8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4881c8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMSL.ICO", cAlternateFileName="")) returned 1 [0137.558] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4d4679, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8be, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMSS.ICO", cAlternateFileName="")) returned 1 [0137.558] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4d4679, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x300, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASK.CFG", cAlternateFileName="")) returned 1 [0137.558] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4d4679, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKACC.CFG", cAlternateFileName="")) returned 1 [0137.558] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKACCL.ICO", cAlternateFileName="")) returned 1 [0137.558] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKACCS.ICO", cAlternateFileName="")) returned 1 [0137.558] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKDEC.CFG", cAlternateFileName="")) returned 1 [0137.558] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKDECL.ICO", cAlternateFileName="")) returned 1 [0137.558] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKDECS.ICO", cAlternateFileName="")) returned 1 [0137.558] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKL.ICO", cAlternateFileName="")) returned 1 [0137.558] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x31d, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKREQ.CFG", cAlternateFileName="")) returned 1 [0137.558] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4d4679, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKREQL.ICO", cAlternateFileName="")) returned 1 [0137.558] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4d4679, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4d4679, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4fa8f4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKREQS.ICO", cAlternateFileName="")) returned 1 [0137.558] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4d4679, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKS.ICO", cAlternateFileName="")) returned 1 [0137.559] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4d4679, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4d4679, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4d4679, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKUPD.CFG", cAlternateFileName="")) returned 1 [0137.559] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4d4679, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4d4679, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4d4679, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKUPD.CFG", cAlternateFileName="")) returned 0 [0137.559] FindClose (in: hFindFile=0x9937c0 | out: hFindFile=0x9937c0) returned 1 [0137.559] GetProcessHeap () returned 0x8a0000 [0137.559] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0137.559] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb548de7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff0bc27, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0137.560] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0137.560] GetProcessHeap () returned 0x8a0000 [0137.560] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0137.561] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4dd9107, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x15f450, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="GANTT.DLL", cAlternateFileName="")) returned 1 [0137.561] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x18b202d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x701c60, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="GKExcel.dll", cAlternateFileName="")) returned 1 [0137.561] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x17ff3259, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x485ec0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="GKPowerPoint.dll", cAlternateFileName="GKPOWE~1.DLL")) returned 1 [0137.561] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x18afa0b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x528860, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="GKWord.dll", cAlternateFileName="")) returned 1 [0137.561] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2366bd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef8a36d6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xef93c032, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x574260, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="GRAPH.EXE", cAlternateFileName="")) returned 1 [0137.561] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2661a3d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2661a3d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2877b8a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x530, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Graph.exe.manifest", cAlternateFileName="GRAPHE~1.MAN")) returned 1 [0137.561] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0063153, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2fe, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="GRAPH.ICO", cAlternateFileName="")) returned 1 [0137.561] FindNextFileW (in: hFindFile=0x993740, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x197a4903, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Groove", cAlternateFileName="")) returned 1 [0137.561] GetProcessHeap () returned 0x8a0000 [0137.561] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0137.561] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x197a4903, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0137.723] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x197a4903, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.723] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17ff3259, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x186355ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x186355ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Certificates", cAlternateFileName="CERTIF~1")) returned 1 [0137.723] GetProcessHeap () returned 0x8a0000 [0137.723] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0137.723] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17ff3259, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x186355ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x186355ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993900 [0137.747] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17ff3259, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x186355ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x186355ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.747] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="groove.net", cAlternateFileName="")) returned 1 [0137.747] GetProcessHeap () returned 0x8a0000 [0137.747] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0137.749] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993780 [0137.776] FindNextFileW (in: hFindFile=0x993780, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.776] FindNextFileW (in: hFindFile=0x993780, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18aadbcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18aadbcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18aadbcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Components", cAlternateFileName="COMPON~1")) returned 1 [0137.776] GetProcessHeap () returned 0x8a0000 [0137.776] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0137.776] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Components\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18aadbcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18aadbcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18aadbcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0137.777] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18aadbcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18aadbcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18aadbcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.777] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18aadbcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18aadbcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2de, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignedComponents.cer", cAlternateFileName="SIGNED~1.CER")) returned 1 [0137.777] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18aadbcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18aadbcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2de, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignedComponents.cer", cAlternateFileName="SIGNED~1.CER")) returned 0 [0137.777] FindClose (in: hFindFile=0x9939c0 | out: hFindFile=0x9939c0) returned 1 [0137.777] GetProcessHeap () returned 0x8a0000 [0137.778] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0137.778] FindNextFileW (in: hFindFile=0x993780, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b0f9971, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ManagedObjects", cAlternateFileName="MANAGE~1")) returned 1 [0137.778] GetProcessHeap () returned 0x8a0000 [0137.778] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0137.778] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\ManagedObjects\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b0f9971, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0137.780] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b0f9971, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.780] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b0f9971, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignedManagedObjects.cer", cAlternateFileName="SIGNED~1.CER")) returned 1 [0137.780] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b0f9971, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignedManagedObjects.cer", cAlternateFileName="SIGNED~1.CER")) returned 0 [0137.780] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0137.781] GetProcessHeap () returned 0x8a0000 [0137.781] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0137.781] FindNextFileW (in: hFindFile=0x993780, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18681a5c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18681a5c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Servers", cAlternateFileName="")) returned 1 [0137.781] GetProcessHeap () returned 0x8a0000 [0137.781] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0137.781] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Servers\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18681a5c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18681a5c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0137.781] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18681a5c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18681a5c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.781] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18681a5c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18681a5c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Management.cer", cAlternateFileName="MANAGE~1.CER")) returned 1 [0137.781] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x186355ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3de, dwReserved0=0x0, dwReserved1=0x0, cFileName="RELAY.CER", cAlternateFileName="")) returned 1 [0137.781] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x186355ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3de, dwReserved0=0x0, dwReserved1=0x0, cFileName="RELAY.CER", cAlternateFileName="")) returned 0 [0137.781] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0137.781] GetProcessHeap () returned 0x8a0000 [0137.781] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0137.781] FindNextFileW (in: hFindFile=0x993780, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18681a5c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18681a5c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Servers", cAlternateFileName="")) returned 0 [0137.781] FindClose (in: hFindFile=0x993780 | out: hFindFile=0x993780) returned 1 [0137.781] GetProcessHeap () returned 0x8a0000 [0137.781] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0137.782] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1865b8d4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1865b8d4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verisign", cAlternateFileName="")) returned 1 [0137.782] GetProcessHeap () returned 0x8a0000 [0137.782] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0137.783] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1865b8d4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1865b8d4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0137.783] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1865b8d4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1865b8d4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.783] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1865b8d4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Components", cAlternateFileName="COMPON~1")) returned 1 [0137.783] GetProcessHeap () returned 0x8a0000 [0137.783] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0137.783] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\Components\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1865b8d4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0137.791] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1865b8d4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.791] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b0f9971, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="VeriSign_Class_3_Code_Signing_2001-4_CA.cer", cAlternateFileName="VERISI~2.CER")) returned 1 [0137.791] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b0f9971, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x240, dwReserved0=0x0, dwReserved1=0x0, cFileName="VeriSign_Class_3_Public_Primary_CA.cer", cAlternateFileName="VERISI~1.CER")) returned 1 [0137.791] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1865b8d4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1865b8d4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38b, dwReserved0=0x0, dwReserved1=0x0, cFileName="VS_ComponentSigningIntermediate.cer", cAlternateFileName="VS_COM~1.CER")) returned 1 [0137.791] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1865b8d4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1865b8d4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38b, dwReserved0=0x0, dwReserved1=0x0, cFileName="VS_ComponentSigningIntermediate.cer", cAlternateFileName="VS_COM~1.CER")) returned 0 [0137.791] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0137.792] GetProcessHeap () returned 0x8a0000 [0137.792] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0137.792] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1865b8d4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Components", cAlternateFileName="COMPON~1")) returned 0 [0137.792] FindClose (in: hFindFile=0x993ac0 | out: hFindFile=0x993ac0) returned 1 [0137.792] GetProcessHeap () returned 0x8a0000 [0137.792] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0137.793] FindNextFileW (in: hFindFile=0x993900, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1865b8d4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1865b8d4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verisign", cAlternateFileName="")) returned 0 [0137.793] FindClose (in: hFindFile=0x993900 | out: hFindFile=0x993900) returned 1 [0137.793] GetProcessHeap () returned 0x8a0000 [0137.793] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0137.793] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18681a5c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18ad3e4a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sounds", cAlternateFileName="")) returned 1 [0137.793] GetProcessHeap () returned 0x8a0000 [0137.793] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0137.793] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18681a5c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18ad3e4a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0137.793] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18681a5c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18ad3e4a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.793] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18a3b641, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197321ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197321ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="People", cAlternateFileName="")) returned 1 [0137.793] GetProcessHeap () returned 0x8a0000 [0137.793] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0137.794] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18a3b641, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197321ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197321ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0137.801] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18a3b641, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197321ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197321ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.801] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18aadbcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18aadbcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6bd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="COUGH.WAV", cAlternateFileName="")) returned 1 [0137.801] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18afa0b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18afa0b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18b202d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7860, dwReserved0=0x0, dwReserved1=0x0, cFileName="GIGGLE.WAV", cAlternateFileName="")) returned 1 [0137.801] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x197321ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197321ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19758458, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="HICCUP.WAV", cAlternateFileName="")) returned 1 [0137.801] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18ad3e4a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MMHMM.WAV", cAlternateFileName="")) returned 1 [0137.802] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18ad3e4a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9c84, dwReserved0=0x0, dwReserved1=0x0, cFileName="SNEEZE.WAV", cAlternateFileName="")) returned 1 [0137.802] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18ad3e4a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18afa0b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d36, dwReserved0=0x0, dwReserved1=0x0, cFileName="THROAT.WAV", cAlternateFileName="")) returned 1 [0137.802] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18ad3e4a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7302, dwReserved0=0x0, dwReserved1=0x0, cFileName="Whistling.wav", cAlternateFileName="WHISTL~1.WAV")) returned 1 [0137.802] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18ad3e4a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7302, dwReserved0=0x0, dwReserved1=0x0, cFileName="Whistling.wav", cAlternateFileName="WHISTL~1.WAV")) returned 0 [0137.802] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0137.803] GetProcessHeap () returned 0x8a0000 [0137.803] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0137.803] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1907d846, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1907d846, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Places", cAlternateFileName="")) returned 1 [0137.803] GetProcessHeap () returned 0x8a0000 [0137.803] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0137.803] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1907d846, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1907d846, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0137.806] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1907d846, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1907d846, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.806] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18ad3e4a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ALARM.WAV", cAlternateFileName="")) returned 1 [0137.806] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18ad3e4a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeb78, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUZZ.WAV", cAlternateFileName="")) returned 1 [0137.806] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18ad3e4a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd686, dwReserved0=0x0, dwReserved1=0x0, cFileName="LASER.WAV", cAlternateFileName="")) returned 1 [0137.806] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18afa0b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18afa0b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18afa0b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x100ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADAR.WAV", cAlternateFileName="")) returned 1 [0137.806] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18afa0b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18afa0b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18afa0b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd64a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TOOT.WAV", cAlternateFileName="")) returned 1 [0137.806] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18afa0b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18afa0b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18afa0b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xea72, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIBE.WAV", cAlternateFileName="")) returned 1 [0137.807] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18b6c7ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18b6c7ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1907d846, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WARN.WAV", cAlternateFileName="")) returned 1 [0137.807] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18b6c7ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18b6c7ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1907d846, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WARN.WAV", cAlternateFileName="")) returned 0 [0137.807] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0137.807] GetProcessHeap () returned 0x8a0000 [0137.807] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0137.807] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1bc991c1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1bc991c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Things", cAlternateFileName="")) returned 1 [0137.807] GetProcessHeap () returned 0x8a0000 [0137.807] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0137.807] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1bc991c1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1bc991c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0137.810] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1bc991c1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1bc991c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.810] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18ad3e4a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18afa0b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAN.WAV", cAlternateFileName="")) returned 1 [0137.810] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18ad3e4a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9f18, dwReserved0=0x0, dwReserved1=0x0, cFileName="COUPLER.WAV", cAlternateFileName="")) returned 1 [0137.810] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18ad3e4a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18afa0b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa412, dwReserved0=0x0, dwReserved1=0x0, cFileName="HORN.WAV", cAlternateFileName="")) returned 1 [0137.810] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18ad3e4a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18afa0b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb14e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHOT.WAV", cAlternateFileName="")) returned 1 [0137.810] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18ad3e4a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf548, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHOVEL.WAV", cAlternateFileName="")) returned 1 [0137.810] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18ad3e4a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xedd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPLASH.WAV", cAlternateFileName="")) returned 1 [0137.810] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b6c9560, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b6c9560, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1bc991c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6bbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHOOSH.WAV", cAlternateFileName="")) returned 1 [0137.811] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b6c9560, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b6c9560, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1bc991c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6bbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHOOSH.WAV", cAlternateFileName="")) returned 0 [0137.811] FindClose (in: hFindFile=0x993940 | out: hFindFile=0x993940) returned 1 [0137.811] GetProcessHeap () returned 0x8a0000 [0137.811] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0137.811] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1bc991c1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1bc991c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Things", cAlternateFileName="")) returned 0 [0137.811] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0137.812] GetProcessHeap () returned 0x8a0000 [0137.812] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0137.812] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1907d846, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b6c9560, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b6c9560, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ToolBMPs", cAlternateFileName="")) returned 1 [0137.813] GetProcessHeap () returned 0x8a0000 [0137.813] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0137.813] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1907d846, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b6c9560, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b6c9560, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993700 [0137.827] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1907d846, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b6c9560, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b6c9560, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.828] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b6c9560, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b6c9560, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b6c9560, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataListIconImages.jpg", cAlternateFileName="DATALI~1.JPG")) returned 1 [0137.828] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19758458, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19758458, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19758458, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataListIconImagesMask.bmp", cAlternateFileName="DATALI~1.BMP")) returned 1 [0137.828] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1907d846, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1907d846, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x190c9cfa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d29, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRIP.JPG", cAlternateFileName="")) returned 1 [0137.828] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19758458, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19758458, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1977e6ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc38, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRIPMASK.BMP", cAlternateFileName="")) returned 1 [0137.828] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19758458, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19758458, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1977e6ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="InformationIcon.jpg", cAlternateFileName="INFORM~1.JPG")) returned 1 [0137.828] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x197321ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197321ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="InformationIconMask.bmp", cAlternateFileName="INFORM~1.BMP")) returned 1 [0137.829] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x190c9cfa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x190c9cfa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197321ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xceed, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoginDialogBackground.jpg", cAlternateFileName="LOGIND~1.JPG")) returned 1 [0137.829] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x190c9cfa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x190c9cfa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e93, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoginTool24x24Images.jpg", cAlternateFileName="LOGINT~1.JPG")) returned 1 [0137.829] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1907d846, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1907d846, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1907d846, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoginTool24x24ImagesMask.bmp", cAlternateFileName="LOGINT~1.BMP")) returned 1 [0137.829] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x197cab56, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197cab56, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197cab56, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageAttachmentIconImages.jpg", cAlternateFileName="MESSAG~2.JPG")) returned 1 [0137.829] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19817013, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19817013, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19817013, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageAttachmentIconImagesMask.bmp", cAlternateFileName="MESSAG~2.BMP")) returned 1 [0137.829] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19758458, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19758458, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19758458, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageHistoryIconImages.jpg", cAlternateFileName="MESSAG~1.JPG")) returned 1 [0137.829] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x197321ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197321ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19758458, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x140, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageHistoryIconImagesMask.bmp", cAlternateFileName="MESSAG~1.BMP")) returned 1 [0137.829] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198634b7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198634b7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3efd, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierBackground.jpg", cAlternateFileName="NOBDD0~1.JPG")) returned 1 [0137.829] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x197321ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197321ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierBackgroundRTL.jpg", cAlternateFileName="NOTIFI~4.JPG")) returned 1 [0137.829] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x197321ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197321ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19758458, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierCloseButton.jpg", cAlternateFileName="NO00D7~1.JPG")) returned 1 [0137.829] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x197321ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197321ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierDisableDownArrow.jpg", cAlternateFileName="NOTIFI~2.JPG")) returned 1 [0137.829] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x197321ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197321ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x307, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierDisableUpArrow.jpg", cAlternateFileName="NOTIFI~1.JPG")) returned 1 [0137.829] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x197321ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197321ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19758458, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x368, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierDownArrow.jpg", cAlternateFileName="NOTIFI~3.JPG")) returned 1 [0137.829] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19889710, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19889710, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19889710, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierUpArrow.jpg", cAlternateFileName="NO6669~1.JPG")) returned 1 [0137.829] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19758458, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19758458, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1977e6ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x133a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierWindowMask.bmp", cAlternateFileName="NOTIFI~1.BMP")) returned 1 [0137.830] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1983d259, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1983d259, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x133a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierWindowMaskRTL.bmp", cAlternateFileName="NOTIFI~2.BMP")) returned 1 [0137.830] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1977e6ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1977e6ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutofSyncIconImages.jpg", cAlternateFileName="OUTOFS~1.JPG")) returned 1 [0137.830] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1977e6ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1977e6ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutofSyncIconImagesMask.bmp", cAlternateFileName="OUTOFS~1.BMP")) returned 1 [0137.830] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1977e6ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1977e6ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuestionIcon.jpg", cAlternateFileName="QUESTI~1.JPG")) returned 1 [0137.830] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1977e6ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1977e6ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuestionIconMask.bmp", cAlternateFileName="QUESTI~1.BMP")) returned 1 [0137.830] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1977e6ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1977e6ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x64fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared16x16Images.jpg", cAlternateFileName="SHARED~2.JPG")) returned 1 [0137.830] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19758458, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19758458, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1977e6ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf38, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared16x16ImagesMask.bmp", cAlternateFileName="SHARED~1.BMP")) returned 1 [0137.830] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19758458, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19758458, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1977e6ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1963, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared24x24Images.jpg", cAlternateFileName="SHARED~1.JPG")) returned 1 [0137.830] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1983d259, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1983d259, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1638, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared24x24ImagesMask.bmp", cAlternateFileName="SHARED~2.BMP")) returned 1 [0137.830] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19817013, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19817013, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd14, dwReserved0=0x0, dwReserved1=0x0, cFileName="STOPICON.JPG", cAlternateFileName="")) returned 1 [0137.830] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x197cab56, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197cab56, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197cab56, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="StopIconMask.bmp", cAlternateFileName="STOPIC~1.BMP")) returned 1 [0137.830] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x197cab56, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197cab56, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197cab56, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf38, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskbarIconImages256Colors.bmp", cAlternateFileName="TASKBA~2.BMP")) returned 1 [0137.830] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197a4903, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197cab56, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x540, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskbarIconImagesMask256Colors.bmp", cAlternateFileName="TASKBA~1.BMP")) returned 1 [0137.830] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197a4903, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2605, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipsImage.jpg", cAlternateFileName="TIPSIM~1.JPG")) returned 1 [0137.830] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197a4903, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipsImageMask.bmp", cAlternateFileName="TIPSIM~1.BMP")) returned 1 [0137.831] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197a4903, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x450, dwReserved0=0x0, dwReserved1=0x0, cFileName="VeriSignLogo.jpg", cAlternateFileName="VERISI~1.JPG")) returned 1 [0137.831] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197a4903, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x450, dwReserved0=0x0, dwReserved1=0x0, cFileName="VeriSignLogo.jpg", cAlternateFileName="VERISI~1.JPG")) returned 0 [0137.831] FindClose (in: hFindFile=0x993700 | out: hFindFile=0x993700) returned 1 [0137.831] GetProcessHeap () returned 0x8a0000 [0137.831] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0137.832] GetProcessHeap () returned 0x8a0000 [0137.832] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0137.832] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197a4903, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0138.043] GetProcessHeap () returned 0x8a0000 [0138.043] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0138.043] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1983d259, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1983d259, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0138.044] GetProcessHeap () returned 0x8a0000 [0138.044] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d40b8 [0138.044] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198afa29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198afa29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0138.047] GetProcessHeap () returned 0x8a0000 [0138.047] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d40b8 | out: hHeap=0x8a0000) returned 1 [0138.047] GetProcessHeap () returned 0x8a0000 [0138.047] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d40b8 [0138.047] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\Computers\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1983d259, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198634b7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0138.048] GetProcessHeap () returned 0x8a0000 [0138.048] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d40b8 | out: hHeap=0x8a0000) returned 1 [0138.048] GetProcessHeap () returned 0x8a0000 [0138.048] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0138.049] GetProcessHeap () returned 0x8a0000 [0138.049] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0138.049] GetProcessHeap () returned 0x8a0000 [0138.049] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0138.049] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf073ddf4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0138.052] GetProcessHeap () returned 0x8a0000 [0138.052] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0138.052] GetProcessHeap () returned 0x8a0000 [0138.052] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0138.053] GetProcessHeap () returned 0x8a0000 [0138.053] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0138.053] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19889710, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19889710, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0138.053] GetProcessHeap () returned 0x8a0000 [0138.053] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0138.054] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\Analysis\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12b7378, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xafa146a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0138.056] GetProcessHeap () returned 0x8a0000 [0138.056] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0138.056] GetProcessHeap () returned 0x8a0000 [0138.056] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0138.056] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\SOLVER\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41a796b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41a796b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0138.057] GetProcessHeap () returned 0x8a0000 [0138.057] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0138.057] GetProcessHeap () returned 0x8a0000 [0138.057] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0138.058] GetProcessHeap () returned 0x8a0000 [0138.058] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0138.058] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1b27715c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b27715c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0138.096] GetProcessHeap () returned 0x8a0000 [0138.096] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0138.189] GetProcessHeap () returned 0x8a0000 [0138.189] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0138.189] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1b22ac67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b22ac67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0138.193] GetProcessHeap () returned 0x8a0000 [0138.193] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0138.195] GetProcessHeap () returned 0x8a0000 [0138.195] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0138.195] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1b3a83c3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b3a83c3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0138.209] GetProcessHeap () returned 0x8a0000 [0138.209] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0138.210] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ar\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf99462e6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99462e6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99462e6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0138.212] GetProcessHeap () returned 0x8a0000 [0138.212] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0138.212] GetProcessHeap () returned 0x8a0000 [0138.212] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0138.212] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\bg\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6dea551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6dea551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6dea551, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0138.213] GetProcessHeap () returned 0x8a0000 [0138.213] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0138.213] GetProcessHeap () returned 0x8a0000 [0138.213] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0138.213] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ca\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56853a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0138.215] GetProcessHeap () returned 0x8a0000 [0138.215] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0138.215] GetProcessHeap () returned 0x8a0000 [0138.215] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0138.215] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\cs\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf803d796, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf803d796, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf803d796, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993780 [0138.216] GetProcessHeap () returned 0x8a0000 [0138.216] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0138.216] GetProcessHeap () returned 0x8a0000 [0138.216] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0138.216] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\da\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6165f55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6165f55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0138.222] GetProcessHeap () returned 0x8a0000 [0138.222] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0138.222] GetProcessHeap () returned 0x8a0000 [0138.222] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0138.222] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\de\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0138.228] GetProcessHeap () returned 0x8a0000 [0138.228] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0138.228] GetProcessHeap () returned 0x8a0000 [0138.228] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0138.228] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\el\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff0bc27, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff31e88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0138.232] GetProcessHeap () returned 0x8a0000 [0138.232] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0138.232] GetProcessHeap () returned 0x8a0000 [0138.232] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0138.232] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\en-us\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5a3de35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a3de35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a3de35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0138.239] GetProcessHeap () returned 0x8a0000 [0138.239] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0138.239] GetProcessHeap () returned 0x8a0000 [0138.239] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0138.239] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\es\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfcb7dd00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcb7dd00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcb7dd00, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993800 [0138.247] GetProcessHeap () returned 0x8a0000 [0138.247] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0138.247] GetProcessHeap () returned 0x8a0000 [0138.247] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0138.247] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\et\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b80 [0138.247] GetProcessHeap () returned 0x8a0000 [0138.247] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0138.248] GetProcessHeap () returned 0x8a0000 [0138.248] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0138.248] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\eu\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0138.248] GetProcessHeap () returned 0x8a0000 [0138.248] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0138.248] GetProcessHeap () returned 0x8a0000 [0138.248] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0138.248] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\fi\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0138.249] GetProcessHeap () returned 0x8a0000 [0138.249] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0138.249] GetProcessHeap () returned 0x8a0000 [0138.249] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0138.249] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\fr\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0138.250] GetProcessHeap () returned 0x8a0000 [0138.250] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0138.250] GetProcessHeap () returned 0x8a0000 [0138.250] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0138.250] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\gl\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa178468, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa178468, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa178468, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0138.251] GetProcessHeap () returned 0x8a0000 [0138.251] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0138.251] GetProcessHeap () returned 0x8a0000 [0138.251] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0138.251] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\he\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf618b1a4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf618b1a4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf618b1a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993780 [0138.252] GetProcessHeap () returned 0x8a0000 [0138.252] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0138.252] GetProcessHeap () returned 0x8a0000 [0138.252] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0138.252] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hi\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56853a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0138.252] GetProcessHeap () returned 0x8a0000 [0138.252] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0138.252] GetProcessHeap () returned 0x8a0000 [0138.252] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0138.252] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hr\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf480feb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf480feb5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf480feb5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0138.253] GetProcessHeap () returned 0x8a0000 [0138.253] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0138.253] GetProcessHeap () returned 0x8a0000 [0138.253] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0138.253] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hu\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4646280, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4646280, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0138.254] GetProcessHeap () returned 0x8a0000 [0138.254] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0138.254] GetProcessHeap () returned 0x8a0000 [0138.254] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0138.254] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\id\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63a229e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x63a229e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x63a229e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0138.262] GetProcessHeap () returned 0x8a0000 [0138.262] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0138.262] GetProcessHeap () returned 0x8a0000 [0138.262] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0138.262] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\it\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59b433, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x59b433, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59b433, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993780 [0138.263] GetProcessHeap () returned 0x8a0000 [0138.263] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0138.263] GetProcessHeap () returned 0x8a0000 [0138.263] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0138.263] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ja\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6aef645, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aef645, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0138.264] GetProcessHeap () returned 0x8a0000 [0138.264] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0138.264] GetProcessHeap () returned 0x8a0000 [0138.264] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0138.264] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\kk\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6781ff8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6781ff8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993900 [0138.265] GetProcessHeap () returned 0x8a0000 [0138.265] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0138.265] GetProcessHeap () returned 0x8a0000 [0138.265] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0138.265] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ko\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f9c329, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5f9c329, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5f9c329, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993780 [0138.266] GetProcessHeap () returned 0x8a0000 [0138.266] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0138.266] GetProcessHeap () returned 0x8a0000 [0138.266] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0138.266] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\lt\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1bce2f5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1bce2f5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1bf45a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0138.266] GetProcessHeap () returned 0x8a0000 [0138.266] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0138.266] GetProcessHeap () returned 0x8a0000 [0138.266] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0138.266] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\lv\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf13037fa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf13037fa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf13037fa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0138.267] GetProcessHeap () returned 0x8a0000 [0138.267] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0138.267] GetProcessHeap () returned 0x8a0000 [0138.267] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0138.267] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ms\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc21a8ad, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc21a8ad, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc21a8ad, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0138.270] GetProcessHeap () returned 0x8a0000 [0138.270] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0138.270] GetProcessHeap () returned 0x8a0000 [0138.270] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0138.270] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\nl\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaf2dd35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf2dd35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaf2dd35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0138.270] GetProcessHeap () returned 0x8a0000 [0138.270] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0138.270] GetProcessHeap () returned 0x8a0000 [0138.270] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0138.271] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\no\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffe01c35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffe01c35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffe01c35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0138.271] GetProcessHeap () returned 0x8a0000 [0138.271] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0138.271] GetProcessHeap () returned 0x8a0000 [0138.271] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0138.271] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pl\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ff786, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68ff786, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69259a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0138.272] GetProcessHeap () returned 0x8a0000 [0138.272] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0138.272] GetProcessHeap () returned 0x8a0000 [0138.272] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0138.272] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pt\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc2b31ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2b31ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0138.273] GetProcessHeap () returned 0x8a0000 [0138.273] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0138.273] GetProcessHeap () returned 0x8a0000 [0138.273] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0138.273] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pt-BR\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x386b77a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x386b77a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x386b77a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993900 [0138.274] GetProcessHeap () returned 0x8a0000 [0138.274] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0138.274] GetProcessHeap () returned 0x8a0000 [0138.274] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0138.274] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ro\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4903b8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4903b8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4903b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0138.275] GetProcessHeap () returned 0x8a0000 [0138.275] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0138.275] GetProcessHeap () returned 0x8a0000 [0138.275] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0138.275] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ru\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86a6c5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0138.275] GetProcessHeap () returned 0x8a0000 [0138.275] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0138.276] GetProcessHeap () returned 0x8a0000 [0138.276] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0138.276] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sk\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67a8250, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67a8250, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0138.435] GetProcessHeap () returned 0x8a0000 [0138.435] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0138.435] GetProcessHeap () returned 0x8a0000 [0138.435] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0138.435] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sl\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a7cf13, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a7cf13, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0138.436] GetProcessHeap () returned 0x8a0000 [0138.436] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0138.436] GetProcessHeap () returned 0x8a0000 [0138.436] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0138.436] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-BA\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1565dae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1565dae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1565dae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b80 [0138.436] GetProcessHeap () returned 0x8a0000 [0138.436] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0138.436] GetProcessHeap () returned 0x8a0000 [0138.436] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0138.436] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-CS\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf443017d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf443017d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44563cd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0138.437] GetProcessHeap () returned 0x8a0000 [0138.437] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0138.437] GetProcessHeap () returned 0x8a0000 [0138.437] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0138.437] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Latn-CS\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0138.437] GetProcessHeap () returned 0x8a0000 [0138.438] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0138.438] GetProcessHeap () returned 0x8a0000 [0138.438] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0138.438] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sv\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0138.438] GetProcessHeap () returned 0x8a0000 [0138.438] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0138.438] GetProcessHeap () returned 0x8a0000 [0138.438] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0138.438] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\th\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb67b102, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb67b102, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb6ed802, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0138.439] GetProcessHeap () returned 0x8a0000 [0138.439] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0138.439] GetProcessHeap () returned 0x8a0000 [0138.439] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0138.439] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\tr\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0138.439] GetProcessHeap () returned 0x8a0000 [0138.439] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0138.439] GetProcessHeap () returned 0x8a0000 [0138.439] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0138.439] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\uk\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80d6078, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0138.440] GetProcessHeap () returned 0x8a0000 [0138.440] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0138.440] GetProcessHeap () returned 0x8a0000 [0138.440] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0138.440] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\vi\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c46ba0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c46ba0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c46ba0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0138.441] GetProcessHeap () returned 0x8a0000 [0138.441] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0138.441] GetProcessHeap () returned 0x8a0000 [0138.441] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0138.441] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\zh-CN\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc40a725, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc40a725, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc40a725, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b80 [0138.442] GetProcessHeap () returned 0x8a0000 [0138.442] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0138.442] GetProcessHeap () returned 0x8a0000 [0138.442] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0138.442] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\zh-TW\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x659fb9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x659fb9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x659fb9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993700 [0138.443] GetProcessHeap () returned 0x8a0000 [0138.443] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0138.443] GetProcessHeap () returned 0x8a0000 [0138.443] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0138.700] GetProcessHeap () returned 0x8a0000 [0138.700] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0138.700] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1c8ab024, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c8ab024, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0138.703] GetProcessHeap () returned 0x8a0000 [0138.703] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0138.704] GetProcessHeap () returned 0x8a0000 [0138.704] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0138.704] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1fc86400, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1fc86400, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0138.707] GetProcessHeap () returned 0x8a0000 [0138.708] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0138.708] GetProcessHeap () returned 0x8a0000 [0138.708] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0138.708] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc348b22, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1fc39fa2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1fc39fa2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0138.712] GetProcessHeap () returned 0x8a0000 [0138.712] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0138.712] GetProcessHeap () returned 0x8a0000 [0138.712] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0138.712] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc39bed4a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb0d2731, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb0d2731, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0138.715] GetProcessHeap () returned 0x8a0000 [0138.715] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0138.715] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\1033\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc52c782a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc52c782a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc52c782a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993800 [0138.716] GetProcessHeap () returned 0x8a0000 [0138.716] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0138.716] GetProcessHeap () returned 0x8a0000 [0138.716] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0138.716] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\1036\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf318faf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf318faf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf31b5d3e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b80 [0138.717] GetProcessHeap () returned 0x8a0000 [0138.717] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0138.717] GetProcessHeap () returned 0x8a0000 [0138.717] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0138.717] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\3082\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe34d5ed4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe34d5ed4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe34d5ed4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0138.718] GetProcessHeap () returned 0x8a0000 [0138.718] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0138.718] GetProcessHeap () returned 0x8a0000 [0138.718] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0138.718] GetProcessHeap () returned 0x8a0000 [0138.718] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0138.719] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x246bb96e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x246bb96e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0138.721] GetProcessHeap () returned 0x8a0000 [0138.721] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0138.723] GetProcessHeap () returned 0x8a0000 [0138.723] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0138.723] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc3bb225, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x241382dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x241382dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0138.778] GetProcessHeap () returned 0x8a0000 [0138.778] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0138.778] GetProcessHeap () returned 0x8a0000 [0138.778] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0138.778] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\QUERIES\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeda173cc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b80 [0138.779] GetProcessHeap () returned 0x8a0000 [0138.779] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0138.779] GetProcessHeap () returned 0x8a0000 [0138.779] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0138.779] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\SAMPLES\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb48c20e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0138.780] GetProcessHeap () returned 0x8a0000 [0138.780] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0138.781] GetProcessHeap () returned 0x8a0000 [0138.781] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0138.781] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\STARTUP\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeda173cc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0138.781] GetProcessHeap () returned 0x8a0000 [0138.781] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0138.784] GetProcessHeap () returned 0x8a0000 [0138.784] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0138.784] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa326fd, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0xa326fd, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0xa326fd, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0138.784] GetProcessHeap () returned 0x8a0000 [0138.784] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0138.785] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa326fd, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4cce0ca, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4cce0ca, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0139.381] GetProcessHeap () returned 0x8a0000 [0139.381] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0139.381] GetProcessHeap () returned 0x8a0000 [0139.381] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0139.382] GetProcessHeap () returned 0x8a0000 [0139.382] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0139.382] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\XLSTART\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeda173cc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0139.383] GetProcessHeap () returned 0x8a0000 [0139.383] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0139.383] GetProcessHeap () returned 0x8a0000 [0139.383] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36a40a0 | out: hHeap=0x8a0000) returned 1 [0139.384] GetProcessHeap () returned 0x8a0000 [0139.384] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0139.385] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\rsod\\*", lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b1a0d3d, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0139.445] GetProcessHeap () returned 0x8a0000 [0139.445] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0139.445] GetProcessHeap () returned 0x8a0000 [0139.445] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0139.445] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Stationery\\*", lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb48c20e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb48c20e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0139.446] GetProcessHeap () returned 0x8a0000 [0139.446] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0139.446] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb48c20e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6099da, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0139.449] GetProcessHeap () returned 0x8a0000 [0139.449] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0139.449] GetProcessHeap () returned 0x8a0000 [0139.449] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0139.450] GetProcessHeap () returned 0x8a0000 [0139.450] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0139.450] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\*", lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0139.450] GetProcessHeap () returned 0x8a0000 [0139.450] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0139.451] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb571036, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993900 [0139.454] GetProcessHeap () returned 0x8a0000 [0139.454] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0139.454] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5972d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5bd4f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5bd4f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0139.455] GetProcessHeap () returned 0x8a0000 [0139.455] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d40b8 [0139.455] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5972d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb62fbf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb62fbf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0139.457] GetProcessHeap () returned 0x8a0000 [0139.457] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d40b8 | out: hHeap=0x8a0000) returned 1 [0139.457] GetProcessHeap () returned 0x8a0000 [0139.457] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d40b8 [0139.457] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5bd4f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6a2342, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6a2342, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0139.460] GetProcessHeap () returned 0x8a0000 [0139.460] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d40b8 | out: hHeap=0x8a0000) returned 1 [0139.460] GetProcessHeap () returned 0x8a0000 [0139.460] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0139.461] GetProcessHeap () returned 0x8a0000 [0139.461] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0139.461] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\GettingStarted16\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e332373, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e332373, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e332373, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993780 [0139.465] GetProcessHeap () returned 0x8a0000 [0139.465] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0139.466] GetProcessHeap () returned 0x8a0000 [0139.466] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0139.466] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0139.466] GetProcessHeap () returned 0x8a0000 [0139.466] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d40b8 [0139.467] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0139.467] GetProcessHeap () returned 0x8a0000 [0139.467] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a90058 [0139.467] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Notebook Templates\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993700 [0139.470] GetProcessHeap () returned 0x8a0000 [0139.470] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a90058 | out: hHeap=0x8a0000) returned 1 [0139.470] GetProcessHeap () returned 0x8a0000 [0139.470] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a90058 [0139.470] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb7ad38b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0139.470] GetProcessHeap () returned 0x8a0000 [0139.470] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a90058 | out: hHeap=0x8a0000) returned 1 [0139.470] GetProcessHeap () returned 0x8a0000 [0139.470] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d40b8 | out: hHeap=0x8a0000) returned 1 [0139.471] GetProcessHeap () returned 0x8a0000 [0139.471] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0139.471] GetProcessHeap () returned 0x8a0000 [0139.471] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0139.472] GetProcessHeap () returned 0x8a0000 [0139.472] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a90058 [0139.472] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\Presentation Designs\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24517fc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24517fc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0139.967] GetProcessHeap () returned 0x8a0000 [0139.967] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a90058 | out: hHeap=0x8a0000) returned 1 [0139.967] GetProcessHeap () returned 0x8a0000 [0139.968] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0139.969] GetProcessHeap () returned 0x8a0000 [0139.969] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0139.969] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\*", lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0139.970] GetProcessHeap () returned 0x8a0000 [0139.970] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a90058 [0139.970] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xaf31749c, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xaf31749c, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993600 [0139.972] GetProcessHeap () returned 0x8a0000 [0139.972] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0139.973] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f15ef0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xaf31749c, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x5a112a2, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993740 [0139.973] GetProcessHeap () returned 0x8a0000 [0139.974] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36a40a0 [0139.974] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f15ef0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2e5eac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0139.976] GetProcessHeap () returned 0x8a0000 [0139.976] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0139.976] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\Heartbeat\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e2e5eac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e2e5eac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2e5eac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0139.981] GetProcessHeap () returned 0x8a0000 [0139.981] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0139.981] GetProcessHeap () returned 0x8a0000 [0139.981] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36a40a0 | out: hHeap=0x8a0000) returned 1 [0139.981] GetProcessHeap () returned 0x8a0000 [0139.981] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36a40a0 [0139.981] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\VISIO\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a112a2, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x5a112a2, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5a112a2, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0139.982] GetProcessHeap () returned 0x8a0000 [0139.982] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36a40a0 | out: hHeap=0x8a0000) returned 1 [0139.982] GetProcessHeap () returned 0x8a0000 [0139.982] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0139.983] GetProcessHeap () returned 0x8a0000 [0139.983] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0139.984] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b809370, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b809370, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0139.987] GetProcessHeap () returned 0x8a0000 [0139.987] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0139.987] GetProcessHeap () returned 0x8a0000 [0139.987] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a90058 | out: hHeap=0x8a0000) returned 1 [0139.988] GetProcessHeap () returned 0x8a0000 [0139.988] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a90058 [0139.989] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Common Programs\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0139.991] GetProcessHeap () returned 0x8a0000 [0139.991] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0139.992] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Common Programs\\Microsoft Office 2016 Tools\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0140.321] GetProcessHeap () returned 0x8a0000 [0140.321] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0140.322] GetProcessHeap () returned 0x8a0000 [0140.322] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a90058 | out: hHeap=0x8a0000) returned 1 [0140.323] GetProcessHeap () returned 0x8a0000 [0140.323] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a90058 [0140.323] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x868ac6fd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x868ac6fd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993600 [0140.324] GetProcessHeap () returned 0x8a0000 [0140.324] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0140.325] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x868ac6fd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8913323b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8913323b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0140.332] GetProcessHeap () returned 0x8a0000 [0140.332] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0140.332] GetProcessHeap () returned 0x8a0000 [0140.332] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a90058 | out: hHeap=0x8a0000) returned 1 [0140.333] GetProcessHeap () returned 0x8a0000 [0140.333] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a90058 [0140.333] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xaf31749c, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xaf31749c, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0140.334] GetProcessHeap () returned 0x8a0000 [0140.334] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0140.335] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\DESIGNER\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb975fdf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb975fdf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb975fdf, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0140.606] GetProcessHeap () returned 0x8a0000 [0140.606] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0140.606] GetProcessHeap () returned 0x8a0000 [0140.606] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0140.607] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x868ac6fd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x52ea133, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x52ea133, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993600 [0140.607] GetProcessHeap () returned 0x8a0000 [0140.607] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0140.607] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\DW\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf477755d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x246bb96e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x246bb96e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0140.609] GetProcessHeap () returned 0x8a0000 [0140.609] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0140.609] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\DW\\1033\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf477755d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf477755d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf47e9c8f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0140.610] GetProcessHeap () returned 0x8a0000 [0140.610] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0140.610] GetProcessHeap () returned 0x8a0000 [0140.610] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0140.610] GetProcessHeap () returned 0x8a0000 [0140.610] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0140.610] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EQUATION\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x868ac6fd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb976f98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb976f98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0140.613] GetProcessHeap () returned 0x8a0000 [0140.613] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0140.613] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EQUATION\\1033\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4620012, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4620012, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4620012, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0140.614] GetProcessHeap () returned 0x8a0000 [0140.614] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0140.614] GetProcessHeap () returned 0x8a0000 [0140.614] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0140.614] GetProcessHeap () returned 0x8a0000 [0140.614] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0140.614] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EURO\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf99b89f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99b89f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99b89f6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0140.614] GetProcessHeap () returned 0x8a0000 [0140.614] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0140.614] GetProcessHeap () returned 0x8a0000 [0140.614] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0140.614] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Filters\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2ca2e08, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14c6cb9, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x14c6cb9, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0140.615] GetProcessHeap () returned 0x8a0000 [0140.615] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0140.615] GetProcessHeap () returned 0x8a0000 [0140.615] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0140.615] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2e1f46, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb976f98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb976f98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0140.618] GetProcessHeap () returned 0x8a0000 [0140.618] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0140.618] GetProcessHeap () returned 0x8a0000 [0140.618] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0140.618] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Help\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12910b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x26737b32, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26737b32, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0140.621] GetProcessHeap () returned 0x8a0000 [0140.621] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0140.621] GetProcessHeap () returned 0x8a0000 [0140.621] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0140.621] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\MSClientDataMgr\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf472b09c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf472b09c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf472b09c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0140.622] GetProcessHeap () returned 0x8a0000 [0140.622] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0140.622] GetProcessHeap () returned 0x8a0000 [0140.622] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0140.622] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2803429, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x26bb01a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bb01a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0140.623] GetProcessHeap () returned 0x8a0000 [0140.623] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0140.623] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc541ed37, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb99d23b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb99d23b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b80 [0140.626] GetProcessHeap () returned 0x8a0000 [0140.626] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0140.626] GetProcessHeap () returned 0x8a0000 [0140.626] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0140.626] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Cultures\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc461cf97, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc461cf97, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc461cf97, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0140.626] GetProcessHeap () returned 0x8a0000 [0140.626] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0140.626] GetProcessHeap () returned 0x8a0000 [0140.626] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0140.626] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe99511, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x24bcc96d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24bcc96d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0140.628] GetProcessHeap () returned 0x8a0000 [0140.628] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d40b8 [0140.628] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\*", lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24bcc96d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24d70354, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24d70354, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b80 [0140.631] GetProcessHeap () returned 0x8a0000 [0140.631] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d40b8 | out: hHeap=0x8a0000) returned 1 [0140.631] GetProcessHeap () returned 0x8a0000 [0140.631] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d40b8 [0140.631] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Resources\\*", lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4befc00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4befc00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4befc00, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0140.632] GetProcessHeap () returned 0x8a0000 [0140.632] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0140.632] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Resources\\1033\\*", lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4befc00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4befc00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4befc00, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0140.633] GetProcessHeap () returned 0x8a0000 [0140.633] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0140.633] GetProcessHeap () returned 0x8a0000 [0140.633] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d40b8 | out: hHeap=0x8a0000) returned 1 [0140.633] GetProcessHeap () returned 0x8a0000 [0140.633] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0140.634] GetProcessHeap () returned 0x8a0000 [0140.634] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0140.635] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\en-us\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2803429, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2803429, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2803429, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0140.635] GetProcessHeap () returned 0x8a0000 [0140.635] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0140.635] GetProcessHeap () returned 0x8a0000 [0140.635] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0140.635] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef915def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef915def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xef915def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0140.636] GetProcessHeap () returned 0x8a0000 [0140.636] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0140.637] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\Office.en-us\\*", lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef915def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8f6526, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b80 [0140.637] GetProcessHeap () returned 0x8a0000 [0140.637] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0140.637] GetProcessHeap () returned 0x8a0000 [0140.637] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0140.637] GetProcessHeap () returned 0x8a0000 [0140.637] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0140.638] GetProcessHeap () returned 0x8a0000 [0140.638] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0140.639] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\PROOF\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc8d02b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8d02b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b80 [0140.640] GetProcessHeap () returned 0x8a0000 [0140.640] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0140.640] GetProcessHeap () returned 0x8a0000 [0140.640] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0140.640] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc576616a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x26bd6427, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bd6427, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0140.642] GetProcessHeap () returned 0x8a0000 [0140.642] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0140.643] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\1033\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf07b04e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf07b04e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc8aa06f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0140.644] GetProcessHeap () returned 0x8a0000 [0140.644] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0140.644] GetProcessHeap () returned 0x8a0000 [0140.644] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0140.644] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc883e0d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x26bd6427, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bd6427, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0140.644] GetProcessHeap () returned 0x8a0000 [0140.644] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0140.644] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\*", lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc883e0d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc883e0d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8aa06f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0140.645] GetProcessHeap () returned 0x8a0000 [0140.645] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0140.645] GetProcessHeap () returned 0x8a0000 [0140.645] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0140.645] GetProcessHeap () returned 0x8a0000 [0140.645] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0140.646] GetProcessHeap () returned 0x8a0000 [0140.646] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0140.646] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Source Engine\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0ed7602, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0ed7602, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0ed7602, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0141.153] GetProcessHeap () returned 0x8a0000 [0141.153] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0141.153] GetProcessHeap () returned 0x8a0000 [0141.153] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0141.153] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TEXTCONV\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf15d84bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42b29f3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5f76153, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0141.153] GetProcessHeap () returned 0x8a0000 [0141.153] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0141.153] GetProcessHeap () returned 0x8a0000 [0141.153] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0141.153] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0141.156] GetProcessHeap () returned 0x8a0000 [0141.157] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.158] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AFTRNOON\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26bfc670, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0141.159] GetProcessHeap () returned 0x8a0000 [0141.159] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.159] GetProcessHeap () returned 0x8a0000 [0141.159] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.159] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ARCTIC\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0141.159] GetProcessHeap () returned 0x8a0000 [0141.160] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.160] GetProcessHeap () returned 0x8a0000 [0141.160] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.160] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AXIS\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0141.160] GetProcessHeap () returned 0x8a0000 [0141.160] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.160] GetProcessHeap () returned 0x8a0000 [0141.160] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.161] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLENDS\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a70c44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a96da3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27a96da3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0141.161] GetProcessHeap () returned 0x8a0000 [0141.161] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.163] GetProcessHeap () returned 0x8a0000 [0141.163] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.163] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUECALM\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a70c44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a70c44, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27a70c44, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0141.163] GetProcessHeap () returned 0x8a0000 [0141.163] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.164] GetProcessHeap () returned 0x8a0000 [0141.164] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.164] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUEPRNT\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0141.164] GetProcessHeap () returned 0x8a0000 [0141.164] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.164] GetProcessHeap () returned 0x8a0000 [0141.164] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.164] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BOLDSTRI\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a96da3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993700 [0141.165] GetProcessHeap () returned 0x8a0000 [0141.165] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.165] GetProcessHeap () returned 0x8a0000 [0141.165] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.165] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BREEZE\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a96da3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0141.166] GetProcessHeap () returned 0x8a0000 [0141.166] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.166] GetProcessHeap () returned 0x8a0000 [0141.166] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.166] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CANYON\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0141.167] GetProcessHeap () returned 0x8a0000 [0141.167] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.167] GetProcessHeap () returned 0x8a0000 [0141.167] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.167] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CAPSULES\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0141.168] GetProcessHeap () returned 0x8a0000 [0141.168] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.168] GetProcessHeap () returned 0x8a0000 [0141.168] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.168] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CASCADE\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0141.168] GetProcessHeap () returned 0x8a0000 [0141.168] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.168] GetProcessHeap () returned 0x8a0000 [0141.168] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.169] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\COMPASS\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0141.169] GetProcessHeap () returned 0x8a0000 [0141.169] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.171] GetProcessHeap () returned 0x8a0000 [0141.171] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.171] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CONCRETE\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0141.171] GetProcessHeap () returned 0x8a0000 [0141.171] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.172] GetProcessHeap () returned 0x8a0000 [0141.172] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.172] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\DEEPBLUE\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0141.172] GetProcessHeap () returned 0x8a0000 [0141.172] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.172] GetProcessHeap () returned 0x8a0000 [0141.172] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.172] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECHO\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0141.173] GetProcessHeap () returned 0x8a0000 [0141.173] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.173] GetProcessHeap () returned 0x8a0000 [0141.173] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.173] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECLIPSE\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0141.174] GetProcessHeap () returned 0x8a0000 [0141.174] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.174] GetProcessHeap () returned 0x8a0000 [0141.174] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.174] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EDGE\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0141.175] GetProcessHeap () returned 0x8a0000 [0141.175] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.175] GetProcessHeap () returned 0x8a0000 [0141.175] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.175] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EVRGREEN\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b2f705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b2f705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0141.176] GetProcessHeap () returned 0x8a0000 [0141.176] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.176] GetProcessHeap () returned 0x8a0000 [0141.176] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.176] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EXPEDITN\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b2f705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b2f705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0141.177] GetProcessHeap () returned 0x8a0000 [0141.177] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.177] GetProcessHeap () returned 0x8a0000 [0141.177] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.177] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ICE\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ba1ded, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ba1ded, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0141.178] GetProcessHeap () returned 0x8a0000 [0141.178] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.178] GetProcessHeap () returned 0x8a0000 [0141.178] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.178] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\INDUST\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b5591d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0141.178] GetProcessHeap () returned 0x8a0000 [0141.178] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.178] GetProcessHeap () returned 0x8a0000 [0141.178] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.179] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\IRIS\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b5591d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b7bb91, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b7bb91, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0141.179] GetProcessHeap () returned 0x8a0000 [0141.179] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.179] GetProcessHeap () returned 0x8a0000 [0141.179] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.179] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\JOURNAL\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b5591d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0141.180] GetProcessHeap () returned 0x8a0000 [0141.180] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.180] GetProcessHeap () returned 0x8a0000 [0141.180] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.180] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LAYERS\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b7bb91, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ba1ded, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ba1ded, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0141.181] GetProcessHeap () returned 0x8a0000 [0141.181] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.181] GetProcessHeap () returned 0x8a0000 [0141.181] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.181] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LEVEL\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b7bb91, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0141.181] GetProcessHeap () returned 0x8a0000 [0141.181] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.181] GetProcessHeap () returned 0x8a0000 [0141.181] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.182] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\NETWORK\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0141.182] GetProcessHeap () returned 0x8a0000 [0141.182] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.182] GetProcessHeap () returned 0x8a0000 [0141.182] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.182] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PAPYRUS\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0141.183] GetProcessHeap () returned 0x8a0000 [0141.183] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.183] GetProcessHeap () returned 0x8a0000 [0141.183] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.183] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PIXEL\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0141.184] GetProcessHeap () returned 0x8a0000 [0141.184] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.184] GetProcessHeap () returned 0x8a0000 [0141.184] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.184] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PROFILE\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0141.185] GetProcessHeap () returned 0x8a0000 [0141.185] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.185] GetProcessHeap () returned 0x8a0000 [0141.185] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.185] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\QUAD\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0141.185] GetProcessHeap () returned 0x8a0000 [0141.185] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.185] GetProcessHeap () returned 0x8a0000 [0141.185] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.185] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RADIAL\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0141.187] GetProcessHeap () returned 0x8a0000 [0141.187] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.187] GetProcessHeap () returned 0x8a0000 [0141.187] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.187] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\REFINED\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0141.187] GetProcessHeap () returned 0x8a0000 [0141.187] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.187] GetProcessHeap () returned 0x8a0000 [0141.188] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.188] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RICEPAPR\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0141.188] GetProcessHeap () returned 0x8a0000 [0141.188] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.188] GetProcessHeap () returned 0x8a0000 [0141.188] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.188] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RIPPLE\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0141.189] GetProcessHeap () returned 0x8a0000 [0141.189] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.189] GetProcessHeap () returned 0x8a0000 [0141.189] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.189] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RMNSQUE\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0141.190] GetProcessHeap () returned 0x8a0000 [0141.190] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.190] GetProcessHeap () returned 0x8a0000 [0141.190] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.190] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SATIN\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x289576aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x289576aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0141.192] GetProcessHeap () returned 0x8a0000 [0141.192] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.192] GetProcessHeap () returned 0x8a0000 [0141.192] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.192] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SKY\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0141.196] GetProcessHeap () returned 0x8a0000 [0141.196] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.196] GetProcessHeap () returned 0x8a0000 [0141.196] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.196] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SLATE\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c609b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c609b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0141.196] GetProcessHeap () returned 0x8a0000 [0141.196] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.197] GetProcessHeap () returned 0x8a0000 [0141.197] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.197] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SONORA\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c3a755, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993800 [0141.197] GetProcessHeap () returned 0x8a0000 [0141.197] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.197] GetProcessHeap () returned 0x8a0000 [0141.197] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.197] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SPRING\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b80 [0141.198] GetProcessHeap () returned 0x8a0000 [0141.198] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.198] GetProcessHeap () returned 0x8a0000 [0141.198] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.198] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STRTEDGE\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x28551719, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28551719, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0141.418] GetProcessHeap () returned 0x8a0000 [0141.418] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.418] GetProcessHeap () returned 0x8a0000 [0141.418] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.418] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STUDIO\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c3a755, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0141.419] GetProcessHeap () returned 0x8a0000 [0141.419] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.419] GetProcessHeap () returned 0x8a0000 [0141.419] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.419] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SUMIPNTG\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0141.420] GetProcessHeap () returned 0x8a0000 [0141.420] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.420] GetProcessHeap () returned 0x8a0000 [0141.420] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.420] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATER\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0141.420] GetProcessHeap () returned 0x8a0000 [0141.420] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.420] GetProcessHeap () returned 0x8a0000 [0141.420] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.420] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATERMAR\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0141.421] GetProcessHeap () returned 0x8a0000 [0141.421] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.421] GetProcessHeap () returned 0x8a0000 [0141.421] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0141.421] GetProcessHeap () returned 0x8a0000 [0141.421] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0141.421] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0dcc568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0141.423] GetProcessHeap () returned 0x8a0000 [0141.423] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.423] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ENES\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc85db99, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc85db99, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc883e0d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0141.426] GetProcessHeap () returned 0x8a0000 [0141.426] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.426] GetProcessHeap () returned 0x8a0000 [0141.426] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.426] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ENFR\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc8aa06f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8aa06f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0141.427] GetProcessHeap () returned 0x8a0000 [0141.427] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.427] GetProcessHeap () returned 0x8a0000 [0141.427] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.427] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ESEN\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c8cf9c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8aa06f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0141.427] GetProcessHeap () returned 0x8a0000 [0141.427] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.428] GetProcessHeap () returned 0x8a0000 [0141.428] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.428] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\FREN\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf63a12a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc91c74d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0141.428] GetProcessHeap () returned 0x8a0000 [0141.428] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.428] GetProcessHeap () returned 0x8a0000 [0141.428] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0141.428] GetProcessHeap () returned 0x8a0000 [0141.429] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0141.429] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca8c279f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca8c279f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca8c279f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0141.429] GetProcessHeap () returned 0x8a0000 [0141.429] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.429] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca8c279f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf24004e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf24004e4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0141.430] GetProcessHeap () returned 0x8a0000 [0141.430] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0141.430] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\1033\\*", lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb4d4679, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4d4679, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xecf3682d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0141.431] GetProcessHeap () returned 0x8a0000 [0141.431] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0141.431] GetProcessHeap () returned 0x8a0000 [0141.431] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.431] GetProcessHeap () returned 0x8a0000 [0141.431] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0141.432] GetProcessHeap () returned 0x8a0000 [0141.432] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0141.432] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52ea133, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x52ea133, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x52ea133, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0141.433] GetProcessHeap () returned 0x8a0000 [0141.433] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.434] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52ea133, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x62b5b1e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x62b5b1e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0141.436] GetProcessHeap () returned 0x8a0000 [0141.436] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.436] GetProcessHeap () returned 0x8a0000 [0141.436] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0141.436] GetProcessHeap () returned 0x8a0000 [0141.437] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0141.437] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0141.437] GetProcessHeap () returned 0x8a0000 [0141.437] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.437] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0141.437] GetProcessHeap () returned 0x8a0000 [0141.437] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0141.437] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\*", lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca27806, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xca27806, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0141.438] GetProcessHeap () returned 0x8a0000 [0141.438] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d40b8 [0141.438] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\1033\\*", lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca27806, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xca27806, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xca27806, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0141.438] GetProcessHeap () returned 0x8a0000 [0141.438] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d40b8 | out: hHeap=0x8a0000) returned 1 [0141.439] GetProcessHeap () returned 0x8a0000 [0141.439] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0141.439] GetProcessHeap () returned 0x8a0000 [0141.439] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.440] GetProcessHeap () returned 0x8a0000 [0141.440] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0141.440] GetProcessHeap () returned 0x8a0000 [0141.440] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0141.440] GetProcessHeap () returned 0x8a0000 [0141.440] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0141.440] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\ODBC\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e16872b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e16872b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2272ee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0141.444] GetProcessHeap () returned 0x8a0000 [0141.444] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0141.444] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\ODBC\\Data Sources\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e2272ee, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e2272ee, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2272ee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993800 [0141.445] GetProcessHeap () returned 0x8a0000 [0141.445] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0141.445] GetProcessHeap () returned 0x8a0000 [0141.445] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0141.445] GetProcessHeap () returned 0x8a0000 [0141.445] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0141.445] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0141.446] GetProcessHeap () returned 0x8a0000 [0141.446] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0141.446] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\MSMAPI\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993600 [0141.446] GetProcessHeap () returned 0x8a0000 [0141.446] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.447] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\MSMAPI\\1033\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0141.447] GetProcessHeap () returned 0x8a0000 [0141.447] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.447] GetProcessHeap () returned 0x8a0000 [0141.447] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0141.447] GetProcessHeap () returned 0x8a0000 [0141.447] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0141.447] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\ole db\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb8dd674, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993600 [0141.448] GetProcessHeap () returned 0x8a0000 [0141.448] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0141.448] GetProcessHeap () returned 0x8a0000 [0141.448] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0141.449] GetProcessHeap () returned 0x8a0000 [0141.449] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a90058 | out: hHeap=0x8a0000) returned 1 [0141.449] GetProcessHeap () returned 0x8a0000 [0141.450] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a90058 [0141.450] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0141.450] GetProcessHeap () returned 0x8a0000 [0141.450] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0141.450] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26f8376, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0141.452] GetProcessHeap () returned 0x8a0000 [0141.452] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0141.453] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\EQUATION\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x28551719, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28551719, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0141.455] GetProcessHeap () returned 0x8a0000 [0141.455] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0141.455] GetProcessHeap () returned 0x8a0000 [0141.455] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0141.455] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefcf5b24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0141.557] GetProcessHeap () returned 0x8a0000 [0141.557] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.558] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1028\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12dd5ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf12dd5ae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993600 [0141.560] GetProcessHeap () returned 0x8a0000 [0141.560] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.560] GetProcessHeap () returned 0x8a0000 [0141.561] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.561] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1031\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e56af1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1e56af1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1e56af1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0141.562] GetProcessHeap () returned 0x8a0000 [0141.562] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.562] GetProcessHeap () returned 0x8a0000 [0141.562] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.562] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1033\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0501a67, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0501a67, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0501a67, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0141.562] GetProcessHeap () returned 0x8a0000 [0141.562] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.562] GetProcessHeap () returned 0x8a0000 [0141.562] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.562] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1036\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0141.563] GetProcessHeap () returned 0x8a0000 [0141.563] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.563] GetProcessHeap () returned 0x8a0000 [0141.563] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.563] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1040\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6296213, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0141.563] GetProcessHeap () returned 0x8a0000 [0141.563] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.563] GetProcessHeap () returned 0x8a0000 [0141.563] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.563] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1041\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf41cdbc1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0141.564] GetProcessHeap () returned 0x8a0000 [0141.564] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.564] GetProcessHeap () returned 0x8a0000 [0141.564] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.564] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1042\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1329a43, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1329a43, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1329a43, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0141.565] GetProcessHeap () returned 0x8a0000 [0141.565] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.565] GetProcessHeap () returned 0x8a0000 [0141.565] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.565] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1046\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b81e2e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b81e2e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b81e2e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0141.567] GetProcessHeap () returned 0x8a0000 [0141.567] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.567] GetProcessHeap () returned 0x8a0000 [0141.567] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.567] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1049\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff31e88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff31e88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b80 [0141.567] GetProcessHeap () returned 0x8a0000 [0141.567] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.567] GetProcessHeap () returned 0x8a0000 [0141.567] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.567] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\2052\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefcf5b24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefcf5b24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefcf5b24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0141.567] GetProcessHeap () returned 0x8a0000 [0141.567] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.568] GetProcessHeap () returned 0x8a0000 [0141.568] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.568] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\3082\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd68243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd68243, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0141.568] GetProcessHeap () returned 0x8a0000 [0141.568] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.568] GetProcessHeap () returned 0x8a0000 [0141.568] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0141.568] GetProcessHeap () returned 0x8a0000 [0141.568] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0141.568] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26f8376, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x28577965, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28577965, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0141.571] GetProcessHeap () returned 0x8a0000 [0141.571] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.571] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\1033\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4512fb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd4512fb5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2ebae3b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0141.572] GetProcessHeap () returned 0x8a0000 [0141.572] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.572] GetProcessHeap () returned 0x8a0000 [0141.572] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.572] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\Cultures\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc436e5a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc436e5a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc436e5a6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0141.573] GetProcessHeap () returned 0x8a0000 [0141.573] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.573] GetProcessHeap () returned 0x8a0000 [0141.573] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.573] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\en-us\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2d86b0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2d86b0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2d86b0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993600 [0141.573] GetProcessHeap () returned 0x8a0000 [0141.573] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.573] GetProcessHeap () returned 0x8a0000 [0141.573] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0141.573] GetProcessHeap () returned 0x8a0000 [0141.573] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0141.573] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Portal\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd8e49f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0141.574] GetProcessHeap () returned 0x8a0000 [0141.574] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.574] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Portal\\1033\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd8e49f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd8e49f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b80 [0141.574] GetProcessHeap () returned 0x8a0000 [0141.574] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.574] GetProcessHeap () returned 0x8a0000 [0141.574] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0141.574] GetProcessHeap () returned 0x8a0000 [0141.574] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0141.574] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc968bf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc968bf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0141.576] GetProcessHeap () returned 0x8a0000 [0141.576] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.576] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA6\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0141.576] GetProcessHeap () returned 0x8a0000 [0141.576] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.576] GetProcessHeap () returned 0x8a0000 [0141.576] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.576] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc968bf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc968bf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc968bf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b80 [0141.577] GetProcessHeap () returned 0x8a0000 [0141.577] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0141.577] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\1033\\*", lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc968bf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993600 [0141.580] GetProcessHeap () returned 0x8a0000 [0141.580] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0141.580] GetProcessHeap () returned 0x8a0000 [0141.580] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.580] GetProcessHeap () returned 0x8a0000 [0141.580] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0141.580] GetProcessHeap () returned 0x8a0000 [0141.580] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0141.581] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c1a793, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993600 [0141.582] GetProcessHeap () returned 0x8a0000 [0141.582] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.582] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\16\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c1a793, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b80 [0141.583] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c1a793, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.583] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd7bf89, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd7bf89, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIN", cAlternateFileName="")) returned 1 [0141.583] GetProcessHeap () returned 0x8a0000 [0141.583] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0141.583] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\*", lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd7bf89, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd7bf89, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0141.583] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd7bf89, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd7bf89, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.583] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd7bf89, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd7bf89, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2a74b071, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1850c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPSRVUTL.DLL", cAlternateFileName="")) returned 1 [0141.583] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2a724e44, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12d678, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPWEC.DLL", cAlternateFileName="")) returned 1 [0141.583] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2a724e44, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12d678, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPWEC.DLL", cAlternateFileName="")) returned 0 [0141.583] FindClose (in: hFindFile=0x993ac0 | out: hFindFile=0x993ac0) returned 1 [0141.584] GetProcessHeap () returned 0x8a0000 [0141.584] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0141.584] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd7bf89, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd7bf89, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIN", cAlternateFileName="")) returned 0 [0141.584] FindClose (in: hFindFile=0x993b80 | out: hFindFile=0x993b80) returned 1 [0141.584] GetProcessHeap () returned 0x8a0000 [0141.584] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.584] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c1a793, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="16", cAlternateFileName="")) returned 0 [0141.584] FindClose (in: hFindFile=0x993600 | out: hFindFile=0x993600) returned 1 [0141.584] GetProcessHeap () returned 0x8a0000 [0141.584] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0141.587] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c1a793, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="WEBSER~1")) returned 0 [0141.587] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0141.587] GetProcessHeap () returned 0x8a0000 [0141.587] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0141.587] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1 [0141.587] GetProcessHeap () returned 0x8a0000 [0141.587] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0141.587] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\System\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0141.588] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.588] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7b78b8d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ole db", cAlternateFileName="OLEDB~1")) returned 1 [0141.589] GetProcessHeap () returned 0x8a0000 [0141.589] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0141.589] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\System\\ole db\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7b78b8d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993600 [0141.589] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7b78b8d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.589] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x39c30, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrw.dll", cAlternateFileName="")) returned 1 [0141.589] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7b78b8d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7b78b8d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7b9ee02, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x27a30, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrwbin.dll", cAlternateFileName="")) returned 1 [0141.590] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7b78b8d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7b78b8d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7b9ee02, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x27a30, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrwbin.dll", cAlternateFileName="")) returned 0 [0141.590] FindClose (in: hFindFile=0x993600 | out: hFindFile=0x993600) returned 1 [0141.590] GetProcessHeap () returned 0x8a0000 [0141.590] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0141.590] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7b78b8d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ole db", cAlternateFileName="OLEDB~1")) returned 0 [0141.590] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0141.590] GetProcessHeap () returned 0x8a0000 [0141.590] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0141.590] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 0 [0141.590] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0141.590] GetProcessHeap () returned 0x8a0000 [0141.590] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a90058 | out: hHeap=0x8a0000) returned 1 [0141.591] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2e11c27d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e11c27d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ProgramFilesX64", cAlternateFileName="PROGRA~1")) returned 1 [0141.591] GetProcessHeap () returned 0x8a0000 [0141.591] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a90058 [0141.592] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2e11c27d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e11c27d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0141.593] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2e11c27d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e11c27d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.593] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb142e44, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Analysis Services", cAlternateFileName="MICROS~1")) returned 1 [0141.593] GetProcessHeap () returned 0x8a0000 [0141.593] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0141.593] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb142e44, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0141.800] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb142e44, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.800] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb142e44, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AS OLEDB", cAlternateFileName="ASOLED~1")) returned 1 [0141.816] GetProcessHeap () returned 0x8a0000 [0141.816] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0141.827] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb142e44, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0141.840] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb142e44, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.840] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ae4bf10, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ae4bf10, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="110", cAlternateFileName="")) returned 1 [0141.840] GetProcessHeap () returned 0x8a0000 [0141.851] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.852] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ae4bf10, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ae4bf10, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b80 [0141.854] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ae4bf10, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ae4bf10, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.854] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a6fec90, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2aebe60a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2aebe60a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cartridges", cAlternateFileName="CARTRI~1")) returned 1 [0141.854] GetProcessHeap () returned 0x8a0000 [0141.854] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0141.854] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\Cartridges\\*", lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a6fec90, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2aebe60a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2aebe60a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993600 [0141.856] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a6fec90, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2aebe60a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2aebe60a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.856] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a79751b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2a79751b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2a7bd7ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="as80.xsl", cAlternateFileName="")) returned 1 [0141.856] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a7712cc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2a7712cc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2a79751b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x49ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="as90.xsl", cAlternateFileName="")) returned 1 [0141.857] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a7712cc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2a7712cc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2a7bd7ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x75ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="db2v0801.xsl", cAlternateFileName="")) returned 1 [0141.857] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a7bd7ac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2a7bd7ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2a7e39eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1816e, dwReserved0=0x0, dwReserved1=0x0, cFileName="hive.xsl", cAlternateFileName="")) returned 1 [0141.857] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a809c41, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2a809c41, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2a8560d3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7b27, dwReserved0=0x0, dwReserved1=0x0, cFileName="Informix.xsl", cAlternateFileName="")) returned 1 [0141.857] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a809c41, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2a809c41, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2a8560d3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7339, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjet.xsl", cAlternateFileName="")) returned 1 [0141.857] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a6fec90, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2a6fec90, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2a74b071, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="orcl7.xsl", cAlternateFileName="")) returned 1 [0141.857] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a74b071, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2a74b071, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2a74b071, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x858c, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql2000.xsl", cAlternateFileName="")) returned 1 [0141.857] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a74b071, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2a74b071, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2a74b071, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e02, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql70.xsl", cAlternateFileName="")) returned 1 [0141.857] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a6fec90, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2a6fec90, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2a74b071, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18559, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql90.xsl", cAlternateFileName="")) returned 1 [0141.857] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a809c41, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2a809c41, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2a809c41, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1393e, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlpdw.xsl", cAlternateFileName="")) returned 1 [0141.857] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2aebe60a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2aebe60a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2aebe60a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x76a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sybase.xsl", cAlternateFileName="")) returned 1 [0141.857] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a7bd7ac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2a7bd7ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2a7e39eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c42, dwReserved0=0x0, dwReserved1=0x0, cFileName="trdtv2r41.xsl", cAlternateFileName="TRDTV2~1.XSL")) returned 1 [0141.857] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a7bd7ac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2a7bd7ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2a7e39eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c42, dwReserved0=0x0, dwReserved1=0x0, cFileName="trdtv2r41.xsl", cAlternateFileName="TRDTV2~1.XSL")) returned 0 [0141.857] FindClose (in: hFindFile=0x993600 | out: hFindFile=0x993600) returned 1 [0141.858] GetProcessHeap () returned 0x8a0000 [0141.858] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0141.858] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2a7e39eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ae4bf10, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17beb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dbghelp.dll", cAlternateFileName="")) returned 1 [0141.858] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x659fb9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x659fb9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2adffa3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x395ec40, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdlocal.dll", cAlternateFileName="MSMDLO~1.DLL")) returned 1 [0141.859] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf630892f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf630892f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf632eb9d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x785a90, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmgdsrv.dll", cAlternateFileName="")) returned 1 [0141.859] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x63a229e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x63a229e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0d4700, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b0a88, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolap110.dll", cAlternateFileName="MSOLAP~1.DLL")) returned 1 [0141.859] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc692f34, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc692f34, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc692f34, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x484b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui110.dll", cAlternateFileName="MSOLUI~1.DLL")) returned 1 [0141.859] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb142e44, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1 [0141.859] GetProcessHeap () returned 0x8a0000 [0141.859] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0141.859] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\*", lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb142e44, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993600 [0141.859] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb142e44, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.859] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee45f66d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0141.859] GetProcessHeap () returned 0x8a0000 [0141.860] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d40b8 [0141.860] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\1033\\*", lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee45f66d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993800 [0141.860] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee45f66d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.860] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee308135, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcae6392, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1132d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdsrv.rll", cAlternateFileName="")) returned 1 [0141.860] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee45f66d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c70, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdsrvi.rll", cAlternateFileName="")) returned 1 [0141.860] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb59528e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3728, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui110.rll", cAlternateFileName="MSOLUI~1.RLL")) returned 1 [0141.860] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb59528e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3728, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui110.rll", cAlternateFileName="MSOLUI~1.RLL")) returned 0 [0141.860] FindClose (in: hFindFile=0x993800 | out: hFindFile=0x993800) returned 1 [0141.860] GetProcessHeap () returned 0x8a0000 [0141.860] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d40b8 | out: hHeap=0x8a0000) returned 1 [0141.861] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee45f66d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0141.861] FindClose (in: hFindFile=0x993600 | out: hFindFile=0x993600) returned 1 [0141.861] GetProcessHeap () returned 0x8a0000 [0141.861] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0141.861] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa4733b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa4733b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa50bd2e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1b050, dwReserved0=0x0, dwReserved1=0x0, cFileName="SQLDumper.exe", cAlternateFileName="SQLDUM~1.EXE")) returned 1 [0141.861] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4692737, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4692737, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2b0d4700, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18016f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmsrv.dll", cAlternateFileName="")) returned 1 [0141.861] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4692737, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4692737, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2b0d4700, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18016f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmsrv.dll", cAlternateFileName="")) returned 0 [0141.861] FindClose (in: hFindFile=0x993b80 | out: hFindFile=0x993b80) returned 1 [0141.861] GetProcessHeap () returned 0x8a0000 [0141.861] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.862] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ae4bf10, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ae4bf10, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="110", cAlternateFileName="")) returned 0 [0141.862] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0141.862] GetProcessHeap () returned 0x8a0000 [0141.862] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0141.863] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb142e44, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AS OLEDB", cAlternateFileName="ASOLED~1")) returned 0 [0141.863] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0141.863] GetProcessHeap () returned 0x8a0000 [0141.863] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0141.863] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e11c27d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e11c27d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e11c27d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="MICROS~3")) returned 1 [0141.863] GetProcessHeap () returned 0x8a0000 [0141.863] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0141.863] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Office\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e11c27d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e11c27d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e11c27d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0141.866] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e11c27d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e11c27d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e11c27d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.866] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e11c27d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e11c27d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e11c27d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0141.866] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0141.866] GetProcessHeap () returned 0x8a0000 [0141.866] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0141.866] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft SQL Server", cAlternateFileName="MICROS~2")) returned 1 [0141.866] GetProcessHeap () returned 0x8a0000 [0141.866] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0141.866] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993600 [0141.867] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.867] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="110", cAlternateFileName="")) returned 1 [0141.868] GetProcessHeap () returned 0x8a0000 [0141.868] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0141.868] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\110\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0141.868] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.868] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared", cAlternateFileName="")) returned 1 [0141.868] GetProcessHeap () returned 0x8a0000 [0141.868] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.869] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\110\\Shared\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0141.869] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.869] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc5d437d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6c60, dwReserved0=0x0, dwReserved1=0x0, cFileName="msasxpress.dll", cAlternateFileName="MSASXP~1.DLL")) returned 1 [0141.869] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc5d437d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6c60, dwReserved0=0x0, dwReserved1=0x0, cFileName="msasxpress.dll", cAlternateFileName="MSASXP~1.DLL")) returned 0 [0141.869] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0141.869] GetProcessHeap () returned 0x8a0000 [0141.869] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.870] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared", cAlternateFileName="")) returned 0 [0141.870] FindClose (in: hFindFile=0x993a00 | out: hFindFile=0x993a00) returned 1 [0141.870] GetProcessHeap () returned 0x8a0000 [0141.870] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0141.870] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="110", cAlternateFileName="")) returned 0 [0141.870] FindClose (in: hFindFile=0x993600 | out: hFindFile=0x993600) returned 1 [0141.870] GetProcessHeap () returned 0x8a0000 [0141.870] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0141.871] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.NET", cAlternateFileName="MICROS~1.NET")) returned 1 [0141.871] GetProcessHeap () returned 0x8a0000 [0141.872] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0141.872] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b80 [0141.873] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.873] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADOMD.NET", cAlternateFileName="")) returned 1 [0141.873] GetProcessHeap () returned 0x8a0000 [0141.873] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0141.873] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0141.874] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.874] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="110", cAlternateFileName="")) returned 1 [0141.874] GetProcessHeap () returned 0x8a0000 [0141.874] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.875] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\110\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0141.875] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.875] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xafe30, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.AdomdClient.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0141.875] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xafe30, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.AdomdClient.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0141.875] FindClose (in: hFindFile=0x9937c0 | out: hFindFile=0x9937c0) returned 1 [0141.875] GetProcessHeap () returned 0x8a0000 [0141.875] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0141.875] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="110", cAlternateFileName="")) returned 0 [0141.875] FindClose (in: hFindFile=0x993a00 | out: hFindFile=0x993a00) returned 1 [0141.875] GetProcessHeap () returned 0x8a0000 [0141.875] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0141.876] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADOMD.NET", cAlternateFileName="")) returned 0 [0141.876] FindClose (in: hFindFile=0x993b80 | out: hFindFile=0x993b80) returned 1 [0141.876] GetProcessHeap () returned 0x8a0000 [0141.876] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0141.877] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.NET", cAlternateFileName="MICROS~1.NET")) returned 0 [0141.877] FindClose (in: hFindFile=0x993ac0 | out: hFindFile=0x993ac0) returned 1 [0141.877] GetProcessHeap () returned 0x8a0000 [0141.877] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a90058 | out: hHeap=0x8a0000) returned 1 [0141.877] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ProgramFilesX86", cAlternateFileName="PROGRA~2")) returned 1 [0141.877] GetProcessHeap () returned 0x8a0000 [0141.877] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a90058 [0141.877] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0141.879] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.879] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Analysis Services", cAlternateFileName="MICROS~2")) returned 1 [0141.879] GetProcessHeap () returned 0x8a0000 [0141.879] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0141.880] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0141.880] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.880] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AS OLEDB", cAlternateFileName="ASOLED~1")) returned 1 [0141.881] GetProcessHeap () returned 0x8a0000 [0141.881] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0141.881] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0141.882] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.882] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2b0d4700, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0d4700, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="110", cAlternateFileName="")) returned 1 [0141.882] GetProcessHeap () returned 0x8a0000 [0141.882] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0141.882] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2b0d4700, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0d4700, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0141.884] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2b0d4700, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0d4700, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.884] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2afef8f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b0ae4ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0ae4ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cartridges", cAlternateFileName="CARTRI~1")) returned 1 [0141.884] GetProcessHeap () returned 0x8a0000 [0141.884] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0141.884] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\Cartridges\\*", lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2afef8f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b0ae4ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0ae4ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0141.886] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2afef8f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b0ae4ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0ae4ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.886] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2b015b1d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b015b1d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b015b1d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="as80.xsl", cAlternateFileName="")) returned 1 [0141.886] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2b015b1d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b015b1d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b015b1d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x49ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="as90.xsl", cAlternateFileName="")) returned 1 [0141.886] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2b015b1d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b015b1d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b015b1d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x75ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="db2v0801.xsl", cAlternateFileName="")) returned 1 [0141.886] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2afef8f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2afef8f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b015b1d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1816e, dwReserved0=0x0, dwReserved1=0x0, cFileName="hive.xsl", cAlternateFileName="")) returned 1 [0142.102] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2afef8f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2afef8f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2afef8f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7b27, dwReserved0=0x0, dwReserved1=0x0, cFileName="Informix.xsl", cAlternateFileName="")) returned 1 [0142.109] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2b015b1d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b015b1d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b015b1d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7339, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjet.xsl", cAlternateFileName="")) returned 1 [0142.109] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2afef8f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2afef8f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2afef8f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="orcl7.xsl", cAlternateFileName="")) returned 1 [0142.109] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2afef8f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2afef8f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2afef8f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x858c, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql2000.xsl", cAlternateFileName="")) returned 1 [0142.109] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2b0ae4ba, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b0ae4ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0ae4ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e02, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql70.xsl", cAlternateFileName="")) returned 1 [0142.109] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2b0ae4ba, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b0ae4ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0ae4ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18559, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql90.xsl", cAlternateFileName="")) returned 1 [0142.110] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2b0882a6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b0882a6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0882a6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1393e, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlpdw.xsl", cAlternateFileName="")) returned 1 [0142.110] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2b0ae4ba, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b0ae4ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0ae4ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x76a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sybase.xsl", cAlternateFileName="")) returned 1 [0142.110] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2b0ae4ba, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b0ae4ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0ae4ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c42, dwReserved0=0x0, dwReserved1=0x0, cFileName="trdtv2r41.xsl", cAlternateFileName="TRDTV2~1.XSL")) returned 1 [0142.110] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2b0ae4ba, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b0ae4ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0ae4ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c42, dwReserved0=0x0, dwReserved1=0x0, cFileName="trdtv2r41.xsl", cAlternateFileName="TRDTV2~1.XSL")) returned 0 [0142.110] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0142.129] GetProcessHeap () returned 0x8a0000 [0142.129] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0142.129] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa937f07, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2b015b1d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0d4700, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x128848, dwReserved0=0x0, dwReserved1=0x0, cFileName="dbghelp.dll", cAlternateFileName="")) returned 1 [0142.129] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2d25b938, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2771c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdlocal.dll", cAlternateFileName="MSMDLO~1.DLL")) returned 1 [0142.129] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa5ff4c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa5ff4c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa8619f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6d4290, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmgdsrv.dll", cAlternateFileName="")) returned 1 [0142.129] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x386b77a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x386b77a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ba84052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x735cf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolap110.dll", cAlternateFileName="MSOLAP~1.DLL")) returned 1 [0142.154] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4befc00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4befc00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2ba5ddea, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44718, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui110.dll", cAlternateFileName="MSOLUI~1.DLL")) returned 1 [0142.154] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1 [0142.155] GetProcessHeap () returned 0x8a0000 [0142.155] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0142.155] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\*", lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993600 [0142.197] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.213] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf3143659, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0142.222] GetProcessHeap () returned 0x8a0000 [0142.222] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d40b8 [0142.228] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\1033\\*", lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf3143659, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0142.246] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf3143659, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.246] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x113870, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdsrv.rll", cAlternateFileName="")) returned 1 [0142.253] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3143659, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf3143659, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca99edb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1126d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdsrvi.rll", cAlternateFileName="")) returned 1 [0142.267] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61fd8b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3728, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui110.rll", cAlternateFileName="MSOLUI~1.RLL")) returned 1 [0142.267] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61fd8b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3728, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui110.rll", cAlternateFileName="MSOLUI~1.RLL")) returned 0 [0142.267] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0142.273] GetProcessHeap () returned 0x8a0000 [0142.280] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d40b8 | out: hHeap=0x8a0000) returned 1 [0142.280] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf3143659, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0142.283] FindClose (in: hFindFile=0x993600 | out: hFindFile=0x993600) returned 1 [0142.299] GetProcessHeap () returned 0x8a0000 [0142.299] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0142.299] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5e91324, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5e91324, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5eb74f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17a50, dwReserved0=0x0, dwReserved1=0x0, cFileName="SQLDumper.exe", cAlternateFileName="SQLDUM~1.EXE")) returned 1 [0142.304] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa2f5c0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa2f5c0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2d19cde8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e106f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmsrv.dll", cAlternateFileName="")) returned 1 [0142.305] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa2f5c0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa2f5c0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2d19cde8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e106f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmsrv.dll", cAlternateFileName="")) returned 0 [0142.319] FindClose (in: hFindFile=0x993a00 | out: hFindFile=0x993a00) returned 1 [0142.326] GetProcessHeap () returned 0x8a0000 [0142.332] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0142.345] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2b0d4700, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0d4700, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="110", cAlternateFileName="")) returned 0 [0142.346] FindClose (in: hFindFile=0x9937c0 | out: hFindFile=0x9937c0) returned 1 [0142.365] GetProcessHeap () returned 0x8a0000 [0142.365] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0142.386] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AS OLEDB", cAlternateFileName="ASOLED~1")) returned 0 [0142.393] FindClose (in: hFindFile=0x9939c0 | out: hFindFile=0x9939c0) returned 1 [0142.393] GetProcessHeap () returned 0x8a0000 [0142.393] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0142.393] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2f517e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2f517e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2f517e4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="MICROS~1")) returned 1 [0142.394] GetProcessHeap () returned 0x8a0000 [0142.394] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0142.394] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2f517e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2f517e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2f517e4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0142.394] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2f517e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2f517e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2f517e4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.394] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2f517e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office16", cAlternateFileName="")) returned 1 [0142.394] GetProcessHeap () returned 0x8a0000 [0142.394] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0142.394] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2f517e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0142.409] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2f517e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.418] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd43957d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca99edb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e1424f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0142.418] GetProcessHeap () returned 0x8a0000 [0142.418] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0142.419] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\1033\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd43957d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca99edb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e1424f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993600 [0142.422] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd43957d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca99edb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e1424f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.422] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45d3b76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf45d3b76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf45d3b76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3058, dwReserved0=0x0, dwReserved1=0x0, cFileName="BHOINTL.DLL", cAlternateFileName="")) returned 1 [0142.422] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4ba375b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4ba375b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x87da40, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveIntlResource.dll", cAlternateFileName="GROOVE~1.DLL")) returned 1 [0142.422] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf46b8986, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf46b8986, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca73c66, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52848, dwReserved0=0x0, dwReserved1=0x0, cFileName="lyncDesktopResources.dll", cAlternateFileName="LYNCDE~1.DLL")) returned 1 [0142.422] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee2e1f46, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee2e1f46, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee3545e6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b6b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPISHELLR.DLL", cAlternateFileName="MAPISH~1.DLL")) returned 1 [0142.422] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4cfac8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4cfac8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a3de35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xee48, dwReserved0=0x0, dwReserved1=0x0, cFileName="ocapires.dll", cAlternateFileName="")) returned 1 [0142.422] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed12666a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed12666a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xed231745, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OcHelperResource.dll", cAlternateFileName="OCHELP~1.DLL")) returned 1 [0142.422] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1bf45a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1bf45a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1bf45a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1a878, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCLTINT.DLL", cAlternateFileName="")) returned 1 [0142.422] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf263c7d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf263c7d5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16e6a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OcPubRes.dll", cAlternateFileName="")) returned 1 [0142.423] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2e1424f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e1424f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e1424f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWSHLP10.CHM", cAlternateFileName="")) returned 1 [0142.423] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd43957d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd43957d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd442e16d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x380d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="STSUCRES.DLL", cAlternateFileName="")) returned 1 [0142.423] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x34c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STSUPLD.INTL.DLL", cAlternateFileName="STSUPL~1.DLL")) returned 1 [0142.423] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1860d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1860d8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1860d8a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x29048, dwReserved0=0x0, dwReserved1=0x0, cFileName="UcAddinRes.dll", cAlternateFileName="UCADDI~1.DLL")) returned 1 [0142.423] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefebf763, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefebf763, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca99edb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a048, dwReserved0=0x0, dwReserved1=0x0, cFileName="UccApiRes.dll", cAlternateFileName="UCCAPI~1.DLL")) returned 1 [0142.423] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca99edb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xca99edb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x411f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBAOWS10.CHM", cAlternateFileName="")) returned 1 [0142.423] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4cfac8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4cfac8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb0c5e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x85a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="VVIEWRES.DLL", cAlternateFileName="")) returned 1 [0142.423] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4cfac8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4cfac8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb0c5e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x85a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="VVIEWRES.DLL", cAlternateFileName="")) returned 0 [0142.423] FindClose (in: hFindFile=0x993600 | out: hFindFile=0x993600) returned 1 [0142.424] GetProcessHeap () returned 0x8a0000 [0142.424] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0142.424] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x386b77a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x386b77a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x386b77a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="APDEA0~1.DLL")) returned 1 [0142.424] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2b31ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2b31ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="APC7B0~1.DLL")) returned 1 [0142.424] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="AP6221~1.DLL")) returned 1 [0142.424] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d97f24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d97f24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="API-MS~3.DLL")) returned 1 [0142.425] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a1d539, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2a1d539, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ebbef3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="APF10C~1.DLL")) returned 1 [0142.425] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x624ad43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1 [0142.425] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb67b102, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb67b102, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb6c7584, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="APA632~1.DLL")) returned 1 [0142.425] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6bae279, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6bae279, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bae279, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1 [0142.425] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfaf2dd35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf2dd35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaf7a22a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x58c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="APFD9C~1.DLL")) returned 1 [0142.425] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf75cf220, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf75cf220, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7beb2bc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="APC00F~1.DLL")) returned 1 [0142.425] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa2f5c0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa2f5c0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa2f5c0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="AP0479~1.DLL")) returned 1 [0142.425] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9f15ef0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9f15ef0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9f15ef0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="AP23C9~1.DLL")) returned 1 [0142.425] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa15225b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa15225b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa616dcb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1 [0142.425] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff31e88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff7e33c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x72c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1 [0142.425] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb94fd84, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb94fd84, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb99c21f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x68c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1 [0142.425] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1 [0142.425] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4646280, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4646280, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="API-MS~4.DLL")) returned 1 [0142.425] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa15225b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa15225b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa2834f0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="AP8F34~1.DLL")) returned 1 [0142.426] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1329a43, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1329a43, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf145ad52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1 [0142.426] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa15225b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa15225b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa5581c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="APBF0F~1.DLL")) returned 1 [0142.426] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d05722, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d05722, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d05722, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="AP5E4C~1.DLL")) returned 1 [0142.426] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e0ae4d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e0ae4d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e572fe, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="AP80F4~1.DLL")) returned 1 [0142.426] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6dea551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6dea551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6dea551, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x66a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppSharingChromeHook.dll", cAlternateFileName="APPSHA~1.DLL")) returned 1 [0142.426] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9f15ef0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9f15ef0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa178468, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8a48, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppSharingHookController.exe", cAlternateFileName="APPSHA~1.EXE")) returned 1 [0142.426] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0xfa178468, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa178468, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa178468, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvStream32.dll", cAlternateFileName="APPVIS~1.DLL")) returned 1 [0142.429] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0xfa178468, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa178468, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa178468, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvSubsystems32.dll", cAlternateFileName="APPVIS~2.DLL")) returned 1 [0142.429] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e0ae4d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e0ae4d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e310c7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12e48, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AutoHelper.dll", cAlternateFileName="AUTOHE~1.DLL")) returned 1 [0142.429] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0xfa178468, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa178468, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa178468, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2R32.dll", cAlternateFileName="")) returned 1 [0142.429] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992fb3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992fb3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2283d0f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b740, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="concrt140.dll", cAlternateFileName="CONCRT~1.DLL")) returned 1 [0142.429] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3201264, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2c4a611d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2c4a611d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="DCF", cAlternateFileName="")) returned 1 [0142.429] GetProcessHeap () returned 0x8a0000 [0142.429] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0142.429] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3201264, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2c4a611d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2c4a611d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993800 [0143.089] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3201264, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2c4a611d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2c4a611d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.091] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf428c77b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf428c77b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf428c77b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0143.091] GetProcessHeap () returned 0x8a0000 [0143.091] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0143.091] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\1033\\*", lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf428c77b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf428c77b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf428c77b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0143.092] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf428c77b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf428c77b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf428c77b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.092] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf428c77b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf428c77b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42b29f3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4848, dwReserved0=0x0, dwReserved1=0x0, cFileName="NATIVESHIM.RESOURCES.DLL", cAlternateFileName="NATIVE~1.DLL")) returned 1 [0143.092] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf428c77b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf428c77b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42b29f3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4848, dwReserved0=0x0, dwReserved1=0x0, cFileName="NATIVESHIM.RESOURCES.DLL", cAlternateFileName="NATIVE~1.DLL")) returned 0 [0143.092] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0143.092] GetProcessHeap () returned 0x8a0000 [0143.092] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0143.092] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2c4a611d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2c4a611d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2c4a611d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21276, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessCompare.rdlc", cAlternateFileName="ACCESS~1.RDL")) returned 1 [0143.092] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2c4a611d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2c4a611d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2c4a611d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa20, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMessageDismissal.txt", cAlternateFileName="ACCESS~1.TXT")) returned 1 [0143.092] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa82ce6a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa82ce6a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa853100, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.AuditItems.dll", cAlternateFileName="COMMON~4.DLL")) returned 1 [0143.092] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87b1cd2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x87b1cd2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x97efe5f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa460, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.ClientConfiguration.dll", cAlternateFileName="COCECA~1.DLL")) returned 1 [0143.092] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1814809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.DatabaseCore.dll", cAlternateFileName="COMMON~1.DLL")) returned 1 [0143.092] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5f9c329, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5f9c329, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5f9c329, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a860, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.DatabaseServices.dll", cAlternateFileName="CO3DCE~1.DLL")) returned 1 [0143.093] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5df79a9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5df79a9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5e9028c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7860, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.DBConnection.exe", cAlternateFileName="COMMON~1.EXE")) returned 1 [0143.093] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa853100, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa853100, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa89f599, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.DBConnection64.exe", cAlternateFileName="COMMON~2.EXE")) returned 1 [0143.093] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb8dd674, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb8dd674, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb9038f2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x684c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.ExcelServices.dll", cAlternateFileName="CO37ED~1.DLL")) returned 1 [0143.093] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x18a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.FileUtils.dll", cAlternateFileName="COMMON~3.DLL")) returned 1 [0143.093] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf43250ed, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf43250ed, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf43e3cb7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.MsoInterop.dll", cAlternateFileName="COMMON~2.DLL")) returned 1 [0143.093] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc47ce76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc47ce76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc47ce76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.PasswordManager.dll", cAlternateFileName="CO07E9~1.DLL")) returned 1 [0143.093] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffe01c35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffe01c35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffe01c35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6460, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.ShowHelp.exe", cAlternateFileName="COMMON~3.EXE")) returned 1 [0143.093] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x305f84a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x305f84a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x36c7dee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.SqlDatabase.dll", cAlternateFileName="COF0D3~1.DLL")) returned 1 [0143.093] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4cfbc75, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4cfbc75, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4d48116, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b460, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATABASECOMPARE.EXE", cAlternateFileName="DATABA~1.EXE")) returned 1 [0143.093] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e0ae4d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e0ae4d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e310c7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9060, dwReserved0=0x0, dwReserved1=0x0, cFileName="DcfMsoWrapper.dll", cAlternateFileName="DCFMSO~1.DLL")) returned 1 [0143.093] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a30a43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a30a43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a56cbe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7660, dwReserved0=0x0, dwReserved1=0x0, cFileName="DcfMsoWrapper.x86.dll", cAlternateFileName="DCFMSO~2.DLL")) returned 1 [0143.094] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6e36a06, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6e36a06, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e36a06, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x561718, dwReserved0=0x0, dwReserved1=0x0, cFileName="DocumentFormat.OpenXml.dll", cAlternateFileName="DOCUME~1.DLL")) returned 1 [0143.094] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2c47fe0a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2c47fe0a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2c47fe0a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="EmptyReport.rdlc", cAlternateFileName="EMPTYR~1.RDL")) returned 1 [0143.094] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3201264, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1 [0143.094] GetProcessHeap () returned 0x8a0000 [0143.094] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0143.094] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\*", lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3201264, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0143.096] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3201264, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.097] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3201264, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3201264, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe330c311, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x32c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.AuditItems.Resources.dll", cAlternateFileName="COMMON~1.DLL")) returned 1 [0143.097] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1755c61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1755c61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6070, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.ClientConfiguration.Resources.dll", cAlternateFileName="COMMON~4.DLL")) returned 1 [0143.097] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8789aa5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe8789aa5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe8894afa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x42c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.ExcelServices.Resources.dll", cAlternateFileName="COMMON~2.DLL")) returned 1 [0143.097] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4ba375b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4ba375b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf2b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.FileUtils.Resources.dll", cAlternateFileName="COA5FF~1.DLL")) returned 1 [0143.097] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefdda943, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefdda943, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefdda943, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb468, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.PasswordManager.Resources.dll", cAlternateFileName="COMMON~3.DLL")) returned 1 [0143.097] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf44c8b33, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf44c8b33, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2db78, dwReserved0=0x0, dwReserved1=0x0, cFileName="DatabaseCompare.HxS", cAlternateFileName="DATABA~1.HXS")) returned 1 [0143.097] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb0c5e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb0c5e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb0c5e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DatabaseCompare_col.hxc", cAlternateFileName="DATABA~1.HXC")) returned 1 [0143.097] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb0c5e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb0c5e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb0c5e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="DatabaseCompare_col.hxt", cAlternateFileName="DATABA~1.HXT")) returned 1 [0143.098] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcae6392, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcae6392, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcae6392, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="DatabaseCompare_f_col.hxk", cAlternateFileName="DATABA~1.HXK")) returned 1 [0143.098] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb0c5e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb0c5e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb0c5e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="DatabaseCompare_k_col.hxk", cAlternateFileName="DATABA~2.HXK")) returned 1 [0143.098] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed5eb1ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed5eb1ce, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcae6392, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x36eb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpreadsheetCompare.HxS", cAlternateFileName="SPREAD~1.HXS")) returned 1 [0143.098] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcae6392, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcae6392, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb0c5e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpreadsheetCompare_col.hxc", cAlternateFileName="SPREAD~1.HXC")) returned 1 [0143.098] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb0c5e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb0c5e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpreadsheetCompare_col.hxt", cAlternateFileName="SPREAD~1.HXT")) returned 1 [0143.098] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb58a9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb58a9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpreadsheetCompare_f_col.hxk", cAlternateFileName="SPREAD~1.HXK")) returned 1 [0143.098] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpreadsheetCompare_k_col.hxk", cAlternateFileName="SPREAD~2.HXK")) returned 1 [0143.098] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5a8a2df, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a8a2df, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5ab054a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5860, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpreadsheetIQ.Diagram.Resources.dll", cAlternateFileName="SPREAD~3.DLL")) returned 1 [0143.098] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4b3103f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4b3103f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4b3103f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe5c68, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpreadsheetIQ.ExcelAddin.Resources.dll", cAlternateFileName="SPREAD~2.DLL")) returned 1 [0143.098] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1814809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5270, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpreadsheetIQ.ExcelServices.Resources.dll", cAlternateFileName="SPREAD~1.DLL")) returned 1 [0143.098] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1814809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5270, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpreadsheetIQ.ExcelServices.Resources.dll", cAlternateFileName="SPREAD~1.DLL")) returned 0 [0143.098] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0143.099] GetProcessHeap () returned 0x8a0000 [0143.099] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0143.099] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2c4a611d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2c4a611d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2c4a611d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMessageDismissal.txt", cAlternateFileName="EXCELM~1.TXT")) returned 1 [0143.099] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x520cca6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x520cca6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5259176, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b6c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="filecompare.exe", cAlternateFileName="FILECO~1.EXE")) returned 1 [0143.099] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b3bafd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b3bafd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b3bafd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4d050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Shared.v11.1.dll", cAlternateFileName="INC5E8~1.DLL")) returned 1 [0143.100] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4c63313, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4c63313, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4c63313, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x120ab8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Win.Misc.v11.1.dll", cAlternateFileName="IN2EFE~1.DLL")) returned 1 [0143.100] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1329a43, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1329a43, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1329a43, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd1050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Win.Misc.v8.1.dll", cAlternateFileName="INFRAG~2.DLL")) returned 1 [0143.100] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2f5480d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2f5480d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2f5480d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x218068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Win.UltraChart.v11.1.Design.dll", cAlternateFileName="IN3F5C~1.DLL")) returned 1 [0143.100] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc5fa5d2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc5fa5d2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc5fa5d2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x20cac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Win.UltraChart.v8.1.Design.dll", cAlternateFileName="INEBA1~1.DLL")) returned 1 [0143.100] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9a77594, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9a77594, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9a77594, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1b7068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Win.UltraWinChart.v11.1.dll", cAlternateFileName="IN23A5~1.DLL")) returned 1 [0143.100] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e7d566, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e7d566, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e7d566, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7c068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Win.UltraWinEditors.v11.1.dll", cAlternateFileName="IN7A94~1.DLL")) returned 1 [0143.101] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b0f72e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b0f72e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b0f72e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x71068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Win.UltraWinEditors.v8.1.dll", cAlternateFileName="INFRAG~4.DLL")) returned 1 [0143.101] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2f7aa31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2f7aa31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2fa0ca2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x232060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Win.UltraWinGrid.v11.1.dll", cAlternateFileName="IN41D8~1.DLL")) returned 1 [0143.101] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5ab1579, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5ab1579, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5eb74f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d5ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Win.UltraWinGrid.v8.1.dll", cAlternateFileName="IN06CE~1.DLL")) returned 1 [0143.101] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf158c060, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf158c060, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf16bd2da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x36070, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Win.UltraWinStatusBar.v11.1.dll", cAlternateFileName="INFRAG~3.DLL")) returned 1 [0143.101] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf311d3eb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf311d3eb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf311d3eb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x35068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Win.UltraWinStatusBar.v8.1.dll", cAlternateFileName="INA095~1.DLL")) returned 1 [0143.101] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80d6078, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x42070, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Win.UltraWinTabControl.v11.1.dll", cAlternateFileName="IN1488~1.DLL")) returned 1 [0143.101] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff0bc27, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff31e88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x42ad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Win.UltraWinTabControl.v8.1.dll", cAlternateFileName="INFRAG~1.DLL")) returned 1 [0143.101] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1698075, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1698075, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1698075, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a0ad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Win.UltraWinToolbars.v11.1.dll", cAlternateFileName="IN732F~1.DLL")) returned 1 [0143.101] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfaf53f9d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf53f9d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb43ee0e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x269068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Win.UltraWinToolbars.v8.1.dll", cAlternateFileName="IN58F0~1.DLL")) returned 1 [0143.101] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6c93006, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa0ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Win.UltraWinTree.v11.1.dll", cAlternateFileName="INC660~1.DLL")) returned 1 [0143.101] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2f0835f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2f0835f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2f5480d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Win.UltraWinTree.v8.1.dll", cAlternateFileName="IN3A49~1.DLL")) returned 1 [0143.101] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7b14e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7b14e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7d7750, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b8048, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Win.v11.1.dll", cAlternateFileName="IN9B72~1.DLL")) returned 1 [0143.101] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x680214, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x680214, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x680214, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Inquire.dll", cAlternateFileName="")) returned 1 [0143.102] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf63ed72c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf63ed72c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6a7bf80, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.Access.dao.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0143.102] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61d7668, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61d7668, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61d7668, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1d0c58, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.Access.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0143.102] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc6b9190, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc6b9190, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc6b9190, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x199a58, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.Excel.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0143.102] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6297232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6297232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6297232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd248, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Vbe.Interop.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0143.102] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xec8b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSVCR110.DLL", cAlternateFileName="")) returned 1 [0143.102] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb86af90, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb86af90, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb8b74ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="NativeShim.dll", cAlternateFileName="NATIVE~2.DLL")) returned 1 [0143.102] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9bf4d66, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9bf4d66, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e0ae4d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x42a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NativeShim.Resources.dll", cAlternateFileName="NATIVE~1.DLL")) returned 1 [0143.102] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb713a45, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb713a45, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb78613f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9aaa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Northwoods.Go.dll", cAlternateFileName="NORTHW~1.DLL")) returned 1 [0143.102] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a2a905, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a2a905, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6faa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="office.dll", cAlternateFileName="")) returned 1 [0143.103] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5a3ee57, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a3ee57, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5ad77c9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f0c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPREADSHEETCOMPARE.EXE", cAlternateFileName="SPREAD~1.EXE")) returned 1 [0143.103] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5127e7d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5127e7d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5127e7d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd0c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpreadsheetIQ.Diagram.dll", cAlternateFileName="SPREAD~3.DLL")) returned 1 [0143.103] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1c66c57, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c66c57, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c66c57, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1332c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpreadsheetIQ.ExcelAddIn.dll", cAlternateFileName="SPREAD~1.DLL")) returned 1 [0143.103] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpreadsheetIQ.ExcelServices.dll", cAlternateFileName="SPREAD~2.DLL")) returned 1 [0143.103] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf64139b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf64139b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6a7bf80, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6040, dwReserved0=0x0, dwReserved1=0x0, cFileName="stdole.dll", cAlternateFileName="")) returned 1 [0143.103] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x381f2dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x381f2dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11058, dwReserved0=0x0, dwReserved1=0x0, cFileName="SyncFusion.Compression.Base.dll", cAlternateFileName="SY9561~1.DLL")) returned 1 [0143.103] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5a8a2df, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a8a2df, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a8a2df, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1f040, dwReserved0=0x0, dwReserved1=0x0, cFileName="SyncFusion.Core.dll", cAlternateFileName="SYNCFU~3.DLL")) returned 1 [0143.103] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61fd8b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6048, dwReserved0=0x0, dwReserved1=0x0, cFileName="SyncFusion.Grid.Base.dll", cAlternateFileName="SYNCFU~4.DLL")) returned 1 [0143.103] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6dea551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6dea551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6dea551, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6058, dwReserved0=0x0, dwReserved1=0x0, cFileName="SyncFusion.Grid.Grouping.Base.dll", cAlternateFileName="SYC536~1.DLL")) returned 1 [0143.104] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfaf07af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf07af2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaf2dd35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd0060, dwReserved0=0x0, dwReserved1=0x0, cFileName="SyncFusion.Grid.Grouping.Windows.dll", cAlternateFileName="SYAFCD~1.DLL")) returned 1 [0143.104] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e572fe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e572fe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e7d566, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x195050, dwReserved0=0x0, dwReserved1=0x0, cFileName="SyncFusion.Grid.Windows.dll", cAlternateFileName="SY9D98~1.DLL")) returned 1 [0143.104] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4cd4a32, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4cd4a32, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4cfac8a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x88050, dwReserved0=0x0, dwReserved1=0x0, cFileName="SyncFusion.Grouping.Base.dll", cAlternateFileName="SYNCFU~2.DLL")) returned 1 [0143.104] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0089415, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0089415, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x374048, dwReserved0=0x0, dwReserved1=0x0, cFileName="SyncFusion.Shared.Base.dll", cAlternateFileName="SYNCFU~1.DLL")) returned 1 [0143.104] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf75a8fbb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf75a8fbb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf75a8fbb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb050, dwReserved0=0x0, dwReserved1=0x0, cFileName="SyncFusion.Shared.Windows.dll", cAlternateFileName="SY87B2~1.DLL")) returned 1 [0143.104] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7b529d9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7b529d9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7b9ee02, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6048, dwReserved0=0x0, dwReserved1=0x0, cFileName="SyncFusion.Tools.Base.dll", cAlternateFileName="SY4996~1.DLL")) returned 1 [0143.104] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x670f8d9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x670f8d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x670f8d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x468050, dwReserved0=0x0, dwReserved1=0x0, cFileName="SyncFusion.Tools.Windows.dll", cAlternateFileName="SY9B72~1.DLL")) returned 1 [0143.104] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x520cca6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x520cca6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5612cee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x306048, dwReserved0=0x0, dwReserved1=0x0, cFileName="SyncFusion.XlsIO.Base.dll", cAlternateFileName="SY774A~1.DLL")) returned 1 [0143.104] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x520cca6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x520cca6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5612cee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x306048, dwReserved0=0x0, dwReserved1=0x0, cFileName="SyncFusion.XlsIO.Base.dll", cAlternateFileName="SY774A~1.DLL")) returned 0 [0143.104] FindClose (in: hFindFile=0x993800 | out: hFindFile=0x993800) returned 1 [0143.104] GetProcessHeap () returned 0x8a0000 [0143.104] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0143.105] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c3c0a4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4c3c0a4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4c3c0a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x171878, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="GROOVEEX.DLL", cAlternateFileName="")) returned 1 [0143.105] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1945af2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1945af2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3b2a8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="IEAWSDC.DLL", cAlternateFileName="")) returned 1 [0143.105] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd33f011b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd33f011b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd360620a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4d690, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Interceptor.dll", cAlternateFileName="INTERC~1.DLL")) returned 1 [0143.105] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd3200239, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd3200239, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd35213f7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb60, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Interceptor.tlb", cAlternateFileName="INTERC~1.TLB")) returned 1 [0143.105] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2f517e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2f517e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd324c72e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x24a40, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="JitV.dll", cAlternateFileName="")) returned 1 [0143.105] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5ab054a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5ab054a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2c4a611d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11448, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MeetingJoinAxOC.dll", cAlternateFileName="MEETIN~1.DLL")) returned 1 [0143.105] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ac3289, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2d1e9216, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43cea0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="mfc140u.dll", cAlternateFileName="")) returned 1 [0143.105] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0089415, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0089415, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8460, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MINSBPROXY.DLL", cAlternateFileName="MINSBP~1.DLL")) returned 1 [0143.105] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a6c5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86cced8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8460, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MINSBROAMINGPROXY.DLL", cAlternateFileName="MINSBR~1.DLL")) returned 1 [0143.105] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf016e209, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf016e209, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf016e209, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15660, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSOHEV.DLL", cAlternateFileName="")) returned 1 [0143.105] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3085a99, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13660, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSOHTMED.EXE", cAlternateFileName="")) returned 1 [0143.105] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf475131d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf475131d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf475131d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x22c60, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSOSB.DLL", cAlternateFileName="")) returned 1 [0143.106] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0f23aa6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0f23aa6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2d19cde8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f2b0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1 [0143.106] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7c83c72, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7c83c72, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7c83c72, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6b538, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1 [0143.106] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x519a5bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x519a5bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2d25b938, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xec8b0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1 [0143.106] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2616676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2616676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2ebae3b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14a48, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="NAME.DLL", cAlternateFileName="")) returned 1 [0143.106] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6bd443f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6bd443f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bd443f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c68, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="NAMECONTROLPROXY.DLL", cAlternateFileName="NAMECO~1.DLL")) returned 1 [0143.106] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6ac83cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6ac83cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2d25b938, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43cc0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="NAMEEXT.DLL", cAlternateFileName="")) returned 1 [0143.106] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6735b3a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6735b3a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6781ff8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8cc0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="NPSPWRAP.DLL", cAlternateFileName="")) returned 1 [0143.106] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1329a43, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1329a43, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf134fca5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x27c48, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="OCHelper.dll", cAlternateFileName="")) returned 1 [0143.106] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5df79a9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5df79a9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2d1e9216, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f260, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="OLKFSTUB.DLL", cAlternateFileName="")) returned 1 [0143.106] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa853100, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa853100, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa853100, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d4d8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ONBttnIE.dll", cAlternateFileName="")) returned 1 [0143.106] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x633d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27878, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ONBttnIELinkedNotes.dll", cAlternateFileName="ONBTTN~1.DLL")) returned 1 [0143.106] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7a2268a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7a2268a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7a2268a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14888, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ONLNTCOMLIB.DLL", cAlternateFileName="ONLNTC~1.DLL")) returned 1 [0143.106] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4abf9f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4abf9f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4abf9f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ec0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="OSFPROXY.DLL", cAlternateFileName="")) returned 1 [0143.107] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5c164a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5c164a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5c164a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8460, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="OSFROAMINGPROXY.DLL", cAlternateFileName="OSFROA~1.DLL")) returned 1 [0143.107] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5a3ee57, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a3ee57, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5e91324, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25860, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="OWSCLT.DLL", cAlternateFileName="")) returned 1 [0143.107] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc692f34, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc692f34, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2d20f472, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2658c8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="OWSSUPP.DLL", cAlternateFileName="")) returned 1 [0143.107] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3760836, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3760836, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x236d8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="PPSLAX.DLL", cAlternateFileName="")) returned 1 [0143.107] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6c45b55, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6c45b55, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c6bda4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1d460, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="STSCOPY.DLL", cAlternateFileName="")) returned 1 [0143.107] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbda21cf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbda21cf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbdc8437, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf660, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="STSUPLD.DLL", cAlternateFileName="")) returned 1 [0143.107] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4266542, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4266542, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf428c77b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xdbcc0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ucrtbase.dll", cAlternateFileName="")) returned 1 [0143.107] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb94fd84, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb94fd84, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb99c21f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x62e70, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="URLREDIR.DLL", cAlternateFileName="")) returned 1 [0143.107] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b359a5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b359a5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b359a5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x412b0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="vccorlib140.dll", cAlternateFileName="VCCORL~1.DLL")) returned 1 [0143.107] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa6d5947, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa6d5947, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa82ce6a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14d50, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 1 [0143.107] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb62ec35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb62ec35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2e67974c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f1250, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="VVIEWDWG.DLL", cAlternateFileName="")) returned 1 [0143.107] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5a18be3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a18be3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2dbe50b1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4d650, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="VVIEWER.DLL", cAlternateFileName="")) returned 1 [0143.107] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5a18be3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a18be3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2dbe50b1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4d650, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="VVIEWER.DLL", cAlternateFileName="")) returned 0 [0143.108] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0143.108] GetProcessHeap () returned 0x8a0000 [0143.108] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0143.109] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2f517e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office16", cAlternateFileName="")) returned 0 [0143.109] FindClose (in: hFindFile=0x9937c0 | out: hFindFile=0x9937c0) returned 1 [0143.109] GetProcessHeap () returned 0x8a0000 [0143.109] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0143.109] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft SQL Server", cAlternateFileName="MICROS~3")) returned 1 [0143.109] GetProcessHeap () returned 0x8a0000 [0143.109] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0143.109] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0143.111] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.111] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="110", cAlternateFileName="")) returned 1 [0143.111] GetProcessHeap () returned 0x8a0000 [0143.111] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0143.111] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\110\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0143.112] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.112] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared", cAlternateFileName="")) returned 1 [0143.112] GetProcessHeap () returned 0x8a0000 [0143.112] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0143.113] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\110\\Shared\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0143.113] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.113] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x54c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msasxpress.dll", cAlternateFileName="MSASXP~1.DLL")) returned 1 [0143.113] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x54c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msasxpress.dll", cAlternateFileName="MSASXP~1.DLL")) returned 0 [0143.113] FindClose (in: hFindFile=0x9937c0 | out: hFindFile=0x9937c0) returned 1 [0143.114] GetProcessHeap () returned 0x8a0000 [0143.114] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0143.114] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared", cAlternateFileName="")) returned 0 [0143.114] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0143.114] GetProcessHeap () returned 0x8a0000 [0143.114] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0143.114] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="110", cAlternateFileName="")) returned 0 [0143.114] FindClose (in: hFindFile=0x993940 | out: hFindFile=0x993940) returned 1 [0143.114] GetProcessHeap () returned 0x8a0000 [0143.114] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0143.116] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.NET", cAlternateFileName="MICROS~1.NET")) returned 1 [0143.116] GetProcessHeap () returned 0x8a0000 [0143.116] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0143.116] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0143.116] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.116] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADOMD.NET", cAlternateFileName="")) returned 1 [0143.116] GetProcessHeap () returned 0x8a0000 [0143.116] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0143.117] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0143.118] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.118] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="110", cAlternateFileName="")) returned 1 [0143.118] GetProcessHeap () returned 0x8a0000 [0143.118] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0143.119] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\110\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993700 [0143.119] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.119] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16e4606, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaf898, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.AdomdClient.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0143.119] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16e4606, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaf898, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.AdomdClient.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0143.119] FindClose (in: hFindFile=0x993700 | out: hFindFile=0x993700) returned 1 [0143.119] GetProcessHeap () returned 0x8a0000 [0143.119] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0143.119] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="110", cAlternateFileName="")) returned 0 [0143.119] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0143.120] GetProcessHeap () returned 0x8a0000 [0143.120] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0143.120] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADOMD.NET", cAlternateFileName="")) returned 0 [0143.120] FindClose (in: hFindFile=0x993a00 | out: hFindFile=0x993a00) returned 1 [0143.120] GetProcessHeap () returned 0x8a0000 [0143.120] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0143.121] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox", cAlternateFileName="MOZILL~1")) returned 1 [0143.121] GetProcessHeap () returned 0x8a0000 [0143.121] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0143.122] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Mozilla Firefox\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0143.125] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.125] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugins", cAlternateFileName="")) returned 1 [0143.125] GetProcessHeap () returned 0x8a0000 [0143.125] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0143.125] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Mozilla Firefox\\plugins\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0143.125] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.125] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9eb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="npMeetingJoinPluginOC.dll", cAlternateFileName="NPMEET~1.DLL")) returned 1 [0143.125] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9eb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="npMeetingJoinPluginOC.dll", cAlternateFileName="NPMEET~1.DLL")) returned 0 [0143.126] FindClose (in: hFindFile=0x9937c0 | out: hFindFile=0x9937c0) returned 1 [0143.126] GetProcessHeap () returned 0x8a0000 [0143.126] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0143.328] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugins", cAlternateFileName="")) returned 0 [0143.328] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0143.328] GetProcessHeap () returned 0x8a0000 [0143.328] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0143.328] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox", cAlternateFileName="MOZILL~1")) returned 0 [0143.328] FindClose (in: hFindFile=0x993ac0 | out: hFindFile=0x993ac0) returned 1 [0143.329] GetProcessHeap () returned 0x8a0000 [0143.329] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a90058 | out: hHeap=0x8a0000) returned 1 [0143.330] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8d7d1d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee8d7d1d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1 [0143.330] GetProcessHeap () returned 0x8a0000 [0143.330] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a90058 [0143.330] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\System\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8d7d1d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee8d7d1d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0143.331] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8d7d1d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee8d7d1d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.331] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee7cccb2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee7cccb2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf466c4e5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x27450, dwReserved0=0x0, dwReserved1=0x0, cFileName="atl100.dll", cAlternateFileName="")) returned 1 [0143.331] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee865693, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee865693, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf46b8986, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d250, dwReserved0=0x0, dwReserved1=0x0, cFileName="atl110.dll", cAlternateFileName="")) returned 1 [0143.331] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee865693, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee865693, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc6b9190, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4f670, dwReserved0=0x0, dwReserved1=0x0, cFileName="concrt140.dll", cAlternateFileName="CONCRT~1.DLL")) returned 1 [0143.331] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee865693, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee865693, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2d34074e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x192448, dwReserved0=0x0, dwReserved1=0x0, cFileName="FM20.DLL", cAlternateFileName="")) returned 1 [0143.331] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee88b86f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee88b86f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61d7668, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8268, dwReserved0=0x0, dwReserved1=0x0, cFileName="FM20ENU.DLL", cAlternateFileName="")) returned 1 [0143.332] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee88b86f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee88b86f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2dc7d9c2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x55b0d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140.dll", cAlternateFileName="")) returned 1 [0143.332] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee88b86f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee88b86f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0194432, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140chs.dll", cAlternateFileName="MFC140~1.DLL")) returned 1 [0143.332] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee88b86f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee88b86f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefdda943, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140cht.dll", cAlternateFileName="MFC140~2.DLL")) returned 1 [0143.332] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee88b86f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee88b86f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2dc7d9c2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140deu.dll", cAlternateFileName="MFC140~3.DLL")) returned 1 [0143.332] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8b1abe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8b1abe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf443017d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe460, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140enu.dll", cAlternateFileName="MFC140~4.DLL")) returned 1 [0143.332] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8b1abe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8b1abe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2dc7d9c2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x100c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140esn.dll", cAlternateFileName="MF9310~1.DLL")) returned 1 [0143.332] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8b1abe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8b1abe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2dc5770c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x104c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140fra.dll", cAlternateFileName="MF6461~1.DLL")) returned 1 [0143.332] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8b1abe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8b1abe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbdc8437, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfcc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140ita.dll", cAlternateFileName="MF3F49~1.DLL")) returned 1 [0143.332] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8b1abe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8b1abe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x659fb9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140jpn.dll", cAlternateFileName="MFC411~1.DLL")) returned 1 [0143.332] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8b1abe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8b1abe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa911c96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb660, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140kor.dll", cAlternateFileName="MFBB77~1.DLL")) returned 1 [0143.332] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8b1abe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8b1abe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc21a8ad, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140rus.dll", cAlternateFileName="MF5D55~1.DLL")) returned 1 [0143.333] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8b1abe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8b1abe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2e67974c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x562670, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140u.dll", cAlternateFileName="")) returned 1 [0143.333] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8b1abe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8b1abe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x670f8d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x176c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfcm140.dll", cAlternateFileName="")) returned 1 [0143.333] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8b1abe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8b1abe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6355df6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x176c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfcm140u.dll", cAlternateFileName="")) returned 1 [0143.333] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8b1abe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8b1abe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2dca3bc1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x95058, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp100.dll", cAlternateFileName="")) returned 1 [0143.333] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8b1abe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8b1abe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x618c1b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9f4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp110.dll", cAlternateFileName="")) returned 1 [0143.333] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8b1abe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8b1abe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2dca3bc1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9f458, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1 [0143.333] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8b1abe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8b1abe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x659fb9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x99258, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1 [0143.333] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca8e89fe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca8e89fe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdb5e071a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xcb058, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1 [0143.333] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdd5c75d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcdd5c75d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcdd5c75d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc8858, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr110.dll", cAlternateFileName="")) returned 1 [0143.333] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8b1abe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8b1abe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2dca3bc1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe9458, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1 [0143.333] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8b1abe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8b1abe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x54a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="vccorlib110.dll", cAlternateFileName="VCCORL~1.DLL")) returned 1 [0143.333] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8d7d1d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8d7d1d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc240ad7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x54cc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="vccorlib120.dll", cAlternateFileName="VCCORL~2.DLL")) returned 1 [0143.333] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8d7d1d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8d7d1d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefee59ce, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5d660, dwReserved0=0x0, dwReserved1=0x0, cFileName="vccorlib140.dll", cAlternateFileName="VCCORL~3.DLL")) returned 1 [0143.333] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8d7d1d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8d7d1d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6a7bf80, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13c58, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 1 [0143.334] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8d7d1d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8d7d1d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa911c96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xce68, dwReserved0=0x0, dwReserved1=0x0, cFileName="VEN2232.OLB", cAlternateFileName="")) returned 1 [0143.334] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8d7d1d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8d7d1d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa911c96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xce68, dwReserved0=0x0, dwReserved1=0x0, cFileName="VEN2232.OLB", cAlternateFileName="")) returned 0 [0143.334] FindClose (in: hFindFile=0x9939c0 | out: hFindFile=0x9939c0) returned 1 [0143.335] GetProcessHeap () returned 0x8a0000 [0143.335] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a90058 | out: hHeap=0x8a0000) returned 1 [0143.335] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b6194c4, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b6194c4, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="SystemX86", cAlternateFileName="SYSTEM~1")) returned 1 [0143.335] GetProcessHeap () returned 0x8a0000 [0143.335] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a90058 [0143.335] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\SystemX86\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b6194c4, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b6194c4, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993600 [0143.337] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b6194c4, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b6194c4, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.337] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffd42fe2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd42fe2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffd42fe2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x39870, dwReserved0=0x0, dwReserved1=0x0, cFileName="concrt140.dll", cAlternateFileName="CONCRT~1.DLL")) returned 1 [0143.337] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfaf7a22a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf7a22a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2e67974c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x42acd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140.dll", cAlternateFileName="")) returned 1 [0143.337] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa68949f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa68949f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa6af6fe, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9860, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140chs.dll", cAlternateFileName="MFC140~4.DLL")) returned 1 [0143.337] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6355df6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9860, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140cht.dll", cAlternateFileName="MF87C9~1.DLL")) returned 1 [0143.337] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf00af60a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf00af60a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2dcf007e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10860, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140deu.dll", cAlternateFileName="MFC140~1.DLL")) returned 1 [0143.337] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x860e337, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x860e337, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdcc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140enu.dll", cAlternateFileName="MF352D~1.DLL")) returned 1 [0143.337] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x22f6470, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22f6470, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2dcf007e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10460, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140esn.dll", cAlternateFileName="MF9310~1.DLL")) returned 1 [0143.337] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0194432, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0194432, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2dcf007e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10860, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140fra.dll", cAlternateFileName="MFC140~2.DLL")) returned 1 [0143.337] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc6df3cf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc6df3cf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2dcf007e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10060, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140ita.dll", cAlternateFileName="MF3F49~1.DLL")) returned 1 [0143.337] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ea37c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ea37c1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb2c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140jpn.dll", cAlternateFileName="MFC140~3.DLL")) returned 1 [0143.337] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140kor.dll", cAlternateFileName="MFBB77~1.DLL")) returned 1 [0143.338] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6aa3169, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aa3169, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6aa3169, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf860, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140rus.dll", cAlternateFileName="MF5D55~1.DLL")) returned 1 [0143.338] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0dcc568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0dcc568, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2e67974c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43aad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140u.dll", cAlternateFileName="")) returned 1 [0143.338] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9bf4d66, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9bf4d66, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e0ae4d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15268, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfcm140.dll", cAlternateFileName="")) returned 1 [0143.338] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc646a83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc646a83, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc646a83, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14cc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfcm140u.dll", cAlternateFileName="")) returned 1 [0143.338] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b6194c4, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b6194c4, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c2c3dcb, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0xa1880, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscomct2.ocx", cAlternateFileName="")) returned 1 [0143.338] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x624ad43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69658, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1 [0143.338] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf158c060, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf158c060, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1697068, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3eec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="vccorlib140.dll", cAlternateFileName="VCCORL~1.DLL")) returned 1 [0143.338] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc51578a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc51578a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc646a83, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12e58, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 1 [0143.338] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc51578a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc51578a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc646a83, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12e58, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 0 [0143.338] FindClose (in: hFindFile=0x993600 | out: hFindFile=0x993600) returned 1 [0143.339] GetProcessHeap () returned 0x8a0000 [0143.339] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a90058 | out: hHeap=0x8a0000) returned 1 [0143.339] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0143.339] GetProcessHeap () returned 0x8a0000 [0143.339] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a90058 [0143.339] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993600 [0143.339] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.339] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="assembly", cAlternateFileName="")) returned 1 [0143.340] GetProcessHeap () returned 0x8a0000 [0143.340] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0143.340] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0143.341] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.341] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a65087, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GAC_64", cAlternateFileName="")) returned 1 [0143.341] GetProcessHeap () returned 0x8a0000 [0143.341] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0143.341] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_64\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a65087, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0143.342] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a65087, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.342] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a65087, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Access.BusinessDataCatalog", cAlternateFileName="MICROS~1.BUS")) returned 1 [0143.342] GetProcessHeap () returned 0x8a0000 [0143.342] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0143.343] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_64\\Microsoft.Office.Access.BusinessDataCatalog\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a65087, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0143.344] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a65087, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.344] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a65087, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16.0.0.0__71E9BCE111E9429C", cAlternateFileName="1600~1.0__")) returned 1 [0143.344] GetProcessHeap () returned 0x8a0000 [0143.344] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0143.344] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_64\\Microsoft.Office.Access.BusinessDataCatalog\\16.0.0.0__71E9BCE111E9429C\\*", lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a65087, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0143.344] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a65087, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.344] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5a65087, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x296f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Access.BusinessDataCatalog.DLL", cAlternateFileName="MICROS~1.DLL")) returned 1 [0143.344] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5a65087, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x296f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Access.BusinessDataCatalog.DLL", cAlternateFileName="MICROS~1.DLL")) returned 0 [0143.344] FindClose (in: hFindFile=0x993a00 | out: hFindFile=0x993a00) returned 1 [0143.345] GetProcessHeap () returned 0x8a0000 [0143.345] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0143.345] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a65087, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16.0.0.0__71E9BCE111E9429C", cAlternateFileName="1600~1.0__")) returned 0 [0143.345] FindClose (in: hFindFile=0x993ac0 | out: hFindFile=0x993ac0) returned 1 [0143.345] GetProcessHeap () returned 0x8a0000 [0143.345] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0143.345] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a65087, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Access.BusinessDataCatalog", cAlternateFileName="MICROS~1.BUS")) returned 0 [0143.345] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0143.345] GetProcessHeap () returned 0x8a0000 [0143.345] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0143.346] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GAC_MSIL", cAlternateFileName="")) returned 1 [0143.346] GetProcessHeap () returned 0x8a0000 [0143.346] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0143.347] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0143.349] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.349] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a30a43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a30a43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a56cbe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.AdomdClient", cAlternateFileName="MICROS~1.ADO")) returned 1 [0143.349] GetProcessHeap () returned 0x8a0000 [0143.349] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0143.350] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.AdomdClient\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a30a43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a30a43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a56cbe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0143.350] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a30a43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a30a43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a56cbe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.350] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a56cbe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a56cbe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a56cbe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="11.0.0.0__89845DCD8080CC91", cAlternateFileName="1100~1.0__")) returned 1 [0143.350] GetProcessHeap () returned 0x8a0000 [0143.350] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0143.351] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.AdomdClient\\11.0.0.0__89845DCD8080CC91\\*", lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a56cbe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a56cbe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a56cbe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0143.351] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a56cbe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a56cbe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a56cbe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.351] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a56cbe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a56cbe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a56cbe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xafe30, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.AdomdClient.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0143.351] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a56cbe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a56cbe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a56cbe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xafe30, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.AdomdClient.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0143.351] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0143.352] GetProcessHeap () returned 0x8a0000 [0143.352] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0143.352] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a56cbe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a56cbe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a56cbe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="11.0.0.0__89845DCD8080CC91", cAlternateFileName="1100~1.0__")) returned 0 [0143.352] FindClose (in: hFindFile=0x993940 | out: hFindFile=0x993940) returned 1 [0143.352] GetProcessHeap () returned 0x8a0000 [0143.352] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0143.352] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd2face, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd2face, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd2face, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.SPClient.Interfaces", cAlternateFileName="MICROS~2.INT")) returned 1 [0143.352] GetProcessHeap () returned 0x8a0000 [0143.352] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0143.352] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.SPClient.Interfaces\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd2face, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd2face, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd2face, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0143.353] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd2face, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd2face, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd2face, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.353] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd2face, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd2face, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd2face, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="11.0.0.0__89845DCD8080CC91", cAlternateFileName="1100~1.0__")) returned 1 [0143.353] GetProcessHeap () returned 0x8a0000 [0143.353] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0143.353] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.SPClient.Interfaces\\11.0.0.0__89845DCD8080CC91\\*", lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd2face, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd2face, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd2face, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993700 [0143.354] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd2face, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd2face, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd2face, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.354] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd2face, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd2face, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd2face, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x78c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.SPClient.Interfaces.DLL", cAlternateFileName="MICROS~1.DLL")) returned 1 [0143.354] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd2face, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd2face, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd2face, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x78c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.SPClient.Interfaces.DLL", cAlternateFileName="MICROS~1.DLL")) returned 0 [0143.354] FindClose (in: hFindFile=0x993700 | out: hFindFile=0x993700) returned 1 [0143.354] GetProcessHeap () returned 0x8a0000 [0143.354] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0143.354] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd2face, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd2face, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd2face, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="11.0.0.0__89845DCD8080CC91", cAlternateFileName="1100~1.0__")) returned 0 [0143.354] FindClose (in: hFindFile=0x993ac0 | out: hFindFile=0x993ac0) returned 1 [0143.354] GetProcessHeap () returned 0x8a0000 [0143.354] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0143.354] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22a9f7a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22a9f7a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22d01df, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BusinessData", cAlternateFileName="MICROS~1.BUS")) returned 1 [0143.354] GetProcessHeap () returned 0x8a0000 [0143.354] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0143.354] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.BusinessData\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22a9f7a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22a9f7a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22d01df, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0143.356] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22a9f7a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22a9f7a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22d01df, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.356] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22d01df, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22d01df, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16.0.0.0__71E9BCE111E9429C", cAlternateFileName="1600~1.0__")) returned 1 [0143.356] GetProcessHeap () returned 0x8a0000 [0143.356] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0143.356] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.BusinessData\\16.0.0.0__71E9BCE111E9429C\\*", lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22d01df, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22d01df, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0143.356] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22d01df, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22d01df, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.356] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x22f6470, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22f6470, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ce80, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BusinessData.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0143.356] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x22f6470, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22f6470, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ce80, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BusinessData.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0143.356] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0143.356] GetProcessHeap () returned 0x8a0000 [0143.356] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0143.356] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22d01df, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22d01df, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16.0.0.0__71E9BCE111E9429C", cAlternateFileName="1600~1.0__")) returned 0 [0143.357] FindClose (in: hFindFile=0x993ac0 | out: hFindFile=0x993ac0) returned 1 [0143.357] GetProcessHeap () returned 0x8a0000 [0143.357] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0143.357] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x863456d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessApplications.Diagnostics", cAlternateFileName="MICROS~1.DIA")) returned 1 [0143.357] GetProcessHeap () returned 0x8a0000 [0143.357] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0143.357] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessApplications.Diagnostics\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x863456d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0143.358] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x863456d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.358] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x863456d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16.0.0.0__71E9BCE111E9429C", cAlternateFileName="1600~1.0__")) returned 1 [0143.358] GetProcessHeap () returned 0x8a0000 [0143.359] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0143.359] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessApplications.Diagnostics\\16.0.0.0__71E9BCE111E9429C\\*", lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x863456d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0143.359] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x863456d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.359] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x863456d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12860, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.office.businessapplications.diagnostics.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0143.359] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x863456d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12860, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.office.businessapplications.diagnostics.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0143.359] FindClose (in: hFindFile=0x993ac0 | out: hFindFile=0x993ac0) returned 1 [0143.359] GetProcessHeap () returned 0x8a0000 [0143.359] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0143.359] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x863456d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16.0.0.0__71E9BCE111E9429C", cAlternateFileName="1600~1.0__")) returned 0 [0143.359] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0143.359] GetProcessHeap () returned 0x8a0000 [0143.359] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0143.359] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessData", cAlternateFileName="MICROS~2.BUS")) returned 1 [0143.360] GetProcessHeap () returned 0x8a0000 [0143.360] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0143.360] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0143.360] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.360] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16.0.0.0__71E9BCE111E9429C", cAlternateFileName="1600~1.0__")) returned 1 [0143.361] GetProcessHeap () returned 0x8a0000 [0143.361] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0143.361] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData\\16.0.0.0__71E9BCE111E9429C\\*", lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0143.361] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.361] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10a260, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.office.businessdata.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0143.361] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10a260, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.office.businessdata.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0143.361] FindClose (in: hFindFile=0x993ac0 | out: hFindFile=0x993ac0) returned 1 [0143.361] GetProcessHeap () returned 0x8a0000 [0143.361] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0143.361] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16.0.0.0__71E9BCE111E9429C", cAlternateFileName="1600~1.0__")) returned 0 [0143.361] FindClose (in: hFindFile=0x993940 | out: hFindFile=0x993940) returned 1 [0143.361] GetProcessHeap () returned 0x8a0000 [0143.361] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0143.361] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d97f24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d97f24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessData.Intl", cAlternateFileName="MICROS~1.INT")) returned 1 [0143.362] GetProcessHeap () returned 0x8a0000 [0143.362] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0143.362] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData.Intl\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d97f24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d97f24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b80 [0143.362] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d97f24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d97f24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.362] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d97f24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d97f24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16.0.0.0__71E9BCE111E9429C", cAlternateFileName="1600~1.0__")) returned 1 [0143.362] GetProcessHeap () returned 0x8a0000 [0143.362] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c40b0 [0143.362] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData.Intl\\16.0.0.0__71E9BCE111E9429C\\*", lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d97f24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d97f24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0143.362] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d97f24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d97f24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.362] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d97f24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d97f24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x348c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.office.businessdata.intl.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0143.363] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d97f24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d97f24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x348c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.office.businessdata.intl.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0143.363] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0143.363] GetProcessHeap () returned 0x8a0000 [0143.363] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c40b0 | out: hHeap=0x8a0000) returned 1 [0143.363] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d97f24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d97f24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16.0.0.0__71E9BCE111E9429C", cAlternateFileName="1600~1.0__")) returned 0 [0143.363] FindClose (in: hFindFile=0x993b80 | out: hFindFile=0x993b80) returned 1 [0143.369] GetProcessHeap () returned 0x8a0000 [0143.369] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0143.369] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d97f24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d97f24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessData.Intl", cAlternateFileName="MICROS~1.INT")) returned 0 [0143.369] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0143.369] GetProcessHeap () returned 0x8a0000 [0143.369] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0143.370] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GAC_MSIL", cAlternateFileName="")) returned 0 [0143.371] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0143.371] GetProcessHeap () returned 0x8a0000 [0143.371] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0143.371] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INF", cAlternateFileName="")) returned 1 [0143.371] GetProcessHeap () returned 0x8a0000 [0143.371] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0143.371] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\INF\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0143.527] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.527] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8512, dwReserved0=0x0, dwReserved1=0x0, cFileName="AER_1033.ADM", cAlternateFileName="")) returned 1 [0143.527] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8512, dwReserved0=0x0, dwReserved1=0x0, cFileName="AER_1033.ADM", cAlternateFileName="")) returned 0 [0143.527] FindClose (in: hFindFile=0x9937c0 | out: hFindFile=0x9937c0) returned 1 [0143.527] GetProcessHeap () returned 0x8a0000 [0143.527] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0143.527] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26abeaf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc369dacd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc369dacd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Installer", cAlternateFileName="INSTAL~1")) returned 1 [0143.527] GetProcessHeap () returned 0x8a0000 [0143.527] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0143.527] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\Installer\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26abeaf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc369dacd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc369dacd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b80 [0143.528] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26abeaf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc369dacd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc369dacd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.528] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26abeaf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc36c3d3f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc434832e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-000F-0000-1000-0000000FF1CE}", cAlternateFileName="{90160~1")) returned 1 [0143.528] GetProcessHeap () returned 0x8a0000 [0143.528] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0143.528] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\Installer\\{90160000-000F-0000-1000-0000000FF1CE}\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26abeaf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc434832e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc434832e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993700 [0143.528] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26abeaf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc434832e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc434832e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.528] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc27dd2b7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc27dd2b7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc290e5a3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x393a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="accicons.exe", cAlternateFileName="")) returned 1 [0143.529] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc26d2137, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc26d2137, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc3deaf6b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11640, dwReserved0=0x0, dwReserved1=0x0, cFileName="dbcicons.exe", cAlternateFileName="")) returned 1 [0143.529] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc26d2137, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc26d2137, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc27dd2b7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="graph.ico", cAlternateFileName="")) returned 1 [0143.529] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc434832e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc434832e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc436e5a6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3a440, dwReserved0=0x0, dwReserved1=0x0, cFileName="grv_icons.exe", cAlternateFileName="GRV_IC~1.EXE")) returned 1 [0143.529] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc26f8376, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc26f8376, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc28297ac, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xac440, dwReserved0=0x0, dwReserved1=0x0, cFileName="joticon.exe", cAlternateFileName="")) returned 1 [0143.529] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc26d2137, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc26d2137, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc3d0601b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xcda40, dwReserved0=0x0, dwReserved1=0x0, cFileName="lyncicon.exe", cAlternateFileName="")) returned 1 [0143.529] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc26f8376, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc26f8376, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2e456b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfaea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="misc.exe", cAlternateFileName="")) returned 1 [0143.529] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc26abeaf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc26abeaf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc27b6ef5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb440, dwReserved0=0x0, dwReserved1=0x0, cFileName="msouc.exe", cAlternateFileName="")) returned 1 [0143.529] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc26d2137, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc26d2137, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2d86b0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xce40, dwReserved0=0x0, dwReserved1=0x0, cFileName="osmadminicon.exe", cAlternateFileName="OSMADM~1.EXE")) returned 1 [0143.529] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc26f8376, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc26f8376, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2875b71, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xce40, dwReserved0=0x0, dwReserved1=0x0, cFileName="osmclienticon.exe", cAlternateFileName="OSMCLI~1.EXE")) returned 1 [0143.529] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc26d2137, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc26d2137, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2ede099, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6e240, dwReserved0=0x0, dwReserved1=0x0, cFileName="outicon.exe", cAlternateFileName="")) returned 1 [0143.530] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc284f9dc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc284f9dc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2c2f6fb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xce0a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="pj11icon.exe", cAlternateFileName="")) returned 1 [0143.530] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc36c3d3f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc36c3d3f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc39bed4a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x359640, dwReserved0=0x0, dwReserved1=0x0, cFileName="pptico.exe", cAlternateFileName="")) returned 1 [0143.530] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc290e5a3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc290e5a3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2bbceb5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xcda40, dwReserved0=0x0, dwReserved1=0x0, cFileName="pubs.exe", cAlternateFileName="")) returned 1 [0143.530] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc289be7e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc289be7e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2afe3f3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11640, dwReserved0=0x0, dwReserved1=0x0, cFileName="sscicons.exe", cAlternateFileName="")) returned 1 [0143.530] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc2875b71, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2875b71, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2a19653, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x248040, dwReserved0=0x0, dwReserved1=0x0, cFileName="visicon.exe", cAlternateFileName="")) returned 1 [0143.530] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc2d86b0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2d86b0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc30ce080, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e0c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordicon.exe", cAlternateFileName="")) returned 1 [0143.530] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc2e456b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2e456b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc300f337, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3840a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="xlicons.exe", cAlternateFileName="")) returned 1 [0143.530] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc2e456b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2e456b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc300f337, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3840a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="xlicons.exe", cAlternateFileName="")) returned 0 [0143.530] FindClose (in: hFindFile=0x993700 | out: hFindFile=0x993700) returned 1 [0143.530] GetProcessHeap () returned 0x8a0000 [0143.530] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0143.530] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2f507b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2f507b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2f507b2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-001F-0409-1000-0000000FF1CE}", cAlternateFileName="{90160~3")) returned 1 [0143.530] GetProcessHeap () returned 0x8a0000 [0143.530] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0143.530] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\Installer\\{90160000-001F-0409-1000-0000000FF1CE}\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2f507b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2f507b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2f507b2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0143.532] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2f507b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2f507b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2f507b2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.532] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc2f507b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2f507b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc33305b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfaea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="misc.exe", cAlternateFileName="")) returned 1 [0143.532] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc2f507b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2f507b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc33305b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfaea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="misc.exe", cAlternateFileName="")) returned 0 [0143.532] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0143.532] GetProcessHeap () returned 0x8a0000 [0143.532] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0143.532] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc369dacd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc369dacd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc369dacd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-001F-040C-1000-0000000FF1CE}", cAlternateFileName="{90160~4")) returned 1 [0143.532] GetProcessHeap () returned 0x8a0000 [0143.532] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0143.532] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\Installer\\{90160000-001F-040C-1000-0000000FF1CE}\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc369dacd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc369dacd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc369dacd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0143.533] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc369dacd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc369dacd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc369dacd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.533] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc369dacd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc369dacd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc394c592, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfaea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="misc.exe", cAlternateFileName="")) returned 1 [0143.533] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc369dacd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc369dacd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc394c592, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfaea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="misc.exe", cAlternateFileName="")) returned 0 [0143.533] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0143.534] GetProcessHeap () returned 0x8a0000 [0143.534] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0143.534] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc369dacd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc369dacd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc369dacd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-001F-0C0A-1000-0000000FF1CE}", cAlternateFileName="{9B17A~1")) returned 1 [0143.534] GetProcessHeap () returned 0x8a0000 [0143.534] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0143.534] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\Installer\\{90160000-001F-0C0A-1000-0000000FF1CE}\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc369dacd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc369dacd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc369dacd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0143.534] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc369dacd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc369dacd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc369dacd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.535] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc369dacd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc369dacd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc38b3c05, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfaea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="misc.exe", cAlternateFileName="")) returned 1 [0143.535] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc369dacd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc369dacd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc38b3c05, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfaea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="misc.exe", cAlternateFileName="")) returned 0 [0143.535] FindClose (in: hFindFile=0x9937c0 | out: hFindFile=0x9937c0) returned 1 [0143.535] GetProcessHeap () returned 0x8a0000 [0143.535] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0143.535] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc28c2111, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc28c2111, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc28c2111, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-006E-0409-1000-0000000FF1CE}", cAlternateFileName="{90160~2")) returned 1 [0143.535] GetProcessHeap () returned 0x8a0000 [0143.535] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0143.535] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\Installer\\{90160000-006E-0409-1000-0000000FF1CE}\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc28c2111, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc28c2111, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc28c2111, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0143.535] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc28c2111, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc28c2111, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc28c2111, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.535] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc28c2111, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc28c2111, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2b4a894, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfaea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="misc.exe", cAlternateFileName="")) returned 1 [0143.535] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc28c2111, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc28c2111, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2b4a894, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfaea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="misc.exe", cAlternateFileName="")) returned 0 [0143.535] FindClose (in: hFindFile=0x9937c0 | out: hFindFile=0x9937c0) returned 1 [0143.536] GetProcessHeap () returned 0x8a0000 [0143.536] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0143.536] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc28c2111, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc28c2111, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc28c2111, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-006E-0409-1000-0000000FF1CE}", cAlternateFileName="{90160~2")) returned 0 [0143.536] FindClose (in: hFindFile=0x993b80 | out: hFindFile=0x993b80) returned 1 [0143.536] GetProcessHeap () returned 0x8a0000 [0143.536] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0143.536] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e24d55a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e24d55a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e273816, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PCHEALTH", cAlternateFileName="")) returned 1 [0143.536] GetProcessHeap () returned 0x8a0000 [0143.536] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0143.536] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\PCHEALTH\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e24d55a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e24d55a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e273816, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0143.536] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e24d55a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e24d55a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e273816, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.536] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e273816, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e299a0e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e299a0e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERRORREP", cAlternateFileName="")) returned 1 [0143.536] GetProcessHeap () returned 0x8a0000 [0143.536] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0143.536] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\PCHEALTH\\ERRORREP\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e273816, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e299a0e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e299a0e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0143.537] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e273816, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e299a0e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e299a0e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.537] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e299a0e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e299a0e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e299a0e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QHEADLES", cAlternateFileName="")) returned 1 [0143.537] GetProcessHeap () returned 0x8a0000 [0143.537] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0143.538] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\PCHEALTH\\ERRORREP\\QHEADLES\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e299a0e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e299a0e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e299a0e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b80 [0143.538] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e299a0e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e299a0e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e299a0e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.538] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e299a0e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e299a0e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e299a0e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0143.538] FindClose (in: hFindFile=0x993b80 | out: hFindFile=0x993b80) returned 1 [0143.538] GetProcessHeap () returned 0x8a0000 [0143.538] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0143.538] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e299a0e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e299a0e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e299a0e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QSIGNOFF", cAlternateFileName="")) returned 1 [0143.538] GetProcessHeap () returned 0x8a0000 [0143.538] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36b40a8 [0143.538] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\PCHEALTH\\ERRORREP\\QSIGNOFF\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e299a0e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e299a0e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e299a0e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0143.539] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e299a0e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e299a0e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e299a0e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.539] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e299a0e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e299a0e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e299a0e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0143.539] FindClose (in: hFindFile=0x9937c0 | out: hFindFile=0x9937c0) returned 1 [0143.539] GetProcessHeap () returned 0x8a0000 [0143.539] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36b40a8 | out: hHeap=0x8a0000) returned 1 [0143.539] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e299a0e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e299a0e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e299a0e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QSIGNOFF", cAlternateFileName="")) returned 0 [0143.539] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0143.539] GetProcessHeap () returned 0x8a0000 [0143.539] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0143.539] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e273816, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e299a0e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e299a0e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERRORREP", cAlternateFileName="")) returned 0 [0143.539] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0143.540] GetProcessHeap () returned 0x8a0000 [0143.540] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0143.541] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2daddbf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b285e60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b285e60, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHELLNEW", cAlternateFileName="")) returned 1 [0143.541] GetProcessHeap () returned 0x8a0000 [0143.541] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0143.541] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\SHELLNEW\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2daddbf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b285e60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b285e60, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0143.542] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2daddbf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b285e60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b285e60, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.542] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd45391ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd45391ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd49fdd24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x166b, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL12.XLSX", cAlternateFileName="EXCEL1~1.XLS")) returned 1 [0143.542] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b285e60, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b285e60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b285e60, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x2c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPROJ11.MPP", cAlternateFileName="")) returned 1 [0143.542] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2daddbf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2daddbf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd305c7ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xea00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.PUB", cAlternateFileName="")) returned 1 [0143.542] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2daddbf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2daddbf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd305c7ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xea00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.PUB", cAlternateFileName="")) returned 0 [0143.542] FindClose (in: hFindFile=0x9937c0 | out: hFindFile=0x9937c0) returned 1 [0143.542] GetProcessHeap () returned 0x8a0000 [0143.542] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0143.542] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2daddbf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b285e60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b285e60, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHELLNEW", cAlternateFileName="")) returned 0 [0143.542] FindClose (in: hFindFile=0x993600 | out: hFindFile=0x993600) returned 1 [0143.542] GetProcessHeap () returned 0x8a0000 [0143.542] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a90058 | out: hHeap=0x8a0000) returned 1 [0143.543] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0 [0143.543] FindClose (in: hFindFile=0x9935c0 | out: hFindFile=0x9935c0) returned 1 [0143.543] GetProcessHeap () returned 0x8a0000 [0143.543] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0143.543] FindNextFileW (in: hFindFile=0x9938c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VFS", cAlternateFileName="")) returned 0 [0143.543] FindClose (in: hFindFile=0x9938c0 | out: hFindFile=0x9938c0) returned 1 [0143.543] GetProcessHeap () returned 0x8a0000 [0143.544] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0143.544] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 0 [0143.544] FindClose (in: hFindFile=0x993500 | out: hFindFile=0x993500) returned 1 [0143.544] GetProcessHeap () returned 0x8a0000 [0143.544] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3674088 | out: hHeap=0x8a0000) returned 1 [0143.544] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x4dca02c6, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x4dca02c6, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft Office 15", cAlternateFileName="MICROS~1")) returned 1 [0143.544] GetProcessHeap () returned 0x8a0000 [0143.544] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3674088 [0143.545] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office 15\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x4dca02c6, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x4dca02c6, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0143.545] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x4dca02c6, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x4dca02c6, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.545] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e27ab50, ftCreationTime.dwHighDateTime=0x1d51f63, ftLastAccessTime.dwLowDateTime=0xdd812f0, ftLastAccessTime.dwHighDateTime=0x1d568c8, ftLastWriteTime.dwLowDateTime=0xdd812f0, ftLastWriteTime.dwHighDateTime=0x1d568c8, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="advancement spies.exe", cAlternateFileName="ADVANC~1.EXE")) returned 1 [0143.545] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82e68d8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x82e8efda, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClientX64", cAlternateFileName="CLIENT~1")) returned 1 [0143.545] GetProcessHeap () returned 0x8a0000 [0143.545] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0143.545] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office 15\\ClientX64\\*", lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82e68d8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x82e8efda, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993500 [0143.546] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82e68d8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x82e8efda, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.546] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82e68d8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbe3eab00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x10ae80, dwReserved0=0x0, dwReserved1=0x0, cFileName="IntegratedOffice.exe", cAlternateFileName="INTEGR~1.EXE")) returned 1 [0143.546] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82e8efda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82e8efda, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbe3eab00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x10ae80, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeClickToRun.exe", cAlternateFileName="OFFICE~1.EXE")) returned 1 [0143.546] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82e8efda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82e8efda, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbe3eab00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x10ae80, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeClickToRun.exe", cAlternateFileName="OFFICE~1.EXE")) returned 0 [0143.546] FindClose (in: hFindFile=0x993500 | out: hFindFile=0x993500) returned 1 [0143.546] GetProcessHeap () returned 0x8a0000 [0143.546] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0143.546] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82e68d8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x82e8efda, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClientX64", cAlternateFileName="CLIENT~1")) returned 0 [0143.546] FindClose (in: hFindFile=0x9937c0 | out: hFindFile=0x9937c0) returned 1 [0143.546] GetProcessHeap () returned 0x8a0000 [0143.546] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3674088 | out: hHeap=0x8a0000) returned 1 [0143.547] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe99e772e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xa7154510, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xf7d369cb, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Mozilla Firefox", cAlternateFileName="MOZILL~1")) returned 1 [0143.547] GetProcessHeap () returned 0x8a0000 [0143.547] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3674088 [0143.547] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe99e772e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xa7154510, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xf7d369cb, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993500 [0143.556] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe99e772e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xa7154510, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xf7d369cb, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.558] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9eac3a9, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe9eac3a9, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xf3efc600, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0xbc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessible.tlb", cAlternateFileName="ACCESS~1.TLB")) returned 1 [0143.559] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeae059bd, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeae059bd, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x72516580, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x1f1d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessibleHandler.dll", cAlternateFileName="ACCESS~1.DLL")) returned 1 [0143.559] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeae2bc3c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeae2bc3c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73829280, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x73d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessibleMarshal.dll", cAlternateFileName="ACCESS~2.DLL")) returned 1 [0143.559] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeae2bc3c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeae2bc3c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-console-l1-1-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1 [0143.559] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeae51e99, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeae51e99, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x46c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-datetime-l1-1-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1 [0143.559] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeae51e99, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeae51e99, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x46c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-debug-l1-1-0.dll", cAlternateFileName="API-MS~3.DLL")) returned 1 [0143.559] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeae51e99, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeae51e99, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-errorhandling-l1-1-0.dll", cAlternateFileName="API-MS~4.DLL")) returned 1 [0143.559] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeae780ef, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeae780ef, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x56c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l1-1-0.dll", cAlternateFileName="AP87F4~1.DLL")) returned 1 [0143.559] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeae780ef, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeae780ef, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="APDEA0~1.DLL")) returned 1 [0143.559] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeae9e352, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeae9e352, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="APC7B0~1.DLL")) returned 1 [0143.559] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaec45af, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaec45af, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x48b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-handle-l1-1-0.dll", cAlternateFileName="AP4F63~1.DLL")) returned 1 [0143.559] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaec45af, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaec45af, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-heap-l1-1-0.dll", cAlternateFileName="AP26B7~1.DLL")) returned 1 [0143.559] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaec45af, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaec45af, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x48b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-interlocked-l1-1-0.dll", cAlternateFileName="AP40C7~1.DLL")) returned 1 [0143.560] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaeea81b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaeea81b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-libraryloader-l1-1-0.dll", cAlternateFileName="APD0F3~1.DLL")) returned 1 [0143.560] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaeea81b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaeea81b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="AP6221~1.DLL")) returned 1 [0143.560] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf10a88, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaf10a88, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-memory-l1-1-0.dll", cAlternateFileName="AP25B1~1.DLL")) returned 1 [0143.560] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf10a88, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaf10a88, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-namedpipe-l1-1-0.dll", cAlternateFileName="AP8526~1.DLL")) returned 1 [0143.560] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf10a88, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaf10a88, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-processenvironment-l1-1-0.dll", cAlternateFileName="AP507A~1.DLL")) returned 1 [0143.560] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf36ceb, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaf36ceb, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-processthreads-l1-1-0.dll", cAlternateFileName="APEF2A~1.DLL")) returned 1 [0143.560] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf36ceb, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaf36ceb, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="AP750A~1.DLL")) returned 1 [0143.560] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf5cf35, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaf5cf35, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x46c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-profile-l1-1-0.dll", cAlternateFileName="AP5574~1.DLL")) returned 1 [0143.560] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf5cf35, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaf5cf35, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x48b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-rtlsupport-l1-1-0.dll", cAlternateFileName="APDC30~1.DLL")) returned 1 [0143.560] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf5cf35, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaf5cf35, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-string-l1-1-0.dll", cAlternateFileName="AP743F~1.DLL")) returned 1 [0143.560] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf831a7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaf831a7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-synch-l1-1-0.dll", cAlternateFileName="AP7678~1.DLL")) returned 1 [0143.561] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf831a7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaf831a7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="APF10C~1.DLL")) returned 1 [0143.561] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf831a7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaf831a7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-sysinfo-l1-1-0.dll", cAlternateFileName="APFAD9~1.DLL")) returned 1 [0143.561] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeafa93fe, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeafa93fe, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1 [0143.561] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeafcf67a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeafcf67a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-util-l1-1-0.dll", cAlternateFileName="APF2DB~1.DLL")) returned 1 [0143.561] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeafcf67a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeafcf67a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1 [0143.562] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaff58d4, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaff58d4, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x58c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="APFD9C~1.DLL")) returned 1 [0143.562] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaff58d4, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaff58d4, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="APC00F~1.DLL")) returned 1 [0143.562] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaff58d4, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaff58d4, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="AP0479~1.DLL")) returned 1 [0143.562] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb01bb37, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb01bb37, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="AP23C9~1.DLL")) returned 1 [0143.562] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb01bb37, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb01bb37, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1 [0143.562] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb041d9d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb041d9d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="APAE51~1.DLL")) returned 1 [0143.562] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb041d9d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb041d9d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x66b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1 [0143.562] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb041d9d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb041d9d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1 [0143.562] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb068003, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb068003, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="APFCAD~1.DLL")) returned 1 [0143.562] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb068003, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb068003, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="AP8F34~1.DLL")) returned 1 [0143.562] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb068003, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb068003, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="APD1B7~1.DLL")) returned 1 [0143.563] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb08e250, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb08e250, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="APBF0F~1.DLL")) returned 1 [0143.563] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb08e250, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb08e250, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="AP5E4C~1.DLL")) returned 1 [0143.563] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb0b44c9, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb0b44c9, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="AP80F4~1.DLL")) returned 1 [0143.563] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb0da723, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb0da723, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xf2260280, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x2ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="application.ini", cAlternateFileName="APPLIC~1.INI")) returned 1 [0143.563] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb0da723, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xece35df2, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xece35df2, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="browser", cAlternateFileName="")) returned 1 [0143.563] GetProcessHeap () returned 0x8a0000 [0143.563] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0143.563] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\browser\\*", lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb0da723, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xece35df2, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xece35df2, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0143.813] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb0da723, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xece35df2, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xece35df2, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.813] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeccb8639, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeccb8639, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x200a4780, ftLastWriteTime.dwHighDateTime=0x1d31cd6, nFileSizeHigh=0x0, nFileSizeLow=0x44669, dwReserved0=0x0, dwReserved1=0x0, cFileName="blocklist.xml", cAlternateFileName="BLOCKL~1.XML")) returned 1 [0143.813] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeccde86d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeccde86d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xe2ca280, ftLastWriteTime.dwHighDateTime=0x1d31cde, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.manifest", cAlternateFileName="CHROME~1.MAN")) returned 1 [0143.813] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd04ada, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecd04ada, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x2dbfcd00, ftLastWriteTime.dwHighDateTime=0x1d31cd6, nFileSizeHigh=0x0, nFileSizeLow=0x313, dwReserved0=0x0, dwReserved1=0x0, cFileName="crashreporter-override.ini", cAlternateFileName="CRASHR~1.INI")) returned 1 [0143.813] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd77219, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xedb40aac, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xedb40aac, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="extensions", cAlternateFileName="EXTENS~1")) returned 1 [0143.813] GetProcessHeap () returned 0x8a0000 [0143.814] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0143.814] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\browser\\extensions\\*", lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd77219, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xedb40aac, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xedb40aac, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9938c0 [0143.815] FindNextFileW (in: hFindFile=0x9938c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd77219, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xedb40aac, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xedb40aac, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.815] FindNextFileW (in: hFindFile=0x9938c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedb40aac, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xedb40aac, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xadec2f80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x1e83, dwReserved0=0x0, dwReserved1=0x0, cFileName="{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi", cAlternateFileName="{972CE~1.XPI")) returned 1 [0143.815] FindNextFileW (in: hFindFile=0x9938c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedb40aac, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xedb40aac, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xadec2f80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x1e83, dwReserved0=0x0, dwReserved1=0x0, cFileName="{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi", cAlternateFileName="{972CE~1.XPI")) returned 0 [0143.815] FindClose (in: hFindFile=0x9938c0 | out: hFindFile=0x9938c0) returned 1 [0143.815] GetProcessHeap () returned 0x8a0000 [0143.815] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0143.815] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd77219, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xedb1a83d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xedb1a83d, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="features", cAlternateFileName="")) returned 1 [0143.815] GetProcessHeap () returned 0x8a0000 [0143.815] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0143.815] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\browser\\features\\*", lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd77219, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xedb1a83d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xedb1a83d, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0143.819] GetProcessHeap () returned 0x8a0000 [0143.819] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0143.819] GetProcessHeap () returned 0x8a0000 [0143.819] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0143.819] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\browser\\VisualElements\\*", lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xece35df2, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xed7d339e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xed7d339e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993600 [0143.819] GetProcessHeap () returned 0x8a0000 [0143.819] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0143.819] GetProcessHeap () returned 0x8a0000 [0143.819] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0143.820] GetProcessHeap () returned 0x8a0000 [0143.820] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0143.820] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\defaults\\*", lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec080216, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecc92398, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecc92398, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0143.828] GetProcessHeap () returned 0x8a0000 [0143.828] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0143.829] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\defaults\\pref\\*", lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecc92398, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeccb8639, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xeccb8639, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993800 [0143.830] GetProcessHeap () returned 0x8a0000 [0143.830] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0143.830] GetProcessHeap () returned 0x8a0000 [0143.830] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0143.834] GetProcessHeap () returned 0x8a0000 [0143.834] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0143.834] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\dictionaries\\*", lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec0cc6d9, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecc92398, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecc92398, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0143.835] GetProcessHeap () returned 0x8a0000 [0143.835] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0143.835] GetProcessHeap () returned 0x8a0000 [0143.835] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0143.835] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\fonts\\*", lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec0f2926, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecbad561, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecbad561, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0143.845] GetProcessHeap () returned 0x8a0000 [0143.845] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0143.845] GetProcessHeap () returned 0x8a0000 [0143.845] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0143.845] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\gmp-clearkey\\*", lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec13ee02, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecaee98b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecaee98b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0143.846] GetProcessHeap () returned 0x8a0000 [0143.846] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0143.846] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\gmp-clearkey\\0.1\\*", lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecaee98b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecb87321, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecb87321, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0143.848] GetProcessHeap () returned 0x8a0000 [0143.848] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0143.848] GetProcessHeap () returned 0x8a0000 [0143.848] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0143.849] GetProcessHeap () returned 0x8a0000 [0143.849] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0143.849] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\uninstall\\*", lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe9d2ec34, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef639ad2, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef639ad2, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0143.858] GetProcessHeap () returned 0x8a0000 [0143.858] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0143.858] GetProcessHeap () returned 0x8a0000 [0143.858] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3674088 | out: hHeap=0x8a0000) returned 1 [0143.859] GetProcessHeap () returned 0x8a0000 [0143.860] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3674088 [0143.860] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709c717f, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x709c717f, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x709c717f, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b80 [0143.861] GetProcessHeap () returned 0x8a0000 [0143.861] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0143.862] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\Microsoft\\*", lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709c717f, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x709c717f, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x709c717f, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0143.862] GetProcessHeap () returned 0x8a0000 [0143.862] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0143.862] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\*", lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709c717f, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x709c717f, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x709c717f, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0143.863] GetProcessHeap () returned 0x8a0000 [0143.863] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a90058 [0143.863] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709c717f, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x709c717f, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x709c717f, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0143.866] GetProcessHeap () returned 0x8a0000 [0143.866] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a90058 | out: hHeap=0x8a0000) returned 1 [0143.866] GetProcessHeap () returned 0x8a0000 [0143.866] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a90058 [0143.866] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709c717f, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x709ed3a7, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x709ed3a7, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0143.866] GetProcessHeap () returned 0x8a0000 [0143.866] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a90058 | out: hHeap=0x8a0000) returned 1 [0143.867] GetProcessHeap () returned 0x8a0000 [0143.867] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0143.867] GetProcessHeap () returned 0x8a0000 [0143.867] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0143.868] GetProcessHeap () returned 0x8a0000 [0143.868] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3674088 | out: hHeap=0x8a0000) returned 1 [0143.868] GetProcessHeap () returned 0x8a0000 [0143.868] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3674088 [0143.868] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709ed3a7, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x4dcec80c, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x4dcec80c, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0143.869] GetProcessHeap () returned 0x8a0000 [0143.869] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0143.869] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\*", lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709ed3a7, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x709ed3a7, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x709ed3a7, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0143.870] GetProcessHeap () returned 0x8a0000 [0143.870] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0143.870] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\*", lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709ed3a7, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70a5faff, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70a5faff, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0143.870] GetProcessHeap () returned 0x8a0000 [0143.870] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a90058 [0143.871] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709ed3a7, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70a3987a, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70a3987a, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9938c0 [0143.877] GetProcessHeap () returned 0x8a0000 [0143.877] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0143.878] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70a3987a, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70a3987a, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70a3987a, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0143.889] GetProcessHeap () returned 0x8a0000 [0143.889] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0143.889] GetProcessHeap () returned 0x8a0000 [0143.889] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a90058 | out: hHeap=0x8a0000) returned 1 [0143.890] GetProcessHeap () returned 0x8a0000 [0143.890] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a90058 [0143.890] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70a5faff, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70af849b, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70af849b, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993500 [0143.894] GetProcessHeap () returned 0x8a0000 [0143.894] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0143.895] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70af849b, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70af849b, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0143.897] GetProcessHeap () returned 0x8a0000 [0143.897] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0143.897] GetProcessHeap () returned 0x8a0000 [0143.897] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a90058 | out: hHeap=0x8a0000) returned 1 [0144.176] GetProcessHeap () returned 0x8a0000 [0144.176] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0144.177] GetProcessHeap () returned 0x8a0000 [0144.177] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0144.192] GetProcessHeap () returned 0x8a0000 [0144.192] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3674088 | out: hHeap=0x8a0000) returned 1 [0144.193] GetProcessHeap () returned 0x8a0000 [0144.193] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3674088 [0144.193] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\rempl\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x59f2f4b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa73e1bbd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8390c831, ftLastWriteTime.dwHighDateTime=0x1d32735, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0144.196] GetProcessHeap () returned 0x8a0000 [0144.198] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0144.198] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\rempl\\Logs\\*", lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8390c831, ftCreationTime.dwHighDateTime=0x1d32735, ftLastAccessTime.dwLowDateTime=0x86e9cd10, ftLastAccessTime.dwHighDateTime=0x1d336d7, ftLastWriteTime.dwLowDateTime=0x86e9cd10, ftLastWriteTime.dwHighDateTime=0x1d336d7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0144.202] GetProcessHeap () returned 0x8a0000 [0144.202] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0144.202] GetProcessHeap () returned 0x8a0000 [0144.202] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3674088 | out: hHeap=0x8a0000) returned 1 [0144.202] GetProcessHeap () returned 0x8a0000 [0144.202] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3674088 [0144.202] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Uninstall Information\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd2709a20, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xa747e827, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2709a20, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0144.204] GetProcessHeap () returned 0x8a0000 [0144.205] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3674088 | out: hHeap=0x8a0000) returned 1 [0144.205] GetProcessHeap () returned 0x8a0000 [0144.205] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3674088 [0144.205] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4c509d45, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x4ea7bdb9, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x4ea7bdb9, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9938c0 [0144.210] GetProcessHeap () returned 0x8a0000 [0144.210] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0144.210] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\*", lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x749f4454, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa747febb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x865d24d3, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0144.211] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x749f4454, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa747febb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x865d24d3, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.211] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x865d24d3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x865d24d3, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0xce2469cc, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x26, dwReserved0=0x0, dwReserved1=0x0, cFileName="CampaignCatalog.json", cAlternateFileName="CAMPAI~1.JSO")) returned 1 [0144.211] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x865d24d3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa74805fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x865d24d3, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Campaigns", cAlternateFileName="CAMPAI~1")) returned 1 [0144.211] GetProcessHeap () returned 0x8a0000 [0144.212] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0144.212] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\*", lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x865d24d3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa74805fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x865d24d3, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0144.213] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x865d24d3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa74805fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x865d24d3, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.213] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x865d24d3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa755519f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91be532c-f9f1-406a-9858-43697c6f437a}", cAlternateFileName="{91BE5~1")) returned 1 [0144.213] GetProcessHeap () returned 0x8a0000 [0144.213] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a90058 [0144.213] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x865d24d3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa755519f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0144.215] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x865d24d3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa755519f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.215] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89d8d47d, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x89d8d47d, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x89d8d47d, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x90d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Config_131491847713900000.json", cAlternateFileName="CONFIG~1.JSO")) returned 1 [0144.215] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e2fdd51, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa76437f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content1", cAlternateFileName="")) returned 1 [0144.215] GetProcessHeap () returned 0x8a0000 [0144.215] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0144.216] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e2fdd51, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa76437f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0144.220] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e2fdd51, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa76437f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.221] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e2fdd51, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa76f9fe7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e32400a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-sa", cAlternateFileName="")) returned 1 [0144.221] GetProcessHeap () returned 0x8a0000 [0144.221] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0144.221] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\ar-sa\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e2fdd51, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa76f9fe7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e32400a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993700 [0144.224] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e2fdd51, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa76f9fe7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e32400a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.224] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2fdd51, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e2fdd51, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x32e4c500, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xb5b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0144.224] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2fdd51, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e2fdd51, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3b8f4c00, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x258, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0144.224] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2fdd51, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e2fdd51, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x19f, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0144.224] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e32400a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e32400a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0144.224] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e32400a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e32400a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0144.224] FindClose (in: hFindFile=0x993700 | out: hFindFile=0x993700) returned 1 [0144.227] GetProcessHeap () returned 0x8a0000 [0144.227] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0144.227] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e32400a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa772ddc0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e32400a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0144.227] GetProcessHeap () returned 0x8a0000 [0144.227] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0144.227] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\bg-BG\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e32400a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa772ddc0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e32400a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993800 [0144.230] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e32400a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa772ddc0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e32400a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.230] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e32400a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e32400a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x32e4c500, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xd556, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0144.230] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e32400a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e32400a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x18026100, ftLastWriteTime.dwHighDateTime=0x1d2c3e2, nFileSizeHigh=0x0, nFileSizeLow=0x2ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0144.230] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e32400a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e32400a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x1df, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0144.230] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e32400a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e32400a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x230, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0144.230] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e32400a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e32400a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x230, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0144.231] FindClose (in: hFindFile=0x993800 | out: hFindFile=0x993800) returned 1 [0144.232] GetProcessHeap () returned 0x8a0000 [0144.232] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0144.232] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa77fb761, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e34a1b4, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-ES", cAlternateFileName="")) returned 1 [0144.232] GetProcessHeap () returned 0x8a0000 [0144.232] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0144.232] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\ca-ES\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa77fb761, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e34a1b4, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b80 [0144.235] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa77fb761, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e34a1b4, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.235] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e34a1b4, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x32e4c500, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xa0a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0144.235] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e34a1b4, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x18026100, ftLastWriteTime.dwHighDateTime=0x1d2c3e2, nFileSizeHigh=0x0, nFileSizeLow=0x260, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0144.235] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e34a1b4, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x1a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0144.235] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e34a1b4, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0144.235] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e34a1b4, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0144.402] FindClose (in: hFindFile=0x993b80 | out: hFindFile=0x993b80) returned 1 [0144.402] GetProcessHeap () returned 0x8a0000 [0144.403] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0144.403] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa78433f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e34a1b4, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-ES-valencia", cAlternateFileName="CA-ES-~1")) returned 1 [0144.403] GetProcessHeap () returned 0x8a0000 [0144.403] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0144.403] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\ca-ES-valencia\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa78433f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e34a1b4, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0144.405] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa78433f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e34a1b4, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.405] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e34a1b4, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x32e4c500, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xa0a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0144.405] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e34a1b4, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x18026100, ftLastWriteTime.dwHighDateTime=0x1d2c3e2, nFileSizeHigh=0x0, nFileSizeLow=0x260, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0144.405] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e34a1b4, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x1a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0144.406] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e34a1b4, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0144.406] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e34a1b4, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0144.406] FindClose (in: hFindFile=0x993ac0 | out: hFindFile=0x993ac0) returned 1 [0144.407] GetProcessHeap () returned 0x8a0000 [0144.407] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0144.407] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa78fe34b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3703fd, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0144.407] GetProcessHeap () returned 0x8a0000 [0144.407] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0144.407] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\cs-CZ\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa78fe34b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3703fd, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0144.410] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa78fe34b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3703fd, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.410] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3703fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3703fd, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x32e4c500, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x9fc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0144.411] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3703fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3703fd, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3b8f4c00, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x26a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0144.411] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3703fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3703fd, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x1b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0144.411] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3703fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3703fd, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0144.411] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3703fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3703fd, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0144.411] FindClose (in: hFindFile=0x9937c0 | out: hFindFile=0x9937c0) returned 1 [0144.412] GetProcessHeap () returned 0x8a0000 [0144.412] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0144.412] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3703fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa795f898, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3703fd, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0144.412] GetProcessHeap () returned 0x8a0000 [0144.412] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0144.412] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\da-DK\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3703fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa795f898, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3703fd, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0144.414] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3703fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa795f898, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3703fd, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.414] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3703fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3703fd, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x32e4c500, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x987f, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0144.414] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3703fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3703fd, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x18026100, ftLastWriteTime.dwHighDateTime=0x1d2c3e2, nFileSizeHigh=0x0, nFileSizeLow=0x234, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0144.414] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3703fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3703fd, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x17e, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0144.414] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3703fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3703fd, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0144.414] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3703fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3703fd, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0144.415] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0144.416] GetProcessHeap () returned 0x8a0000 [0144.416] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0144.416] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3703fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa79714a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e396633, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-AT", cAlternateFileName="")) returned 1 [0144.416] GetProcessHeap () returned 0x8a0000 [0144.416] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0144.416] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\de-AT\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3703fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa79714a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e396633, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0144.418] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3703fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa79714a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e396633, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.418] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e396633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e396633, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x32e4c500, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x9c9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0144.419] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e396633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e396633, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3b8f4c00, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0144.419] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e396633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e396633, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x193, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0144.419] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e396633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e396633, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0144.419] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e396633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e396633, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0144.419] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0144.420] GetProcessHeap () returned 0x8a0000 [0144.420] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0144.420] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e396633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa79bb5f0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e396633, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-CH", cAlternateFileName="")) returned 1 [0144.420] GetProcessHeap () returned 0x8a0000 [0144.420] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0144.420] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\de-CH\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e396633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa79bb5f0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e396633, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993500 [0144.422] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e396633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa79bb5f0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e396633, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.423] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e396633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e396633, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x32e4c500, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x9c9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0144.423] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e396633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e396633, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3b8f4c00, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0144.423] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e396633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e396633, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x193, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0144.423] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e396633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e396633, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0144.423] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e396633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e396633, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0144.423] FindClose (in: hFindFile=0x993500 | out: hFindFile=0x993500) returned 1 [0144.424] GetProcessHeap () returned 0x8a0000 [0144.424] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0144.424] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e396633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7a12def, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3bc889, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0144.424] GetProcessHeap () returned 0x8a0000 [0144.424] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0144.424] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\de-DE\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e396633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7a12def, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3bc889, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993500 [0144.427] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e396633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7a12def, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3bc889, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.427] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e396633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e396633, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x32e4c500, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x9c9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0144.427] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3bc889, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3b8f4c00, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0144.427] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3bc889, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x193, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0144.427] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3bc889, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0144.427] FindNextFileW (in: hFindFile=0x993500, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3bc889, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0144.427] FindClose (in: hFindFile=0x993500 | out: hFindFile=0x993500) returned 1 [0144.428] GetProcessHeap () returned 0x8a0000 [0144.428] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0144.428] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7adca7e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3bc889, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0144.429] GetProcessHeap () returned 0x8a0000 [0144.429] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0144.429] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\el-GR\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7adca7e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3bc889, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0144.431] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7adca7e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3bc889, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.431] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3bc889, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x32e4c500, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xe4ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0144.431] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3bc889, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x18026100, ftLastWriteTime.dwHighDateTime=0x1d2c3e2, nFileSizeHigh=0x0, nFileSizeLow=0x2be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0144.431] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3bc889, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x1f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0144.431] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3bc889, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x25c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0144.431] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3bc889, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x25c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0144.431] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0144.432] GetProcessHeap () returned 0x8a0000 [0144.432] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0144.432] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7b18143, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3e2af7, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-AU", cAlternateFileName="")) returned 1 [0144.432] GetProcessHeap () returned 0x8a0000 [0144.432] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0144.432] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-AU\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7b18143, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3e2af7, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0144.438] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7b18143, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3e2af7, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.438] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3bc889, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x32e4c500, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x906e, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0144.438] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3bc889, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6ff37000, ftLastWriteTime.dwHighDateTime=0x1d29856, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0144.438] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3e2af7, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0144.438] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3e2af7, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0144.438] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3e2af7, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0144.439] FindClose (in: hFindFile=0x9935c0 | out: hFindFile=0x9935c0) returned 1 [0144.439] GetProcessHeap () returned 0x8a0000 [0144.439] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0144.439] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7b914a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3e2af7, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-CA", cAlternateFileName="")) returned 1 [0144.440] GetProcessHeap () returned 0x8a0000 [0144.440] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0144.440] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-CA\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7b914a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3e2af7, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0144.706] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7b914a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3e2af7, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.706] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3e2af7, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x32e4c500, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x923d, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0144.706] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3e2af7, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6ff37000, ftLastWriteTime.dwHighDateTime=0x1d29856, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0144.706] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3e2af7, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0144.706] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3e2af7, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0144.706] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3e2af7, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0144.706] FindClose (in: hFindFile=0x9935c0 | out: hFindFile=0x9935c0) returned 1 [0144.707] GetProcessHeap () returned 0x8a0000 [0144.707] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0144.707] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7b93b92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e408d2a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB", cAlternateFileName="")) returned 1 [0144.707] GetProcessHeap () returned 0x8a0000 [0144.707] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0144.708] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-GB\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7b93b92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e408d2a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0144.710] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7b93b92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e408d2a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.710] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3e2af7, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x32e4c500, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x9093, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0144.710] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3e2af7, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x14d9d700, ftLastWriteTime.dwHighDateTime=0x1d29cb5, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0144.710] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3e2af7, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0144.710] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e408d2a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0144.710] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e408d2a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0144.710] FindClose (in: hFindFile=0x9935c0 | out: hFindFile=0x9935c0) returned 1 [0144.711] GetProcessHeap () returned 0x8a0000 [0144.711] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0144.711] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7c098ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e408d2a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-HK", cAlternateFileName="")) returned 1 [0144.711] GetProcessHeap () returned 0x8a0000 [0144.711] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0144.711] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-HK\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7c098ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e408d2a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0144.714] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7c098ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e408d2a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.714] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e408d2a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x32e4c500, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x906e, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0144.714] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e408d2a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6ff37000, ftLastWriteTime.dwHighDateTime=0x1d29856, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0144.714] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e408d2a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0144.714] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e408d2a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0144.714] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e408d2a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0144.714] FindClose (in: hFindFile=0x9935c0 | out: hFindFile=0x9935c0) returned 1 [0144.715] GetProcessHeap () returned 0x8a0000 [0144.715] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0144.715] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7c0b4b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e42efab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ID", cAlternateFileName="")) returned 1 [0144.715] GetProcessHeap () returned 0x8a0000 [0144.715] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0144.715] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-ID\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7c0b4b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e42efab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0144.718] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7c0b4b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e42efab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.718] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e408d2a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x32e4c500, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x906e, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0144.718] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e408d2a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6ff37000, ftLastWriteTime.dwHighDateTime=0x1d29856, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0144.718] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e42efab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0144.718] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e42efab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0144.718] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e42efab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0144.718] FindClose (in: hFindFile=0x9935c0 | out: hFindFile=0x9935c0) returned 1 [0144.719] GetProcessHeap () returned 0x8a0000 [0144.719] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0144.719] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7c6d3fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e42efab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-IE", cAlternateFileName="")) returned 1 [0144.720] GetProcessHeap () returned 0x8a0000 [0144.720] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0144.720] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-IE\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7c6d3fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e42efab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0144.722] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7c6d3fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e42efab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.722] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e42efab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x32e4c500, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x906e, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0144.722] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e42efab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6ff37000, ftLastWriteTime.dwHighDateTime=0x1d29856, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0144.722] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e42efab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0144.722] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e42efab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0144.723] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e42efab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0144.723] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0144.723] GetProcessHeap () returned 0x8a0000 [0144.723] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0144.724] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7ca1328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e42efab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-IN", cAlternateFileName="")) returned 1 [0144.724] GetProcessHeap () returned 0x8a0000 [0144.724] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0144.724] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-IN\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7ca1328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e42efab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0144.727] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7ca1328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e42efab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.727] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e42efab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x32e4c500, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x906e, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0144.727] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e42efab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6ff37000, ftLastWriteTime.dwHighDateTime=0x1d29856, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0144.727] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e42efab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0144.727] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e42efab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0144.727] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e42efab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0144.728] FindClose (in: hFindFile=0x9935c0 | out: hFindFile=0x9935c0) returned 1 [0144.728] GetProcessHeap () returned 0x8a0000 [0144.728] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0144.728] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7d0e1e3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4551d8, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-MY", cAlternateFileName="")) returned 1 [0144.729] GetProcessHeap () returned 0x8a0000 [0144.729] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0144.729] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-MY\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7d0e1e3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4551d8, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b80 [0144.731] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7d0e1e3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4551d8, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.731] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x906e, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0144.731] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6ff37000, ftLastWriteTime.dwHighDateTime=0x1d29856, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0144.731] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0144.731] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0144.731] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0144.732] FindClose (in: hFindFile=0x993b80 | out: hFindFile=0x993b80) returned 1 [0144.732] GetProcessHeap () returned 0x8a0000 [0144.732] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0144.732] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7d107f6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4551d8, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-NZ", cAlternateFileName="")) returned 1 [0144.733] GetProcessHeap () returned 0x8a0000 [0144.733] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0144.733] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-NZ\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7d107f6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4551d8, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0144.735] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7d107f6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4551d8, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.735] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x906e, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0144.735] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6ff37000, ftLastWriteTime.dwHighDateTime=0x1d29856, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0144.735] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0144.735] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0144.735] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0144.736] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0144.737] GetProcessHeap () returned 0x8a0000 [0144.737] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0144.737] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7d8451a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4551d8, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-PH", cAlternateFileName="")) returned 1 [0144.737] GetProcessHeap () returned 0x8a0000 [0144.737] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0144.737] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-PH\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7d8451a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4551d8, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0144.918] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7d8451a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4551d8, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.918] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x906e, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0144.918] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6ff37000, ftLastWriteTime.dwHighDateTime=0x1d29856, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0144.919] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0144.919] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0144.919] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0144.919] FindClose (in: hFindFile=0x9937c0 | out: hFindFile=0x9937c0) returned 1 [0144.920] GetProcessHeap () returned 0x8a0000 [0144.920] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0144.920] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7de1d75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e47b424, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0144.920] GetProcessHeap () returned 0x8a0000 [0144.920] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0144.920] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-US\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7de1d75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e47b424, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0144.924] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7de1d75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e47b424, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.925] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e47b424, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x906e, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0144.925] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e47b424, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6ff37000, ftLastWriteTime.dwHighDateTime=0x1d29856, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0144.925] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e47b424, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0144.925] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e47b424, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0144.925] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e47b424, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0144.925] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0144.926] GetProcessHeap () returned 0x8a0000 [0144.926] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0144.926] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7de3d39, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e47b424, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ZA", cAlternateFileName="")) returned 1 [0144.926] GetProcessHeap () returned 0x8a0000 [0144.926] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0144.926] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-ZA\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7de3d39, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e47b424, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0144.929] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7de3d39, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e47b424, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.929] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e47b424, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x906e, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0144.929] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e47b424, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6ff37000, ftLastWriteTime.dwHighDateTime=0x1d29856, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0144.929] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e47b424, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0144.929] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e47b424, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0144.929] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e47b424, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0144.929] FindClose (in: hFindFile=0x993ac0 | out: hFindFile=0x993ac0) returned 1 [0144.930] GetProcessHeap () returned 0x8a0000 [0144.930] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0144.930] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7e82a38, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4a167a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-AR", cAlternateFileName="")) returned 1 [0144.930] GetProcessHeap () returned 0x8a0000 [0144.930] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0144.930] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\es-AR\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7e82a38, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4a167a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0144.933] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7e82a38, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4a167a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.933] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e47b424, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xa0a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0144.933] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e47b424, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x18026100, ftLastWriteTime.dwHighDateTime=0x1d2c3e2, nFileSizeHigh=0x0, nFileSizeLow=0x260, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0144.933] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4a167a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x1a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0144.933] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4a167a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0144.933] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4a167a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0144.934] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0144.935] GetProcessHeap () returned 0x8a0000 [0144.935] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0144.935] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f2851c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4a167a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-CL", cAlternateFileName="")) returned 1 [0144.935] GetProcessHeap () returned 0x8a0000 [0144.935] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0144.935] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\es-CL\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f2851c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4a167a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993600 [0144.937] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f2851c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4a167a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.937] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4a167a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xa0a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0144.937] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4a167a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x18026100, ftLastWriteTime.dwHighDateTime=0x1d2c3e2, nFileSizeHigh=0x0, nFileSizeLow=0x260, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0144.938] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4a167a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x1a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0144.938] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4a167a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0144.938] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4a167a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0144.938] FindClose (in: hFindFile=0x993600 | out: hFindFile=0x993600) returned 1 [0144.939] GetProcessHeap () returned 0x8a0000 [0144.939] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0144.939] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f2a5d6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4a167a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-CO", cAlternateFileName="")) returned 1 [0144.939] GetProcessHeap () returned 0x8a0000 [0144.939] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0144.939] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\es-CO\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f2a5d6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4a167a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0144.941] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f2a5d6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4a167a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.941] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4a167a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xa0a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0144.941] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4a167a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x18026100, ftLastWriteTime.dwHighDateTime=0x1d2c3e2, nFileSizeHigh=0x0, nFileSizeLow=0x260, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0144.941] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4a167a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x1a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0144.941] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4a167a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0144.942] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4a167a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0144.942] FindClose (in: hFindFile=0x9935c0 | out: hFindFile=0x9935c0) returned 1 [0144.943] GetProcessHeap () returned 0x8a0000 [0144.943] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0144.943] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f8f938, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4c78e2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0144.943] GetProcessHeap () returned 0x8a0000 [0144.943] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0144.943] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\es-ES\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f8f938, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4c78e2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0144.945] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f8f938, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4c78e2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.945] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4c78e2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xa0a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0144.945] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4c78e2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x18026100, ftLastWriteTime.dwHighDateTime=0x1d2c3e2, nFileSizeHigh=0x0, nFileSizeLow=0x260, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0144.945] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4c78e2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x1a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0144.945] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4c78e2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0144.946] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4c78e2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0144.946] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0144.946] GetProcessHeap () returned 0x8a0000 [0144.947] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0144.947] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f926c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4c78e2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-MX", cAlternateFileName="")) returned 1 [0144.947] GetProcessHeap () returned 0x8a0000 [0144.947] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0144.947] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\es-MX\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f926c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4c78e2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0144.949] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f926c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4c78e2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.949] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4c78e2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x9f19, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0144.949] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4c78e2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3b8f4c00, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x255, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0144.949] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4c78e2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x198, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0144.949] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4c78e2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0144.949] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4c78e2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0144.949] FindClose (in: hFindFile=0x9937c0 | out: hFindFile=0x9937c0) returned 1 [0144.950] GetProcessHeap () returned 0x8a0000 [0144.950] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0144.950] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7fd9866, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4c78e2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-US", cAlternateFileName="")) returned 1 [0144.950] GetProcessHeap () returned 0x8a0000 [0144.950] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0144.950] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\es-US\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7fd9866, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4c78e2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0144.953] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7fd9866, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4c78e2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.953] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4c78e2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xa0a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0144.953] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4c78e2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x18026100, ftLastWriteTime.dwHighDateTime=0x1d2c3e2, nFileSizeHigh=0x0, nFileSizeLow=0x260, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0144.954] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4c78e2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x1a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0144.954] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4c78e2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0144.954] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4c78e2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0144.954] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0144.955] GetProcessHeap () returned 0x8a0000 [0144.955] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0144.955] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4edb3a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa803fb1a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e93ff63, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-XL", cAlternateFileName="")) returned 1 [0144.955] GetProcessHeap () returned 0x8a0000 [0144.955] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0144.955] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\es-XL\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4edb3a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa803fb1a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e93ff63, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b80 [0144.959] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4edb3a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa803fb1a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e93ff63, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.959] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4edb3a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4edb3a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xa0a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0144.959] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4edb3a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4edb3a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x18026100, ftLastWriteTime.dwHighDateTime=0x1d2c3e2, nFileSizeHigh=0x0, nFileSizeLow=0x260, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0144.959] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4edb3a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4edb3a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x1a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0144.959] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e93ff63, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e93ff63, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0144.959] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e93ff63, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e93ff63, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0145.087] FindClose (in: hFindFile=0x993b80 | out: hFindFile=0x993b80) returned 1 [0145.088] GetProcessHeap () returned 0x8a0000 [0145.088] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0145.088] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e9661e4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa80b9206, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ebc8896, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et-EE", cAlternateFileName="")) returned 1 [0145.088] GetProcessHeap () returned 0x8a0000 [0145.088] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0145.088] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\et-EE\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e9661e4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa80b9206, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ebc8896, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0145.090] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e9661e4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa80b9206, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ebc8896, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.090] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ea24eee, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8ea24eee, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x94f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0145.090] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ea24eee, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8ea24eee, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3b8f4c00, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x240, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0145.091] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ea24eee, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8ea24eee, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x187, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0145.091] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebc8896, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8ebc8896, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0145.091] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebc8896, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8ebc8896, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0145.091] FindClose (in: hFindFile=0x993ac0 | out: hFindFile=0x993ac0) returned 1 [0145.092] GetProcessHeap () returned 0x8a0000 [0145.092] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0145.092] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ebc8896, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8130bd1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ec87470, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-ES", cAlternateFileName="")) returned 1 [0145.092] GetProcessHeap () returned 0x8a0000 [0145.092] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0145.092] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\eu-ES\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ebc8896, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8130bd1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ec87470, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0145.095] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ebc8896, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8130bd1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ec87470, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.095] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebc8896, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8ebc8896, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xa0a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0145.095] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebc8896, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8ebc8896, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x18026100, ftLastWriteTime.dwHighDateTime=0x1d2c3e2, nFileSizeHigh=0x0, nFileSizeLow=0x260, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0145.095] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebee9e0, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8ebee9e0, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x1a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0145.095] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ec87470, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8ec87470, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0145.095] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ec87470, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8ec87470, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0145.095] FindClose (in: hFindFile=0x993ac0 | out: hFindFile=0x993ac0) returned 1 [0145.096] GetProcessHeap () returned 0x8a0000 [0145.096] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0145.096] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ecad633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa817116e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ed6c2ab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0145.096] GetProcessHeap () returned 0x8a0000 [0145.096] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0145.096] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\fi-FI\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ecad633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa817116e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ed6c2ab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993700 [0145.098] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ecad633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa817116e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ed6c2ab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.099] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ecad633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8ecad633, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x990a, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0145.099] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ecad633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8ecad633, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3b8f4c00, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x250, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0145.099] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ecad633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8ecad633, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0145.099] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ed6c2ab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8ed6c2ab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0145.099] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ed6c2ab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8ed6c2ab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0145.099] FindClose (in: hFindFile=0x993700 | out: hFindFile=0x993700) returned 1 [0145.100] GetProcessHeap () returned 0x8a0000 [0145.100] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0145.100] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ed6c2ab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa81d6f2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2a33eb, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-BE", cAlternateFileName="")) returned 1 [0145.100] GetProcessHeap () returned 0x8a0000 [0145.100] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0145.100] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\fr-BE\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ed6c2ab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa81d6f2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2a33eb, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0145.102] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ed6c2ab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa81d6f2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2a33eb, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.102] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f08d25f, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f08d25f, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xa798, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0145.102] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f27d1ae, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f27d1ae, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x18026100, ftLastWriteTime.dwHighDateTime=0x1d2c3e2, nFileSizeHigh=0x0, nFileSizeLow=0x258, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0145.102] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2a33eb, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f2a33eb, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x19f, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0145.102] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2a33eb, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f2a33eb, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0145.102] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2a33eb, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f2a33eb, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0145.103] FindClose (in: hFindFile=0x9935c0 | out: hFindFile=0x9935c0) returned 1 [0145.103] GetProcessHeap () returned 0x8a0000 [0145.103] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0145.103] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f2a33eb, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa820b284, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2c9637, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-CA", cAlternateFileName="")) returned 1 [0145.104] GetProcessHeap () returned 0x8a0000 [0145.104] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0145.104] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\fr-CA\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f2a33eb, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa820b284, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2c9637, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0145.106] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f2a33eb, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa820b284, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2c9637, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.106] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2a33eb, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f2a33eb, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xa7a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0145.106] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2c9637, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f2c9637, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3cc07900, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x24c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0145.106] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2c9637, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f2c9637, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x18f, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0145.106] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2c9637, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f2c9637, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0145.106] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2c9637, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f2c9637, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0145.106] FindClose (in: hFindFile=0x9937c0 | out: hFindFile=0x9937c0) returned 1 [0145.107] GetProcessHeap () returned 0x8a0000 [0145.107] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0145.107] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f2c9637, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8276077, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2c9637, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-CH", cAlternateFileName="")) returned 1 [0145.107] GetProcessHeap () returned 0x8a0000 [0145.107] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0145.107] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\fr-CH\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f2c9637, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8276077, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2c9637, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0145.111] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f2c9637, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8276077, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2c9637, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.112] GetProcessHeap () returned 0x8a0000 [0145.112] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0145.112] GetProcessHeap () returned 0x8a0000 [0145.112] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0145.112] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\fr-FR\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f2c9637, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa830d026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2ef892, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0145.116] GetProcessHeap () returned 0x8a0000 [0145.116] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0145.116] GetProcessHeap () returned 0x8a0000 [0145.116] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0145.116] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\fr-XF\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f2ef892, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa830f28d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f315afa, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0145.119] GetProcessHeap () returned 0x8a0000 [0145.119] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0145.119] GetProcessHeap () returned 0x8a0000 [0145.119] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0145.119] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\gl-ES\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f315afa, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8397774, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f315afa, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0145.122] GetProcessHeap () returned 0x8a0000 [0145.122] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0145.122] GetProcessHeap () returned 0x8a0000 [0145.122] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0145.122] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\he-IL\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f33bd1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa83e88ef, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f33bd1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0145.125] GetProcessHeap () returned 0x8a0000 [0145.125] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0145.125] GetProcessHeap () returned 0x8a0000 [0145.125] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0145.125] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\hr-HR\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f33bd1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa83eab4d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f33bd1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0145.302] GetProcessHeap () returned 0x8a0000 [0145.302] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0145.302] GetProcessHeap () returned 0x8a0000 [0145.302] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0145.302] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\hu-HU\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f33bd1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa84655fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f361f6d, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0145.305] GetProcessHeap () returned 0x8a0000 [0145.305] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0145.305] GetProcessHeap () returned 0x8a0000 [0145.305] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0145.305] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\is-IS\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f361f6d, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa84b3b2f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f361f6d, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0145.309] GetProcessHeap () returned 0x8a0000 [0145.309] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0145.309] GetProcessHeap () returned 0x8a0000 [0145.309] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0145.309] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\it-IT\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f361f6d, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa84fae3d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3881cc, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0145.312] GetProcessHeap () returned 0x8a0000 [0145.313] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0145.313] GetProcessHeap () returned 0x8a0000 [0145.313] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0145.313] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\ja-JP\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3881cc, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa85726e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3881cc, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0145.316] GetProcessHeap () returned 0x8a0000 [0145.316] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0145.316] GetProcessHeap () returned 0x8a0000 [0145.316] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0145.316] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\ko-KR\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3881cc, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8575326, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3ae466, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0145.319] GetProcessHeap () returned 0x8a0000 [0145.319] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0145.319] GetProcessHeap () returned 0x8a0000 [0145.319] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0145.319] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\lb-LU\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3ae466, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa85bfd1b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3ae466, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993700 [0145.323] GetProcessHeap () returned 0x8a0000 [0145.323] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0145.323] GetProcessHeap () returned 0x8a0000 [0145.323] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0145.323] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\lt-LT\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3ae466, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa860670d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3d467a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0145.327] GetProcessHeap () returned 0x8a0000 [0145.327] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0145.327] GetProcessHeap () returned 0x8a0000 [0145.327] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0145.327] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\lv-LV\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3d467a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8608b57, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3d467a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0145.330] GetProcessHeap () returned 0x8a0000 [0145.330] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0145.330] GetProcessHeap () returned 0x8a0000 [0145.330] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0145.330] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\ms-MY\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3d467a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8663023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3fa8d2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0145.333] GetProcessHeap () returned 0x8a0000 [0145.333] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0145.333] GetProcessHeap () returned 0x8a0000 [0145.333] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0145.333] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\nb-NO\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3fa8d2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8664e62, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3fa8d2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993800 [0145.336] GetProcessHeap () returned 0x8a0000 [0145.336] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0145.337] GetProcessHeap () returned 0x8a0000 [0145.337] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0145.337] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\nl-BE\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3fa8d2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa86afcc3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f420b1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0145.340] GetProcessHeap () returned 0x8a0000 [0145.340] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0145.340] GetProcessHeap () returned 0x8a0000 [0145.341] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0145.341] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\nl-NL\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa86b1f8a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f420b1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993800 [0145.532] GetProcessHeap () returned 0x8a0000 [0145.532] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0145.532] GetProcessHeap () returned 0x8a0000 [0145.532] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0145.533] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\nn-NO\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8706406, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f420b1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0145.537] GetProcessHeap () returned 0x8a0000 [0145.537] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0145.537] GetProcessHeap () returned 0x8a0000 [0145.537] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0145.537] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\pl-PL\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa870879d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f741ca5, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0145.542] GetProcessHeap () returned 0x8a0000 [0145.542] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0145.542] GetProcessHeap () returned 0x8a0000 [0145.542] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0145.542] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\pt-BR\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f9f0764, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8758deb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8fb21a2e, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0145.546] GetProcessHeap () returned 0x8a0000 [0145.546] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0145.546] GetProcessHeap () returned 0x8a0000 [0145.546] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0145.546] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\pt-PT\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8fb940f6, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa879d17a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x910709ea, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0145.550] GetProcessHeap () returned 0x8a0000 [0145.550] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0145.550] GetProcessHeap () returned 0x8a0000 [0145.551] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0145.551] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\resources\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x910709ea, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8805329, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91ab8c63, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0145.554] GetProcessHeap () returned 0x8a0000 [0145.554] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0145.555] GetProcessHeap () returned 0x8a0000 [0145.555] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0145.555] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\ro-RO\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91ab8c63, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8807941, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91b2b4b0, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993600 [0145.559] GetProcessHeap () returned 0x8a0000 [0145.559] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0145.559] GetProcessHeap () returned 0x8a0000 [0145.559] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0145.559] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\ru-RU\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91b515fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8880860, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91ca8b67, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0145.562] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91b515fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8880860, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91ca8b67, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.562] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91b515fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x91b515fd, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xdc59, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0145.562] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91b515fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x91b515fd, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x18026100, ftLastWriteTime.dwHighDateTime=0x1d2c3e2, nFileSizeHigh=0x0, nFileSizeLow=0x2aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0145.562] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91b515fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x91b515fd, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x1e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0145.562] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91ca8b67, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x91ca8b67, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x209, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0145.562] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91ca8b67, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x91ca8b67, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x209, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0145.562] FindClose (in: hFindFile=0x9935c0 | out: hFindFile=0x9935c0) returned 1 [0145.564] GetProcessHeap () returned 0x8a0000 [0145.564] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0145.564] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91ca8b67, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa88ef27e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92500ff3, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-SK", cAlternateFileName="")) returned 1 [0145.564] GetProcessHeap () returned 0x8a0000 [0145.564] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0145.564] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\sk-SK\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91ca8b67, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa88ef27e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92500ff3, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b80 [0145.567] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91ca8b67, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa88ef27e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92500ff3, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.567] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91ca8b67, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x91ca8b67, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xa1cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0145.567] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91ca8b67, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x91ca8b67, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x18026100, ftLastWriteTime.dwHighDateTime=0x1d2c3e2, nFileSizeHigh=0x0, nFileSizeLow=0x24a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0145.567] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91ca8b67, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x91ca8b67, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x190, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0145.567] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92500ff3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x92500ff3, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0145.567] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92500ff3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x92500ff3, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0145.567] FindClose (in: hFindFile=0x993b80 | out: hFindFile=0x993b80) returned 1 [0145.568] GetProcessHeap () returned 0x8a0000 [0145.568] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0145.568] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x926583f5, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa88f19a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92906e91, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-SI", cAlternateFileName="")) returned 1 [0145.569] GetProcessHeap () returned 0x8a0000 [0145.569] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0145.569] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\sl-SI\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x926583f5, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa88f19a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92906e91, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993600 [0145.739] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x926583f5, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa88f19a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92906e91, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.739] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x926583f5, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x926583f5, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x9931, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0145.739] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9267e657, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x9267e657, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x66d5ac00, ftLastWriteTime.dwHighDateTime=0x1d2a223, nFileSizeHigh=0x0, nFileSizeLow=0x25d, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0145.739] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9273d1f2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x9273d1f2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x1a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0145.739] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92906e91, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x92906e91, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0145.739] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92906e91, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x92906e91, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0145.739] FindClose (in: hFindFile=0x993600 | out: hFindFile=0x993600) returned 1 [0145.740] GetProcessHeap () returned 0x8a0000 [0145.740] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0145.740] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92906e91, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8945b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92eb078f, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~1")) returned 1 [0145.740] GetProcessHeap () returned 0x8a0000 [0145.740] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0145.740] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\sr-Latn-RS\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92906e91, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8945b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92eb078f, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0145.743] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92906e91, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8945b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92eb078f, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.743] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92906e91, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x92906e91, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x9c5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0145.744] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92906e91, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x92906e91, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3cc07900, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x248, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0145.744] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x929796cf, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x929796cf, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x190, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0145.744] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92eb078f, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x92eb078f, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0145.744] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92eb078f, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x92eb078f, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0145.744] FindClose (in: hFindFile=0x993ac0 | out: hFindFile=0x993ac0) returned 1 [0145.745] GetProcessHeap () returned 0x8a0000 [0145.745] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0145.745] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92eb078f, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8a33d41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x934cc975, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0145.745] GetProcessHeap () returned 0x8a0000 [0145.745] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0145.745] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\sv-SE\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92eb078f, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8a33d41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x934cc975, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0145.747] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92eb078f, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8a33d41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x934cc975, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.747] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92eb078f, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x92eb078f, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x9702, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0145.747] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93007e14, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x93007e14, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3cc07900, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x23f, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0145.748] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93007e14, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x93007e14, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x187, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0145.748] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x934cc975, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x934cc975, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0145.748] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x934cc975, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x934cc975, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0145.748] FindClose (in: hFindFile=0x9937c0 | out: hFindFile=0x9937c0) returned 1 [0145.749] GetProcessHeap () returned 0x8a0000 [0145.749] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0145.749] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x934cc975, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8a36304, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x93670243, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th-TH", cAlternateFileName="")) returned 1 [0145.749] GetProcessHeap () returned 0x8a0000 [0145.749] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0145.749] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\th-TH\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x934cc975, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8a36304, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x93670243, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0145.751] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x934cc975, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8a36304, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x93670243, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.751] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x934cc975, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x934cc975, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x1007a, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0145.751] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x934f2a6a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x934f2a6a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3cc07900, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x306, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0145.751] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x934f2a6a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x934f2a6a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x238, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0145.751] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93670243, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x93670243, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x2b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0145.752] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93670243, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x93670243, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x2b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0145.752] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0145.752] GetProcessHeap () returned 0x8a0000 [0145.753] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0145.753] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93670243, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8b3c077, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x93991459, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0145.753] GetProcessHeap () returned 0x8a0000 [0145.753] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0145.753] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\tr-TR\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93670243, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8b3c077, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x93991459, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0145.754] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93670243, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8b3c077, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x93991459, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.754] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93670243, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x93670243, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x9cf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0145.755] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93696451, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x93696451, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3cc07900, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x248, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0145.755] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x938ac51e, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x938ac51e, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6fc8b500, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x18a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0145.755] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93991459, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x93991459, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1af, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0145.755] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93991459, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x93991459, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1af, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0145.755] FindClose (in: hFindFile=0x9937c0 | out: hFindFile=0x9937c0) returned 1 [0145.756] GetProcessHeap () returned 0x8a0000 [0145.756] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0145.756] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93991459, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8c00614, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x93a9c3f1, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-UA", cAlternateFileName="")) returned 1 [0145.756] GetProcessHeap () returned 0x8a0000 [0145.756] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0145.756] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\uk-UA\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93991459, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8c00614, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x93a9c3f1, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0145.765] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93991459, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8c00614, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x93a9c3f1, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.765] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93991459, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x93991459, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xd422, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0145.765] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93991459, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x93991459, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x19338e00, ftLastWriteTime.dwHighDateTime=0x1d2c3e2, nFileSizeHigh=0x0, nFileSizeLow=0x2a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0145.765] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93991459, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x93991459, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6fc8b500, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x1e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0145.765] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93a9c3f1, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x93a9c3f1, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x219, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0145.765] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93a9c3f1, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x93a9c3f1, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x219, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0145.765] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0145.766] GetProcessHeap () returned 0x8a0000 [0145.766] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0145.766] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93b5b0aa, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8c62177, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x949a9132, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi-VN", cAlternateFileName="")) returned 1 [0145.766] GetProcessHeap () returned 0x8a0000 [0145.766] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0145.766] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\vi-VN\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93b5b0aa, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8c62177, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x949a9132, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0145.770] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93b5b0aa, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8c62177, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x949a9132, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.770] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93b5b0aa, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x93b5b0aa, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x906e, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0145.770] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93b81242, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x93b81242, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x71249d00, ftLastWriteTime.dwHighDateTime=0x1d29856, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0145.770] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93b81242, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x93b81242, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6fc8b500, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0145.770] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949a9132, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x949a9132, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0145.770] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949a9132, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x949a9132, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0145.770] FindClose (in: hFindFile=0x9939c0 | out: hFindFile=0x9939c0) returned 1 [0145.771] GetProcessHeap () returned 0x8a0000 [0145.771] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0145.771] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x949a9132, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8c9dee8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94c57ba9, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0145.771] GetProcessHeap () returned 0x8a0000 [0145.771] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0145.771] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\zh-CN\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x949a9132, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8c9dee8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94c57ba9, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b80 [0145.774] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x949a9132, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8c9dee8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94c57ba9, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.774] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949a9132, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x949a9132, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x8e1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0145.774] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949a9132, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x949a9132, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3cc07900, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x221, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0145.774] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949a9132, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x949a9132, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6fc8b500, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x171, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0145.775] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94c57ba9, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x94c57ba9, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0145.775] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94c57ba9, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x94c57ba9, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0145.775] FindClose (in: hFindFile=0x993b80 | out: hFindFile=0x993b80) returned 1 [0145.776] GetProcessHeap () returned 0x8a0000 [0145.776] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0145.776] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94c57ba9, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8db6dd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0145.776] GetProcessHeap () returned 0x8a0000 [0145.776] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0145.776] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\zh-HK\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94c57ba9, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8db6dd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0145.778] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94c57ba9, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8db6dd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.778] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94c57ba9, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x94c57ba9, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x8fbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0145.778] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94c57ba9, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x94c57ba9, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3cc07900, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x222, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0145.778] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94c57ba9, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x94c57ba9, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6fc8b500, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x172, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0145.779] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94cf0533, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x94cf0533, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x18f, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0145.779] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94cf0533, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x94cf0533, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x18f, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0145.779] FindClose (in: hFindFile=0x9935c0 | out: hFindFile=0x9935c0) returned 1 [0145.780] GetProcessHeap () returned 0x8a0000 [0145.780] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0145.780] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94cf0533, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8db965a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0145.780] GetProcessHeap () returned 0x8a0000 [0145.780] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0145.780] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\zh-TW\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94cf0533, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8db965a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0145.782] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94cf0533, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8db965a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.782] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94cf0533, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x94cf0533, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x8fbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0145.782] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94cf0533, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x94cf0533, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3cc07900, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x222, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0145.782] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94cf0533, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x94cf0533, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6fc8b500, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x172, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0145.782] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94cf0533, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x94cf0533, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x18f, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0145.782] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94cf0533, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x94cf0533, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x18f, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0145.782] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0145.783] GetProcessHeap () returned 0x8a0000 [0145.783] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0145.783] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94cf0533, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8db965a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0145.783] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0145.784] GetProcessHeap () returned 0x8a0000 [0145.784] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0145.784] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89d8d47d, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x89d8d47d, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x89d8d47d, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x455c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Detector_131491847713900000.xml", cAlternateFileName="DETECT~1.XML")) returned 1 [0145.943] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89d8d47d, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x89d8d47d, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x89d8d47d, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x455c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Detector_131491847713900000.xml", cAlternateFileName="DETECT~1.XML")) returned 0 [0145.944] FindClose (in: hFindFile=0x993940 | out: hFindFile=0x993940) returned 1 [0145.944] GetProcessHeap () returned 0x8a0000 [0145.944] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a90058 | out: hHeap=0x8a0000) returned 1 [0145.945] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x865d24d3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa755519f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91be532c-f9f1-406a-9858-43697c6f437a}", cAlternateFileName="{91BE5~1")) returned 0 [0145.946] FindClose (in: hFindFile=0x993a00 | out: hFindFile=0x993a00) returned 1 [0145.946] GetProcessHeap () returned 0x8a0000 [0145.946] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0145.946] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x865d24d3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa74805fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x865d24d3, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Campaigns", cAlternateFileName="CAMPAI~1")) returned 0 [0145.946] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0145.949] GetProcessHeap () returned 0x8a0000 [0145.949] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0145.950] FindNextFileW (in: hFindFile=0x9938c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d18b4c0, ftCreationTime.dwHighDateTime=0x1d520db, ftLastAccessTime.dwLowDateTime=0xf553fe20, ftLastAccessTime.dwHighDateTime=0x1d540ad, ftLastWriteTime.dwLowDateTime=0xf553fe20, ftLastWriteTime.dwHighDateTime=0x1d540ad, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="craftsnapshot.exe", cAlternateFileName="CRAFTS~1.EXE")) returned 1 [0145.950] FindNextFileW (in: hFindFile=0x9938c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9536a0c0, ftCreationTime.dwHighDateTime=0x1d5562d, ftLastAccessTime.dwLowDateTime=0x7f17d880, ftLastAccessTime.dwHighDateTime=0x1d5611e, ftLastWriteTime.dwLowDateTime=0x7f17d880, ftLastWriteTime.dwHighDateTime=0x1d5611e, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="enteringreviewercustom.exe", cAlternateFileName="ENTERI~1.EXE")) returned 1 [0145.950] FindNextFileW (in: hFindFile=0x9938c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c52ff94, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x53c41cd1, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x53c41cd1, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0145.950] GetProcessHeap () returned 0x8a0000 [0145.950] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0145.951] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\Logs\\*", lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c52ff94, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x53c41cd1, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x53c41cd1, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0145.953] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c52ff94, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x53c41cd1, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x53c41cd1, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.953] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x2000, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x53c41cd1, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x53c41cd1, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.001.etl", cAlternateFileName="UN6414~1.ETL")) returned 1 [0145.953] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x5c983e05, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5f01bf05, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.002.etl", cAlternateFileName="UN8F7C~1.ETL")) returned 1 [0145.953] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4308f96d, ftLastAccessTime.dwHighDateTime=0x1d41dc4, ftLastWriteTime.dwLowDateTime=0x4416619d, ftLastWriteTime.dwHighDateTime=0x1d41dc4, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.003.etl", cAlternateFileName="UN3A48~1.ETL")) returned 1 [0145.954] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x74f27e5, ftLastAccessTime.dwHighDateTime=0x1d3aafc, ftLastWriteTime.dwLowDateTime=0xb20ade5, ftLastWriteTime.dwHighDateTime=0x1d3aafc, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.004.etl", cAlternateFileName="UNE414~1.ETL")) returned 1 [0145.954] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x2211c845, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4ddc6c38, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.005.etl", cAlternateFileName="UN7020~1.ETL")) returned 1 [0145.954] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xdb15d668, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0xde0c0235, ftLastWriteTime.dwHighDateTime=0x1d38c43, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.006.etl", cAlternateFileName="UN4AAB~1.ETL")) returned 1 [0145.954] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x264f31cb, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x361fe290, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.007.etl", cAlternateFileName="UN1B88~1.ETL")) returned 1 [0145.954] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x86f819e6, ftLastAccessTime.dwHighDateTime=0x1d336d7, ftLastWriteTime.dwLowDateTime=0x885ec92b, ftLastWriteTime.dwHighDateTime=0x1d336d7, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.008.etl", cAlternateFileName="UNFF10~1.ETL")) returned 1 [0145.954] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xcd3f87c1, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xce292e60, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.009.etl", cAlternateFileName="UNIVER~4.ETL")) returned 1 [0145.954] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb6ecb1, ftCreationTime.dwHighDateTime=0x1d32735, ftLastAccessTime.dwLowDateTime=0x107a2333, ftLastAccessTime.dwHighDateTime=0x1d32735, ftLastWriteTime.dwLowDateTime=0x107a2333, ftLastWriteTime.dwHighDateTime=0x1d32735, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.020.etl", cAlternateFileName="UNIVER~3.ETL")) returned 1 [0145.954] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb6ecb1, ftCreationTime.dwHighDateTime=0x1d32735, ftLastAccessTime.dwLowDateTime=0xcb6ecb1, ftLastAccessTime.dwHighDateTime=0x1d32735, ftLastWriteTime.dwLowDateTime=0xcd5eb67, ftLastWriteTime.dwHighDateTime=0x1d32735, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.021.etl", cAlternateFileName="UNIVER~2.ETL")) returned 1 [0145.954] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749ce1ef, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x749ce1ef, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x94dd5302, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.028.etl", cAlternateFileName="UNIVER~1.ETL")) returned 1 [0145.954] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749ce1ef, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x749ce1ef, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x94dd5302, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.028.etl", cAlternateFileName="UNIVER~1.ETL")) returned 0 [0145.954] FindClose (in: hFindFile=0x9935c0 | out: hFindFile=0x9935c0) returned 1 [0145.955] GetProcessHeap () returned 0x8a0000 [0145.955] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0145.955] FindNextFileW (in: hFindFile=0x9938c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x106b6e00, ftCreationTime.dwHighDateTime=0x1d2c1d0, ftLastAccessTime.dwLowDateTime=0x4c5561e0, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x106b6e00, ftLastWriteTime.dwHighDateTime=0x1d2c1d0, nFileSizeHigh=0x0, nFileSizeLow=0xc86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task.xml", cAlternateFileName="")) returned 1 [0145.955] FindNextFileW (in: hFindFile=0x9938c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x106b6e00, ftCreationTime.dwHighDateTime=0x1d2c1d0, ftLastAccessTime.dwLowDateTime=0x4c5561e0, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x106b6e00, ftLastWriteTime.dwHighDateTime=0x1d2c1d0, nFileSizeHigh=0x0, nFileSizeLow=0xc86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task.xml", cAlternateFileName="")) returned 0 [0145.955] FindClose (in: hFindFile=0x9938c0 | out: hFindFile=0x9938c0) returned 1 [0145.956] GetProcessHeap () returned 0x8a0000 [0145.956] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3674088 | out: hHeap=0x8a0000) returned 1 [0145.956] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4dca02c6, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x4dca02c6, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1 [0145.956] GetProcessHeap () returned 0x8a0000 [0145.956] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3674088 [0145.956] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4dca02c6, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x4dca02c6, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0145.956] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4dca02c6, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x4dca02c6, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.957] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26acd9d7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26acd9d7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26acd9d7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x24b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AmMonitoringInstall.mof", cAlternateFileName="")) returned 1 [0145.957] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26acd9d7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26acd9d7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26acd9d7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2f9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AMMonitoringProvider.dll", cAlternateFileName="")) returned 1 [0145.957] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26acd9d7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26acd9d7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26acd9d7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x520c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AmStatusInstall.mof", cAlternateFileName="")) returned 1 [0145.957] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26acd9d7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26acd9d7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26acd9d7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x99c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClientWMIInstall.mof", cAlternateFileName="")) returned 1 [0145.957] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26acd9d7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26acd9d7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26acd9d7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4b1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ConfigSecurityPolicy.exe", cAlternateFileName="")) returned 1 [0145.957] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a5b2a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a5b2a5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a5b2a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x36fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataLayer.dll", cAlternateFileName="")) returned 1 [0145.957] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a8150d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a8150d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a8150d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x171cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DbgHelp.dll", cAlternateFileName="")) returned 1 [0145.957] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26af3c42, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26af3c42, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26af3c42, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefenderCSP.dll", cAlternateFileName="")) returned 1 [0145.957] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26aa7774, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26aa7774, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26aa7774, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Defendericon.png", cAlternateFileName="")) returned 1 [0145.957] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa8fdc6ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0145.958] GetProcessHeap () returned 0x8a0000 [0145.958] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0145.958] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\en-US\\*", lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa8fdc6ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993600 [0145.960] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa8fdc6ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.960] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x401d6034, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7b19a1d2, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xcd996200, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EppManifest.dll.mui", cAlternateFileName="")) returned 1 [0145.960] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x401d6034, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7b19a1d2, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe0ac3200, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpAsDesc.dll.mui", cAlternateFileName="")) returned 1 [0145.960] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x401d6034, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7b19a1d2, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe0ac3200, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x8400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpEvMsg.dll.mui", cAlternateFileName="")) returned 1 [0145.960] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea62ba2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x67afd900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x15a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpRes.dll.mui", cAlternateFileName="")) returned 1 [0145.960] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea62ba2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x67afd900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpResL.dll.mui", cAlternateFileName="")) returned 1 [0145.960] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea3c949, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x67afd900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfflineScannerShell.exe.mui", cAlternateFileName="")) returned 1 [0145.961] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea3c949, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xc321b00, ftLastWriteTime.dwHighDateTime=0x1d29fab, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProtectionManagement.dll.mui", cAlternateFileName="")) returned 1 [0145.961] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea3c949, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x9063ce53, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xc321b00, ftLastWriteTime.dwHighDateTime=0x1d29fab, nFileSizeHigh=0x0, nFileSizeLow=0x13c34, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProtectionManagement.mfl", cAlternateFileName="")) returned 1 [0145.961] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea3c949, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xc321b00, ftLastWriteTime.dwHighDateTime=0x1d29fab, nFileSizeHigh=0x0, nFileSizeLow=0x45e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProtectionManagement_Uninstall.mfl", cAlternateFileName="")) returned 1 [0145.961] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea62ba2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x67afd900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="shellext.dll.mui", cAlternateFileName="")) returned 1 [0145.961] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea62ba2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x67afd900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="shellext.dll.mui", cAlternateFileName="")) returned 0 [0145.961] FindClose (in: hFindFile=0x993600 | out: hFindFile=0x993600) returned 1 [0145.962] GetProcessHeap () returned 0x8a0000 [0145.962] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0145.962] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a5b2a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a5b2a5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a5b2a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EppManifest.dll", cAlternateFileName="")) returned 1 [0145.962] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26acd9d7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26acd9d7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26acd9d7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x169, dwReserved0=0x0, dwReserved1=0x0, cFileName="FepUnregister.mof", cAlternateFileName="")) returned 1 [0145.962] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeea82d0, ftCreationTime.dwHighDateTime=0x1d52e54, ftLastAccessTime.dwLowDateTime=0x60158240, ftLastAccessTime.dwHighDateTime=0x1d5493e, ftLastWriteTime.dwLowDateTime=0x60158240, ftLastWriteTime.dwHighDateTime=0x1d5493e, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="files-anne.exe", cAlternateFileName="FILES-~1.EXE")) returned 1 [0145.962] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x6f9baad, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x173a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpAsDesc.dll", cAlternateFileName="")) returned 1 [0145.962] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a5b2a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x70b0173c, ftLastAccessTime.dwHighDateTime=0x1d2fa08, ftLastWriteTime.dwLowDateTime=0x26a5b2a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b1fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpAzSubmit.dll", cAlternateFileName="")) returned 1 [0145.963] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x6ca0b8b, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0xe9da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpClient.dll", cAlternateFileName="")) returned 1 [0145.963] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x6f2939c, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x6af10, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpCmdRun.exe", cAlternateFileName="")) returned 1 [0145.963] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x874d15c, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x53fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpCommu.dll", cAlternateFileName="")) returned 1 [0145.963] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a5b2a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a5b2a5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a5b2a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1dba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpEvMsg.dll", cAlternateFileName="")) returned 1 [0145.963] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x880bd29, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x1d5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpOAV.dll", cAlternateFileName="")) returned 1 [0145.963] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26acd9d7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26acd9d7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26acd9d7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2cda0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpProvider.dll", cAlternateFileName="")) returned 1 [0145.963] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x6507363, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0xac7a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpRtp.dll", cAlternateFileName="")) returned 1 [0145.963] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x842bfe5, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x2099a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpSvc.dll", cAlternateFileName="")) returned 1 [0145.963] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a8150d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a8150d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26aa7774, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x53a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpuxhostproxy.dll", cAlternateFileName="")) returned 1 [0145.963] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26aa7774, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26aa7774, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26aa7774, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x139a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpUXSrv.exe", cAlternateFileName="")) returned 1 [0145.963] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x92ec92b, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x137d98, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSASCui.exe", cAlternateFileName="")) returned 1 [0145.963] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26aa7774, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26aa7774, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26aa7774, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x999a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSASCuiL.exe", cAlternateFileName="")) returned 1 [0145.964] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x8537061, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x147a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpCom.dll", cAlternateFileName="")) returned 1 [0145.964] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x849e6f2, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x191a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpEng.exe", cAlternateFileName="")) returned 1 [0145.964] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x8537061, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x33a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpLics.dll", cAlternateFileName="")) returned 1 [0145.964] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x89d596d, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x6c9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpRes.dll", cAlternateFileName="")) returned 1 [0145.964] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26aa7774, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26aa7774, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26aa7774, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpResL.dll", cAlternateFileName="")) returned 1 [0145.964] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a8150d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a8150d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a8150d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeda0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NisLog.dll", cAlternateFileName="")) returned 1 [0145.964] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a8150d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a8150d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a8150d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x538f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NisSrv.exe", cAlternateFileName="")) returned 1 [0145.964] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a8150d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a8150d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a8150d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x121a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NisWfp.dll", cAlternateFileName="")) returned 1 [0145.964] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa8fdd5e7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a4f7cc5, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Offline", cAlternateFileName="")) returned 1 [0145.964] GetProcessHeap () returned 0x8a0000 [0145.964] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0145.964] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\Offline\\*", lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa8fdd5e7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a4f7cc5, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0145.965] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa8fdd5e7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a4f7cc5, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.965] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a0eddf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a0eddf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a0eddf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x261a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EppManifest.dll", cAlternateFileName="")) returned 1 [0145.965] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x269e8b6c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x269e8b6c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x269e8b6c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x161a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpCom.dll", cAlternateFileName="")) returned 1 [0145.965] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x269e8b6c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x269e8b6c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x269e8b6c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x37a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpLics.dll", cAlternateFileName="")) returned 1 [0145.965] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a8150d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a8150d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a8150d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x70ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfflineScannerShell.exe", cAlternateFileName="")) returned 1 [0145.965] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a8150d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a8150d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a8150d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x70ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfflineScannerShell.exe", cAlternateFileName="")) returned 0 [0145.965] FindClose (in: hFindFile=0x9939c0 | out: hFindFile=0x9939c0) returned 1 [0145.965] GetProcessHeap () returned 0x8a0000 [0145.965] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0145.965] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26aa7774, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26aa7774, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26aa7774, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x851a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProtectionManagement.dll", cAlternateFileName="")) returned 1 [0145.965] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26acd9d7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26acd9d7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26acd9d7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe050, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProtectionManagement.mof", cAlternateFileName="")) returned 1 [0145.965] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26aa7774, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26aa7774, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26aa7774, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProtectionManagement_Uninstall.mof", cAlternateFileName="")) returned 1 [0145.966] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26aa7774, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26aa7774, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26aa7774, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x505a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="shellext.dll", cAlternateFileName="")) returned 1 [0145.966] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a8150d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a8150d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a8150d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x264c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SymSrv.dll", cAlternateFileName="")) returned 1 [0145.966] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a8150d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a8150d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a8150d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="SymSrv.yes", cAlternateFileName="")) returned 1 [0145.966] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a3503e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x70b0173c, ftLastAccessTime.dwHighDateTime=0x1d2fa08, ftLastWriteTime.dwLowDateTime=0x26a3503e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x443, dwReserved0=0x0, dwReserved1=0x0, cFileName="ThirdPartyNotices.txt", cAlternateFileName="")) returned 1 [0145.966] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a3503e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x70b0173c, ftLastAccessTime.dwHighDateTime=0x1d2fa08, ftLastWriteTime.dwLowDateTime=0x26a3503e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x443, dwReserved0=0x0, dwReserved1=0x0, cFileName="ThirdPartyNotices.txt", cAlternateFileName="")) returned 0 [0145.966] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0145.966] GetProcessHeap () returned 0x8a0000 [0145.966] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3674088 | out: hHeap=0x8a0000) returned 1 [0145.967] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa8fde0ed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows Defender Advanced Threat Protection", cAlternateFileName="WIF4A9~1")) returned 1 [0145.967] GetProcessHeap () returned 0x8a0000 [0145.967] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3674088 [0145.967] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Defender Advanced Threat Protection\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa8fde0ed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0145.969] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa8fde0ed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.969] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa8fde773, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0145.969] GetProcessHeap () returned 0x8a0000 [0145.969] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0145.970] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Defender Advanced Threat Protection\\en-US\\*", lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa8fde773, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993700 [0145.971] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa8fde773, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.971] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea62ba2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x67afd900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsSense.exe.mui", cAlternateFileName="")) returned 1 [0145.971] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea62ba2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x67afd900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsSense.exe.mui", cAlternateFileName="")) returned 0 [0145.971] FindClose (in: hFindFile=0x993700 | out: hFindFile=0x993700) returned 1 [0145.971] GetProcessHeap () returned 0x8a0000 [0145.971] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0145.971] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7822b459, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe304e38c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe304e38c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3bb568, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsSense.exe", cAlternateFileName="")) returned 1 [0145.971] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7822b459, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe2f69567, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe2f69567, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xbcad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SenseCncProxy.exe", cAlternateFileName="")) returned 1 [0145.971] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7822b459, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe2f69567, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe2f69567, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SenseCncPS.dll", cAlternateFileName="")) returned 1 [0145.971] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7822b459, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe2fb5a1e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe2fb5a1e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x290800, dwReserved0=0x0, dwReserved1=0x0, cFileName="SenseSampleUploader.exe", cAlternateFileName="")) returned 1 [0145.971] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x782516c0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd6d17d57, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd6d17d57, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x24800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATPCSP.dll", cAlternateFileName="")) returned 1 [0145.972] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x782516c0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd6d17d57, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd6d17d57, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x24800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATPCSP.dll", cAlternateFileName="")) returned 0 [0145.972] FindClose (in: hFindFile=0x993ac0 | out: hFindFile=0x993ac0) returned 1 [0145.995] GetProcessHeap () returned 0x8a0000 [0145.995] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3674088 | out: hHeap=0x8a0000) returned 1 [0145.995] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4dca02c6, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x4dca02c6, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows Mail", cAlternateFileName="WINDOW~2")) returned 1 [0145.995] GetProcessHeap () returned 0x8a0000 [0145.995] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3674088 [0145.995] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4dca02c6, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x4dca02c6, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0145.997] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4dca02c6, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x4dca02c6, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.997] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b0c6270, ftCreationTime.dwHighDateTime=0x1d53b46, ftLastAccessTime.dwLowDateTime=0x52fb4830, ftLastAccessTime.dwHighDateTime=0x1d54bf8, ftLastWriteTime.dwLowDateTime=0x52fb4830, ftLastWriteTime.dwHighDateTime=0x1d54bf8, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="boulder_intelligence_gpl.exe", cAlternateFileName="BOULDE~1.EXE")) returned 1 [0145.997] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa90b7e0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0145.998] GetProcessHeap () returned 0x8a0000 [0145.998] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0145.998] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\en-US\\*", lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa90b7e0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0145.998] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa90b7e0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.998] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b922184, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75fdf500, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x7a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoeres.dll.mui", cAlternateFileName="")) returned 1 [0145.998] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb5e4e0, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x74ccc800, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe.mui", cAlternateFileName="")) returned 1 [0145.998] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb5e4e0, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x74ccc800, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe.mui", cAlternateFileName="")) returned 0 [0145.998] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0145.998] GetProcessHeap () returned 0x8a0000 [0145.998] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0145.998] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d342cc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d342cc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1f0a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoe.dll", cAlternateFileName="")) returned 1 [0145.999] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x25f400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOERES.dll", cAlternateFileName="")) returned 1 [0145.999] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xfa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oeimport.dll", cAlternateFileName="")) returned 1 [0145.999] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440ad34a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440ad34a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440ad34a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7e400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab.exe", cAlternateFileName="")) returned 1 [0145.999] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabimp.dll", cAlternateFileName="")) returned 1 [0145.999] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440ad34a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440ad34a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440ad34a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x10c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabmig.exe", cAlternateFileName="")) returned 1 [0145.999] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x66600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe", cAlternateFileName="")) returned 1 [0145.999] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x66600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe", cAlternateFileName="")) returned 0 [0145.999] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0145.999] GetProcessHeap () returned 0x8a0000 [0145.999] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3674088 | out: hHeap=0x8a0000) returned 1 [0146.000] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e4faee, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x4dcc6277, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x4dcc6277, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows Media Player", cAlternateFileName="WI54FB~1")) returned 1 [0146.000] GetProcessHeap () returned 0x8a0000 [0146.000] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3674088 [0146.001] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e4faee, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x4dcc6277, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x4dcc6277, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0146.002] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e4faee, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x4dcc6277, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x4dcc6277, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.002] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9124bcc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0146.002] GetProcessHeap () returned 0x8a0000 [0146.002] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0146.003] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\*", lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9124bcc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0146.005] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9124bcc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.005] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9e0d51, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d06fb4c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x11db3100, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpvis.dll.mui", cAlternateFileName="")) returned 1 [0146.005] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d06fb4c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x130c5e00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup_wm.exe.mui", cAlternateFileName="")) returned 1 [0146.005] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40aa916a, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d06fb4c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x100e6f00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmlaunch.exe.mui", cAlternateFileName="")) returned 1 [0146.005] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9483e2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d06fb4c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x10aa0400, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmplayer.exe.mui", cAlternateFileName="")) returned 1 [0146.005] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd13924, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d5f3279, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x10aa0400, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPMediaSharing.dll.mui", cAlternateFileName="")) returned 1 [0146.005] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd13924, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d5f3279, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x11db3100, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnetwk.exe.mui", cAlternateFileName="")) returned 1 [0146.006] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3de1e9a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d5f3279, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x10aa0400, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnscfg.exe.mui", cAlternateFileName="")) returned 1 [0146.006] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3de1e9a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d5f3279, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x10aa0400, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnssci.dll.mui", cAlternateFileName="")) returned 1 [0146.006] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41bacb92, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d5f3279, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x100e6f00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnssui.dll.mui", cAlternateFileName="")) returned 1 [0146.006] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41bacb92, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d5f3279, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x100e6f00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnssui.dll.mui", cAlternateFileName="")) returned 0 [0146.006] FindClose (in: hFindFile=0x9935c0 | out: hFindFile=0x9935c0) returned 1 [0146.007] GetProcessHeap () returned 0x8a0000 [0146.007] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0146.007] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9125145, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Icons", cAlternateFileName="")) returned 1 [0146.007] GetProcessHeap () returned 0x8a0000 [0146.007] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0146.007] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Icons\\*", lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9125145, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0146.007] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9125145, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.147] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9125145, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0146.147] FindClose (in: hFindFile=0x9935c0 | out: hFindFile=0x9935c0) returned 1 [0146.147] GetProcessHeap () returned 0x8a0000 [0146.147] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0146.147] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeae6020, ftCreationTime.dwHighDateTime=0x1d527f1, ftLastAccessTime.dwLowDateTime=0x8af0efd0, ftLastAccessTime.dwHighDateTime=0x1d500c9, ftLastWriteTime.dwLowDateTime=0x8af0efd0, ftLastWriteTime.dwHighDateTime=0x1d500c9, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="logic-samuel-clubs.exe", cAlternateFileName="LOGIC-~1.EXE")) returned 1 [0146.147] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9182d5a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Renderer", cAlternateFileName="MEDIAR~1")) returned 1 [0146.147] GetProcessHeap () returned 0x8a0000 [0146.147] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0146.147] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Media Renderer\\*", lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9182d5a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0146.149] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9182d5a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.149] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x166b6300, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x50db, dwReserved0=0x0, dwReserved1=0x0, cFileName="avtransport.xml", cAlternateFileName="")) returned 1 [0146.149] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x166b6300, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x1534, dwReserved0=0x0, dwReserved1=0x0, cFileName="connectionmanager_dmr.xml", cAlternateFileName="")) returned 1 [0146.149] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x166b6300, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0xba3, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_120.jpg", cAlternateFileName="")) returned 1 [0146.149] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x166b6300, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x3a1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_120.png", cAlternateFileName="")) returned 1 [0146.149] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x166b6300, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_48.jpg", cAlternateFileName="")) returned 1 [0146.150] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x166b6300, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x10a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_48.png", cAlternateFileName="")) returned 1 [0146.150] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x166b6300, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x18db, dwReserved0=0x0, dwReserved1=0x0, cFileName="RenderingControl.xml", cAlternateFileName="")) returned 1 [0146.150] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x166b6300, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x933, dwReserved0=0x0, dwReserved1=0x0, cFileName="RenderingControl_DMP.xml", cAlternateFileName="")) returned 1 [0146.150] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x166b6300, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x933, dwReserved0=0x0, dwReserved1=0x0, cFileName="RenderingControl_DMP.xml", cAlternateFileName="")) returned 0 [0146.150] FindClose (in: hFindFile=0x9935c0 | out: hFindFile=0x9935c0) returned 1 [0146.151] GetProcessHeap () returned 0x8a0000 [0146.151] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0146.151] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40fd93f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xc4f45c00, ftLastWriteTime.dwHighDateTime=0x1d29fa3, nFileSizeHigh=0x0, nFileSizeLow=0x2c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpvis.DLL", cAlternateFileName="")) returned 1 [0146.151] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c5441, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Sharing", cAlternateFileName="NETWOR~1")) returned 1 [0146.151] GetProcessHeap () returned 0x8a0000 [0146.151] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0146.151] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\*", lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c5441, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0146.153] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c5441, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.154] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd3f65600, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x152e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ConnectionManager.xml", cAlternateFileName="")) returned 1 [0146.154] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd3f65600, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x1d5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContentDirectory.xml", cAlternateFileName="")) returned 1 [0146.154] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd3f65600, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0xa0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MediaReceiverRegistrar.xml", cAlternateFileName="")) returned 1 [0146.154] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd3f65600, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x1287, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color120.jpg", cAlternateFileName="")) returned 1 [0146.154] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd3f65600, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x3ea5, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color120.png", cAlternateFileName="")) returned 1 [0146.154] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa417004f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd3f65600, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x1038, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color32.bmp", cAlternateFileName="")) returned 1 [0146.154] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd3f65600, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x743, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color32.jpg", cAlternateFileName="")) returned 1 [0146.154] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa417004f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd3f65600, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x2438, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color48.bmp", cAlternateFileName="")) returned 1 [0146.154] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd3f65600, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x910, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color48.jpg", cAlternateFileName="")) returned 1 [0146.155] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd3f65600, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x139e, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color48.png", cAlternateFileName="")) returned 1 [0146.155] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd3f65600, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x139e, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color48.png", cAlternateFileName="")) returned 0 [0146.155] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0146.156] GetProcessHeap () returned 0x8a0000 [0146.156] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0146.156] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x88286500, ftLastWriteTime.dwHighDateTime=0x1d29fa3, nFileSizeHigh=0x0, nFileSizeLow=0x1c0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup_wm.exe", cAlternateFileName="")) returned 1 [0146.156] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c66b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skins", cAlternateFileName="")) returned 1 [0146.156] GetProcessHeap () returned 0x8a0000 [0146.156] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0146.156] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Skins\\*", lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c66b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0146.159] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c66b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.159] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40fd93f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xa8035d00, ftLastWriteTime.dwHighDateTime=0x1d29f92, nFileSizeHigh=0x0, nFileSizeLow=0x11550, dwReserved0=0x0, dwReserved1=0x0, cFileName="Revert.wmz", cAlternateFileName="")) returned 1 [0146.159] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40fd93f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xa8035d00, ftLastWriteTime.dwHighDateTime=0x1d29f92, nFileSizeHigh=0x0, nFileSizeLow=0x11550, dwReserved0=0x0, dwReserved1=0x0, cFileName="Revert.wmz", cAlternateFileName="")) returned 0 [0146.159] FindClose (in: hFindFile=0x9935c0 | out: hFindFile=0x9935c0) returned 1 [0146.159] GetProcessHeap () returned 0x8a0000 [0146.159] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0146.159] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c754d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visualizations", cAlternateFileName="VISUAL~1")) returned 1 [0146.159] GetProcessHeap () returned 0x8a0000 [0146.159] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0146.159] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Visualizations\\*", lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c754d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0146.159] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c754d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.160] GetProcessHeap () returned 0x8a0000 [0146.160] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0146.160] GetProcessHeap () returned 0x8a0000 [0146.160] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3674088 | out: hHeap=0x8a0000) returned 1 [0146.161] GetProcessHeap () returned 0x8a0000 [0146.161] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3674088 [0146.161] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Multimedia Platform\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa91c7efb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a4f7cc5, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0146.162] GetProcessHeap () returned 0x8a0000 [0146.162] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3674088 | out: hHeap=0x8a0000) returned 1 [0146.162] GetProcessHeap () returned 0x8a0000 [0146.162] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3674088 [0146.162] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa91c8710, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0146.162] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa91c8710, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.162] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa91c944d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7120260d, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessories", cAlternateFileName="ACCESS~1")) returned 1 [0146.162] GetProcessHeap () returned 0x8a0000 [0146.162] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0146.163] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\Accessories\\*", lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa91c944d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7120260d, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993600 [0146.164] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa91c944d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7120260d, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.164] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c9e08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0146.164] GetProcessHeap () returned 0x8a0000 [0146.164] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0146.165] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\Accessories\\en-US\\*", lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c9e08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0146.165] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c9e08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.165] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3de44bfc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x788c92ac, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x6da5ba00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordpad.exe.mui", cAlternateFileName="")) returned 1 [0146.165] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3de44bfc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x788c92ac, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x6da5ba00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordpad.exe.mui", cAlternateFileName="")) returned 0 [0146.165] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0146.166] GetProcessHeap () returned 0x8a0000 [0146.166] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0146.166] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47cb7852, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xbe78b154, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x47cb7852, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x448600, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordpad.exe", cAlternateFileName="")) returned 1 [0146.166] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65418d00, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x65418d00, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x65418d00, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2ca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordpadFilter.dll", cAlternateFileName="")) returned 1 [0146.166] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65418d00, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x65418d00, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x65418d00, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2ca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordpadFilter.dll", cAlternateFileName="")) returned 0 [0146.166] FindClose (in: hFindFile=0x993600 | out: hFindFile=0x993600) returned 1 [0146.166] GetProcessHeap () returned 0x8a0000 [0146.166] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0146.167] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa9257555, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService", cAlternateFileName="TABLET~1")) returned 1 [0146.167] GetProcessHeap () returned 0x8a0000 [0146.167] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0146.168] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\*", lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa9257555, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0146.170] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa9257555, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.170] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9258521, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0146.170] GetProcessHeap () returned 0x8a0000 [0146.170] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0146.171] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\en-US\\*", lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9258521, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993600 [0146.171] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9258521, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.171] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x78f57a4e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdfcde00, ftLastWriteTime.dwHighDateTime=0x1d29fad, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService.dll.mui", cAlternateFileName="")) returned 1 [0146.171] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x78f57a4e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdfcde00, ftLastWriteTime.dwHighDateTime=0x1d29fad, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService.dll.mui", cAlternateFileName="")) returned 0 [0146.171] FindClose (in: hFindFile=0x993600 | out: hFindFile=0x993600) returned 1 [0146.172] GetProcessHeap () returned 0x8a0000 [0146.172] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0146.172] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68b88afa, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x68b88afa, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x68b88afa, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa0800, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService.dll", cAlternateFileName="")) returned 1 [0146.172] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x689bee27, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x689bee27, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x689bee27, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x376a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceAmharic.txt", cAlternateFileName="")) returned 1 [0146.172] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68b62893, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x68b62893, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x68b62893, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x136c70, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceArray.txt", cAlternateFileName="")) returned 1 [0146.172] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x687102e9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x687102e9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x687102e9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xef500, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceDaYi.txt", cAlternateFileName="")) returned 1 [0146.173] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x689e508b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x689e508b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x689e508b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3776, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceTigrinya.txt", cAlternateFileName="")) returned 1 [0146.173] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a1bd11b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6a1bd11b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6a1bd11b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb072, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceYi.txt", cAlternateFileName="")) returned 1 [0146.173] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a1bd11b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6a1bd11b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6a1bd11b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb072, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceYi.txt", cAlternateFileName="")) returned 0 [0146.173] FindClose (in: hFindFile=0x993ac0 | out: hFindFile=0x993ac0) returned 1 [0146.173] GetProcessHeap () returned 0x8a0000 [0146.173] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0146.174] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa9257555, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService", cAlternateFileName="TABLET~1")) returned 0 [0146.174] FindClose (in: hFindFile=0x9935c0 | out: hFindFile=0x9935c0) returned 1 [0146.175] GetProcessHeap () returned 0x8a0000 [0146.175] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3674088 | out: hHeap=0x8a0000) returned 1 [0146.175] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4dd389cd, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x4dd389cd, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows Photo Viewer", cAlternateFileName="WI8A19~1")) returned 1 [0146.175] GetProcessHeap () returned 0x8a0000 [0146.175] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3674088 [0146.175] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4dd389cd, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x4dd389cd, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0146.178] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4dd389cd, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x4dd389cd, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.178] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa92ab93a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0146.179] GetProcessHeap () returned 0x8a0000 [0146.179] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0146.179] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\en-US\\*", lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa92ab93a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993800 [0146.180] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa92ab93a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.180] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b3525a5, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe47aa00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImagingDevices.exe.mui", cAlternateFileName="")) returned 1 [0146.180] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d08f33b, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x10aa0400, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoAcq.dll.mui", cAlternateFileName="")) returned 1 [0146.180] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0b5599, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x11db3100, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoViewer.dll.mui", cAlternateFileName="")) returned 1 [0146.180] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0b5599, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x11db3100, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoViewer.dll.mui", cAlternateFileName="")) returned 0 [0146.180] FindClose (in: hFindFile=0x993800 | out: hFindFile=0x993800) returned 1 [0146.180] GetProcessHeap () returned 0x8a0000 [0146.180] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0146.180] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9550fd74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9550fd74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9550fd74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x19940, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImagingDevices.exe", cAlternateFileName="")) returned 1 [0146.181] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7963430c, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x7963430c, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x7963430c, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x22c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImagingEngine.dll", cAlternateFileName="")) returned 1 [0146.181] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4abd1547, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x206cbb35, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x4abd1547, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x1db800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoAcq.dll", cAlternateFileName="")) returned 1 [0146.181] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9550fd74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9550fd74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9550fd74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoBase.dll", cAlternateFileName="")) returned 1 [0146.181] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ab5edf1, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x212dda0c, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x4ab5edf1, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x1a9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoViewer.dll", cAlternateFileName="")) returned 1 [0146.181] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x689aee30, ftCreationTime.dwHighDateTime=0x1d523e3, ftLastAccessTime.dwLowDateTime=0x41f3c320, ftLastAccessTime.dwHighDateTime=0x1d56352, ftLastWriteTime.dwLowDateTime=0x41f3c320, ftLastWriteTime.dwHighDateTime=0x1d56352, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="walk forced online.exe", cAlternateFileName="WALKFO~1.EXE")) returned 1 [0146.181] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x689aee30, ftCreationTime.dwHighDateTime=0x1d523e3, ftLastAccessTime.dwLowDateTime=0x41f3c320, ftLastAccessTime.dwHighDateTime=0x1d56352, ftLastWriteTime.dwLowDateTime=0x41f3c320, ftLastWriteTime.dwHighDateTime=0x1d56352, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="walk forced online.exe", cAlternateFileName="WALKFO~1.EXE")) returned 0 [0146.181] FindClose (in: hFindFile=0x9937c0 | out: hFindFile=0x9937c0) returned 1 [0146.182] GetProcessHeap () returned 0x8a0000 [0146.182] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3674088 | out: hHeap=0x8a0000) returned 1 [0146.183] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92ac52c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a51df28, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows Portable Devices", cAlternateFileName="WIBFE5~1")) returned 1 [0146.183] GetProcessHeap () returned 0x8a0000 [0146.183] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3674088 [0146.183] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Portable Devices\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92ac52c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a51df28, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0146.184] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92ac52c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a51df28, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.184] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d6b25ca, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2d6b25ca, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2d6b25ca, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc220, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0146.184] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d6b25ca, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2d6b25ca, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2d6b25ca, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc220, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0 [0146.184] FindClose (in: hFindFile=0x993a00 | out: hFindFile=0x993a00) returned 1 [0146.185] GetProcessHeap () returned 0x8a0000 [0146.185] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3674088 | out: hHeap=0x8a0000) returned 1 [0146.185] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92acc65, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows Security", cAlternateFileName="WIDB62~1")) returned 1 [0146.185] GetProcessHeap () returned 0x8a0000 [0146.185] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3674088 [0146.185] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Security\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92acc65, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0146.185] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92acc65, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.185] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92ad688, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrowserCore", cAlternateFileName="BROWSE~1")) returned 1 [0146.186] GetProcessHeap () returned 0x8a0000 [0146.186] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0146.342] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Security\\BrowserCore\\*", lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92ad688, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0146.362] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92ad688, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.362] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5845b6dc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x5845b6dc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x5845b6dc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x139a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrowserCore.exe", cAlternateFileName="")) returned 1 [0146.362] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa92ae2d6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0146.362] GetProcessHeap () returned 0x8a0000 [0146.362] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0146.367] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Security\\BrowserCore\\en-US\\*", lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa92ae2d6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0146.367] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa92ae2d6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.368] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d802908, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x76ff649a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x1bb16400, ftLastWriteTime.dwHighDateTime=0x1d29fab, nFileSizeHigh=0x0, nFileSizeLow=0x3a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrowserCore.exe.mui", cAlternateFileName="")) returned 1 [0146.368] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d802908, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x76ff649a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x1bb16400, ftLastWriteTime.dwHighDateTime=0x1d29fab, nFileSizeHigh=0x0, nFileSizeLow=0x3a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrowserCore.exe.mui", cAlternateFileName="")) returned 0 [0146.368] FindClose (in: hFindFile=0x9937c0 | out: hFindFile=0x9937c0) returned 1 [0146.368] GetProcessHeap () returned 0x8a0000 [0146.368] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0146.368] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5845b6dc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x5845b6dc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x5845b6dc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="")) returned 1 [0146.368] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5845b6dc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x5845b6dc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x5845b6dc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="")) returned 0 [0146.368] FindClose (in: hFindFile=0x9935c0 | out: hFindFile=0x9935c0) returned 1 [0146.368] GetProcessHeap () returned 0x8a0000 [0146.368] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0146.369] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92ad688, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrowserCore", cAlternateFileName="BROWSE~1")) returned 0 [0146.369] FindClose (in: hFindFile=0x993ac0 | out: hFindFile=0x993ac0) returned 1 [0146.369] GetProcessHeap () returned 0x8a0000 [0146.369] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3674088 | out: hHeap=0x8a0000) returned 1 [0146.369] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92aed1a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 1 [0146.370] GetProcessHeap () returned 0x8a0000 [0146.370] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3674088 [0146.370] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92aed1a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0146.370] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92aed1a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.370] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92af7c3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadgets", cAlternateFileName="")) returned 1 [0146.370] GetProcessHeap () returned 0x8a0000 [0146.370] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0146.370] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92af7c3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0146.370] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92af7c3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.371] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92af7c3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0146.371] FindClose (in: hFindFile=0x993940 | out: hFindFile=0x993940) returned 1 [0146.371] GetProcessHeap () returned 0x8a0000 [0146.371] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0146.371] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92aff0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared Gadgets", cAlternateFileName="SHARED~1")) returned 1 [0146.371] GetProcessHeap () returned 0x8a0000 [0146.371] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0146.371] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Shared Gadgets\\*", lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92aff0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0146.371] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92aff0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.371] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92aff0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0146.372] FindClose (in: hFindFile=0x993940 | out: hFindFile=0x993940) returned 1 [0146.372] GetProcessHeap () returned 0x8a0000 [0146.372] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0146.372] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92aff0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared Gadgets", cAlternateFileName="SHARED~1")) returned 0 [0146.372] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0146.372] GetProcessHeap () returned 0x8a0000 [0146.372] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3674088 | out: hHeap=0x8a0000) returned 1 [0146.373] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8da88b6d, ftLastAccessTime.dwHighDateTime=0x1d3274e, ftLastWriteTime.dwLowDateTime=0x8da88b6d, ftLastWriteTime.dwHighDateTime=0x1d3274e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="WindowsApps", cAlternateFileName="WI7DB9~1")) returned 1 [0146.373] GetProcessHeap () returned 0x8a0000 [0146.373] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3674088 [0146.373] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92aff0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared Gadgets", cAlternateFileName="䗺&")) returned 0xffffffff [0146.373] GetProcessHeap () returned 0x8a0000 [0146.373] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3674088 | out: hHeap=0x8a0000) returned 1 [0146.373] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502b1c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="WindowsPowerShell", cAlternateFileName="WID5B1~1")) returned 1 [0146.373] GetProcessHeap () returned 0x8a0000 [0146.373] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3674088 [0146.373] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502b1c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0146.382] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502b1c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.382] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502c09b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Configuration", cAlternateFileName="CONFIG~1")) returned 1 [0146.383] GetProcessHeap () returned 0x8a0000 [0146.383] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0146.383] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Configuration\\*", lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502c09b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0146.384] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502c09b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.384] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502cf82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Registration", cAlternateFileName="REGIST~1")) returned 1 [0146.384] GetProcessHeap () returned 0x8a0000 [0146.384] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0146.384] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Configuration\\Registration\\*", lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502cf82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0146.385] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502cf82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.385] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502cf82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0146.385] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0146.385] GetProcessHeap () returned 0x8a0000 [0146.385] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0146.385] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502d74d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Schema", cAlternateFileName="")) returned 1 [0146.385] GetProcessHeap () returned 0x8a0000 [0146.385] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0146.385] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Configuration\\Schema\\*", lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502d74d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0146.385] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502d74d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.385] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502d74d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0146.386] FindClose (in: hFindFile=0x993ac0 | out: hFindFile=0x993ac0) returned 1 [0146.386] GetProcessHeap () returned 0x8a0000 [0146.386] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0146.386] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502d74d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Schema", cAlternateFileName="")) returned 0 [0146.386] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0146.386] GetProcessHeap () returned 0x8a0000 [0146.386] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0146.387] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb507390a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Modules", cAlternateFileName="")) returned 1 [0146.387] GetProcessHeap () returned 0x8a0000 [0146.387] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0146.387] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\*", lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb507390a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b80 [0146.390] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb507390a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.390] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50744c4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Operation.Validation", cAlternateFileName="MICROS~1.VAL")) returned 1 [0146.390] GetProcessHeap () returned 0x8a0000 [0146.390] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0146.391] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\*", lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50744c4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9938c0 [0146.391] FindNextFileW (in: hFindFile=0x9938c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50744c4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.391] FindNextFileW (in: hFindFile=0x9938c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50df8d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.1", cAlternateFileName="103623~1.1")) returned 1 [0146.391] GetProcessHeap () returned 0x8a0000 [0146.391] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a90058 [0146.392] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50df8d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0146.394] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50df8d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.394] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e05fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Diagnostics", cAlternateFileName="DIAGNO~1")) returned 1 [0146.394] GetProcessHeap () returned 0x8a0000 [0146.394] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0146.395] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Diagnostics\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e05fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0146.395] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e05fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.395] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e148c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Comprehensive", cAlternateFileName="COMPRE~1")) returned 1 [0146.395] GetProcessHeap () returned 0x8a0000 [0146.395] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0146.395] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Diagnostics\\Comprehensive\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e148c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993600 [0146.397] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e148c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.397] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e3f39a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e3f39a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e3f39a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Comprehensive.Tests.ps1", cAlternateFileName="")) returned 1 [0146.397] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e3f39a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e3f39a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e3f39a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Comprehensive.Tests.ps1", cAlternateFileName="")) returned 0 [0146.397] FindClose (in: hFindFile=0x993600 | out: hFindFile=0x993600) returned 1 [0146.398] GetProcessHeap () returned 0x8a0000 [0146.398] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0146.398] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e1d6b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 1 [0146.398] GetProcessHeap () returned 0x8a0000 [0146.398] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0146.398] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Diagnostics\\Simple\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e1d6b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993800 [0146.398] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e1d6b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.398] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e3f39a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e3f39a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e3f39a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x180, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple.Tests.ps1", cAlternateFileName="")) returned 1 [0146.398] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e3f39a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e3f39a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e3f39a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x180, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple.Tests.ps1", cAlternateFileName="")) returned 0 [0146.398] FindClose (in: hFindFile=0x993800 | out: hFindFile=0x993800) returned 1 [0146.399] GetProcessHeap () returned 0x8a0000 [0146.399] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0146.399] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e1d6b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 0 [0146.399] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0146.399] GetProcessHeap () returned 0x8a0000 [0146.399] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0146.399] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e3f39a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e3f39a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e3f39a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Operation.Validation.Format.ps1xml", cAlternateFileName="")) returned 1 [0146.399] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e19133, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e19133, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e19133, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x614, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Operation.Validation.psd1", cAlternateFileName="")) returned 1 [0146.399] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e19133, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e19133, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e19133, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3016, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Operation.Validation.psm1", cAlternateFileName="")) returned 1 [0146.399] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e3f39a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e3f39a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e3f39a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x15b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OperationValidationResources.psd1", cAlternateFileName="")) returned 1 [0146.399] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e2971, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Test", cAlternateFileName="")) returned 1 [0146.399] GetProcessHeap () returned 0x8a0000 [0146.399] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0146.399] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e2971, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0146.400] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e2971, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.400] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e19133, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e19133, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e19133, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Operation.Validation.Tests.ps1", cAlternateFileName="")) returned 1 [0146.400] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e4074, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Modules", cAlternateFileName="")) returned 1 [0146.400] GetProcessHeap () returned 0x8a0000 [0146.400] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0146.400] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e4074, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0146.402] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e4074, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.402] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e5961, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Example1.Diagnostics", cAlternateFileName="EXAMPL~1.DIA")) returned 1 [0146.402] GetProcessHeap () returned 0x8a0000 [0146.402] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c80b8 [0146.403] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example1.Diagnostics\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e5961, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993800 [0146.418] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e5961, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.419] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e60a0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Diagnostics", cAlternateFileName="DIAGNO~1")) returned 1 [0146.419] GetProcessHeap () returned 0x8a0000 [0146.419] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0146.419] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example1.Diagnostics\\Diagnostics\\*", lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e60a0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0146.419] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e60a0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.419] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e65b3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 1 [0146.419] GetProcessHeap () returned 0x8a0000 [0146.419] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ad2080 [0146.420] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example1.Diagnostics\\Diagnostics\\Simple\\*", lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e65b3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0146.421] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e65b3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.421] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e3f39a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e3f39a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e3f39a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Example1.Diagnostics.Tests.ps1", cAlternateFileName="")) returned 1 [0146.421] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e3f39a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e3f39a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e3f39a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Example1.Diagnostics.Tests.ps1", cAlternateFileName="")) returned 0 [0146.421] FindClose (in: hFindFile=0x993940 | out: hFindFile=0x993940) returned 1 [0146.421] GetProcessHeap () returned 0x8a0000 [0146.421] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ad2080 | out: hHeap=0x8a0000) returned 1 [0146.421] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e65b3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 0 [0146.421] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0146.421] GetProcessHeap () returned 0x8a0000 [0146.421] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0146.421] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e60a0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Diagnostics", cAlternateFileName="DIAGNO~1")) returned 0 [0146.421] FindClose (in: hFindFile=0x993800 | out: hFindFile=0x993800) returned 1 [0146.421] GetProcessHeap () returned 0x8a0000 [0146.422] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c80b8 | out: hHeap=0x8a0000) returned 1 [0146.422] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e6b0e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Example2.Diagnostics", cAlternateFileName="EXAMPL~2.DIA")) returned 1 [0146.423] GetProcessHeap () returned 0x8a0000 [0146.423] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ad2080 [0146.423] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example2.Diagnostics\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e6b0e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0146.423] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e6b0e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.423] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e6ff3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.1", cAlternateFileName="103623~1.1")) returned 1 [0146.423] GetProcessHeap () returned 0x8a0000 [0146.424] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c80b8 [0146.425] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example2.Diagnostics\\1.0.1\\*", lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e6ff3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993600 [0146.449] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e6ff3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.449] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e755b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Diagnostics", cAlternateFileName="DIAGNO~1")) returned 1 [0146.449] GetProcessHeap () returned 0x8a0000 [0146.449] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0146.449] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example2.Diagnostics\\1.0.1\\Diagnostics\\*", lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e755b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993800 [0146.449] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e755b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.449] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e7ae8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 1 [0146.449] GetProcessHeap () returned 0x8a0000 [0146.450] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ae2088 [0146.671] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example2.Diagnostics\\1.0.1\\Diagnostics\\Simple\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e7ae8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0146.702] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e7ae8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.702] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e19133, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e19133, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e19133, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Example2.Diagnostics.Tests.ps1", cAlternateFileName="")) returned 1 [0146.719] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e19133, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e19133, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e19133, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Example2.Diagnostics.Tests.ps1", cAlternateFileName="")) returned 0 [0146.719] FindClose (in: hFindFile=0x993940 | out: hFindFile=0x993940) returned 1 [0146.719] GetProcessHeap () returned 0x8a0000 [0146.719] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ae2088 | out: hHeap=0x8a0000) returned 1 [0146.719] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e7ae8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 0 [0146.720] FindClose (in: hFindFile=0x993800 | out: hFindFile=0x993800) returned 1 [0146.720] GetProcessHeap () returned 0x8a0000 [0146.720] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0146.720] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e3f39a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e3f39a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e3f39a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x243, dwReserved0=0x0, dwReserved1=0x0, cFileName="Example2.Diagnostics.psd1", cAlternateFileName="")) returned 1 [0146.720] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e3f39a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e3f39a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e3f39a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x243, dwReserved0=0x0, dwReserved1=0x0, cFileName="Example2.Diagnostics.psd1", cAlternateFileName="")) returned 0 [0146.720] FindClose (in: hFindFile=0x993600 | out: hFindFile=0x993600) returned 1 [0146.720] GetProcessHeap () returned 0x8a0000 [0146.720] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c80b8 | out: hHeap=0x8a0000) returned 1 [0146.743] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e6ff3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.1", cAlternateFileName="103623~1.1")) returned 0 [0146.744] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0146.744] GetProcessHeap () returned 0x8a0000 [0146.744] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ad2080 | out: hHeap=0x8a0000) returned 1 [0146.744] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e804c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Example3.Diagnostics", cAlternateFileName="EXAMPL~3.DIA")) returned 1 [0146.745] GetProcessHeap () returned 0x8a0000 [0146.745] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ad2080 [0146.745] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e804c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993600 [0146.745] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e804c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.745] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e85b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.1.1", cAlternateFileName="11D0A5~1.1")) returned 1 [0146.745] GetProcessHeap () returned 0x8a0000 [0146.745] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ae2088 [0146.745] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\1.1.1\\*", lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e85b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0146.746] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e85b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.746] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e8b3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Diagnostics", cAlternateFileName="DIAGNO~1")) returned 1 [0146.747] GetProcessHeap () returned 0x8a0000 [0146.747] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c80b8 [0146.747] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\1.1.1\\Diagnostics\\*", lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e8b3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0146.748] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e8b3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.748] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e907e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 1 [0146.748] GetProcessHeap () returned 0x8a0000 [0146.748] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0146.748] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\1.1.1\\Diagnostics\\Simple\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e907e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0146.748] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e907e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.748] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e19133, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e19133, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e19133, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Example3A.Diagnostics.Tests.ps1", cAlternateFileName="")) returned 1 [0146.748] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e19133, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e19133, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e19133, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Example3A.Diagnostics.Tests.ps1", cAlternateFileName="")) returned 0 [0146.748] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0146.749] GetProcessHeap () returned 0x8a0000 [0146.749] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0146.749] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e907e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 0 [0146.749] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0146.749] GetProcessHeap () returned 0x8a0000 [0146.749] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c80b8 | out: hHeap=0x8a0000) returned 1 [0146.749] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e8b3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Diagnostics", cAlternateFileName="DIAGNO~1")) returned 0 [0146.749] FindClose (in: hFindFile=0x993940 | out: hFindFile=0x993940) returned 1 [0146.749] GetProcessHeap () returned 0x8a0000 [0146.749] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ae2088 | out: hHeap=0x8a0000) returned 1 [0146.750] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e955d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2.0.1", cAlternateFileName="20519B~1.1")) returned 1 [0146.750] GetProcessHeap () returned 0x8a0000 [0146.750] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ae2088 [0146.751] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\2.0.1\\*", lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e955d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0146.751] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e955d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.751] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e9b5b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Diagnostics", cAlternateFileName="DIAGNO~1")) returned 1 [0146.751] GetProcessHeap () returned 0x8a0000 [0146.751] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c80b8 [0146.752] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\2.0.1\\Diagnostics\\*", lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e9b5b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0146.753] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e9b5b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.753] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50ea096, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 1 [0146.753] GetProcessHeap () returned 0x8a0000 [0146.753] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0146.753] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\2.0.1\\Diagnostics\\Simple\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50ea096, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0146.753] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50ea096, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.754] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e19133, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e19133, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e19133, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Example3B.Diagnostics.Tests.ps1", cAlternateFileName="")) returned 1 [0146.754] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e19133, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e19133, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e19133, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Example3B.Diagnostics.Tests.ps1", cAlternateFileName="")) returned 0 [0146.754] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0146.754] GetProcessHeap () returned 0x8a0000 [0146.754] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0146.754] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50ea096, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 0 [0146.754] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0146.754] GetProcessHeap () returned 0x8a0000 [0146.754] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c80b8 | out: hHeap=0x8a0000) returned 1 [0146.754] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e9b5b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Diagnostics", cAlternateFileName="DIAGNO~1")) returned 0 [0146.754] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0146.754] GetProcessHeap () returned 0x8a0000 [0146.755] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ae2088 | out: hHeap=0x8a0000) returned 1 [0146.755] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e955d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2.0.1", cAlternateFileName="20519B~1.1")) returned 0 [0146.755] FindClose (in: hFindFile=0x993600 | out: hFindFile=0x993600) returned 1 [0146.756] GetProcessHeap () returned 0x8a0000 [0146.756] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ad2080 | out: hHeap=0x8a0000) returned 1 [0146.756] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e804c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Example3.Diagnostics", cAlternateFileName="EXAMPL~3.DIA")) returned 0 [0146.756] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0146.756] GetProcessHeap () returned 0x8a0000 [0146.756] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0146.756] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e4074, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Modules", cAlternateFileName="")) returned 0 [0146.756] FindClose (in: hFindFile=0x9935c0 | out: hFindFile=0x9935c0) returned 1 [0146.757] GetProcessHeap () returned 0x8a0000 [0146.757] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0146.758] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e2971, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Test", cAlternateFileName="")) returned 0 [0146.758] FindClose (in: hFindFile=0x9937c0 | out: hFindFile=0x9937c0) returned 1 [0146.758] GetProcessHeap () returned 0x8a0000 [0146.758] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a90058 | out: hHeap=0x8a0000) returned 1 [0146.758] FindNextFileW (in: hFindFile=0x9938c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50df8d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.1", cAlternateFileName="103623~1.1")) returned 0 [0146.758] FindClose (in: hFindFile=0x9938c0 | out: hFindFile=0x9938c0) returned 1 [0146.758] GetProcessHeap () returned 0x8a0000 [0146.758] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0146.768] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50eaa6c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PackageManagement", cAlternateFileName="PACKAG~1")) returned 1 [0146.768] GetProcessHeap () returned 0x8a0000 [0146.768] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0146.768] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\*", lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50eaa6c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0146.768] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50eaa6c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.769] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb512ac95, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.1", cAlternateFileName="100~1.1")) returned 1 [0146.769] GetProcessHeap () returned 0x8a0000 [0146.769] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a90058 [0146.769] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb512ac95, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0146.771] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb512ac95, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.771] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xb5188061, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1 [0146.771] GetProcessHeap () returned 0x8a0000 [0146.771] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0146.771] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\en\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xb5188061, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0146.773] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xb5188061, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.773] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x884e2a3c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x884e2a3c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PackageManagement.ArchiverProviders.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0146.774] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x884e2a3c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x884e2a3c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PackageManagement.CoreProviders.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0146.774] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x884e2a3c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x884e2a3c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PackageManagement.MetaProvider.PowerShell.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0146.774] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x884e2a3c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x884e2a3c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PackageManagement.MsiProvider.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0146.774] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x884e2a3c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x884e2a3c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PackageManagement.MsuProvider.resources.dll", cAlternateFileName="MIADC5~1.DLL")) returned 1 [0146.774] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x884e2a3c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x884e2a3c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PackageManagement.resources.dll", cAlternateFileName="MIC579~1.DLL")) returned 1 [0146.774] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x884e2a3c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x884e2a3c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.PackageManagement.resources.dll", cAlternateFileName="MI8D9C~1.DLL")) returned 1 [0146.774] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x884e2a3c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x884e2a3c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.PackageManagement.resources.dll", cAlternateFileName="MI8D9C~1.DLL")) returned 0 [0146.774] FindClose (in: hFindFile=0x993940 | out: hFindFile=0x993940) returned 1 [0146.775] GetProcessHeap () returned 0x8a0000 [0146.775] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0146.775] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a56a3f4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5da012f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5da012f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PackageManagement.ArchiverProviders.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0146.775] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a56a3f4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5da012f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5da012f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PackageManagement.CoreProviders.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0146.775] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a56a3f4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5da012f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5da012f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PackageManagement.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0146.775] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a56a3f4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5da012f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5da012f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x10800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PackageManagement.MetaProvider.PowerShell.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0146.775] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a56a3f4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5da012f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5da012f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x39200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PackageManagement.MsiProvider.dll", cAlternateFileName="MID877~1.DLL")) returned 1 [0146.775] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a59065a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5da012f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5da012f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PackageManagement.MsuProvider.dll", cAlternateFileName="MI0F1E~1.DLL")) returned 1 [0146.776] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a59065a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5da012f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5da012f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x27e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.PackageManagement.dll", cAlternateFileName="MI6305~1.DLL")) returned 1 [0146.776] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a59065a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5da012f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5da012f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x405f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PackageManagement.format.ps1xml", cAlternateFileName="PACKAG~1.PS1")) returned 1 [0146.776] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a59065a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5da012f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5da012f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PackageManagement.psd1", cAlternateFileName="PACKAG~1.PSD")) returned 1 [0146.776] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a59065a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5da012f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5da012f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2999, dwReserved0=0x0, dwReserved1=0x0, cFileName="PackageProviderFunctions.psm1", cAlternateFileName="PACKAG~1.PSM")) returned 1 [0146.776] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a59065a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5da012f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5da012f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2999, dwReserved0=0x0, dwReserved1=0x0, cFileName="PackageProviderFunctions.psm1", cAlternateFileName="PACKAG~1.PSM")) returned 0 [0146.776] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0146.776] GetProcessHeap () returned 0x8a0000 [0146.776] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a90058 | out: hHeap=0x8a0000) returned 1 [0146.776] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb512ac95, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.1", cAlternateFileName="100~1.1")) returned 0 [0146.776] FindClose (in: hFindFile=0x9935c0 | out: hFindFile=0x9935c0) returned 1 [0146.776] GetProcessHeap () returned 0x8a0000 [0146.776] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0146.777] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x462363f6, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x462363f6, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pester", cAlternateFileName="")) returned 1 [0146.777] GetProcessHeap () returned 0x8a0000 [0146.778] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0146.778] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\*", lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x462363f6, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x462363f6, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0146.778] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x462363f6, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x462363f6, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.778] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e338c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3.3.5", cAlternateFileName="3351CC~1.5")) returned 1 [0146.778] GetProcessHeap () returned 0x8a0000 [0146.778] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a90058 [0146.779] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e338c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0146.781] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e338c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.781] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e40b4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bin", cAlternateFileName="")) returned 1 [0146.781] GetProcessHeap () returned 0x8a0000 [0146.781] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0146.781] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\bin\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e40b4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0146.782] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e40b4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.782] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4efce146, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4efce146, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4efce146, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pester.bat", cAlternateFileName="")) returned 1 [0146.782] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4efce146, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4efce146, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4efce146, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pester.bat", cAlternateFileName="")) returned 0 [0146.782] FindClose (in: hFindFile=0x9937c0 | out: hFindFile=0x9937c0) returned 1 [0146.782] GetProcessHeap () returned 0x8a0000 [0146.782] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0146.782] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4efce146, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4efce146, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4efce146, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2c1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="build.psake.ps1", cAlternateFileName="")) returned 1 [0146.782] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eff43a1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4eff43a1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4eff43a1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2756, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHANGELOG.md", cAlternateFileName="")) returned 1 [0146.783] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e4446, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0146.783] GetProcessHeap () returned 0x8a0000 [0146.783] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0146.783] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\en-US\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e4446, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993600 [0146.783] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e4446, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.783] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5f862d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5f862d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5f862d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xc25, dwReserved0=0x0, dwReserved1=0x0, cFileName="about_BeforeEach_AfterEach.help.txt", cAlternateFileName="")) returned 1 [0146.783] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eff43a1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4eff43a1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4eff43a1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x18fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="about_Mocking.help.txt", cAlternateFileName="")) returned 1 [0146.783] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5f862d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5f862d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5f862d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="about_Pester.help.txt", cAlternateFileName="")) returned 1 [0146.783] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5ac187, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5ac187, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5ac187, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x145e, dwReserved0=0x0, dwReserved1=0x0, cFileName="about_should.help.txt", cAlternateFileName="")) returned 1 [0146.783] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e61e897, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e61e897, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e61e897, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x482, dwReserved0=0x0, dwReserved1=0x0, cFileName="about_TestDrive.help.txt", cAlternateFileName="")) returned 1 [0146.783] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e61e897, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e61e897, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e61e897, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x482, dwReserved0=0x0, dwReserved1=0x0, cFileName="about_TestDrive.help.txt", cAlternateFileName="")) returned 0 [0146.783] FindClose (in: hFindFile=0x993600 | out: hFindFile=0x993600) returned 1 [0146.784] GetProcessHeap () returned 0x8a0000 [0146.784] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0146.784] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e4b40, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc6d7de, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Examples", cAlternateFileName="")) returned 1 [0146.784] GetProcessHeap () returned 0x8a0000 [0146.784] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0146.784] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Examples\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e4b40, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc6d7de, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0147.017] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e4b40, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc6d7de, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.017] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e545b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Calculator", cAlternateFileName="CALCUL~1")) returned 1 [0147.017] GetProcessHeap () returned 0x8a0000 [0147.017] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0147.018] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Examples\\Calculator\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e545b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0147.018] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e545b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.018] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5ac187, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5ac187, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5ac187, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2655, dwReserved0=0x0, dwReserved1=0x0, cFileName="Add-Numbers.ps1", cAlternateFileName="")) returned 1 [0147.018] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5f862d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5f862d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5f862d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x287c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Add-Numbers.Tests.ps1", cAlternateFileName="")) returned 1 [0147.018] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5f862d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5f862d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5f862d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x287c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Add-Numbers.Tests.ps1", cAlternateFileName="")) returned 0 [0147.019] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0147.019] GetProcessHeap () returned 0x8a0000 [0147.019] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0147.019] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e59c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Validator", cAlternateFileName="VALIDA~1")) returned 1 [0147.019] GetProcessHeap () returned 0x8a0000 [0147.019] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0147.019] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Examples\\Validator\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e59c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0147.020] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e59c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.020] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e61e897, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e61e897, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e61e897, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2954, dwReserved0=0x0, dwReserved1=0x0, cFileName="Validator.Tests.ps1", cAlternateFileName="")) returned 1 [0147.020] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e61e897, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e61e897, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e61e897, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2954, dwReserved0=0x0, dwReserved1=0x0, cFileName="Validator.Tests.ps1", cAlternateFileName="")) returned 0 [0147.020] FindClose (in: hFindFile=0x993ac0 | out: hFindFile=0x993ac0) returned 1 [0147.024] GetProcessHeap () returned 0x8a0000 [0147.024] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0147.024] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e59c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Validator", cAlternateFileName="VALIDA~1")) returned 0 [0147.025] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0147.025] GetProcessHeap () returned 0x8a0000 [0147.025] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0147.025] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb524b496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3246caf, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Functions", cAlternateFileName="FUNCTI~1")) returned 1 [0147.025] GetProcessHeap () returned 0x8a0000 [0147.025] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0147.025] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb524b496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3246caf, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993600 [0147.028] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb524b496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3246caf, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.028] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb524d244, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x326cf05, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assertions", cAlternateFileName="ASSERT~1")) returned 1 [0147.028] GetProcessHeap () returned 0x8a0000 [0147.028] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0147.028] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb524d244, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x326cf05, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0147.030] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb524d244, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x326cf05, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.031] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5ac187, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5ac187, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5ac187, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x356e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Be.ps1", cAlternateFileName="")) returned 1 [0147.031] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eff43a1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4eff43a1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4eff43a1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x339d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Be.Tests.ps1", cAlternateFileName="")) returned 1 [0147.031] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5f862d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5f862d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5f862d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2794, dwReserved0=0x0, dwReserved1=0x0, cFileName="BeGreaterThan.ps1", cAlternateFileName="")) returned 1 [0147.031] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e61e897, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e61e897, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e61e897, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x281d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BeGreaterThan.Tests.ps1", cAlternateFileName="")) returned 1 [0147.031] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4efa7ee8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4efa7ee8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4efa7ee8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x278b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BeLessThan.ps1", cAlternateFileName="")) returned 1 [0147.031] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5d23d2, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5d23d2, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5d23d2, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x280c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BeLessThan.Tests.ps1", cAlternateFileName="")) returned 1 [0147.031] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f01a5ef, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4f01a5ef, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4f01a5ef, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2861, dwReserved0=0x0, dwReserved1=0x0, cFileName="BeNullOrEmpty.ps1", cAlternateFileName="")) returned 1 [0147.031] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5f862d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5f862d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5f862d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x27f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BeNullOrEmpty.Tests.ps1", cAlternateFileName="")) returned 1 [0147.031] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e644ade, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e644ade, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e644ade, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x27c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contain.ps1", cAlternateFileName="")) returned 1 [0147.031] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e61e897, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e61e897, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e61e897, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2933, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contain.Tests.ps1", cAlternateFileName="")) returned 1 [0147.032] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f01a5ef, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4f01a5ef, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4f01a5ef, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x27e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContainExactly.ps1", cAlternateFileName="")) returned 1 [0147.032] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e66ad38, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e66ad38, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e66ad38, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2899, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContainExactly.Tests.ps1", cAlternateFileName="")) returned 1 [0147.032] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5d23d2, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5d23d2, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5d23d2, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2739, dwReserved0=0x0, dwReserved1=0x0, cFileName="Exist.ps1", cAlternateFileName="")) returned 1 [0147.032] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4efce146, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4efce146, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4efce146, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2787, dwReserved0=0x0, dwReserved1=0x0, cFileName="Exist.Tests.ps1", cAlternateFileName="")) returned 1 [0147.032] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5d23d2, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5d23d2, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5d23d2, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x27a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Match.ps1", cAlternateFileName="")) returned 1 [0147.032] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f01a5ef, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4f01a5ef, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4f01a5ef, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2869, dwReserved0=0x0, dwReserved1=0x0, cFileName="Match.Tests.ps1", cAlternateFileName="")) returned 1 [0147.032] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e644ade, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e644ade, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e644ade, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x27c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MatchExactly.ps1", cAlternateFileName="")) returned 1 [0147.032] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5d23d2, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5d23d2, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5d23d2, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2815, dwReserved0=0x0, dwReserved1=0x0, cFileName="MatchExactly.Tests.ps1", cAlternateFileName="")) returned 1 [0147.032] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eff43a1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4eff43a1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4eff43a1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2f11, dwReserved0=0x0, dwReserved1=0x0, cFileName="PesterThrow.ps1", cAlternateFileName="")) returned 1 [0147.032] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5d23d2, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5d23d2, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5d23d2, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x395e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PesterThrow.Tests.ps1", cAlternateFileName="")) returned 1 [0147.032] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eff43a1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4eff43a1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4eff43a1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3239, dwReserved0=0x0, dwReserved1=0x0, cFileName="Should.ps1", cAlternateFileName="")) returned 1 [0147.032] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eff43a1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4eff43a1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4eff43a1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3b3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Should.Tests.ps1", cAlternateFileName="")) returned 1 [0147.032] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4efce146, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4efce146, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4efce146, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2737, dwReserved0=0x0, dwReserved1=0x0, cFileName="Test-Assertion.ps1", cAlternateFileName="")) returned 1 [0147.032] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4efce146, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4efce146, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4efce146, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2737, dwReserved0=0x0, dwReserved1=0x0, cFileName="Test-Assertion.ps1", cAlternateFileName="")) returned 0 [0147.033] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0147.034] GetProcessHeap () returned 0x8a0000 [0147.034] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0147.034] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e644ade, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e644ade, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e644ade, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2eca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Context.ps1", cAlternateFileName="")) returned 1 [0147.034] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4efce146, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4efce146, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4efce146, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x28cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Context.Tests.ps1", cAlternateFileName="")) returned 1 [0147.034] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e61e897, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e61e897, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e61e897, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x686e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Coverage.ps1", cAlternateFileName="")) returned 1 [0147.034] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eff43a1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4eff43a1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4eff43a1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4d67, dwReserved0=0x0, dwReserved1=0x0, cFileName="Coverage.Tests.ps1", cAlternateFileName="")) returned 1 [0147.034] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e61e897, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e61e897, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e61e897, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3546, dwReserved0=0x0, dwReserved1=0x0, cFileName="Describe.ps1", cAlternateFileName="")) returned 1 [0147.035] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eff43a1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4eff43a1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4eff43a1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x28d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Describe.Tests.ps1", cAlternateFileName="")) returned 1 [0147.035] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f01a5ef, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4f01a5ef, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4f01a5ef, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x291c, dwReserved0=0x0, dwReserved1=0x0, cFileName="In.ps1", cAlternateFileName="")) returned 1 [0147.035] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5f862d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5f862d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5f862d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2848, dwReserved0=0x0, dwReserved1=0x0, cFileName="In.Tests.ps1", cAlternateFileName="")) returned 1 [0147.035] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f01a5ef, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4f01a5ef, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4f01a5ef, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x34b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="InModuleScope.ps1", cAlternateFileName="")) returned 1 [0147.035] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eff43a1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4eff43a1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4eff43a1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2c66, dwReserved0=0x0, dwReserved1=0x0, cFileName="InModuleScope.Tests.ps1", cAlternateFileName="")) returned 1 [0147.035] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f01a5ef, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4f01a5ef, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4f01a5ef, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4d81, dwReserved0=0x0, dwReserved1=0x0, cFileName="It.ps1", cAlternateFileName="")) returned 1 [0147.035] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5d23d2, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5d23d2, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5d23d2, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4401, dwReserved0=0x0, dwReserved1=0x0, cFileName="It.Tests.ps1", cAlternateFileName="")) returned 1 [0147.036] GetProcessHeap () returned 0x8a0000 [0147.036] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0147.036] GetProcessHeap () returned 0x8a0000 [0147.036] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0147.036] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb529cac5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x329315c, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0147.039] GetProcessHeap () returned 0x8a0000 [0147.039] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0147.040] GetProcessHeap () returned 0x8a0000 [0147.040] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a90058 | out: hHeap=0x8a0000) returned 1 [0147.040] GetProcessHeap () returned 0x8a0000 [0147.040] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a90058 [0147.040] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb529e7f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5b68c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993600 [0147.042] GetProcessHeap () returned 0x8a0000 [0147.042] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0147.042] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\bin\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb529f7d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5b68c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0147.043] GetProcessHeap () returned 0x8a0000 [0147.043] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0147.043] GetProcessHeap () returned 0x8a0000 [0147.043] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0147.043] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\en-US\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb529ffc4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5b68c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993800 [0147.044] GetProcessHeap () returned 0x8a0000 [0147.044] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0147.044] GetProcessHeap () returned 0x8a0000 [0147.045] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0147.045] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Examples\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb52a070b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0147.045] GetProcessHeap () returned 0x8a0000 [0147.045] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0147.045] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Examples\\Calculator\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb52a1107, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5b68c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0147.046] GetProcessHeap () returned 0x8a0000 [0147.046] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0147.046] GetProcessHeap () returned 0x8a0000 [0147.046] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0147.046] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Examples\\Validator\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb52a1868, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5b68c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0147.046] GetProcessHeap () returned 0x8a0000 [0147.047] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0147.047] GetProcessHeap () returned 0x8a0000 [0147.047] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0147.047] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb531a14c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5dcb26, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Functions", cAlternateFileName="FUNCTI~1")) returned 1 [0147.047] GetProcessHeap () returned 0x8a0000 [0147.047] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0147.047] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb531a14c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5dcb26, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0147.051] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb531a14c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5dcb26, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.051] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb537bc07, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a628ff7, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assertions", cAlternateFileName="ASSERT~1")) returned 1 [0147.052] GetProcessHeap () returned 0x8a0000 [0147.052] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0147.052] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\Assertions\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb537bc07, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a628ff7, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0147.056] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb537bc07, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a628ff7, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.056] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e3f39a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e3f39a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e3f39a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1021, dwReserved0=0x0, dwReserved1=0x0, cFileName="Be.ps1", cAlternateFileName="")) returned 1 [0147.056] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fe2e0e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96fe2e0e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96fe2e0e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Be.Tests.ps1", cAlternateFileName="")) returned 1 [0147.056] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f4a475, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f4a475, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f4a475, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x176, dwReserved0=0x0, dwReserved1=0x0, cFileName="BeGreaterThan.ps1", cAlternateFileName="")) returned 1 [0147.056] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f706d4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f706d4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f706d4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="BeGreaterThan.Tests.ps1", cAlternateFileName="")) returned 1 [0147.056] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f9693c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f9693c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96fbcba3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x16d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BeLessThan.ps1", cAlternateFileName="")) returned 1 [0147.056] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f24202, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f24202, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f24202, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="BeLessThan.Tests.ps1", cAlternateFileName="")) returned 1 [0147.056] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f24202, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f24202, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f24202, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x185, dwReserved0=0x0, dwReserved1=0x0, cFileName="BeLike.ps1", cAlternateFileName="")) returned 1 [0147.056] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e6560d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e6560d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e6560d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BeLike.Tests.ps1", cAlternateFileName="")) returned 1 [0147.057] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96efdfa3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96efdfa3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96efdfa3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x19d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BeLikeExactly.ps1", cAlternateFileName="")) returned 1 [0147.057] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97009075, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97009075, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97009075, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BeLikeExactly.Tests.ps1", cAlternateFileName="")) returned 1 [0147.057] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97009075, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97009075, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97009075, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x243, dwReserved0=0x0, dwReserved1=0x0, cFileName="BeNullOrEmpty.ps1", cAlternateFileName="")) returned 1 [0147.057] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f4a475, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f4a475, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f4a475, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1da, dwReserved0=0x0, dwReserved1=0x0, cFileName="BeNullOrEmpty.Tests.ps1", cAlternateFileName="")) returned 1 [0147.057] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f706d4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f706d4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f706d4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x573, dwReserved0=0x0, dwReserved1=0x0, cFileName="BeOfType.ps1", cAlternateFileName="")) returned 1 [0147.057] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e6560d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e6560d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e6560d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BeOfType.Tests.ps1", cAlternateFileName="")) returned 1 [0147.057] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f9693c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f9693c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f9693c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contain.ps1", cAlternateFileName="")) returned 1 [0147.057] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f4a475, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f4a475, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f4a475, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contain.Tests.ps1", cAlternateFileName="")) returned 1 [0147.057] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9702f2dc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9702f2dc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9702f2dc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContainExactly.ps1", cAlternateFileName="")) returned 1 [0147.057] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f9693c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f9693c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f9693c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x361, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContainExactly.Tests.ps1", cAlternateFileName="")) returned 1 [0147.057] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e8b875, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e8b875, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96efdfa3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x121, dwReserved0=0x0, dwReserved1=0x0, cFileName="Exist.ps1", cAlternateFileName="")) returned 1 [0147.058] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fbcba3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96fbcba3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96fbcba3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Exist.Tests.ps1", cAlternateFileName="")) returned 1 [0147.058] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e6560d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e6560d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e6560d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x183, dwReserved0=0x0, dwReserved1=0x0, cFileName="Match.ps1", cAlternateFileName="")) returned 1 [0147.058] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9702f2dc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9702f2dc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9702f2dc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x24b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Match.Tests.ps1", cAlternateFileName="")) returned 1 [0147.058] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f9693c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f9693c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f9693c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="MatchExactly.ps1", cAlternateFileName="")) returned 1 [0147.058] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e6560d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e6560d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e6560d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MatchExactly.Tests.ps1", cAlternateFileName="")) returned 1 [0147.058] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fe2e0e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96fe2e0e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96fe2e0e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="PesterThrow.ps1", cAlternateFileName="")) returned 1 [0147.058] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e6560d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e6560d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e6560d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1340, dwReserved0=0x0, dwReserved1=0x0, cFileName="PesterThrow.Tests.ps1", cAlternateFileName="")) returned 1 [0147.058] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fe2e0e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96fe2e0e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96fe2e0e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Set-TestInconclusive.ps1", cAlternateFileName="")) returned 1 [0147.059] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fe2e0e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96fe2e0e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96fe2e0e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xca7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Should.ps1", cAlternateFileName="")) returned 1 [0147.059] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fbcba3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96fbcba3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96fbcba3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x151f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Should.Tests.ps1", cAlternateFileName="")) returned 1 [0147.059] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fbcba3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96fbcba3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96fbcba3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="Test-Assertion.ps1", cAlternateFileName="")) returned 1 [0147.059] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fbcba3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96fbcba3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96fbcba3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="Test-Assertion.ps1", cAlternateFileName="")) returned 0 [0147.059] FindClose (in: hFindFile=0x993940 | out: hFindFile=0x993940) returned 1 [0147.186] GetProcessHeap () returned 0x8a0000 [0147.186] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0147.186] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f24202, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f24202, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f24202, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreakAndContinue.Tests.ps1", cAlternateFileName="")) returned 1 [0147.186] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f9693c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f9693c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f9693c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x921, dwReserved0=0x0, dwReserved1=0x0, cFileName="Context.ps1", cAlternateFileName="")) returned 1 [0147.187] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fbcba3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96fbcba3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96fbcba3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Context.Tests.ps1", cAlternateFileName="")) returned 1 [0147.187] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f706d4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f706d4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f706d4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4559, dwReserved0=0x0, dwReserved1=0x0, cFileName="Coverage.ps1", cAlternateFileName="")) returned 1 [0147.187] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fe2e0e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96fe2e0e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96fe2e0e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2cac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Coverage.Tests.ps1", cAlternateFileName="")) returned 1 [0147.187] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f706d4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f706d4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f706d4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xff9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Describe.ps1", cAlternateFileName="")) returned 1 [0147.187] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fe2e0e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96fe2e0e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96fe2e0e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Describe.Tests.ps1", cAlternateFileName="")) returned 1 [0147.187] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f24202, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f24202, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f24202, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobalMock-A.Tests.ps1", cAlternateFileName="")) returned 1 [0147.187] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f24202, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f24202, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f24202, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobalMock-B.Tests.ps1", cAlternateFileName="")) returned 1 [0147.187] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97009075, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97009075, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97009075, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x335, dwReserved0=0x0, dwReserved1=0x0, cFileName="In.ps1", cAlternateFileName="")) returned 1 [0147.187] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f4a475, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f4a475, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f4a475, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x0, cFileName="In.Tests.ps1", cAlternateFileName="")) returned 1 [0147.187] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9702f2dc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9702f2dc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9702f2dc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf41, dwReserved0=0x0, dwReserved1=0x0, cFileName="InModuleScope.ps1", cAlternateFileName="")) returned 1 [0147.188] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fe2e0e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96fe2e0e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96fe2e0e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="InModuleScope.Tests.ps1", cAlternateFileName="")) returned 1 [0147.188] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9702f2dc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9702f2dc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9702f2dc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2ea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="It.ps1", cAlternateFileName="")) returned 1 [0147.188] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f24202, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f24202, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f24202, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x261a, dwReserved0=0x0, dwReserved1=0x0, cFileName="It.Tests.ps1", cAlternateFileName="")) returned 1 [0147.188] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fe2e0e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96fe2e0e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97009075, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xbf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mock.ps1", cAlternateFileName="")) returned 1 [0147.188] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f4a475, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f4a475, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f4a475, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe941, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mock.Tests.ps1", cAlternateFileName="")) returned 1 [0147.188] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f24202, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f24202, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f24202, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xcef, dwReserved0=0x0, dwReserved1=0x0, cFileName="New-Fixture.ps1", cAlternateFileName="")) returned 1 [0147.188] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97009075, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97009075, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97009075, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc82, dwReserved0=0x0, dwReserved1=0x0, cFileName="New-Fixture.Tests.ps1", cAlternateFileName="")) returned 1 [0147.188] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e6560d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e6560d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e6560d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4bc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PesterState.ps1", cAlternateFileName="")) returned 1 [0147.188] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f24202, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f24202, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f24202, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x386c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PesterState.Tests.ps1", cAlternateFileName="")) returned 1 [0147.188] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f24202, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f24202, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f24202, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x370d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupTeardown.ps1", cAlternateFileName="")) returned 1 [0147.189] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f706d4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f706d4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f706d4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x15c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupTeardown.Tests.ps1", cAlternateFileName="")) returned 1 [0147.189] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fbcba3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96fbcba3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96fbcba3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TestDrive.ps1", cAlternateFileName="")) returned 1 [0147.189] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e3f39a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e3f39a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e3f39a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1054, dwReserved0=0x0, dwReserved1=0x0, cFileName="TestDrive.Tests.ps1", cAlternateFileName="")) returned 1 [0147.189] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fbcba3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96fbcba3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96fbcba3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4033, dwReserved0=0x0, dwReserved1=0x0, cFileName="TestResults.ps1", cAlternateFileName="")) returned 1 [0147.189] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f4a475, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f4a475, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f4a475, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x6be7, dwReserved0=0x0, dwReserved1=0x0, cFileName="TestResults.Tests.ps1", cAlternateFileName="")) returned 1 [0147.189] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f706d4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f706d4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f706d4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1a2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TestsRunningInCleanRunspace.Tests.ps1", cAlternateFileName="")) returned 1 [0147.189] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f706d4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f706d4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f706d4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1a2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TestsRunningInCleanRunspace.Tests.ps1", cAlternateFileName="")) returned 0 [0147.189] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0147.190] GetProcessHeap () returned 0x8a0000 [0147.190] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0147.190] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97009075, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97009075, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97009075, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x263, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICENSE", cAlternateFileName="")) returned 1 [0147.190] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fe2e0e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96fe2e0e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96fe2e0e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x16f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="nunit_schema_2.5.xsd", cAlternateFileName="")) returned 1 [0147.190] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e6560d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e6560d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e6560d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x734, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pester.nuspec", cAlternateFileName="")) returned 1 [0147.190] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fbcba3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96fbcba3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96fbcba3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1014, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pester.psd1", cAlternateFileName="")) returned 1 [0147.190] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fbcba3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96fbcba3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96fbcba3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x6956, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pester.psm1", cAlternateFileName="")) returned 1 [0147.191] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f24202, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f24202, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f24202, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b95, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pester.Tests.ps1", cAlternateFileName="")) returned 1 [0147.191] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e6560d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e6560d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e6560d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x16ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="README.md", cAlternateFileName="")) returned 1 [0147.191] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb53e92f6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a64f261, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Snippets", cAlternateFileName="")) returned 1 [0147.191] GetProcessHeap () returned 0x8a0000 [0147.191] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0147.191] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Snippets\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb53e92f6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a64f261, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0147.193] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb53e92f6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a64f261, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.194] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97009075, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97009075, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97009075, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x321, dwReserved0=0x0, dwReserved1=0x0, cFileName="Context.snippets.ps1xml", cAlternateFileName="")) returned 1 [0147.194] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f9693c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f9693c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f9693c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x325, dwReserved0=0x0, dwReserved1=0x0, cFileName="Describe.snippets.ps1xml", cAlternateFileName="")) returned 1 [0147.194] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f706d4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f706d4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f706d4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="It.snippets.ps1xml", cAlternateFileName="")) returned 1 [0147.194] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f4a475, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f4a475, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f4a475, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x325, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldBe.snippets.ps1xml", cAlternateFileName="")) returned 1 [0147.194] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f9693c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f9693c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f9693c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x34a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldBeGreaterThan.snippets.ps1xml", cAlternateFileName="")) returned 1 [0147.194] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9702f2dc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9702f2dc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9702f2dc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x341, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldBeLessThan.snippets.ps1xml", cAlternateFileName="")) returned 1 [0147.194] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97009075, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97009075, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97009075, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x348, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldBeNullOrEmpty.snippets.ps1xml", cAlternateFileName="")) returned 1 [0147.194] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f706d4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f706d4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f706d4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x334, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldContain.snippets.ps1xml", cAlternateFileName="")) returned 1 [0147.194] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f706d4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f706d4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f706d4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x32e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldExist.snippets.ps1xml", cAlternateFileName="")) returned 1 [0147.194] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f24202, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f24202, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f24202, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x32e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldMatch.snippets.ps1xml", cAlternateFileName="")) returned 1 [0147.195] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97009075, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97009075, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97009075, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x32e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldNotBe.snippets.ps1xml", cAlternateFileName="")) returned 1 [0147.195] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f9693c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f9693c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f9693c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldNotBeNullOrEmpty.snippets.ps1xml", cAlternateFileName="")) returned 1 [0147.195] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9702f2dc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9702f2dc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9702f2dc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x341, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldNotContain.snippets.ps1xml", cAlternateFileName="")) returned 1 [0147.195] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f9693c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f9693c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f9693c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x33b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldNotExist.snippets.ps1xml", cAlternateFileName="")) returned 1 [0147.195] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f4a475, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f4a475, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f4a475, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x33b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldNotMatch.snippets.ps1xml", cAlternateFileName="")) returned 1 [0147.195] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f706d4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f706d4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f9693c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x33f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldNotThrow.snippets.ps1xml", cAlternateFileName="")) returned 1 [0147.195] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f9693c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f9693c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f9693c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x332, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldThrow.snippets.ps1xml", cAlternateFileName="")) returned 1 [0147.195] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f9693c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f9693c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f9693c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x332, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldThrow.snippets.ps1xml", cAlternateFileName="")) returned 0 [0147.195] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0147.197] GetProcessHeap () returned 0x8a0000 [0147.197] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0147.197] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb53e92f6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a64f261, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Snippets", cAlternateFileName="")) returned 0 [0147.197] FindClose (in: hFindFile=0x993600 | out: hFindFile=0x993600) returned 1 [0147.197] GetProcessHeap () returned 0x8a0000 [0147.197] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a90058 | out: hHeap=0x8a0000) returned 1 [0147.197] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb529e7f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5b68c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3.4.0", cAlternateFileName="34AE2D~1.0")) returned 0 [0147.197] FindClose (in: hFindFile=0x9935c0 | out: hFindFile=0x9935c0) returned 1 [0147.198] GetProcessHeap () returned 0x8a0000 [0147.198] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0147.200] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb53eacff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerShellGet", cAlternateFileName="POWERS~1")) returned 1 [0147.201] GetProcessHeap () returned 0x8a0000 [0147.201] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0147.201] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\*", lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb53eacff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0147.202] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb53eacff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.202] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb53ec4f8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.1", cAlternateFileName="100~1.1")) returned 1 [0147.204] GetProcessHeap () returned 0x8a0000 [0147.204] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a90058 [0147.204] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb53ec4f8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0147.207] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb53ec4f8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.207] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xb53ed28c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0147.208] GetProcessHeap () returned 0x8a0000 [0147.208] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0147.208] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\en-US\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xb53ed28c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0147.208] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xb53ed28c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.209] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x884e2a3c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x884e2a3c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x129b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSGet.Resource.psd1", cAlternateFileName="PSGETR~1.PSD")) returned 1 [0147.209] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x884e2a3c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x884e2a3c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x129b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSGet.Resource.psd1", cAlternateFileName="PSGETR~1.PSD")) returned 0 [0147.209] FindClose (in: hFindFile=0x993ac0 | out: hFindFile=0x993ac0) returned 1 [0147.209] GetProcessHeap () returned 0x8a0000 [0147.209] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0147.209] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a64f261, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5dec600, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5dec600, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xadf, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerShellGet.psd1", cAlternateFileName="POWERS~1.PSD")) returned 1 [0147.209] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a64f261, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5dec600, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5dec600, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x203b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSGet.Format.ps1xml", cAlternateFileName="PSGETF~1.PS1")) returned 1 [0147.209] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a64f261, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5dec600, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5dec600, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13872, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSGet.Resource.psd1", cAlternateFileName="PSGETR~1.PSD")) returned 1 [0147.210] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a64f261, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5dec600, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5dec600, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8ec1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSModule.psm1", cAlternateFileName="PSMODU~1.PSM")) returned 1 [0147.210] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a64f261, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5dec600, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5dec600, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8ec1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSModule.psm1", cAlternateFileName="PSMODU~1.PSM")) returned 0 [0147.210] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0147.210] GetProcessHeap () returned 0x8a0000 [0147.210] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a90058 | out: hHeap=0x8a0000) returned 1 [0147.210] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb53ec4f8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.1", cAlternateFileName="100~1.1")) returned 0 [0147.210] FindClose (in: hFindFile=0x993940 | out: hFindFile=0x993940) returned 1 [0147.211] GetProcessHeap () returned 0x8a0000 [0147.211] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0147.212] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4631b23a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4631b23a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSReadline", cAlternateFileName="PSREAD~1")) returned 1 [0147.212] GetProcessHeap () returned 0x8a0000 [0147.212] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0147.213] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\*", lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4631b23a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4631b23a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0147.213] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4631b23a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4631b23a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.213] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb5477959, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfff2ff0e, ftLastWriteTime.dwHighDateTime=0x1d1a04a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.1", cAlternateFileName="")) returned 1 [0147.213] GetProcessHeap () returned 0x8a0000 [0147.213] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a90058 [0147.214] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.1\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb5477959, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfff2ff0e, ftLastWriteTime.dwHighDateTime=0x1d1a04a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0147.217] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb5477959, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfff2ff0e, ftLastWriteTime.dwHighDateTime=0x1d1a04a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.217] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff2ff0e, ftCreationTime.dwHighDateTime=0x1d1a04a, ftLastAccessTime.dwLowDateTime=0xb5478c6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfff2ff0e, ftLastWriteTime.dwHighDateTime=0x1d1a04a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1 [0147.217] GetProcessHeap () returned 0x8a0000 [0147.217] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0147.218] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.1\\en\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff2ff0e, ftCreationTime.dwHighDateTime=0x1d1a04a, ftLastAccessTime.dwLowDateTime=0xb5478c6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfff2ff0e, ftLastWriteTime.dwHighDateTime=0x1d1a04a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0147.218] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff2ff0e, ftCreationTime.dwHighDateTime=0x1d1a04a, ftLastAccessTime.dwLowDateTime=0xb5478c6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfff2ff0e, ftLastWriteTime.dwHighDateTime=0x1d1a04a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.218] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfff2ff0e, ftCreationTime.dwHighDateTime=0x1d1a04a, ftLastAccessTime.dwLowDateTime=0xfb6a7fd7, ftLastAccessTime.dwHighDateTime=0x1d1a04a, ftLastWriteTime.dwLowDateTime=0xfb6a7fd7, ftLastWriteTime.dwHighDateTime=0x1d1a04a, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.PSReadline.Resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0147.218] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfff2ff0e, ftCreationTime.dwHighDateTime=0x1d1a04a, ftLastAccessTime.dwLowDateTime=0xfb6a7fd7, ftLastAccessTime.dwHighDateTime=0x1d1a04a, ftLastWriteTime.dwLowDateTime=0xfb6a7fd7, ftLastWriteTime.dwHighDateTime=0x1d1a04a, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.PSReadline.Resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0147.218] FindClose (in: hFindFile=0x993940 | out: hFindFile=0x993940) returned 1 [0147.218] GetProcessHeap () returned 0x8a0000 [0147.218] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0147.218] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32b93ba, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97199283, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97199283, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x25200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.PSReadline.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0147.218] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32b93ba, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97199283, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97199283, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSReadline.psd1", cAlternateFileName="PSREAD~1.PSD")) returned 1 [0147.219] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32b93ba, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97199283, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97199283, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSReadline.psm1", cAlternateFileName="PSREAD~1.PSM")) returned 1 [0147.219] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32b93ba, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97199283, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97199283, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSReadline.psm1", cAlternateFileName="PSREAD~1.PSM")) returned 0 [0147.219] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0147.219] GetProcessHeap () returned 0x8a0000 [0147.219] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a90058 | out: hHeap=0x8a0000) returned 1 [0147.219] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb54d73e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.2", cAlternateFileName="")) returned 1 [0147.219] GetProcessHeap () returned 0x8a0000 [0147.219] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a90058 [0147.219] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.2\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb54d73e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0147.221] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb54d73e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.221] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xb54d81cc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1 [0147.221] GetProcessHeap () returned 0x8a0000 [0147.221] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0147.221] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.2\\en\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xb54d81cc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0147.221] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xb54d81cc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.221] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x884e2a3c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x884e2a3c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.PSReadline.Resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0147.221] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x884e2a3c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x884e2a3c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.PSReadline.Resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0147.222] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0147.222] GetProcessHeap () returned 0x8a0000 [0147.222] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0147.222] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a64f261, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5dec600, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5dec600, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x34e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.PSReadline.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0147.222] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a64f261, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5dec600, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5dec600, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSReadline.psd1", cAlternateFileName="PSREAD~1.PSD")) returned 1 [0147.222] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a64f261, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5dec600, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5dec600, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSReadline.psm1", cAlternateFileName="PSREAD~1.PSM")) returned 1 [0147.222] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a64f261, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5dec600, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5dec600, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSReadline.psm1", cAlternateFileName="PSREAD~1.PSM")) returned 0 [0147.222] FindClose (in: hFindFile=0x9935c0 | out: hFindFile=0x9935c0) returned 1 [0147.222] GetProcessHeap () returned 0x8a0000 [0147.222] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a90058 | out: hHeap=0x8a0000) returned 1 [0147.222] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb54d73e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.2", cAlternateFileName="")) returned 0 [0147.222] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0147.223] GetProcessHeap () returned 0x8a0000 [0147.223] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0147.223] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4631b23a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4631b23a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSReadline", cAlternateFileName="PSREAD~1")) returned 0 [0147.224] FindClose (in: hFindFile=0x993b80 | out: hFindFile=0x993b80) returned 1 [0147.224] GetProcessHeap () returned 0x8a0000 [0147.224] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0147.224] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb507390a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Modules", cAlternateFileName="")) returned 0 [0147.224] FindClose (in: hFindFile=0x9939c0 | out: hFindFile=0x9939c0) returned 1 [0147.224] GetProcessHeap () returned 0x8a0000 [0147.224] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3674088 | out: hHeap=0x8a0000) returned 1 [0147.356] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502b1c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="WindowsPowerShell", cAlternateFileName="WID5B1~1")) returned 0 [0147.356] FindClose (in: hFindFile=0x993880 | out: hFindFile=0x993880) returned 1 [0147.357] GetProcessHeap () returned 0x8a0000 [0147.357] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0147.357] FindNextFileW (in: hFindFile=0x8b9398, lpFindFileData=0x2fdf598 | out: lpFindFileData=0x2fdf598*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe7511354, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe7511354, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x74889fc4, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1 [0147.357] GetProcessHeap () returned 0x8a0000 [0147.357] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3650070 [0147.357] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\*", lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe7511354, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe7511354, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x993ac0 [0147.357] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe7511354, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe7511354, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0147.357] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33b7f536, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33b7f536, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Adobe", cAlternateFileName="")) returned 1 [0147.357] GetProcessHeap () returned 0x8a0000 [0147.357] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3674088 [0147.358] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\*", lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33b7f536, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33b7f536, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9938c0 [0147.359] FindNextFileW (in: hFindFile=0x9938c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33b7f536, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33b7f536, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.359] FindNextFileW (in: hFindFile=0x9938c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdec183d6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec183d6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat Reader DC", cAlternateFileName="ACROBA~1")) returned 1 [0147.359] GetProcessHeap () returned 0x8a0000 [0147.359] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x939280 [0147.359] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\*", lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdec183d6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec183d6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b80 [0147.359] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdec183d6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec183d6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.359] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdec183d6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xdec183d6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec183d6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Esl", cAlternateFileName="")) returned 1 [0147.359] GetProcessHeap () returned 0x8a0000 [0147.359] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0147.360] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Esl\\*", lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdec183d6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xdec183d6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec183d6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0147.361] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdec183d6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xdec183d6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec183d6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.361] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc98600, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdec183d6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3cc98600, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x4f1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AiodLite.dll", cAlternateFileName="")) returned 1 [0147.361] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc98600, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdec183d6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3cc98600, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x4f1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AiodLite.dll", cAlternateFileName="")) returned 0 [0147.361] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0147.361] GetProcessHeap () returned 0x8a0000 [0147.361] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0147.361] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2d82cf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2d82cf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader", cAlternateFileName="")) returned 1 [0147.361] GetProcessHeap () returned 0x8a0000 [0147.361] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a70048 [0147.361] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\*", lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2d82cf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2d82cf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9937c0 [0147.362] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2d82cf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2d82cf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.363] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72bf0d00, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x191cc8f5, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x72bf0d00, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x2d9d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="1494870C-9912-C184-4CC9-B401-A53F4D8DE290.pdf", cAlternateFileName="149487~1.PDF")) returned 1 [0147.363] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a672c00, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdb16256d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3a672c00, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x28bf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A3DUtils.dll", cAlternateFileName="")) returned 1 [0147.363] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a672c00, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xded496a3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3a672c00, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xe8ff0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACE.dll", cAlternateFileName="")) returned 1 [0147.363] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3632d245, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3632d245, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3632d245, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroApp", cAlternateFileName="")) returned 1 [0147.363] GetProcessHeap () returned 0x8a0000 [0147.363] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a90058 [0147.364] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3632d245, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3632d245, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3632d245, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0147.365] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3632d245, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3632d245, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3632d245, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.365] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3632d245, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2a87d43, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2a87d43, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENU", cAlternateFileName="")) returned 1 [0147.365] GetProcessHeap () returned 0x8a0000 [0147.365] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0147.365] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3632d245, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2a87d43, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2a87d43, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993600 [0147.367] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3632d245, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2a87d43, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2a87d43, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.368] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3637970e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x126, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppCenter_R.aapp", cAlternateFileName="APPCEN~1.AAP")) returned 1 [0147.368] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3637970e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x2b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Certificates_R.aapp", cAlternateFileName="CERTIF~1.AAP")) returned 1 [0147.368] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3639f962, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x17f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CollectSignatures.aapp", cAlternateFileName="COLLEC~1.AAP")) returned 1 [0147.368] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72bf0d00, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x191f2bd5, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x72bf0d00, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Combine_R_RHP.aapp", cAlternateFileName="COMBIN~1.AAP")) returned 1 [0147.368] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1758800, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1d500f0c, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe1758800, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0xe8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Comments.aapp", cAlternateFileName="COMMEN~1.AAP")) returned 1 [0147.368] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaf2622c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x1b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Compare_R_RHP.aapp", cAlternateFileName="COMPAR~1.AAP")) returned 1 [0147.368] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3632d245, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x171, dwReserved0=0x0, dwReserved1=0x0, cFileName="CPDF_Full.aapp", cAlternateFileName="CPDF_F~1.AAP")) returned 1 [0147.368] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3632d245, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x17e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CPDF_RHP.aapp", cAlternateFileName="CPDF_R~1.AAP")) returned 1 [0147.368] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaf2622c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x197, dwReserved0=0x0, dwReserved1=0x0, cFileName="Edit_R_Exp_RHP.aapp", cAlternateFileName="EDIT_R~3.AAP")) returned 1 [0147.368] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc98600, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe2a61b10, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3cc98600, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="Edit_R_Full.aapp", cAlternateFileName="EDIT_R~1.AAP")) returned 1 [0147.369] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc98600, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe2a87d43, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3cc98600, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x191, dwReserved0=0x0, dwReserved1=0x0, cFileName="Edit_R_RHP.aapp", cAlternateFileName="EDIT_R~2.AAP")) returned 1 [0147.369] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3632d245, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x185, dwReserved0=0x0, dwReserved1=0x0, cFileName="EPDF_Full.aapp", cAlternateFileName="EPDF_F~1.AAP")) returned 1 [0147.369] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x363534a5, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="EPDF_RHP.aapp", cAlternateFileName="EPDF_R~1.AAP")) returned 1 [0147.369] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1758800, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1d52724e, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe1758800, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0xa7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="FillSign.aapp", cAlternateFileName="FILLSI~1.AAP")) returned 1 [0147.369] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1758800, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1d551e46, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe1758800, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x163, dwReserved0=0x0, dwReserved1=0x0, cFileName="Home.aapp", cAlternateFileName="HOME~1.AAP")) returned 1 [0147.369] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x363ebe21, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="Measure.aapp", cAlternateFileName="MEASUR~1.AAP")) returned 1 [0147.369] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72bf0d00, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x19218da3, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x72bf0d00, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x15c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MoreTools.aapp", cAlternateFileName="MORETO~1.AAP")) returned 1 [0147.369] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaf4c482, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x1b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OptimizePDF_R_RHP.aapp", cAlternateFileName="OPTIMI~1.AAP")) returned 1 [0147.369] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72bf0d00, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x19218da3, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x72bf0d00, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x193, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pages_R_RHP.aapp", cAlternateFileName="PAGES_~1.AAP")) returned 1 [0147.369] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaf4c482, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x1ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="Protect_R_RHP.aapp", cAlternateFileName="PROTEC~1.AAP")) returned 1 [0147.369] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaf726db, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x193, dwReserved0=0x0, dwReserved1=0x0, cFileName="Redact_R_RHP.aapp", cAlternateFileName="REDACT~1.AAP")) returned 1 [0147.369] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaf726db, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x1c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scan_R_RHP.aapp", cAlternateFileName="SCAN_R~1.AAP")) returned 1 [0147.369] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x363ebe21, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x239, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stamp.aapp", cAlternateFileName="STAMP~1.AAP")) returned 1 [0147.370] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3637970e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="TrackedSend.aapp", cAlternateFileName="TRACKE~1.AAP")) returned 1 [0147.370] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x36fd7dc6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x12b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Viewer.aapp", cAlternateFileName="VIEWER~1.AAP")) returned 1 [0147.370] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x36fd7dc6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x12b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Viewer.aapp", cAlternateFileName="VIEWER~1.AAP")) returned 0 [0147.370] FindClose (in: hFindFile=0x993600 | out: hFindFile=0x993600) returned 1 [0147.371] GetProcessHeap () returned 0x8a0000 [0147.371] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0147.371] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3632d245, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2a87d43, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2a87d43, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENU", cAlternateFileName="")) returned 0 [0147.371] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0147.371] GetProcessHeap () returned 0x8a0000 [0147.371] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a90058 | out: hHeap=0x8a0000) returned 1 [0147.371] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe2d5caac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x465f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroBroker.exe", cAlternateFileName="ACROBR~1.EXE")) returned 1 [0147.371] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352c8bdc, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe15851ea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe15851ea, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroCEF", cAlternateFileName="")) returned 1 [0147.371] GetProcessHeap () returned 0x8a0000 [0147.371] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a90058 [0147.371] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352c8bdc, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe15851ea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe15851ea, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993700 [0147.374] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352c8bdc, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe15851ea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe15851ea, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.374] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaad3e64, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cef.pak", cAlternateFileName="")) returned 1 [0147.374] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdac515e2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cef_100_percent.pak", cAlternateFileName="CEF_10~1.PAK")) returned 1 [0147.374] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdac77826, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cef_200_percent.pak", cAlternateFileName="CEF_20~1.PAK")) returned 1 [0147.374] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdac77826, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cef_extensions.pak", cAlternateFileName="CEF_EX~1.PAK")) returned 1 [0147.374] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xd9f80ae4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x6b3f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_elf.dll", cAlternateFileName="CHROME~1.DLL")) returned 1 [0147.374] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72bf0d00, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x190c1897, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x72bf0d00, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x6994, dwReserved0=0x0, dwReserved1=0x0, cFileName="COPYING.LGPLv2.1.txt", cAlternateFileName="COPYIN~1.TXT")) returned 1 [0147.374] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xd9fa6d5f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x202368, dwReserved0=0x0, dwReserved1=0x0, cFileName="d3dcompiler_43.dll", cAlternateFileName="D3DCOM~1.DLL")) returned 1 [0147.374] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaefffe5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x392eb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="d3dcompiler_47.dll", cAlternateFileName="D3DCOM~2.DLL")) returned 1 [0147.374] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xd9f5a940, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x9b49f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icudt.dll", cAlternateFileName="")) returned 1 [0147.374] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdac9da78, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icudtl.dat", cAlternateFileName="")) returned 1 [0147.374] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc98600, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe293087a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3cc98600, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x458f9f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="libcef.dll", cAlternateFileName="")) returned 1 [0147.374] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xd9fa6d5f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x15650, dwReserved0=0x0, dwReserved1=0x0, cFileName="libEGL.dll", cAlternateFileName="")) returned 1 [0147.375] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xda3accdd, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x2ca650, dwReserved0=0x0, dwReserved1=0x0, cFileName="libGLESv2.dll", cAlternateFileName="LIBGLE~1.DLL")) returned 1 [0147.375] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72bf0d00, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x190e7af4, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x72bf0d00, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x69b, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICENSE.txt", cAlternateFileName="")) returned 1 [0147.375] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdac9da78, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xdac9da78, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdac9da78, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="locales", cAlternateFileName="")) returned 1 [0147.375] GetProcessHeap () returned 0x8a0000 [0147.375] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0147.375] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\locales\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdac9da78, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xdac9da78, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdac9da78, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0147.376] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdac9da78, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xdac9da78, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdac9da78, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.376] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdac9da78, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.pak", cAlternateFileName="")) returned 1 [0147.376] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdac9da78, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.pak", cAlternateFileName="")) returned 0 [0147.376] FindClose (in: hFindFile=0x9935c0 | out: hFindFile=0x9935c0) returned 1 [0147.376] GetProcessHeap () returned 0x8a0000 [0147.376] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0147.376] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaaadbf3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="natives_blob.bin", cAlternateFileName="NATIVE~1.BIN")) returned 1 [0147.377] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc98600, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdb54228e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3cc98600, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xbff7f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdrCEF.exe", cAlternateFileName="")) returned 1 [0147.377] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc98600, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdbc431b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3cc98600, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x13279f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdrServicesUpdater.exe", cAlternateFileName="RDRSER~1.EXE")) returned 1 [0147.377] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaad3e64, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="snapshot_blob.bin", cAlternateFileName="SNAPSH~1.BIN")) returned 1 [0147.377] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xda576987, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x361f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdmadapter.dll", cAlternateFileName="WIDEVI~1.DLL")) returned 1 [0147.377] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xda576987, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x361f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdmadapter.dll", cAlternateFileName="WIDEVI~1.DLL")) returned 0 [0147.377] FindClose (in: hFindFile=0x993700 | out: hFindFile=0x993700) returned 1 [0147.377] GetProcessHeap () returned 0x8a0000 [0147.377] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a90058 | out: hHeap=0x8a0000) returned 1 [0147.377] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1758800, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1abe0524, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe1758800, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x134b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrofx32.dll", cAlternateFileName="")) returned 1 [0147.377] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf33f4ce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x16dc3f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRd32.dll", cAlternateFileName="")) returned 1 [0147.377] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf3b1bc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x21fdf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRd32.exe", cAlternateFileName="")) returned 1 [0147.377] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc98600, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf3d7e46, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3cc98600, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x71f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRd32Info.exe", cAlternateFileName="ACRORD~1.EXE")) returned 1 [0147.377] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf66062a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xe07ff0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRd32Res.dll", cAlternateFileName="ACRORD~1.DLL")) returned 1 [0147.378] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdec648c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x1c7f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroSup64.dll", cAlternateFileName="ACROSU~1.DLL")) returned 1 [0147.378] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf6d2df0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xaff0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroTextExtractor.exe", cAlternateFileName="ACROTE~1.EXE")) returned 1 [0147.378] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe2d82cf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x21df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADelRCP.exe", cAlternateFileName="")) returned 1 [0147.378] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x37bc3c75, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x711, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe.Reader.Dependencies.manifest", cAlternateFileName="ADOBER~1.MAN")) returned 1 [0147.378] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe2a15668, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xd87f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.exe", cAlternateFileName="ADOBEC~1.EXE")) returned 1 [0147.378] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdea0236a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x7e1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeLinguistic.dll", cAlternateFileName="ADOBEL~1.DLL")) returned 1 [0147.378] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1f95cdaa, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x45650, dwReserved0=0x0, dwReserved1=0x0, cFileName="adoberfp.dll", cAlternateFileName="")) returned 1 [0147.378] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1758800, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1b58fe2e, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe1758800, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x4ae50, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeXMP.dll", cAlternateFileName="")) returned 1 [0147.378] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc98600, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf876737, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3cc98600, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x4e5df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AGM.dll", cAlternateFileName="")) returned 1 [0147.378] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x36fd7dc6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x6bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="AGMGPUOptIn.ini", cAlternateFileName="AGMGPU~1.INI")) returned 1 [0147.378] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1758800, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1ab2191d, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe1758800, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x426b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ahclient.dll", cAlternateFileName="")) returned 1 [0147.378] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xda8e3fa2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x116c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="AIDE.dll", cAlternateFileName="")) returned 1 [0147.378] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xde91d4f2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xde91d4f2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xde91d4f2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AIR", cAlternateFileName="")) returned 1 [0147.379] GetProcessHeap () returned 0x8a0000 [0147.379] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a90058 [0147.379] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AIR\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xde91d4f2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xde91d4f2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xde91d4f2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993800 [0147.379] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xde91d4f2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xde91d4f2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xde91d4f2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.380] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a672c00, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xde91d4f2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3a672c00, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x3adf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.dll", cAlternateFileName="")) returned 1 [0147.380] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a672c00, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xde91d4f2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3a672c00, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x3adf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.dll", cAlternateFileName="")) returned 0 [0147.380] FindClose (in: hFindFile=0x993800 | out: hFindFile=0x993800) returned 1 [0147.380] GetProcessHeap () returned 0x8a0000 [0147.380] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a90058 | out: hHeap=0x8a0000) returned 1 [0147.380] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x37a46528, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x152a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="arh.exe", cAlternateFileName="")) returned 1 [0147.380] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a672c00, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdecd6f88, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3a672c00, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x309f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXE8SharedExpat.dll", cAlternateFileName="AXE8SH~1.DLL")) returned 1 [0147.380] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a672c00, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xded23451, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3a672c00, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x989f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXSLE.dll", cAlternateFileName="")) returned 1 [0147.380] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf89c98d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x1d1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIB.dll", cAlternateFileName="")) returned 1 [0147.380] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf89c98d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x269f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIBUtils.dll", cAlternateFileName="")) returned 1 [0147.380] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352a2928, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xde9b5e59, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xde9b5e59, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Browser", cAlternateFileName="")) returned 1 [0147.380] GetProcessHeap () returned 0x8a0000 [0147.380] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a90058 [0147.380] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352a2928, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xde9b5e59, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xde9b5e59, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0147.381] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352a2928, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xde9b5e59, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xde9b5e59, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.381] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xde9b5e59, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x3adf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.dll", cAlternateFileName="")) returned 1 [0147.381] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18d7a4f3, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xdaa61867, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdaa61867, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WCChromeExtn", cAlternateFileName="WCCHRO~1")) returned 1 [0147.382] GetProcessHeap () returned 0x8a0000 [0147.382] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0147.382] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18d7a4f3, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xdaa61867, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdaa61867, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0147.382] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18d7a4f3, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xdaa61867, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdaa61867, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.382] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x718de000, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x1923f03a, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x718de000, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0147.382] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb0b100, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaa879d8, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcbb0b100, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x235f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WCChromeNativeMessagingHost.exe", cAlternateFileName="WCCHRO~1.EXE")) returned 1 [0147.382] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb0b100, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaa879d8, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcbb0b100, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x235f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WCChromeNativeMessagingHost.exe", cAlternateFileName="WCCHRO~1.EXE")) returned 0 [0147.382] FindClose (in: hFindFile=0x9935c0 | out: hFindFile=0x9935c0) returned 1 [0147.382] GetProcessHeap () returned 0x8a0000 [0147.382] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0147.382] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18d7a4f3, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xdaa61867, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdaa61867, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WCChromeExtn", cAlternateFileName="WCCHRO~1")) returned 0 [0147.382] FindClose (in: hFindFile=0x9939c0 | out: hFindFile=0x9939c0) returned 1 [0147.383] GetProcessHeap () returned 0x8a0000 [0147.383] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a90058 | out: hHeap=0x8a0000) returned 1 [0147.383] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdec3e62f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x35200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccme_asym.dll", cAlternateFileName="CCME_A~1.DLL")) returned 1 [0147.383] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe2a3b8a6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x62c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccme_base.dll", cAlternateFileName="CCME_B~1.DLL")) returned 1 [0147.383] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdb1160cd, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x5cc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccme_base_non_fips.dll", cAlternateFileName="CCME_B~2.DLL")) returned 1 [0147.384] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdecb0d47, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x7b200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccme_ecc.dll", cAlternateFileName="")) returned 1 [0147.384] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72bf0d00, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x191f2bd5, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x72bf0d00, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x2d9d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Click on 'Change' to select default PDF handler.pdf", cAlternateFileName="CLICKO~1.PDF")) returned 1 [0147.384] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf9352cd, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x2cabf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoolType.dll", cAlternateFileName="")) returned 1 [0147.384] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdec648c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x35600, dwReserved0=0x0, dwReserved1=0x0, cFileName="cryptocme.dll", cAlternateFileName="CRYPTO~1.DLL")) returned 1 [0147.384] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe2a61b10, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xb74, dwReserved0=0x0, dwReserved1=0x0, cFileName="cryptocme.sig", cAlternateFileName="CRYPTO~1.SIG")) returned 1 [0147.384] GetProcessHeap () returned 0x8a0000 [0147.385] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a90058 [0147.385] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3626e649, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3626e649, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3626e649, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0147.386] GetProcessHeap () returned 0x8a0000 [0147.386] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0147.386] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3626e649, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3626e649, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x362948a6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0147.387] GetProcessHeap () returned 0x8a0000 [0147.387] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0147.387] GetProcessHeap () returned 0x8a0000 [0147.387] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a90058 | out: hHeap=0x8a0000) returned 1 [0147.387] GetProcessHeap () returned 0x8a0000 [0147.387] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a90058 [0147.387] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b83e876, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x1b83e876, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x1b83e876, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0147.388] GetProcessHeap () returned 0x8a0000 [0147.388] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a90058 | out: hHeap=0x8a0000) returned 1 [0147.388] GetProcessHeap () returned 0x8a0000 [0147.388] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a90058 [0147.388] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x362483dd, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x362483dd, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x362483dd, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993800 [0147.389] GetProcessHeap () returned 0x8a0000 [0147.389] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0147.389] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x362483dd, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x362483dd, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x362483dd, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0147.389] GetProcessHeap () returned 0x8a0000 [0147.389] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0147.389] GetProcessHeap () returned 0x8a0000 [0147.389] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a90058 | out: hHeap=0x8a0000) returned 1 [0147.390] GetProcessHeap () returned 0x8a0000 [0147.390] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a90058 [0147.390] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cfcd37, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cfcd37, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33cfcd37, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0147.390] GetProcessHeap () returned 0x8a0000 [0147.390] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0147.390] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale\\en_US\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cfcd37, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cfcd37, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389c5d29, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0147.391] GetProcessHeap () returned 0x8a0000 [0147.391] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0147.391] GetProcessHeap () returned 0x8a0000 [0147.391] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a90058 | out: hHeap=0x8a0000) returned 1 [0147.391] GetProcessHeap () returned 0x8a0000 [0147.391] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a90058 [0147.391] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33e2e03c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2e1b623, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2e1b623, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993800 [0147.394] GetProcessHeap () returned 0x8a0000 [0147.394] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0147.394] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x342a67ce, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x342cca47, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x342cca47, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0147.396] GetProcessHeap () returned 0x8a0000 [0147.396] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0147.539] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\PMP\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x342cca47, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x342cca47, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x342f2cdf, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0147.583] GetProcessHeap () returned 0x8a0000 [0147.588] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0147.589] GetProcessHeap () returned 0x8a0000 [0147.589] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0147.589] GetProcessHeap () returned 0x8a0000 [0147.589] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0147.589] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x389535d8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x389535d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389535d8, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0147.774] GetProcessHeap () returned 0x8a0000 [0147.774] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0147.774] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x389535d8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x38979854, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x38979854, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0147.775] GetProcessHeap () returned 0x8a0000 [0147.776] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ad4090 [0147.776] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38979854, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3899fa98, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3899fa98, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0147.776] GetProcessHeap () returned 0x8a0000 [0147.776] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ad4090 | out: hHeap=0x8a0000) returned 1 [0147.776] GetProcessHeap () returned 0x8a0000 [0147.777] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0147.777] GetProcessHeap () returned 0x8a0000 [0147.777] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0147.778] GetProcessHeap () returned 0x8a0000 [0147.778] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0147.779] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3425a337, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3425a337, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3425a337, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0147.780] GetProcessHeap () returned 0x8a0000 [0147.780] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0147.781] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia\\MPP\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3425a337, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x1bbd210b, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x1bbd210b, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0147.782] GetProcessHeap () returned 0x8a0000 [0147.782] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0147.784] GetProcessHeap () returned 0x8a0000 [0147.784] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0147.784] GetProcessHeap () returned 0x8a0000 [0147.784] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0147.784] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35209fae, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdec8aaee, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec8aaee, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0147.786] GetProcessHeap () returned 0x8a0000 [0147.786] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0147.786] GetProcessHeap () returned 0x8a0000 [0147.786] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a90058 | out: hHeap=0x8a0000) returned 1 [0147.787] GetProcessHeap () returned 0x8a0000 [0147.787] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a90058 [0147.787] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34102da0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdfc09f77, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdfc09f77, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0147.789] GetProcessHeap () returned 0x8a0000 [0147.789] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0147.789] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34102da0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x34102da0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x34102da0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0147.790] GetProcessHeap () returned 0x8a0000 [0147.790] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0147.790] GetProcessHeap () returned 0x8a0000 [0147.790] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a90058 | out: hHeap=0x8a0000) returned 1 [0147.791] GetProcessHeap () returned 0x8a0000 [0147.791] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a90058 [0147.791] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387172c5, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x38907108, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x38907108, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993800 [0147.797] GetProcessHeap () returned 0x8a0000 [0147.797] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a90058 | out: hHeap=0x8a0000) returned 1 [0147.797] GetProcessHeap () returned 0x8a0000 [0147.797] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a90058 [0147.797] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\UIThemes\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19218da3, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x19218da3, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x19218da3, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0147.799] GetProcessHeap () returned 0x8a0000 [0147.799] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a90058 | out: hHeap=0x8a0000) returned 1 [0147.799] GetProcessHeap () returned 0x8a0000 [0147.799] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3a90058 [0147.799] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\*", lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4008adde, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfe9798e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0xfe9798e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9935c0 [0147.800] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4008adde, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfe9798e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0xfe9798e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.800] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xb58bb396, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resource0", cAlternateFileName="RESOUR~1")) returned 1 [0147.800] GetProcessHeap () returned 0x8a0000 [0147.800] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3694098 [0147.800] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\*", lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xb58bb396, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993700 [0147.805] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xb58bb396, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.805] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee66f38b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee66f38b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xf5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_uris.js", cAlternateFileName="BASE_U~1.JS")) returned 1 [0147.805] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee66f38b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee66f38b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xd2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0147.805] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee66f38b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee66f38b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1dcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="init.js", cAlternateFileName="")) returned 1 [0147.805] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee66f38b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee66f38b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4381, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugins.js", cAlternateFileName="")) returned 1 [0147.806] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee66f38b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee66f38b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="static", cAlternateFileName="")) returned 1 [0147.806] GetProcessHeap () returned 0x8a0000 [0147.806] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ac0068 [0147.806] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\*", lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee66f38b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993600 [0147.807] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee66f38b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.807] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x369ad2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0147.807] GetProcessHeap () returned 0x8a0000 [0147.807] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ad4090 [0147.808] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x369ad2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0148.044] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x369ad2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.045] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="app", cAlternateFileName="")) returned 1 [0148.045] GetProcessHeap () returned 0x8a0000 [0148.045] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ae4098 [0148.045] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\app\\*", lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0148.046] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.046] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dev", cAlternateFileName="")) returned 1 [0148.046] GetProcessHeap () returned 0x8a0000 [0148.047] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c80b8 [0148.047] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\app\\dev\\*", lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1, cFileName=".", cAlternateFileName="")) returned 0x993640 [0148.048] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1, cFileName="..", cAlternateFileName="")) returned 1 [0148.048] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x369ad2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x369ad2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1, cFileName="cef", cAlternateFileName="")) returned 1 [0148.048] GetProcessHeap () returned 0x8a0000 [0148.048] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0148.048] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\app\\dev\\cef\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x369ad2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x369ad2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0148.049] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x369ad2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x369ad2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.049] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x369ad2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x369ad2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.049] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0148.049] GetProcessHeap () returned 0x8a0000 [0148.049] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0148.049] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1, cFileName="libs", cAlternateFileName="")) returned 1 [0148.049] GetProcessHeap () returned 0x8a0000 [0148.049] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0148.050] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\app\\dev\\libs\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0148.053] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.053] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.053] FindClose (in: hFindFile=0x993940 | out: hFindFile=0x993940) returned 1 [0148.053] GetProcessHeap () returned 0x8a0000 [0148.053] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0148.053] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1, cFileName="libs", cAlternateFileName="")) returned 0 [0148.053] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0148.053] GetProcessHeap () returned 0x8a0000 [0148.053] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c80b8 | out: hHeap=0x8a0000) returned 1 [0148.053] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dev", cAlternateFileName="")) returned 0 [0148.053] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0148.054] GetProcessHeap () returned 0x8a0000 [0148.054] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ae4098 | out: hHeap=0x8a0000) returned 1 [0148.055] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="core", cAlternateFileName="")) returned 1 [0148.056] GetProcessHeap () returned 0x8a0000 [0148.056] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ae4098 [0148.056] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\core\\*", lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0148.058] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.058] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dev", cAlternateFileName="")) returned 1 [0148.058] GetProcessHeap () returned 0x8a0000 [0148.058] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c80b8 [0148.059] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\core\\dev\\*", lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0148.059] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.059] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cef", cAlternateFileName="")) returned 1 [0148.060] GetProcessHeap () returned 0x8a0000 [0148.060] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0148.060] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\core\\dev\\cef\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0148.060] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.060] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.060] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0148.060] GetProcessHeap () returned 0x8a0000 [0148.060] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0148.060] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="libs", cAlternateFileName="")) returned 1 [0148.061] GetProcessHeap () returned 0x8a0000 [0148.061] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0148.061] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\core\\dev\\libs\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0148.061] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.061] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.061] FindClose (in: hFindFile=0x993940 | out: hFindFile=0x993940) returned 1 [0148.061] GetProcessHeap () returned 0x8a0000 [0148.061] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0148.061] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="libs", cAlternateFileName="")) returned 0 [0148.061] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0148.061] GetProcessHeap () returned 0x8a0000 [0148.062] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c80b8 | out: hHeap=0x8a0000) returned 1 [0148.062] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dev", cAlternateFileName="")) returned 0 [0148.062] FindClose (in: hFindFile=0x993a00 | out: hFindFile=0x993a00) returned 1 [0148.062] GetProcessHeap () returned 0x8a0000 [0148.062] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ae4098 | out: hHeap=0x8a0000) returned 1 [0148.063] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="files", cAlternateFileName="")) returned 1 [0148.063] GetProcessHeap () returned 0x8a0000 [0148.063] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ae4098 [0148.063] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\files\\*", lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0148.064] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.064] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dev", cAlternateFileName="")) returned 1 [0148.065] GetProcessHeap () returned 0x8a0000 [0148.065] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c80b8 [0148.066] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\files\\dev\\*", lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0148.066] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.066] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cef", cAlternateFileName="")) returned 1 [0148.066] GetProcessHeap () returned 0x8a0000 [0148.066] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0148.067] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\files\\dev\\cef\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0148.067] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.067] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.067] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0148.067] GetProcessHeap () returned 0x8a0000 [0148.067] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0148.067] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="libs", cAlternateFileName="")) returned 1 [0148.068] GetProcessHeap () returned 0x8a0000 [0148.068] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0148.068] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\files\\dev\\libs\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0148.068] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.068] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.068] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0148.068] GetProcessHeap () returned 0x8a0000 [0148.068] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0148.068] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="libs", cAlternateFileName="")) returned 0 [0148.069] FindClose (in: hFindFile=0x993940 | out: hFindFile=0x993940) returned 1 [0148.069] GetProcessHeap () returned 0x8a0000 [0148.069] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c80b8 | out: hHeap=0x8a0000) returned 1 [0148.069] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dev", cAlternateFileName="")) returned 0 [0148.069] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0148.069] GetProcessHeap () returned 0x8a0000 [0148.069] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ae4098 | out: hHeap=0x8a0000) returned 1 [0148.070] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x9ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-cef-mac.css", cAlternateFileName="MAIN-C~2.CSS")) returned 1 [0148.070] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x9d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-cef-ui-theme.css", cAlternateFileName="MAIN-C~3.CSS")) returned 1 [0148.070] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x369ad2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x369ad2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x263a, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-cef-win.css", cAlternateFileName="MAIN-C~4.CSS")) returned 1 [0148.070] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x2169, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-cef-win8.css", cAlternateFileName="MAIN-C~1.CSS")) returned 1 [0148.071] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xcb15, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-cef.css", cAlternateFileName="")) returned 1 [0148.071] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x22514, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-high-contrast.css", cAlternateFileName="MAIN-H~1.CSS")) returned 1 [0148.071] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x28f1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0148.071] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x28f1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 0 [0148.071] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0148.071] GetProcessHeap () returned 0x8a0000 [0148.071] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ad4090 | out: hHeap=0x8a0000) returned 1 [0148.072] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0148.072] GetProcessHeap () returned 0x8a0000 [0148.072] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ad4090 [0148.072] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0148.074] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.076] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1a85, dwReserved0=0x0, dwReserved1=0x0, cFileName="A12_Spinner.gif", cAlternateFileName="A12_SP~4.GIF")) returned 1 [0148.076] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3b29, dwReserved0=0x0, dwReserved1=0x0, cFileName="A12_Spinner_2x.gif", cAlternateFileName="A12_SP~3.GIF")) returned 1 [0148.076] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1a3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="A12_Spinner_int.gif", cAlternateFileName="A12_SP~1.GIF")) returned 1 [0148.076] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4038, dwReserved0=0x0, dwReserved1=0x0, cFileName="A12_Spinner_int_2x.gif", cAlternateFileName="A12_SP~2.GIF")) returned 1 [0148.076] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xe7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="adc_logo.png", cAlternateFileName="")) returned 1 [0148.076] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x22c, dwReserved0=0x0, dwReserved1=0x0, cFileName="adobe_spinner.gif", cAlternateFileName="ADOBE_~1.GIF")) returned 1 [0148.076] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x12f, dwReserved0=0x0, dwReserved1=0x0, cFileName="adobe_spinner_mini.gif", cAlternateFileName="ADOBE_~2.GIF")) returned 1 [0148.076] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x12a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="apple-touch-icon-114x114-precomposed.png", cAlternateFileName="APPLE-~2.PNG")) returned 1 [0148.077] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x235b, dwReserved0=0x0, dwReserved1=0x0, cFileName="apple-touch-icon-144x144-precomposed.png", cAlternateFileName="APPLE-~1.PNG")) returned 1 [0148.077] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xac7, dwReserved0=0x0, dwReserved1=0x0, cFileName="apple-touch-icon-57x57-precomposed.png", cAlternateFileName="APPLE-~3.PNG")) returned 1 [0148.077] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xe8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="apple-touch-icon-72x72-precomposed.png", cAlternateFileName="APPLE-~4.PNG")) returned 1 [0148.077] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x84a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccloud.png", cAlternateFileName="")) returned 1 [0148.077] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee66f38b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee66f38b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3181, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccloud_retina.png", cAlternateFileName="CCLOUD~1.PNG")) returned 1 [0148.078] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x132, dwReserved0=0x0, dwReserved1=0x0, cFileName="close_x.png", cAlternateFileName="")) returned 1 [0148.078] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x7394, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_icons.png", cAlternateFileName="CORE_I~2.PNG")) returned 1 [0148.078] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee66f38b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x104ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_icons_retina.png", cAlternateFileName="CORE_I~1.PNG")) returned 1 [0148.078] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x44b, dwReserved0=0x0, dwReserved1=0x0, cFileName="dd_arrow_small.png", cAlternateFileName="DD_ARR~1.PNG")) returned 1 [0148.078] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x209c, dwReserved0=0x0, dwReserved1=0x0, cFileName="favicon.ico", cAlternateFileName="")) returned 1 [0148.078] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="file_types", cAlternateFileName="FILE_T~1")) returned 1 [0148.078] GetProcessHeap () returned 0x8a0000 [0148.078] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ae4098 [0148.078] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\*", lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0148.367] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.367] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6358, dwReserved0=0x0, dwReserved1=0x0, cFileName="aic_file_icons.png", cAlternateFileName="AIC_FI~2.PNG")) returned 1 [0148.368] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x74ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="aic_file_icons_retina_thumb.png", cAlternateFileName="AIC_FI~1.PNG")) returned 1 [0148.368] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x28f, dwReserved0=0x0, dwReserved1=0x0, cFileName="cloud_icon.png", cAlternateFileName="CLOUD_~1.PNG")) returned 1 [0148.368] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi_contrast", cAlternateFileName="HI_CON~1")) returned 1 [0148.368] GetProcessHeap () returned 0x8a0000 [0148.368] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c80b8 [0148.369] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\*", lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0148.377] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.377] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2220, dwReserved0=0x0, dwReserved1=0x0, cFileName="aic_file_icons_hiContrast_bow.png", cAlternateFileName="AIC_FI~4.PNG")) returned 1 [0148.377] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x294b, dwReserved0=0x0, dwReserved1=0x0, cFileName="aic_file_icons_hiContrast_wob.png", cAlternateFileName="AIC_FI~1.PNG")) returned 1 [0148.377] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5f96, dwReserved0=0x0, dwReserved1=0x0, cFileName="aic_file_icons_highcontrast.png", cAlternateFileName="AIC_FI~2.PNG")) returned 1 [0148.377] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3195, dwReserved0=0x0, dwReserved1=0x0, cFileName="aic_file_icons_retina_thumb_highContrast_bow.png", cAlternateFileName="AI6010~1.PNG")) returned 1 [0148.378] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3190, dwReserved0=0x0, dwReserved1=0x0, cFileName="aic_file_icons_retina_thumb_highContrast_wob.png", cAlternateFileName="AIC_FI~3.PNG")) returned 1 [0148.378] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3190, dwReserved0=0x0, dwReserved1=0x0, cFileName="aic_file_icons_retina_thumb_highContrast_wob.png", cAlternateFileName="AIC_FI~3.PNG")) returned 0 [0148.379] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0148.379] GetProcessHeap () returned 0x8a0000 [0148.380] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c80b8 | out: hHeap=0x8a0000) returned 1 [0148.380] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0148.380] GetProcessHeap () returned 0x8a0000 [0148.380] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c80b8 [0148.380] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\*", lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0148.389] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.389] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0148.389] GetProcessHeap () returned 0x8a0000 [0148.389] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0148.389] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993800 [0148.392] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.392] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6004, dwReserved0=0x0, dwReserved1=0x0, cFileName="aic_file_icons.png", cAlternateFileName="AIC_FI~2.PNG")) returned 1 [0148.392] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x77ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="aic_file_icons_retina_thumb.png", cAlternateFileName="AIC_FI~1.PNG")) returned 1 [0148.393] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x28f, dwReserved0=0x0, dwReserved1=0x0, cFileName="cloud_icon.png", cAlternateFileName="CLOUD_~1.PNG")) returned 1 [0148.393] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x28f, dwReserved0=0x0, dwReserved1=0x0, cFileName="cloud_icon.png", cAlternateFileName="CLOUD_~1.PNG")) returned 0 [0148.393] FindClose (in: hFindFile=0x993800 | out: hFindFile=0x993800) returned 1 [0148.394] GetProcessHeap () returned 0x8a0000 [0148.394] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0148.394] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0 [0148.394] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0148.394] GetProcessHeap () returned 0x8a0000 [0148.394] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c80b8 | out: hHeap=0x8a0000) returned 1 [0148.394] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 0 [0148.394] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0148.394] GetProcessHeap () returned 0x8a0000 [0148.394] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ae4098 | out: hHeap=0x8a0000) returned 1 [0148.395] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi_contrast", cAlternateFileName="HI_CON~1")) returned 1 [0148.395] GetProcessHeap () returned 0x8a0000 [0148.395] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ae4098 [0148.396] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\*", lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993800 [0148.411] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.411] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2849, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_icons_hiContrast_bow.png", cAlternateFileName="CORE_I~3.PNG")) returned 1 [0148.411] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1e12, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_icons_hiContrast_wob.png", cAlternateFileName="CORE_I~4.PNG")) returned 1 [0148.411] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2fe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_icons_highcontrast.png", cAlternateFileName="COCE4C~1.PNG")) returned 1 [0148.411] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x67be, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_icons_highcontrast_retina.png", cAlternateFileName="CORE_I~2.PNG")) returned 1 [0148.411] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xa759, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_icons__retina_hiContrast_bow.png", cAlternateFileName="COE106~1.PNG")) returned 1 [0148.411] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xad76, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_icons__retina_hiContrast_wob.png", cAlternateFileName="CORE_I~1.PNG")) returned 1 [0148.411] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xad76, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_icons__retina_hiContrast_wob.png", cAlternateFileName="CORE_I~1.PNG")) returned 0 [0148.411] FindClose (in: hFindFile=0x993800 | out: hFindFile=0x993800) returned 1 [0148.412] GetProcessHeap () returned 0x8a0000 [0148.412] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ae4098 | out: hHeap=0x8a0000) returned 1 [0148.412] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1185, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations.png", cAlternateFileName="ILLUST~2.PNG")) returned 1 [0148.413] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2890, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations_retina.png", cAlternateFileName="ILLUST~1.PNG")) returned 1 [0148.413] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ind_prog.gif", cAlternateFileName="")) returned 1 [0148.413] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x238, dwReserved0=0x0, dwReserved1=0x0, cFileName="japanese_over.png", cAlternateFileName="JAPANE~1.PNG")) returned 1 [0148.413] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="large_trefoil.png", cAlternateFileName="LARGE_~1.PNG")) returned 1 [0148.413] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x10ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="large_trefoil_2x.png", cAlternateFileName="LARGE_~2.PNG")) returned 1 [0148.413] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1b2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo_retina.png", cAlternateFileName="LOGO_R~1.PNG")) returned 1 [0148.413] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x469, dwReserved0=0x0, dwReserved1=0x0, cFileName="progress-indeterminate.gif", cAlternateFileName="PROGRE~2.GIF")) returned 1 [0148.413] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee66f38b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee66f38b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x392e, dwReserved0=0x0, dwReserved1=0x0, cFileName="progress_spinner.gif", cAlternateFileName="PROGRE~1.GIF")) returned 1 [0148.413] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x927b, dwReserved0=0x0, dwReserved1=0x0, cFileName="progress_spinner2x.gif", cAlternateFileName="PROGRE~4.GIF")) returned 1 [0148.413] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2a30, dwReserved0=0x0, dwReserved1=0x0, cFileName="progress_spinner_dark.gif", cAlternateFileName="PROGRE~3.GIF")) returned 1 [0148.413] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6aa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="progress_spinner_dark2x.gif", cAlternateFileName="PRBC72~1.GIF")) returned 1 [0148.413] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="RHP_icons.png", cAlternateFileName="RHP_IC~1.PNG")) returned 1 [0148.413] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="RHP_icons_2x.png", cAlternateFileName="RHP_IC~2.PNG")) returned 1 [0148.414] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="selection-actions.png", cAlternateFileName="SELECT~2.PNG")) returned 1 [0148.414] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xe0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="selection-actions2x.png", cAlternateFileName="SELECT~1.PNG")) returned 1 [0148.414] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0148.414] GetProcessHeap () returned 0x8a0000 [0148.414] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ae4098 [0148.414] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\*", lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0148.416] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.416] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0148.417] GetProcessHeap () returned 0x8a0000 [0148.417] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c80b8 [0148.417] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\*", lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0148.421] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.422] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1a85, dwReserved0=0x0, dwReserved1=0x0, cFileName="A12_Spinner.gif", cAlternateFileName="A12_SP~4.GIF")) returned 1 [0148.422] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3b29, dwReserved0=0x0, dwReserved1=0x0, cFileName="A12_Spinner_2x.gif", cAlternateFileName="A12_SP~3.GIF")) returned 1 [0148.423] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1a3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="A12_Spinner_int.gif", cAlternateFileName="A12_SP~1.GIF")) returned 1 [0148.423] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4038, dwReserved0=0x0, dwReserved1=0x0, cFileName="A12_Spinner_int_2x.gif", cAlternateFileName="A12_SP~2.GIF")) returned 1 [0148.423] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xe7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="adc_logo.png", cAlternateFileName="")) returned 1 [0148.423] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x22c, dwReserved0=0x0, dwReserved1=0x0, cFileName="adobe_spinner.gif", cAlternateFileName="ADOBE_~1.GIF")) returned 1 [0148.423] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x12f, dwReserved0=0x0, dwReserved1=0x0, cFileName="adobe_spinner_mini.gif", cAlternateFileName="ADOBE_~2.GIF")) returned 1 [0148.423] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x12a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="apple-touch-icon-114x114-precomposed.png", cAlternateFileName="APPLE-~2.PNG")) returned 1 [0148.423] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x235b, dwReserved0=0x0, dwReserved1=0x0, cFileName="apple-touch-icon-144x144-precomposed.png", cAlternateFileName="APPLE-~1.PNG")) returned 1 [0148.423] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xac7, dwReserved0=0x0, dwReserved1=0x0, cFileName="apple-touch-icon-57x57-precomposed.png", cAlternateFileName="APPLE-~3.PNG")) returned 1 [0148.423] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xe8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="apple-touch-icon-72x72-precomposed.png", cAlternateFileName="APPLE-~4.PNG")) returned 1 [0148.423] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x84a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccloud.png", cAlternateFileName="")) returned 1 [0148.423] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3181, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccloud_retina.png", cAlternateFileName="CCLOUD~1.PNG")) returned 1 [0148.424] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x132, dwReserved0=0x0, dwReserved1=0x0, cFileName="close_x.png", cAlternateFileName="")) returned 1 [0148.424] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x7068, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_icons.png", cAlternateFileName="CORE_I~2.PNG")) returned 1 [0148.424] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xfdf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_icons_retina.png", cAlternateFileName="CORE_I~1.PNG")) returned 1 [0148.424] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x44b, dwReserved0=0x0, dwReserved1=0x0, cFileName="dd_arrow_small.png", cAlternateFileName="DD_ARR~1.PNG")) returned 1 [0148.424] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x209c, dwReserved0=0x0, dwReserved1=0x0, cFileName="favicon.ico", cAlternateFileName="")) returned 1 [0148.424] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1185, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations.png", cAlternateFileName="ILLUST~2.PNG")) returned 1 [0148.424] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2890, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations_retina.png", cAlternateFileName="ILLUST~1.PNG")) returned 1 [0148.424] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ind_prog.gif", cAlternateFileName="")) returned 1 [0148.424] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x238, dwReserved0=0x0, dwReserved1=0x0, cFileName="japanese_over.png", cAlternateFileName="JAPANE~1.PNG")) returned 1 [0148.424] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="large_trefoil.png", cAlternateFileName="LARGE_~1.PNG")) returned 1 [0148.424] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x10ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="large_trefoil_2x.png", cAlternateFileName="LARGE_~2.PNG")) returned 1 [0148.425] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1b2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo_retina.png", cAlternateFileName="LOGO_R~1.PNG")) returned 1 [0148.425] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x469, dwReserved0=0x0, dwReserved1=0x0, cFileName="progress-indeterminate.gif", cAlternateFileName="PROGRE~2.GIF")) returned 1 [0148.425] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x392e, dwReserved0=0x0, dwReserved1=0x0, cFileName="progress_spinner.gif", cAlternateFileName="PROGRE~1.GIF")) returned 1 [0148.425] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x927b, dwReserved0=0x0, dwReserved1=0x0, cFileName="progress_spinner2x.gif", cAlternateFileName="PROGRE~4.GIF")) returned 1 [0148.425] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2a30, dwReserved0=0x0, dwReserved1=0x0, cFileName="progress_spinner_dark.gif", cAlternateFileName="PROGRE~3.GIF")) returned 1 [0148.425] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6aa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="progress_spinner_dark2x.gif", cAlternateFileName="PRBC72~1.GIF")) returned 1 [0148.425] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="RHP_icons.png", cAlternateFileName="RHP_IC~1.PNG")) returned 1 [0148.425] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="RHP_icons_2x.png", cAlternateFileName="RHP_IC~2.PNG")) returned 1 [0148.425] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x616, dwReserved0=0x0, dwReserved1=0x0, cFileName="selection-actions.png", cAlternateFileName="SELECT~2.PNG")) returned 1 [0148.425] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xbf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="selection-actions2x.png", cAlternateFileName="SELECT~1.PNG")) returned 1 [0148.425] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xbf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="selection-actions2x.png", cAlternateFileName="SELECT~1.PNG")) returned 0 [0148.425] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0148.426] GetProcessHeap () returned 0x8a0000 [0148.426] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c80b8 | out: hHeap=0x8a0000) returned 1 [0148.426] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0 [0148.426] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0148.426] GetProcessHeap () returned 0x8a0000 [0148.426] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ae4098 | out: hHeap=0x8a0000) returned 1 [0148.426] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="win-scrollbar", cAlternateFileName="WIN-SC~1")) returned 1 [0148.426] GetProcessHeap () returned 0x8a0000 [0148.426] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ae4098 [0148.427] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\*", lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0148.442] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.442] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x129, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-down.png", cAlternateFileName="ARROW-~3.PNG")) returned 1 [0148.442] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x129, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-left.png", cAlternateFileName="ARROW-~2.PNG")) returned 1 [0148.442] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x12a, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-right.png", cAlternateFileName="ARROW-~1.PNG")) returned 1 [0148.443] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x128, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-up.png", cAlternateFileName="")) returned 1 [0148.443] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x107, dwReserved0=0x0, dwReserved1=0x0, cFileName="hscroll-thumb.png", cAlternateFileName="HSCROL~1.PNG")) returned 1 [0148.443] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0148.443] GetProcessHeap () returned 0x8a0000 [0148.443] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c80b8 [0148.443] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\*", lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0148.445] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.445] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0148.445] GetProcessHeap () returned 0x8a0000 [0148.445] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0148.445] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0148.448] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.448] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x129, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-down.png", cAlternateFileName="ARROW-~3.PNG")) returned 1 [0148.448] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x129, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-left.png", cAlternateFileName="ARROW-~2.PNG")) returned 1 [0148.448] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x12a, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-right.png", cAlternateFileName="ARROW-~1.PNG")) returned 1 [0148.448] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x128, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-up.png", cAlternateFileName="")) returned 1 [0148.448] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x107, dwReserved0=0x0, dwReserved1=0x0, cFileName="hscroll-thumb.png", cAlternateFileName="HSCROL~1.PNG")) returned 1 [0148.448] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x114, dwReserved0=0x0, dwReserved1=0x0, cFileName="vscroll-thumb.png", cAlternateFileName="VSCROL~1.PNG")) returned 1 [0148.448] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x114, dwReserved0=0x0, dwReserved1=0x0, cFileName="vscroll-thumb.png", cAlternateFileName="VSCROL~1.PNG")) returned 0 [0148.448] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0148.449] GetProcessHeap () returned 0x8a0000 [0148.449] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0148.449] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0 [0148.449] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0148.449] GetProcessHeap () returned 0x8a0000 [0148.449] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c80b8 | out: hHeap=0x8a0000) returned 1 [0148.449] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x114, dwReserved0=0x0, dwReserved1=0x0, cFileName="vscroll-thumb.png", cAlternateFileName="VSCROL~1.PNG")) returned 1 [0148.449] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x114, dwReserved0=0x0, dwReserved1=0x0, cFileName="vscroll-thumb.png", cAlternateFileName="VSCROL~1.PNG")) returned 0 [0148.449] FindClose (in: hFindFile=0x9939c0 | out: hFindFile=0x9939c0) returned 1 [0148.450] GetProcessHeap () returned 0x8a0000 [0148.450] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ae4098 | out: hHeap=0x8a0000) returned 1 [0148.589] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="win8-scrollbar", cAlternateFileName="WIN8-S~1")) returned 1 [0148.592] GetProcessHeap () returned 0x8a0000 [0148.592] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ae4098 [0148.620] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\*", lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0148.833] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.833] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-down-pressed.gif", cAlternateFileName="ARFA56~1.GIF")) returned 1 [0148.833] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x42, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-down.gif", cAlternateFileName="ARROW-~4.GIF")) returned 1 [0148.833] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-left-pressed.gif", cAlternateFileName="AR60F1~1.GIF")) returned 1 [0148.833] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-left.gif", cAlternateFileName="AR9564~1.GIF")) returned 1 [0148.833] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-right-pressed.gif", cAlternateFileName="ARROW-~3.GIF")) returned 1 [0148.834] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x40, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-right.gif", cAlternateFileName="ARROW-~2.GIF")) returned 1 [0148.834] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x39, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-up-pressed.gif", cAlternateFileName="ARROW-~1.GIF")) returned 1 [0148.834] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x39, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-up.gif", cAlternateFileName="")) returned 1 [0148.834] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0148.834] GetProcessHeap () returned 0x8a0000 [0148.834] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c80b8 [0148.835] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\*", lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0148.836] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.836] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0148.836] GetProcessHeap () returned 0x8a0000 [0148.836] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0148.836] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993800 [0148.839] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.839] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-down-pressed.gif", cAlternateFileName="ARFA56~1.GIF")) returned 1 [0148.839] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x42, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-down.gif", cAlternateFileName="ARROW-~4.GIF")) returned 1 [0148.839] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-left-pressed.gif", cAlternateFileName="AR60F1~1.GIF")) returned 1 [0148.839] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-left.gif", cAlternateFileName="AR9564~1.GIF")) returned 1 [0148.839] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-right-pressed.gif", cAlternateFileName="ARROW-~3.GIF")) returned 1 [0148.839] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x40, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-right.gif", cAlternateFileName="ARROW-~2.GIF")) returned 1 [0148.839] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x39, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-up-pressed.gif", cAlternateFileName="ARROW-~1.GIF")) returned 1 [0148.839] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x39, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-up.gif", cAlternateFileName="")) returned 1 [0148.839] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x39, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-up.gif", cAlternateFileName="")) returned 0 [0148.839] FindClose (in: hFindFile=0x993800 | out: hFindFile=0x993800) returned 1 [0148.840] GetProcessHeap () returned 0x8a0000 [0148.840] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0148.840] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0 [0148.840] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0148.840] GetProcessHeap () returned 0x8a0000 [0148.840] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c80b8 | out: hHeap=0x8a0000) returned 1 [0148.840] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 0 [0148.840] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0148.840] GetProcessHeap () returned 0x8a0000 [0148.840] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ae4098 | out: hHeap=0x8a0000) returned 1 [0148.842] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="win8-scrollbar", cAlternateFileName="WIN8-S~1")) returned 0 [0148.842] FindClose (in: hFindFile=0x993940 | out: hFindFile=0x993940) returned 1 [0148.842] GetProcessHeap () returned 0x8a0000 [0148.842] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ad4090 | out: hHeap=0x8a0000) returned 1 [0148.842] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0148.842] GetProcessHeap () returned 0x8a0000 [0148.842] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ad4090 [0148.842] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\*", lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993940 [0148.859] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.859] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="app", cAlternateFileName="")) returned 1 [0148.859] GetProcessHeap () returned 0x8a0000 [0148.859] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ae4098 [0148.859] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\*", lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0148.867] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.867] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dev", cAlternateFileName="")) returned 1 [0148.867] GetProcessHeap () returned 0x8a0000 [0148.867] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c80b8 [0148.868] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\*", lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0148.868] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.868] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0148.868] GetProcessHeap () returned 0x8a0000 [0148.868] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0148.868] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0148.871] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.871] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-ae", cAlternateFileName="")) returned 1 [0148.871] GetProcessHeap () returned 0x8a0000 [0148.871] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0148.871] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ar-ae\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0148.873] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.873] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.873] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0148.873] GetProcessHeap () returned 0x8a0000 [0148.873] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0148.873] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1 [0148.873] GetProcessHeap () returned 0x8a0000 [0148.873] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0148.873] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ca-es\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0148.912] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.912] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xeda, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0148.912] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xeda, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0148.912] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0148.912] GetProcessHeap () returned 0x8a0000 [0148.912] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0148.912] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1 [0148.912] GetProcessHeap () returned 0x8a0000 [0148.912] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0148.912] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\cs-cz\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0148.913] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.913] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xed8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0148.913] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xed8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0148.913] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0148.914] GetProcessHeap () returned 0x8a0000 [0148.914] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0148.914] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0148.914] GetProcessHeap () returned 0x8a0000 [0148.914] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0148.914] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\da-dk\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0148.914] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.914] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0148.914] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0148.914] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0148.914] GetProcessHeap () returned 0x8a0000 [0148.914] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0148.915] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0148.915] GetProcessHeap () returned 0x8a0000 [0148.915] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0148.915] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\de-de\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993800 [0148.916] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.916] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xece, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0148.916] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xece, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0148.916] FindClose (in: hFindFile=0x993800 | out: hFindFile=0x993800) returned 1 [0148.916] GetProcessHeap () returned 0x8a0000 [0148.916] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0148.916] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1 [0148.916] GetProcessHeap () returned 0x8a0000 [0148.916] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0148.916] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-ae\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0148.917] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.917] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xdf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0148.917] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xdf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0148.917] FindClose (in: hFindFile=0x993880 | out: hFindFile=0x993880) returned 1 [0148.917] GetProcessHeap () returned 0x8a0000 [0148.917] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0148.917] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0148.917] GetProcessHeap () returned 0x8a0000 [0148.917] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0148.917] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-gb\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0148.918] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.918] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xd79, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0148.918] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xd79, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0148.918] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0148.918] GetProcessHeap () returned 0x8a0000 [0148.918] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0148.918] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1 [0148.919] GetProcessHeap () returned 0x8a0000 [0148.919] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0148.919] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-il\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0148.919] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.920] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xdf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0148.920] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xdf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0148.920] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0148.920] GetProcessHeap () returned 0x8a0000 [0148.920] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0148.920] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0148.920] GetProcessHeap () returned 0x8a0000 [0148.920] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0148.920] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\es-es\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0148.920] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.920] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xecd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0148.920] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xecd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0148.920] FindClose (in: hFindFile=0x993a00 | out: hFindFile=0x993a00) returned 1 [0148.926] GetProcessHeap () returned 0x8a0000 [0148.926] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0148.926] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1 [0148.926] GetProcessHeap () returned 0x8a0000 [0148.926] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0148.926] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\eu-es\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993800 [0148.927] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.927] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0148.927] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0148.927] FindClose (in: hFindFile=0x993800 | out: hFindFile=0x993800) returned 1 [0148.927] GetProcessHeap () returned 0x8a0000 [0148.927] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0148.927] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0148.927] GetProcessHeap () returned 0x8a0000 [0148.927] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0148.928] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fi-fi\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0148.928] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.928] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0148.928] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0148.928] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0148.929] GetProcessHeap () returned 0x8a0000 [0148.929] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0148.929] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0148.929] GetProcessHeap () returned 0x8a0000 [0148.929] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0148.929] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-fr\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0148.930] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.930] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xf0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0148.930] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xf0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0148.930] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0148.930] GetProcessHeap () returned 0x8a0000 [0148.930] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0148.930] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1 [0148.930] GetProcessHeap () returned 0x8a0000 [0148.930] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0148.930] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-ma\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993800 [0148.931] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.931] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xf0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0148.931] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xf0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0148.931] FindClose (in: hFindFile=0x993800 | out: hFindFile=0x993800) returned 1 [0148.931] GetProcessHeap () returned 0x8a0000 [0148.931] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0148.931] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1 [0148.931] GetProcessHeap () returned 0x8a0000 [0148.931] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0148.931] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\he-il\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0148.932] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.932] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.932] FindClose (in: hFindFile=0x993a00 | out: hFindFile=0x993a00) returned 1 [0148.932] GetProcessHeap () returned 0x8a0000 [0148.932] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0148.932] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1 [0148.932] GetProcessHeap () returned 0x8a0000 [0148.932] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0148.932] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hr-hr\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0148.933] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.933] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe93, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0148.933] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe93, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0148.933] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0148.933] GetProcessHeap () returned 0x8a0000 [0148.933] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0148.933] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1 [0148.933] GetProcessHeap () returned 0x8a0000 [0148.933] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0148.933] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hu-hu\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0148.934] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.934] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0148.934] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0148.934] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0148.934] GetProcessHeap () returned 0x8a0000 [0148.934] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0148.934] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0148.934] GetProcessHeap () returned 0x8a0000 [0148.934] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0148.934] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\it-it\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0148.935] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.935] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xeae, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0148.935] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xeae, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0148.935] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0148.935] GetProcessHeap () returned 0x8a0000 [0148.935] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0148.935] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0148.935] GetProcessHeap () returned 0x8a0000 [0148.935] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0148.935] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ja-jp\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0149.097] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.111] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x1003, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.111] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x1003, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.111] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0149.111] GetProcessHeap () returned 0x8a0000 [0149.111] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0149.111] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1 [0149.112] GetProcessHeap () returned 0x8a0000 [0149.135] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0149.135] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ko-kr\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0149.136] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.136] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.136] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.136] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0149.136] GetProcessHeap () returned 0x8a0000 [0149.136] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0149.136] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0149.137] GetProcessHeap () returned 0x8a0000 [0149.137] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0149.137] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nb-no\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0149.137] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.137] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe55, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.137] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe55, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.137] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0149.137] GetProcessHeap () returned 0x8a0000 [0149.137] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0149.137] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0149.138] GetProcessHeap () returned 0x8a0000 [0149.138] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0149.138] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nl-nl\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0149.138] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.138] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe22, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.138] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe22, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.138] FindClose (in: hFindFile=0x993880 | out: hFindFile=0x993880) returned 1 [0149.138] GetProcessHeap () returned 0x8a0000 [0149.138] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0149.138] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1 [0149.138] GetProcessHeap () returned 0x8a0000 [0149.138] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0149.138] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pl-pl\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0149.139] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.139] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xedf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.139] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xedf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.139] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0149.139] GetProcessHeap () returned 0x8a0000 [0149.139] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0149.139] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0149.139] GetProcessHeap () returned 0x8a0000 [0149.139] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0149.139] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pt-br\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0149.140] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.140] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe45, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.140] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe45, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.140] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0149.140] GetProcessHeap () returned 0x8a0000 [0149.140] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0149.140] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1 [0149.140] GetProcessHeap () returned 0x8a0000 [0149.140] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0149.140] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ro-ro\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0149.141] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.141] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xefb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.141] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xefb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.141] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0149.141] GetProcessHeap () returned 0x8a0000 [0149.141] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0149.141] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0149.141] GetProcessHeap () returned 0x8a0000 [0149.141] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0149.141] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\root\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0149.142] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.142] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xdf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.142] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xdf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.142] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0149.142] GetProcessHeap () returned 0x8a0000 [0149.142] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0149.142] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1 [0149.142] GetProcessHeap () returned 0x8a0000 [0149.143] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0149.143] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ru-ru\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0149.143] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.143] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x117d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.143] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x117d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.143] FindClose (in: hFindFile=0x993a00 | out: hFindFile=0x993a00) returned 1 [0149.143] GetProcessHeap () returned 0x8a0000 [0149.143] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0149.143] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1 [0149.143] GetProcessHeap () returned 0x8a0000 [0149.143] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0149.143] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sk-sk\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993800 [0149.144] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.144] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xf1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.144] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xf1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.144] FindClose (in: hFindFile=0x993800 | out: hFindFile=0x993800) returned 1 [0149.144] GetProcessHeap () returned 0x8a0000 [0149.144] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0149.144] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1 [0149.144] GetProcessHeap () returned 0x8a0000 [0149.144] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0149.144] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sl-si\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993800 [0149.145] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.145] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xea5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.145] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xea5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.145] FindClose (in: hFindFile=0x993800 | out: hFindFile=0x993800) returned 1 [0149.146] GetProcessHeap () returned 0x8a0000 [0149.146] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0149.146] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1 [0149.146] GetProcessHeap () returned 0x8a0000 [0149.146] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0149.146] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sl-sl\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0149.146] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.146] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0149.146] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0149.146] GetProcessHeap () returned 0x8a0000 [0149.146] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0149.146] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0149.146] GetProcessHeap () returned 0x8a0000 [0149.146] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0149.146] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sv-se\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993800 [0149.147] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.147] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xde6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.147] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xde6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.147] FindClose (in: hFindFile=0x993800 | out: hFindFile=0x993800) returned 1 [0149.147] GetProcessHeap () returned 0x8a0000 [0149.147] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0149.147] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1 [0149.147] GetProcessHeap () returned 0x8a0000 [0149.147] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0149.147] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\tr-tr\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0149.148] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.148] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xeae, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.148] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xeae, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.148] FindClose (in: hFindFile=0x993a00 | out: hFindFile=0x993a00) returned 1 [0149.148] GetProcessHeap () returned 0x8a0000 [0149.148] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0149.148] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.148] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-ua", cAlternateFileName="")) returned 1 [0149.148] GetProcessHeap () returned 0x8a0000 [0149.148] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0149.148] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\uk-ua\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993800 [0149.149] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.149] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x1361, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.149] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x1361, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.149] FindClose (in: hFindFile=0x993800 | out: hFindFile=0x993800) returned 1 [0149.149] GetProcessHeap () returned 0x8a0000 [0149.149] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0149.149] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1 [0149.149] GetProcessHeap () returned 0x8a0000 [0149.149] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0149.149] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-cn\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0149.149] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.149] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xdb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.149] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xdb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.149] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0149.150] GetProcessHeap () returned 0x8a0000 [0149.150] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0149.150] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1 [0149.150] GetProcessHeap () returned 0x8a0000 [0149.150] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0149.150] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-tw\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0149.150] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.150] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xd82, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.150] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xd82, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.150] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0149.150] GetProcessHeap () returned 0x8a0000 [0149.150] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0149.150] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0 [0149.150] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0149.150] GetProcessHeap () returned 0x8a0000 [0149.150] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.150] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 0 [0149.151] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0149.151] GetProcessHeap () returned 0x8a0000 [0149.151] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c80b8 | out: hHeap=0x8a0000) returned 1 [0149.152] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dev", cAlternateFileName="")) returned 0 [0149.152] FindClose (in: hFindFile=0x9939c0 | out: hFindFile=0x9939c0) returned 1 [0149.152] GetProcessHeap () returned 0x8a0000 [0149.152] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ae4098 | out: hHeap=0x8a0000) returned 1 [0149.152] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="app-api", cAlternateFileName="")) returned 1 [0149.152] GetProcessHeap () returned 0x8a0000 [0149.152] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ae4098 [0149.152] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app-api\\*", lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0149.153] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.153] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dev", cAlternateFileName="")) returned 1 [0149.153] GetProcessHeap () returned 0x8a0000 [0149.153] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0149.154] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app-api\\dev\\*", lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0149.154] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.154] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x100e, dwReserved0=0x0, dwReserved1=0x0, cFileName="app-api.js", cAlternateFileName="")) returned 1 [0149.154] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x100e, dwReserved0=0x0, dwReserved1=0x0, cFileName="app-api.js", cAlternateFileName="")) returned 0 [0149.154] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0149.154] GetProcessHeap () returned 0x8a0000 [0149.154] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0149.154] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dev", cAlternateFileName="")) returned 0 [0149.154] FindClose (in: hFindFile=0x9939c0 | out: hFindFile=0x9939c0) returned 1 [0149.154] GetProcessHeap () returned 0x8a0000 [0149.154] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ae4098 | out: hHeap=0x8a0000) returned 1 [0149.154] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x593, dwReserved0=0x0, dwReserved1=0x0, cFileName="config.js", cAlternateFileName="")) returned 1 [0149.154] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="core", cAlternateFileName="")) returned 1 [0149.154] GetProcessHeap () returned 0x8a0000 [0149.154] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ae4098 [0149.154] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\*", lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0149.155] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.155] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dev", cAlternateFileName="")) returned 1 [0149.155] GetProcessHeap () returned 0x8a0000 [0149.155] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0149.156] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\*", lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0149.156] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.156] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0149.157] GetProcessHeap () returned 0x8a0000 [0149.157] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c80b8 [0149.158] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0149.161] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.161] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-ae", cAlternateFileName="")) returned 1 [0149.161] GetProcessHeap () returned 0x8a0000 [0149.161] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.161] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ar-ae\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0149.163] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.163] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0149.163] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0149.163] GetProcessHeap () returned 0x8a0000 [0149.163] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.163] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1 [0149.163] GetProcessHeap () returned 0x8a0000 [0149.163] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.163] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ca-es\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0149.164] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.164] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3f5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.164] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3f5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.164] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0149.164] GetProcessHeap () returned 0x8a0000 [0149.164] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.164] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1 [0149.164] GetProcessHeap () returned 0x8a0000 [0149.164] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.164] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\cs-cz\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0149.165] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.165] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.165] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.165] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0149.165] GetProcessHeap () returned 0x8a0000 [0149.166] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.166] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0149.166] GetProcessHeap () returned 0x8a0000 [0149.166] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.166] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\da-dk\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0149.166] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.166] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3b0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.166] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3b0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.166] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0149.166] GetProcessHeap () returned 0x8a0000 [0149.166] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.166] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0149.166] GetProcessHeap () returned 0x8a0000 [0149.166] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.166] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\de-de\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0149.167] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.167] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x409f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.168] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x409f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.168] FindClose (in: hFindFile=0x9939c0 | out: hFindFile=0x9939c0) returned 1 [0149.168] GetProcessHeap () returned 0x8a0000 [0149.168] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.168] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1 [0149.168] GetProcessHeap () returned 0x8a0000 [0149.168] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.168] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-ae\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0149.169] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.169] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38da, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.169] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38da, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.169] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0149.169] GetProcessHeap () returned 0x8a0000 [0149.169] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.169] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0149.169] GetProcessHeap () returned 0x8a0000 [0149.169] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.169] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-gb\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0149.170] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.170] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x315b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.170] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x315b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.170] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0149.170] GetProcessHeap () returned 0x8a0000 [0149.170] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.170] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1 [0149.171] GetProcessHeap () returned 0x8a0000 [0149.171] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.171] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-il\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993800 [0149.171] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.171] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38da, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.172] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38da, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.172] FindClose (in: hFindFile=0x993800 | out: hFindFile=0x993800) returned 1 [0149.172] GetProcessHeap () returned 0x8a0000 [0149.172] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.172] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0149.172] GetProcessHeap () returned 0x8a0000 [0149.172] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.172] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\es-es\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0149.483] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.483] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3eba, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.483] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3eba, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.483] FindClose (in: hFindFile=0x993a00 | out: hFindFile=0x993a00) returned 1 [0149.483] GetProcessHeap () returned 0x8a0000 [0149.483] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.483] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1 [0149.483] GetProcessHeap () returned 0x8a0000 [0149.483] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.483] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\eu-es\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0149.484] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.484] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3e5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.485] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3e5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.485] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0149.485] GetProcessHeap () returned 0x8a0000 [0149.485] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.485] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0149.485] GetProcessHeap () returned 0x8a0000 [0149.485] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.485] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fi-fi\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0149.486] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.486] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3ca7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.486] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3ca7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.486] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0149.486] GetProcessHeap () returned 0x8a0000 [0149.486] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.486] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0149.486] GetProcessHeap () returned 0x8a0000 [0149.486] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.486] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-fr\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0149.487] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.487] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4199, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.487] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4199, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.487] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0149.487] GetProcessHeap () returned 0x8a0000 [0149.487] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.487] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1 [0149.488] GetProcessHeap () returned 0x8a0000 [0149.488] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.488] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-ma\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993800 [0149.488] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.488] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4199, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.489] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4199, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.489] FindClose (in: hFindFile=0x993800 | out: hFindFile=0x993800) returned 1 [0149.489] GetProcessHeap () returned 0x8a0000 [0149.489] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.489] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1 [0149.489] GetProcessHeap () returned 0x8a0000 [0149.489] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.489] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\he-il\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0149.490] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.490] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0149.490] FindClose (in: hFindFile=0x9939c0 | out: hFindFile=0x9939c0) returned 1 [0149.490] GetProcessHeap () returned 0x8a0000 [0149.490] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.490] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1 [0149.490] GetProcessHeap () returned 0x8a0000 [0149.490] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.490] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hr-hr\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0149.491] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.491] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3d6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.491] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3d6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.491] FindClose (in: hFindFile=0x9939c0 | out: hFindFile=0x9939c0) returned 1 [0149.496] GetProcessHeap () returned 0x8a0000 [0149.496] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.496] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1 [0149.496] GetProcessHeap () returned 0x8a0000 [0149.496] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.496] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hu-hu\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0149.497] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.497] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3e1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.497] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3e1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.497] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0149.497] GetProcessHeap () returned 0x8a0000 [0149.497] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.497] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0149.498] GetProcessHeap () returned 0x8a0000 [0149.498] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.498] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\it-it\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0149.498] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.498] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3cd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.498] GetProcessHeap () returned 0x8a0000 [0149.498] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.498] GetProcessHeap () returned 0x8a0000 [0149.498] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.498] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ja-jp\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0149.499] GetProcessHeap () returned 0x8a0000 [0149.499] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.499] GetProcessHeap () returned 0x8a0000 [0149.499] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.499] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ko-kr\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0149.500] GetProcessHeap () returned 0x8a0000 [0149.500] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.500] GetProcessHeap () returned 0x8a0000 [0149.500] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.500] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nb-no\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0149.501] GetProcessHeap () returned 0x8a0000 [0149.501] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.501] GetProcessHeap () returned 0x8a0000 [0149.501] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.501] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nl-nl\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0149.501] GetProcessHeap () returned 0x8a0000 [0149.501] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.501] GetProcessHeap () returned 0x8a0000 [0149.501] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.501] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pl-pl\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0149.502] GetProcessHeap () returned 0x8a0000 [0149.502] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.502] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0149.502] GetProcessHeap () returned 0x8a0000 [0149.502] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.502] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pt-br\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0149.503] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.503] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3d39, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.503] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3d39, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.503] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0149.503] GetProcessHeap () returned 0x8a0000 [0149.503] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.503] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1 [0149.503] GetProcessHeap () returned 0x8a0000 [0149.503] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.503] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ro-ro\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0149.504] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.504] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3f96, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.504] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3f96, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.504] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0149.504] GetProcessHeap () returned 0x8a0000 [0149.504] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.504] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0149.504] GetProcessHeap () returned 0x8a0000 [0149.504] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.504] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\root\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0149.505] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.505] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.505] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.505] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0149.505] GetProcessHeap () returned 0x8a0000 [0149.505] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.505] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1 [0149.505] GetProcessHeap () returned 0x8a0000 [0149.505] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.505] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ru-ru\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0149.506] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.506] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5391, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.506] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5391, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.506] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0149.506] GetProcessHeap () returned 0x8a0000 [0149.506] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.506] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1 [0149.506] GetProcessHeap () returned 0x8a0000 [0149.506] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.506] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sk-sk\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0149.507] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.507] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3f75, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.507] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3f75, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.507] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0149.507] GetProcessHeap () returned 0x8a0000 [0149.507] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.507] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1 [0149.507] GetProcessHeap () returned 0x8a0000 [0149.507] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.507] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sl-si\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0149.508] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.508] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3cec, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.508] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3cec, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.508] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0149.508] GetProcessHeap () returned 0x8a0000 [0149.508] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.508] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1 [0149.508] GetProcessHeap () returned 0x8a0000 [0149.508] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.508] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sl-sl\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0149.508] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.508] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0149.508] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0149.508] GetProcessHeap () returned 0x8a0000 [0149.508] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.508] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0149.509] GetProcessHeap () returned 0x8a0000 [0149.509] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.509] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sv-se\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993800 [0149.509] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.509] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3bae, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.509] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3bae, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.509] FindClose (in: hFindFile=0x993800 | out: hFindFile=0x993800) returned 1 [0149.509] GetProcessHeap () returned 0x8a0000 [0149.509] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.509] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1 [0149.509] GetProcessHeap () returned 0x8a0000 [0149.509] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.509] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\tr-tr\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0149.510] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.510] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3d03, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.510] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3d03, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.510] FindClose (in: hFindFile=0x9939c0 | out: hFindFile=0x9939c0) returned 1 [0149.510] GetProcessHeap () returned 0x8a0000 [0149.510] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.510] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.510] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-ua", cAlternateFileName="")) returned 1 [0149.510] GetProcessHeap () returned 0x8a0000 [0149.510] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.510] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\uk-ua\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0149.510] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.510] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x56f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.510] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x56f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.511] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0149.511] GetProcessHeap () returned 0x8a0000 [0149.511] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.511] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1 [0149.511] GetProcessHeap () returned 0x8a0000 [0149.511] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.511] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-cn\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0149.511] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.511] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x37e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.511] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x37e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.511] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0149.511] GetProcessHeap () returned 0x8a0000 [0149.511] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.511] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1 [0149.511] GetProcessHeap () returned 0x8a0000 [0149.511] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.512] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-tw\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0149.512] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.512] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3855, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.512] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3855, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.512] FindClose (in: hFindFile=0x9939c0 | out: hFindFile=0x9939c0) returned 1 [0149.512] GetProcessHeap () returned 0x8a0000 [0149.512] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.512] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0 [0149.512] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0149.512] GetProcessHeap () returned 0x8a0000 [0149.512] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c80b8 | out: hHeap=0x8a0000) returned 1 [0149.512] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 0 [0149.512] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0149.513] GetProcessHeap () returned 0x8a0000 [0149.513] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0149.514] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dev", cAlternateFileName="")) returned 0 [0149.514] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0149.514] GetProcessHeap () returned 0x8a0000 [0149.514] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ae4098 | out: hHeap=0x8a0000) returned 1 [0149.514] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x408, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.js", cAlternateFileName="")) returned 1 [0149.514] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="files", cAlternateFileName="")) returned 1 [0149.514] GetProcessHeap () returned 0x8a0000 [0149.514] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ae4098 [0149.514] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\*", lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0149.515] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.515] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dev", cAlternateFileName="")) returned 1 [0149.515] GetProcessHeap () returned 0x8a0000 [0149.515] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0149.516] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\*", lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0149.516] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.516] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0149.516] GetProcessHeap () returned 0x8a0000 [0149.516] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c80b8 [0149.517] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993800 [0149.519] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.519] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-ae", cAlternateFileName="")) returned 1 [0149.519] GetProcessHeap () returned 0x8a0000 [0149.519] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.519] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ar-ae\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0149.520] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.520] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0149.520] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0149.520] GetProcessHeap () returned 0x8a0000 [0149.520] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.520] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1 [0149.521] GetProcessHeap () returned 0x8a0000 [0149.521] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.521] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ca-es\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0149.521] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.521] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x201f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.522] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x201f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.522] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0149.522] GetProcessHeap () returned 0x8a0000 [0149.522] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.522] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1 [0149.522] GetProcessHeap () returned 0x8a0000 [0149.522] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.522] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\cs-cz\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0149.522] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.522] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.522] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.522] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0149.522] GetProcessHeap () returned 0x8a0000 [0149.522] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.522] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0149.523] GetProcessHeap () returned 0x8a0000 [0149.523] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.523] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\da-dk\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0149.523] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.523] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.523] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.523] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0149.523] GetProcessHeap () returned 0x8a0000 [0149.523] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.523] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0149.523] GetProcessHeap () returned 0x8a0000 [0149.523] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.523] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\de-de\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0149.524] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.524] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x203c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.524] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x203c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.524] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0149.524] GetProcessHeap () returned 0x8a0000 [0149.525] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.525] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1 [0149.525] GetProcessHeap () returned 0x8a0000 [0149.525] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.525] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-ae\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0149.526] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.526] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1c31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.526] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1c31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.526] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0149.526] GetProcessHeap () returned 0x8a0000 [0149.526] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.526] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0149.526] GetProcessHeap () returned 0x8a0000 [0149.526] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.526] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-gb\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0149.526] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.526] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1ac7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.526] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1ac7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.527] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0149.527] GetProcessHeap () returned 0x8a0000 [0149.527] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.527] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1 [0149.527] GetProcessHeap () returned 0x8a0000 [0149.527] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.527] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-il\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0149.650] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.650] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1c31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.650] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1c31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.650] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0149.650] GetProcessHeap () returned 0x8a0000 [0149.650] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.650] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0149.651] GetProcessHeap () returned 0x8a0000 [0149.651] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.651] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\es-es\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0149.652] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.652] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2024, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.652] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2024, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.652] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0149.652] GetProcessHeap () returned 0x8a0000 [0149.652] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.652] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1 [0149.652] GetProcessHeap () returned 0x8a0000 [0149.652] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.652] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\eu-es\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0149.653] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.653] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f56, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.653] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f56, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.653] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0149.653] GetProcessHeap () returned 0x8a0000 [0149.653] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.653] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0149.653] GetProcessHeap () returned 0x8a0000 [0149.653] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.653] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fi-fi\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0149.654] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.654] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f27, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.654] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f27, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.654] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0149.654] GetProcessHeap () returned 0x8a0000 [0149.654] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.654] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0149.654] GetProcessHeap () returned 0x8a0000 [0149.654] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.654] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-fr\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0149.655] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.655] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2084, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.655] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2084, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.655] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0149.655] GetProcessHeap () returned 0x8a0000 [0149.655] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.655] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1 [0149.655] GetProcessHeap () returned 0x8a0000 [0149.656] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.656] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-ma\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0149.657] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.657] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2084, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.657] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2084, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.657] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0149.657] GetProcessHeap () returned 0x8a0000 [0149.657] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.657] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1 [0149.657] GetProcessHeap () returned 0x8a0000 [0149.657] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.657] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\he-il\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0149.658] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.658] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0149.658] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0149.658] GetProcessHeap () returned 0x8a0000 [0149.658] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.658] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1 [0149.658] GetProcessHeap () returned 0x8a0000 [0149.658] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.658] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hr-hr\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0149.658] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.658] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f33, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.658] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f33, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.659] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0149.659] GetProcessHeap () returned 0x8a0000 [0149.659] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.659] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1 [0149.659] GetProcessHeap () returned 0x8a0000 [0149.659] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.659] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hu-hu\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0149.660] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.660] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2013, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.660] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2013, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.660] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0149.660] GetProcessHeap () returned 0x8a0000 [0149.660] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.660] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0149.660] GetProcessHeap () returned 0x8a0000 [0149.660] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.660] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\it-it\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0149.661] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.661] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f72, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.661] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f72, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.661] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0149.661] GetProcessHeap () returned 0x8a0000 [0149.661] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.661] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0149.661] GetProcessHeap () returned 0x8a0000 [0149.661] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.661] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ja-jp\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0149.662] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.662] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x24b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.662] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x24b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.662] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0149.662] GetProcessHeap () returned 0x8a0000 [0149.662] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.662] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1 [0149.662] GetProcessHeap () returned 0x8a0000 [0149.662] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.663] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ko-kr\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0149.663] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.663] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1fe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.664] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1fe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.664] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0149.664] GetProcessHeap () returned 0x8a0000 [0149.664] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.664] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0149.664] GetProcessHeap () returned 0x8a0000 [0149.664] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.664] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nb-no\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0149.664] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.664] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1d08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.664] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1d08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.664] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0149.664] GetProcessHeap () returned 0x8a0000 [0149.665] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.665] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0149.665] GetProcessHeap () returned 0x8a0000 [0149.665] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.665] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nl-nl\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0149.665] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.665] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f86, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.665] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f86, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.665] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0149.665] GetProcessHeap () returned 0x8a0000 [0149.665] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.665] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1 [0149.665] GetProcessHeap () returned 0x8a0000 [0149.665] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.665] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pl-pl\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0149.666] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.666] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1fbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.666] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1fbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.666] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0149.666] GetProcessHeap () returned 0x8a0000 [0149.667] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.667] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0149.667] GetProcessHeap () returned 0x8a0000 [0149.667] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.667] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pt-br\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0149.667] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.667] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.667] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.667] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0149.667] GetProcessHeap () returned 0x8a0000 [0149.668] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.668] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1 [0149.668] GetProcessHeap () returned 0x8a0000 [0149.668] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.668] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ro-ro\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0149.668] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.669] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2012, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.669] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2012, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.669] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0149.669] GetProcessHeap () returned 0x8a0000 [0149.669] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.669] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0149.669] GetProcessHeap () returned 0x8a0000 [0149.669] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.669] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\root\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0149.669] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.670] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1c31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.670] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1c31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.670] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0149.670] GetProcessHeap () returned 0x8a0000 [0149.670] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.670] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1 [0149.670] GetProcessHeap () returned 0x8a0000 [0149.670] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.670] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ru-ru\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0149.671] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.671] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2a8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.671] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2a8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.671] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0149.671] GetProcessHeap () returned 0x8a0000 [0149.671] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.671] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1 [0149.671] GetProcessHeap () returned 0x8a0000 [0149.671] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.671] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sk-sk\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0149.672] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.672] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x206d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.672] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x206d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.672] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0149.672] GetProcessHeap () returned 0x8a0000 [0149.672] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.672] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1 [0149.672] GetProcessHeap () returned 0x8a0000 [0149.672] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.672] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sl-si\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0149.673] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.673] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1e56, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.673] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1e56, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.673] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0149.673] GetProcessHeap () returned 0x8a0000 [0149.673] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.673] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1 [0149.673] GetProcessHeap () returned 0x8a0000 [0149.673] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.673] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sl-sl\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0149.674] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.674] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0149.674] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0149.674] GetProcessHeap () returned 0x8a0000 [0149.674] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.674] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0149.674] GetProcessHeap () returned 0x8a0000 [0149.674] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.674] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sv-se\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0149.674] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.674] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.674] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.674] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0149.674] GetProcessHeap () returned 0x8a0000 [0149.674] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.675] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1 [0149.675] GetProcessHeap () returned 0x8a0000 [0149.675] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.675] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\tr-tr\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0149.675] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.675] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.675] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.675] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0149.675] GetProcessHeap () returned 0x8a0000 [0149.675] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.675] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.675] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-ua", cAlternateFileName="")) returned 1 [0149.675] GetProcessHeap () returned 0x8a0000 [0149.675] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.675] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\uk-ua\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0149.676] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.676] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2e44, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.676] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2e44, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.676] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0149.682] GetProcessHeap () returned 0x8a0000 [0149.682] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.682] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1 [0149.682] GetProcessHeap () returned 0x8a0000 [0149.682] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.682] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-cn\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0149.682] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.682] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1c4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.683] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1c4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.683] FindClose (in: hFindFile=0x993a00 | out: hFindFile=0x993a00) returned 1 [0149.683] GetProcessHeap () returned 0x8a0000 [0149.683] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.683] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1 [0149.683] GetProcessHeap () returned 0x8a0000 [0149.683] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.683] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-tw\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0149.683] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.683] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1c34, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.683] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1c34, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.683] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0149.683] GetProcessHeap () returned 0x8a0000 [0149.684] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.684] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0 [0149.684] FindClose (in: hFindFile=0x993800 | out: hFindFile=0x993800) returned 1 [0149.684] GetProcessHeap () returned 0x8a0000 [0149.684] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c80b8 | out: hHeap=0x8a0000) returned 1 [0149.684] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 0 [0149.684] FindClose (in: hFindFile=0x993880 | out: hFindFile=0x993880) returned 1 [0149.684] GetProcessHeap () returned 0x8a0000 [0149.684] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0149.685] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dev", cAlternateFileName="")) returned 0 [0149.685] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0149.685] GetProcessHeap () returned 0x8a0000 [0149.685] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ae4098 | out: hHeap=0x8a0000) returned 1 [0149.685] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="libs", cAlternateFileName="")) returned 1 [0149.685] GetProcessHeap () returned 0x8a0000 [0149.685] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ae4098 [0149.685] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\*", lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993800 [0149.685] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.685] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jquery.ui.touch-punch", cAlternateFileName="JQUERY~1.TOU")) returned 1 [0149.686] GetProcessHeap () returned 0x8a0000 [0149.686] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0149.686] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\jquery.ui.touch-punch\\*", lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0149.687] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.687] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.2.2", cAlternateFileName="020A5B~1.2")) returned 1 [0149.687] GetProcessHeap () returned 0x8a0000 [0149.687] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c80b8 [0149.688] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\jquery.ui.touch-punch\\0.2.2\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0149.688] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.688] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x478, dwReserved0=0x0, dwReserved1=0x0, cFileName="jquery.ui.touch-punch.js", cAlternateFileName="JQUERY~1.JS")) returned 1 [0149.688] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x478, dwReserved0=0x0, dwReserved1=0x0, cFileName="jquery.ui.touch-punch.js", cAlternateFileName="JQUERY~1.JS")) returned 0 [0149.688] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0149.688] GetProcessHeap () returned 0x8a0000 [0149.689] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c80b8 | out: hHeap=0x8a0000) returned 1 [0149.689] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.2.2", cAlternateFileName="020A5B~1.2")) returned 0 [0149.689] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0149.689] GetProcessHeap () returned 0x8a0000 [0149.689] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0149.689] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="require", cAlternateFileName="")) returned 1 [0149.689] GetProcessHeap () returned 0x8a0000 [0149.689] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0149.689] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\require\\*", lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0149.689] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.689] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2.1.15", cAlternateFileName="211994~1.15")) returned 1 [0149.689] GetProcessHeap () returned 0x8a0000 [0149.689] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c80b8 [0149.689] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\require\\2.1.15\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0149.690] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.690] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3adc, dwReserved0=0x0, dwReserved1=0x0, cFileName="require.min.js", cAlternateFileName="REQUIR~1.JS")) returned 1 [0149.690] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3adc, dwReserved0=0x0, dwReserved1=0x0, cFileName="require.min.js", cAlternateFileName="REQUIR~1.JS")) returned 0 [0149.690] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0149.690] GetProcessHeap () returned 0x8a0000 [0149.690] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c80b8 | out: hHeap=0x8a0000) returned 1 [0149.690] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2.1.15", cAlternateFileName="211994~1.15")) returned 0 [0149.690] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0149.690] GetProcessHeap () returned 0x8a0000 [0149.690] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0149.690] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="require", cAlternateFileName="")) returned 0 [0149.690] FindClose (in: hFindFile=0x993800 | out: hFindFile=0x993800) returned 1 [0149.690] GetProcessHeap () returned 0x8a0000 [0149.690] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ae4098 | out: hHeap=0x8a0000) returned 1 [0149.692] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="misc", cAlternateFileName="")) returned 1 [0149.692] GetProcessHeap () returned 0x8a0000 [0149.692] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ae4098 [0149.692] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\misc\\*", lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0149.692] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.692] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x59d, dwReserved0=0x0, dwReserved1=0x0, cFileName="load-typekit.js", cAlternateFileName="LOAD-T~1.JS")) returned 1 [0149.692] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x59d, dwReserved0=0x0, dwReserved1=0x0, cFileName="load-typekit.js", cAlternateFileName="LOAD-T~1.JS")) returned 0 [0149.693] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0149.693] GetProcessHeap () returned 0x8a0000 [0149.693] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ae4098 | out: hHeap=0x8a0000) returned 1 [0149.693] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugins", cAlternateFileName="")) returned 1 [0149.693] GetProcessHeap () returned 0x8a0000 [0149.693] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3ae4098 [0149.693] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\*", lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993800 [0149.891] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.891] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="add-account", cAlternateFileName="ADD-AC~1")) returned 1 [0149.892] GetProcessHeap () returned 0x8a0000 [0149.892] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0149.892] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\*", lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0149.894] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.894] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0149.894] GetProcessHeap () returned 0x8a0000 [0149.894] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c80b8 [0149.894] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0149.895] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.895] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x322, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-selector.css", cAlternateFileName="MAIN-S~1.CSS")) returned 1 [0149.896] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1faf, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0149.896] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1faf, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 0 [0149.896] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0149.896] GetProcessHeap () returned 0x8a0000 [0149.896] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c80b8 | out: hHeap=0x8a0000) returned 1 [0149.896] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0149.896] GetProcessHeap () returned 0x8a0000 [0149.896] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c80b8 [0149.896] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0149.898] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.898] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_patterns_header.png", cAlternateFileName="BG_PAT~2.PNG")) returned 1 [0149.898] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_pattern_RHP.png", cAlternateFileName="BG_PAT~1.PNG")) returned 1 [0149.898] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons.png", cAlternateFileName="")) returned 1 [0149.898] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1fd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons_ie8.gif", cAlternateFileName="ICONS_~1.GIF")) returned 1 [0149.898] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3c6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons_retina.png", cAlternateFileName="ICONS_~1.PNG")) returned 1 [0149.898] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x225a, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations.png", cAlternateFileName="ILLUST~2.PNG")) returned 1 [0149.898] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations_retina.png", cAlternateFileName="ILLUST~1.PNG")) returned 1 [0149.898] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x20bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons.png", cAlternateFileName="NEW_IC~2.PNG")) returned 1 [0149.898] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x456c, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons_retina.png", cAlternateFileName="NEW_IC~1.PNG")) returned 1 [0149.898] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0149.899] GetProcessHeap () returned 0x8a0000 [0149.899] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.899] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0149.900] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.900] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0149.900] GetProcessHeap () returned 0x8a0000 [0149.900] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0149.900] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0149.902] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.902] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_patterns_header.png", cAlternateFileName="BG_PAT~2.PNG")) returned 1 [0149.903] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_pattern_RHP.png", cAlternateFileName="BG_PAT~1.PNG")) returned 1 [0149.903] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons.png", cAlternateFileName="")) returned 1 [0149.903] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1fd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons_ie8.gif", cAlternateFileName="ICONS_~1.GIF")) returned 1 [0149.903] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3c6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons_retina.png", cAlternateFileName="ICONS_~1.PNG")) returned 1 [0149.903] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x225a, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations.png", cAlternateFileName="ILLUST~2.PNG")) returned 1 [0149.903] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations_retina.png", cAlternateFileName="ILLUST~1.PNG")) returned 1 [0149.903] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x20bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons.png", cAlternateFileName="NEW_IC~2.PNG")) returned 1 [0149.903] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x456c, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons_retina.png", cAlternateFileName="NEW_IC~1.PNG")) returned 1 [0149.904] GetProcessHeap () returned 0x8a0000 [0149.904] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0149.904] GetProcessHeap () returned 0x8a0000 [0149.904] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.904] GetProcessHeap () returned 0x8a0000 [0149.904] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c80b8 | out: hHeap=0x8a0000) returned 1 [0149.905] GetProcessHeap () returned 0x8a0000 [0149.905] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0149.906] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0149.907] GetProcessHeap () returned 0x8a0000 [0149.907] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c80b8 [0149.908] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0149.911] GetProcessHeap () returned 0x8a0000 [0149.911] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.911] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ar-ae\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0149.912] GetProcessHeap () returned 0x8a0000 [0149.912] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.912] GetProcessHeap () returned 0x8a0000 [0149.912] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.912] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ca-es\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0149.913] GetProcessHeap () returned 0x8a0000 [0149.913] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.913] GetProcessHeap () returned 0x8a0000 [0149.913] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.914] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\cs-cz\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0149.914] GetProcessHeap () returned 0x8a0000 [0149.914] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.914] GetProcessHeap () returned 0x8a0000 [0149.914] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.914] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\da-dk\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0149.915] GetProcessHeap () returned 0x8a0000 [0149.915] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.915] GetProcessHeap () returned 0x8a0000 [0149.915] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.915] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\de-de\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0149.916] GetProcessHeap () returned 0x8a0000 [0149.916] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.916] GetProcessHeap () returned 0x8a0000 [0149.916] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.916] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-ae\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0149.917] GetProcessHeap () returned 0x8a0000 [0149.917] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.917] GetProcessHeap () returned 0x8a0000 [0149.917] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.917] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-gb\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0149.918] GetProcessHeap () returned 0x8a0000 [0149.918] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.918] GetProcessHeap () returned 0x8a0000 [0149.918] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.918] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-il\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0149.919] GetProcessHeap () returned 0x8a0000 [0149.919] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.919] GetProcessHeap () returned 0x8a0000 [0149.919] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.919] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\es-es\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0149.920] GetProcessHeap () returned 0x8a0000 [0149.920] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.920] GetProcessHeap () returned 0x8a0000 [0149.920] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.920] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\eu-es\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0149.920] GetProcessHeap () returned 0x8a0000 [0149.920] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.920] GetProcessHeap () returned 0x8a0000 [0149.920] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.920] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fi-fi\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0149.921] GetProcessHeap () returned 0x8a0000 [0149.921] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.921] GetProcessHeap () returned 0x8a0000 [0149.921] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.921] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-fr\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0149.922] GetProcessHeap () returned 0x8a0000 [0149.922] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.922] GetProcessHeap () returned 0x8a0000 [0149.922] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.922] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-ma\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0149.922] GetProcessHeap () returned 0x8a0000 [0149.922] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.922] GetProcessHeap () returned 0x8a0000 [0149.922] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.922] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\he-il\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0149.923] GetProcessHeap () returned 0x8a0000 [0149.923] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.923] GetProcessHeap () returned 0x8a0000 [0149.923] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.923] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hr-hr\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0149.924] GetProcessHeap () returned 0x8a0000 [0149.924] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0149.924] GetProcessHeap () returned 0x8a0000 [0149.924] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0149.924] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hu-hu\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0150.139] GetProcessHeap () returned 0x8a0000 [0150.139] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0150.139] GetProcessHeap () returned 0x8a0000 [0150.139] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0150.139] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\it-it\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0150.140] GetProcessHeap () returned 0x8a0000 [0150.140] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0150.140] GetProcessHeap () returned 0x8a0000 [0150.140] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0150.140] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ja-jp\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0150.140] GetProcessHeap () returned 0x8a0000 [0150.140] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0150.140] GetProcessHeap () returned 0x8a0000 [0150.140] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0150.140] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ko-kr\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0150.163] GetProcessHeap () returned 0x8a0000 [0150.163] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0150.163] GetProcessHeap () returned 0x8a0000 [0150.163] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0150.163] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nb-no\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0150.165] GetProcessHeap () returned 0x8a0000 [0150.165] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0150.165] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0150.165] GetProcessHeap () returned 0x8a0000 [0150.165] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0150.165] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nl-nl\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0150.165] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.165] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x732, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0150.165] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x732, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0150.165] FindClose (in: hFindFile=0x993880 | out: hFindFile=0x993880) returned 1 [0150.165] GetProcessHeap () returned 0x8a0000 [0150.165] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0150.166] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1 [0150.166] GetProcessHeap () returned 0x8a0000 [0150.166] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0150.166] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pl-pl\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0150.166] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.167] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x71f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0150.167] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x71f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0150.167] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0150.167] GetProcessHeap () returned 0x8a0000 [0150.167] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0150.167] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0150.167] GetProcessHeap () returned 0x8a0000 [0150.167] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0150.167] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pt-br\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0150.167] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.167] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x716, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0150.167] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x716, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0150.167] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0150.167] GetProcessHeap () returned 0x8a0000 [0150.167] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0150.168] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1 [0150.168] GetProcessHeap () returned 0x8a0000 [0150.168] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0150.168] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ro-ro\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0150.168] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.168] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x764, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0150.168] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x764, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0150.168] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0150.168] GetProcessHeap () returned 0x8a0000 [0150.168] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0150.168] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0150.168] GetProcessHeap () returned 0x8a0000 [0150.168] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0150.169] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\root\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0150.169] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.169] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0150.169] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0150.169] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0150.169] GetProcessHeap () returned 0x8a0000 [0150.169] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0150.169] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1 [0150.169] GetProcessHeap () returned 0x8a0000 [0150.169] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0150.169] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ru-ru\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0150.170] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.171] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x97b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0150.171] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x97b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0150.171] FindClose (in: hFindFile=0x993880 | out: hFindFile=0x993880) returned 1 [0150.171] GetProcessHeap () returned 0x8a0000 [0150.171] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0150.171] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1 [0150.171] GetProcessHeap () returned 0x8a0000 [0150.171] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0150.171] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sk-sk\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0150.172] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.173] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x76e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0150.173] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x76e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0150.173] FindClose (in: hFindFile=0x993880 | out: hFindFile=0x993880) returned 1 [0150.173] GetProcessHeap () returned 0x8a0000 [0150.173] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0150.173] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1 [0150.173] GetProcessHeap () returned 0x8a0000 [0150.173] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0150.173] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sl-si\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0150.173] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.173] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x71a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0150.173] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x71a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0150.173] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0150.173] GetProcessHeap () returned 0x8a0000 [0150.173] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0150.174] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1 [0150.174] GetProcessHeap () returned 0x8a0000 [0150.174] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0150.174] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sl-sl\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0150.174] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.174] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0150.174] FindClose (in: hFindFile=0x9939c0 | out: hFindFile=0x9939c0) returned 1 [0150.174] GetProcessHeap () returned 0x8a0000 [0150.174] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0150.174] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0150.174] GetProcessHeap () returned 0x8a0000 [0150.174] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0150.174] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sv-se\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0150.175] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.175] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0150.175] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0150.175] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0150.175] GetProcessHeap () returned 0x8a0000 [0150.175] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0150.175] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1 [0150.175] GetProcessHeap () returned 0x8a0000 [0150.175] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0150.175] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\tr-tr\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0150.175] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.175] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x73a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0150.175] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x73a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0150.176] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0150.176] GetProcessHeap () returned 0x8a0000 [0150.176] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0150.176] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0150.176] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-ua", cAlternateFileName="")) returned 1 [0150.176] GetProcessHeap () returned 0x8a0000 [0150.176] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0150.176] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\uk-ua\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0150.176] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.176] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x99c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0150.176] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x99c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0150.176] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0150.176] GetProcessHeap () returned 0x8a0000 [0150.176] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0150.176] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1 [0150.176] GetProcessHeap () returned 0x8a0000 [0150.177] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0150.177] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-cn\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0150.177] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.177] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0150.177] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0150.177] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0150.177] GetProcessHeap () returned 0x8a0000 [0150.177] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0150.177] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1 [0150.177] GetProcessHeap () returned 0x8a0000 [0150.177] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0150.177] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-tw\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0150.178] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.178] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0150.178] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0150.178] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0150.178] GetProcessHeap () returned 0x8a0000 [0150.178] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0150.178] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0 [0150.178] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0150.178] GetProcessHeap () returned 0x8a0000 [0150.178] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c80b8 | out: hHeap=0x8a0000) returned 1 [0150.178] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x9838, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0150.178] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xc2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 1 [0150.178] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xc2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 0 [0150.178] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0150.179] GetProcessHeap () returned 0x8a0000 [0150.179] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0150.180] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0150.180] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0150.180] GetProcessHeap () returned 0x8a0000 [0150.180] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0150.180] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="add-account-select", cAlternateFileName="ADD-AC~2")) returned 1 [0150.180] GetProcessHeap () returned 0x8a0000 [0150.180] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0150.180] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\*", lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0150.190] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.190] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0150.190] GetProcessHeap () returned 0x8a0000 [0150.190] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0150.190] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\css\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0150.196] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.197] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x27a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0150.197] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x27a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 0 [0150.197] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0150.204] GetProcessHeap () returned 0x8a0000 [0150.204] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0150.204] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0150.204] GetProcessHeap () returned 0x8a0000 [0150.204] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0150.204] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\js\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0150.206] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.206] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x9d6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0150.206] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x9d6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 0 [0150.206] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0150.206] GetProcessHeap () returned 0x8a0000 [0150.206] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0150.206] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0150.206] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0150.206] GetProcessHeap () returned 0x8a0000 [0150.206] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0150.206] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd61dea, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="aicuc", cAlternateFileName="")) returned 1 [0150.207] GetProcessHeap () returned 0x8a0000 [0150.207] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0150.207] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\*", lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0150.210] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.210] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0150.210] GetProcessHeap () returned 0x8a0000 [0150.210] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0150.210] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0150.212] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.212] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x18813, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0150.212] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x813, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin-selectors.css", cAlternateFileName="PLUGIN~1.CSS")) returned 1 [0150.213] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x813, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin-selectors.css", cAlternateFileName="PLUGIN~1.CSS")) returned 0 [0150.213] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0150.213] GetProcessHeap () returned 0x8a0000 [0150.213] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0150.213] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd61dea, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0150.213] GetProcessHeap () returned 0x8a0000 [0150.213] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0150.213] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0150.220] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.220] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd61dea, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon.png", cAlternateFileName="RHP_WO~2.PNG")) returned 1 [0150.220] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd8802e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x263, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_2x.png", cAlternateFileName="RHP_WO~3.PNG")) returned 1 [0150.220] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover.png", cAlternateFileName="RHP_WO~4.PNG")) returned 1 [0150.220] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd61dea, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover_2x.png", cAlternateFileName="RHP_WO~1.PNG")) returned 1 [0150.220] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd8802e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0150.220] GetProcessHeap () returned 0x8a0000 [0150.221] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c80b8 [0150.221] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd8802e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0150.229] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd8802e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.229] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd8802e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0150.229] GetProcessHeap () returned 0x8a0000 [0150.229] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0150.230] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0150.511] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.511] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdae26b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon.png", cAlternateFileName="RHP_WO~2.PNG")) returned 1 [0150.511] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdae26b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdae26b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_2x.png", cAlternateFileName="RHP_WO~3.PNG")) returned 1 [0150.511] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover.png", cAlternateFileName="RHP_WO~4.PNG")) returned 1 [0150.511] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd8802e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover_2x.png", cAlternateFileName="RHP_WO~1.PNG")) returned 1 [0150.512] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x266, dwReserved0=0x0, dwReserved1=0x0, cFileName="warning.png", cAlternateFileName="")) returned 1 [0150.512] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x517, dwReserved0=0x0, dwReserved1=0x0, cFileName="warning_2x.png", cAlternateFileName="WARNIN~1.PNG")) returned 1 [0150.512] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x517, dwReserved0=0x0, dwReserved1=0x0, cFileName="warning_2x.png", cAlternateFileName="WARNIN~1.PNG")) returned 0 [0150.512] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0150.513] GetProcessHeap () returned 0x8a0000 [0150.513] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0150.513] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd8802e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0 [0150.513] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0150.513] GetProcessHeap () returned 0x8a0000 [0150.513] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c80b8 | out: hHeap=0x8a0000) returned 1 [0150.513] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x266, dwReserved0=0x0, dwReserved1=0x0, cFileName="warning.png", cAlternateFileName="")) returned 1 [0150.513] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd8802e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x517, dwReserved0=0x0, dwReserved1=0x0, cFileName="warning_2x.png", cAlternateFileName="WARNIN~1.PNG")) returned 1 [0150.513] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd8802e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x517, dwReserved0=0x0, dwReserved1=0x0, cFileName="warning_2x.png", cAlternateFileName="WARNIN~1.PNG")) returned 0 [0150.513] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0150.513] GetProcessHeap () returned 0x8a0000 [0150.513] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0150.514] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0150.514] GetProcessHeap () returned 0x8a0000 [0150.514] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0150.515] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0150.516] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.516] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0150.516] GetProcessHeap () returned 0x8a0000 [0150.516] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c80b8 [0150.516] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0150.519] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.519] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0150.519] GetProcessHeap () returned 0x8a0000 [0150.519] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0150.519] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\da-dk\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0150.520] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.520] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb31e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0150.520] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb31e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0150.520] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0150.520] GetProcessHeap () returned 0x8a0000 [0150.520] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0150.520] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0150.521] GetProcessHeap () returned 0x8a0000 [0150.521] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0150.521] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\de-de\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0150.538] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.538] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xc8c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0150.538] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xc8c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0150.538] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0150.538] GetProcessHeap () returned 0x8a0000 [0150.538] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0150.538] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0150.538] GetProcessHeap () returned 0x8a0000 [0150.538] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0150.538] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\en-gb\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0150.539] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.539] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xa3e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0150.539] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xa3e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0150.539] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0150.539] GetProcessHeap () returned 0x8a0000 [0150.539] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0150.539] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0150.539] GetProcessHeap () returned 0x8a0000 [0150.539] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0150.539] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\es-es\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0150.540] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.540] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xbe19, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0150.540] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xbe19, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0150.540] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0150.540] GetProcessHeap () returned 0x8a0000 [0150.540] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0150.540] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0150.540] GetProcessHeap () returned 0x8a0000 [0150.540] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0150.540] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fi-fi\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0150.541] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.541] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb67e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0150.541] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb67e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0150.541] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0150.541] GetProcessHeap () returned 0x8a0000 [0150.541] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0150.541] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0150.541] GetProcessHeap () returned 0x8a0000 [0150.541] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0150.541] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fr-fr\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0150.542] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.542] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xc4ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0150.542] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xc4ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0150.542] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0150.542] GetProcessHeap () returned 0x8a0000 [0150.542] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0150.542] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0150.542] GetProcessHeap () returned 0x8a0000 [0150.542] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0150.542] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\it-it\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0150.543] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.543] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xba21, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0150.543] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xba21, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0150.543] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0150.543] GetProcessHeap () returned 0x8a0000 [0150.543] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0150.543] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0150.543] GetProcessHeap () returned 0x8a0000 [0150.543] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0150.543] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ja-jp\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0150.544] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.544] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xda52, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0150.544] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xda52, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0150.544] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0150.544] GetProcessHeap () returned 0x8a0000 [0150.544] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0150.544] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0150.544] GetProcessHeap () returned 0x8a0000 [0150.544] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0150.544] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nb-no\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0150.545] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.545] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb09a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0150.545] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb09a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0150.545] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0150.545] GetProcessHeap () returned 0x8a0000 [0150.545] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0150.545] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0150.545] GetProcessHeap () returned 0x8a0000 [0150.545] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0150.545] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nl-nl\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0150.545] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.546] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xbcb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0150.546] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xbcb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0150.546] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0150.546] GetProcessHeap () returned 0x8a0000 [0150.546] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0150.546] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0150.546] GetProcessHeap () returned 0x8a0000 [0150.546] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0150.546] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\pt-br\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0150.547] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.547] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb8a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0150.547] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb8a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0150.547] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0150.547] GetProcessHeap () returned 0x8a0000 [0150.547] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0150.547] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0150.547] GetProcessHeap () returned 0x8a0000 [0150.547] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0150.547] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\root\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0150.548] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.548] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xac38, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0150.548] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xac38, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0150.548] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0150.548] GetProcessHeap () returned 0x8a0000 [0150.548] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0150.548] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0150.548] GetProcessHeap () returned 0x8a0000 [0150.548] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0150.548] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\sv-se\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0150.548] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.548] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb53d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0150.548] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb53d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0150.548] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0150.549] GetProcessHeap () returned 0x8a0000 [0150.549] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0150.549] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x41a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0150.549] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x41a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0150.549] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0150.549] GetProcessHeap () returned 0x8a0000 [0150.549] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c80b8 | out: hHeap=0x8a0000) returned 1 [0150.549] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugins", cAlternateFileName="")) returned 1 [0150.549] GetProcessHeap () returned 0x8a0000 [0150.549] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c80b8 [0150.549] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0150.551] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.551] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefedf550, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2b920, dwReserved0=0x0, dwReserved1=0x0, cFileName="convertpdf-selector.js", cAlternateFileName="CONVER~2.JS")) returned 1 [0150.551] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5d6b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="convertpdf-tool-view.js", cAlternateFileName="CONVER~1.JS")) returned 1 [0150.551] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2b968, dwReserved0=0x0, dwReserved1=0x0, cFileName="exportpdf-selector.js", cAlternateFileName="EXPORT~1.JS")) returned 1 [0150.552] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff77e79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff77e79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x62167, dwReserved0=0x0, dwReserved1=0x0, cFileName="exportpdf-tool-view.js", cAlternateFileName="EXPORT~2.JS")) returned 1 [0150.552] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefedf550, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefedf550, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefedf550, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp", cAlternateFileName="")) returned 1 [0150.552] GetProcessHeap () returned 0x8a0000 [0150.552] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0150.552] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefedf550, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefedf550, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff77e79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0150.555] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefedf550, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefedf550, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff77e79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.555] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff0576b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff0576b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff77e79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2bc58, dwReserved0=0x0, dwReserved1=0x0, cFileName="convertpdf-rna-selector.js", cAlternateFileName="CONVER~1.JS")) returned 1 [0150.555] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff77e79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff77e79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff77e79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5e19f, dwReserved0=0x0, dwReserved1=0x0, cFileName="convertpdf-rna-tool-view.js", cAlternateFileName="CONVER~2.JS")) returned 1 [0150.555] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff0576b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff0576b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff0576b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2bca0, dwReserved0=0x0, dwReserved1=0x0, cFileName="exportpdf-rna-selector.js", cAlternateFileName="EXPORT~2.JS")) returned 1 [0150.556] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefedf550, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefedf550, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff0576b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x602eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="exportpdf-rna-tool-view.js", cAlternateFileName="EXPORT~1.JS")) returned 1 [0150.556] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefedf550, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefedf550, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff0576b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x602eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="exportpdf-rna-tool-view.js", cAlternateFileName="EXPORT~1.JS")) returned 0 [0150.556] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0150.556] GetProcessHeap () returned 0x8a0000 [0150.556] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0150.556] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="selection-action-plugins", cAlternateFileName="SELECT~1")) returned 1 [0150.557] GetProcessHeap () returned 0x8a0000 [0150.557] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0150.557] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0150.558] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.558] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cpdf", cAlternateFileName="")) returned 1 [0150.558] GetProcessHeap () returned 0x8a0000 [0150.558] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b150c0 [0150.558] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\*", lpFindFileData=0x2fdd1b8 | out: lpFindFileData=0x2fdd1b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0150.558] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd1b8 | out: lpFindFileData=0x2fdd1b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.559] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd1b8 | out: lpFindFileData=0x2fdd1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0150.559] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd1b8 | out: lpFindFileData=0x2fdd1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x994, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 1 [0150.559] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd1b8 | out: lpFindFileData=0x2fdd1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x994, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 0 [0150.559] FindClose (in: hFindFile=0x9939c0 | out: hFindFile=0x9939c0) returned 1 [0150.559] GetProcessHeap () returned 0x8a0000 [0150.559] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b150c0 | out: hHeap=0x8a0000) returned 1 [0150.559] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="epdf", cAlternateFileName="")) returned 1 [0150.559] GetProcessHeap () returned 0x8a0000 [0150.559] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b150c0 [0150.559] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\*", lpFindFileData=0x2fdd1b8 | out: lpFindFileData=0x2fdd1b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0150.559] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd1b8 | out: lpFindFileData=0x2fdd1b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.559] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd1b8 | out: lpFindFileData=0x2fdd1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xc85, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0150.560] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd1b8 | out: lpFindFileData=0x2fdd1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x995, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 1 [0150.560] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd1b8 | out: lpFindFileData=0x2fdd1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x995, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 0 [0150.560] FindClose (in: hFindFile=0x9939c0 | out: hFindFile=0x9939c0) returned 1 [0150.560] GetProcessHeap () returned 0x8a0000 [0150.560] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b150c0 | out: hHeap=0x8a0000) returned 1 [0150.560] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="epdf", cAlternateFileName="")) returned 0 [0150.560] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0150.560] GetProcessHeap () returned 0x8a0000 [0150.560] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0150.560] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="selection-action-plugins", cAlternateFileName="SELECT~1")) returned 0 [0150.560] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0150.560] GetProcessHeap () returned 0x8a0000 [0150.560] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c80b8 | out: hHeap=0x8a0000) returned 1 [0150.561] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugins", cAlternateFileName="")) returned 0 [0150.561] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0150.561] GetProcessHeap () returned 0x8a0000 [0150.561] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0150.562] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0150.562] FindClose (in: hFindFile=0x993880 | out: hFindFile=0x993880) returned 1 [0150.562] GetProcessHeap () returned 0x8a0000 [0150.562] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0150.562] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="combinepdf", cAlternateFileName="COMBIN~1")) returned 1 [0150.562] GetProcessHeap () returned 0x8a0000 [0150.562] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c80b8 [0150.563] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\*", lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0150.564] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.564] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0150.886] GetProcessHeap () returned 0x8a0000 [0150.886] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0150.886] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\css\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0150.887] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.887] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-selector.css", cAlternateFileName="MAIN-S~1.CSS")) returned 1 [0150.887] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0150.887] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 0 [0150.887] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0150.887] GetProcessHeap () returned 0x8a0000 [0150.888] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0150.888] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0150.888] GetProcessHeap () returned 0x8a0000 [0150.888] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0150.888] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0150.892] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.892] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf024cb1c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons.png", cAlternateFileName="EXAMPL~2.PNG")) returned 1 [0150.892] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf024cb1c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons2x.png", cAlternateFileName="EXAMPL~1.PNG")) returned 1 [0150.892] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon.png", cAlternateFileName="RHP_WO~2.PNG")) returned 1 [0150.892] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf024cb1c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x263, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_2x.png", cAlternateFileName="RHP_WO~3.PNG")) returned 1 [0150.892] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover.png", cAlternateFileName="RHP_WO~4.PNG")) returned 1 [0150.892] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover_2x.png", cAlternateFileName="RHP_WO~1.PNG")) returned 1 [0150.893] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf024cb1c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0150.893] GetProcessHeap () returned 0x8a0000 [0150.893] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0150.893] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf024cb1c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0150.894] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf024cb1c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.894] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf024cb1c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0150.894] GetProcessHeap () returned 0x8a0000 [0150.894] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0150.894] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0150.895] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.895] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons.png", cAlternateFileName="EXAMPL~2.PNG")) returned 1 [0150.895] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons2x.png", cAlternateFileName="EXAMPL~1.PNG")) returned 1 [0150.896] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf024cb1c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon.png", cAlternateFileName="RHP_WO~2.PNG")) returned 1 [0150.896] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_2x.png", cAlternateFileName="RHP_WO~3.PNG")) returned 1 [0150.896] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover.png", cAlternateFileName="RHP_WO~4.PNG")) returned 1 [0150.896] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf024cb1c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover_2x.png", cAlternateFileName="RHP_WO~1.PNG")) returned 1 [0150.896] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf024cb1c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover_2x.png", cAlternateFileName="RHP_WO~1.PNG")) returned 0 [0150.896] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0150.897] GetProcessHeap () returned 0x8a0000 [0150.897] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0150.897] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf024cb1c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0 [0150.897] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0150.897] GetProcessHeap () returned 0x8a0000 [0150.897] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0150.897] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf024cb1c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 0 [0150.897] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0150.897] GetProcessHeap () returned 0x8a0000 [0150.897] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0150.899] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0150.899] GetProcessHeap () returned 0x8a0000 [0150.899] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0150.899] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0150.900] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.900] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0150.900] GetProcessHeap () returned 0x8a0000 [0150.900] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0150.901] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0150.903] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.903] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-ae", cAlternateFileName="")) returned 1 [0150.903] GetProcessHeap () returned 0x8a0000 [0150.903] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0150.904] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ar-ae\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0150.904] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.904] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0150.905] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0150.905] GetProcessHeap () returned 0x8a0000 [0150.905] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0150.905] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1 [0150.905] GetProcessHeap () returned 0x8a0000 [0150.905] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0150.905] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ca-es\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0150.906] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.906] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x46d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0150.906] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x46d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0150.906] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0150.906] GetProcessHeap () returned 0x8a0000 [0150.906] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0150.906] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1 [0150.906] GetProcessHeap () returned 0x8a0000 [0150.906] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0150.906] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\cs-cz\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0150.906] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.907] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x473, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0150.907] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x473, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0150.907] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0150.907] GetProcessHeap () returned 0x8a0000 [0150.907] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0150.907] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0150.907] GetProcessHeap () returned 0x8a0000 [0150.907] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0150.907] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\da-dk\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0150.908] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.908] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x470, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0150.908] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x470, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0150.908] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0150.908] GetProcessHeap () returned 0x8a0000 [0150.908] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0150.908] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0150.908] GetProcessHeap () returned 0x8a0000 [0150.908] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0150.908] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\de-de\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0150.909] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.909] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x47f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0150.909] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x47f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0150.909] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0150.909] GetProcessHeap () returned 0x8a0000 [0150.909] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0150.909] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1 [0150.910] GetProcessHeap () returned 0x8a0000 [0150.910] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0150.910] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-ae\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0150.911] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.911] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x45b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0150.911] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x45b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0150.911] FindClose (in: hFindFile=0x993a00 | out: hFindFile=0x993a00) returned 1 [0150.911] GetProcessHeap () returned 0x8a0000 [0150.911] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0150.911] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0150.911] GetProcessHeap () returned 0x8a0000 [0150.911] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0150.911] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-gb\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0150.911] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.911] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0150.911] FindClose (in: hFindFile=0x993880 | out: hFindFile=0x993880) returned 1 [0150.911] GetProcessHeap () returned 0x8a0000 [0150.911] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0150.911] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1 [0150.912] GetProcessHeap () returned 0x8a0000 [0150.912] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0150.912] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-il\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0150.912] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.912] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x45b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0150.913] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x45b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0150.913] FindClose (in: hFindFile=0x993880 | out: hFindFile=0x993880) returned 1 [0150.913] GetProcessHeap () returned 0x8a0000 [0150.913] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0150.913] GetProcessHeap () returned 0x8a0000 [0150.913] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0150.913] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\es-es\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0150.914] GetProcessHeap () returned 0x8a0000 [0150.914] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0150.914] GetProcessHeap () returned 0x8a0000 [0150.914] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0150.914] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\eu-es\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0150.915] GetProcessHeap () returned 0x8a0000 [0150.915] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0150.915] GetProcessHeap () returned 0x8a0000 [0150.915] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0150.915] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fi-fi\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0150.915] GetProcessHeap () returned 0x8a0000 [0150.915] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0150.915] GetProcessHeap () returned 0x8a0000 [0150.915] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0150.915] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-fr\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0150.916] GetProcessHeap () returned 0x8a0000 [0150.916] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0150.916] GetProcessHeap () returned 0x8a0000 [0150.916] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0150.916] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-ma\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0150.917] GetProcessHeap () returned 0x8a0000 [0150.917] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0150.917] GetProcessHeap () returned 0x8a0000 [0150.917] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0150.918] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\he-il\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0150.920] GetProcessHeap () returned 0x8a0000 [0150.920] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0150.920] GetProcessHeap () returned 0x8a0000 [0150.920] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0150.920] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hr-hr\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0150.920] GetProcessHeap () returned 0x8a0000 [0150.920] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0150.920] GetProcessHeap () returned 0x8a0000 [0150.921] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0150.921] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hu-hu\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0150.921] GetProcessHeap () returned 0x8a0000 [0150.921] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0150.921] GetProcessHeap () returned 0x8a0000 [0150.922] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0150.922] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\it-it\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0150.922] GetProcessHeap () returned 0x8a0000 [0150.922] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0150.922] GetProcessHeap () returned 0x8a0000 [0150.922] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0150.922] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ja-jp\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0150.922] GetProcessHeap () returned 0x8a0000 [0150.922] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0150.923] GetProcessHeap () returned 0x8a0000 [0150.923] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0150.923] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ko-kr\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0150.923] GetProcessHeap () returned 0x8a0000 [0150.923] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0150.923] GetProcessHeap () returned 0x8a0000 [0150.923] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0150.924] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nb-no\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0150.924] GetProcessHeap () returned 0x8a0000 [0150.924] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0150.924] GetProcessHeap () returned 0x8a0000 [0150.924] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0150.924] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nl-nl\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0150.925] GetProcessHeap () returned 0x8a0000 [0150.925] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0150.925] GetProcessHeap () returned 0x8a0000 [0150.925] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0150.925] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pl-pl\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0150.925] GetProcessHeap () returned 0x8a0000 [0150.925] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0150.925] GetProcessHeap () returned 0x8a0000 [0150.925] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0150.925] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pt-br\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0150.926] GetProcessHeap () returned 0x8a0000 [0150.926] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0150.926] GetProcessHeap () returned 0x8a0000 [0150.926] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0150.926] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ro-ro\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0150.927] GetProcessHeap () returned 0x8a0000 [0150.927] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0150.927] GetProcessHeap () returned 0x8a0000 [0150.927] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0150.927] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\root\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0150.928] GetProcessHeap () returned 0x8a0000 [0150.928] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0150.928] GetProcessHeap () returned 0x8a0000 [0150.928] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0150.928] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ru-ru\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0151.186] GetProcessHeap () returned 0x8a0000 [0151.186] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.186] GetProcessHeap () returned 0x8a0000 [0151.186] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.187] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\sk-sk\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0151.188] GetProcessHeap () returned 0x8a0000 [0151.188] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.188] GetProcessHeap () returned 0x8a0000 [0151.188] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.188] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\sl-si\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0151.188] GetProcessHeap () returned 0x8a0000 [0151.188] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.188] GetProcessHeap () returned 0x8a0000 [0151.188] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.188] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\sl-sl\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0151.188] GetProcessHeap () returned 0x8a0000 [0151.189] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.189] GetProcessHeap () returned 0x8a0000 [0151.189] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.189] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\sv-se\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0151.189] GetProcessHeap () returned 0x8a0000 [0151.189] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.189] GetProcessHeap () returned 0x8a0000 [0151.189] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.189] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\tr-tr\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0151.189] GetProcessHeap () returned 0x8a0000 [0151.189] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.190] GetProcessHeap () returned 0x8a0000 [0151.190] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.190] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\uk-ua\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0151.190] GetProcessHeap () returned 0x8a0000 [0151.191] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.191] GetProcessHeap () returned 0x8a0000 [0151.191] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.191] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\zh-cn\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0151.191] GetProcessHeap () returned 0x8a0000 [0151.191] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.192] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1 [0151.192] GetProcessHeap () returned 0x8a0000 [0151.192] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.192] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\zh-tw\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0151.193] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.193] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x462, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0151.193] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x462, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0151.193] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0151.193] GetProcessHeap () returned 0x8a0000 [0151.193] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.193] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0 [0151.193] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0151.193] GetProcessHeap () returned 0x8a0000 [0151.194] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0151.194] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x399, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0151.194] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugins", cAlternateFileName="")) returned 1 [0151.194] GetProcessHeap () returned 0x8a0000 [0151.194] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0151.194] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\plugins\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0151.195] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.195] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp", cAlternateFileName="")) returned 1 [0151.195] GetProcessHeap () returned 0x8a0000 [0151.195] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.195] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\plugins\\rhp\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0151.195] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.195] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xdde, dwReserved0=0x0, dwReserved1=0x0, cFileName="combinepdf-selector.js", cAlternateFileName="COMBIN~1.JS")) returned 1 [0151.195] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2616, dwReserved0=0x0, dwReserved1=0x0, cFileName="combinepdf-tool-view.js", cAlternateFileName="COMBIN~2.JS")) returned 1 [0151.195] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2616, dwReserved0=0x0, dwReserved1=0x0, cFileName="combinepdf-tool-view.js", cAlternateFileName="COMBIN~2.JS")) returned 0 [0151.196] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0151.196] GetProcessHeap () returned 0x8a0000 [0151.196] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.196] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp", cAlternateFileName="")) returned 0 [0151.196] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0151.196] GetProcessHeap () returned 0x8a0000 [0151.196] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0151.196] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugins", cAlternateFileName="")) returned 0 [0151.196] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0151.196] GetProcessHeap () returned 0x8a0000 [0151.196] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0151.197] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0151.197] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0151.197] GetProcessHeap () returned 0x8a0000 [0151.197] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c80b8 | out: hHeap=0x8a0000) returned 1 [0151.198] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="createpdfupsell-app", cAlternateFileName="CREATE~1")) returned 1 [0151.198] GetProcessHeap () returned 0x8a0000 [0151.198] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c80b8 [0151.198] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\*", lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0151.198] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.198] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0151.199] GetProcessHeap () returned 0x8a0000 [0151.199] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0151.199] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0151.200] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.200] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-selector.css", cAlternateFileName="MAIN-S~1.CSS")) returned 1 [0151.200] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x126e, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0151.200] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x126e, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 0 [0151.200] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0151.200] GetProcessHeap () returned 0x8a0000 [0151.200] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0151.200] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0151.200] GetProcessHeap () returned 0x8a0000 [0151.200] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0151.200] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0151.202] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.202] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons.png", cAlternateFileName="EXAMPL~2.PNG")) returned 1 [0151.202] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons2x.png", cAlternateFileName="EXAMPL~1.PNG")) returned 1 [0151.202] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon.png", cAlternateFileName="RHP_WO~2.PNG")) returned 1 [0151.202] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x263, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_2x.png", cAlternateFileName="RHP_WO~3.PNG")) returned 1 [0151.202] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover.png", cAlternateFileName="RHP_WO~4.PNG")) returned 1 [0151.202] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover_2x.png", cAlternateFileName="RHP_WO~1.PNG")) returned 1 [0151.202] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0151.202] GetProcessHeap () returned 0x8a0000 [0151.202] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0151.203] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\themes\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0151.204] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.204] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0151.205] GetProcessHeap () returned 0x8a0000 [0151.205] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.205] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\themes\\dark\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0151.207] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.207] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons.png", cAlternateFileName="EXAMPL~2.PNG")) returned 1 [0151.207] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons2x.png", cAlternateFileName="EXAMPL~1.PNG")) returned 1 [0151.207] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon.png", cAlternateFileName="RHP_WO~2.PNG")) returned 1 [0151.207] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_2x.png", cAlternateFileName="RHP_WO~3.PNG")) returned 1 [0151.207] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover.png", cAlternateFileName="RHP_WO~4.PNG")) returned 1 [0151.207] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover_2x.png", cAlternateFileName="RHP_WO~1.PNG")) returned 1 [0151.207] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover_2x.png", cAlternateFileName="RHP_WO~1.PNG")) returned 0 [0151.207] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0151.208] GetProcessHeap () returned 0x8a0000 [0151.208] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.208] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0 [0151.208] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0151.208] GetProcessHeap () returned 0x8a0000 [0151.208] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0151.208] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 0 [0151.208] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0151.208] GetProcessHeap () returned 0x8a0000 [0151.208] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0151.210] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0151.210] GetProcessHeap () returned 0x8a0000 [0151.210] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0151.210] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0151.211] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.211] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0151.211] GetProcessHeap () returned 0x8a0000 [0151.211] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0151.212] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0151.214] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.214] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-ae", cAlternateFileName="")) returned 1 [0151.214] GetProcessHeap () returned 0x8a0000 [0151.214] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.214] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\ar-ae\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0151.215] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.215] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0151.215] FindClose (in: hFindFile=0x9939c0 | out: hFindFile=0x9939c0) returned 1 [0151.215] GetProcessHeap () returned 0x8a0000 [0151.215] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.215] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1 [0151.215] GetProcessHeap () returned 0x8a0000 [0151.215] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.215] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\ca-es\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0151.216] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.216] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4de, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0151.216] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4de, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0151.216] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0151.216] GetProcessHeap () returned 0x8a0000 [0151.217] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.217] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1 [0151.217] GetProcessHeap () returned 0x8a0000 [0151.217] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.217] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\cs-cz\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0151.218] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.218] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0151.218] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0151.218] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0151.218] GetProcessHeap () returned 0x8a0000 [0151.218] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.218] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0151.218] GetProcessHeap () returned 0x8a0000 [0151.218] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.218] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\da-dk\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0151.218] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.218] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0151.218] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0151.218] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0151.219] GetProcessHeap () returned 0x8a0000 [0151.219] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.219] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0151.219] GetProcessHeap () returned 0x8a0000 [0151.219] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.219] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\de-de\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0151.219] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.219] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0151.220] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0151.220] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0151.220] GetProcessHeap () returned 0x8a0000 [0151.220] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.220] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1 [0151.220] GetProcessHeap () returned 0x8a0000 [0151.220] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.220] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\en-ae\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0151.221] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.221] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0151.221] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0151.221] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0151.221] GetProcessHeap () returned 0x8a0000 [0151.221] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.221] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0151.221] GetProcessHeap () returned 0x8a0000 [0151.221] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.221] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\en-gb\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0151.221] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.221] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0151.222] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0151.222] GetProcessHeap () returned 0x8a0000 [0151.222] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.222] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1 [0151.222] GetProcessHeap () returned 0x8a0000 [0151.222] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.222] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\en-il\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0151.222] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.223] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0151.223] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0151.223] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0151.223] GetProcessHeap () returned 0x8a0000 [0151.223] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.223] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0151.223] GetProcessHeap () returned 0x8a0000 [0151.223] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.223] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\es-es\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0151.223] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.223] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0151.224] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0151.224] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0151.224] GetProcessHeap () returned 0x8a0000 [0151.224] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.224] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1 [0151.224] GetProcessHeap () returned 0x8a0000 [0151.224] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.224] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\eu-es\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0151.454] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.454] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0151.455] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0151.455] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0151.455] GetProcessHeap () returned 0x8a0000 [0151.455] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.455] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0151.455] GetProcessHeap () returned 0x8a0000 [0151.455] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.455] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\fi-fi\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0151.456] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.456] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0151.456] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0151.457] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0151.457] GetProcessHeap () returned 0x8a0000 [0151.457] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.457] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0151.457] GetProcessHeap () returned 0x8a0000 [0151.457] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.457] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\fr-fr\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0151.458] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.458] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0151.458] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0151.458] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0151.458] GetProcessHeap () returned 0x8a0000 [0151.458] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.458] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1 [0151.458] GetProcessHeap () returned 0x8a0000 [0151.459] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.459] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\fr-ma\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0151.460] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.460] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0151.460] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0151.460] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0151.460] GetProcessHeap () returned 0x8a0000 [0151.460] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.460] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1 [0151.460] GetProcessHeap () returned 0x8a0000 [0151.460] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.460] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\he-il\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0151.461] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.461] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0151.462] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0151.462] GetProcessHeap () returned 0x8a0000 [0151.462] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.462] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1 [0151.462] GetProcessHeap () returned 0x8a0000 [0151.462] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.462] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\hr-hr\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0151.462] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.462] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0151.463] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0151.463] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0151.463] GetProcessHeap () returned 0x8a0000 [0151.463] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.463] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1 [0151.463] GetProcessHeap () returned 0x8a0000 [0151.463] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.463] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\hu-hu\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0151.464] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.464] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0151.464] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0151.464] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0151.464] GetProcessHeap () returned 0x8a0000 [0151.464] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.465] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0151.465] GetProcessHeap () returned 0x8a0000 [0151.465] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.465] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\it-it\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0151.465] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.465] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4db, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0151.466] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4db, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0151.466] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0151.466] GetProcessHeap () returned 0x8a0000 [0151.466] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.466] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0151.466] GetProcessHeap () returned 0x8a0000 [0151.466] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.466] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\ja-jp\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0151.466] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.466] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0151.467] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0151.467] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0151.467] GetProcessHeap () returned 0x8a0000 [0151.467] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.467] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1 [0151.467] GetProcessHeap () returned 0x8a0000 [0151.467] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.467] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\ko-kr\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0151.468] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.468] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0151.468] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0151.468] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0151.468] GetProcessHeap () returned 0x8a0000 [0151.468] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.468] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0151.468] GetProcessHeap () returned 0x8a0000 [0151.469] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.469] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\nb-no\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0151.469] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.469] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0151.469] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0151.469] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0151.469] GetProcessHeap () returned 0x8a0000 [0151.469] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.469] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0151.469] GetProcessHeap () returned 0x8a0000 [0151.470] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.470] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\nl-nl\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0151.470] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.470] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0151.470] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0151.470] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0151.470] GetProcessHeap () returned 0x8a0000 [0151.470] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.470] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1 [0151.470] GetProcessHeap () returned 0x8a0000 [0151.471] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.471] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\pl-pl\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0151.471] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.471] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0151.471] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0151.471] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0151.471] GetProcessHeap () returned 0x8a0000 [0151.471] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.471] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0151.471] GetProcessHeap () returned 0x8a0000 [0151.472] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.472] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\pt-br\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0151.473] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.473] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0151.474] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0151.474] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0151.474] GetProcessHeap () returned 0x8a0000 [0151.474] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.474] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1 [0151.474] GetProcessHeap () returned 0x8a0000 [0151.474] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.474] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\ro-ro\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0151.475] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.475] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0151.475] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0151.475] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0151.476] GetProcessHeap () returned 0x8a0000 [0151.476] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.476] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0151.476] GetProcessHeap () returned 0x8a0000 [0151.476] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.476] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\root\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0151.476] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.476] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0151.476] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0151.476] FindClose (in: hFindFile=0x993a00 | out: hFindFile=0x993a00) returned 1 [0151.477] GetProcessHeap () returned 0x8a0000 [0151.477] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.477] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1 [0151.477] GetProcessHeap () returned 0x8a0000 [0151.477] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.477] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\ru-ru\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0151.477] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.477] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x55c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0151.477] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x55c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0151.477] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0151.478] GetProcessHeap () returned 0x8a0000 [0151.478] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.478] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1 [0151.478] GetProcessHeap () returned 0x8a0000 [0151.478] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.478] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\sk-sk\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0151.479] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.479] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0151.479] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0151.479] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0151.479] GetProcessHeap () returned 0x8a0000 [0151.479] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.479] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1 [0151.479] GetProcessHeap () returned 0x8a0000 [0151.479] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.480] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\sl-si\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0151.480] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.480] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0151.480] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0151.480] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0151.480] GetProcessHeap () returned 0x8a0000 [0151.480] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.480] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1 [0151.481] GetProcessHeap () returned 0x8a0000 [0151.481] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.481] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\sl-sl\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0151.481] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.481] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0151.481] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0151.481] GetProcessHeap () returned 0x8a0000 [0151.481] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.481] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0151.481] GetProcessHeap () returned 0x8a0000 [0151.481] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.482] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\sv-se\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0151.482] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.482] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0151.482] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0151.482] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0151.482] GetProcessHeap () returned 0x8a0000 [0151.482] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.482] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1 [0151.482] GetProcessHeap () returned 0x8a0000 [0151.482] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.483] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\tr-tr\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0151.483] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.483] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0151.483] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0151.483] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0151.484] GetProcessHeap () returned 0x8a0000 [0151.484] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.484] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0151.484] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-ua", cAlternateFileName="")) returned 1 [0151.484] GetProcessHeap () returned 0x8a0000 [0151.484] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.484] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\uk-ua\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0151.484] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.484] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x58a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0151.485] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x58a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0151.485] FindClose (in: hFindFile=0x993880 | out: hFindFile=0x993880) returned 1 [0151.485] GetProcessHeap () returned 0x8a0000 [0151.485] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.485] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1 [0151.485] GetProcessHeap () returned 0x8a0000 [0151.485] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.485] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\zh-cn\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0151.488] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.488] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0151.488] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0151.488] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0151.488] GetProcessHeap () returned 0x8a0000 [0151.488] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.488] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1 [0151.488] GetProcessHeap () returned 0x8a0000 [0151.489] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.489] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\zh-tw\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0151.489] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.489] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0151.489] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0151.489] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0151.489] GetProcessHeap () returned 0x8a0000 [0151.489] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.489] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0 [0151.490] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0151.490] GetProcessHeap () returned 0x8a0000 [0151.490] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0151.490] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0151.490] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugins", cAlternateFileName="")) returned 1 [0151.490] GetProcessHeap () returned 0x8a0000 [0151.490] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0151.490] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\plugins\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0151.491] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.491] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp", cAlternateFileName="")) returned 1 [0151.491] GetProcessHeap () returned 0x8a0000 [0151.491] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.491] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\plugins\\rhp\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0151.640] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.640] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xf7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="createpdfupsell-app-selector.js", cAlternateFileName="CREATE~2.JS")) returned 1 [0151.640] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2771, dwReserved0=0x0, dwReserved1=0x0, cFileName="createpdfupsell-app-tool-view.js", cAlternateFileName="CREATE~1.JS")) returned 1 [0151.640] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2771, dwReserved0=0x0, dwReserved1=0x0, cFileName="createpdfupsell-app-tool-view.js", cAlternateFileName="CREATE~1.JS")) returned 0 [0151.640] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0151.640] GetProcessHeap () returned 0x8a0000 [0151.640] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.640] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp", cAlternateFileName="")) returned 0 [0151.640] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0151.640] GetProcessHeap () returned 0x8a0000 [0151.640] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0151.640] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugins", cAlternateFileName="")) returned 0 [0151.641] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0151.641] GetProcessHeap () returned 0x8a0000 [0151.641] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0151.642] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0151.642] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0151.642] GetProcessHeap () returned 0x8a0000 [0151.642] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c80b8 | out: hHeap=0x8a0000) returned 1 [0151.643] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dc-annotations", cAlternateFileName="DC-ANN~1")) returned 1 [0151.643] GetProcessHeap () returned 0x8a0000 [0151.643] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c80b8 [0151.643] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\dc-annotations\\*", lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0151.645] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.645] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0151.645] GetProcessHeap () returned 0x8a0000 [0151.645] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0151.645] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\dc-annotations\\css\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0151.646] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.646] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0151.646] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0151.646] GetProcessHeap () returned 0x8a0000 [0151.646] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0151.646] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0151.646] GetProcessHeap () returned 0x8a0000 [0151.646] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0151.646] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\dc-annotations\\js\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0151.646] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.646] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2d73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0151.647] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2d73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 0 [0151.647] FindClose (in: hFindFile=0x9939c0 | out: hFindFile=0x9939c0) returned 1 [0151.647] GetProcessHeap () returned 0x8a0000 [0151.647] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0151.647] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0151.647] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0151.647] GetProcessHeap () returned 0x8a0000 [0151.647] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c80b8 | out: hHeap=0x8a0000) returned 1 [0151.647] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop-connector-files", cAlternateFileName="DESKTO~2")) returned 1 [0151.647] GetProcessHeap () returned 0x8a0000 [0151.647] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c80b8 [0151.647] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\*", lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x1b7c046, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0151.649] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x1b7c046, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.649] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b7c046, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b7c046, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b7c046, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0151.649] GetProcessHeap () returned 0x8a0000 [0151.649] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0151.649] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\css\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b7c046, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b7c046, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b7c046, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0151.650] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b7c046, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b7c046, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b7c046, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.651] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b7c046, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b7c046, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b7c046, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x322, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-selector.css", cAlternateFileName="MAIN-S~1.CSS")) returned 1 [0151.651] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b7c046, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b7c046, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b7c046, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xcf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0151.651] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b7c046, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b7c046, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b7c046, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xcf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 0 [0151.651] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0151.651] GetProcessHeap () returned 0x8a0000 [0151.651] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0151.651] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0151.651] GetProcessHeap () returned 0x8a0000 [0151.651] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0151.651] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x1b7c046, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0151.652] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x1b7c046, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.652] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0151.652] GetProcessHeap () returned 0x8a0000 [0151.652] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0151.653] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0151.654] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.654] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-ae", cAlternateFileName="")) returned 1 [0151.655] GetProcessHeap () returned 0x8a0000 [0151.655] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.655] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\ar-ae\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0151.655] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.655] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0151.655] FindClose (in: hFindFile=0x993880 | out: hFindFile=0x993880) returned 1 [0151.655] GetProcessHeap () returned 0x8a0000 [0151.655] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.655] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1264927, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf1264927, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1264927, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1 [0151.655] GetProcessHeap () returned 0x8a0000 [0151.655] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.655] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\ca-es\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1264927, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf1264927, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0151.656] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1264927, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf1264927, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.656] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x553, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0151.656] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x553, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0151.656] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0151.657] GetProcessHeap () returned 0x8a0000 [0151.657] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.657] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1 [0151.657] GetProcessHeap () returned 0x8a0000 [0151.657] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.657] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\cs-cz\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0151.658] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.658] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x544, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0151.658] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x544, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0151.658] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0151.659] GetProcessHeap () returned 0x8a0000 [0151.659] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.659] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0151.659] GetProcessHeap () returned 0x8a0000 [0151.659] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.659] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\da-dk\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0151.660] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.660] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x53c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0151.660] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x53c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0151.660] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0151.660] GetProcessHeap () returned 0x8a0000 [0151.660] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.660] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0151.660] GetProcessHeap () returned 0x8a0000 [0151.660] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.660] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\de-de\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0151.661] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.661] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x555, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0151.661] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x555, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0151.661] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0151.661] GetProcessHeap () returned 0x8a0000 [0151.661] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.661] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1 [0151.662] GetProcessHeap () returned 0x8a0000 [0151.662] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.662] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\en-ae\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0151.662] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.663] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x525, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0151.663] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x525, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0151.663] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0151.663] GetProcessHeap () returned 0x8a0000 [0151.663] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.663] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0151.663] GetProcessHeap () returned 0x8a0000 [0151.663] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.663] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\en-gb\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0151.665] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.666] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x337, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0151.666] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x337, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0151.666] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0151.666] GetProcessHeap () returned 0x8a0000 [0151.666] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.666] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1 [0151.666] GetProcessHeap () returned 0x8a0000 [0151.666] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.666] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\en-il\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0151.667] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.667] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x525, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0151.667] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x525, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0151.667] FindClose (in: hFindFile=0x993a00 | out: hFindFile=0x993a00) returned 1 [0151.667] GetProcessHeap () returned 0x8a0000 [0151.667] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.667] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0151.667] GetProcessHeap () returned 0x8a0000 [0151.667] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.667] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\es-es\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0151.668] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.668] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x554, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0151.668] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x554, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0151.668] FindClose (in: hFindFile=0x993880 | out: hFindFile=0x993880) returned 1 [0151.668] GetProcessHeap () returned 0x8a0000 [0151.668] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.668] GetProcessHeap () returned 0x8a0000 [0151.668] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.668] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\eu-es\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0151.669] GetProcessHeap () returned 0x8a0000 [0151.669] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.669] GetProcessHeap () returned 0x8a0000 [0151.669] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.669] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\fi-fi\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0151.670] GetProcessHeap () returned 0x8a0000 [0151.670] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.670] GetProcessHeap () returned 0x8a0000 [0151.670] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.670] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\fr-fr\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0151.671] GetProcessHeap () returned 0x8a0000 [0151.671] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.671] GetProcessHeap () returned 0x8a0000 [0151.671] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.671] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\fr-ma\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0151.672] GetProcessHeap () returned 0x8a0000 [0151.672] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.672] GetProcessHeap () returned 0x8a0000 [0151.672] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.672] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\he-il\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1264927, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf1264927, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1264927, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0151.672] GetProcessHeap () returned 0x8a0000 [0151.672] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.673] GetProcessHeap () returned 0x8a0000 [0151.673] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.673] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\hr-hr\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0151.677] GetProcessHeap () returned 0x8a0000 [0151.677] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.677] GetProcessHeap () returned 0x8a0000 [0151.677] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.677] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\hu-hu\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0151.678] GetProcessHeap () returned 0x8a0000 [0151.678] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.678] GetProcessHeap () returned 0x8a0000 [0151.678] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.678] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\it-it\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0151.678] GetProcessHeap () returned 0x8a0000 [0151.678] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.678] GetProcessHeap () returned 0x8a0000 [0151.678] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.678] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\ja-jp\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0151.679] GetProcessHeap () returned 0x8a0000 [0151.680] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.680] GetProcessHeap () returned 0x8a0000 [0151.680] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.680] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\ko-kr\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0151.680] GetProcessHeap () returned 0x8a0000 [0151.680] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.680] GetProcessHeap () returned 0x8a0000 [0151.680] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0151.680] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\nb-no\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0151.868] GetProcessHeap () returned 0x8a0000 [0151.868] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0151.868] GetProcessHeap () returned 0x8a0000 [0151.868] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0152.066] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\nl-nl\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0152.162] GetProcessHeap () returned 0x8a0000 [0152.162] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0152.220] GetProcessHeap () returned 0x8a0000 [0152.220] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0152.220] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\pl-pl\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0152.277] GetProcessHeap () returned 0x8a0000 [0152.277] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0152.277] GetProcessHeap () returned 0x8a0000 [0152.277] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0152.277] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\pt-br\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0152.282] GetProcessHeap () returned 0x8a0000 [0152.282] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0152.282] GetProcessHeap () returned 0x8a0000 [0152.282] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0152.282] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\ro-ro\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0152.295] GetProcessHeap () returned 0x8a0000 [0152.295] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0152.295] GetProcessHeap () returned 0x8a0000 [0152.295] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0152.295] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\root\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0152.295] GetProcessHeap () returned 0x8a0000 [0152.295] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0152.295] GetProcessHeap () returned 0x8a0000 [0152.295] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0152.295] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\ru-ru\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0152.296] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.296] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0152.296] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0152.296] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0152.296] GetProcessHeap () returned 0x8a0000 [0152.296] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0152.296] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1 [0152.296] GetProcessHeap () returned 0x8a0000 [0152.296] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0152.296] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\sk-sk\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0152.303] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.303] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf10e716b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x59e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0152.303] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf10e716b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x59e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0152.303] FindClose (in: hFindFile=0x9939c0 | out: hFindFile=0x9939c0) returned 1 [0152.303] GetProcessHeap () returned 0x8a0000 [0152.303] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0152.303] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1 [0152.303] GetProcessHeap () returned 0x8a0000 [0152.303] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0152.303] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\sl-si\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0152.304] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.304] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x54c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0152.304] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x54c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0152.304] FindClose (in: hFindFile=0x993880 | out: hFindFile=0x993880) returned 1 [0152.304] GetProcessHeap () returned 0x8a0000 [0152.304] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0152.304] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1 [0152.304] GetProcessHeap () returned 0x8a0000 [0152.304] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0152.304] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\sl-sl\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0152.306] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.306] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0152.306] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0152.306] GetProcessHeap () returned 0x8a0000 [0152.306] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0152.306] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0152.307] GetProcessHeap () returned 0x8a0000 [0152.307] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0152.307] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\sv-se\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0152.308] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.308] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0152.308] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0152.308] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0152.308] GetProcessHeap () returned 0x8a0000 [0152.308] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0152.308] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1 [0152.308] GetProcessHeap () returned 0x8a0000 [0152.308] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0152.308] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\tr-tr\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0152.310] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.310] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x541, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0152.310] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x541, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0152.310] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0152.310] GetProcessHeap () returned 0x8a0000 [0152.310] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0152.310] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0152.310] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-ua", cAlternateFileName="")) returned 1 [0152.311] GetProcessHeap () returned 0x8a0000 [0152.311] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0152.311] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\uk-ua\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0152.318] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.318] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x639, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0152.318] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x639, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0152.318] FindClose (in: hFindFile=0x9939c0 | out: hFindFile=0x9939c0) returned 1 [0152.318] GetProcessHeap () returned 0x8a0000 [0152.318] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0152.318] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1 [0152.318] GetProcessHeap () returned 0x8a0000 [0152.318] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0152.318] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\zh-cn\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0152.319] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.319] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x515, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0152.319] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x515, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0152.319] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0152.320] GetProcessHeap () returned 0x8a0000 [0152.320] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0152.320] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf10e716b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf10e716b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf10e716b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1 [0152.320] GetProcessHeap () returned 0x8a0000 [0152.320] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0152.320] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\zh-tw\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf10e716b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf10e716b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1264927, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0152.320] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf10e716b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf10e716b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1264927, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.320] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1264927, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf1264927, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1264927, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x50a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0152.320] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1264927, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf1264927, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1264927, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x50a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0152.320] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0152.320] GetProcessHeap () returned 0x8a0000 [0152.320] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0152.320] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf10e716b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf10e716b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf10e716b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0 [0152.320] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0152.321] GetProcessHeap () returned 0x8a0000 [0152.321] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0152.321] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b7c046, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xce0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0152.321] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b7c046, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b7c046, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b7c046, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xbac, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 1 [0152.321] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b7c046, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b7c046, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b7c046, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xbac, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 0 [0152.321] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0152.321] GetProcessHeap () returned 0x8a0000 [0152.321] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0152.322] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0152.322] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0152.322] GetProcessHeap () returned 0x8a0000 [0152.322] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c80b8 | out: hHeap=0x8a0000) returned 1 [0152.323] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefca319f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefca319f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefca319f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop-connector-files-select", cAlternateFileName="DESKTO~1")) returned 1 [0152.323] GetProcessHeap () returned 0x8a0000 [0152.323] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c80b8 [0152.323] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files-select\\*", lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefca319f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefca319f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd3bb05, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0152.328] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefca319f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefca319f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd3bb05, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.328] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd3bb05, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd3bb05, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd3bb05, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0152.328] GetProcessHeap () returned 0x8a0000 [0152.328] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0152.328] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files-select\\css\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd3bb05, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd3bb05, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd3bb05, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0152.330] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd3bb05, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd3bb05, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd3bb05, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.330] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd3bb05, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd3bb05, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd61dea, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x645, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-selector.css", cAlternateFileName="MAIN-S~1.CSS")) returned 1 [0152.330] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd3bb05, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd3bb05, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd3bb05, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1014, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0152.330] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd3bb05, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd3bb05, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd3bb05, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1014, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 0 [0152.330] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0152.330] GetProcessHeap () returned 0x8a0000 [0152.330] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0152.330] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd3bb05, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd3bb05, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd3bb05, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0152.331] GetProcessHeap () returned 0x8a0000 [0152.331] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0152.331] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files-select\\js\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd3bb05, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd3bb05, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd3bb05, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0152.333] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd3bb05, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd3bb05, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd3bb05, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.333] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd3bb05, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd3bb05, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd3bb05, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xe371, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0152.333] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd3bb05, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd3bb05, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd3bb05, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xebe, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 1 [0152.334] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd3bb05, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd3bb05, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd3bb05, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xebe, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 0 [0152.334] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0152.334] GetProcessHeap () returned 0x8a0000 [0152.334] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0152.334] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd3bb05, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd3bb05, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd3bb05, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0152.334] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0152.334] GetProcessHeap () returned 0x8a0000 [0152.334] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c80b8 | out: hHeap=0x8a0000) returned 1 [0152.334] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="digsig", cAlternateFileName="")) returned 1 [0152.334] GetProcessHeap () returned 0x8a0000 [0152.334] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c80b8 [0152.334] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\*", lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0152.341] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.342] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0152.342] GetProcessHeap () returned 0x8a0000 [0152.342] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0152.342] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\css\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0152.693] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.693] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x68c7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0152.693] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x68c7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 0 [0152.693] FindClose (in: hFindFile=0x993880 | out: hFindFile=0x993880) returned 1 [0152.694] GetProcessHeap () returned 0x8a0000 [0152.694] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0152.694] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0152.694] GetProcessHeap () returned 0x8a0000 [0152.694] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0152.694] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\images\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0152.695] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.695] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2cd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="digsig_icons.png", cAlternateFileName="DIGSIG~2.PNG")) returned 1 [0152.695] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6255, dwReserved0=0x0, dwReserved1=0x0, cFileName="digsig_icons_2x.png", cAlternateFileName="DIGSIG~1.PNG")) returned 1 [0152.695] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0152.695] GetProcessHeap () returned 0x8a0000 [0152.695] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0152.696] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\images\\themes\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0152.696] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.697] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0152.697] GetProcessHeap () returned 0x8a0000 [0152.697] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0152.697] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\images\\themes\\dark\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0152.697] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.697] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x27b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="digsig_icons.png", cAlternateFileName="DIGSIG~2.PNG")) returned 1 [0152.697] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x555e, dwReserved0=0x0, dwReserved1=0x0, cFileName="digsig_icons_2x.png", cAlternateFileName="DIGSIG~1.PNG")) returned 1 [0152.697] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x555e, dwReserved0=0x0, dwReserved1=0x0, cFileName="digsig_icons_2x.png", cAlternateFileName="DIGSIG~1.PNG")) returned 0 [0152.697] FindClose (in: hFindFile=0x9939c0 | out: hFindFile=0x9939c0) returned 1 [0152.697] GetProcessHeap () returned 0x8a0000 [0152.697] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0152.697] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0 [0152.698] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0152.699] GetProcessHeap () returned 0x8a0000 [0152.699] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0152.699] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 0 [0152.699] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0152.699] GetProcessHeap () returned 0x8a0000 [0152.699] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0152.700] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0152.700] GetProcessHeap () returned 0x8a0000 [0152.700] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0152.701] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0152.702] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.702] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0152.702] GetProcessHeap () returned 0x8a0000 [0152.702] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0152.703] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0152.706] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.706] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-ae", cAlternateFileName="")) returned 1 [0152.706] GetProcessHeap () returned 0x8a0000 [0152.706] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0152.706] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\ar-ae\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0152.707] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.707] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0152.707] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0152.707] GetProcessHeap () returned 0x8a0000 [0152.707] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0152.707] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1 [0152.707] GetProcessHeap () returned 0x8a0000 [0152.707] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0152.707] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\ca-es\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0152.708] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.708] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x27ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0152.709] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x27ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0152.709] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0152.709] GetProcessHeap () returned 0x8a0000 [0152.709] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0152.709] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1 [0152.709] GetProcessHeap () returned 0x8a0000 [0152.709] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0152.709] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\cs-cz\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0152.709] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.709] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x26d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0152.709] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x26d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0152.709] FindClose (in: hFindFile=0x993880 | out: hFindFile=0x993880) returned 1 [0152.710] GetProcessHeap () returned 0x8a0000 [0152.710] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0152.710] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0152.710] GetProcessHeap () returned 0x8a0000 [0152.710] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0152.710] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\da-dk\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0152.710] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.710] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x24a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0152.710] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x24a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0152.710] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0152.710] GetProcessHeap () returned 0x8a0000 [0152.710] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0152.710] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0152.710] GetProcessHeap () returned 0x8a0000 [0152.711] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0152.711] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\de-de\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0152.711] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.711] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0152.711] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0152.712] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0152.712] GetProcessHeap () returned 0x8a0000 [0152.712] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0152.712] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1 [0152.712] GetProcessHeap () returned 0x8a0000 [0152.712] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0152.712] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\en-ae\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0152.713] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.713] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2364, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0152.713] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2364, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0152.713] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0152.713] GetProcessHeap () returned 0x8a0000 [0152.713] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0152.713] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0152.713] GetProcessHeap () returned 0x8a0000 [0152.713] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0152.713] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\en-gb\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0152.714] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.714] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0152.714] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0152.714] GetProcessHeap () returned 0x8a0000 [0152.714] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0152.714] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1 [0152.714] GetProcessHeap () returned 0x8a0000 [0152.714] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0152.714] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\en-il\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0152.715] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.715] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2364, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0152.715] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2364, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0152.715] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0152.715] GetProcessHeap () returned 0x8a0000 [0152.715] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0152.715] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0152.715] GetProcessHeap () returned 0x8a0000 [0152.715] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0152.715] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\es-es\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0152.716] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.716] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2747, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0152.716] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2747, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0152.716] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0152.716] GetProcessHeap () returned 0x8a0000 [0152.716] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0152.716] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1 [0152.716] GetProcessHeap () returned 0x8a0000 [0152.716] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0152.716] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\eu-es\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0152.717] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.717] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x25ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0152.717] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x25ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0152.717] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0152.717] GetProcessHeap () returned 0x8a0000 [0152.717] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0152.717] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0152.717] GetProcessHeap () returned 0x8a0000 [0152.717] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0152.717] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\fi-fi\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0152.718] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.718] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2666, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0152.718] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2666, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0152.719] FindClose (in: hFindFile=0x993880 | out: hFindFile=0x993880) returned 1 [0152.719] GetProcessHeap () returned 0x8a0000 [0152.719] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0152.719] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0152.719] GetProcessHeap () returned 0x8a0000 [0152.719] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0152.719] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\fr-fr\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0152.719] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.720] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2aeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0152.720] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2aeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0152.720] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0152.720] GetProcessHeap () returned 0x8a0000 [0152.720] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0152.720] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1 [0152.720] GetProcessHeap () returned 0x8a0000 [0152.720] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0152.720] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\fr-ma\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0152.721] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.721] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2aeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0152.721] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2aeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0152.721] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0152.721] GetProcessHeap () returned 0x8a0000 [0152.721] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0152.721] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1 [0152.721] GetProcessHeap () returned 0x8a0000 [0152.721] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0152.721] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\he-il\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0152.724] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.724] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0152.724] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0152.724] GetProcessHeap () returned 0x8a0000 [0152.724] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0152.724] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1 [0152.724] GetProcessHeap () returned 0x8a0000 [0152.724] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0152.724] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\hr-hr\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0152.724] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.724] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x25fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0152.724] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x25fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0152.724] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0152.725] GetProcessHeap () returned 0x8a0000 [0152.725] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0152.725] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1 [0152.725] GetProcessHeap () returned 0x8a0000 [0152.725] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0152.725] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\hu-hu\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0152.726] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.726] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x298d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0152.726] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x298d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0152.726] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0152.726] GetProcessHeap () returned 0x8a0000 [0152.726] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0152.726] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0152.726] GetProcessHeap () returned 0x8a0000 [0152.726] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0152.726] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\it-it\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0152.727] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.727] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x25a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0152.727] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x25a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0152.727] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0152.727] GetProcessHeap () returned 0x8a0000 [0152.727] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0152.727] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0152.727] GetProcessHeap () returned 0x8a0000 [0152.728] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0152.728] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\ja-jp\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0152.728] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.729] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2a85, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0152.729] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2a85, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0152.729] FindClose (in: hFindFile=0x993880 | out: hFindFile=0x993880) returned 1 [0152.729] GetProcessHeap () returned 0x8a0000 [0152.729] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0152.729] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1 [0152.729] GetProcessHeap () returned 0x8a0000 [0152.729] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0152.729] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\ko-kr\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0152.730] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.730] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2592, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0152.730] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2592, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0152.730] FindClose (in: hFindFile=0x993880 | out: hFindFile=0x993880) returned 1 [0152.730] GetProcessHeap () returned 0x8a0000 [0152.730] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0152.730] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0152.730] GetProcessHeap () returned 0x8a0000 [0152.730] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0152.730] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\nb-no\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0152.731] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.731] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2452, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0152.731] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2452, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0152.731] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0152.731] GetProcessHeap () returned 0x8a0000 [0152.731] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0152.731] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0152.731] GetProcessHeap () returned 0x8a0000 [0152.731] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0152.731] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\nl-nl\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0152.731] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.731] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x26c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0152.731] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x26c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0152.732] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0152.732] GetProcessHeap () returned 0x8a0000 [0152.732] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0152.732] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1 [0152.732] GetProcessHeap () returned 0x8a0000 [0152.732] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0152.732] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\pl-pl\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0152.732] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.732] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x27c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0152.732] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x27c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0152.732] FindClose (in: hFindFile=0x993880 | out: hFindFile=0x993880) returned 1 [0152.732] GetProcessHeap () returned 0x8a0000 [0152.732] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0152.732] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0152.732] GetProcessHeap () returned 0x8a0000 [0152.732] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0152.732] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\pt-br\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0152.733] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.733] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x252a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0152.733] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x252a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0152.733] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0152.734] GetProcessHeap () returned 0x8a0000 [0152.734] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0152.734] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1 [0152.734] GetProcessHeap () returned 0x8a0000 [0152.734] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0152.734] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\ro-ro\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0152.734] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.734] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x280a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0152.734] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x280a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0152.734] FindClose (in: hFindFile=0x993880 | out: hFindFile=0x993880) returned 1 [0152.734] GetProcessHeap () returned 0x8a0000 [0152.734] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0152.734] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0152.734] GetProcessHeap () returned 0x8a0000 [0152.734] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0152.734] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\root\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0152.735] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.735] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2364, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0152.735] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2364, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0152.735] FindClose (in: hFindFile=0x9939c0 | out: hFindFile=0x9939c0) returned 1 [0152.735] GetProcessHeap () returned 0x8a0000 [0152.735] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0152.837] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1 [0152.837] GetProcessHeap () returned 0x8a0000 [0152.845] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0152.845] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\ru-ru\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0152.868] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.868] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x39bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0152.868] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x39bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0152.876] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0152.876] GetProcessHeap () returned 0x8a0000 [0152.876] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0152.877] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1 [0152.884] GetProcessHeap () returned 0x8a0000 [0152.884] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0152.884] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\sk-sk\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0152.885] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.885] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2920, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0152.885] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2920, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0152.885] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0152.885] GetProcessHeap () returned 0x8a0000 [0152.885] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0152.885] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1 [0152.885] GetProcessHeap () returned 0x8a0000 [0152.885] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0152.885] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\sl-si\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0152.886] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.886] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x255b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0152.886] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x255b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0152.886] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0152.886] GetProcessHeap () returned 0x8a0000 [0152.886] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0152.886] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1 [0152.886] GetProcessHeap () returned 0x8a0000 [0152.886] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0152.886] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\sl-sl\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0152.886] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.886] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0152.886] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0152.887] GetProcessHeap () returned 0x8a0000 [0152.887] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0152.887] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0152.887] GetProcessHeap () returned 0x8a0000 [0152.887] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0152.887] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\sv-se\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0152.887] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.887] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2465, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0152.887] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2465, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0152.887] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0152.887] GetProcessHeap () returned 0x8a0000 [0152.887] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0152.887] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1 [0152.888] GetProcessHeap () returned 0x8a0000 [0152.888] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0152.888] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\tr-tr\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0152.888] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.888] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x263b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0152.888] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x263b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0152.888] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0152.888] GetProcessHeap () returned 0x8a0000 [0152.888] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0152.888] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0152.888] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-ua", cAlternateFileName="")) returned 1 [0152.888] GetProcessHeap () returned 0x8a0000 [0152.888] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0152.888] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\uk-ua\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0152.889] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.889] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x39fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0152.889] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x39fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0152.889] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0152.889] GetProcessHeap () returned 0x8a0000 [0152.889] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0152.889] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1 [0152.889] GetProcessHeap () returned 0x8a0000 [0152.889] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0152.889] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\zh-cn\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0152.889] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.890] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x221d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0152.890] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x221d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0152.890] FindClose (in: hFindFile=0x993880 | out: hFindFile=0x993880) returned 1 [0152.890] GetProcessHeap () returned 0x8a0000 [0152.890] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0152.890] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1 [0152.890] GetProcessHeap () returned 0x8a0000 [0152.890] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0152.890] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\zh-tw\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0152.890] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.890] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2155, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0152.890] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2155, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0152.890] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0152.890] GetProcessHeap () returned 0x8a0000 [0152.890] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0152.890] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0 [0152.891] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0152.891] GetProcessHeap () returned 0x8a0000 [0152.891] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0152.891] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2b4e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0152.891] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 1 [0152.891] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 0 [0152.891] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0152.891] GetProcessHeap () returned 0x8a0000 [0152.891] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0152.892] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0152.892] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0152.892] GetProcessHeap () returned 0x8a0000 [0152.892] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c80b8 | out: hHeap=0x8a0000) returned 1 [0152.893] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b7c046, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b7c046, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b7c046, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="editpdf", cAlternateFileName="")) returned 1 [0152.893] GetProcessHeap () returned 0x8a0000 [0152.893] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c80b8 [0152.893] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\*", lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b7c046, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b7c046, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0152.900] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b7c046, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b7c046, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.900] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0152.900] GetProcessHeap () returned 0x8a0000 [0152.900] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0152.900] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\css\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0152.903] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.903] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-selector.css", cAlternateFileName="MAIN-S~1.CSS")) returned 1 [0152.903] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x11be, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0152.903] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x11be, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 0 [0152.904] FindClose (in: hFindFile=0x993880 | out: hFindFile=0x993880) returned 1 [0152.904] GetProcessHeap () returned 0x8a0000 [0152.904] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0152.904] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b7c046, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b7c046, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b7c046, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0152.904] GetProcessHeap () returned 0x8a0000 [0152.904] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0152.904] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\images\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b7c046, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b7c046, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0152.906] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b7c046, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b7c046, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.906] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f0f931, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f0f931, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f0f931, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons.png", cAlternateFileName="EXAMPL~2.PNG")) returned 1 [0152.906] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f0f931, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f0f931, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f0f931, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons2x.png", cAlternateFileName="EXAMPL~1.PNG")) returned 1 [0152.906] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b7c046, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b7c046, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b7c046, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x1bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon.png", cAlternateFileName="RHP_WO~2.PNG")) returned 1 [0152.906] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b7c046, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b7c046, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f0f931, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x263, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_2x.png", cAlternateFileName="RHP_WO~3.PNG")) returned 1 [0152.907] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover.png", cAlternateFileName="RHP_WO~4.PNG")) returned 1 [0152.907] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b7c046, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b7c046, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b7c046, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover_2x.png", cAlternateFileName="RHP_WO~1.PNG")) returned 1 [0152.907] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f0f931, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f0f931, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f0f931, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0152.907] GetProcessHeap () returned 0x8a0000 [0152.907] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0152.908] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\images\\themes\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f0f931, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f0f931, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f0f931, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0152.909] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f0f931, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f0f931, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f0f931, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.909] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f0f931, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f0f931, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f0f931, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0152.909] GetProcessHeap () returned 0x8a0000 [0152.909] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0152.910] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\images\\themes\\dark\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f0f931, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f0f931, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0152.926] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f0f931, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f0f931, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.927] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons.png", cAlternateFileName="EXAMPL~2.PNG")) returned 1 [0152.927] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f35b9b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f35b9b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f35b9b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons2x.png", cAlternateFileName="EXAMPL~1.PNG")) returned 1 [0152.927] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f0f931, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f0f931, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f0f931, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon.png", cAlternateFileName="RHP_WO~2.PNG")) returned 1 [0152.927] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f0f931, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f0f931, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f35b9b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_2x.png", cAlternateFileName="RHP_WO~3.PNG")) returned 1 [0152.927] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover.png", cAlternateFileName="RHP_WO~4.PNG")) returned 1 [0152.927] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f0f931, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f0f931, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f0f931, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover_2x.png", cAlternateFileName="RHP_WO~1.PNG")) returned 1 [0152.927] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f0f931, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f0f931, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f0f931, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover_2x.png", cAlternateFileName="RHP_WO~1.PNG")) returned 0 [0152.927] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0152.928] GetProcessHeap () returned 0x8a0000 [0152.928] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0152.928] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f0f931, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f0f931, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f0f931, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0 [0152.928] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0152.928] GetProcessHeap () returned 0x8a0000 [0152.928] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0152.928] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f0f931, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f0f931, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f0f931, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 0 [0152.928] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0152.928] GetProcessHeap () returned 0x8a0000 [0152.928] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0152.930] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0152.930] GetProcessHeap () returned 0x8a0000 [0152.930] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0152.930] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0152.931] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.932] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0152.932] GetProcessHeap () returned 0x8a0000 [0152.932] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0152.933] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0152.935] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.935] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-ae", cAlternateFileName="")) returned 1 [0152.935] GetProcessHeap () returned 0x8a0000 [0152.935] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0152.935] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\ar-ae\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0152.937] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.937] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0152.937] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0152.937] GetProcessHeap () returned 0x8a0000 [0152.937] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0152.937] GetProcessHeap () returned 0x8a0000 [0152.937] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0152.937] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\ca-es\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0152.945] GetProcessHeap () returned 0x8a0000 [0152.945] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0152.945] GetProcessHeap () returned 0x8a0000 [0152.945] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0152.945] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\cs-cz\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0152.948] GetProcessHeap () returned 0x8a0000 [0152.948] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0152.948] GetProcessHeap () returned 0x8a0000 [0152.948] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0152.949] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\da-dk\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0152.950] GetProcessHeap () returned 0x8a0000 [0152.950] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0152.950] GetProcessHeap () returned 0x8a0000 [0152.950] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0152.950] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\de-de\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0153.590] GetProcessHeap () returned 0x8a0000 [0153.590] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0153.590] GetProcessHeap () returned 0x8a0000 [0153.590] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0153.590] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\en-ae\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0153.591] GetProcessHeap () returned 0x8a0000 [0153.591] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0153.591] GetProcessHeap () returned 0x8a0000 [0153.591] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0153.591] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\en-gb\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0153.592] GetProcessHeap () returned 0x8a0000 [0153.592] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0153.592] GetProcessHeap () returned 0x8a0000 [0153.592] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0153.592] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\en-il\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0153.593] GetProcessHeap () returned 0x8a0000 [0153.593] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0153.593] GetProcessHeap () returned 0x8a0000 [0153.593] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0153.593] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\es-es\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0153.593] GetProcessHeap () returned 0x8a0000 [0153.593] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0153.593] GetProcessHeap () returned 0x8a0000 [0153.593] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0153.593] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\eu-es\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0153.594] GetProcessHeap () returned 0x8a0000 [0153.594] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0153.594] GetProcessHeap () returned 0x8a0000 [0153.594] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0153.594] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\fi-fi\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0153.595] GetProcessHeap () returned 0x8a0000 [0153.595] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0153.595] GetProcessHeap () returned 0x8a0000 [0153.595] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0153.595] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\fr-fr\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0153.596] GetProcessHeap () returned 0x8a0000 [0153.596] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0153.596] GetProcessHeap () returned 0x8a0000 [0153.596] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0153.596] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\fr-ma\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0153.598] GetProcessHeap () returned 0x8a0000 [0153.598] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0153.598] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1 [0153.598] GetProcessHeap () returned 0x8a0000 [0153.598] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0153.598] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\he-il\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0153.599] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.599] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0153.599] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0153.599] GetProcessHeap () returned 0x8a0000 [0153.599] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0153.599] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1 [0153.599] GetProcessHeap () returned 0x8a0000 [0153.599] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0153.599] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\hr-hr\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0153.600] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.600] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0153.600] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0153.600] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0153.600] GetProcessHeap () returned 0x8a0000 [0153.600] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0153.600] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1 [0153.600] GetProcessHeap () returned 0x8a0000 [0153.600] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0153.600] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\hu-hu\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0153.601] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.601] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x53d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0153.601] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x53d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0153.601] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0153.602] GetProcessHeap () returned 0x8a0000 [0153.602] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0153.602] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0153.602] GetProcessHeap () returned 0x8a0000 [0153.602] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0153.602] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\it-it\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0153.603] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.603] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x515, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0153.603] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x515, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0153.603] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0153.603] GetProcessHeap () returned 0x8a0000 [0153.603] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0153.603] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0153.603] GetProcessHeap () returned 0x8a0000 [0153.603] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0153.603] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\ja-jp\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0153.604] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.604] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x518, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0153.604] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x518, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0153.604] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0153.604] GetProcessHeap () returned 0x8a0000 [0153.604] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0153.604] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1 [0153.604] GetProcessHeap () returned 0x8a0000 [0153.604] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0153.604] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\ko-kr\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0153.605] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.605] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x526, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0153.605] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x526, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0153.605] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0153.605] GetProcessHeap () returned 0x8a0000 [0153.605] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0153.605] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0153.606] GetProcessHeap () returned 0x8a0000 [0153.606] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0153.606] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\nb-no\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0153.606] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.606] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x506, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0153.606] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x506, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0153.607] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0153.607] GetProcessHeap () returned 0x8a0000 [0153.607] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0153.607] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0153.607] GetProcessHeap () returned 0x8a0000 [0153.607] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0153.607] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\nl-nl\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0153.607] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.607] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x50b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0153.607] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x50b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0153.607] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0153.607] GetProcessHeap () returned 0x8a0000 [0153.607] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0153.608] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1 [0153.608] GetProcessHeap () returned 0x8a0000 [0153.608] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0153.608] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\pl-pl\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0153.608] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.609] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x518, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0153.609] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x518, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0153.609] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0153.609] GetProcessHeap () returned 0x8a0000 [0153.609] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0153.609] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0153.609] GetProcessHeap () returned 0x8a0000 [0153.609] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0153.609] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\pt-br\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0153.610] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.610] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0153.610] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0153.610] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0153.610] GetProcessHeap () returned 0x8a0000 [0153.610] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0153.610] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1 [0153.610] GetProcessHeap () returned 0x8a0000 [0153.610] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0153.610] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\ro-ro\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0153.611] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.611] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x50e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0153.611] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x50e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0153.611] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0153.611] GetProcessHeap () returned 0x8a0000 [0153.611] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0153.611] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0153.611] GetProcessHeap () returned 0x8a0000 [0153.611] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0153.611] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\root\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0153.612] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.612] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0153.612] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0153.612] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0153.612] GetProcessHeap () returned 0x8a0000 [0153.612] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0153.612] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1 [0153.612] GetProcessHeap () returned 0x8a0000 [0153.612] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0153.612] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\ru-ru\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0153.613] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.613] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0153.613] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0153.613] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0153.613] GetProcessHeap () returned 0x8a0000 [0153.613] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0153.613] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1 [0153.613] GetProcessHeap () returned 0x8a0000 [0153.613] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0153.613] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\sk-sk\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0153.614] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.614] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x526, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0153.614] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x526, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0153.614] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0153.614] GetProcessHeap () returned 0x8a0000 [0153.615] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0153.615] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1 [0153.615] GetProcessHeap () returned 0x8a0000 [0153.615] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0153.615] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\sl-si\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0153.615] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.615] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x502, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0153.615] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x502, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0153.615] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0153.615] GetProcessHeap () returned 0x8a0000 [0153.615] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0153.616] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1 [0153.616] GetProcessHeap () returned 0x8a0000 [0153.616] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0153.616] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\sl-sl\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0153.616] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.616] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0153.616] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0153.616] GetProcessHeap () returned 0x8a0000 [0153.616] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0153.616] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0153.616] GetProcessHeap () returned 0x8a0000 [0153.616] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0153.616] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\sv-se\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0153.618] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.618] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0153.618] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0153.618] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0153.618] GetProcessHeap () returned 0x8a0000 [0153.618] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0153.618] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1 [0153.618] GetProcessHeap () returned 0x8a0000 [0153.618] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0153.618] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\tr-tr\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0153.619] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.619] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x52e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0153.619] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x52e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0153.619] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0153.619] GetProcessHeap () returned 0x8a0000 [0153.619] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0153.619] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0153.619] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-ua", cAlternateFileName="")) returned 1 [0153.619] GetProcessHeap () returned 0x8a0000 [0153.619] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0153.619] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\uk-ua\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0153.620] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.620] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x597, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0153.621] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x597, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0153.621] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0153.621] GetProcessHeap () returned 0x8a0000 [0153.621] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0153.621] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1 [0153.621] GetProcessHeap () returned 0x8a0000 [0153.621] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0153.621] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\zh-cn\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0153.621] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.621] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0153.621] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0153.621] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0153.621] GetProcessHeap () returned 0x8a0000 [0153.621] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0153.621] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1 [0153.622] GetProcessHeap () returned 0x8a0000 [0153.622] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0153.622] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\zh-tw\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0153.622] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.622] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0153.623] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0153.623] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0153.623] GetProcessHeap () returned 0x8a0000 [0153.623] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0153.623] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0 [0153.623] FindClose (in: hFindFile=0x993880 | out: hFindFile=0x993880) returned 1 [0153.623] GetProcessHeap () returned 0x8a0000 [0153.623] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0153.623] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x38d, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0153.623] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugins", cAlternateFileName="")) returned 1 [0153.623] GetProcessHeap () returned 0x8a0000 [0153.623] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0153.623] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\plugins\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0153.624] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.624] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xded, dwReserved0=0x0, dwReserved1=0x0, cFileName="editpdf-selector.js", cAlternateFileName="EDITPD~2.JS")) returned 1 [0153.624] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x203b, dwReserved0=0x0, dwReserved1=0x0, cFileName="editpdf-tool-view.js", cAlternateFileName="EDITPD~1.JS")) returned 1 [0153.624] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp", cAlternateFileName="")) returned 1 [0153.624] GetProcessHeap () returned 0x8a0000 [0153.624] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0153.624] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\plugins\\rhp\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0153.625] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.625] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xdf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="editpdf-selector.js", cAlternateFileName="EDITPD~2.JS")) returned 1 [0153.625] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x25ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="editpdf-tool-view.js", cAlternateFileName="EDITPD~1.JS")) returned 1 [0153.625] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x25ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="editpdf-tool-view.js", cAlternateFileName="EDITPD~1.JS")) returned 0 [0153.625] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0153.625] GetProcessHeap () returned 0x8a0000 [0153.625] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0153.625] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp", cAlternateFileName="")) returned 0 [0153.625] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0153.625] GetProcessHeap () returned 0x8a0000 [0153.625] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0153.625] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugins", cAlternateFileName="")) returned 0 [0153.625] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0153.628] GetProcessHeap () returned 0x8a0000 [0153.628] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0153.630] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0153.630] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0153.630] GetProcessHeap () returned 0x8a0000 [0153.630] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c80b8 | out: hHeap=0x8a0000) returned 1 [0153.630] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="exportpdfupsell-app", cAlternateFileName="EXPORT~1")) returned 1 [0153.631] GetProcessHeap () returned 0x8a0000 [0153.631] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c80b8 [0153.631] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\*", lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0154.027] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.027] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0154.027] GetProcessHeap () returned 0x8a0000 [0154.027] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0154.027] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\css\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0154.082] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.082] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-selector.css", cAlternateFileName="MAIN-S~1.CSS")) returned 1 [0154.082] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x126e, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0154.083] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x126e, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 0 [0154.083] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0154.083] GetProcessHeap () returned 0x8a0000 [0154.083] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0154.083] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0154.083] GetProcessHeap () returned 0x8a0000 [0154.083] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0154.083] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\images\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0154.096] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.096] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons.png", cAlternateFileName="EXAMPL~2.PNG")) returned 1 [0154.096] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons2x.png", cAlternateFileName="EXAMPL~1.PNG")) returned 1 [0154.096] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon.png", cAlternateFileName="RHP_WO~2.PNG")) returned 1 [0154.096] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x263, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_2x.png", cAlternateFileName="RHP_WO~3.PNG")) returned 1 [0154.096] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover.png", cAlternateFileName="RHP_WO~4.PNG")) returned 1 [0154.096] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover_2x.png", cAlternateFileName="RHP_WO~1.PNG")) returned 1 [0154.096] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0154.096] GetProcessHeap () returned 0x8a0000 [0154.096] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0154.097] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\images\\themes\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0154.099] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.100] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0154.100] GetProcessHeap () returned 0x8a0000 [0154.100] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.100] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\images\\themes\\dark\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0154.102] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.102] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons.png", cAlternateFileName="EXAMPL~2.PNG")) returned 1 [0154.102] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons2x.png", cAlternateFileName="EXAMPL~1.PNG")) returned 1 [0154.102] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon.png", cAlternateFileName="RHP_WO~2.PNG")) returned 1 [0154.102] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_2x.png", cAlternateFileName="RHP_WO~3.PNG")) returned 1 [0154.102] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover.png", cAlternateFileName="RHP_WO~4.PNG")) returned 1 [0154.102] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover_2x.png", cAlternateFileName="RHP_WO~1.PNG")) returned 1 [0154.103] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover_2x.png", cAlternateFileName="RHP_WO~1.PNG")) returned 0 [0154.103] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0154.103] GetProcessHeap () returned 0x8a0000 [0154.103] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.103] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0 [0154.103] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0154.104] GetProcessHeap () returned 0x8a0000 [0154.104] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0154.104] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 0 [0154.104] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0154.104] GetProcessHeap () returned 0x8a0000 [0154.104] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0154.105] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0154.106] GetProcessHeap () returned 0x8a0000 [0154.106] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0154.106] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0154.113] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.113] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0154.113] GetProcessHeap () returned 0x8a0000 [0154.113] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0154.114] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0154.116] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.116] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-ae", cAlternateFileName="")) returned 1 [0154.116] GetProcessHeap () returned 0x8a0000 [0154.116] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.116] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\ar-ae\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0154.124] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.125] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.125] FindClose (in: hFindFile=0x993880 | out: hFindFile=0x993880) returned 1 [0154.125] GetProcessHeap () returned 0x8a0000 [0154.125] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.125] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1 [0154.125] GetProcessHeap () returned 0x8a0000 [0154.125] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.125] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\ca-es\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0154.133] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.133] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.133] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.133] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0154.133] GetProcessHeap () returned 0x8a0000 [0154.133] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.133] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1 [0154.133] GetProcessHeap () returned 0x8a0000 [0154.133] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.133] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\cs-cz\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0154.139] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.139] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.139] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.139] FindClose (in: hFindFile=0x993880 | out: hFindFile=0x993880) returned 1 [0154.139] GetProcessHeap () returned 0x8a0000 [0154.139] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.139] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0154.139] GetProcessHeap () returned 0x8a0000 [0154.139] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.139] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\da-dk\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0154.144] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.144] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x498, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.144] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x498, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.144] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0154.144] GetProcessHeap () returned 0x8a0000 [0154.144] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.144] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0154.144] GetProcessHeap () returned 0x8a0000 [0154.144] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.144] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\de-de\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0154.155] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.155] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x49c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.155] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x49c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.155] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0154.155] GetProcessHeap () returned 0x8a0000 [0154.155] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.155] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1 [0154.156] GetProcessHeap () returned 0x8a0000 [0154.156] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.156] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\en-ae\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0154.158] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.158] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x47f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.158] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x47f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.158] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0154.158] GetProcessHeap () returned 0x8a0000 [0154.158] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.158] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0154.158] GetProcessHeap () returned 0x8a0000 [0154.158] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.158] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\en-gb\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0154.159] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.159] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.159] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0154.159] GetProcessHeap () returned 0x8a0000 [0154.159] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.159] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1 [0154.159] GetProcessHeap () returned 0x8a0000 [0154.159] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.159] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\en-il\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0154.168] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.168] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x47f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.168] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x47f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.168] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0154.168] GetProcessHeap () returned 0x8a0000 [0154.168] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.168] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0154.168] GetProcessHeap () returned 0x8a0000 [0154.168] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.168] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\es-es\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0154.169] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.169] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.169] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.169] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0154.169] GetProcessHeap () returned 0x8a0000 [0154.169] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.169] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1 [0154.169] GetProcessHeap () returned 0x8a0000 [0154.169] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.169] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\eu-es\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0154.171] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.171] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.171] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.171] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0154.171] GetProcessHeap () returned 0x8a0000 [0154.171] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.171] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0154.171] GetProcessHeap () returned 0x8a0000 [0154.171] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.171] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\fi-fi\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0154.172] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.172] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x490, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.172] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x490, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.172] FindClose (in: hFindFile=0x993880 | out: hFindFile=0x993880) returned 1 [0154.172] GetProcessHeap () returned 0x8a0000 [0154.172] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.172] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0154.172] GetProcessHeap () returned 0x8a0000 [0154.172] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.172] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\fr-fr\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0154.173] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.173] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x49d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.173] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x49d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.174] FindClose (in: hFindFile=0x993880 | out: hFindFile=0x993880) returned 1 [0154.174] GetProcessHeap () returned 0x8a0000 [0154.174] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.174] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1 [0154.174] GetProcessHeap () returned 0x8a0000 [0154.174] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.174] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\fr-ma\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0154.174] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.174] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x47f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.174] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x47f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.174] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0154.174] GetProcessHeap () returned 0x8a0000 [0154.174] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.174] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1 [0154.174] GetProcessHeap () returned 0x8a0000 [0154.174] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.175] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\he-il\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0154.175] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.175] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.175] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0154.175] GetProcessHeap () returned 0x8a0000 [0154.175] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.175] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1 [0154.175] GetProcessHeap () returned 0x8a0000 [0154.175] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.175] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\hr-hr\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0154.192] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.192] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x49f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.192] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x49f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.192] FindClose (in: hFindFile=0x993880 | out: hFindFile=0x993880) returned 1 [0154.193] GetProcessHeap () returned 0x8a0000 [0154.193] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.193] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1 [0154.193] GetProcessHeap () returned 0x8a0000 [0154.193] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.193] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\hu-hu\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0154.194] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.194] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.194] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.194] FindClose (in: hFindFile=0x993880 | out: hFindFile=0x993880) returned 1 [0154.194] GetProcessHeap () returned 0x8a0000 [0154.194] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.194] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0154.194] GetProcessHeap () returned 0x8a0000 [0154.194] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.194] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\it-it\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0154.195] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.195] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.300] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.300] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0154.300] GetProcessHeap () returned 0x8a0000 [0154.300] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.300] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0154.301] GetProcessHeap () returned 0x8a0000 [0154.301] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.301] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\ja-jp\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0154.301] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.301] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.301] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.301] FindClose (in: hFindFile=0x993880 | out: hFindFile=0x993880) returned 1 [0154.301] GetProcessHeap () returned 0x8a0000 [0154.301] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.301] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1 [0154.302] GetProcessHeap () returned 0x8a0000 [0154.302] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.302] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\ko-kr\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0154.303] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.303] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x49e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.303] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x49e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.303] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0154.303] GetProcessHeap () returned 0x8a0000 [0154.303] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.303] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0154.303] GetProcessHeap () returned 0x8a0000 [0154.303] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.303] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\nb-no\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0154.303] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.303] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x491, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.304] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x491, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.304] FindClose (in: hFindFile=0x993880 | out: hFindFile=0x993880) returned 1 [0154.304] GetProcessHeap () returned 0x8a0000 [0154.304] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.304] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0154.304] GetProcessHeap () returned 0x8a0000 [0154.304] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.304] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\nl-nl\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0154.304] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.304] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x49a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.304] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x49a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.304] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0154.304] GetProcessHeap () returned 0x8a0000 [0154.304] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.304] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1 [0154.305] GetProcessHeap () returned 0x8a0000 [0154.305] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.305] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\pl-pl\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0154.305] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.305] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.306] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.306] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0154.306] GetProcessHeap () returned 0x8a0000 [0154.306] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.306] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0154.306] GetProcessHeap () returned 0x8a0000 [0154.306] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.306] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\pt-br\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0154.307] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.307] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x488, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.307] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x488, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.307] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0154.307] GetProcessHeap () returned 0x8a0000 [0154.307] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.307] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1 [0154.307] GetProcessHeap () returned 0x8a0000 [0154.307] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.307] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\ro-ro\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0154.308] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.308] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.308] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.308] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0154.308] GetProcessHeap () returned 0x8a0000 [0154.308] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.308] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0154.308] GetProcessHeap () returned 0x8a0000 [0154.308] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.308] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\root\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0154.309] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.309] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x47f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.309] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x47f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.309] FindClose (in: hFindFile=0x993880 | out: hFindFile=0x993880) returned 1 [0154.309] GetProcessHeap () returned 0x8a0000 [0154.309] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.309] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1 [0154.309] GetProcessHeap () returned 0x8a0000 [0154.309] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.309] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\ru-ru\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0154.310] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.310] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.310] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.310] FindClose (in: hFindFile=0x993880 | out: hFindFile=0x993880) returned 1 [0154.310] GetProcessHeap () returned 0x8a0000 [0154.310] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.310] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1 [0154.310] GetProcessHeap () returned 0x8a0000 [0154.310] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.310] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\sk-sk\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0154.311] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.311] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.311] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.311] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0154.311] GetProcessHeap () returned 0x8a0000 [0154.312] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.312] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1 [0154.312] GetProcessHeap () returned 0x8a0000 [0154.312] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.312] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\sl-si\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0154.312] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.312] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.312] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.312] FindClose (in: hFindFile=0x9939c0 | out: hFindFile=0x9939c0) returned 1 [0154.313] GetProcessHeap () returned 0x8a0000 [0154.313] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.313] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1 [0154.313] GetProcessHeap () returned 0x8a0000 [0154.313] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.313] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\sl-sl\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0154.313] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.313] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.313] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0154.313] GetProcessHeap () returned 0x8a0000 [0154.313] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.313] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0154.313] GetProcessHeap () returned 0x8a0000 [0154.313] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.313] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\sv-se\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0154.314] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.314] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x489, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.315] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x489, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.315] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0154.315] GetProcessHeap () returned 0x8a0000 [0154.315] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.315] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1 [0154.315] GetProcessHeap () returned 0x8a0000 [0154.315] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.315] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\tr-tr\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0154.315] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.315] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.315] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.315] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0154.315] GetProcessHeap () returned 0x8a0000 [0154.315] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.316] GetProcessHeap () returned 0x8a0000 [0154.316] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.316] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\uk-ua\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0154.317] GetProcessHeap () returned 0x8a0000 [0154.317] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.317] GetProcessHeap () returned 0x8a0000 [0154.317] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.317] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\zh-cn\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0154.317] GetProcessHeap () returned 0x8a0000 [0154.317] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.317] GetProcessHeap () returned 0x8a0000 [0154.317] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.317] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\zh-tw\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0154.318] GetProcessHeap () returned 0x8a0000 [0154.318] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.318] GetProcessHeap () returned 0x8a0000 [0154.318] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0154.318] GetProcessHeap () returned 0x8a0000 [0154.318] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0154.318] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\plugins\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0154.319] GetProcessHeap () returned 0x8a0000 [0154.319] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.319] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\plugins\\rhp\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0154.322] GetProcessHeap () returned 0x8a0000 [0154.322] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.322] GetProcessHeap () returned 0x8a0000 [0154.322] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0154.322] GetProcessHeap () returned 0x8a0000 [0154.322] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0154.323] GetProcessHeap () returned 0x8a0000 [0154.323] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c80b8 | out: hHeap=0x8a0000) returned 1 [0154.324] GetProcessHeap () returned 0x8a0000 [0154.324] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c80b8 [0154.324] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\*", lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x335390b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0154.325] GetProcessHeap () returned 0x8a0000 [0154.325] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0154.325] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\css\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x335390b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x335390b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x335390b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0154.325] GetProcessHeap () returned 0x8a0000 [0154.326] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0154.326] GetProcessHeap () returned 0x8a0000 [0154.326] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0154.326] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x250574b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x250574b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0154.327] GetProcessHeap () returned 0x8a0000 [0154.327] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0154.328] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\themes\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x284cad6, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x284cad6, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x284cad6, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0154.329] GetProcessHeap () returned 0x8a0000 [0154.329] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.329] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\themes\\dark\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x284cad6, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x284cad6, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0154.332] GetProcessHeap () returned 0x8a0000 [0154.332] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.332] GetProcessHeap () returned 0x8a0000 [0154.332] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0154.332] GetProcessHeap () returned 0x8a0000 [0154.332] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0154.332] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x252b9a4, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x252b9a4, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x284cad6, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0154.335] GetProcessHeap () returned 0x8a0000 [0154.335] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.335] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2767d0d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2767d0d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x284cad6, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0154.337] GetProcessHeap () returned 0x8a0000 [0154.337] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b150c0 [0154.338] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\themes\\*", lpFindFileData=0x2fdd1b8 | out: lpFindFileData=0x2fdd1b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b41a7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x27b41a7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x27b41a7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0154.338] GetProcessHeap () returned 0x8a0000 [0154.339] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b250c8 [0154.339] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\themes\\dark\\*", lpFindFileData=0x2fdcf28 | out: lpFindFileData=0x2fdcf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b41a7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x27b41a7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x284cad6, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0154.342] GetProcessHeap () returned 0x8a0000 [0154.342] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b250c8 | out: hHeap=0x8a0000) returned 1 [0154.342] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd1b8 | out: lpFindFileData=0x2fdd1b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b41a7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x27b41a7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x27b41a7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0 [0154.342] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0154.342] GetProcessHeap () returned 0x8a0000 [0154.342] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b150c0 | out: hHeap=0x8a0000) returned 1 [0154.342] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b41a7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x27b41a7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x27b41a7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 0 [0154.342] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0154.342] GetProcessHeap () returned 0x8a0000 [0154.342] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.484] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x284cad6, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x284cad6, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x284cad6, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x1dae, dwReserved0=0x0, dwReserved1=0x0, cFileName="check.cur", cAlternateFileName="")) returned 1 [0154.484] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2767d0d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2767d0d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2767d0d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5da, dwReserved0=0x0, dwReserved1=0x0, cFileName="check_2x.png", cAlternateFileName="")) returned 1 [0154.484] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252b9a4, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x252b9a4, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x252b9a4, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x1dae, dwReserved0=0x0, dwReserved1=0x0, cFileName="circle.cur", cAlternateFileName="")) returned 1 [0154.484] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252b9a4, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x252b9a4, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x252b9a4, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5db, dwReserved0=0x0, dwReserved1=0x0, cFileName="circle_2x.png", cAlternateFileName="CIRCLE~1.PNG")) returned 1 [0154.484] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252b9a4, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x252b9a4, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2577df9, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x1dae, dwReserved0=0x0, dwReserved1=0x0, cFileName="dot.cur", cAlternateFileName="")) returned 1 [0154.484] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252b9a4, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x252b9a4, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x252b9a4, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="dot_2x.png", cAlternateFileName="")) returned 1 [0154.484] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252b9a4, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x252b9a4, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x252b9a4, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x1dae, dwReserved0=0x0, dwReserved1=0x0, cFileName="line.cur", cAlternateFileName="")) returned 1 [0154.484] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252b9a4, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x252b9a4, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x252b9a4, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x226, dwReserved0=0x0, dwReserved1=0x0, cFileName="line_2x.png", cAlternateFileName="")) returned 1 [0154.484] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2577df9, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2577df9, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2577df9, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x10be, dwReserved0=0x0, dwReserved1=0x0, cFileName="text.cur", cAlternateFileName="")) returned 1 [0154.485] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x284cad6, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x284cad6, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x284cad6, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x400, dwReserved0=0x0, dwReserved1=0x0, cFileName="text_2x.png", cAlternateFileName="")) returned 1 [0154.485] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26f5618, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x26f5618, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x26f5618, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0154.485] GetProcessHeap () returned 0x8a0000 [0154.485] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.486] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\themes\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26f5618, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x26f5618, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x26f5618, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0154.487] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26f5618, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x26f5618, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x26f5618, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.487] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26f5618, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x26f5618, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x26f5618, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0154.487] GetProcessHeap () returned 0x8a0000 [0154.487] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b150c0 [0154.487] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\themes\\dark\\*", lpFindFileData=0x2fdd1b8 | out: lpFindFileData=0x2fdd1b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26f5618, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x26f5618, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2767d0d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0154.489] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd1b8 | out: lpFindFileData=0x2fdd1b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26f5618, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x26f5618, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2767d0d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.489] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd1b8 | out: lpFindFileData=0x2fdd1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2767d0d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2767d0d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2767d0d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x1dae, dwReserved0=0x0, dwReserved1=0x0, cFileName="check.cur", cAlternateFileName="")) returned 1 [0154.489] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd1b8 | out: lpFindFileData=0x2fdd1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2746f44, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2746f44, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2746f44, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5da, dwReserved0=0x0, dwReserved1=0x0, cFileName="check_2x.png", cAlternateFileName="")) returned 1 [0154.489] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd1b8 | out: lpFindFileData=0x2fdd1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x271b866, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x271b866, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x271b866, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x1dae, dwReserved0=0x0, dwReserved1=0x0, cFileName="circle.cur", cAlternateFileName="")) returned 1 [0154.489] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd1b8 | out: lpFindFileData=0x2fdd1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x271b866, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x271b866, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x271b866, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5db, dwReserved0=0x0, dwReserved1=0x0, cFileName="circle_2x.png", cAlternateFileName="CIRCLE~1.PNG")) returned 1 [0154.489] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd1b8 | out: lpFindFileData=0x2fdd1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x271b866, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x271b866, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2746f44, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x1dae, dwReserved0=0x0, dwReserved1=0x0, cFileName="dot.cur", cAlternateFileName="")) returned 1 [0154.489] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd1b8 | out: lpFindFileData=0x2fdd1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x271b866, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x271b866, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x271b866, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="dot_2x.png", cAlternateFileName="")) returned 1 [0154.489] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd1b8 | out: lpFindFileData=0x2fdd1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x271b866, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x271b866, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x271b866, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x1dae, dwReserved0=0x0, dwReserved1=0x0, cFileName="line.cur", cAlternateFileName="")) returned 1 [0154.489] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd1b8 | out: lpFindFileData=0x2fdd1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x271b866, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x271b866, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x271b866, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x226, dwReserved0=0x0, dwReserved1=0x0, cFileName="line_2x.png", cAlternateFileName="")) returned 1 [0154.489] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd1b8 | out: lpFindFileData=0x2fdd1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2746f44, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2746f44, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2746f44, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x10be, dwReserved0=0x0, dwReserved1=0x0, cFileName="text.cur", cAlternateFileName="")) returned 1 [0154.489] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd1b8 | out: lpFindFileData=0x2fdd1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2746f44, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2746f44, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2746f44, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x400, dwReserved0=0x0, dwReserved1=0x0, cFileName="text_2x.png", cAlternateFileName="")) returned 1 [0154.490] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd1b8 | out: lpFindFileData=0x2fdd1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2746f44, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2746f44, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2746f44, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x1dae, dwReserved0=0x0, dwReserved1=0x0, cFileName="x.cur", cAlternateFileName="")) returned 1 [0154.490] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd1b8 | out: lpFindFileData=0x2fdd1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2767d0d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2767d0d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2767d0d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="x_2x.png", cAlternateFileName="")) returned 1 [0154.490] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd1b8 | out: lpFindFileData=0x2fdd1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2767d0d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2767d0d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2767d0d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="x_2x.png", cAlternateFileName="")) returned 0 [0154.490] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0154.491] GetProcessHeap () returned 0x8a0000 [0154.491] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b150c0 | out: hHeap=0x8a0000) returned 1 [0154.491] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26f5618, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x26f5618, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x26f5618, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0 [0154.491] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0154.491] GetProcessHeap () returned 0x8a0000 [0154.491] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.491] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x284cad6, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x284cad6, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x284cad6, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x1dae, dwReserved0=0x0, dwReserved1=0x0, cFileName="x.cur", cAlternateFileName="")) returned 1 [0154.491] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x284cad6, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x284cad6, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x284cad6, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="x_2x.png", cAlternateFileName="")) returned 1 [0154.491] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x284cad6, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x284cad6, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x284cad6, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="x_2x.png", cAlternateFileName="")) returned 0 [0154.491] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0154.491] GetProcessHeap () returned 0x8a0000 [0154.491] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0154.491] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x252b9a4, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x252b9a4, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x252b9a4, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tools", cAlternateFileName="")) returned 0 [0154.491] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0154.491] GetProcessHeap () returned 0x8a0000 [0154.491] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0154.493] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0154.493] GetProcessHeap () returned 0x8a0000 [0154.493] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0154.493] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0154.494] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.494] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x335390b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x9b1ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="faf-main.js", cAlternateFileName="")) returned 1 [0154.495] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0154.495] GetProcessHeap () returned 0x8a0000 [0154.495] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0154.496] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0154.497] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.497] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-ae", cAlternateFileName="")) returned 1 [0154.498] GetProcessHeap () returned 0x8a0000 [0154.498] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.498] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\ar-ae\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0154.498] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.498] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.499] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0154.499] GetProcessHeap () returned 0x8a0000 [0154.499] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.499] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1 [0154.499] GetProcessHeap () returned 0x8a0000 [0154.499] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.499] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\ca-es\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0154.500] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.500] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3ed6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.500] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3ed6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.500] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0154.500] GetProcessHeap () returned 0x8a0000 [0154.500] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.500] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1 [0154.500] GetProcessHeap () returned 0x8a0000 [0154.500] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.500] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\cs-cz\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0154.501] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.501] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3d0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.501] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3d0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.501] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0154.501] GetProcessHeap () returned 0x8a0000 [0154.501] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.501] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0154.501] GetProcessHeap () returned 0x8a0000 [0154.501] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.501] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\da-dk\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0154.502] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.502] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.502] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.502] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0154.502] GetProcessHeap () returned 0x8a0000 [0154.502] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.502] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0154.503] GetProcessHeap () returned 0x8a0000 [0154.503] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.503] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\de-de\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0154.504] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.504] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x42db, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.504] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x42db, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.504] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0154.504] GetProcessHeap () returned 0x8a0000 [0154.504] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.504] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1 [0154.504] GetProcessHeap () returned 0x8a0000 [0154.504] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.504] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\en-ae\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0154.505] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.505] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.505] FindClose (in: hFindFile=0x9939c0 | out: hFindFile=0x9939c0) returned 1 [0154.505] GetProcessHeap () returned 0x8a0000 [0154.505] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.505] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0154.505] GetProcessHeap () returned 0x8a0000 [0154.505] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.505] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\en-gb\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0154.506] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.506] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x37ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.506] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x37ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.506] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0154.507] GetProcessHeap () returned 0x8a0000 [0154.507] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.507] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1 [0154.507] GetProcessHeap () returned 0x8a0000 [0154.507] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.507] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\en-il\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0154.508] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.508] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.508] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0154.508] GetProcessHeap () returned 0x8a0000 [0154.508] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.508] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0154.508] GetProcessHeap () returned 0x8a0000 [0154.508] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.508] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\es-es\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0154.508] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.508] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3de6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.508] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3de6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.508] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0154.509] GetProcessHeap () returned 0x8a0000 [0154.509] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.509] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1 [0154.509] GetProcessHeap () returned 0x8a0000 [0154.509] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.509] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\eu-es\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0154.510] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.510] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3a33, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.510] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3a33, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.510] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0154.510] GetProcessHeap () returned 0x8a0000 [0154.510] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.510] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0154.510] GetProcessHeap () returned 0x8a0000 [0154.510] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.510] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\fi-fi\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0154.510] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.510] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3c8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.510] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3c8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.511] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0154.511] GetProcessHeap () returned 0x8a0000 [0154.511] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.511] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0154.511] GetProcessHeap () returned 0x8a0000 [0154.511] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.511] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\fr-fr\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0154.511] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.511] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x40ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.511] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x40ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.511] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0154.511] GetProcessHeap () returned 0x8a0000 [0154.511] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.511] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1 [0154.511] GetProcessHeap () returned 0x8a0000 [0154.511] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.512] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\fr-ma\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0154.512] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.512] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.512] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0154.512] GetProcessHeap () returned 0x8a0000 [0154.512] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.512] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1 [0154.512] GetProcessHeap () returned 0x8a0000 [0154.512] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.512] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\he-il\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0154.512] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.513] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.513] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0154.513] GetProcessHeap () returned 0x8a0000 [0154.513] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.513] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1 [0154.513] GetProcessHeap () returned 0x8a0000 [0154.513] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.513] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\hr-hr\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0154.513] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.513] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3b26, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.513] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3b26, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.514] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0154.514] GetProcessHeap () returned 0x8a0000 [0154.514] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.514] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1 [0154.514] GetProcessHeap () returned 0x8a0000 [0154.514] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.514] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\hu-hu\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0154.515] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.515] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3db9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.515] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3db9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.515] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0154.515] GetProcessHeap () returned 0x8a0000 [0154.515] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.515] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0154.515] GetProcessHeap () returned 0x8a0000 [0154.515] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.515] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\it-it\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0154.516] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.516] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3ce2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.516] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3ce2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.516] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0154.516] GetProcessHeap () returned 0x8a0000 [0154.516] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.516] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0154.516] GetProcessHeap () returned 0x8a0000 [0154.516] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.516] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\ja-jp\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0154.517] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.517] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x46ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.517] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x46ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.517] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0154.517] GetProcessHeap () returned 0x8a0000 [0154.517] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.517] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1 [0154.517] GetProcessHeap () returned 0x8a0000 [0154.517] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.517] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\ko-kr\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0154.518] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.518] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3fc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.518] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3fc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.518] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0154.518] GetProcessHeap () returned 0x8a0000 [0154.518] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.519] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0154.519] GetProcessHeap () returned 0x8a0000 [0154.519] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.519] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\nb-no\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0154.519] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.520] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x393f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.520] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x393f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.520] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0154.520] GetProcessHeap () returned 0x8a0000 [0154.520] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.520] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0154.520] GetProcessHeap () returned 0x8a0000 [0154.520] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.520] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\nl-nl\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0154.520] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.520] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3ea9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.520] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3ea9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.520] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0154.521] GetProcessHeap () returned 0x8a0000 [0154.521] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.521] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1 [0154.521] GetProcessHeap () returned 0x8a0000 [0154.521] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.521] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\pl-pl\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0154.522] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.522] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3de0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.522] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3de0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.522] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0154.522] GetProcessHeap () returned 0x8a0000 [0154.522] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.522] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0154.663] GetProcessHeap () returned 0x8a0000 [0154.663] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.663] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\pt-br\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0154.664] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.673] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3d46, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.673] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3d46, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.673] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0154.673] GetProcessHeap () returned 0x8a0000 [0154.673] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.673] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1 [0154.673] GetProcessHeap () returned 0x8a0000 [0154.673] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.673] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\ro-ro\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0154.710] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.710] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3eea, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.711] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3eea, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.711] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0154.711] GetProcessHeap () returned 0x8a0000 [0154.711] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.711] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0154.711] GetProcessHeap () returned 0x8a0000 [0154.711] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.711] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\root\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0154.711] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.712] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3779, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.712] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3779, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.712] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0154.712] GetProcessHeap () returned 0x8a0000 [0154.712] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.712] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1 [0154.712] GetProcessHeap () returned 0x8a0000 [0154.712] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.712] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\ru-ru\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0154.712] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.712] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x297ddff, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5492, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.713] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x297ddff, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5492, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.713] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0154.713] GetProcessHeap () returned 0x8a0000 [0154.713] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.713] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x297ddff, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x297ddff, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x297ddff, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1 [0154.713] GetProcessHeap () returned 0x8a0000 [0154.713] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.713] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\sk-sk\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x297ddff, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x297ddff, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x297ddff, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0154.714] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x297ddff, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x297ddff, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x297ddff, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.714] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x297ddff, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x297ddff, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x297ddff, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3e30, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.714] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x297ddff, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x297ddff, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x297ddff, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3e30, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.714] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0154.714] GetProcessHeap () returned 0x8a0000 [0154.714] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.714] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1 [0154.714] GetProcessHeap () returned 0x8a0000 [0154.714] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.714] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\sl-si\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0154.715] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.715] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3a37, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.715] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3a37, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.715] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0154.715] GetProcessHeap () returned 0x8a0000 [0154.715] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.715] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1 [0154.715] GetProcessHeap () returned 0x8a0000 [0154.715] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.715] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\sl-sl\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0154.715] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.716] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.716] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0154.716] GetProcessHeap () returned 0x8a0000 [0154.716] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.716] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x297ddff, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x297ddff, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x297ddff, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0154.716] GetProcessHeap () returned 0x8a0000 [0154.716] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.716] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\sv-se\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x297ddff, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x297ddff, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x297ddff, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0154.716] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x297ddff, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x297ddff, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x297ddff, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.716] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x297ddff, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x297ddff, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x297ddff, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3a9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.716] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x297ddff, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x297ddff, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x297ddff, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3a9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.716] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0154.716] GetProcessHeap () returned 0x8a0000 [0154.717] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.717] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1 [0154.717] GetProcessHeap () returned 0x8a0000 [0154.717] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.717] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\tr-tr\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0154.717] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.717] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3af2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.717] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3af2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.717] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0154.718] GetProcessHeap () returned 0x8a0000 [0154.718] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.718] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x47b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.718] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-ua", cAlternateFileName="")) returned 1 [0154.718] GetProcessHeap () returned 0x8a0000 [0154.718] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.718] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\uk-ua\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0154.719] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.719] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x55ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.719] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x55ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.719] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0154.719] GetProcessHeap () returned 0x8a0000 [0154.719] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.719] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1 [0154.719] GetProcessHeap () returned 0x8a0000 [0154.719] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.719] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\zh-cn\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0154.720] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.720] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x37a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.720] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x37a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.720] FindClose (in: hFindFile=0x993880 | out: hFindFile=0x993880) returned 1 [0154.720] GetProcessHeap () returned 0x8a0000 [0154.720] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.720] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x297ddff, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x297ddff, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x297ddff, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1 [0154.720] GetProcessHeap () returned 0x8a0000 [0154.720] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.720] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\zh-tw\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x297ddff, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x297ddff, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0154.721] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x297ddff, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x297ddff, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.721] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x36b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.721] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x36b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.721] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0154.721] GetProcessHeap () returned 0x8a0000 [0154.721] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.721] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x297ddff, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x297ddff, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x297ddff, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0 [0154.721] FindClose (in: hFindFile=0x993a00 | out: hFindFile=0x993a00) returned 1 [0154.721] GetProcessHeap () returned 0x8a0000 [0154.721] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0154.721] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 0 [0154.721] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0154.721] GetProcessHeap () returned 0x8a0000 [0154.721] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0154.723] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0154.723] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0154.723] GetProcessHeap () returned 0x8a0000 [0154.723] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c80b8 | out: hHeap=0x8a0000) returned 1 [0154.723] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="generic-rhp-app", cAlternateFileName="GENERI~1")) returned 1 [0154.723] GetProcessHeap () returned 0x8a0000 [0154.723] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c80b8 [0154.723] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\*", lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0154.725] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.725] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0154.725] GetProcessHeap () returned 0x8a0000 [0154.725] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0154.726] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\css\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0154.727] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.727] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-selector.css", cAlternateFileName="MAIN-S~1.CSS")) returned 1 [0154.727] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x122b, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0154.727] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x122b, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 0 [0154.727] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0154.728] GetProcessHeap () returned 0x8a0000 [0154.728] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0154.728] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0154.728] GetProcessHeap () returned 0x8a0000 [0154.728] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0154.728] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\images\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0154.731] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.731] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons.png", cAlternateFileName="EXAMPL~2.PNG")) returned 1 [0154.731] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons2x.png", cAlternateFileName="EXAMPL~1.PNG")) returned 1 [0154.731] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon.png", cAlternateFileName="RHP_WO~2.PNG")) returned 1 [0154.731] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x263, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_2x.png", cAlternateFileName="RHP_WO~3.PNG")) returned 1 [0154.731] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover.png", cAlternateFileName="RHP_WO~4.PNG")) returned 1 [0154.731] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover_2x.png", cAlternateFileName="RHP_WO~1.PNG")) returned 1 [0154.731] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0154.731] GetProcessHeap () returned 0x8a0000 [0154.731] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0154.732] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\images\\themes\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0154.733] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.733] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0154.734] GetProcessHeap () returned 0x8a0000 [0154.734] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.734] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\images\\themes\\dark\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0154.735] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.735] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons.png", cAlternateFileName="EXAMPL~2.PNG")) returned 1 [0154.736] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons2x.png", cAlternateFileName="EXAMPL~1.PNG")) returned 1 [0154.736] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon.png", cAlternateFileName="RHP_WO~2.PNG")) returned 1 [0154.736] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_2x.png", cAlternateFileName="RHP_WO~3.PNG")) returned 1 [0154.736] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover.png", cAlternateFileName="RHP_WO~4.PNG")) returned 1 [0154.736] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover_2x.png", cAlternateFileName="RHP_WO~1.PNG")) returned 1 [0154.736] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover_2x.png", cAlternateFileName="RHP_WO~1.PNG")) returned 0 [0154.736] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0154.737] GetProcessHeap () returned 0x8a0000 [0154.737] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.737] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0 [0154.737] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0154.737] GetProcessHeap () returned 0x8a0000 [0154.737] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0154.737] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 0 [0154.737] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0154.737] GetProcessHeap () returned 0x8a0000 [0154.737] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0154.738] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0154.739] GetProcessHeap () returned 0x8a0000 [0154.739] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0154.739] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0154.740] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.740] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0154.740] GetProcessHeap () returned 0x8a0000 [0154.740] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0154.741] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\nls\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0154.743] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.743] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0154.743] GetProcessHeap () returned 0x8a0000 [0154.743] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.744] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\nls\\da-dk\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0154.745] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.745] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.745] FindClose (in: hFindFile=0x993a00 | out: hFindFile=0x993a00) returned 1 [0154.745] GetProcessHeap () returned 0x8a0000 [0154.745] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.745] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0154.745] GetProcessHeap () returned 0x8a0000 [0154.745] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.745] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\nls\\de-de\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0154.745] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.745] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.746] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0154.746] GetProcessHeap () returned 0x8a0000 [0154.746] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.746] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0154.746] GetProcessHeap () returned 0x8a0000 [0154.746] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.746] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\nls\\en-gb\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0154.747] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.747] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.747] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0154.747] GetProcessHeap () returned 0x8a0000 [0154.747] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.747] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0154.747] GetProcessHeap () returned 0x8a0000 [0154.747] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.747] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\nls\\es-es\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0154.748] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.748] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.748] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0154.884] GetProcessHeap () returned 0x8a0000 [0154.884] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.884] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0154.884] GetProcessHeap () returned 0x8a0000 [0154.884] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.884] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\nls\\fi-fi\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0154.886] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.886] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.886] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0154.886] GetProcessHeap () returned 0x8a0000 [0154.886] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.886] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0154.887] GetProcessHeap () returned 0x8a0000 [0154.887] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.887] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\nls\\fr-fr\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0154.887] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.887] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.887] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0154.889] GetProcessHeap () returned 0x8a0000 [0154.889] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.890] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0154.890] GetProcessHeap () returned 0x8a0000 [0154.890] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.890] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\nls\\it-it\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0154.890] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.890] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.890] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0154.890] GetProcessHeap () returned 0x8a0000 [0154.890] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.890] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0154.890] GetProcessHeap () returned 0x8a0000 [0154.890] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.890] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\nls\\ja-jp\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0154.891] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.891] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.891] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0154.891] GetProcessHeap () returned 0x8a0000 [0154.891] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.891] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0154.891] GetProcessHeap () returned 0x8a0000 [0154.891] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.891] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\nls\\nb-no\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0154.891] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.891] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.892] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0154.892] GetProcessHeap () returned 0x8a0000 [0154.892] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.892] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0154.892] GetProcessHeap () returned 0x8a0000 [0154.892] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.892] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\nls\\nl-nl\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0154.892] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.892] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.892] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0154.892] GetProcessHeap () returned 0x8a0000 [0154.892] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.893] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0154.893] GetProcessHeap () returned 0x8a0000 [0154.893] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.893] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\nls\\pt-br\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0154.893] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.893] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.893] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0154.893] GetProcessHeap () returned 0x8a0000 [0154.893] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.893] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0154.893] GetProcessHeap () returned 0x8a0000 [0154.893] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.893] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\nls\\root\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0154.894] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.894] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x76a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.894] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x76a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.894] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0154.894] GetProcessHeap () returned 0x8a0000 [0154.894] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.894] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0154.894] GetProcessHeap () returned 0x8a0000 [0154.894] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.894] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\nls\\sv-se\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0154.895] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.895] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.895] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0154.895] GetProcessHeap () returned 0x8a0000 [0154.895] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.895] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.895] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.896] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0154.896] GetProcessHeap () returned 0x8a0000 [0154.896] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0154.896] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0154.896] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugins", cAlternateFileName="")) returned 1 [0154.896] GetProcessHeap () returned 0x8a0000 [0154.896] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0154.896] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\plugins\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0154.897] GetProcessHeap () returned 0x8a0000 [0154.897] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.897] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\plugins\\rhp\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0154.898] GetProcessHeap () returned 0x8a0000 [0154.898] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.898] GetProcessHeap () returned 0x8a0000 [0154.898] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0154.898] GetProcessHeap () returned 0x8a0000 [0154.898] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0154.899] GetProcessHeap () returned 0x8a0000 [0154.899] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c80b8 | out: hHeap=0x8a0000) returned 1 [0154.900] GetProcessHeap () returned 0x8a0000 [0154.900] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c80b8 [0154.900] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\*", lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0154.901] GetProcessHeap () returned 0x8a0000 [0154.901] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0154.901] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\css\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0154.901] GetProcessHeap () returned 0x8a0000 [0154.901] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0154.901] GetProcessHeap () returned 0x8a0000 [0154.901] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0154.901] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\images\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0154.904] GetProcessHeap () returned 0x8a0000 [0154.904] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0154.905] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\images\\themes\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0154.905] GetProcessHeap () returned 0x8a0000 [0154.905] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.905] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\images\\themes\\dark\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0154.908] GetProcessHeap () returned 0x8a0000 [0154.908] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.908] GetProcessHeap () returned 0x8a0000 [0154.908] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0154.908] GetProcessHeap () returned 0x8a0000 [0154.908] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0154.909] GetProcessHeap () returned 0x8a0000 [0154.909] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0154.910] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0154.911] GetProcessHeap () returned 0x8a0000 [0154.911] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0154.911] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\nls\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0154.913] GetProcessHeap () returned 0x8a0000 [0154.913] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.913] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\nls\\da-dk\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0154.914] GetProcessHeap () returned 0x8a0000 [0154.914] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.914] GetProcessHeap () returned 0x8a0000 [0154.914] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.914] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\nls\\de-de\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0154.915] GetProcessHeap () returned 0x8a0000 [0154.915] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.915] GetProcessHeap () returned 0x8a0000 [0154.915] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.915] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\nls\\en-gb\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0154.916] GetProcessHeap () returned 0x8a0000 [0154.916] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.916] GetProcessHeap () returned 0x8a0000 [0154.916] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.916] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\nls\\es-es\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0154.917] GetProcessHeap () returned 0x8a0000 [0154.917] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.917] GetProcessHeap () returned 0x8a0000 [0154.917] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.917] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\nls\\fi-fi\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0154.918] GetProcessHeap () returned 0x8a0000 [0154.918] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.918] GetProcessHeap () returned 0x8a0000 [0154.918] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.918] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\nls\\fr-fr\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0154.919] GetProcessHeap () returned 0x8a0000 [0154.919] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.919] GetProcessHeap () returned 0x8a0000 [0154.919] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.919] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\nls\\it-it\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0154.920] GetProcessHeap () returned 0x8a0000 [0154.920] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.920] GetProcessHeap () returned 0x8a0000 [0154.920] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.920] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\nls\\ja-jp\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0154.921] GetProcessHeap () returned 0x8a0000 [0154.921] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.921] GetProcessHeap () returned 0x8a0000 [0154.921] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.921] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\nls\\nb-no\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0154.921] GetProcessHeap () returned 0x8a0000 [0154.921] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.921] GetProcessHeap () returned 0x8a0000 [0154.921] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.921] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\nls\\nl-nl\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0154.922] GetProcessHeap () returned 0x8a0000 [0154.922] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.922] GetProcessHeap () returned 0x8a0000 [0154.922] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.922] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\nls\\pt-br\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0154.923] GetProcessHeap () returned 0x8a0000 [0154.923] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.923] GetProcessHeap () returned 0x8a0000 [0154.923] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.923] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\nls\\root\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0154.923] GetProcessHeap () returned 0x8a0000 [0154.923] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.923] GetProcessHeap () returned 0x8a0000 [0154.923] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0154.923] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\nls\\sv-se\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0154.924] GetProcessHeap () returned 0x8a0000 [0154.924] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0154.924] GetProcessHeap () returned 0x8a0000 [0154.924] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0154.924] GetProcessHeap () returned 0x8a0000 [0154.924] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0155.047] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0155.047] FindClose (in: hFindFile=0x993880 | out: hFindFile=0x993880) returned 1 [0155.047] GetProcessHeap () returned 0x8a0000 [0155.047] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c80b8 | out: hHeap=0x8a0000) returned 1 [0155.047] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="my-computer", cAlternateFileName="MY-COM~2")) returned 1 [0155.048] GetProcessHeap () returned 0x8a0000 [0155.048] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c80b8 [0155.048] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\*", lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0155.049] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.049] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0155.049] GetProcessHeap () returned 0x8a0000 [0155.049] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0155.049] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\css\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0155.050] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.050] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x322, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-selector.css", cAlternateFileName="MAIN-S~1.CSS")) returned 1 [0155.050] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0155.051] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 0 [0155.051] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0155.051] GetProcessHeap () returned 0x8a0000 [0155.051] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0155.052] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0155.052] GetProcessHeap () returned 0x8a0000 [0155.052] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0155.052] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0155.055] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.055] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_patterns_header.png", cAlternateFileName="BG_PAT~2.PNG")) returned 1 [0155.055] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_pattern_RHP.png", cAlternateFileName="BG_PAT~1.PNG")) returned 1 [0155.055] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0010838, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3b6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="file_icons.png", cAlternateFileName="FILE_I~1.PNG")) returned 1 [0155.055] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons.png", cAlternateFileName="")) returned 1 [0155.055] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1fd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons_ie8.gif", cAlternateFileName="ICONS_~1.GIF")) returned 1 [0155.055] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3c6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons_retina.png", cAlternateFileName="ICONS_~1.PNG")) returned 1 [0155.055] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x225a, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations.png", cAlternateFileName="ILLUST~2.PNG")) returned 1 [0155.056] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations_retina.png", cAlternateFileName="ILLUST~1.PNG")) returned 1 [0155.056] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x20bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons.png", cAlternateFileName="NEW_IC~2.PNG")) returned 1 [0155.056] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x456c, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons_retina.png", cAlternateFileName="NEW_IC~1.PNG")) returned 1 [0155.056] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0010838, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0155.056] GetProcessHeap () returned 0x8a0000 [0155.056] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0155.057] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0010838, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0155.058] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0010838, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.058] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0010838, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0155.058] GetProcessHeap () returned 0x8a0000 [0155.058] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.058] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0155.060] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.060] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf011b8fe, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf011b8fe, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf011b8fe, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_patterns_header.png", cAlternateFileName="BG_PAT~2.PNG")) returned 1 [0155.060] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0010838, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_pattern_RHP.png", cAlternateFileName="BG_PAT~1.PNG")) returned 1 [0155.060] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf011b8fe, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6004, dwReserved0=0x0, dwReserved1=0x0, cFileName="file_icons.png", cAlternateFileName="FILE_I~1.PNG")) returned 1 [0155.060] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0010838, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons.png", cAlternateFileName="")) returned 1 [0155.061] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1fd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons_ie8.gif", cAlternateFileName="ICONS_~1.GIF")) returned 1 [0155.061] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf011b8fe, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf011b8fe, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf011b8fe, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3c6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons_retina.png", cAlternateFileName="ICONS_~1.PNG")) returned 1 [0155.061] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x225a, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations.png", cAlternateFileName="ILLUST~2.PNG")) returned 1 [0155.061] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0010838, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations_retina.png", cAlternateFileName="ILLUST~1.PNG")) returned 1 [0155.061] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf011b8fe, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf011b8fe, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf011b8fe, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x20bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons.png", cAlternateFileName="NEW_IC~2.PNG")) returned 1 [0155.061] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf011b8fe, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf011b8fe, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf011b8fe, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x456c, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons_retina.png", cAlternateFileName="NEW_IC~1.PNG")) returned 1 [0155.061] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf011b8fe, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf011b8fe, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf011b8fe, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x456c, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons_retina.png", cAlternateFileName="NEW_IC~1.PNG")) returned 0 [0155.061] FindClose (in: hFindFile=0x9939c0 | out: hFindFile=0x9939c0) returned 1 [0155.062] GetProcessHeap () returned 0x8a0000 [0155.062] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.062] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0010838, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0 [0155.062] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0155.062] GetProcessHeap () returned 0x8a0000 [0155.062] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0155.063] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0010838, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 0 [0155.063] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0155.063] GetProcessHeap () returned 0x8a0000 [0155.063] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0155.064] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0155.064] GetProcessHeap () returned 0x8a0000 [0155.064] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0155.064] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0155.065] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.065] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0155.065] GetProcessHeap () returned 0x8a0000 [0155.065] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0155.083] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0155.085] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.085] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-ae", cAlternateFileName="")) returned 1 [0155.085] GetProcessHeap () returned 0x8a0000 [0155.086] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.086] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ar-ae\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0155.087] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.087] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0155.087] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0155.087] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0155.087] GetProcessHeap () returned 0x8a0000 [0155.087] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.087] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1 [0155.087] GetProcessHeap () returned 0x8a0000 [0155.087] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.087] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ca-es\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0155.088] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.088] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x579, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0155.088] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x579, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0155.088] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0155.088] GetProcessHeap () returned 0x8a0000 [0155.088] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.088] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1 [0155.088] GetProcessHeap () returned 0x8a0000 [0155.088] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.088] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\cs-cz\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0155.089] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.089] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x58a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0155.089] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x58a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0155.089] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0155.090] GetProcessHeap () returned 0x8a0000 [0155.090] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.090] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0155.090] GetProcessHeap () returned 0x8a0000 [0155.090] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.090] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\da-dk\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0155.090] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.090] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x547, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0155.090] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x547, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0155.090] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0155.090] GetProcessHeap () returned 0x8a0000 [0155.090] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.090] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0155.091] GetProcessHeap () returned 0x8a0000 [0155.091] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.091] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\de-de\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0155.091] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.092] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0155.092] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0155.092] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0155.092] GetProcessHeap () returned 0x8a0000 [0155.092] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.092] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1 [0155.092] GetProcessHeap () returned 0x8a0000 [0155.092] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.092] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-ae\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0155.093] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.093] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x53d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0155.093] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x53d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0155.093] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0155.093] GetProcessHeap () returned 0x8a0000 [0155.093] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.093] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0155.093] GetProcessHeap () returned 0x8a0000 [0155.093] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.093] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-gb\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0155.094] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.095] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x490, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0155.095] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x490, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0155.095] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0155.095] GetProcessHeap () returned 0x8a0000 [0155.095] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.095] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1 [0155.095] GetProcessHeap () returned 0x8a0000 [0155.095] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.095] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-il\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0155.096] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.096] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x53d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0155.096] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x53d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0155.096] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0155.096] GetProcessHeap () returned 0x8a0000 [0155.096] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.096] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0155.096] GetProcessHeap () returned 0x8a0000 [0155.096] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.096] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\es-es\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0155.097] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.097] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0155.097] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0155.097] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0155.097] GetProcessHeap () returned 0x8a0000 [0155.097] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.097] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1 [0155.097] GetProcessHeap () returned 0x8a0000 [0155.097] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.097] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\eu-es\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0155.098] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.098] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x578, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0155.098] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x578, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0155.098] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0155.098] GetProcessHeap () returned 0x8a0000 [0155.098] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.098] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0155.099] GetProcessHeap () returned 0x8a0000 [0155.099] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.099] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fi-fi\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0155.100] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.100] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x557, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0155.100] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x557, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0155.100] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0155.100] GetProcessHeap () returned 0x8a0000 [0155.100] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.100] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0155.100] GetProcessHeap () returned 0x8a0000 [0155.100] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.100] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-fr\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0155.101] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.101] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0155.101] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0155.101] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0155.101] GetProcessHeap () returned 0x8a0000 [0155.101] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.101] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1 [0155.101] GetProcessHeap () returned 0x8a0000 [0155.101] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.101] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-ma\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0155.102] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.102] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0155.102] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0155.102] FindClose (in: hFindFile=0x993a00 | out: hFindFile=0x993a00) returned 1 [0155.102] GetProcessHeap () returned 0x8a0000 [0155.102] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.102] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1 [0155.102] GetProcessHeap () returned 0x8a0000 [0155.102] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.102] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\he-il\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0155.756] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.756] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0155.756] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0155.756] FindClose (in: hFindFile=0x9939c0 | out: hFindFile=0x9939c0) returned 1 [0155.756] GetProcessHeap () returned 0x8a0000 [0155.756] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.756] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1 [0155.756] GetProcessHeap () returned 0x8a0000 [0155.756] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.756] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hr-hr\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0155.768] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.768] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x587, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0155.769] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x587, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0155.769] FindClose (in: hFindFile=0x9939c0 | out: hFindFile=0x9939c0) returned 1 [0155.769] GetProcessHeap () returned 0x8a0000 [0155.769] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.769] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1 [0155.769] GetProcessHeap () returned 0x8a0000 [0155.769] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.769] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hu-hu\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0155.770] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.770] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x593, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0155.771] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x593, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0155.771] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0155.771] GetProcessHeap () returned 0x8a0000 [0155.771] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.771] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0155.771] GetProcessHeap () returned 0x8a0000 [0155.771] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.771] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\it-it\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0155.771] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.771] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x562, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0155.771] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x562, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0155.771] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0155.771] GetProcessHeap () returned 0x8a0000 [0155.772] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.772] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0155.772] GetProcessHeap () returned 0x8a0000 [0155.772] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.772] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ja-jp\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0155.772] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.772] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0155.772] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0155.772] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0155.772] GetProcessHeap () returned 0x8a0000 [0155.772] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.772] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1 [0155.772] GetProcessHeap () returned 0x8a0000 [0155.772] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.772] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ko-kr\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0155.773] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.773] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x570, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0155.774] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x570, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0155.774] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0155.774] GetProcessHeap () returned 0x8a0000 [0155.774] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.774] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0155.774] GetProcessHeap () returned 0x8a0000 [0155.774] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.774] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nb-no\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0155.775] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.775] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x553, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0155.775] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x553, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0155.775] FindClose (in: hFindFile=0x993880 | out: hFindFile=0x993880) returned 1 [0155.775] GetProcessHeap () returned 0x8a0000 [0155.775] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.775] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0155.775] GetProcessHeap () returned 0x8a0000 [0155.775] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.775] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nl-nl\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0155.775] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.775] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x55a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0155.776] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x55a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0155.776] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0155.776] GetProcessHeap () returned 0x8a0000 [0155.776] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.776] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1 [0155.776] GetProcessHeap () returned 0x8a0000 [0155.776] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.776] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pl-pl\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0155.776] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.776] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x570, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0155.777] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x570, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0155.777] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0155.777] GetProcessHeap () returned 0x8a0000 [0155.777] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.777] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0155.777] GetProcessHeap () returned 0x8a0000 [0155.777] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.777] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pt-br\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0155.778] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.778] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x55b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0155.778] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x55b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0155.778] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0155.778] GetProcessHeap () returned 0x8a0000 [0155.778] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.778] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1 [0155.778] GetProcessHeap () returned 0x8a0000 [0155.778] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.778] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ro-ro\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0155.779] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.779] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x56e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0155.779] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x56e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0155.779] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0155.779] GetProcessHeap () returned 0x8a0000 [0155.779] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.779] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0155.780] GetProcessHeap () returned 0x8a0000 [0155.780] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.780] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\root\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0155.780] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.780] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x53d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0155.780] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x53d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0155.780] FindClose (in: hFindFile=0x9939c0 | out: hFindFile=0x9939c0) returned 1 [0155.780] GetProcessHeap () returned 0x8a0000 [0155.780] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.780] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1 [0155.780] GetProcessHeap () returned 0x8a0000 [0155.781] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.781] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ru-ru\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0155.781] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.781] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x642, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0155.781] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x642, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0155.781] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0155.781] GetProcessHeap () returned 0x8a0000 [0155.781] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.781] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1 [0155.781] GetProcessHeap () returned 0x8a0000 [0155.781] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.782] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sk-sk\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0155.782] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.782] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0155.782] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0155.782] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0155.783] GetProcessHeap () returned 0x8a0000 [0155.783] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.783] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1 [0155.783] GetProcessHeap () returned 0x8a0000 [0155.783] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.783] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-si\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0155.783] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.783] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x556, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0155.783] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x556, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0155.783] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0155.783] GetProcessHeap () returned 0x8a0000 [0155.783] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.783] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1 [0155.783] GetProcessHeap () returned 0x8a0000 [0155.784] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.784] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-sl\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0155.784] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.784] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0155.784] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0155.784] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0155.784] GetProcessHeap () returned 0x8a0000 [0155.784] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.784] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0155.784] GetProcessHeap () returned 0x8a0000 [0155.784] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.784] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sv-se\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0155.785] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.785] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x568, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0155.785] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x568, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0155.785] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0155.785] GetProcessHeap () returned 0x8a0000 [0155.785] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.785] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1 [0155.785] GetProcessHeap () returned 0x8a0000 [0155.785] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.785] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\tr-tr\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0155.785] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.785] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x554, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0155.786] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x554, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0155.786] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0155.786] GetProcessHeap () returned 0x8a0000 [0155.786] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.786] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0155.786] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-ua", cAlternateFileName="")) returned 1 [0155.786] GetProcessHeap () returned 0x8a0000 [0155.786] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.786] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\uk-ua\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0155.786] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.786] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x661, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0155.787] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x661, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0155.787] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0155.787] GetProcessHeap () returned 0x8a0000 [0155.787] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.787] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1 [0155.787] GetProcessHeap () returned 0x8a0000 [0155.787] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.787] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-cn\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0155.787] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.787] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x568, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0155.787] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x568, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0155.787] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0155.788] GetProcessHeap () returned 0x8a0000 [0155.788] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.788] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1 [0155.788] GetProcessHeap () returned 0x8a0000 [0155.788] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.788] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-tw\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0155.788] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.788] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x56e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0155.788] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x56e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0155.788] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0155.788] GetProcessHeap () returned 0x8a0000 [0155.788] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.788] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0 [0155.789] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0155.789] GetProcessHeap () returned 0x8a0000 [0155.789] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0155.789] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2f1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0155.789] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x9ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 1 [0155.789] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x9ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 0 [0155.789] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0155.789] GetProcessHeap () returned 0x8a0000 [0155.789] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0155.790] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0155.790] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0155.790] GetProcessHeap () returned 0x8a0000 [0155.790] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c80b8 | out: hHeap=0x8a0000) returned 1 [0155.791] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="my-computer-select", cAlternateFileName="MY-COM~1")) returned 1 [0155.791] GetProcessHeap () returned 0x8a0000 [0155.791] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c80b8 [0155.791] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\*", lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0155.792] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.792] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0155.792] GetProcessHeap () returned 0x8a0000 [0155.792] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0155.792] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\css\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0155.793] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.793] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x645, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-selector.css", cAlternateFileName="MAIN-S~1.CSS")) returned 1 [0155.793] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x11ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0155.793] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x11ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 0 [0155.793] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0155.793] GetProcessHeap () returned 0x8a0000 [0155.793] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0155.793] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0155.793] GetProcessHeap () returned 0x8a0000 [0155.793] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0155.793] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0155.794] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.794] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0155.794] GetProcessHeap () returned 0x8a0000 [0155.794] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0155.795] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0155.797] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.798] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-ae", cAlternateFileName="")) returned 1 [0155.798] GetProcessHeap () returned 0x8a0000 [0155.798] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.798] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ar-ae\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0155.799] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.799] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0155.799] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0155.799] GetProcessHeap () returned 0x8a0000 [0155.799] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.799] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1 [0155.799] GetProcessHeap () returned 0x8a0000 [0155.799] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.799] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ca-es\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0155.800] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.800] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0155.800] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0155.800] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0155.800] GetProcessHeap () returned 0x8a0000 [0155.800] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.800] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1 [0155.800] GetProcessHeap () returned 0x8a0000 [0155.800] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.800] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\cs-cz\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0155.801] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.801] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0155.801] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0155.801] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0155.802] GetProcessHeap () returned 0x8a0000 [0155.802] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.802] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0155.802] GetProcessHeap () returned 0x8a0000 [0155.802] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.802] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\da-dk\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0155.802] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.802] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x356, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0155.802] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x356, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0155.802] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0155.802] GetProcessHeap () returned 0x8a0000 [0155.802] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.802] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0155.802] GetProcessHeap () returned 0x8a0000 [0155.802] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.802] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\de-de\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0155.803] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.804] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0155.804] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0155.804] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0155.804] GetProcessHeap () returned 0x8a0000 [0155.804] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.804] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1 [0155.804] GetProcessHeap () returned 0x8a0000 [0155.804] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.804] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-ae\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0155.805] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.805] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0155.805] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0155.805] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0155.806] GetProcessHeap () returned 0x8a0000 [0155.806] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.806] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0155.807] GetProcessHeap () returned 0x8a0000 [0155.807] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.807] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-gb\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0155.922] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.922] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x337, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0155.922] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x337, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0155.922] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0155.922] GetProcessHeap () returned 0x8a0000 [0155.922] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.922] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1 [0155.922] GetProcessHeap () returned 0x8a0000 [0155.922] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.922] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-il\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0155.923] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.923] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0155.923] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0155.924] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0155.924] GetProcessHeap () returned 0x8a0000 [0155.924] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.924] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0155.924] GetProcessHeap () returned 0x8a0000 [0155.924] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.924] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\es-es\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0155.924] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.924] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x359, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0155.924] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x359, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0155.924] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0155.924] GetProcessHeap () returned 0x8a0000 [0155.924] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.924] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1 [0155.925] GetProcessHeap () returned 0x8a0000 [0155.925] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.925] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\eu-es\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0155.925] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.925] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0155.926] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0155.926] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0155.926] GetProcessHeap () returned 0x8a0000 [0155.926] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.926] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0155.926] GetProcessHeap () returned 0x8a0000 [0155.926] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.926] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fi-fi\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0155.927] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.927] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0155.927] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0155.927] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0155.927] GetProcessHeap () returned 0x8a0000 [0155.927] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.927] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0155.927] GetProcessHeap () returned 0x8a0000 [0155.927] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.927] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-fr\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0155.928] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.928] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0155.928] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0155.928] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0155.928] GetProcessHeap () returned 0x8a0000 [0155.928] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.929] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1 [0155.929] GetProcessHeap () returned 0x8a0000 [0155.929] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.929] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-ma\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0155.929] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.930] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0155.930] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0155.930] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0155.930] GetProcessHeap () returned 0x8a0000 [0155.930] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.930] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1 [0155.930] GetProcessHeap () returned 0x8a0000 [0155.930] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.930] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\he-il\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0155.931] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.931] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0155.931] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0155.931] GetProcessHeap () returned 0x8a0000 [0155.931] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.931] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1 [0155.931] GetProcessHeap () returned 0x8a0000 [0155.931] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.931] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hr-hr\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0155.932] GetProcessHeap () returned 0x8a0000 [0155.932] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.932] GetProcessHeap () returned 0x8a0000 [0155.932] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.932] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hu-hu\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0155.933] GetProcessHeap () returned 0x8a0000 [0155.933] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.933] GetProcessHeap () returned 0x8a0000 [0155.933] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.933] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\it-it\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0155.933] GetProcessHeap () returned 0x8a0000 [0155.933] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.933] GetProcessHeap () returned 0x8a0000 [0155.933] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.933] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ja-jp\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0155.934] GetProcessHeap () returned 0x8a0000 [0155.934] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.934] GetProcessHeap () returned 0x8a0000 [0155.934] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.934] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ko-kr\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0155.935] GetProcessHeap () returned 0x8a0000 [0155.935] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.935] GetProcessHeap () returned 0x8a0000 [0155.935] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.935] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\nb-no\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0155.935] GetProcessHeap () returned 0x8a0000 [0155.935] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.935] GetProcessHeap () returned 0x8a0000 [0155.935] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.935] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\nl-nl\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0155.936] GetProcessHeap () returned 0x8a0000 [0155.936] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.936] GetProcessHeap () returned 0x8a0000 [0155.936] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.936] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\pl-pl\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0155.936] GetProcessHeap () returned 0x8a0000 [0155.936] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.937] GetProcessHeap () returned 0x8a0000 [0155.937] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.937] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\pt-br\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0155.937] GetProcessHeap () returned 0x8a0000 [0155.938] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.938] GetProcessHeap () returned 0x8a0000 [0155.938] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.938] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ro-ro\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0155.939] GetProcessHeap () returned 0x8a0000 [0155.939] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.939] GetProcessHeap () returned 0x8a0000 [0155.939] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.939] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\root\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0155.939] GetProcessHeap () returned 0x8a0000 [0155.939] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.939] GetProcessHeap () returned 0x8a0000 [0155.939] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.939] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ru-ru\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0155.940] GetProcessHeap () returned 0x8a0000 [0155.940] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.940] GetProcessHeap () returned 0x8a0000 [0155.940] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.940] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\sk-sk\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0155.941] GetProcessHeap () returned 0x8a0000 [0155.941] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.941] GetProcessHeap () returned 0x8a0000 [0155.941] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.941] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\sl-si\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0155.941] GetProcessHeap () returned 0x8a0000 [0155.941] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.941] GetProcessHeap () returned 0x8a0000 [0155.941] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.941] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\sl-sl\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0155.942] GetProcessHeap () returned 0x8a0000 [0155.942] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.942] GetProcessHeap () returned 0x8a0000 [0155.942] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.942] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\sv-se\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0155.942] GetProcessHeap () returned 0x8a0000 [0155.942] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.942] GetProcessHeap () returned 0x8a0000 [0155.942] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.942] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\tr-tr\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0155.943] GetProcessHeap () returned 0x8a0000 [0155.943] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.943] GetProcessHeap () returned 0x8a0000 [0155.943] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.943] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\uk-ua\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0155.943] GetProcessHeap () returned 0x8a0000 [0155.943] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.943] GetProcessHeap () returned 0x8a0000 [0155.943] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.943] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\zh-cn\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0155.944] GetProcessHeap () returned 0x8a0000 [0155.944] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.944] GetProcessHeap () returned 0x8a0000 [0155.944] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.944] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\zh-tw\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0155.944] GetProcessHeap () returned 0x8a0000 [0155.944] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.944] GetProcessHeap () returned 0x8a0000 [0155.944] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0155.944] GetProcessHeap () returned 0x8a0000 [0155.944] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0155.946] GetProcessHeap () returned 0x8a0000 [0155.946] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c80b8 | out: hHeap=0x8a0000) returned 1 [0155.946] GetProcessHeap () returned 0x8a0000 [0155.946] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c80b8 [0155.946] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\*", lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0cbb036, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0cbb036, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0155.948] GetProcessHeap () returned 0x8a0000 [0155.948] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0155.948] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\css\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0155.949] GetProcessHeap () returned 0x8a0000 [0155.949] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0155.949] GetProcessHeap () returned 0x8a0000 [0155.949] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0155.949] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\images\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0cbb036, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0cbb036, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0155.951] GetProcessHeap () returned 0x8a0000 [0155.951] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0155.952] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\images\\themes\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0cbb036, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0cbb036, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0cbb036, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0155.953] GetProcessHeap () returned 0x8a0000 [0155.953] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0155.953] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\images\\themes\\dark\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0cbb036, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0cbb036, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0d074e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0155.955] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0cbb036, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0cbb036, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0d074e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.955] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0cbb036, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0cbb036, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0d074e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_patterns_header.png", cAlternateFileName="BG_PAT~2.PNG")) returned 1 [0155.955] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0cbb036, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0cbb036, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0cbb036, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_pattern_RHP.png", cAlternateFileName="BG_PAT~1.PNG")) returned 1 [0155.955] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0cbb036, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0cbb036, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0cbb036, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons.png", cAlternateFileName="")) returned 1 [0155.955] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0d074e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0d074e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0d074e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1fd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons_ie8.gif", cAlternateFileName="ICONS_~1.GIF")) returned 1 [0155.955] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0d074e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0d074e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0d074e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3c6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons_retina.png", cAlternateFileName="ICONS_~1.PNG")) returned 1 [0155.956] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0d074e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0d074e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0d074e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x225a, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations.png", cAlternateFileName="ILLUST~2.PNG")) returned 1 [0155.956] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0cbb036, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0cbb036, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0cbb036, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations_retina.png", cAlternateFileName="ILLUST~1.PNG")) returned 1 [0155.956] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0d074e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0d074e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0d074e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x20bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons.png", cAlternateFileName="NEW_IC~2.PNG")) returned 1 [0155.956] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0d074e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0d074e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0d074e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x456c, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons_retina.png", cAlternateFileName="NEW_IC~1.PNG")) returned 1 [0155.956] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0d074e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0d074e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0d074e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x456c, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons_retina.png", cAlternateFileName="NEW_IC~1.PNG")) returned 0 [0155.956] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0155.957] GetProcessHeap () returned 0x8a0000 [0155.957] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0155.957] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0cbb036, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0cbb036, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0cbb036, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0 [0155.957] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0155.957] GetProcessHeap () returned 0x8a0000 [0155.957] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0155.957] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0cbb036, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0cbb036, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0cbb036, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 0 [0155.957] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0155.957] GetProcessHeap () returned 0x8a0000 [0155.957] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0155.958] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0155.959] GetProcessHeap () returned 0x8a0000 [0155.959] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0155.959] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0155.960] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.960] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0155.960] GetProcessHeap () returned 0x8a0000 [0155.960] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0156.108] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0156.116] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.116] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-ae", cAlternateFileName="")) returned 1 [0156.116] GetProcessHeap () returned 0x8a0000 [0156.116] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.116] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\ar-ae\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0156.117] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.117] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0156.117] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0156.117] GetProcessHeap () returned 0x8a0000 [0156.117] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.117] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1 [0156.117] GetProcessHeap () returned 0x8a0000 [0156.117] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.117] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\ca-es\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0156.118] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.118] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x427, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0156.118] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x427, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0156.118] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0156.118] GetProcessHeap () returned 0x8a0000 [0156.118] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.118] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1 [0156.119] GetProcessHeap () returned 0x8a0000 [0156.119] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.119] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\cs-cz\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0156.119] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.119] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x42e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0156.119] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x42e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0156.119] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0156.119] GetProcessHeap () returned 0x8a0000 [0156.119] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.119] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0156.119] GetProcessHeap () returned 0x8a0000 [0156.119] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.119] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\da-dk\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0156.120] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.120] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x413, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0156.120] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x413, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0156.120] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0156.120] GetProcessHeap () returned 0x8a0000 [0156.120] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.121] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0156.121] GetProcessHeap () returned 0x8a0000 [0156.121] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.121] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\de-de\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0156.121] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.121] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x430, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0156.121] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x430, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0156.121] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0156.121] GetProcessHeap () returned 0x8a0000 [0156.122] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.122] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1 [0156.122] GetProcessHeap () returned 0x8a0000 [0156.122] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.122] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\en-ae\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0156.123] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.123] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x411, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0156.123] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x411, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0156.123] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0156.123] GetProcessHeap () returned 0x8a0000 [0156.123] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.123] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0156.123] GetProcessHeap () returned 0x8a0000 [0156.123] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.123] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\en-gb\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0156.124] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.124] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x37d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0156.124] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x37d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0156.124] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0156.125] GetProcessHeap () returned 0x8a0000 [0156.125] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.125] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1 [0156.125] GetProcessHeap () returned 0x8a0000 [0156.125] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.125] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\en-il\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0156.126] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.126] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x411, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0156.126] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x411, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0156.126] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0156.126] GetProcessHeap () returned 0x8a0000 [0156.126] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.126] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0156.126] GetProcessHeap () returned 0x8a0000 [0156.126] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.126] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\es-es\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0156.127] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.127] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x427, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0156.127] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x427, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0156.127] FindClose (in: hFindFile=0x993880 | out: hFindFile=0x993880) returned 1 [0156.127] GetProcessHeap () returned 0x8a0000 [0156.127] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.127] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1 [0156.127] GetProcessHeap () returned 0x8a0000 [0156.127] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.127] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\eu-es\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0156.128] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.128] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x421, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0156.128] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x421, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0156.128] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0156.128] GetProcessHeap () returned 0x8a0000 [0156.128] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.128] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0156.128] GetProcessHeap () returned 0x8a0000 [0156.128] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.128] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\fi-fi\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0156.129] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.129] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0156.129] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0156.129] FindClose (in: hFindFile=0x993880 | out: hFindFile=0x993880) returned 1 [0156.130] GetProcessHeap () returned 0x8a0000 [0156.130] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.130] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0156.130] GetProcessHeap () returned 0x8a0000 [0156.130] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.130] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\fr-fr\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0156.131] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.131] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0156.131] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0156.131] FindClose (in: hFindFile=0x993880 | out: hFindFile=0x993880) returned 1 [0156.131] GetProcessHeap () returned 0x8a0000 [0156.131] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.131] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1 [0156.131] GetProcessHeap () returned 0x8a0000 [0156.131] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.131] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\fr-ma\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0156.132] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.132] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0156.132] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0156.132] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0156.132] GetProcessHeap () returned 0x8a0000 [0156.132] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.132] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1 [0156.132] GetProcessHeap () returned 0x8a0000 [0156.132] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.132] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\he-il\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0156.133] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.133] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0156.133] FindClose (in: hFindFile=0x993880 | out: hFindFile=0x993880) returned 1 [0156.133] GetProcessHeap () returned 0x8a0000 [0156.133] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.133] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1 [0156.134] GetProcessHeap () returned 0x8a0000 [0156.134] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.134] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\hr-hr\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0156.135] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.135] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x41a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0156.135] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x41a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0156.135] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0156.135] GetProcessHeap () returned 0x8a0000 [0156.135] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.135] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1 [0156.135] GetProcessHeap () returned 0x8a0000 [0156.135] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.135] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\hu-hu\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0156.136] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.136] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x41b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0156.136] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x41b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0156.136] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0156.136] GetProcessHeap () returned 0x8a0000 [0156.136] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.136] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0156.136] GetProcessHeap () returned 0x8a0000 [0156.136] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.136] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\it-it\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0156.137] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.137] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x41c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0156.138] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x41c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0156.138] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0156.138] GetProcessHeap () returned 0x8a0000 [0156.138] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.138] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0156.138] GetProcessHeap () returned 0x8a0000 [0156.138] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.138] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\ja-jp\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0156.139] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.139] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x446, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0156.140] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x446, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0156.140] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0156.140] GetProcessHeap () returned 0x8a0000 [0156.140] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.140] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1074aa6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf1074aa6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1074aa6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1 [0156.140] GetProcessHeap () returned 0x8a0000 [0156.140] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.140] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\ko-kr\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1074aa6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf1074aa6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1074aa6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0156.141] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1074aa6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf1074aa6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1074aa6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.141] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1074aa6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf1074aa6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1074aa6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x434, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0156.141] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1074aa6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf1074aa6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1074aa6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x434, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0156.141] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0156.141] GetProcessHeap () returned 0x8a0000 [0156.141] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.141] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0156.141] GetProcessHeap () returned 0x8a0000 [0156.141] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.141] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\nb-no\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0156.142] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.142] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x413, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0156.142] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x413, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0156.142] FindClose (in: hFindFile=0x993880 | out: hFindFile=0x993880) returned 1 [0156.143] GetProcessHeap () returned 0x8a0000 [0156.143] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.143] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0156.143] GetProcessHeap () returned 0x8a0000 [0156.143] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.143] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\nl-nl\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0156.144] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.144] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0156.144] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0156.144] FindClose (in: hFindFile=0x993880 | out: hFindFile=0x993880) returned 1 [0156.145] GetProcessHeap () returned 0x8a0000 [0156.145] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.146] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1074aa6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf1074aa6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1074aa6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1 [0156.146] GetProcessHeap () returned 0x8a0000 [0156.146] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.146] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\pl-pl\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1074aa6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf1074aa6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0156.147] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1074aa6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf1074aa6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.147] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x42e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0156.147] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x42e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0156.147] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0156.147] GetProcessHeap () returned 0x8a0000 [0156.147] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.147] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0156.147] GetProcessHeap () returned 0x8a0000 [0156.147] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.147] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\pt-br\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0156.148] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.148] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x426, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0156.148] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x426, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0156.148] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0156.148] GetProcessHeap () returned 0x8a0000 [0156.148] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.148] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1 [0156.148] GetProcessHeap () returned 0x8a0000 [0156.148] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.148] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\ro-ro\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0156.149] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.149] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0156.149] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0156.149] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0156.149] GetProcessHeap () returned 0x8a0000 [0156.149] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.149] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0156.149] GetProcessHeap () returned 0x8a0000 [0156.149] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.149] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\root\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0156.150] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.150] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1074aa6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x411, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0156.150] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1074aa6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x411, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0156.150] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0156.150] GetProcessHeap () returned 0x8a0000 [0156.150] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.150] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1 [0156.150] GetProcessHeap () returned 0x8a0000 [0156.150] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.150] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\ru-ru\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0156.151] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.151] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x46d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0156.151] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x46d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0156.151] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0156.151] GetProcessHeap () returned 0x8a0000 [0156.151] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.151] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1 [0156.151] GetProcessHeap () returned 0x8a0000 [0156.151] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.152] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\sk-sk\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0156.152] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.152] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x449, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0156.152] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x449, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0156.153] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0156.153] GetProcessHeap () returned 0x8a0000 [0156.153] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.153] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1 [0156.153] GetProcessHeap () returned 0x8a0000 [0156.153] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.153] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\sl-si\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0156.154] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.154] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x423, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0156.154] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x423, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0156.154] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0156.155] GetProcessHeap () returned 0x8a0000 [0156.155] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.155] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1 [0156.155] GetProcessHeap () returned 0x8a0000 [0156.155] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.155] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\sl-sl\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0156.156] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.156] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0156.156] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0156.156] GetProcessHeap () returned 0x8a0000 [0156.156] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.156] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0156.156] GetProcessHeap () returned 0x8a0000 [0156.157] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.157] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\sv-se\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0156.363] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.363] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x41e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0156.363] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x41e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0156.363] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0156.363] GetProcessHeap () returned 0x8a0000 [0156.363] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.363] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1074aa6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf1074aa6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1074aa6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1 [0156.363] GetProcessHeap () returned 0x8a0000 [0156.363] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.363] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\tr-tr\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1074aa6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf1074aa6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1074aa6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0156.377] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1074aa6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf1074aa6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1074aa6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.377] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1074aa6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf1074aa6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1074aa6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x424, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0156.377] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1074aa6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf1074aa6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1074aa6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x424, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0156.377] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0156.377] GetProcessHeap () returned 0x8a0000 [0156.377] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.377] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0156.377] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-ua", cAlternateFileName="")) returned 1 [0156.377] GetProcessHeap () returned 0x8a0000 [0156.377] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.377] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\uk-ua\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0156.378] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.378] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0156.378] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0156.378] FindClose (in: hFindFile=0x993880 | out: hFindFile=0x993880) returned 1 [0156.378] GetProcessHeap () returned 0x8a0000 [0156.378] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.378] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1 [0156.378] GetProcessHeap () returned 0x8a0000 [0156.378] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.378] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\zh-cn\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0156.378] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.378] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x40b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0156.378] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x40b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0156.379] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0156.379] GetProcessHeap () returned 0x8a0000 [0156.379] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.379] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e38798, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e38798, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e38798, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1 [0156.379] GetProcessHeap () returned 0x8a0000 [0156.379] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.379] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\zh-tw\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e38798, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e38798, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0156.379] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e38798, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e38798, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.379] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x408, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0156.379] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x408, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0156.379] FindClose (in: hFindFile=0x9939c0 | out: hFindFile=0x9939c0) returned 1 [0156.379] GetProcessHeap () returned 0x8a0000 [0156.379] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.379] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e38798, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e38798, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e38798, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0 [0156.379] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0156.380] GetProcessHeap () returned 0x8a0000 [0156.380] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0156.380] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0156.380] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xc17, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 1 [0156.380] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xc17, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 0 [0156.380] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0156.380] GetProcessHeap () returned 0x8a0000 [0156.380] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0156.381] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0156.381] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0156.381] GetProcessHeap () returned 0x8a0000 [0156.381] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c80b8 | out: hHeap=0x8a0000) returned 1 [0156.382] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="my-files-select", cAlternateFileName="MY-FIL~1")) returned 1 [0156.382] GetProcessHeap () returned 0x8a0000 [0156.382] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c80b8 [0156.382] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files-select\\*", lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0156.394] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.394] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0156.394] GetProcessHeap () returned 0x8a0000 [0156.394] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0156.394] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files-select\\css\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0156.397] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.397] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0156.397] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0156.397] GetProcessHeap () returned 0x8a0000 [0156.397] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0156.397] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0156.397] GetProcessHeap () returned 0x8a0000 [0156.397] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0156.397] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files-select\\js\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0156.397] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.397] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x53b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0156.398] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x53b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 0 [0156.398] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0156.398] GetProcessHeap () returned 0x8a0000 [0156.398] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0156.398] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0156.398] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0156.398] GetProcessHeap () returned 0x8a0000 [0156.398] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c80b8 | out: hHeap=0x8a0000) returned 1 [0156.398] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="my-recent-files", cAlternateFileName="MY-REC~2")) returned 1 [0156.398] GetProcessHeap () returned 0x8a0000 [0156.398] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c80b8 [0156.398] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\*", lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0156.399] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.399] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0156.399] GetProcessHeap () returned 0x8a0000 [0156.399] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0156.399] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\css\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0156.399] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.399] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0156.400] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0156.400] GetProcessHeap () returned 0x8a0000 [0156.400] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0156.400] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0156.400] GetProcessHeap () returned 0x8a0000 [0156.400] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0156.400] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0156.402] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.402] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0156.402] GetProcessHeap () returned 0x8a0000 [0156.402] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0156.403] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993680 [0156.406] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.406] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-ae", cAlternateFileName="")) returned 1 [0156.406] GetProcessHeap () returned 0x8a0000 [0156.406] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.406] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\ar-ae\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0156.407] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.407] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0156.407] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0156.407] GetProcessHeap () returned 0x8a0000 [0156.407] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.407] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1 [0156.407] GetProcessHeap () returned 0x8a0000 [0156.407] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.407] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\ca-es\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0156.411] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.411] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x428, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0156.411] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x428, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0156.411] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0156.411] GetProcessHeap () returned 0x8a0000 [0156.411] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.411] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1 [0156.411] GetProcessHeap () returned 0x8a0000 [0156.412] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.412] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\cs-cz\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0156.416] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.416] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x417, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0156.417] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x417, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0156.417] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0156.417] GetProcessHeap () returned 0x8a0000 [0156.417] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.417] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0156.417] GetProcessHeap () returned 0x8a0000 [0156.417] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.417] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\da-dk\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0156.417] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.417] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0156.417] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0156.417] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0156.417] GetProcessHeap () returned 0x8a0000 [0156.417] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.418] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0156.418] GetProcessHeap () returned 0x8a0000 [0156.418] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.418] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\de-de\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0156.418] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.418] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x42f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0156.419] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x42f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0156.419] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0156.419] GetProcessHeap () returned 0x8a0000 [0156.419] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.419] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1 [0156.419] GetProcessHeap () returned 0x8a0000 [0156.419] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.419] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\en-ae\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0156.432] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.432] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0156.432] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0156.432] GetProcessHeap () returned 0x8a0000 [0156.432] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.432] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0156.432] GetProcessHeap () returned 0x8a0000 [0156.432] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.432] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\en-gb\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0156.436] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.436] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x337, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0156.436] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x337, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0156.436] FindClose (in: hFindFile=0x9939c0 | out: hFindFile=0x9939c0) returned 1 [0156.436] GetProcessHeap () returned 0x8a0000 [0156.436] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.436] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1 [0156.436] GetProcessHeap () returned 0x8a0000 [0156.436] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.436] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\en-il\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0156.438] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.438] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0156.438] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0156.438] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0156.438] GetProcessHeap () returned 0x8a0000 [0156.438] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.438] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0156.438] GetProcessHeap () returned 0x8a0000 [0156.438] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.438] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\es-es\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0156.438] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.438] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x415, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0156.439] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x415, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0156.439] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0156.439] GetProcessHeap () returned 0x8a0000 [0156.439] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.439] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1 [0156.439] GetProcessHeap () returned 0x8a0000 [0156.439] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.439] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\eu-es\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0156.440] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.441] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x40e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0156.441] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x40e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0156.441] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0156.441] GetProcessHeap () returned 0x8a0000 [0156.441] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.441] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0156.441] GetProcessHeap () returned 0x8a0000 [0156.441] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.441] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\fi-fi\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0156.446] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.446] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x408, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0156.446] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x408, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0156.446] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0156.447] GetProcessHeap () returned 0x8a0000 [0156.447] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.447] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0156.447] GetProcessHeap () returned 0x8a0000 [0156.447] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.447] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\fr-fr\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0156.449] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.449] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x411, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0156.449] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x411, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0156.449] FindClose (in: hFindFile=0x9939c0 | out: hFindFile=0x9939c0) returned 1 [0156.449] GetProcessHeap () returned 0x8a0000 [0156.449] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.449] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1 [0156.449] GetProcessHeap () returned 0x8a0000 [0156.449] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.449] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\fr-ma\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0156.449] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.450] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0156.450] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0156.450] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0156.450] GetProcessHeap () returned 0x8a0000 [0156.450] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.450] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1 [0156.450] GetProcessHeap () returned 0x8a0000 [0156.450] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.450] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\he-il\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0156.451] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.451] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0156.451] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0156.452] GetProcessHeap () returned 0x8a0000 [0156.452] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.452] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1 [0156.452] GetProcessHeap () returned 0x8a0000 [0156.452] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.452] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\hr-hr\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0156.453] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.453] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x43a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0156.453] FindNextFileW (in: hFindFile=0x9939c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x43a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0156.454] FindClose (in: hFindFile=0x9939c0 | out: hFindFile=0x9939c0) returned 1 [0156.454] GetProcessHeap () returned 0x8a0000 [0156.454] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.454] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1 [0156.454] GetProcessHeap () returned 0x8a0000 [0156.454] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.454] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\hu-hu\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0156.460] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.460] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x417, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0156.460] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x417, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0156.461] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0156.461] GetProcessHeap () returned 0x8a0000 [0156.461] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.461] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0156.461] GetProcessHeap () returned 0x8a0000 [0156.461] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.461] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\it-it\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0156.462] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.462] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x402, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0156.462] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x402, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0156.462] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0156.462] GetProcessHeap () returned 0x8a0000 [0156.462] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.462] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0156.462] GetProcessHeap () returned 0x8a0000 [0156.462] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.462] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\ja-jp\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0156.462] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.462] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x44f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0156.463] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x44f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0156.463] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0156.463] GetProcessHeap () returned 0x8a0000 [0156.463] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.463] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1 [0156.463] GetProcessHeap () returned 0x8a0000 [0156.463] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.463] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\ko-kr\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0156.493] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.493] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0156.493] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0156.493] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0156.493] GetProcessHeap () returned 0x8a0000 [0156.493] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.493] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0156.493] GetProcessHeap () returned 0x8a0000 [0156.493] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.493] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\nb-no\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0156.498] GetProcessHeap () returned 0x8a0000 [0156.498] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.498] GetProcessHeap () returned 0x8a0000 [0156.498] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.498] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\nl-nl\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0156.499] GetProcessHeap () returned 0x8a0000 [0156.499] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.499] GetProcessHeap () returned 0x8a0000 [0156.499] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.499] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\pl-pl\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0156.499] GetProcessHeap () returned 0x8a0000 [0156.499] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.499] GetProcessHeap () returned 0x8a0000 [0156.500] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.500] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\pt-br\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0156.500] GetProcessHeap () returned 0x8a0000 [0156.500] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.500] GetProcessHeap () returned 0x8a0000 [0156.500] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.500] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\ro-ro\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0156.500] GetProcessHeap () returned 0x8a0000 [0156.500] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.500] GetProcessHeap () returned 0x8a0000 [0156.501] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.501] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\root\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0156.501] GetProcessHeap () returned 0x8a0000 [0156.501] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.501] GetProcessHeap () returned 0x8a0000 [0156.501] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.501] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\ru-ru\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0156.506] GetProcessHeap () returned 0x8a0000 [0156.506] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.506] GetProcessHeap () returned 0x8a0000 [0156.506] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.506] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\sk-sk\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0156.507] GetProcessHeap () returned 0x8a0000 [0156.507] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.507] GetProcessHeap () returned 0x8a0000 [0156.507] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.507] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\sl-si\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0156.508] GetProcessHeap () returned 0x8a0000 [0156.508] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.508] GetProcessHeap () returned 0x8a0000 [0156.509] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.509] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\sl-sl\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9939c0 [0156.509] GetProcessHeap () returned 0x8a0000 [0156.509] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.509] GetProcessHeap () returned 0x8a0000 [0156.509] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.509] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\sv-se\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0156.509] GetProcessHeap () returned 0x8a0000 [0156.510] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.510] GetProcessHeap () returned 0x8a0000 [0156.510] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.510] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\tr-tr\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0156.510] GetProcessHeap () returned 0x8a0000 [0156.510] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.510] GetProcessHeap () returned 0x8a0000 [0156.510] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.511] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\uk-ua\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0156.511] GetProcessHeap () returned 0x8a0000 [0156.511] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.511] GetProcessHeap () returned 0x8a0000 [0156.511] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.511] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\zh-cn\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0156.511] GetProcessHeap () returned 0x8a0000 [0156.511] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.511] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1 [0156.512] GetProcessHeap () returned 0x8a0000 [0156.512] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.512] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\zh-tw\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0156.512] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.512] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x40a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0156.512] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x40a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0156.512] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0156.512] GetProcessHeap () returned 0x8a0000 [0156.512] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.512] FindNextFileW (in: hFindFile=0x993680, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0 [0156.512] FindClose (in: hFindFile=0x993680 | out: hFindFile=0x993680) returned 1 [0156.512] GetProcessHeap () returned 0x8a0000 [0156.512] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0156.512] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x7044, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0156.512] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1754, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 1 [0156.513] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1754, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 0 [0156.513] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0156.513] GetProcessHeap () returned 0x8a0000 [0156.513] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0156.514] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0156.514] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0156.514] GetProcessHeap () returned 0x8a0000 [0156.514] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c80b8 | out: hHeap=0x8a0000) returned 1 [0156.515] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="my-recent-files-select", cAlternateFileName="MY-REC~1")) returned 1 [0156.515] GetProcessHeap () returned 0x8a0000 [0156.515] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c80b8 [0156.515] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files-select\\*", lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993b00 [0156.516] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.516] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0156.516] GetProcessHeap () returned 0x8a0000 [0156.516] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0156.516] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files-select\\css\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0156.517] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.517] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0156.517] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0156.517] GetProcessHeap () returned 0x8a0000 [0156.517] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0156.517] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0156.517] GetProcessHeap () returned 0x8a0000 [0156.517] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0156.517] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files-select\\js\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993400 [0156.518] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.518] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x76d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0156.518] FindNextFileW (in: hFindFile=0x993400, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x76d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 0 [0156.518] FindClose (in: hFindFile=0x993400 | out: hFindFile=0x993400) returned 1 [0156.518] GetProcessHeap () returned 0x8a0000 [0156.518] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0156.518] FindNextFileW (in: hFindFile=0x993b00, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0156.518] FindClose (in: hFindFile=0x993b00 | out: hFindFile=0x993b00) returned 1 [0156.518] GetProcessHeap () returned 0x8a0000 [0156.518] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c80b8 | out: hHeap=0x8a0000) returned 1 [0156.518] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ob-preview", cAlternateFileName="OB-PRE~1")) returned 1 [0156.518] GetProcessHeap () returned 0x8a0000 [0156.518] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36c80b8 [0156.518] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\*", lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993840 [0156.518] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.519] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0156.519] GetProcessHeap () returned 0x8a0000 [0156.519] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0156.519] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\css\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0156.519] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.520] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x49a, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-selector.css", cAlternateFileName="MAIN-S~1.CSS")) returned 1 [0156.520] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1982, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0156.520] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1982, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 0 [0156.520] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0156.520] GetProcessHeap () returned 0x8a0000 [0156.520] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0156.520] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0156.520] GetProcessHeap () returned 0x8a0000 [0156.520] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0156.520] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\images\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0156.522] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.522] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8f7ad6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8f7ad6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8f7ad6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="combine_poster.jpg", cAlternateFileName="COMBIN~1.JPG")) returned 1 [0156.522] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xbc62, dwReserved0=0x0, dwReserved1=0x0, cFileName="combine_poster2x.jpg", cAlternateFileName="COMBIN~2.JPG")) returned 1 [0156.522] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8f7ad6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8f7ad6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8f7ad6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6a8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="compare_poster.jpg", cAlternateFileName="COMPAR~1.JPG")) returned 1 [0156.522] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8f7ad6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8f7ad6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8f7ad6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x13b23, dwReserved0=0x0, dwReserved1=0x0, cFileName="compare_poster2x.jpg", cAlternateFileName="COMPAR~2.JPG")) returned 1 [0156.523] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8f7ad6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8f7ad6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8f7ad6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x73a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="edit_pdf_poster.jpg", cAlternateFileName="EDIT_P~1.JPG")) returned 1 [0156.523] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8f7ad6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8f7ad6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8f7ad6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x12163, dwReserved0=0x0, dwReserved1=0x0, cFileName="edit_pdf_poster2x.jpg", cAlternateFileName="EDIT_P~2.JPG")) returned 1 [0156.523] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee920b4a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee920b4a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee920b4a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x980, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons.png", cAlternateFileName="EXAMPL~2.PNG")) returned 1 [0156.523] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8f7ad6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8f7ad6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8f7ad6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x15f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons2x.png", cAlternateFileName="EXAMPL~1.PNG")) returned 1 [0156.523] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8f7ad6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8f7ad6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8f7ad6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5dd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="optimize_poster.jpg", cAlternateFileName="OPTIMI~2.JPG")) returned 1 [0156.523] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8f7ad6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8f7ad6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8f7ad6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x10552, dwReserved0=0x0, dwReserved1=0x0, cFileName="optimize_poster2x.jpg", cAlternateFileName="OPTIMI~1.JPG")) returned 1 [0156.523] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee920b4a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee920b4a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee920b4a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x10e5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="organize_poster.jpg", cAlternateFileName="ORGANI~3.JPG")) returned 1 [0156.523] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8f7ad6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8f7ad6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8f7ad6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x10e5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="organize_poster2x-dark.jpg", cAlternateFileName="ORGANI~1.JPG")) returned 1 [0156.523] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8f7ad6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8f7ad6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8f7ad6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x10e5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="organize_poster2x.jpg", cAlternateFileName="ORGANI~2.JPG")) returned 1 [0156.523] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee920b4a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee920b4a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee920b4a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5b34, dwReserved0=0x0, dwReserved1=0x0, cFileName="protect_poster.jpg", cAlternateFileName="PROTEC~2.JPG")) returned 1 [0156.523] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8f7ad6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8f7ad6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8f7ad6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xe6aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="protect_poster2x.jpg", cAlternateFileName="PROTEC~1.JPG")) returned 1 [0156.523] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6dbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="redact_poster.jpg", cAlternateFileName="REDACT~2.JPG")) returned 1 [0156.524] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8f7ad6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8f7ad6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8f7ad6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x111e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="redact_poster2x.jpg", cAlternateFileName="REDACT~1.JPG")) returned 1 [0156.524] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8f7ad6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8f7ad6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8f7ad6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x7689, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_poster.jpg", cAlternateFileName="SCAN_P~1.JPG")) returned 1 [0156.524] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x149e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_poster2x.jpg", cAlternateFileName="SCAN_P~2.JPG")) returned 1 [0156.524] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee920b4a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee920b4a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee920b4a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0156.524] GetProcessHeap () returned 0x8a0000 [0156.524] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0156.525] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\images\\themes\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee920b4a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee920b4a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee920b4a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9936c0 [0156.526] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee920b4a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee920b4a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee920b4a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.526] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee920b4a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee920b4a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee920b4a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0156.527] GetProcessHeap () returned 0x8a0000 [0156.527] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.527] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\images\\themes\\dark\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee920b4a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee920b4a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0156.529] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee920b4a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee920b4a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.529] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee920b4a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee920b4a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee920b4a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="combine_poster.jpg", cAlternateFileName="COMBIN~1.JPG")) returned 1 [0156.529] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xbc62, dwReserved0=0x0, dwReserved1=0x0, cFileName="combine_poster2x.jpg", cAlternateFileName="COMBIN~2.JPG")) returned 1 [0156.529] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee920b4a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee920b4a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee920b4a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6a8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="compare_poster.jpg", cAlternateFileName="COMPAR~1.JPG")) returned 1 [0156.529] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee920b4a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee920b4a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x13b23, dwReserved0=0x0, dwReserved1=0x0, cFileName="compare_poster2x.jpg", cAlternateFileName="COMPAR~2.JPG")) returned 1 [0156.530] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee920b4a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee920b4a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee920b4a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x73a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="edit_pdf_poster.jpg", cAlternateFileName="EDIT_P~1.JPG")) returned 1 [0156.530] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee920b4a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee920b4a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee920b4a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x12163, dwReserved0=0x0, dwReserved1=0x0, cFileName="edit_pdf_poster2x.jpg", cAlternateFileName="EDIT_P~2.JPG")) returned 1 [0156.530] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x980, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons.png", cAlternateFileName="EXAMPL~2.PNG")) returned 1 [0156.530] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee920b4a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee920b4a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee920b4a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x15f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons2x.png", cAlternateFileName="EXAMPL~1.PNG")) returned 1 [0156.530] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee920b4a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee920b4a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee920b4a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5dd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="optimize_poster.jpg", cAlternateFileName="OPTIMI~2.JPG")) returned 1 [0156.530] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee920b4a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee920b4a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee920b4a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x10552, dwReserved0=0x0, dwReserved1=0x0, cFileName="optimize_poster2x.jpg", cAlternateFileName="OPTIMI~1.JPG")) returned 1 [0156.530] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x642a, dwReserved0=0x0, dwReserved1=0x0, cFileName="organize_poster.jpg", cAlternateFileName="ORGANI~2.JPG")) returned 1 [0156.530] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee920b4a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee920b4a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee920b4a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x10e5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="organize_poster2x.jpg", cAlternateFileName="ORGANI~1.JPG")) returned 1 [0156.530] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5b34, dwReserved0=0x0, dwReserved1=0x0, cFileName="protect_poster.jpg", cAlternateFileName="PROTEC~2.JPG")) returned 1 [0156.530] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee920b4a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee920b4a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee920b4a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xe6aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="protect_poster2x.jpg", cAlternateFileName="PROTEC~1.JPG")) returned 1 [0156.530] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6dbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="redact_poster.jpg", cAlternateFileName="REDACT~2.JPG")) returned 1 [0156.530] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee920b4a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee920b4a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee920b4a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x111e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="redact_poster2x.jpg", cAlternateFileName="REDACT~1.JPG")) returned 1 [0156.531] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee920b4a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee920b4a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee920b4a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x7689, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_poster.jpg", cAlternateFileName="SCAN_P~1.JPG")) returned 1 [0156.531] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x149e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_poster2x.jpg", cAlternateFileName="SCAN_P~2.JPG")) returned 1 [0156.531] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x149e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_poster2x.jpg", cAlternateFileName="SCAN_P~2.JPG")) returned 0 [0156.531] FindClose (in: hFindFile=0x993880 | out: hFindFile=0x993880) returned 1 [0156.532] GetProcessHeap () returned 0x8a0000 [0156.532] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.532] FindNextFileW (in: hFindFile=0x9936c0, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee920b4a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee920b4a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee920b4a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0 [0156.532] FindClose (in: hFindFile=0x9936c0 | out: hFindFile=0x9936c0) returned 1 [0156.532] GetProcessHeap () returned 0x8a0000 [0156.532] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0156.532] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee920b4a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee920b4a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee920b4a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 0 [0156.532] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0156.532] GetProcessHeap () returned 0x8a0000 [0156.532] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0156.533] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0156.533] GetProcessHeap () returned 0x8a0000 [0156.533] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x36d80c0 [0156.534] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\*", lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993880 [0156.535] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.535] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0156.535] GetProcessHeap () returned 0x8a0000 [0156.535] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3af50b0 [0156.536] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\*", lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993980 [0156.537] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.537] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-ae", cAlternateFileName="")) returned 1 [0156.537] GetProcessHeap () returned 0x8a0000 [0156.537] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.538] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\ar-ae\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993640 [0156.538] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.538] FindNextFileW (in: hFindFile=0x993640, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0156.538] FindClose (in: hFindFile=0x993640 | out: hFindFile=0x993640) returned 1 [0156.539] GetProcessHeap () returned 0x8a0000 [0156.539] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.539] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1 [0156.539] GetProcessHeap () returned 0x8a0000 [0156.539] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3b050b8 [0156.539] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\ca-es\\*", lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x993a00 [0156.773] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.773] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x119b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0156.773] FindNextFileW (in: hFindFile=0x993a00, lpFindFileData=0x2fdd448 | out: lpFindFileData=0x2fdd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x119b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0156.773] FindClose (in: hFindFile=0x993a00 | out: hFindFile=0x993a00) returned 1 [0156.773] GetProcessHeap () returned 0x8a0000 [0156.773] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3b050b8 | out: hHeap=0x8a0000) returned 1 [0156.775] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1 [0156.775] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0156.776] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0156.776] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1 [0156.776] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0156.776] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1 [0156.776] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0156.776] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1 [0156.776] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0156.776] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0156.776] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1 [0156.776] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1 [0156.776] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1 [0156.776] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1 [0156.777] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0156.777] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0156.777] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1 [0156.777] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0156.777] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0156.777] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1 [0156.777] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0156.777] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1 [0156.777] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0156.777] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1 [0156.777] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1 [0156.778] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1 [0156.778] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1 [0156.778] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0156.778] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1 [0156.778] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0156.778] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-ua", cAlternateFileName="")) returned 1 [0156.778] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1 [0156.778] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1 [0156.778] FindNextFileW (in: hFindFile=0x993980, lpFindFileData=0x2fdd6d8 | out: lpFindFileData=0x2fdd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0 [0156.778] FindClose (in: hFindFile=0x993980 | out: hFindFile=0x993980) returned 1 [0156.778] GetProcessHeap () returned 0x8a0000 [0156.778] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3af50b0 | out: hHeap=0x8a0000) returned 1 [0156.779] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6b57, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0156.779] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6e08, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 1 [0156.779] FindNextFileW (in: hFindFile=0x993880, lpFindFileData=0x2fdd968 | out: lpFindFileData=0x2fdd968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6e08, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 0 [0156.779] FindClose (in: hFindFile=0x993880 | out: hFindFile=0x993880) returned 1 [0156.779] GetProcessHeap () returned 0x8a0000 [0156.779] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36d80c0 | out: hHeap=0x8a0000) returned 1 [0156.780] FindNextFileW (in: hFindFile=0x993840, lpFindFileData=0x2fddbf8 | out: lpFindFileData=0x2fddbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0156.780] FindClose (in: hFindFile=0x993840 | out: hFindFile=0x993840) returned 1 [0156.781] GetProcessHeap () returned 0x8a0000 [0156.781] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x36c80b8 | out: hHeap=0x8a0000) returned 1 [0156.781] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="on-boarding", cAlternateFileName="ON-BOA~1")) returned 1 [0156.781] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pages-app", cAlternateFileName="PAGES-~1")) returned 1 [0156.781] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sample-files", cAlternateFileName="SAMPLE~1")) returned 1 [0156.781] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan-files", cAlternateFileName="SCAN-F~1")) returned 1 [0156.781] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="send-for-sign", cAlternateFileName="SEND-F~1")) returned 1 [0156.781] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tracked-send", cAlternateFileName="TRACKE~1")) returned 1 [0156.781] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="walk-through", cAlternateFileName="WALK-T~1")) returned 1 [0156.781] FindNextFileW (in: hFindFile=0x993800, lpFindFileData=0x2fdde88 | out: lpFindFileData=0x2fdde88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="walk-through", cAlternateFileName="WALK-T~1")) returned 0 [0156.782] FindClose (in: hFindFile=0x993800 | out: hFindFile=0x993800) returned 1 [0156.782] GetProcessHeap () returned 0x8a0000 [0156.782] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ae4098 | out: hHeap=0x8a0000) returned 1 [0156.782] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x15fa5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="rna-main.js", cAlternateFileName="")) returned 1 [0156.783] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="versions", cAlternateFileName="")) returned 1 [0156.783] FindNextFileW (in: hFindFile=0x993940, lpFindFileData=0x2fde118 | out: lpFindFileData=0x2fde118*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="versions", cAlternateFileName="")) returned 0 [0156.783] FindClose (in: hFindFile=0x993940 | out: hFindFile=0x993940) returned 1 [0156.783] GetProcessHeap () returned 0x8a0000 [0156.783] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ad4090 | out: hHeap=0x8a0000) returned 1 [0156.783] FindNextFileW (in: hFindFile=0x993600, lpFindFileData=0x2fde3a8 | out: lpFindFileData=0x2fde3a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0156.783] FindClose (in: hFindFile=0x993600 | out: hFindFile=0x993600) returned 1 [0156.783] GetProcessHeap () returned 0x8a0000 [0156.783] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3ac0068 | out: hHeap=0x8a0000) returned 1 [0156.784] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x369ad2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x369ad2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="variant.js", cAlternateFileName="")) returned 1 [0156.784] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x369ad2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x369ad2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x55d, dwReserved0=0x0, dwReserved1=0x0, cFileName="version.js", cAlternateFileName="")) returned 1 [0156.784] FindNextFileW (in: hFindFile=0x993700, lpFindFileData=0x2fde638 | out: lpFindFileData=0x2fde638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x369ad2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x369ad2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x55d, dwReserved0=0x0, dwReserved1=0x0, cFileName="version.js", cAlternateFileName="")) returned 0 [0156.784] FindClose (in: hFindFile=0x993700 | out: hFindFile=0x993700) returned 1 [0156.784] GetProcessHeap () returned 0x8a0000 [0156.784] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3694098 | out: hHeap=0x8a0000) returned 1 [0156.785] FindNextFileW (in: hFindFile=0x9935c0, lpFindFileData=0x2fde8c8 | out: lpFindFileData=0x2fde8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xb58bb396, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resource0", cAlternateFileName="RESOUR~1")) returned 0 [0156.785] FindClose (in: hFindFile=0x9935c0 | out: hFindFile=0x9935c0) returned 1 [0156.785] GetProcessHeap () returned 0x8a0000 [0156.785] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a90058 | out: hHeap=0x8a0000) returned 1 [0156.787] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72bf0d00, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x191f2bd5, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x72bf0d00, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x12eb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome.pdf", cAlternateFileName="")) returned 1 [0156.787] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1b7cc16f, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x1c8b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="wow_helper.exe", cAlternateFileName="WOW_HE~1.EXE")) returned 1 [0156.787] FindNextFileW (in: hFindFile=0x9937c0, lpFindFileData=0x2fdeb58 | out: lpFindFileData=0x2fdeb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1b7cc16f, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x1c8b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="wow_helper.exe", cAlternateFileName="WOW_HE~1.EXE")) returned 0 [0156.787] FindClose (in: hFindFile=0x9937c0 | out: hFindFile=0x9937c0) returned 1 [0156.787] GetProcessHeap () returned 0x8a0000 [0156.787] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3a70048 | out: hHeap=0x8a0000) returned 1 [0156.787] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3632d245, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x40f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMe.htm", cAlternateFileName="")) returned 1 [0156.788] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x389535d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389535d8, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resource", cAlternateFileName="")) returned 1 [0156.788] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cd6ac1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cd6ac1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33cd6ac1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup Files", cAlternateFileName="SETUPF~1")) returned 1 [0156.788] FindNextFileW (in: hFindFile=0x993b80, lpFindFileData=0x2fdede8 | out: lpFindFileData=0x2fdede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cd6ac1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cd6ac1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33cd6ac1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup Files", cAlternateFileName="SETUPF~1")) returned 0 [0156.788] FindClose (in: hFindFile=0x993b80 | out: hFindFile=0x993b80) returned 1 [0156.788] GetProcessHeap () returned 0x8a0000 [0156.788] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x939280 | out: hHeap=0x8a0000) returned 1 [0156.790] FindNextFileW (in: hFindFile=0x9938c0, lpFindFileData=0x2fdf078 | out: lpFindFileData=0x2fdf078*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdec183d6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec183d6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat Reader DC", cAlternateFileName="ACROBA~1")) returned 0 [0156.790] FindClose (in: hFindFile=0x9938c0 | out: hFindFile=0x9938c0) returned 1 [0156.790] GetProcessHeap () returned 0x8a0000 [0156.790] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3674088 | out: hHeap=0x8a0000) returned 1 [0156.790] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4dd129b7, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x4dd129b7, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1 [0156.791] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a64f261, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5dec600, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5dec600, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0156.791] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc5e5a66, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0x19640a8, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x19640a8, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Google", cAlternateFileName="")) returned 1 [0156.791] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc12eb00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71274d1e, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0156.791] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc211eecb, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x740253b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x740253b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft Office", cAlternateFileName="MICROS~1")) returned 1 [0156.791] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x49ecb94e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x49ecb94e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft.NET", cAlternateFileName="MICROS~1.NET")) returned 1 [0156.791] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0dc4f7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x4dd389cd, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x4dd389cd, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Mozilla Maintenance Service", cAlternateFileName="MOZILL~1")) returned 1 [0156.791] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70af849b, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70af849b, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="MSBuild", cAlternateFileName="")) returned 1 [0156.791] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x4dcc6277, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x4dcc6277, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Reference Assemblies", cAlternateFileName="REFERE~1")) returned 1 [0156.791] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc41c3d7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71274d1e, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1 [0156.791] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4dd129b7, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x4dd129b7, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows Mail", cAlternateFileName="WINDOW~2")) returned 1 [0156.791] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc4b317b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows Media Player", cAlternateFileName="WI54FB~1")) returned 1 [0156.791] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc583dc8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7340c2, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows Multimedia Platform", cAlternateFileName="WINDOW~3")) returned 1 [0156.791] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc584957, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows NT", cAlternateFileName="WINDOW~4")) returned 1 [0156.792] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4ea55b3a, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x4ea55b3a, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows Photo Viewer", cAlternateFileName="WI8A19~1")) returned 1 [0156.792] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4dcc6277, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x4dcc6277, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows Portable Devices", cAlternateFileName="WIBFE5~1")) returned 1 [0156.792] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65a9e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 1 [0156.792] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65c04f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="WindowsPowerShell", cAlternateFileName="WID5B1~1")) returned 1 [0156.792] FindNextFileW (in: hFindFile=0x993ac0, lpFindFileData=0x2fdf308 | out: lpFindFileData=0x2fdf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65c04f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="WindowsPowerShell", cAlternateFileName="WID5B1~1")) returned 0 [0156.792] FindClose (in: hFindFile=0x993ac0 | out: hFindFile=0x993ac0) returned 1 [0156.792] GetProcessHeap () returned 0x8a0000 [0156.792] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3650070 | out: hHeap=0x8a0000) returned 1 [0156.793] FindNextFileW (in: hFindFile=0x8b9398, lpFindFileData=0x2fdf598 | out: lpFindFileData=0x2fdf598*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x450f4738, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x74889fc4, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 1 [0156.793] FindNextFileW (in: hFindFile=0x8b9398, lpFindFileData=0x2fdf598 | out: lpFindFileData=0x2fdf598*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28e9c3a2, ftCreationTime.dwHighDateTime=0x1d32795, ftLastAccessTime.dwLowDateTime=0x1044dfc5, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x1044dfc5, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x74889fc4, cFileName="Recovery", cAlternateFileName="")) returned 1 [0156.793] FindNextFileW (in: hFindFile=0x8b9398, lpFindFileData=0x2fdf598 | out: lpFindFileData=0x2fdf598*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6ead2556, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0x6ead2556, ftLastAccessTime.dwHighDateTime=0x1d3275c, ftLastWriteTime.dwLowDateTime=0xdb6ed807, ftLastWriteTime.dwHighDateTime=0x1d569cf, nFileSizeHigh=0x0, nFileSizeLow=0x10000000, dwReserved0=0xa0000003, dwReserved1=0x74889fc4, cFileName="swapfile.sys", cAlternateFileName="")) returned 1 [0156.793] FindNextFileW (in: hFindFile=0x8b9398, lpFindFileData=0x2fdf598 | out: lpFindFileData=0x2fdf598*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x6e16f135, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0xb1ff7ba5, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xb1ff7ba5, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x74889fc4, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1 [0156.793] FindNextFileW (in: hFindFile=0x8b9398, lpFindFileData=0x2fdf598 | out: lpFindFileData=0x2fdf598*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x74889fc4, cFileName="Users", cAlternateFileName="")) returned 1 [0156.794] FindNextFileW (in: hFindFile=0x8b9398, lpFindFileData=0x2fdf598 | out: lpFindFileData=0x2fdf598*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0xc838b81d, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0xc838b81d, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x74889fc4, cFileName="Windows", cAlternateFileName="")) returned 1 [0156.794] FindNextFileW (in: hFindFile=0x8b9398, lpFindFileData=0x2fdf598 | out: lpFindFileData=0x2fdf598*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea34fa37, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xccdc86a8, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xccdc86a8, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x74889fc4, cFileName="Windows10Upgrade", cAlternateFileName="WINDOW~1")) returned 1 [0156.794] FindNextFileW (in: hFindFile=0x8b9398, lpFindFileData=0x2fdf598 | out: lpFindFileData=0x2fdf598*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea34fa37, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xccdc86a8, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xccdc86a8, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x74889fc4, cFileName="Windows10Upgrade", cAlternateFileName="WINDOW~1")) returned 0 [0156.794] FindClose (in: hFindFile=0x8b9398 | out: hFindFile=0x8b9398) returned 1 [0156.794] GetProcessHeap () returned 0x8a0000 [0156.794] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x929278 | out: hHeap=0x8a0000) returned 1 [0156.794] SetEvent (hEvent=0x300) returned 1 [0156.794] SetEvent (hEvent=0x2fc) returned 1 [0156.794] SetEvent (hEvent=0x304) returned 1 [0156.795] WaitForSingleObject (hHandle=0x304, dwMilliseconds=0xffffffff) returned 0x0 [0156.795] SetEvent (hEvent=0x300) returned 1 [0156.795] SetEvent (hEvent=0x2fc) returned 1 [0156.795] SetEvent (hEvent=0x304) returned 1 [0156.795] WaitForMultipleObjects (nCount=0x2, lpHandles=0x2fdf830*=0x308, bWaitAll=1, dwMilliseconds=0xffffffff) returned 0x0 [0156.921] CloseHandle (hObject=0x30c) returned 1 [0156.921] CloseHandle (hObject=0x308) returned 1 [0156.921] GetProcessHeap () returned 0x8a0000 [0156.922] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x50) returned 0x8b1260 [0156.922] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x74c00000 [0156.922] GetProcAddress (hModule=0x74c00000, lpProcName="Wow64RevertWow64FsRedirection") returned 0x74c16b50 [0156.922] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0156.922] GetProcessHeap () returned 0x8a0000 [0156.922] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b1260 | out: hHeap=0x8a0000) returned 1 [0156.922] CloseHandle (hObject=0x2fc) returned 1 [0156.922] CloseHandle (hObject=0x300) returned 1 [0156.922] CloseHandle (hObject=0x304) returned 1 [0156.922] GetProcessHeap () returned 0x8a0000 [0156.922] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x919270 | out: hHeap=0x8a0000) returned 1 [0156.923] GetProcessHeap () returned 0x8a0000 [0156.923] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b8578 | out: hHeap=0x8a0000) returned 1 [0156.923] GetProcessHeap () returned 0x8a0000 [0156.923] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b9658 | out: hHeap=0x8a0000) returned 1 [0156.923] GetProcessHeap () returned 0x8a0000 [0156.923] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b0230 | out: hHeap=0x8a0000) returned 1 [0156.923] GetProcessHeap () returned 0x8a0000 [0156.923] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8c7aa8 | out: hHeap=0x8a0000) returned 1 [0156.923] GetProcessHeap () returned 0x8a0000 [0156.923] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b82d8 | out: hHeap=0x8a0000) returned 1 Thread: id = 77 os_tid = 0xeb8 [0130.214] GetProcessHeap () returned 0x8a0000 [0130.215] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x95a298 [0130.215] GetProcessHeap () returned 0x8a0000 [0130.215] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x971bb8 [0130.215] GetProcessHeap () returned 0x8a0000 [0130.215] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x28) returned 0x8e1e40 [0130.215] GetProcessHeap () returned 0x8a0000 [0130.215] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x110102) returned 0x34e7020 [0130.218] GetProcessHeap () returned 0x8a0000 [0130.218] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x50) returned 0x8afb98 [0130.218] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x74c00000 [0130.218] GetProcAddress (hModule=0x74c00000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x74c16b30 [0130.218] Wow64DisableWow64FsRedirection (in: OldValue=0x311fa90 | out: OldValue=0x311fa90*=0x0) returned 1 [0130.218] GetProcessHeap () returned 0x8a0000 [0130.218] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8afb98 | out: hHeap=0x8a0000) returned 1 [0130.219] CreateFileW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0130.219] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=129) returned 1 [0130.219] CloseHandle (hObject=0x318) returned 1 [0130.219] GetFileAttributesW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini")) returned 0x26 [0130.219] GetFileAttributesW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini")) returned 0x26 [0130.219] GetFileAttributesW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0x26 [0130.219] ResetEvent (hEvent=0x2e8) returned 1 [0130.219] SetEvent (hEvent=0x2ec) returned 1 [0130.219] CreateFileW (lpFileName="\\\\?\\C:\\$WINRE_BACKUP_PARTITION.MARKER" (normalized: "c:\\$winre_backup_partition.marker"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320 [0130.298] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=0) returned 1 [0130.298] CloseHandle (hObject=0x320) returned 1 [0130.298] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0 [0130.488] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0130.950] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=5091790) returned 1 [0130.950] CloseHandle (hObject=0x348) returned 1 [0130.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu")) returned 0x80 [0130.950] MoveFileW (lpExistingFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu"), lpNewFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 1 [0130.951] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0130.951] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f888 | out: lpNewFilePointer=0x0) returned 1 [0130.951] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f888 | out: lpNewFilePointer=0x0) returned 1 [0130.951] ReadFile (in: hFile=0x348, lpBuffer=0x34e7058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x311f894, lpOverlapped=0x0 | out: lpBuffer=0x34e7058*, lpNumberOfBytesRead=0x311f894*=0x40000, lpOverlapped=0x0) returned 1 [0130.964] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x19e5ef, lpNewFilePointer=0x0, dwMoveMethod=0x311f888 | out: lpNewFilePointer=0x0) returned 1 [0130.964] ReadFile (in: hFile=0x348, lpBuffer=0x3527058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x311f894, lpOverlapped=0x0 | out: lpBuffer=0x3527058*, lpNumberOfBytesRead=0x311f894*=0x40000, lpOverlapped=0x0) returned 1 [0130.974] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x49b1ce, lpNewFilePointer=0x0, dwMoveMethod=0x311f888 | out: lpNewFilePointer=0x0) returned 1 [0130.974] ReadFile (in: hFile=0x348, lpBuffer=0x3567058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x311f894, lpOverlapped=0x0 | out: lpBuffer=0x3567058*, lpNumberOfBytesRead=0x311f894*=0x40000, lpOverlapped=0x0) returned 1 [0131.264] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f9f8 | out: lpNewFilePointer=0x0) returned 1 [0131.264] WriteFile (in: hFile=0x348, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xc0132, lpNumberOfBytesWritten=0x311f9f0, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9f0*=0xc0132, lpOverlapped=0x0) returned 1 [0131.288] SetEndOfFile (hFile=0x348) returned 1 [0131.292] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x49b1ce, lpNewFilePointer=0x0, dwMoveMethod=0x311f890 | out: lpNewFilePointer=0x0) returned 1 [0131.292] WriteFile (in: hFile=0x348, lpBuffer=0x35a716a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x311f89c, lpOverlapped=0x0 | out: lpBuffer=0x35a716a*, lpNumberOfBytesWritten=0x311f89c*=0x40000, lpOverlapped=0x0) returned 1 [0131.294] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x19e5ef, lpNewFilePointer=0x0, dwMoveMethod=0x311f890 | out: lpNewFilePointer=0x0) returned 1 [0131.294] WriteFile (in: hFile=0x348, lpBuffer=0x35a716a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x311f89c, lpOverlapped=0x0 | out: lpBuffer=0x35a716a*, lpNumberOfBytesWritten=0x311f89c*=0x40000, lpOverlapped=0x0) returned 1 [0131.296] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f890 | out: lpNewFilePointer=0x0) returned 1 [0131.296] WriteFile (in: hFile=0x348, lpBuffer=0x35a716a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x311f89c, lpOverlapped=0x0 | out: lpBuffer=0x35a716a*, lpNumberOfBytesWritten=0x311f89c*=0x40000, lpOverlapped=0x0) returned 1 [0131.546] FlushFileBuffers (hFile=0x348) returned 1 [0131.595] CloseHandle (hObject=0x348) returned 1 [0132.511] SetEvent (hEvent=0x2e4) returned 1 [0132.512] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0132.512] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=75096) returned 1 [0132.512] CloseHandle (hObject=0x348) returned 1 [0132.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui")) returned 0x20 [0132.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui")) returned 0x20 [0132.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.512] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.512] SetEvent (hEvent=0x2e4) returned 1 [0132.513] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\memtest.exe.mui" (normalized: "c:\\boot\\tr-tr\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0132.513] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=45472) returned 1 [0132.513] CloseHandle (hObject=0x348) returned 1 [0132.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\memtest.exe.mui" (normalized: "c:\\boot\\tr-tr\\memtest.exe.mui")) returned 0x20 [0132.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\memtest.exe.mui" (normalized: "c:\\boot\\tr-tr\\memtest.exe.mui")) returned 0x20 [0132.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\memtest.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\tr-tr\\memtest.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.513] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\memtest.exe.mui" (normalized: "c:\\boot\\tr-tr\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.514] SetEvent (hEvent=0x2e4) returned 1 [0132.514] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\uk-UA\\bootmgr.exe.mui" (normalized: "c:\\boot\\uk-ua\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0132.514] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=77152) returned 1 [0132.514] CloseHandle (hObject=0x348) returned 1 [0132.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\uk-UA\\bootmgr.exe.mui" (normalized: "c:\\boot\\uk-ua\\bootmgr.exe.mui")) returned 0x20 [0132.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\uk-UA\\bootmgr.exe.mui" (normalized: "c:\\boot\\uk-ua\\bootmgr.exe.mui")) returned 0x20 [0132.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\uk-UA\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\uk-ua\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.515] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\uk-UA\\bootmgr.exe.mui" (normalized: "c:\\boot\\uk-ua\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.515] SetEvent (hEvent=0x2e4) returned 1 [0132.515] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\updaterevokesipolicy.p7b" (normalized: "c:\\boot\\updaterevokesipolicy.p7b"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0132.516] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=4662) returned 1 [0132.516] CloseHandle (hObject=0x348) returned 1 [0132.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\updaterevokesipolicy.p7b" (normalized: "c:\\boot\\updaterevokesipolicy.p7b")) returned 0x20 [0132.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\updaterevokesipolicy.p7b" (normalized: "c:\\boot\\updaterevokesipolicy.p7b")) returned 0x20 [0132.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\updaterevokesipolicy.p7b.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\updaterevokesipolicy.p7b.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.516] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\updaterevokesipolicy.p7b" (normalized: "c:\\boot\\updaterevokesipolicy.p7b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.516] SetEvent (hEvent=0x2e4) returned 1 [0132.517] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0132.517] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=63840) returned 1 [0132.517] CloseHandle (hObject=0x348) returned 1 [0132.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui")) returned 0x20 [0132.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui")) returned 0x20 [0132.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.517] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.517] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\memtest.exe.mui" (normalized: "c:\\boot\\zh-cn\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0132.518] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=42400) returned 1 [0132.518] CloseHandle (hObject=0x348) returned 1 [0132.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\memtest.exe.mui" (normalized: "c:\\boot\\zh-cn\\memtest.exe.mui")) returned 0x20 [0132.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\memtest.exe.mui" (normalized: "c:\\boot\\zh-cn\\memtest.exe.mui")) returned 0x20 [0132.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\memtest.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\zh-cn\\memtest.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.518] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\memtest.exe.mui" (normalized: "c:\\boot\\zh-cn\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.518] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0132.518] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=63832) returned 1 [0132.518] CloseHandle (hObject=0x348) returned 1 [0132.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui")) returned 0x20 [0132.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui")) returned 0x20 [0132.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.519] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.519] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\memtest.exe.mui" (normalized: "c:\\boot\\zh-hk\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0132.519] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=42328) returned 1 [0132.519] CloseHandle (hObject=0x348) returned 1 [0132.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\memtest.exe.mui" (normalized: "c:\\boot\\zh-hk\\memtest.exe.mui")) returned 0x20 [0132.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\memtest.exe.mui" (normalized: "c:\\boot\\zh-hk\\memtest.exe.mui")) returned 0x20 [0132.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\memtest.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\zh-hk\\memtest.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.519] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\memtest.exe.mui" (normalized: "c:\\boot\\zh-hk\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.520] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0132.520] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=63840) returned 1 [0132.520] CloseHandle (hObject=0x348) returned 1 [0132.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui")) returned 0x20 [0132.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui")) returned 0x20 [0132.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.520] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.520] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\memtest.exe.mui" (normalized: "c:\\boot\\zh-tw\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0132.521] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=42392) returned 1 [0132.521] CloseHandle (hObject=0x348) returned 1 [0132.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\memtest.exe.mui" (normalized: "c:\\boot\\zh-tw\\memtest.exe.mui")) returned 0x20 [0132.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\memtest.exe.mui" (normalized: "c:\\boot\\zh-tw\\memtest.exe.mui")) returned 0x20 [0132.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\memtest.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\zh-tw\\memtest.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.521] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\memtest.exe.mui" (normalized: "c:\\boot\\zh-tw\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.521] CreateFileW (lpFileName="\\\\?\\C:\\bootmgr" (normalized: "c:\\bootmgr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0132.524] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=395226) returned 1 [0132.524] CloseHandle (hObject=0x348) returned 1 [0132.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\bootmgr" (normalized: "c:\\bootmgr")) returned 0x27 [0132.524] SetFileAttributesW (lpFileName="\\\\?\\C:\\bootmgr", dwFileAttributes=0x26) returned 0 [0132.525] GetFileAttributesW (lpFileName="\\\\?\\C:\\bootmgr" (normalized: "c:\\bootmgr")) returned 0x27 [0132.526] GetFileAttributesW (lpFileName="\\\\?\\C:\\bootmgr.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\bootmgr.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.526] CreateFileW (lpFileName="\\\\?\\C:\\bootmgr" (normalized: "c:\\bootmgr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.526] SetFileAttributesW (lpFileName="\\\\?\\C:\\bootmgr", dwFileAttributes=0x27) returned 0 [0132.526] SetEvent (hEvent=0x2e4) returned 1 [0132.526] CreateFileW (lpFileName="\\\\?\\C:\\BOOTNXT" (normalized: "c:\\bootnxt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0132.528] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=1) returned 1 [0132.528] CloseHandle (hObject=0x348) returned 1 [0132.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\BOOTNXT" (normalized: "c:\\bootnxt")) returned 0x26 [0132.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\BOOTNXT" (normalized: "c:\\bootnxt")) returned 0x26 [0132.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\BOOTNXT.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\bootnxt.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.528] CreateFileW (lpFileName="\\\\?\\C:\\BOOTNXT" (normalized: "c:\\bootnxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0132.528] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0132.528] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0132.529] CreateFileW (lpFileName="\\\\?\\C:\\BOOTNXT.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\bootnxt.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x26, hTemplateFile=0x0) returned 0x334 [0132.529] ReadFile (in: hFile=0x348, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x1, lpOverlapped=0x0) returned 1 [0132.531] WriteFile (in: hFile=0x334, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x10, lpOverlapped=0x0) returned 1 [0132.531] WriteFile (in: hFile=0x334, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xe2, lpOverlapped=0x0) returned 1 [0132.532] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0132.532] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0132.532] WriteFile (in: hFile=0x348, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x1, lpOverlapped=0x0) returned 1 [0132.536] FlushFileBuffers (hFile=0x348) returned 1 [0132.539] FlushFileBuffers (hFile=0x334) returned 1 [0132.541] CloseHandle (hObject=0x348) returned 1 [0132.541] CloseHandle (hObject=0x334) returned 1 [0132.542] DeleteFileW (lpFileName="\\\\?\\C:\\BOOTNXT" (normalized: "c:\\bootnxt")) returned 1 [0132.543] SetEvent (hEvent=0x2e4) returned 1 [0132.543] CreateFileW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334 [0132.544] GetFileSizeEx (in: hFile=0x334, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=8192) returned 1 [0132.544] CloseHandle (hObject=0x334) returned 1 [0132.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak")) returned 0x27 [0132.544] SetFileAttributesW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK", dwFileAttributes=0x26) returned 1 [0132.558] GetFileAttributesW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak")) returned 0x10026 [0132.558] GetFileAttributesW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\bootsect.bak.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.558] CreateFileW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334 [0132.558] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0132.558] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0132.558] CreateFileW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\bootsect.bak.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x10026, hTemplateFile=0x0) returned 0x348 [0132.563] ReadFile (in: hFile=0x334, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x2000, lpOverlapped=0x0) returned 1 [0132.563] WriteFile (in: hFile=0x348, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x2010, lpOverlapped=0x0) returned 1 [0132.564] WriteFile (in: hFile=0x348, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0132.564] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0132.564] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0132.564] WriteFile (in: hFile=0x334, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x2000, lpOverlapped=0x0) returned 1 [0132.565] FlushFileBuffers (hFile=0x334) returned 1 [0132.569] FlushFileBuffers (hFile=0x348) returned 1 [0132.570] CloseHandle (hObject=0x334) returned 1 [0132.571] CloseHandle (hObject=0x348) returned 1 [0132.572] DeleteFileW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak")) returned 1 [0132.573] SetFileAttributesW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK.id[B4197730-2299].[britt.looper@aol.com].phoenix", dwFileAttributes=0x27) returned 1 [0132.573] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0132.576] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=69632) returned 1 [0132.576] CloseHandle (hObject=0x348) returned 1 [0132.576] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx")) returned 0x20 [0132.576] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx")) returned 0x20 [0132.576] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Application.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\application.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.577] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0132.577] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0132.577] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0132.577] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Application.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\application.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x334 [0132.577] ReadFile (in: hFile=0x348, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x11000, lpOverlapped=0x0) returned 1 [0132.580] WriteFile (in: hFile=0x334, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x11010, lpOverlapped=0x0) returned 1 [0132.582] WriteFile (in: hFile=0x334, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x102, lpOverlapped=0x0) returned 1 [0132.582] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0132.582] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0132.583] WriteFile (in: hFile=0x348, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x11000, lpOverlapped=0x0) returned 1 [0132.583] FlushFileBuffers (hFile=0x348) returned 1 [0132.813] FlushFileBuffers (hFile=0x334) returned 1 [0132.814] CloseHandle (hObject=0x348) returned 1 [0132.818] CloseHandle (hObject=0x334) returned 1 [0133.139] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx")) returned 1 [0133.140] SetEvent (hEvent=0x2e4) returned 1 [0133.155] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334 [0133.163] GetFileSizeEx (in: hFile=0x334, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=69632) returned 1 [0133.163] CloseHandle (hObject=0x334) returned 1 [0133.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx")) returned 0x20 [0133.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx")) returned 0x20 [0133.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Key Management Service.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\key management service.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0133.163] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334 [0133.163] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0133.163] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0133.163] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Key Management Service.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\key management service.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x348 [0133.166] ReadFile (in: hFile=0x334, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x11000, lpOverlapped=0x0) returned 1 [0133.230] WriteFile (in: hFile=0x348, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x11010, lpOverlapped=0x0) returned 1 [0133.232] WriteFile (in: hFile=0x348, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x112, lpOverlapped=0x0) returned 1 [0133.232] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0133.233] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0133.233] WriteFile (in: hFile=0x334, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x11000, lpOverlapped=0x0) returned 1 [0133.233] FlushFileBuffers (hFile=0x334) returned 1 [0133.236] FlushFileBuffers (hFile=0x348) returned 1 [0133.237] CloseHandle (hObject=0x334) returned 1 [0133.239] CloseHandle (hObject=0x348) returned 1 [0133.242] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx")) returned 1 [0133.243] SetEvent (hEvent=0x2e4) returned 1 [0133.243] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0133.243] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=69632) returned 1 [0133.243] CloseHandle (hObject=0x348) returned 1 [0133.244] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx")) returned 0x20 [0133.244] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx")) returned 0x20 [0133.244] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0133.244] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0133.244] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0133.244] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0133.244] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x334 [0133.245] ReadFile (in: hFile=0x348, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x11000, lpOverlapped=0x0) returned 1 [0133.248] WriteFile (in: hFile=0x334, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x11010, lpOverlapped=0x0) returned 1 [0133.250] WriteFile (in: hFile=0x334, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x132, lpOverlapped=0x0) returned 1 [0133.251] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0133.251] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0133.251] WriteFile (in: hFile=0x348, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x11000, lpOverlapped=0x0) returned 1 [0133.251] FlushFileBuffers (hFile=0x348) returned 1 [0133.509] FlushFileBuffers (hFile=0x334) returned 1 [0133.511] CloseHandle (hObject=0x348) returned 1 [0133.512] CloseHandle (hObject=0x334) returned 1 [0133.514] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx")) returned 1 [0133.516] SetEvent (hEvent=0x2e4) returned 1 [0133.516] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334 [0133.517] GetFileSizeEx (in: hFile=0x334, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=69632) returned 1 [0133.517] CloseHandle (hObject=0x334) returned 1 [0133.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx")) returned 0x20 [0133.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx")) returned 0x20 [0133.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0133.517] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334 [0133.517] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0133.517] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0133.517] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x348 [0133.518] ReadFile (in: hFile=0x334, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x11000, lpOverlapped=0x0) returned 1 [0133.521] WriteFile (in: hFile=0x348, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x11010, lpOverlapped=0x0) returned 1 [0133.524] WriteFile (in: hFile=0x348, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x142, lpOverlapped=0x0) returned 1 [0133.524] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0133.524] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0133.524] WriteFile (in: hFile=0x334, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x11000, lpOverlapped=0x0) returned 1 [0133.524] FlushFileBuffers (hFile=0x334) returned 1 [0133.581] FlushFileBuffers (hFile=0x348) returned 1 [0133.583] CloseHandle (hObject=0x334) returned 1 [0133.585] CloseHandle (hObject=0x348) returned 1 [0133.587] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx")) returned 1 [0133.588] SetEvent (hEvent=0x2e4) returned 1 [0133.589] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0133.589] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=69632) returned 1 [0133.589] CloseHandle (hObject=0x348) returned 1 [0133.589] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx")) returned 0x20 [0133.589] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx")) returned 0x20 [0133.589] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0133.589] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0133.589] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0133.590] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0133.590] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x334 [0133.591] ReadFile (in: hFile=0x348, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x11000, lpOverlapped=0x0) returned 1 [0133.594] WriteFile (in: hFile=0x334, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x11010, lpOverlapped=0x0) returned 1 [0133.597] WriteFile (in: hFile=0x334, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x152, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x152, lpOverlapped=0x0) returned 1 [0133.597] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0133.597] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0133.597] WriteFile (in: hFile=0x348, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x11000, lpOverlapped=0x0) returned 1 [0133.597] FlushFileBuffers (hFile=0x348) returned 1 [0133.601] FlushFileBuffers (hFile=0x334) returned 1 [0133.602] CloseHandle (hObject=0x348) returned 1 [0133.604] CloseHandle (hObject=0x334) returned 1 [0133.606] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx")) returned 1 [0133.607] SetEvent (hEvent=0x2e4) returned 1 [0133.608] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334 [0133.608] GetFileSizeEx (in: hFile=0x334, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=69632) returned 1 [0133.608] CloseHandle (hObject=0x334) returned 1 [0133.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx")) returned 0x20 [0133.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx")) returned 0x20 [0133.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0133.608] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334 [0133.608] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0133.608] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0133.608] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x348 [0133.610] ReadFile (in: hFile=0x334, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x11000, lpOverlapped=0x0) returned 1 [0133.614] WriteFile (in: hFile=0x348, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x11010, lpOverlapped=0x0) returned 1 [0133.622] WriteFile (in: hFile=0x348, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x152, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x152, lpOverlapped=0x0) returned 1 [0133.622] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0133.622] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0133.622] WriteFile (in: hFile=0x334, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x11000, lpOverlapped=0x0) returned 1 [0133.623] FlushFileBuffers (hFile=0x334) returned 1 [0133.626] FlushFileBuffers (hFile=0x348) returned 1 [0133.629] CloseHandle (hObject=0x334) returned 1 [0133.631] CloseHandle (hObject=0x348) returned 1 [0133.634] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx")) returned 1 [0133.635] SetEvent (hEvent=0x2e4) returned 1 [0133.635] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0133.636] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=69632) returned 1 [0133.636] CloseHandle (hObject=0x348) returned 1 [0133.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx")) returned 0x20 [0133.638] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx")) returned 0x20 [0133.638] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0133.638] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0133.638] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0133.638] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0133.638] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x334 [0133.638] ReadFile (in: hFile=0x348, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x11000, lpOverlapped=0x0) returned 1 [0133.642] WriteFile (in: hFile=0x334, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x11010, lpOverlapped=0x0) returned 1 [0133.645] WriteFile (in: hFile=0x334, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x132, lpOverlapped=0x0) returned 1 [0133.645] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0133.645] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0133.645] WriteFile (in: hFile=0x348, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x11000, lpOverlapped=0x0) returned 1 [0133.645] FlushFileBuffers (hFile=0x348) returned 1 [0133.649] FlushFileBuffers (hFile=0x334) returned 1 [0133.652] CloseHandle (hObject=0x348) returned 1 [0133.654] CloseHandle (hObject=0x334) returned 1 [0133.656] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx")) returned 1 [0133.658] SetEvent (hEvent=0x2e4) returned 1 [0133.658] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334 [0133.658] GetFileSizeEx (in: hFile=0x334, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=69632) returned 1 [0133.658] CloseHandle (hObject=0x334) returned 1 [0133.658] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx")) returned 0x20 [0133.658] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx")) returned 0x20 [0133.659] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0133.659] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334 [0133.659] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0133.659] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0133.659] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x348 [0133.659] ReadFile (in: hFile=0x334, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x11000, lpOverlapped=0x0) returned 1 [0133.667] WriteFile (in: hFile=0x348, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x11010, lpOverlapped=0x0) returned 1 [0133.669] WriteFile (in: hFile=0x348, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x132, lpOverlapped=0x0) returned 1 [0133.669] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0133.669] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0133.669] WriteFile (in: hFile=0x334, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x11000, lpOverlapped=0x0) returned 1 [0133.670] FlushFileBuffers (hFile=0x334) returned 1 [0133.674] FlushFileBuffers (hFile=0x348) returned 1 [0133.677] CloseHandle (hObject=0x334) returned 1 [0133.678] CloseHandle (hObject=0x348) returned 1 [0133.681] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx")) returned 1 [0133.683] SetEvent (hEvent=0x2e4) returned 1 [0133.683] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0133.686] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=1118208) returned 1 [0133.686] CloseHandle (hObject=0x348) returned 1 [0133.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx")) returned 0x20 [0133.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx")) returned 0x20 [0133.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0133.686] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0133.686] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0133.686] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0133.686] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x334 [0133.687] ReadFile (in: hFile=0x348, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x110100, lpOverlapped=0x0) returned 1 [0134.000] WriteFile (in: hFile=0x334, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x110100, lpOverlapped=0x0) returned 1 [0134.026] ReadFile (in: hFile=0x348, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0xf00, lpOverlapped=0x0) returned 1 [0134.026] WriteFile (in: hFile=0x334, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf10, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf10, lpOverlapped=0x0) returned 1 [0134.026] WriteFile (in: hFile=0x334, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x142, lpOverlapped=0x0) returned 1 [0134.026] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0134.026] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0134.026] WriteFile (in: hFile=0x348, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x110102, lpOverlapped=0x0) returned 1 [0134.032] WriteFile (in: hFile=0x348, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xefe, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0xefe, lpOverlapped=0x0) returned 1 [0134.032] FlushFileBuffers (hFile=0x348) returned 1 [0134.207] FlushFileBuffers (hFile=0x334) returned 1 [0134.210] CloseHandle (hObject=0x348) returned 1 [0134.231] CloseHandle (hObject=0x334) returned 1 [0134.378] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx")) returned 1 [0134.390] SetEvent (hEvent=0x2e4) returned 1 [0134.390] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334 [0134.391] GetFileSizeEx (in: hFile=0x334, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=2166784) returned 1 [0134.391] CloseHandle (hObject=0x334) returned 1 [0134.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx")) returned 0x20 [0134.391] MoveFileW (lpExistingFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx"), lpNewFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 1 [0134.392] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334 [0134.392] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f888 | out: lpNewFilePointer=0x0) returned 1 [0134.392] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f888 | out: lpNewFilePointer=0x0) returned 1 [0134.392] ReadFile (in: hFile=0x334, lpBuffer=0x34e7058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x311f894, lpOverlapped=0x0 | out: lpBuffer=0x34e7058*, lpNumberOfBytesRead=0x311f894*=0x40000, lpOverlapped=0x0) returned 1 [0134.404] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0xb0555, lpNewFilePointer=0x0, dwMoveMethod=0x311f888 | out: lpNewFilePointer=0x0) returned 1 [0134.404] ReadFile (in: hFile=0x334, lpBuffer=0x3527058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x311f894, lpOverlapped=0x0 | out: lpBuffer=0x3527058*, lpNumberOfBytesRead=0x311f894*=0x40000, lpOverlapped=0x0) returned 1 [0134.411] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x1d1000, lpNewFilePointer=0x0, dwMoveMethod=0x311f888 | out: lpNewFilePointer=0x0) returned 1 [0134.411] ReadFile (in: hFile=0x334, lpBuffer=0x3567058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x311f894, lpOverlapped=0x0 | out: lpBuffer=0x3567058*, lpNumberOfBytesRead=0x311f894*=0x40000, lpOverlapped=0x0) returned 1 [0134.683] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f9f8 | out: lpNewFilePointer=0x0) returned 1 [0134.683] WriteFile (in: hFile=0x334, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xc0162, lpNumberOfBytesWritten=0x311f9f0, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9f0*=0xc0162, lpOverlapped=0x0) returned 1 [0134.884] SetEndOfFile (hFile=0x334) returned 1 [0135.000] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x1d1000, lpNewFilePointer=0x0, dwMoveMethod=0x311f890 | out: lpNewFilePointer=0x0) returned 1 [0135.001] WriteFile (in: hFile=0x334, lpBuffer=0x35a719a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x311f89c, lpOverlapped=0x0 | out: lpBuffer=0x35a719a*, lpNumberOfBytesWritten=0x311f89c*=0x40000, lpOverlapped=0x0) returned 1 [0135.019] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0xb0555, lpNewFilePointer=0x0, dwMoveMethod=0x311f890 | out: lpNewFilePointer=0x0) returned 1 [0135.019] WriteFile (in: hFile=0x334, lpBuffer=0x35a719a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x311f89c, lpOverlapped=0x0 | out: lpBuffer=0x35a719a*, lpNumberOfBytesWritten=0x311f89c*=0x40000, lpOverlapped=0x0) returned 1 [0135.021] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f890 | out: lpNewFilePointer=0x0) returned 1 [0135.021] WriteFile (in: hFile=0x334, lpBuffer=0x35a719a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x311f89c, lpOverlapped=0x0 | out: lpBuffer=0x35a719a*, lpNumberOfBytesWritten=0x311f89c*=0x40000, lpOverlapped=0x0) returned 1 [0135.024] FlushFileBuffers (hFile=0x334) returned 1 [0135.031] CloseHandle (hObject=0x334) returned 1 [0135.031] SetEvent (hEvent=0x2e4) returned 1 [0135.031] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334 [0135.032] GetFileSizeEx (in: hFile=0x334, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=69632) returned 1 [0135.032] CloseHandle (hObject=0x334) returned 1 [0135.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx")) returned 0x20 [0135.033] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx")) returned 0x20 [0135.033] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0135.033] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334 [0135.033] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0135.034] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0135.034] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0135.035] ReadFile (in: hFile=0x334, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x11000, lpOverlapped=0x0) returned 1 [0135.038] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x11010, lpOverlapped=0x0) returned 1 [0135.044] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x142, lpOverlapped=0x0) returned 1 [0135.044] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0135.044] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0135.044] WriteFile (in: hFile=0x334, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x11000, lpOverlapped=0x0) returned 1 [0135.045] FlushFileBuffers (hFile=0x334) returned 1 [0135.049] FlushFileBuffers (hFile=0x37c) returned 1 [0135.051] CloseHandle (hObject=0x334) returned 1 [0135.051] CloseHandle (hObject=0x37c) returned 1 [0135.051] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx")) returned 1 [0135.053] SetEvent (hEvent=0x2e4) returned 1 [0135.053] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0135.054] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=1052672) returned 1 [0135.054] CloseHandle (hObject=0x37c) returned 1 [0135.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx")) returned 0x20 [0135.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx")) returned 0x20 [0135.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0135.054] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0135.054] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0135.054] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0135.054] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x334 [0135.055] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x101000, lpOverlapped=0x0) returned 1 [0135.086] WriteFile (in: hFile=0x334, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x101010, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x101010, lpOverlapped=0x0) returned 1 [0135.230] WriteFile (in: hFile=0x334, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x172, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x172, lpOverlapped=0x0) returned 1 [0135.230] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0135.230] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0135.230] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x101000, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x101000, lpOverlapped=0x0) returned 1 [0135.237] FlushFileBuffers (hFile=0x37c) returned 1 [0135.250] FlushFileBuffers (hFile=0x334) returned 1 [0135.257] CloseHandle (hObject=0x37c) returned 1 [0135.257] CloseHandle (hObject=0x334) returned 1 [0135.257] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx")) returned 1 [0135.268] SetEvent (hEvent=0x2e4) returned 1 [0135.268] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334 [0135.269] GetFileSizeEx (in: hFile=0x334, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=69632) returned 1 [0135.269] CloseHandle (hObject=0x334) returned 1 [0135.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx")) returned 0x20 [0135.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx")) returned 0x20 [0135.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0135.269] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334 [0135.269] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0135.269] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0135.269] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0135.271] ReadFile (in: hFile=0x334, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x11000, lpOverlapped=0x0) returned 1 [0135.277] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x11010, lpOverlapped=0x0) returned 1 [0135.279] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x142, lpOverlapped=0x0) returned 1 [0135.279] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0135.279] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0135.279] WriteFile (in: hFile=0x334, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x11000, lpOverlapped=0x0) returned 1 [0135.280] FlushFileBuffers (hFile=0x334) returned 1 [0135.286] FlushFileBuffers (hFile=0x37c) returned 1 [0135.290] CloseHandle (hObject=0x334) returned 1 [0135.290] CloseHandle (hObject=0x37c) returned 1 [0135.290] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx")) returned 1 [0135.292] SetEvent (hEvent=0x2e4) returned 1 [0135.292] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0135.293] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=69632) returned 1 [0135.293] CloseHandle (hObject=0x37c) returned 1 [0135.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx")) returned 0x20 [0135.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx")) returned 0x20 [0135.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0135.294] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0135.294] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0135.294] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0135.294] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x378 [0135.296] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x11000, lpOverlapped=0x0) returned 1 [0135.301] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x11010, lpOverlapped=0x0) returned 1 [0135.304] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x142, lpOverlapped=0x0) returned 1 [0135.304] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0135.304] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0135.304] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x11000, lpOverlapped=0x0) returned 1 [0135.304] FlushFileBuffers (hFile=0x37c) returned 1 [0135.312] FlushFileBuffers (hFile=0x378) returned 1 [0135.318] CloseHandle (hObject=0x37c) returned 1 [0135.318] CloseHandle (hObject=0x378) returned 1 [0135.318] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx")) returned 1 [0135.320] SetEvent (hEvent=0x2e4) returned 1 [0135.320] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0135.320] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=69632) returned 1 [0135.320] CloseHandle (hObject=0x378) returned 1 [0135.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx")) returned 0x20 [0135.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx")) returned 0x20 [0135.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0135.320] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0135.321] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0135.321] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0135.321] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0135.321] ReadFile (in: hFile=0x378, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x11000, lpOverlapped=0x0) returned 1 [0135.326] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x11010, lpOverlapped=0x0) returned 1 [0135.328] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x132, lpOverlapped=0x0) returned 1 [0135.328] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0135.328] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0135.328] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x11000, lpOverlapped=0x0) returned 1 [0135.329] FlushFileBuffers (hFile=0x378) returned 1 [0135.334] FlushFileBuffers (hFile=0x37c) returned 1 [0135.340] CloseHandle (hObject=0x378) returned 1 [0135.340] CloseHandle (hObject=0x37c) returned 1 [0135.340] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx")) returned 1 [0135.342] SetEvent (hEvent=0x2e4) returned 1 [0135.342] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0135.342] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=69632) returned 1 [0135.342] CloseHandle (hObject=0x37c) returned 1 [0135.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx")) returned 0x20 [0135.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx")) returned 0x20 [0135.343] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0135.343] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0135.343] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0135.343] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0135.343] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x378 [0135.343] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x11000, lpOverlapped=0x0) returned 1 [0135.347] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x11010, lpOverlapped=0x0) returned 1 [0135.349] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x132, lpOverlapped=0x0) returned 1 [0135.349] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0135.349] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0135.349] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x11000, lpOverlapped=0x0) returned 1 [0135.350] FlushFileBuffers (hFile=0x37c) returned 1 [0135.353] FlushFileBuffers (hFile=0x378) returned 1 [0135.354] CloseHandle (hObject=0x37c) returned 1 [0135.355] CloseHandle (hObject=0x378) returned 1 [0135.355] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx")) returned 1 [0135.357] SetEvent (hEvent=0x2e4) returned 1 [0135.357] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0135.358] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=69632) returned 1 [0135.358] CloseHandle (hObject=0x378) returned 1 [0135.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx")) returned 0x20 [0135.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx")) returned 0x20 [0135.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0135.358] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0135.358] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0135.358] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0135.358] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0135.359] ReadFile (in: hFile=0x378, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x11000, lpOverlapped=0x0) returned 1 [0135.362] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x11010, lpOverlapped=0x0) returned 1 [0135.365] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x142, lpOverlapped=0x0) returned 1 [0135.365] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0135.365] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0135.365] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x11000, lpOverlapped=0x0) returned 1 [0135.366] FlushFileBuffers (hFile=0x378) returned 1 [0135.369] FlushFileBuffers (hFile=0x37c) returned 1 [0135.371] CloseHandle (hObject=0x378) returned 1 [0135.371] CloseHandle (hObject=0x37c) returned 1 [0135.371] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx")) returned 1 [0135.373] SetEvent (hEvent=0x2e4) returned 1 [0135.373] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0135.374] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=69632) returned 1 [0135.374] CloseHandle (hObject=0x37c) returned 1 [0135.374] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx")) returned 0x20 [0135.374] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx")) returned 0x20 [0135.374] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0135.374] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0135.374] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0135.374] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0135.374] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x378 [0135.376] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x11000, lpOverlapped=0x0) returned 1 [0135.380] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x11010, lpOverlapped=0x0) returned 1 [0135.381] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x152, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x152, lpOverlapped=0x0) returned 1 [0135.382] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0135.382] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0135.382] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x11000, lpOverlapped=0x0) returned 1 [0135.382] FlushFileBuffers (hFile=0x37c) returned 1 [0135.386] FlushFileBuffers (hFile=0x378) returned 1 [0135.388] CloseHandle (hObject=0x37c) returned 1 [0135.388] CloseHandle (hObject=0x378) returned 1 [0135.388] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx")) returned 1 [0135.390] SetEvent (hEvent=0x2e4) returned 1 [0135.390] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0135.390] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=69632) returned 1 [0135.390] CloseHandle (hObject=0x378) returned 1 [0135.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx")) returned 0x20 [0135.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx")) returned 0x20 [0135.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0135.391] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0135.391] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0135.391] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0135.391] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0135.391] ReadFile (in: hFile=0x378, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x11000, lpOverlapped=0x0) returned 1 [0135.395] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x11010, lpOverlapped=0x0) returned 1 [0135.398] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x132, lpOverlapped=0x0) returned 1 [0135.398] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0135.398] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0135.398] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x11000, lpOverlapped=0x0) returned 1 [0135.398] FlushFileBuffers (hFile=0x378) returned 1 [0135.712] FlushFileBuffers (hFile=0x37c) returned 1 [0135.713] CloseHandle (hObject=0x378) returned 1 [0135.714] CloseHandle (hObject=0x37c) returned 1 [0135.714] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx")) returned 1 [0135.717] SetEvent (hEvent=0x2e4) returned 1 [0135.717] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0135.717] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=1052672) returned 1 [0135.717] CloseHandle (hObject=0x37c) returned 1 [0135.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx")) returned 0x20 [0135.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx")) returned 0x20 [0135.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0135.718] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0135.718] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0135.718] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0135.718] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x378 [0135.719] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x101000, lpOverlapped=0x0) returned 1 [0135.963] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x101010, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x101010, lpOverlapped=0x0) returned 1 [0136.001] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x142, lpOverlapped=0x0) returned 1 [0136.001] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0136.002] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0136.002] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x101000, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x101000, lpOverlapped=0x0) returned 1 [0136.008] FlushFileBuffers (hFile=0x37c) returned 1 [0136.014] FlushFileBuffers (hFile=0x378) returned 1 [0136.017] CloseHandle (hObject=0x37c) returned 1 [0136.018] CloseHandle (hObject=0x378) returned 1 [0136.018] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx")) returned 1 [0136.030] SetEvent (hEvent=0x2e4) returned 1 [0136.030] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0136.034] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=69632) returned 1 [0136.034] CloseHandle (hObject=0x378) returned 1 [0136.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx")) returned 0x20 [0136.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx")) returned 0x20 [0136.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0136.034] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0136.034] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0136.034] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0136.034] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0136.035] ReadFile (in: hFile=0x378, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x11000, lpOverlapped=0x0) returned 1 [0136.039] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x11010, lpOverlapped=0x0) returned 1 [0136.040] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x132, lpOverlapped=0x0) returned 1 [0136.041] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0136.041] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0136.041] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x11000, lpOverlapped=0x0) returned 1 [0136.041] FlushFileBuffers (hFile=0x378) returned 1 [0136.045] FlushFileBuffers (hFile=0x37c) returned 1 [0136.047] CloseHandle (hObject=0x378) returned 1 [0136.047] CloseHandle (hObject=0x37c) returned 1 [0136.048] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx")) returned 1 [0136.049] SetEvent (hEvent=0x2e4) returned 1 [0136.049] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0136.050] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=69632) returned 1 [0136.050] CloseHandle (hObject=0x37c) returned 1 [0136.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx")) returned 0x20 [0136.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx")) returned 0x20 [0136.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0136.050] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0136.050] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0136.050] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0136.050] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x378 [0136.050] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x11000, lpOverlapped=0x0) returned 1 [0136.054] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x11010, lpOverlapped=0x0) returned 1 [0136.057] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x142, lpOverlapped=0x0) returned 1 [0136.057] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0136.057] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0136.057] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x11000, lpOverlapped=0x0) returned 1 [0136.058] FlushFileBuffers (hFile=0x37c) returned 1 [0136.202] FlushFileBuffers (hFile=0x378) returned 1 [0136.204] CloseHandle (hObject=0x37c) returned 1 [0136.205] CloseHandle (hObject=0x378) returned 1 [0136.205] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx")) returned 1 [0136.207] SetEvent (hEvent=0x2e4) returned 1 [0136.207] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0136.208] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=69632) returned 1 [0136.208] CloseHandle (hObject=0x378) returned 1 [0136.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx")) returned 0x20 [0136.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx")) returned 0x20 [0136.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0136.208] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0136.208] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0136.208] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0136.208] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0136.209] ReadFile (in: hFile=0x378, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x11000, lpOverlapped=0x0) returned 1 [0136.213] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x11010, lpOverlapped=0x0) returned 1 [0136.216] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x132, lpOverlapped=0x0) returned 1 [0136.216] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0136.216] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0136.216] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x11000, lpOverlapped=0x0) returned 1 [0136.216] FlushFileBuffers (hFile=0x378) returned 1 [0136.221] FlushFileBuffers (hFile=0x37c) returned 1 [0136.222] CloseHandle (hObject=0x378) returned 1 [0136.222] CloseHandle (hObject=0x37c) returned 1 [0136.222] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx")) returned 1 [0136.224] SetEvent (hEvent=0x2e4) returned 1 [0136.224] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0136.225] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=69632) returned 1 [0136.225] CloseHandle (hObject=0x37c) returned 1 [0136.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx")) returned 0x20 [0136.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx")) returned 0x20 [0136.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0136.225] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0136.225] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0136.225] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0136.226] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x378 [0136.227] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x11000, lpOverlapped=0x0) returned 1 [0136.230] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x11010, lpOverlapped=0x0) returned 1 [0136.233] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x122, lpOverlapped=0x0) returned 1 [0136.233] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0136.233] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0136.233] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x11000, lpOverlapped=0x0) returned 1 [0136.233] FlushFileBuffers (hFile=0x37c) returned 1 [0136.236] FlushFileBuffers (hFile=0x378) returned 1 [0136.238] CloseHandle (hObject=0x37c) returned 1 [0136.238] CloseHandle (hObject=0x378) returned 1 [0136.238] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx")) returned 1 [0136.240] SetEvent (hEvent=0x2e4) returned 1 [0136.240] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0136.240] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=69632) returned 1 [0136.240] CloseHandle (hObject=0x378) returned 1 [0136.240] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx")) returned 0x20 [0136.240] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx")) returned 0x20 [0136.240] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0136.241] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0136.241] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0136.241] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0136.241] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0136.241] ReadFile (in: hFile=0x378, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x11000, lpOverlapped=0x0) returned 1 [0136.244] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x11010, lpOverlapped=0x0) returned 1 [0136.247] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x122, lpOverlapped=0x0) returned 1 [0136.248] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0136.248] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0136.248] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x11000, lpOverlapped=0x0) returned 1 [0136.248] FlushFileBuffers (hFile=0x378) returned 1 [0136.259] FlushFileBuffers (hFile=0x37c) returned 1 [0136.266] CloseHandle (hObject=0x378) returned 1 [0136.266] CloseHandle (hObject=0x37c) returned 1 [0136.266] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx")) returned 1 [0136.268] SetEvent (hEvent=0x2e4) returned 1 [0136.268] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0136.268] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=69632) returned 1 [0136.268] CloseHandle (hObject=0x37c) returned 1 [0136.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx")) returned 0x20 [0136.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx")) returned 0x20 [0136.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0136.269] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0136.269] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0136.269] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0136.269] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x378 [0136.269] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x11000, lpOverlapped=0x0) returned 1 [0136.278] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x11010, lpOverlapped=0x0) returned 1 [0136.280] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x132, lpOverlapped=0x0) returned 1 [0136.280] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0136.280] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0136.280] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x11000, lpOverlapped=0x0) returned 1 [0136.281] FlushFileBuffers (hFile=0x37c) returned 1 [0136.287] FlushFileBuffers (hFile=0x378) returned 1 [0136.292] CloseHandle (hObject=0x37c) returned 1 [0136.292] CloseHandle (hObject=0x378) returned 1 [0136.292] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx")) returned 1 [0136.294] SetEvent (hEvent=0x2e4) returned 1 [0136.294] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0136.294] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=69632) returned 1 [0136.294] CloseHandle (hObject=0x378) returned 1 [0136.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx")) returned 0x20 [0136.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx")) returned 0x20 [0136.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0136.294] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0136.294] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0136.295] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0136.295] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0136.295] ReadFile (in: hFile=0x378, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x11000, lpOverlapped=0x0) returned 1 [0136.303] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x11010, lpOverlapped=0x0) returned 1 [0136.305] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x142, lpOverlapped=0x0) returned 1 [0136.305] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0136.305] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0136.305] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x11000, lpOverlapped=0x0) returned 1 [0136.309] FlushFileBuffers (hFile=0x378) returned 1 [0136.315] FlushFileBuffers (hFile=0x37c) returned 1 [0136.317] CloseHandle (hObject=0x378) returned 1 [0136.317] CloseHandle (hObject=0x37c) returned 1 [0136.317] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx")) returned 1 [0136.318] SetEvent (hEvent=0x2e4) returned 1 [0136.319] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0136.320] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=69632) returned 1 [0136.320] CloseHandle (hObject=0x37c) returned 1 [0136.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx")) returned 0x20 [0136.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx")) returned 0x20 [0136.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0136.320] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0136.320] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0136.320] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0136.320] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x378 [0136.321] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x11000, lpOverlapped=0x0) returned 1 [0136.325] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x11010, lpOverlapped=0x0) returned 1 [0136.327] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x132, lpOverlapped=0x0) returned 1 [0136.327] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0136.327] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0136.327] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x11000, lpOverlapped=0x0) returned 1 [0136.327] FlushFileBuffers (hFile=0x37c) returned 1 [0136.331] FlushFileBuffers (hFile=0x378) returned 1 [0136.332] CloseHandle (hObject=0x37c) returned 1 [0136.332] CloseHandle (hObject=0x378) returned 1 [0136.333] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx")) returned 1 [0136.334] SetEvent (hEvent=0x2e4) returned 1 [0136.334] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0136.335] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=69632) returned 1 [0136.335] CloseHandle (hObject=0x378) returned 1 [0136.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx")) returned 0x20 [0136.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx")) returned 0x20 [0136.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0136.335] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0136.335] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0136.335] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0136.335] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0136.336] ReadFile (in: hFile=0x378, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x11000, lpOverlapped=0x0) returned 1 [0136.339] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x11010, lpOverlapped=0x0) returned 1 [0136.341] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x122, lpOverlapped=0x0) returned 1 [0136.341] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0136.342] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0136.342] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x11000, lpOverlapped=0x0) returned 1 [0136.342] FlushFileBuffers (hFile=0x378) returned 1 [0136.549] FlushFileBuffers (hFile=0x37c) returned 1 [0136.551] CloseHandle (hObject=0x378) returned 1 [0136.551] CloseHandle (hObject=0x37c) returned 1 [0136.551] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx")) returned 1 [0136.553] SetEvent (hEvent=0x2e4) returned 1 [0136.553] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0136.553] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=69632) returned 1 [0136.553] CloseHandle (hObject=0x37c) returned 1 [0136.553] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx")) returned 0x20 [0136.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx")) returned 0x20 [0136.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0136.554] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0136.554] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0136.554] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0136.554] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x378 [0136.554] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x11000, lpOverlapped=0x0) returned 1 [0136.558] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x11010, lpOverlapped=0x0) returned 1 [0136.561] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x132, lpOverlapped=0x0) returned 1 [0136.561] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0136.561] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0136.561] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x11000, lpOverlapped=0x0) returned 1 [0136.561] FlushFileBuffers (hFile=0x37c) returned 1 [0136.564] FlushFileBuffers (hFile=0x378) returned 1 [0136.567] CloseHandle (hObject=0x37c) returned 1 [0136.567] CloseHandle (hObject=0x378) returned 1 [0136.567] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx")) returned 1 [0136.568] SetEvent (hEvent=0x2e4) returned 1 [0136.569] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0136.569] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=69632) returned 1 [0136.569] CloseHandle (hObject=0x378) returned 1 [0136.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx")) returned 0x20 [0136.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx")) returned 0x20 [0136.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0136.569] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0136.569] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0136.569] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0136.570] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0136.571] ReadFile (in: hFile=0x378, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x11000, lpOverlapped=0x0) returned 1 [0136.574] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x11010, lpOverlapped=0x0) returned 1 [0136.576] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x162, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x162, lpOverlapped=0x0) returned 1 [0136.576] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0136.576] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0136.576] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x11000, lpOverlapped=0x0) returned 1 [0136.577] FlushFileBuffers (hFile=0x378) returned 1 [0136.580] FlushFileBuffers (hFile=0x37c) returned 1 [0136.581] CloseHandle (hObject=0x378) returned 1 [0136.581] CloseHandle (hObject=0x37c) returned 1 [0136.581] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx")) returned 1 [0136.583] SetEvent (hEvent=0x2e4) returned 1 [0136.583] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0136.584] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=1052672) returned 1 [0136.584] CloseHandle (hObject=0x37c) returned 1 [0136.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx")) returned 0x20 [0136.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx")) returned 0x20 [0136.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0136.586] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0136.587] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0136.587] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0136.587] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x378 [0136.587] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x101000, lpOverlapped=0x0) returned 1 [0136.615] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x101010, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x101010, lpOverlapped=0x0) returned 1 [0136.803] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x132, lpOverlapped=0x0) returned 1 [0136.803] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0136.803] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0136.803] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x101000, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x101000, lpOverlapped=0x0) returned 1 [0136.810] FlushFileBuffers (hFile=0x37c) returned 1 [0136.820] FlushFileBuffers (hFile=0x378) returned 1 [0136.824] CloseHandle (hObject=0x37c) returned 1 [0136.824] CloseHandle (hObject=0x378) returned 1 [0136.825] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx")) returned 1 [0136.834] SetEvent (hEvent=0x2e4) returned 1 [0136.834] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0136.835] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=69632) returned 1 [0136.835] CloseHandle (hObject=0x378) returned 1 [0136.835] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx")) returned 0x20 [0136.835] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx")) returned 0x20 [0136.835] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0136.835] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0136.836] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0136.836] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0136.836] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0136.836] ReadFile (in: hFile=0x378, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x11000, lpOverlapped=0x0) returned 1 [0136.841] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x11010, lpOverlapped=0x0) returned 1 [0136.843] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x132, lpOverlapped=0x0) returned 1 [0136.844] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0136.844] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0136.844] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x11000, lpOverlapped=0x0) returned 1 [0136.844] FlushFileBuffers (hFile=0x378) returned 1 [0136.851] FlushFileBuffers (hFile=0x37c) returned 1 [0136.874] CloseHandle (hObject=0x378) returned 1 [0136.874] CloseHandle (hObject=0x37c) returned 1 [0136.874] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx")) returned 1 [0136.876] SetEvent (hEvent=0x2e4) returned 1 [0136.876] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0136.876] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=69632) returned 1 [0136.876] CloseHandle (hObject=0x37c) returned 1 [0136.877] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx")) returned 0x20 [0136.877] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx")) returned 0x20 [0136.877] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0136.877] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0136.877] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0136.877] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0136.877] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x378 [0136.879] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x11000, lpOverlapped=0x0) returned 1 [0136.883] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x11010, lpOverlapped=0x0) returned 1 [0136.885] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x132, lpOverlapped=0x0) returned 1 [0136.885] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0136.885] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0136.885] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x11000, lpOverlapped=0x0) returned 1 [0136.886] FlushFileBuffers (hFile=0x37c) returned 1 [0137.340] FlushFileBuffers (hFile=0x378) returned 1 [0137.341] CloseHandle (hObject=0x37c) returned 1 [0137.341] CloseHandle (hObject=0x378) returned 1 [0137.342] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx")) returned 1 [0137.343] SetEvent (hEvent=0x2e4) returned 1 [0137.343] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0137.343] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=69632) returned 1 [0137.343] CloseHandle (hObject=0x378) returned 1 [0137.344] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx")) returned 0x20 [0137.344] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx")) returned 0x20 [0137.344] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0137.344] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0137.344] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0137.344] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0137.344] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0137.344] ReadFile (in: hFile=0x378, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x11000, lpOverlapped=0x0) returned 1 [0137.349] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x11010, lpOverlapped=0x0) returned 1 [0137.351] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x132, lpOverlapped=0x0) returned 1 [0137.351] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0137.351] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0137.351] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x11000, lpOverlapped=0x0) returned 1 [0137.351] FlushFileBuffers (hFile=0x378) returned 1 [0137.707] FlushFileBuffers (hFile=0x37c) returned 1 [0137.709] CloseHandle (hObject=0x378) returned 1 [0137.709] CloseHandle (hObject=0x37c) returned 1 [0137.709] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx")) returned 1 [0137.711] SetEvent (hEvent=0x2e4) returned 1 [0137.711] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0137.715] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=69632) returned 1 [0137.715] CloseHandle (hObject=0x37c) returned 1 [0137.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx")) returned 0x20 [0137.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx")) returned 0x20 [0137.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0137.716] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0137.716] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0137.716] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0137.716] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x378 [0137.716] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x11000, lpOverlapped=0x0) returned 1 [0137.719] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x11010, lpOverlapped=0x0) returned 1 [0137.721] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x162, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x162, lpOverlapped=0x0) returned 1 [0137.721] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0137.721] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0137.721] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x11000, lpOverlapped=0x0) returned 1 [0137.722] FlushFileBuffers (hFile=0x37c) returned 1 [0137.724] FlushFileBuffers (hFile=0x378) returned 1 [0137.726] CloseHandle (hObject=0x37c) returned 1 [0137.726] CloseHandle (hObject=0x378) returned 1 [0137.726] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx")) returned 1 [0137.738] SetEvent (hEvent=0x2e4) returned 1 [0137.738] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0137.739] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=69632) returned 1 [0137.739] CloseHandle (hObject=0x378) returned 1 [0137.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx")) returned 0x20 [0137.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx")) returned 0x20 [0137.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0137.740] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0137.740] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0137.740] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0137.740] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0137.741] ReadFile (in: hFile=0x378, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x11000, lpOverlapped=0x0) returned 1 [0137.744] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x11010, lpOverlapped=0x0) returned 1 [0137.745] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x172, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x172, lpOverlapped=0x0) returned 1 [0137.746] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0137.746] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0137.746] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x11000, lpOverlapped=0x0) returned 1 [0137.746] FlushFileBuffers (hFile=0x378) returned 1 [0137.749] FlushFileBuffers (hFile=0x37c) returned 1 [0137.750] CloseHandle (hObject=0x378) returned 1 [0137.751] CloseHandle (hObject=0x37c) returned 1 [0137.751] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx")) returned 1 [0137.752] SetEvent (hEvent=0x2e4) returned 1 [0137.752] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0137.752] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=69632) returned 1 [0137.752] CloseHandle (hObject=0x37c) returned 1 [0137.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx")) returned 0x20 [0137.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx")) returned 0x20 [0137.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0137.753] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0137.753] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0137.753] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0137.753] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x378 [0137.753] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x11000, lpOverlapped=0x0) returned 1 [0137.757] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x11010, lpOverlapped=0x0) returned 1 [0137.771] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x132, lpOverlapped=0x0) returned 1 [0137.772] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0137.772] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0137.772] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x11000, lpOverlapped=0x0) returned 1 [0137.772] FlushFileBuffers (hFile=0x37c) returned 1 [0137.780] FlushFileBuffers (hFile=0x378) returned 1 [0137.786] CloseHandle (hObject=0x37c) returned 1 [0137.786] CloseHandle (hObject=0x378) returned 1 [0137.786] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx")) returned 1 [0137.788] SetEvent (hEvent=0x2e4) returned 1 [0137.788] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0137.788] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=69632) returned 1 [0137.788] CloseHandle (hObject=0x378) returned 1 [0137.788] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx")) returned 0x20 [0137.788] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx")) returned 0x20 [0137.788] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0137.788] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0137.788] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0137.788] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0137.788] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0137.789] ReadFile (in: hFile=0x378, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x11000, lpOverlapped=0x0) returned 1 [0137.797] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x11010, lpOverlapped=0x0) returned 1 [0137.799] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x152, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x152, lpOverlapped=0x0) returned 1 [0137.799] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0137.799] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0137.799] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x11000, lpOverlapped=0x0) returned 1 [0137.799] FlushFileBuffers (hFile=0x378) returned 1 [0137.806] FlushFileBuffers (hFile=0x37c) returned 1 [0137.814] CloseHandle (hObject=0x378) returned 1 [0137.814] CloseHandle (hObject=0x37c) returned 1 [0137.814] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx")) returned 1 [0137.815] SetEvent (hEvent=0x2e4) returned 1 [0137.815] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0137.816] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=69632) returned 1 [0137.816] CloseHandle (hObject=0x37c) returned 1 [0137.816] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx")) returned 0x20 [0137.816] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx")) returned 0x20 [0137.816] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0137.816] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0137.816] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0137.816] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0137.816] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x378 [0137.816] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x11000, lpOverlapped=0x0) returned 1 [0137.823] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x11010, lpOverlapped=0x0) returned 1 [0137.825] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x132, lpOverlapped=0x0) returned 1 [0137.825] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0137.825] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0137.825] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x11000, lpOverlapped=0x0) returned 1 [0137.825] FlushFileBuffers (hFile=0x37c) returned 1 [0137.832] FlushFileBuffers (hFile=0x378) returned 1 [0137.834] CloseHandle (hObject=0x37c) returned 1 [0137.834] CloseHandle (hObject=0x378) returned 1 [0137.834] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx")) returned 1 [0137.835] SetEvent (hEvent=0x2e4) returned 1 [0137.835] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0137.836] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=69632) returned 1 [0137.836] CloseHandle (hObject=0x378) returned 1 [0137.836] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx")) returned 0x20 [0137.836] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx")) returned 0x20 [0137.836] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0137.836] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0137.836] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0137.836] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0137.836] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0137.837] ReadFile (in: hFile=0x378, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x11000, lpOverlapped=0x0) returned 1 [0137.840] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x11010, lpOverlapped=0x0) returned 1 [0137.842] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x132, lpOverlapped=0x0) returned 1 [0137.842] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0137.842] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0137.842] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x11000, lpOverlapped=0x0) returned 1 [0137.843] FlushFileBuffers (hFile=0x378) returned 1 [0137.845] FlushFileBuffers (hFile=0x37c) returned 1 [0137.846] CloseHandle (hObject=0x378) returned 1 [0137.847] CloseHandle (hObject=0x37c) returned 1 [0137.847] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx")) returned 1 [0137.848] SetEvent (hEvent=0x2e4) returned 1 [0137.848] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0137.849] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=69632) returned 1 [0137.849] CloseHandle (hObject=0x37c) returned 1 [0137.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx")) returned 0x20 [0137.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx")) returned 0x20 [0137.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0137.850] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0137.850] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0137.850] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0137.850] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x378 [0137.850] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x11000, lpOverlapped=0x0) returned 1 [0137.863] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x11010, lpOverlapped=0x0) returned 1 [0137.865] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x152, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x152, lpOverlapped=0x0) returned 1 [0137.865] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0137.865] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0137.866] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x11000, lpOverlapped=0x0) returned 1 [0137.866] FlushFileBuffers (hFile=0x37c) returned 1 [0137.868] FlushFileBuffers (hFile=0x378) returned 1 [0137.870] CloseHandle (hObject=0x37c) returned 1 [0137.870] CloseHandle (hObject=0x378) returned 1 [0137.870] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx")) returned 1 [0137.871] SetEvent (hEvent=0x2e4) returned 1 [0137.871] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0137.872] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=69632) returned 1 [0137.872] CloseHandle (hObject=0x378) returned 1 [0137.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx")) returned 0x20 [0137.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx")) returned 0x20 [0137.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0137.872] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0137.872] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0137.872] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0137.872] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0137.872] ReadFile (in: hFile=0x378, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x11000, lpOverlapped=0x0) returned 1 [0137.876] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x11010, lpOverlapped=0x0) returned 1 [0137.877] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x132, lpOverlapped=0x0) returned 1 [0137.877] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0137.878] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0137.878] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x11000, lpOverlapped=0x0) returned 1 [0137.878] FlushFileBuffers (hFile=0x378) returned 1 [0138.214] FlushFileBuffers (hFile=0x37c) returned 1 [0138.229] CloseHandle (hObject=0x378) returned 1 [0138.229] CloseHandle (hObject=0x37c) returned 1 [0138.229] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx")) returned 1 [0138.230] SetEvent (hEvent=0x2e4) returned 1 [0138.231] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0138.231] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=69632) returned 1 [0138.231] CloseHandle (hObject=0x37c) returned 1 [0138.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx")) returned 0x20 [0138.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx")) returned 0x20 [0138.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0138.231] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0138.231] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0138.231] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0138.231] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x378 [0138.236] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x11000, lpOverlapped=0x0) returned 1 [0138.240] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x11010, lpOverlapped=0x0) returned 1 [0138.242] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x132, lpOverlapped=0x0) returned 1 [0138.242] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0138.243] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0138.243] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x11000, lpOverlapped=0x0) returned 1 [0138.243] FlushFileBuffers (hFile=0x37c) returned 1 [0138.299] FlushFileBuffers (hFile=0x378) returned 1 [0138.311] CloseHandle (hObject=0x37c) returned 1 [0138.312] CloseHandle (hObject=0x378) returned 1 [0138.312] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx")) returned 1 [0138.313] SetEvent (hEvent=0x2e4) returned 1 [0138.313] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0138.314] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=1052672) returned 1 [0138.314] CloseHandle (hObject=0x378) returned 1 [0138.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx")) returned 0x20 [0138.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx")) returned 0x20 [0138.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0138.314] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0138.314] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0138.315] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0138.315] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0138.315] ReadFile (in: hFile=0x378, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x101000, lpOverlapped=0x0) returned 1 [0138.340] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x101010, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x101010, lpOverlapped=0x0) returned 1 [0138.589] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x172, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x172, lpOverlapped=0x0) returned 1 [0138.590] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0138.590] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0138.590] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x101000, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x101000, lpOverlapped=0x0) returned 1 [0138.595] FlushFileBuffers (hFile=0x378) returned 1 [0138.601] FlushFileBuffers (hFile=0x37c) returned 1 [0138.604] CloseHandle (hObject=0x378) returned 1 [0138.604] CloseHandle (hObject=0x37c) returned 1 [0138.604] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx")) returned 1 [0138.613] SetEvent (hEvent=0x2e4) returned 1 [0138.613] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0138.613] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=69632) returned 1 [0138.613] CloseHandle (hObject=0x37c) returned 1 [0138.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx")) returned 0x20 [0138.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx")) returned 0x20 [0138.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0138.614] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0138.614] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0138.614] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0138.614] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x378 [0138.615] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x11000, lpOverlapped=0x0) returned 1 [0138.618] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x11010, lpOverlapped=0x0) returned 1 [0138.620] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x132, lpOverlapped=0x0) returned 1 [0138.620] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0138.620] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0138.620] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x11000, lpOverlapped=0x0) returned 1 [0138.620] FlushFileBuffers (hFile=0x37c) returned 1 [0138.623] FlushFileBuffers (hFile=0x378) returned 1 [0138.624] CloseHandle (hObject=0x37c) returned 1 [0138.624] CloseHandle (hObject=0x378) returned 1 [0138.625] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx")) returned 1 [0138.626] SetEvent (hEvent=0x2e4) returned 1 [0138.626] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0138.626] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=1052672) returned 1 [0138.627] CloseHandle (hObject=0x378) returned 1 [0138.627] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx")) returned 0x20 [0138.627] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx")) returned 0x20 [0138.627] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0138.627] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0138.627] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0138.627] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0138.627] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0138.627] ReadFile (in: hFile=0x378, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x101000, lpOverlapped=0x0) returned 1 [0138.653] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x101010, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x101010, lpOverlapped=0x0) returned 1 [0138.800] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x142, lpOverlapped=0x0) returned 1 [0138.800] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0138.800] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0138.800] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x101000, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x101000, lpOverlapped=0x0) returned 1 [0138.805] FlushFileBuffers (hFile=0x378) returned 1 [0139.377] FlushFileBuffers (hFile=0x37c) returned 1 [0139.388] CloseHandle (hObject=0x378) returned 1 [0139.388] CloseHandle (hObject=0x37c) returned 1 [0139.388] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx")) returned 1 [0139.399] SetEvent (hEvent=0x2e4) returned 1 [0139.399] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0139.399] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=18624) returned 1 [0139.399] CloseHandle (hObject=0x37c) returned 1 [0139.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll")) returned 0x20 [0139.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll")) returned 0x20 [0139.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.400] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.400] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0139.402] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=18624) returned 1 [0139.402] CloseHandle (hObject=0x37c) returned 1 [0139.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll")) returned 0x20 [0139.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll")) returned 0x20 [0139.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.402] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.402] SetEvent (hEvent=0x2e4) returned 1 [0139.403] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0139.403] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=21184) returned 1 [0139.404] CloseHandle (hObject=0x37c) returned 1 [0139.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll")) returned 0x20 [0139.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll")) returned 0x20 [0139.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.404] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.404] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0139.404] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=19136) returned 1 [0139.404] CloseHandle (hObject=0x37c) returned 1 [0139.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll")) returned 0x20 [0139.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll")) returned 0x20 [0139.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.405] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.405] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0139.405] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=19136) returned 1 [0139.405] CloseHandle (hObject=0x37c) returned 1 [0139.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll")) returned 0x20 [0139.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll")) returned 0x20 [0139.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.406] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.406] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0139.411] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=18624) returned 1 [0139.411] CloseHandle (hObject=0x37c) returned 1 [0139.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll")) returned 0x20 [0139.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll")) returned 0x20 [0139.415] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.415] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.415] SetEvent (hEvent=0x2e4) returned 1 [0139.415] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0139.415] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=11616) returned 1 [0139.415] CloseHandle (hObject=0x37c) returned 1 [0139.415] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll")) returned 0x20 [0139.415] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll")) returned 0x20 [0139.415] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.415] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.416] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0139.416] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=19648) returned 1 [0139.416] CloseHandle (hObject=0x37c) returned 1 [0139.416] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll")) returned 0x20 [0139.416] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll")) returned 0x20 [0139.416] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.416] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.417] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0139.417] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=22720) returned 1 [0139.417] CloseHandle (hObject=0x37c) returned 1 [0139.417] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll")) returned 0x20 [0139.417] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll")) returned 0x20 [0139.417] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.417] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.417] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0139.419] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=19136) returned 1 [0139.419] CloseHandle (hObject=0x37c) returned 1 [0139.420] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll")) returned 0x20 [0139.420] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll")) returned 0x20 [0139.420] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.420] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.420] SetEvent (hEvent=0x2e4) returned 1 [0139.420] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0139.420] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=20672) returned 1 [0139.420] CloseHandle (hObject=0x37c) returned 1 [0139.420] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll")) returned 0x20 [0139.420] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll")) returned 0x20 [0139.421] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.421] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.421] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0139.421] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=19648) returned 1 [0139.421] CloseHandle (hObject=0x37c) returned 1 [0139.421] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll")) returned 0x20 [0139.421] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll")) returned 0x20 [0139.421] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.421] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.422] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0139.422] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=19136) returned 1 [0139.422] CloseHandle (hObject=0x37c) returned 1 [0139.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll")) returned 0x20 [0139.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll")) returned 0x20 [0139.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.422] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.422] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0139.425] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=27840) returned 1 [0139.425] CloseHandle (hObject=0x370) returned 1 [0139.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll")) returned 0x20 [0139.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll")) returned 0x20 [0139.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.425] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.426] SetEvent (hEvent=0x2e4) returned 1 [0139.426] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0139.426] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=26816) returned 1 [0139.426] CloseHandle (hObject=0x370) returned 1 [0139.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll")) returned 0x20 [0139.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll")) returned 0x20 [0139.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.426] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.426] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0139.427] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=70848) returned 1 [0139.427] CloseHandle (hObject=0x370) returned 1 [0139.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll")) returned 0x20 [0139.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll")) returned 0x20 [0139.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.427] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.427] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0139.427] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=19648) returned 1 [0139.427] CloseHandle (hObject=0x370) returned 1 [0139.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll")) returned 0x20 [0139.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll")) returned 0x20 [0139.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.428] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.428] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0139.431] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=23232) returned 1 [0139.431] CloseHandle (hObject=0x37c) returned 1 [0139.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll")) returned 0x20 [0139.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll")) returned 0x20 [0139.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.431] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.431] SetEvent (hEvent=0x2e4) returned 1 [0139.431] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0139.432] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=24768) returned 1 [0139.432] CloseHandle (hObject=0x37c) returned 1 [0139.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll")) returned 0x20 [0139.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll")) returned 0x20 [0139.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.432] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.432] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0139.432] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=24768) returned 1 [0139.432] CloseHandle (hObject=0x37c) returned 1 [0139.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll")) returned 0x20 [0139.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll")) returned 0x20 [0139.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.433] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.433] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0139.433] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=21184) returned 1 [0139.433] CloseHandle (hObject=0x37c) returned 1 [0139.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll")) returned 0x20 [0139.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll")) returned 0x20 [0139.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.433] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.434] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0139.434] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=19136) returned 1 [0139.434] CloseHandle (hObject=0x37c) returned 1 [0139.434] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll")) returned 0x20 [0139.434] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll")) returned 0x20 [0139.434] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.434] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.434] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\apiclient.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0139.434] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=162880) returned 1 [0139.434] CloseHandle (hObject=0x37c) returned 1 [0139.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\apiclient.dll")) returned 0x20 [0139.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\apiclient.dll")) returned 0x20 [0139.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\apiclient.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.435] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\apiclient.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.435] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcatalog.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0139.435] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=656088) returned 1 [0139.435] CloseHandle (hObject=0x37c) returned 1 [0139.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcatalog.dll")) returned 0x20 [0139.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcatalog.dll")) returned 0x20 [0139.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcatalog.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.435] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcatalog.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.436] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0139.436] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=2054872) returned 1 [0139.436] CloseHandle (hObject=0x37c) returned 1 [0139.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe")) returned 0x20 [0139.436] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0 [0139.436] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe")) returned 0 [0139.436] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvfilesystemmetadata.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0139.437] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=307416) returned 1 [0139.437] CloseHandle (hObject=0x37c) returned 1 [0139.437] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvfilesystemmetadata.dll")) returned 0x20 [0139.437] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvfilesystemmetadata.dll")) returned 0x20 [0139.437] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvfilesystemmetadata.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.437] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvfilesystemmetadata.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.437] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0139.437] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=2118360) returned 1 [0139.437] CloseHandle (hObject=0x37c) returned 1 [0139.437] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll")) returned 0x20 [0139.437] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0 [0139.438] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll")) returned 0 [0139.438] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvapi.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0139.438] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=468696) returned 1 [0139.438] CloseHandle (hObject=0x37c) returned 1 [0139.438] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvapi.dll")) returned 0x20 [0139.438] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvapi.dll")) returned 0x20 [0139.438] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvapi.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.438] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.557] SetEvent (hEvent=0x2e4) returned 1 [0139.560] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0139.561] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=396960) returned 1 [0139.561] CloseHandle (hObject=0x370) returned 1 [0139.561] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll")) returned 0x20 [0139.561] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll")) returned 0x20 [0139.561] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.561] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.561] SetEvent (hEvent=0x2e4) returned 1 [0139.562] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0139.562] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=473760) returned 1 [0139.562] CloseHandle (hObject=0x370) returned 1 [0139.562] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll")) returned 0x20 [0139.562] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll")) returned 0x20 [0139.562] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.562] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.562] SetEvent (hEvent=0x2e4) returned 1 [0139.565] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstreamingmanager.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0139.565] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=210648) returned 1 [0139.565] CloseHandle (hObject=0x37c) returned 1 [0139.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstreamingmanager.dll")) returned 0x20 [0139.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstreamingmanager.dll")) returned 0x20 [0139.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstreamingmanager.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.566] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstreamingmanager.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.566] SetEvent (hEvent=0x2e4) returned 1 [0139.566] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystemcontroller.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0139.567] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=1402584) returned 1 [0139.567] CloseHandle (hObject=0x37c) returned 1 [0139.567] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystemcontroller.dll")) returned 0x20 [0139.567] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystemcontroller.dll")) returned 0x20 [0139.567] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystemcontroller.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.567] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystemcontroller.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.567] SetEvent (hEvent=0x2e4) returned 1 [0139.568] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0139.568] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=1761448) returned 1 [0139.568] CloseHandle (hObject=0x370) returned 1 [0139.568] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems32.dll")) returned 0x20 [0139.568] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems32.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems32.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0 [0139.568] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems32.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems32.dll")) returned 0 [0139.569] SetEvent (hEvent=0x2e4) returned 1 [0139.569] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0139.569] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=2285736) returned 1 [0139.569] CloseHandle (hObject=0x370) returned 1 [0139.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll")) returned 0x20 [0139.569] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0 [0139.570] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll")) returned 0 [0139.570] SetEvent (hEvent=0x2e4) returned 1 [0139.570] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvvirtualization.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0139.571] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=567512) returned 1 [0139.571] CloseHandle (hObject=0x370) returned 1 [0139.571] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvvirtualization.dll")) returned 0x20 [0139.571] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvvirtualization.dll")) returned 0x20 [0139.571] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvvirtualization.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.571] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvvirtualization.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.571] SetEvent (hEvent=0x2e4) returned 1 [0139.572] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvmanifest.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0139.573] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=1231576) returned 1 [0139.573] CloseHandle (hObject=0x37c) returned 1 [0139.573] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvmanifest.dll")) returned 0x20 [0139.573] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvmanifest.dll")) returned 0x20 [0139.573] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvmanifest.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.573] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvmanifest.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.573] SetEvent (hEvent=0x2e4) returned 1 [0139.574] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvorchestration.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0139.574] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=947928) returned 1 [0139.574] CloseHandle (hObject=0x37c) returned 1 [0139.574] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvorchestration.dll")) returned 0x20 [0139.574] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvorchestration.dll")) returned 0x20 [0139.574] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvorchestration.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.574] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvorchestration.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.574] SetEvent (hEvent=0x2e4) returned 1 [0139.575] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvpolicy.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0139.575] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=1295576) returned 1 [0139.575] CloseHandle (hObject=0x37c) returned 1 [0139.575] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvpolicy.dll")) returned 0x20 [0139.575] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvpolicy.dll")) returned 0x20 [0139.575] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvpolicy.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.575] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvpolicy.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.575] SetEvent (hEvent=0x2e4) returned 1 [0139.576] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0139.577] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=512216) returned 1 [0139.577] CloseHandle (hObject=0x37c) returned 1 [0139.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll")) returned 0x20 [0139.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll")) returned 0x20 [0139.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.577] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.577] SetEvent (hEvent=0x2e4) returned 1 [0139.577] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvshnotify.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0139.577] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=263896) returned 1 [0139.577] CloseHandle (hObject=0x37c) returned 1 [0139.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvshnotify.exe")) returned 0x20 [0139.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvshnotify.exe")) returned 0x20 [0139.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvshnotify.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.578] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvshnotify.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.578] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0139.578] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=820416) returned 1 [0139.578] CloseHandle (hObject=0x37c) returned 1 [0139.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll")) returned 0x20 [0139.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll")) returned 0x20 [0139.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.578] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.579] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0139.579] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=1208928) returned 1 [0139.579] CloseHandle (hObject=0x37c) returned 1 [0139.579] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll")) returned 0x20 [0139.579] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll")) returned 0x20 [0139.579] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.579] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.579] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0139.580] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=4136) returned 1 [0139.580] CloseHandle (hObject=0x37c) returned 1 [0139.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml")) returned 0x20 [0139.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml")) returned 0x20 [0139.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.580] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.580] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0139.582] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=902328) returned 1 [0139.583] CloseHandle (hObject=0x370) returned 1 [0139.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll")) returned 0x20 [0139.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll")) returned 0x20 [0139.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.583] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.583] SetEvent (hEvent=0x2e4) returned 1 [0139.583] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0139.584] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=332968) returned 1 [0139.584] CloseHandle (hObject=0x370) returned 1 [0139.584] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll")) returned 0x20 [0139.584] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll")) returned 0x20 [0139.584] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.584] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.584] SetEvent (hEvent=0x2e4) returned 1 [0139.585] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i640.hash"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0139.585] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=102) returned 1 [0139.585] CloseHandle (hObject=0x370) returned 1 [0139.585] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i640.hash")) returned 0x20 [0139.585] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i640.hash")) returned 0x20 [0139.585] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i640.hash.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.585] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i640.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.585] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i641033.hash"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0139.585] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=102) returned 1 [0139.585] CloseHandle (hObject=0x370) returned 1 [0139.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i641033.hash")) returned 0x20 [0139.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i641033.hash")) returned 0x20 [0139.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i641033.hash.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.586] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i641033.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.586] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\integratedoffice.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0139.586] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=1093248) returned 1 [0139.586] CloseHandle (hObject=0x370) returned 1 [0139.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\integratedoffice.exe")) returned 0x20 [0139.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\integratedoffice.exe")) returned 0x20 [0139.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\integratedoffice.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.587] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\integratedoffice.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.587] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mavinject32.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0139.589] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=358616) returned 1 [0139.589] CloseHandle (hObject=0x37c) returned 1 [0139.589] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mavinject32.exe")) returned 0x20 [0139.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mavinject32.exe")) returned 0x20 [0139.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mavinject32.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.590] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mavinject32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.590] SetEvent (hEvent=0x2e4) returned 1 [0139.590] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0139.590] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=3144288) returned 1 [0139.590] CloseHandle (hObject=0x37c) returned 1 [0139.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll")) returned 0x20 [0139.590] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0 [0139.590] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll")) returned 0 [0139.591] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0139.591] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=4677216) returned 1 [0139.591] CloseHandle (hObject=0x37c) returned 1 [0139.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll")) returned 0x20 [0139.591] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0 [0139.591] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll")) returned 0 [0139.591] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0139.591] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=3177152) returned 1 [0139.591] CloseHandle (hObject=0x37c) returned 1 [0139.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll")) returned 0x20 [0139.592] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0 [0139.592] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll")) returned 0 [0139.592] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0139.592] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=9330784) returned 1 [0139.592] CloseHandle (hObject=0x37c) returned 1 [0139.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll")) returned 0x20 [0139.592] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0 [0139.592] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll")) returned 0 [0139.593] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msointl30.en-us.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0139.593] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=61024) returned 1 [0139.593] CloseHandle (hObject=0x37c) returned 1 [0139.593] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msointl30.en-us.dll")) returned 0x20 [0139.593] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msointl30.en-us.dll")) returned 0x20 [0139.593] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msointl30.en-us.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.593] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msointl30.en-us.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.593] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp120.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0139.594] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=660136) returned 1 [0139.594] CloseHandle (hObject=0x37c) returned 1 [0139.594] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp120.dll")) returned 0x20 [0139.594] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp120.dll")) returned 0x20 [0139.594] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp120.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.594] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp120.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.594] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp140.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0139.594] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=635040) returned 1 [0139.594] CloseHandle (hObject=0x37c) returned 1 [0139.594] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp140.dll")) returned 0x20 [0139.594] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp140.dll")) returned 0x20 [0139.594] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp140.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.595] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.595] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcr120.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0139.595] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=963240) returned 1 [0139.595] CloseHandle (hObject=0x37c) returned 1 [0139.595] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcr120.dll")) returned 0x20 [0139.595] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcr120.dll")) returned 0x20 [0139.595] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcr120.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.595] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcr120.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.595] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.600] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=5967976) returned 1 [0139.600] CloseHandle (hObject=0x380) returned 1 [0139.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe")) returned 0x20 [0139.600] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0 [0139.600] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe")) returned 0 [0139.600] SetEvent (hEvent=0x2e4) returned 1 [0139.600] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.601] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=996568) returned 1 [0139.601] CloseHandle (hObject=0x380) returned 1 [0139.601] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll")) returned 0x20 [0139.601] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll")) returned 0x20 [0139.601] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.601] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.601] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.601] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=2776664) returned 1 [0139.601] CloseHandle (hObject=0x380) returned 1 [0139.602] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe")) returned 0x20 [0139.602] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0 [0139.602] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe")) returned 0 [0139.602] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.607] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=4782) returned 1 [0139.607] CloseHandle (hObject=0x380) returned 1 [0139.607] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml")) returned 0x20 [0139.607] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml")) returned 0x20 [0139.607] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.607] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.608] SetEvent (hEvent=0x2e4) returned 1 [0139.608] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.608] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=4450) returned 1 [0139.608] CloseHandle (hObject=0x380) returned 1 [0139.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml")) returned 0x20 [0139.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml")) returned 0x20 [0139.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.608] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.608] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\streamserver.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.609] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=1053784) returned 1 [0139.609] CloseHandle (hObject=0x380) returned 1 [0139.609] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\streamserver.dll")) returned 0x20 [0139.609] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\streamserver.dll")) returned 0x20 [0139.609] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\streamserver.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.609] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\streamserver.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.609] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.612] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=982720) returned 1 [0139.612] CloseHandle (hObject=0x380) returned 1 [0139.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll")) returned 0x20 [0139.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll")) returned 0x20 [0139.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.612] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.612] SetEvent (hEvent=0x2e4) returned 1 [0139.612] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.613] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=390320) returned 1 [0139.613] CloseHandle (hObject=0x380) returned 1 [0139.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll")) returned 0x20 [0139.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll")) returned 0x20 [0139.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.613] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.613] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vcruntime140.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.613] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=88752) returned 1 [0139.613] CloseHandle (hObject=0x380) returned 1 [0139.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vcruntime140.dll")) returned 0x20 [0139.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vcruntime140.dll")) returned 0x20 [0139.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vcruntime140.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.614] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vcruntime140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.614] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0139.725] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=791421) returned 1 [0139.725] CloseHandle (hObject=0x370) returned 1 [0139.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml")) returned 0x20 [0139.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml")) returned 0x20 [0139.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.767] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.767] SetEvent (hEvent=0x2e4) returned 1 [0139.767] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.769] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=3072) returned 1 [0139.769] CloseHandle (hObject=0x380) returned 1 [0139.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui")) returned 0x20 [0139.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui")) returned 0x20 [0139.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.769] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.769] SetEvent (hEvent=0x2e4) returned 1 [0139.770] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\ShapeCollector.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\shapecollector.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.770] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=44032) returned 1 [0139.771] CloseHandle (hObject=0x380) returned 1 [0139.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\ShapeCollector.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\shapecollector.exe.mui")) returned 0x20 [0139.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\ShapeCollector.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\shapecollector.exe.mui")) returned 0x20 [0139.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\ShapeCollector.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\shapecollector.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.771] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\ShapeCollector.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\shapecollector.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.771] SetEvent (hEvent=0x2e4) returned 1 [0139.771] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.771] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=181964) returned 1 [0139.771] CloseHandle (hObject=0x380) returned 1 [0139.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi")) returned 0x20 [0139.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi")) returned 0x20 [0139.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.772] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.772] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabskb.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.773] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=5120) returned 1 [0139.773] CloseHandle (hObject=0x380) returned 1 [0139.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabskb.dll.mui")) returned 0x20 [0139.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabskb.dll.mui")) returned 0x20 [0139.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabskb.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.773] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabskb.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.774] SetEvent (hEvent=0x2e4) returned 1 [0139.774] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TabTip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabtip.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.774] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=2560) returned 1 [0139.774] CloseHandle (hObject=0x380) returned 1 [0139.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TabTip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabtip.exe.mui")) returned 0x20 [0139.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TabTip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabtip.exe.mui")) returned 0x20 [0139.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TabTip.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabtip.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.774] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TabTip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabtip.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.775] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipRes.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.776] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=25088) returned 1 [0139.776] CloseHandle (hObject=0x380) returned 1 [0139.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipRes.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui")) returned 0x20 [0139.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipRes.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui")) returned 0x20 [0139.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipRes.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.776] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipRes.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.776] SetEvent (hEvent=0x2e4) returned 1 [0139.776] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.777] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=9728) returned 1 [0139.777] CloseHandle (hObject=0x380) returned 1 [0139.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipresx.dll.mui")) returned 0x20 [0139.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipresx.dll.mui")) returned 0x20 [0139.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.777] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.777] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipTsf.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.778] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=3584) returned 1 [0139.778] CloseHandle (hObject=0x380) returned 1 [0139.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipTsf.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui")) returned 0x20 [0139.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipTsf.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui")) returned 0x20 [0139.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipTsf.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.778] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipTsf.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.778] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.778] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=10752) returned 1 [0139.778] CloseHandle (hObject=0x380) returned 1 [0139.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\tipresx.dll.mui")) returned 0x20 [0139.779] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\tipresx.dll.mui")) returned 0x20 [0139.779] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.779] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.779] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-mx\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.779] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=10752) returned 1 [0139.779] CloseHandle (hObject=0x380) returned 1 [0139.779] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-mx\\tipresx.dll.mui")) returned 0x20 [0139.779] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-mx\\tipresx.dll.mui")) returned 0x20 [0139.779] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-mx\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.779] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-mx\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.780] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.780] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=10752) returned 1 [0139.780] CloseHandle (hObject=0x380) returned 1 [0139.780] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\tipresx.dll.mui")) returned 0x20 [0139.780] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\tipresx.dll.mui")) returned 0x20 [0139.780] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.780] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.781] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.782] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=10240) returned 1 [0139.782] CloseHandle (hObject=0x380) returned 1 [0139.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi\\tipresx.dll.mui")) returned 0x20 [0139.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi\\tipresx.dll.mui")) returned 0x20 [0139.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.782] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.782] SetEvent (hEvent=0x2e4) returned 1 [0139.783] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.785] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=1600388) returned 1 [0139.785] CloseHandle (hObject=0x380) returned 1 [0139.785] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi")) returned 0x20 [0139.785] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0 [0139.785] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi.id[b4197730-2299].[britt.looper@aol.com].phoenix"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi")) returned 0 [0139.785] SetEvent (hEvent=0x2e4) returned 1 [0139.785] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickLearningWizard.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flicklearningwizard.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.786] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=804864) returned 1 [0139.786] CloseHandle (hObject=0x380) returned 1 [0139.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickLearningWizard.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flicklearningwizard.exe")) returned 0x20 [0139.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickLearningWizard.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flicklearningwizard.exe")) returned 0x20 [0139.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickLearningWizard.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flicklearningwizard.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.787] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickLearningWizard.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flicklearningwizard.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.787] SetEvent (hEvent=0x2e4) returned 1 [0139.787] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-ca\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.788] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=11264) returned 1 [0139.788] CloseHandle (hObject=0x380) returned 1 [0139.788] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-ca\\tipresx.dll.mui")) returned 0x20 [0139.788] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-ca\\tipresx.dll.mui")) returned 0x20 [0139.788] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-ca\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.788] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-ca\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.788] SetEvent (hEvent=0x2e4) returned 1 [0139.788] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.789] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=11264) returned 1 [0139.789] CloseHandle (hObject=0x380) returned 1 [0139.790] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr\\tipresx.dll.mui")) returned 0x20 [0139.790] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr\\tipresx.dll.mui")) returned 0x20 [0139.790] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.790] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.790] SetEvent (hEvent=0x2e4) returned 1 [0139.790] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.791] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=1434) returned 1 [0139.791] CloseHandle (hObject=0x380) returned 1 [0139.791] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml")) returned 0x20 [0139.791] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml")) returned 0x20 [0139.791] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.791] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.791] SetEvent (hEvent=0x2e4) returned 1 [0139.792] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.792] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=212) returned 1 [0139.792] CloseHandle (hObject=0x380) returned 1 [0139.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml")) returned 0x20 [0139.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml")) returned 0x20 [0139.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.793] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.793] SetEvent (hEvent=0x2e4) returned 1 [0139.793] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.794] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=903) returned 1 [0139.794] CloseHandle (hObject=0x380) returned 1 [0139.794] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml")) returned 0x20 [0139.794] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml")) returned 0x20 [0139.794] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.794] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.794] SetEvent (hEvent=0x2e4) returned 1 [0139.795] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.795] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=215) returned 1 [0139.795] CloseHandle (hObject=0x380) returned 1 [0139.796] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert.xml")) returned 0x20 [0139.796] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert.xml")) returned 0x20 [0139.796] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.796] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.796] SetEvent (hEvent=0x2e4) returned 1 [0139.796] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.797] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=384) returned 1 [0139.797] CloseHandle (hObject=0x380) returned 1 [0139.797] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml")) returned 0x20 [0139.797] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml")) returned 0x20 [0139.797] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.797] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.798] SetEvent (hEvent=0x2e4) returned 1 [0139.798] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.798] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=903) returned 1 [0139.798] CloseHandle (hObject=0x380) returned 1 [0139.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml")) returned 0x20 [0139.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml")) returned 0x20 [0139.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.798] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.798] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.799] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=392) returned 1 [0139.799] CloseHandle (hObject=0x380) returned 1 [0139.799] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml")) returned 0x20 [0139.799] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml")) returned 0x20 [0139.800] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.800] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.800] SetEvent (hEvent=0x2e4) returned 1 [0139.800] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.800] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=693) returned 1 [0139.800] CloseHandle (hObject=0x380) returned 1 [0139.800] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml")) returned 0x20 [0139.800] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml")) returned 0x20 [0139.800] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.800] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.801] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.801] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=3333) returned 1 [0139.802] CloseHandle (hObject=0x380) returned 1 [0139.802] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml")) returned 0x20 [0139.802] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml")) returned 0x20 [0139.802] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.802] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.802] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\basealtgr_rtl.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.804] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=247) returned 1 [0139.804] CloseHandle (hObject=0x380) returned 1 [0139.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\basealtgr_rtl.xml")) returned 0x20 [0139.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\basealtgr_rtl.xml")) returned 0x20 [0139.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\basealtgr_rtl.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.804] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\basealtgr_rtl.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.804] SetEvent (hEvent=0x2e4) returned 1 [0139.805] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.805] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=3524) returned 1 [0139.805] CloseHandle (hObject=0x380) returned 1 [0139.805] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml")) returned 0x20 [0139.805] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml")) returned 0x20 [0139.805] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.805] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.805] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.806] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=3529) returned 1 [0139.806] CloseHandle (hObject=0x380) returned 1 [0139.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml")) returned 0x20 [0139.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml")) returned 0x20 [0139.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.806] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.806] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0140.337] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=738) returned 1 [0140.337] CloseHandle (hObject=0x370) returned 1 [0140.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml")) returned 0x20 [0140.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml")) returned 0x20 [0140.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.337] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.337] SetEvent (hEvent=0x2e4) returned 1 [0140.338] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0140.338] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=2592) returned 1 [0140.338] CloseHandle (hObject=0x370) returned 1 [0140.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml")) returned 0x20 [0140.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml")) returned 0x20 [0140.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.338] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.338] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0140.339] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=2462) returned 1 [0140.339] CloseHandle (hObject=0x370) returned 1 [0140.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml")) returned 0x20 [0140.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml")) returned 0x20 [0140.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.339] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.339] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0140.339] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=2436) returned 1 [0140.339] CloseHandle (hObject=0x370) returned 1 [0140.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml")) returned 0x20 [0140.340] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml")) returned 0x20 [0140.340] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.340] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.340] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.344] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=2556) returned 1 [0140.344] CloseHandle (hObject=0x37c) returned 1 [0140.344] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml")) returned 0x20 [0140.344] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml")) returned 0x20 [0140.345] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.345] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.345] SetEvent (hEvent=0x2e4) returned 1 [0140.345] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.345] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=2514) returned 1 [0140.345] CloseHandle (hObject=0x37c) returned 1 [0140.345] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml")) returned 0x20 [0140.345] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml")) returned 0x20 [0140.345] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.345] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.346] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.346] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=2616) returned 1 [0140.346] CloseHandle (hObject=0x37c) returned 1 [0140.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml")) returned 0x20 [0140.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml")) returned 0x20 [0140.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.346] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.346] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsel.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.347] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=2618) returned 1 [0140.347] CloseHandle (hObject=0x37c) returned 1 [0140.347] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsel.xml")) returned 0x20 [0140.347] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsel.xml")) returned 0x20 [0140.347] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsel.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.347] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsel.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.347] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.348] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=2578) returned 1 [0140.348] CloseHandle (hObject=0x37c) returned 1 [0140.348] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml")) returned 0x20 [0140.348] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml")) returned 0x20 [0140.348] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.349] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.349] SetEvent (hEvent=0x2e4) returned 1 [0140.349] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.349] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=3024) returned 1 [0140.349] CloseHandle (hObject=0x37c) returned 1 [0140.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml")) returned 0x20 [0140.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml")) returned 0x20 [0140.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.349] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.350] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IPSEventLogMsg.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipseventlogmsg.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.351] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=2560) returned 1 [0140.351] CloseHandle (hObject=0x37c) returned 1 [0140.351] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IPSEventLogMsg.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipseventlogmsg.dll")) returned 0x20 [0140.351] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IPSEventLogMsg.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipseventlogmsg.dll")) returned 0x20 [0140.351] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IPSEventLogMsg.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipseventlogmsg.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.351] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IPSEventLogMsg.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipseventlogmsg.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.379] SetEvent (hEvent=0x2e4) returned 1 [0140.379] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.379] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=2658) returned 1 [0140.379] CloseHandle (hObject=0x37c) returned 1 [0140.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml")) returned 0x20 [0140.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml")) returned 0x20 [0140.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.380] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.380] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.380] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=2628) returned 1 [0140.380] CloseHandle (hObject=0x37c) returned 1 [0140.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml")) returned 0x20 [0140.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml")) returned 0x20 [0140.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.380] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.381] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshe.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.382] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=2532) returned 1 [0140.382] CloseHandle (hObject=0x37c) returned 1 [0140.382] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshe.xml")) returned 0x20 [0140.382] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshe.xml")) returned 0x20 [0140.382] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshe.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.382] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshe.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.382] SetEvent (hEvent=0x2e4) returned 1 [0140.383] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshi.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.383] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=2518) returned 1 [0140.383] CloseHandle (hObject=0x37c) returned 1 [0140.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshi.xml")) returned 0x20 [0140.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshi.xml")) returned 0x20 [0140.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshi.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.383] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshi.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.383] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.384] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=2652) returned 1 [0140.384] CloseHandle (hObject=0x37c) returned 1 [0140.384] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml")) returned 0x20 [0140.384] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml")) returned 0x20 [0140.384] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.384] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.384] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsid.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.384] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=2570) returned 1 [0140.384] CloseHandle (hObject=0x37c) returned 1 [0140.384] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsid.xml")) returned 0x20 [0140.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsid.xml")) returned 0x20 [0140.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsid.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.385] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsid.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.385] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.386] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=2526) returned 1 [0140.386] CloseHandle (hObject=0x37c) returned 1 [0140.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml")) returned 0x20 [0140.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml")) returned 0x20 [0140.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.388] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.388] SetEvent (hEvent=0x2e4) returned 1 [0140.388] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.388] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=2522) returned 1 [0140.388] CloseHandle (hObject=0x37c) returned 1 [0140.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml")) returned 0x20 [0140.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml")) returned 0x20 [0140.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.389] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.389] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.389] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=2568) returned 1 [0140.389] CloseHandle (hObject=0x37c) returned 1 [0140.389] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml")) returned 0x20 [0140.389] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml")) returned 0x20 [0140.389] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.389] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.390] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsMigrationPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsmigrationplugin.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.391] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=41984) returned 1 [0140.391] CloseHandle (hObject=0x37c) returned 1 [0140.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsMigrationPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsmigrationplugin.dll")) returned 0x20 [0140.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsMigrationPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsmigrationplugin.dll")) returned 0x20 [0140.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsMigrationPlugin.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsmigrationplugin.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.391] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsMigrationPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsmigrationplugin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.391] SetEvent (hEvent=0x2e4) returned 1 [0140.391] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.391] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=2626) returned 1 [0140.391] CloseHandle (hObject=0x37c) returned 1 [0140.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml")) returned 0x20 [0140.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml")) returned 0x20 [0140.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.392] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.392] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.393] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=2580) returned 1 [0140.393] CloseHandle (hObject=0x37c) returned 1 [0140.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml")) returned 0x20 [0140.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml")) returned 0x20 [0140.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.393] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.394] SetEvent (hEvent=0x2e4) returned 1 [0140.394] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.394] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=2600) returned 1 [0140.394] CloseHandle (hObject=0x37c) returned 1 [0140.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml")) returned 0x20 [0140.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml")) returned 0x20 [0140.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.394] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.394] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplugin.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.395] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=125952) returned 1 [0140.395] CloseHandle (hObject=0x37c) returned 1 [0140.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplugin.dll")) returned 0x20 [0140.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplugin.dll")) returned 0x20 [0140.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsPlugin.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplugin.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.395] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplugin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.395] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.395] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=2246) returned 1 [0140.395] CloseHandle (hObject=0x37c) returned 1 [0140.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml")) returned 0x20 [0140.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml")) returned 0x20 [0140.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.396] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=2240) returned 1 [0140.396] CloseHandle (hObject=0x37c) returned 1 [0140.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml")) returned 0x20 [0140.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml")) returned 0x20 [0140.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.397] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.398] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=2644) returned 1 [0140.398] CloseHandle (hObject=0x37c) returned 1 [0140.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml")) returned 0x20 [0140.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml")) returned 0x20 [0140.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.399] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.399] SetEvent (hEvent=0x2e4) returned 1 [0140.399] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.399] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=2542) returned 1 [0140.400] CloseHandle (hObject=0x37c) returned 1 [0140.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml")) returned 0x20 [0140.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml")) returned 0x20 [0140.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.400] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.400] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.400] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=2568) returned 1 [0140.400] CloseHandle (hObject=0x37c) returned 1 [0140.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml")) returned 0x20 [0140.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml")) returned 0x20 [0140.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.401] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.401] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.401] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=2596) returned 1 [0140.401] CloseHandle (hObject=0x37c) returned 1 [0140.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml")) returned 0x20 [0140.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml")) returned 0x20 [0140.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.401] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.401] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.403] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=2520) returned 1 [0140.403] CloseHandle (hObject=0x37c) returned 1 [0140.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml")) returned 0x20 [0140.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml")) returned 0x20 [0140.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.403] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.403] SetEvent (hEvent=0x2e4) returned 1 [0140.403] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipstr.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.403] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=2720) returned 1 [0140.403] CloseHandle (hObject=0x37c) returned 1 [0140.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipstr.xml")) returned 0x20 [0140.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipstr.xml")) returned 0x20 [0140.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipstr.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.404] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipstr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.404] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.405] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=10752) returned 1 [0140.405] CloseHandle (hObject=0x37c) returned 1 [0140.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it\\tipresx.dll.mui")) returned 0x20 [0140.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it\\tipresx.dll.mui")) returned 0x20 [0140.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.405] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.405] SetEvent (hEvent=0x2e4) returned 1 [0140.406] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.406] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=7680) returned 1 [0140.406] CloseHandle (hObject=0x37c) returned 1 [0140.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp\\tipresx.dll.mui")) returned 0x20 [0140.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp\\tipresx.dll.mui")) returned 0x20 [0140.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.406] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.406] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.407] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=7680) returned 1 [0140.407] CloseHandle (hObject=0x37c) returned 1 [0140.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr\\tipresx.dll.mui")) returned 0x20 [0140.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr\\tipresx.dll.mui")) returned 0x20 [0140.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.407] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.407] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\chstic.dgml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\languagemodel\\chstic.dgml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.670] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=763) returned 1 [0140.670] CloseHandle (hObject=0x378) returned 1 [0140.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\chstic.dgml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\languagemodel\\chstic.dgml")) returned 0x20 [0140.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\chstic.dgml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\languagemodel\\chstic.dgml")) returned 0x20 [0140.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\chstic.dgml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\languagemodel\\chstic.dgml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.670] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\chstic.dgml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\languagemodel\\chstic.dgml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.670] SetEvent (hEvent=0x2e4) returned 1 [0140.671] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.671] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=7168) returned 1 [0140.671] CloseHandle (hObject=0x378) returned 1 [0140.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw\\tipresx.dll.mui")) returned 0x20 [0140.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw\\tipresx.dll.mui")) returned 0x20 [0140.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.672] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.672] SetEvent (hEvent=0x2e4) returned 1 [0140.672] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\msinfo32.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\msinfo32.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.673] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=30720) returned 1 [0140.673] CloseHandle (hObject=0x378) returned 1 [0140.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\msinfo32.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\msinfo32.exe.mui")) returned 0x20 [0140.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\msinfo32.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\msinfo32.exe.mui")) returned 0x20 [0140.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\msinfo32.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\msinfo32.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.674] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\msinfo32.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\msinfo32.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.674] SetEvent (hEvent=0x2e4) returned 1 [0140.674] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\msinfo32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\msinfo32.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.675] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=370176) returned 1 [0140.675] CloseHandle (hObject=0x378) returned 1 [0140.675] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\msinfo32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\msinfo32.exe")) returned 0x20 [0140.675] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\msinfo32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\msinfo32.exe")) returned 0x20 [0140.675] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\msinfo32.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\msinfo32.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.675] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\msinfo32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\msinfo32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.675] SetEvent (hEvent=0x2e4) returned 1 [0140.675] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.676] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=363728) returned 1 [0140.676] CloseHandle (hObject=0x378) returned 1 [0140.676] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe")) returned 0x20 [0140.676] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe")) returned 0x20 [0140.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.677] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.677] SetEvent (hEvent=0x2e4) returned 1 [0140.677] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pidgenx.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.678] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=1475160) returned 1 [0140.679] CloseHandle (hObject=0x378) returned 1 [0140.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pidgenx.dll")) returned 0x20 [0140.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pidgenx.dll")) returned 0x20 [0140.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pidgenx.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.679] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pidgenx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.679] SetEvent (hEvent=0x2e4) returned 1 [0140.679] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.680] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=590523) returned 1 [0140.680] CloseHandle (hObject=0x378) returned 1 [0140.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms")) returned 0x20 [0140.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms")) returned 0x20 [0140.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.680] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.681] SetEvent (hEvent=0x2e4) returned 1 [0140.681] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig.companion.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.682] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=18624) returned 1 [0140.682] CloseHandle (hObject=0x378) returned 1 [0140.682] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig.companion.dll")) returned 0x20 [0140.682] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig.companion.dll")) returned 0x20 [0140.682] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig.companion.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.682] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig.companion.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.682] SetEvent (hEvent=0x2e4) returned 1 [0140.682] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.683] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=244296) returned 1 [0140.683] CloseHandle (hObject=0x378) returned 1 [0140.683] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe")) returned 0x20 [0140.683] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe")) returned 0x20 [0140.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.684] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.684] SetEvent (hEvent=0x2e4) returned 1 [0140.684] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.685] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=255) returned 1 [0140.686] CloseHandle (hObject=0x378) returned 1 [0140.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm")) returned 0x20 [0140.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm")) returned 0x20 [0140.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.686] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.686] SetEvent (hEvent=0x2e4) returned 1 [0140.686] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.688] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=1074) returned 1 [0140.688] CloseHandle (hObject=0x378) returned 1 [0140.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg")) returned 0x20 [0140.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg")) returned 0x20 [0140.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.688] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.688] SetEvent (hEvent=0x2e4) returned 1 [0140.688] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.689] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=645) returned 1 [0140.689] CloseHandle (hObject=0x378) returned 1 [0140.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini")) returned 0x26 [0140.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini")) returned 0x26 [0140.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.689] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.690] SetEvent (hEvent=0x2e4) returned 1 [0140.690] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.691] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=231) returned 1 [0140.691] CloseHandle (hObject=0x378) returned 1 [0140.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm")) returned 0x20 [0140.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm")) returned 0x20 [0140.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.691] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.691] SetEvent (hEvent=0x2e4) returned 1 [0140.691] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.692] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=23871) returned 1 [0140.692] CloseHandle (hObject=0x378) returned 1 [0140.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg")) returned 0x20 [0140.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg")) returned 0x20 [0140.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.693] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.693] SetEvent (hEvent=0x2e4) returned 1 [0140.693] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.693] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=237) returned 1 [0140.693] CloseHandle (hObject=0x378) returned 1 [0140.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm")) returned 0x20 [0140.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm")) returned 0x20 [0140.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.693] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.694] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.698] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=6406) returned 1 [0140.698] CloseHandle (hObject=0x378) returned 1 [0140.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg")) returned 0x20 [0140.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg")) returned 0x20 [0140.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.698] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.698] SetEvent (hEvent=0x2e4) returned 1 [0140.699] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.699] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=235) returned 1 [0140.699] CloseHandle (hObject=0x378) returned 1 [0140.699] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm")) returned 0x20 [0140.700] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm")) returned 0x20 [0140.700] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.700] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.700] SetEvent (hEvent=0x2e4) returned 1 [0140.700] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.701] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=4222) returned 1 [0140.701] CloseHandle (hObject=0x378) returned 1 [0140.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg")) returned 0x20 [0140.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg")) returned 0x20 [0140.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.701] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.701] SetEvent (hEvent=0x2e4) returned 1 [0140.701] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.702] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=237) returned 1 [0140.702] CloseHandle (hObject=0x378) returned 1 [0140.702] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm")) returned 0x20 [0140.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm")) returned 0x20 [0140.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.703] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.703] SetEvent (hEvent=0x2e4) returned 1 [0140.703] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.704] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=6381) returned 1 [0140.704] CloseHandle (hObject=0x378) returned 1 [0140.704] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg")) returned 0x20 [0140.704] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg")) returned 0x20 [0140.704] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.704] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.704] SetEvent (hEvent=0x2e4) returned 1 [0140.704] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.705] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=232) returned 1 [0140.705] CloseHandle (hObject=0x378) returned 1 [0140.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm")) returned 0x20 [0140.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm")) returned 0x20 [0140.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.705] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.705] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.706] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=5115) returned 1 [0140.706] CloseHandle (hObject=0x378) returned 1 [0140.706] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg")) returned 0x20 [0140.706] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg")) returned 0x20 [0140.707] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.707] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.707] SetEvent (hEvent=0x2e4) returned 1 [0140.707] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.708] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=233) returned 1 [0140.708] CloseHandle (hObject=0x378) returned 1 [0140.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.htm")) returned 0x20 [0140.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.htm")) returned 0x20 [0140.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.htm.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.708] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.708] SetEvent (hEvent=0x2e4) returned 1 [0140.708] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.709] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=1920) returned 1 [0140.709] CloseHandle (hObject=0x378) returned 1 [0140.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg")) returned 0x20 [0140.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg")) returned 0x20 [0140.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.710] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.710] SetEvent (hEvent=0x2e4) returned 1 [0140.710] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Shades of Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shades of blue.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.711] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=237) returned 1 [0140.711] CloseHandle (hObject=0x378) returned 1 [0140.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Shades of Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shades of blue.htm")) returned 0x20 [0140.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Shades of Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shades of blue.htm")) returned 0x20 [0140.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Shades of Blue.htm.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shades of blue.htm.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.711] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Shades of Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shades of blue.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.711] SetEvent (hEvent=0x2e4) returned 1 [0140.711] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.712] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=4734) returned 1 [0140.712] CloseHandle (hObject=0x378) returned 1 [0140.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg")) returned 0x20 [0140.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg")) returned 0x20 [0140.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.713] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.713] SetEvent (hEvent=0x2e4) returned 1 [0140.713] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Soft Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\soft blue.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.713] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=232) returned 1 [0140.713] CloseHandle (hObject=0x378) returned 1 [0140.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Soft Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\soft blue.htm")) returned 0x20 [0140.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Soft Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\soft blue.htm")) returned 0x20 [0140.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Soft Blue.htm.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\soft blue.htm.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.714] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Soft Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\soft blue.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.714] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.785] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=10569) returned 1 [0140.785] CloseHandle (hObject=0x378) returned 1 [0140.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg")) returned 0x20 [0140.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg")) returned 0x20 [0140.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.786] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.786] SetEvent (hEvent=0x2e4) returned 1 [0140.787] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adovbs.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.788] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=15195) returned 1 [0140.788] CloseHandle (hObject=0x378) returned 1 [0140.788] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adovbs.inc")) returned 0x20 [0140.788] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adovbs.inc")) returned 0x20 [0140.788] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ado\\adovbs.inc.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.788] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adovbs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.788] SetEvent (hEvent=0x2e4) returned 1 [0140.789] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\msader15.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.791] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=17920) returned 1 [0140.791] CloseHandle (hObject=0x378) returned 1 [0140.791] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\msader15.dll.mui")) returned 0x20 [0140.791] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\msader15.dll.mui")) returned 0x20 [0140.791] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\msader15.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.791] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\msader15.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.791] SetEvent (hEvent=0x2e4) returned 1 [0140.791] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msader15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msader15.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.794] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=2560) returned 1 [0140.795] CloseHandle (hObject=0x378) returned 1 [0140.795] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msader15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msader15.dll")) returned 0x20 [0140.795] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msader15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msader15.dll")) returned 0x20 [0140.795] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msader15.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ado\\msader15.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.795] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msader15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msader15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.795] SetEvent (hEvent=0x2e4) returned 1 [0140.795] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msado15.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.796] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=1233920) returned 1 [0140.796] CloseHandle (hObject=0x378) returned 1 [0140.796] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msado15.dll")) returned 0x20 [0140.796] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msado15.dll")) returned 0x20 [0140.796] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado15.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ado\\msado15.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.796] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msado15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.796] SetEvent (hEvent=0x2e4) returned 1 [0140.797] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado20.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.797] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=50688) returned 1 [0140.797] CloseHandle (hObject=0x378) returned 1 [0140.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado20.tlb")) returned 0x20 [0140.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado20.tlb")) returned 0x20 [0140.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ado\\msado20.tlb.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.798] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado20.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.798] SetEvent (hEvent=0x2e4) returned 1 [0140.798] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado21.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.798] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=53760) returned 1 [0140.798] CloseHandle (hObject=0x378) returned 1 [0140.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado21.tlb")) returned 0x20 [0140.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado21.tlb")) returned 0x20 [0140.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ado\\msado21.tlb.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.799] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado21.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.799] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado25.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.800] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=69632) returned 1 [0140.800] CloseHandle (hObject=0x378) returned 1 [0140.800] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado25.tlb")) returned 0x20 [0140.800] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado25.tlb")) returned 0x20 [0140.800] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ado\\msado25.tlb.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.800] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado25.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.800] SetEvent (hEvent=0x2e4) returned 1 [0140.800] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado26.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.801] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=70656) returned 1 [0140.801] CloseHandle (hObject=0x378) returned 1 [0140.801] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado26.tlb")) returned 0x20 [0140.801] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado26.tlb")) returned 0x20 [0140.801] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ado\\msado26.tlb.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.801] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado26.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.801] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado27.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.802] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=71168) returned 1 [0140.802] CloseHandle (hObject=0x378) returned 1 [0140.802] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado27.tlb")) returned 0x20 [0140.802] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado27.tlb")) returned 0x20 [0140.802] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ado\\msado27.tlb.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.802] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado27.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.803] SetEvent (hEvent=0x2e4) returned 1 [0140.803] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado28.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.803] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=70656) returned 1 [0140.803] CloseHandle (hObject=0x378) returned 1 [0140.803] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado28.tlb")) returned 0x20 [0140.803] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado28.tlb")) returned 0x20 [0140.803] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ado\\msado28.tlb.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.803] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.803] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado60.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.804] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=70656) returned 1 [0140.804] CloseHandle (hObject=0x378) returned 1 [0140.805] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado60.tlb")) returned 0x20 [0140.805] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado60.tlb")) returned 0x20 [0140.805] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ado\\msado60.tlb.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.805] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado60.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.805] SetEvent (hEvent=0x2e4) returned 1 [0140.805] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.806] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=364032) returned 1 [0140.806] CloseHandle (hObject=0x378) returned 1 [0140.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd.dll")) returned 0x20 [0140.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd.dll")) returned 0x20 [0140.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.806] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.807] SetEvent (hEvent=0x2e4) returned 1 [0140.807] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd28.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.807] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=13824) returned 1 [0140.807] CloseHandle (hObject=0x378) returned 1 [0140.807] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd28.tlb")) returned 0x20 [0140.807] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd28.tlb")) returned 0x20 [0140.807] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd28.tlb.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.807] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.807] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msador15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msador15.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.808] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=45568) returned 1 [0140.808] CloseHandle (hObject=0x378) returned 1 [0140.808] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msador15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msador15.dll")) returned 0x20 [0140.808] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msador15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msador15.dll")) returned 0x20 [0140.809] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msador15.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ado\\msador15.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.809] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msador15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msador15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.809] SetEvent (hEvent=0x2e4) returned 1 [0140.809] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msador28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msador28.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.810] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=35840) returned 1 [0140.810] CloseHandle (hObject=0x378) returned 1 [0140.810] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msador28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msador28.tlb")) returned 0x20 [0140.810] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msador28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msador28.tlb")) returned 0x20 [0140.810] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msador28.tlb.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ado\\msador28.tlb.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.810] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msador28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msador28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.810] SetEvent (hEvent=0x2e4) returned 1 [0140.810] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadox.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.811] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=404992) returned 1 [0140.811] CloseHandle (hObject=0x378) returned 1 [0140.811] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadox.dll")) returned 0x20 [0140.811] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadox.dll")) returned 0x20 [0140.811] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ado\\msadox.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.811] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadox.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.811] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadox28.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.811] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=24576) returned 1 [0140.811] CloseHandle (hObject=0x378) returned 1 [0140.811] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadox28.tlb")) returned 0x20 [0140.812] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadox28.tlb")) returned 0x20 [0140.812] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ado\\msadox28.tlb.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.812] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadox28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.812] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadrh15.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.813] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=91136) returned 1 [0140.813] CloseHandle (hObject=0x378) returned 1 [0140.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadrh15.dll")) returned 0x20 [0140.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadrh15.dll")) returned 0x20 [0140.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ado\\msadrh15.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.813] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadrh15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.814] SetEvent (hEvent=0x2e4) returned 1 [0140.814] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\DirectDB.dll" (normalized: "c:\\program files\\common files\\system\\directdb.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.814] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=32768) returned 1 [0140.814] CloseHandle (hObject=0x378) returned 1 [0140.815] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\DirectDB.dll" (normalized: "c:\\program files\\common files\\system\\directdb.dll")) returned 0x20 [0140.815] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\DirectDB.dll" (normalized: "c:\\program files\\common files\\system\\directdb.dll")) returned 0x20 [0140.815] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\DirectDB.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\directdb.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.815] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\DirectDB.dll" (normalized: "c:\\program files\\common files\\system\\directdb.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.815] SetEvent (hEvent=0x2e4) returned 1 [0140.815] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\en-US\\wab32res.dll.mui" (normalized: "c:\\program files\\common files\\system\\en-us\\wab32res.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.816] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=94208) returned 1 [0140.816] CloseHandle (hObject=0x378) returned 1 [0140.816] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\en-US\\wab32res.dll.mui" (normalized: "c:\\program files\\common files\\system\\en-us\\wab32res.dll.mui")) returned 0x20 [0140.816] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\en-US\\wab32res.dll.mui" (normalized: "c:\\program files\\common files\\system\\en-us\\wab32res.dll.mui")) returned 0x20 [0140.816] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\en-US\\wab32res.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\en-us\\wab32res.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.816] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\en-US\\wab32res.dll.mui" (normalized: "c:\\program files\\common files\\system\\en-us\\wab32res.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.816] SetEvent (hEvent=0x2e4) returned 1 [0140.817] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcjavas.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.819] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=630) returned 1 [0140.819] CloseHandle (hObject=0x378) returned 1 [0140.819] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcjavas.inc")) returned 0x20 [0140.819] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcjavas.inc")) returned 0x20 [0140.819] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\msadc\\adcjavas.inc.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.819] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcjavas.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.819] SetEvent (hEvent=0x2e4) returned 1 [0140.819] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcvbs.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.819] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=623) returned 1 [0140.819] CloseHandle (hObject=0x378) returned 1 [0140.819] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcvbs.inc")) returned 0x20 [0140.819] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcvbs.inc")) returned 0x20 [0140.820] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\msadc\\adcvbs.inc.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.820] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcvbs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.820] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcer.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.821] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=10240) returned 1 [0140.821] CloseHandle (hObject=0x378) returned 1 [0140.821] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcer.dll.mui")) returned 0x20 [0140.821] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcer.dll.mui")) returned 0x20 [0140.821] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcer.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.821] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcer.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.821] SetEvent (hEvent=0x2e4) returned 1 [0140.821] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcor.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcor.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.822] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=6144) returned 1 [0140.822] CloseHandle (hObject=0x378) returned 1 [0140.823] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcor.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcor.dll.mui")) returned 0x20 [0140.823] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcor.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcor.dll.mui")) returned 0x20 [0140.823] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcor.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcor.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.823] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcor.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcor.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.823] SetEvent (hEvent=0x2e4) returned 1 [0140.823] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msaddsr.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.823] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=14336) returned 1 [0140.823] CloseHandle (hObject=0x378) returned 1 [0140.823] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msaddsr.dll.mui")) returned 0x20 [0140.823] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msaddsr.dll.mui")) returned 0x20 [0140.823] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msaddsr.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.823] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msaddsr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.824] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaprsr.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.825] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=7680) returned 1 [0140.825] CloseHandle (hObject=0x378) returned 1 [0140.825] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaprsr.dll.mui")) returned 0x20 [0140.825] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaprsr.dll.mui")) returned 0x20 [0140.825] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaprsr.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.825] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaprsr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.825] SetEvent (hEvent=0x2e4) returned 1 [0140.825] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaremr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaremr.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.825] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=6144) returned 1 [0140.826] CloseHandle (hObject=0x378) returned 1 [0140.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaremr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaremr.dll.mui")) returned 0x20 [0140.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaremr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaremr.dll.mui")) returned 0x20 [0140.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaremr.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaremr.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.826] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaremr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaremr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.826] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadce.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadce.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.827] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=695296) returned 1 [0140.827] CloseHandle (hObject=0x378) returned 1 [0140.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadce.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadce.dll")) returned 0x20 [0140.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadce.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadce.dll")) returned 0x20 [0140.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadce.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\msadc\\msadce.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.827] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadce.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadce.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.827] SetEvent (hEvent=0x2e4) returned 1 [0140.828] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcer.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcer.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.828] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=2560) returned 1 [0140.828] CloseHandle (hObject=0x378) returned 1 [0140.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcer.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcer.dll")) returned 0x20 [0140.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcer.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcer.dll")) returned 0x20 [0140.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcer.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcer.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.829] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcer.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcer.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.829] SetEvent (hEvent=0x2e4) returned 1 [0140.829] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadco.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadco.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.829] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=242688) returned 1 [0140.829] CloseHandle (hObject=0x378) returned 1 [0140.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadco.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadco.dll")) returned 0x20 [0140.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadco.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadco.dll")) returned 0x20 [0140.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadco.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\msadc\\msadco.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.830] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadco.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadco.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.830] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcor.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcor.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.831] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=2560) returned 1 [0140.831] CloseHandle (hObject=0x378) returned 1 [0140.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcor.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcor.dll")) returned 0x20 [0140.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcor.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcor.dll")) returned 0x20 [0141.201] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcor.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcor.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.202] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcor.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcor.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.202] SetEvent (hEvent=0x2e4) returned 1 [0141.202] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\hmmapi.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0141.203] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=2560) returned 1 [0141.204] CloseHandle (hObject=0x348) returned 1 [0141.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\hmmapi.dll.mui")) returned 0x20 [0141.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\hmmapi.dll.mui")) returned 0x20 [0141.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\internet explorer\\en-us\\hmmapi.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.204] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\hmmapi.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.204] SetEvent (hEvent=0x2e4) returned 1 [0141.204] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\ieinstal.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\ieinstal.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0141.205] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=2560) returned 1 [0141.205] CloseHandle (hObject=0x348) returned 1 [0141.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\ieinstal.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\ieinstal.exe.mui")) returned 0x20 [0141.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\ieinstal.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\ieinstal.exe.mui")) returned 0x20 [0141.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\ieinstal.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\internet explorer\\en-us\\ieinstal.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.205] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\ieinstal.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\ieinstal.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.205] SetEvent (hEvent=0x2e4) returned 1 [0141.205] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\iexplore.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\iexplore.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0141.206] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=5632) returned 1 [0141.206] CloseHandle (hObject=0x348) returned 1 [0141.206] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\iexplore.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\iexplore.exe.mui")) returned 0x20 [0141.207] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\iexplore.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\iexplore.exe.mui")) returned 0x20 [0141.207] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\iexplore.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\internet explorer\\en-us\\iexplore.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.207] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\iexplore.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\iexplore.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.207] SetEvent (hEvent=0x2e4) returned 1 [0141.207] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ExtExport.exe" (normalized: "c:\\program files\\internet explorer\\extexport.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0141.208] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=53248) returned 1 [0141.208] CloseHandle (hObject=0x348) returned 1 [0141.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ExtExport.exe" (normalized: "c:\\program files\\internet explorer\\extexport.exe")) returned 0x20 [0141.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ExtExport.exe" (normalized: "c:\\program files\\internet explorer\\extexport.exe")) returned 0x20 [0141.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ExtExport.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\internet explorer\\extexport.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.208] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ExtExport.exe" (normalized: "c:\\program files\\internet explorer\\extexport.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.208] SetEvent (hEvent=0x2e4) returned 1 [0141.208] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\hmmapi.dll" (normalized: "c:\\program files\\internet explorer\\hmmapi.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0141.209] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=54272) returned 1 [0141.209] CloseHandle (hObject=0x348) returned 1 [0141.209] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\hmmapi.dll" (normalized: "c:\\program files\\internet explorer\\hmmapi.dll")) returned 0x20 [0141.209] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\hmmapi.dll" (normalized: "c:\\program files\\internet explorer\\hmmapi.dll")) returned 0x20 [0141.209] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\hmmapi.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\internet explorer\\hmmapi.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.209] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\hmmapi.dll" (normalized: "c:\\program files\\internet explorer\\hmmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.209] SetEvent (hEvent=0x2e4) returned 1 [0141.209] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iediagcmd.exe" (normalized: "c:\\program files\\internet explorer\\iediagcmd.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0141.210] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=512000) returned 1 [0141.210] CloseHandle (hObject=0x348) returned 1 [0141.210] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iediagcmd.exe" (normalized: "c:\\program files\\internet explorer\\iediagcmd.exe")) returned 0x20 [0141.210] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iediagcmd.exe" (normalized: "c:\\program files\\internet explorer\\iediagcmd.exe")) returned 0x20 [0141.210] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iediagcmd.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\internet explorer\\iediagcmd.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.210] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iediagcmd.exe" (normalized: "c:\\program files\\internet explorer\\iediagcmd.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.211] SetEvent (hEvent=0x2e4) returned 1 [0141.211] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ieinstal.exe" (normalized: "c:\\program files\\internet explorer\\ieinstal.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0141.211] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=501760) returned 1 [0141.211] CloseHandle (hObject=0x348) returned 1 [0141.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ieinstal.exe" (normalized: "c:\\program files\\internet explorer\\ieinstal.exe")) returned 0x20 [0141.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ieinstal.exe" (normalized: "c:\\program files\\internet explorer\\ieinstal.exe")) returned 0x20 [0141.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ieinstal.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\internet explorer\\ieinstal.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.211] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ieinstal.exe" (normalized: "c:\\program files\\internet explorer\\ieinstal.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.211] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ielowutil.exe" (normalized: "c:\\program files\\internet explorer\\ielowutil.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0141.212] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=224256) returned 1 [0141.212] CloseHandle (hObject=0x348) returned 1 [0141.212] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ielowutil.exe" (normalized: "c:\\program files\\internet explorer\\ielowutil.exe")) returned 0x20 [0141.212] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ielowutil.exe" (normalized: "c:\\program files\\internet explorer\\ielowutil.exe")) returned 0x20 [0141.212] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ielowutil.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\internet explorer\\ielowutil.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.212] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ielowutil.exe" (normalized: "c:\\program files\\internet explorer\\ielowutil.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.213] SetEvent (hEvent=0x2e4) returned 1 [0141.213] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\IEShims.dll" (normalized: "c:\\program files\\internet explorer\\ieshims.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0141.213] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=407552) returned 1 [0141.213] CloseHandle (hObject=0x348) returned 1 [0141.214] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\IEShims.dll" (normalized: "c:\\program files\\internet explorer\\ieshims.dll")) returned 0x20 [0141.214] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\IEShims.dll" (normalized: "c:\\program files\\internet explorer\\ieshims.dll")) returned 0x20 [0141.214] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\IEShims.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\internet explorer\\ieshims.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.214] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\IEShims.dll" (normalized: "c:\\program files\\internet explorer\\ieshims.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.214] SetEvent (hEvent=0x2e4) returned 1 [0141.214] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files\\internet explorer\\iexplore.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0141.215] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=824128) returned 1 [0141.215] CloseHandle (hObject=0x348) returned 1 [0141.215] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files\\internet explorer\\iexplore.exe")) returned 0x20 [0141.215] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files\\internet explorer\\iexplore.exe")) returned 0x20 [0141.215] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iexplore.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\internet explorer\\iexplore.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.215] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files\\internet explorer\\iexplore.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.215] SetEvent (hEvent=0x2e4) returned 1 [0141.215] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\images\\bing.ico" (normalized: "c:\\program files\\internet explorer\\images\\bing.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0141.216] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=5430) returned 1 [0141.216] CloseHandle (hObject=0x348) returned 1 [0141.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\images\\bing.ico" (normalized: "c:\\program files\\internet explorer\\images\\bing.ico")) returned 0x20 [0141.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\images\\bing.ico" (normalized: "c:\\program files\\internet explorer\\images\\bing.ico")) returned 0x20 [0141.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\images\\bing.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\internet explorer\\images\\bing.ico.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.216] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\images\\bing.ico" (normalized: "c:\\program files\\internet explorer\\images\\bing.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.216] SetEvent (hEvent=0x2e4) returned 1 [0141.216] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0141.218] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=452) returned 1 [0141.218] CloseHandle (hObject=0x348) returned 1 [0141.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins")) returned 0x20 [0141.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins")) returned 0x20 [0141.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.218] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.218] SetEvent (hEvent=0x2e4) returned 1 [0141.218] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\sqmapi.dll" (normalized: "c:\\program files\\internet explorer\\sqmapi.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0141.220] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=49688) returned 1 [0141.220] CloseHandle (hObject=0x348) returned 1 [0141.220] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\sqmapi.dll" (normalized: "c:\\program files\\internet explorer\\sqmapi.dll")) returned 0x20 [0141.220] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\sqmapi.dll" (normalized: "c:\\program files\\internet explorer\\sqmapi.dll")) returned 0x20 [0141.220] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\sqmapi.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\internet explorer\\sqmapi.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.220] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\sqmapi.dll" (normalized: "c:\\program files\\internet explorer\\sqmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.220] SetEvent (hEvent=0x2e4) returned 1 [0141.220] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\treaty.exe" (normalized: "c:\\program files\\internet explorer\\treaty.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0141.221] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=75776) returned 1 [0141.221] CloseHandle (hObject=0x348) returned 1 [0141.221] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\treaty.exe" (normalized: "c:\\program files\\internet explorer\\treaty.exe")) returned 0x20 [0141.221] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\treaty.exe" (normalized: "c:\\program files\\internet explorer\\treaty.exe")) returned 0x20 [0141.221] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\treaty.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\internet explorer\\treaty.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.221] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\treaty.exe" (normalized: "c:\\program files\\internet explorer\\treaty.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.221] SetEvent (hEvent=0x2e4) returned 1 [0141.221] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\awt.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0141.225] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=1516608) returned 1 [0141.225] CloseHandle (hObject=0x348) returned 1 [0141.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\awt.dll")) returned 0x20 [0141.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\awt.dll")) returned 0x20 [0141.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\awt.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.226] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\awt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.226] SetEvent (hEvent=0x2e4) returned 1 [0141.226] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\bci.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0141.227] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=16960) returned 1 [0141.227] CloseHandle (hObject=0x348) returned 1 [0141.227] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\bci.dll")) returned 0x20 [0141.227] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\bci.dll")) returned 0x20 [0141.227] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\bci.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.227] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\bci.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.227] SetEvent (hEvent=0x2e4) returned 1 [0141.228] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dcpr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0141.228] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=159808) returned 1 [0141.228] CloseHandle (hObject=0x348) returned 1 [0141.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dcpr.dll")) returned 0x20 [0141.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dcpr.dll")) returned 0x20 [0141.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dcpr.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.228] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dcpr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.228] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\decora_sse.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0141.229] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=86080) returned 1 [0141.229] CloseHandle (hObject=0x348) returned 1 [0141.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\decora_sse.dll")) returned 0x20 [0141.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\decora_sse.dll")) returned 0x20 [0141.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\decora_sse.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.230] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\decora_sse.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.230] SetEvent (hEvent=0x2e4) returned 1 [0141.230] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0141.231] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=587840) returned 1 [0141.231] CloseHandle (hObject=0x348) returned 1 [0141.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll")) returned 0x20 [0141.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll")) returned 0x20 [0141.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.231] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.231] SetEvent (hEvent=0x2e4) returned 1 [0141.231] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0141.232] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=1026112) returned 1 [0141.232] CloseHandle (hObject=0x348) returned 1 [0141.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll")) returned 0x20 [0141.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll")) returned 0x20 [0141.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.232] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.232] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\npdeployjava1.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0141.233] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=1156672) returned 1 [0141.233] CloseHandle (hObject=0x348) returned 1 [0141.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\npdeployjava1.dll")) returned 0x20 [0141.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\npdeployjava1.dll")) returned 0x20 [0141.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\npdeployjava1.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.233] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\npdeployjava1.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.233] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_shmem.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0141.234] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=29760) returned 1 [0141.234] CloseHandle (hObject=0x348) returned 1 [0141.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_shmem.dll")) returned 0x20 [0141.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_shmem.dll")) returned 0x20 [0141.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_shmem.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.235] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_shmem.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.235] SetEvent (hEvent=0x2e4) returned 1 [0141.235] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_socket.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0141.235] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=24640) returned 1 [0141.235] CloseHandle (hObject=0x348) returned 1 [0141.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_socket.dll")) returned 0x20 [0141.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_socket.dll")) returned 0x20 [0141.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_socket.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.236] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_socket.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.236] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\eula.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0141.236] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=136256) returned 1 [0141.236] CloseHandle (hObject=0x348) returned 1 [0141.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\eula.dll")) returned 0x20 [0141.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\eula.dll")) returned 0x20 [0141.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\eula.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.236] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\eula.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.237] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fontmanager.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0141.238] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=274496) returned 1 [0141.238] CloseHandle (hObject=0x348) returned 1 [0141.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fontmanager.dll")) returned 0x20 [0141.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fontmanager.dll")) returned 0x20 [0141.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fontmanager.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.238] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fontmanager.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.238] SetEvent (hEvent=0x2e4) returned 1 [0141.238] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fxplugins.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0141.239] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=186944) returned 1 [0141.239] CloseHandle (hObject=0x348) returned 1 [0141.239] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fxplugins.dll")) returned 0x20 [0141.239] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fxplugins.dll")) returned 0x20 [0141.239] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fxplugins.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.240] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fxplugins.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.459] SetEvent (hEvent=0x2e4) returned 1 [0141.459] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jli.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jli.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0141.464] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=174656) returned 1 [0141.465] CloseHandle (hObject=0x364) returned 1 [0141.465] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jli.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jli.dll")) returned 0x20 [0141.465] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jli.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jli.dll")) returned 0x20 [0141.465] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jli.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jli.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.465] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jli.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jli.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.466] SetEvent (hEvent=0x2e4) returned 1 [0141.466] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2iexp.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0141.466] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=296000) returned 1 [0141.466] CloseHandle (hObject=0x364) returned 1 [0141.466] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2iexp.dll")) returned 0x20 [0141.466] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2iexp.dll")) returned 0x20 [0141.466] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2iexp.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.466] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2iexp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.467] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2launcher.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0141.468] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=112192) returned 1 [0141.468] CloseHandle (hObject=0x364) returned 1 [0141.468] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2launcher.exe")) returned 0x20 [0141.468] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2launcher.exe")) returned 0x20 [0141.468] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2launcher.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.468] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2launcher.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.468] SetEvent (hEvent=0x2e4) returned 1 [0141.468] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2native.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0141.469] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=20032) returned 1 [0141.469] CloseHandle (hObject=0x364) returned 1 [0141.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2native.dll")) returned 0x20 [0141.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2native.dll")) returned 0x20 [0141.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2native.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.469] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2native.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.470] SetEvent (hEvent=0x2e4) returned 1 [0141.470] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2ssv.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0141.470] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=235584) returned 1 [0141.470] CloseHandle (hObject=0x364) returned 1 [0141.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2ssv.dll")) returned 0x20 [0141.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2ssv.dll")) returned 0x20 [0141.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2ssv.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2ssv.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.470] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2ssv.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.471] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jpeg.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jpeg.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0141.471] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=185920) returned 1 [0141.471] CloseHandle (hObject=0x364) returned 1 [0141.472] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jpeg.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jpeg.dll")) returned 0x20 [0141.472] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jpeg.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jpeg.dll")) returned 0x20 [0141.472] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jpeg.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jpeg.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.472] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jpeg.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jpeg.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.472] SetEvent (hEvent=0x2e4) returned 1 [0141.472] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsdt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsdt.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0141.473] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=18496) returned 1 [0141.473] CloseHandle (hObject=0x364) returned 1 [0141.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsdt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsdt.dll")) returned 0x20 [0141.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsdt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsdt.dll")) returned 0x20 [0141.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsdt.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsdt.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.473] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsdt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsdt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.473] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsound.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsound.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0141.474] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=35392) returned 1 [0141.474] CloseHandle (hObject=0x364) returned 1 [0141.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsound.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsound.dll")) returned 0x20 [0141.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsound.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsound.dll")) returned 0x20 [0141.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsound.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsound.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.474] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsound.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsound.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.474] SetEvent (hEvent=0x2e4) returned 1 [0141.475] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsoundds.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsoundds.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0141.475] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=31296) returned 1 [0141.475] CloseHandle (hObject=0x364) returned 1 [0141.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsoundds.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsoundds.dll")) returned 0x20 [0141.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsoundds.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsoundds.dll")) returned 0x20 [0141.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsoundds.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsoundds.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.475] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsoundds.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsoundds.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.476] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kcms.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0141.476] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=220736) returned 1 [0141.476] CloseHandle (hObject=0x364) returned 1 [0141.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kcms.dll")) returned 0x20 [0141.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kcms.dll")) returned 0x20 [0141.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kcms.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kcms.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.476] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kcms.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.477] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\keytool.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0141.477] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=16448) returned 1 [0141.477] CloseHandle (hObject=0x364) returned 1 [0141.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\keytool.exe")) returned 0x20 [0141.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\keytool.exe")) returned 0x20 [0141.478] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\keytool.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.478] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\keytool.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.478] SetEvent (hEvent=0x2e4) returned 1 [0141.478] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kinit.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0141.478] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=16448) returned 1 [0141.478] CloseHandle (hObject=0x364) returned 1 [0141.478] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kinit.exe")) returned 0x20 [0141.478] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kinit.exe")) returned 0x20 [0141.478] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kinit.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.479] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kinit.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.479] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\klist.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0141.479] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=16448) returned 1 [0141.479] CloseHandle (hObject=0x364) returned 1 [0141.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\klist.exe")) returned 0x20 [0141.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\klist.exe")) returned 0x20 [0141.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\klist.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.480] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\klist.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.480] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ktab.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0141.480] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=16448) returned 1 [0141.480] CloseHandle (hObject=0x364) returned 1 [0141.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ktab.exe")) returned 0x20 [0141.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ktab.exe")) returned 0x20 [0141.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ktab.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.480] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ktab.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.481] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\lcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\lcms.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0141.481] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=233536) returned 1 [0141.481] CloseHandle (hObject=0x364) returned 1 [0141.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\lcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\lcms.dll")) returned 0x20 [0141.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\lcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\lcms.dll")) returned 0x20 [0141.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\lcms.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\lcms.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.482] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\lcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\lcms.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.482] SetEvent (hEvent=0x2e4) returned 1 [0141.482] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\management.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\management.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0141.482] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=36928) returned 1 [0141.482] CloseHandle (hObject=0x364) returned 1 [0141.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\management.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\management.dll")) returned 0x20 [0141.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\management.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\management.dll")) returned 0x20 [0141.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\management.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\management.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.483] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\management.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\management.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.483] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\mlib_image.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0141.484] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=653888) returned 1 [0141.484] CloseHandle (hObject=0x364) returned 1 [0141.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\mlib_image.dll")) returned 0x20 [0141.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\mlib_image.dll")) returned 0x20 [0141.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\mlib_image.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.484] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\mlib_image.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.484] SetEvent (hEvent=0x2e4) returned 1 [0141.484] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcp120.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0141.485] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=660128) returned 1 [0141.485] CloseHandle (hObject=0x364) returned 1 [0141.485] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcp120.dll")) returned 0x20 [0141.485] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcp120.dll")) returned 0x20 [0141.485] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcp120.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.485] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcp120.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.485] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr100.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0141.486] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=829264) returned 1 [0141.486] CloseHandle (hObject=0x364) returned 1 [0141.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr100.dll")) returned 0x20 [0141.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr100.dll")) returned 0x20 [0141.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr100.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.486] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr100.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.486] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr120.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0141.486] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=963232) returned 1 [0141.486] CloseHandle (hObject=0x364) returned 1 [0141.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr120.dll")) returned 0x20 [0141.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr120.dll")) returned 0x20 [0141.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr120.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.487] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr120.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.489] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\net.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\net.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0141.490] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=96832) returned 1 [0141.490] CloseHandle (hObject=0x364) returned 1 [0141.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\net.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\net.dll")) returned 0x20 [0141.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\net.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\net.dll")) returned 0x20 [0141.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\net.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\net.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.490] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\net.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\net.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.490] SetEvent (hEvent=0x2e4) returned 1 [0141.491] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\nio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\nio.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0141.491] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=60480) returned 1 [0141.491] CloseHandle (hObject=0x364) returned 1 [0141.491] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\nio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\nio.dll")) returned 0x20 [0141.491] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\nio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\nio.dll")) returned 0x20 [0141.491] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\nio.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\nio.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.492] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\nio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\nio.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.492] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\npt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\npt.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0141.492] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=19008) returned 1 [0141.492] CloseHandle (hObject=0x364) returned 1 [0141.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\npt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\npt.dll")) returned 0x20 [0141.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\npt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\npt.dll")) returned 0x20 [0141.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\npt.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\npt.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.493] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\npt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\npt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.493] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\orbd.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0141.493] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=16448) returned 1 [0141.493] CloseHandle (hObject=0x364) returned 1 [0141.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\orbd.exe")) returned 0x20 [0141.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\orbd.exe")) returned 0x20 [0141.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\orbd.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.494] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\orbd.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.494] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\pack200.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0141.494] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=16448) returned 1 [0141.494] CloseHandle (hObject=0x364) returned 1 [0141.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\pack200.exe")) returned 0x20 [0141.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\pack200.exe")) returned 0x20 [0141.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\pack200.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.494] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\pack200.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.495] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0141.506] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=829264) returned 1 [0141.506] CloseHandle (hObject=0x364) returned 1 [0141.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll")) returned 0x20 [0141.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll")) returned 0x20 [0141.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.507] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.507] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0141.508] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=234560) returned 1 [0141.508] CloseHandle (hObject=0x364) returned 1 [0141.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll")) returned 0x20 [0141.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll")) returned 0x20 [0141.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.509] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.509] SetEvent (hEvent=0x2e4) returned 1 [0141.509] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\policytool.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0141.509] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=16448) returned 1 [0141.509] CloseHandle (hObject=0x364) returned 1 [0141.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\policytool.exe")) returned 0x20 [0141.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\policytool.exe")) returned 0x20 [0141.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\policytool.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.511] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\policytool.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.512] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_common.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_common.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0141.512] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=57408) returned 1 [0141.512] CloseHandle (hObject=0x364) returned 1 [0141.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_common.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_common.dll")) returned 0x20 [0141.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_common.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_common.dll")) returned 0x20 [0141.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_common.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_common.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.674] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_common.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_common.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.674] SetEvent (hEvent=0x2e4) returned 1 [0141.675] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\jvm.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0141.675] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=8809536) returned 1 [0141.676] CloseHandle (hObject=0x37c) returned 1 [0141.676] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\jvm.dll")) returned 0x20 [0141.676] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\jvm.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\jvm.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0 [0141.676] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\jvm.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\jvm.dll")) returned 0 [0141.676] SetEvent (hEvent=0x2e4) returned 1 [0141.677] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0141.678] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=1423) returned 1 [0141.678] CloseHandle (hObject=0x37c) returned 1 [0141.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt")) returned 0x20 [0141.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt")) returned 0x20 [0141.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.678] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0141.679] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0141.679] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0141.679] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0141.680] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x58f, lpOverlapped=0x0) returned 1 [0141.682] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x590, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x590, lpOverlapped=0x0) returned 1 [0141.683] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0141.683] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0141.683] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0141.683] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x58f, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x58f, lpOverlapped=0x0) returned 1 [0141.685] FlushFileBuffers (hFile=0x37c) returned 1 [0141.691] FlushFileBuffers (hFile=0x36c) returned 1 [0141.692] CloseHandle (hObject=0x37c) returned 1 [0141.693] CloseHandle (hObject=0x36c) returned 1 [0141.693] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt")) returned 1 [0141.695] SetEvent (hEvent=0x2e4) returned 1 [0141.695] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\servertool.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0141.696] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=16448) returned 1 [0141.696] CloseHandle (hObject=0x36c) returned 1 [0141.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\servertool.exe")) returned 0x20 [0141.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\servertool.exe")) returned 0x20 [0141.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\servertool.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.697] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\servertool.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.697] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\splashscreen.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\splashscreen.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0141.697] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=204864) returned 1 [0141.697] CloseHandle (hObject=0x36c) returned 1 [0141.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\splashscreen.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\splashscreen.dll")) returned 0x20 [0141.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\splashscreen.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\splashscreen.dll")) returned 0x20 [0141.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\splashscreen.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\splashscreen.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.698] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\splashscreen.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\splashscreen.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.698] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssv.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0141.699] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=571968) returned 1 [0141.700] CloseHandle (hObject=0x36c) returned 1 [0141.700] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssv.dll")) returned 0x20 [0141.700] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssv.dll")) returned 0x20 [0141.700] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssv.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.701] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssv.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.701] SetEvent (hEvent=0x2e4) returned 1 [0141.701] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssvagent.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0141.701] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=70208) returned 1 [0141.701] CloseHandle (hObject=0x36c) returned 1 [0141.702] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssvagent.exe")) returned 0x20 [0141.702] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssvagent.exe")) returned 0x20 [0141.702] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssvagent.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.702] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssvagent.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.702] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunec.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunec.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0141.703] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=135744) returned 1 [0141.703] CloseHandle (hObject=0x36c) returned 1 [0141.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunec.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunec.dll")) returned 0x20 [0141.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunec.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunec.dll")) returned 0x20 [0141.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunec.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunec.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.704] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunec.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunec.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.704] SetEvent (hEvent=0x2e4) returned 1 [0141.704] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunmscapi.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunmscapi.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0141.705] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=31808) returned 1 [0141.705] CloseHandle (hObject=0x36c) returned 1 [0141.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunmscapi.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunmscapi.dll")) returned 0x20 [0141.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunmscapi.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunmscapi.dll")) returned 0x20 [0141.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunmscapi.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunmscapi.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.705] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunmscapi.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunmscapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.705] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\t2k.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0141.706] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=255040) returned 1 [0141.706] CloseHandle (hObject=0x36c) returned 1 [0141.706] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\t2k.dll")) returned 0x20 [0141.706] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\t2k.dll")) returned 0x20 [0141.706] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\t2k.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\t2k.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.706] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\t2k.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.707] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\tnameserv.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0141.707] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=16448) returned 1 [0141.707] CloseHandle (hObject=0x36c) returned 1 [0141.707] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\tnameserv.exe")) returned 0x20 [0141.707] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\tnameserv.exe")) returned 0x20 [0141.707] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\tnameserv.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.708] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\tnameserv.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.708] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0141.709] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=79936) returned 1 [0141.709] CloseHandle (hObject=0x36c) returned 1 [0141.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack.dll")) returned 0x20 [0141.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack.dll")) returned 0x20 [0141.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.712] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.712] SetEvent (hEvent=0x2e4) returned 1 [0141.712] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack200.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0141.713] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=197184) returned 1 [0141.713] CloseHandle (hObject=0x36c) returned 1 [0141.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack200.exe")) returned 0x20 [0141.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack200.exe")) returned 0x20 [0141.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack200.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.714] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack200.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.714] SetEvent (hEvent=0x2e4) returned 1 [0141.714] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\verify.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\verify.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0141.714] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=49216) returned 1 [0141.714] CloseHandle (hObject=0x36c) returned 1 [0141.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\verify.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\verify.dll")) returned 0x20 [0141.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\verify.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\verify.dll")) returned 0x20 [0141.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\verify.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\verify.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.715] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\verify.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\verify.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.715] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0141.715] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=24128) returned 1 [0141.716] CloseHandle (hObject=0x36c) returned 1 [0141.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll")) returned 0x20 [0141.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll")) returned 0x20 [0141.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.716] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.716] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\WindowsAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\windowsaccessbridge-64.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0141.717] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=110144) returned 1 [0141.717] CloseHandle (hObject=0x36c) returned 1 [0141.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\WindowsAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\windowsaccessbridge-64.dll")) returned 0x20 [0141.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\WindowsAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\windowsaccessbridge-64.dll")) returned 0x20 [0141.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\WindowsAccessBridge-64.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\windowsaccessbridge-64.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.717] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\WindowsAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\windowsaccessbridge-64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.718] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\wsdetect.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\wsdetect.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0141.718] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=192576) returned 1 [0141.718] CloseHandle (hObject=0x36c) returned 1 [0141.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\wsdetect.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\wsdetect.dll")) returned 0x20 [0141.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\wsdetect.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\wsdetect.dll")) returned 0x20 [0141.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\wsdetect.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\wsdetect.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.718] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\wsdetect.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\wsdetect.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.719] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\zip.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\zip.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0141.719] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=77888) returned 1 [0141.719] CloseHandle (hObject=0x36c) returned 1 [0141.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\zip.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\zip.dll")) returned 0x20 [0141.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\zip.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\zip.dll")) returned 0x20 [0141.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\zip.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\zip.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.719] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\zip.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\zip.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.720] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0141.721] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=3244) returned 1 [0141.721] CloseHandle (hObject=0x36c) returned 1 [0141.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright")) returned 0x20 [0141.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright")) returned 0x20 [0141.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.722] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0141.722] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0141.722] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0141.722] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0141.723] ReadFile (in: hFile=0x36c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0xcac, lpOverlapped=0x0) returned 1 [0141.724] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xcb0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xcb0, lpOverlapped=0x0) returned 1 [0141.726] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0141.726] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0141.726] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0141.726] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xcac, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0xcac, lpOverlapped=0x0) returned 1 [0141.729] FlushFileBuffers (hFile=0x36c) returned 1 [0141.733] FlushFileBuffers (hFile=0x37c) returned 1 [0141.734] CloseHandle (hObject=0x36c) returned 1 [0141.735] CloseHandle (hObject=0x37c) returned 1 [0141.735] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright")) returned 1 [0141.737] SetEvent (hEvent=0x2e4) returned 1 [0141.737] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0141.738] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=149) returned 1 [0141.738] CloseHandle (hObject=0x37c) returned 1 [0141.738] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties")) returned 0x20 [0141.738] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties")) returned 0x20 [0141.738] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.738] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0141.738] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0141.738] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0141.738] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0141.740] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x95, lpOverlapped=0x0) returned 1 [0141.741] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xa0, lpOverlapped=0x0) returned 1 [0141.742] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x112, lpOverlapped=0x0) returned 1 [0141.743] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0141.743] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0141.743] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x95, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x95, lpOverlapped=0x0) returned 1 [0141.746] FlushFileBuffers (hFile=0x37c) returned 1 [0141.748] FlushFileBuffers (hFile=0x36c) returned 1 [0141.751] CloseHandle (hObject=0x37c) returned 1 [0141.751] CloseHandle (hObject=0x36c) returned 1 [0141.751] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties")) returned 1 [0141.753] SetEvent (hEvent=0x2e4) returned 1 [0141.753] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0141.754] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=634) returned 1 [0141.754] CloseHandle (hObject=0x36c) returned 1 [0141.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg")) returned 0x20 [0141.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg")) returned 0x20 [0141.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.754] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0141.754] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0141.754] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0141.755] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0141.782] ReadFile (in: hFile=0x36c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x27a, lpOverlapped=0x0) returned 1 [0141.783] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x280, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x280, lpOverlapped=0x0) returned 1 [0141.785] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xe2, lpOverlapped=0x0) returned 1 [0141.785] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0141.785] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0141.786] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x27a, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x27a, lpOverlapped=0x0) returned 1 [0141.788] FlushFileBuffers (hFile=0x36c) returned 1 [0141.791] FlushFileBuffers (hFile=0x37c) returned 1 [0141.793] CloseHandle (hObject=0x36c) returned 1 [0141.793] CloseHandle (hObject=0x37c) returned 1 [0141.793] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg")) returned 1 [0141.795] SetEvent (hEvent=0x2e4) returned 1 [0141.795] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\calendars.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0141.796] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=1378) returned 1 [0141.796] CloseHandle (hObject=0x37c) returned 1 [0141.796] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\calendars.properties")) returned 0x20 [0141.797] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\calendars.properties")) returned 0x20 [0141.797] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\calendars.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.797] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\calendars.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0141.797] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0141.797] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0141.797] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\calendars.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0141.799] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x562, lpOverlapped=0x0) returned 1 [0141.801] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x570, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x570, lpOverlapped=0x0) returned 1 [0141.802] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x102, lpOverlapped=0x0) returned 1 [0141.802] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0141.802] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0141.803] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x562, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x562, lpOverlapped=0x0) returned 1 [0141.805] FlushFileBuffers (hFile=0x37c) returned 1 [0141.807] FlushFileBuffers (hFile=0x36c) returned 1 [0141.808] CloseHandle (hObject=0x37c) returned 1 [0141.808] CloseHandle (hObject=0x36c) returned 1 [0141.808] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\calendars.properties")) returned 1 [0141.810] SetEvent (hEvent=0x2e4) returned 1 [0141.811] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0141.811] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=3036922) returned 1 [0141.811] CloseHandle (hObject=0x36c) returned 1 [0141.811] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar")) returned 0x20 [0141.811] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0 [0141.811] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar")) returned 0 [0141.812] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0141.812] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=84355) returned 1 [0141.812] CloseHandle (hObject=0x36c) returned 1 [0141.812] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist")) returned 0x20 [0141.812] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist")) returned 0x20 [0141.812] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.813] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0141.813] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0141.813] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0141.813] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0141.814] ReadFile (in: hFile=0x36c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x14983, lpOverlapped=0x0) returned 1 [0141.819] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x14990, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x14990, lpOverlapped=0x0) returned 1 [0141.821] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0141.821] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0141.821] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0141.821] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x14983, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x14983, lpOverlapped=0x0) returned 1 [0141.826] FlushFileBuffers (hFile=0x36c) returned 1 [0141.829] FlushFileBuffers (hFile=0x37c) returned 1 [0141.832] CloseHandle (hObject=0x36c) returned 1 [0141.832] CloseHandle (hObject=0x37c) returned 1 [0141.832] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist")) returned 1 [0141.834] SetEvent (hEvent=0x2e4) returned 1 [0141.835] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0141.836] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=51236) returned 1 [0141.836] CloseHandle (hObject=0x37c) returned 1 [0141.836] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf")) returned 0x20 [0141.836] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf")) returned 0x20 [0141.836] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.836] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0141.837] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0141.837] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0141.837] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0141.838] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0xc824, lpOverlapped=0x0) returned 1 [0141.842] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xc830, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xc830, lpOverlapped=0x0) returned 1 [0141.844] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0141.844] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0141.844] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0141.844] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xc824, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0xc824, lpOverlapped=0x0) returned 1 [0141.847] FlushFileBuffers (hFile=0x37c) returned 1 [0142.079] FlushFileBuffers (hFile=0x36c) returned 1 [0142.081] CloseHandle (hObject=0x37c) returned 1 [0142.082] CloseHandle (hObject=0x36c) returned 1 [0142.082] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf")) returned 1 [0142.085] SetEvent (hEvent=0x2e4) returned 1 [0142.086] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0142.087] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=632) returned 1 [0142.087] CloseHandle (hObject=0x36c) returned 1 [0142.087] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf")) returned 0x20 [0142.087] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf")) returned 0x20 [0142.087] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0142.087] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0142.088] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.088] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.088] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0142.089] ReadFile (in: hFile=0x36c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x278, lpOverlapped=0x0) returned 1 [0142.090] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x280, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x280, lpOverlapped=0x0) returned 1 [0142.091] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xe2, lpOverlapped=0x0) returned 1 [0142.092] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.092] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.092] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x278, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x278, lpOverlapped=0x0) returned 1 [0142.098] FlushFileBuffers (hFile=0x36c) returned 1 [0142.101] FlushFileBuffers (hFile=0x37c) returned 1 [0142.103] CloseHandle (hObject=0x36c) returned 1 [0142.103] CloseHandle (hObject=0x37c) returned 1 [0142.103] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf")) returned 1 [0142.105] SetEvent (hEvent=0x2e4) returned 1 [0142.105] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0142.107] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=1044) returned 1 [0142.107] CloseHandle (hObject=0x37c) returned 1 [0142.107] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf")) returned 0x20 [0142.107] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf")) returned 0x20 [0142.107] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0142.107] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0142.107] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.107] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.108] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0142.108] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x414, lpOverlapped=0x0) returned 1 [0142.111] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x420, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x420, lpOverlapped=0x0) returned 1 [0142.113] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0142.113] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.113] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.113] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x414, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x414, lpOverlapped=0x0) returned 1 [0142.116] FlushFileBuffers (hFile=0x37c) returned 1 [0142.118] FlushFileBuffers (hFile=0x36c) returned 1 [0142.119] CloseHandle (hObject=0x37c) returned 1 [0142.120] CloseHandle (hObject=0x36c) returned 1 [0142.120] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf")) returned 1 [0142.122] SetEvent (hEvent=0x2e4) returned 1 [0142.122] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0142.122] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=274474) returned 1 [0142.122] CloseHandle (hObject=0x36c) returned 1 [0142.122] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf")) returned 0x20 [0142.123] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf")) returned 0x20 [0142.123] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0142.123] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0142.123] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.123] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.123] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0142.124] ReadFile (in: hFile=0x36c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x4302a, lpOverlapped=0x0) returned 1 [0142.135] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x43030, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x43030, lpOverlapped=0x0) returned 1 [0142.142] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xe2, lpOverlapped=0x0) returned 1 [0142.142] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.142] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.142] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x4302a, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x4302a, lpOverlapped=0x0) returned 1 [0142.150] FlushFileBuffers (hFile=0x36c) returned 1 [0142.153] FlushFileBuffers (hFile=0x37c) returned 1 [0142.156] CloseHandle (hObject=0x36c) returned 1 [0142.158] CloseHandle (hObject=0x37c) returned 1 [0142.158] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf")) returned 1 [0142.162] SetEvent (hEvent=0x2e4) returned 1 [0142.162] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0142.163] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=3144) returned 1 [0142.163] CloseHandle (hObject=0x37c) returned 1 [0142.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf")) returned 0x20 [0142.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf")) returned 0x20 [0142.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0142.163] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0142.164] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.164] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.164] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0142.164] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0xc48, lpOverlapped=0x0) returned 1 [0142.169] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xc50, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xc50, lpOverlapped=0x0) returned 1 [0142.170] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xe2, lpOverlapped=0x0) returned 1 [0142.171] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.171] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.171] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xc48, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0xc48, lpOverlapped=0x0) returned 1 [0142.174] FlushFileBuffers (hFile=0x37c) returned 1 [0142.181] FlushFileBuffers (hFile=0x36c) returned 1 [0142.182] CloseHandle (hObject=0x37c) returned 1 [0142.183] CloseHandle (hObject=0x36c) returned 1 [0142.183] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf")) returned 1 [0142.184] SetEvent (hEvent=0x2e4) returned 1 [0142.184] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\content-types.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0142.185] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=5548) returned 1 [0142.185] CloseHandle (hObject=0x36c) returned 1 [0142.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\content-types.properties")) returned 0x20 [0142.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\content-types.properties")) returned 0x20 [0142.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\content-types.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0142.185] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\content-types.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0142.187] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.187] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.187] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\content-types.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0142.188] ReadFile (in: hFile=0x36c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x15ac, lpOverlapped=0x0) returned 1 [0142.190] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x15b0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x15b0, lpOverlapped=0x0) returned 1 [0142.192] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x112, lpOverlapped=0x0) returned 1 [0142.192] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.193] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.193] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x15ac, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x15ac, lpOverlapped=0x0) returned 1 [0142.194] FlushFileBuffers (hFile=0x36c) returned 1 [0142.197] FlushFileBuffers (hFile=0x37c) returned 1 [0142.199] CloseHandle (hObject=0x36c) returned 1 [0142.200] CloseHandle (hObject=0x37c) returned 1 [0142.200] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\content-types.properties")) returned 1 [0142.202] SetEvent (hEvent=0x2e4) returned 1 [0142.202] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0142.202] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=4122) returned 1 [0142.202] CloseHandle (hObject=0x37c) returned 1 [0142.202] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data")) returned 0x20 [0142.203] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data")) returned 0x20 [0142.203] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0142.203] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0142.203] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.203] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.203] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0142.204] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x101a, lpOverlapped=0x0) returned 1 [0142.205] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x1020, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x1020, lpOverlapped=0x0) returned 1 [0142.206] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0142.207] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.207] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.207] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x101a, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x101a, lpOverlapped=0x0) returned 1 [0142.210] FlushFileBuffers (hFile=0x37c) returned 1 [0142.212] FlushFileBuffers (hFile=0x36c) returned 1 [0142.213] CloseHandle (hObject=0x37c) returned 1 [0142.213] CloseHandle (hObject=0x36c) returned 1 [0142.214] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data")) returned 1 [0142.215] SetEvent (hEvent=0x2e4) returned 1 [0142.215] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0142.218] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=14156) returned 1 [0142.218] CloseHandle (hObject=0x36c) returned 1 [0142.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip")) returned 0x20 [0142.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip")) returned 0x20 [0142.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0142.218] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0142.219] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.219] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.219] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0142.220] ReadFile (in: hFile=0x36c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x374c, lpOverlapped=0x0) returned 1 [0142.223] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x3750, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x3750, lpOverlapped=0x0) returned 1 [0142.224] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0142.224] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.224] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.224] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x374c, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x374c, lpOverlapped=0x0) returned 1 [0142.227] FlushFileBuffers (hFile=0x36c) returned 1 [0142.229] FlushFileBuffers (hFile=0x37c) returned 1 [0142.230] CloseHandle (hObject=0x36c) returned 1 [0142.231] CloseHandle (hObject=0x37c) returned 1 [0142.231] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip")) returned 1 [0142.232] SetEvent (hEvent=0x2e4) returned 1 [0142.233] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0142.233] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=2860) returned 1 [0142.233] CloseHandle (hObject=0x37c) returned 1 [0142.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages.properties")) returned 0x20 [0142.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages.properties")) returned 0x20 [0142.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0142.234] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0142.234] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.234] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.234] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0142.234] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0xb2c, lpOverlapped=0x0) returned 1 [0142.236] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xb30, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xb30, lpOverlapped=0x0) returned 1 [0142.237] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x102, lpOverlapped=0x0) returned 1 [0142.237] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.237] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.238] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xb2c, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0xb2c, lpOverlapped=0x0) returned 1 [0142.242] FlushFileBuffers (hFile=0x37c) returned 1 [0142.247] FlushFileBuffers (hFile=0x36c) returned 1 [0142.248] CloseHandle (hObject=0x37c) returned 1 [0142.248] CloseHandle (hObject=0x36c) returned 1 [0142.248] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages.properties")) returned 1 [0142.250] SetEvent (hEvent=0x2e4) returned 1 [0142.250] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0142.251] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=3306) returned 1 [0142.251] CloseHandle (hObject=0x36c) returned 1 [0142.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties")) returned 0x20 [0142.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties")) returned 0x20 [0142.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0142.251] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0142.251] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.251] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.252] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0142.252] ReadFile (in: hFile=0x36c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0xcea, lpOverlapped=0x0) returned 1 [0142.254] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xcf0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xcf0, lpOverlapped=0x0) returned 1 [0142.255] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x102, lpOverlapped=0x0) returned 1 [0142.255] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.255] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.255] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xcea, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0xcea, lpOverlapped=0x0) returned 1 [0142.257] FlushFileBuffers (hFile=0x36c) returned 1 [0142.260] FlushFileBuffers (hFile=0x37c) returned 1 [0142.261] CloseHandle (hObject=0x36c) returned 1 [0142.262] CloseHandle (hObject=0x37c) returned 1 [0142.262] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties")) returned 1 [0142.263] SetEvent (hEvent=0x2e4) returned 1 [0142.263] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0142.264] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=3600) returned 1 [0142.264] CloseHandle (hObject=0x37c) returned 1 [0142.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties")) returned 0x20 [0142.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties")) returned 0x20 [0142.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0142.265] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0142.265] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.265] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.265] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0142.266] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0xe10, lpOverlapped=0x0) returned 1 [0142.268] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xe20, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xe20, lpOverlapped=0x0) returned 1 [0142.269] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x102, lpOverlapped=0x0) returned 1 [0142.269] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.269] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.269] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xe10, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0xe10, lpOverlapped=0x0) returned 1 [0142.271] FlushFileBuffers (hFile=0x37c) returned 1 [0142.273] FlushFileBuffers (hFile=0x36c) returned 1 [0142.275] CloseHandle (hObject=0x37c) returned 1 [0142.275] CloseHandle (hObject=0x36c) returned 1 [0142.276] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties")) returned 1 [0142.277] SetEvent (hEvent=0x2e4) returned 1 [0142.277] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0142.277] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=3409) returned 1 [0142.277] CloseHandle (hObject=0x36c) returned 1 [0142.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties")) returned 0x20 [0142.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties")) returned 0x20 [0142.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0142.278] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0142.278] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.278] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.278] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0142.279] ReadFile (in: hFile=0x36c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0xd51, lpOverlapped=0x0) returned 1 [0142.281] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xd60, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xd60, lpOverlapped=0x0) returned 1 [0142.282] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x102, lpOverlapped=0x0) returned 1 [0142.282] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.282] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.282] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xd51, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0xd51, lpOverlapped=0x0) returned 1 [0142.289] FlushFileBuffers (hFile=0x36c) returned 1 [0142.292] FlushFileBuffers (hFile=0x37c) returned 1 [0142.294] CloseHandle (hObject=0x36c) returned 1 [0142.294] CloseHandle (hObject=0x37c) returned 1 [0142.294] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties")) returned 1 [0142.296] SetEvent (hEvent=0x2e4) returned 1 [0142.296] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0142.296] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=3223) returned 1 [0142.296] CloseHandle (hObject=0x37c) returned 1 [0142.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties")) returned 0x20 [0142.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties")) returned 0x20 [0142.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0142.297] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0142.297] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.297] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.297] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0142.298] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0xc97, lpOverlapped=0x0) returned 1 [0142.300] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xca0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xca0, lpOverlapped=0x0) returned 1 [0142.301] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x102, lpOverlapped=0x0) returned 1 [0142.301] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.301] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.301] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xc97, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0xc97, lpOverlapped=0x0) returned 1 [0142.303] FlushFileBuffers (hFile=0x37c) returned 1 [0142.306] FlushFileBuffers (hFile=0x36c) returned 1 [0142.307] CloseHandle (hObject=0x37c) returned 1 [0142.308] CloseHandle (hObject=0x36c) returned 1 [0142.308] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties")) returned 1 [0142.309] SetEvent (hEvent=0x2e4) returned 1 [0142.309] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0142.310] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=6349) returned 1 [0142.310] CloseHandle (hObject=0x36c) returned 1 [0142.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties")) returned 0x20 [0142.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties")) returned 0x20 [0142.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0142.311] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0142.311] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.311] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.311] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0142.312] ReadFile (in: hFile=0x36c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x18cd, lpOverlapped=0x0) returned 1 [0142.313] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x18d0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x18d0, lpOverlapped=0x0) returned 1 [0142.314] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x102, lpOverlapped=0x0) returned 1 [0142.315] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.315] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.315] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x18cd, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x18cd, lpOverlapped=0x0) returned 1 [0142.317] FlushFileBuffers (hFile=0x36c) returned 1 [0142.319] FlushFileBuffers (hFile=0x37c) returned 1 [0142.320] CloseHandle (hObject=0x36c) returned 1 [0142.321] CloseHandle (hObject=0x37c) returned 1 [0142.321] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties")) returned 1 [0142.323] SetEvent (hEvent=0x2e4) returned 1 [0142.323] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0142.323] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=5712) returned 1 [0142.323] CloseHandle (hObject=0x37c) returned 1 [0142.323] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties")) returned 0x20 [0142.323] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties")) returned 0x20 [0142.324] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0142.324] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0142.324] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.324] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.324] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0142.325] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x1650, lpOverlapped=0x0) returned 1 [0142.326] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x1660, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x1660, lpOverlapped=0x0) returned 1 [0142.327] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x102, lpOverlapped=0x0) returned 1 [0142.328] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.328] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.328] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x1650, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x1650, lpOverlapped=0x0) returned 1 [0142.331] FlushFileBuffers (hFile=0x37c) returned 1 [0142.333] FlushFileBuffers (hFile=0x36c) returned 1 [0142.336] CloseHandle (hObject=0x37c) returned 1 [0142.337] CloseHandle (hObject=0x36c) returned 1 [0142.337] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties")) returned 1 [0142.340] SetEvent (hEvent=0x2e4) returned 1 [0142.340] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_pt_br.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0142.341] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=3285) returned 1 [0142.342] CloseHandle (hObject=0x36c) returned 1 [0142.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_pt_br.properties")) returned 0x20 [0142.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_pt_br.properties")) returned 0x20 [0142.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_pt_br.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0142.342] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_pt_br.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0142.343] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.343] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.343] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_pt_br.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0142.344] ReadFile (in: hFile=0x36c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0xcd5, lpOverlapped=0x0) returned 1 [0142.346] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xce0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xce0, lpOverlapped=0x0) returned 1 [0142.348] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x112, lpOverlapped=0x0) returned 1 [0142.348] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.348] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.348] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xcd5, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0xcd5, lpOverlapped=0x0) returned 1 [0142.352] FlushFileBuffers (hFile=0x36c) returned 1 [0142.358] FlushFileBuffers (hFile=0x37c) returned 1 [0142.359] CloseHandle (hObject=0x36c) returned 1 [0142.360] CloseHandle (hObject=0x37c) returned 1 [0142.360] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_pt_br.properties")) returned 1 [0142.362] SetEvent (hEvent=0x2e4) returned 1 [0142.362] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0142.362] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=3409) returned 1 [0142.363] CloseHandle (hObject=0x37c) returned 1 [0142.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties")) returned 0x20 [0142.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties")) returned 0x20 [0142.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0142.363] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0142.363] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.363] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.363] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0142.364] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0xd51, lpOverlapped=0x0) returned 1 [0142.367] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xd60, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xd60, lpOverlapped=0x0) returned 1 [0142.368] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x102, lpOverlapped=0x0) returned 1 [0142.369] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.369] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.369] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xd51, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0xd51, lpOverlapped=0x0) returned 1 [0142.372] FlushFileBuffers (hFile=0x37c) returned 1 [0142.377] FlushFileBuffers (hFile=0x36c) returned 1 [0142.379] CloseHandle (hObject=0x37c) returned 1 [0142.379] CloseHandle (hObject=0x36c) returned 1 [0142.380] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties")) returned 1 [0142.382] SetEvent (hEvent=0x2e4) returned 1 [0142.382] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_cn.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0142.383] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=4072) returned 1 [0142.383] CloseHandle (hObject=0x36c) returned 1 [0142.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_cn.properties")) returned 0x20 [0142.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_cn.properties")) returned 0x20 [0142.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_cn.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0142.384] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_cn.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0142.384] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.384] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.384] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_cn.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0142.385] ReadFile (in: hFile=0x36c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0xfe8, lpOverlapped=0x0) returned 1 [0142.387] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xff0, lpOverlapped=0x0) returned 1 [0142.389] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x112, lpOverlapped=0x0) returned 1 [0142.389] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.389] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.389] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xfe8, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0xfe8, lpOverlapped=0x0) returned 1 [0142.392] FlushFileBuffers (hFile=0x36c) returned 1 [0142.399] FlushFileBuffers (hFile=0x37c) returned 1 [0142.402] CloseHandle (hObject=0x36c) returned 1 [0142.402] CloseHandle (hObject=0x37c) returned 1 [0142.403] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_cn.properties")) returned 1 [0142.404] SetEvent (hEvent=0x2e4) returned 1 [0142.404] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_hk.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0142.405] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=3752) returned 1 [0142.405] CloseHandle (hObject=0x37c) returned 1 [0142.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_hk.properties")) returned 0x20 [0142.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_hk.properties")) returned 0x20 [0142.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_hk.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0142.406] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_hk.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0142.406] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.406] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.406] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_hk.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0142.407] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0xea8, lpOverlapped=0x0) returned 1 [0142.410] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xeb0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xeb0, lpOverlapped=0x0) returned 1 [0142.411] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x112, lpOverlapped=0x0) returned 1 [0142.411] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.411] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.411] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xea8, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0xea8, lpOverlapped=0x0) returned 1 [0142.413] FlushFileBuffers (hFile=0x37c) returned 1 [0142.421] FlushFileBuffers (hFile=0x36c) returned 1 [0142.430] CloseHandle (hObject=0x37c) returned 1 [0142.431] CloseHandle (hObject=0x36c) returned 1 [0142.431] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_hk.properties")) returned 1 [0142.432] SetEvent (hEvent=0x2e4) returned 1 [0142.432] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_tw.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0142.433] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=3752) returned 1 [0142.433] CloseHandle (hObject=0x36c) returned 1 [0142.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_tw.properties")) returned 0x20 [0142.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_tw.properties")) returned 0x20 [0142.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_tw.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0142.436] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_tw.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0142.436] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.436] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.436] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_tw.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0142.436] ReadFile (in: hFile=0x36c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0xea8, lpOverlapped=0x0) returned 1 [0142.438] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xeb0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xeb0, lpOverlapped=0x0) returned 1 [0142.440] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x112, lpOverlapped=0x0) returned 1 [0142.440] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.440] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.440] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xea8, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0xea8, lpOverlapped=0x0) returned 1 [0142.443] FlushFileBuffers (hFile=0x36c) returned 1 [0142.445] FlushFileBuffers (hFile=0x37c) returned 1 [0142.446] CloseHandle (hObject=0x36c) returned 1 [0142.447] CloseHandle (hObject=0x37c) returned 1 [0142.447] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_tw.properties")) returned 1 [0142.449] SetEvent (hEvent=0x2e4) returned 1 [0142.449] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0142.449] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=8590) returned 1 [0142.449] CloseHandle (hObject=0x37c) returned 1 [0142.449] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif")) returned 0x20 [0142.449] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif")) returned 0x20 [0142.449] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0142.450] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0142.450] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.450] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.450] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0142.451] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x218e, lpOverlapped=0x0) returned 1 [0142.453] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x2190, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x2190, lpOverlapped=0x0) returned 1 [0142.454] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0142.454] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.455] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.455] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x218e, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x218e, lpOverlapped=0x0) returned 1 [0142.456] FlushFileBuffers (hFile=0x37c) returned 1 [0142.459] FlushFileBuffers (hFile=0x36c) returned 1 [0142.461] CloseHandle (hObject=0x37c) returned 1 [0142.461] CloseHandle (hObject=0x36c) returned 1 [0142.461] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif")) returned 1 [0142.463] SetEvent (hEvent=0x2e4) returned 1 [0142.463] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0142.464] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=15276) returned 1 [0142.464] CloseHandle (hObject=0x36c) returned 1 [0142.464] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif")) returned 0x20 [0142.464] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif")) returned 0x20 [0142.464] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0142.464] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0142.465] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.465] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.465] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0142.465] ReadFile (in: hFile=0x36c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x3bac, lpOverlapped=0x0) returned 1 [0142.467] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x3bb0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x3bb0, lpOverlapped=0x0) returned 1 [0142.469] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0142.469] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.469] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.469] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x3bac, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x3bac, lpOverlapped=0x0) returned 1 [0142.471] FlushFileBuffers (hFile=0x36c) returned 1 [0142.474] FlushFileBuffers (hFile=0x37c) returned 1 [0142.476] CloseHandle (hObject=0x36c) returned 1 [0142.476] CloseHandle (hObject=0x37c) returned 1 [0142.476] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif")) returned 1 [0142.478] SetEvent (hEvent=0x2e4) returned 1 [0142.478] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0142.478] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=7805) returned 1 [0142.478] CloseHandle (hObject=0x37c) returned 1 [0142.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif")) returned 0x20 [0142.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif")) returned 0x20 [0142.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0142.479] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0142.479] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.479] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.479] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0142.480] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x1e7d, lpOverlapped=0x0) returned 1 [0142.482] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x1e80, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x1e80, lpOverlapped=0x0) returned 1 [0142.483] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x102, lpOverlapped=0x0) returned 1 [0142.483] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.483] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.483] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x1e7d, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x1e7d, lpOverlapped=0x0) returned 1 [0142.485] FlushFileBuffers (hFile=0x37c) returned 1 [0142.490] FlushFileBuffers (hFile=0x36c) returned 1 [0142.491] CloseHandle (hObject=0x37c) returned 1 [0142.492] CloseHandle (hObject=0x36c) returned 1 [0142.492] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif")) returned 1 [0142.493] SetEvent (hEvent=0x2e4) returned 1 [0142.494] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0142.494] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=12250) returned 1 [0142.494] CloseHandle (hObject=0x36c) returned 1 [0142.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif")) returned 0x20 [0142.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif")) returned 0x20 [0142.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0142.495] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0142.495] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.495] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.495] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0142.495] ReadFile (in: hFile=0x36c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x2fda, lpOverlapped=0x0) returned 1 [0142.497] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x2fe0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x2fe0, lpOverlapped=0x0) returned 1 [0142.499] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x102, lpOverlapped=0x0) returned 1 [0142.499] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.499] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.499] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x2fda, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x2fda, lpOverlapped=0x0) returned 1 [0142.502] FlushFileBuffers (hFile=0x36c) returned 1 [0142.504] FlushFileBuffers (hFile=0x37c) returned 1 [0142.506] CloseHandle (hObject=0x36c) returned 1 [0142.506] CloseHandle (hObject=0x37c) returned 1 [0142.506] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif")) returned 1 [0142.507] SetEvent (hEvent=0x2e4) returned 1 [0142.508] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0142.509] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=5040094) returned 1 [0142.509] CloseHandle (hObject=0x37c) returned 1 [0142.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar")) returned 0x20 [0142.509] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0 [0142.509] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar")) returned 0 [0142.509] SetEvent (hEvent=0x2e4) returned 1 [0142.510] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0142.513] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=188024) returned 1 [0142.513] CloseHandle (hObject=0x37c) returned 1 [0142.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar")) returned 0x20 [0142.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar")) returned 0x20 [0142.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0142.513] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0142.513] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.513] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.513] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0142.516] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x2de78, lpOverlapped=0x0) returned 1 [0142.523] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x2de80, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x2de80, lpOverlapped=0x0) returned 1 [0142.527] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x102, lpOverlapped=0x0) returned 1 [0142.527] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.527] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.527] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x2de78, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x2de78, lpOverlapped=0x0) returned 1 [0142.536] FlushFileBuffers (hFile=0x37c) returned 1 [0142.541] FlushFileBuffers (hFile=0x36c) returned 1 [0142.543] CloseHandle (hObject=0x37c) returned 1 [0142.543] CloseHandle (hObject=0x36c) returned 1 [0142.543] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar")) returned 1 [0142.546] SetEvent (hEvent=0x2e4) returned 1 [0142.546] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0142.546] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=3860502) returned 1 [0142.546] CloseHandle (hObject=0x36c) returned 1 [0142.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar")) returned 0x20 [0142.547] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0 [0142.547] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar")) returned 0 [0142.547] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0142.548] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=8286) returned 1 [0142.548] CloseHandle (hObject=0x36c) returned 1 [0142.548] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar")) returned 0x20 [0142.548] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar")) returned 0x20 [0142.548] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0142.548] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0142.548] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.548] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.548] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0142.549] ReadFile (in: hFile=0x36c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x205e, lpOverlapped=0x0) returned 1 [0142.551] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x2060, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x2060, lpOverlapped=0x0) returned 1 [0142.552] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0142.552] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.552] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.552] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x205e, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x205e, lpOverlapped=0x0) returned 1 [0142.556] FlushFileBuffers (hFile=0x36c) returned 1 [0142.558] FlushFileBuffers (hFile=0x37c) returned 1 [0142.559] CloseHandle (hObject=0x36c) returned 1 [0142.560] CloseHandle (hObject=0x37c) returned 1 [0142.560] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar")) returned 1 [0142.563] SetEvent (hEvent=0x2e4) returned 1 [0142.563] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0142.564] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=44516) returned 1 [0142.564] CloseHandle (hObject=0x37c) returned 1 [0142.564] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar")) returned 0x20 [0142.564] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar")) returned 0x20 [0142.564] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0142.565] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0142.565] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.565] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.565] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0142.565] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0xade4, lpOverlapped=0x0) returned 1 [0142.569] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xadf0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xadf0, lpOverlapped=0x0) returned 1 [0142.570] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0142.571] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.571] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.571] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xade4, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0xade4, lpOverlapped=0x0) returned 1 [0142.574] FlushFileBuffers (hFile=0x37c) returned 1 [0142.576] FlushFileBuffers (hFile=0x36c) returned 1 [0142.577] CloseHandle (hObject=0x37c) returned 1 [0142.580] CloseHandle (hObject=0x36c) returned 1 [0142.580] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar")) returned 1 [0142.582] SetEvent (hEvent=0x2e4) returned 1 [0142.582] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0142.582] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=18246297) returned 1 [0142.582] CloseHandle (hObject=0x36c) returned 1 [0142.582] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar")) returned 0x20 [0142.582] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0 [0142.583] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar")) returned 0 [0142.583] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0142.585] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=2204781) returned 1 [0142.585] CloseHandle (hObject=0x36c) returned 1 [0142.585] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar")) returned 0x20 [0142.585] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0 [0142.585] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar")) returned 0 [0142.585] SetEvent (hEvent=0x2e4) returned 1 [0142.586] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0142.586] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=1461) returned 1 [0142.586] CloseHandle (hObject=0x36c) returned 1 [0142.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index")) returned 0x20 [0142.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index")) returned 0x20 [0142.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0142.586] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0142.587] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.587] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.587] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0142.588] ReadFile (in: hFile=0x36c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x5b5, lpOverlapped=0x0) returned 1 [0142.589] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x5c0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x5c0, lpOverlapped=0x0) returned 1 [0142.590] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0142.591] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.591] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.591] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x5b5, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x5b5, lpOverlapped=0x0) returned 1 [0142.594] FlushFileBuffers (hFile=0x36c) returned 1 [0142.596] FlushFileBuffers (hFile=0x37c) returned 1 [0142.597] CloseHandle (hObject=0x36c) returned 1 [0142.597] CloseHandle (hObject=0x37c) returned 1 [0142.598] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index")) returned 1 [0142.599] SetEvent (hEvent=0x2e4) returned 1 [0142.599] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0142.600] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=2022734) returned 1 [0142.600] CloseHandle (hObject=0x37c) returned 1 [0142.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar")) returned 0x20 [0142.600] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0 [0142.601] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar")) returned 0 [0142.601] SetEvent (hEvent=0x2e4) returned 1 [0142.601] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0142.602] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=42185) returned 1 [0142.602] CloseHandle (hObject=0x37c) returned 1 [0142.602] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar")) returned 0x20 [0142.602] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar")) returned 0x20 [0142.602] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0142.603] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0142.603] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.603] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.603] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0142.604] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0xa4c9, lpOverlapped=0x0) returned 1 [0142.606] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xa4d0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xa4d0, lpOverlapped=0x0) returned 1 [0142.609] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0142.610] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.610] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.610] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xa4c9, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0xa4c9, lpOverlapped=0x0) returned 1 [0142.614] FlushFileBuffers (hFile=0x37c) returned 1 [0142.618] FlushFileBuffers (hFile=0x36c) returned 1 [0142.620] CloseHandle (hObject=0x37c) returned 1 [0142.621] CloseHandle (hObject=0x36c) returned 1 [0142.622] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar")) returned 1 [0142.624] SetEvent (hEvent=0x2e4) returned 1 [0142.624] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0142.624] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=280161) returned 1 [0142.625] CloseHandle (hObject=0x36c) returned 1 [0142.625] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar")) returned 0x20 [0142.625] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar")) returned 0x20 [0142.625] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0142.625] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0142.625] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.626] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.626] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0142.626] ReadFile (in: hFile=0x36c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x44661, lpOverlapped=0x0) returned 1 [0142.639] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x44670, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x44670, lpOverlapped=0x0) returned 1 [0142.646] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x102, lpOverlapped=0x0) returned 1 [0142.646] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.646] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.646] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x44661, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x44661, lpOverlapped=0x0) returned 1 [0142.654] FlushFileBuffers (hFile=0x36c) returned 1 [0142.658] FlushFileBuffers (hFile=0x37c) returned 1 [0142.659] CloseHandle (hObject=0x36c) returned 1 [0142.660] CloseHandle (hObject=0x37c) returned 1 [0142.660] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar")) returned 1 [0142.664] SetEvent (hEvent=0x2e4) returned 1 [0142.665] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0142.665] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=32699) returned 1 [0142.665] CloseHandle (hObject=0x37c) returned 1 [0142.665] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar")) returned 0x20 [0142.665] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar")) returned 0x20 [0142.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0142.666] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0142.666] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.666] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.666] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0142.667] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x7fbb, lpOverlapped=0x0) returned 1 [0142.670] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x7fc0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x7fc0, lpOverlapped=0x0) returned 1 [0142.672] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0142.672] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.672] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.672] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x7fbb, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x7fbb, lpOverlapped=0x0) returned 1 [0142.675] FlushFileBuffers (hFile=0x37c) returned 1 [0142.678] FlushFileBuffers (hFile=0x36c) returned 1 [0142.679] CloseHandle (hObject=0x37c) returned 1 [0142.680] CloseHandle (hObject=0x36c) returned 1 [0142.680] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar")) returned 1 [0142.681] SetEvent (hEvent=0x2e4) returned 1 [0142.682] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0142.682] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=251327) returned 1 [0142.682] CloseHandle (hObject=0x36c) returned 1 [0142.682] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar")) returned 0x20 [0142.682] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar")) returned 0x20 [0142.682] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0142.682] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0142.683] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.683] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.683] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0142.683] ReadFile (in: hFile=0x36c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x3d5bf, lpOverlapped=0x0) returned 1 [0142.693] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x3d5c0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x3d5c0, lpOverlapped=0x0) returned 1 [0142.699] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0142.699] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.699] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.699] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x3d5bf, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x3d5bf, lpOverlapped=0x0) returned 1 [0142.707] FlushFileBuffers (hFile=0x36c) returned 1 [0142.710] FlushFileBuffers (hFile=0x37c) returned 1 [0142.712] CloseHandle (hObject=0x36c) returned 1 [0142.712] CloseHandle (hObject=0x37c) returned 1 [0142.713] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar")) returned 1 [0142.716] SetEvent (hEvent=0x2e4) returned 1 [0142.716] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0142.717] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=68924) returned 1 [0142.717] CloseHandle (hObject=0x37c) returned 1 [0142.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar")) returned 0x20 [0142.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar")) returned 0x20 [0142.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0142.717] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0142.718] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.718] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.718] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0142.718] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x10d3c, lpOverlapped=0x0) returned 1 [0142.722] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x10d40, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x10d40, lpOverlapped=0x0) returned 1 [0142.725] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0142.726] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.726] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.726] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x10d3c, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x10d3c, lpOverlapped=0x0) returned 1 [0142.731] FlushFileBuffers (hFile=0x37c) returned 1 [0142.737] FlushFileBuffers (hFile=0x36c) returned 1 [0142.739] CloseHandle (hObject=0x37c) returned 1 [0142.739] CloseHandle (hObject=0x36c) returned 1 [0142.740] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar")) returned 1 [0142.742] SetEvent (hEvent=0x2e4) returned 1 [0142.742] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0142.742] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=3928) returned 1 [0142.742] CloseHandle (hObject=0x36c) returned 1 [0142.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties")) returned 0x20 [0142.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties")) returned 0x20 [0142.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0142.743] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0142.743] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.743] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.743] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0142.744] ReadFile (in: hFile=0x36c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0xf58, lpOverlapped=0x0) returned 1 [0142.746] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf60, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf60, lpOverlapped=0x0) returned 1 [0142.747] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x102, lpOverlapped=0x0) returned 1 [0142.747] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.747] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.748] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf58, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0xf58, lpOverlapped=0x0) returned 1 [0142.750] FlushFileBuffers (hFile=0x36c) returned 1 [0142.752] FlushFileBuffers (hFile=0x37c) returned 1 [0142.754] CloseHandle (hObject=0x36c) returned 1 [0142.754] CloseHandle (hObject=0x37c) returned 1 [0142.754] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties")) returned 1 [0142.756] SetEvent (hEvent=0x2e4) returned 1 [0142.756] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0142.756] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=3770) returned 1 [0142.757] CloseHandle (hObject=0x37c) returned 1 [0142.757] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc")) returned 0x20 [0142.757] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc")) returned 0x20 [0142.757] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0142.757] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0142.757] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.767] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.767] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0142.768] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0xeba, lpOverlapped=0x0) returned 1 [0142.769] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xec0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xec0, lpOverlapped=0x0) returned 1 [0142.770] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0142.771] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.771] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.771] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xeba, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0xeba, lpOverlapped=0x0) returned 1 [0142.773] FlushFileBuffers (hFile=0x37c) returned 1 [0142.776] FlushFileBuffers (hFile=0x36c) returned 1 [0142.777] CloseHandle (hObject=0x37c) returned 1 [0142.778] CloseHandle (hObject=0x36c) returned 1 [0142.778] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc")) returned 1 [0142.779] SetEvent (hEvent=0x2e4) returned 1 [0142.779] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0142.780] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=10568) returned 1 [0142.780] CloseHandle (hObject=0x36c) returned 1 [0142.780] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src")) returned 0x20 [0142.780] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src")) returned 0x20 [0142.780] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0142.780] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0142.781] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.781] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.781] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0142.781] ReadFile (in: hFile=0x36c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x2948, lpOverlapped=0x0) returned 1 [0142.784] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x2950, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x2950, lpOverlapped=0x0) returned 1 [0142.785] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x112, lpOverlapped=0x0) returned 1 [0142.785] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.785] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.785] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x2948, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x2948, lpOverlapped=0x0) returned 1 [0142.788] FlushFileBuffers (hFile=0x36c) returned 1 [0142.792] FlushFileBuffers (hFile=0x37c) returned 1 [0142.793] CloseHandle (hObject=0x36c) returned 1 [0142.794] CloseHandle (hObject=0x37c) returned 1 [0142.794] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src")) returned 1 [0142.795] SetEvent (hEvent=0x2e4) returned 1 [0142.795] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0142.798] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=75144) returned 1 [0142.798] CloseHandle (hObject=0x37c) returned 1 [0142.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf")) returned 0x20 [0142.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf")) returned 0x20 [0142.799] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0142.799] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0142.799] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.799] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.799] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0142.801] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x12588, lpOverlapped=0x0) returned 1 [0142.805] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x12590, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x12590, lpOverlapped=0x0) returned 1 [0142.807] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x112, lpOverlapped=0x0) returned 1 [0142.807] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.808] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.808] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x12588, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x12588, lpOverlapped=0x0) returned 1 [0142.812] FlushFileBuffers (hFile=0x37c) returned 1 [0142.817] FlushFileBuffers (hFile=0x36c) returned 1 [0142.819] CloseHandle (hObject=0x37c) returned 1 [0142.820] CloseHandle (hObject=0x36c) returned 1 [0142.820] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf")) returned 1 [0142.822] SetEvent (hEvent=0x2e4) returned 1 [0142.822] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0142.822] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=75124) returned 1 [0142.822] CloseHandle (hObject=0x36c) returned 1 [0142.823] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf")) returned 0x20 [0142.823] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf")) returned 0x20 [0142.823] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0142.823] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0142.823] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.823] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.823] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0142.825] ReadFile (in: hFile=0x36c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x12574, lpOverlapped=0x0) returned 1 [0142.830] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x12580, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x12580, lpOverlapped=0x0) returned 1 [0142.833] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x112, lpOverlapped=0x0) returned 1 [0142.833] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.833] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.833] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x12574, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x12574, lpOverlapped=0x0) returned 1 [0142.837] FlushFileBuffers (hFile=0x36c) returned 1 [0142.839] FlushFileBuffers (hFile=0x37c) returned 1 [0142.841] CloseHandle (hObject=0x36c) returned 1 [0142.842] CloseHandle (hObject=0x37c) returned 1 [0142.842] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf")) returned 1 [0142.844] SetEvent (hEvent=0x2e4) returned 1 [0142.844] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0142.845] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=80856) returned 1 [0142.845] CloseHandle (hObject=0x37c) returned 1 [0142.845] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf")) returned 0x20 [0142.845] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf")) returned 0x20 [0142.845] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0142.845] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0142.846] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.846] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.846] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0142.847] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x13bd8, lpOverlapped=0x0) returned 1 [0142.851] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x13be0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x13be0, lpOverlapped=0x0) returned 1 [0142.853] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x102, lpOverlapped=0x0) returned 1 [0142.854] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.854] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0142.854] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x13bd8, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x13bd8, lpOverlapped=0x0) returned 1 [0142.859] FlushFileBuffers (hFile=0x37c) returned 1 [0142.863] FlushFileBuffers (hFile=0x36c) returned 1 [0142.865] CloseHandle (hObject=0x37c) returned 1 [0142.866] CloseHandle (hObject=0x36c) returned 1 [0142.872] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf")) returned 1 [0142.875] SetEvent (hEvent=0x2e4) returned 1 [0142.875] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0142.877] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=344908) returned 1 [0142.877] CloseHandle (hObject=0x36c) returned 1 [0142.877] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf")) returned 0x20 [0142.877] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf")) returned 0x20 [0142.877] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0142.877] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0142.878] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.878] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0142.878] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0142.879] ReadFile (in: hFile=0x36c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x5434c, lpOverlapped=0x0) returned 1 [0142.894] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x54350, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x54350, lpOverlapped=0x0) returned 1 [0142.901] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x102, lpOverlapped=0x0) returned 1 [0143.128] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0143.128] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0143.128] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x5434c, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x5434c, lpOverlapped=0x0) returned 1 [0143.137] FlushFileBuffers (hFile=0x36c) returned 1 [0143.141] FlushFileBuffers (hFile=0x37c) returned 1 [0143.142] CloseHandle (hObject=0x36c) returned 1 [0143.143] CloseHandle (hObject=0x37c) returned 1 [0143.143] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf")) returned 1 [0143.148] SetEvent (hEvent=0x2e4) returned 1 [0143.148] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0143.149] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=317896) returned 1 [0143.149] CloseHandle (hObject=0x37c) returned 1 [0143.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf")) returned 0x20 [0143.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf")) returned 0x20 [0143.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0143.149] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0143.150] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0143.150] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0143.150] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0143.150] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x4d9c8, lpOverlapped=0x0) returned 1 [0143.164] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x4d9d0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x4d9d0, lpOverlapped=0x0) returned 1 [0143.171] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x102, lpOverlapped=0x0) returned 1 [0143.171] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0143.171] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0143.171] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x4d9c8, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x4d9c8, lpOverlapped=0x0) returned 1 [0143.372] FlushFileBuffers (hFile=0x37c) returned 1 [0143.376] FlushFileBuffers (hFile=0x36c) returned 1 [0143.379] CloseHandle (hObject=0x37c) returned 1 [0143.379] CloseHandle (hObject=0x36c) returned 1 [0143.380] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf")) returned 1 [0143.384] SetEvent (hEvent=0x2e4) returned 1 [0143.384] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0143.385] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=698236) returned 1 [0143.385] CloseHandle (hObject=0x36c) returned 1 [0143.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf")) returned 0x20 [0143.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf")) returned 0x20 [0143.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0143.385] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0143.386] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0143.386] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0143.386] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0143.386] ReadFile (in: hFile=0x36c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0xaa77c, lpOverlapped=0x0) returned 1 [0143.477] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xaa780, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xaa780, lpOverlapped=0x0) returned 1 [0143.491] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x102, lpOverlapped=0x0) returned 1 [0143.491] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0143.491] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0143.491] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xaa77c, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0xaa77c, lpOverlapped=0x0) returned 1 [0143.633] FlushFileBuffers (hFile=0x36c) returned 1 [0143.638] FlushFileBuffers (hFile=0x37c) returned 1 [0143.640] CloseHandle (hObject=0x36c) returned 1 [0143.640] CloseHandle (hObject=0x37c) returned 1 [0143.640] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf")) returned 1 [0143.649] SetEvent (hEvent=0x2e4) returned 1 [0143.649] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0143.649] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=234068) returned 1 [0143.649] CloseHandle (hObject=0x37c) returned 1 [0143.650] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf")) returned 0x20 [0143.650] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf")) returned 0x20 [0143.650] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0143.650] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0143.650] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0143.650] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0143.650] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0143.651] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x39254, lpOverlapped=0x0) returned 1 [0143.694] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x39260, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x39260, lpOverlapped=0x0) returned 1 [0143.698] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x112, lpOverlapped=0x0) returned 1 [0143.699] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0143.699] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0143.699] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x39254, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x39254, lpOverlapped=0x0) returned 1 [0143.706] FlushFileBuffers (hFile=0x37c) returned 1 [0143.709] FlushFileBuffers (hFile=0x36c) returned 1 [0143.711] CloseHandle (hObject=0x37c) returned 1 [0143.712] CloseHandle (hObject=0x36c) returned 1 [0143.712] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf")) returned 1 [0143.715] SetEvent (hEvent=0x2e4) returned 1 [0143.715] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0143.716] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=242700) returned 1 [0143.716] CloseHandle (hObject=0x36c) returned 1 [0143.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf")) returned 0x20 [0143.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf")) returned 0x20 [0143.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0143.716] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0143.716] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0143.717] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0143.717] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0143.717] ReadFile (in: hFile=0x36c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x3b40c, lpOverlapped=0x0) returned 1 [0143.731] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x3b410, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x3b410, lpOverlapped=0x0) returned 1 [0143.736] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x112, lpOverlapped=0x0) returned 1 [0143.736] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0143.736] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0143.736] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x3b40c, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x3b40c, lpOverlapped=0x0) returned 1 [0143.745] FlushFileBuffers (hFile=0x36c) returned 1 [0143.748] FlushFileBuffers (hFile=0x37c) returned 1 [0143.750] CloseHandle (hObject=0x36c) returned 1 [0143.750] CloseHandle (hObject=0x37c) returned 1 [0143.751] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf")) returned 1 [0143.754] SetEvent (hEvent=0x2e4) returned 1 [0143.754] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0143.755] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=13962) returned 1 [0143.755] CloseHandle (hObject=0x37c) returned 1 [0143.755] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties")) returned 0x20 [0143.755] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties")) returned 0x20 [0143.755] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0143.755] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0143.756] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0143.756] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0143.756] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0143.756] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x368a, lpOverlapped=0x0) returned 1 [0143.790] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x3690, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x3690, lpOverlapped=0x0) returned 1 [0143.791] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x122, lpOverlapped=0x0) returned 1 [0143.791] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0143.791] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0143.791] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x368a, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x368a, lpOverlapped=0x0) returned 1 [0143.794] FlushFileBuffers (hFile=0x37c) returned 1 [0143.800] FlushFileBuffers (hFile=0x36c) returned 1 [0143.801] CloseHandle (hObject=0x37c) returned 1 [0143.801] CloseHandle (hObject=0x36c) returned 1 [0143.802] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties")) returned 1 [0143.803] SetEvent (hEvent=0x2e4) returned 1 [0143.803] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0143.807] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=1280) returned 1 [0143.807] CloseHandle (hObject=0x36c) returned 1 [0143.807] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties")) returned 0x20 [0143.808] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties")) returned 0x20 [0143.808] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0143.808] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0143.808] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0143.808] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0143.808] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0143.811] ReadFile (in: hFile=0x36c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x500, lpOverlapped=0x0) returned 1 [0143.821] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x510, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x510, lpOverlapped=0x0) returned 1 [0143.822] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x102, lpOverlapped=0x0) returned 1 [0143.823] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0143.823] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0143.823] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x500, lpOverlapped=0x0) returned 1 [0143.826] FlushFileBuffers (hFile=0x36c) returned 1 [0143.832] FlushFileBuffers (hFile=0x37c) returned 1 [0143.835] CloseHandle (hObject=0x36c) returned 1 [0143.836] CloseHandle (hObject=0x37c) returned 1 [0143.836] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties")) returned 1 [0143.838] SetEvent (hEvent=0x2e4) returned 1 [0143.838] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0143.840] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=153) returned 1 [0143.840] CloseHandle (hObject=0x37c) returned 1 [0143.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif")) returned 0x20 [0143.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif")) returned 0x20 [0143.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0143.840] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0143.840] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0143.841] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0143.841] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0143.841] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x99, lpOverlapped=0x0) returned 1 [0143.842] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xa0, lpOverlapped=0x0) returned 1 [0143.843] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x102, lpOverlapped=0x0) returned 1 [0143.844] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0143.844] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0143.844] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x99, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x99, lpOverlapped=0x0) returned 1 [0143.856] FlushFileBuffers (hFile=0x37c) returned 1 [0143.863] FlushFileBuffers (hFile=0x36c) returned 1 [0143.872] CloseHandle (hObject=0x37c) returned 1 [0143.874] CloseHandle (hObject=0x36c) returned 1 [0143.875] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif")) returned 1 [0143.876] SetEvent (hEvent=0x2e4) returned 1 [0143.876] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0143.880] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=165) returned 1 [0143.880] CloseHandle (hObject=0x36c) returned 1 [0143.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif")) returned 0x20 [0143.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif")) returned 0x20 [0143.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0143.881] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0143.881] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0143.881] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0143.881] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0143.882] ReadFile (in: hFile=0x36c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0xa5, lpOverlapped=0x0) returned 1 [0143.883] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xb0, lpOverlapped=0x0) returned 1 [0143.884] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x102, lpOverlapped=0x0) returned 1 [0143.884] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0143.884] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0143.884] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xa5, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0xa5, lpOverlapped=0x0) returned 1 [0143.887] FlushFileBuffers (hFile=0x36c) returned 1 [0143.893] FlushFileBuffers (hFile=0x37c) returned 1 [0143.897] CloseHandle (hObject=0x36c) returned 1 [0143.898] CloseHandle (hObject=0x37c) returned 1 [0143.898] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif")) returned 1 [0143.899] SetEvent (hEvent=0x2e4) returned 1 [0143.899] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0143.900] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=153) returned 1 [0143.900] CloseHandle (hObject=0x37c) returned 1 [0143.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif")) returned 0x20 [0143.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif")) returned 0x20 [0143.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0143.901] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0143.901] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0143.901] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0143.901] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0143.901] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x99, lpOverlapped=0x0) returned 1 [0143.903] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xa0, lpOverlapped=0x0) returned 1 [0143.904] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x112, lpOverlapped=0x0) returned 1 [0143.904] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0143.904] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0143.904] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x99, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x99, lpOverlapped=0x0) returned 1 [0143.907] FlushFileBuffers (hFile=0x37c) returned 1 [0143.913] FlushFileBuffers (hFile=0x36c) returned 1 [0143.915] CloseHandle (hObject=0x37c) returned 1 [0143.916] CloseHandle (hObject=0x36c) returned 1 [0143.916] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif")) returned 1 [0143.918] SetEvent (hEvent=0x2e4) returned 1 [0143.918] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0143.918] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=168) returned 1 [0143.919] CloseHandle (hObject=0x36c) returned 1 [0143.919] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif")) returned 0x20 [0143.919] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif")) returned 0x20 [0143.919] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0143.919] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0143.919] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0143.919] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0143.919] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0143.920] ReadFile (in: hFile=0x36c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0xa8, lpOverlapped=0x0) returned 1 [0143.921] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xb0, lpOverlapped=0x0) returned 1 [0143.923] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x102, lpOverlapped=0x0) returned 1 [0143.923] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0143.923] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0143.923] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xa8, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0xa8, lpOverlapped=0x0) returned 1 [0143.926] FlushFileBuffers (hFile=0x36c) returned 1 [0143.929] FlushFileBuffers (hFile=0x37c) returned 1 [0143.931] CloseHandle (hObject=0x36c) returned 1 [0143.931] CloseHandle (hObject=0x37c) returned 1 [0143.932] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif")) returned 1 [0143.933] SetEvent (hEvent=0x2e4) returned 1 [0143.933] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0143.934] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=153) returned 1 [0143.934] CloseHandle (hObject=0x37c) returned 1 [0143.934] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif")) returned 0x20 [0143.934] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif")) returned 0x20 [0143.934] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0143.934] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0143.934] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0143.935] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0143.935] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0143.935] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x99, lpOverlapped=0x0) returned 1 [0143.936] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xa0, lpOverlapped=0x0) returned 1 [0143.937] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x112, lpOverlapped=0x0) returned 1 [0143.938] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0143.938] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0143.938] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x99, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x99, lpOverlapped=0x0) returned 1 [0143.941] FlushFileBuffers (hFile=0x37c) returned 1 [0143.958] FlushFileBuffers (hFile=0x36c) returned 1 [0143.960] CloseHandle (hObject=0x37c) returned 1 [0143.961] CloseHandle (hObject=0x36c) returned 1 [0143.961] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif")) returned 1 [0143.962] SetEvent (hEvent=0x2e4) returned 1 [0143.963] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0143.963] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=147) returned 1 [0143.964] CloseHandle (hObject=0x36c) returned 1 [0143.964] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif")) returned 0x20 [0143.964] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif")) returned 0x20 [0143.964] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0143.964] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0143.964] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0143.964] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0143.964] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0143.965] ReadFile (in: hFile=0x36c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x93, lpOverlapped=0x0) returned 1 [0143.966] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xa0, lpOverlapped=0x0) returned 1 [0143.967] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x102, lpOverlapped=0x0) returned 1 [0143.967] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0143.967] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0143.967] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x93, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x93, lpOverlapped=0x0) returned 1 [0143.970] FlushFileBuffers (hFile=0x36c) returned 1 [0143.995] FlushFileBuffers (hFile=0x37c) returned 1 [0143.997] CloseHandle (hObject=0x36c) returned 1 [0143.998] CloseHandle (hObject=0x37c) returned 1 [0143.998] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif")) returned 1 [0143.999] SetEvent (hEvent=0x2e4) returned 1 [0144.000] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0144.000] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=153) returned 1 [0144.000] CloseHandle (hObject=0x37c) returned 1 [0144.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif")) returned 0x20 [0144.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif")) returned 0x20 [0144.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0144.001] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0144.001] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0144.001] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0144.001] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0144.002] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x99, lpOverlapped=0x0) returned 1 [0144.004] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xa0, lpOverlapped=0x0) returned 1 [0144.005] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x112, lpOverlapped=0x0) returned 1 [0144.005] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0144.005] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0144.005] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x99, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x99, lpOverlapped=0x0) returned 1 [0144.007] FlushFileBuffers (hFile=0x37c) returned 1 [0144.010] FlushFileBuffers (hFile=0x36c) returned 1 [0144.012] CloseHandle (hObject=0x37c) returned 1 [0144.013] CloseHandle (hObject=0x36c) returned 1 [0144.013] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif")) returned 1 [0144.015] SetEvent (hEvent=0x2e4) returned 1 [0144.015] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0144.141] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=56) returned 1 [0144.141] CloseHandle (hObject=0x36c) returned 1 [0144.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties")) returned 0x20 [0144.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties")) returned 0x20 [0144.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0144.142] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0144.142] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0144.142] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0144.142] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0144.143] ReadFile (in: hFile=0x36c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x38, lpOverlapped=0x0) returned 1 [0144.144] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x40, lpOverlapped=0x0) returned 1 [0144.145] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x102, lpOverlapped=0x0) returned 1 [0144.145] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0144.145] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0144.145] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x38, lpOverlapped=0x0) returned 1 [0144.150] FlushFileBuffers (hFile=0x36c) returned 1 [0144.152] FlushFileBuffers (hFile=0x37c) returned 1 [0144.155] CloseHandle (hObject=0x36c) returned 1 [0144.156] CloseHandle (hObject=0x37c) returned 1 [0144.157] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties")) returned 1 [0144.158] SetEvent (hEvent=0x2e4) returned 1 [0144.158] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0144.160] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=944167) returned 1 [0144.160] CloseHandle (hObject=0x37c) returned 1 [0144.160] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar")) returned 0x20 [0144.160] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar")) returned 0x20 [0144.160] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0144.160] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0144.161] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0144.161] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0144.161] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0144.162] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0xe6827, lpOverlapped=0x0) returned 1 [0144.370] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xe6830, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xe6830, lpOverlapped=0x0) returned 1 [0144.388] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0144.389] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0144.389] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0144.389] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xe6827, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0xe6827, lpOverlapped=0x0) returned 1 [0144.695] FlushFileBuffers (hFile=0x37c) returned 1 [0145.128] FlushFileBuffers (hFile=0x36c) returned 1 [0145.488] CloseHandle (hObject=0x37c) returned 1 [0145.489] CloseHandle (hObject=0x36c) returned 1 [0145.490] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar")) returned 1 [0145.502] SetEvent (hEvent=0x2e4) returned 1 [0145.502] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0145.503] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=116446) returned 1 [0145.503] CloseHandle (hObject=0x36c) returned 1 [0145.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar")) returned 0x20 [0145.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar")) returned 0x20 [0145.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0145.504] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0145.504] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0145.504] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0145.504] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0145.505] ReadFile (in: hFile=0x36c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x1c6de, lpOverlapped=0x0) returned 1 [0145.513] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x1c6e0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x1c6e0, lpOverlapped=0x0) returned 1 [0145.516] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xe2, lpOverlapped=0x0) returned 1 [0145.517] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0145.517] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0145.517] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x1c6de, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x1c6de, lpOverlapped=0x0) returned 1 [0145.522] FlushFileBuffers (hFile=0x36c) returned 1 [0145.940] FlushFileBuffers (hFile=0x37c) returned 1 [0146.323] CloseHandle (hObject=0x36c) returned 1 [0146.324] CloseHandle (hObject=0x37c) returned 1 [0146.324] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar")) returned 1 [0146.337] SetEvent (hEvent=0x2e4) returned 1 [0146.338] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0146.338] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=20109) returned 1 [0146.338] CloseHandle (hObject=0x37c) returned 1 [0146.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc")) returned 0x20 [0146.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc")) returned 0x20 [0146.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0146.339] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0146.339] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0146.339] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0146.339] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0146.341] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x4e8d, lpOverlapped=0x0) returned 1 [0146.343] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x4e90, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x4e90, lpOverlapped=0x0) returned 1 [0146.345] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0146.345] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0146.345] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0146.345] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x4e8d, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x4e8d, lpOverlapped=0x0) returned 1 [0146.349] FlushFileBuffers (hFile=0x37c) returned 1 [0146.353] FlushFileBuffers (hFile=0x36c) returned 1 [0146.354] CloseHandle (hObject=0x37c) returned 1 [0146.355] CloseHandle (hObject=0x36c) returned 1 [0146.355] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc")) returned 1 [0146.357] SetEvent (hEvent=0x2e4) returned 1 [0146.357] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0146.358] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=20065) returned 1 [0146.358] CloseHandle (hObject=0x36c) returned 1 [0146.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc")) returned 0x20 [0146.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc")) returned 0x20 [0146.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0146.358] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0146.359] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0146.359] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0146.359] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0146.359] ReadFile (in: hFile=0x36c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x4e61, lpOverlapped=0x0) returned 1 [0146.363] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x4e70, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x4e70, lpOverlapped=0x0) returned 1 [0146.365] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0146.365] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0146.365] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0146.365] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x4e61, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x4e61, lpOverlapped=0x0) returned 1 [0146.378] FlushFileBuffers (hFile=0x36c) returned 1 [0146.396] FlushFileBuffers (hFile=0x37c) returned 1 [0146.404] CloseHandle (hObject=0x36c) returned 1 [0146.404] CloseHandle (hObject=0x37c) returned 1 [0146.405] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc")) returned 1 [0146.406] SetEvent (hEvent=0x2e4) returned 1 [0146.406] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0146.407] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=560581) returned 1 [0146.407] CloseHandle (hObject=0x37c) returned 1 [0146.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar")) returned 0x20 [0146.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar")) returned 0x20 [0146.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0146.407] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0146.408] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0146.408] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0146.408] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0146.409] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x88dc5, lpOverlapped=0x0) returned 1 [0146.436] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x88dd0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x88dd0, lpOverlapped=0x0) returned 1 [0146.648] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xe2, lpOverlapped=0x0) returned 1 [0146.649] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0146.649] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0146.649] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x88dc5, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x88dc5, lpOverlapped=0x0) returned 1 [0146.665] FlushFileBuffers (hFile=0x37c) returned 1 [0146.669] FlushFileBuffers (hFile=0x36c) returned 1 [0146.672] CloseHandle (hObject=0x37c) returned 1 [0146.673] CloseHandle (hObject=0x36c) returned 1 [0146.673] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar")) returned 1 [0146.680] SetEvent (hEvent=0x2e4) returned 1 [0146.680] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0146.680] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=33932) returned 1 [0146.680] CloseHandle (hObject=0x36c) returned 1 [0146.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar")) returned 0x20 [0146.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar")) returned 0x20 [0146.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0146.681] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0146.681] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0146.681] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0146.681] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0146.693] ReadFile (in: hFile=0x36c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x848c, lpOverlapped=0x0) returned 1 [0146.696] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x8490, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x8490, lpOverlapped=0x0) returned 1 [0146.698] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0146.698] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0146.698] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0146.698] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x848c, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x848c, lpOverlapped=0x0) returned 1 [0146.701] FlushFileBuffers (hFile=0x36c) returned 1 [0146.704] FlushFileBuffers (hFile=0x37c) returned 1 [0146.705] CloseHandle (hObject=0x36c) returned 1 [0146.706] CloseHandle (hObject=0x37c) returned 1 [0146.706] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar")) returned 1 [0146.708] SetEvent (hEvent=0x2e4) returned 1 [0146.708] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0146.709] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=584576) returned 1 [0146.709] CloseHandle (hObject=0x37c) returned 1 [0146.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar")) returned 0x20 [0146.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar")) returned 0x20 [0146.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0146.709] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0146.709] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0146.710] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0146.710] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0146.710] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x8eb80, lpOverlapped=0x0) returned 1 [0146.731] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x8eb90, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x8eb90, lpOverlapped=0x0) returned 1 [0146.967] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0146.967] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0146.968] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0146.968] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x8eb80, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x8eb80, lpOverlapped=0x0) returned 1 [0147.011] FlushFileBuffers (hFile=0x37c) returned 1 [0147.471] FlushFileBuffers (hFile=0x36c) returned 1 [0147.474] CloseHandle (hObject=0x37c) returned 1 [0147.474] CloseHandle (hObject=0x36c) returned 1 [0147.475] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar")) returned 1 [0147.481] SetEvent (hEvent=0x2e4) returned 1 [0147.482] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0147.482] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=4226) returned 1 [0147.482] CloseHandle (hObject=0x36c) returned 1 [0147.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt")) returned 0x20 [0147.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt")) returned 0x20 [0147.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0147.504] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0147.504] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0147.504] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0147.505] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0147.507] ReadFile (in: hFile=0x36c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x1082, lpOverlapped=0x0) returned 1 [0147.509] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x1090, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x1090, lpOverlapped=0x0) returned 1 [0147.510] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0147.510] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0147.510] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0147.511] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x1082, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x1082, lpOverlapped=0x0) returned 1 [0147.537] FlushFileBuffers (hFile=0x36c) returned 1 [0147.543] FlushFileBuffers (hFile=0x37c) returned 1 [0147.544] CloseHandle (hObject=0x36c) returned 1 [0147.544] CloseHandle (hObject=0x37c) returned 1 [0147.544] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt")) returned 1 [0147.546] SetEvent (hEvent=0x2e4) returned 1 [0147.546] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0147.547] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=2455) returned 1 [0147.547] CloseHandle (hObject=0x37c) returned 1 [0147.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties")) returned 0x20 [0147.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties")) returned 0x20 [0147.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0147.547] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0147.547] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0147.547] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0147.547] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0147.548] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x997, lpOverlapped=0x0) returned 1 [0147.550] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x9a0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x9a0, lpOverlapped=0x0) returned 1 [0147.551] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x102, lpOverlapped=0x0) returned 1 [0147.551] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0147.551] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0147.551] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x997, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x997, lpOverlapped=0x0) returned 1 [0147.553] FlushFileBuffers (hFile=0x37c) returned 1 [0147.556] FlushFileBuffers (hFile=0x36c) returned 1 [0147.557] CloseHandle (hObject=0x37c) returned 1 [0147.557] CloseHandle (hObject=0x36c) returned 1 [0147.558] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties")) returned 1 [0147.559] SetEvent (hEvent=0x2e4) returned 1 [0147.559] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0147.562] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=3998) returned 1 [0147.562] CloseHandle (hObject=0x36c) returned 1 [0147.562] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access")) returned 0x20 [0147.562] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access")) returned 0x20 [0147.562] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0147.562] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0147.563] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0147.563] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0147.563] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0147.568] ReadFile (in: hFile=0x36c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0xf9e, lpOverlapped=0x0) returned 1 [0147.570] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xfa0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xfa0, lpOverlapped=0x0) returned 1 [0147.572] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x102, lpOverlapped=0x0) returned 1 [0147.572] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0147.572] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0147.572] WriteFile (in: hFile=0x36c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf9e, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0xf9e, lpOverlapped=0x0) returned 1 [0147.579] FlushFileBuffers (hFile=0x36c) returned 1 [0147.582] FlushFileBuffers (hFile=0x37c) returned 1 [0147.584] CloseHandle (hObject=0x36c) returned 1 [0147.584] CloseHandle (hObject=0x37c) returned 1 [0147.584] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access")) returned 1 [0147.585] SetEvent (hEvent=0x2e4) returned 1 [0147.586] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0147.587] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=2856) returned 1 [0147.587] CloseHandle (hObject=0x37c) returned 1 [0147.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template")) returned 0x20 [0147.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template")) returned 0x20 [0147.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0147.587] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0147.588] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0147.588] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0147.588] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x378 [0147.590] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0xb28, lpOverlapped=0x0) returned 1 [0147.592] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xb30, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xb30, lpOverlapped=0x0) returned 1 [0147.593] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x112, lpOverlapped=0x0) returned 1 [0147.593] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0147.593] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0147.594] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xb28, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0xb28, lpOverlapped=0x0) returned 1 [0147.596] FlushFileBuffers (hFile=0x37c) returned 1 [0147.599] FlushFileBuffers (hFile=0x378) returned 1 [0147.600] CloseHandle (hObject=0x37c) returned 1 [0147.600] CloseHandle (hObject=0x378) returned 1 [0147.600] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template")) returned 1 [0147.602] SetEvent (hEvent=0x2e4) returned 1 [0147.602] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0147.603] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=14630) returned 1 [0147.603] CloseHandle (hObject=0x378) returned 1 [0147.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties")) returned 0x20 [0147.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties")) returned 0x20 [0147.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0147.603] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0147.603] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0147.604] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0147.604] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0147.604] ReadFile (in: hFile=0x378, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x3926, lpOverlapped=0x0) returned 1 [0147.606] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x3930, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x3930, lpOverlapped=0x0) returned 1 [0147.608] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x102, lpOverlapped=0x0) returned 1 [0147.608] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0147.608] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0147.608] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x3926, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x3926, lpOverlapped=0x0) returned 1 [0147.611] FlushFileBuffers (hFile=0x378) returned 1 [0147.613] FlushFileBuffers (hFile=0x37c) returned 1 [0147.617] CloseHandle (hObject=0x378) returned 1 [0147.617] CloseHandle (hObject=0x37c) returned 1 [0147.617] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties")) returned 1 [0147.619] SetEvent (hEvent=0x2e4) returned 1 [0147.620] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0147.621] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=3376) returned 1 [0147.621] CloseHandle (hObject=0x37c) returned 1 [0147.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template")) returned 0x20 [0147.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template")) returned 0x20 [0147.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0147.621] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0147.621] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0147.621] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0147.622] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x378 [0147.622] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0xd30, lpOverlapped=0x0) returned 1 [0147.624] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xd40, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xd40, lpOverlapped=0x0) returned 1 [0147.625] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x102, lpOverlapped=0x0) returned 1 [0147.626] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0147.626] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0147.626] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xd30, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0xd30, lpOverlapped=0x0) returned 1 [0147.629] FlushFileBuffers (hFile=0x37c) returned 1 [0147.632] FlushFileBuffers (hFile=0x378) returned 1 [0147.634] CloseHandle (hObject=0x37c) returned 1 [0147.634] CloseHandle (hObject=0x378) returned 1 [0147.634] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template")) returned 1 [0147.636] SetEvent (hEvent=0x2e4) returned 1 [0147.637] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0147.637] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=381) returned 1 [0147.637] CloseHandle (hObject=0x378) returned 1 [0147.638] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar")) returned 0x20 [0147.638] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar")) returned 0x20 [0147.638] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0147.638] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0147.638] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0147.639] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0147.639] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0147.639] ReadFile (in: hFile=0x378, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x17d, lpOverlapped=0x0) returned 1 [0147.640] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x180, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x180, lpOverlapped=0x0) returned 1 [0147.641] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x102, lpOverlapped=0x0) returned 1 [0147.642] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0147.643] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0147.643] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x17d, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x17d, lpOverlapped=0x0) returned 1 [0147.645] FlushFileBuffers (hFile=0x378) returned 1 [0147.650] FlushFileBuffers (hFile=0x37c) returned 1 [0147.652] CloseHandle (hObject=0x378) returned 1 [0147.652] CloseHandle (hObject=0x37c) returned 1 [0147.652] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar")) returned 1 [0147.653] SetEvent (hEvent=0x2e4) returned 1 [0147.654] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0147.654] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=2126) returned 1 [0147.654] CloseHandle (hObject=0x37c) returned 1 [0147.654] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index")) returned 0x20 [0147.654] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index")) returned 0x20 [0147.654] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0147.655] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0147.655] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0147.655] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0147.655] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x378 [0147.656] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x84e, lpOverlapped=0x0) returned 1 [0147.657] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x850, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x850, lpOverlapped=0x0) returned 1 [0147.658] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0147.659] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0147.659] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0147.659] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x84e, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x84e, lpOverlapped=0x0) returned 1 [0147.661] FlushFileBuffers (hFile=0x37c) returned 1 [0147.663] FlushFileBuffers (hFile=0x378) returned 1 [0147.664] CloseHandle (hObject=0x37c) returned 1 [0147.665] CloseHandle (hObject=0x378) returned 1 [0147.665] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index")) returned 1 [0147.667] SetEvent (hEvent=0x2e4) returned 1 [0147.667] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\net.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0147.667] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=4464) returned 1 [0147.667] CloseHandle (hObject=0x378) returned 1 [0147.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\net.properties")) returned 0x20 [0147.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\net.properties")) returned 0x20 [0147.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\net.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0147.668] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\net.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0147.668] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0147.668] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0147.668] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\net.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0147.669] ReadFile (in: hFile=0x378, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x1170, lpOverlapped=0x0) returned 1 [0147.671] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x1180, lpOverlapped=0x0) returned 1 [0147.673] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0147.673] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0147.688] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0147.688] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x1170, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x1170, lpOverlapped=0x0) returned 1 [0147.693] FlushFileBuffers (hFile=0x378) returned 1 [0147.695] FlushFileBuffers (hFile=0x37c) returned 1 [0147.697] CloseHandle (hObject=0x378) returned 1 [0147.697] CloseHandle (hObject=0x37c) returned 1 [0147.697] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\net.properties")) returned 1 [0147.699] SetEvent (hEvent=0x2e4) returned 1 [0147.699] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0147.700] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=1923211) returned 1 [0147.700] CloseHandle (hObject=0x37c) returned 1 [0147.700] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar")) returned 0x20 [0147.700] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0 [0147.701] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar")) returned 0 [0147.701] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0147.702] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=2796) returned 1 [0147.702] CloseHandle (hObject=0x37c) returned 1 [0147.702] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja")) returned 0x20 [0147.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja")) returned 0x20 [0147.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0147.704] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0147.704] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0147.704] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0147.704] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x378 [0147.705] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0xaec, lpOverlapped=0x0) returned 1 [0147.709] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xaf0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xaf0, lpOverlapped=0x0) returned 1 [0147.711] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x102, lpOverlapped=0x0) returned 1 [0147.711] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0147.711] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0147.711] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xaec, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0xaec, lpOverlapped=0x0) returned 1 [0147.713] FlushFileBuffers (hFile=0x37c) returned 1 [0147.716] FlushFileBuffers (hFile=0x378) returned 1 [0147.719] CloseHandle (hObject=0x37c) returned 1 [0147.719] CloseHandle (hObject=0x378) returned 1 [0147.719] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja")) returned 1 [0147.721] SetEvent (hEvent=0x2e4) returned 1 [0147.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfontj2d.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0147.722] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=10393) returned 1 [0147.722] CloseHandle (hObject=0x378) returned 1 [0147.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfontj2d.properties")) returned 0x20 [0147.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfontj2d.properties")) returned 0x20 [0147.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfontj2d.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0147.722] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfontj2d.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0147.723] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0147.723] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0147.723] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfontj2d.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0147.723] ReadFile (in: hFile=0x378, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x2899, lpOverlapped=0x0) returned 1 [0147.725] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x28a0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x28a0, lpOverlapped=0x0) returned 1 [0147.726] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x102, lpOverlapped=0x0) returned 1 [0147.727] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0147.727] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0147.727] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x2899, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x2899, lpOverlapped=0x0) returned 1 [0147.730] FlushFileBuffers (hFile=0x378) returned 1 [0147.736] FlushFileBuffers (hFile=0x37c) returned 1 [0147.737] CloseHandle (hObject=0x378) returned 1 [0147.737] CloseHandle (hObject=0x37c) returned 1 [0147.737] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfontj2d.properties")) returned 1 [0147.739] SetEvent (hEvent=0x2e4) returned 1 [0147.739] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0147.740] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=3492573) returned 1 [0147.740] CloseHandle (hObject=0x37c) returned 1 [0147.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar")) returned 0x20 [0147.740] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0 [0147.740] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar")) returned 0 [0147.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0147.741] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=54560347) returned 1 [0147.742] CloseHandle (hObject=0x37c) returned 1 [0147.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar")) returned 0x20 [0147.742] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0 [0147.742] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar")) returned 0 [0147.742] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0147.745] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=4054) returned 1 [0147.745] CloseHandle (hObject=0x37c) returned 1 [0147.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist")) returned 0x20 [0147.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist")) returned 0x20 [0147.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0147.745] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0147.746] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0147.746] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0147.746] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x378 [0147.750] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0xfd6, lpOverlapped=0x0) returned 1 [0147.751] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xfe0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xfe0, lpOverlapped=0x0) returned 1 [0147.752] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0147.753] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0147.753] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0147.753] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xfd6, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0xfd6, lpOverlapped=0x0) returned 1 [0147.756] FlushFileBuffers (hFile=0x37c) returned 1 [0147.758] FlushFileBuffers (hFile=0x378) returned 1 [0148.360] CloseHandle (hObject=0x37c) returned 1 [0148.360] CloseHandle (hObject=0x378) returned 1 [0148.360] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist")) returned 1 [0148.362] SetEvent (hEvent=0x2e4) returned 1 [0148.363] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0148.363] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=105500) returned 1 [0148.363] CloseHandle (hObject=0x378) returned 1 [0148.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat")) returned 0x20 [0148.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat")) returned 0x20 [0148.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0148.364] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0148.364] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0148.364] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0148.364] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0148.365] ReadFile (in: hFile=0x378, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x19c1c, lpOverlapped=0x0) returned 1 [0148.373] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x19c20, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x19c20, lpOverlapped=0x0) returned 1 [0148.376] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0148.376] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0148.376] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0148.376] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x19c1c, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x19c1c, lpOverlapped=0x0) returned 1 [0148.386] FlushFileBuffers (hFile=0x378) returned 1 [0148.415] FlushFileBuffers (hFile=0x37c) returned 1 [0148.427] CloseHandle (hObject=0x378) returned 1 [0148.428] CloseHandle (hObject=0x37c) returned 1 [0148.428] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat")) returned 1 [0148.430] SetEvent (hEvent=0x2e4) returned 1 [0148.430] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0148.431] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=40) returned 1 [0148.431] CloseHandle (hObject=0x37c) returned 1 [0148.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license")) returned 0x20 [0148.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license")) returned 0x20 [0148.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0148.431] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0148.431] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0148.432] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0148.432] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x378 [0148.432] ReadFile (in: hFile=0x37c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x28, lpOverlapped=0x0) returned 1 [0148.435] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x30, lpOverlapped=0x0) returned 1 [0148.436] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xe2, lpOverlapped=0x0) returned 1 [0148.436] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0148.436] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0148.436] WriteFile (in: hFile=0x37c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x28, lpOverlapped=0x0) returned 1 [0148.439] FlushFileBuffers (hFile=0x37c) returned 1 [0148.451] FlushFileBuffers (hFile=0x378) returned 1 [0148.454] CloseHandle (hObject=0x37c) returned 1 [0148.454] CloseHandle (hObject=0x378) returned 1 [0148.454] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license")) returned 1 [0148.574] SetEvent (hEvent=0x2e4) returned 1 [0148.574] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0148.575] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=63933) returned 1 [0148.575] CloseHandle (hObject=0x374) returned 1 [0148.575] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt")) returned 0x20 [0148.575] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt")) returned 0x20 [0148.575] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0148.575] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0148.575] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0148.576] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0148.576] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x388 [0148.576] ReadFile (in: hFile=0x374, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0xf9bd, lpOverlapped=0x0) returned 1 [0148.581] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf9c0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf9c0, lpOverlapped=0x0) returned 1 [0148.583] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x122, lpOverlapped=0x0) returned 1 [0148.584] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0148.584] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0148.584] WriteFile (in: hFile=0x374, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf9bd, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0xf9bd, lpOverlapped=0x0) returned 1 [0148.587] FlushFileBuffers (hFile=0x374) returned 1 [0148.594] FlushFileBuffers (hFile=0x388) returned 1 [0148.596] CloseHandle (hObject=0x374) returned 1 [0148.596] CloseHandle (hObject=0x388) returned 1 [0148.596] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt")) returned 1 [0148.598] SetEvent (hEvent=0x2e4) returned 1 [0148.598] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0148.599] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=145180) returned 1 [0148.599] CloseHandle (hObject=0x388) returned 1 [0148.599] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt")) returned 0x20 [0148.599] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt")) returned 0x20 [0148.599] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0148.600] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0148.600] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0148.600] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0148.600] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x374 [0148.601] ReadFile (in: hFile=0x388, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x2371c, lpOverlapped=0x0) returned 1 [0148.607] WriteFile (in: hFile=0x374, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x23720, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x23720, lpOverlapped=0x0) returned 1 [0148.611] WriteFile (in: hFile=0x374, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x112, lpOverlapped=0x0) returned 1 [0148.611] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0148.612] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0148.612] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x2371c, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x2371c, lpOverlapped=0x0) returned 1 [0148.617] FlushFileBuffers (hFile=0x388) returned 1 [0148.620] FlushFileBuffers (hFile=0x374) returned 1 [0148.622] CloseHandle (hObject=0x388) returned 1 [0148.622] CloseHandle (hObject=0x374) returned 1 [0148.622] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt")) returned 1 [0148.625] SetEvent (hEvent=0x2e4) returned 1 [0148.625] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0148.626] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=955) returned 1 [0148.626] CloseHandle (hObject=0x374) returned 1 [0148.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html")) returned 0x20 [0148.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html")) returned 0x20 [0148.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0148.626] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0148.627] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0148.627] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0148.627] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x388 [0148.628] ReadFile (in: hFile=0x374, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x3bb, lpOverlapped=0x0) returned 1 [0148.629] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x3c0, lpOverlapped=0x0) returned 1 [0148.630] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0148.630] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0148.631] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0148.631] WriteFile (in: hFile=0x374, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x3bb, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x3bb, lpOverlapped=0x0) returned 1 [0148.632] FlushFileBuffers (hFile=0x374) returned 1 [0148.635] FlushFileBuffers (hFile=0x388) returned 1 [0148.636] CloseHandle (hObject=0x374) returned 1 [0148.636] CloseHandle (hObject=0x388) returned 1 [0148.637] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html")) returned 1 [0148.638] SetEvent (hEvent=0x2e4) returned 1 [0148.638] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0148.639] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=5944055) returned 1 [0148.639] CloseHandle (hObject=0x388) returned 1 [0148.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml")) returned 0x20 [0148.639] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\AppXManifest.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0 [0148.639] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\AppXManifest.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml")) returned 0 [0148.640] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0148.640] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=281) returned 1 [0148.640] CloseHandle (hObject=0x388) returned 1 [0148.640] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml")) returned 0x220 [0148.640] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml")) returned 0x220 [0148.641] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0148.641] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0148.641] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0148.641] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0148.641] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x390 [0148.943] ReadFile (in: hFile=0x388, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x119, lpOverlapped=0x0) returned 1 [0148.944] WriteFile (in: hFile=0x390, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x120, lpOverlapped=0x0) returned 1 [0148.945] WriteFile (in: hFile=0x390, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x102, lpOverlapped=0x0) returned 1 [0148.946] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0148.946] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0148.946] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x119, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x119, lpOverlapped=0x0) returned 1 [0148.948] FlushFileBuffers (hFile=0x388) returned 1 [0148.952] FlushFileBuffers (hFile=0x390) returned 1 [0148.953] CloseHandle (hObject=0x388) returned 1 [0148.954] CloseHandle (hObject=0x390) returned 1 [0148.954] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml")) returned 1 [0148.955] SetEvent (hEvent=0x2e4) returned 1 [0148.955] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0148.957] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=1533) returned 1 [0148.957] CloseHandle (hObject=0x390) returned 1 [0148.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml")) returned 0x220 [0148.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml")) returned 0x220 [0148.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0148.958] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0148.958] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0148.958] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0148.958] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x388 [0148.959] ReadFile (in: hFile=0x390, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x5fd, lpOverlapped=0x0) returned 1 [0148.961] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x600, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x600, lpOverlapped=0x0) returned 1 [0148.962] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x142, lpOverlapped=0x0) returned 1 [0148.962] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0148.962] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0148.962] WriteFile (in: hFile=0x390, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x5fd, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x5fd, lpOverlapped=0x0) returned 1 [0148.965] FlushFileBuffers (hFile=0x390) returned 1 [0148.968] FlushFileBuffers (hFile=0x388) returned 1 [0148.969] CloseHandle (hObject=0x390) returned 1 [0148.969] CloseHandle (hObject=0x388) returned 1 [0148.969] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml")) returned 1 [0148.971] SetEvent (hEvent=0x2e4) returned 1 [0148.971] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0148.986] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=800867) returned 1 [0148.986] CloseHandle (hObject=0x388) returned 1 [0148.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml")) returned 0x220 [0148.987] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml")) returned 0x220 [0148.987] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0148.987] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0148.987] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0148.987] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0148.987] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x390 [0148.988] ReadFile (in: hFile=0x388, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0xc3863, lpOverlapped=0x0) returned 1 [0149.017] WriteFile (in: hFile=0x390, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xc3870, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xc3870, lpOverlapped=0x0) returned 1 [0149.189] WriteFile (in: hFile=0x390, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x142, lpOverlapped=0x0) returned 1 [0149.189] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0149.189] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0149.189] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xc3863, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0xc3863, lpOverlapped=0x0) returned 1 [0149.531] FlushFileBuffers (hFile=0x388) returned 1 [0149.693] FlushFileBuffers (hFile=0x390) returned 1 [0149.696] CloseHandle (hObject=0x388) returned 1 [0149.696] CloseHandle (hObject=0x390) returned 1 [0149.696] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml")) returned 1 [0149.705] SetEvent (hEvent=0x2e4) returned 1 [0149.705] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0149.706] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=19451) returned 1 [0149.706] CloseHandle (hObject=0x390) returned 1 [0149.706] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml")) returned 0x220 [0149.707] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml")) returned 0x220 [0149.707] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0149.707] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0149.707] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0149.707] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0149.707] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x388 [0149.708] ReadFile (in: hFile=0x390, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x4bfb, lpOverlapped=0x0) returned 1 [0149.710] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x4c00, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x4c00, lpOverlapped=0x0) returned 1 [0149.712] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x142, lpOverlapped=0x0) returned 1 [0149.712] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0149.712] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0149.712] WriteFile (in: hFile=0x390, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x4bfb, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x4bfb, lpOverlapped=0x0) returned 1 [0149.716] FlushFileBuffers (hFile=0x390) returned 1 [0149.720] FlushFileBuffers (hFile=0x388) returned 1 [0149.723] CloseHandle (hObject=0x390) returned 1 [0149.723] CloseHandle (hObject=0x388) returned 1 [0149.723] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml")) returned 1 [0149.725] SetEvent (hEvent=0x2e4) returned 1 [0149.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0149.726] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=763363) returned 1 [0149.726] CloseHandle (hObject=0x388) returned 1 [0149.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml")) returned 0x220 [0149.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml")) returned 0x220 [0149.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0149.726] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0149.727] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0149.727] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0149.727] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x390 [0149.727] ReadFile (in: hFile=0x388, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0xba5e3, lpOverlapped=0x0) returned 1 [0149.754] WriteFile (in: hFile=0x390, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xba5f0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xba5f0, lpOverlapped=0x0) returned 1 [0149.961] WriteFile (in: hFile=0x390, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x142, lpOverlapped=0x0) returned 1 [0149.961] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0149.962] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0149.962] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xba5e3, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0xba5e3, lpOverlapped=0x0) returned 1 [0150.005] FlushFileBuffers (hFile=0x388) returned 1 [0150.283] FlushFileBuffers (hFile=0x390) returned 1 [0150.286] CloseHandle (hObject=0x388) returned 1 [0150.286] CloseHandle (hObject=0x390) returned 1 [0150.286] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml")) returned 1 [0150.295] SetEvent (hEvent=0x2e4) returned 1 [0150.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0150.298] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=1261) returned 1 [0150.298] CloseHandle (hObject=0x390) returned 1 [0150.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml")) returned 0x220 [0150.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml")) returned 0x220 [0150.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0150.298] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0150.299] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0150.299] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0150.299] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x388 [0150.299] ReadFile (in: hFile=0x390, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x4ed, lpOverlapped=0x0) returned 1 [0150.310] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x4f0, lpOverlapped=0x0) returned 1 [0150.311] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x142, lpOverlapped=0x0) returned 1 [0150.311] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0150.311] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0150.311] WriteFile (in: hFile=0x390, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x4ed, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x4ed, lpOverlapped=0x0) returned 1 [0150.319] FlushFileBuffers (hFile=0x390) returned 1 [0150.324] FlushFileBuffers (hFile=0x388) returned 1 [0150.361] CloseHandle (hObject=0x390) returned 1 [0150.362] CloseHandle (hObject=0x388) returned 1 [0150.362] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml")) returned 1 [0150.363] SetEvent (hEvent=0x2e4) returned 1 [0150.363] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0150.364] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=14913) returned 1 [0150.364] CloseHandle (hObject=0x388) returned 1 [0150.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml")) returned 0x220 [0150.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml")) returned 0x220 [0150.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0150.365] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0150.365] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0150.365] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0150.365] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x390 [0150.366] ReadFile (in: hFile=0x388, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x3a41, lpOverlapped=0x0) returned 1 [0150.368] WriteFile (in: hFile=0x390, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x3a50, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x3a50, lpOverlapped=0x0) returned 1 [0150.370] WriteFile (in: hFile=0x390, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x142, lpOverlapped=0x0) returned 1 [0150.370] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0150.370] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0150.370] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x3a41, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x3a41, lpOverlapped=0x0) returned 1 [0150.373] FlushFileBuffers (hFile=0x388) returned 1 [0150.375] FlushFileBuffers (hFile=0x390) returned 1 [0150.377] CloseHandle (hObject=0x388) returned 1 [0150.377] CloseHandle (hObject=0x390) returned 1 [0150.377] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml")) returned 1 [0150.379] SetEvent (hEvent=0x2e4) returned 1 [0150.379] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0150.380] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=357349) returned 1 [0150.380] CloseHandle (hObject=0x390) returned 1 [0150.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml")) returned 0x220 [0150.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml")) returned 0x220 [0150.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0150.380] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0150.382] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0150.382] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0150.383] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x388 [0150.383] ReadFile (in: hFile=0x390, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x573e5, lpOverlapped=0x0) returned 1 [0150.406] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x573f0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x573f0, lpOverlapped=0x0) returned 1 [0150.415] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x142, lpOverlapped=0x0) returned 1 [0150.415] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0150.415] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0150.415] WriteFile (in: hFile=0x390, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x573e5, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x573e5, lpOverlapped=0x0) returned 1 [0150.930] FlushFileBuffers (hFile=0x390) returned 1 [0150.934] FlushFileBuffers (hFile=0x388) returned 1 [0150.937] CloseHandle (hObject=0x390) returned 1 [0150.937] CloseHandle (hObject=0x388) returned 1 [0150.937] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml")) returned 1 [0150.950] SetEvent (hEvent=0x2e4) returned 1 [0150.950] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0150.951] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=1261) returned 1 [0150.951] CloseHandle (hObject=0x388) returned 1 [0150.951] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml")) returned 0x220 [0150.951] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml")) returned 0x220 [0150.951] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0150.952] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0150.952] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0150.952] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0150.952] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x390 [0150.953] ReadFile (in: hFile=0x388, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x4ed, lpOverlapped=0x0) returned 1 [0150.955] WriteFile (in: hFile=0x390, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x4f0, lpOverlapped=0x0) returned 1 [0150.956] WriteFile (in: hFile=0x390, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x142, lpOverlapped=0x0) returned 1 [0150.956] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0150.956] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0150.956] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x4ed, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x4ed, lpOverlapped=0x0) returned 1 [0150.960] FlushFileBuffers (hFile=0x388) returned 1 [0150.966] FlushFileBuffers (hFile=0x390) returned 1 [0150.967] CloseHandle (hObject=0x388) returned 1 [0150.967] CloseHandle (hObject=0x390) returned 1 [0150.967] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml")) returned 1 [0150.969] SetEvent (hEvent=0x2e4) returned 1 [0150.969] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0150.970] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=1450) returned 1 [0150.970] CloseHandle (hObject=0x390) returned 1 [0150.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml")) returned 0x220 [0150.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml")) returned 0x220 [0150.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0150.970] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0150.971] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0150.971] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0150.971] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x388 [0150.983] ReadFile (in: hFile=0x390, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x5aa, lpOverlapped=0x0) returned 1 [0150.985] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x5b0, lpOverlapped=0x0) returned 1 [0150.986] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x142, lpOverlapped=0x0) returned 1 [0150.986] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0150.986] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0150.986] WriteFile (in: hFile=0x390, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x5aa, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x5aa, lpOverlapped=0x0) returned 1 [0150.988] FlushFileBuffers (hFile=0x390) returned 1 [0150.991] FlushFileBuffers (hFile=0x388) returned 1 [0150.993] CloseHandle (hObject=0x390) returned 1 [0150.993] CloseHandle (hObject=0x388) returned 1 [0150.993] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml")) returned 1 [0150.995] SetEvent (hEvent=0x2e4) returned 1 [0150.995] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0150.996] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=1261) returned 1 [0150.996] CloseHandle (hObject=0x388) returned 1 [0150.996] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml")) returned 0x220 [0150.996] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml")) returned 0x220 [0150.996] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0150.996] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0150.996] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0150.996] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0150.997] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x390 [0150.997] ReadFile (in: hFile=0x388, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x4ed, lpOverlapped=0x0) returned 1 [0151.001] WriteFile (in: hFile=0x390, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x4f0, lpOverlapped=0x0) returned 1 [0151.002] WriteFile (in: hFile=0x390, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x142, lpOverlapped=0x0) returned 1 [0151.003] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0151.003] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0151.003] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x4ed, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x4ed, lpOverlapped=0x0) returned 1 [0151.005] FlushFileBuffers (hFile=0x388) returned 1 [0151.008] FlushFileBuffers (hFile=0x390) returned 1 [0151.010] CloseHandle (hObject=0x388) returned 1 [0151.010] CloseHandle (hObject=0x390) returned 1 [0151.010] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml")) returned 1 [0151.011] SetEvent (hEvent=0x2e4) returned 1 [0151.012] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0151.012] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=3754) returned 1 [0151.012] CloseHandle (hObject=0x390) returned 1 [0151.012] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml")) returned 0x220 [0151.012] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml")) returned 0x220 [0151.012] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.013] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0151.013] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0151.013] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0151.013] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x388 [0151.015] ReadFile (in: hFile=0x390, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0xeaa, lpOverlapped=0x0) returned 1 [0151.016] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xeb0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xeb0, lpOverlapped=0x0) returned 1 [0151.017] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x142, lpOverlapped=0x0) returned 1 [0151.018] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0151.018] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0151.018] WriteFile (in: hFile=0x390, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xeaa, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0xeaa, lpOverlapped=0x0) returned 1 [0151.021] FlushFileBuffers (hFile=0x390) returned 1 [0151.026] FlushFileBuffers (hFile=0x388) returned 1 [0151.027] CloseHandle (hObject=0x390) returned 1 [0151.027] CloseHandle (hObject=0x388) returned 1 [0151.028] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml")) returned 1 [0151.029] SetEvent (hEvent=0x2e4) returned 1 [0151.029] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0151.030] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=1261) returned 1 [0151.030] CloseHandle (hObject=0x388) returned 1 [0151.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml")) returned 0x220 [0151.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml")) returned 0x220 [0151.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.031] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0151.031] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0151.031] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0151.031] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x390 [0151.032] ReadFile (in: hFile=0x388, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x4ed, lpOverlapped=0x0) returned 1 [0151.034] WriteFile (in: hFile=0x390, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x4f0, lpOverlapped=0x0) returned 1 [0151.035] WriteFile (in: hFile=0x390, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x142, lpOverlapped=0x0) returned 1 [0151.035] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0151.035] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0151.035] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x4ed, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x4ed, lpOverlapped=0x0) returned 1 [0151.038] FlushFileBuffers (hFile=0x388) returned 1 [0151.041] FlushFileBuffers (hFile=0x390) returned 1 [0151.043] CloseHandle (hObject=0x388) returned 1 [0151.043] CloseHandle (hObject=0x390) returned 1 [0151.043] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml")) returned 1 [0151.045] SetEvent (hEvent=0x2e4) returned 1 [0151.045] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0151.045] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=1261) returned 1 [0151.045] CloseHandle (hObject=0x390) returned 1 [0151.045] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml")) returned 0x220 [0151.046] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml")) returned 0x220 [0151.046] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.046] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0151.046] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0151.046] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0151.046] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x388 [0151.047] ReadFile (in: hFile=0x390, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x4ed, lpOverlapped=0x0) returned 1 [0151.049] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x4f0, lpOverlapped=0x0) returned 1 [0151.050] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x142, lpOverlapped=0x0) returned 1 [0151.050] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0151.050] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0151.050] WriteFile (in: hFile=0x390, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x4ed, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x4ed, lpOverlapped=0x0) returned 1 [0151.053] FlushFileBuffers (hFile=0x390) returned 1 [0151.058] FlushFileBuffers (hFile=0x388) returned 1 [0151.059] CloseHandle (hObject=0x390) returned 1 [0151.059] CloseHandle (hObject=0x388) returned 1 [0151.060] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml")) returned 1 [0151.065] SetEvent (hEvent=0x2e4) returned 1 [0151.066] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0151.066] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=1261) returned 1 [0151.066] CloseHandle (hObject=0x388) returned 1 [0151.067] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml")) returned 0x220 [0151.067] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml")) returned 0x220 [0151.067] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.067] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0151.067] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0151.067] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0151.068] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x390 [0151.069] ReadFile (in: hFile=0x388, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x4ed, lpOverlapped=0x0) returned 1 [0151.070] WriteFile (in: hFile=0x390, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x4f0, lpOverlapped=0x0) returned 1 [0151.072] WriteFile (in: hFile=0x390, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x142, lpOverlapped=0x0) returned 1 [0151.072] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0151.072] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0151.073] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x4ed, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x4ed, lpOverlapped=0x0) returned 1 [0151.075] FlushFileBuffers (hFile=0x388) returned 1 [0151.079] FlushFileBuffers (hFile=0x390) returned 1 [0151.080] CloseHandle (hObject=0x388) returned 1 [0151.080] CloseHandle (hObject=0x390) returned 1 [0151.080] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml")) returned 1 [0151.082] SetEvent (hEvent=0x2e4) returned 1 [0151.082] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0151.083] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=527958) returned 1 [0151.083] CloseHandle (hObject=0x390) returned 1 [0151.083] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml")) returned 0x220 [0151.083] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml")) returned 0x220 [0151.083] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.083] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0151.083] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0151.084] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0151.084] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x388 [0151.085] ReadFile (in: hFile=0x390, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x80e56, lpOverlapped=0x0) returned 1 [0151.105] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x80e60, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x80e60, lpOverlapped=0x0) returned 1 [0151.248] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x142, lpOverlapped=0x0) returned 1 [0151.283] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0151.283] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0151.283] WriteFile (in: hFile=0x390, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x80e56, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x80e56, lpOverlapped=0x0) returned 1 [0151.302] FlushFileBuffers (hFile=0x390) returned 1 [0151.521] FlushFileBuffers (hFile=0x388) returned 1 [0151.683] CloseHandle (hObject=0x390) returned 1 [0151.683] CloseHandle (hObject=0x388) returned 1 [0151.683] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml")) returned 1 [0151.690] SetEvent (hEvent=0x2e4) returned 1 [0151.690] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0151.789] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=7216) returned 1 [0151.789] CloseHandle (hObject=0x388) returned 1 [0151.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif")) returned 0x220 [0151.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif")) returned 0x220 [0151.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.790] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0151.790] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0151.791] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0151.791] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x390 [0151.801] ReadFile (in: hFile=0x388, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x1c30, lpOverlapped=0x0) returned 1 [0151.803] WriteFile (in: hFile=0x390, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x1c40, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x1c40, lpOverlapped=0x0) returned 1 [0151.805] WriteFile (in: hFile=0x390, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0151.805] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0151.805] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0151.805] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x1c30, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x1c30, lpOverlapped=0x0) returned 1 [0151.808] FlushFileBuffers (hFile=0x388) returned 1 [0151.820] FlushFileBuffers (hFile=0x390) returned 1 [0151.828] CloseHandle (hObject=0x388) returned 1 [0151.828] CloseHandle (hObject=0x390) returned 1 [0151.828] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif")) returned 1 [0151.830] SetEvent (hEvent=0x2e4) returned 1 [0151.830] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0151.831] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=14873) returned 1 [0151.831] CloseHandle (hObject=0x390) returned 1 [0151.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif")) returned 0x220 [0151.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif")) returned 0x220 [0151.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.831] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0151.832] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0151.832] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0151.832] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x388 [0151.832] ReadFile (in: hFile=0x390, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x3a19, lpOverlapped=0x0) returned 1 [0151.834] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x3a20, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x3a20, lpOverlapped=0x0) returned 1 [0151.836] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0151.836] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0151.836] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0151.836] WriteFile (in: hFile=0x390, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x3a19, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x3a19, lpOverlapped=0x0) returned 1 [0151.838] FlushFileBuffers (hFile=0x390) returned 1 [0151.843] FlushFileBuffers (hFile=0x388) returned 1 [0151.851] CloseHandle (hObject=0x390) returned 1 [0151.851] CloseHandle (hObject=0x388) returned 1 [0151.851] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif")) returned 1 [0151.852] SetEvent (hEvent=0x2e4) returned 1 [0151.853] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0151.853] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=3251) returned 1 [0151.853] CloseHandle (hObject=0x388) returned 1 [0151.853] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif")) returned 0x220 [0151.853] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif")) returned 0x220 [0151.853] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.854] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0151.854] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0151.854] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0151.854] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x390 [0151.855] ReadFile (in: hFile=0x388, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0xcb3, lpOverlapped=0x0) returned 1 [0151.862] WriteFile (in: hFile=0x390, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xcc0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xcc0, lpOverlapped=0x0) returned 1 [0151.863] WriteFile (in: hFile=0x390, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0151.863] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0151.863] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0151.863] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xcb3, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0xcb3, lpOverlapped=0x0) returned 1 [0151.865] FlushFileBuffers (hFile=0x388) returned 1 [0151.869] FlushFileBuffers (hFile=0x390) returned 1 [0151.885] CloseHandle (hObject=0x388) returned 1 [0151.885] CloseHandle (hObject=0x390) returned 1 [0151.886] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif")) returned 1 [0151.891] SetEvent (hEvent=0x2e4) returned 1 [0151.891] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0151.893] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=7686) returned 1 [0151.893] CloseHandle (hObject=0x390) returned 1 [0151.893] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif")) returned 0x220 [0151.893] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif")) returned 0x220 [0151.893] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.894] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0151.894] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0151.894] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0151.894] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x388 [0151.895] ReadFile (in: hFile=0x390, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x1e06, lpOverlapped=0x0) returned 1 [0151.897] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x1e10, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x1e10, lpOverlapped=0x0) returned 1 [0151.898] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0151.899] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0151.899] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0151.899] WriteFile (in: hFile=0x390, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x1e06, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x1e06, lpOverlapped=0x0) returned 1 [0151.905] FlushFileBuffers (hFile=0x390) returned 1 [0151.917] FlushFileBuffers (hFile=0x388) returned 1 [0151.926] CloseHandle (hObject=0x390) returned 1 [0151.926] CloseHandle (hObject=0x388) returned 1 [0151.926] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif")) returned 1 [0151.928] SetEvent (hEvent=0x2e4) returned 1 [0151.928] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0151.930] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=517) returned 1 [0151.930] CloseHandle (hObject=0x388) returned 1 [0151.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif")) returned 0x220 [0151.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif")) returned 0x220 [0151.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.931] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0151.931] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0151.931] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0151.931] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x390 [0151.932] ReadFile (in: hFile=0x388, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x205, lpOverlapped=0x0) returned 1 [0151.933] WriteFile (in: hFile=0x390, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x210, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x210, lpOverlapped=0x0) returned 1 [0151.934] WriteFile (in: hFile=0x390, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0151.934] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0151.934] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0151.934] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x205, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x205, lpOverlapped=0x0) returned 1 [0151.937] FlushFileBuffers (hFile=0x388) returned 1 [0151.944] FlushFileBuffers (hFile=0x390) returned 1 [0151.958] CloseHandle (hObject=0x388) returned 1 [0151.958] CloseHandle (hObject=0x390) returned 1 [0151.958] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif")) returned 1 [0151.960] SetEvent (hEvent=0x2e4) returned 1 [0151.960] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0151.961] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=12702) returned 1 [0151.961] CloseHandle (hObject=0x390) returned 1 [0151.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif")) returned 0x220 [0151.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif")) returned 0x220 [0151.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.961] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0151.962] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0151.962] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0151.962] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x388 [0151.962] ReadFile (in: hFile=0x390, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x319e, lpOverlapped=0x0) returned 1 [0151.965] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x31a0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x31a0, lpOverlapped=0x0) returned 1 [0151.967] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0151.967] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0151.968] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0151.968] WriteFile (in: hFile=0x390, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x319e, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x319e, lpOverlapped=0x0) returned 1 [0151.972] FlushFileBuffers (hFile=0x390) returned 1 [0151.989] FlushFileBuffers (hFile=0x388) returned 1 [0151.999] CloseHandle (hObject=0x390) returned 1 [0152.000] CloseHandle (hObject=0x388) returned 1 [0152.000] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif")) returned 1 [0152.002] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0152.002] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=3140) returned 1 [0152.002] CloseHandle (hObject=0x388) returned 1 [0152.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif")) returned 0x220 [0152.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif")) returned 0x220 [0152.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0152.005] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0152.005] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0152.005] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0152.005] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x390 [0152.012] ReadFile (in: hFile=0x388, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0xc44, lpOverlapped=0x0) returned 1 [0152.018] WriteFile (in: hFile=0x390, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xc50, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xc50, lpOverlapped=0x0) returned 1 [0152.020] WriteFile (in: hFile=0x390, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0152.020] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0152.020] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0152.020] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xc44, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0xc44, lpOverlapped=0x0) returned 1 [0152.024] FlushFileBuffers (hFile=0x388) returned 1 [0152.028] FlushFileBuffers (hFile=0x390) returned 1 [0152.046] CloseHandle (hObject=0x388) returned 1 [0152.046] CloseHandle (hObject=0x390) returned 1 [0152.046] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif")) returned 1 [0152.052] SetEvent (hEvent=0x2e4) returned 1 [0152.052] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0152.054] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=5253) returned 1 [0152.054] CloseHandle (hObject=0x390) returned 1 [0152.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif")) returned 0x220 [0152.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif")) returned 0x220 [0152.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0152.055] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0152.055] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0152.055] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0152.055] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x388 [0152.056] ReadFile (in: hFile=0x390, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x1485, lpOverlapped=0x0) returned 1 [0152.058] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x1490, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x1490, lpOverlapped=0x0) returned 1 [0152.059] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0152.059] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0152.059] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0152.059] WriteFile (in: hFile=0x390, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x1485, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x1485, lpOverlapped=0x0) returned 1 [0152.062] FlushFileBuffers (hFile=0x390) returned 1 [0152.070] FlushFileBuffers (hFile=0x388) returned 1 [0152.078] CloseHandle (hObject=0x390) returned 1 [0152.078] CloseHandle (hObject=0x388) returned 1 [0152.078] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif")) returned 1 [0152.079] SetEvent (hEvent=0x2e4) returned 1 [0152.080] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0152.080] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=10607) returned 1 [0152.080] CloseHandle (hObject=0x388) returned 1 [0152.080] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif")) returned 0x220 [0152.080] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif")) returned 0x220 [0152.080] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0152.081] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0152.081] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0152.081] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0152.081] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x390 [0152.081] ReadFile (in: hFile=0x388, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x296f, lpOverlapped=0x0) returned 1 [0152.089] WriteFile (in: hFile=0x390, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x2970, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x2970, lpOverlapped=0x0) returned 1 [0152.090] WriteFile (in: hFile=0x390, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0152.090] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0152.090] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0152.090] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x296f, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x296f, lpOverlapped=0x0) returned 1 [0152.093] FlushFileBuffers (hFile=0x388) returned 1 [0152.097] FlushFileBuffers (hFile=0x390) returned 1 [0152.104] CloseHandle (hObject=0x388) returned 1 [0152.104] CloseHandle (hObject=0x390) returned 1 [0152.104] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif")) returned 1 [0152.106] SetEvent (hEvent=0x2e4) returned 1 [0152.106] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0152.113] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=5315) returned 1 [0152.113] CloseHandle (hObject=0x390) returned 1 [0152.113] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif")) returned 0x220 [0152.113] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif")) returned 0x220 [0152.113] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0152.113] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0152.114] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0152.114] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0152.114] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x388 [0152.117] ReadFile (in: hFile=0x390, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x14c3, lpOverlapped=0x0) returned 1 [0152.119] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x14d0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x14d0, lpOverlapped=0x0) returned 1 [0152.120] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0152.120] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0152.120] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0152.120] WriteFile (in: hFile=0x390, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x14c3, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x14c3, lpOverlapped=0x0) returned 1 [0152.123] FlushFileBuffers (hFile=0x390) returned 1 [0152.135] FlushFileBuffers (hFile=0x388) returned 1 [0152.146] CloseHandle (hObject=0x390) returned 1 [0152.146] CloseHandle (hObject=0x388) returned 1 [0152.146] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif")) returned 1 [0152.148] SetEvent (hEvent=0x2e4) returned 1 [0152.148] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0152.149] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=5030) returned 1 [0152.149] CloseHandle (hObject=0x388) returned 1 [0152.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif")) returned 0x220 [0152.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif")) returned 0x220 [0152.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0152.149] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0152.150] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0152.150] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0152.150] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x390 [0152.151] ReadFile (in: hFile=0x388, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x13a6, lpOverlapped=0x0) returned 1 [0152.153] WriteFile (in: hFile=0x390, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x13b0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x13b0, lpOverlapped=0x0) returned 1 [0152.154] WriteFile (in: hFile=0x390, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0152.155] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0152.155] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0152.155] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x13a6, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x13a6, lpOverlapped=0x0) returned 1 [0152.158] FlushFileBuffers (hFile=0x388) returned 1 [0152.162] FlushFileBuffers (hFile=0x390) returned 1 [0152.172] CloseHandle (hObject=0x388) returned 1 [0152.172] CloseHandle (hObject=0x390) returned 1 [0152.172] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif")) returned 1 [0152.177] SetEvent (hEvent=0x2e4) returned 1 [0152.177] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0152.179] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=7583) returned 1 [0152.179] CloseHandle (hObject=0x390) returned 1 [0152.179] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif")) returned 0x220 [0152.179] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif")) returned 0x220 [0152.179] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0152.179] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0152.180] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0152.180] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0152.180] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x388 [0152.180] ReadFile (in: hFile=0x390, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x1d9f, lpOverlapped=0x0) returned 1 [0152.182] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x1da0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x1da0, lpOverlapped=0x0) returned 1 [0152.183] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0152.184] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0152.184] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0152.184] WriteFile (in: hFile=0x390, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x1d9f, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x1d9f, lpOverlapped=0x0) returned 1 [0152.199] FlushFileBuffers (hFile=0x390) returned 1 [0152.217] FlushFileBuffers (hFile=0x388) returned 1 [0152.221] CloseHandle (hObject=0x390) returned 1 [0152.221] CloseHandle (hObject=0x388) returned 1 [0152.221] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif")) returned 1 [0152.223] SetEvent (hEvent=0x2e4) returned 1 [0152.223] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0152.224] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=13254) returned 1 [0152.224] CloseHandle (hObject=0x388) returned 1 [0152.224] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif")) returned 0x220 [0152.224] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif")) returned 0x220 [0152.224] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0152.224] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0152.225] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0152.225] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0152.225] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x390 [0152.225] ReadFile (in: hFile=0x388, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x33c6, lpOverlapped=0x0) returned 1 [0152.228] WriteFile (in: hFile=0x390, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x33d0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x33d0, lpOverlapped=0x0) returned 1 [0152.229] WriteFile (in: hFile=0x390, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0152.229] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0152.229] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0152.229] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x33c6, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x33c6, lpOverlapped=0x0) returned 1 [0152.234] FlushFileBuffers (hFile=0x388) returned 1 [0152.242] FlushFileBuffers (hFile=0x390) returned 1 [0152.250] CloseHandle (hObject=0x388) returned 1 [0152.251] CloseHandle (hObject=0x390) returned 1 [0152.251] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif")) returned 1 [0152.252] SetEvent (hEvent=0x2e4) returned 1 [0152.252] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0152.253] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=4894) returned 1 [0152.253] CloseHandle (hObject=0x390) returned 1 [0152.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif")) returned 0x220 [0152.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif")) returned 0x220 [0152.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0152.254] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0152.254] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0152.254] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0152.254] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x388 [0152.255] ReadFile (in: hFile=0x390, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x131e, lpOverlapped=0x0) returned 1 [0152.257] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x1320, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x1320, lpOverlapped=0x0) returned 1 [0152.259] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0152.259] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0152.259] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0152.259] WriteFile (in: hFile=0x390, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x131e, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x131e, lpOverlapped=0x0) returned 1 [0152.261] FlushFileBuffers (hFile=0x390) returned 1 [0152.271] FlushFileBuffers (hFile=0x388) returned 1 [0152.283] CloseHandle (hObject=0x390) returned 1 [0152.283] CloseHandle (hObject=0x388) returned 1 [0152.283] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif")) returned 1 [0152.284] SetEvent (hEvent=0x2e4) returned 1 [0152.285] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0152.285] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=9248) returned 1 [0152.285] CloseHandle (hObject=0x388) returned 1 [0152.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif")) returned 0x220 [0152.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif")) returned 0x220 [0152.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0152.286] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0152.286] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0152.286] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0152.286] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x390 [0152.287] ReadFile (in: hFile=0x388, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x2420, lpOverlapped=0x0) returned 1 [0152.297] WriteFile (in: hFile=0x390, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x2430, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x2430, lpOverlapped=0x0) returned 1 [0152.298] WriteFile (in: hFile=0x390, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0152.298] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0152.299] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0152.299] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x2420, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x2420, lpOverlapped=0x0) returned 1 [0152.301] FlushFileBuffers (hFile=0x388) returned 1 [0152.307] FlushFileBuffers (hFile=0x390) returned 1 [0152.329] CloseHandle (hObject=0x388) returned 1 [0152.330] CloseHandle (hObject=0x390) returned 1 [0152.338] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif")) returned 1 [0152.348] SetEvent (hEvent=0x2e4) returned 1 [0152.348] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0152.349] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=4390) returned 1 [0152.349] CloseHandle (hObject=0x390) returned 1 [0152.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif")) returned 0x220 [0152.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif")) returned 0x220 [0152.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0152.350] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0152.350] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0152.350] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0152.350] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x388 [0152.351] ReadFile (in: hFile=0x390, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x1126, lpOverlapped=0x0) returned 1 [0152.353] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x1130, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x1130, lpOverlapped=0x0) returned 1 [0152.355] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0152.355] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0152.355] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0152.355] WriteFile (in: hFile=0x390, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x1126, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x1126, lpOverlapped=0x0) returned 1 [0152.357] FlushFileBuffers (hFile=0x390) returned 1 [0152.361] FlushFileBuffers (hFile=0x388) returned 1 [0152.368] CloseHandle (hObject=0x390) returned 1 [0152.368] CloseHandle (hObject=0x388) returned 1 [0152.368] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif")) returned 1 [0152.822] SetEvent (hEvent=0x2e4) returned 1 [0152.822] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0152.826] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=1832) returned 1 [0152.826] CloseHandle (hObject=0x38c) returned 1 [0152.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf")) returned 0x220 [0152.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf")) returned 0x220 [0152.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0152.827] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0152.827] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0152.827] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0152.827] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0152.828] ReadFile (in: hFile=0x38c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x728, lpOverlapped=0x0) returned 1 [0152.830] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x730, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x730, lpOverlapped=0x0) returned 1 [0152.832] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0152.832] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0152.832] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0152.832] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x728, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x728, lpOverlapped=0x0) returned 1 [0152.834] FlushFileBuffers (hFile=0x38c) returned 1 [0152.837] FlushFileBuffers (hFile=0x394) returned 1 [0152.839] CloseHandle (hObject=0x38c) returned 1 [0152.839] CloseHandle (hObject=0x394) returned 1 [0152.839] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf")) returned 1 [0152.840] SetEvent (hEvent=0x2e4) returned 1 [0152.841] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0152.842] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=26332) returned 1 [0152.842] CloseHandle (hObject=0x394) returned 1 [0152.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf")) returned 0x220 [0152.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf")) returned 0x220 [0152.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0152.842] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0152.843] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0152.843] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0152.843] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x38c [0152.844] ReadFile (in: hFile=0x394, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x66dc, lpOverlapped=0x0) returned 1 [0152.846] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x66e0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x66e0, lpOverlapped=0x0) returned 1 [0152.848] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0152.848] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0152.848] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0152.848] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x66dc, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x66dc, lpOverlapped=0x0) returned 1 [0152.857] FlushFileBuffers (hFile=0x394) returned 1 [0152.861] FlushFileBuffers (hFile=0x38c) returned 1 [0152.862] CloseHandle (hObject=0x394) returned 1 [0152.862] CloseHandle (hObject=0x38c) returned 1 [0152.862] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf")) returned 1 [0152.864] SetEvent (hEvent=0x2e4) returned 1 [0152.864] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0152.865] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=27858) returned 1 [0152.865] CloseHandle (hObject=0x38c) returned 1 [0152.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf")) returned 0x220 [0152.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf")) returned 0x220 [0152.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0152.865] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0152.866] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0152.866] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0152.866] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0152.867] ReadFile (in: hFile=0x38c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x6cd2, lpOverlapped=0x0) returned 1 [0152.869] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x6ce0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x6ce0, lpOverlapped=0x0) returned 1 [0152.871] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0152.871] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0152.871] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0152.871] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x6cd2, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x6cd2, lpOverlapped=0x0) returned 1 [0152.874] FlushFileBuffers (hFile=0x38c) returned 1 [0152.876] FlushFileBuffers (hFile=0x394) returned 1 [0152.878] CloseHandle (hObject=0x38c) returned 1 [0152.878] CloseHandle (hObject=0x394) returned 1 [0152.878] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf")) returned 1 [0152.880] SetEvent (hEvent=0x2e4) returned 1 [0152.880] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0152.881] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=3746) returned 1 [0152.881] CloseHandle (hObject=0x394) returned 1 [0152.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf")) returned 0x220 [0152.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf")) returned 0x220 [0152.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0152.881] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0152.881] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0152.882] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0152.882] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x38c [0152.883] ReadFile (in: hFile=0x394, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0xea2, lpOverlapped=0x0) returned 1 [0152.894] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xeb0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xeb0, lpOverlapped=0x0) returned 1 [0152.895] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0152.896] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0152.896] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0152.896] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xea2, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0xea2, lpOverlapped=0x0) returned 1 [0152.898] FlushFileBuffers (hFile=0x394) returned 1 [0152.906] FlushFileBuffers (hFile=0x38c) returned 1 [0152.910] CloseHandle (hObject=0x394) returned 1 [0152.911] CloseHandle (hObject=0x38c) returned 1 [0152.911] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf")) returned 1 [0152.912] SetEvent (hEvent=0x2e4) returned 1 [0152.912] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0152.913] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=5836) returned 1 [0152.913] CloseHandle (hObject=0x38c) returned 1 [0152.913] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf")) returned 0x220 [0152.913] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf")) returned 0x220 [0152.913] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0152.914] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0152.914] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0152.914] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0152.914] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0152.915] ReadFile (in: hFile=0x38c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x16cc, lpOverlapped=0x0) returned 1 [0152.921] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x16d0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x16d0, lpOverlapped=0x0) returned 1 [0152.922] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0152.922] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0152.923] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0152.923] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x16cc, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x16cc, lpOverlapped=0x0) returned 1 [0152.925] FlushFileBuffers (hFile=0x38c) returned 1 [0152.934] FlushFileBuffers (hFile=0x394) returned 1 [0152.938] CloseHandle (hObject=0x38c) returned 1 [0152.938] CloseHandle (hObject=0x394) returned 1 [0152.938] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf")) returned 1 [0152.940] SetEvent (hEvent=0x2e4) returned 1 [0152.940] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0152.941] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=3012) returned 1 [0152.941] CloseHandle (hObject=0x394) returned 1 [0152.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf")) returned 0x220 [0152.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf")) returned 0x220 [0152.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0152.941] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0152.941] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0152.942] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0152.942] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x38c [0152.942] ReadFile (in: hFile=0x394, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0xbc4, lpOverlapped=0x0) returned 1 [0152.946] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xbd0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xbd0, lpOverlapped=0x0) returned 1 [0152.947] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0152.947] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0152.947] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0152.947] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xbc4, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0xbc4, lpOverlapped=0x0) returned 1 [0152.953] FlushFileBuffers (hFile=0x394) returned 1 [0152.957] FlushFileBuffers (hFile=0x38c) returned 1 [0152.958] CloseHandle (hObject=0x394) returned 1 [0152.958] CloseHandle (hObject=0x38c) returned 1 [0152.958] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf")) returned 1 [0152.960] SetEvent (hEvent=0x2e4) returned 1 [0152.960] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0152.961] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=2756) returned 1 [0152.961] CloseHandle (hObject=0x38c) returned 1 [0152.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf")) returned 0x220 [0152.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf")) returned 0x220 [0152.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0152.962] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0152.962] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0152.962] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0152.962] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0152.963] ReadFile (in: hFile=0x38c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0xac4, lpOverlapped=0x0) returned 1 [0152.964] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xad0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xad0, lpOverlapped=0x0) returned 1 [0152.965] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0152.966] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0152.966] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0152.966] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xac4, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0xac4, lpOverlapped=0x0) returned 1 [0152.968] FlushFileBuffers (hFile=0x38c) returned 1 [0152.970] FlushFileBuffers (hFile=0x394) returned 1 [0152.984] CloseHandle (hObject=0x38c) returned 1 [0152.984] CloseHandle (hObject=0x394) returned 1 [0152.984] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf")) returned 1 [0152.986] SetEvent (hEvent=0x2e4) returned 1 [0152.986] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0152.987] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=7372) returned 1 [0152.987] CloseHandle (hObject=0x394) returned 1 [0152.987] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf")) returned 0x220 [0152.987] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf")) returned 0x220 [0152.987] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0152.988] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0152.988] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0152.988] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0152.988] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x38c [0152.989] ReadFile (in: hFile=0x394, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x1ccc, lpOverlapped=0x0) returned 1 [0152.991] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x1cd0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x1cd0, lpOverlapped=0x0) returned 1 [0152.992] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0152.992] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0152.992] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0152.992] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x1ccc, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x1ccc, lpOverlapped=0x0) returned 1 [0152.995] FlushFileBuffers (hFile=0x394) returned 1 [0152.997] FlushFileBuffers (hFile=0x38c) returned 1 [0152.999] CloseHandle (hObject=0x394) returned 1 [0152.999] CloseHandle (hObject=0x38c) returned 1 [0152.999] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf")) returned 1 [0153.001] SetEvent (hEvent=0x2e4) returned 1 [0153.001] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0153.002] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=7540) returned 1 [0153.002] CloseHandle (hObject=0x38c) returned 1 [0153.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf")) returned 0x220 [0153.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf")) returned 0x220 [0153.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0153.003] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0153.003] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.003] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.003] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0153.004] ReadFile (in: hFile=0x38c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x1d74, lpOverlapped=0x0) returned 1 [0153.006] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x1d80, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x1d80, lpOverlapped=0x0) returned 1 [0153.008] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0153.008] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.008] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.008] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x1d74, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x1d74, lpOverlapped=0x0) returned 1 [0153.010] FlushFileBuffers (hFile=0x38c) returned 1 [0153.013] FlushFileBuffers (hFile=0x394) returned 1 [0153.014] CloseHandle (hObject=0x38c) returned 1 [0153.014] CloseHandle (hObject=0x394) returned 1 [0153.014] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf")) returned 1 [0153.016] SetEvent (hEvent=0x2e4) returned 1 [0153.016] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0153.017] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=6632) returned 1 [0153.018] CloseHandle (hObject=0x394) returned 1 [0153.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf")) returned 0x220 [0153.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf")) returned 0x220 [0153.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0153.022] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0153.023] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.023] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.023] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x38c [0153.023] ReadFile (in: hFile=0x394, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x19e8, lpOverlapped=0x0) returned 1 [0153.025] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x19f0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x19f0, lpOverlapped=0x0) returned 1 [0153.026] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0153.027] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.027] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.027] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x19e8, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x19e8, lpOverlapped=0x0) returned 1 [0153.034] FlushFileBuffers (hFile=0x394) returned 1 [0153.038] FlushFileBuffers (hFile=0x38c) returned 1 [0153.039] CloseHandle (hObject=0x394) returned 1 [0153.040] CloseHandle (hObject=0x38c) returned 1 [0153.040] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf")) returned 1 [0153.041] SetEvent (hEvent=0x2e4) returned 1 [0153.041] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0153.042] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=2108) returned 1 [0153.042] CloseHandle (hObject=0x38c) returned 1 [0153.042] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf")) returned 0x220 [0153.042] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf")) returned 0x220 [0153.042] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0153.043] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0153.043] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.043] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.043] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0153.044] ReadFile (in: hFile=0x38c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x83c, lpOverlapped=0x0) returned 1 [0153.045] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x840, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x840, lpOverlapped=0x0) returned 1 [0153.046] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0153.046] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.047] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.047] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x83c, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x83c, lpOverlapped=0x0) returned 1 [0153.051] FlushFileBuffers (hFile=0x38c) returned 1 [0153.054] FlushFileBuffers (hFile=0x394) returned 1 [0153.055] CloseHandle (hObject=0x38c) returned 1 [0153.055] CloseHandle (hObject=0x394) returned 1 [0153.055] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf")) returned 1 [0153.057] SetEvent (hEvent=0x2e4) returned 1 [0153.057] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0153.057] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=9240) returned 1 [0153.057] CloseHandle (hObject=0x394) returned 1 [0153.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf")) returned 0x220 [0153.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf")) returned 0x220 [0153.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0153.058] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0153.058] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.058] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.058] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x38c [0153.059] ReadFile (in: hFile=0x394, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x2418, lpOverlapped=0x0) returned 1 [0153.061] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x2420, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x2420, lpOverlapped=0x0) returned 1 [0153.062] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0153.062] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.063] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.063] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x2418, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x2418, lpOverlapped=0x0) returned 1 [0153.065] FlushFileBuffers (hFile=0x394) returned 1 [0153.067] FlushFileBuffers (hFile=0x38c) returned 1 [0153.069] CloseHandle (hObject=0x394) returned 1 [0153.069] CloseHandle (hObject=0x38c) returned 1 [0153.069] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf")) returned 1 [0153.071] SetEvent (hEvent=0x2e4) returned 1 [0153.071] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0153.072] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=2344) returned 1 [0153.072] CloseHandle (hObject=0x38c) returned 1 [0153.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf")) returned 0x220 [0153.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf")) returned 0x220 [0153.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0153.073] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0153.073] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.073] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.073] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0153.074] ReadFile (in: hFile=0x38c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x928, lpOverlapped=0x0) returned 1 [0153.075] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x930, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x930, lpOverlapped=0x0) returned 1 [0153.077] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0153.077] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.077] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.077] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x928, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x928, lpOverlapped=0x0) returned 1 [0153.079] FlushFileBuffers (hFile=0x38c) returned 1 [0153.082] FlushFileBuffers (hFile=0x394) returned 1 [0153.083] CloseHandle (hObject=0x38c) returned 1 [0153.084] CloseHandle (hObject=0x394) returned 1 [0153.084] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf")) returned 1 [0153.085] SetEvent (hEvent=0x2e4) returned 1 [0153.085] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0153.086] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=6060) returned 1 [0153.086] CloseHandle (hObject=0x394) returned 1 [0153.086] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf")) returned 0x220 [0153.086] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf")) returned 0x220 [0153.086] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0153.086] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0153.087] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.087] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.087] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x38c [0153.087] ReadFile (in: hFile=0x394, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x17ac, lpOverlapped=0x0) returned 1 [0153.089] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x17b0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x17b0, lpOverlapped=0x0) returned 1 [0153.090] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0153.090] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.090] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.090] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x17ac, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x17ac, lpOverlapped=0x0) returned 1 [0153.093] FlushFileBuffers (hFile=0x394) returned 1 [0153.098] FlushFileBuffers (hFile=0x38c) returned 1 [0153.100] CloseHandle (hObject=0x394) returned 1 [0153.100] CloseHandle (hObject=0x38c) returned 1 [0153.100] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf")) returned 1 [0153.102] SetEvent (hEvent=0x2e4) returned 1 [0153.102] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0153.103] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=3416) returned 1 [0153.103] CloseHandle (hObject=0x38c) returned 1 [0153.103] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf")) returned 0x220 [0153.103] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf")) returned 0x220 [0153.103] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0153.103] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0153.104] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.104] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.104] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0153.104] ReadFile (in: hFile=0x38c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0xd58, lpOverlapped=0x0) returned 1 [0153.106] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xd60, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xd60, lpOverlapped=0x0) returned 1 [0153.107] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0153.107] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.107] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.107] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xd58, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0xd58, lpOverlapped=0x0) returned 1 [0153.109] FlushFileBuffers (hFile=0x38c) returned 1 [0153.114] FlushFileBuffers (hFile=0x394) returned 1 [0153.116] CloseHandle (hObject=0x38c) returned 1 [0153.116] CloseHandle (hObject=0x394) returned 1 [0153.116] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf")) returned 1 [0153.118] SetEvent (hEvent=0x2e4) returned 1 [0153.118] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0153.118] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=2636) returned 1 [0153.118] CloseHandle (hObject=0x394) returned 1 [0153.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf")) returned 0x220 [0153.119] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf")) returned 0x220 [0153.119] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0153.119] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0153.119] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.119] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.119] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x38c [0153.120] ReadFile (in: hFile=0x394, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0xa4c, lpOverlapped=0x0) returned 1 [0153.122] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xa50, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xa50, lpOverlapped=0x0) returned 1 [0153.123] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0153.124] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.124] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.124] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xa4c, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0xa4c, lpOverlapped=0x0) returned 1 [0153.126] FlushFileBuffers (hFile=0x394) returned 1 [0153.129] FlushFileBuffers (hFile=0x38c) returned 1 [0153.130] CloseHandle (hObject=0x394) returned 1 [0153.131] CloseHandle (hObject=0x38c) returned 1 [0153.131] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf")) returned 1 [0153.132] SetEvent (hEvent=0x2e4) returned 1 [0153.133] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0153.133] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=6636) returned 1 [0153.133] CloseHandle (hObject=0x38c) returned 1 [0153.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf")) returned 0x220 [0153.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf")) returned 0x220 [0153.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0153.134] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0153.134] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.134] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.134] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0153.135] ReadFile (in: hFile=0x38c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x19ec, lpOverlapped=0x0) returned 1 [0153.137] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x19f0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x19f0, lpOverlapped=0x0) returned 1 [0153.138] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0153.139] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.139] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.139] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x19ec, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x19ec, lpOverlapped=0x0) returned 1 [0153.141] FlushFileBuffers (hFile=0x38c) returned 1 [0153.143] FlushFileBuffers (hFile=0x394) returned 1 [0153.144] CloseHandle (hObject=0x38c) returned 1 [0153.145] CloseHandle (hObject=0x394) returned 1 [0153.145] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf")) returned 1 [0153.147] SetEvent (hEvent=0x2e4) returned 1 [0153.147] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0153.147] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=4612) returned 1 [0153.147] CloseHandle (hObject=0x394) returned 1 [0153.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf")) returned 0x220 [0153.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf")) returned 0x220 [0153.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0153.148] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0153.148] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.148] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.148] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x38c [0153.149] ReadFile (in: hFile=0x394, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x1204, lpOverlapped=0x0) returned 1 [0153.151] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x1210, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x1210, lpOverlapped=0x0) returned 1 [0153.152] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0153.152] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.152] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.152] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x1204, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x1204, lpOverlapped=0x0) returned 1 [0153.155] FlushFileBuffers (hFile=0x394) returned 1 [0153.159] FlushFileBuffers (hFile=0x38c) returned 1 [0153.161] CloseHandle (hObject=0x394) returned 1 [0153.161] CloseHandle (hObject=0x38c) returned 1 [0153.161] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf")) returned 1 [0153.163] SetEvent (hEvent=0x2e4) returned 1 [0153.163] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0153.164] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=3144) returned 1 [0153.164] CloseHandle (hObject=0x38c) returned 1 [0153.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf")) returned 0x220 [0153.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf")) returned 0x220 [0153.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0153.165] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0153.165] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.165] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.165] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0153.166] ReadFile (in: hFile=0x38c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0xc48, lpOverlapped=0x0) returned 1 [0153.168] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xc50, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xc50, lpOverlapped=0x0) returned 1 [0153.169] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0153.169] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.169] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.169] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xc48, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0xc48, lpOverlapped=0x0) returned 1 [0153.172] FlushFileBuffers (hFile=0x38c) returned 1 [0153.180] FlushFileBuffers (hFile=0x394) returned 1 [0153.181] CloseHandle (hObject=0x38c) returned 1 [0153.182] CloseHandle (hObject=0x394) returned 1 [0153.182] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf")) returned 1 [0153.183] SetEvent (hEvent=0x2e4) returned 1 [0153.183] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0153.184] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=7668) returned 1 [0153.184] CloseHandle (hObject=0x394) returned 1 [0153.184] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf")) returned 0x220 [0153.184] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf")) returned 0x220 [0153.184] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0153.185] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0153.185] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.185] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.185] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x38c [0153.186] ReadFile (in: hFile=0x394, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x1df4, lpOverlapped=0x0) returned 1 [0153.188] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x1e00, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x1e00, lpOverlapped=0x0) returned 1 [0153.189] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0153.189] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.189] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.189] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x1df4, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x1df4, lpOverlapped=0x0) returned 1 [0153.192] FlushFileBuffers (hFile=0x394) returned 1 [0153.194] FlushFileBuffers (hFile=0x38c) returned 1 [0153.196] CloseHandle (hObject=0x394) returned 1 [0153.197] CloseHandle (hObject=0x38c) returned 1 [0153.197] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf")) returned 1 [0153.198] SetEvent (hEvent=0x2e4) returned 1 [0153.198] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0153.199] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=8492) returned 1 [0153.199] CloseHandle (hObject=0x38c) returned 1 [0153.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf")) returned 0x220 [0153.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf")) returned 0x220 [0153.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0153.200] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0153.200] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.200] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.200] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0153.201] ReadFile (in: hFile=0x38c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x212c, lpOverlapped=0x0) returned 1 [0153.203] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x2130, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x2130, lpOverlapped=0x0) returned 1 [0153.205] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0153.205] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.205] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.205] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x212c, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x212c, lpOverlapped=0x0) returned 1 [0153.208] FlushFileBuffers (hFile=0x38c) returned 1 [0153.211] FlushFileBuffers (hFile=0x394) returned 1 [0153.212] CloseHandle (hObject=0x38c) returned 1 [0153.212] CloseHandle (hObject=0x394) returned 1 [0153.212] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf")) returned 1 [0153.214] SetEvent (hEvent=0x2e4) returned 1 [0153.214] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0153.216] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=7804) returned 1 [0153.216] CloseHandle (hObject=0x394) returned 1 [0153.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf")) returned 0x220 [0153.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf")) returned 0x220 [0153.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0153.216] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0153.216] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.217] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.217] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x38c [0153.217] ReadFile (in: hFile=0x394, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x1e7c, lpOverlapped=0x0) returned 1 [0153.219] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x1e80, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x1e80, lpOverlapped=0x0) returned 1 [0153.220] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0153.220] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.220] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.220] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x1e7c, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x1e7c, lpOverlapped=0x0) returned 1 [0153.224] FlushFileBuffers (hFile=0x394) returned 1 [0153.227] FlushFileBuffers (hFile=0x38c) returned 1 [0153.229] CloseHandle (hObject=0x394) returned 1 [0153.230] CloseHandle (hObject=0x38c) returned 1 [0153.230] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf")) returned 1 [0153.231] SetEvent (hEvent=0x2e4) returned 1 [0153.231] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0153.232] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=7804) returned 1 [0153.232] CloseHandle (hObject=0x38c) returned 1 [0153.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf")) returned 0x220 [0153.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf")) returned 0x220 [0153.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0153.233] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0153.233] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.233] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.233] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0153.234] ReadFile (in: hFile=0x38c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x1e7c, lpOverlapped=0x0) returned 1 [0153.235] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x1e80, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x1e80, lpOverlapped=0x0) returned 1 [0153.237] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0153.237] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.237] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.237] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x1e7c, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x1e7c, lpOverlapped=0x0) returned 1 [0153.239] FlushFileBuffers (hFile=0x38c) returned 1 [0153.253] FlushFileBuffers (hFile=0x394) returned 1 [0153.260] CloseHandle (hObject=0x38c) returned 1 [0153.260] CloseHandle (hObject=0x394) returned 1 [0153.260] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf")) returned 1 [0153.262] SetEvent (hEvent=0x2e4) returned 1 [0153.262] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0153.263] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=2016) returned 1 [0153.263] CloseHandle (hObject=0x394) returned 1 [0153.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf")) returned 0x220 [0153.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf")) returned 0x220 [0153.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0153.263] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0153.263] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.264] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.264] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x38c [0153.264] ReadFile (in: hFile=0x394, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x7e0, lpOverlapped=0x0) returned 1 [0153.266] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x7f0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x7f0, lpOverlapped=0x0) returned 1 [0153.267] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0153.268] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.268] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.268] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x7e0, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x7e0, lpOverlapped=0x0) returned 1 [0153.270] FlushFileBuffers (hFile=0x394) returned 1 [0153.272] FlushFileBuffers (hFile=0x38c) returned 1 [0153.273] CloseHandle (hObject=0x394) returned 1 [0153.274] CloseHandle (hObject=0x38c) returned 1 [0153.274] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf")) returned 1 [0153.276] SetEvent (hEvent=0x2e4) returned 1 [0153.276] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0153.277] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=2492) returned 1 [0153.277] CloseHandle (hObject=0x38c) returned 1 [0153.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf")) returned 0x220 [0153.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf")) returned 0x220 [0153.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0153.277] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0153.278] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.278] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.278] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0153.278] ReadFile (in: hFile=0x38c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x9bc, lpOverlapped=0x0) returned 1 [0153.280] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x9c0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x9c0, lpOverlapped=0x0) returned 1 [0153.281] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0153.282] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.282] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.282] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x9bc, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x9bc, lpOverlapped=0x0) returned 1 [0153.283] FlushFileBuffers (hFile=0x38c) returned 1 [0153.286] FlushFileBuffers (hFile=0x394) returned 1 [0153.288] CloseHandle (hObject=0x38c) returned 1 [0153.288] CloseHandle (hObject=0x394) returned 1 [0153.288] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf")) returned 1 [0153.290] SetEvent (hEvent=0x2e4) returned 1 [0153.290] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0153.291] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=3348) returned 1 [0153.291] CloseHandle (hObject=0x394) returned 1 [0153.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf")) returned 0x220 [0153.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf")) returned 0x220 [0153.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0153.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0153.291] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.291] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.292] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x38c [0153.292] ReadFile (in: hFile=0x394, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0xd14, lpOverlapped=0x0) returned 1 [0153.294] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xd20, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xd20, lpOverlapped=0x0) returned 1 [0153.295] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0153.295] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.295] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.295] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xd14, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0xd14, lpOverlapped=0x0) returned 1 [0153.298] FlushFileBuffers (hFile=0x394) returned 1 [0153.300] FlushFileBuffers (hFile=0x38c) returned 1 [0153.302] CloseHandle (hObject=0x394) returned 1 [0153.302] CloseHandle (hObject=0x38c) returned 1 [0153.302] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf")) returned 1 [0153.303] SetEvent (hEvent=0x2e4) returned 1 [0153.304] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0153.304] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=4296) returned 1 [0153.304] CloseHandle (hObject=0x38c) returned 1 [0153.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf")) returned 0x220 [0153.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf")) returned 0x220 [0153.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0153.305] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0153.305] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.305] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.305] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0153.306] ReadFile (in: hFile=0x38c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x10c8, lpOverlapped=0x0) returned 1 [0153.310] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x10d0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x10d0, lpOverlapped=0x0) returned 1 [0153.311] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0153.311] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.311] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.311] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x10c8, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x10c8, lpOverlapped=0x0) returned 1 [0153.314] FlushFileBuffers (hFile=0x38c) returned 1 [0153.320] FlushFileBuffers (hFile=0x394) returned 1 [0153.322] CloseHandle (hObject=0x38c) returned 1 [0153.322] CloseHandle (hObject=0x394) returned 1 [0153.322] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf")) returned 1 [0153.324] SetEvent (hEvent=0x2e4) returned 1 [0153.324] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0153.324] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=3228) returned 1 [0153.324] CloseHandle (hObject=0x394) returned 1 [0153.325] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf")) returned 0x220 [0153.325] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf")) returned 0x220 [0153.325] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0153.325] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0153.325] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.325] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.325] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x38c [0153.326] ReadFile (in: hFile=0x394, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0xc9c, lpOverlapped=0x0) returned 1 [0153.328] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xca0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xca0, lpOverlapped=0x0) returned 1 [0153.330] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0153.330] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.330] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.330] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xc9c, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0xc9c, lpOverlapped=0x0) returned 1 [0153.332] FlushFileBuffers (hFile=0x394) returned 1 [0153.334] FlushFileBuffers (hFile=0x38c) returned 1 [0153.336] CloseHandle (hObject=0x394) returned 1 [0153.336] CloseHandle (hObject=0x38c) returned 1 [0153.336] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf")) returned 1 [0153.338] SetEvent (hEvent=0x2e4) returned 1 [0153.338] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0153.340] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=4808) returned 1 [0153.340] CloseHandle (hObject=0x38c) returned 1 [0153.340] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf")) returned 0x220 [0153.340] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf")) returned 0x220 [0153.340] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0153.340] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0153.341] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.341] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.341] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0153.341] ReadFile (in: hFile=0x38c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x12c8, lpOverlapped=0x0) returned 1 [0153.343] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x12d0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x12d0, lpOverlapped=0x0) returned 1 [0153.344] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0153.345] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.345] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.345] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x12c8, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x12c8, lpOverlapped=0x0) returned 1 [0153.347] FlushFileBuffers (hFile=0x38c) returned 1 [0153.350] FlushFileBuffers (hFile=0x394) returned 1 [0153.352] CloseHandle (hObject=0x38c) returned 1 [0153.352] CloseHandle (hObject=0x394) returned 1 [0153.352] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf")) returned 1 [0153.354] SetEvent (hEvent=0x2e4) returned 1 [0153.354] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0153.355] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=4996) returned 1 [0153.355] CloseHandle (hObject=0x394) returned 1 [0153.355] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf")) returned 0x220 [0153.355] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf")) returned 0x220 [0153.355] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0153.356] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0153.356] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.356] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.356] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x38c [0153.357] ReadFile (in: hFile=0x394, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x1384, lpOverlapped=0x0) returned 1 [0153.358] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x1390, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x1390, lpOverlapped=0x0) returned 1 [0153.359] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0153.360] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.360] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.360] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x1384, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x1384, lpOverlapped=0x0) returned 1 [0153.363] FlushFileBuffers (hFile=0x394) returned 1 [0153.620] FlushFileBuffers (hFile=0x38c) returned 1 [0153.666] CloseHandle (hObject=0x394) returned 1 [0153.666] CloseHandle (hObject=0x38c) returned 1 [0153.666] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf")) returned 1 [0153.668] SetEvent (hEvent=0x2e4) returned 1 [0153.669] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0153.669] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=5004) returned 1 [0153.669] CloseHandle (hObject=0x38c) returned 1 [0153.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf")) returned 0x220 [0153.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf")) returned 0x220 [0153.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0153.670] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0153.670] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.670] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.670] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0153.671] ReadFile (in: hFile=0x38c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x138c, lpOverlapped=0x0) returned 1 [0153.673] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x1390, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x1390, lpOverlapped=0x0) returned 1 [0153.674] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0153.675] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.675] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.675] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x138c, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x138c, lpOverlapped=0x0) returned 1 [0153.677] FlushFileBuffers (hFile=0x38c) returned 1 [0153.684] FlushFileBuffers (hFile=0x394) returned 1 [0153.689] CloseHandle (hObject=0x38c) returned 1 [0153.689] CloseHandle (hObject=0x394) returned 1 [0153.689] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf")) returned 1 [0153.691] SetEvent (hEvent=0x2e4) returned 1 [0153.691] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0153.692] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=7384) returned 1 [0153.692] CloseHandle (hObject=0x394) returned 1 [0153.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid")) returned 0x220 [0153.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid")) returned 0x220 [0153.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0153.692] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0153.692] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.693] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.693] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x38c [0153.693] ReadFile (in: hFile=0x394, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x1cd8, lpOverlapped=0x0) returned 1 [0153.705] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x1ce0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x1ce0, lpOverlapped=0x0) returned 1 [0153.706] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0153.707] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.707] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.707] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x1cd8, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x1cd8, lpOverlapped=0x0) returned 1 [0153.710] FlushFileBuffers (hFile=0x394) returned 1 [0153.717] FlushFileBuffers (hFile=0x38c) returned 1 [0153.756] CloseHandle (hObject=0x394) returned 1 [0153.756] CloseHandle (hObject=0x38c) returned 1 [0153.756] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid")) returned 1 [0153.767] SetEvent (hEvent=0x2e4) returned 1 [0153.767] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0153.770] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=4870) returned 1 [0153.770] CloseHandle (hObject=0x38c) returned 1 [0153.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf")) returned 0x220 [0153.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf")) returned 0x220 [0153.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0153.770] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0153.771] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.771] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.771] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0153.772] ReadFile (in: hFile=0x38c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x1306, lpOverlapped=0x0) returned 1 [0153.774] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x1310, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x1310, lpOverlapped=0x0) returned 1 [0153.776] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0153.776] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.776] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.776] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x1306, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x1306, lpOverlapped=0x0) returned 1 [0153.780] FlushFileBuffers (hFile=0x38c) returned 1 [0153.787] FlushFileBuffers (hFile=0x394) returned 1 [0153.793] CloseHandle (hObject=0x38c) returned 1 [0153.793] CloseHandle (hObject=0x394) returned 1 [0153.794] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf")) returned 1 [0153.796] SetEvent (hEvent=0x2e4) returned 1 [0153.796] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0153.797] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=26886) returned 1 [0153.797] CloseHandle (hObject=0x394) returned 1 [0153.797] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf")) returned 0x220 [0153.797] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf")) returned 0x220 [0153.797] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0153.797] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0153.800] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.800] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.800] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x38c [0153.801] ReadFile (in: hFile=0x394, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x6906, lpOverlapped=0x0) returned 1 [0153.811] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x6910, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x6910, lpOverlapped=0x0) returned 1 [0153.812] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0153.812] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.812] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.812] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x6906, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x6906, lpOverlapped=0x0) returned 1 [0153.816] FlushFileBuffers (hFile=0x394) returned 1 [0153.822] FlushFileBuffers (hFile=0x38c) returned 1 [0153.823] CloseHandle (hObject=0x394) returned 1 [0153.824] CloseHandle (hObject=0x38c) returned 1 [0153.824] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf")) returned 1 [0153.826] SetEvent (hEvent=0x2e4) returned 1 [0153.826] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0153.827] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=28948) returned 1 [0153.827] CloseHandle (hObject=0x38c) returned 1 [0153.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf")) returned 0x220 [0153.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf")) returned 0x220 [0153.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0153.827] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0153.827] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.827] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.827] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0153.830] ReadFile (in: hFile=0x38c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x7114, lpOverlapped=0x0) returned 1 [0153.832] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x7120, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x7120, lpOverlapped=0x0) returned 1 [0153.834] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0153.834] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.834] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.834] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x7114, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x7114, lpOverlapped=0x0) returned 1 [0153.838] FlushFileBuffers (hFile=0x38c) returned 1 [0153.841] FlushFileBuffers (hFile=0x394) returned 1 [0153.843] CloseHandle (hObject=0x38c) returned 1 [0153.843] CloseHandle (hObject=0x394) returned 1 [0153.843] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf")) returned 1 [0153.845] SetEvent (hEvent=0x2e4) returned 1 [0153.845] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0153.846] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=11636) returned 1 [0153.846] CloseHandle (hObject=0x394) returned 1 [0153.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf")) returned 0x220 [0153.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf")) returned 0x220 [0153.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0153.846] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0153.847] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.847] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.847] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x38c [0153.848] ReadFile (in: hFile=0x394, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x2d74, lpOverlapped=0x0) returned 1 [0153.849] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x2d80, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x2d80, lpOverlapped=0x0) returned 1 [0153.851] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0153.851] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.851] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.851] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x2d74, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x2d74, lpOverlapped=0x0) returned 1 [0153.855] FlushFileBuffers (hFile=0x394) returned 1 [0153.863] FlushFileBuffers (hFile=0x38c) returned 1 [0153.982] CloseHandle (hObject=0x394) returned 1 [0153.983] CloseHandle (hObject=0x38c) returned 1 [0153.983] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf")) returned 1 [0153.985] SetEvent (hEvent=0x2e4) returned 1 [0153.985] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0153.986] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=22516) returned 1 [0153.986] CloseHandle (hObject=0x38c) returned 1 [0153.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf")) returned 0x220 [0153.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf")) returned 0x220 [0153.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0153.986] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0153.986] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.987] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0153.987] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0153.988] ReadFile (in: hFile=0x38c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x57f4, lpOverlapped=0x0) returned 1 [0153.990] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x5800, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x5800, lpOverlapped=0x0) returned 1 [0153.992] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0153.992] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.992] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0153.992] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x57f4, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x57f4, lpOverlapped=0x0) returned 1 [0153.995] FlushFileBuffers (hFile=0x38c) returned 1 [0153.998] FlushFileBuffers (hFile=0x394) returned 1 [0154.000] CloseHandle (hObject=0x38c) returned 1 [0154.001] CloseHandle (hObject=0x394) returned 1 [0154.001] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf")) returned 1 [0154.003] SetEvent (hEvent=0x2e4) returned 1 [0154.003] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0154.003] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=16180) returned 1 [0154.004] CloseHandle (hObject=0x394) returned 1 [0154.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf")) returned 0x220 [0154.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf")) returned 0x220 [0154.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0154.004] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0154.004] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0154.004] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0154.004] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x38c [0154.005] ReadFile (in: hFile=0x394, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x3f34, lpOverlapped=0x0) returned 1 [0154.007] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x3f40, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x3f40, lpOverlapped=0x0) returned 1 [0154.008] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0154.009] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0154.009] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0154.009] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x3f34, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x3f34, lpOverlapped=0x0) returned 1 [0154.011] FlushFileBuffers (hFile=0x394) returned 1 [0154.014] FlushFileBuffers (hFile=0x38c) returned 1 [0154.016] CloseHandle (hObject=0x394) returned 1 [0154.016] CloseHandle (hObject=0x38c) returned 1 [0154.016] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf")) returned 1 [0154.018] SetEvent (hEvent=0x2e4) returned 1 [0154.018] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0154.019] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=17236) returned 1 [0154.019] CloseHandle (hObject=0x38c) returned 1 [0154.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf")) returned 0x220 [0154.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf")) returned 0x220 [0154.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0154.020] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0154.020] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0154.020] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0154.020] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0154.021] ReadFile (in: hFile=0x38c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x4354, lpOverlapped=0x0) returned 1 [0154.038] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x4360, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x4360, lpOverlapped=0x0) returned 1 [0154.053] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0154.054] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0154.054] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0154.054] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x4354, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x4354, lpOverlapped=0x0) returned 1 [0154.058] FlushFileBuffers (hFile=0x38c) returned 1 [0154.094] FlushFileBuffers (hFile=0x394) returned 1 [0154.107] CloseHandle (hObject=0x38c) returned 1 [0154.107] CloseHandle (hObject=0x394) returned 1 [0154.107] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf")) returned 1 [0154.109] SetEvent (hEvent=0x2e4) returned 1 [0154.109] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0154.110] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=16676) returned 1 [0154.110] CloseHandle (hObject=0x394) returned 1 [0154.110] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf")) returned 0x220 [0154.110] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf")) returned 0x220 [0154.110] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0154.111] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0154.111] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0154.111] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0154.111] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x38c [0154.112] ReadFile (in: hFile=0x394, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x4124, lpOverlapped=0x0) returned 1 [0154.118] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x4130, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x4130, lpOverlapped=0x0) returned 1 [0154.119] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0154.120] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0154.120] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0154.120] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x4124, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x4124, lpOverlapped=0x0) returned 1 [0154.123] FlushFileBuffers (hFile=0x394) returned 1 [0154.138] FlushFileBuffers (hFile=0x38c) returned 1 [0154.146] CloseHandle (hObject=0x394) returned 1 [0154.146] CloseHandle (hObject=0x38c) returned 1 [0154.146] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf")) returned 1 [0154.148] SetEvent (hEvent=0x2e4) returned 1 [0154.148] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0154.149] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=4924) returned 1 [0154.149] CloseHandle (hObject=0x38c) returned 1 [0154.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf")) returned 0x220 [0154.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf")) returned 0x220 [0154.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0154.149] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0154.149] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0154.150] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0154.150] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0154.150] ReadFile (in: hFile=0x38c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x133c, lpOverlapped=0x0) returned 1 [0154.160] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x1340, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x1340, lpOverlapped=0x0) returned 1 [0154.161] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0154.162] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0154.162] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0154.162] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x133c, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x133c, lpOverlapped=0x0) returned 1 [0154.164] FlushFileBuffers (hFile=0x38c) returned 1 [0154.641] FlushFileBuffers (hFile=0x394) returned 1 [0154.643] CloseHandle (hObject=0x38c) returned 1 [0154.643] CloseHandle (hObject=0x394) returned 1 [0154.643] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf")) returned 1 [0154.645] SetEvent (hEvent=0x2e4) returned 1 [0154.645] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0154.646] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=24320) returned 1 [0154.646] CloseHandle (hObject=0x394) returned 1 [0154.646] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf")) returned 0x220 [0154.646] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf")) returned 0x220 [0154.646] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0154.646] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0154.647] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0154.647] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0154.647] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x38c [0154.648] ReadFile (in: hFile=0x394, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x5f00, lpOverlapped=0x0) returned 1 [0154.650] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x5f10, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x5f10, lpOverlapped=0x0) returned 1 [0154.652] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0154.652] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0154.652] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0154.653] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x5f00, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x5f00, lpOverlapped=0x0) returned 1 [0154.655] FlushFileBuffers (hFile=0x394) returned 1 [0154.672] FlushFileBuffers (hFile=0x38c) returned 1 [0155.149] CloseHandle (hObject=0x394) returned 1 [0155.150] CloseHandle (hObject=0x38c) returned 1 [0155.150] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf")) returned 1 [0155.164] SetEvent (hEvent=0x2e4) returned 1 [0155.165] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0155.166] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=40206) returned 1 [0155.166] CloseHandle (hObject=0x38c) returned 1 [0155.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf")) returned 0x220 [0155.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf")) returned 0x220 [0155.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0155.166] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0155.167] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0155.167] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0155.167] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0155.168] ReadFile (in: hFile=0x38c, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x9d0e, lpOverlapped=0x0) returned 1 [0155.170] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x9d10, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x9d10, lpOverlapped=0x0) returned 1 [0155.172] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0155.172] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0155.172] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0155.172] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x9d0e, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x9d0e, lpOverlapped=0x0) returned 1 [0155.180] FlushFileBuffers (hFile=0x38c) returned 1 [0155.184] FlushFileBuffers (hFile=0x394) returned 1 [0155.203] CloseHandle (hObject=0x38c) returned 1 [0155.203] CloseHandle (hObject=0x394) returned 1 [0155.203] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf")) returned 1 [0155.205] SetEvent (hEvent=0x2e4) returned 1 [0155.206] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0155.208] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=14540) returned 1 [0155.208] CloseHandle (hObject=0x394) returned 1 [0155.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf")) returned 0x220 [0155.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf")) returned 0x220 [0155.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0155.209] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0155.209] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0155.209] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0155.209] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x38c [0155.210] ReadFile (in: hFile=0x394, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x38cc, lpOverlapped=0x0) returned 1 [0155.212] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x38d0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x38d0, lpOverlapped=0x0) returned 1 [0155.214] WriteFile (in: hFile=0x38c, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0155.214] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0155.214] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0155.214] WriteFile (in: hFile=0x394, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x38cc, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x38cc, lpOverlapped=0x0) returned 1 [0155.218] FlushFileBuffers (hFile=0x394) returned 1 [0155.236] FlushFileBuffers (hFile=0x38c) returned 1 [0155.239] CloseHandle (hObject=0x394) returned 1 [0155.239] CloseHandle (hObject=0x38c) returned 1 [0155.239] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf")) returned 1 [0155.241] SetEvent (hEvent=0x2e4) returned 1 [0155.244] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0155.245] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=7966) returned 1 [0155.245] CloseHandle (hObject=0x378) returned 1 [0155.245] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf")) returned 0x220 [0155.245] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf")) returned 0x220 [0155.245] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0155.245] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0155.246] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0155.246] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0155.246] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x388 [0155.247] ReadFile (in: hFile=0x378, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x1f1e, lpOverlapped=0x0) returned 1 [0155.249] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x1f20, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x1f20, lpOverlapped=0x0) returned 1 [0155.250] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0155.250] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0155.250] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0155.250] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x1f1e, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x1f1e, lpOverlapped=0x0) returned 1 [0155.253] FlushFileBuffers (hFile=0x378) returned 1 [0155.268] FlushFileBuffers (hFile=0x388) returned 1 [0155.276] CloseHandle (hObject=0x378) returned 1 [0155.276] CloseHandle (hObject=0x388) returned 1 [0155.276] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf")) returned 1 [0155.278] SetEvent (hEvent=0x2e4) returned 1 [0155.278] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0155.279] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=20189) returned 1 [0155.279] CloseHandle (hObject=0x388) returned 1 [0155.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif")) returned 0x220 [0155.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif")) returned 0x220 [0155.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0155.280] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0155.280] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0155.281] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0155.281] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x378 [0155.282] ReadFile (in: hFile=0x388, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x4edd, lpOverlapped=0x0) returned 1 [0155.285] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x4ee0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x4ee0, lpOverlapped=0x0) returned 1 [0155.287] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0155.288] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0155.288] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0155.288] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x4edd, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x4edd, lpOverlapped=0x0) returned 1 [0155.298] FlushFileBuffers (hFile=0x388) returned 1 [0155.319] FlushFileBuffers (hFile=0x378) returned 1 [0155.324] CloseHandle (hObject=0x388) returned 1 [0155.324] CloseHandle (hObject=0x378) returned 1 [0155.324] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif")) returned 1 [0155.326] SetEvent (hEvent=0x2e4) returned 1 [0155.326] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0155.327] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=15733) returned 1 [0155.327] CloseHandle (hObject=0x378) returned 1 [0155.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif")) returned 0x220 [0155.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif")) returned 0x220 [0155.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0155.330] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0155.331] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0155.331] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0155.331] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x388 [0155.332] ReadFile (in: hFile=0x378, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x3d75, lpOverlapped=0x0) returned 1 [0155.334] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x3d80, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x3d80, lpOverlapped=0x0) returned 1 [0155.336] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0155.336] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0155.336] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0155.336] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x3d75, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x3d75, lpOverlapped=0x0) returned 1 [0155.339] FlushFileBuffers (hFile=0x378) returned 1 [0155.343] FlushFileBuffers (hFile=0x388) returned 1 [0155.364] CloseHandle (hObject=0x378) returned 1 [0155.365] CloseHandle (hObject=0x388) returned 1 [0155.365] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif")) returned 1 [0155.367] SetEvent (hEvent=0x2e4) returned 1 [0155.368] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0155.369] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=9710) returned 1 [0155.369] CloseHandle (hObject=0x388) returned 1 [0155.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf")) returned 0x220 [0155.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf")) returned 0x220 [0155.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0155.370] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0155.370] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0155.370] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0155.370] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x378 [0155.373] ReadFile (in: hFile=0x388, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x25ee, lpOverlapped=0x0) returned 1 [0155.379] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x25f0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x25f0, lpOverlapped=0x0) returned 1 [0155.381] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0155.381] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0155.381] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0155.381] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x25ee, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x25ee, lpOverlapped=0x0) returned 1 [0155.386] FlushFileBuffers (hFile=0x388) returned 1 [0155.402] FlushFileBuffers (hFile=0x378) returned 1 [0155.411] CloseHandle (hObject=0x388) returned 1 [0155.412] CloseHandle (hObject=0x378) returned 1 [0155.412] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf")) returned 1 [0155.414] SetEvent (hEvent=0x2e4) returned 1 [0155.414] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0155.415] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=14486) returned 1 [0155.415] CloseHandle (hObject=0x378) returned 1 [0155.416] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf")) returned 0x220 [0155.416] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf")) returned 0x220 [0155.416] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0155.416] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0155.416] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0155.417] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0155.417] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x388 [0155.418] ReadFile (in: hFile=0x378, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x3896, lpOverlapped=0x0) returned 1 [0155.421] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x38a0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x38a0, lpOverlapped=0x0) returned 1 [0155.424] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0155.424] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0155.424] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0155.424] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x3896, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x3896, lpOverlapped=0x0) returned 1 [0155.429] FlushFileBuffers (hFile=0x378) returned 1 [0155.444] FlushFileBuffers (hFile=0x388) returned 1 [0155.447] CloseHandle (hObject=0x378) returned 1 [0155.447] CloseHandle (hObject=0x388) returned 1 [0155.447] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf")) returned 1 [0155.449] SetEvent (hEvent=0x2e4) returned 1 [0155.449] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0155.451] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=11058) returned 1 [0155.451] CloseHandle (hObject=0x388) returned 1 [0155.451] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf")) returned 0x220 [0155.451] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf")) returned 0x220 [0155.451] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0155.451] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0155.452] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0155.452] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0155.452] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x378 [0155.453] ReadFile (in: hFile=0x388, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x2b32, lpOverlapped=0x0) returned 1 [0155.460] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x2b40, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x2b40, lpOverlapped=0x0) returned 1 [0155.462] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0155.462] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0155.462] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0155.462] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x2b32, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x2b32, lpOverlapped=0x0) returned 1 [0155.465] FlushFileBuffers (hFile=0x388) returned 1 [0155.476] FlushFileBuffers (hFile=0x378) returned 1 [0155.481] CloseHandle (hObject=0x388) returned 1 [0155.481] CloseHandle (hObject=0x378) returned 1 [0155.481] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf")) returned 1 [0155.483] SetEvent (hEvent=0x2e4) returned 1 [0155.483] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0155.484] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=9818) returned 1 [0155.484] CloseHandle (hObject=0x378) returned 1 [0155.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf")) returned 0x220 [0155.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf")) returned 0x220 [0155.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0155.484] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0155.485] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0155.485] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0155.485] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x388 [0155.486] ReadFile (in: hFile=0x378, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x265a, lpOverlapped=0x0) returned 1 [0155.493] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x2660, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x2660, lpOverlapped=0x0) returned 1 [0155.495] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0155.495] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0155.495] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0155.495] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x265a, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x265a, lpOverlapped=0x0) returned 1 [0155.498] FlushFileBuffers (hFile=0x378) returned 1 [0155.506] FlushFileBuffers (hFile=0x388) returned 1 [0155.511] CloseHandle (hObject=0x378) returned 1 [0155.511] CloseHandle (hObject=0x388) returned 1 [0155.511] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf")) returned 1 [0155.513] SetEvent (hEvent=0x2e4) returned 1 [0155.513] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0155.514] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=1012) returned 1 [0155.514] CloseHandle (hObject=0x388) returned 1 [0155.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf")) returned 0x220 [0155.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf")) returned 0x220 [0155.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0155.515] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0155.515] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0155.515] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0155.515] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x378 [0155.516] ReadFile (in: hFile=0x388, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x3f4, lpOverlapped=0x0) returned 1 [0155.518] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x400, lpOverlapped=0x0) returned 1 [0155.519] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0155.520] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0155.520] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0155.520] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x3f4, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x3f4, lpOverlapped=0x0) returned 1 [0155.523] FlushFileBuffers (hFile=0x388) returned 1 [0155.537] FlushFileBuffers (hFile=0x378) returned 1 [0155.540] CloseHandle (hObject=0x388) returned 1 [0155.540] CloseHandle (hObject=0x378) returned 1 [0155.540] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf")) returned 1 [0155.542] SetEvent (hEvent=0x2e4) returned 1 [0155.542] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0155.543] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=10146) returned 1 [0155.543] CloseHandle (hObject=0x378) returned 1 [0155.543] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf")) returned 0x220 [0155.543] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf")) returned 0x220 [0155.543] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0155.544] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0155.544] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0155.544] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0155.544] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x388 [0155.545] ReadFile (in: hFile=0x378, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x27a2, lpOverlapped=0x0) returned 1 [0155.548] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x27b0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x27b0, lpOverlapped=0x0) returned 1 [0155.549] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0155.549] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0155.549] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0155.550] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x27a2, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x27a2, lpOverlapped=0x0) returned 1 [0155.553] FlushFileBuffers (hFile=0x378) returned 1 [0155.561] FlushFileBuffers (hFile=0x388) returned 1 [0155.569] CloseHandle (hObject=0x378) returned 1 [0155.569] CloseHandle (hObject=0x388) returned 1 [0155.569] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf")) returned 1 [0155.570] SetEvent (hEvent=0x2e4) returned 1 [0155.571] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0155.573] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=1696) returned 1 [0155.573] CloseHandle (hObject=0x388) returned 1 [0155.573] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf")) returned 0x220 [0155.573] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf")) returned 0x220 [0155.573] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0155.574] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0155.574] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0155.574] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0155.574] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x378 [0155.580] ReadFile (in: hFile=0x388, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x6a0, lpOverlapped=0x0) returned 1 [0155.584] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x6b0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x6b0, lpOverlapped=0x0) returned 1 [0155.585] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0155.585] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0155.585] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0155.586] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x6a0, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x6a0, lpOverlapped=0x0) returned 1 [0155.588] FlushFileBuffers (hFile=0x388) returned 1 [0155.598] FlushFileBuffers (hFile=0x378) returned 1 [0155.603] CloseHandle (hObject=0x388) returned 1 [0155.603] CloseHandle (hObject=0x378) returned 1 [0155.604] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf")) returned 1 [0155.605] SetEvent (hEvent=0x2e4) returned 1 [0155.605] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0155.606] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=3986) returned 1 [0155.606] CloseHandle (hObject=0x378) returned 1 [0155.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf")) returned 0x220 [0155.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf")) returned 0x220 [0155.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0155.607] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0155.607] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0155.607] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0155.607] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x388 [0155.608] ReadFile (in: hFile=0x378, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0xf92, lpOverlapped=0x0) returned 1 [0155.611] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xfa0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xfa0, lpOverlapped=0x0) returned 1 [0155.612] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0155.613] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0155.613] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0155.613] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf92, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0xf92, lpOverlapped=0x0) returned 1 [0155.615] FlushFileBuffers (hFile=0x378) returned 1 [0155.618] FlushFileBuffers (hFile=0x388) returned 1 [0155.626] CloseHandle (hObject=0x378) returned 1 [0155.627] CloseHandle (hObject=0x388) returned 1 [0155.627] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf")) returned 1 [0155.628] SetEvent (hEvent=0x2e4) returned 1 [0155.628] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0155.629] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=9304) returned 1 [0155.629] CloseHandle (hObject=0x388) returned 1 [0155.629] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf")) returned 0x220 [0155.629] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf")) returned 0x220 [0155.629] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0155.629] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0155.630] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0155.630] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0155.630] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x378 [0155.630] ReadFile (in: hFile=0x388, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x2458, lpOverlapped=0x0) returned 1 [0155.641] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x2460, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x2460, lpOverlapped=0x0) returned 1 [0155.642] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0155.642] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0155.642] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0155.642] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x2458, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x2458, lpOverlapped=0x0) returned 1 [0155.646] FlushFileBuffers (hFile=0x388) returned 1 [0155.649] FlushFileBuffers (hFile=0x378) returned 1 [0155.662] CloseHandle (hObject=0x388) returned 1 [0155.662] CloseHandle (hObject=0x378) returned 1 [0155.662] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf")) returned 1 [0155.664] SetEvent (hEvent=0x2e4) returned 1 [0155.664] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0155.664] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=14444) returned 1 [0155.665] CloseHandle (hObject=0x378) returned 1 [0155.665] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf")) returned 0x220 [0155.665] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf")) returned 0x220 [0155.665] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0155.665] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0155.665] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0155.666] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0155.666] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x388 [0155.666] ReadFile (in: hFile=0x378, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x386c, lpOverlapped=0x0) returned 1 [0155.669] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x3870, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x3870, lpOverlapped=0x0) returned 1 [0155.671] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0155.672] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0155.672] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0155.672] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x386c, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x386c, lpOverlapped=0x0) returned 1 [0155.677] FlushFileBuffers (hFile=0x378) returned 1 [0155.690] FlushFileBuffers (hFile=0x388) returned 1 [0155.695] CloseHandle (hObject=0x378) returned 1 [0155.695] CloseHandle (hObject=0x388) returned 1 [0155.695] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf")) returned 1 [0155.697] SetEvent (hEvent=0x2e4) returned 1 [0155.697] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0155.698] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=4708) returned 1 [0155.698] CloseHandle (hObject=0x388) returned 1 [0155.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf")) returned 0x220 [0155.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf")) returned 0x220 [0155.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0155.698] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0155.699] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0155.699] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0155.699] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x378 [0155.700] ReadFile (in: hFile=0x388, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x1264, lpOverlapped=0x0) returned 1 [0155.704] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x1270, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x1270, lpOverlapped=0x0) returned 1 [0155.706] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0155.706] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0155.706] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0155.706] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x1264, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x1264, lpOverlapped=0x0) returned 1 [0155.708] FlushFileBuffers (hFile=0x388) returned 1 [0155.920] FlushFileBuffers (hFile=0x378) returned 1 [0156.343] CloseHandle (hObject=0x388) returned 1 [0156.344] CloseHandle (hObject=0x378) returned 1 [0156.344] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf")) returned 1 [0156.346] SetEvent (hEvent=0x2e4) returned 1 [0156.346] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0156.347] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=12482) returned 1 [0156.347] CloseHandle (hObject=0x378) returned 1 [0156.347] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf")) returned 0x220 [0156.347] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf")) returned 0x220 [0156.347] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0156.347] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0156.347] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0156.347] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0156.348] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x388 [0156.348] ReadFile (in: hFile=0x378, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x30c2, lpOverlapped=0x0) returned 1 [0156.350] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x30d0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x30d0, lpOverlapped=0x0) returned 1 [0156.352] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0156.352] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0156.352] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0156.352] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x30c2, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x30c2, lpOverlapped=0x0) returned 1 [0156.354] FlushFileBuffers (hFile=0x378) returned 1 [0156.395] FlushFileBuffers (hFile=0x388) returned 1 [0156.408] CloseHandle (hObject=0x378) returned 1 [0156.408] CloseHandle (hObject=0x388) returned 1 [0156.408] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf")) returned 1 [0156.410] SetEvent (hEvent=0x2e4) returned 1 [0156.410] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0156.413] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=5752) returned 1 [0156.413] CloseHandle (hObject=0x388) returned 1 [0156.413] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf")) returned 0x220 [0156.413] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf")) returned 0x220 [0156.413] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0156.414] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0156.414] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0156.414] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0156.414] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x378 [0156.415] ReadFile (in: hFile=0x388, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x1678, lpOverlapped=0x0) returned 1 [0156.425] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x1680, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x1680, lpOverlapped=0x0) returned 1 [0156.427] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0156.427] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0156.427] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0156.427] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x1678, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x1678, lpOverlapped=0x0) returned 1 [0156.430] FlushFileBuffers (hFile=0x388) returned 1 [0156.446] FlushFileBuffers (hFile=0x378) returned 1 [0156.455] CloseHandle (hObject=0x388) returned 1 [0156.455] CloseHandle (hObject=0x378) returned 1 [0156.455] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf")) returned 1 [0156.457] SetEvent (hEvent=0x2e4) returned 1 [0156.457] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0156.457] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x311fa38 | out: lpFileSize=0x311fa38*=5272) returned 1 [0156.457] CloseHandle (hObject=0x378) returned 1 [0156.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf")) returned 0x220 [0156.458] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf")) returned 0x220 [0156.458] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0156.458] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0156.458] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0156.458] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311fa00 | out: lpNewFilePointer=0x0) returned 1 [0156.458] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x388 [0156.459] ReadFile (in: hFile=0x378, lpBuffer=0x34e7020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x311fa14, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesRead=0x311fa14*=0x1498, lpOverlapped=0x0) returned 1 [0156.490] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x14a0, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0x14a0, lpOverlapped=0x0) returned 1 [0156.491] WriteFile (in: hFile=0x388, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x311f9ec, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f9ec*=0xf2, lpOverlapped=0x0) returned 1 [0156.492] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0156.492] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x311f760 | out: lpNewFilePointer=0x0) returned 1 [0156.492] WriteFile (in: hFile=0x378, lpBuffer=0x34e7020*, nNumberOfBytesToWrite=0x1498, lpNumberOfBytesWritten=0x311f76c, lpOverlapped=0x0 | out: lpBuffer=0x34e7020*, lpNumberOfBytesWritten=0x311f76c*=0x1498, lpOverlapped=0x0) returned 1 [0156.497] FlushFileBuffers (hFile=0x378) returned 1 [0156.931] FlushFileBuffers (hFile=0x388) returned 1 [0156.934] CloseHandle (hObject=0x378) returned 1 [0156.934] CloseHandle (hObject=0x388) returned 1 [0156.934] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf")) returned 1 [0156.936] GetProcessHeap () returned 0x8a0000 [0156.936] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x50) returned 0x8b1260 [0156.936] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x74c00000 [0156.936] GetProcAddress (hModule=0x74c00000, lpProcName="Wow64RevertWow64FsRedirection") returned 0x74c16b50 [0156.936] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0156.936] GetProcessHeap () returned 0x8a0000 [0156.936] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b1260 | out: hHeap=0x8a0000) returned 1 [0156.936] SetEvent (hEvent=0x2e8) returned 1 [0156.937] SetEvent (hEvent=0x2e4) returned 1 [0156.937] SetEvent (hEvent=0x2ec) returned 1 [0156.937] GetProcessHeap () returned 0x8a0000 [0156.937] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x34e7020 | out: hHeap=0x8a0000) returned 1 [0156.942] GetProcessHeap () returned 0x8a0000 [0156.942] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8e1e40 | out: hHeap=0x8a0000) returned 1 [0156.942] GetProcessHeap () returned 0x8a0000 [0156.942] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x95a298 | out: hHeap=0x8a0000) returned 1 [0156.944] GetProcessHeap () returned 0x8a0000 [0156.944] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x971bb8 | out: hHeap=0x8a0000) returned 1 Thread: id = 78 os_tid = 0xebc [0130.223] GetProcessHeap () returned 0x8a0000 [0130.223] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x981bc0 [0130.223] GetProcessHeap () returned 0x8a0000 [0130.223] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3600048 [0130.224] GetProcessHeap () returned 0x8a0000 [0130.224] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x28) returned 0x8e1d80 [0130.224] GetProcessHeap () returned 0x8a0000 [0130.224] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x110102) returned 0x370e020 [0130.227] GetProcessHeap () returned 0x8a0000 [0130.227] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x50) returned 0x8afbf0 [0130.227] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x74c00000 [0130.227] GetProcAddress (hModule=0x74c00000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x74c16b30 [0130.227] Wow64DisableWow64FsRedirection (in: OldValue=0x325fa68 | out: OldValue=0x325fa68*=0x0) returned 1 [0130.227] GetProcessHeap () returned 0x8a0000 [0130.227] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8afbf0 | out: hHeap=0x8a0000) returned 1 [0130.227] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0 [0130.489] ResetEvent (hEvent=0x2e8) returned 1 [0130.489] SetEvent (hEvent=0x2ec) returned 1 [0130.489] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334 [0130.684] GetFileSizeEx (in: hFile=0x334, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=2141433) returned 1 [0130.684] CloseHandle (hObject=0x334) returned 1 [0130.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu")) returned 0x80 [0130.684] MoveFileW (lpExistingFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu"), lpNewFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 1 [0130.991] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334 [0130.991] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f860 | out: lpNewFilePointer=0x0) returned 1 [0130.991] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f860 | out: lpNewFilePointer=0x0) returned 1 [0130.991] ReadFile (in: hFile=0x334, lpBuffer=0x370e058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x325f86c, lpOverlapped=0x0 | out: lpBuffer=0x370e058*, lpNumberOfBytesRead=0x325f86c*=0x40000, lpOverlapped=0x0) returned 1 [0131.004] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0xae453, lpNewFilePointer=0x0, dwMoveMethod=0x325f860 | out: lpNewFilePointer=0x0) returned 1 [0131.004] ReadFile (in: hFile=0x334, lpBuffer=0x374e058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x325f86c, lpOverlapped=0x0 | out: lpBuffer=0x374e058*, lpNumberOfBytesRead=0x325f86c*=0x40000, lpOverlapped=0x0) returned 1 [0131.014] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x1cacf9, lpNewFilePointer=0x0, dwMoveMethod=0x325f860 | out: lpNewFilePointer=0x0) returned 1 [0131.014] ReadFile (in: hFile=0x334, lpBuffer=0x378e058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x325f86c, lpOverlapped=0x0 | out: lpBuffer=0x378e058*, lpNumberOfBytesRead=0x325f86c*=0x40000, lpOverlapped=0x0) returned 1 [0131.311] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d0 | out: lpNewFilePointer=0x0) returned 1 [0131.311] WriteFile (in: hFile=0x334, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xc0132, lpNumberOfBytesWritten=0x325f9c8, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c8*=0xc0132, lpOverlapped=0x0) returned 1 [0131.325] SetEndOfFile (hFile=0x334) returned 1 [0131.330] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x1cacf9, lpNewFilePointer=0x0, dwMoveMethod=0x325f868 | out: lpNewFilePointer=0x0) returned 1 [0131.330] WriteFile (in: hFile=0x334, lpBuffer=0x37ce16a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x325f874, lpOverlapped=0x0 | out: lpBuffer=0x37ce16a*, lpNumberOfBytesWritten=0x325f874*=0x40000, lpOverlapped=0x0) returned 1 [0131.331] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0xae453, lpNewFilePointer=0x0, dwMoveMethod=0x325f868 | out: lpNewFilePointer=0x0) returned 1 [0131.331] WriteFile (in: hFile=0x334, lpBuffer=0x37ce16a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x325f874, lpOverlapped=0x0 | out: lpBuffer=0x37ce16a*, lpNumberOfBytesWritten=0x325f874*=0x40000, lpOverlapped=0x0) returned 1 [0131.334] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f868 | out: lpNewFilePointer=0x0) returned 1 [0131.334] WriteFile (in: hFile=0x334, lpBuffer=0x37ce16a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x325f874, lpOverlapped=0x0 | out: lpBuffer=0x37ce16a*, lpNumberOfBytesWritten=0x325f874*=0x40000, lpOverlapped=0x0) returned 1 [0131.335] FlushFileBuffers (hFile=0x334) returned 1 [0131.559] CloseHandle (hObject=0x334) returned 1 [0132.044] SetEvent (hEvent=0x2e4) returned 1 [0132.045] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BCD" (normalized: "c:\\boot\\bcd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.045] SetEvent (hEvent=0x2e4) returned 1 [0132.045] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.045] SetEvent (hEvent=0x2e4) returned 1 [0132.046] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0132.046] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=0) returned 1 [0132.046] CloseHandle (hObject=0x370) returned 1 [0132.046] SetEvent (hEvent=0x2e4) returned 1 [0132.047] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0132.047] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=0) returned 1 [0132.047] CloseHandle (hObject=0x370) returned 1 [0132.047] SetEvent (hEvent=0x2e4) returned 1 [0132.048] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\bg-BG\\bootmgr.exe.mui" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0132.048] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=77664) returned 1 [0132.048] CloseHandle (hObject=0x370) returned 1 [0132.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\bg-BG\\bootmgr.exe.mui" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui")) returned 0x20 [0132.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\bg-BG\\bootmgr.exe.mui" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui")) returned 0x20 [0132.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\bg-BG\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.048] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\bg-BG\\bootmgr.exe.mui" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.048] SetEvent (hEvent=0x2e4) returned 1 [0132.049] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\bootspaces.dll" (normalized: "c:\\boot\\bootspaces.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0132.050] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=95648) returned 1 [0132.051] CloseHandle (hObject=0x370) returned 1 [0132.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\bootspaces.dll" (normalized: "c:\\boot\\bootspaces.dll")) returned 0x20 [0132.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\bootspaces.dll" (normalized: "c:\\boot\\bootspaces.dll")) returned 0x20 [0132.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\bootspaces.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\bootspaces.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.051] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\bootspaces.dll" (normalized: "c:\\boot\\bootspaces.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.051] SetEvent (hEvent=0x2e4) returned 1 [0132.051] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0132.052] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=65536) returned 1 [0132.052] CloseHandle (hObject=0x370) returned 1 [0132.052] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat")) returned 0x26 [0132.052] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat")) returned 0x26 [0132.052] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\BOOTSTAT.DAT.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\bootstat.dat.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.052] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.052] SetEvent (hEvent=0x2e4) returned 1 [0132.053] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\bootvhd.dll" (normalized: "c:\\boot\\bootvhd.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0132.053] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=99744) returned 1 [0132.053] CloseHandle (hObject=0x370) returned 1 [0132.053] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\bootvhd.dll" (normalized: "c:\\boot\\bootvhd.dll")) returned 0x20 [0132.053] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\bootvhd.dll" (normalized: "c:\\boot\\bootvhd.dll")) returned 0x20 [0132.053] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\bootvhd.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\bootvhd.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.053] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\bootvhd.dll" (normalized: "c:\\boot\\bootvhd.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.053] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0132.053] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=76632) returned 1 [0132.053] CloseHandle (hObject=0x370) returned 1 [0132.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui")) returned 0x20 [0132.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui")) returned 0x20 [0132.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.054] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.056] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\memtest.exe.mui" (normalized: "c:\\boot\\cs-cz\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0132.056] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=45472) returned 1 [0132.056] CloseHandle (hObject=0x370) returned 1 [0132.056] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\memtest.exe.mui" (normalized: "c:\\boot\\cs-cz\\memtest.exe.mui")) returned 0x20 [0132.056] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\memtest.exe.mui" (normalized: "c:\\boot\\cs-cz\\memtest.exe.mui")) returned 0x20 [0132.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\memtest.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\cs-cz\\memtest.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.057] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\memtest.exe.mui" (normalized: "c:\\boot\\cs-cz\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.057] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0132.057] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=75616) returned 1 [0132.057] CloseHandle (hObject=0x370) returned 1 [0132.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui")) returned 0x20 [0132.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui")) returned 0x20 [0132.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.057] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.058] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\memtest.exe.mui" (normalized: "c:\\boot\\da-dk\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0132.058] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=45472) returned 1 [0132.058] CloseHandle (hObject=0x370) returned 1 [0132.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\memtest.exe.mui" (normalized: "c:\\boot\\da-dk\\memtest.exe.mui")) returned 0x20 [0132.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\memtest.exe.mui" (normalized: "c:\\boot\\da-dk\\memtest.exe.mui")) returned 0x20 [0132.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\memtest.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\da-dk\\memtest.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.058] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\memtest.exe.mui" (normalized: "c:\\boot\\da-dk\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.059] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0132.059] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=79200) returned 1 [0132.059] CloseHandle (hObject=0x370) returned 1 [0132.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui")) returned 0x20 [0132.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui")) returned 0x20 [0132.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.061] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.061] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\memtest.exe.mui" (normalized: "c:\\boot\\de-de\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0132.062] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=45984) returned 1 [0132.062] CloseHandle (hObject=0x370) returned 1 [0132.062] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\memtest.exe.mui" (normalized: "c:\\boot\\de-de\\memtest.exe.mui")) returned 0x20 [0132.062] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\memtest.exe.mui" (normalized: "c:\\boot\\de-de\\memtest.exe.mui")) returned 0x20 [0132.062] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\memtest.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\de-de\\memtest.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.062] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\memtest.exe.mui" (normalized: "c:\\boot\\de-de\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.062] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0132.062] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=80224) returned 1 [0132.062] CloseHandle (hObject=0x370) returned 1 [0132.062] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui")) returned 0x20 [0132.062] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui")) returned 0x20 [0132.063] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.063] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.063] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\memtest.exe.mui" (normalized: "c:\\boot\\el-gr\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0132.063] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=46496) returned 1 [0132.063] CloseHandle (hObject=0x370) returned 1 [0132.063] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\memtest.exe.mui" (normalized: "c:\\boot\\el-gr\\memtest.exe.mui")) returned 0x20 [0132.063] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\memtest.exe.mui" (normalized: "c:\\boot\\el-gr\\memtest.exe.mui")) returned 0x20 [0132.063] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\memtest.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\el-gr\\memtest.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.063] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\memtest.exe.mui" (normalized: "c:\\boot\\el-gr\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.064] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\en-GB\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-gb\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0132.064] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=74072) returned 1 [0132.064] CloseHandle (hObject=0x370) returned 1 [0132.064] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-GB\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-gb\\bootmgr.exe.mui")) returned 0x20 [0132.064] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-GB\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-gb\\bootmgr.exe.mui")) returned 0x20 [0132.064] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-GB\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\en-gb\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.064] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\en-GB\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-gb\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.065] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0132.065] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=74144) returned 1 [0132.066] CloseHandle (hObject=0x370) returned 1 [0132.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui")) returned 0x20 [0132.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui")) returned 0x20 [0132.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.066] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.067] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0132.067] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=44960) returned 1 [0132.067] CloseHandle (hObject=0x370) returned 1 [0132.067] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui")) returned 0x20 [0132.067] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui")) returned 0x20 [0132.067] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\en-us\\memtest.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.067] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.067] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0132.068] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=77664) returned 1 [0132.068] CloseHandle (hObject=0x370) returned 1 [0132.068] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui")) returned 0x20 [0132.068] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui")) returned 0x20 [0132.068] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.068] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.068] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\memtest.exe.mui" (normalized: "c:\\boot\\es-es\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0132.068] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=45984) returned 1 [0132.069] CloseHandle (hObject=0x370) returned 1 [0132.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\memtest.exe.mui" (normalized: "c:\\boot\\es-es\\memtest.exe.mui")) returned 0x20 [0132.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\memtest.exe.mui" (normalized: "c:\\boot\\es-es\\memtest.exe.mui")) returned 0x20 [0132.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\memtest.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\es-es\\memtest.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.069] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\memtest.exe.mui" (normalized: "c:\\boot\\es-es\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.069] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\es-MX\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-mx\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0132.069] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=77664) returned 1 [0132.069] CloseHandle (hObject=0x370) returned 1 [0132.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-MX\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-mx\\bootmgr.exe.mui")) returned 0x20 [0132.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-MX\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-mx\\bootmgr.exe.mui")) returned 0x20 [0132.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-MX\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\es-mx\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.070] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\es-MX\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-mx\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.070] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\et-EE\\bootmgr.exe.mui" (normalized: "c:\\boot\\et-ee\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0132.070] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=75104) returned 1 [0132.070] CloseHandle (hObject=0x370) returned 1 [0132.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\et-EE\\bootmgr.exe.mui" (normalized: "c:\\boot\\et-ee\\bootmgr.exe.mui")) returned 0x20 [0132.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\et-EE\\bootmgr.exe.mui" (normalized: "c:\\boot\\et-ee\\bootmgr.exe.mui")) returned 0x20 [0132.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\et-EE\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\et-ee\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.070] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\et-EE\\bootmgr.exe.mui" (normalized: "c:\\boot\\et-ee\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.071] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0132.071] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=76640) returned 1 [0132.071] CloseHandle (hObject=0x370) returned 1 [0132.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui")) returned 0x20 [0132.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui")) returned 0x20 [0132.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.071] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.071] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\memtest.exe.mui" (normalized: "c:\\boot\\fi-fi\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0132.072] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=45472) returned 1 [0132.072] CloseHandle (hObject=0x370) returned 1 [0132.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\memtest.exe.mui" (normalized: "c:\\boot\\fi-fi\\memtest.exe.mui")) returned 0x20 [0132.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\memtest.exe.mui" (normalized: "c:\\boot\\fi-fi\\memtest.exe.mui")) returned 0x20 [0132.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\memtest.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\fi-fi\\memtest.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.072] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\memtest.exe.mui" (normalized: "c:\\boot\\fi-fi\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.072] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0132.075] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=3695719) returned 1 [0132.075] CloseHandle (hObject=0x370) returned 1 [0132.076] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf")) returned 0x20 [0132.076] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\fonts\\chs_boot.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0 [0132.076] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\fonts\\chs_boot.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf")) returned 0 [0132.076] SetEvent (hEvent=0x2e4) returned 1 [0132.076] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0132.078] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=3878410) returned 1 [0132.078] CloseHandle (hObject=0x370) returned 1 [0132.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf")) returned 0x20 [0132.078] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\fonts\\cht_boot.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0 [0132.078] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\fonts\\cht_boot.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf")) returned 0 [0132.078] SetEvent (hEvent=0x2e4) returned 1 [0132.078] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0132.082] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=1985867) returned 1 [0132.082] CloseHandle (hObject=0x368) returned 1 [0132.082] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf")) returned 0x20 [0132.082] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0 [0132.082] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf")) returned 0 [0132.083] SetEvent (hEvent=0x2e4) returned 1 [0132.083] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0132.084] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=2373000) returned 1 [0132.084] CloseHandle (hObject=0x368) returned 1 [0132.084] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf")) returned 0x20 [0132.085] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\fonts\\kor_boot.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0 [0132.085] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\fonts\\kor_boot.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf")) returned 0 [0132.085] SetEvent (hEvent=0x2e4) returned 1 [0132.085] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\malgunn_boot.ttf" (normalized: "c:\\boot\\fonts\\malgunn_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0132.087] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=174959) returned 1 [0132.087] CloseHandle (hObject=0x368) returned 1 [0132.087] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\malgunn_boot.ttf" (normalized: "c:\\boot\\fonts\\malgunn_boot.ttf")) returned 0x20 [0132.087] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\malgunn_boot.ttf" (normalized: "c:\\boot\\fonts\\malgunn_boot.ttf")) returned 0x20 [0132.087] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\malgunn_boot.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\fonts\\malgunn_boot.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.087] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\malgunn_boot.ttf" (normalized: "c:\\boot\\fonts\\malgunn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.087] SetEvent (hEvent=0x2e4) returned 1 [0132.087] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\malgun_boot.ttf" (normalized: "c:\\boot\\fonts\\malgun_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350 [0132.090] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=177414) returned 1 [0132.090] CloseHandle (hObject=0x350) returned 1 [0132.090] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\malgun_boot.ttf" (normalized: "c:\\boot\\fonts\\malgun_boot.ttf")) returned 0x20 [0132.240] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\malgun_boot.ttf" (normalized: "c:\\boot\\fonts\\malgun_boot.ttf")) returned 0x20 [0132.240] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\malgun_boot.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\fonts\\malgun_boot.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.241] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\malgun_boot.ttf" (normalized: "c:\\boot\\fonts\\malgun_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.241] SetEvent (hEvent=0x2e4) returned 1 [0132.241] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\meiryon_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryon_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350 [0132.244] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=143754) returned 1 [0132.244] CloseHandle (hObject=0x350) returned 1 [0132.244] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\meiryon_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryon_boot.ttf")) returned 0x20 [0132.244] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\meiryon_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryon_boot.ttf")) returned 0x20 [0132.244] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\meiryon_boot.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\fonts\\meiryon_boot.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.244] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\meiryon_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryon_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.244] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\meiryo_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryo_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350 [0132.246] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=145419) returned 1 [0132.246] CloseHandle (hObject=0x350) returned 1 [0132.246] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\meiryo_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryo_boot.ttf")) returned 0x20 [0132.246] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\meiryo_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryo_boot.ttf")) returned 0x20 [0132.246] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\meiryo_boot.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\fonts\\meiryo_boot.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.246] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\meiryo_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryo_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.246] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msjhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msjhn_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350 [0132.246] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=162331) returned 1 [0132.247] CloseHandle (hObject=0x350) returned 1 [0132.247] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msjhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msjhn_boot.ttf")) returned 0x20 [0132.247] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msjhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msjhn_boot.ttf")) returned 0x20 [0132.247] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msjhn_boot.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\fonts\\msjhn_boot.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.247] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msjhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msjhn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.247] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msjh_boot.ttf" (normalized: "c:\\boot\\fonts\\msjh_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350 [0132.248] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=164347) returned 1 [0132.248] CloseHandle (hObject=0x350) returned 1 [0132.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msjh_boot.ttf" (normalized: "c:\\boot\\fonts\\msjh_boot.ttf")) returned 0x20 [0132.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msjh_boot.ttf" (normalized: "c:\\boot\\fonts\\msjh_boot.ttf")) returned 0x20 [0132.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msjh_boot.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\fonts\\msjh_boot.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.248] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msjh_boot.ttf" (normalized: "c:\\boot\\fonts\\msjh_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.248] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msyhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350 [0132.248] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=154427) returned 1 [0132.248] CloseHandle (hObject=0x350) returned 1 [0132.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msyhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf")) returned 0x20 [0132.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msyhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf")) returned 0x20 [0132.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msyhn_boot.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.249] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msyhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.249] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msyh_boot.ttf" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350 [0132.249] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=156245) returned 1 [0132.249] CloseHandle (hObject=0x350) returned 1 [0132.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msyh_boot.ttf" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf")) returned 0x20 [0132.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msyh_boot.ttf" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf")) returned 0x20 [0132.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msyh_boot.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.250] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msyh_boot.ttf" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.250] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segmono_boot.ttf" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350 [0132.250] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=44859) returned 1 [0132.250] CloseHandle (hObject=0x350) returned 1 [0132.250] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segmono_boot.ttf" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf")) returned 0x20 [0132.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segmono_boot.ttf" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf")) returned 0x20 [0132.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segmono_boot.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.251] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segmono_boot.ttf" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.251] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segoen_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoen_slboot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350 [0132.251] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=85862) returned 1 [0132.251] CloseHandle (hObject=0x350) returned 1 [0132.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segoen_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoen_slboot.ttf")) returned 0x20 [0132.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segoen_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoen_slboot.ttf")) returned 0x20 [0132.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segoen_slboot.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\fonts\\segoen_slboot.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.306] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segoen_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoen_slboot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.306] SetEvent (hEvent=0x2e4) returned 1 [0132.306] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segoe_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoe_slboot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0132.306] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=86178) returned 1 [0132.306] CloseHandle (hObject=0x354) returned 1 [0132.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segoe_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoe_slboot.ttf")) returned 0x20 [0132.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segoe_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoe_slboot.ttf")) returned 0x20 [0132.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segoe_slboot.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\fonts\\segoe_slboot.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.306] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segoe_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoe_slboot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.307] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0132.307] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=49091) returned 1 [0132.307] CloseHandle (hObject=0x354) returned 1 [0132.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf")) returned 0x20 [0132.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf")) returned 0x20 [0132.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.307] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.307] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fr-CA\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-ca\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0132.307] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=79200) returned 1 [0132.307] CloseHandle (hObject=0x354) returned 1 [0132.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-CA\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-ca\\bootmgr.exe.mui")) returned 0x20 [0132.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-CA\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-ca\\bootmgr.exe.mui")) returned 0x20 [0132.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-CA\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\fr-ca\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.308] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fr-CA\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-ca\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.308] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0132.308] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=79192) returned 1 [0132.308] CloseHandle (hObject=0x354) returned 1 [0132.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui")) returned 0x20 [0132.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui")) returned 0x20 [0132.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.308] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.309] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\memtest.exe.mui" (normalized: "c:\\boot\\fr-fr\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0132.309] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=45984) returned 1 [0132.309] CloseHandle (hObject=0x354) returned 1 [0132.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\memtest.exe.mui" (normalized: "c:\\boot\\fr-fr\\memtest.exe.mui")) returned 0x20 [0132.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\memtest.exe.mui" (normalized: "c:\\boot\\fr-fr\\memtest.exe.mui")) returned 0x20 [0132.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\memtest.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\fr-fr\\memtest.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.309] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\memtest.exe.mui" (normalized: "c:\\boot\\fr-fr\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.310] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\hr-HR\\bootmgr.exe.mui" (normalized: "c:\\boot\\hr-hr\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0132.310] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=76640) returned 1 [0132.310] CloseHandle (hObject=0x354) returned 1 [0132.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hr-HR\\bootmgr.exe.mui" (normalized: "c:\\boot\\hr-hr\\bootmgr.exe.mui")) returned 0x20 [0132.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hr-HR\\bootmgr.exe.mui" (normalized: "c:\\boot\\hr-hr\\bootmgr.exe.mui")) returned 0x20 [0132.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hr-HR\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\hr-hr\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.310] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\hr-HR\\bootmgr.exe.mui" (normalized: "c:\\boot\\hr-hr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.310] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0132.311] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=78688) returned 1 [0132.311] CloseHandle (hObject=0x354) returned 1 [0132.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui")) returned 0x20 [0132.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui")) returned 0x20 [0132.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.311] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.311] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\memtest.exe.mui" (normalized: "c:\\boot\\hu-hu\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0132.311] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=45976) returned 1 [0132.311] CloseHandle (hObject=0x354) returned 1 [0132.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\memtest.exe.mui" (normalized: "c:\\boot\\hu-hu\\memtest.exe.mui")) returned 0x20 [0132.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\memtest.exe.mui" (normalized: "c:\\boot\\hu-hu\\memtest.exe.mui")) returned 0x20 [0132.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\memtest.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\hu-hu\\memtest.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.312] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\memtest.exe.mui" (normalized: "c:\\boot\\hu-hu\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.312] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0132.312] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=77144) returned 1 [0132.312] CloseHandle (hObject=0x354) returned 1 [0132.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui")) returned 0x20 [0132.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui")) returned 0x20 [0132.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.312] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.313] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\memtest.exe.mui" (normalized: "c:\\boot\\it-it\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0132.313] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=45472) returned 1 [0132.313] CloseHandle (hObject=0x354) returned 1 [0132.313] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\memtest.exe.mui" (normalized: "c:\\boot\\it-it\\memtest.exe.mui")) returned 0x20 [0132.313] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\memtest.exe.mui" (normalized: "c:\\boot\\it-it\\memtest.exe.mui")) returned 0x20 [0132.313] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\memtest.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\it-it\\memtest.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.313] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\memtest.exe.mui" (normalized: "c:\\boot\\it-it\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.313] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0132.314] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=67424) returned 1 [0132.314] CloseHandle (hObject=0x354) returned 1 [0132.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui")) returned 0x20 [0132.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui")) returned 0x20 [0132.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.314] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.314] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\memtest.exe.mui" (normalized: "c:\\boot\\ja-jp\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0132.314] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=42904) returned 1 [0132.314] CloseHandle (hObject=0x354) returned 1 [0132.315] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\memtest.exe.mui" (normalized: "c:\\boot\\ja-jp\\memtest.exe.mui")) returned 0x20 [0132.315] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\memtest.exe.mui" (normalized: "c:\\boot\\ja-jp\\memtest.exe.mui")) returned 0x20 [0132.315] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\memtest.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\ja-jp\\memtest.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.315] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\memtest.exe.mui" (normalized: "c:\\boot\\ja-jp\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.315] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0132.315] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=66912) returned 1 [0132.315] CloseHandle (hObject=0x354) returned 1 [0132.315] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui")) returned 0x20 [0132.315] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui")) returned 0x20 [0132.315] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.316] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.316] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\memtest.exe.mui" (normalized: "c:\\boot\\ko-kr\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0132.316] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=42912) returned 1 [0132.316] CloseHandle (hObject=0x354) returned 1 [0132.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\memtest.exe.mui" (normalized: "c:\\boot\\ko-kr\\memtest.exe.mui")) returned 0x20 [0132.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\memtest.exe.mui" (normalized: "c:\\boot\\ko-kr\\memtest.exe.mui")) returned 0x20 [0132.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\memtest.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\ko-kr\\memtest.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.316] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\memtest.exe.mui" (normalized: "c:\\boot\\ko-kr\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.317] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\lt-LT\\bootmgr.exe.mui" (normalized: "c:\\boot\\lt-lt\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0132.317] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=75616) returned 1 [0132.317] CloseHandle (hObject=0x354) returned 1 [0132.317] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\lt-LT\\bootmgr.exe.mui" (normalized: "c:\\boot\\lt-lt\\bootmgr.exe.mui")) returned 0x20 [0132.317] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\lt-LT\\bootmgr.exe.mui" (normalized: "c:\\boot\\lt-lt\\bootmgr.exe.mui")) returned 0x20 [0132.317] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\lt-LT\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\lt-lt\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.317] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\lt-LT\\bootmgr.exe.mui" (normalized: "c:\\boot\\lt-lt\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.317] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\lv-LV\\bootmgr.exe.mui" (normalized: "c:\\boot\\lv-lv\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0132.318] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=75608) returned 1 [0132.318] CloseHandle (hObject=0x354) returned 1 [0132.318] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\lv-LV\\bootmgr.exe.mui" (normalized: "c:\\boot\\lv-lv\\bootmgr.exe.mui")) returned 0x20 [0132.318] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\lv-LV\\bootmgr.exe.mui" (normalized: "c:\\boot\\lv-lv\\bootmgr.exe.mui")) returned 0x20 [0132.318] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\lv-LV\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\lv-lv\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.318] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\lv-LV\\bootmgr.exe.mui" (normalized: "c:\\boot\\lv-lv\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.318] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0132.318] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=811936) returned 1 [0132.318] CloseHandle (hObject=0x354) returned 1 [0132.319] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe")) returned 0x20 [0132.319] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe")) returned 0x20 [0132.319] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\memtest.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\memtest.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.319] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.319] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0132.319] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=75616) returned 1 [0132.320] CloseHandle (hObject=0x354) returned 1 [0132.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui")) returned 0x20 [0132.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui")) returned 0x20 [0132.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.320] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.320] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\memtest.exe.mui" (normalized: "c:\\boot\\nb-no\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0132.320] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=45472) returned 1 [0132.320] CloseHandle (hObject=0x354) returned 1 [0132.323] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\memtest.exe.mui" (normalized: "c:\\boot\\nb-no\\memtest.exe.mui")) returned 0x20 [0132.323] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\memtest.exe.mui" (normalized: "c:\\boot\\nb-no\\memtest.exe.mui")) returned 0x20 [0132.323] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\memtest.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\nb-no\\memtest.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.323] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\memtest.exe.mui" (normalized: "c:\\boot\\nb-no\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.323] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0132.323] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=78176) returned 1 [0132.323] CloseHandle (hObject=0x354) returned 1 [0132.323] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui")) returned 0x20 [0132.323] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui")) returned 0x20 [0132.323] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.323] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.324] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\memtest.exe.mui" (normalized: "c:\\boot\\nl-nl\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0132.326] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=45472) returned 1 [0132.326] CloseHandle (hObject=0x354) returned 1 [0132.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\memtest.exe.mui" (normalized: "c:\\boot\\nl-nl\\memtest.exe.mui")) returned 0x20 [0132.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\memtest.exe.mui" (normalized: "c:\\boot\\nl-nl\\memtest.exe.mui")) returned 0x20 [0132.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\memtest.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\nl-nl\\memtest.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.326] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\memtest.exe.mui" (normalized: "c:\\boot\\nl-nl\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.327] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0132.327] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=77656) returned 1 [0132.327] CloseHandle (hObject=0x354) returned 1 [0132.327] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui")) returned 0x20 [0132.327] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui")) returned 0x20 [0132.327] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.327] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.327] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\memtest.exe.mui" (normalized: "c:\\boot\\pl-pl\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0132.327] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=45984) returned 1 [0132.328] CloseHandle (hObject=0x354) returned 1 [0132.328] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\memtest.exe.mui" (normalized: "c:\\boot\\pl-pl\\memtest.exe.mui")) returned 0x20 [0132.328] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\memtest.exe.mui" (normalized: "c:\\boot\\pl-pl\\memtest.exe.mui")) returned 0x20 [0132.328] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\memtest.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\pl-pl\\memtest.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.328] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\memtest.exe.mui" (normalized: "c:\\boot\\pl-pl\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.328] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0132.328] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=76640) returned 1 [0132.328] CloseHandle (hObject=0x354) returned 1 [0132.328] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui")) returned 0x20 [0132.328] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui")) returned 0x20 [0132.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.329] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.329] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\memtest.exe.mui" (normalized: "c:\\boot\\pt-br\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0132.329] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=45472) returned 1 [0132.329] CloseHandle (hObject=0x354) returned 1 [0132.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\memtest.exe.mui" (normalized: "c:\\boot\\pt-br\\memtest.exe.mui")) returned 0x20 [0132.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\memtest.exe.mui" (normalized: "c:\\boot\\pt-br\\memtest.exe.mui")) returned 0x20 [0132.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\memtest.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\pt-br\\memtest.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.329] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\memtest.exe.mui" (normalized: "c:\\boot\\pt-br\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.330] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0132.330] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=76640) returned 1 [0132.330] CloseHandle (hObject=0x354) returned 1 [0132.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui")) returned 0x20 [0132.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui")) returned 0x20 [0132.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.330] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.330] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\memtest.exe.mui" (normalized: "c:\\boot\\pt-pt\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0132.331] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=45984) returned 1 [0132.331] CloseHandle (hObject=0x354) returned 1 [0132.331] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\memtest.exe.mui" (normalized: "c:\\boot\\pt-pt\\memtest.exe.mui")) returned 0x20 [0132.331] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\memtest.exe.mui" (normalized: "c:\\boot\\pt-pt\\memtest.exe.mui")) returned 0x20 [0132.331] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\memtest.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\pt-pt\\memtest.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.331] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\memtest.exe.mui" (normalized: "c:\\boot\\pt-pt\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.331] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\bootmgr.exe.mui" (normalized: "c:\\boot\\qps-ploc\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0132.331] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=74080) returned 1 [0132.331] CloseHandle (hObject=0x354) returned 1 [0132.331] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\bootmgr.exe.mui" (normalized: "c:\\boot\\qps-ploc\\bootmgr.exe.mui")) returned 0x20 [0132.331] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\bootmgr.exe.mui" (normalized: "c:\\boot\\qps-ploc\\bootmgr.exe.mui")) returned 0x20 [0132.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\qps-ploc\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.332] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\bootmgr.exe.mui" (normalized: "c:\\boot\\qps-ploc\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.332] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\memtest.exe.mui" (normalized: "c:\\boot\\qps-ploc\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0132.332] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=54168) returned 1 [0132.332] CloseHandle (hObject=0x354) returned 1 [0132.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\memtest.exe.mui" (normalized: "c:\\boot\\qps-ploc\\memtest.exe.mui")) returned 0x20 [0132.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\memtest.exe.mui" (normalized: "c:\\boot\\qps-ploc\\memtest.exe.mui")) returned 0x20 [0132.333] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\memtest.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\qps-ploc\\memtest.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.333] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\memtest.exe.mui" (normalized: "c:\\boot\\qps-ploc\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.333] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Resources\\bootres.dll" (normalized: "c:\\boot\\resources\\bootres.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0132.333] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=92576) returned 1 [0132.333] CloseHandle (hObject=0x354) returned 1 [0132.333] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Resources\\bootres.dll" (normalized: "c:\\boot\\resources\\bootres.dll")) returned 0x20 [0132.333] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Resources\\bootres.dll" (normalized: "c:\\boot\\resources\\bootres.dll")) returned 0x20 [0132.333] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Resources\\bootres.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\resources\\bootres.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.333] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Resources\\bootres.dll" (normalized: "c:\\boot\\resources\\bootres.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.334] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Resources\\en-US\\bootres.dll.mui" (normalized: "c:\\boot\\resources\\en-us\\bootres.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0132.334] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=12192) returned 1 [0132.334] CloseHandle (hObject=0x354) returned 1 [0132.334] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Resources\\en-US\\bootres.dll.mui" (normalized: "c:\\boot\\resources\\en-us\\bootres.dll.mui")) returned 0x20 [0132.334] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Resources\\en-US\\bootres.dll.mui" (normalized: "c:\\boot\\resources\\en-us\\bootres.dll.mui")) returned 0x20 [0132.334] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Resources\\en-US\\bootres.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\resources\\en-us\\bootres.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.334] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Resources\\en-US\\bootres.dll.mui" (normalized: "c:\\boot\\resources\\en-us\\bootres.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.334] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ro-RO\\bootmgr.exe.mui" (normalized: "c:\\boot\\ro-ro\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0132.335] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=76128) returned 1 [0132.335] CloseHandle (hObject=0x354) returned 1 [0132.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ro-RO\\bootmgr.exe.mui" (normalized: "c:\\boot\\ro-ro\\bootmgr.exe.mui")) returned 0x20 [0132.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ro-RO\\bootmgr.exe.mui" (normalized: "c:\\boot\\ro-ro\\bootmgr.exe.mui")) returned 0x20 [0132.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ro-RO\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\ro-ro\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.335] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ro-RO\\bootmgr.exe.mui" (normalized: "c:\\boot\\ro-ro\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.335] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0132.335] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=77152) returned 1 [0132.335] CloseHandle (hObject=0x354) returned 1 [0132.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui")) returned 0x20 [0132.336] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui")) returned 0x20 [0132.336] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.336] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.336] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\memtest.exe.mui" (normalized: "c:\\boot\\ru-ru\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0132.336] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=44960) returned 1 [0132.336] CloseHandle (hObject=0x354) returned 1 [0132.336] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\memtest.exe.mui" (normalized: "c:\\boot\\ru-ru\\memtest.exe.mui")) returned 0x20 [0132.336] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\memtest.exe.mui" (normalized: "c:\\boot\\ru-ru\\memtest.exe.mui")) returned 0x20 [0132.336] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\memtest.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\ru-ru\\memtest.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.336] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\memtest.exe.mui" (normalized: "c:\\boot\\ru-ru\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.337] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sk-SK\\bootmgr.exe.mui" (normalized: "c:\\boot\\sk-sk\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0132.337] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=77144) returned 1 [0132.337] CloseHandle (hObject=0x354) returned 1 [0132.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sk-SK\\bootmgr.exe.mui" (normalized: "c:\\boot\\sk-sk\\bootmgr.exe.mui")) returned 0x20 [0132.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sk-SK\\bootmgr.exe.mui" (normalized: "c:\\boot\\sk-sk\\bootmgr.exe.mui")) returned 0x20 [0132.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sk-SK\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\sk-sk\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.337] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sk-SK\\bootmgr.exe.mui" (normalized: "c:\\boot\\sk-sk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.337] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sl-SI\\bootmgr.exe.mui" (normalized: "c:\\boot\\sl-si\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0132.337] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=76640) returned 1 [0132.338] CloseHandle (hObject=0x354) returned 1 [0132.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sl-SI\\bootmgr.exe.mui" (normalized: "c:\\boot\\sl-si\\bootmgr.exe.mui")) returned 0x20 [0132.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sl-SI\\bootmgr.exe.mui" (normalized: "c:\\boot\\sl-si\\bootmgr.exe.mui")) returned 0x20 [0132.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sl-SI\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\sl-si\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.338] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sl-SI\\bootmgr.exe.mui" (normalized: "c:\\boot\\sl-si\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.338] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0132.338] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=77152) returned 1 [0132.338] CloseHandle (hObject=0x354) returned 1 [0132.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\bootmgr.exe.mui")) returned 0x20 [0132.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\bootmgr.exe.mui")) returned 0x20 [0132.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\sr-latn-cs\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.339] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.339] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\memtest.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0132.339] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=44888) returned 1 [0132.339] CloseHandle (hObject=0x354) returned 1 [0132.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\memtest.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\memtest.exe.mui")) returned 0x20 [0132.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\memtest.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\memtest.exe.mui")) returned 0x20 [0132.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\memtest.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\sr-latn-cs\\memtest.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.339] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\memtest.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.340] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-RS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-rs\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0132.340] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=77152) returned 1 [0132.340] CloseHandle (hObject=0x354) returned 1 [0132.340] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-RS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-rs\\bootmgr.exe.mui")) returned 0x20 [0132.340] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-RS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-rs\\bootmgr.exe.mui")) returned 0x20 [0132.340] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-RS\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\sr-latn-rs\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.340] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-RS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-rs\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.340] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0132.341] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=76128) returned 1 [0132.341] CloseHandle (hObject=0x354) returned 1 [0132.341] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui")) returned 0x20 [0132.341] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui")) returned 0x20 [0132.341] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.341] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.341] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\memtest.exe.mui" (normalized: "c:\\boot\\sv-se\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0132.341] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=44952) returned 1 [0132.341] CloseHandle (hObject=0x354) returned 1 [0132.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\memtest.exe.mui" (normalized: "c:\\boot\\sv-se\\memtest.exe.mui")) returned 0x20 [0132.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\memtest.exe.mui" (normalized: "c:\\boot\\sv-se\\memtest.exe.mui")) returned 0x20 [0132.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\memtest.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\sv-se\\memtest.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.342] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\memtest.exe.mui" (normalized: "c:\\boot\\sv-se\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.573] SetEvent (hEvent=0x2e4) returned 1 [0132.585] CreateFileW (lpFileName="\\\\?\\C:\\hiberfil.sys" (normalized: "c:\\hiberfil.sys"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0132.586] SetEvent (hEvent=0x2e4) returned 1 [0132.586] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0132.587] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=69632) returned 1 [0132.587] CloseHandle (hObject=0x364) returned 1 [0132.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx")) returned 0x20 [0132.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx")) returned 0x20 [0132.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\HardwareEvents.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\hardwareevents.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.587] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0132.588] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0132.588] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0132.588] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\HardwareEvents.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\hardwareevents.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0132.588] ReadFile (in: hFile=0x364, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x11000, lpOverlapped=0x0) returned 1 [0132.592] WriteFile (in: hFile=0x36c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x11010, lpOverlapped=0x0) returned 1 [0132.594] WriteFile (in: hFile=0x36c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x102, lpOverlapped=0x0) returned 1 [0132.594] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0132.594] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0132.594] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x11000, lpOverlapped=0x0) returned 1 [0132.595] FlushFileBuffers (hFile=0x364) returned 1 [0132.599] FlushFileBuffers (hFile=0x36c) returned 1 [0132.600] CloseHandle (hObject=0x364) returned 1 [0132.602] CloseHandle (hObject=0x36c) returned 1 [0132.604] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx")) returned 1 [0132.606] SetEvent (hEvent=0x2e4) returned 1 [0132.606] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0132.606] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=69632) returned 1 [0132.607] CloseHandle (hObject=0x36c) returned 1 [0132.607] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx")) returned 0x20 [0132.607] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx")) returned 0x20 [0132.607] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Internet Explorer.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\internet explorer.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0132.607] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0132.607] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0132.607] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0132.607] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Internet Explorer.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\internet explorer.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x364 [0132.613] ReadFile (in: hFile=0x36c, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x11000, lpOverlapped=0x0) returned 1 [0132.616] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x11010, lpOverlapped=0x0) returned 1 [0132.619] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x102, lpOverlapped=0x0) returned 1 [0132.619] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0132.619] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0132.619] WriteFile (in: hFile=0x36c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x11000, lpOverlapped=0x0) returned 1 [0132.619] FlushFileBuffers (hFile=0x36c) returned 1 [0133.144] FlushFileBuffers (hFile=0x364) returned 1 [0133.145] CloseHandle (hObject=0x36c) returned 1 [0133.147] CloseHandle (hObject=0x364) returned 1 [0133.149] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx")) returned 1 [0133.151] SetEvent (hEvent=0x2e4) returned 1 [0133.152] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0133.152] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=69632) returned 1 [0133.152] CloseHandle (hObject=0x364) returned 1 [0133.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx")) returned 0x20 [0133.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx")) returned 0x20 [0133.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0133.152] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0133.152] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0133.152] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0133.153] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0133.153] ReadFile (in: hFile=0x364, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x11000, lpOverlapped=0x0) returned 1 [0133.158] WriteFile (in: hFile=0x36c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x11010, lpOverlapped=0x0) returned 1 [0133.161] WriteFile (in: hFile=0x36c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x132, lpOverlapped=0x0) returned 1 [0133.161] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0133.161] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0133.161] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x11000, lpOverlapped=0x0) returned 1 [0133.162] FlushFileBuffers (hFile=0x364) returned 1 [0133.165] FlushFileBuffers (hFile=0x36c) returned 1 [0133.171] CloseHandle (hObject=0x364) returned 1 [0133.175] CloseHandle (hObject=0x36c) returned 1 [0133.177] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx")) returned 1 [0133.179] SetEvent (hEvent=0x2e4) returned 1 [0133.179] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0133.181] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=69632) returned 1 [0133.181] CloseHandle (hObject=0x36c) returned 1 [0133.182] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx")) returned 0x20 [0133.182] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx")) returned 0x20 [0133.182] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0133.182] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0133.182] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0133.182] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0133.182] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x364 [0133.182] ReadFile (in: hFile=0x36c, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x11000, lpOverlapped=0x0) returned 1 [0133.186] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x11010, lpOverlapped=0x0) returned 1 [0133.187] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x172, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x172, lpOverlapped=0x0) returned 1 [0133.188] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0133.188] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0133.188] WriteFile (in: hFile=0x36c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x11000, lpOverlapped=0x0) returned 1 [0133.188] FlushFileBuffers (hFile=0x36c) returned 1 [0133.191] FlushFileBuffers (hFile=0x364) returned 1 [0133.192] CloseHandle (hObject=0x36c) returned 1 [0133.194] CloseHandle (hObject=0x364) returned 1 [0133.196] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx")) returned 1 [0133.197] SetEvent (hEvent=0x2e4) returned 1 [0133.197] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0133.198] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=1052672) returned 1 [0133.198] CloseHandle (hObject=0x364) returned 1 [0133.198] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx")) returned 0x20 [0133.198] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx")) returned 0x20 [0133.198] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0133.198] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0133.199] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0133.199] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0133.199] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0133.200] ReadFile (in: hFile=0x364, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x101000, lpOverlapped=0x0) returned 1 [0133.419] WriteFile (in: hFile=0x36c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x101010, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x101010, lpOverlapped=0x0) returned 1 [0133.441] WriteFile (in: hFile=0x36c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x162, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x162, lpOverlapped=0x0) returned 1 [0133.441] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0133.441] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0133.441] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x101000, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x101000, lpOverlapped=0x0) returned 1 [0133.447] FlushFileBuffers (hFile=0x364) returned 1 [0133.453] FlushFileBuffers (hFile=0x36c) returned 1 [0133.937] CloseHandle (hObject=0x364) returned 1 [0133.958] CloseHandle (hObject=0x36c) returned 1 [0134.172] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx")) returned 1 [0134.185] SetEvent (hEvent=0x2e4) returned 1 [0134.186] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0134.186] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=69632) returned 1 [0134.186] CloseHandle (hObject=0x36c) returned 1 [0134.187] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx")) returned 0x20 [0134.187] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx")) returned 0x20 [0134.187] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0134.187] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0134.187] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0134.187] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0134.187] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x364 [0134.189] ReadFile (in: hFile=0x36c, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x11000, lpOverlapped=0x0) returned 1 [0134.193] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x11010, lpOverlapped=0x0) returned 1 [0134.196] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x142, lpOverlapped=0x0) returned 1 [0134.196] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0134.196] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0134.197] WriteFile (in: hFile=0x36c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x11000, lpOverlapped=0x0) returned 1 [0134.197] FlushFileBuffers (hFile=0x36c) returned 1 [0134.540] FlushFileBuffers (hFile=0x364) returned 1 [0134.542] CloseHandle (hObject=0x36c) returned 1 [0134.544] CloseHandle (hObject=0x364) returned 1 [0134.546] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx")) returned 1 [0134.548] SetEvent (hEvent=0x2e4) returned 1 [0134.548] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0134.549] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=69632) returned 1 [0134.549] CloseHandle (hObject=0x364) returned 1 [0134.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx")) returned 0x20 [0134.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx")) returned 0x20 [0134.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0134.549] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0134.550] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0134.550] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0134.550] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0134.551] ReadFile (in: hFile=0x364, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x11000, lpOverlapped=0x0) returned 1 [0134.554] WriteFile (in: hFile=0x36c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x11010, lpOverlapped=0x0) returned 1 [0134.557] WriteFile (in: hFile=0x36c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x142, lpOverlapped=0x0) returned 1 [0134.557] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0134.557] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0134.557] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x11000, lpOverlapped=0x0) returned 1 [0134.558] FlushFileBuffers (hFile=0x364) returned 1 [0134.562] FlushFileBuffers (hFile=0x36c) returned 1 [0134.564] CloseHandle (hObject=0x364) returned 1 [0134.567] CloseHandle (hObject=0x36c) returned 1 [0134.569] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx")) returned 1 [0134.571] SetEvent (hEvent=0x2e4) returned 1 [0134.571] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0134.572] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=69632) returned 1 [0134.572] CloseHandle (hObject=0x36c) returned 1 [0134.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx")) returned 0x20 [0134.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx")) returned 0x20 [0134.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0134.572] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0134.572] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0134.572] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0134.572] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x364 [0134.573] ReadFile (in: hFile=0x36c, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x11000, lpOverlapped=0x0) returned 1 [0134.577] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x11010, lpOverlapped=0x0) returned 1 [0134.580] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x142, lpOverlapped=0x0) returned 1 [0134.580] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0134.580] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0134.581] WriteFile (in: hFile=0x36c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x11000, lpOverlapped=0x0) returned 1 [0134.581] FlushFileBuffers (hFile=0x36c) returned 1 [0134.586] FlushFileBuffers (hFile=0x364) returned 1 [0134.587] CloseHandle (hObject=0x36c) returned 1 [0134.589] CloseHandle (hObject=0x364) returned 1 [0134.592] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx")) returned 1 [0134.594] SetEvent (hEvent=0x2e4) returned 1 [0134.594] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0134.595] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=69632) returned 1 [0134.595] CloseHandle (hObject=0x364) returned 1 [0134.595] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx")) returned 0x20 [0134.595] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx")) returned 0x20 [0134.595] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0134.595] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0134.595] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0134.596] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0134.596] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0134.596] ReadFile (in: hFile=0x364, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x11000, lpOverlapped=0x0) returned 1 [0134.601] WriteFile (in: hFile=0x36c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x11010, lpOverlapped=0x0) returned 1 [0134.604] WriteFile (in: hFile=0x36c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x162, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x162, lpOverlapped=0x0) returned 1 [0134.604] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0134.604] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0134.604] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x11000, lpOverlapped=0x0) returned 1 [0134.605] FlushFileBuffers (hFile=0x364) returned 1 [0134.611] FlushFileBuffers (hFile=0x36c) returned 1 [0134.613] CloseHandle (hObject=0x364) returned 1 [0134.615] CloseHandle (hObject=0x36c) returned 1 [0134.617] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx")) returned 1 [0134.619] SetEvent (hEvent=0x2e4) returned 1 [0134.619] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0134.619] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=69632) returned 1 [0134.619] CloseHandle (hObject=0x36c) returned 1 [0134.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx")) returned 0x20 [0134.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx")) returned 0x20 [0134.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0134.619] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0134.620] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0134.620] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0134.620] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x364 [0134.621] ReadFile (in: hFile=0x36c, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x11000, lpOverlapped=0x0) returned 1 [0134.625] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x11010, lpOverlapped=0x0) returned 1 [0134.627] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x132, lpOverlapped=0x0) returned 1 [0134.628] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0134.628] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0134.628] WriteFile (in: hFile=0x36c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x11000, lpOverlapped=0x0) returned 1 [0134.628] FlushFileBuffers (hFile=0x36c) returned 1 [0134.633] FlushFileBuffers (hFile=0x364) returned 1 [0134.636] CloseHandle (hObject=0x36c) returned 1 [0134.640] CloseHandle (hObject=0x364) returned 1 [0134.641] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx")) returned 1 [0134.643] SetEvent (hEvent=0x2e4) returned 1 [0134.643] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0134.643] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=69632) returned 1 [0134.643] CloseHandle (hObject=0x364) returned 1 [0134.643] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx")) returned 0x20 [0134.644] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx")) returned 0x20 [0134.644] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0134.644] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0134.644] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0134.644] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0134.644] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0134.645] ReadFile (in: hFile=0x364, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x11000, lpOverlapped=0x0) returned 1 [0134.648] WriteFile (in: hFile=0x36c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x11010, lpOverlapped=0x0) returned 1 [0134.650] WriteFile (in: hFile=0x36c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x142, lpOverlapped=0x0) returned 1 [0134.651] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0134.651] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0134.652] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x11000, lpOverlapped=0x0) returned 1 [0134.652] FlushFileBuffers (hFile=0x364) returned 1 [0134.655] FlushFileBuffers (hFile=0x36c) returned 1 [0134.656] CloseHandle (hObject=0x364) returned 1 [0134.657] CloseHandle (hObject=0x36c) returned 1 [0134.657] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx")) returned 1 [0134.658] SetEvent (hEvent=0x2e4) returned 1 [0134.659] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0134.659] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=69632) returned 1 [0134.659] CloseHandle (hObject=0x36c) returned 1 [0134.659] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx")) returned 0x20 [0134.659] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx")) returned 0x20 [0134.659] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0134.660] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0134.660] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0134.660] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0134.660] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x364 [0134.660] ReadFile (in: hFile=0x36c, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x11000, lpOverlapped=0x0) returned 1 [0134.664] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x11010, lpOverlapped=0x0) returned 1 [0134.667] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x152, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x152, lpOverlapped=0x0) returned 1 [0134.667] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0134.667] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0134.667] WriteFile (in: hFile=0x36c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x11000, lpOverlapped=0x0) returned 1 [0134.667] FlushFileBuffers (hFile=0x36c) returned 1 [0135.002] FlushFileBuffers (hFile=0x364) returned 1 [0135.004] CloseHandle (hObject=0x36c) returned 1 [0135.004] CloseHandle (hObject=0x364) returned 1 [0135.004] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx")) returned 1 [0135.006] SetEvent (hEvent=0x2e4) returned 1 [0135.006] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0135.006] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=69632) returned 1 [0135.006] CloseHandle (hObject=0x364) returned 1 [0135.007] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx")) returned 0x20 [0135.007] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx")) returned 0x20 [0135.007] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0135.007] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0135.007] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0135.007] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0135.007] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0135.008] ReadFile (in: hFile=0x364, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x11000, lpOverlapped=0x0) returned 1 [0135.011] WriteFile (in: hFile=0x36c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x11010, lpOverlapped=0x0) returned 1 [0135.014] WriteFile (in: hFile=0x36c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x142, lpOverlapped=0x0) returned 1 [0135.015] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0135.015] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0135.015] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x11000, lpOverlapped=0x0) returned 1 [0135.015] FlushFileBuffers (hFile=0x364) returned 1 [0135.476] FlushFileBuffers (hFile=0x36c) returned 1 [0135.477] CloseHandle (hObject=0x364) returned 1 [0135.477] CloseHandle (hObject=0x36c) returned 1 [0135.477] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx")) returned 1 [0135.479] SetEvent (hEvent=0x2e4) returned 1 [0135.479] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0135.480] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=69632) returned 1 [0135.480] CloseHandle (hObject=0x36c) returned 1 [0135.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx")) returned 0x20 [0135.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx")) returned 0x20 [0135.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0135.481] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0135.481] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0135.481] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0135.481] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x364 [0135.482] ReadFile (in: hFile=0x36c, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x11000, lpOverlapped=0x0) returned 1 [0135.485] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x11010, lpOverlapped=0x0) returned 1 [0135.488] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x132, lpOverlapped=0x0) returned 1 [0135.488] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0135.488] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0135.488] WriteFile (in: hFile=0x36c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x11000, lpOverlapped=0x0) returned 1 [0135.489] FlushFileBuffers (hFile=0x36c) returned 1 [0135.494] FlushFileBuffers (hFile=0x364) returned 1 [0135.496] CloseHandle (hObject=0x36c) returned 1 [0135.496] CloseHandle (hObject=0x364) returned 1 [0135.496] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx")) returned 1 [0135.497] SetEvent (hEvent=0x2e4) returned 1 [0135.498] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0135.498] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=69632) returned 1 [0135.498] CloseHandle (hObject=0x364) returned 1 [0135.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx")) returned 0x20 [0135.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx")) returned 0x20 [0135.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0135.498] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0135.498] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0135.498] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0135.498] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0135.500] ReadFile (in: hFile=0x364, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x11000, lpOverlapped=0x0) returned 1 [0135.504] WriteFile (in: hFile=0x36c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x11010, lpOverlapped=0x0) returned 1 [0135.506] WriteFile (in: hFile=0x36c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x142, lpOverlapped=0x0) returned 1 [0135.506] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0135.506] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0135.506] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x11000, lpOverlapped=0x0) returned 1 [0135.506] FlushFileBuffers (hFile=0x364) returned 1 [0135.509] FlushFileBuffers (hFile=0x36c) returned 1 [0135.511] CloseHandle (hObject=0x364) returned 1 [0135.511] CloseHandle (hObject=0x36c) returned 1 [0135.512] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx")) returned 1 [0135.514] SetEvent (hEvent=0x2e4) returned 1 [0135.514] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-International%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0135.515] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=69632) returned 1 [0135.515] CloseHandle (hObject=0x36c) returned 1 [0135.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-International%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx")) returned 0x20 [0135.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-International%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx")) returned 0x20 [0135.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-International%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0135.516] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-International%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0135.516] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0135.516] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0135.516] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-International%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x364 [0135.517] ReadFile (in: hFile=0x36c, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x11000, lpOverlapped=0x0) returned 1 [0135.520] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x11010, lpOverlapped=0x0) returned 1 [0135.522] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x142, lpOverlapped=0x0) returned 1 [0135.523] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0135.523] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0135.523] WriteFile (in: hFile=0x36c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x11000, lpOverlapped=0x0) returned 1 [0135.523] FlushFileBuffers (hFile=0x36c) returned 1 [0135.527] FlushFileBuffers (hFile=0x364) returned 1 [0135.528] CloseHandle (hObject=0x36c) returned 1 [0135.528] CloseHandle (hObject=0x364) returned 1 [0135.529] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-International%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx")) returned 1 [0135.530] SetEvent (hEvent=0x2e4) returned 1 [0135.530] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0135.532] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=69632) returned 1 [0135.532] CloseHandle (hObject=0x364) returned 1 [0135.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx")) returned 0x20 [0135.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx")) returned 0x20 [0135.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0135.532] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0135.532] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0135.532] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0135.533] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0135.533] ReadFile (in: hFile=0x364, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x11000, lpOverlapped=0x0) returned 1 [0135.537] WriteFile (in: hFile=0x36c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x11010, lpOverlapped=0x0) returned 1 [0135.539] WriteFile (in: hFile=0x36c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x132, lpOverlapped=0x0) returned 1 [0135.540] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0135.540] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0135.540] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x11000, lpOverlapped=0x0) returned 1 [0135.540] FlushFileBuffers (hFile=0x364) returned 1 [0135.543] FlushFileBuffers (hFile=0x36c) returned 1 [0135.545] CloseHandle (hObject=0x364) returned 1 [0135.545] CloseHandle (hObject=0x36c) returned 1 [0135.546] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx")) returned 1 [0135.547] SetEvent (hEvent=0x2e4) returned 1 [0135.547] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0135.547] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=69632) returned 1 [0135.547] CloseHandle (hObject=0x36c) returned 1 [0135.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx")) returned 0x20 [0135.548] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx")) returned 0x20 [0135.548] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0135.548] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0135.548] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0135.548] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0135.548] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x364 [0135.548] ReadFile (in: hFile=0x36c, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x11000, lpOverlapped=0x0) returned 1 [0135.553] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x11010, lpOverlapped=0x0) returned 1 [0135.555] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x142, lpOverlapped=0x0) returned 1 [0135.556] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0135.556] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0135.556] WriteFile (in: hFile=0x36c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x11000, lpOverlapped=0x0) returned 1 [0135.556] FlushFileBuffers (hFile=0x36c) returned 1 [0135.920] FlushFileBuffers (hFile=0x364) returned 1 [0135.921] CloseHandle (hObject=0x36c) returned 1 [0135.921] CloseHandle (hObject=0x364) returned 1 [0135.922] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx")) returned 1 [0135.923] SetEvent (hEvent=0x2e4) returned 1 [0135.923] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0135.924] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=69632) returned 1 [0135.924] CloseHandle (hObject=0x364) returned 1 [0135.924] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx")) returned 0x20 [0135.924] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx")) returned 0x20 [0135.924] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0135.924] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0135.924] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0135.924] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0135.924] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0135.925] ReadFile (in: hFile=0x364, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x11000, lpOverlapped=0x0) returned 1 [0135.930] WriteFile (in: hFile=0x36c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x11010, lpOverlapped=0x0) returned 1 [0135.932] WriteFile (in: hFile=0x36c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x152, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x152, lpOverlapped=0x0) returned 1 [0135.932] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0135.932] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0135.932] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x11000, lpOverlapped=0x0) returned 1 [0135.932] FlushFileBuffers (hFile=0x364) returned 1 [0135.935] FlushFileBuffers (hFile=0x36c) returned 1 [0135.937] CloseHandle (hObject=0x364) returned 1 [0135.937] CloseHandle (hObject=0x36c) returned 1 [0135.938] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx")) returned 1 [0135.939] SetEvent (hEvent=0x2e4) returned 1 [0135.939] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0135.939] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=69632) returned 1 [0135.940] CloseHandle (hObject=0x36c) returned 1 [0135.940] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx")) returned 0x20 [0135.940] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx")) returned 0x20 [0135.940] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0135.940] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0135.940] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0135.940] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0135.940] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x364 [0135.940] ReadFile (in: hFile=0x36c, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x11000, lpOverlapped=0x0) returned 1 [0135.944] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x11010, lpOverlapped=0x0) returned 1 [0135.946] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x142, lpOverlapped=0x0) returned 1 [0135.946] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0135.946] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0135.947] WriteFile (in: hFile=0x36c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x11000, lpOverlapped=0x0) returned 1 [0135.947] FlushFileBuffers (hFile=0x36c) returned 1 [0135.950] FlushFileBuffers (hFile=0x364) returned 1 [0135.951] CloseHandle (hObject=0x36c) returned 1 [0135.951] CloseHandle (hObject=0x364) returned 1 [0135.952] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx")) returned 1 [0135.953] SetEvent (hEvent=0x2e4) returned 1 [0135.954] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0135.954] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=69632) returned 1 [0135.954] CloseHandle (hObject=0x364) returned 1 [0135.954] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx")) returned 0x20 [0135.954] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx")) returned 0x20 [0135.954] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0135.954] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0135.954] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0135.954] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0135.954] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0135.955] ReadFile (in: hFile=0x364, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x11000, lpOverlapped=0x0) returned 1 [0135.958] WriteFile (in: hFile=0x36c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x11010, lpOverlapped=0x0) returned 1 [0135.960] WriteFile (in: hFile=0x36c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x142, lpOverlapped=0x0) returned 1 [0135.961] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0135.961] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0135.961] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x11000, lpOverlapped=0x0) returned 1 [0135.961] FlushFileBuffers (hFile=0x364) returned 1 [0135.964] FlushFileBuffers (hFile=0x36c) returned 1 [0135.966] CloseHandle (hObject=0x364) returned 1 [0135.966] CloseHandle (hObject=0x36c) returned 1 [0135.966] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx")) returned 1 [0135.968] SetEvent (hEvent=0x2e4) returned 1 [0135.968] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0135.969] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=69632) returned 1 [0135.969] CloseHandle (hObject=0x36c) returned 1 [0135.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx")) returned 0x20 [0135.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx")) returned 0x20 [0135.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0135.969] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0135.970] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0135.970] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0135.970] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x364 [0135.971] ReadFile (in: hFile=0x36c, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x11000, lpOverlapped=0x0) returned 1 [0135.974] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x11010, lpOverlapped=0x0) returned 1 [0135.976] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x132, lpOverlapped=0x0) returned 1 [0135.977] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0135.977] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0135.977] WriteFile (in: hFile=0x36c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x11000, lpOverlapped=0x0) returned 1 [0135.977] FlushFileBuffers (hFile=0x36c) returned 1 [0136.416] FlushFileBuffers (hFile=0x364) returned 1 [0136.418] CloseHandle (hObject=0x36c) returned 1 [0136.418] CloseHandle (hObject=0x364) returned 1 [0136.422] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx")) returned 1 [0136.423] SetEvent (hEvent=0x2e4) returned 1 [0136.424] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0136.425] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=69632) returned 1 [0136.425] CloseHandle (hObject=0x364) returned 1 [0136.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx")) returned 0x20 [0136.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx")) returned 0x20 [0136.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0136.425] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0136.425] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0136.425] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0136.425] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0136.426] ReadFile (in: hFile=0x364, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x11000, lpOverlapped=0x0) returned 1 [0136.429] WriteFile (in: hFile=0x36c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x11010, lpOverlapped=0x0) returned 1 [0136.431] WriteFile (in: hFile=0x36c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x172, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x172, lpOverlapped=0x0) returned 1 [0136.431] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0136.431] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0136.431] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x11000, lpOverlapped=0x0) returned 1 [0136.432] FlushFileBuffers (hFile=0x364) returned 1 [0136.738] FlushFileBuffers (hFile=0x36c) returned 1 [0136.739] CloseHandle (hObject=0x364) returned 1 [0136.739] CloseHandle (hObject=0x36c) returned 1 [0136.740] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx")) returned 1 [0136.741] SetEvent (hEvent=0x2e4) returned 1 [0136.742] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0136.742] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=69632) returned 1 [0136.742] CloseHandle (hObject=0x36c) returned 1 [0136.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx")) returned 0x20 [0136.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx")) returned 0x20 [0136.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0136.743] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0136.743] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0136.743] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0136.743] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x364 [0136.743] ReadFile (in: hFile=0x36c, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x11000, lpOverlapped=0x0) returned 1 [0136.746] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x11010, lpOverlapped=0x0) returned 1 [0136.748] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x132, lpOverlapped=0x0) returned 1 [0136.748] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0136.748] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0136.748] WriteFile (in: hFile=0x36c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x11000, lpOverlapped=0x0) returned 1 [0136.749] FlushFileBuffers (hFile=0x36c) returned 1 [0136.751] FlushFileBuffers (hFile=0x364) returned 1 [0136.753] CloseHandle (hObject=0x36c) returned 1 [0136.753] CloseHandle (hObject=0x364) returned 1 [0136.754] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx")) returned 1 [0136.755] SetEvent (hEvent=0x2e4) returned 1 [0136.755] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0136.755] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=69632) returned 1 [0136.755] CloseHandle (hObject=0x364) returned 1 [0136.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx")) returned 0x20 [0136.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx")) returned 0x20 [0136.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0136.756] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0136.756] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0136.756] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0136.756] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0136.764] ReadFile (in: hFile=0x364, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x11000, lpOverlapped=0x0) returned 1 [0136.767] WriteFile (in: hFile=0x36c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x11010, lpOverlapped=0x0) returned 1 [0136.769] WriteFile (in: hFile=0x36c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x132, lpOverlapped=0x0) returned 1 [0136.770] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0136.770] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0136.770] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x11000, lpOverlapped=0x0) returned 1 [0136.770] FlushFileBuffers (hFile=0x364) returned 1 [0136.773] FlushFileBuffers (hFile=0x36c) returned 1 [0136.774] CloseHandle (hObject=0x364) returned 1 [0136.774] CloseHandle (hObject=0x36c) returned 1 [0136.775] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx")) returned 1 [0136.776] SetEvent (hEvent=0x2e4) returned 1 [0136.776] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0136.777] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=69632) returned 1 [0136.777] CloseHandle (hObject=0x36c) returned 1 [0136.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx")) returned 0x20 [0136.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx")) returned 0x20 [0136.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0136.777] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0136.777] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0136.777] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0136.777] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x364 [0136.777] ReadFile (in: hFile=0x36c, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x11000, lpOverlapped=0x0) returned 1 [0136.781] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x11010, lpOverlapped=0x0) returned 1 [0136.783] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x132, lpOverlapped=0x0) returned 1 [0136.783] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0136.783] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0136.783] WriteFile (in: hFile=0x36c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x11000, lpOverlapped=0x0) returned 1 [0136.783] FlushFileBuffers (hFile=0x36c) returned 1 [0137.158] FlushFileBuffers (hFile=0x364) returned 1 [0137.162] CloseHandle (hObject=0x36c) returned 1 [0137.162] CloseHandle (hObject=0x364) returned 1 [0137.163] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx")) returned 1 [0137.164] SetEvent (hEvent=0x2e4) returned 1 [0137.164] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0137.167] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=69632) returned 1 [0137.167] CloseHandle (hObject=0x364) returned 1 [0137.167] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx")) returned 0x20 [0137.167] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx")) returned 0x20 [0137.168] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0137.168] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0137.168] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0137.168] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0137.168] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0137.168] ReadFile (in: hFile=0x364, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x11000, lpOverlapped=0x0) returned 1 [0137.172] WriteFile (in: hFile=0x36c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x11010, lpOverlapped=0x0) returned 1 [0137.174] WriteFile (in: hFile=0x36c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x132, lpOverlapped=0x0) returned 1 [0137.174] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0137.174] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0137.174] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x11000, lpOverlapped=0x0) returned 1 [0137.174] FlushFileBuffers (hFile=0x364) returned 1 [0137.178] FlushFileBuffers (hFile=0x36c) returned 1 [0137.181] CloseHandle (hObject=0x364) returned 1 [0137.182] CloseHandle (hObject=0x36c) returned 1 [0137.182] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx")) returned 1 [0137.183] SetEvent (hEvent=0x2e4) returned 1 [0137.183] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0137.183] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=69632) returned 1 [0137.183] CloseHandle (hObject=0x36c) returned 1 [0137.183] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx")) returned 0x20 [0137.184] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx")) returned 0x20 [0137.184] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0137.184] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0137.184] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0137.184] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0137.184] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x364 [0137.184] ReadFile (in: hFile=0x36c, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x11000, lpOverlapped=0x0) returned 1 [0137.188] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x11010, lpOverlapped=0x0) returned 1 [0137.190] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x122, lpOverlapped=0x0) returned 1 [0137.190] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0137.190] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0137.190] WriteFile (in: hFile=0x36c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x11000, lpOverlapped=0x0) returned 1 [0137.191] FlushFileBuffers (hFile=0x36c) returned 1 [0137.206] FlushFileBuffers (hFile=0x364) returned 1 [0137.209] CloseHandle (hObject=0x36c) returned 1 [0137.209] CloseHandle (hObject=0x364) returned 1 [0137.209] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx")) returned 1 [0137.210] SetEvent (hEvent=0x2e4) returned 1 [0137.211] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0137.211] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=69632) returned 1 [0137.211] CloseHandle (hObject=0x364) returned 1 [0137.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx")) returned 0x20 [0137.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx")) returned 0x20 [0137.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0137.211] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0137.211] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0137.211] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0137.211] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0137.212] ReadFile (in: hFile=0x364, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x11000, lpOverlapped=0x0) returned 1 [0137.217] WriteFile (in: hFile=0x36c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x11010, lpOverlapped=0x0) returned 1 [0137.219] WriteFile (in: hFile=0x36c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x132, lpOverlapped=0x0) returned 1 [0137.219] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0137.219] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0137.219] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x11000, lpOverlapped=0x0) returned 1 [0137.220] FlushFileBuffers (hFile=0x364) returned 1 [0137.226] FlushFileBuffers (hFile=0x36c) returned 1 [0137.229] CloseHandle (hObject=0x364) returned 1 [0137.229] CloseHandle (hObject=0x36c) returned 1 [0137.229] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx")) returned 1 [0137.231] SetEvent (hEvent=0x2e4) returned 1 [0137.231] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0137.231] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=69632) returned 1 [0137.231] CloseHandle (hObject=0x36c) returned 1 [0137.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx")) returned 0x20 [0137.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx")) returned 0x20 [0137.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0137.231] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0137.232] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0137.232] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0137.232] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x368 [0137.235] ReadFile (in: hFile=0x36c, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x11000, lpOverlapped=0x0) returned 1 [0137.238] WriteFile (in: hFile=0x368, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x11010, lpOverlapped=0x0) returned 1 [0137.240] WriteFile (in: hFile=0x368, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x132, lpOverlapped=0x0) returned 1 [0137.240] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0137.240] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0137.240] WriteFile (in: hFile=0x36c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x11000, lpOverlapped=0x0) returned 1 [0137.240] FlushFileBuffers (hFile=0x36c) returned 1 [0137.489] FlushFileBuffers (hFile=0x368) returned 1 [0137.490] CloseHandle (hObject=0x36c) returned 1 [0137.490] CloseHandle (hObject=0x368) returned 1 [0137.491] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx")) returned 1 [0137.492] SetEvent (hEvent=0x2e4) returned 1 [0137.492] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0137.495] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=69632) returned 1 [0137.495] CloseHandle (hObject=0x364) returned 1 [0137.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx")) returned 0x20 [0137.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx")) returned 0x20 [0137.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0137.495] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0137.495] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0137.495] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0137.495] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x368 [0137.495] ReadFile (in: hFile=0x364, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x11000, lpOverlapped=0x0) returned 1 [0137.498] WriteFile (in: hFile=0x368, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x11010, lpOverlapped=0x0) returned 1 [0137.500] WriteFile (in: hFile=0x368, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x132, lpOverlapped=0x0) returned 1 [0137.501] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0137.501] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0137.501] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x11000, lpOverlapped=0x0) returned 1 [0137.501] FlushFileBuffers (hFile=0x364) returned 1 [0137.510] FlushFileBuffers (hFile=0x368) returned 1 [0137.515] CloseHandle (hObject=0x364) returned 1 [0137.515] CloseHandle (hObject=0x368) returned 1 [0137.515] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx")) returned 1 [0137.516] SetEvent (hEvent=0x2e4) returned 1 [0137.516] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0137.516] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=69632) returned 1 [0137.517] CloseHandle (hObject=0x368) returned 1 [0137.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx")) returned 0x20 [0137.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx")) returned 0x20 [0137.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0137.517] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0137.517] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0137.517] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0137.517] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x348 [0137.521] ReadFile (in: hFile=0x368, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x11000, lpOverlapped=0x0) returned 1 [0137.529] WriteFile (in: hFile=0x348, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x11010, lpOverlapped=0x0) returned 1 [0137.531] WriteFile (in: hFile=0x348, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x142, lpOverlapped=0x0) returned 1 [0137.531] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0137.531] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0137.531] WriteFile (in: hFile=0x368, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x11000, lpOverlapped=0x0) returned 1 [0137.532] FlushFileBuffers (hFile=0x368) returned 1 [0137.536] FlushFileBuffers (hFile=0x348) returned 1 [0137.539] CloseHandle (hObject=0x368) returned 1 [0137.539] CloseHandle (hObject=0x348) returned 1 [0137.540] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx")) returned 1 [0137.541] SetEvent (hEvent=0x2e4) returned 1 [0137.541] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0137.541] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=69632) returned 1 [0137.541] CloseHandle (hObject=0x348) returned 1 [0137.541] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx")) returned 0x20 [0137.541] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx")) returned 0x20 [0137.541] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0137.541] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0137.542] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0137.542] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0137.542] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x368 [0137.542] ReadFile (in: hFile=0x348, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x11000, lpOverlapped=0x0) returned 1 [0137.549] WriteFile (in: hFile=0x368, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x11010, lpOverlapped=0x0) returned 1 [0137.551] WriteFile (in: hFile=0x368, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x162, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x162, lpOverlapped=0x0) returned 1 [0137.551] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0137.551] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0137.551] WriteFile (in: hFile=0x348, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x11000, lpOverlapped=0x0) returned 1 [0137.552] FlushFileBuffers (hFile=0x348) returned 1 [0137.563] FlushFileBuffers (hFile=0x368) returned 1 [0137.564] CloseHandle (hObject=0x348) returned 1 [0137.564] CloseHandle (hObject=0x368) returned 1 [0137.565] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx")) returned 1 [0137.566] SetEvent (hEvent=0x2e4) returned 1 [0137.566] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0137.566] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=69632) returned 1 [0137.566] CloseHandle (hObject=0x368) returned 1 [0137.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx")) returned 0x20 [0137.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx")) returned 0x20 [0137.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0137.567] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0137.567] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0137.567] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0137.567] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x348 [0137.567] ReadFile (in: hFile=0x368, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x11000, lpOverlapped=0x0) returned 1 [0137.570] WriteFile (in: hFile=0x348, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x11010, lpOverlapped=0x0) returned 1 [0137.572] WriteFile (in: hFile=0x348, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x172, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x172, lpOverlapped=0x0) returned 1 [0137.572] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0137.572] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0137.572] WriteFile (in: hFile=0x368, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x11000, lpOverlapped=0x0) returned 1 [0137.573] FlushFileBuffers (hFile=0x368) returned 1 [0138.211] FlushFileBuffers (hFile=0x348) returned 1 [0138.217] CloseHandle (hObject=0x368) returned 1 [0138.217] CloseHandle (hObject=0x348) returned 1 [0138.217] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx")) returned 1 [0138.219] SetEvent (hEvent=0x2e4) returned 1 [0138.219] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0138.219] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=69632) returned 1 [0138.219] CloseHandle (hObject=0x348) returned 1 [0138.219] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx")) returned 0x20 [0138.219] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx")) returned 0x20 [0138.219] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0138.219] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0138.219] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0138.220] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0138.220] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x368 [0138.220] ReadFile (in: hFile=0x348, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x11000, lpOverlapped=0x0) returned 1 [0138.224] WriteFile (in: hFile=0x368, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x11010, lpOverlapped=0x0) returned 1 [0138.226] WriteFile (in: hFile=0x368, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x142, lpOverlapped=0x0) returned 1 [0138.226] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0138.226] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0138.226] WriteFile (in: hFile=0x348, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x11000, lpOverlapped=0x0) returned 1 [0138.227] FlushFileBuffers (hFile=0x348) returned 1 [0138.296] FlushFileBuffers (hFile=0x368) returned 1 [0138.300] CloseHandle (hObject=0x348) returned 1 [0138.300] CloseHandle (hObject=0x368) returned 1 [0138.300] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx")) returned 1 [0138.302] SetEvent (hEvent=0x2e4) returned 1 [0138.302] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0138.302] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=69632) returned 1 [0138.302] CloseHandle (hObject=0x368) returned 1 [0138.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx")) returned 0x20 [0138.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx")) returned 0x20 [0138.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0138.303] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0138.303] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0138.303] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0138.303] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x348 [0138.303] ReadFile (in: hFile=0x368, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x11000, lpOverlapped=0x0) returned 1 [0138.307] WriteFile (in: hFile=0x348, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x11010, lpOverlapped=0x0) returned 1 [0138.309] WriteFile (in: hFile=0x348, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x182, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x182, lpOverlapped=0x0) returned 1 [0138.309] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0138.309] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0138.309] WriteFile (in: hFile=0x368, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x11000, lpOverlapped=0x0) returned 1 [0138.310] FlushFileBuffers (hFile=0x368) returned 1 [0138.569] FlushFileBuffers (hFile=0x348) returned 1 [0138.570] CloseHandle (hObject=0x368) returned 1 [0138.571] CloseHandle (hObject=0x348) returned 1 [0138.571] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx")) returned 1 [0138.573] SetEvent (hEvent=0x2e4) returned 1 [0138.573] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0138.573] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=69632) returned 1 [0138.573] CloseHandle (hObject=0x348) returned 1 [0138.573] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx")) returned 0x20 [0138.573] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx")) returned 0x20 [0138.573] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0138.573] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0138.573] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0138.574] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0138.574] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x368 [0138.574] ReadFile (in: hFile=0x348, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x11000, lpOverlapped=0x0) returned 1 [0138.577] WriteFile (in: hFile=0x368, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x11010, lpOverlapped=0x0) returned 1 [0138.579] WriteFile (in: hFile=0x368, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x152, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x152, lpOverlapped=0x0) returned 1 [0138.579] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0138.579] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0138.579] WriteFile (in: hFile=0x348, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x11000, lpOverlapped=0x0) returned 1 [0138.580] FlushFileBuffers (hFile=0x348) returned 1 [0138.724] FlushFileBuffers (hFile=0x368) returned 1 [0138.727] CloseHandle (hObject=0x348) returned 1 [0138.728] CloseHandle (hObject=0x368) returned 1 [0138.728] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx")) returned 1 [0138.729] SetEvent (hEvent=0x2e4) returned 1 [0138.729] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Security.evtx" (normalized: "c:\\logs\\security.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0138.729] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=1118208) returned 1 [0138.730] CloseHandle (hObject=0x368) returned 1 [0138.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Security.evtx" (normalized: "c:\\logs\\security.evtx")) returned 0x20 [0138.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Security.evtx" (normalized: "c:\\logs\\security.evtx")) returned 0x20 [0138.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Security.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\security.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0138.730] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Security.evtx" (normalized: "c:\\logs\\security.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0138.730] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0138.730] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0138.730] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Security.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\security.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x348 [0138.730] ReadFile (in: hFile=0x368, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x110100, lpOverlapped=0x0) returned 1 [0138.767] WriteFile (in: hFile=0x348, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x110100, lpOverlapped=0x0) returned 1 [0138.929] ReadFile (in: hFile=0x368, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0xf00, lpOverlapped=0x0) returned 1 [0138.929] WriteFile (in: hFile=0x348, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf10, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf10, lpOverlapped=0x0) returned 1 [0138.933] WriteFile (in: hFile=0x348, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0138.933] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0138.933] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0138.933] WriteFile (in: hFile=0x368, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x110102, lpOverlapped=0x0) returned 1 [0138.939] WriteFile (in: hFile=0x368, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xefe, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0xefe, lpOverlapped=0x0) returned 1 [0138.939] FlushFileBuffers (hFile=0x368) returned 1 [0138.945] FlushFileBuffers (hFile=0x348) returned 1 [0138.950] CloseHandle (hObject=0x368) returned 1 [0138.950] CloseHandle (hObject=0x348) returned 1 [0138.950] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Security.evtx" (normalized: "c:\\logs\\security.evtx")) returned 1 [0138.960] SetEvent (hEvent=0x2e4) returned 1 [0138.960] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0138.960] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=69632) returned 1 [0138.960] CloseHandle (hObject=0x348) returned 1 [0138.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx")) returned 0x20 [0138.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx")) returned 0x20 [0138.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Setup.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\setup.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0138.961] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0138.962] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0138.962] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0138.962] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Setup.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\setup.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x368 [0138.962] ReadFile (in: hFile=0x348, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x11000, lpOverlapped=0x0) returned 1 [0138.966] WriteFile (in: hFile=0x368, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x11010, lpOverlapped=0x0) returned 1 [0138.967] WriteFile (in: hFile=0x368, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0138.968] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0138.968] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0138.968] WriteFile (in: hFile=0x348, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x11000, lpOverlapped=0x0) returned 1 [0138.968] FlushFileBuffers (hFile=0x348) returned 1 [0138.983] FlushFileBuffers (hFile=0x368) returned 1 [0138.986] CloseHandle (hObject=0x348) returned 1 [0138.986] CloseHandle (hObject=0x368) returned 1 [0138.986] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx")) returned 1 [0138.987] SetEvent (hEvent=0x2e4) returned 1 [0138.987] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0138.989] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=1118208) returned 1 [0138.989] CloseHandle (hObject=0x368) returned 1 [0138.989] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx")) returned 0x20 [0138.989] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx")) returned 0x20 [0138.989] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\System.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\system.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0138.989] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0138.989] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0138.989] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0138.989] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\System.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\system.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x348 [0138.990] ReadFile (in: hFile=0x368, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x110100, lpOverlapped=0x0) returned 1 [0139.017] WriteFile (in: hFile=0x348, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x110100, lpOverlapped=0x0) returned 1 [0139.203] ReadFile (in: hFile=0x368, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0xf00, lpOverlapped=0x0) returned 1 [0139.203] WriteFile (in: hFile=0x348, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf10, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf10, lpOverlapped=0x0) returned 1 [0139.203] WriteFile (in: hFile=0x348, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0139.203] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0139.203] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0139.203] WriteFile (in: hFile=0x368, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x110102, lpOverlapped=0x0) returned 1 [0139.209] WriteFile (in: hFile=0x368, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xefe, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0xefe, lpOverlapped=0x0) returned 1 [0139.209] FlushFileBuffers (hFile=0x368) returned 1 [0139.220] FlushFileBuffers (hFile=0x348) returned 1 [0139.224] CloseHandle (hObject=0x368) returned 1 [0139.224] CloseHandle (hObject=0x348) returned 1 [0139.224] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx")) returned 1 [0139.234] SetEvent (hEvent=0x2e4) returned 1 [0139.234] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Windows PowerShell.evtx" (normalized: "c:\\logs\\windows powershell.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0139.235] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=69632) returned 1 [0139.235] CloseHandle (hObject=0x348) returned 1 [0139.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Windows PowerShell.evtx" (normalized: "c:\\logs\\windows powershell.evtx")) returned 0x20 [0139.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Windows PowerShell.evtx" (normalized: "c:\\logs\\windows powershell.evtx")) returned 0x20 [0139.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Windows PowerShell.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\windows powershell.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.235] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Windows PowerShell.evtx" (normalized: "c:\\logs\\windows powershell.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0139.235] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0139.235] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0139.235] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Windows PowerShell.evtx.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\logs\\windows powershell.evtx.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x368 [0139.235] ReadFile (in: hFile=0x348, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x11000, lpOverlapped=0x0) returned 1 [0139.239] WriteFile (in: hFile=0x368, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x11010, lpOverlapped=0x0) returned 1 [0139.241] WriteFile (in: hFile=0x368, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x102, lpOverlapped=0x0) returned 1 [0139.242] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0139.242] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0139.242] WriteFile (in: hFile=0x348, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x11000, lpOverlapped=0x0) returned 1 [0139.242] FlushFileBuffers (hFile=0x348) returned 1 [0139.246] FlushFileBuffers (hFile=0x368) returned 1 [0139.248] CloseHandle (hObject=0x348) returned 1 [0139.249] CloseHandle (hObject=0x368) returned 1 [0139.249] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Windows PowerShell.evtx" (normalized: "c:\\logs\\windows powershell.evtx")) returned 1 [0139.250] SetEvent (hEvent=0x2e4) returned 1 [0139.250] CreateFileW (lpFileName="\\\\?\\C:\\pagefile.sys" (normalized: "c:\\pagefile.sys"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.251] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0139.253] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=15984) returned 1 [0139.253] CloseHandle (hObject=0x368) returned 1 [0139.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb")) returned 0x20 [0139.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb")) returned 0x20 [0139.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.253] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0139.253] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0139.254] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0139.254] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x380 [0139.717] ReadFile (in: hFile=0x368, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x3e70, lpOverlapped=0x0) returned 1 [0139.719] WriteFile (in: hFile=0x380, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x3e80, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x3e80, lpOverlapped=0x0) returned 1 [0139.720] WriteFile (in: hFile=0x380, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0139.720] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0139.720] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0139.721] WriteFile (in: hFile=0x368, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x3e70, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x3e70, lpOverlapped=0x0) returned 1 [0139.722] FlushFileBuffers (hFile=0x368) returned 1 [0139.726] FlushFileBuffers (hFile=0x380) returned 1 [0139.727] CloseHandle (hObject=0x368) returned 1 [0139.728] CloseHandle (hObject=0x380) returned 1 [0139.728] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb")) returned 1 [0139.729] SetEvent (hEvent=0x2e4) returned 1 [0139.729] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.730] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=10752) returned 1 [0139.730] CloseHandle (hObject=0x380) returned 1 [0139.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui")) returned 0x20 [0139.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui")) returned 0x20 [0139.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.731] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.731] SetEvent (hEvent=0x2e4) returned 1 [0139.731] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.731] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=10752) returned 1 [0139.731] CloseHandle (hObject=0x380) returned 1 [0139.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui")) returned 0x20 [0139.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui")) returned 0x20 [0139.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.731] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.732] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.733] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=27045) returned 1 [0139.733] CloseHandle (hObject=0x380) returned 1 [0139.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml")) returned 0x20 [0139.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml")) returned 0x20 [0139.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.733] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.734] SetEvent (hEvent=0x2e4) returned 1 [0139.734] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.734] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=9728) returned 1 [0139.734] CloseHandle (hObject=0x380) returned 1 [0139.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui")) returned 0x20 [0139.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui")) returned 0x20 [0139.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.734] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.735] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.735] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=10240) returned 1 [0139.735] CloseHandle (hObject=0x380) returned 1 [0139.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui")) returned 0x20 [0139.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui")) returned 0x20 [0139.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.736] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.736] SetEvent (hEvent=0x2e4) returned 1 [0139.736] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.736] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=10752) returned 1 [0139.736] CloseHandle (hObject=0x380) returned 1 [0139.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui")) returned 0x20 [0139.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui")) returned 0x20 [0139.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.737] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.737] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.737] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=10752) returned 1 [0139.737] CloseHandle (hObject=0x380) returned 1 [0139.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\tipresx.dll.mui")) returned 0x20 [0139.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\tipresx.dll.mui")) returned 0x20 [0139.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.737] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.738] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-gb\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.739] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=9728) returned 1 [0139.739] CloseHandle (hObject=0x380) returned 1 [0139.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-gb\\tipresx.dll.mui")) returned 0x20 [0139.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-gb\\tipresx.dll.mui")) returned 0x20 [0139.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-gb\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.739] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-gb\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.739] SetEvent (hEvent=0x2e4) returned 1 [0139.739] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.741] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=111320) returned 1 [0139.741] CloseHandle (hObject=0x380) returned 1 [0139.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi")) returned 0x20 [0139.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi")) returned 0x20 [0139.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.741] SetEvent (hEvent=0x2e4) returned 1 [0139.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.742] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=48936) returned 1 [0139.742] CloseHandle (hObject=0x380) returned 1 [0139.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi")) returned 0x20 [0139.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi")) returned 0x20 [0139.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.742] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.742] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.743] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=46622) returned 1 [0139.743] CloseHandle (hObject=0x380) returned 1 [0139.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi")) returned 0x20 [0139.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi")) returned 0x20 [0139.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.744] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.744] SetEvent (hEvent=0x2e4) returned 1 [0139.744] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.744] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=84190) returned 1 [0139.744] CloseHandle (hObject=0x380) returned 1 [0139.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi")) returned 0x20 [0139.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi")) returned 0x20 [0139.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.744] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.744] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.745] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=180172) returned 1 [0139.745] CloseHandle (hObject=0x380) returned 1 [0139.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi")) returned 0x20 [0139.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi")) returned 0x20 [0139.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.745] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.745] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.745] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=208408) returned 1 [0139.745] CloseHandle (hObject=0x380) returned 1 [0139.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi")) returned 0x20 [0139.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi")) returned 0x20 [0139.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.746] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.746] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\FlickLearningWizard.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\flicklearningwizard.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.748] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=8704) returned 1 [0139.748] CloseHandle (hObject=0x380) returned 1 [0139.748] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\FlickLearningWizard.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\flicklearningwizard.exe.mui")) returned 0x20 [0139.748] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\FlickLearningWizard.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\flicklearningwizard.exe.mui")) returned 0x20 [0139.748] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\FlickLearningWizard.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\flicklearningwizard.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.748] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\FlickLearningWizard.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\flicklearningwizard.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.748] SetEvent (hEvent=0x2e4) returned 1 [0139.748] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InkObj.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.750] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=5120) returned 1 [0139.750] CloseHandle (hObject=0x380) returned 1 [0139.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InkObj.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui")) returned 0x20 [0139.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InkObj.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui")) returned 0x20 [0139.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InkObj.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.750] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InkObj.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.750] SetEvent (hEvent=0x2e4) returned 1 [0139.751] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inputpersonalization.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.751] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=3072) returned 1 [0139.751] CloseHandle (hObject=0x380) returned 1 [0139.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inputpersonalization.exe.mui")) returned 0x20 [0139.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inputpersonalization.exe.mui")) returned 0x20 [0139.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inputpersonalization.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.751] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inputpersonalization.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.751] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.752] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=23040) returned 1 [0139.752] CloseHandle (hObject=0x380) returned 1 [0139.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui")) returned 0x20 [0139.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui")) returned 0x20 [0139.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.753] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.753] SetEvent (hEvent=0x2e4) returned 1 [0139.753] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipsmigrationplugin.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.754] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=2560) returned 1 [0139.754] CloseHandle (hObject=0x380) returned 1 [0139.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipsmigrationplugin.dll.mui")) returned 0x20 [0139.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipsmigrationplugin.dll.mui")) returned 0x20 [0139.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipsmigrationplugin.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.754] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipsmigrationplugin.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.754] SetEvent (hEvent=0x2e4) returned 1 [0139.754] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.755] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=199994) returned 1 [0139.755] CloseHandle (hObject=0x380) returned 1 [0139.755] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi")) returned 0x20 [0139.755] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi")) returned 0x20 [0139.755] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.755] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.755] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.756] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=9216) returned 1 [0139.756] CloseHandle (hObject=0x380) returned 1 [0139.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui")) returned 0x20 [0139.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui")) returned 0x20 [0139.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.756] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.757] SetEvent (hEvent=0x2e4) returned 1 [0139.757] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mip.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0139.765] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=10752) returned 1 [0139.765] CloseHandle (hObject=0x380) returned 1 [0139.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mip.exe.mui")) returned 0x20 [0139.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mip.exe.mui")) returned 0x20 [0139.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mip.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mip.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.765] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mip.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.766] SetEvent (hEvent=0x2e4) returned 1 [0139.766] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0139.811] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=3072) returned 1 [0139.811] CloseHandle (hObject=0x368) returned 1 [0139.811] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui")) returned 0x20 [0139.811] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui")) returned 0x20 [0139.811] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.811] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.811] SetEvent (hEvent=0x2e4) returned 1 [0139.812] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0139.813] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=804) returned 1 [0139.813] CloseHandle (hObject=0x368) returned 1 [0139.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml")) returned 0x20 [0139.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml")) returned 0x20 [0139.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.813] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.813] SetEvent (hEvent=0x2e4) returned 1 [0139.813] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0139.814] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=488) returned 1 [0139.814] CloseHandle (hObject=0x368) returned 1 [0139.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml")) returned 0x20 [0139.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml")) returned 0x20 [0139.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.814] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.814] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0139.814] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=617) returned 1 [0139.814] CloseHandle (hObject=0x368) returned 1 [0139.815] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml")) returned 0x20 [0139.815] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml")) returned 0x20 [0139.815] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.815] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.815] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0139.815] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=16616) returned 1 [0139.815] CloseHandle (hObject=0x368) returned 1 [0139.815] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml")) returned 0x20 [0139.815] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml")) returned 0x20 [0139.815] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.815] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.816] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0139.816] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=15097) returned 1 [0139.816] CloseHandle (hObject=0x368) returned 1 [0139.818] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml")) returned 0x20 [0139.818] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml")) returned 0x20 [0139.818] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.819] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.819] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0139.821] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=9803) returned 1 [0139.821] CloseHandle (hObject=0x368) returned 1 [0139.821] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml")) returned 0x20 [0139.821] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml")) returned 0x20 [0139.821] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.821] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.821] SetEvent (hEvent=0x2e4) returned 1 [0139.821] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0139.821] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=11067) returned 1 [0139.821] CloseHandle (hObject=0x368) returned 1 [0139.822] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml")) returned 0x20 [0139.822] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml")) returned 0x20 [0139.822] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.822] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.822] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0139.823] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=10947) returned 1 [0139.823] CloseHandle (hObject=0x368) returned 1 [0139.823] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml")) returned 0x20 [0139.823] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml")) returned 0x20 [0139.823] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.823] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.823] SetEvent (hEvent=0x2e4) returned 1 [0139.824] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0139.824] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=44506) returned 1 [0139.824] CloseHandle (hObject=0x368) returned 1 [0139.824] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml")) returned 0x20 [0139.824] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml")) returned 0x20 [0139.824] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.824] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.824] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0139.826] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=737) returned 1 [0139.826] CloseHandle (hObject=0x368) returned 1 [0139.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml")) returned 0x20 [0139.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml")) returned 0x20 [0139.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.826] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.826] SetEvent (hEvent=0x2e4) returned 1 [0139.826] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0139.826] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=221) returned 1 [0139.826] CloseHandle (hObject=0x368) returned 1 [0139.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml")) returned 0x20 [0139.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml")) returned 0x20 [0139.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.827] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.827] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0139.828] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=471) returned 1 [0139.828] CloseHandle (hObject=0x368) returned 1 [0139.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml")) returned 0x20 [0139.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml")) returned 0x20 [0139.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.828] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.828] SetEvent (hEvent=0x2e4) returned 1 [0139.828] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0139.829] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=215) returned 1 [0139.829] CloseHandle (hObject=0x368) returned 1 [0139.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml")) returned 0x20 [0139.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml")) returned 0x20 [0139.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.829] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.829] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0139.829] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=1069) returned 1 [0139.829] CloseHandle (hObject=0x368) returned 1 [0139.830] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml")) returned 0x20 [0139.830] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml")) returned 0x20 [0139.830] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.830] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.830] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0139.830] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=213) returned 1 [0139.830] CloseHandle (hObject=0x368) returned 1 [0139.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml")) returned 0x20 [0139.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml")) returned 0x20 [0139.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.831] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.831] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0139.832] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=1853) returned 1 [0139.832] CloseHandle (hObject=0x368) returned 1 [0139.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml")) returned 0x20 [0139.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml")) returned 0x20 [0139.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.833] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.833] SetEvent (hEvent=0x2e4) returned 1 [0139.833] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0139.833] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=219) returned 1 [0139.833] CloseHandle (hObject=0x368) returned 1 [0139.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml")) returned 0x20 [0139.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml")) returned 0x20 [0139.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.833] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.834] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0139.834] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=924) returned 1 [0139.834] CloseHandle (hObject=0x368) returned 1 [0139.834] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml")) returned 0x20 [0139.834] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml")) returned 0x20 [0139.834] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.834] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.834] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0139.834] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=215) returned 1 [0139.834] CloseHandle (hObject=0x368) returned 1 [0139.835] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml")) returned 0x20 [0139.835] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml")) returned 0x20 [0139.835] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.835] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.835] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0139.835] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=694) returned 1 [0139.835] CloseHandle (hObject=0x368) returned 1 [0139.835] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml")) returned 0x20 [0139.835] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml")) returned 0x20 [0139.836] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.836] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.836] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0139.836] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=805) returned 1 [0139.836] CloseHandle (hObject=0x368) returned 1 [0139.837] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml")) returned 0x20 [0139.837] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml")) returned 0x20 [0139.837] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.837] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.837] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0139.839] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=3823) returned 1 [0139.839] CloseHandle (hObject=0x368) returned 1 [0139.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml")) returned 0x20 [0139.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml")) returned 0x20 [0139.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.839] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.839] SetEvent (hEvent=0x2e4) returned 1 [0139.839] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0139.840] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=591) returned 1 [0139.840] CloseHandle (hObject=0x368) returned 1 [0139.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml")) returned 0x20 [0139.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml")) returned 0x20 [0139.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.840] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.840] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0139.840] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=9728) returned 1 [0139.840] CloseHandle (hObject=0x368) returned 1 [0139.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il\\tipresx.dll.mui")) returned 0x20 [0139.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il\\tipresx.dll.mui")) returned 0x20 [0139.841] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.841] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.841] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0139.841] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=10240) returned 1 [0139.841] CloseHandle (hObject=0x368) returned 1 [0139.841] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr\\tipresx.dll.mui")) returned 0x20 [0139.841] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr\\tipresx.dll.mui")) returned 0x20 [0139.841] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.841] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.842] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0139.842] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=10240) returned 1 [0139.842] CloseHandle (hObject=0x368) returned 1 [0139.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu\\tipresx.dll.mui")) returned 0x20 [0139.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu\\tipresx.dll.mui")) returned 0x20 [0139.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.842] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.842] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcommonlm.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0139.844] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=46624) returned 1 [0139.844] CloseHandle (hObject=0x368) returned 1 [0139.844] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcommonlm.dat")) returned 0x20 [0139.844] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcommonlm.dat")) returned 0x20 [0139.844] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcommonlm.dat.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.844] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcommonlm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.844] SetEvent (hEvent=0x2e4) returned 1 [0139.845] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenclm.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0139.845] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=498624) returned 1 [0139.845] CloseHandle (hObject=0x368) returned 1 [0139.845] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenclm.dat")) returned 0x20 [0139.845] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenclm.dat")) returned 0x20 [0139.845] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenclm.dat.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.845] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenclm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.845] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrlatinlm.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0139.846] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=1100592) returned 1 [0139.846] CloseHandle (hObject=0x368) returned 1 [0139.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrlatinlm.dat")) returned 0x20 [0139.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrlatinlm.dat")) returned 0x20 [0139.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrlatinlm.dat.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.846] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrlatinlm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.846] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0139.847] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=2515696) returned 1 [0139.847] CloseHandle (hObject=0x368) returned 1 [0139.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat")) returned 0x20 [0139.848] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0 [0139.848] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat.id[b4197730-2299].[britt.looper@aol.com].phoenix"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat")) returned 0 [0139.848] SetEvent (hEvent=0x2e4) returned 1 [0139.848] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0139.848] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=3380096) returned 1 [0139.848] CloseHandle (hObject=0x368) returned 1 [0139.848] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat")) returned 0x20 [0139.848] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0 [0139.848] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat.id[b4197730-2299].[britt.looper@aol.com].phoenix"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat")) returned 0 [0139.849] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkDiv.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkdiv.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0139.850] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=361472) returned 1 [0139.850] CloseHandle (hObject=0x368) returned 1 [0139.850] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkDiv.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkdiv.dll")) returned 0x20 [0139.850] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkDiv.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkdiv.dll")) returned 0x20 [0139.850] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkDiv.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkdiv.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.850] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkDiv.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkdiv.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.850] SetEvent (hEvent=0x2e4) returned 1 [0139.850] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0139.851] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=2018304) returned 1 [0139.851] CloseHandle (hObject=0x368) returned 1 [0139.851] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll")) returned 0x20 [0139.851] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0 [0139.852] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll")) returned 0 [0139.852] SetEvent (hEvent=0x2e4) returned 1 [0139.852] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InputPersonalization.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inputpersonalization.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0139.853] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=367104) returned 1 [0139.853] CloseHandle (hObject=0x368) returned 1 [0139.853] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InputPersonalization.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inputpersonalization.exe")) returned 0x20 [0139.853] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InputPersonalization.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inputpersonalization.exe")) returned 0x20 [0139.853] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InputPersonalization.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inputpersonalization.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0139.853] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InputPersonalization.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inputpersonalization.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0139.853] SetEvent (hEvent=0x2e4) returned 1 [0139.853] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsar.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.408] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=2418) returned 1 [0140.408] CloseHandle (hObject=0x37c) returned 1 [0140.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsar.xml")) returned 0x20 [0140.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsar.xml")) returned 0x20 [0140.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsar.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.409] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsar.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.409] SetEvent (hEvent=0x2e4) returned 1 [0140.409] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.410] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=10240) returned 1 [0140.410] CloseHandle (hObject=0x37c) returned 1 [0140.410] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt\\tipresx.dll.mui")) returned 0x20 [0140.410] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt\\tipresx.dll.mui")) returned 0x20 [0140.410] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.411] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.411] SetEvent (hEvent=0x2e4) returned 1 [0140.411] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.411] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=10240) returned 1 [0140.411] CloseHandle (hObject=0x37c) returned 1 [0140.411] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv\\tipresx.dll.mui")) returned 0x20 [0140.411] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv\\tipresx.dll.mui")) returned 0x20 [0140.411] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.411] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.412] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.413] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=1700352) returned 1 [0140.413] CloseHandle (hObject=0x37c) returned 1 [0140.413] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll")) returned 0x20 [0140.413] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0 [0140.414] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll")) returned 0 [0140.414] SetEvent (hEvent=0x2e4) returned 1 [0140.414] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Microsoft.Ink.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\microsoft.ink.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.418] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=503808) returned 1 [0140.418] CloseHandle (hObject=0x37c) returned 1 [0140.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Microsoft.Ink.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\microsoft.ink.dll")) returned 0x20 [0140.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Microsoft.Ink.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\microsoft.ink.dll")) returned 0x20 [0140.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Microsoft.Ink.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\microsoft.ink.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.418] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Microsoft.Ink.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\microsoft.ink.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.418] SetEvent (hEvent=0x2e4) returned 1 [0140.418] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mip.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.419] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=1540608) returned 1 [0140.419] CloseHandle (hObject=0x37c) returned 1 [0140.419] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mip.exe")) returned 0x20 [0140.420] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mip.exe")) returned 0x20 [0140.420] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mip.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mip.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.420] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mip.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.420] SetEvent (hEvent=0x2e4) returned 1 [0140.420] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.420] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=6368768) returned 1 [0140.420] CloseHandle (hObject=0x37c) returned 1 [0140.420] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll")) returned 0x20 [0140.420] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0 [0140.420] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll")) returned 0 [0140.421] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwgst.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwgst.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.422] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=51200) returned 1 [0140.422] CloseHandle (hObject=0x37c) returned 1 [0140.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwgst.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwgst.dll")) returned 0x20 [0140.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwgst.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwgst.dll")) returned 0x20 [0140.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwgst.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwgst.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.422] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwgst.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwgst.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.422] SetEvent (hEvent=0x2e4) returned 1 [0140.422] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwLatin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwlatin.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.422] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=1075712) returned 1 [0140.422] CloseHandle (hObject=0x37c) returned 1 [0140.423] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwLatin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwlatin.dll")) returned 0x20 [0140.423] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwLatin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwlatin.dll")) returned 0x20 [0140.423] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwLatin.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwlatin.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.423] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwLatin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwlatin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.423] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.423] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=10240) returned 1 [0140.423] CloseHandle (hObject=0x37c) returned 1 [0140.423] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no\\tipresx.dll.mui")) returned 0x20 [0140.423] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no\\tipresx.dll.mui")) returned 0x20 [0140.423] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.424] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.424] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.425] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=10240) returned 1 [0140.425] CloseHandle (hObject=0x37c) returned 1 [0140.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl\\tipresx.dll.mui")) returned 0x20 [0140.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl\\tipresx.dll.mui")) returned 0x20 [0140.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.425] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.425] SetEvent (hEvent=0x2e4) returned 1 [0140.426] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.426] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=10240) returned 1 [0140.426] CloseHandle (hObject=0x37c) returned 1 [0140.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl\\tipresx.dll.mui")) returned 0x20 [0140.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl\\tipresx.dll.mui")) returned 0x20 [0140.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.426] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.426] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.427] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=10752) returned 1 [0140.427] CloseHandle (hObject=0x37c) returned 1 [0140.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br\\tipresx.dll.mui")) returned 0x20 [0140.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br\\tipresx.dll.mui")) returned 0x20 [0140.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.427] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.427] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.427] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=10752) returned 1 [0140.427] CloseHandle (hObject=0x37c) returned 1 [0140.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt\\tipresx.dll.mui")) returned 0x20 [0140.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt\\tipresx.dll.mui")) returned 0x20 [0140.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.428] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.428] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.428] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=10752) returned 1 [0140.428] CloseHandle (hObject=0x37c) returned 1 [0140.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro\\tipresx.dll.mui")) returned 0x20 [0140.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro\\tipresx.dll.mui")) returned 0x20 [0140.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.428] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.429] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\rtscom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\rtscom.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.442] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=177664) returned 1 [0140.442] CloseHandle (hObject=0x37c) returned 1 [0140.442] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\rtscom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\rtscom.dll")) returned 0x20 [0140.442] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\rtscom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\rtscom.dll")) returned 0x20 [0140.442] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\rtscom.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\rtscom.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.442] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\rtscom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\rtscom.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.442] SetEvent (hEvent=0x2e4) returned 1 [0140.442] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.442] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=10240) returned 1 [0140.443] CloseHandle (hObject=0x37c) returned 1 [0140.443] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru\\tipresx.dll.mui")) returned 0x20 [0140.443] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru\\tipresx.dll.mui")) returned 0x20 [0140.443] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.443] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.443] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ShapeCollector.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\shapecollector.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.444] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=733696) returned 1 [0140.444] CloseHandle (hObject=0x37c) returned 1 [0140.444] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ShapeCollector.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\shapecollector.exe")) returned 0x20 [0140.444] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ShapeCollector.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\shapecollector.exe")) returned 0x20 [0140.444] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ShapeCollector.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\shapecollector.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.444] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ShapeCollector.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\shapecollector.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.445] SetEvent (hEvent=0x2e4) returned 1 [0140.445] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.446] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=10752) returned 1 [0140.446] CloseHandle (hObject=0x37c) returned 1 [0140.446] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk\\tipresx.dll.mui")) returned 0x20 [0140.446] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk\\tipresx.dll.mui")) returned 0x20 [0140.446] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.446] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.446] SetEvent (hEvent=0x2e4) returned 1 [0140.446] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.447] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=10240) returned 1 [0140.447] CloseHandle (hObject=0x37c) returned 1 [0140.447] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\tipresx.dll.mui")) returned 0x20 [0140.447] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\tipresx.dll.mui")) returned 0x20 [0140.447] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.447] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.447] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-rs\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.447] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=9728) returned 1 [0140.447] CloseHandle (hObject=0x37c) returned 1 [0140.448] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-rs\\tipresx.dll.mui")) returned 0x20 [0140.448] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-rs\\tipresx.dll.mui")) returned 0x20 [0140.448] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-rs\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.448] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-rs\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.448] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.448] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=10240) returned 1 [0140.448] CloseHandle (hObject=0x37c) returned 1 [0140.448] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se\\tipresx.dll.mui")) returned 0x20 [0140.448] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se\\tipresx.dll.mui")) returned 0x20 [0140.449] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.449] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.449] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabIpsps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabipsps.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.450] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=41984) returned 1 [0140.450] CloseHandle (hObject=0x37c) returned 1 [0140.450] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabIpsps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabipsps.dll")) returned 0x20 [0140.450] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabIpsps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabipsps.dll")) returned 0x20 [0140.450] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabIpsps.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabipsps.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.450] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabIpsps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabipsps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.451] SetEvent (hEvent=0x2e4) returned 1 [0140.451] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.451] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=4101632) returned 1 [0140.451] CloseHandle (hObject=0x37c) returned 1 [0140.451] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll")) returned 0x20 [0140.451] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0 [0140.451] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll")) returned 0 [0140.452] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabTip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabtip.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.453] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=391040) returned 1 [0140.453] CloseHandle (hObject=0x37c) returned 1 [0140.453] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabTip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabtip.exe")) returned 0x20 [0140.453] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabTip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabtip.exe")) returned 0x20 [0140.453] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabTip.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabtip.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.453] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabTip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabtip.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.453] SetEvent (hEvent=0x2e4) returned 1 [0140.453] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.453] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=9728) returned 1 [0140.453] CloseHandle (hObject=0x37c) returned 1 [0140.454] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th\\tipresx.dll.mui")) returned 0x20 [0140.454] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th\\tipresx.dll.mui")) returned 0x20 [0140.454] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.454] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.454] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TipRes.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipres.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.455] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=1086464) returned 1 [0140.455] CloseHandle (hObject=0x37c) returned 1 [0140.455] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TipRes.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipres.dll")) returned 0x20 [0140.455] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TipRes.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipres.dll")) returned 0x20 [0140.455] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TipRes.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipres.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.455] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TipRes.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipres.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.456] SetEvent (hEvent=0x2e4) returned 1 [0140.456] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipresx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipresx.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.456] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=22016) returned 1 [0140.456] CloseHandle (hObject=0x37c) returned 1 [0140.456] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipresx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipresx.dll")) returned 0x20 [0140.456] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipresx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipresx.dll")) returned 0x20 [0140.456] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipresx.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipresx.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.456] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipresx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipresx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.456] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipskins.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipskins.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.457] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=1053184) returned 1 [0140.457] CloseHandle (hObject=0x37c) returned 1 [0140.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipskins.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipskins.dll")) returned 0x20 [0140.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipskins.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipskins.dll")) returned 0x20 [0140.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipskins.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipskins.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.457] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipskins.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipskins.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.457] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tiptsf.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tiptsf.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.457] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=647584) returned 1 [0140.458] CloseHandle (hObject=0x37c) returned 1 [0140.458] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tiptsf.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tiptsf.dll")) returned 0x20 [0140.458] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tiptsf.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tiptsf.dll")) returned 0x20 [0140.458] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tiptsf.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tiptsf.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.458] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tiptsf.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tiptsf.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.458] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tpcps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tpcps.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.459] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=96768) returned 1 [0140.459] CloseHandle (hObject=0x37c) returned 1 [0140.459] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tpcps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tpcps.dll")) returned 0x20 [0140.459] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tpcps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tpcps.dll")) returned 0x20 [0140.459] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tpcps.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tpcps.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.460] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tpcps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tpcps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.460] SetEvent (hEvent=0x2e4) returned 1 [0140.460] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.460] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=10240) returned 1 [0140.460] CloseHandle (hObject=0x37c) returned 1 [0140.460] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr\\tipresx.dll.mui")) returned 0x20 [0140.460] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr\\tipresx.dll.mui")) returned 0x20 [0140.460] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.460] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.461] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.461] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=10240) returned 1 [0140.461] CloseHandle (hObject=0x37c) returned 1 [0140.461] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua\\tipresx.dll.mui")) returned 0x20 [0140.461] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua\\tipresx.dll.mui")) returned 0x20 [0140.461] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.462] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.462] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0140.462] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=7168) returned 1 [0140.462] CloseHandle (hObject=0x37c) returned 1 [0140.462] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn\\tipresx.dll.mui")) returned 0x20 [0140.462] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn\\tipresx.dll.mui")) returned 0x20 [0140.462] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.462] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.720] SetEvent (hEvent=0x2e4) returned 1 [0140.720] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.721] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=230) returned 1 [0140.721] CloseHandle (hObject=0x378) returned 1 [0140.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm")) returned 0x20 [0140.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm")) returned 0x20 [0140.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.721] SetEvent (hEvent=0x2e4) returned 1 [0140.722] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.722] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=7505) returned 1 [0140.722] CloseHandle (hObject=0x378) returned 1 [0140.723] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg")) returned 0x20 [0140.723] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg")) returned 0x20 [0140.723] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.723] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.723] SetEvent (hEvent=0x2e4) returned 1 [0140.723] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.724] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=990032) returned 1 [0140.724] CloseHandle (hObject=0x378) returned 1 [0140.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll")) returned 0x20 [0140.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll")) returned 0x20 [0140.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.724] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.724] SetEvent (hEvent=0x2e4) returned 1 [0140.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.725] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=855376) returned 1 [0140.725] CloseHandle (hObject=0x378) returned 1 [0140.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll")) returned 0x20 [0140.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll")) returned 0x20 [0140.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.726] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.726] SetEvent (hEvent=0x2e4) returned 1 [0140.726] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\vgx.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.729] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=987136) returned 1 [0140.729] CloseHandle (hObject=0x378) returned 1 [0140.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\vgx.dll")) returned 0x20 [0140.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\vgx.dll")) returned 0x20 [0140.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\vgx.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.729] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\vgx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.729] SetEvent (hEvent=0x2e4) returned 1 [0140.730] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.732] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=12448) returned 1 [0140.732] CloseHandle (hObject=0x378) returned 1 [0140.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll")) returned 0x20 [0140.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll")) returned 0x20 [0140.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.733] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.733] SetEvent (hEvent=0x2e4) returned 1 [0140.733] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.734] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=20608) returned 1 [0140.734] CloseHandle (hObject=0x378) returned 1 [0140.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll")) returned 0x20 [0140.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll")) returned 0x20 [0140.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.734] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.735] SetEvent (hEvent=0x2e4) returned 1 [0140.735] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.736] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=100488) returned 1 [0140.736] CloseHandle (hObject=0x378) returned 1 [0140.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe")) returned 0x20 [0140.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe")) returned 0x20 [0140.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.736] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.736] SetEvent (hEvent=0x2e4) returned 1 [0140.736] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.737] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=367216) returned 1 [0140.737] CloseHandle (hObject=0x378) returned 1 [0140.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll")) returned 0x20 [0140.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll")) returned 0x20 [0140.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.737] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.737] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.737] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=48872) returned 1 [0140.737] CloseHandle (hObject=0x378) returned 1 [0140.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll")) returned 0x20 [0140.738] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll")) returned 0x20 [0140.738] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.738] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.738] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.739] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=168064) returned 1 [0140.739] CloseHandle (hObject=0x378) returned 1 [0140.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll")) returned 0x20 [0140.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll")) returned 0x20 [0140.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.741] SetEvent (hEvent=0x2e4) returned 1 [0140.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.742] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=17048) returned 1 [0140.742] CloseHandle (hObject=0x378) returned 1 [0140.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb")) returned 0x20 [0140.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb")) returned 0x20 [0140.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.744] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.744] SetEvent (hEvent=0x2e4) returned 1 [0140.744] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.744] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=22680) returned 1 [0140.744] CloseHandle (hObject=0x378) returned 1 [0140.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb")) returned 0x20 [0140.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb")) returned 0x20 [0140.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.745] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.745] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.746] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=2702) returned 1 [0140.746] CloseHandle (hObject=0x378) returned 1 [0140.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp")) returned 0x20 [0140.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp")) returned 0x20 [0140.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Services\\verisign.bmp.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\services\\verisign.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.746] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.746] SetEvent (hEvent=0x2e4) returned 1 [0140.746] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adojavas.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.831] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=14856) returned 1 [0140.831] CloseHandle (hObject=0x378) returned 1 [0140.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adojavas.inc")) returned 0x20 [0140.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adojavas.inc")) returned 0x20 [0140.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ado\\adojavas.inc.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.832] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adojavas.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.832] SetEvent (hEvent=0x2e4) returned 1 [0140.832] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadds.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadds.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.832] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=279552) returned 1 [0140.832] CloseHandle (hObject=0x378) returned 1 [0140.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadds.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadds.dll")) returned 0x20 [0140.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadds.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadds.dll")) returned 0x20 [0140.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadds.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\msadc\\msadds.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.833] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadds.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadds.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.833] SetEvent (hEvent=0x2e4) returned 1 [0140.833] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msaddsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msaddsr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.834] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=2560) returned 1 [0140.834] CloseHandle (hObject=0x378) returned 1 [0140.834] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msaddsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msaddsr.dll")) returned 0x20 [0140.834] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msaddsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msaddsr.dll")) returned 0x20 [0140.834] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msaddsr.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\msadc\\msaddsr.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.834] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msaddsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msaddsr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.834] SetEvent (hEvent=0x2e4) returned 1 [0140.835] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprsr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.835] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=2560) returned 1 [0140.835] CloseHandle (hObject=0x378) returned 1 [0140.835] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprsr.dll")) returned 0x20 [0140.835] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprsr.dll")) returned 0x20 [0140.835] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprsr.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprsr.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.835] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprsr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.836] SetEvent (hEvent=0x2e4) returned 1 [0140.836] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprst.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprst.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.838] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=356352) returned 1 [0140.838] CloseHandle (hObject=0x378) returned 1 [0140.838] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprst.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprst.dll")) returned 0x20 [0140.838] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprst.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprst.dll")) returned 0x20 [0140.838] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprst.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprst.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.838] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprst.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprst.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.838] SetEvent (hEvent=0x2e4) returned 1 [0140.839] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdarem.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.839] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=221696) returned 1 [0140.840] CloseHandle (hObject=0x378) returned 1 [0140.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdarem.dll")) returned 0x20 [0140.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdarem.dll")) returned 0x20 [0140.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\msadc\\msdarem.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.840] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdarem.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.840] SetEvent (hEvent=0x2e4) returned 1 [0140.840] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaremr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaremr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.840] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=2560) returned 1 [0140.840] CloseHandle (hObject=0x378) returned 1 [0140.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaremr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaremr.dll")) returned 0x20 [0140.841] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaremr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaremr.dll")) returned 0x20 [0140.841] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaremr.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaremr.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.841] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaremr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaremr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.841] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdfmap.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdfmap.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.842] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=31744) returned 1 [0140.842] CloseHandle (hObject=0x378) returned 1 [0140.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdfmap.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdfmap.dll")) returned 0x20 [0140.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdfmap.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdfmap.dll")) returned 0x20 [0140.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdfmap.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\msadc\\msdfmap.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.842] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdfmap.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdfmap.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.842] SetEvent (hEvent=0x2e4) returned 1 [0140.843] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\msdasqlr.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\msdasqlr.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.844] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=6144) returned 1 [0140.844] CloseHandle (hObject=0x378) returned 1 [0140.844] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\msdasqlr.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\msdasqlr.dll.mui")) returned 0x20 [0140.844] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\msdasqlr.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\msdasqlr.dll.mui")) returned 0x20 [0140.844] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\msdasqlr.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\msdasqlr.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.844] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\msdasqlr.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\msdasqlr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.845] SetEvent (hEvent=0x2e4) returned 1 [0140.845] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\oledb32r.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\oledb32r.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.845] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=48128) returned 1 [0140.846] CloseHandle (hObject=0x378) returned 1 [0140.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\oledb32r.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\oledb32r.dll.mui")) returned 0x20 [0140.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\oledb32r.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\oledb32r.dll.mui")) returned 0x20 [0140.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\oledb32r.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\oledb32r.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.846] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\oledb32r.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\oledb32r.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.846] SetEvent (hEvent=0x2e4) returned 1 [0140.846] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqloledb.rll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.847] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=44032) returned 1 [0140.847] CloseHandle (hObject=0x378) returned 1 [0140.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqloledb.rll.mui")) returned 0x20 [0140.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqloledb.rll.mui")) returned 0x20 [0140.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqloledb.rll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.848] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqloledb.rll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.848] SetEvent (hEvent=0x2e4) returned 1 [0140.848] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqlxmlx.rll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.849] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=18432) returned 1 [0140.849] CloseHandle (hObject=0x378) returned 1 [0140.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqlxmlx.rll.mui")) returned 0x20 [0140.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqlxmlx.rll.mui")) returned 0x20 [0140.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqlxmlx.rll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.849] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqlxmlx.rll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.849] SetEvent (hEvent=0x2e4) returned 1 [0140.849] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaosp.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaosp.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.849] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=99840) returned 1 [0140.850] CloseHandle (hObject=0x378) returned 1 [0140.850] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaosp.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaosp.dll")) returned 0x20 [0140.850] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaosp.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaosp.dll")) returned 0x20 [0140.850] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaosp.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaosp.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.850] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaosp.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaosp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.850] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaps.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.850] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=376320) returned 1 [0140.850] CloseHandle (hObject=0x378) returned 1 [0140.850] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaps.dll")) returned 0x20 [0140.850] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaps.dll")) returned 0x20 [0140.851] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaps.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaps.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.851] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.851] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasql.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasql.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.852] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=698368) returned 1 [0140.852] CloseHandle (hObject=0x378) returned 1 [0140.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasql.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasql.dll")) returned 0x20 [0140.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasql.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasql.dll")) returned 0x20 [0140.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasql.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasql.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.852] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasql.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasql.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.853] SetEvent (hEvent=0x2e4) returned 1 [0140.853] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasqlr.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasqlr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.853] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=54784) returned 1 [0140.853] CloseHandle (hObject=0x378) returned 1 [0140.853] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasqlr.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasqlr.dll")) returned 0x20 [0140.853] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasqlr.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasqlr.dll")) returned 0x20 [0140.853] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasqlr.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasqlr.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.853] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasqlr.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasqlr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.854] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdatl3.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdatl3.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.854] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=117248) returned 1 [0140.854] CloseHandle (hObject=0x378) returned 1 [0140.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdatl3.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdatl3.dll")) returned 0x20 [0140.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdatl3.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdatl3.dll")) returned 0x20 [0140.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdatl3.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ole db\\msdatl3.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.854] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdatl3.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdatl3.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.854] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msxactps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msxactps.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.855] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=16384) returned 1 [0140.855] CloseHandle (hObject=0x378) returned 1 [0140.860] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msxactps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msxactps.dll")) returned 0x20 [0140.860] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msxactps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msxactps.dll")) returned 0x20 [0140.860] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msxactps.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ole db\\msxactps.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.860] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msxactps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msxactps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.860] SetEvent (hEvent=0x2e4) returned 1 [0140.860] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.861] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=942080) returned 1 [0140.861] CloseHandle (hObject=0x378) returned 1 [0140.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32.dll")) returned 0x20 [0140.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32.dll")) returned 0x20 [0140.862] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.862] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.862] SetEvent (hEvent=0x2e4) returned 1 [0140.862] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32r.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32r.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.862] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=77824) returned 1 [0140.862] CloseHandle (hObject=0x378) returned 1 [0140.862] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32r.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32r.dll")) returned 0x20 [0140.862] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32r.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32r.dll")) returned 0x20 [0140.862] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32r.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32r.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.862] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32r.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32r.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.863] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbjvs.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.863] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=9804) returned 1 [0140.863] CloseHandle (hObject=0x378) returned 1 [0140.863] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbjvs.inc")) returned 0x20 [0140.863] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbjvs.inc")) returned 0x20 [0140.863] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbjvs.inc.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.863] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbjvs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.863] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbvbs.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.864] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=9975) returned 1 [0140.865] CloseHandle (hObject=0x378) returned 1 [0140.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbvbs.inc")) returned 0x20 [0140.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbvbs.inc")) returned 0x20 [0140.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbvbs.inc.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.865] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbvbs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.865] SetEvent (hEvent=0x2e4) returned 1 [0140.865] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.866] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=868352) returned 1 [0140.866] CloseHandle (hObject=0x378) returned 1 [0140.866] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.dll")) returned 0x20 [0140.866] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.dll")) returned 0x20 [0140.866] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.866] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.866] SetEvent (hEvent=0x2e4) returned 1 [0140.867] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.rll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.867] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=4608) returned 1 [0140.867] CloseHandle (hObject=0x378) returned 1 [0140.867] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.rll")) returned 0x20 [0140.867] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.rll")) returned 0x20 [0140.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.rll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.rll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.868] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.868] SetEvent (hEvent=0x2e4) returned 1 [0140.868] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.869] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=326144) returned 1 [0140.869] CloseHandle (hObject=0x378) returned 1 [0140.869] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.dll")) returned 0x20 [0140.869] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.dll")) returned 0x20 [0140.869] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.869] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.869] SetEvent (hEvent=0x2e4) returned 1 [0140.870] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.rll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.870] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=2560) returned 1 [0140.870] CloseHandle (hObject=0x378) returned 1 [0140.870] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.rll")) returned 0x20 [0140.870] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.rll")) returned 0x20 [0140.870] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.rll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.rll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.871] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.871] SetEvent (hEvent=0x2e4) returned 1 [0140.871] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32.dll" (normalized: "c:\\program files\\common files\\system\\wab32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.871] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=854528) returned 1 [0140.872] CloseHandle (hObject=0x378) returned 1 [0140.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32.dll" (normalized: "c:\\program files\\common files\\system\\wab32.dll")) returned 0x20 [0140.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32.dll" (normalized: "c:\\program files\\common files\\system\\wab32.dll")) returned 0x20 [0140.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\wab32.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.872] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32.dll" (normalized: "c:\\program files\\common files\\system\\wab32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.872] SetEvent (hEvent=0x2e4) returned 1 [0140.872] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32res.dll" (normalized: "c:\\program files\\common files\\system\\wab32res.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.873] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=964096) returned 1 [0140.873] CloseHandle (hObject=0x378) returned 1 [0140.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32res.dll" (normalized: "c:\\program files\\common files\\system\\wab32res.dll")) returned 0x20 [0140.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32res.dll" (normalized: "c:\\program files\\common files\\system\\wab32res.dll")) returned 0x20 [0140.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32res.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\wab32res.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.873] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32res.dll" (normalized: "c:\\program files\\common files\\system\\wab32res.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0140.873] SetEvent (hEvent=0x2e4) returned 1 [0140.873] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.874] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=174) returned 1 [0140.874] CloseHandle (hObject=0x378) returned 1 [0140.874] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini")) returned 0x26 [0140.874] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini")) returned 0x26 [0140.874] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\desktop.ini.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\desktop.ini.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0140.874] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0140.874] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0140.874] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0140.875] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\desktop.ini.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\desktop.ini.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x26, hTemplateFile=0x0) returned 0x36c [0140.875] ReadFile (in: hFile=0x378, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0xae, lpOverlapped=0x0) returned 1 [0140.876] WriteFile (in: hFile=0x36c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xb0, lpOverlapped=0x0) returned 1 [0140.877] WriteFile (in: hFile=0x36c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0140.877] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0140.877] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0140.877] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xae, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0xae, lpOverlapped=0x0) returned 1 [0141.247] FlushFileBuffers (hFile=0x378) returned 1 [0141.250] FlushFileBuffers (hFile=0x36c) returned 1 [0141.252] CloseHandle (hObject=0x378) returned 1 [0141.252] CloseHandle (hObject=0x36c) returned 1 [0141.252] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini")) returned 1 [0141.254] SetEvent (hEvent=0x2e4) returned 1 [0141.254] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0141.255] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=265792) returned 1 [0141.255] CloseHandle (hObject=0x36c) returned 1 [0141.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll")) returned 0x20 [0141.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll")) returned 0x20 [0141.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.255] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.256] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glib-lite.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0141.256] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=455744) returned 1 [0141.256] CloseHandle (hObject=0x36c) returned 1 [0141.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glib-lite.dll")) returned 0x20 [0141.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glib-lite.dll")) returned 0x20 [0141.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glib-lite.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.256] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glib-lite.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.257] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\gstreamer-lite.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0141.258] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=619584) returned 1 [0141.258] CloseHandle (hObject=0x36c) returned 1 [0141.258] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\gstreamer-lite.dll")) returned 0x20 [0141.258] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\gstreamer-lite.dll")) returned 0x20 [0141.258] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\gstreamer-lite.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.258] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\gstreamer-lite.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.258] SetEvent (hEvent=0x2e4) returned 1 [0141.259] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\hprof.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\hprof.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0141.259] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=158272) returned 1 [0141.259] CloseHandle (hObject=0x36c) returned 1 [0141.259] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\hprof.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\hprof.dll")) returned 0x20 [0141.259] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\hprof.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\hprof.dll")) returned 0x20 [0141.259] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\hprof.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\hprof.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.260] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\hprof.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\hprof.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.260] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\instrument.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0141.260] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=123456) returned 1 [0141.260] CloseHandle (hObject=0x36c) returned 1 [0141.260] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\instrument.dll")) returned 0x20 [0141.261] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\instrument.dll")) returned 0x20 [0141.261] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\instrument.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.261] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\instrument.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.262] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pcsc.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0141.263] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=19008) returned 1 [0141.263] CloseHandle (hObject=0x36c) returned 1 [0141.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pcsc.dll")) returned 0x20 [0141.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pcsc.dll")) returned 0x20 [0141.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pcsc.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.263] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pcsc.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.263] SetEvent (hEvent=0x2e4) returned 1 [0141.263] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pkcs11.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pkcs11.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0141.264] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=63552) returned 1 [0141.264] CloseHandle (hObject=0x36c) returned 1 [0141.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pkcs11.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pkcs11.dll")) returned 0x20 [0141.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pkcs11.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pkcs11.dll")) returned 0x20 [0141.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pkcs11.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pkcs11.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.264] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pkcs11.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pkcs11.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.264] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jaas_nt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jaas_nt.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0141.264] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=21056) returned 1 [0141.265] CloseHandle (hObject=0x36c) returned 1 [0141.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jaas_nt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jaas_nt.dll")) returned 0x20 [0141.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jaas_nt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jaas_nt.dll")) returned 0x20 [0141.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jaas_nt.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jaas_nt.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.265] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jaas_nt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jaas_nt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.265] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jabswitch.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0141.265] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=34368) returned 1 [0141.265] CloseHandle (hObject=0x36c) returned 1 [0141.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jabswitch.exe")) returned 0x20 [0141.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jabswitch.exe")) returned 0x20 [0141.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jabswitch.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.266] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jabswitch.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.266] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java-rmi.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0141.267] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=15936) returned 1 [0141.267] CloseHandle (hObject=0x36c) returned 1 [0141.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java-rmi.exe")) returned 0x20 [0141.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java-rmi.exe")) returned 0x20 [0141.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java-rmi.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.267] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java-rmi.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.267] SetEvent (hEvent=0x2e4) returned 1 [0141.267] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0141.268] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=159808) returned 1 [0141.268] CloseHandle (hObject=0x36c) returned 1 [0141.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.dll")) returned 0x20 [0141.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.dll")) returned 0x20 [0141.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.268] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.268] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0141.269] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=206912) returned 1 [0141.269] CloseHandle (hObject=0x36c) returned 1 [0141.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.exe")) returned 0x20 [0141.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.exe")) returned 0x20 [0141.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.269] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.270] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JavaAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaaccessbridge-64.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0141.270] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=142400) returned 1 [0141.271] CloseHandle (hObject=0x36c) returned 1 [0141.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JavaAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaaccessbridge-64.dll")) returned 0x20 [0141.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JavaAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaaccessbridge-64.dll")) returned 0x20 [0141.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JavaAccessBridge-64.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaaccessbridge-64.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.271] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JavaAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaaccessbridge-64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.271] SetEvent (hEvent=0x2e4) returned 1 [0141.271] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.cpl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0141.271] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=187392) returned 1 [0141.271] CloseHandle (hObject=0x36c) returned 1 [0141.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.cpl")) returned 0x20 [0141.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.cpl")) returned 0x20 [0141.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.cpl.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.272] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.cpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.272] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0141.272] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=80448) returned 1 [0141.272] CloseHandle (hObject=0x36c) returned 1 [0141.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.exe")) returned 0x20 [0141.273] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.exe")) returned 0x20 [0141.273] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.273] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.273] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0141.274] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=69184) returned 1 [0141.274] CloseHandle (hObject=0x36c) returned 1 [0141.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font.dll")) returned 0x20 [0141.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font.dll")) returned 0x20 [0141.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.274] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.274] SetEvent (hEvent=0x2e4) returned 1 [0141.274] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0141.275] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=538176) returned 1 [0141.275] CloseHandle (hObject=0x36c) returned 1 [0141.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll")) returned 0x20 [0141.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll")) returned 0x20 [0141.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.275] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.275] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_iio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_iio.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0141.276] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=128064) returned 1 [0141.276] CloseHandle (hObject=0x36c) returned 1 [0141.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_iio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_iio.dll")) returned 0x20 [0141.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_iio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_iio.dll")) returned 0x20 [0141.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_iio.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_iio.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.276] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_iio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_iio.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.276] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaw.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0141.277] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=206912) returned 1 [0141.277] CloseHandle (hObject=0x36c) returned 1 [0141.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaw.exe")) returned 0x20 [0141.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaw.exe")) returned 0x20 [0141.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaw.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.277] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaw.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.277] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaws.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0141.278] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=319552) returned 1 [0141.278] CloseHandle (hObject=0x36c) returned 1 [0141.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaws.exe")) returned 0x20 [0141.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaws.exe")) returned 0x20 [0141.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaws.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.278] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaws.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.279] SetEvent (hEvent=0x2e4) returned 1 [0141.279] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java_crw_demo.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java_crw_demo.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0141.279] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=29760) returned 1 [0141.279] CloseHandle (hObject=0x36c) returned 1 [0141.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java_crw_demo.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java_crw_demo.dll")) returned 0x20 [0141.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java_crw_demo.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java_crw_demo.dll")) returned 0x20 [0141.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java_crw_demo.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java_crw_demo.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.279] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java_crw_demo.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java_crw_demo.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.280] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jawt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawt.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0141.280] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=14400) returned 1 [0141.280] CloseHandle (hObject=0x36c) returned 1 [0141.281] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jawt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawt.dll")) returned 0x20 [0141.281] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jawt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawt.dll")) returned 0x20 [0141.281] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jawt.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawt.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.281] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jawt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.281] SetEvent (hEvent=0x2e4) returned 1 [0141.281] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JAWTAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawtaccessbridge-64.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0141.281] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=15424) returned 1 [0141.281] CloseHandle (hObject=0x36c) returned 1 [0141.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JAWTAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawtaccessbridge-64.dll")) returned 0x20 [0141.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JAWTAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawtaccessbridge-64.dll")) returned 0x20 [0141.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JAWTAccessBridge-64.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawtaccessbridge-64.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.286] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JAWTAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawtaccessbridge-64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.287] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jdwp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jdwp.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0141.288] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=201792) returned 1 [0141.288] CloseHandle (hObject=0x36c) returned 1 [0141.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jdwp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jdwp.dll")) returned 0x20 [0141.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jdwp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jdwp.dll")) returned 0x20 [0141.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jdwp.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jdwp.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jdwp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jdwp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.288] SetEvent (hEvent=0x2e4) returned 1 [0141.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0141.289] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=26688) returned 1 [0141.289] CloseHandle (hObject=0x36c) returned 1 [0141.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfr.dll")) returned 0x20 [0141.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfr.dll")) returned 0x20 [0141.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfr.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfr.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.289] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.289] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxmedia.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxmedia.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0141.290] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=139840) returned 1 [0141.290] CloseHandle (hObject=0x36c) returned 1 [0141.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxmedia.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxmedia.dll")) returned 0x20 [0141.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxmedia.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxmedia.dll")) returned 0x20 [0141.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxmedia.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxmedia.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.290] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxmedia.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxmedia.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.290] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxwebkit.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0141.291] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=41503296) returned 1 [0141.291] CloseHandle (hObject=0x36c) returned 1 [0141.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxwebkit.dll")) returned 0x20 [0141.291] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxwebkit.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxwebkit.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0 [0141.291] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxwebkit.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxwebkit.dll")) returned 0 [0141.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jjs.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0141.512] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=15936) returned 1 [0141.512] CloseHandle (hObject=0x364) returned 1 [0141.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jjs.exe")) returned 0x20 [0141.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jjs.exe")) returned 0x20 [0141.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jjs.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.513] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jjs.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.513] SetEvent (hEvent=0x2e4) returned 1 [0141.513] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_d3d.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_d3d.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0141.514] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=130624) returned 1 [0141.514] CloseHandle (hObject=0x364) returned 1 [0141.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_d3d.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_d3d.dll")) returned 0x20 [0141.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_d3d.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_d3d.dll")) returned 0x20 [0141.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_d3d.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_d3d.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.515] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_d3d.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_d3d.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.515] SetEvent (hEvent=0x2e4) returned 1 [0141.515] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_sw.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_sw.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0141.515] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=97856) returned 1 [0141.515] CloseHandle (hObject=0x364) returned 1 [0141.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_sw.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_sw.dll")) returned 0x20 [0141.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_sw.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_sw.dll")) returned 0x20 [0141.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_sw.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_sw.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.516] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_sw.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_sw.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.516] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\resource.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\resource.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0141.516] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=15424) returned 1 [0141.517] CloseHandle (hObject=0x364) returned 1 [0141.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\resource.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\resource.dll")) returned 0x20 [0141.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\resource.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\resource.dll")) returned 0x20 [0141.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\resource.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\resource.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.517] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\resource.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\resource.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.517] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmid.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0141.518] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=15936) returned 1 [0141.518] CloseHandle (hObject=0x364) returned 1 [0141.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmid.exe")) returned 0x20 [0141.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmid.exe")) returned 0x20 [0141.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmid.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.518] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmid.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.518] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmiregistry.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0141.519] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=16448) returned 1 [0141.519] CloseHandle (hObject=0x364) returned 1 [0141.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmiregistry.exe")) returned 0x20 [0141.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmiregistry.exe")) returned 0x20 [0141.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmiregistry.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0141.520] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmiregistry.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0141.520] SetEvent (hEvent=0x2e4) returned 1 [0141.520] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\classes.jsa"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0141.521] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=18677760) returned 1 [0141.521] CloseHandle (hObject=0x364) returned 1 [0141.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\classes.jsa")) returned 0x21 [0141.521] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa", dwFileAttributes=0x20) returned 1 [0147.502] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\classes.jsa"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\classes.jsa.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 1 [0147.513] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\classes.jsa.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0147.513] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f860 | out: lpNewFilePointer=0x0) returned 1 [0147.513] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f860 | out: lpNewFilePointer=0x0) returned 1 [0147.513] ReadFile (in: hFile=0x364, lpBuffer=0x370e058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x325f86c, lpOverlapped=0x0 | out: lpBuffer=0x370e058*, lpNumberOfBytesRead=0x325f86c*=0x40000, lpOverlapped=0x0) returned 1 [0147.518] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x5f0000, lpNewFilePointer=0x0, dwMoveMethod=0x325f860 | out: lpNewFilePointer=0x0) returned 1 [0147.518] ReadFile (in: hFile=0x364, lpBuffer=0x374e058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x325f86c, lpOverlapped=0x0 | out: lpBuffer=0x374e058*, lpNumberOfBytesRead=0x325f86c*=0x40000, lpOverlapped=0x0) returned 1 [0147.523] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x1190000, lpNewFilePointer=0x0, dwMoveMethod=0x325f860 | out: lpNewFilePointer=0x0) returned 1 [0147.523] ReadFile (in: hFile=0x364, lpBuffer=0x378e058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x325f86c, lpOverlapped=0x0 | out: lpBuffer=0x378e058*, lpNumberOfBytesRead=0x325f86c*=0x40000, lpOverlapped=0x0) returned 1 [0147.908] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d0 | out: lpNewFilePointer=0x0) returned 1 [0147.909] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x325f9c8, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c8*=0xc0102, lpOverlapped=0x0) returned 1 [0147.931] SetEndOfFile (hFile=0x364) returned 1 [0147.932] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x1190000, lpNewFilePointer=0x0, dwMoveMethod=0x325f868 | out: lpNewFilePointer=0x0) returned 1 [0147.932] WriteFile (in: hFile=0x364, lpBuffer=0x37ce13a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x325f874, lpOverlapped=0x0 | out: lpBuffer=0x37ce13a*, lpNumberOfBytesWritten=0x325f874*=0x40000, lpOverlapped=0x0) returned 1 [0147.935] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x5f0000, lpNewFilePointer=0x0, dwMoveMethod=0x325f868 | out: lpNewFilePointer=0x0) returned 1 [0147.935] WriteFile (in: hFile=0x364, lpBuffer=0x37ce13a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x325f874, lpOverlapped=0x0 | out: lpBuffer=0x37ce13a*, lpNumberOfBytesWritten=0x325f874*=0x40000, lpOverlapped=0x0) returned 1 [0147.939] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f868 | out: lpNewFilePointer=0x0) returned 1 [0147.939] WriteFile (in: hFile=0x364, lpBuffer=0x37ce13a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x325f874, lpOverlapped=0x0 | out: lpBuffer=0x37ce13a*, lpNumberOfBytesWritten=0x325f874*=0x40000, lpOverlapped=0x0) returned 1 [0147.941] FlushFileBuffers (hFile=0x364) returned 1 [0148.010] CloseHandle (hObject=0x364) returned 1 [0148.010] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa.id[B4197730-2299].[britt.looper@aol.com].phoenix", dwFileAttributes=0x21) returned 1 [0148.011] SetEvent (hEvent=0x2e4) returned 1 [0148.011] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklisted.certs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0148.013] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=1253) returned 1 [0148.013] CloseHandle (hObject=0x364) returned 1 [0148.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklisted.certs")) returned 0x20 [0148.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklisted.certs")) returned 0x20 [0148.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklisted.certs.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0148.013] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklisted.certs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0148.014] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0148.014] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0148.014] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklisted.certs.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x374 [0148.018] ReadFile (in: hFile=0x364, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x4e5, lpOverlapped=0x0) returned 1 [0148.020] WriteFile (in: hFile=0x374, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x4f0, lpOverlapped=0x0) returned 1 [0148.021] WriteFile (in: hFile=0x374, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x102, lpOverlapped=0x0) returned 1 [0148.022] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0148.022] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0148.022] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x4e5, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x4e5, lpOverlapped=0x0) returned 1 [0148.026] FlushFileBuffers (hFile=0x364) returned 1 [0148.029] FlushFileBuffers (hFile=0x374) returned 1 [0148.031] CloseHandle (hObject=0x364) returned 1 [0148.031] CloseHandle (hObject=0x374) returned 1 [0148.031] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklisted.certs")) returned 1 [0148.033] SetEvent (hEvent=0x2e4) returned 1 [0148.034] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0148.035] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=114923) returned 1 [0148.035] CloseHandle (hObject=0x374) returned 1 [0148.035] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts")) returned 0x20 [0148.035] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts")) returned 0x20 [0148.035] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0148.035] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0148.036] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0148.036] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0148.036] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x364 [0148.037] ReadFile (in: hFile=0x374, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x1c0eb, lpOverlapped=0x0) returned 1 [0148.082] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x1c0f0, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x1c0f0, lpOverlapped=0x0) returned 1 [0148.086] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xe2, lpOverlapped=0x0) returned 1 [0148.087] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0148.087] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0148.087] WriteFile (in: hFile=0x374, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x1c0eb, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x1c0eb, lpOverlapped=0x0) returned 1 [0148.093] FlushFileBuffers (hFile=0x374) returned 1 [0148.097] FlushFileBuffers (hFile=0x364) returned 1 [0148.101] CloseHandle (hObject=0x374) returned 1 [0148.101] CloseHandle (hObject=0x364) returned 1 [0148.101] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts")) returned 1 [0148.104] SetEvent (hEvent=0x2e4) returned 1 [0148.105] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.policy"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0148.106] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=2466) returned 1 [0148.106] CloseHandle (hObject=0x364) returned 1 [0148.107] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.policy")) returned 0x20 [0148.107] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.policy")) returned 0x20 [0148.107] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.policy.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0148.107] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.policy"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0148.108] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0148.108] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0148.108] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.policy.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x374 [0148.109] ReadFile (in: hFile=0x364, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x9a2, lpOverlapped=0x0) returned 1 [0148.112] WriteFile (in: hFile=0x374, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x9b0, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x9b0, lpOverlapped=0x0) returned 1 [0148.114] WriteFile (in: hFile=0x374, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0148.115] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0148.115] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0148.115] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x9a2, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x9a2, lpOverlapped=0x0) returned 1 [0148.119] FlushFileBuffers (hFile=0x364) returned 1 [0148.121] FlushFileBuffers (hFile=0x374) returned 1 [0148.123] CloseHandle (hObject=0x364) returned 1 [0148.123] CloseHandle (hObject=0x374) returned 1 [0148.123] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.policy")) returned 1 [0148.125] SetEvent (hEvent=0x2e4) returned 1 [0148.126] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.security"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0148.126] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=36524) returned 1 [0148.126] CloseHandle (hObject=0x374) returned 1 [0148.127] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.security")) returned 0x20 [0148.127] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.security")) returned 0x20 [0148.127] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.security.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0148.127] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.security"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0148.128] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0148.128] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0148.128] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.security.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x364 [0148.129] ReadFile (in: hFile=0x374, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x8eac, lpOverlapped=0x0) returned 1 [0148.138] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x8eb0, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x8eb0, lpOverlapped=0x0) returned 1 [0148.141] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0148.142] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0148.142] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0148.142] WriteFile (in: hFile=0x374, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x8eac, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x8eac, lpOverlapped=0x0) returned 1 [0148.146] FlushFileBuffers (hFile=0x374) returned 1 [0148.150] FlushFileBuffers (hFile=0x364) returned 1 [0148.151] CloseHandle (hObject=0x374) returned 1 [0148.152] CloseHandle (hObject=0x364) returned 1 [0148.152] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.security")) returned 1 [0148.154] SetEvent (hEvent=0x2e4) returned 1 [0148.154] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\javaws.policy"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0148.156] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=98) returned 1 [0148.156] CloseHandle (hObject=0x364) returned 1 [0148.156] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\javaws.policy")) returned 0x20 [0148.158] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\javaws.policy")) returned 0x20 [0148.158] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\javaws.policy.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0148.158] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\javaws.policy"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0148.158] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0148.159] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0148.159] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\javaws.policy.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x374 [0148.160] ReadFile (in: hFile=0x364, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x62, lpOverlapped=0x0) returned 1 [0148.161] WriteFile (in: hFile=0x374, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x70, lpOverlapped=0x0) returned 1 [0148.162] WriteFile (in: hFile=0x374, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0148.163] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0148.163] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0148.163] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x62, lpOverlapped=0x0) returned 1 [0148.166] FlushFileBuffers (hFile=0x364) returned 1 [0148.172] FlushFileBuffers (hFile=0x374) returned 1 [0148.180] CloseHandle (hObject=0x364) returned 1 [0148.180] CloseHandle (hObject=0x374) returned 1 [0148.180] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\javaws.policy")) returned 1 [0148.182] SetEvent (hEvent=0x2e4) returned 1 [0148.182] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0148.183] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=3527) returned 1 [0148.183] CloseHandle (hObject=0x374) returned 1 [0148.183] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar")) returned 0x20 [0148.183] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar")) returned 0x20 [0148.183] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0148.183] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0148.184] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0148.184] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0148.184] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x364 [0148.184] ReadFile (in: hFile=0x374, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0xdc7, lpOverlapped=0x0) returned 1 [0148.212] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xdd0, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xdd0, lpOverlapped=0x0) returned 1 [0148.213] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x102, lpOverlapped=0x0) returned 1 [0148.213] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0148.213] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0148.213] WriteFile (in: hFile=0x374, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xdc7, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0xdc7, lpOverlapped=0x0) returned 1 [0148.216] FlushFileBuffers (hFile=0x374) returned 1 [0148.218] FlushFileBuffers (hFile=0x364) returned 1 [0148.220] CloseHandle (hObject=0x374) returned 1 [0148.220] CloseHandle (hObject=0x364) returned 1 [0148.220] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar")) returned 1 [0148.221] SetEvent (hEvent=0x2e4) returned 1 [0148.222] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\trusted.libraries" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\trusted.libraries"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0148.230] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=0) returned 1 [0148.230] CloseHandle (hObject=0x364) returned 1 [0148.230] SetEvent (hEvent=0x2e4) returned 1 [0148.230] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0148.232] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=3026) returned 1 [0148.232] CloseHandle (hObject=0x364) returned 1 [0148.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar")) returned 0x20 [0148.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar")) returned 0x20 [0148.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0148.233] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0148.233] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0148.233] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0148.233] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x374 [0148.234] ReadFile (in: hFile=0x364, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0xbd2, lpOverlapped=0x0) returned 1 [0148.303] WriteFile (in: hFile=0x374, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xbe0, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xbe0, lpOverlapped=0x0) returned 1 [0148.304] WriteFile (in: hFile=0x374, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x102, lpOverlapped=0x0) returned 1 [0148.304] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0148.304] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0148.304] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xbd2, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0xbd2, lpOverlapped=0x0) returned 1 [0148.307] FlushFileBuffers (hFile=0x364) returned 1 [0148.309] FlushFileBuffers (hFile=0x374) returned 1 [0148.311] CloseHandle (hObject=0x364) returned 1 [0148.311] CloseHandle (hObject=0x374) returned 1 [0148.311] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar")) returned 1 [0148.313] SetEvent (hEvent=0x2e4) returned 1 [0148.313] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\sound.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0148.314] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=1210) returned 1 [0148.314] CloseHandle (hObject=0x374) returned 1 [0148.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\sound.properties")) returned 0x20 [0148.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\sound.properties")) returned 0x20 [0148.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\sound.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0148.314] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\sound.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0148.314] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0148.315] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0148.315] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\sound.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x364 [0148.315] ReadFile (in: hFile=0x374, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x4ba, lpOverlapped=0x0) returned 1 [0148.354] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x4c0, lpOverlapped=0x0) returned 1 [0148.355] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x102, lpOverlapped=0x0) returned 1 [0148.356] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0148.356] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0148.356] WriteFile (in: hFile=0x374, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x4ba, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x4ba, lpOverlapped=0x0) returned 1 [0148.358] FlushFileBuffers (hFile=0x374) returned 1 [0148.381] FlushFileBuffers (hFile=0x364) returned 1 [0148.397] CloseHandle (hObject=0x374) returned 1 [0148.397] CloseHandle (hObject=0x364) returned 1 [0148.398] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\sound.properties")) returned 1 [0148.399] SetEvent (hEvent=0x2e4) returned 1 [0148.399] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0148.400] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=8400) returned 1 [0148.400] CloseHandle (hObject=0x364) returned 1 [0148.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings")) returned 0x20 [0148.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings")) returned 0x20 [0148.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0148.400] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0148.401] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0148.401] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0148.401] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x374 [0148.402] ReadFile (in: hFile=0x364, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x20d0, lpOverlapped=0x0) returned 1 [0148.405] WriteFile (in: hFile=0x374, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x20e0, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x20e0, lpOverlapped=0x0) returned 1 [0148.406] WriteFile (in: hFile=0x374, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0148.407] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0148.407] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0148.407] WriteFile (in: hFile=0x364, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x20d0, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x20d0, lpOverlapped=0x0) returned 1 [0148.409] FlushFileBuffers (hFile=0x364) returned 1 [0148.420] FlushFileBuffers (hFile=0x374) returned 1 [0148.444] CloseHandle (hObject=0x364) returned 1 [0148.451] CloseHandle (hObject=0x374) returned 1 [0148.451] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings")) returned 1 [0148.544] SetEvent (hEvent=0x2e4) returned 1 [0148.544] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0148.545] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=46) returned 1 [0148.545] CloseHandle (hObject=0x378) returned 1 [0148.546] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt")) returned 0x20 [0148.546] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt")) returned 0x20 [0148.546] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\README.txt.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0148.546] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0148.546] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0148.547] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0148.547] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\README.txt.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0148.547] ReadFile (in: hFile=0x378, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x2e, lpOverlapped=0x0) returned 1 [0148.549] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x30, lpOverlapped=0x0) returned 1 [0148.550] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0148.550] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0148.550] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0148.550] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x2e, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x2e, lpOverlapped=0x0) returned 1 [0148.554] FlushFileBuffers (hFile=0x378) returned 1 [0148.556] FlushFileBuffers (hFile=0x37c) returned 1 [0148.559] CloseHandle (hObject=0x378) returned 1 [0148.559] CloseHandle (hObject=0x37c) returned 1 [0148.559] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt")) returned 1 [0148.560] SetEvent (hEvent=0x2e4) returned 1 [0148.560] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\release" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0148.561] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=528) returned 1 [0148.561] CloseHandle (hObject=0x37c) returned 1 [0148.561] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\release" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release")) returned 0x20 [0148.561] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\release" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release")) returned 0x20 [0148.561] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\release.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0148.562] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\release" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0148.562] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0148.562] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0148.562] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\release.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x378 [0148.563] ReadFile (in: hFile=0x37c, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x210, lpOverlapped=0x0) returned 1 [0148.565] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x220, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x220, lpOverlapped=0x0) returned 1 [0148.566] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xe2, lpOverlapped=0x0) returned 1 [0148.566] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0148.566] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0148.566] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x210, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x210, lpOverlapped=0x0) returned 1 [0148.569] FlushFileBuffers (hFile=0x37c) returned 1 [0148.579] FlushFileBuffers (hFile=0x378) returned 1 [0148.802] CloseHandle (hObject=0x37c) returned 1 [0148.802] CloseHandle (hObject=0x378) returned 1 [0148.802] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\release" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release")) returned 1 [0148.804] SetEvent (hEvent=0x2e4) returned 1 [0148.804] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0148.806] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=174528) returned 1 [0148.806] CloseHandle (hObject=0x378) returned 1 [0148.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm")) returned 0x20 [0148.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm")) returned 0x20 [0148.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0148.806] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0148.806] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0148.806] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0148.806] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0148.809] ReadFile (in: hFile=0x378, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x2a9c0, lpOverlapped=0x0) returned 1 [0148.816] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x2a9d0, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x2a9d0, lpOverlapped=0x0) returned 1 [0148.820] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0148.820] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0148.820] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0148.820] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x2a9c0, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x2a9c0, lpOverlapped=0x0) returned 1 [0148.828] FlushFileBuffers (hFile=0x378) returned 1 [0148.838] FlushFileBuffers (hFile=0x37c) returned 1 [0148.845] CloseHandle (hObject=0x378) returned 1 [0148.845] CloseHandle (hObject=0x37c) returned 1 [0148.845] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm")) returned 1 [0148.848] SetEvent (hEvent=0x2e4) returned 1 [0148.848] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0148.849] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=94467) returned 1 [0148.849] CloseHandle (hObject=0x37c) returned 1 [0148.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs")) returned 0x20 [0148.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs")) returned 0x20 [0148.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0148.849] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0148.849] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE" (normalized: "c:\\program files\\microsoft office\\office16\\ospprearm.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0148.850] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=27200) returned 1 [0148.850] CloseHandle (hObject=0x37c) returned 1 [0148.850] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE" (normalized: "c:\\program files\\microsoft office\\office16\\ospprearm.exe")) returned 0x20 [0148.850] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE" (normalized: "c:\\program files\\microsoft office\\office16\\ospprearm.exe")) returned 0x20 [0148.850] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\office16\\ospprearm.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0148.850] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE" (normalized: "c:\\program files\\microsoft office\\office16\\ospprearm.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0148.850] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0148.851] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=36336) returned 1 [0148.851] CloseHandle (hObject=0x37c) returned 1 [0148.851] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml")) returned 0x20 [0148.851] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml")) returned 0x20 [0148.851] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0148.851] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0148.852] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0148.852] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0148.852] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x378 [0148.855] ReadFile (in: hFile=0x37c, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x8df0, lpOverlapped=0x0) returned 1 [0148.860] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x8e00, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x8e00, lpOverlapped=0x0) returned 1 [0148.862] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0148.862] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0148.862] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0148.862] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x8df0, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x8df0, lpOverlapped=0x0) returned 1 [0148.865] FlushFileBuffers (hFile=0x37c) returned 1 [0148.872] FlushFileBuffers (hFile=0x378) returned 1 [0148.875] CloseHandle (hObject=0x37c) returned 1 [0148.875] CloseHandle (hObject=0x378) returned 1 [0148.875] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml")) returned 1 [0148.877] SetEvent (hEvent=0x2e4) returned 1 [0148.877] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0148.880] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=387356) returned 1 [0148.880] CloseHandle (hObject=0x378) returned 1 [0148.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml")) returned 0x220 [0148.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml")) returned 0x220 [0148.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0148.880] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0148.880] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0148.880] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0148.880] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x37c [0148.883] ReadFile (in: hFile=0x378, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x5e91c, lpOverlapped=0x0) returned 1 [0148.898] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x5e920, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x5e920, lpOverlapped=0x0) returned 1 [0148.906] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x142, lpOverlapped=0x0) returned 1 [0148.906] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0148.906] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0148.906] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x5e91c, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x5e91c, lpOverlapped=0x0) returned 1 [0149.075] FlushFileBuffers (hFile=0x378) returned 1 [0149.079] FlushFileBuffers (hFile=0x37c) returned 1 [0149.081] CloseHandle (hObject=0x378) returned 1 [0149.081] CloseHandle (hObject=0x37c) returned 1 [0149.081] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml")) returned 1 [0149.086] SetEvent (hEvent=0x2e4) returned 1 [0149.086] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0149.086] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=1261) returned 1 [0149.086] CloseHandle (hObject=0x37c) returned 1 [0149.086] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml")) returned 0x220 [0149.086] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml")) returned 0x220 [0149.087] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0149.087] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0149.087] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0149.087] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0149.087] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x378 [0149.088] ReadFile (in: hFile=0x37c, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x4ed, lpOverlapped=0x0) returned 1 [0149.089] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x4f0, lpOverlapped=0x0) returned 1 [0149.091] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x142, lpOverlapped=0x0) returned 1 [0149.091] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0149.091] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0149.091] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x4ed, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x4ed, lpOverlapped=0x0) returned 1 [0149.093] FlushFileBuffers (hFile=0x37c) returned 1 [0149.098] FlushFileBuffers (hFile=0x378) returned 1 [0149.099] CloseHandle (hObject=0x37c) returned 1 [0149.099] CloseHandle (hObject=0x378) returned 1 [0149.099] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml")) returned 1 [0149.101] SetEvent (hEvent=0x2e4) returned 1 [0149.101] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0149.102] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=496513) returned 1 [0149.102] CloseHandle (hObject=0x378) returned 1 [0149.102] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml")) returned 0x220 [0149.102] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml")) returned 0x220 [0149.102] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0149.102] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0149.102] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0149.102] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0149.103] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x37c [0149.103] ReadFile (in: hFile=0x378, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x79381, lpOverlapped=0x0) returned 1 [0149.120] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x79390, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x79390, lpOverlapped=0x0) returned 1 [0149.131] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x142, lpOverlapped=0x0) returned 1 [0149.131] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0149.131] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0149.131] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x79381, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x79381, lpOverlapped=0x0) returned 1 [0149.324] FlushFileBuffers (hFile=0x378) returned 1 [0149.328] FlushFileBuffers (hFile=0x37c) returned 1 [0149.330] CloseHandle (hObject=0x378) returned 1 [0149.330] CloseHandle (hObject=0x37c) returned 1 [0149.331] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml")) returned 1 [0149.336] SetEvent (hEvent=0x2e4) returned 1 [0149.336] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0149.337] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=1261) returned 1 [0149.337] CloseHandle (hObject=0x37c) returned 1 [0149.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml")) returned 0x220 [0149.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml")) returned 0x220 [0149.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0149.338] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0149.338] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0149.338] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0149.338] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x378 [0149.339] ReadFile (in: hFile=0x37c, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x4ed, lpOverlapped=0x0) returned 1 [0149.341] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x4f0, lpOverlapped=0x0) returned 1 [0149.343] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x142, lpOverlapped=0x0) returned 1 [0149.343] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0149.343] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0149.343] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x4ed, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x4ed, lpOverlapped=0x0) returned 1 [0149.346] FlushFileBuffers (hFile=0x37c) returned 1 [0149.360] FlushFileBuffers (hFile=0x378) returned 1 [0149.362] CloseHandle (hObject=0x37c) returned 1 [0149.362] CloseHandle (hObject=0x378) returned 1 [0149.362] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml")) returned 1 [0149.363] SetEvent (hEvent=0x2e4) returned 1 [0149.363] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0149.365] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=253712) returned 1 [0149.365] CloseHandle (hObject=0x378) returned 1 [0149.365] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml")) returned 0x220 [0149.365] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml")) returned 0x220 [0149.365] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0149.365] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0149.366] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0149.366] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0149.366] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x37c [0149.366] ReadFile (in: hFile=0x378, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x3df10, lpOverlapped=0x0) returned 1 [0149.397] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x3df20, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x3df20, lpOverlapped=0x0) returned 1 [0149.403] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x142, lpOverlapped=0x0) returned 1 [0149.403] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0149.403] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0149.404] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x3df10, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x3df10, lpOverlapped=0x0) returned 1 [0149.411] FlushFileBuffers (hFile=0x378) returned 1 [0149.427] FlushFileBuffers (hFile=0x37c) returned 1 [0149.429] CloseHandle (hObject=0x378) returned 1 [0149.429] CloseHandle (hObject=0x37c) returned 1 [0149.429] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml")) returned 1 [0149.433] SetEvent (hEvent=0x2e4) returned 1 [0149.433] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0149.434] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=1261) returned 1 [0149.434] CloseHandle (hObject=0x37c) returned 1 [0149.434] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml")) returned 0x220 [0149.434] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml")) returned 0x220 [0149.434] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0149.435] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0149.435] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0149.435] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0149.435] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x378 [0149.436] ReadFile (in: hFile=0x37c, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x4ed, lpOverlapped=0x0) returned 1 [0149.437] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x4f0, lpOverlapped=0x0) returned 1 [0149.438] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x142, lpOverlapped=0x0) returned 1 [0149.439] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0149.439] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0149.439] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x4ed, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x4ed, lpOverlapped=0x0) returned 1 [0149.441] FlushFileBuffers (hFile=0x37c) returned 1 [0149.443] FlushFileBuffers (hFile=0x378) returned 1 [0149.445] CloseHandle (hObject=0x37c) returned 1 [0149.445] CloseHandle (hObject=0x378) returned 1 [0149.445] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml")) returned 1 [0149.446] SetEvent (hEvent=0x2e4) returned 1 [0149.447] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0149.447] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=1124942) returned 1 [0149.447] CloseHandle (hObject=0x378) returned 1 [0149.447] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml")) returned 0x220 [0149.447] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml")) returned 0x220 [0149.447] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0149.448] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0149.448] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0149.448] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0149.448] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x37c [0149.449] ReadFile (in: hFile=0x378, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x110100, lpOverlapped=0x0) returned 1 [0149.613] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x110100, lpOverlapped=0x0) returned 1 [0149.642] ReadFile (in: hFile=0x378, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x294e, lpOverlapped=0x0) returned 1 [0149.642] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x2950, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x2950, lpOverlapped=0x0) returned 1 [0149.642] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x142, lpOverlapped=0x0) returned 1 [0149.643] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0149.643] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0149.643] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x110102, lpOverlapped=0x0) returned 1 [0149.883] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x294c, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x294c, lpOverlapped=0x0) returned 1 [0149.883] FlushFileBuffers (hFile=0x378) returned 1 [0150.117] FlushFileBuffers (hFile=0x37c) returned 1 [0150.121] CloseHandle (hObject=0x378) returned 1 [0150.121] CloseHandle (hObject=0x37c) returned 1 [0150.122] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml")) returned 1 [0150.133] SetEvent (hEvent=0x2e4) returned 1 [0150.133] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0150.134] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=1261) returned 1 [0150.134] CloseHandle (hObject=0x37c) returned 1 [0150.135] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml")) returned 0x220 [0150.135] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml")) returned 0x220 [0150.135] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0150.135] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0150.135] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0150.135] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0150.136] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x378 [0150.136] ReadFile (in: hFile=0x37c, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x4ed, lpOverlapped=0x0) returned 1 [0150.141] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x4f0, lpOverlapped=0x0) returned 1 [0150.142] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x142, lpOverlapped=0x0) returned 1 [0150.143] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0150.143] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0150.143] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x4ed, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x4ed, lpOverlapped=0x0) returned 1 [0150.161] FlushFileBuffers (hFile=0x37c) returned 1 [0150.170] FlushFileBuffers (hFile=0x378) returned 1 [0150.184] CloseHandle (hObject=0x37c) returned 1 [0150.184] CloseHandle (hObject=0x378) returned 1 [0150.184] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml")) returned 1 [0150.185] SetEvent (hEvent=0x2e4) returned 1 [0150.186] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0150.186] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=1261) returned 1 [0150.186] CloseHandle (hObject=0x378) returned 1 [0150.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml")) returned 0x220 [0150.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml")) returned 0x220 [0150.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0150.187] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0150.187] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0150.187] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0150.187] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x37c [0150.188] ReadFile (in: hFile=0x378, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x4ed, lpOverlapped=0x0) returned 1 [0150.191] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x4f0, lpOverlapped=0x0) returned 1 [0150.192] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x142, lpOverlapped=0x0) returned 1 [0150.192] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0150.193] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0150.193] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x4ed, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x4ed, lpOverlapped=0x0) returned 1 [0150.195] FlushFileBuffers (hFile=0x378) returned 1 [0150.210] FlushFileBuffers (hFile=0x37c) returned 1 [0150.215] CloseHandle (hObject=0x378) returned 1 [0150.215] CloseHandle (hObject=0x37c) returned 1 [0150.215] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml")) returned 1 [0150.216] SetEvent (hEvent=0x2e4) returned 1 [0150.217] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0150.217] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=2147) returned 1 [0150.217] CloseHandle (hObject=0x37c) returned 1 [0150.217] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml")) returned 0x220 [0150.217] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml")) returned 0x220 [0150.217] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0150.218] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0150.218] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0150.218] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0150.218] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x378 [0150.219] ReadFile (in: hFile=0x37c, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x863, lpOverlapped=0x0) returned 1 [0150.222] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x870, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x870, lpOverlapped=0x0) returned 1 [0150.223] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x142, lpOverlapped=0x0) returned 1 [0150.224] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0150.224] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0150.224] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x863, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x863, lpOverlapped=0x0) returned 1 [0150.228] FlushFileBuffers (hFile=0x37c) returned 1 [0150.233] FlushFileBuffers (hFile=0x378) returned 1 [0150.234] CloseHandle (hObject=0x37c) returned 1 [0150.234] CloseHandle (hObject=0x378) returned 1 [0150.234] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml")) returned 1 [0150.236] SetEvent (hEvent=0x2e4) returned 1 [0150.236] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0150.236] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=2147) returned 1 [0150.236] CloseHandle (hObject=0x378) returned 1 [0150.237] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml")) returned 0x220 [0150.237] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml")) returned 0x220 [0150.237] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0150.237] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0150.237] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0150.237] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0150.237] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x37c [0150.238] ReadFile (in: hFile=0x378, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x863, lpOverlapped=0x0) returned 1 [0150.240] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x870, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x870, lpOverlapped=0x0) returned 1 [0150.241] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x142, lpOverlapped=0x0) returned 1 [0150.241] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0150.241] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0150.241] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x863, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x863, lpOverlapped=0x0) returned 1 [0150.245] FlushFileBuffers (hFile=0x378) returned 1 [0150.250] FlushFileBuffers (hFile=0x37c) returned 1 [0150.252] CloseHandle (hObject=0x378) returned 1 [0150.252] CloseHandle (hObject=0x37c) returned 1 [0150.252] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml")) returned 1 [0150.254] SetEvent (hEvent=0x2e4) returned 1 [0150.254] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0150.256] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=215883) returned 1 [0150.256] CloseHandle (hObject=0x37c) returned 1 [0150.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml")) returned 0x220 [0150.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml")) returned 0x220 [0150.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0150.256] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0150.256] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0150.256] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0150.256] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x378 [0150.257] ReadFile (in: hFile=0x37c, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x34b4b, lpOverlapped=0x0) returned 1 [0150.266] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x34b50, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x34b50, lpOverlapped=0x0) returned 1 [0150.272] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x142, lpOverlapped=0x0) returned 1 [0150.272] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0150.272] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0150.272] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x34b4b, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x34b4b, lpOverlapped=0x0) returned 1 [0150.279] FlushFileBuffers (hFile=0x37c) returned 1 [0150.285] FlushFileBuffers (hFile=0x378) returned 1 [0150.300] CloseHandle (hObject=0x37c) returned 1 [0150.301] CloseHandle (hObject=0x378) returned 1 [0150.301] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml")) returned 1 [0150.304] SetEvent (hEvent=0x2e4) returned 1 [0150.304] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0150.305] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=1261) returned 1 [0150.305] CloseHandle (hObject=0x378) returned 1 [0150.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml")) returned 0x220 [0150.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml")) returned 0x220 [0150.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0150.306] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0150.306] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0150.306] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0150.306] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x37c [0150.308] ReadFile (in: hFile=0x378, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x4ed, lpOverlapped=0x0) returned 1 [0150.312] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x4f0, lpOverlapped=0x0) returned 1 [0150.313] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x142, lpOverlapped=0x0) returned 1 [0150.314] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0150.314] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0150.314] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x4ed, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x4ed, lpOverlapped=0x0) returned 1 [0150.317] FlushFileBuffers (hFile=0x378) returned 1 [0150.323] FlushFileBuffers (hFile=0x37c) returned 1 [0150.326] CloseHandle (hObject=0x378) returned 1 [0150.326] CloseHandle (hObject=0x37c) returned 1 [0150.326] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml")) returned 1 [0150.327] SetEvent (hEvent=0x2e4) returned 1 [0150.328] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0150.328] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=343329) returned 1 [0150.328] CloseHandle (hObject=0x37c) returned 1 [0150.328] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml")) returned 0x220 [0150.328] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml")) returned 0x220 [0150.328] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0150.329] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0150.329] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0150.329] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0150.329] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x378 [0150.330] ReadFile (in: hFile=0x37c, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x53d21, lpOverlapped=0x0) returned 1 [0150.343] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x53d30, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x53d30, lpOverlapped=0x0) returned 1 [0150.350] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x142, lpOverlapped=0x0) returned 1 [0150.351] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0150.351] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0150.351] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x53d21, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x53d21, lpOverlapped=0x0) returned 1 [0150.361] FlushFileBuffers (hFile=0x37c) returned 1 [0150.572] FlushFileBuffers (hFile=0x378) returned 1 [0150.574] CloseHandle (hObject=0x37c) returned 1 [0150.574] CloseHandle (hObject=0x378) returned 1 [0150.574] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml")) returned 1 [0150.590] SetEvent (hEvent=0x2e4) returned 1 [0150.590] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0150.591] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=1261) returned 1 [0150.591] CloseHandle (hObject=0x378) returned 1 [0150.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml")) returned 0x220 [0150.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml")) returned 0x220 [0150.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0150.592] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0150.592] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0150.592] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0150.593] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x37c [0150.593] ReadFile (in: hFile=0x378, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x4ed, lpOverlapped=0x0) returned 1 [0150.596] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x4f0, lpOverlapped=0x0) returned 1 [0150.597] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x142, lpOverlapped=0x0) returned 1 [0150.597] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0150.597] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0150.598] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x4ed, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x4ed, lpOverlapped=0x0) returned 1 [0150.604] FlushFileBuffers (hFile=0x378) returned 1 [0150.606] FlushFileBuffers (hFile=0x37c) returned 1 [0150.607] CloseHandle (hObject=0x378) returned 1 [0150.607] CloseHandle (hObject=0x37c) returned 1 [0150.608] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml")) returned 1 [0150.609] SetEvent (hEvent=0x2e4) returned 1 [0150.609] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0150.610] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=65002) returned 1 [0150.610] CloseHandle (hObject=0x37c) returned 1 [0150.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml")) returned 0x220 [0150.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml")) returned 0x220 [0150.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0150.611] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0150.611] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0150.611] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0150.611] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x378 [0150.611] ReadFile (in: hFile=0x37c, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0xfdea, lpOverlapped=0x0) returned 1 [0150.616] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xfdf0, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xfdf0, lpOverlapped=0x0) returned 1 [0150.618] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x142, lpOverlapped=0x0) returned 1 [0150.618] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0150.618] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0150.618] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xfdea, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0xfdea, lpOverlapped=0x0) returned 1 [0150.626] FlushFileBuffers (hFile=0x37c) returned 1 [0150.635] FlushFileBuffers (hFile=0x378) returned 1 [0150.637] CloseHandle (hObject=0x37c) returned 1 [0150.637] CloseHandle (hObject=0x378) returned 1 [0150.637] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml")) returned 1 [0150.639] SetEvent (hEvent=0x2e4) returned 1 [0150.639] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0150.639] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=1261) returned 1 [0150.640] CloseHandle (hObject=0x378) returned 1 [0150.640] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml")) returned 0x220 [0150.640] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml")) returned 0x220 [0150.640] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0150.640] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0150.640] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0150.641] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0150.641] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x37c [0150.641] ReadFile (in: hFile=0x378, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x4ed, lpOverlapped=0x0) returned 1 [0150.643] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x4f0, lpOverlapped=0x0) returned 1 [0150.644] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x142, lpOverlapped=0x0) returned 1 [0150.646] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0150.646] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0150.646] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x4ed, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x4ed, lpOverlapped=0x0) returned 1 [0150.649] FlushFileBuffers (hFile=0x378) returned 1 [0150.651] FlushFileBuffers (hFile=0x37c) returned 1 [0150.652] CloseHandle (hObject=0x378) returned 1 [0150.653] CloseHandle (hObject=0x37c) returned 1 [0150.653] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml")) returned 1 [0150.654] SetEvent (hEvent=0x2e4) returned 1 [0150.655] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0150.656] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=1261) returned 1 [0150.656] CloseHandle (hObject=0x37c) returned 1 [0150.656] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml")) returned 0x220 [0150.656] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml")) returned 0x220 [0150.656] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0150.656] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0150.657] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0150.657] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0150.657] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x378 [0150.658] ReadFile (in: hFile=0x37c, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x4ed, lpOverlapped=0x0) returned 1 [0150.659] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x4f0, lpOverlapped=0x0) returned 1 [0150.664] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x142, lpOverlapped=0x0) returned 1 [0150.664] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0150.664] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0150.664] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x4ed, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x4ed, lpOverlapped=0x0) returned 1 [0150.667] FlushFileBuffers (hFile=0x37c) returned 1 [0150.669] FlushFileBuffers (hFile=0x378) returned 1 [0150.671] CloseHandle (hObject=0x37c) returned 1 [0150.671] CloseHandle (hObject=0x378) returned 1 [0150.671] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml")) returned 1 [0150.672] SetEvent (hEvent=0x2e4) returned 1 [0150.672] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0150.673] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=9216) returned 1 [0150.673] CloseHandle (hObject=0x378) returned 1 [0150.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml")) returned 0x220 [0150.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml")) returned 0x220 [0150.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0150.674] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0150.674] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0150.674] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0150.674] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x37c [0150.675] ReadFile (in: hFile=0x378, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x2400, lpOverlapped=0x0) returned 1 [0150.677] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x2410, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x2410, lpOverlapped=0x0) returned 1 [0150.680] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x142, lpOverlapped=0x0) returned 1 [0150.680] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0150.680] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0150.680] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x2400, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x2400, lpOverlapped=0x0) returned 1 [0150.683] FlushFileBuffers (hFile=0x378) returned 1 [0150.686] FlushFileBuffers (hFile=0x37c) returned 1 [0150.688] CloseHandle (hObject=0x378) returned 1 [0150.688] CloseHandle (hObject=0x37c) returned 1 [0150.688] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml")) returned 1 [0150.689] SetEvent (hEvent=0x2e4) returned 1 [0150.690] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0150.690] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=1261) returned 1 [0150.690] CloseHandle (hObject=0x37c) returned 1 [0150.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml")) returned 0x220 [0150.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml")) returned 0x220 [0150.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0150.694] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0150.695] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0150.695] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0150.695] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x378 [0150.695] ReadFile (in: hFile=0x37c, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x4ed, lpOverlapped=0x0) returned 1 [0150.697] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x4f0, lpOverlapped=0x0) returned 1 [0150.698] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x142, lpOverlapped=0x0) returned 1 [0150.699] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0150.699] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0150.699] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x4ed, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x4ed, lpOverlapped=0x0) returned 1 [0150.701] FlushFileBuffers (hFile=0x37c) returned 1 [0150.703] FlushFileBuffers (hFile=0x378) returned 1 [0150.705] CloseHandle (hObject=0x37c) returned 1 [0150.705] CloseHandle (hObject=0x378) returned 1 [0150.705] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml")) returned 1 [0150.710] SetEvent (hEvent=0x2e4) returned 1 [0150.710] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0150.711] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=399528) returned 1 [0150.711] CloseHandle (hObject=0x378) returned 1 [0150.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml")) returned 0x220 [0150.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml")) returned 0x220 [0150.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0150.712] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0150.712] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0150.712] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0150.712] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x37c [0150.712] ReadFile (in: hFile=0x378, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x618a8, lpOverlapped=0x0) returned 1 [0150.727] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x618b0, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x618b0, lpOverlapped=0x0) returned 1 [0150.736] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x142, lpOverlapped=0x0) returned 1 [0150.736] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0150.736] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0150.736] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x618a8, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x618a8, lpOverlapped=0x0) returned 1 [0151.226] FlushFileBuffers (hFile=0x378) returned 1 [0151.230] FlushFileBuffers (hFile=0x37c) returned 1 [0151.231] CloseHandle (hObject=0x378) returned 1 [0151.232] CloseHandle (hObject=0x37c) returned 1 [0151.232] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml")) returned 1 [0151.236] SetEvent (hEvent=0x2e4) returned 1 [0151.236] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0151.237] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=1261) returned 1 [0151.237] CloseHandle (hObject=0x37c) returned 1 [0151.237] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml")) returned 0x220 [0151.237] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml")) returned 0x220 [0151.237] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.237] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0151.238] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0151.238] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0151.238] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x378 [0151.239] ReadFile (in: hFile=0x37c, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x4ed, lpOverlapped=0x0) returned 1 [0151.241] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x4f0, lpOverlapped=0x0) returned 1 [0151.242] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x142, lpOverlapped=0x0) returned 1 [0151.242] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0151.242] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0151.242] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x4ed, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x4ed, lpOverlapped=0x0) returned 1 [0151.245] FlushFileBuffers (hFile=0x37c) returned 1 [0151.249] FlushFileBuffers (hFile=0x378) returned 1 [0151.250] CloseHandle (hObject=0x37c) returned 1 [0151.250] CloseHandle (hObject=0x378) returned 1 [0151.250] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml")) returned 1 [0151.252] SetEvent (hEvent=0x2e4) returned 1 [0151.252] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0151.253] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=3375) returned 1 [0151.253] CloseHandle (hObject=0x378) returned 1 [0151.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml")) returned 0x220 [0151.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml")) returned 0x220 [0151.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.253] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0151.254] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0151.254] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0151.254] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x37c [0151.254] ReadFile (in: hFile=0x378, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0xd2f, lpOverlapped=0x0) returned 1 [0151.256] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xd30, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xd30, lpOverlapped=0x0) returned 1 [0151.259] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x142, lpOverlapped=0x0) returned 1 [0151.259] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0151.260] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0151.260] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xd2f, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0xd2f, lpOverlapped=0x0) returned 1 [0151.262] FlushFileBuffers (hFile=0x378) returned 1 [0151.267] FlushFileBuffers (hFile=0x37c) returned 1 [0151.269] CloseHandle (hObject=0x378) returned 1 [0151.269] CloseHandle (hObject=0x37c) returned 1 [0151.269] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml")) returned 1 [0151.271] SetEvent (hEvent=0x2e4) returned 1 [0151.271] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0151.271] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=2173046) returned 1 [0151.272] CloseHandle (hObject=0x37c) returned 1 [0151.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml")) returned 0x220 [0151.272] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0 [0151.272] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml")) returned 0 [0151.272] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0151.273] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=9831) returned 1 [0151.273] CloseHandle (hObject=0x37c) returned 1 [0151.273] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml")) returned 0x220 [0151.273] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml")) returned 0x220 [0151.273] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.273] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0151.274] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0151.274] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0151.274] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x378 [0151.274] ReadFile (in: hFile=0x37c, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x2667, lpOverlapped=0x0) returned 1 [0151.276] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x2670, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x2670, lpOverlapped=0x0) returned 1 [0151.278] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x112, lpOverlapped=0x0) returned 1 [0151.278] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0151.278] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0151.278] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x2667, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x2667, lpOverlapped=0x0) returned 1 [0151.281] FlushFileBuffers (hFile=0x37c) returned 1 [0151.306] FlushFileBuffers (hFile=0x378) returned 1 [0151.308] CloseHandle (hObject=0x37c) returned 1 [0151.308] CloseHandle (hObject=0x378) returned 1 [0151.309] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml")) returned 1 [0151.311] SetEvent (hEvent=0x2e4) returned 1 [0151.311] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0151.312] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=373) returned 1 [0151.312] CloseHandle (hObject=0x378) returned 1 [0151.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml")) returned 0x220 [0151.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml")) returned 0x220 [0151.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.313] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0151.313] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0151.313] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0151.313] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x37c [0151.314] ReadFile (in: hFile=0x378, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x175, lpOverlapped=0x0) returned 1 [0151.315] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x180, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x180, lpOverlapped=0x0) returned 1 [0151.317] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x102, lpOverlapped=0x0) returned 1 [0151.318] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0151.318] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0151.318] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x175, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x175, lpOverlapped=0x0) returned 1 [0151.323] FlushFileBuffers (hFile=0x378) returned 1 [0151.329] FlushFileBuffers (hFile=0x37c) returned 1 [0151.330] CloseHandle (hObject=0x378) returned 1 [0151.331] CloseHandle (hObject=0x37c) returned 1 [0151.331] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml")) returned 1 [0151.333] SetEvent (hEvent=0x2e4) returned 1 [0151.333] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l1-2-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0151.339] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=18624) returned 1 [0151.339] CloseHandle (hObject=0x37c) returned 1 [0151.340] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l1-2-0.dll")) returned 0x220 [0151.340] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l1-2-0.dll")) returned 0x220 [0151.340] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l1-2-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.340] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0151.340] SetEvent (hEvent=0x2e4) returned 1 [0151.341] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l2-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0151.342] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=18624) returned 1 [0151.342] CloseHandle (hObject=0x37c) returned 1 [0151.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l2-1-0.dll")) returned 0x220 [0151.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l2-1-0.dll")) returned 0x220 [0151.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l2-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.343] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l2-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0151.343] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0151.344] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=21184) returned 1 [0151.344] CloseHandle (hObject=0x37c) returned 1 [0151.344] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll")) returned 0x220 [0151.344] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll")) returned 0x220 [0151.344] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.344] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0151.345] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0151.347] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=19136) returned 1 [0151.347] CloseHandle (hObject=0x37c) returned 1 [0151.347] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll")) returned 0x220 [0151.347] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll")) returned 0x220 [0151.348] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.348] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0151.348] SetEvent (hEvent=0x2e4) returned 1 [0151.349] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0151.350] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=19136) returned 1 [0151.350] CloseHandle (hObject=0x37c) returned 1 [0151.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll")) returned 0x220 [0151.355] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll")) returned 0x220 [0151.355] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.355] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0151.355] SetEvent (hEvent=0x2e4) returned 1 [0151.356] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0151.359] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=18624) returned 1 [0151.359] CloseHandle (hObject=0x37c) returned 1 [0151.359] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll")) returned 0x220 [0151.359] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll")) returned 0x220 [0151.359] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.360] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0151.360] SetEvent (hEvent=0x2e4) returned 1 [0151.360] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0151.361] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=11616) returned 1 [0151.361] CloseHandle (hObject=0x37c) returned 1 [0151.361] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll")) returned 0x220 [0151.361] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll")) returned 0x220 [0151.361] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.361] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0151.361] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0151.362] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=19648) returned 1 [0151.362] CloseHandle (hObject=0x37c) returned 1 [0151.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll")) returned 0x220 [0151.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll")) returned 0x220 [0151.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.363] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0151.363] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0151.364] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=22720) returned 1 [0151.364] CloseHandle (hObject=0x37c) returned 1 [0151.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll")) returned 0x220 [0151.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll")) returned 0x220 [0151.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.365] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0151.365] SetEvent (hEvent=0x2e4) returned 1 [0151.365] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0151.367] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=19136) returned 1 [0151.367] CloseHandle (hObject=0x37c) returned 1 [0151.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll")) returned 0x220 [0151.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll")) returned 0x220 [0151.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.367] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0151.367] SetEvent (hEvent=0x2e4) returned 1 [0151.368] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0151.369] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=20672) returned 1 [0151.369] CloseHandle (hObject=0x37c) returned 1 [0151.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll")) returned 0x220 [0151.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll")) returned 0x220 [0151.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.370] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0151.370] SetEvent (hEvent=0x2e4) returned 1 [0151.370] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0151.371] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=19648) returned 1 [0151.371] CloseHandle (hObject=0x37c) returned 1 [0151.371] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll")) returned 0x220 [0151.371] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll")) returned 0x220 [0151.371] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.372] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0151.372] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0151.597] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=19136) returned 1 [0151.597] CloseHandle (hObject=0x378) returned 1 [0151.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll")) returned 0x220 [0151.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll")) returned 0x220 [0151.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.598] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0151.598] SetEvent (hEvent=0x2e4) returned 1 [0151.599] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0151.600] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=27840) returned 1 [0151.600] CloseHandle (hObject=0x378) returned 1 [0151.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll")) returned 0x220 [0151.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll")) returned 0x220 [0151.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.600] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0151.600] SetEvent (hEvent=0x2e4) returned 1 [0151.601] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0151.601] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=26816) returned 1 [0151.601] CloseHandle (hObject=0x378) returned 1 [0151.601] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll")) returned 0x220 [0151.601] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll")) returned 0x220 [0151.601] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.601] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0151.602] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0151.602] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=70848) returned 1 [0151.602] CloseHandle (hObject=0x378) returned 1 [0151.602] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll")) returned 0x220 [0151.602] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll")) returned 0x220 [0151.602] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.602] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0151.603] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0151.604] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=19648) returned 1 [0151.604] CloseHandle (hObject=0x378) returned 1 [0151.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll")) returned 0x220 [0151.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll")) returned 0x220 [0151.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.604] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0151.604] SetEvent (hEvent=0x2e4) returned 1 [0151.605] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0151.606] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=23232) returned 1 [0151.606] CloseHandle (hObject=0x378) returned 1 [0151.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll")) returned 0x220 [0151.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll")) returned 0x220 [0151.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.606] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0151.606] SetEvent (hEvent=0x2e4) returned 1 [0151.606] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0151.607] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=24768) returned 1 [0151.607] CloseHandle (hObject=0x378) returned 1 [0151.607] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll")) returned 0x220 [0151.607] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll")) returned 0x220 [0151.607] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.607] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0151.607] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0151.608] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=24768) returned 1 [0151.608] CloseHandle (hObject=0x378) returned 1 [0151.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll")) returned 0x220 [0151.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll")) returned 0x220 [0151.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.608] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0151.608] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0151.609] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=21184) returned 1 [0151.609] CloseHandle (hObject=0x378) returned 1 [0151.609] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll")) returned 0x220 [0151.609] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll")) returned 0x220 [0151.609] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.609] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0151.609] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0151.610] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=19136) returned 1 [0151.610] CloseHandle (hObject=0x378) returned 1 [0151.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll")) returned 0x220 [0151.611] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll")) returned 0x220 [0151.611] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.611] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0151.611] SetEvent (hEvent=0x2e4) returned 1 [0151.611] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate32.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0151.612] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=215768) returned 1 [0151.612] CloseHandle (hObject=0x378) returned 1 [0151.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate32.exe")) returned 0x220 [0151.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate32.exe")) returned 0x220 [0151.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate32.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.612] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0151.612] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate64.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0151.613] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=255192) returned 1 [0151.613] CloseHandle (hObject=0x378) returned 1 [0151.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate64.exe")) returned 0x220 [0151.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate64.exe")) returned 0x220 [0151.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate64.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.613] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0151.613] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvStream32.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvstream32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0151.614] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=396960) returned 1 [0151.614] CloseHandle (hObject=0x378) returned 1 [0151.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvStream32.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvstream32.dll")) returned 0x420 [0151.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvStream32.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvstream32.dll")) returned 0x420 [0151.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvStream32.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvstream32.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.615] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvStream32.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvstream32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0151.615] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvStream64.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvstream64.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0151.618] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=473760) returned 1 [0151.619] CloseHandle (hObject=0x378) returned 1 [0151.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvStream64.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvstream64.dll")) returned 0x420 [0151.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvStream64.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvstream64.dll")) returned 0x420 [0151.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvStream64.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvstream64.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.619] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvStream64.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvstream64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0151.619] SetEvent (hEvent=0x2e4) returned 1 [0151.619] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems32.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvsubsystems32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0151.620] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=1761448) returned 1 [0151.620] CloseHandle (hObject=0x378) returned 1 [0151.620] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems32.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvsubsystems32.dll")) returned 0x420 [0151.620] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems32.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvsubsystems32.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems32.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvsubsystems32.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0 [0151.620] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems32.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvsubsystems32.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems32.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvsubsystems32.dll")) returned 0 [0151.620] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvsubsystems64.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0151.621] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=2285736) returned 1 [0151.621] CloseHandle (hObject=0x378) returned 1 [0151.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvsubsystems64.dll")) returned 0x420 [0151.621] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvsubsystems64.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems64.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvsubsystems64.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0 [0151.621] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems64.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvsubsystems64.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvsubsystems64.dll")) returned 0 [0151.621] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvlp.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0151.622] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=431664) returned 1 [0151.623] CloseHandle (hObject=0x378) returned 1 [0151.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvlp.exe")) returned 0x220 [0151.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvlp.exe")) returned 0x220 [0151.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvlp.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.623] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvlp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0151.623] SetEvent (hEvent=0x2e4) returned 1 [0151.623] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\C2R32.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\c2r32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0151.624] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=820416) returned 1 [0151.624] CloseHandle (hObject=0x378) returned 1 [0151.624] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\C2R32.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\c2r32.dll")) returned 0x420 [0151.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\C2R32.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\c2r32.dll")) returned 0x420 [0151.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\C2R32.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\c2r32.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.627] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\C2R32.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\c2r32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0151.627] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\C2R64.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\c2r64.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0151.627] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=1208928) returned 1 [0151.627] CloseHandle (hObject=0x378) returned 1 [0151.627] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\C2R64.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\c2r64.dll")) returned 0x420 [0151.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\C2R64.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\c2r64.dll")) returned 0x420 [0151.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\C2R64.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\c2r64.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.628] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\C2R64.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\c2r64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0151.628] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\concrt140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\concrt140.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0151.629] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=332968) returned 1 [0151.629] CloseHandle (hObject=0x378) returned 1 [0151.629] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\concrt140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\concrt140.dll")) returned 0x220 [0151.629] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\concrt140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\concrt140.dll")) returned 0x220 [0151.629] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\concrt140.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\concrt140.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.629] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\concrt140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\concrt140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0151.629] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\mfc140u.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\mfc140u.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0151.630] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=5653664) returned 1 [0151.630] CloseHandle (hObject=0x378) returned 1 [0151.630] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\mfc140u.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\mfc140u.dll")) returned 0x220 [0151.630] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\mfc140u.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\mfc140u.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\mfc140u.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\mfc140u.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0 [0151.630] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\mfc140u.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\mfc140u.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\mfc140u.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\mfc140u.dll")) returned 0 [0151.631] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\msvcp120.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp120.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0151.631] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=660136) returned 1 [0151.632] CloseHandle (hObject=0x378) returned 1 [0151.632] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\msvcp120.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp120.dll")) returned 0x220 [0151.632] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\msvcp120.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp120.dll")) returned 0x220 [0151.632] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\msvcp120.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp120.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.632] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\msvcp120.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp120.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0151.632] SetEvent (hEvent=0x2e4) returned 1 [0151.632] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\msvcp140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp140.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0151.633] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=635040) returned 1 [0151.633] CloseHandle (hObject=0x378) returned 1 [0151.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\msvcp140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp140.dll")) returned 0x220 [0151.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\msvcp140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp140.dll")) returned 0x220 [0151.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\msvcp140.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp140.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.633] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\msvcp140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0151.634] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\msvcr120.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcr120.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0151.635] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=963240) returned 1 [0151.635] CloseHandle (hObject=0x378) returned 1 [0151.635] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\msvcr120.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcr120.dll")) returned 0x220 [0151.635] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\msvcr120.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcr120.dll")) returned 0x220 [0151.635] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\msvcr120.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcr120.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.635] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\msvcr120.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcr120.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0151.635] SetEvent (hEvent=0x2e4) returned 1 [0151.635] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\ucrtbase.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0151.636] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=982720) returned 1 [0151.636] CloseHandle (hObject=0x378) returned 1 [0151.636] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\ucrtbase.dll")) returned 0x220 [0151.636] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\ucrtbase.dll")) returned 0x220 [0151.636] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\ucrtbase.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.636] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\ucrtbase.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0151.637] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\vccorlib140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vccorlib140.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0151.637] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=390320) returned 1 [0151.637] CloseHandle (hObject=0x378) returned 1 [0151.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\vccorlib140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vccorlib140.dll")) returned 0x220 [0151.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\vccorlib140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vccorlib140.dll")) returned 0x220 [0151.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\vccorlib140.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\vccorlib140.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.637] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\vccorlib140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vccorlib140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0151.638] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\vcruntime140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vcruntime140.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0151.639] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=88752) returned 1 [0151.639] CloseHandle (hObject=0x378) returned 1 [0151.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\vcruntime140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vcruntime140.dll")) returned 0x220 [0151.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\vcruntime140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vcruntime140.dll")) returned 0x220 [0151.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\vcruntime140.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\vcruntime140.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.639] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\vcruntime140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vcruntime140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0151.639] SetEvent (hEvent=0x2e4) returned 1 [0151.639] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0151.814] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=9024) returned 1 [0151.814] CloseHandle (hObject=0x37c) returned 1 [0151.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif")) returned 0x220 [0151.815] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif")) returned 0x220 [0151.815] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.815] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0151.815] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0151.815] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0151.815] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x378 [0151.819] ReadFile (in: hFile=0x37c, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x2340, lpOverlapped=0x0) returned 1 [0151.821] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x2350, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x2350, lpOverlapped=0x0) returned 1 [0151.822] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0151.823] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0151.823] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0151.823] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x2340, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x2340, lpOverlapped=0x0) returned 1 [0151.827] FlushFileBuffers (hFile=0x37c) returned 1 [0151.841] FlushFileBuffers (hFile=0x378) returned 1 [0151.844] CloseHandle (hObject=0x37c) returned 1 [0151.845] CloseHandle (hObject=0x378) returned 1 [0151.845] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif")) returned 1 [0151.846] SetEvent (hEvent=0x2e4) returned 1 [0151.847] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0151.848] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=6684) returned 1 [0151.848] CloseHandle (hObject=0x378) returned 1 [0151.848] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif")) returned 0x220 [0151.848] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif")) returned 0x220 [0151.848] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.849] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0151.849] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0151.849] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0151.849] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x37c [0151.850] ReadFile (in: hFile=0x378, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x1a1c, lpOverlapped=0x0) returned 1 [0151.856] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x1a20, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x1a20, lpOverlapped=0x0) returned 1 [0151.857] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0151.858] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0151.858] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0151.858] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x1a1c, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x1a1c, lpOverlapped=0x0) returned 1 [0151.860] FlushFileBuffers (hFile=0x378) returned 1 [0151.868] FlushFileBuffers (hFile=0x37c) returned 1 [0151.873] CloseHandle (hObject=0x378) returned 1 [0151.874] CloseHandle (hObject=0x37c) returned 1 [0151.874] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif")) returned 1 [0151.879] SetEvent (hEvent=0x2e4) returned 1 [0151.879] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0151.880] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=8097) returned 1 [0151.880] CloseHandle (hObject=0x37c) returned 1 [0151.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif")) returned 0x220 [0151.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif")) returned 0x220 [0151.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.880] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0151.880] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0151.881] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0151.881] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x378 [0151.881] ReadFile (in: hFile=0x37c, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x1fa1, lpOverlapped=0x0) returned 1 [0151.883] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x1fb0, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x1fb0, lpOverlapped=0x0) returned 1 [0151.884] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0151.884] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0151.884] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0151.884] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x1fa1, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x1fa1, lpOverlapped=0x0) returned 1 [0151.888] FlushFileBuffers (hFile=0x37c) returned 1 [0151.896] FlushFileBuffers (hFile=0x378) returned 1 [0151.909] CloseHandle (hObject=0x37c) returned 1 [0151.909] CloseHandle (hObject=0x378) returned 1 [0151.909] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif")) returned 1 [0151.911] SetEvent (hEvent=0x2e4) returned 1 [0151.911] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0151.914] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=11891) returned 1 [0151.914] CloseHandle (hObject=0x378) returned 1 [0151.914] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif")) returned 0x220 [0151.914] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif")) returned 0x220 [0151.914] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.915] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0151.915] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0151.915] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0151.915] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x37c [0151.916] ReadFile (in: hFile=0x378, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x2e73, lpOverlapped=0x0) returned 1 [0151.918] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x2e80, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x2e80, lpOverlapped=0x0) returned 1 [0151.919] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0151.920] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0151.920] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0151.920] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x2e73, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x2e73, lpOverlapped=0x0) returned 1 [0151.923] FlushFileBuffers (hFile=0x378) returned 1 [0151.939] FlushFileBuffers (hFile=0x37c) returned 1 [0151.945] CloseHandle (hObject=0x378) returned 1 [0151.945] CloseHandle (hObject=0x37c) returned 1 [0151.945] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif")) returned 1 [0151.947] SetEvent (hEvent=0x2e4) returned 1 [0151.947] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0151.948] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=502) returned 1 [0151.948] CloseHandle (hObject=0x37c) returned 1 [0151.948] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif")) returned 0x220 [0151.948] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif")) returned 0x220 [0151.948] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.949] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0151.949] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0151.949] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0151.949] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x378 [0151.950] ReadFile (in: hFile=0x37c, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x1f6, lpOverlapped=0x0) returned 1 [0151.951] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x200, lpOverlapped=0x0) returned 1 [0151.952] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0151.952] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0151.952] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0151.952] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x1f6, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x1f6, lpOverlapped=0x0) returned 1 [0151.956] FlushFileBuffers (hFile=0x37c) returned 1 [0151.987] FlushFileBuffers (hFile=0x378) returned 1 [0151.992] CloseHandle (hObject=0x37c) returned 1 [0151.993] CloseHandle (hObject=0x378) returned 1 [0151.993] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif")) returned 1 [0151.995] SetEvent (hEvent=0x2e4) returned 1 [0151.995] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0151.996] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=3484) returned 1 [0151.996] CloseHandle (hObject=0x378) returned 1 [0151.996] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif")) returned 0x220 [0151.996] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif")) returned 0x220 [0151.996] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0151.996] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0151.997] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0151.997] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0151.997] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x37c [0151.997] ReadFile (in: hFile=0x378, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0xd9c, lpOverlapped=0x0) returned 1 [0152.009] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xda0, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xda0, lpOverlapped=0x0) returned 1 [0152.010] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0152.011] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0152.011] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0152.011] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xd9c, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0xd9c, lpOverlapped=0x0) returned 1 [0152.016] FlushFileBuffers (hFile=0x378) returned 1 [0152.027] FlushFileBuffers (hFile=0x37c) returned 1 [0152.029] CloseHandle (hObject=0x378) returned 1 [0152.029] CloseHandle (hObject=0x37c) returned 1 [0152.029] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif")) returned 1 [0152.031] SetEvent (hEvent=0x2e4) returned 1 [0152.032] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0152.033] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=12482) returned 1 [0152.033] CloseHandle (hObject=0x37c) returned 1 [0152.033] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif")) returned 0x220 [0152.033] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif")) returned 0x220 [0152.033] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0152.033] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0152.034] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0152.034] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0152.034] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x378 [0152.041] ReadFile (in: hFile=0x37c, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x30c2, lpOverlapped=0x0) returned 1 [0152.043] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x30d0, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x30d0, lpOverlapped=0x0) returned 1 [0152.044] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0152.045] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0152.045] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0152.045] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x30c2, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x30c2, lpOverlapped=0x0) returned 1 [0152.049] FlushFileBuffers (hFile=0x37c) returned 1 [0152.057] FlushFileBuffers (hFile=0x378) returned 1 [0152.066] CloseHandle (hObject=0x37c) returned 1 [0152.066] CloseHandle (hObject=0x378) returned 1 [0152.067] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif")) returned 1 [0152.068] SetEvent (hEvent=0x2e4) returned 1 [0152.068] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0152.070] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=2596) returned 1 [0152.070] CloseHandle (hObject=0x378) returned 1 [0152.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif")) returned 0x220 [0152.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif")) returned 0x220 [0152.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0152.074] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0152.075] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0152.075] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0152.075] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x37c [0152.076] ReadFile (in: hFile=0x378, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0xa24, lpOverlapped=0x0) returned 1 [0152.083] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xa30, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xa30, lpOverlapped=0x0) returned 1 [0152.084] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0152.084] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0152.084] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0152.084] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xa24, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0xa24, lpOverlapped=0x0) returned 1 [0152.087] FlushFileBuffers (hFile=0x378) returned 1 [0152.095] FlushFileBuffers (hFile=0x37c) returned 1 [0152.098] CloseHandle (hObject=0x378) returned 1 [0152.098] CloseHandle (hObject=0x37c) returned 1 [0152.098] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif")) returned 1 [0152.099] SetEvent (hEvent=0x2e4) returned 1 [0152.100] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0152.101] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=15308) returned 1 [0152.101] CloseHandle (hObject=0x37c) returned 1 [0152.101] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif")) returned 0x220 [0152.101] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif")) returned 0x220 [0152.101] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0152.102] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0152.102] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0152.102] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0152.102] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x378 [0152.102] ReadFile (in: hFile=0x37c, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x3bcc, lpOverlapped=0x0) returned 1 [0152.107] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x3bd0, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x3bd0, lpOverlapped=0x0) returned 1 [0152.108] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0152.109] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0152.109] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0152.109] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x3bcc, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x3bcc, lpOverlapped=0x0) returned 1 [0152.111] FlushFileBuffers (hFile=0x37c) returned 1 [0152.126] FlushFileBuffers (hFile=0x378) returned 1 [0152.128] CloseHandle (hObject=0x37c) returned 1 [0152.129] CloseHandle (hObject=0x378) returned 1 [0152.129] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif")) returned 1 [0152.131] SetEvent (hEvent=0x2e4) returned 1 [0152.131] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0152.132] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=4955) returned 1 [0152.132] CloseHandle (hObject=0x378) returned 1 [0152.132] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif")) returned 0x220 [0152.132] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif")) returned 0x220 [0152.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0152.133] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0152.133] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0152.133] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0152.133] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x37c [0152.134] ReadFile (in: hFile=0x378, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x135b, lpOverlapped=0x0) returned 1 [0152.140] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x1360, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x1360, lpOverlapped=0x0) returned 1 [0152.141] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0152.141] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0152.141] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0152.141] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x135b, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x135b, lpOverlapped=0x0) returned 1 [0152.144] FlushFileBuffers (hFile=0x378) returned 1 [0152.160] FlushFileBuffers (hFile=0x37c) returned 1 [0152.163] CloseHandle (hObject=0x378) returned 1 [0152.164] CloseHandle (hObject=0x37c) returned 1 [0152.164] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif")) returned 1 [0152.165] SetEvent (hEvent=0x2e4) returned 1 [0152.165] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0152.166] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=1146) returned 1 [0152.166] CloseHandle (hObject=0x37c) returned 1 [0152.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif")) returned 0x220 [0152.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif")) returned 0x220 [0152.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0152.166] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0152.167] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0152.167] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0152.167] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x378 [0152.168] ReadFile (in: hFile=0x37c, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x47a, lpOverlapped=0x0) returned 1 [0152.170] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x480, lpOverlapped=0x0) returned 1 [0152.171] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0152.171] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0152.171] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0152.171] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x47a, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x47a, lpOverlapped=0x0) returned 1 [0152.174] FlushFileBuffers (hFile=0x37c) returned 1 [0152.182] FlushFileBuffers (hFile=0x378) returned 1 [0152.206] CloseHandle (hObject=0x37c) returned 1 [0152.206] CloseHandle (hObject=0x378) returned 1 [0152.206] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif")) returned 1 [0152.208] SetEvent (hEvent=0x2e4) returned 1 [0152.208] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0152.209] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=6984) returned 1 [0152.209] CloseHandle (hObject=0x378) returned 1 [0152.209] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif")) returned 0x220 [0152.209] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif")) returned 0x220 [0152.209] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0152.209] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0152.210] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0152.210] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0152.210] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x37c [0152.211] ReadFile (in: hFile=0x378, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x1b48, lpOverlapped=0x0) returned 1 [0152.212] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x1b50, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x1b50, lpOverlapped=0x0) returned 1 [0152.214] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0152.214] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0152.214] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0152.214] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x1b48, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x1b48, lpOverlapped=0x0) returned 1 [0152.216] FlushFileBuffers (hFile=0x378) returned 1 [0152.219] FlushFileBuffers (hFile=0x37c) returned 1 [0152.230] CloseHandle (hObject=0x378) returned 1 [0152.230] CloseHandle (hObject=0x37c) returned 1 [0152.232] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif")) returned 1 [0152.237] SetEvent (hEvent=0x2e4) returned 1 [0152.237] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0152.239] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=8582) returned 1 [0152.239] CloseHandle (hObject=0x37c) returned 1 [0152.239] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif")) returned 0x220 [0152.240] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif")) returned 0x220 [0152.240] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0152.240] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0152.240] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0152.240] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0152.240] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x378 [0152.241] ReadFile (in: hFile=0x37c, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x2186, lpOverlapped=0x0) returned 1 [0152.243] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x2190, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x2190, lpOverlapped=0x0) returned 1 [0152.245] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0152.245] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0152.245] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0152.245] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x2186, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x2186, lpOverlapped=0x0) returned 1 [0152.249] FlushFileBuffers (hFile=0x37c) returned 1 [0152.269] FlushFileBuffers (hFile=0x378) returned 1 [0152.273] CloseHandle (hObject=0x37c) returned 1 [0152.273] CloseHandle (hObject=0x378) returned 1 [0152.273] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif")) returned 1 [0152.275] SetEvent (hEvent=0x2e4) returned 1 [0152.275] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0152.278] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=5375) returned 1 [0152.279] CloseHandle (hObject=0x378) returned 1 [0152.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif")) returned 0x220 [0152.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif")) returned 0x220 [0152.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0152.279] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0152.279] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0152.280] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0152.280] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x37c [0152.280] ReadFile (in: hFile=0x378, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x14ff, lpOverlapped=0x0) returned 1 [0152.288] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x1500, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x1500, lpOverlapped=0x0) returned 1 [0152.289] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0152.290] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0152.290] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0152.290] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x14ff, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x14ff, lpOverlapped=0x0) returned 1 [0152.292] FlushFileBuffers (hFile=0x378) returned 1 [0152.302] FlushFileBuffers (hFile=0x37c) returned 1 [0152.311] CloseHandle (hObject=0x378) returned 1 [0152.312] CloseHandle (hObject=0x37c) returned 1 [0152.312] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif")) returned 1 [0152.313] SetEvent (hEvent=0x2e4) returned 1 [0152.313] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0152.314] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=5016) returned 1 [0152.314] CloseHandle (hObject=0x37c) returned 1 [0152.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif")) returned 0x220 [0152.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif")) returned 0x220 [0152.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0152.315] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0152.315] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0152.315] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0152.315] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x378 [0152.316] ReadFile (in: hFile=0x37c, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x1398, lpOverlapped=0x0) returned 1 [0152.326] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x13a0, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x13a0, lpOverlapped=0x0) returned 1 [0152.327] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0152.327] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0152.327] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0152.327] WriteFile (in: hFile=0x37c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x1398, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x1398, lpOverlapped=0x0) returned 1 [0152.346] FlushFileBuffers (hFile=0x37c) returned 1 [0152.359] FlushFileBuffers (hFile=0x378) returned 1 [0152.363] CloseHandle (hObject=0x37c) returned 1 [0152.363] CloseHandle (hObject=0x378) returned 1 [0152.363] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif")) returned 1 [0152.364] SetEvent (hEvent=0x2e4) returned 1 [0152.365] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0152.366] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=3966) returned 1 [0152.366] CloseHandle (hObject=0x378) returned 1 [0152.366] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif")) returned 0x220 [0152.366] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif")) returned 0x220 [0152.366] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0152.367] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0152.367] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0152.367] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0152.367] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x388 [0152.369] ReadFile (in: hFile=0x378, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0xf7e, lpOverlapped=0x0) returned 1 [0152.370] WriteFile (in: hFile=0x388, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf80, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf80, lpOverlapped=0x0) returned 1 [0152.372] WriteFile (in: hFile=0x388, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0152.372] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0152.372] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0152.372] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf7e, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0xf7e, lpOverlapped=0x0) returned 1 [0152.374] FlushFileBuffers (hFile=0x378) returned 1 [0152.377] FlushFileBuffers (hFile=0x388) returned 1 [0152.378] CloseHandle (hObject=0x378) returned 1 [0152.378] CloseHandle (hObject=0x388) returned 1 [0152.378] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif")) returned 1 [0152.380] SetEvent (hEvent=0x2e4) returned 1 [0152.380] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0152.381] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=3378) returned 1 [0152.381] CloseHandle (hObject=0x388) returned 1 [0152.381] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif")) returned 0x220 [0152.382] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif")) returned 0x220 [0152.382] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0152.382] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0152.382] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0152.382] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0152.382] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x378 [0152.383] ReadFile (in: hFile=0x388, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0xd32, lpOverlapped=0x0) returned 1 [0152.385] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xd40, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xd40, lpOverlapped=0x0) returned 1 [0152.386] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0152.386] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0152.386] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0152.386] WriteFile (in: hFile=0x388, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xd32, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0xd32, lpOverlapped=0x0) returned 1 [0152.389] FlushFileBuffers (hFile=0x388) returned 1 [0152.391] FlushFileBuffers (hFile=0x378) returned 1 [0152.392] CloseHandle (hObject=0x388) returned 1 [0152.392] CloseHandle (hObject=0x378) returned 1 [0152.392] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif")) returned 1 [0152.394] SetEvent (hEvent=0x2e4) returned 1 [0152.394] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0152.395] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=3120) returned 1 [0152.395] CloseHandle (hObject=0x378) returned 1 [0152.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif")) returned 0x220 [0152.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif")) returned 0x220 [0152.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0152.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0152.396] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0152.396] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0152.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x388 [0152.398] ReadFile (in: hFile=0x378, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0xc30, lpOverlapped=0x0) returned 1 [0152.400] WriteFile (in: hFile=0x388, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xc40, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xc40, lpOverlapped=0x0) returned 1 [0152.401] WriteFile (in: hFile=0x388, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0152.402] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0152.402] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0152.402] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xc30, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0xc30, lpOverlapped=0x0) returned 1 [0152.405] FlushFileBuffers (hFile=0x378) returned 1 [0152.407] FlushFileBuffers (hFile=0x388) returned 1 [0152.409] CloseHandle (hObject=0x378) returned 1 [0152.409] CloseHandle (hObject=0x388) returned 1 [0152.409] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif")) returned 1 [0152.411] SetEvent (hEvent=0x2e4) returned 1 [0152.411] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0152.411] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=3026) returned 1 [0152.411] CloseHandle (hObject=0x388) returned 1 [0152.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf")) returned 0x220 [0152.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf")) returned 0x220 [0152.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0152.412] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0152.413] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0152.413] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0152.413] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x378 [0152.413] ReadFile (in: hFile=0x388, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0xbd2, lpOverlapped=0x0) returned 1 [0152.415] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xbe0, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xbe0, lpOverlapped=0x0) returned 1 [0152.416] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0152.417] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0152.417] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0152.417] WriteFile (in: hFile=0x388, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xbd2, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0xbd2, lpOverlapped=0x0) returned 1 [0152.419] FlushFileBuffers (hFile=0x388) returned 1 [0152.424] FlushFileBuffers (hFile=0x378) returned 1 [0152.425] CloseHandle (hObject=0x388) returned 1 [0152.425] CloseHandle (hObject=0x378) returned 1 [0152.426] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf")) returned 1 [0152.427] SetEvent (hEvent=0x2e4) returned 1 [0152.427] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0152.428] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=4734) returned 1 [0152.428] CloseHandle (hObject=0x378) returned 1 [0152.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf")) returned 0x220 [0152.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf")) returned 0x220 [0152.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0152.428] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0152.428] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0152.428] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0152.429] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x388 [0152.429] ReadFile (in: hFile=0x378, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x127e, lpOverlapped=0x0) returned 1 [0152.431] WriteFile (in: hFile=0x388, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x1280, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x1280, lpOverlapped=0x0) returned 1 [0152.432] WriteFile (in: hFile=0x388, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0152.432] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0152.432] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0152.432] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x127e, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x127e, lpOverlapped=0x0) returned 1 [0152.434] FlushFileBuffers (hFile=0x378) returned 1 [0152.437] FlushFileBuffers (hFile=0x388) returned 1 [0152.438] CloseHandle (hObject=0x378) returned 1 [0152.438] CloseHandle (hObject=0x388) returned 1 [0152.438] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf")) returned 1 [0152.440] SetEvent (hEvent=0x2e4) returned 1 [0152.440] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0152.441] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=5684) returned 1 [0152.441] CloseHandle (hObject=0x388) returned 1 [0152.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf")) returned 0x220 [0152.442] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf")) returned 0x220 [0152.442] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0152.442] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0152.442] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0152.442] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0152.442] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x378 [0152.443] ReadFile (in: hFile=0x388, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x1634, lpOverlapped=0x0) returned 1 [0152.445] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x1640, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x1640, lpOverlapped=0x0) returned 1 [0152.446] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0152.446] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0152.446] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0152.446] WriteFile (in: hFile=0x388, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x1634, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x1634, lpOverlapped=0x0) returned 1 [0152.449] FlushFileBuffers (hFile=0x388) returned 1 [0152.452] FlushFileBuffers (hFile=0x378) returned 1 [0152.453] CloseHandle (hObject=0x388) returned 1 [0152.453] CloseHandle (hObject=0x378) returned 1 [0152.453] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf")) returned 1 [0152.455] SetEvent (hEvent=0x2e4) returned 1 [0152.455] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0152.456] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=20578) returned 1 [0152.456] CloseHandle (hObject=0x378) returned 1 [0152.456] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf")) returned 0x220 [0152.456] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf")) returned 0x220 [0152.456] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0152.456] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0152.457] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0152.457] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0152.457] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x388 [0152.459] ReadFile (in: hFile=0x378, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x5062, lpOverlapped=0x0) returned 1 [0152.463] WriteFile (in: hFile=0x388, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x5070, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x5070, lpOverlapped=0x0) returned 1 [0152.465] WriteFile (in: hFile=0x388, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0152.465] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0152.466] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0152.466] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x5062, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x5062, lpOverlapped=0x0) returned 1 [0152.473] FlushFileBuffers (hFile=0x378) returned 1 [0152.476] FlushFileBuffers (hFile=0x388) returned 1 [0152.479] CloseHandle (hObject=0x378) returned 1 [0152.480] CloseHandle (hObject=0x388) returned 1 [0152.480] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf")) returned 1 [0152.482] SetEvent (hEvent=0x2e4) returned 1 [0152.482] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0152.482] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=10832) returned 1 [0152.483] CloseHandle (hObject=0x388) returned 1 [0152.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf")) returned 0x220 [0152.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf")) returned 0x220 [0152.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0152.483] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0152.484] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0152.484] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0152.484] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x378 [0152.484] ReadFile (in: hFile=0x388, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x2a50, lpOverlapped=0x0) returned 1 [0152.486] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x2a60, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x2a60, lpOverlapped=0x0) returned 1 [0152.487] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0152.488] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0152.488] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0152.488] WriteFile (in: hFile=0x388, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x2a50, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x2a50, lpOverlapped=0x0) returned 1 [0152.490] FlushFileBuffers (hFile=0x388) returned 1 [0152.493] FlushFileBuffers (hFile=0x378) returned 1 [0152.494] CloseHandle (hObject=0x388) returned 1 [0152.494] CloseHandle (hObject=0x378) returned 1 [0152.495] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf")) returned 1 [0152.496] SetEvent (hEvent=0x2e4) returned 1 [0152.497] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0152.497] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=14428) returned 1 [0152.497] CloseHandle (hObject=0x378) returned 1 [0152.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf")) returned 0x220 [0152.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf")) returned 0x220 [0152.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0152.498] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0152.498] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0152.498] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0152.498] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x388 [0152.499] ReadFile (in: hFile=0x378, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x385c, lpOverlapped=0x0) returned 1 [0152.501] WriteFile (in: hFile=0x388, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x3860, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x3860, lpOverlapped=0x0) returned 1 [0152.502] WriteFile (in: hFile=0x388, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0152.502] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0152.502] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0152.502] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x385c, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x385c, lpOverlapped=0x0) returned 1 [0152.505] FlushFileBuffers (hFile=0x378) returned 1 [0152.508] FlushFileBuffers (hFile=0x388) returned 1 [0152.509] CloseHandle (hObject=0x378) returned 1 [0152.509] CloseHandle (hObject=0x388) returned 1 [0152.510] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf")) returned 1 [0152.511] SetEvent (hEvent=0x2e4) returned 1 [0152.512] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0152.512] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=7072) returned 1 [0152.512] CloseHandle (hObject=0x388) returned 1 [0152.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf")) returned 0x220 [0152.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf")) returned 0x220 [0152.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0152.513] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0152.513] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0152.513] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0152.513] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x378 [0152.514] ReadFile (in: hFile=0x388, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x1ba0, lpOverlapped=0x0) returned 1 [0152.516] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x1bb0, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x1bb0, lpOverlapped=0x0) returned 1 [0152.517] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0152.517] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0152.517] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0152.518] WriteFile (in: hFile=0x388, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x1ba0, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x1ba0, lpOverlapped=0x0) returned 1 [0152.520] FlushFileBuffers (hFile=0x388) returned 1 [0152.522] FlushFileBuffers (hFile=0x378) returned 1 [0152.524] CloseHandle (hObject=0x388) returned 1 [0152.524] CloseHandle (hObject=0x378) returned 1 [0152.524] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf")) returned 1 [0152.526] SetEvent (hEvent=0x2e4) returned 1 [0152.526] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0152.526] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=3344) returned 1 [0152.527] CloseHandle (hObject=0x378) returned 1 [0152.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf")) returned 0x220 [0152.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf")) returned 0x220 [0152.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0152.527] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0152.527] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0152.527] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0152.528] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x388 [0152.529] ReadFile (in: hFile=0x378, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0xd10, lpOverlapped=0x0) returned 1 [0152.532] WriteFile (in: hFile=0x388, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xd20, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xd20, lpOverlapped=0x0) returned 1 [0152.534] WriteFile (in: hFile=0x388, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0152.534] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0152.534] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0152.534] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xd10, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0xd10, lpOverlapped=0x0) returned 1 [0152.537] FlushFileBuffers (hFile=0x378) returned 1 [0152.542] FlushFileBuffers (hFile=0x388) returned 1 [0152.543] CloseHandle (hObject=0x378) returned 1 [0152.543] CloseHandle (hObject=0x388) returned 1 [0152.543] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf")) returned 1 [0152.545] SetEvent (hEvent=0x2e4) returned 1 [0152.545] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0152.547] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=1596) returned 1 [0152.547] CloseHandle (hObject=0x388) returned 1 [0152.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf")) returned 0x220 [0152.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf")) returned 0x220 [0152.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0152.547] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0152.548] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0152.548] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0152.548] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x378 [0152.548] ReadFile (in: hFile=0x388, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x63c, lpOverlapped=0x0) returned 1 [0152.550] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x640, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x640, lpOverlapped=0x0) returned 1 [0152.551] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0152.551] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0152.551] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0152.552] WriteFile (in: hFile=0x388, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x63c, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x63c, lpOverlapped=0x0) returned 1 [0152.553] FlushFileBuffers (hFile=0x388) returned 1 [0152.556] FlushFileBuffers (hFile=0x378) returned 1 [0152.558] CloseHandle (hObject=0x388) returned 1 [0152.558] CloseHandle (hObject=0x378) returned 1 [0152.558] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf")) returned 1 [0152.559] SetEvent (hEvent=0x2e4) returned 1 [0152.560] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0152.560] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=7968) returned 1 [0152.560] CloseHandle (hObject=0x378) returned 1 [0152.560] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf")) returned 0x220 [0152.560] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf")) returned 0x220 [0152.561] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0152.561] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0152.561] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0152.561] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0152.561] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x388 [0152.562] ReadFile (in: hFile=0x378, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x1f20, lpOverlapped=0x0) returned 1 [0152.564] WriteFile (in: hFile=0x388, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x1f30, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x1f30, lpOverlapped=0x0) returned 1 [0152.565] WriteFile (in: hFile=0x388, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0152.565] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0152.565] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0152.565] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x1f20, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x1f20, lpOverlapped=0x0) returned 1 [0152.824] FlushFileBuffers (hFile=0x378) returned 1 [0152.835] FlushFileBuffers (hFile=0x388) returned 1 [0154.061] CloseHandle (hObject=0x378) returned 1 [0154.061] CloseHandle (hObject=0x388) returned 1 [0154.061] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf")) returned 1 [0154.063] SetEvent (hEvent=0x2e4) returned 1 [0154.063] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0154.064] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=16112) returned 1 [0154.064] CloseHandle (hObject=0x388) returned 1 [0154.064] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf")) returned 0x220 [0154.064] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf")) returned 0x220 [0154.064] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0154.064] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0154.065] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0154.065] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0154.065] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x378 [0154.080] ReadFile (in: hFile=0x388, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x3ef0, lpOverlapped=0x0) returned 1 [0154.085] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x3f00, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x3f00, lpOverlapped=0x0) returned 1 [0154.087] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0154.087] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0154.087] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0154.087] WriteFile (in: hFile=0x388, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x3ef0, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x3ef0, lpOverlapped=0x0) returned 1 [0154.092] FlushFileBuffers (hFile=0x388) returned 1 [0154.099] FlushFileBuffers (hFile=0x378) returned 1 [0154.126] CloseHandle (hObject=0x388) returned 1 [0154.126] CloseHandle (hObject=0x378) returned 1 [0154.126] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf")) returned 1 [0154.128] SetEvent (hEvent=0x2e4) returned 1 [0154.128] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0154.129] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=26748) returned 1 [0154.129] CloseHandle (hObject=0x378) returned 1 [0154.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf")) returned 0x220 [0154.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf")) returned 0x220 [0154.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0154.129] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0154.130] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0154.130] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0154.130] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x388 [0154.130] ReadFile (in: hFile=0x378, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x687c, lpOverlapped=0x0) returned 1 [0154.135] WriteFile (in: hFile=0x388, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x6880, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x6880, lpOverlapped=0x0) returned 1 [0154.136] WriteFile (in: hFile=0x388, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0154.137] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0154.137] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0154.137] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x687c, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x687c, lpOverlapped=0x0) returned 1 [0154.142] FlushFileBuffers (hFile=0x378) returned 1 [0154.170] FlushFileBuffers (hFile=0x388) returned 1 [0154.287] CloseHandle (hObject=0x378) returned 1 [0154.287] CloseHandle (hObject=0x388) returned 1 [0154.287] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf")) returned 1 [0154.289] SetEvent (hEvent=0x2e4) returned 1 [0154.290] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0154.291] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=4066) returned 1 [0154.291] CloseHandle (hObject=0x388) returned 1 [0154.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf")) returned 0x220 [0154.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf")) returned 0x220 [0154.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0154.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0154.292] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0154.292] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0154.292] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x378 [0154.293] ReadFile (in: hFile=0x388, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0xfe2, lpOverlapped=0x0) returned 1 [0154.294] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xff0, lpOverlapped=0x0) returned 1 [0154.295] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0154.296] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0154.296] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0154.296] WriteFile (in: hFile=0x388, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xfe2, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0xfe2, lpOverlapped=0x0) returned 1 [0154.298] FlushFileBuffers (hFile=0x388) returned 1 [0154.639] FlushFileBuffers (hFile=0x378) returned 1 [0154.657] CloseHandle (hObject=0x388) returned 1 [0154.657] CloseHandle (hObject=0x378) returned 1 [0154.657] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf")) returned 1 [0154.659] SetEvent (hEvent=0x2e4) returned 1 [0154.659] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0154.659] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=24778) returned 1 [0154.659] CloseHandle (hObject=0x378) returned 1 [0154.659] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf")) returned 0x220 [0154.660] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf")) returned 0x220 [0154.660] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0154.660] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0154.660] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0154.660] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0154.660] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x388 [0154.661] ReadFile (in: hFile=0x378, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x60ca, lpOverlapped=0x0) returned 1 [0154.665] WriteFile (in: hFile=0x388, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x60d0, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x60d0, lpOverlapped=0x0) returned 1 [0154.667] WriteFile (in: hFile=0x388, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0154.667] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0154.668] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0154.668] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x60ca, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x60ca, lpOverlapped=0x0) returned 1 [0154.670] FlushFileBuffers (hFile=0x378) returned 1 [0154.847] FlushFileBuffers (hFile=0x388) returned 1 [0155.142] CloseHandle (hObject=0x378) returned 1 [0155.142] CloseHandle (hObject=0x388) returned 1 [0155.142] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf")) returned 1 [0155.145] SetEvent (hEvent=0x2e4) returned 1 [0155.145] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0155.146] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=47996) returned 1 [0155.146] CloseHandle (hObject=0x388) returned 1 [0155.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf")) returned 0x220 [0155.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf")) returned 0x220 [0155.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0155.146] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0155.147] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0155.147] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0155.147] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x378 [0155.148] ReadFile (in: hFile=0x388, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0xbb7c, lpOverlapped=0x0) returned 1 [0155.152] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xbb80, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xbb80, lpOverlapped=0x0) returned 1 [0155.154] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0155.154] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0155.154] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0155.154] WriteFile (in: hFile=0x388, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xbb7c, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0xbb7c, lpOverlapped=0x0) returned 1 [0155.159] FlushFileBuffers (hFile=0x388) returned 1 [0155.183] FlushFileBuffers (hFile=0x378) returned 1 [0155.186] CloseHandle (hObject=0x388) returned 1 [0155.186] CloseHandle (hObject=0x378) returned 1 [0155.186] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf")) returned 1 [0155.188] SetEvent (hEvent=0x2e4) returned 1 [0155.188] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0155.190] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=47786) returned 1 [0155.190] CloseHandle (hObject=0x378) returned 1 [0155.190] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf")) returned 0x220 [0155.190] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf")) returned 0x220 [0155.190] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0155.191] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0155.191] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0155.191] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0155.191] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x388 [0155.192] ReadFile (in: hFile=0x378, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0xbaaa, lpOverlapped=0x0) returned 1 [0155.195] WriteFile (in: hFile=0x388, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xbab0, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xbab0, lpOverlapped=0x0) returned 1 [0155.198] WriteFile (in: hFile=0x388, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0155.198] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0155.198] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0155.198] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xbaaa, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0xbaaa, lpOverlapped=0x0) returned 1 [0155.201] FlushFileBuffers (hFile=0x378) returned 1 [0155.212] FlushFileBuffers (hFile=0x388) returned 1 [0155.219] CloseHandle (hObject=0x378) returned 1 [0155.220] CloseHandle (hObject=0x388) returned 1 [0155.220] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf")) returned 1 [0155.222] SetEvent (hEvent=0x2e4) returned 1 [0155.222] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0155.223] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=20554) returned 1 [0155.223] CloseHandle (hObject=0x388) returned 1 [0155.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf")) returned 0x220 [0155.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf")) returned 0x220 [0155.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0155.223] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0155.224] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0155.224] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0155.224] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x378 [0155.225] ReadFile (in: hFile=0x388, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x504a, lpOverlapped=0x0) returned 1 [0155.227] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x5050, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x5050, lpOverlapped=0x0) returned 1 [0155.228] WriteFile (in: hFile=0x378, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0155.229] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0155.229] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0155.229] WriteFile (in: hFile=0x388, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x504a, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x504a, lpOverlapped=0x0) returned 1 [0155.232] FlushFileBuffers (hFile=0x388) returned 1 [0155.238] FlushFileBuffers (hFile=0x378) returned 1 [0155.242] CloseHandle (hObject=0x388) returned 1 [0155.242] CloseHandle (hObject=0x378) returned 1 [0155.242] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf")) returned 1 [0155.255] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0155.256] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=13515) returned 1 [0155.256] CloseHandle (hObject=0x38c) returned 1 [0155.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif")) returned 0x220 [0155.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif")) returned 0x220 [0155.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0155.257] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0155.257] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0155.257] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0155.257] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0155.259] ReadFile (in: hFile=0x38c, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x34cb, lpOverlapped=0x0) returned 1 [0155.262] WriteFile (in: hFile=0x394, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x34d0, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x34d0, lpOverlapped=0x0) returned 1 [0155.263] WriteFile (in: hFile=0x394, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0155.264] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0155.264] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0155.264] WriteFile (in: hFile=0x38c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x34cb, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x34cb, lpOverlapped=0x0) returned 1 [0155.266] FlushFileBuffers (hFile=0x38c) returned 1 [0155.274] FlushFileBuffers (hFile=0x394) returned 1 [0155.302] CloseHandle (hObject=0x38c) returned 1 [0155.302] CloseHandle (hObject=0x394) returned 1 [0155.302] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif")) returned 1 [0155.305] SetEvent (hEvent=0x2e4) returned 1 [0155.305] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0155.306] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=20454) returned 1 [0155.306] CloseHandle (hObject=0x394) returned 1 [0155.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif")) returned 0x220 [0155.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif")) returned 0x220 [0155.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0155.307] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0155.307] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0155.307] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0155.307] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x38c [0155.309] ReadFile (in: hFile=0x394, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x4fe6, lpOverlapped=0x0) returned 1 [0155.315] WriteFile (in: hFile=0x38c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x4ff0, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x4ff0, lpOverlapped=0x0) returned 1 [0155.317] WriteFile (in: hFile=0x38c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0155.318] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0155.318] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0155.318] WriteFile (in: hFile=0x394, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x4fe6, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x4fe6, lpOverlapped=0x0) returned 1 [0155.322] FlushFileBuffers (hFile=0x394) returned 1 [0155.340] FlushFileBuffers (hFile=0x38c) returned 1 [0155.344] CloseHandle (hObject=0x394) returned 1 [0155.345] CloseHandle (hObject=0x38c) returned 1 [0155.345] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif")) returned 1 [0155.348] SetEvent (hEvent=0x2e4) returned 1 [0155.348] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0155.349] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=12982) returned 1 [0155.349] CloseHandle (hObject=0x38c) returned 1 [0155.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf")) returned 0x220 [0155.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf")) returned 0x220 [0155.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0155.350] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0155.350] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0155.350] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0155.351] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0155.352] ReadFile (in: hFile=0x38c, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x32b6, lpOverlapped=0x0) returned 1 [0155.355] WriteFile (in: hFile=0x394, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x32c0, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x32c0, lpOverlapped=0x0) returned 1 [0155.358] WriteFile (in: hFile=0x394, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0155.358] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0155.359] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0155.359] WriteFile (in: hFile=0x38c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x32b6, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x32b6, lpOverlapped=0x0) returned 1 [0155.362] FlushFileBuffers (hFile=0x38c) returned 1 [0155.382] FlushFileBuffers (hFile=0x394) returned 1 [0155.393] CloseHandle (hObject=0x38c) returned 1 [0155.393] CloseHandle (hObject=0x394) returned 1 [0155.393] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf")) returned 1 [0155.395] SetEvent (hEvent=0x2e4) returned 1 [0155.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0155.397] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=8772) returned 1 [0155.398] CloseHandle (hObject=0x394) returned 1 [0155.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf")) returned 0x220 [0155.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf")) returned 0x220 [0155.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0155.398] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0155.399] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0155.399] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0155.399] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x38c [0155.400] ReadFile (in: hFile=0x394, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x2244, lpOverlapped=0x0) returned 1 [0155.403] WriteFile (in: hFile=0x38c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x2250, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x2250, lpOverlapped=0x0) returned 1 [0155.405] WriteFile (in: hFile=0x38c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0155.405] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0155.405] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0155.405] WriteFile (in: hFile=0x394, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x2244, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x2244, lpOverlapped=0x0) returned 1 [0155.408] FlushFileBuffers (hFile=0x394) returned 1 [0155.420] FlushFileBuffers (hFile=0x38c) returned 1 [0155.430] CloseHandle (hObject=0x394) returned 1 [0155.430] CloseHandle (hObject=0x38c) returned 1 [0155.430] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf")) returned 1 [0155.432] SetEvent (hEvent=0x2e4) returned 1 [0155.432] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0155.433] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=18304) returned 1 [0155.433] CloseHandle (hObject=0x38c) returned 1 [0155.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf")) returned 0x220 [0155.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf")) returned 0x220 [0155.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0155.433] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0155.434] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0155.434] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0155.434] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0155.434] ReadFile (in: hFile=0x38c, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x4780, lpOverlapped=0x0) returned 1 [0155.437] WriteFile (in: hFile=0x394, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x4790, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x4790, lpOverlapped=0x0) returned 1 [0155.439] WriteFile (in: hFile=0x394, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0155.440] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0155.440] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0155.440] WriteFile (in: hFile=0x38c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x4780, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x4780, lpOverlapped=0x0) returned 1 [0155.443] FlushFileBuffers (hFile=0x38c) returned 1 [0155.445] FlushFileBuffers (hFile=0x394) returned 1 [0155.454] CloseHandle (hObject=0x38c) returned 1 [0155.454] CloseHandle (hObject=0x394) returned 1 [0155.455] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf")) returned 1 [0155.456] SetEvent (hEvent=0x2e4) returned 1 [0155.456] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0155.457] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=12520) returned 1 [0155.457] CloseHandle (hObject=0x394) returned 1 [0155.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf")) returned 0x220 [0155.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf")) returned 0x220 [0155.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0155.457] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0155.458] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0155.458] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0155.458] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x38c [0155.458] ReadFile (in: hFile=0x394, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x30e8, lpOverlapped=0x0) returned 1 [0155.469] WriteFile (in: hFile=0x38c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x30f0, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x30f0, lpOverlapped=0x0) returned 1 [0155.471] WriteFile (in: hFile=0x38c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0155.471] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0155.471] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0155.471] WriteFile (in: hFile=0x394, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x30e8, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x30e8, lpOverlapped=0x0) returned 1 [0155.475] FlushFileBuffers (hFile=0x394) returned 1 [0155.479] FlushFileBuffers (hFile=0x38c) returned 1 [0155.487] CloseHandle (hObject=0x394) returned 1 [0155.487] CloseHandle (hObject=0x38c) returned 1 [0155.487] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf")) returned 1 [0155.489] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0155.489] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=7862) returned 1 [0155.489] CloseHandle (hObject=0x38c) returned 1 [0155.489] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf")) returned 0x220 [0155.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf")) returned 0x220 [0155.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0155.490] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0155.490] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0155.491] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0155.491] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0155.491] ReadFile (in: hFile=0x38c, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x1eb6, lpOverlapped=0x0) returned 1 [0155.499] WriteFile (in: hFile=0x394, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x1ec0, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x1ec0, lpOverlapped=0x0) returned 1 [0155.501] WriteFile (in: hFile=0x394, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0155.501] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0155.502] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0155.502] WriteFile (in: hFile=0x38c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x1eb6, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x1eb6, lpOverlapped=0x0) returned 1 [0155.504] FlushFileBuffers (hFile=0x38c) returned 1 [0155.510] FlushFileBuffers (hFile=0x394) returned 1 [0155.521] CloseHandle (hObject=0x38c) returned 1 [0155.521] CloseHandle (hObject=0x394) returned 1 [0155.521] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf")) returned 1 [0155.527] SetEvent (hEvent=0x2e4) returned 1 [0155.527] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0155.528] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=880) returned 1 [0155.528] CloseHandle (hObject=0x394) returned 1 [0155.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf")) returned 0x220 [0155.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf")) returned 0x220 [0155.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0155.529] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0155.529] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0155.529] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0155.529] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x38c [0155.530] ReadFile (in: hFile=0x394, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x370, lpOverlapped=0x0) returned 1 [0155.532] WriteFile (in: hFile=0x38c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x380, lpOverlapped=0x0) returned 1 [0155.533] WriteFile (in: hFile=0x38c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0155.534] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0155.534] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0155.534] WriteFile (in: hFile=0x394, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x370, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x370, lpOverlapped=0x0) returned 1 [0155.536] FlushFileBuffers (hFile=0x394) returned 1 [0155.539] FlushFileBuffers (hFile=0x38c) returned 1 [0155.550] CloseHandle (hObject=0x394) returned 1 [0155.550] CloseHandle (hObject=0x38c) returned 1 [0155.551] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf")) returned 1 [0155.556] SetEvent (hEvent=0x2e4) returned 1 [0155.556] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0155.558] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=1464) returned 1 [0155.558] CloseHandle (hObject=0x38c) returned 1 [0155.558] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf")) returned 0x220 [0155.558] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf")) returned 0x220 [0155.558] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0155.559] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0155.559] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0155.559] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0155.559] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0155.560] ReadFile (in: hFile=0x38c, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x5b8, lpOverlapped=0x0) returned 1 [0155.563] WriteFile (in: hFile=0x394, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x5c0, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x5c0, lpOverlapped=0x0) returned 1 [0155.565] WriteFile (in: hFile=0x394, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0155.565] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0155.565] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0155.565] WriteFile (in: hFile=0x38c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x5b8, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x5b8, lpOverlapped=0x0) returned 1 [0155.567] FlushFileBuffers (hFile=0x38c) returned 1 [0155.581] FlushFileBuffers (hFile=0x394) returned 1 [0155.588] CloseHandle (hObject=0x38c) returned 1 [0155.589] CloseHandle (hObject=0x394) returned 1 [0155.589] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf")) returned 1 [0155.591] SetEvent (hEvent=0x2e4) returned 1 [0155.591] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0155.591] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=1516) returned 1 [0155.592] CloseHandle (hObject=0x394) returned 1 [0155.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf")) returned 0x220 [0155.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf")) returned 0x220 [0155.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0155.592] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0155.592] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0155.592] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0155.592] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x38c [0155.594] ReadFile (in: hFile=0x394, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x5ec, lpOverlapped=0x0) returned 1 [0155.596] WriteFile (in: hFile=0x38c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x5f0, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x5f0, lpOverlapped=0x0) returned 1 [0155.597] WriteFile (in: hFile=0x38c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0155.597] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0155.597] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0155.598] WriteFile (in: hFile=0x394, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x5ec, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x5ec, lpOverlapped=0x0) returned 1 [0155.601] FlushFileBuffers (hFile=0x394) returned 1 [0155.616] FlushFileBuffers (hFile=0x38c) returned 1 [0155.620] CloseHandle (hObject=0x394) returned 1 [0155.620] CloseHandle (hObject=0x38c) returned 1 [0155.620] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf")) returned 1 [0155.622] SetEvent (hEvent=0x2e4) returned 1 [0155.622] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0155.623] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=8070) returned 1 [0155.623] CloseHandle (hObject=0x38c) returned 1 [0155.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf")) returned 0x220 [0155.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf")) returned 0x220 [0155.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0155.624] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0155.624] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0155.624] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0155.625] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0155.625] ReadFile (in: hFile=0x38c, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x1f86, lpOverlapped=0x0) returned 1 [0155.632] WriteFile (in: hFile=0x394, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x1f90, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x1f90, lpOverlapped=0x0) returned 1 [0155.633] WriteFile (in: hFile=0x394, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0155.634] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0155.634] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0155.634] WriteFile (in: hFile=0x38c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x1f86, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x1f86, lpOverlapped=0x0) returned 1 [0155.636] FlushFileBuffers (hFile=0x38c) returned 1 [0155.647] FlushFileBuffers (hFile=0x394) returned 1 [0155.650] CloseHandle (hObject=0x38c) returned 1 [0155.650] CloseHandle (hObject=0x394) returned 1 [0155.651] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf")) returned 1 [0155.652] SetEvent (hEvent=0x2e4) returned 1 [0155.652] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0155.653] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=4024) returned 1 [0155.653] CloseHandle (hObject=0x394) returned 1 [0155.653] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf")) returned 0x220 [0155.653] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf")) returned 0x220 [0155.653] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0155.654] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0155.654] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0155.654] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0155.654] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x38c [0155.655] ReadFile (in: hFile=0x394, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0xfb8, lpOverlapped=0x0) returned 1 [0155.657] WriteFile (in: hFile=0x38c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xfc0, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xfc0, lpOverlapped=0x0) returned 1 [0155.658] WriteFile (in: hFile=0x38c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0155.658] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0155.658] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0155.658] WriteFile (in: hFile=0x394, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xfb8, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0xfb8, lpOverlapped=0x0) returned 1 [0155.660] FlushFileBuffers (hFile=0x394) returned 1 [0155.673] FlushFileBuffers (hFile=0x38c) returned 1 [0155.678] CloseHandle (hObject=0x394) returned 1 [0155.678] CloseHandle (hObject=0x38c) returned 1 [0155.679] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf")) returned 1 [0155.680] SetEvent (hEvent=0x2e4) returned 1 [0155.680] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0155.681] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=1536) returned 1 [0155.681] CloseHandle (hObject=0x38c) returned 1 [0155.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf")) returned 0x220 [0155.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf")) returned 0x220 [0155.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0155.681] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0155.682] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0155.682] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0155.682] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0155.683] ReadFile (in: hFile=0x38c, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x600, lpOverlapped=0x0) returned 1 [0155.685] WriteFile (in: hFile=0x394, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x610, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x610, lpOverlapped=0x0) returned 1 [0155.687] WriteFile (in: hFile=0x394, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0155.687] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0155.687] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0155.687] WriteFile (in: hFile=0x38c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x600, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x600, lpOverlapped=0x0) returned 1 [0155.689] FlushFileBuffers (hFile=0x38c) returned 1 [0155.692] FlushFileBuffers (hFile=0x394) returned 1 [0155.701] CloseHandle (hObject=0x38c) returned 1 [0155.701] CloseHandle (hObject=0x394) returned 1 [0155.701] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf")) returned 1 [0155.703] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0155.710] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=1736) returned 1 [0155.710] CloseHandle (hObject=0x394) returned 1 [0155.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf")) returned 0x220 [0155.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf")) returned 0x220 [0155.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0155.711] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0155.711] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0155.711] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0155.711] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x38c [0155.712] ReadFile (in: hFile=0x394, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x6c8, lpOverlapped=0x0) returned 1 [0155.753] WriteFile (in: hFile=0x38c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x6d0, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0x6d0, lpOverlapped=0x0) returned 1 [0155.754] WriteFile (in: hFile=0x38c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0155.755] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0155.755] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0155.755] WriteFile (in: hFile=0x394, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x6c8, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x6c8, lpOverlapped=0x0) returned 1 [0155.767] FlushFileBuffers (hFile=0x394) returned 1 [0156.357] FlushFileBuffers (hFile=0x38c) returned 1 [0156.369] CloseHandle (hObject=0x394) returned 1 [0156.370] CloseHandle (hObject=0x38c) returned 1 [0156.370] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf")) returned 1 [0156.372] SetEvent (hEvent=0x2e4) returned 1 [0156.372] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0156.373] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=2556) returned 1 [0156.373] CloseHandle (hObject=0x38c) returned 1 [0156.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf")) returned 0x220 [0156.374] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf")) returned 0x220 [0156.374] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0156.374] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0156.374] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0156.374] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0156.374] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0156.375] ReadFile (in: hFile=0x38c, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0x9fc, lpOverlapped=0x0) returned 1 [0156.383] WriteFile (in: hFile=0x394, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xa00, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xa00, lpOverlapped=0x0) returned 1 [0156.385] WriteFile (in: hFile=0x394, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0156.385] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0156.385] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0156.385] WriteFile (in: hFile=0x38c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0x9fc, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0x9fc, lpOverlapped=0x0) returned 1 [0156.388] FlushFileBuffers (hFile=0x38c) returned 1 [0156.401] FlushFileBuffers (hFile=0x394) returned 1 [0156.420] CloseHandle (hObject=0x38c) returned 1 [0156.420] CloseHandle (hObject=0x394) returned 1 [0156.420] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf")) returned 1 [0156.421] SetEvent (hEvent=0x2e4) returned 1 [0156.422] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0156.422] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x325fa10 | out: lpFileSize=0x325fa10*=2644) returned 1 [0156.422] CloseHandle (hObject=0x394) returned 1 [0156.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf")) returned 0x220 [0156.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf")) returned 0x220 [0156.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0156.423] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0156.423] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0156.423] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f9d8 | out: lpNewFilePointer=0x0) returned 1 [0156.423] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x38c [0156.424] ReadFile (in: hFile=0x394, lpBuffer=0x370e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x325f9ec, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesRead=0x325f9ec*=0xa54, lpOverlapped=0x0) returned 1 [0156.433] WriteFile (in: hFile=0x38c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xa60, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xa60, lpOverlapped=0x0) returned 1 [0156.434] WriteFile (in: hFile=0x38c, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x325f9c4, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f9c4*=0xf2, lpOverlapped=0x0) returned 1 [0156.435] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0156.435] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x325f738 | out: lpNewFilePointer=0x0) returned 1 [0156.435] WriteFile (in: hFile=0x394, lpBuffer=0x370e020*, nNumberOfBytesToWrite=0xa54, lpNumberOfBytesWritten=0x325f744, lpOverlapped=0x0 | out: lpBuffer=0x370e020*, lpNumberOfBytesWritten=0x325f744*=0xa54, lpOverlapped=0x0) returned 1 [0156.444] FlushFileBuffers (hFile=0x394) returned 1 [0156.451] FlushFileBuffers (hFile=0x38c) returned 1 [0156.607] CloseHandle (hObject=0x394) returned 1 [0156.607] CloseHandle (hObject=0x38c) returned 1 [0156.607] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf")) returned 1 [0156.614] SetEvent (hEvent=0x2e4) returned 1 [0156.625] SetEvent (hEvent=0x2e8) returned 1 [0156.625] SetEvent (hEvent=0x2e4) returned 1 [0156.625] SetEvent (hEvent=0x2ec) returned 1 [0156.625] GetProcessHeap () returned 0x8a0000 [0156.625] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x50) returned 0x8b1260 [0156.625] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x74c00000 [0156.625] GetProcAddress (hModule=0x74c00000, lpProcName="Wow64RevertWow64FsRedirection") returned 0x74c16b50 [0156.625] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0156.625] GetProcessHeap () returned 0x8a0000 [0156.625] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b1260 | out: hHeap=0x8a0000) returned 1 [0156.625] SetEvent (hEvent=0x2e8) returned 1 [0156.625] SetEvent (hEvent=0x2e4) returned 1 [0156.625] SetEvent (hEvent=0x2ec) returned 1 [0156.625] GetProcessHeap () returned 0x8a0000 [0156.625] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x370e020 | out: hHeap=0x8a0000) returned 1 [0156.632] GetProcessHeap () returned 0x8a0000 [0156.632] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8e1d80 | out: hHeap=0x8a0000) returned 1 [0156.632] GetProcessHeap () returned 0x8a0000 [0156.632] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x981bc0 | out: hHeap=0x8a0000) returned 1 [0156.632] GetProcessHeap () returned 0x8a0000 [0156.632] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3600048 | out: hHeap=0x8a0000) returned 1 Thread: id = 79 os_tid = 0xec0 [0130.228] GetProcessHeap () returned 0x8a0000 [0130.228] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3610050 [0130.228] GetProcessHeap () returned 0x8a0000 [0130.228] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3620058 [0130.229] GetProcessHeap () returned 0x8a0000 [0130.229] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x28) returned 0x8e2020 [0130.229] GetProcessHeap () returned 0x8a0000 [0130.229] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x110102) returned 0x3822020 [0130.232] GetProcessHeap () returned 0x8a0000 [0130.232] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x50) returned 0x8afbf0 [0130.232] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x74c00000 [0130.232] GetProcAddress (hModule=0x74c00000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x74c16b30 [0130.232] Wow64DisableWow64FsRedirection (in: OldValue=0x339fbb8 | out: OldValue=0x339fbb8*=0x0) returned 1 [0130.232] GetProcessHeap () returned 0x8a0000 [0130.232] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8afbf0 | out: hHeap=0x8a0000) returned 1 [0130.232] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.232] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.232] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.232] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.232] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.232] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.232] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.233] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.233] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.233] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.233] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.233] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.233] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.233] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.233] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.233] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.233] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.233] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.234] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.234] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.234] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.234] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.234] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.234] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.234] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.234] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.234] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.234] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.234] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.234] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.234] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.235] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.235] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.235] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.235] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.235] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.235] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.235] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.235] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.235] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.235] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.235] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.235] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.236] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.236] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.236] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.236] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.236] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.236] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.236] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.236] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.236] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.236] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.236] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.236] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.237] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.237] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.237] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.237] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.237] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.237] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.237] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.237] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.237] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.237] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.237] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.237] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.237] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.238] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.238] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.238] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.238] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.238] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.238] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.238] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.238] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.238] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.238] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.238] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.238] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.239] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.239] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.239] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.239] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.239] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.239] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.239] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.239] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.239] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.239] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.239] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.239] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.239] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.240] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.240] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.240] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.240] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.240] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.240] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.240] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.240] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.240] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.240] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.240] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.240] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.241] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.241] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.241] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.241] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.241] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.241] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.241] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.241] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.241] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.241] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.241] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.242] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.242] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.242] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.242] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.242] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.242] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.242] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.242] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.242] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.242] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.242] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.242] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.243] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.243] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.243] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.243] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.243] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.243] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.243] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.243] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.244] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.244] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.244] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.244] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.244] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.244] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.244] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.244] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.244] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.244] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.244] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.244] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.244] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.245] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.245] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.245] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.245] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.245] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.245] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.245] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.245] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.245] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.245] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.245] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.245] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.246] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.246] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.246] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.246] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.246] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.246] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.246] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.246] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.246] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.246] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.246] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.246] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.246] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.247] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.247] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.247] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.247] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.247] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.247] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.247] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.247] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.247] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.247] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.247] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.247] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.248] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.248] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.248] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.248] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.248] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.248] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.248] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.248] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.248] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.248] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.248] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.248] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.249] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.249] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.249] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.249] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.249] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.249] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.249] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.249] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.249] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.249] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.249] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.249] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.250] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.250] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.250] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.250] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.250] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.250] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.250] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.250] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.250] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.250] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.250] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.250] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.250] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.251] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.251] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.251] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.251] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.251] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.251] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.251] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.251] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.251] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.251] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.252] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.252] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.252] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.252] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.252] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.252] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.252] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.252] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.252] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.252] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.252] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.252] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.252] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.253] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.253] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.253] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0156.832] GetProcessHeap () returned 0x8a0000 [0156.832] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x50) returned 0x8b1260 [0156.832] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x74c00000 [0156.832] GetProcAddress (hModule=0x74c00000, lpProcName="Wow64RevertWow64FsRedirection") returned 0x74c16b50 [0156.832] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0156.832] GetProcessHeap () returned 0x8a0000 [0156.832] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b1260 | out: hHeap=0x8a0000) returned 1 [0156.833] SetEvent (hEvent=0x300) returned 1 [0156.833] SetEvent (hEvent=0x2fc) returned 1 [0156.833] SetEvent (hEvent=0x304) returned 1 [0156.833] GetProcessHeap () returned 0x8a0000 [0156.833] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3822020 | out: hHeap=0x8a0000) returned 1 [0156.836] GetProcessHeap () returned 0x8a0000 [0156.836] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8e2020 | out: hHeap=0x8a0000) returned 1 [0156.836] GetProcessHeap () returned 0x8a0000 [0156.836] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3610050 | out: hHeap=0x8a0000) returned 1 [0156.838] GetProcessHeap () returned 0x8a0000 [0156.838] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3620058 | out: hHeap=0x8a0000) returned 1 Thread: id = 80 os_tid = 0xec4 [0130.264] GetProcessHeap () returned 0x8a0000 [0130.264] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3630060 [0130.264] GetProcessHeap () returned 0x8a0000 [0130.264] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x10000) returned 0x3640068 [0130.265] GetProcessHeap () returned 0x8a0000 [0130.265] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x28) returned 0x8e2050 [0130.265] GetProcessHeap () returned 0x8a0000 [0130.265] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x110102) returned 0x394f020 [0130.267] GetProcessHeap () returned 0x8a0000 [0130.267] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x50) returned 0x8afbf0 [0130.268] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x74c00000 [0130.268] GetProcAddress (hModule=0x74c00000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x74c16b30 [0130.268] Wow64DisableWow64FsRedirection (in: OldValue=0x34df7d0 | out: OldValue=0x34df7d0*=0x0) returned 1 [0130.268] GetProcessHeap () returned 0x8a0000 [0130.268] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8afbf0 | out: hHeap=0x8a0000) returned 1 [0130.268] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.268] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.268] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.268] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.268] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.268] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.268] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.268] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.269] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.269] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.269] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.269] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.269] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.269] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.269] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.269] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.269] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.269] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.269] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.269] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.270] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.270] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.270] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.270] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.270] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.270] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.270] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.270] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.270] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.270] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.270] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.270] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.271] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.271] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.271] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.271] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.271] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.271] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.271] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.271] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.271] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.271] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.271] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.271] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.271] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.272] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.272] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.272] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.272] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.272] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.272] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.272] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.272] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.272] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.272] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.273] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.273] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.273] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.273] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.273] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.273] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.273] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.273] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.273] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.273] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.273] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.273] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.273] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.274] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.274] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.274] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.274] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.274] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.274] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.274] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.274] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.274] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.274] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.275] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.275] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.275] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.275] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.275] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.275] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.275] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.275] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.275] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.275] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.275] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.275] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.276] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.276] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.276] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.276] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.276] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.276] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.276] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.276] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.276] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.276] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.276] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.276] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.277] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.277] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.277] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.277] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.277] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.277] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.277] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.277] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.277] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.277] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.277] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.277] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.277] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.278] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.278] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.278] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.278] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.278] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.278] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.278] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.278] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.278] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.278] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.278] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.278] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.279] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.279] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.279] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.279] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.279] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.279] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.279] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.279] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.279] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.279] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.279] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.279] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.280] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.280] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.280] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.280] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.280] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.280] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.280] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.280] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.280] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.280] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.280] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.280] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.280] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.281] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.281] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.281] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.281] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.281] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.281] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.281] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.281] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.281] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.281] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.281] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.281] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.282] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.282] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.282] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.282] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.282] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.282] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.282] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.282] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.282] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.282] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.282] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.283] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.283] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.283] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.283] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.283] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.283] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.283] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.283] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.283] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.283] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.283] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.283] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.284] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.284] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.284] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.284] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.284] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.284] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.284] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.284] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.284] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.284] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.284] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.285] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.285] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.285] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.285] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.285] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.285] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.285] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.285] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.285] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.285] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.285] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.285] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.286] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.286] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.286] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.286] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.286] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.286] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.286] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.286] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.286] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.286] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.286] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.286] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.286] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.287] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.287] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.287] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.287] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.287] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.287] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.287] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.287] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.287] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.287] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.287] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.287] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.288] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.288] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.288] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.288] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.288] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.288] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.288] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.288] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.288] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.288] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.288] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.288] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.288] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0130.289] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0156.795] GetProcessHeap () returned 0x8a0000 [0156.795] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x0, Size=0x50) returned 0x8b1260 [0156.795] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x74c00000 [0156.795] GetProcAddress (hModule=0x74c00000, lpProcName="Wow64RevertWow64FsRedirection") returned 0x74c16b50 [0156.795] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0156.795] GetProcessHeap () returned 0x8a0000 [0156.795] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8b1260 | out: hHeap=0x8a0000) returned 1 [0156.796] SetEvent (hEvent=0x300) returned 1 [0156.796] SetEvent (hEvent=0x2fc) returned 1 [0156.796] SetEvent (hEvent=0x304) returned 1 [0156.796] GetProcessHeap () returned 0x8a0000 [0156.796] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x394f020 | out: hHeap=0x8a0000) returned 1 [0156.799] GetProcessHeap () returned 0x8a0000 [0156.799] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x8e2050 | out: hHeap=0x8a0000) returned 1 [0156.799] GetProcessHeap () returned 0x8a0000 [0156.799] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3630060 | out: hHeap=0x8a0000) returned 1 [0156.800] GetProcessHeap () returned 0x8a0000 [0156.800] HeapFree (in: hHeap=0x8a0000, dwFlags=0x0, lpMem=0x3640068 | out: hHeap=0x8a0000) returned 1 Thread: id = 96 os_tid = 0x5e8 Thread: id = 98 os_tid = 0x5c4 Thread: id = 114 os_tid = 0x9d4 Thread: id = 119 os_tid = 0xd08 Process: id = "7" image_name = "shaofao.exe" filename = "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\shaofao.exe" page_root = "0x2f890000" os_pid = "0xdc0" os_integrity_level = "0x2000" os_privileges = "0x40800000" monitor_reason = "autostart" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\shaofao.exe\" " cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00012070" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 41 os_tid = 0xdc4 [0124.700] GetProcessHeap () returned 0x120000 [0124.700] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x30) returned 0x132fd8 [0124.700] GetProcessHeap () returned 0x120000 [0124.700] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x3400) returned 0x13f8a0 [0124.703] GetProcessHeap () returned 0x120000 [0124.704] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x204) returned 0x13d1c8 [0124.704] GetProcessHeap () returned 0x120000 [0124.704] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10) returned 0x13e390 [0124.704] GetTickCount () returned 0x1137536 [0124.704] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x93f630 | out: lpWSAData=0x93f630) returned 0 [0124.707] GetProcessHeap () returned 0x120000 [0124.707] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x1c) returned 0x12af08 [0124.707] GetProcessHeap () returned 0x120000 [0124.707] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x1c) returned 0x12af80 [0124.707] GetVersion () returned 0x23f00206 [0124.707] GetCurrentProcess () returned 0xffffffff [0124.707] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x93f584 | out: TokenHandle=0x93f584*=0x20c) returned 1 [0124.707] GetTokenInformation (in: TokenHandle=0x20c, TokenInformationClass=0x14, TokenInformation=0x93f57c, TokenInformationLength=0x4, ReturnLength=0x93f580 | out: TokenInformation=0x93f57c, ReturnLength=0x93f580) returned 1 [0124.707] CloseHandle (hObject=0x20c) returned 1 [0124.707] GetProcessHeap () returned 0x120000 [0124.707] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x20) returned 0x12b020 [0124.707] GetProcessHeap () returned 0x120000 [0124.707] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x1e) returned 0x1472b8 [0124.708] GetProcessHeap () returned 0x120000 [0124.708] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x1e) returned 0x147498 [0124.708] GetProcessHeap () returned 0x120000 [0124.708] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x90) returned 0x1318f8 [0124.708] GetProcessHeap () returned 0x120000 [0124.708] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1318f8 | out: hHeap=0x120000) returned 1 [0124.708] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x1472b8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0124.708] GetProcessHeap () returned 0x120000 [0124.708] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x147498 | out: hHeap=0x120000) returned 1 [0124.708] GetProcessHeap () returned 0x120000 [0124.708] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x12b020 | out: hHeap=0x120000) returned 1 [0124.708] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x93f524, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x93f524*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0124.708] GetProcessHeap () returned 0x120000 [0124.708] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1472b8 | out: hHeap=0x120000) returned 1 [0124.708] GetProcessHeap () returned 0x120000 [0124.708] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x40) returned 0x131fa8 [0124.708] GetProcessHeap () returned 0x120000 [0124.708] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x3a) returned 0x1320c8 [0124.708] GetProcessHeap () returned 0x120000 [0124.708] RtlReAllocateHeap (Heap=0x120000, Flags=0x0, Ptr=0x1320c8, Size=0x72) returned 0x127068 [0124.708] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x20c [0124.708] WaitForSingleObject (hHandle=0x20c, dwMilliseconds=0x0) returned 0x102 [0124.708] CloseHandle (hObject=0x20c) returned 1 [0124.708] GetProcessHeap () returned 0x120000 [0124.708] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x131fa8 | out: hHeap=0x120000) returned 1 [0124.708] GetProcessHeap () returned 0x120000 [0124.709] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x127068 | out: hHeap=0x120000) returned 1 [0124.709] GetProcessHeap () returned 0x120000 [0124.709] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x20) returned 0x12b020 [0124.709] GetProcessHeap () returned 0x120000 [0124.709] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x1e) returned 0x1475d8 [0124.709] GetProcessHeap () returned 0x120000 [0124.709] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x1e) returned 0x147650 [0124.709] GetProcessHeap () returned 0x120000 [0124.709] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x90) returned 0x1318f8 [0124.709] GetProcessHeap () returned 0x120000 [0124.709] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1318f8 | out: hHeap=0x120000) returned 1 [0124.709] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x1475d8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0124.709] GetProcessHeap () returned 0x120000 [0124.709] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x147650 | out: hHeap=0x120000) returned 1 [0124.709] GetProcessHeap () returned 0x120000 [0124.709] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x12b020 | out: hHeap=0x120000) returned 1 [0124.709] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x93f50c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x93f50c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0124.709] GetProcessHeap () returned 0x120000 [0124.709] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1475d8 | out: hHeap=0x120000) returned 1 [0124.709] GetProcessHeap () returned 0x120000 [0124.709] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x40) returned 0x131db0 [0124.709] GetProcessHeap () returned 0x120000 [0124.709] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x3a) returned 0x1324b8 [0124.709] GetProcessHeap () returned 0x120000 [0124.709] RtlReAllocateHeap (Heap=0x120000, Flags=0x0, Ptr=0x1324b8, Size=0x72) returned 0x1473e0 [0124.709] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0124.709] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x20c [0124.709] WaitForSingleObject (hHandle=0x20c, dwMilliseconds=0x0) returned 0x0 [0124.709] GetProcessHeap () returned 0x120000 [0124.709] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x131db0 | out: hHeap=0x120000) returned 1 [0124.709] GetProcessHeap () returned 0x120000 [0124.709] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1473e0 | out: hHeap=0x120000) returned 1 [0124.710] ReleaseMutex (hMutex=0x20c) returned 1 [0124.710] CloseHandle (hObject=0x20c) returned 1 [0124.710] GetVersion () returned 0x23f00206 [0124.710] GetProcessHeap () returned 0x120000 [0124.710] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x10) returned 0x13e3d8 [0124.710] GetProcessHeap () returned 0x120000 [0124.710] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x20a) returned 0x1477c0 [0124.710] GetCurrentProcess () returned 0xffffffff [0124.710] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x93f54c | out: TokenHandle=0x93f54c*=0x20c) returned 1 [0124.710] GetTokenInformation (in: TokenHandle=0x20c, TokenInformationClass=0x2, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x93f564 | out: TokenInformation=0x0, ReturnLength=0x93f564) returned 0 [0124.710] GetProcessHeap () returned 0x120000 [0124.710] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x140) returned 0x132590 [0124.710] GetTokenInformation (in: TokenHandle=0x20c, TokenInformationClass=0x2, TokenInformation=0x132590, TokenInformationLength=0x140, ReturnLength=0x93f564 | out: TokenInformation=0x132590, ReturnLength=0x93f564) returned 1 [0124.710] AllocateAndInitializeSid (in: pIdentifierAuthority=0x93f558, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x220, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0x93f560 | out: pSid=0x93f560*=0x147ba0*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0124.710] EqualSid (pSid1=0x147ba0*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x132604*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4))) returned 0 [0124.710] EqualSid (pSid1=0x147ba0*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x132620*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x1), SubAuthority=0x0)) returned 0 [0124.710] EqualSid (pSid1=0x147ba0*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x13262c*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x72)) returned 0 [0124.710] EqualSid (pSid1=0x147ba0*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x132638*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0124.710] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x132638*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), Name=0x93f130, cchName=0x93f564, ReferencedDomainName=0x93f33c, cchReferencedDomainName=0x93f564, peUse=0x93f548 | out: Name="Administrators", cchName=0x93f564, ReferencedDomainName="BUILTIN", cchReferencedDomainName=0x93f564, peUse=0x93f548) returned 1 [0124.828] GetProcessHeap () returned 0x120000 [0124.828] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x132590 | out: hHeap=0x120000) returned 1 [0124.828] GetProcessHeap () returned 0x120000 [0124.828] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x50) returned 0x1313d0 [0124.829] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x74c00000 [0124.829] GetProcAddress (hModule=0x74c00000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x74c16b30 [0124.829] Wow64DisableWow64FsRedirection (in: OldValue=0x93f580 | out: OldValue=0x93f580*=0x0) returned 1 [0124.829] GetProcessHeap () returned 0x120000 [0124.829] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1313d0 | out: hHeap=0x120000) returned 1 [0124.829] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1477c0, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\shaofao.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\shaofao.exe")) returned 0x59 [0124.837] ShellExecuteExW (in: pExecInfo=0x93f524*(cbSize=0x3c, fMask=0x100, hwnd=0x0, lpVerb="runas", lpFile="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\shaofao.exe", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x93f524*(cbSize=0x3c, fMask=0x100, hwnd=0x0, lpVerb="runas", lpFile="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\shaofao.exe", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0)) returned 1 [0155.825] GetProcessHeap () returned 0x120000 [0155.825] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x50) returned 0x198d08 [0155.825] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x74c00000 [0155.825] GetProcAddress (hModule=0x74c00000, lpProcName="Wow64RevertWow64FsRedirection") returned 0x74c16b50 [0155.825] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0155.826] GetProcessHeap () returned 0x120000 [0155.826] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x198d08 | out: hHeap=0x120000) returned 1 [0155.826] GetProcessHeap () returned 0x120000 [0155.826] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1477c0 | out: hHeap=0x120000) returned 1 [0155.826] GetProcessHeap () returned 0x120000 [0155.826] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x13e3d8 | out: hHeap=0x120000) returned 1 [0155.826] GetProcessHeap () returned 0x120000 [0155.826] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x20) returned 0x17a640 [0155.826] GetProcessHeap () returned 0x120000 [0155.826] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x1e) returned 0x17a6b8 [0155.826] GetProcessHeap () returned 0x120000 [0155.826] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x1e) returned 0x17ab90 [0155.826] GetProcessHeap () returned 0x120000 [0155.826] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x90) returned 0x12fbe0 [0155.826] GetProcessHeap () returned 0x120000 [0155.826] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x12fbe0 | out: hHeap=0x120000) returned 1 [0155.826] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x17a6b8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0155.826] GetProcessHeap () returned 0x120000 [0155.826] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17ab90 | out: hHeap=0x120000) returned 1 [0155.826] GetProcessHeap () returned 0x120000 [0155.826] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17a640 | out: hHeap=0x120000) returned 1 [0155.826] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x93f50c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x93f50c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0155.827] GetProcessHeap () returned 0x120000 [0155.827] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17a6b8 | out: hHeap=0x120000) returned 1 [0155.827] GetProcessHeap () returned 0x120000 [0155.827] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x40) returned 0x157bf0 [0155.827] GetProcessHeap () returned 0x120000 [0155.827] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x3a) returned 0x1579b0 [0155.827] GetProcessHeap () returned 0x120000 [0155.827] RtlReAllocateHeap (Heap=0x120000, Flags=0x0, Ptr=0x1579b0, Size=0x72) returned 0x17ea10 [0155.827] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0155.827] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x2dc [0155.827] WaitForSingleObject (hHandle=0x2dc, dwMilliseconds=0x0) returned 0x0 [0155.827] GetProcessHeap () returned 0x120000 [0155.827] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x157bf0 | out: hHeap=0x120000) returned 1 [0155.827] GetProcessHeap () returned 0x120000 [0155.827] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17ea10 | out: hHeap=0x120000) returned 1 [0155.827] ReleaseMutex (hMutex=0x2dc) returned 1 [0155.827] CloseHandle (hObject=0x2dc) returned 1 [0155.827] Sleep (dwMilliseconds=0x64) [0156.081] GetProcessHeap () returned 0x120000 [0156.081] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x20) returned 0x17a6b8 [0156.081] GetProcessHeap () returned 0x120000 [0156.081] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x1e) returned 0x17a640 [0156.081] GetProcessHeap () returned 0x120000 [0156.081] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x1e) returned 0x17abb8 [0156.081] GetProcessHeap () returned 0x120000 [0156.081] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x90) returned 0x12fbe0 [0156.081] GetProcessHeap () returned 0x120000 [0156.081] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x12fbe0 | out: hHeap=0x120000) returned 1 [0156.081] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x17a640, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0156.081] GetProcessHeap () returned 0x120000 [0156.081] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17abb8 | out: hHeap=0x120000) returned 1 [0156.081] GetProcessHeap () returned 0x120000 [0156.081] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17a6b8 | out: hHeap=0x120000) returned 1 [0156.081] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x93f50c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x93f50c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0156.081] GetProcessHeap () returned 0x120000 [0156.082] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17a640 | out: hHeap=0x120000) returned 1 [0156.082] GetProcessHeap () returned 0x120000 [0156.082] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x0, Size=0x40) returned 0x1579b0 [0156.082] GetProcessHeap () returned 0x120000 [0156.082] RtlAllocateHeap (HeapHandle=0x120000, Flags=0x8, Size=0x3a) returned 0x157ec0 [0156.082] GetProcessHeap () returned 0x120000 [0156.082] RtlReAllocateHeap (Heap=0x120000, Flags=0x0, Ptr=0x157ec0, Size=0x72) returned 0x17e490 [0156.082] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2dc [0156.082] WaitForSingleObject (hHandle=0x2dc, dwMilliseconds=0x0) returned 0x102 [0156.082] CloseHandle (hObject=0x2dc) returned 1 [0156.082] GetProcessHeap () returned 0x120000 [0156.082] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x1579b0 | out: hHeap=0x120000) returned 1 [0156.082] GetProcessHeap () returned 0x120000 [0156.082] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x17e490 | out: hHeap=0x120000) returned 1 [0156.082] GetProcessHeap () returned 0x120000 [0156.082] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x12af08 | out: hHeap=0x120000) returned 1 [0156.082] GetProcessHeap () returned 0x120000 [0156.082] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x12af80 | out: hHeap=0x120000) returned 1 [0156.082] GetProcessHeap () returned 0x120000 [0156.082] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x13e390 | out: hHeap=0x120000) returned 1 [0156.082] GetProcessHeap () returned 0x120000 [0156.082] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x13d1c8 | out: hHeap=0x120000) returned 1 [0156.082] GetProcessHeap () returned 0x120000 [0156.083] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x13f8a0 | out: hHeap=0x120000) returned 1 [0156.083] GetProcessHeap () returned 0x120000 [0156.083] HeapFree (in: hHeap=0x120000, dwFlags=0x0, lpMem=0x132fd8 | out: hHeap=0x120000) returned 1 [0156.083] ExitProcess (uExitCode=0x0) Thread: id = 44 os_tid = 0xdd4 Thread: id = 46 os_tid = 0xde0 Thread: id = 47 os_tid = 0xde4 Thread: id = 49 os_tid = 0xdec Thread: id = 50 os_tid = 0xdf0 Thread: id = 51 os_tid = 0xdf4 Thread: id = 52 os_tid = 0xdf8 Process: id = "8" image_name = "shaofao.exe" filename = "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\shaofao.exe" page_root = "0x325a6000" os_pid = "0xdc8" os_integrity_level = "0x2000" os_privileges = "0x40800000" monitor_reason = "child_process" parent_id = "6" os_parent_pid = "0xdb4" cmd_line = "\"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\shaofao.exe\"" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00012070" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 42 os_tid = 0xdcc [0124.767] GetProcessHeap () returned 0x850000 [0124.767] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x0, Size=0x30) returned 0x866498 [0124.767] GetProcessHeap () returned 0x850000 [0124.767] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x0, Size=0x3400) returned 0x866a40 [0124.770] GetProcessHeap () returned 0x850000 [0124.770] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x0, Size=0x204) returned 0x869e48 [0124.770] GetProcessHeap () returned 0x850000 [0124.770] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x0, Size=0x10) returned 0x85ae60 [0124.771] GetTickCount () returned 0x1137584 [0124.771] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x37f600 | out: lpWSAData=0x37f600) returned 0 [0124.774] GetProcessHeap () returned 0x850000 [0124.774] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x0, Size=0x1c) returned 0x854460 [0124.774] GetProcessHeap () returned 0x850000 [0124.774] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x0, Size=0x1c) returned 0x855028 [0124.774] GetVersion () returned 0x23f00206 [0124.774] GetCurrentProcess () returned 0xffffffff [0124.774] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x37f554 | out: TokenHandle=0x37f554*=0x1ec) returned 1 [0124.774] GetTokenInformation (in: TokenHandle=0x1ec, TokenInformationClass=0x14, TokenInformation=0x37f54c, TokenInformationLength=0x4, ReturnLength=0x37f550 | out: TokenInformation=0x37f54c, ReturnLength=0x37f550) returned 1 [0124.774] CloseHandle (hObject=0x1ec) returned 1 [0124.774] GetProcessHeap () returned 0x850000 [0124.774] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x0, Size=0x20) returned 0x8545c0 [0124.774] GetProcessHeap () returned 0x850000 [0124.774] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x8, Size=0x1e) returned 0x852cb8 [0124.774] GetProcessHeap () returned 0x850000 [0124.774] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x0, Size=0x1e) returned 0x858370 [0124.774] GetProcessHeap () returned 0x850000 [0124.774] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x0, Size=0x90) returned 0x854a18 [0124.774] GetProcessHeap () returned 0x850000 [0124.774] HeapFree (in: hHeap=0x850000, dwFlags=0x0, lpMem=0x854a18 | out: hHeap=0x850000) returned 1 [0124.774] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x852cb8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0124.774] GetProcessHeap () returned 0x850000 [0124.774] HeapFree (in: hHeap=0x850000, dwFlags=0x0, lpMem=0x858370 | out: hHeap=0x850000) returned 1 [0124.774] GetProcessHeap () returned 0x850000 [0124.774] HeapFree (in: hHeap=0x850000, dwFlags=0x0, lpMem=0x8545c0 | out: hHeap=0x850000) returned 1 [0124.774] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x37f4f4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x37f4f4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0124.774] GetProcessHeap () returned 0x850000 [0124.774] HeapFree (in: hHeap=0x850000, dwFlags=0x0, lpMem=0x852cb8 | out: hHeap=0x850000) returned 1 [0124.775] GetProcessHeap () returned 0x850000 [0124.775] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x0, Size=0x40) returned 0x85e088 [0124.775] GetProcessHeap () returned 0x850000 [0124.775] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x8, Size=0x3a) returned 0x85e0d0 [0124.775] GetProcessHeap () returned 0x850000 [0124.775] RtlReAllocateHeap (Heap=0x850000, Flags=0x0, Ptr=0x85e0d0, Size=0x72) returned 0x853b08 [0124.775] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x1ec [0124.775] WaitForSingleObject (hHandle=0x1ec, dwMilliseconds=0x0) returned 0x102 [0124.775] CloseHandle (hObject=0x1ec) returned 1 [0124.775] GetProcessHeap () returned 0x850000 [0124.775] HeapFree (in: hHeap=0x850000, dwFlags=0x0, lpMem=0x85e088 | out: hHeap=0x850000) returned 1 [0124.775] GetProcessHeap () returned 0x850000 [0124.775] HeapFree (in: hHeap=0x850000, dwFlags=0x0, lpMem=0x853b08 | out: hHeap=0x850000) returned 1 [0124.775] GetProcessHeap () returned 0x850000 [0124.775] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x0, Size=0x20) returned 0x852cb8 [0124.775] GetProcessHeap () returned 0x850000 [0124.775] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x8, Size=0x1e) returned 0x8545c0 [0124.775] GetProcessHeap () returned 0x850000 [0124.775] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x0, Size=0x1e) returned 0x858370 [0124.775] GetProcessHeap () returned 0x850000 [0124.775] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x0, Size=0x90) returned 0x854a18 [0124.775] GetProcessHeap () returned 0x850000 [0124.775] HeapFree (in: hHeap=0x850000, dwFlags=0x0, lpMem=0x854a18 | out: hHeap=0x850000) returned 1 [0124.775] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8545c0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0124.775] GetProcessHeap () returned 0x850000 [0124.775] HeapFree (in: hHeap=0x850000, dwFlags=0x0, lpMem=0x858370 | out: hHeap=0x850000) returned 1 [0124.775] GetProcessHeap () returned 0x850000 [0124.775] HeapFree (in: hHeap=0x850000, dwFlags=0x0, lpMem=0x852cb8 | out: hHeap=0x850000) returned 1 [0124.775] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x37f4dc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x37f4dc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0124.775] GetProcessHeap () returned 0x850000 [0124.775] HeapFree (in: hHeap=0x850000, dwFlags=0x0, lpMem=0x8545c0 | out: hHeap=0x850000) returned 1 [0124.775] GetProcessHeap () returned 0x850000 [0124.775] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x0, Size=0x40) returned 0x85df68 [0124.775] GetProcessHeap () returned 0x850000 [0124.776] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x8, Size=0x3a) returned 0x85dfb0 [0124.776] GetProcessHeap () returned 0x850000 [0124.776] RtlReAllocateHeap (Heap=0x850000, Flags=0x0, Ptr=0x85dfb0, Size=0x72) returned 0x86e8e0 [0124.776] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0124.776] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x1ec [0124.776] WaitForSingleObject (hHandle=0x1ec, dwMilliseconds=0x0) returned 0x0 [0124.776] GetProcessHeap () returned 0x850000 [0124.776] HeapFree (in: hHeap=0x850000, dwFlags=0x0, lpMem=0x85df68 | out: hHeap=0x850000) returned 1 [0124.776] GetProcessHeap () returned 0x850000 [0124.776] HeapFree (in: hHeap=0x850000, dwFlags=0x0, lpMem=0x86e8e0 | out: hHeap=0x850000) returned 1 [0124.776] ReleaseMutex (hMutex=0x1ec) returned 1 [0124.776] CloseHandle (hObject=0x1ec) returned 1 [0124.776] GetVersion () returned 0x23f00206 [0124.776] GetProcessHeap () returned 0x850000 [0124.776] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x0, Size=0x10) returned 0x85ae30 [0124.776] GetProcessHeap () returned 0x850000 [0124.776] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x0, Size=0x20a) returned 0x86f5c0 [0124.776] GetCurrentProcess () returned 0xffffffff [0124.776] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x37f51c | out: TokenHandle=0x37f51c*=0x1ec) returned 1 [0124.776] GetTokenInformation (in: TokenHandle=0x1ec, TokenInformationClass=0x2, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x37f534 | out: TokenInformation=0x0, ReturnLength=0x37f534) returned 0 [0124.776] GetProcessHeap () returned 0x850000 [0124.776] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x0, Size=0x140) returned 0x85b1f8 [0124.776] GetTokenInformation (in: TokenHandle=0x1ec, TokenInformationClass=0x2, TokenInformation=0x85b1f8, TokenInformationLength=0x140, ReturnLength=0x37f534 | out: TokenInformation=0x85b1f8, ReturnLength=0x37f534) returned 1 [0124.776] AllocateAndInitializeSid (in: pIdentifierAuthority=0x37f528, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x220, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0x37f530 | out: pSid=0x37f530*=0x85ae18*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0124.776] EqualSid (pSid1=0x85ae18*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x85b26c*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4))) returned 0 [0124.776] EqualSid (pSid1=0x85ae18*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x85b288*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x1), SubAuthority=0x0)) returned 0 [0124.777] EqualSid (pSid1=0x85ae18*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x85b294*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x72)) returned 0 [0124.777] EqualSid (pSid1=0x85ae18*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x85b2a0*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0124.777] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x85b2a0*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), Name=0x37f100, cchName=0x37f534, ReferencedDomainName=0x37f30c, cchReferencedDomainName=0x37f534, peUse=0x37f518 | out: Name="Administrators", cchName=0x37f534, ReferencedDomainName="BUILTIN", cchReferencedDomainName=0x37f534, peUse=0x37f518) returned 1 [0124.899] GetProcessHeap () returned 0x850000 [0124.899] HeapFree (in: hHeap=0x850000, dwFlags=0x0, lpMem=0x85b1f8 | out: hHeap=0x850000) returned 1 [0124.899] GetProcessHeap () returned 0x850000 [0124.899] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x0, Size=0x50) returned 0x85a7c0 [0124.899] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x74c00000 [0124.899] GetProcAddress (hModule=0x74c00000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x74c16b30 [0124.899] Wow64DisableWow64FsRedirection (in: OldValue=0x37f550 | out: OldValue=0x37f550*=0x0) returned 1 [0124.899] GetProcessHeap () returned 0x850000 [0124.899] HeapFree (in: hHeap=0x850000, dwFlags=0x0, lpMem=0x85a7c0 | out: hHeap=0x850000) returned 1 [0124.899] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x86f5c0, nSize=0x104 | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\shaofao.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\shaofao.exe")) returned 0x48 [0124.899] ShellExecuteExW (in: pExecInfo=0x37f4f4*(cbSize=0x3c, fMask=0x100, hwnd=0x0, lpVerb="runas", lpFile="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\shaofao.exe", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x37f4f4*(cbSize=0x3c, fMask=0x100, hwnd=0x0, lpVerb="runas", lpFile="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\shaofao.exe", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0)) returned 1 [0161.186] GetProcessHeap () returned 0x850000 [0161.186] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x0, Size=0x50) returned 0x894568 [0161.187] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x74c00000 [0161.187] GetProcAddress (hModule=0x74c00000, lpProcName="Wow64RevertWow64FsRedirection") returned 0x74c16b50 [0161.187] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0161.187] GetProcessHeap () returned 0x850000 [0161.187] HeapFree (in: hHeap=0x850000, dwFlags=0x0, lpMem=0x894568 | out: hHeap=0x850000) returned 1 [0161.187] GetProcessHeap () returned 0x850000 [0161.187] HeapFree (in: hHeap=0x850000, dwFlags=0x0, lpMem=0x86f5c0 | out: hHeap=0x850000) returned 1 [0161.187] GetProcessHeap () returned 0x850000 [0161.187] HeapFree (in: hHeap=0x850000, dwFlags=0x0, lpMem=0x85ae30 | out: hHeap=0x850000) returned 1 [0161.187] GetProcessHeap () returned 0x850000 [0161.187] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x0, Size=0x20) returned 0x89a9d0 [0161.187] GetProcessHeap () returned 0x850000 [0161.187] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x8, Size=0x1e) returned 0x89aa48 [0161.187] GetProcessHeap () returned 0x850000 [0161.187] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x0, Size=0x1e) returned 0x89aa70 [0161.187] GetProcessHeap () returned 0x850000 [0161.187] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x0, Size=0x90) returned 0x870868 [0161.187] GetProcessHeap () returned 0x850000 [0161.187] HeapFree (in: hHeap=0x850000, dwFlags=0x0, lpMem=0x870868 | out: hHeap=0x850000) returned 1 [0161.187] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x89aa48, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0161.187] GetProcessHeap () returned 0x850000 [0161.187] HeapFree (in: hHeap=0x850000, dwFlags=0x0, lpMem=0x89aa70 | out: hHeap=0x850000) returned 1 [0161.187] GetProcessHeap () returned 0x850000 [0161.187] HeapFree (in: hHeap=0x850000, dwFlags=0x0, lpMem=0x89a9d0 | out: hHeap=0x850000) returned 1 [0161.187] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x37f4dc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x37f4dc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0161.187] GetProcessHeap () returned 0x850000 [0161.188] HeapFree (in: hHeap=0x850000, dwFlags=0x0, lpMem=0x89aa48 | out: hHeap=0x850000) returned 1 [0161.188] GetProcessHeap () returned 0x850000 [0161.188] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x0, Size=0x40) returned 0x881850 [0161.188] GetProcessHeap () returned 0x850000 [0161.188] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x8, Size=0x3a) returned 0x880f98 [0161.188] GetProcessHeap () returned 0x850000 [0161.188] RtlReAllocateHeap (Heap=0x850000, Flags=0x0, Ptr=0x880f98, Size=0x72) returned 0x86f460 [0161.188] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x25c [0161.188] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0x0) returned 0x102 [0161.188] CloseHandle (hObject=0x25c) returned 1 [0161.188] GetProcessHeap () returned 0x850000 [0161.188] HeapFree (in: hHeap=0x850000, dwFlags=0x0, lpMem=0x881850 | out: hHeap=0x850000) returned 1 [0161.188] GetProcessHeap () returned 0x850000 [0161.188] HeapFree (in: hHeap=0x850000, dwFlags=0x0, lpMem=0x86f460 | out: hHeap=0x850000) returned 1 [0161.188] GetProcessHeap () returned 0x850000 [0161.188] HeapFree (in: hHeap=0x850000, dwFlags=0x0, lpMem=0x854460 | out: hHeap=0x850000) returned 1 [0161.188] GetProcessHeap () returned 0x850000 [0161.188] HeapFree (in: hHeap=0x850000, dwFlags=0x0, lpMem=0x855028 | out: hHeap=0x850000) returned 1 [0161.188] GetProcessHeap () returned 0x850000 [0161.188] HeapFree (in: hHeap=0x850000, dwFlags=0x0, lpMem=0x85ae60 | out: hHeap=0x850000) returned 1 [0161.188] GetProcessHeap () returned 0x850000 [0161.188] HeapFree (in: hHeap=0x850000, dwFlags=0x0, lpMem=0x869e48 | out: hHeap=0x850000) returned 1 [0161.188] GetProcessHeap () returned 0x850000 [0161.188] HeapFree (in: hHeap=0x850000, dwFlags=0x0, lpMem=0x866a40 | out: hHeap=0x850000) returned 1 [0161.188] GetProcessHeap () returned 0x850000 [0161.188] HeapFree (in: hHeap=0x850000, dwFlags=0x0, lpMem=0x866498 | out: hHeap=0x850000) returned 1 [0161.188] ExitProcess (uExitCode=0x0) Thread: id = 43 os_tid = 0xdd0 Thread: id = 45 os_tid = 0xddc Thread: id = 48 os_tid = 0xde8 Thread: id = 53 os_tid = 0xdfc Thread: id = 54 os_tid = 0xe00 Thread: id = 55 os_tid = 0xe04 Thread: id = 56 os_tid = 0xe08 Process: id = "9" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x4aede000" os_pid = "0x578" os_integrity_level = "0x4000" os_privileges = "0x260814080" monitor_reason = "rpc_server" parent_id = "7" os_parent_pid = "0xdc0" cmd_line = "C:\\WINDOWS\\system32\\svchost.exe -k appmodel" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EntAppSvc" [0xa], "NT SERVICE\\StateRepository" [0xe], "NT SERVICE\\tiledatamodelsvc" [0xa], "NT SERVICE\\WalletService" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000f589" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 57 os_tid = 0xa44 Thread: id = 58 os_tid = 0xa40 Thread: id = 59 os_tid = 0xa24 Thread: id = 60 os_tid = 0x990 Thread: id = 61 os_tid = 0x98c Thread: id = 62 os_tid = 0x980 Thread: id = 63 os_tid = 0x614 Thread: id = 64 os_tid = 0x5f0 Thread: id = 65 os_tid = 0x5b4 Thread: id = 66 os_tid = 0x5b0 Thread: id = 67 os_tid = 0x5ac Thread: id = 68 os_tid = 0x580 Thread: id = 69 os_tid = 0x57c Process: id = "10" image_name = "shaofao.exe" filename = "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\shaofao.exe" page_root = "0x25d95000" os_pid = "0xf90" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "7" os_parent_pid = "0xdc0" cmd_line = "\"C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\shaofao.exe\" " cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00012070" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 81 os_tid = 0xf94 [0155.844] GetProcessHeap () returned 0x12c0000 [0155.844] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x30) returned 0x12d31a0 [0155.844] GetProcessHeap () returned 0x12c0000 [0155.844] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x3400) returned 0x12df860 [0155.849] GetProcessHeap () returned 0x12c0000 [0155.849] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x204) returned 0x12dd188 [0155.850] GetProcessHeap () returned 0x12c0000 [0155.850] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10) returned 0x12de398 [0155.850] GetTickCount () returned 0x113eeea [0155.850] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0xdff600 | out: lpWSAData=0xdff600) returned 0 [0155.854] GetProcessHeap () returned 0x12c0000 [0155.854] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1c) returned 0x12cb230 [0155.854] GetProcessHeap () returned 0x12c0000 [0155.854] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1c) returned 0x12caee8 [0155.854] GetVersion () returned 0x23f00206 [0155.854] GetCurrentProcess () returned 0xffffffff [0155.854] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0xdff554 | out: TokenHandle=0xdff554*=0x20c) returned 1 [0155.854] GetTokenInformation (in: TokenHandle=0x20c, TokenInformationClass=0x14, TokenInformation=0xdff54c, TokenInformationLength=0x4, ReturnLength=0xdff550 | out: TokenInformation=0xdff54c, ReturnLength=0xdff550) returned 1 [0155.854] CloseHandle (hObject=0x20c) returned 1 [0155.854] GetProcessHeap () returned 0x12c0000 [0155.854] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12caf88 [0155.854] GetProcessHeap () returned 0x12c0000 [0155.854] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12e7230 [0155.854] GetProcessHeap () returned 0x12c0000 [0155.854] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e) returned 0x12e7320 [0155.854] GetProcessHeap () returned 0x12c0000 [0155.855] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x12d1f90 [0155.855] GetProcessHeap () returned 0x12c0000 [0155.855] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d1f90 | out: hHeap=0x12c0000) returned 1 [0155.855] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x12e7230, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0155.855] GetProcessHeap () returned 0x12c0000 [0155.855] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e7320 | out: hHeap=0x12c0000) returned 1 [0155.855] GetProcessHeap () returned 0x12c0000 [0155.855] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12caf88 | out: hHeap=0x12c0000) returned 1 [0155.855] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xdff4f4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xdff4f4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0155.855] GetProcessHeap () returned 0x12c0000 [0155.855] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e7230 | out: hHeap=0x12c0000) returned 1 [0155.855] GetProcessHeap () returned 0x12c0000 [0155.855] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x40) returned 0x12d2b08 [0155.855] GetProcessHeap () returned 0x12c0000 [0155.855] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x3a) returned 0x12d2520 [0155.855] GetProcessHeap () returned 0x12c0000 [0155.855] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d2520, Size=0x72) returned 0x12ce7a0 [0155.855] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0155.855] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x20c [0155.855] WaitForSingleObject (hHandle=0x20c, dwMilliseconds=0x0) returned 0x0 [0155.856] GetProcessHeap () returned 0x12c0000 [0155.856] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2b08 | out: hHeap=0x12c0000) returned 1 [0155.856] GetProcessHeap () returned 0x12c0000 [0155.856] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12ce7a0 | out: hHeap=0x12c0000) returned 1 [0155.856] GetProcessHeap () returned 0x12c0000 [0155.856] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12caf88 [0155.856] GetProcessHeap () returned 0x12c0000 [0155.856] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12e71e0 [0155.856] GetProcessHeap () returned 0x12c0000 [0155.856] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e) returned 0x12e7028 [0155.856] GetProcessHeap () returned 0x12c0000 [0155.856] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x12d1f90 [0155.856] GetProcessHeap () returned 0x12c0000 [0155.856] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d1f90 | out: hHeap=0x12c0000) returned 1 [0155.856] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x12e71e0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0155.856] GetProcessHeap () returned 0x12c0000 [0155.856] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e7028 | out: hHeap=0x12c0000) returned 1 [0155.856] GetProcessHeap () returned 0x12c0000 [0155.856] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12caf88 | out: hHeap=0x12c0000) returned 1 [0155.856] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xdff4dc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xdff4dc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0155.856] GetProcessHeap () returned 0x12c0000 [0155.856] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e71e0 | out: hHeap=0x12c0000) returned 1 [0155.856] GetProcessHeap () returned 0x12c0000 [0155.856] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x40) returned 0x12d2a30 [0155.856] GetProcessHeap () returned 0x12c0000 [0155.856] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x3a) returned 0x12d2958 [0155.856] GetProcessHeap () returned 0x12c0000 [0155.857] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d2958, Size=0x72) returned 0x12e6ff8 [0155.857] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x210 [0155.857] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0x0) returned 0x102 [0155.857] CloseHandle (hObject=0x210) returned 1 [0155.857] GetProcessHeap () returned 0x12c0000 [0155.857] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2a30 | out: hHeap=0x12c0000) returned 1 [0155.857] GetProcessHeap () returned 0x12c0000 [0155.857] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e6ff8 | out: hHeap=0x12c0000) returned 1 [0155.857] GetProcessHeap () returned 0x12c0000 [0155.857] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x60) returned 0x12ce7a0 [0155.857] GetProcessHeap () returned 0x12c0000 [0155.857] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x5c) returned 0x12c7070 [0155.857] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x1023c1a, lpParameter=0x12c7070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x210 [0155.858] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0x1388) returned 0x102 [0160.914] CloseHandle (hObject=0x210) returned 1 [0160.914] GetProcessHeap () returned 0x12c0000 [0160.914] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12ce7a0 | out: hHeap=0x12c0000) returned 1 [0160.914] GetProcessHeap () returned 0x12c0000 [0160.914] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x60) returned 0x12ce7a0 [0160.914] GetProcessHeap () returned 0x12c0000 [0160.914] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12caf88 [0160.914] GetProcessHeap () returned 0x12c0000 [0160.914] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12e86a8 [0160.914] GetProcessHeap () returned 0x12c0000 [0160.914] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e) returned 0x12e8748 [0160.914] GetProcessHeap () returned 0x12c0000 [0160.914] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x12d1f90 [0160.914] GetProcessHeap () returned 0x12c0000 [0160.914] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d1f90 | out: hHeap=0x12c0000) returned 1 [0160.914] ExpandEnvironmentStringsW (in: lpSrc="%localappdata%", lpDst=0x12e86a8, nSize=0xf | out: lpDst="") returned 0x1e [0160.914] GetProcessHeap () returned 0x12c0000 [0160.915] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8748 | out: hHeap=0x12c0000) returned 1 [0160.915] GetProcessHeap () returned 0x12c0000 [0160.915] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12e86a8, Size=0x3a) returned 0x12d2b08 [0160.915] GetProcessHeap () returned 0x12c0000 [0160.915] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x3a) returned 0x12d27f0 [0160.915] GetProcessHeap () returned 0x12c0000 [0160.915] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x12d1f90 [0160.915] GetProcessHeap () returned 0x12c0000 [0160.915] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d1f90 | out: hHeap=0x12c0000) returned 1 [0160.915] ExpandEnvironmentStringsW (in: lpSrc="%localappdata%", lpDst=0x12d2b08, nSize=0x1d | out: lpDst="") returned 0x1e [0160.915] GetProcessHeap () returned 0x12c0000 [0160.915] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d27f0 | out: hHeap=0x12c0000) returned 1 [0160.915] GetProcessHeap () returned 0x12c0000 [0160.915] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d2b08, Size=0x72) returned 0x12e7378 [0160.915] GetProcessHeap () returned 0x12c0000 [0160.915] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x72) returned 0x12e7278 [0160.915] GetProcessHeap () returned 0x12c0000 [0160.915] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x12d1f90 [0160.915] GetProcessHeap () returned 0x12c0000 [0160.915] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d1f90 | out: hHeap=0x12c0000) returned 1 [0160.915] ExpandEnvironmentStringsW (in: lpSrc="%localappdata%", lpDst=0x12e7378, nSize=0x39 | out: lpDst="C:\\Users\\FD1HVy\\AppData\\Local") returned 0x1e [0160.915] GetProcessHeap () returned 0x12c0000 [0160.915] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e7278 | out: hHeap=0x12c0000) returned 1 [0160.915] GetProcessHeap () returned 0x12c0000 [0160.915] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12caf88 | out: hHeap=0x12c0000) returned 1 [0160.915] GetProcessHeap () returned 0x12c0000 [0160.915] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x40) returned 0x12d2520 [0160.915] GetProcessHeap () returned 0x12c0000 [0160.915] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x3e) returned 0x12d2718 [0160.915] GetProcessHeap () returned 0x12c0000 [0160.915] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x3e) returned 0x12d2568 [0160.915] GetProcessHeap () returned 0x12c0000 [0160.915] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x12d1f90 [0160.915] GetProcessHeap () returned 0x12c0000 [0160.915] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x10) returned 0x12e7940 [0160.915] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0xdff434 | out: phkResult=0xdff434*=0x234) returned 0x0 [0160.916] RegQueryValueExW (in: hKey=0x234, lpValueName="Startup", lpReserved=0x0, lpType=0xdff430, lpData=0x12d2568, lpcbData=0xdff438*=0x3e | out: lpType=0xdff430*=0x2, lpData=0x12d2568*=0x0, lpcbData=0xdff438*=0x98) returned 0xea [0160.916] RegCloseKey (hKey=0x234) returned 0x0 [0160.916] GetProcessHeap () returned 0x12c0000 [0160.916] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e7940 | out: hHeap=0x12c0000) returned 1 [0160.916] GetProcessHeap () returned 0x12c0000 [0160.916] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d1f90 | out: hHeap=0x12c0000) returned 1 [0160.916] GetProcessHeap () returned 0x12c0000 [0160.916] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2568 | out: hHeap=0x12c0000) returned 1 [0160.916] GetProcessHeap () returned 0x12c0000 [0160.916] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d2718, Size=0x7a) returned 0x12d1f90 [0160.916] GetProcessHeap () returned 0x12c0000 [0160.916] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x7a) returned 0x12d2148 [0160.916] GetProcessHeap () returned 0x12c0000 [0160.916] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x12cfa10 [0160.916] GetProcessHeap () returned 0x12c0000 [0160.916] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x10) returned 0x12e7970 [0160.916] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0xdff434 | out: phkResult=0xdff434*=0x234) returned 0x0 [0160.916] RegQueryValueExW (in: hKey=0x234, lpValueName="Startup", lpReserved=0x0, lpType=0xdff430, lpData=0x12d2148, lpcbData=0xdff438*=0x7a | out: lpType=0xdff430*=0x2, lpData=0x12d2148*=0x10, lpcbData=0xdff438*=0x98) returned 0xea [0160.916] RegCloseKey (hKey=0x234) returned 0x0 [0160.916] GetProcessHeap () returned 0x12c0000 [0160.916] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e7970 | out: hHeap=0x12c0000) returned 1 [0160.916] GetProcessHeap () returned 0x12c0000 [0160.916] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12cfa10 | out: hHeap=0x12c0000) returned 1 [0160.916] GetProcessHeap () returned 0x12c0000 [0160.916] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2148 | out: hHeap=0x12c0000) returned 1 [0160.916] GetProcessHeap () returned 0x12c0000 [0160.916] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d1f90, Size=0xf2) returned 0x12d13e8 [0160.916] GetProcessHeap () returned 0x12c0000 [0160.916] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0xf2) returned 0x12d0278 [0160.916] GetProcessHeap () returned 0x12c0000 [0160.916] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x12d1f90 [0160.917] GetProcessHeap () returned 0x12c0000 [0160.917] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x10) returned 0x12e7a00 [0160.917] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0xdff434 | out: phkResult=0xdff434*=0x234) returned 0x0 [0160.917] RegQueryValueExW (in: hKey=0x234, lpValueName="Startup", lpReserved=0x0, lpType=0xdff430, lpData=0x12d0278, lpcbData=0xdff438*=0xf2 | out: lpType=0xdff430*=0x2, lpData="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0xdff438*=0x98) returned 0x0 [0160.917] RegCloseKey (hKey=0x234) returned 0x0 [0160.917] GetProcessHeap () returned 0x12c0000 [0160.917] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e7a00 | out: hHeap=0x12c0000) returned 1 [0160.917] GetProcessHeap () returned 0x12c0000 [0160.917] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12caf88 [0160.917] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0xdff434 | out: phkResult=0xdff434*=0x234) returned 0x0 [0160.917] RegQueryValueExW (in: hKey=0x234, lpValueName="Common Startup", lpReserved=0x0, lpType=0xdff430, lpData=0x12d0310, lpcbData=0xdff438*=0x5a | out: lpType=0xdff430*=0x0, lpData=0x12d0310*=0x1a, lpcbData=0xdff438*=0x5a) returned 0x2 [0160.917] RegCloseKey (hKey=0x234) returned 0x0 [0160.917] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0xdff448 | out: phkResult=0xdff448*=0x234) returned 0x0 [0160.917] RegQueryValueExW (in: hKey=0x234, lpValueName="Common Startup", lpReserved=0x0, lpType=0xdff444, lpData=0x12d0310, lpcbData=0xdff44c*=0x5a | out: lpType=0xdff444*=0x2, lpData=0x12d0310*=0x1a, lpcbData=0xdff44c*=0x78) returned 0xea [0160.917] RegCloseKey (hKey=0x234) returned 0x0 [0160.917] GetProcessHeap () returned 0x12c0000 [0160.917] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12caf88 | out: hHeap=0x12c0000) returned 1 [0160.917] GetProcessHeap () returned 0x12c0000 [0160.917] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d1f90 | out: hHeap=0x12c0000) returned 1 [0160.917] GetProcessHeap () returned 0x12c0000 [0160.917] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d0278 | out: hHeap=0x12c0000) returned 1 [0160.917] GetProcessHeap () returned 0x12c0000 [0160.917] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d13e8, Size=0x1e2) returned 0x12de660 [0160.917] GetProcessHeap () returned 0x12c0000 [0160.917] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e2) returned 0x12e8cc8 [0160.917] GetProcessHeap () returned 0x12c0000 [0160.917] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x12d1f90 [0160.917] GetProcessHeap () returned 0x12c0000 [0160.918] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x10) returned 0x12e7a18 [0160.918] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0xdff434 | out: phkResult=0xdff434*=0x234) returned 0x0 [0160.918] RegQueryValueExW (in: hKey=0x234, lpValueName="Startup", lpReserved=0x0, lpType=0xdff430, lpData=0x12e8cc8, lpcbData=0xdff438*=0x1e2 | out: lpType=0xdff430*=0x2, lpData="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0xdff438*=0x98) returned 0x0 [0160.918] RegCloseKey (hKey=0x234) returned 0x0 [0160.918] GetProcessHeap () returned 0x12c0000 [0160.918] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e7a18 | out: hHeap=0x12c0000) returned 1 [0160.918] GetProcessHeap () returned 0x12c0000 [0160.918] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12caf88 [0160.918] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0xdff434 | out: phkResult=0xdff434*=0x234) returned 0x0 [0160.918] RegQueryValueExW (in: hKey=0x234, lpValueName="Common Startup", lpReserved=0x0, lpType=0xdff430, lpData=0x12e8d60, lpcbData=0xdff438*=0x14a | out: lpType=0xdff430*=0x0, lpData=0x12e8d60*=0x0, lpcbData=0xdff438*=0x14a) returned 0x2 [0160.918] RegCloseKey (hKey=0x234) returned 0x0 [0160.918] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0xdff448 | out: phkResult=0xdff448*=0x234) returned 0x0 [0160.918] RegQueryValueExW (in: hKey=0x234, lpValueName="Common Startup", lpReserved=0x0, lpType=0xdff444, lpData=0x12e8d60, lpcbData=0xdff44c*=0x14a | out: lpType=0xdff444*=0x2, lpData="%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0xdff44c*=0x78) returned 0x0 [0160.918] RegCloseKey (hKey=0x234) returned 0x0 [0160.918] GetProcessHeap () returned 0x12c0000 [0160.918] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12caf88 | out: hHeap=0x12c0000) returned 1 [0160.918] GetProcessHeap () returned 0x12c0000 [0160.918] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d1f90 | out: hHeap=0x12c0000) returned 1 [0160.918] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup;%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpDst=0x12de660, nSize=0xf1 | out: lpDst="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup;C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned 0x8b [0160.918] GetProcessHeap () returned 0x12c0000 [0160.918] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8cc8 | out: hHeap=0x12c0000) returned 1 [0160.918] GetProcessHeap () returned 0x12c0000 [0160.918] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2520 | out: hHeap=0x12c0000) returned 1 [0160.918] GetProcessHeap () returned 0x12c0000 [0160.918] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20a) returned 0x12e8cc8 [0160.918] GetProcessHeap () returned 0x12c0000 [0160.918] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20a) returned 0x12e8ee0 [0160.918] GetProcessHeap () returned 0x12c0000 [0160.918] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20a) returned 0x12e90f8 [0160.918] GetProcessHeap () returned 0x12c0000 [0160.919] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20a) returned 0x12e9310 [0160.919] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x12e8cc8, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\shaofao.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\shaofao.exe")) returned 0x59 [0160.919] GetProcessHeap () returned 0x12c0000 [0160.919] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20a) returned 0x12e9528 [0160.919] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x12e9528, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\shaofao.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\shaofao.exe")) returned 0x59 [0160.919] GetProcessHeap () returned 0x12c0000 [0160.919] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e9528 | out: hHeap=0x12c0000) returned 1 [0160.919] GetProcessHeap () returned 0x12c0000 [0160.919] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20a) returned 0x12e9528 [0160.919] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x12e9528, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\shaofao.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\shaofao.exe")) returned 0x59 [0160.919] GetProcessHeap () returned 0x12c0000 [0160.919] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e9528 | out: hHeap=0x12c0000) returned 1 [0160.919] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\shaofao.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\shaofao.exe"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\shaofao.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\shaofao.exe"), bFailIfExists=0) returned 1 [0160.931] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x20106, phkResult=0xdff530 | out: phkResult=0xdff530*=0x234) returned 0x0 [0160.931] RegSetValueExW (in: hKey=0x234, lpValueName="shaofao", Reserved=0x0, dwType=0x1, lpData="C:\\Users\\FD1HVy\\AppData\\Local\\shaofao.exe", cbData=0x52 | out: lpData="C:\\Users\\FD1HVy\\AppData\\Local\\shaofao.exe") returned 0x0 [0160.932] RegCloseKey (hKey=0x234) returned 0x0 [0160.932] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x20106, phkResult=0xdff52c | out: phkResult=0xdff52c*=0x234) returned 0x0 [0160.932] RegSetValueExW (in: hKey=0x234, lpValueName="shaofao", Reserved=0x0, dwType=0x1, lpData="C:\\Users\\FD1HVy\\AppData\\Local\\shaofao.exe", cbData=0x52 | out: lpData="C:\\Users\\FD1HVy\\AppData\\Local\\shaofao.exe") returned 0x0 [0160.932] RegCloseKey (hKey=0x234) returned 0x0 [0160.932] GetProcessHeap () returned 0x12c0000 [0160.932] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x118) returned 0x12ce2a8 [0160.933] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\shaofao.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\shaofao.exe"), lpNewFileName="c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\shaofao.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\shaofao.exe"), bFailIfExists=1) returned 0 [0160.933] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\shaofao.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\shaofao.exe"), lpNewFileName="c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\shaofao.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\shaofao.exe"), bFailIfExists=1) returned 0 [0160.934] GetProcessHeap () returned 0x12c0000 [0160.934] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12ce2a8 | out: hHeap=0x12c0000) returned 1 [0160.934] GetProcessHeap () returned 0x12c0000 [0160.934] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8cc8 | out: hHeap=0x12c0000) returned 1 [0160.934] GetProcessHeap () returned 0x12c0000 [0160.934] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8ee0 | out: hHeap=0x12c0000) returned 1 [0160.934] GetProcessHeap () returned 0x12c0000 [0160.934] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e90f8 | out: hHeap=0x12c0000) returned 1 [0160.934] GetProcessHeap () returned 0x12c0000 [0160.934] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e9310 | out: hHeap=0x12c0000) returned 1 [0160.934] GetProcessHeap () returned 0x12c0000 [0160.934] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12ce7a0 | out: hHeap=0x12c0000) returned 1 [0160.934] GetProcessHeap () returned 0x12c0000 [0160.934] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e7378 | out: hHeap=0x12c0000) returned 1 [0160.934] GetProcessHeap () returned 0x12c0000 [0160.934] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12de660 | out: hHeap=0x12c0000) returned 1 [0160.934] GetProcessHeap () returned 0x12c0000 [0160.934] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12e8b30 [0160.934] GetProcessHeap () returned 0x12c0000 [0160.934] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12e8b80 [0160.934] GetProcessHeap () returned 0x12c0000 [0160.934] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e) returned 0x12e8a18 [0160.934] GetProcessHeap () returned 0x12c0000 [0160.934] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x12d1f90 [0160.934] GetProcessHeap () returned 0x12c0000 [0160.934] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d1f90 | out: hHeap=0x12c0000) returned 1 [0160.934] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x12e8b80, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0160.934] GetProcessHeap () returned 0x12c0000 [0160.934] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8a18 | out: hHeap=0x12c0000) returned 1 [0160.934] GetProcessHeap () returned 0x12c0000 [0160.934] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b30 | out: hHeap=0x12c0000) returned 1 [0160.934] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xdff54c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xdff54c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0160.935] GetProcessHeap () returned 0x12c0000 [0160.935] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b80 | out: hHeap=0x12c0000) returned 1 [0160.935] GetProcessHeap () returned 0x12c0000 [0160.935] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x28) returned 0x12d6c80 [0160.935] GetProcessHeap () returned 0x12c0000 [0160.935] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10) returned 0x12e7a00 [0160.935] GetProcessHeap () returned 0x12c0000 [0160.935] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x60) returned 0x12ce7a0 [0160.935] GetProcessHeap () returned 0x12c0000 [0160.935] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x60) returned 0x12d1f90 [0160.935] GetProcessHeap () returned 0x12c0000 [0160.935] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d1f90, Size=0xbe) returned 0x12cfa10 [0160.935] GetProcessHeap () returned 0x12c0000 [0160.935] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10) returned 0x12e79d0 [0160.935] GetProcessHeap () returned 0x12c0000 [0160.935] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x180) returned 0x12d2258 [0160.935] GetProcessHeap () returned 0x12c0000 [0160.935] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x250) returned 0x12e8cc8 [0160.935] GetProcessHeap () returned 0x12c0000 [0160.935] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x12d1f90 [0160.935] GetProcessHeap () returned 0x12c0000 [0160.935] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x84) returned 0x12d2148 [0160.935] GetProcessHeap () returned 0x12c0000 [0160.935] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x84) returned 0x12ce500 [0160.935] GetProcessHeap () returned 0x12c0000 [0160.935] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x12d2f38 [0160.935] GetProcessHeap () returned 0x12c0000 [0160.935] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2f38 | out: hHeap=0x12c0000) returned 1 [0160.935] ExpandEnvironmentStringsW (in: lpSrc="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys", lpDst=0x12d2148, nSize=0x42 | out: lpDst="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys") returned 0x42 [0160.935] GetProcessHeap () returned 0x12c0000 [0160.935] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12ce500 | out: hHeap=0x12c0000) returned 1 [0160.935] GetProcessHeap () returned 0x12c0000 [0160.935] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d1f90 | out: hHeap=0x12c0000) returned 1 [0160.935] GetProcessHeap () returned 0x12c0000 [0160.935] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0xc0) returned 0x12ce500 [0160.935] GetProcessHeap () returned 0x12c0000 [0160.935] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0xb2) returned 0x12d2f38 [0160.935] GetProcessHeap () returned 0x12c0000 [0160.935] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0xb2) returned 0x12d1688 [0160.936] GetProcessHeap () returned 0x12c0000 [0160.936] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x12d1f90 [0160.936] GetProcessHeap () returned 0x12c0000 [0160.936] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d1f90 | out: hHeap=0x12c0000) returned 1 [0160.936] ExpandEnvironmentStringsW (in: lpSrc="C:\\Windows;C:\\ProgramData\\microsoft\\windows\\caches;C:\\Users\\WR\\microsoft\\windows\\caches;", lpDst=0x12d2f38, nSize=0x59 | out: lpDst="C:\\Windows;C:\\ProgramData\\microsoft\\windows\\caches;C:\\Users\\WR\\microsoft\\windows\\caches;") returned 0x59 [0160.936] GetProcessHeap () returned 0x12c0000 [0160.936] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d1688 | out: hHeap=0x12c0000) returned 1 [0160.936] GetProcessHeap () returned 0x12c0000 [0160.936] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12ce500 | out: hHeap=0x12c0000) returned 1 [0160.936] GetProcessHeap () returned 0x12c0000 [0160.936] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20a) returned 0x12e8f20 [0160.936] GetProcessHeap () returned 0x12c0000 [0160.936] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20a) returned 0x12e9138 [0160.936] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x12e9138, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\shaofao.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\shaofao.exe")) returned 0x59 [0160.936] GetProcessHeap () returned 0x12c0000 [0160.936] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e9138 | out: hHeap=0x12c0000) returned 1 [0160.936] GetProcessHeap () returned 0x12c0000 [0160.936] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x174) returned 0x12d18e8 [0160.936] GetProcessHeap () returned 0x12c0000 [0160.936] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d18e8, Size=0x3c2) returned 0x12e9138 [0160.936] GetProcessHeap () returned 0x12c0000 [0160.936] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x86) returned 0x12d1f90 [0160.936] GetProcessHeap () returned 0x12c0000 [0160.936] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d1f90, Size=0x9e) returned 0x12d1f90 [0160.936] GetProcessHeap () returned 0x12c0000 [0160.936] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0xb4) returned 0x12ce500 [0160.936] GetProcessHeap () returned 0x12c0000 [0160.936] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8f20 | out: hHeap=0x12c0000) returned 1 [0160.936] GetProcessHeap () returned 0x12c0000 [0160.936] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2258 | out: hHeap=0x12c0000) returned 1 [0160.936] GetProcessHeap () returned 0x12c0000 [0160.936] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8cc8 | out: hHeap=0x12c0000) returned 1 [0160.936] GetProcessHeap () returned 0x12c0000 [0160.936] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2148 | out: hHeap=0x12c0000) returned 1 [0160.936] GetProcessHeap () returned 0x12c0000 [0160.936] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2f38 | out: hHeap=0x12c0000) returned 1 [0160.936] GetProcessHeap () returned 0x12c0000 [0160.936] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e7a00 | out: hHeap=0x12c0000) returned 1 [0160.936] GetProcessHeap () returned 0x12c0000 [0160.936] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12ce7a0 | out: hHeap=0x12c0000) returned 1 [0160.936] GetProcessHeap () returned 0x12c0000 [0160.936] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12e8c98 [0160.937] GetProcessHeap () returned 0x12c0000 [0160.937] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12e8b30 [0160.937] GetProcessHeap () returned 0x12c0000 [0160.937] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e) returned 0x12e8a18 [0160.937] GetProcessHeap () returned 0x12c0000 [0160.937] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x12d2148 [0160.937] GetProcessHeap () returned 0x12c0000 [0160.937] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2148 | out: hHeap=0x12c0000) returned 1 [0160.937] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x12e8b30, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0160.937] GetProcessHeap () returned 0x12c0000 [0160.937] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8a18 | out: hHeap=0x12c0000) returned 1 [0160.937] GetProcessHeap () returned 0x12c0000 [0160.937] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8c98 | out: hHeap=0x12c0000) returned 1 [0160.937] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xdff54c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xdff54c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0160.937] GetProcessHeap () returned 0x12c0000 [0160.937] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b30 | out: hHeap=0x12c0000) returned 1 [0160.937] GetProcessHeap () returned 0x12c0000 [0160.937] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x28) returned 0x12d6ef0 [0160.937] GetProcessHeap () returned 0x12c0000 [0160.937] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10) returned 0x12e78b0 [0160.937] GetProcessHeap () returned 0x12c0000 [0160.937] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x60) returned 0x12ce7a0 [0160.937] GetProcessHeap () returned 0x12c0000 [0160.937] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x60) returned 0x12d2148 [0160.937] GetProcessHeap () returned 0x12c0000 [0160.937] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d2148, Size=0xbe) returned 0x12d2f38 [0160.937] GetProcessHeap () returned 0x12c0000 [0160.937] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10) returned 0x12e7910 [0160.937] GetProcessHeap () returned 0x12c0000 [0160.937] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x180) returned 0x12d2258 [0160.937] GetProcessHeap () returned 0x12c0000 [0160.937] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x250) returned 0x12e8cc8 [0160.937] GetProcessHeap () returned 0x12c0000 [0160.937] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x12d2148 [0160.937] GetProcessHeap () returned 0x12c0000 [0160.938] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x84) returned 0x12d1688 [0160.938] GetProcessHeap () returned 0x12c0000 [0160.938] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x84) returned 0x12d1548 [0160.938] GetProcessHeap () returned 0x12c0000 [0160.938] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x12d2df0 [0160.938] GetProcessHeap () returned 0x12c0000 [0160.938] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2df0 | out: hHeap=0x12c0000) returned 1 [0160.938] ExpandEnvironmentStringsW (in: lpSrc="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys", lpDst=0x12d1688, nSize=0x42 | out: lpDst="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys") returned 0x42 [0160.938] GetProcessHeap () returned 0x12c0000 [0160.938] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d1548 | out: hHeap=0x12c0000) returned 1 [0160.938] GetProcessHeap () returned 0x12c0000 [0160.938] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2148 | out: hHeap=0x12c0000) returned 1 [0160.938] GetProcessHeap () returned 0x12c0000 [0160.938] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0xc0) returned 0x12d1548 [0160.938] GetProcessHeap () returned 0x12c0000 [0160.938] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0xb2) returned 0x12d2df0 [0160.938] GetProcessHeap () returned 0x12c0000 [0160.938] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0xb2) returned 0x12d13e8 [0160.938] GetProcessHeap () returned 0x12c0000 [0160.938] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x12d2148 [0160.938] GetProcessHeap () returned 0x12c0000 [0160.938] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2148 | out: hHeap=0x12c0000) returned 1 [0160.938] ExpandEnvironmentStringsW (in: lpSrc="C:\\Windows;C:\\ProgramData\\microsoft\\windows\\caches;C:\\Users\\WR\\microsoft\\windows\\caches;", lpDst=0x12d2df0, nSize=0x59 | out: lpDst="C:\\Windows;C:\\ProgramData\\microsoft\\windows\\caches;C:\\Users\\WR\\microsoft\\windows\\caches;") returned 0x59 [0160.938] GetProcessHeap () returned 0x12c0000 [0160.938] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d13e8 | out: hHeap=0x12c0000) returned 1 [0160.938] GetProcessHeap () returned 0x12c0000 [0160.938] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d1548 | out: hHeap=0x12c0000) returned 1 [0160.938] GetProcessHeap () returned 0x12c0000 [0160.938] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20a) returned 0x12e8f20 [0160.938] GetProcessHeap () returned 0x12c0000 [0160.938] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20a) returned 0x12e9508 [0160.938] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x12e9508, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\shaofao.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\shaofao.exe")) returned 0x59 [0160.938] GetProcessHeap () returned 0x12c0000 [0160.938] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e9508 | out: hHeap=0x12c0000) returned 1 [0160.938] GetProcessHeap () returned 0x12c0000 [0160.938] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x174) returned 0x12d18e8 [0160.938] GetProcessHeap () returned 0x12c0000 [0160.938] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x252) returned 0x12e9508 [0160.938] GetProcessHeap () returned 0x12c0000 [0160.938] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x86) returned 0x12d2148 [0160.938] GetProcessHeap () returned 0x12c0000 [0160.939] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d2148, Size=0x9e) returned 0x12d2148 [0160.939] GetProcessHeap () returned 0x12c0000 [0160.939] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0xb4) returned 0x12d1548 [0160.939] GetProcessHeap () returned 0x12c0000 [0160.939] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8f20 | out: hHeap=0x12c0000) returned 1 [0160.939] GetProcessHeap () returned 0x12c0000 [0160.939] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2258 | out: hHeap=0x12c0000) returned 1 [0160.939] GetProcessHeap () returned 0x12c0000 [0160.939] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8cc8 | out: hHeap=0x12c0000) returned 1 [0160.939] GetProcessHeap () returned 0x12c0000 [0160.939] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d1688 | out: hHeap=0x12c0000) returned 1 [0160.939] GetProcessHeap () returned 0x12c0000 [0160.939] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2df0 | out: hHeap=0x12c0000) returned 1 [0160.939] GetProcessHeap () returned 0x12c0000 [0160.939] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e78b0 | out: hHeap=0x12c0000) returned 1 [0160.939] GetProcessHeap () returned 0x12c0000 [0160.939] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12ce7a0 | out: hHeap=0x12c0000) returned 1 [0160.939] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x1022013, lpParameter=0xdff578, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x234 [0160.940] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x1021fab, lpParameter=0xdff588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x230 [0160.940] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x1021e4e, lpParameter=0xdff594, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x260 [0160.941] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x1021859, lpParameter=0xdff588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x264 [0160.941] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x102197c, lpParameter=0xdff588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x268 [0160.942] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0xffffffff) Thread: id = 82 os_tid = 0xf9c Thread: id = 83 os_tid = 0xfa4 [0156.001] GetProcessHeap () returned 0x12c0000 [0156.001] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12caf88 [0156.001] GetProcessHeap () returned 0x12c0000 [0156.001] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x14) returned 0x12d8b30 [0156.001] GetProcessHeap () returned 0x12c0000 [0156.002] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x14) returned 0x12d87d0 [0156.002] GetProcessHeap () returned 0x12c0000 [0156.002] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x12d1f90 [0156.002] GetProcessHeap () returned 0x12c0000 [0156.002] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d1f90 | out: hHeap=0x12c0000) returned 1 [0156.002] ExpandEnvironmentStringsW (in: lpSrc="%comspec%", lpDst=0x12d8b30, nSize=0xa | out: lpDst="") returned 0x1c [0156.002] GetProcessHeap () returned 0x12c0000 [0156.002] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d87d0 | out: hHeap=0x12c0000) returned 1 [0156.002] GetProcessHeap () returned 0x12c0000 [0156.002] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d8b30, Size=0x26) returned 0x12d6dd0 [0156.002] GetProcessHeap () returned 0x12c0000 [0156.002] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x26) returned 0x12d6c50 [0156.002] GetProcessHeap () returned 0x12c0000 [0156.002] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x12d1f90 [0156.002] GetProcessHeap () returned 0x12c0000 [0156.002] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d1f90 | out: hHeap=0x12c0000) returned 1 [0156.002] ExpandEnvironmentStringsW (in: lpSrc="%comspec%", lpDst=0x12d6dd0, nSize=0x13 | out: lpDst="") returned 0x1c [0156.002] GetProcessHeap () returned 0x12c0000 [0156.002] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d6c50 | out: hHeap=0x12c0000) returned 1 [0156.002] GetProcessHeap () returned 0x12c0000 [0156.002] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d6dd0, Size=0x4a) returned 0x12c68e0 [0156.002] GetProcessHeap () returned 0x12c0000 [0156.002] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x4a) returned 0x12cebb0 [0156.002] GetProcessHeap () returned 0x12c0000 [0156.002] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x12d1f90 [0156.002] GetProcessHeap () returned 0x12c0000 [0156.002] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d1f90 | out: hHeap=0x12c0000) returned 1 [0156.002] ExpandEnvironmentStringsW (in: lpSrc="%comspec%", lpDst=0x12c68e0, nSize=0x25 | out: lpDst="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0156.002] GetProcessHeap () returned 0x12c0000 [0156.002] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12cebb0 | out: hHeap=0x12c0000) returned 1 [0156.002] GetProcessHeap () returned 0x12c0000 [0156.002] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12caf88 | out: hHeap=0x12c0000) returned 1 [0156.002] GetProcessHeap () returned 0x12c0000 [0156.002] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x50) returned 0x12cebb0 [0156.003] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x74c00000 [0156.003] GetProcAddress (hModule=0x74c00000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x74c16b30 [0156.003] Wow64DisableWow64FsRedirection (in: OldValue=0x2d5fe6c | out: OldValue=0x2d5fe6c*=0x0) returned 1 [0156.003] GetProcessHeap () returned 0x12c0000 [0156.003] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12cebb0 | out: hHeap=0x12c0000) returned 1 [0156.003] CreatePipe (in: hReadPipe=0x2d5fe60, hWritePipe=0x2d5fe5c, lpPipeAttributes=0x2d5fe7c, nSize=0x0 | out: hReadPipe=0x2d5fe60*=0x218, hWritePipe=0x2d5fe5c*=0x21c) returned 1 [0156.004] CreatePipe (in: hReadPipe=0x2d5fe64, hWritePipe=0x2d5fe68, lpPipeAttributes=0x2d5fe7c, nSize=0x0 | out: hReadPipe=0x2d5fe64*=0x220, hWritePipe=0x2d5fe68*=0x224) returned 1 [0156.004] SetHandleInformation (hObject=0x21c, dwMask=0x1, dwFlags=0x0) returned 1 [0156.004] SetHandleInformation (hObject=0x220, dwMask=0x1, dwFlags=0x0) returned 1 [0156.004] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\cmd.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x2d5fe98*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x218, hStdOutput=0x224, hStdError=0x224), lpProcessInformation=0x2d5fe88 | out: lpCommandLine=0x0, lpProcessInformation=0x2d5fe88*(hProcess=0x22c, hThread=0x228, dwProcessId=0xfa8, dwThreadId=0xfac)) returned 1 [0156.029] WriteFile (in: hFile=0x21c, lpBuffer=0x12c7070*, nNumberOfBytesToWrite=0x5b, lpNumberOfBytesWritten=0x2d5fe78, lpOverlapped=0x0 | out: lpBuffer=0x12c7070*, lpNumberOfBytesWritten=0x2d5fe78*=0x5b, lpOverlapped=0x0) returned 1 [0156.029] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0 [0188.700] GetProcessHeap () returned 0x12c0000 [0188.700] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x50) returned 0x12e7310 [0188.700] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x74c00000 [0188.700] GetProcAddress (hModule=0x74c00000, lpProcName="Wow64RevertWow64FsRedirection") returned 0x74c16b50 [0188.701] Wow64RevertWow64FsRedirection (OlValue=0x2d5fe6c) returned 1 [0188.701] GetProcessHeap () returned 0x12c0000 [0188.701] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e7310 | out: hHeap=0x12c0000) returned 1 [0188.701] CloseHandle (hObject=0x22c) returned 1 [0188.701] CloseHandle (hObject=0x228) returned 1 [0188.701] CloseHandle (hObject=0x218) returned 1 [0188.701] CloseHandle (hObject=0x21c) returned 1 [0188.701] CloseHandle (hObject=0x220) returned 1 [0188.702] CloseHandle (hObject=0x224) returned 1 [0188.702] GetProcessHeap () returned 0x12c0000 [0188.702] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12c68e0 | out: hHeap=0x12c0000) returned 1 [0188.702] GetProcessHeap () returned 0x12c0000 [0188.702] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12c7070 | out: hHeap=0x12c0000) returned 1 Thread: id = 100 os_tid = 0x4f4 [0161.023] GetVersion () returned 0x23f00206 [0161.023] GetCurrentProcess () returned 0xffffffff [0161.023] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x2ecff34 | out: TokenHandle=0x2ecff34*=0x26c) returned 1 [0161.023] GetTokenInformation (in: TokenHandle=0x26c, TokenInformationClass=0x14, TokenInformation=0x2ecff2c, TokenInformationLength=0x4, ReturnLength=0x2ecff30 | out: TokenInformation=0x2ecff2c, ReturnLength=0x2ecff30) returned 1 [0161.023] CloseHandle (hObject=0x26c) returned 1 [0161.023] GetProcessHeap () returned 0x12c0000 [0161.023] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12e8b30 [0161.023] GetProcessHeap () returned 0x12c0000 [0161.023] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12e8bf8 [0161.023] GetProcessHeap () returned 0x12c0000 [0161.023] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e) returned 0x12e8c20 [0161.023] GetProcessHeap () returned 0x12c0000 [0161.023] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x12d1688 [0161.023] GetProcessHeap () returned 0x12c0000 [0161.023] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d1688 | out: hHeap=0x12c0000) returned 1 [0161.023] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x12e8bf8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0161.023] GetProcessHeap () returned 0x12c0000 [0161.023] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8c20 | out: hHeap=0x12c0000) returned 1 [0161.023] GetProcessHeap () returned 0x12c0000 [0161.023] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b30 | out: hHeap=0x12c0000) returned 1 [0161.023] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2ecfebc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2ecfebc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0161.023] GetProcessHeap () returned 0x12c0000 [0161.024] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8bf8 | out: hHeap=0x12c0000) returned 1 [0161.024] GetProcessHeap () returned 0x12c0000 [0161.024] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x40) returned 0x12d2520 [0161.024] GetProcessHeap () returned 0x12c0000 [0161.024] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x3a) returned 0x12d2a30 [0161.024] GetProcessHeap () returned 0x12c0000 [0161.024] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d2a30, Size=0x72) returned 0x12e71f8 [0161.024] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x26c [0161.024] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0x0) returned 0x102 [0161.024] CloseHandle (hObject=0x26c) returned 1 [0161.024] GetProcessHeap () returned 0x12c0000 [0161.024] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2520 | out: hHeap=0x12c0000) returned 1 [0161.024] GetProcessHeap () returned 0x12c0000 [0161.024] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e71f8 | out: hHeap=0x12c0000) returned 1 [0161.024] Sleep (dwMilliseconds=0x3e8) [0162.250] GetProcessHeap () returned 0x12c0000 [0162.250] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12e8a40 [0162.250] GetProcessHeap () returned 0x12c0000 [0162.250] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12e8b30 [0162.250] GetProcessHeap () returned 0x12c0000 [0162.250] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e) returned 0x12e8b80 [0162.250] GetProcessHeap () returned 0x12c0000 [0162.250] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x12d2df0 [0162.250] GetProcessHeap () returned 0x12c0000 [0162.250] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2df0 | out: hHeap=0x12c0000) returned 1 [0162.250] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x12e8b30, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0162.250] GetProcessHeap () returned 0x12c0000 [0162.250] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b80 | out: hHeap=0x12c0000) returned 1 [0162.250] GetProcessHeap () returned 0x12c0000 [0162.250] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8a40 | out: hHeap=0x12c0000) returned 1 [0162.250] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2ecfebc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2ecfebc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0162.251] GetProcessHeap () returned 0x12c0000 [0162.251] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b30 | out: hHeap=0x12c0000) returned 1 [0162.251] GetProcessHeap () returned 0x12c0000 [0162.251] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x40) returned 0x12d2640 [0162.251] GetProcessHeap () returned 0x12c0000 [0162.251] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x3a) returned 0x12d29e8 [0162.251] GetProcessHeap () returned 0x12c0000 [0162.251] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d29e8, Size=0x72) returned 0x12e6ff8 [0162.251] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2d8 [0162.251] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0x0) returned 0x102 [0162.251] CloseHandle (hObject=0x2d8) returned 1 [0162.251] GetProcessHeap () returned 0x12c0000 [0162.251] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2640 | out: hHeap=0x12c0000) returned 1 [0162.251] GetProcessHeap () returned 0x12c0000 [0162.251] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e6ff8 | out: hHeap=0x12c0000) returned 1 [0162.251] Sleep (dwMilliseconds=0x3e8) [0163.424] GetProcessHeap () returned 0x12c0000 [0163.424] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12e8c20 [0163.424] GetProcessHeap () returned 0x12c0000 [0163.424] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12e8c70 [0163.424] GetProcessHeap () returned 0x12c0000 [0163.424] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e) returned 0x12e8ba8 [0163.424] GetProcessHeap () returned 0x12c0000 [0163.424] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x12d2df0 [0163.424] GetProcessHeap () returned 0x12c0000 [0163.424] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2df0 | out: hHeap=0x12c0000) returned 1 [0163.424] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x12e8c70, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0163.424] GetProcessHeap () returned 0x12c0000 [0163.424] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8ba8 | out: hHeap=0x12c0000) returned 1 [0163.424] GetProcessHeap () returned 0x12c0000 [0163.424] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8c20 | out: hHeap=0x12c0000) returned 1 [0163.424] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2ecfebc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2ecfebc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0163.424] GetProcessHeap () returned 0x12c0000 [0163.424] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8c70 | out: hHeap=0x12c0000) returned 1 [0163.424] GetProcessHeap () returned 0x12c0000 [0163.424] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x40) returned 0x12d2640 [0163.424] GetProcessHeap () returned 0x12c0000 [0163.424] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x3a) returned 0x12d2838 [0163.424] GetProcessHeap () returned 0x12c0000 [0163.424] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d2838, Size=0x72) returned 0x12e7178 [0163.424] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2dc [0163.424] WaitForSingleObject (hHandle=0x2dc, dwMilliseconds=0x0) returned 0x102 [0163.425] CloseHandle (hObject=0x2dc) returned 1 [0163.425] GetProcessHeap () returned 0x12c0000 [0163.425] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2640 | out: hHeap=0x12c0000) returned 1 [0163.425] GetProcessHeap () returned 0x12c0000 [0163.425] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e7178 | out: hHeap=0x12c0000) returned 1 [0163.425] Sleep (dwMilliseconds=0x3e8) [0164.599] GetProcessHeap () returned 0x12c0000 [0164.599] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12e8a18 [0164.599] GetProcessHeap () returned 0x12c0000 [0164.599] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12e8b30 [0164.599] GetProcessHeap () returned 0x12c0000 [0164.599] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e) returned 0x12e8b80 [0164.599] GetProcessHeap () returned 0x12c0000 [0164.599] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x12d2df0 [0164.599] GetProcessHeap () returned 0x12c0000 [0164.599] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2df0 | out: hHeap=0x12c0000) returned 1 [0164.600] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x12e8b30, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0164.600] GetProcessHeap () returned 0x12c0000 [0164.600] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b80 | out: hHeap=0x12c0000) returned 1 [0164.600] GetProcessHeap () returned 0x12c0000 [0164.600] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8a18 | out: hHeap=0x12c0000) returned 1 [0164.600] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2ecfebc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2ecfebc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0164.600] GetProcessHeap () returned 0x12c0000 [0164.600] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b30 | out: hHeap=0x12c0000) returned 1 [0164.600] GetProcessHeap () returned 0x12c0000 [0164.600] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x40) returned 0x12d2640 [0164.600] GetProcessHeap () returned 0x12c0000 [0164.600] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x3a) returned 0x12d2b08 [0164.600] GetProcessHeap () returned 0x12c0000 [0164.600] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d2b08, Size=0x72) returned 0x13286d0 [0164.600] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2dc [0164.600] WaitForSingleObject (hHandle=0x2dc, dwMilliseconds=0x0) returned 0x102 [0164.600] CloseHandle (hObject=0x2dc) returned 1 [0164.600] GetProcessHeap () returned 0x12c0000 [0164.600] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2640 | out: hHeap=0x12c0000) returned 1 [0164.600] GetProcessHeap () returned 0x12c0000 [0164.600] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x13286d0 | out: hHeap=0x12c0000) returned 1 [0164.600] Sleep (dwMilliseconds=0x3e8) [0165.965] GetProcessHeap () returned 0x12c0000 [0165.965] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12e8b30 [0165.965] GetProcessHeap () returned 0x12c0000 [0165.965] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12e8b80 [0165.965] GetProcessHeap () returned 0x12c0000 [0165.965] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e) returned 0x12e8ba8 [0165.965] GetProcessHeap () returned 0x12c0000 [0165.965] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x12d1688 [0165.965] GetProcessHeap () returned 0x12c0000 [0165.965] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d1688 | out: hHeap=0x12c0000) returned 1 [0165.965] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x12e8b80, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0165.965] GetProcessHeap () returned 0x12c0000 [0165.965] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8ba8 | out: hHeap=0x12c0000) returned 1 [0165.965] GetProcessHeap () returned 0x12c0000 [0165.965] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b30 | out: hHeap=0x12c0000) returned 1 [0165.965] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2ecfebc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2ecfebc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0165.966] GetProcessHeap () returned 0x12c0000 [0165.966] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b80 | out: hHeap=0x12c0000) returned 1 [0165.966] GetProcessHeap () returned 0x12c0000 [0165.966] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x40) returned 0x12d2718 [0165.966] GetProcessHeap () returned 0x12c0000 [0165.966] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x3a) returned 0x12d2640 [0165.966] GetProcessHeap () returned 0x12c0000 [0165.966] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d2640, Size=0x72) returned 0x1328fd0 [0165.966] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2e4 [0165.966] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0x0) returned 0x102 [0165.966] CloseHandle (hObject=0x2e4) returned 1 [0165.966] GetProcessHeap () returned 0x12c0000 [0165.966] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2718 | out: hHeap=0x12c0000) returned 1 [0165.966] GetProcessHeap () returned 0x12c0000 [0165.966] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1328fd0 | out: hHeap=0x12c0000) returned 1 [0165.966] Sleep (dwMilliseconds=0x3e8) [0167.170] GetProcessHeap () returned 0x12c0000 [0167.170] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12e8a18 [0167.170] GetProcessHeap () returned 0x12c0000 [0167.170] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12e8a40 [0167.170] GetProcessHeap () returned 0x12c0000 [0167.170] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e) returned 0x12e8b30 [0167.170] GetProcessHeap () returned 0x12c0000 [0167.170] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x12d1688 [0167.241] GetProcessHeap () returned 0x12c0000 [0167.241] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d1688 | out: hHeap=0x12c0000) returned 1 [0167.241] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x12e8a40, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0167.241] GetProcessHeap () returned 0x12c0000 [0167.241] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b30 | out: hHeap=0x12c0000) returned 1 [0167.241] GetProcessHeap () returned 0x12c0000 [0167.241] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8a18 | out: hHeap=0x12c0000) returned 1 [0167.241] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2ecfebc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2ecfebc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0167.241] GetProcessHeap () returned 0x12c0000 [0167.241] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8a40 | out: hHeap=0x12c0000) returned 1 [0167.241] GetProcessHeap () returned 0x12c0000 [0167.241] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x40) returned 0x12d29e8 [0167.241] GetProcessHeap () returned 0x12c0000 [0167.241] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x3a) returned 0x12d2718 [0167.241] GetProcessHeap () returned 0x12c0000 [0167.241] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d2718, Size=0x72) returned 0x1328650 [0167.241] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2e4 [0167.241] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0x0) returned 0x102 [0167.242] CloseHandle (hObject=0x2e4) returned 1 [0167.242] GetProcessHeap () returned 0x12c0000 [0167.242] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d29e8 | out: hHeap=0x12c0000) returned 1 [0167.242] GetProcessHeap () returned 0x12c0000 [0167.242] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1328650 | out: hHeap=0x12c0000) returned 1 [0167.242] Sleep (dwMilliseconds=0x3e8) [0168.358] GetProcessHeap () returned 0x12c0000 [0168.358] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12e8c70 [0168.358] GetProcessHeap () returned 0x12c0000 [0168.358] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12e8c98 [0168.358] GetProcessHeap () returned 0x12c0000 [0168.358] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e) returned 0x12e8b80 [0168.358] GetProcessHeap () returned 0x12c0000 [0168.358] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x13279b0 [0168.358] GetProcessHeap () returned 0x12c0000 [0168.358] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x13279b0 | out: hHeap=0x12c0000) returned 1 [0168.358] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x12e8c98, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0168.358] GetProcessHeap () returned 0x12c0000 [0168.359] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b80 | out: hHeap=0x12c0000) returned 1 [0168.359] GetProcessHeap () returned 0x12c0000 [0168.359] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8c70 | out: hHeap=0x12c0000) returned 1 [0168.359] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2ecfebc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2ecfebc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0168.359] GetProcessHeap () returned 0x12c0000 [0168.359] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8c98 | out: hHeap=0x12c0000) returned 1 [0168.359] GetProcessHeap () returned 0x12c0000 [0168.359] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x40) returned 0x12d2be0 [0168.359] GetProcessHeap () returned 0x12c0000 [0168.359] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x3a) returned 0x12d29e8 [0168.360] GetProcessHeap () returned 0x12c0000 [0168.360] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d29e8, Size=0x72) returned 0x3cc1728 [0168.360] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2bc [0168.360] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0x0) returned 0x102 [0168.360] CloseHandle (hObject=0x2bc) returned 1 [0168.360] GetProcessHeap () returned 0x12c0000 [0168.360] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2be0 | out: hHeap=0x12c0000) returned 1 [0168.360] GetProcessHeap () returned 0x12c0000 [0168.360] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc1728 | out: hHeap=0x12c0000) returned 1 [0168.360] Sleep (dwMilliseconds=0x3e8) [0169.707] GetProcessHeap () returned 0x12c0000 [0169.707] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12e8bf8 [0169.707] GetProcessHeap () returned 0x12c0000 [0169.707] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12e8c20 [0169.707] GetProcessHeap () returned 0x12c0000 [0169.707] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e) returned 0x12e8b80 [0169.707] GetProcessHeap () returned 0x12c0000 [0169.707] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x1327458 [0169.707] GetProcessHeap () returned 0x12c0000 [0169.707] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1327458 | out: hHeap=0x12c0000) returned 1 [0169.707] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x12e8c20, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0169.707] GetProcessHeap () returned 0x12c0000 [0169.707] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b80 | out: hHeap=0x12c0000) returned 1 [0169.707] GetProcessHeap () returned 0x12c0000 [0169.707] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8bf8 | out: hHeap=0x12c0000) returned 1 [0169.707] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2ecfebc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2ecfebc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0169.792] GetProcessHeap () returned 0x12c0000 [0169.792] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8c20 | out: hHeap=0x12c0000) returned 1 [0169.792] GetProcessHeap () returned 0x12c0000 [0169.792] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x40) returned 0x12d2568 [0169.800] GetProcessHeap () returned 0x12c0000 [0169.842] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x3a) returned 0x12d2838 [0169.842] GetProcessHeap () returned 0x12c0000 [0169.842] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d2838, Size=0x72) returned 0x3cc1828 [0169.842] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2d8 [0169.842] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0x0) returned 0x102 [0169.842] CloseHandle (hObject=0x2d8) returned 1 [0169.842] GetProcessHeap () returned 0x12c0000 [0169.842] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2568 | out: hHeap=0x12c0000) returned 1 [0169.842] GetProcessHeap () returned 0x12c0000 [0169.842] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc1828 | out: hHeap=0x12c0000) returned 1 [0169.842] Sleep (dwMilliseconds=0x3e8) [0170.974] GetProcessHeap () returned 0x12c0000 [0170.974] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12e8bf8 [0170.974] GetProcessHeap () returned 0x12c0000 [0170.974] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12e8b30 [0170.974] GetProcessHeap () returned 0x12c0000 [0170.974] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e) returned 0x12e8ba8 [0170.974] GetProcessHeap () returned 0x12c0000 [0170.974] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x1327290 [0170.974] GetProcessHeap () returned 0x12c0000 [0170.974] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1327290 | out: hHeap=0x12c0000) returned 1 [0170.974] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x12e8b30, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0170.974] GetProcessHeap () returned 0x12c0000 [0170.974] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8ba8 | out: hHeap=0x12c0000) returned 1 [0170.974] GetProcessHeap () returned 0x12c0000 [0170.975] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8bf8 | out: hHeap=0x12c0000) returned 1 [0170.975] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2ecfebc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2ecfebc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0170.975] GetProcessHeap () returned 0x12c0000 [0170.975] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b30 | out: hHeap=0x12c0000) returned 1 [0170.975] GetProcessHeap () returned 0x12c0000 [0170.975] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x40) returned 0x12d2958 [0170.975] GetProcessHeap () returned 0x12c0000 [0170.975] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x3a) returned 0x12d2a30 [0170.975] GetProcessHeap () returned 0x12c0000 [0170.975] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d2a30, Size=0x72) returned 0x3cc19a8 [0170.975] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2e8 [0170.975] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x0) returned 0x102 [0170.975] CloseHandle (hObject=0x2e8) returned 1 [0170.975] GetProcessHeap () returned 0x12c0000 [0170.975] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2958 | out: hHeap=0x12c0000) returned 1 [0170.975] GetProcessHeap () returned 0x12c0000 [0170.975] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc19a8 | out: hHeap=0x12c0000) returned 1 [0170.975] Sleep (dwMilliseconds=0x3e8) [0172.116] GetProcessHeap () returned 0x12c0000 [0172.116] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12e8b80 [0172.116] GetProcessHeap () returned 0x12c0000 [0172.116] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12e8ba8 [0172.116] GetProcessHeap () returned 0x12c0000 [0172.116] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e) returned 0x12e8bf8 [0172.116] GetProcessHeap () returned 0x12c0000 [0172.116] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x13273c0 [0172.116] GetProcessHeap () returned 0x12c0000 [0172.116] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x13273c0 | out: hHeap=0x12c0000) returned 1 [0172.117] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x12e8ba8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0172.117] GetProcessHeap () returned 0x12c0000 [0172.117] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8bf8 | out: hHeap=0x12c0000) returned 1 [0172.117] GetProcessHeap () returned 0x12c0000 [0172.117] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b80 | out: hHeap=0x12c0000) returned 1 [0172.117] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2ecfebc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2ecfebc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0172.117] GetProcessHeap () returned 0x12c0000 [0172.117] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8ba8 | out: hHeap=0x12c0000) returned 1 [0172.117] GetProcessHeap () returned 0x12c0000 [0172.117] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x40) returned 0x12d29e8 [0172.117] GetProcessHeap () returned 0x12c0000 [0172.117] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x3a) returned 0x12d2b08 [0172.117] GetProcessHeap () returned 0x12c0000 [0172.117] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d2b08, Size=0x72) returned 0x3cc15a8 [0172.117] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2cc [0172.117] WaitForSingleObject (hHandle=0x2cc, dwMilliseconds=0x0) returned 0x102 [0172.117] CloseHandle (hObject=0x2cc) returned 1 [0172.117] GetProcessHeap () returned 0x12c0000 [0172.117] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d29e8 | out: hHeap=0x12c0000) returned 1 [0172.117] GetProcessHeap () returned 0x12c0000 [0172.117] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc15a8 | out: hHeap=0x12c0000) returned 1 [0172.117] Sleep (dwMilliseconds=0x3e8) [0173.500] GetProcessHeap () returned 0x12c0000 [0173.500] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12e8bf8 [0173.500] GetProcessHeap () returned 0x12c0000 [0173.500] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12e8a18 [0173.500] GetProcessHeap () returned 0x12c0000 [0173.500] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e) returned 0x12e8a40 [0173.500] GetProcessHeap () returned 0x12c0000 [0173.500] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x1327290 [0173.500] GetProcessHeap () returned 0x12c0000 [0173.500] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1327290 | out: hHeap=0x12c0000) returned 1 [0173.500] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x12e8a18, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0173.500] GetProcessHeap () returned 0x12c0000 [0173.500] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8a40 | out: hHeap=0x12c0000) returned 1 [0173.500] GetProcessHeap () returned 0x12c0000 [0173.500] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8bf8 | out: hHeap=0x12c0000) returned 1 [0173.500] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2ecfebc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2ecfebc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0173.500] GetProcessHeap () returned 0x12c0000 [0173.500] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8a18 | out: hHeap=0x12c0000) returned 1 [0173.500] GetProcessHeap () returned 0x12c0000 [0173.500] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x40) returned 0x12d29e8 [0173.501] GetProcessHeap () returned 0x12c0000 [0173.501] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x3a) returned 0x12d2958 [0173.501] GetProcessHeap () returned 0x12c0000 [0173.501] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d2958, Size=0x72) returned 0x3cc12a8 [0173.501] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2d8 [0173.501] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0x0) returned 0x102 [0173.501] CloseHandle (hObject=0x2d8) returned 1 [0173.501] GetProcessHeap () returned 0x12c0000 [0173.501] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d29e8 | out: hHeap=0x12c0000) returned 1 [0173.501] GetProcessHeap () returned 0x12c0000 [0173.501] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc12a8 | out: hHeap=0x12c0000) returned 1 [0173.501] Sleep (dwMilliseconds=0x3e8) [0174.707] GetProcessHeap () returned 0x12c0000 [0174.707] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12e8b30 [0174.707] GetProcessHeap () returned 0x12c0000 [0174.707] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12e8b80 [0174.707] GetProcessHeap () returned 0x12c0000 [0174.707] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e) returned 0x12e8ba8 [0174.707] GetProcessHeap () returned 0x12c0000 [0174.708] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x13271f8 [0174.708] GetProcessHeap () returned 0x12c0000 [0174.708] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x13271f8 | out: hHeap=0x12c0000) returned 1 [0174.708] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x12e8b80, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0174.708] GetProcessHeap () returned 0x12c0000 [0174.708] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8ba8 | out: hHeap=0x12c0000) returned 1 [0174.708] GetProcessHeap () returned 0x12c0000 [0174.708] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b30 | out: hHeap=0x12c0000) returned 1 [0174.708] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2ecfebc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2ecfebc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0174.708] GetProcessHeap () returned 0x12c0000 [0174.708] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b80 | out: hHeap=0x12c0000) returned 1 [0174.708] GetProcessHeap () returned 0x12c0000 [0174.708] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x40) returned 0x12d2958 [0174.708] GetProcessHeap () returned 0x12c0000 [0174.708] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x3a) returned 0x12d2838 [0174.708] GetProcessHeap () returned 0x12c0000 [0174.708] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d2838, Size=0x72) returned 0x3cc1fa8 [0174.708] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2d8 [0174.708] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0x0) returned 0x102 [0174.708] CloseHandle (hObject=0x2d8) returned 1 [0174.708] GetProcessHeap () returned 0x12c0000 [0174.708] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2958 | out: hHeap=0x12c0000) returned 1 [0174.708] GetProcessHeap () returned 0x12c0000 [0174.708] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc1fa8 | out: hHeap=0x12c0000) returned 1 [0174.709] Sleep (dwMilliseconds=0x3e8) [0175.894] GetProcessHeap () returned 0x12c0000 [0175.894] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12e8b80 [0175.894] GetProcessHeap () returned 0x12c0000 [0175.895] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12e8b30 [0175.895] GetProcessHeap () returned 0x12c0000 [0175.895] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e) returned 0x12e8bf8 [0175.895] GetProcessHeap () returned 0x12c0000 [0175.895] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x1327918 [0175.895] GetProcessHeap () returned 0x12c0000 [0175.895] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1327918 | out: hHeap=0x12c0000) returned 1 [0175.895] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x12e8b30, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0175.895] GetProcessHeap () returned 0x12c0000 [0175.895] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8bf8 | out: hHeap=0x12c0000) returned 1 [0175.895] GetProcessHeap () returned 0x12c0000 [0175.895] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b80 | out: hHeap=0x12c0000) returned 1 [0175.895] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2ecfebc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2ecfebc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0175.895] GetProcessHeap () returned 0x12c0000 [0175.895] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b30 | out: hHeap=0x12c0000) returned 1 [0175.895] GetProcessHeap () returned 0x12c0000 [0175.895] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x40) returned 0x12d29e8 [0175.895] GetProcessHeap () returned 0x12c0000 [0175.895] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x3a) returned 0x12d2a30 [0175.895] GetProcessHeap () returned 0x12c0000 [0175.895] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d2a30, Size=0x72) returned 0x3cc1ca8 [0175.895] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2d8 [0175.895] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0x0) returned 0x102 [0175.895] CloseHandle (hObject=0x2d8) returned 1 [0175.895] GetProcessHeap () returned 0x12c0000 [0175.895] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d29e8 | out: hHeap=0x12c0000) returned 1 [0175.895] GetProcessHeap () returned 0x12c0000 [0175.896] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc1ca8 | out: hHeap=0x12c0000) returned 1 [0175.896] Sleep (dwMilliseconds=0x3e8) [0176.959] GetProcessHeap () returned 0x12c0000 [0176.959] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12e8c98 [0176.959] GetProcessHeap () returned 0x12c0000 [0176.959] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12e8b30 [0176.959] GetProcessHeap () returned 0x12c0000 [0176.959] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e) returned 0x12e8a18 [0176.959] GetProcessHeap () returned 0x12c0000 [0176.959] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x13271f8 [0176.959] GetProcessHeap () returned 0x12c0000 [0176.959] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x13271f8 | out: hHeap=0x12c0000) returned 1 [0176.959] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x12e8b30, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0176.959] GetProcessHeap () returned 0x12c0000 [0176.959] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8a18 | out: hHeap=0x12c0000) returned 1 [0176.959] GetProcessHeap () returned 0x12c0000 [0176.959] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8c98 | out: hHeap=0x12c0000) returned 1 [0176.959] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2ecfebc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2ecfebc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0176.959] GetProcessHeap () returned 0x12c0000 [0176.959] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b30 | out: hHeap=0x12c0000) returned 1 [0176.959] GetProcessHeap () returned 0x12c0000 [0176.959] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x40) returned 0x12d2838 [0176.959] GetProcessHeap () returned 0x12c0000 [0176.959] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x3a) returned 0x12d25b0 [0176.959] GetProcessHeap () returned 0x12c0000 [0176.959] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d25b0, Size=0x72) returned 0x1327948 [0176.959] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2e8 [0176.960] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x0) returned 0x102 [0176.960] CloseHandle (hObject=0x2e8) returned 1 [0176.960] GetProcessHeap () returned 0x12c0000 [0176.960] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2838 | out: hHeap=0x12c0000) returned 1 [0176.960] GetProcessHeap () returned 0x12c0000 [0176.960] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1327948 | out: hHeap=0x12c0000) returned 1 [0176.960] Sleep (dwMilliseconds=0x3e8) [0178.098] GetProcessHeap () returned 0x12c0000 [0178.098] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12e8bf8 [0178.098] GetProcessHeap () returned 0x12c0000 [0178.098] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12e8b30 [0178.098] GetProcessHeap () returned 0x12c0000 [0178.098] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e) returned 0x12e8c70 [0178.098] GetProcessHeap () returned 0x12c0000 [0178.098] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x13299c0 [0178.098] GetProcessHeap () returned 0x12c0000 [0178.098] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x13299c0 | out: hHeap=0x12c0000) returned 1 [0178.098] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x12e8b30, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0178.098] GetProcessHeap () returned 0x12c0000 [0178.098] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8c70 | out: hHeap=0x12c0000) returned 1 [0178.098] GetProcessHeap () returned 0x12c0000 [0178.098] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8bf8 | out: hHeap=0x12c0000) returned 1 [0178.098] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2ecfebc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2ecfebc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0178.099] GetProcessHeap () returned 0x12c0000 [0178.099] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b30 | out: hHeap=0x12c0000) returned 1 [0178.099] GetProcessHeap () returned 0x12c0000 [0178.099] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x40) returned 0x12d2838 [0178.099] GetProcessHeap () returned 0x12c0000 [0178.099] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x3a) returned 0x12d2568 [0178.099] GetProcessHeap () returned 0x12c0000 [0178.099] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d2568, Size=0x72) returned 0x1327248 [0178.099] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2d8 [0178.099] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0x0) returned 0x102 [0178.099] CloseHandle (hObject=0x2d8) returned 1 [0178.099] GetProcessHeap () returned 0x12c0000 [0178.099] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2838 | out: hHeap=0x12c0000) returned 1 [0178.099] GetProcessHeap () returned 0x12c0000 [0178.099] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1327248 | out: hHeap=0x12c0000) returned 1 [0178.099] Sleep (dwMilliseconds=0x3e8) [0179.235] GetProcessHeap () returned 0x12c0000 [0179.235] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12e8c70 [0179.235] GetProcessHeap () returned 0x12c0000 [0179.235] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12e8b30 [0179.235] GetProcessHeap () returned 0x12c0000 [0179.235] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e) returned 0x12e8b80 [0179.235] GetProcessHeap () returned 0x12c0000 [0179.235] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x1329630 [0179.235] GetProcessHeap () returned 0x12c0000 [0179.235] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1329630 | out: hHeap=0x12c0000) returned 1 [0179.235] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x12e8b30, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0179.235] GetProcessHeap () returned 0x12c0000 [0179.235] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b80 | out: hHeap=0x12c0000) returned 1 [0179.236] GetProcessHeap () returned 0x12c0000 [0179.236] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8c70 | out: hHeap=0x12c0000) returned 1 [0179.236] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2ecfebc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2ecfebc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0179.236] GetProcessHeap () returned 0x12c0000 [0179.236] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b30 | out: hHeap=0x12c0000) returned 1 [0179.236] GetProcessHeap () returned 0x12c0000 [0179.236] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x40) returned 0x12d2718 [0179.236] GetProcessHeap () returned 0x12c0000 [0179.236] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x3a) returned 0x12d2568 [0179.236] GetProcessHeap () returned 0x12c0000 [0179.236] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d2568, Size=0x72) returned 0x132dd78 [0179.236] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x308 [0179.236] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x0) returned 0x102 [0179.236] CloseHandle (hObject=0x308) returned 1 [0179.236] GetProcessHeap () returned 0x12c0000 [0179.236] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2718 | out: hHeap=0x12c0000) returned 1 [0179.236] GetProcessHeap () returned 0x12c0000 [0179.236] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x132dd78 | out: hHeap=0x12c0000) returned 1 [0179.236] Sleep (dwMilliseconds=0x3e8) [0180.348] GetProcessHeap () returned 0x12c0000 [0180.348] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12e8b30 [0180.348] GetProcessHeap () returned 0x12c0000 [0180.348] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12e8a40 [0180.348] GetProcessHeap () returned 0x12c0000 [0180.348] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e) returned 0x12e8ba8 [0180.348] GetProcessHeap () returned 0x12c0000 [0180.348] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x132b3e0 [0180.349] GetProcessHeap () returned 0x12c0000 [0180.349] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x132b3e0 | out: hHeap=0x12c0000) returned 1 [0180.349] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x12e8a40, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0180.349] GetProcessHeap () returned 0x12c0000 [0180.349] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8ba8 | out: hHeap=0x12c0000) returned 1 [0180.349] GetProcessHeap () returned 0x12c0000 [0180.349] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b30 | out: hHeap=0x12c0000) returned 1 [0180.349] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2ecfebc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2ecfebc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0180.349] GetProcessHeap () returned 0x12c0000 [0180.349] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8a40 | out: hHeap=0x12c0000) returned 1 [0180.349] GetProcessHeap () returned 0x12c0000 [0180.349] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x40) returned 0x12d2838 [0180.349] GetProcessHeap () returned 0x12c0000 [0180.349] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x3a) returned 0x12d2958 [0180.349] GetProcessHeap () returned 0x12c0000 [0180.349] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d2958, Size=0x72) returned 0x132d578 [0180.349] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2f4 [0180.349] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0x0) returned 0x102 [0180.349] CloseHandle (hObject=0x2f4) returned 1 [0180.349] GetProcessHeap () returned 0x12c0000 [0180.349] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2838 | out: hHeap=0x12c0000) returned 1 [0180.349] GetProcessHeap () returned 0x12c0000 [0180.349] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x132d578 | out: hHeap=0x12c0000) returned 1 [0180.349] Sleep (dwMilliseconds=0x3e8) [0181.609] GetProcessHeap () returned 0x12c0000 [0181.609] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12e8b80 [0181.609] GetProcessHeap () returned 0x12c0000 [0181.609] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12e8b30 [0181.609] GetProcessHeap () returned 0x12c0000 [0181.609] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e) returned 0x12e8bf8 [0181.609] GetProcessHeap () returned 0x12c0000 [0181.609] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x132ba68 [0181.609] GetProcessHeap () returned 0x12c0000 [0181.609] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x132ba68 | out: hHeap=0x12c0000) returned 1 [0181.609] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x12e8b30, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0181.609] GetProcessHeap () returned 0x12c0000 [0181.610] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8bf8 | out: hHeap=0x12c0000) returned 1 [0181.610] GetProcessHeap () returned 0x12c0000 [0181.610] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b80 | out: hHeap=0x12c0000) returned 1 [0181.610] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2ecfebc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2ecfebc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0181.610] GetProcessHeap () returned 0x12c0000 [0181.610] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b30 | out: hHeap=0x12c0000) returned 1 [0181.610] GetProcessHeap () returned 0x12c0000 [0181.610] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x40) returned 0x12d2640 [0181.610] GetProcessHeap () returned 0x12c0000 [0181.610] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x3a) returned 0x12d25b0 [0181.610] GetProcessHeap () returned 0x12c0000 [0181.610] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d25b0, Size=0x72) returned 0x132daf8 [0181.610] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2d0 [0181.610] WaitForSingleObject (hHandle=0x2d0, dwMilliseconds=0x0) returned 0x102 [0181.610] CloseHandle (hObject=0x2d0) returned 1 [0181.610] GetProcessHeap () returned 0x12c0000 [0181.610] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2640 | out: hHeap=0x12c0000) returned 1 [0181.610] GetProcessHeap () returned 0x12c0000 [0181.610] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x132daf8 | out: hHeap=0x12c0000) returned 1 [0181.610] Sleep (dwMilliseconds=0x3e8) [0182.768] GetProcessHeap () returned 0x12c0000 [0182.769] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12e8c70 [0182.769] GetProcessHeap () returned 0x12c0000 [0182.769] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12e8b30 [0182.769] GetProcessHeap () returned 0x12c0000 [0182.769] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e) returned 0x12e8b80 [0182.769] GetProcessHeap () returned 0x12c0000 [0182.769] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x132bc30 [0182.769] GetProcessHeap () returned 0x12c0000 [0182.769] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x132bc30 | out: hHeap=0x12c0000) returned 1 [0182.769] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x12e8b30, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0182.769] GetProcessHeap () returned 0x12c0000 [0182.769] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b80 | out: hHeap=0x12c0000) returned 1 [0182.769] GetProcessHeap () returned 0x12c0000 [0182.769] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8c70 | out: hHeap=0x12c0000) returned 1 [0182.769] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2ecfebc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2ecfebc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0182.769] GetProcessHeap () returned 0x12c0000 [0182.769] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b30 | out: hHeap=0x12c0000) returned 1 [0182.770] GetProcessHeap () returned 0x12c0000 [0182.770] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x40) returned 0x12d25b0 [0182.770] GetProcessHeap () returned 0x12c0000 [0182.770] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x3a) returned 0x12d2958 [0182.770] GetProcessHeap () returned 0x12c0000 [0182.770] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d2958, Size=0x72) returned 0x132d4f8 [0182.770] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2e8 [0182.770] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x0) returned 0x102 [0182.770] CloseHandle (hObject=0x2e8) returned 1 [0182.770] GetProcessHeap () returned 0x12c0000 [0182.770] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d25b0 | out: hHeap=0x12c0000) returned 1 [0182.770] GetProcessHeap () returned 0x12c0000 [0182.770] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x132d4f8 | out: hHeap=0x12c0000) returned 1 [0182.770] Sleep (dwMilliseconds=0x3e8) [0183.896] GetProcessHeap () returned 0x12c0000 [0183.896] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12e8c70 [0183.896] GetProcessHeap () returned 0x12c0000 [0183.896] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12e8b30 [0183.896] GetProcessHeap () returned 0x12c0000 [0183.896] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e) returned 0x12e8a18 [0183.896] GetProcessHeap () returned 0x12c0000 [0183.896] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x132b938 [0183.896] GetProcessHeap () returned 0x12c0000 [0183.896] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x132b938 | out: hHeap=0x12c0000) returned 1 [0183.896] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x12e8b30, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0183.896] GetProcessHeap () returned 0x12c0000 [0183.896] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8a18 | out: hHeap=0x12c0000) returned 1 [0183.896] GetProcessHeap () returned 0x12c0000 [0183.896] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8c70 | out: hHeap=0x12c0000) returned 1 [0183.896] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2ecfebc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2ecfebc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0183.897] GetProcessHeap () returned 0x12c0000 [0183.897] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b30 | out: hHeap=0x12c0000) returned 1 [0183.897] GetProcessHeap () returned 0x12c0000 [0183.897] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x40) returned 0x12d2688 [0183.897] GetProcessHeap () returned 0x12c0000 [0183.897] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x3a) returned 0x12d2640 [0183.897] GetProcessHeap () returned 0x12c0000 [0183.897] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d2640, Size=0x72) returned 0x132d3f8 [0183.897] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x304 [0183.897] WaitForSingleObject (hHandle=0x304, dwMilliseconds=0x0) returned 0x102 [0183.897] CloseHandle (hObject=0x304) returned 1 [0183.897] GetProcessHeap () returned 0x12c0000 [0183.897] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2688 | out: hHeap=0x12c0000) returned 1 [0183.897] GetProcessHeap () returned 0x12c0000 [0183.897] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x132d3f8 | out: hHeap=0x12c0000) returned 1 [0183.897] Sleep (dwMilliseconds=0x3e8) [0185.087] GetProcessHeap () returned 0x12c0000 [0185.087] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12e8b30 [0185.087] GetProcessHeap () returned 0x12c0000 [0185.087] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12e8b80 [0185.088] GetProcessHeap () returned 0x12c0000 [0185.088] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e) returned 0x12e8c70 [0185.088] GetProcessHeap () returned 0x12c0000 [0185.088] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x132b770 [0185.088] GetProcessHeap () returned 0x12c0000 [0185.088] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x132b770 | out: hHeap=0x12c0000) returned 1 [0185.088] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x12e8b80, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0185.088] GetProcessHeap () returned 0x12c0000 [0185.088] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8c70 | out: hHeap=0x12c0000) returned 1 [0185.088] GetProcessHeap () returned 0x12c0000 [0185.088] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b30 | out: hHeap=0x12c0000) returned 1 [0185.088] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2ecfebc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2ecfebc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0185.088] GetProcessHeap () returned 0x12c0000 [0185.088] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b80 | out: hHeap=0x12c0000) returned 1 [0185.088] GetProcessHeap () returned 0x12c0000 [0185.088] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x40) returned 0x12d29e8 [0185.088] GetProcessHeap () returned 0x12c0000 [0185.088] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x3a) returned 0x12d2568 [0185.088] GetProcessHeap () returned 0x12c0000 [0185.088] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d2568, Size=0x72) returned 0x132d778 [0185.088] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2fc [0185.088] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x0) returned 0x102 [0185.088] CloseHandle (hObject=0x2fc) returned 1 [0185.088] GetProcessHeap () returned 0x12c0000 [0185.088] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d29e8 | out: hHeap=0x12c0000) returned 1 [0185.088] GetProcessHeap () returned 0x12c0000 [0185.089] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x132d778 | out: hHeap=0x12c0000) returned 1 [0185.089] Sleep (dwMilliseconds=0x3e8) [0186.217] GetProcessHeap () returned 0x12c0000 [0186.217] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12e8b30 [0186.217] GetProcessHeap () returned 0x12c0000 [0186.217] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12e8b80 [0186.217] GetProcessHeap () returned 0x12c0000 [0186.217] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e) returned 0x12e8bf8 [0186.217] GetProcessHeap () returned 0x12c0000 [0186.217] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x3ff0b48 [0186.217] GetProcessHeap () returned 0x12c0000 [0186.217] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ff0b48 | out: hHeap=0x12c0000) returned 1 [0186.217] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x12e8b80, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0186.217] GetProcessHeap () returned 0x12c0000 [0186.217] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8bf8 | out: hHeap=0x12c0000) returned 1 [0186.217] GetProcessHeap () returned 0x12c0000 [0186.217] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b30 | out: hHeap=0x12c0000) returned 1 [0186.217] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2ecfebc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2ecfebc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0186.218] GetProcessHeap () returned 0x12c0000 [0186.218] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b80 | out: hHeap=0x12c0000) returned 1 [0186.218] GetProcessHeap () returned 0x12c0000 [0186.218] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x40) returned 0x12d2958 [0186.218] GetProcessHeap () returned 0x12c0000 [0186.218] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x3a) returned 0x12d2be0 [0186.218] GetProcessHeap () returned 0x12c0000 [0186.218] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d2be0, Size=0x72) returned 0x131fb10 [0186.218] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2c4 [0186.218] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x0) returned 0x102 [0186.218] CloseHandle (hObject=0x2c4) returned 1 [0186.218] GetProcessHeap () returned 0x12c0000 [0186.218] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2958 | out: hHeap=0x12c0000) returned 1 [0186.218] GetProcessHeap () returned 0x12c0000 [0186.218] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131fb10 | out: hHeap=0x12c0000) returned 1 [0186.218] Sleep (dwMilliseconds=0x3e8) [0188.345] GetProcessHeap () returned 0x12c0000 [0188.346] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12e8a18 [0188.346] GetProcessHeap () returned 0x12c0000 [0188.346] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12e8b80 [0188.346] GetProcessHeap () returned 0x12c0000 [0188.346] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e) returned 0x12e8ba8 [0188.346] GetProcessHeap () returned 0x12c0000 [0188.346] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x130e798 [0188.346] GetProcessHeap () returned 0x12c0000 [0188.346] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e798 | out: hHeap=0x12c0000) returned 1 [0188.346] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x12e8b80, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0188.346] GetProcessHeap () returned 0x12c0000 [0188.346] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8ba8 | out: hHeap=0x12c0000) returned 1 [0188.346] GetProcessHeap () returned 0x12c0000 [0188.346] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8a18 | out: hHeap=0x12c0000) returned 1 [0188.346] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2ecfebc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2ecfebc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0188.346] GetProcessHeap () returned 0x12c0000 [0188.346] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b80 | out: hHeap=0x12c0000) returned 1 [0188.346] GetProcessHeap () returned 0x12c0000 [0188.346] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x40) returned 0x12d2568 [0188.346] GetProcessHeap () returned 0x12c0000 [0188.346] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x3a) returned 0x12d2838 [0188.346] GetProcessHeap () returned 0x12c0000 [0188.346] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d2838, Size=0x72) returned 0x3ff1b20 [0188.346] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2cc [0188.346] WaitForSingleObject (hHandle=0x2cc, dwMilliseconds=0x0) returned 0x102 [0188.346] CloseHandle (hObject=0x2cc) returned 1 [0188.347] GetProcessHeap () returned 0x12c0000 [0188.347] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2568 | out: hHeap=0x12c0000) returned 1 [0188.347] GetProcessHeap () returned 0x12c0000 [0188.347] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ff1b20 | out: hHeap=0x12c0000) returned 1 [0188.347] Sleep (dwMilliseconds=0x3e8) [0189.477] GetProcessHeap () returned 0x12c0000 [0189.477] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12e8c70 [0189.477] GetProcessHeap () returned 0x12c0000 [0189.477] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12e8b30 [0189.477] GetProcessHeap () returned 0x12c0000 [0189.477] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e) returned 0x12e8b80 [0189.477] GetProcessHeap () returned 0x12c0000 [0189.477] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x13223e8 [0189.477] GetProcessHeap () returned 0x12c0000 [0189.477] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x13223e8 | out: hHeap=0x12c0000) returned 1 [0189.478] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x12e8b30, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0189.478] GetProcessHeap () returned 0x12c0000 [0189.478] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b80 | out: hHeap=0x12c0000) returned 1 [0189.478] GetProcessHeap () returned 0x12c0000 [0189.478] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8c70 | out: hHeap=0x12c0000) returned 1 [0189.478] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2ecfebc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2ecfebc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0189.478] GetProcessHeap () returned 0x12c0000 [0189.478] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b30 | out: hHeap=0x12c0000) returned 1 [0189.478] GetProcessHeap () returned 0x12c0000 [0189.478] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x40) returned 0x12d2a30 [0189.478] GetProcessHeap () returned 0x12c0000 [0189.478] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x3a) returned 0x12d2838 [0189.478] GetProcessHeap () returned 0x12c0000 [0189.478] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d2838, Size=0x72) returned 0x3ff17a0 [0189.478] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x224 [0189.478] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x0) returned 0x102 [0189.478] CloseHandle (hObject=0x224) returned 1 [0189.478] GetProcessHeap () returned 0x12c0000 [0189.478] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2a30 | out: hHeap=0x12c0000) returned 1 [0189.478] GetProcessHeap () returned 0x12c0000 [0189.478] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ff17a0 | out: hHeap=0x12c0000) returned 1 [0189.479] Sleep (dwMilliseconds=0x3e8) [0190.551] GetProcessHeap () returned 0x12c0000 [0190.551] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12e8b80 [0190.551] GetProcessHeap () returned 0x12c0000 [0190.551] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12e8ba8 [0190.551] GetProcessHeap () returned 0x12c0000 [0190.551] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e) returned 0x12e8b30 [0190.551] GetProcessHeap () returned 0x12c0000 [0190.551] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x3ff1268 [0190.551] GetProcessHeap () returned 0x12c0000 [0190.551] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ff1268 | out: hHeap=0x12c0000) returned 1 [0190.551] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x12e8ba8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0190.552] GetProcessHeap () returned 0x12c0000 [0190.552] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b30 | out: hHeap=0x12c0000) returned 1 [0190.561] GetProcessHeap () returned 0x12c0000 [0190.561] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b80 | out: hHeap=0x12c0000) returned 1 [0190.561] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2ecfebc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2ecfebc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0190.561] GetProcessHeap () returned 0x12c0000 [0190.561] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8ba8 | out: hHeap=0x12c0000) returned 1 [0190.561] GetProcessHeap () returned 0x12c0000 [0190.561] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x40) returned 0x12d2958 [0190.576] GetProcessHeap () returned 0x12c0000 [0190.576] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x3a) returned 0x12d2568 [0190.576] GetProcessHeap () returned 0x12c0000 [0190.576] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d2568, Size=0x72) returned 0x1321e20 [0190.576] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2f0 [0190.576] WaitForSingleObject (hHandle=0x2f0, dwMilliseconds=0x0) returned 0x102 [0190.576] CloseHandle (hObject=0x2f0) returned 1 [0190.576] GetProcessHeap () returned 0x12c0000 [0190.576] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2958 | out: hHeap=0x12c0000) returned 1 [0190.576] GetProcessHeap () returned 0x12c0000 [0190.576] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1321e20 | out: hHeap=0x12c0000) returned 1 [0190.576] Sleep (dwMilliseconds=0x3e8) [0191.907] GetProcessHeap () returned 0x12c0000 [0191.907] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12e8b80 [0191.907] GetProcessHeap () returned 0x12c0000 [0191.907] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12e8a40 [0191.907] GetProcessHeap () returned 0x12c0000 [0191.907] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e) returned 0x12e8b30 [0191.907] GetProcessHeap () returned 0x12c0000 [0191.907] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x3ff1300 [0191.907] GetProcessHeap () returned 0x12c0000 [0191.907] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ff1300 | out: hHeap=0x12c0000) returned 1 [0191.907] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x12e8a40, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0191.907] GetProcessHeap () returned 0x12c0000 [0191.907] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b30 | out: hHeap=0x12c0000) returned 1 [0191.907] GetProcessHeap () returned 0x12c0000 [0191.907] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b80 | out: hHeap=0x12c0000) returned 1 [0191.907] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2ecfebc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2ecfebc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0191.908] GetProcessHeap () returned 0x12c0000 [0191.908] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8a40 | out: hHeap=0x12c0000) returned 1 [0191.908] GetProcessHeap () returned 0x12c0000 [0191.908] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x40) returned 0x12d2958 [0191.908] GetProcessHeap () returned 0x12c0000 [0191.908] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x3a) returned 0x12d2b98 [0191.908] GetProcessHeap () returned 0x12c0000 [0191.908] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d2b98, Size=0x72) returned 0x1321920 [0191.908] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x224 [0191.908] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x0) returned 0x102 [0191.908] CloseHandle (hObject=0x224) returned 1 [0191.908] GetProcessHeap () returned 0x12c0000 [0191.908] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2958 | out: hHeap=0x12c0000) returned 1 [0191.908] GetProcessHeap () returned 0x12c0000 [0191.908] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1321920 | out: hHeap=0x12c0000) returned 1 [0191.908] Sleep (dwMilliseconds=0x3e8) [0193.326] GetProcessHeap () returned 0x12c0000 [0193.326] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12e8ba8 [0193.326] GetProcessHeap () returned 0x12c0000 [0193.326] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12e8b30 [0193.326] GetProcessHeap () returned 0x12c0000 [0193.326] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e) returned 0x12e8b80 [0193.326] GetProcessHeap () returned 0x12c0000 [0193.326] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x130e5d0 [0193.326] GetProcessHeap () returned 0x12c0000 [0193.326] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e5d0 | out: hHeap=0x12c0000) returned 1 [0193.326] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x12e8b30, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0193.326] GetProcessHeap () returned 0x12c0000 [0193.326] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b80 | out: hHeap=0x12c0000) returned 1 [0193.326] GetProcessHeap () returned 0x12c0000 [0193.326] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8ba8 | out: hHeap=0x12c0000) returned 1 [0193.326] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2ecfebc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2ecfebc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0193.326] GetProcessHeap () returned 0x12c0000 [0193.326] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b30 | out: hHeap=0x12c0000) returned 1 [0193.326] GetProcessHeap () returned 0x12c0000 [0193.326] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x40) returned 0x12d2568 [0193.326] GetProcessHeap () returned 0x12c0000 [0193.327] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x3a) returned 0x12d2838 [0193.327] GetProcessHeap () returned 0x12c0000 [0193.327] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d2838, Size=0x72) returned 0x4053ed8 [0193.327] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x228 [0193.327] WaitForSingleObject (hHandle=0x228, dwMilliseconds=0x0) returned 0x102 [0193.327] CloseHandle (hObject=0x228) returned 1 [0193.327] GetProcessHeap () returned 0x12c0000 [0193.327] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2568 | out: hHeap=0x12c0000) returned 1 [0193.327] GetProcessHeap () returned 0x12c0000 [0193.327] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x4053ed8 | out: hHeap=0x12c0000) returned 1 [0193.327] Sleep (dwMilliseconds=0x3e8) [0194.667] GetProcessHeap () returned 0x12c0000 [0194.667] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12e8b80 [0194.667] GetProcessHeap () returned 0x12c0000 [0194.667] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12e8b30 [0194.667] GetProcessHeap () returned 0x12c0000 [0194.667] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e) returned 0x12e8ba8 [0194.667] GetProcessHeap () returned 0x12c0000 [0194.667] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x130e798 [0194.667] GetProcessHeap () returned 0x12c0000 [0194.667] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e798 | out: hHeap=0x12c0000) returned 1 [0194.667] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x12e8b30, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0194.667] GetProcessHeap () returned 0x12c0000 [0194.667] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8ba8 | out: hHeap=0x12c0000) returned 1 [0194.667] GetProcessHeap () returned 0x12c0000 [0194.667] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b80 | out: hHeap=0x12c0000) returned 1 [0194.667] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2ecfebc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2ecfebc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0194.669] GetProcessHeap () returned 0x12c0000 [0194.669] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b30 | out: hHeap=0x12c0000) returned 1 [0194.669] GetProcessHeap () returned 0x12c0000 [0194.669] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x40) returned 0x12d2640 [0194.669] GetProcessHeap () returned 0x12c0000 [0194.669] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x3a) returned 0x12d25b0 [0194.669] GetProcessHeap () returned 0x12c0000 [0194.669] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d25b0, Size=0x72) returned 0x4053dd8 [0194.669] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2f0 [0194.669] WaitForSingleObject (hHandle=0x2f0, dwMilliseconds=0x0) returned 0x102 [0194.669] CloseHandle (hObject=0x2f0) returned 1 [0194.669] GetProcessHeap () returned 0x12c0000 [0194.669] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2640 | out: hHeap=0x12c0000) returned 1 [0194.669] GetProcessHeap () returned 0x12c0000 [0194.669] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x4053dd8 | out: hHeap=0x12c0000) returned 1 [0194.669] Sleep (dwMilliseconds=0x3e8) [0195.937] GetProcessHeap () returned 0x12c0000 [0195.937] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12e8c98 [0195.937] GetProcessHeap () returned 0x12c0000 [0195.937] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12e8b30 [0195.937] GetProcessHeap () returned 0x12c0000 [0195.937] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e) returned 0x12e8b80 [0195.937] GetProcessHeap () returned 0x12c0000 [0195.937] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x4059eb0 [0195.937] GetProcessHeap () returned 0x12c0000 [0195.937] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x4059eb0 | out: hHeap=0x12c0000) returned 1 [0195.937] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x12e8b30, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0195.937] GetProcessHeap () returned 0x12c0000 [0195.937] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b80 | out: hHeap=0x12c0000) returned 1 [0195.938] GetProcessHeap () returned 0x12c0000 [0195.938] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8c98 | out: hHeap=0x12c0000) returned 1 [0195.938] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2ecfebc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2ecfebc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0195.938] GetProcessHeap () returned 0x12c0000 [0195.938] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b30 | out: hHeap=0x12c0000) returned 1 [0195.938] GetProcessHeap () returned 0x12c0000 [0195.938] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x40) returned 0x12d2568 [0195.938] GetProcessHeap () returned 0x12c0000 [0195.938] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x3a) returned 0x12d2688 [0195.938] GetProcessHeap () returned 0x12c0000 [0195.938] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d2688, Size=0x72) returned 0x40563f0 [0195.938] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x300 [0195.938] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0x0) returned 0x102 [0195.938] CloseHandle (hObject=0x300) returned 1 [0195.938] GetProcessHeap () returned 0x12c0000 [0195.938] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2568 | out: hHeap=0x12c0000) returned 1 [0195.938] GetProcessHeap () returned 0x12c0000 [0195.938] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x40563f0 | out: hHeap=0x12c0000) returned 1 [0195.938] Sleep (dwMilliseconds=0x3e8) [0197.061] GetProcessHeap () returned 0x12c0000 [0197.061] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12e8c70 [0197.061] GetProcessHeap () returned 0x12c0000 [0197.061] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12e8b30 [0197.061] GetProcessHeap () returned 0x12c0000 [0197.061] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e) returned 0x12e8a18 [0197.061] GetProcessHeap () returned 0x12c0000 [0197.061] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x1370ef0 [0197.061] GetProcessHeap () returned 0x12c0000 [0197.061] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1370ef0 | out: hHeap=0x12c0000) returned 1 [0197.061] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x12e8b30, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0197.061] GetProcessHeap () returned 0x12c0000 [0197.061] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8a18 | out: hHeap=0x12c0000) returned 1 [0197.061] GetProcessHeap () returned 0x12c0000 [0197.061] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8c70 | out: hHeap=0x12c0000) returned 1 [0197.061] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2ecfebc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2ecfebc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0197.061] GetProcessHeap () returned 0x12c0000 [0197.062] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b30 | out: hHeap=0x12c0000) returned 1 [0197.062] GetProcessHeap () returned 0x12c0000 [0197.062] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x40) returned 0x12d2b08 [0197.062] GetProcessHeap () returned 0x12c0000 [0197.062] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x3a) returned 0x12d2568 [0197.062] GetProcessHeap () returned 0x12c0000 [0197.062] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d2568, Size=0x72) returned 0x3fc0d00 [0197.062] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2d0 [0197.062] WaitForSingleObject (hHandle=0x2d0, dwMilliseconds=0x0) returned 0x102 [0197.062] CloseHandle (hObject=0x2d0) returned 1 [0197.062] GetProcessHeap () returned 0x12c0000 [0197.062] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2b08 | out: hHeap=0x12c0000) returned 1 [0197.062] GetProcessHeap () returned 0x12c0000 [0197.062] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fc0d00 | out: hHeap=0x12c0000) returned 1 [0197.062] Sleep (dwMilliseconds=0x3e8) [0198.212] GetProcessHeap () returned 0x12c0000 [0198.212] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12e8b30 [0198.212] GetProcessHeap () returned 0x12c0000 [0198.212] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12e8c70 [0198.212] GetProcessHeap () returned 0x12c0000 [0198.212] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e) returned 0x12e8c98 [0198.212] GetProcessHeap () returned 0x12c0000 [0198.212] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x4057c40 [0198.212] GetProcessHeap () returned 0x12c0000 [0198.212] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x4057c40 | out: hHeap=0x12c0000) returned 1 [0198.212] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x12e8c70, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0198.212] GetProcessHeap () returned 0x12c0000 [0198.212] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8c98 | out: hHeap=0x12c0000) returned 1 [0198.212] GetProcessHeap () returned 0x12c0000 [0198.212] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b30 | out: hHeap=0x12c0000) returned 1 [0198.212] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2ecfebc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2ecfebc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0198.213] GetProcessHeap () returned 0x12c0000 [0198.213] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8c70 | out: hHeap=0x12c0000) returned 1 [0198.213] GetProcessHeap () returned 0x12c0000 [0198.213] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x40) returned 0x12d2be0 [0198.213] GetProcessHeap () returned 0x12c0000 [0198.213] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x3a) returned 0x12d2958 [0198.213] GetProcessHeap () returned 0x12c0000 [0198.213] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d2958, Size=0x72) returned 0x1371218 [0198.213] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2b0 [0198.213] WaitForSingleObject (hHandle=0x2b0, dwMilliseconds=0x0) returned 0x102 [0198.213] CloseHandle (hObject=0x2b0) returned 1 [0198.213] GetProcessHeap () returned 0x12c0000 [0198.213] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2be0 | out: hHeap=0x12c0000) returned 1 [0198.213] GetProcessHeap () returned 0x12c0000 [0198.213] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1371218 | out: hHeap=0x12c0000) returned 1 [0198.213] Sleep (dwMilliseconds=0x3e8) [0199.347] GetProcessHeap () returned 0x12c0000 [0199.347] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12e8c98 [0199.347] GetProcessHeap () returned 0x12c0000 [0199.347] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12e8b30 [0199.347] GetProcessHeap () returned 0x12c0000 [0199.347] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e) returned 0x12e8a40 [0199.348] GetProcessHeap () returned 0x12c0000 [0199.348] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x40576e8 [0199.348] GetProcessHeap () returned 0x12c0000 [0199.348] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x40576e8 | out: hHeap=0x12c0000) returned 1 [0199.348] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x12e8b30, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0199.348] GetProcessHeap () returned 0x12c0000 [0199.348] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8a40 | out: hHeap=0x12c0000) returned 1 [0199.348] GetProcessHeap () returned 0x12c0000 [0199.348] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8c98 | out: hHeap=0x12c0000) returned 1 [0199.348] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2ecfebc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2ecfebc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0199.348] GetProcessHeap () returned 0x12c0000 [0199.348] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b30 | out: hHeap=0x12c0000) returned 1 [0199.348] GetProcessHeap () returned 0x12c0000 [0199.348] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x40) returned 0x12d2b08 [0199.348] GetProcessHeap () returned 0x12c0000 [0199.348] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x3a) returned 0x12d29e8 [0199.348] GetProcessHeap () returned 0x12c0000 [0199.348] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d29e8, Size=0x72) returned 0x1371098 [0199.348] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2b4 [0199.348] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x0) returned 0x102 [0199.349] CloseHandle (hObject=0x2b4) returned 1 [0199.349] GetProcessHeap () returned 0x12c0000 [0199.349] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2b08 | out: hHeap=0x12c0000) returned 1 [0199.349] GetProcessHeap () returned 0x12c0000 [0199.349] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1371098 | out: hHeap=0x12c0000) returned 1 [0199.349] Sleep (dwMilliseconds=0x3e8) [0200.587] GetProcessHeap () returned 0x12c0000 [0200.587] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12e8c70 [0200.587] GetProcessHeap () returned 0x12c0000 [0200.587] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12e8b80 [0200.589] GetProcessHeap () returned 0x12c0000 [0200.589] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e) returned 0x12e8b30 [0200.589] GetProcessHeap () returned 0x12c0000 [0200.589] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x4057780 [0200.589] GetProcessHeap () returned 0x12c0000 [0200.589] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x4057780 | out: hHeap=0x12c0000) returned 1 [0200.589] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x12e8b80, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0200.589] GetProcessHeap () returned 0x12c0000 [0200.589] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b30 | out: hHeap=0x12c0000) returned 1 [0200.589] GetProcessHeap () returned 0x12c0000 [0200.589] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8c70 | out: hHeap=0x12c0000) returned 1 [0200.589] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2ecfebc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2ecfebc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0200.589] GetProcessHeap () returned 0x12c0000 [0200.589] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b80 | out: hHeap=0x12c0000) returned 1 [0200.589] GetProcessHeap () returned 0x12c0000 [0200.590] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x40) returned 0x12d2b08 [0200.590] GetProcessHeap () returned 0x12c0000 [0200.590] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x3a) returned 0x12d2b98 [0200.590] GetProcessHeap () returned 0x12c0000 [0200.590] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d2b98, Size=0x72) returned 0x1370d98 [0200.590] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2b4 [0200.590] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x0) returned 0x102 [0200.590] CloseHandle (hObject=0x2b4) returned 1 [0200.590] GetProcessHeap () returned 0x12c0000 [0200.590] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2b08 | out: hHeap=0x12c0000) returned 1 [0200.590] GetProcessHeap () returned 0x12c0000 [0200.590] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1370d98 | out: hHeap=0x12c0000) returned 1 [0200.590] Sleep (dwMilliseconds=0x3e8) [0203.433] GetProcessHeap () returned 0x12c0000 [0203.433] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12e8bf8 [0203.433] GetProcessHeap () returned 0x12c0000 [0203.433] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12e8ba8 [0203.433] GetProcessHeap () returned 0x12c0000 [0203.433] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e) returned 0x12e8c70 [0203.433] GetProcessHeap () returned 0x12c0000 [0203.433] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x4057f38 [0203.433] GetProcessHeap () returned 0x12c0000 [0203.434] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x4057f38 | out: hHeap=0x12c0000) returned 1 [0203.434] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x12e8ba8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0203.443] GetProcessHeap () returned 0x12c0000 [0203.443] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8c70 | out: hHeap=0x12c0000) returned 1 [0203.443] GetProcessHeap () returned 0x12c0000 [0203.443] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8bf8 | out: hHeap=0x12c0000) returned 1 [0203.443] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2ecfebc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2ecfebc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0203.454] GetProcessHeap () returned 0x12c0000 [0203.454] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8ba8 | out: hHeap=0x12c0000) returned 1 [0203.454] GetProcessHeap () returned 0x12c0000 [0203.454] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x40) returned 0x12d2718 [0203.454] GetProcessHeap () returned 0x12c0000 [0203.454] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x3a) returned 0x12d2838 [0203.454] GetProcessHeap () returned 0x12c0000 [0203.454] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d2838, Size=0x72) returned 0x1370a98 [0203.454] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2b4 [0203.456] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x0) returned 0x102 [0203.464] CloseHandle (hObject=0x2b4) returned 1 [0203.464] GetProcessHeap () returned 0x12c0000 [0203.464] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2718 | out: hHeap=0x12c0000) returned 1 [0203.464] GetProcessHeap () returned 0x12c0000 [0203.464] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1370a98 | out: hHeap=0x12c0000) returned 1 [0203.465] Sleep (dwMilliseconds=0x3e8) [0204.642] GetProcessHeap () returned 0x12c0000 [0204.642] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12e8b30 [0204.642] GetProcessHeap () returned 0x12c0000 [0204.642] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12e8c70 [0204.677] GetProcessHeap () returned 0x12c0000 [0204.677] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e) returned 0x12e8a40 [0204.677] GetProcessHeap () returned 0x12c0000 [0204.677] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x4057818 [0204.677] GetProcessHeap () returned 0x12c0000 [0204.677] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x4057818 | out: hHeap=0x12c0000) returned 1 [0204.677] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x12e8c70, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0204.677] GetProcessHeap () returned 0x12c0000 [0204.677] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8a40 | out: hHeap=0x12c0000) returned 1 [0204.677] GetProcessHeap () returned 0x12c0000 [0204.677] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b30 | out: hHeap=0x12c0000) returned 1 [0204.677] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2ecfebc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2ecfebc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0204.677] GetProcessHeap () returned 0x12c0000 [0204.677] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8c70 | out: hHeap=0x12c0000) returned 1 [0204.677] GetProcessHeap () returned 0x12c0000 [0204.677] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x40) returned 0x12d2718 [0204.677] GetProcessHeap () returned 0x12c0000 [0204.677] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x3a) returned 0x12d2838 [0204.677] GetProcessHeap () returned 0x12c0000 [0204.677] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d2838, Size=0x72) returned 0x1371018 [0204.677] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2b4 [0204.678] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x0) returned 0x102 [0204.678] CloseHandle (hObject=0x2b4) returned 1 [0204.678] GetProcessHeap () returned 0x12c0000 [0204.678] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2718 | out: hHeap=0x12c0000) returned 1 [0204.678] GetProcessHeap () returned 0x12c0000 [0204.678] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1371018 | out: hHeap=0x12c0000) returned 1 [0204.678] Sleep (dwMilliseconds=0x3e8) [0205.882] GetProcessHeap () returned 0x12c0000 [0205.882] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12e8b30 [0205.882] GetProcessHeap () returned 0x12c0000 [0205.882] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12e8a18 [0205.882] GetProcessHeap () returned 0x12c0000 [0205.882] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e) returned 0x12e8ba8 [0205.882] GetProcessHeap () returned 0x12c0000 [0205.882] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x40573f0 [0205.882] GetProcessHeap () returned 0x12c0000 [0205.882] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x40573f0 | out: hHeap=0x12c0000) returned 1 [0205.882] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x12e8a18, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0205.882] GetProcessHeap () returned 0x12c0000 [0205.882] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8ba8 | out: hHeap=0x12c0000) returned 1 [0205.882] GetProcessHeap () returned 0x12c0000 [0205.882] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b30 | out: hHeap=0x12c0000) returned 1 [0205.882] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2ecfebc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2ecfebc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0205.882] GetProcessHeap () returned 0x12c0000 [0205.882] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8a18 | out: hHeap=0x12c0000) returned 1 [0205.882] GetProcessHeap () returned 0x12c0000 [0205.882] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x40) returned 0x12d2838 [0205.883] GetProcessHeap () returned 0x12c0000 [0205.883] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x3a) returned 0x12d29e8 [0205.883] GetProcessHeap () returned 0x12c0000 [0205.883] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d29e8, Size=0x72) returned 0x1371618 [0205.883] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2c8 [0205.883] WaitForSingleObject (hHandle=0x2c8, dwMilliseconds=0x0) returned 0x102 [0205.884] CloseHandle (hObject=0x2c8) returned 1 [0205.884] GetProcessHeap () returned 0x12c0000 [0205.885] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2838 | out: hHeap=0x12c0000) returned 1 [0205.885] GetProcessHeap () returned 0x12c0000 [0205.885] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1371618 | out: hHeap=0x12c0000) returned 1 [0205.895] Sleep (dwMilliseconds=0x3e8) [0206.951] GetProcessHeap () returned 0x12c0000 [0206.951] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12e8a18 [0206.951] GetProcessHeap () returned 0x12c0000 [0206.951] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12e8b30 [0206.958] GetProcessHeap () returned 0x12c0000 [0206.958] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e) returned 0x12e8c70 [0206.958] GetProcessHeap () returned 0x12c0000 [0206.958] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x4057818 [0206.961] GetProcessHeap () returned 0x12c0000 [0206.961] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x4057818 | out: hHeap=0x12c0000) returned 1 [0206.961] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x12e8b30, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0206.961] GetProcessHeap () returned 0x12c0000 [0206.961] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8c70 | out: hHeap=0x12c0000) returned 1 [0206.961] GetProcessHeap () returned 0x12c0000 [0206.961] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8a18 | out: hHeap=0x12c0000) returned 1 [0206.961] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2ecfebc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2ecfebc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0206.961] GetProcessHeap () returned 0x12c0000 [0206.961] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b30 | out: hHeap=0x12c0000) returned 1 [0206.961] GetProcessHeap () returned 0x12c0000 [0206.962] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x40) returned 0x12d25b0 [0206.962] GetProcessHeap () returned 0x12c0000 [0206.969] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x3a) returned 0x12d2568 [0206.969] GetProcessHeap () returned 0x12c0000 [0206.969] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d2568, Size=0x72) returned 0x1371118 [0206.969] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2a4 [0206.971] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0x0) returned 0x102 [0206.972] CloseHandle (hObject=0x2a4) returned 1 [0206.972] GetProcessHeap () returned 0x12c0000 [0206.972] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d25b0 | out: hHeap=0x12c0000) returned 1 [0206.972] GetProcessHeap () returned 0x12c0000 [0206.972] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1371118 | out: hHeap=0x12c0000) returned 1 [0206.972] Sleep (dwMilliseconds=0x3e8) [0208.538] GetProcessHeap () returned 0x12c0000 [0208.546] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12e8c70 [0208.546] GetProcessHeap () returned 0x12c0000 [0208.546] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12e8b30 [0208.546] GetProcessHeap () returned 0x12c0000 [0208.546] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e) returned 0x12e8ba8 [0208.546] GetProcessHeap () returned 0x12c0000 [0208.546] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x4057358 [0208.548] GetProcessHeap () returned 0x12c0000 [0208.548] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x4057358 | out: hHeap=0x12c0000) returned 1 [0208.548] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x12e8b30, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0208.548] GetProcessHeap () returned 0x12c0000 [0208.548] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8ba8 | out: hHeap=0x12c0000) returned 1 [0208.548] GetProcessHeap () returned 0x12c0000 [0208.548] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8c70 | out: hHeap=0x12c0000) returned 1 [0208.548] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2ecfebc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2ecfebc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0208.549] GetProcessHeap () returned 0x12c0000 [0208.558] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b30 | out: hHeap=0x12c0000) returned 1 [0208.558] GetProcessHeap () returned 0x12c0000 [0208.558] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x40) returned 0x12d2838 [0208.559] GetProcessHeap () returned 0x12c0000 [0208.567] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x3a) returned 0x12d2688 [0208.567] GetProcessHeap () returned 0x12c0000 [0208.567] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d2688, Size=0x72) returned 0x1371218 [0208.568] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2a4 [0208.570] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0x0) returned 0x102 [0208.574] CloseHandle (hObject=0x2a4) returned 1 [0208.574] GetProcessHeap () returned 0x12c0000 [0208.574] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2838 | out: hHeap=0x12c0000) returned 1 [0208.574] GetProcessHeap () returned 0x12c0000 [0208.574] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1371218 | out: hHeap=0x12c0000) returned 1 [0208.574] Sleep (dwMilliseconds=0x3e8) [0209.664] GetProcessHeap () returned 0x12c0000 [0209.664] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12e8b30 [0209.664] GetProcessHeap () returned 0x12c0000 [0209.664] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12e8b80 [0209.664] GetProcessHeap () returned 0x12c0000 [0209.664] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e) returned 0x12e8a40 [0209.664] GetProcessHeap () returned 0x12c0000 [0209.664] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x4057c40 [0209.664] GetProcessHeap () returned 0x12c0000 [0209.664] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x4057c40 | out: hHeap=0x12c0000) returned 1 [0209.664] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x12e8b80, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0209.664] GetProcessHeap () returned 0x12c0000 [0209.664] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8a40 | out: hHeap=0x12c0000) returned 1 [0209.664] GetProcessHeap () returned 0x12c0000 [0209.664] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b30 | out: hHeap=0x12c0000) returned 1 [0209.664] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2ecfebc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2ecfebc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0209.664] GetProcessHeap () returned 0x12c0000 [0209.664] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b80 | out: hHeap=0x12c0000) returned 1 [0209.664] GetProcessHeap () returned 0x12c0000 [0209.664] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x40) returned 0x12d29e8 [0209.664] GetProcessHeap () returned 0x12c0000 [0209.664] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x3a) returned 0x12d2a30 [0209.664] GetProcessHeap () returned 0x12c0000 [0209.665] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d2a30, Size=0x72) returned 0x1371498 [0209.665] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2a4 [0209.665] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0x0) returned 0x102 [0209.665] CloseHandle (hObject=0x2a4) returned 1 [0209.665] GetProcessHeap () returned 0x12c0000 [0209.665] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d29e8 | out: hHeap=0x12c0000) returned 1 [0209.665] GetProcessHeap () returned 0x12c0000 [0209.665] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1371498 | out: hHeap=0x12c0000) returned 1 [0209.665] Sleep (dwMilliseconds=0x3e8) [0210.684] GetProcessHeap () returned 0x12c0000 [0210.699] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12e8c70 [0210.699] GetProcessHeap () returned 0x12c0000 [0210.699] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12e8c98 [0210.699] GetProcessHeap () returned 0x12c0000 [0210.699] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e) returned 0x12e8b30 [0210.699] GetProcessHeap () returned 0x12c0000 [0210.699] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x4057358 [0210.699] GetProcessHeap () returned 0x12c0000 [0210.699] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x4057358 | out: hHeap=0x12c0000) returned 1 [0210.699] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x12e8c98, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0210.699] GetProcessHeap () returned 0x12c0000 [0210.699] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b30 | out: hHeap=0x12c0000) returned 1 [0210.699] GetProcessHeap () returned 0x12c0000 [0210.699] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8c70 | out: hHeap=0x12c0000) returned 1 [0210.699] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2ecfebc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2ecfebc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0210.699] GetProcessHeap () returned 0x12c0000 [0210.700] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8c98 | out: hHeap=0x12c0000) returned 1 [0210.700] GetProcessHeap () returned 0x12c0000 [0210.700] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x40) returned 0x12d29e8 [0210.700] GetProcessHeap () returned 0x12c0000 [0210.700] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x3a) returned 0x12d2958 [0210.700] GetProcessHeap () returned 0x12c0000 [0210.700] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d2958, Size=0x72) returned 0x1370b18 [0210.700] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2a4 [0210.700] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0x0) returned 0x102 [0210.700] CloseHandle (hObject=0x2a4) returned 1 [0210.700] GetProcessHeap () returned 0x12c0000 [0210.700] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d29e8 | out: hHeap=0x12c0000) returned 1 [0210.700] GetProcessHeap () returned 0x12c0000 [0210.700] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1370b18 | out: hHeap=0x12c0000) returned 1 [0210.700] Sleep (dwMilliseconds=0x3e8) [0211.766] GetProcessHeap () returned 0x12c0000 [0211.766] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12e8b80 [0211.766] GetProcessHeap () returned 0x12c0000 [0211.766] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12e8c70 [0211.766] GetProcessHeap () returned 0x12c0000 [0211.766] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e) returned 0x12e8c98 [0211.766] GetProcessHeap () returned 0x12c0000 [0211.766] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x4057948 [0211.766] GetProcessHeap () returned 0x12c0000 [0211.767] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x4057948 | out: hHeap=0x12c0000) returned 1 [0211.767] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x12e8c70, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0211.767] GetProcessHeap () returned 0x12c0000 [0211.767] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8c98 | out: hHeap=0x12c0000) returned 1 [0211.767] GetProcessHeap () returned 0x12c0000 [0211.767] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b80 | out: hHeap=0x12c0000) returned 1 [0211.767] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2ecfebc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2ecfebc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0211.807] GetProcessHeap () returned 0x12c0000 [0211.807] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8c70 | out: hHeap=0x12c0000) returned 1 [0211.813] GetProcessHeap () returned 0x12c0000 [0211.813] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x40) returned 0x12d25b0 [0211.813] GetProcessHeap () returned 0x12c0000 [0211.813] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x3a) returned 0x12d2838 [0211.813] GetProcessHeap () returned 0x12c0000 [0211.813] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d2838, Size=0x72) returned 0x1371098 [0211.813] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2a4 [0211.813] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0x0) returned 0x102 [0211.813] CloseHandle (hObject=0x2a4) returned 1 [0211.813] GetProcessHeap () returned 0x12c0000 [0211.813] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d25b0 | out: hHeap=0x12c0000) returned 1 [0211.813] GetProcessHeap () returned 0x12c0000 [0211.813] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1371098 | out: hHeap=0x12c0000) returned 1 [0211.813] Sleep (dwMilliseconds=0x3e8) [0213.301] GetProcessHeap () returned 0x12c0000 [0213.301] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12e8c98 [0213.301] GetProcessHeap () returned 0x12c0000 [0213.301] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12e8a18 [0213.301] GetProcessHeap () returned 0x12c0000 [0213.301] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e) returned 0x12e8bf8 [0213.301] GetProcessHeap () returned 0x12c0000 [0213.301] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x40578b0 [0213.301] GetProcessHeap () returned 0x12c0000 [0213.301] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x40578b0 | out: hHeap=0x12c0000) returned 1 [0213.301] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x12e8a18, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0213.301] GetProcessHeap () returned 0x12c0000 [0213.301] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8bf8 | out: hHeap=0x12c0000) returned 1 [0213.301] GetProcessHeap () returned 0x12c0000 [0213.301] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8c98 | out: hHeap=0x12c0000) returned 1 [0213.302] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2ecfebc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2ecfebc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0213.302] GetProcessHeap () returned 0x12c0000 [0213.302] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8a18 | out: hHeap=0x12c0000) returned 1 [0213.302] GetProcessHeap () returned 0x12c0000 [0213.302] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x40) returned 0x12d2568 [0213.302] GetProcessHeap () returned 0x12c0000 [0213.302] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x3a) returned 0x12d2a30 [0213.302] GetProcessHeap () returned 0x12c0000 [0213.302] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d2a30, Size=0x72) returned 0x1371118 [0213.302] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2a4 [0213.302] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0x0) returned 0x102 [0213.302] CloseHandle (hObject=0x2a4) returned 1 [0213.302] GetProcessHeap () returned 0x12c0000 [0213.302] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2568 | out: hHeap=0x12c0000) returned 1 [0213.302] GetProcessHeap () returned 0x12c0000 [0213.302] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1371118 | out: hHeap=0x12c0000) returned 1 [0213.302] Sleep (dwMilliseconds=0x3e8) [0214.823] GetProcessHeap () returned 0x12c0000 [0214.823] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12e8b30 [0214.823] GetProcessHeap () returned 0x12c0000 [0214.823] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12e8ba8 [0214.823] GetProcessHeap () returned 0x12c0000 [0214.823] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e) returned 0x12e8c70 [0214.823] GetProcessHeap () returned 0x12c0000 [0214.823] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x4057d70 [0214.823] GetProcessHeap () returned 0x12c0000 [0214.823] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x4057d70 | out: hHeap=0x12c0000) returned 1 [0214.824] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x12e8ba8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0214.824] GetProcessHeap () returned 0x12c0000 [0214.824] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8c70 | out: hHeap=0x12c0000) returned 1 [0214.824] GetProcessHeap () returned 0x12c0000 [0214.824] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b30 | out: hHeap=0x12c0000) returned 1 [0214.824] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2ecfebc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2ecfebc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0214.824] GetProcessHeap () returned 0x12c0000 [0214.824] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8ba8 | out: hHeap=0x12c0000) returned 1 [0214.824] GetProcessHeap () returned 0x12c0000 [0214.824] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x40) returned 0x12d2958 [0214.824] GetProcessHeap () returned 0x12c0000 [0214.824] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x3a) returned 0x12d29e8 [0214.824] GetProcessHeap () returned 0x12c0000 [0214.824] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d29e8, Size=0x72) returned 0x1371798 [0214.824] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2a4 [0214.824] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0x0) returned 0x102 [0214.824] CloseHandle (hObject=0x2a4) returned 1 [0214.824] GetProcessHeap () returned 0x12c0000 [0214.824] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2958 | out: hHeap=0x12c0000) returned 1 [0214.824] GetProcessHeap () returned 0x12c0000 [0214.824] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1371798 | out: hHeap=0x12c0000) returned 1 [0214.824] Sleep (dwMilliseconds=0x3e8) [0216.478] GetProcessHeap () returned 0x12c0000 [0216.478] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12e8c70 [0216.478] GetProcessHeap () returned 0x12c0000 [0216.478] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12e8b80 [0216.478] GetProcessHeap () returned 0x12c0000 [0216.478] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e) returned 0x12e8a18 [0216.478] GetProcessHeap () returned 0x12c0000 [0216.478] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x40572c0 [0216.478] GetProcessHeap () returned 0x12c0000 [0216.479] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x40572c0 | out: hHeap=0x12c0000) returned 1 [0216.479] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x12e8b80, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0216.479] GetProcessHeap () returned 0x12c0000 [0216.480] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8a18 | out: hHeap=0x12c0000) returned 1 [0216.480] GetProcessHeap () returned 0x12c0000 [0216.480] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8c70 | out: hHeap=0x12c0000) returned 1 [0216.480] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2ecfebc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2ecfebc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0216.480] GetProcessHeap () returned 0x12c0000 [0216.481] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b80 | out: hHeap=0x12c0000) returned 1 [0216.481] GetProcessHeap () returned 0x12c0000 [0216.489] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x40) returned 0x12d29e8 [0216.489] GetProcessHeap () returned 0x12c0000 [0216.490] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x3a) returned 0x12d2958 [0216.490] GetProcessHeap () returned 0x12c0000 [0216.497] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d2958, Size=0x72) returned 0x1371598 [0216.497] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2a4 [0216.497] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0x0) returned 0x102 [0216.497] CloseHandle (hObject=0x2a4) returned 1 [0216.497] GetProcessHeap () returned 0x12c0000 [0216.497] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d29e8 | out: hHeap=0x12c0000) returned 1 [0216.497] GetProcessHeap () returned 0x12c0000 [0216.497] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1371598 | out: hHeap=0x12c0000) returned 1 [0216.497] Sleep (dwMilliseconds=0x3e8) [0217.799] GetProcessHeap () returned 0x12c0000 [0217.799] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12e8b80 [0217.799] GetProcessHeap () returned 0x12c0000 [0217.799] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12e8b30 [0217.799] GetProcessHeap () returned 0x12c0000 [0217.799] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e) returned 0x12e8ba8 [0217.799] GetProcessHeap () returned 0x12c0000 [0217.799] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x4057fd0 [0217.799] GetProcessHeap () returned 0x12c0000 [0217.799] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x4057fd0 | out: hHeap=0x12c0000) returned 1 [0217.800] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x12e8b30, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0217.800] GetProcessHeap () returned 0x12c0000 [0217.800] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8ba8 | out: hHeap=0x12c0000) returned 1 [0217.800] GetProcessHeap () returned 0x12c0000 [0217.800] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b80 | out: hHeap=0x12c0000) returned 1 [0217.800] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2ecfebc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2ecfebc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0217.809] GetProcessHeap () returned 0x12c0000 [0217.809] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b30 | out: hHeap=0x12c0000) returned 1 [0217.809] GetProcessHeap () returned 0x12c0000 [0217.809] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x40) returned 0x12d2718 [0217.809] GetProcessHeap () returned 0x12c0000 [0217.809] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x3a) returned 0x12d2640 [0217.809] GetProcessHeap () returned 0x12c0000 [0217.809] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d2640, Size=0x72) returned 0x1370a98 [0217.810] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2a4 [0217.810] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0x0) returned 0x102 [0217.810] CloseHandle (hObject=0x2a4) returned 1 [0217.816] GetProcessHeap () returned 0x12c0000 [0217.817] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2718 | out: hHeap=0x12c0000) returned 1 [0217.817] GetProcessHeap () returned 0x12c0000 [0217.817] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1370a98 | out: hHeap=0x12c0000) returned 1 [0217.817] Sleep (dwMilliseconds=0x3e8) [0219.691] GetProcessHeap () returned 0x12c0000 [0219.692] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12e8a40 [0219.692] GetProcessHeap () returned 0x12c0000 [0219.709] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12e8ba8 [0219.709] GetProcessHeap () returned 0x12c0000 [0219.709] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e) returned 0x12e8b30 [0219.723] GetProcessHeap () returned 0x12c0000 [0219.723] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x40573f0 [0219.723] GetProcessHeap () returned 0x12c0000 [0219.723] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x40573f0 | out: hHeap=0x12c0000) returned 1 [0219.723] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x12e8ba8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0219.723] GetProcessHeap () returned 0x12c0000 [0219.748] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b30 | out: hHeap=0x12c0000) returned 1 [0219.748] GetProcessHeap () returned 0x12c0000 [0219.748] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8a40 | out: hHeap=0x12c0000) returned 1 [0219.758] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2ecfebc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2ecfebc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0219.871] GetProcessHeap () returned 0x12c0000 [0219.871] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8ba8 | out: hHeap=0x12c0000) returned 1 [0219.871] GetProcessHeap () returned 0x12c0000 [0219.871] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x40) returned 0x12d2958 [0219.871] GetProcessHeap () returned 0x12c0000 [0219.871] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x3a) returned 0x12d29e8 [0219.871] GetProcessHeap () returned 0x12c0000 [0219.891] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d29e8, Size=0x72) returned 0x1370d18 [0219.891] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2a0 [0219.895] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0x0) returned 0x102 [0219.895] CloseHandle (hObject=0x2a0) returned 1 [0219.895] GetProcessHeap () returned 0x12c0000 [0219.895] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2958 | out: hHeap=0x12c0000) returned 1 [0219.895] GetProcessHeap () returned 0x12c0000 [0219.895] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1370d18 | out: hHeap=0x12c0000) returned 1 [0219.895] Sleep (dwMilliseconds=0x3e8) [0221.184] GetProcessHeap () returned 0x12c0000 [0221.184] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12e8a40 [0221.184] GetProcessHeap () returned 0x12c0000 [0221.184] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12e8b30 [0221.184] GetProcessHeap () returned 0x12c0000 [0221.184] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e) returned 0x12e8c70 [0221.184] GetProcessHeap () returned 0x12c0000 [0221.184] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x40573f0 [0221.184] GetProcessHeap () returned 0x12c0000 [0221.184] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x40573f0 | out: hHeap=0x12c0000) returned 1 [0221.185] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x12e8b30, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0221.185] GetProcessHeap () returned 0x12c0000 [0221.185] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8c70 | out: hHeap=0x12c0000) returned 1 [0221.185] GetProcessHeap () returned 0x12c0000 [0221.185] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8a40 | out: hHeap=0x12c0000) returned 1 [0221.185] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2ecfebc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2ecfebc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0221.185] GetProcessHeap () returned 0x12c0000 [0221.185] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b30 | out: hHeap=0x12c0000) returned 1 [0221.185] GetProcessHeap () returned 0x12c0000 [0221.186] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x40) returned 0x12d2a30 [0221.186] GetProcessHeap () returned 0x12c0000 [0221.186] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x3a) returned 0x12d2568 [0221.186] GetProcessHeap () returned 0x12c0000 [0221.186] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d2568, Size=0x72) returned 0x1370d18 [0221.186] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2a4 [0221.194] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0x0) returned 0x102 [0221.194] CloseHandle (hObject=0x2a4) returned 1 [0221.194] GetProcessHeap () returned 0x12c0000 [0221.194] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2a30 | out: hHeap=0x12c0000) returned 1 [0221.194] GetProcessHeap () returned 0x12c0000 [0221.194] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1370d18 | out: hHeap=0x12c0000) returned 1 [0221.194] Sleep (dwMilliseconds=0x3e8) [0222.232] GetProcessHeap () returned 0x12c0000 [0222.232] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12e8b30 [0222.232] GetProcessHeap () returned 0x12c0000 [0222.232] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12e8c70 [0222.232] GetProcessHeap () returned 0x12c0000 [0222.232] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e) returned 0x12e8bf8 [0222.232] GetProcessHeap () returned 0x12c0000 [0222.232] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x4057e08 [0222.232] GetProcessHeap () returned 0x12c0000 [0222.232] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x4057e08 | out: hHeap=0x12c0000) returned 1 [0222.232] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x12e8c70, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0222.232] GetProcessHeap () returned 0x12c0000 [0222.232] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8bf8 | out: hHeap=0x12c0000) returned 1 [0222.232] GetProcessHeap () returned 0x12c0000 [0222.232] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b30 | out: hHeap=0x12c0000) returned 1 [0222.233] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2ecfebc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2ecfebc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0222.233] GetProcessHeap () returned 0x12c0000 [0222.233] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8c70 | out: hHeap=0x12c0000) returned 1 [0222.233] GetProcessHeap () returned 0x12c0000 [0222.233] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x40) returned 0x12d2568 [0222.233] GetProcessHeap () returned 0x12c0000 [0222.233] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x3a) returned 0x12d29e8 [0222.233] GetProcessHeap () returned 0x12c0000 [0222.233] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d29e8, Size=0x72) returned 0x1371418 [0222.233] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2f4 [0222.233] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0x0) returned 0x102 [0222.233] CloseHandle (hObject=0x2f4) returned 1 [0222.233] GetProcessHeap () returned 0x12c0000 [0222.233] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2568 | out: hHeap=0x12c0000) returned 1 [0222.233] GetProcessHeap () returned 0x12c0000 [0222.233] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1371418 | out: hHeap=0x12c0000) returned 1 [0222.233] Sleep (dwMilliseconds=0x3e8) [0223.785] GetProcessHeap () returned 0x12c0000 [0223.785] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12e8b30 [0223.785] GetProcessHeap () returned 0x12c0000 [0223.785] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12e8b80 [0223.785] GetProcessHeap () returned 0x12c0000 [0223.785] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e) returned 0x12e8ba8 [0223.785] GetProcessHeap () returned 0x12c0000 [0223.785] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x4057c40 [0223.831] GetProcessHeap () returned 0x12c0000 [0223.831] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x4057c40 | out: hHeap=0x12c0000) returned 1 [0223.926] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x12e8b80, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0223.926] GetProcessHeap () returned 0x12c0000 [0223.926] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8ba8 | out: hHeap=0x12c0000) returned 1 [0223.926] GetProcessHeap () returned 0x12c0000 [0223.926] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b30 | out: hHeap=0x12c0000) returned 1 [0223.926] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2ecfebc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2ecfebc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0223.944] GetProcessHeap () returned 0x12c0000 [0223.944] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b80 | out: hHeap=0x12c0000) returned 1 [0223.973] GetProcessHeap () returned 0x12c0000 [0223.973] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x40) returned 0x12d2b98 [0223.973] GetProcessHeap () returned 0x12c0000 [0223.973] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x3a) returned 0x12d29e8 [0223.977] GetProcessHeap () returned 0x12c0000 [0223.977] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d29e8, Size=0x72) returned 0x1371498 [0223.977] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2f4 [0223.988] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0x0) returned 0x102 [0223.988] CloseHandle (hObject=0x2f4) returned 1 [0223.988] GetProcessHeap () returned 0x12c0000 [0223.988] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2b98 | out: hHeap=0x12c0000) returned 1 [0223.989] GetProcessHeap () returned 0x12c0000 [0223.989] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1371498 | out: hHeap=0x12c0000) returned 1 [0223.989] Sleep (dwMilliseconds=0x3e8) Thread: id = 101 os_tid = 0x36c [0161.024] GetProcessHeap () returned 0x12c0000 [0161.024] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x440) returned 0x12ea508 [0161.024] GetProcessHeap () returned 0x12c0000 [0161.025] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x434) returned 0x12ea950 [0161.025] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x26c [0161.033] Process32FirstW (in: hSnapshot=0x26c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0161.033] Process32NextW (in: hSnapshot=0x26c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0161.034] Process32NextW (in: hSnapshot=0x26c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0161.034] Process32NextW (in: hSnapshot=0x26c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0161.034] Process32NextW (in: hSnapshot=0x26c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0161.035] Process32NextW (in: hSnapshot=0x26c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0161.035] Process32NextW (in: hSnapshot=0x26c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0161.036] Process32NextW (in: hSnapshot=0x26c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0161.036] Process32NextW (in: hSnapshot=0x26c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0161.036] Process32NextW (in: hSnapshot=0x26c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0161.037] Process32NextW (in: hSnapshot=0x26c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0161.037] Process32NextW (in: hSnapshot=0x26c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0161.038] Process32NextW (in: hSnapshot=0x26c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0161.038] Process32NextW (in: hSnapshot=0x26c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0161.039] Process32NextW (in: hSnapshot=0x26c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0161.039] Process32NextW (in: hSnapshot=0x26c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0161.040] Process32NextW (in: hSnapshot=0x26c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0161.040] Process32NextW (in: hSnapshot=0x26c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0161.041] Process32NextW (in: hSnapshot=0x26c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0161.041] Process32NextW (in: hSnapshot=0x26c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0161.041] Process32NextW (in: hSnapshot=0x26c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0161.042] Process32NextW (in: hSnapshot=0x26c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0161.042] Process32NextW (in: hSnapshot=0x26c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0161.043] Process32NextW (in: hSnapshot=0x26c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0161.043] Process32NextW (in: hSnapshot=0x26c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0161.043] Process32NextW (in: hSnapshot=0x26c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0161.044] Process32NextW (in: hSnapshot=0x26c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0161.044] Process32NextW (in: hSnapshot=0x26c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0161.045] Process32NextW (in: hSnapshot=0x26c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0161.045] Process32NextW (in: hSnapshot=0x26c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0161.046] Process32NextW (in: hSnapshot=0x26c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0161.046] Process32NextW (in: hSnapshot=0x26c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0161.046] Process32NextW (in: hSnapshot=0x26c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0161.047] Process32NextW (in: hSnapshot=0x26c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0161.047] Process32NextW (in: hSnapshot=0x26c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0161.048] Process32NextW (in: hSnapshot=0x26c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0161.048] Process32NextW (in: hSnapshot=0x26c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0161.048] Process32NextW (in: hSnapshot=0x26c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0161.049] Process32NextW (in: hSnapshot=0x26c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0161.049] Process32NextW (in: hSnapshot=0x26c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xdb4, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0161.050] Process32NextW (in: hSnapshot=0x26c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0161.050] Process32NextW (in: hSnapshot=0x26c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xf90, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0161.051] Process32NextW (in: hSnapshot=0x26c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0161.051] Process32NextW (in: hSnapshot=0x26c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0161.051] Process32NextW (in: hSnapshot=0x26c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0161.052] Process32NextW (in: hSnapshot=0x26c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0161.052] Process32NextW (in: hSnapshot=0x26c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdc8, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0161.053] Process32NextW (in: hSnapshot=0x26c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdc8, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 0 [0161.053] CloseHandle (hObject=0x26c) returned 1 [0161.053] Sleep (dwMilliseconds=0x1f4) [0161.781] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2b8 [0161.787] Process32FirstW (in: hSnapshot=0x2b8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0161.787] Process32NextW (in: hSnapshot=0x2b8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0161.788] Process32NextW (in: hSnapshot=0x2b8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0161.789] Process32NextW (in: hSnapshot=0x2b8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0161.789] Process32NextW (in: hSnapshot=0x2b8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0161.789] Process32NextW (in: hSnapshot=0x2b8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0161.790] Process32NextW (in: hSnapshot=0x2b8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0161.790] Process32NextW (in: hSnapshot=0x2b8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0161.791] Process32NextW (in: hSnapshot=0x2b8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0161.791] Process32NextW (in: hSnapshot=0x2b8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0161.791] Process32NextW (in: hSnapshot=0x2b8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0161.792] Process32NextW (in: hSnapshot=0x2b8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0161.792] Process32NextW (in: hSnapshot=0x2b8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0161.793] Process32NextW (in: hSnapshot=0x2b8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0161.793] Process32NextW (in: hSnapshot=0x2b8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0161.794] Process32NextW (in: hSnapshot=0x2b8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0161.794] Process32NextW (in: hSnapshot=0x2b8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0161.794] Process32NextW (in: hSnapshot=0x2b8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0161.795] Process32NextW (in: hSnapshot=0x2b8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0161.795] Process32NextW (in: hSnapshot=0x2b8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0161.796] Process32NextW (in: hSnapshot=0x2b8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0161.796] Process32NextW (in: hSnapshot=0x2b8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0161.797] Process32NextW (in: hSnapshot=0x2b8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0161.797] Process32NextW (in: hSnapshot=0x2b8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0161.797] Process32NextW (in: hSnapshot=0x2b8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0161.798] Process32NextW (in: hSnapshot=0x2b8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0161.798] Process32NextW (in: hSnapshot=0x2b8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0161.799] Process32NextW (in: hSnapshot=0x2b8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0161.799] Process32NextW (in: hSnapshot=0x2b8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0161.799] Process32NextW (in: hSnapshot=0x2b8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0161.800] Process32NextW (in: hSnapshot=0x2b8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0161.800] Process32NextW (in: hSnapshot=0x2b8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0161.801] Process32NextW (in: hSnapshot=0x2b8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0161.801] Process32NextW (in: hSnapshot=0x2b8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0161.802] Process32NextW (in: hSnapshot=0x2b8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0161.802] Process32NextW (in: hSnapshot=0x2b8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0161.802] Process32NextW (in: hSnapshot=0x2b8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0161.803] Process32NextW (in: hSnapshot=0x2b8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0161.803] Process32NextW (in: hSnapshot=0x2b8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0161.804] Process32NextW (in: hSnapshot=0x2b8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xdb4, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0161.804] Process32NextW (in: hSnapshot=0x2b8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0161.804] Process32NextW (in: hSnapshot=0x2b8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xf90, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0161.805] Process32NextW (in: hSnapshot=0x2b8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0161.805] Process32NextW (in: hSnapshot=0x2b8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0161.806] Process32NextW (in: hSnapshot=0x2b8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0161.806] Process32NextW (in: hSnapshot=0x2b8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0161.807] Process32NextW (in: hSnapshot=0x2b8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdc8, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0161.807] Process32NextW (in: hSnapshot=0x2b8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdc8, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 0 [0161.807] CloseHandle (hObject=0x2b8) returned 1 [0161.807] Sleep (dwMilliseconds=0x1f4) [0162.523] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2e4 [0162.527] Process32FirstW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0162.527] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0162.528] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0162.528] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0162.529] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0162.529] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0162.530] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0162.530] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0162.530] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0162.531] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0162.531] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0162.532] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0162.532] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0162.532] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0162.533] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0162.533] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0162.534] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0162.534] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0162.535] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0162.535] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0162.535] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0162.536] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0162.536] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0162.537] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0162.537] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0162.537] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0162.538] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0162.539] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0162.539] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0162.539] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0162.540] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0162.540] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0162.541] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0162.541] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0162.541] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0162.542] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0162.542] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0162.543] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0162.543] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0162.544] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0162.544] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xf90, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0162.544] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0162.545] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0162.545] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0162.546] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0162.546] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xdc8, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0162.546] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xdc8, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 0 [0162.547] CloseHandle (hObject=0x2e4) returned 1 [0162.547] Sleep (dwMilliseconds=0x1f4) [0163.290] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2f0 [0163.294] Process32FirstW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0163.295] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0163.296] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0163.296] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0163.297] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0163.297] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0163.298] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0163.298] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0163.299] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0163.299] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0163.300] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0163.301] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0163.301] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0163.302] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0163.302] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0163.303] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0163.303] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0163.304] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0163.305] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0163.305] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0163.306] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0163.306] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0163.307] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0163.307] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0163.308] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0163.309] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0163.309] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0163.310] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0163.310] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0163.311] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0163.311] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0163.312] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0163.312] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0163.313] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0163.314] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0163.314] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0163.315] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0163.315] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0163.316] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0163.316] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0163.317] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xf90, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0163.317] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0163.318] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0163.319] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0163.319] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0163.320] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0163.320] CloseHandle (hObject=0x2f0) returned 1 [0163.320] Sleep (dwMilliseconds=0x1f4) [0164.053] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2dc [0164.057] Process32FirstW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0164.057] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0164.058] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0164.058] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0164.058] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0164.059] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0164.059] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0164.060] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0164.060] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0164.061] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0164.061] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0164.061] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0164.062] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0164.062] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0164.063] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0164.063] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0164.063] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0164.064] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0164.064] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0164.065] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0164.065] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0164.065] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0164.066] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0164.066] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0164.067] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0164.067] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0164.068] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0164.068] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0164.068] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0164.069] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0164.069] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0164.082] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0164.083] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0164.083] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0164.083] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0164.084] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0164.084] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0164.085] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0164.085] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0164.086] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0164.086] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xf90, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0164.087] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0164.087] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0164.087] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0164.088] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0164.088] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0164.089] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0164.089] CloseHandle (hObject=0x2dc) returned 1 [0164.089] Sleep (dwMilliseconds=0x1f4) [0164.831] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2dc [0164.834] Process32FirstW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0164.835] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0164.835] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0164.836] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0164.836] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0164.836] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0164.837] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0164.837] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0164.838] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0164.838] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0164.839] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0164.839] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0164.839] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0164.840] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0164.840] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0164.841] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0164.841] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0164.841] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0164.842] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0164.842] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0164.843] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0164.843] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0164.844] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0164.844] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0164.844] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0164.845] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0164.845] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0164.846] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0164.846] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0164.847] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0164.847] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0164.847] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0164.848] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0164.848] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0164.849] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0164.849] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0164.849] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0164.850] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0164.850] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0164.851] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0164.851] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xf90, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0164.852] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0164.852] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0164.852] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0164.853] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0164.853] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0164.854] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0164.854] CloseHandle (hObject=0x2dc) returned 1 [0164.854] Sleep (dwMilliseconds=0x1f4) [0165.643] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2ec [0165.649] Process32FirstW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0165.649] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0165.650] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0165.650] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0165.651] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0165.651] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0165.651] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0165.652] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0165.652] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0165.653] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0165.653] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0165.654] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0165.654] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0165.654] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0165.655] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0165.655] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0165.656] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0165.656] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0165.656] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0165.657] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0165.657] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0165.658] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0165.658] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0165.659] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0165.659] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0165.659] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0165.660] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0165.660] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0165.661] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0165.661] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0165.661] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0165.662] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0165.662] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0165.663] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0165.663] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0165.664] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0165.664] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0165.664] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0165.665] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0165.665] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0165.666] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xf90, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0165.666] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0165.666] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0165.667] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0165.667] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0165.668] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0165.668] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0165.669] CloseHandle (hObject=0x2ec) returned 1 [0165.669] Sleep (dwMilliseconds=0x1f4) [0166.653] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2e4 [0166.658] Process32FirstW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0166.659] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0166.659] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0166.659] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0166.660] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0166.660] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0166.661] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0166.661] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0166.662] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0166.662] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0166.662] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0166.663] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0166.663] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0166.664] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0166.664] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0166.665] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0166.665] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0166.665] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0166.666] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0166.666] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0166.667] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0166.667] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0166.668] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0166.668] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0166.669] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0166.669] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0166.669] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0166.670] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0166.670] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0166.671] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0166.671] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0166.672] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0166.672] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0166.672] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0166.673] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0166.673] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0166.674] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0166.674] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0166.675] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0166.675] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0166.675] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xf90, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0166.676] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0166.676] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0166.677] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0166.677] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0166.678] Process32NextW (in: hSnapshot=0x2e4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0166.678] CloseHandle (hObject=0x2e4) returned 1 [0166.679] Sleep (dwMilliseconds=0x1f4) [0167.372] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2ec [0167.376] Process32FirstW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0167.376] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0167.377] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0167.377] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0167.377] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0167.378] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0167.378] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0167.379] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0167.379] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0167.379] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0167.380] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0167.380] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0167.381] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0167.381] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0167.382] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0167.382] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0167.382] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0167.383] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0167.383] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0167.384] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0167.384] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0167.384] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0167.385] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0167.385] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0167.386] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0167.386] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0167.387] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0167.387] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0167.388] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0167.388] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0167.388] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0167.389] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0167.389] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0167.390] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0167.390] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0167.391] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0167.391] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0167.391] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0167.392] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0167.392] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0167.393] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xf90, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0167.393] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0167.394] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0167.394] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0167.394] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0167.395] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0167.395] CloseHandle (hObject=0x2ec) returned 1 [0167.395] Sleep (dwMilliseconds=0x1f4) [0168.012] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2dc [0168.016] Process32FirstW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0168.016] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0168.017] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0168.017] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0168.017] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0168.018] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0168.018] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0168.018] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0168.019] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0168.019] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0168.020] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0168.020] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0168.020] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0168.021] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0168.021] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0168.021] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0168.022] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0168.022] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0168.023] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0168.023] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0168.023] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0168.024] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0168.024] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0168.024] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0168.025] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0168.025] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0168.026] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0168.026] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0168.026] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0168.027] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0168.027] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0168.028] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0168.028] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0168.028] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0168.029] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0168.029] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0168.030] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0168.030] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0168.030] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0168.031] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0168.031] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xf90, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0168.031] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0168.032] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0168.032] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0168.033] Process32NextW (in: hSnapshot=0x2dc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0168.033] CloseHandle (hObject=0x2dc) returned 1 [0168.033] Sleep (dwMilliseconds=0x1f4) [0168.715] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2e0 [0168.719] Process32FirstW (in: hSnapshot=0x2e0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0168.719] Process32NextW (in: hSnapshot=0x2e0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0168.719] Process32NextW (in: hSnapshot=0x2e0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0168.720] Process32NextW (in: hSnapshot=0x2e0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0168.720] Process32NextW (in: hSnapshot=0x2e0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0168.720] Process32NextW (in: hSnapshot=0x2e0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0168.721] Process32NextW (in: hSnapshot=0x2e0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0168.721] Process32NextW (in: hSnapshot=0x2e0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0168.722] Process32NextW (in: hSnapshot=0x2e0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0168.722] Process32NextW (in: hSnapshot=0x2e0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0168.722] Process32NextW (in: hSnapshot=0x2e0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0168.723] Process32NextW (in: hSnapshot=0x2e0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0168.723] Process32NextW (in: hSnapshot=0x2e0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0168.723] Process32NextW (in: hSnapshot=0x2e0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0168.724] Process32NextW (in: hSnapshot=0x2e0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0168.724] Process32NextW (in: hSnapshot=0x2e0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0168.725] Process32NextW (in: hSnapshot=0x2e0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0168.725] Process32NextW (in: hSnapshot=0x2e0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0168.725] Process32NextW (in: hSnapshot=0x2e0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0168.726] Process32NextW (in: hSnapshot=0x2e0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0168.726] Process32NextW (in: hSnapshot=0x2e0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0168.726] Process32NextW (in: hSnapshot=0x2e0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0168.727] Process32NextW (in: hSnapshot=0x2e0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0168.727] Process32NextW (in: hSnapshot=0x2e0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0168.728] Process32NextW (in: hSnapshot=0x2e0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0168.728] Process32NextW (in: hSnapshot=0x2e0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0168.728] Process32NextW (in: hSnapshot=0x2e0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0168.729] Process32NextW (in: hSnapshot=0x2e0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0168.729] Process32NextW (in: hSnapshot=0x2e0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0168.729] Process32NextW (in: hSnapshot=0x2e0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0168.730] Process32NextW (in: hSnapshot=0x2e0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0168.730] Process32NextW (in: hSnapshot=0x2e0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0168.731] Process32NextW (in: hSnapshot=0x2e0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0168.731] Process32NextW (in: hSnapshot=0x2e0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0168.731] Process32NextW (in: hSnapshot=0x2e0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0168.732] Process32NextW (in: hSnapshot=0x2e0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0168.732] Process32NextW (in: hSnapshot=0x2e0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0168.733] Process32NextW (in: hSnapshot=0x2e0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0168.733] Process32NextW (in: hSnapshot=0x2e0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0168.733] Process32NextW (in: hSnapshot=0x2e0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0168.734] Process32NextW (in: hSnapshot=0x2e0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xf90, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0168.734] Process32NextW (in: hSnapshot=0x2e0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0168.734] Process32NextW (in: hSnapshot=0x2e0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0168.735] Process32NextW (in: hSnapshot=0x2e0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0168.735] Process32NextW (in: hSnapshot=0x2e0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0168.736] CloseHandle (hObject=0x2e0) returned 1 [0168.736] Sleep (dwMilliseconds=0x1f4) [0169.622] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2d8 [0169.630] Process32FirstW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0169.630] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0169.631] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0169.631] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0169.632] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0169.632] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0169.632] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0169.633] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0169.633] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0169.634] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0169.634] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0169.634] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0169.635] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0169.635] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0169.635] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0169.636] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0169.636] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0169.637] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0169.637] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0169.637] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0169.638] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0169.638] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0169.638] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0169.639] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0169.639] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0169.640] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0169.640] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0169.640] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0169.641] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0169.641] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0169.641] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0169.642] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0169.642] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0169.643] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0169.643] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0169.643] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0169.644] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0169.644] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0169.644] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0169.645] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0169.645] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xf90, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0169.646] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0169.646] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0169.646] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0169.647] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0169.647] CloseHandle (hObject=0x2d8) returned 1 [0169.647] Sleep (dwMilliseconds=0x1f4) [0170.291] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2cc [0170.296] Process32FirstW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0170.296] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0170.297] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0170.297] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0170.298] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0170.298] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0170.299] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0170.299] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0170.300] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0170.300] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0170.300] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0170.301] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0170.301] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0170.302] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0170.302] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0170.303] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0170.303] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0170.304] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0170.304] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0170.305] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0170.305] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0170.306] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0170.306] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0170.306] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0170.307] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0170.307] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0170.308] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0170.308] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0170.309] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0170.309] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0170.310] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0170.310] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0170.311] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0170.311] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0170.311] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0170.312] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0170.312] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0170.313] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0170.313] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0170.314] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0170.314] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xf90, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0170.315] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0170.315] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0170.315] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0170.316] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0170.316] CloseHandle (hObject=0x2cc) returned 1 [0170.316] Sleep (dwMilliseconds=0x1f4) [0170.935] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2e8 [0170.941] Process32FirstW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0170.942] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0170.942] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0170.943] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0170.943] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0170.944] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0170.944] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0170.945] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0170.945] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0170.946] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0170.946] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0170.947] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0170.947] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0170.947] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0170.948] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0170.948] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0170.949] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0170.949] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0170.950] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0170.950] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0170.951] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0170.951] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0170.952] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0170.952] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0170.953] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0170.953] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0170.953] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0170.954] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0170.954] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0170.955] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0170.955] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0170.956] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0170.956] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0170.957] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0170.957] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0170.958] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0170.958] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0170.958] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0170.959] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0170.959] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0170.960] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xf90, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0170.960] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0170.961] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0170.961] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0170.962] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0170.962] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 0 [0170.963] CloseHandle (hObject=0x2e8) returned 1 [0170.963] Sleep (dwMilliseconds=0x1f4) [0171.646] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2cc [0171.650] Process32FirstW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0171.650] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0171.650] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0171.651] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0171.651] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0171.651] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0171.652] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0171.652] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0171.653] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0171.653] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0171.653] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0171.654] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0171.654] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0171.654] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0171.655] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0171.655] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0171.656] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0171.656] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0171.656] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0171.657] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0171.657] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0171.657] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0171.658] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0171.658] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0171.659] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0171.659] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0171.659] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0171.660] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0171.660] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0171.660] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0171.661] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0171.661] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0171.662] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0171.662] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0171.662] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0171.663] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0171.663] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0171.663] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0171.664] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0171.664] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0171.665] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xf90, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0171.665] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0171.665] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0171.666] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0171.666] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 0 [0171.666] CloseHandle (hObject=0x2cc) returned 1 [0171.666] Sleep (dwMilliseconds=0x1f4) [0172.378] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2e8 [0172.384] Process32FirstW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0172.384] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0172.385] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0172.385] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0172.386] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0172.386] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0172.386] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0172.387] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0172.387] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0172.387] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0172.388] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0172.388] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0172.389] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0172.389] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0172.389] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0172.390] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0172.390] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0172.390] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0172.391] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0172.391] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0172.392] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0172.392] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0172.392] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0172.393] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0172.393] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0172.393] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0172.394] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0172.394] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0172.394] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0172.395] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0172.395] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0172.396] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0172.396] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0172.396] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0172.397] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0172.397] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0172.397] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0172.398] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0172.398] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0172.399] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0172.399] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xf90, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0172.399] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0172.400] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0172.400] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0172.400] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 0 [0172.401] CloseHandle (hObject=0x2e8) returned 1 [0172.401] Sleep (dwMilliseconds=0x1f4) [0173.369] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2d8 [0173.377] Process32FirstW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0173.378] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0173.378] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0173.378] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0173.379] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0173.379] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0173.380] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0173.380] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0173.381] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0173.381] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0173.382] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0173.382] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0173.383] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0173.383] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0173.384] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0173.384] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0173.385] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0173.385] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0173.385] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0173.386] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0173.386] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0173.387] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0173.387] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0173.388] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0173.388] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0173.389] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0173.389] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0173.390] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0173.390] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0173.391] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0173.391] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0173.392] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0173.392] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0173.393] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0173.393] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0173.394] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0173.394] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0173.394] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0173.395] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0173.395] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0173.396] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xf90, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0173.396] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0173.397] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0173.397] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0173.398] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 0 [0173.398] CloseHandle (hObject=0x2d8) returned 1 [0173.398] Sleep (dwMilliseconds=0x1f4) [0174.158] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2d8 [0174.164] Process32FirstW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0174.164] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0174.164] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0174.165] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0174.165] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0174.165] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0174.166] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0174.166] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0174.167] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0174.167] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0174.167] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0174.168] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0174.168] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0174.169] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0174.170] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0174.170] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0174.170] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0174.171] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0174.171] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0174.171] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0174.172] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0174.172] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0174.173] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0174.173] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0174.173] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0174.174] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0174.174] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0174.175] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0174.175] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0174.175] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0174.176] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0174.176] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0174.176] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0174.177] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0174.177] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0174.178] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0174.178] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0174.178] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0174.179] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0174.179] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0174.179] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xf90, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0174.180] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0174.180] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0174.181] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0174.181] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 0 [0174.181] CloseHandle (hObject=0x2d8) returned 1 [0174.181] Sleep (dwMilliseconds=0x1f4) [0174.927] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2d8 [0174.931] Process32FirstW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0174.931] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0174.932] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0174.932] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0174.932] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0174.933] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0174.933] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0174.934] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0174.934] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0174.934] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0174.935] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0174.935] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0174.935] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0174.936] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0174.936] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0174.937] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0174.937] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0174.937] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0174.938] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0174.938] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0174.938] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0174.939] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0174.939] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0174.940] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0174.940] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0174.941] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0174.941] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0174.941] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0174.942] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0174.942] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0174.942] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0174.943] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0174.943] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0174.944] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0174.944] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0174.944] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0174.945] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0174.945] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0174.946] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0174.946] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0174.946] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xf90, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0174.947] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0174.947] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0174.947] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0174.948] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 0 [0174.948] CloseHandle (hObject=0x2d8) returned 1 [0174.948] Sleep (dwMilliseconds=0x1f4) [0175.528] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2d8 [0175.532] Process32FirstW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0175.532] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0175.532] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0175.533] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0175.533] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0175.533] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0175.534] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0175.534] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0175.535] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0175.535] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0175.535] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0175.536] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0175.536] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0175.536] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0175.537] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0175.537] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0175.538] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0175.538] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0175.538] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0175.539] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0175.539] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0175.539] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0175.540] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0175.540] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0175.541] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0175.541] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0175.541] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0175.542] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0175.542] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0175.542] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0175.543] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0175.543] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0175.544] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0175.544] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0175.544] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0175.545] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0175.545] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0175.545] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0175.546] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0175.546] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0175.547] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xf90, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0175.547] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0175.547] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0175.548] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0175.548] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 0 [0175.549] CloseHandle (hObject=0x2d8) returned 1 [0175.549] Sleep (dwMilliseconds=0x1f4) [0176.099] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2cc [0176.116] Process32FirstW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0176.116] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0176.116] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0176.117] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0176.117] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0176.118] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0176.118] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0176.118] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0176.119] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0176.119] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0176.119] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0176.120] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0176.120] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0176.121] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0176.121] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0176.121] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0176.122] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0176.122] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0176.122] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0176.123] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0176.123] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0176.123] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0176.124] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0176.124] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0176.125] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0176.125] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0176.125] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0176.126] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0176.127] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0176.127] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0176.127] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0176.128] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0176.128] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0176.128] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0176.129] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0176.129] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0176.130] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0176.130] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0176.130] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0176.131] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0176.131] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xf90, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0176.131] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0176.132] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0176.132] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0176.132] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 0 [0176.133] CloseHandle (hObject=0x2cc) returned 1 [0176.133] Sleep (dwMilliseconds=0x1f4) [0176.742] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2f0 [0176.746] Process32FirstW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0176.746] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0176.747] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0176.747] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0176.747] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0176.748] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0176.748] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0176.748] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0176.749] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0176.749] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0176.750] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0176.750] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0176.750] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0176.751] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0176.751] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0176.752] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0176.752] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0176.752] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0176.753] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0176.753] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0176.754] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0176.754] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0176.754] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0176.755] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0176.755] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0176.755] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0176.756] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0176.756] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0176.757] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0176.757] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0176.757] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0176.758] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0176.758] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0176.758] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0176.759] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0176.759] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0176.759] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0176.760] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0176.760] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0176.761] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0176.761] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xf90, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0176.761] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0176.762] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0176.762] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0176.762] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 0 [0176.763] CloseHandle (hObject=0x2f0) returned 1 [0176.763] Sleep (dwMilliseconds=0x1f4) [0177.269] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2cc [0177.272] Process32FirstW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0177.273] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0177.273] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0177.273] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0177.274] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0177.274] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0177.275] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0177.275] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0177.275] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0177.276] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0177.276] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0177.277] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0177.277] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0177.277] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0177.278] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0177.278] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0177.278] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0177.279] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0177.279] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0177.280] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0177.280] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0177.280] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0177.281] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0177.281] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0177.281] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0177.282] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0177.282] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0177.283] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0177.283] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0177.283] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0177.284] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0177.284] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0177.284] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0177.285] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0177.285] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0177.286] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0177.286] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0177.286] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0177.287] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0177.287] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0177.288] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xf90, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0177.288] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0177.288] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0177.289] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0177.289] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 0 [0177.289] CloseHandle (hObject=0x2cc) returned 1 [0177.289] Sleep (dwMilliseconds=0x1f4) [0177.994] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2d8 [0177.998] Process32FirstW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0177.999] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0177.999] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0178.000] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0178.000] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0178.000] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0178.001] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0178.001] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0178.002] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0178.002] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0178.003] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0178.003] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0178.003] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0178.004] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0178.004] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0178.004] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0178.005] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0178.005] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0178.006] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0178.006] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0178.006] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0178.007] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0178.007] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0178.008] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0178.008] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0178.008] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0178.009] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0178.009] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0178.010] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0178.010] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0178.010] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0178.011] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0178.011] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0178.012] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0178.012] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0178.012] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0178.013] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0178.013] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0178.014] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0178.014] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0178.014] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xf90, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0178.015] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0178.015] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0178.016] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0178.016] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 0 [0178.016] CloseHandle (hObject=0x2d8) returned 1 [0178.017] Sleep (dwMilliseconds=0x1f4) [0178.631] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x300 [0178.650] Process32FirstW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0178.651] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0178.651] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0178.651] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0178.652] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0178.652] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0178.653] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0178.653] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0178.653] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0178.654] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0178.654] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0178.655] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0178.655] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0178.655] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0178.656] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0178.656] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0178.656] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0178.657] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0178.657] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0178.658] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0178.658] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0178.658] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0178.659] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0178.659] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0178.660] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0178.660] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0178.660] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0178.661] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0178.661] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0178.662] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0178.662] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0178.662] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0178.663] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0178.663] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0178.663] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0178.664] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0178.664] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0178.665] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0178.665] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0178.665] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0178.666] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xf90, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0178.666] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0178.667] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0178.667] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0178.667] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 0 [0178.668] CloseHandle (hObject=0x300) returned 1 [0178.668] Sleep (dwMilliseconds=0x1f4) [0179.280] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x308 [0179.284] Process32FirstW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0179.284] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0179.285] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0179.285] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0179.285] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0179.286] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0179.286] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0179.287] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0179.287] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0179.287] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0179.288] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0179.288] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0179.289] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0179.289] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0179.289] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0179.290] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0179.290] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0179.290] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0179.291] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0179.291] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0179.292] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0179.292] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0179.292] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0179.293] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0179.293] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0179.294] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0179.294] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0179.294] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0179.295] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0179.295] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0179.295] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0179.296] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0179.296] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0179.297] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0179.297] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0179.297] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0179.298] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0179.298] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0179.299] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0179.299] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0179.299] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xf90, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0179.300] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0179.300] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0179.301] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0179.301] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 0 [0179.301] CloseHandle (hObject=0x308) returned 1 [0179.301] Sleep (dwMilliseconds=0x1f4) [0179.937] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2cc [0180.096] Process32FirstW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0180.096] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0180.097] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0180.097] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0180.098] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0180.098] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0180.099] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0180.099] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0180.100] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0180.100] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0180.101] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0180.101] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0180.102] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0180.102] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0180.103] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0180.103] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0180.103] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0180.104] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0180.104] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0180.105] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0180.105] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0180.106] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0180.106] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0180.107] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0180.108] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0180.108] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0180.109] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0180.109] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0180.110] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0180.110] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0180.111] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0180.111] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0180.112] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0180.112] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0180.112] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0180.113] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0180.113] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0180.114] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0180.114] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0180.115] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0180.115] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xf90, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0180.116] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0180.116] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0180.117] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0180.117] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 0 [0180.118] CloseHandle (hObject=0x2cc) returned 1 [0180.118] Sleep (dwMilliseconds=0x1f4) [0180.675] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2d8 [0180.706] Process32FirstW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0180.707] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0180.707] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0180.707] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0180.708] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0180.708] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0180.709] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0180.709] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0180.710] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0180.710] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0180.711] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0180.711] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0180.712] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0180.712] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0180.713] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0180.713] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0180.713] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0180.714] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0180.714] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0180.715] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0180.715] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0180.715] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0180.716] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0180.717] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0180.717] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0180.717] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0180.718] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0180.718] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0180.718] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0180.719] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0180.719] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0180.720] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0180.720] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0180.720] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0180.721] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0180.721] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0180.721] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0180.722] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0180.722] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0180.722] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0180.723] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xf90, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0180.723] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0180.724] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0180.724] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0180.724] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 0 [0180.725] CloseHandle (hObject=0x2d8) returned 1 [0180.725] Sleep (dwMilliseconds=0x1f4) [0181.323] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2d8 [0181.375] Process32FirstW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0181.375] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0181.375] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0181.376] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0181.376] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0181.377] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0181.377] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0181.377] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0181.378] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0181.378] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0181.378] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0181.379] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0181.379] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0181.380] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0181.380] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0181.380] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0181.381] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0181.381] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0181.382] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0181.382] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0181.382] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0181.383] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0181.383] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0181.384] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0181.384] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0181.384] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0181.385] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0181.385] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0181.386] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0181.386] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0181.386] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0181.387] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0181.387] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0181.388] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0181.388] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0181.389] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0181.389] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0181.404] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0181.405] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0181.405] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0181.405] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xf90, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0181.406] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0181.406] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0181.407] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0181.407] Process32NextW (in: hSnapshot=0x2d8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 0 [0181.407] CloseHandle (hObject=0x2d8) returned 1 [0181.408] Sleep (dwMilliseconds=0x1f4) [0182.117] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2f0 [0182.125] Process32FirstW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0182.125] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0182.125] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0182.126] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0182.126] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0182.127] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0182.127] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0182.127] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0182.128] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0182.128] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0182.128] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0182.129] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0182.129] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0182.130] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0182.130] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0182.130] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0182.131] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0182.131] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0182.132] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0182.132] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0182.132] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0182.133] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0182.133] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0182.133] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0182.134] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0182.134] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0182.135] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0182.135] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0182.135] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0182.136] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0182.136] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0182.137] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0182.137] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0182.137] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0182.138] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0182.138] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0182.139] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0182.139] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0182.139] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0182.140] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0182.140] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xf90, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0182.140] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0182.141] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0182.141] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0182.142] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 0 [0182.142] CloseHandle (hObject=0x2f0) returned 1 [0182.142] Sleep (dwMilliseconds=0x1f4) [0182.835] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2e8 [0182.844] Process32FirstW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0182.844] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0182.845] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0182.845] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0182.846] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0182.846] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0182.846] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0182.847] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0182.847] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0182.848] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0182.848] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0182.848] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0182.849] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0182.849] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0182.850] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0182.850] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0182.851] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0182.851] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0182.851] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0182.852] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0182.852] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0182.852] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0182.853] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0182.853] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0182.854] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0182.854] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0182.854] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0182.855] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0182.855] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0182.855] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0182.856] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0182.856] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0182.857] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0182.857] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0182.858] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0182.858] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0182.858] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0182.859] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0182.859] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0182.859] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0182.860] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xf90, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0182.860] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0182.861] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0182.861] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0182.861] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 0 [0182.862] CloseHandle (hObject=0x2e8) returned 1 [0182.862] Sleep (dwMilliseconds=0x1f4) [0183.442] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2f0 [0183.472] Process32FirstW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0183.473] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0183.473] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0183.473] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0183.474] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0183.474] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0183.475] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0183.475] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0183.475] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0183.476] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0183.476] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0183.476] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0183.477] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0183.477] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0183.477] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0183.478] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0183.478] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0183.479] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0183.479] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0183.479] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0183.480] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0183.480] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0183.481] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0183.481] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0183.481] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0183.483] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0183.484] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0183.484] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0183.485] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0183.485] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0183.485] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0183.486] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0183.486] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0183.486] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0183.487] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0183.487] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0183.488] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0183.488] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0183.488] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0183.489] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0183.489] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xf90, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0183.489] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0183.490] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0183.490] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0183.491] CloseHandle (hObject=0x2f0) returned 1 [0183.491] Sleep (dwMilliseconds=0x1f4) [0184.131] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x308 [0184.144] Process32FirstW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0184.144] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0184.145] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0184.145] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0184.145] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0184.146] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0184.146] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0184.147] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0184.147] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0184.147] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0184.148] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0184.148] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.148] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.149] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0184.149] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.150] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.150] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.150] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.151] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.151] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.152] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.152] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.152] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.153] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.153] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0184.154] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.154] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0184.155] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0184.155] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0184.155] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0184.156] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.157] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0184.158] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0184.158] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0184.158] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0184.159] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0184.159] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0184.159] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0184.160] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0184.160] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0184.161] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xf90, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0184.161] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0184.161] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.162] Process32NextW (in: hSnapshot=0x308, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0184.162] CloseHandle (hObject=0x308) returned 1 [0184.162] Sleep (dwMilliseconds=0x1f4) [0184.886] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2e8 [0184.890] Process32FirstW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0184.890] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0184.891] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0184.891] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0184.891] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0184.892] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0184.892] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0184.893] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0184.893] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0184.893] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0184.894] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0184.894] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.894] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.895] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0184.895] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.896] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.896] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.897] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.897] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.897] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.898] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.898] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.898] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.899] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.899] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0184.900] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.900] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0184.900] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0184.901] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0184.901] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0184.901] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.902] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0184.902] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0184.903] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0184.903] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0184.903] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0184.904] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0184.904] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0184.904] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0184.905] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0184.905] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xf90, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0184.906] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0184.906] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0184.906] Process32NextW (in: hSnapshot=0x2e8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0184.907] CloseHandle (hObject=0x2e8) returned 1 [0184.907] Sleep (dwMilliseconds=0x1f4) [0185.652] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2f0 [0185.662] Process32FirstW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0185.663] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0185.663] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0185.663] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0185.664] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0185.664] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0185.664] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0185.665] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0185.665] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0185.666] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0185.666] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0185.666] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0185.667] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0185.667] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0185.668] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0185.668] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0185.668] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0185.669] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0185.669] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0185.670] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0185.670] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0185.670] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0185.671] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0185.671] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0185.671] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0185.672] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0185.672] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0185.673] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0185.673] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0185.673] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0185.674] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0185.674] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0185.674] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0185.675] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0185.675] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0185.676] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0185.676] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0185.676] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0185.677] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0185.677] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0185.678] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xf90, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0185.678] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0185.678] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0185.679] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0185.679] CloseHandle (hObject=0x2f0) returned 1 [0185.679] Sleep (dwMilliseconds=0x1f4) [0186.267] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2cc [0186.272] Process32FirstW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0186.272] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0186.272] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0186.273] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0186.273] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0186.274] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0186.274] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0186.274] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0186.275] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0186.276] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0186.276] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0186.276] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0186.277] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0186.277] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0186.278] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0186.278] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0186.278] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0186.279] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0186.279] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0186.280] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0186.280] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0186.280] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0186.281] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0186.281] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0186.282] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0186.282] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0186.282] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0186.283] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0186.283] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0186.284] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0186.284] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0186.284] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0186.285] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0186.285] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0186.286] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0186.286] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0186.287] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0186.287] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0186.287] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0186.288] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0186.288] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xf90, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0186.289] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0186.289] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0186.289] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0186.290] CloseHandle (hObject=0x2cc) returned 1 [0186.290] Sleep (dwMilliseconds=0x1f4) [0188.153] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2cc [0188.158] Process32FirstW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0188.158] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0188.159] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0188.159] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0188.159] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0188.160] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0188.160] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0188.161] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0188.161] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0188.161] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0188.162] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0188.162] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0188.162] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0188.163] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0188.163] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0188.164] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0188.322] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0188.323] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0188.323] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0188.323] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0188.324] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0188.324] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0188.325] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0188.325] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0188.325] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0188.326] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0188.326] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0188.326] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0188.327] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0188.327] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0188.328] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0188.328] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0188.328] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0188.329] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0188.329] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0188.330] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0188.330] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0188.330] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0188.331] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0188.331] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0188.331] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xf90, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0188.332] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0188.332] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0188.333] Process32NextW (in: hSnapshot=0x2cc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0188.333] CloseHandle (hObject=0x2cc) returned 1 [0188.333] Sleep (dwMilliseconds=0x1f4) [0188.946] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x224 [0189.185] Process32FirstW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0189.186] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0189.186] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0189.186] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0189.187] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0189.187] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0189.188] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0189.188] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0189.188] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0189.189] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0189.189] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0189.189] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0189.190] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0189.190] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0189.191] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0189.191] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0189.191] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0189.192] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0189.192] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0189.192] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0189.193] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0189.193] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0189.194] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0189.194] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0189.194] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0189.195] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0189.195] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0189.195] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0189.196] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0189.196] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0189.197] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0189.197] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0189.198] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0189.198] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0189.198] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0189.199] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0189.199] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0189.199] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0189.200] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0189.200] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0189.201] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0189.201] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0189.201] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0189.202] CloseHandle (hObject=0x224) returned 1 [0189.202] Sleep (dwMilliseconds=0x1f4) [0190.006] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x224 [0190.050] Process32FirstW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0190.051] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0190.051] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0190.051] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0190.052] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0190.052] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0190.053] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0190.053] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0190.053] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0190.054] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0190.054] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0190.055] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0190.055] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0190.055] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0190.056] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0190.056] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0190.056] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0190.057] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0190.057] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0190.058] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0190.058] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0190.059] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0190.059] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0190.060] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0190.060] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0190.060] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0190.061] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0190.061] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0190.061] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0190.062] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0190.062] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0190.063] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0190.063] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0190.063] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0190.064] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0190.064] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0190.065] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0190.065] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0190.065] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0190.066] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0190.066] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0190.066] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0190.067] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0190.067] CloseHandle (hObject=0x224) returned 1 [0190.067] Sleep (dwMilliseconds=0x1f4) [0190.758] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21c [0190.812] Process32FirstW (in: hSnapshot=0x21c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0190.812] Process32NextW (in: hSnapshot=0x21c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0190.812] Process32NextW (in: hSnapshot=0x21c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0190.813] Process32NextW (in: hSnapshot=0x21c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0190.813] Process32NextW (in: hSnapshot=0x21c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0190.814] Process32NextW (in: hSnapshot=0x21c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0190.814] Process32NextW (in: hSnapshot=0x21c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0190.815] Process32NextW (in: hSnapshot=0x21c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0190.815] Process32NextW (in: hSnapshot=0x21c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0190.815] Process32NextW (in: hSnapshot=0x21c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0190.816] Process32NextW (in: hSnapshot=0x21c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0190.816] Process32NextW (in: hSnapshot=0x21c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0190.816] Process32NextW (in: hSnapshot=0x21c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0190.817] Process32NextW (in: hSnapshot=0x21c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0190.817] Process32NextW (in: hSnapshot=0x21c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0190.818] Process32NextW (in: hSnapshot=0x21c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0190.818] Process32NextW (in: hSnapshot=0x21c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0190.818] Process32NextW (in: hSnapshot=0x21c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0190.819] Process32NextW (in: hSnapshot=0x21c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0190.819] Process32NextW (in: hSnapshot=0x21c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0190.820] Process32NextW (in: hSnapshot=0x21c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0190.820] Process32NextW (in: hSnapshot=0x21c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0190.821] Process32NextW (in: hSnapshot=0x21c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0190.821] Process32NextW (in: hSnapshot=0x21c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0190.821] Process32NextW (in: hSnapshot=0x21c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0190.822] Process32NextW (in: hSnapshot=0x21c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0190.822] Process32NextW (in: hSnapshot=0x21c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0190.823] Process32NextW (in: hSnapshot=0x21c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0190.823] Process32NextW (in: hSnapshot=0x21c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0190.833] Process32NextW (in: hSnapshot=0x21c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0190.834] Process32NextW (in: hSnapshot=0x21c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0190.834] Process32NextW (in: hSnapshot=0x21c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0190.835] Process32NextW (in: hSnapshot=0x21c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0190.835] Process32NextW (in: hSnapshot=0x21c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0190.835] Process32NextW (in: hSnapshot=0x21c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0190.836] Process32NextW (in: hSnapshot=0x21c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0190.836] Process32NextW (in: hSnapshot=0x21c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0190.836] Process32NextW (in: hSnapshot=0x21c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0190.837] Process32NextW (in: hSnapshot=0x21c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0190.837] Process32NextW (in: hSnapshot=0x21c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0190.838] Process32NextW (in: hSnapshot=0x21c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0190.838] Process32NextW (in: hSnapshot=0x21c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0190.838] Process32NextW (in: hSnapshot=0x21c, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0190.839] CloseHandle (hObject=0x21c) returned 1 [0190.839] Sleep (dwMilliseconds=0x1f4) [0191.447] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2f0 [0191.451] Process32FirstW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0191.452] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0191.452] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0191.452] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0191.453] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0191.453] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0191.454] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0191.454] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0191.454] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0191.455] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0191.455] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0191.455] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0191.456] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0191.456] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0191.457] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0191.457] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0191.457] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0191.458] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0191.458] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0191.458] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0191.459] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0191.459] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0191.460] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0191.460] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0191.460] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0191.461] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0191.461] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0191.461] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0191.462] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0191.462] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0191.463] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0191.463] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0191.463] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0191.464] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0191.464] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0191.465] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0191.465] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0191.465] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0191.466] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0191.466] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0191.467] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0191.467] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0191.467] Process32NextW (in: hSnapshot=0x2f0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0191.468] CloseHandle (hObject=0x2f0) returned 1 [0191.468] Sleep (dwMilliseconds=0x1f4) [0192.093] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x300 [0192.097] Process32FirstW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0192.098] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0192.098] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0192.099] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0192.099] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0192.099] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0192.100] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0192.100] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0192.101] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0192.101] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0192.101] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0192.102] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0192.102] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0192.102] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0192.103] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0192.103] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0192.104] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0192.104] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0192.104] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0192.105] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0192.105] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0192.106] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0192.106] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0192.106] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0192.107] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0192.107] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0192.107] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0192.108] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0192.108] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0192.109] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0192.109] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0192.109] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0192.110] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0192.110] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0192.110] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0192.111] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0192.111] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0192.112] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0192.112] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0192.112] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0192.113] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0192.113] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0192.114] Process32NextW (in: hSnapshot=0x300, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0192.114] CloseHandle (hObject=0x300) returned 1 [0192.114] Sleep (dwMilliseconds=0x1f4) [0192.980] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x228 [0192.984] Process32FirstW (in: hSnapshot=0x228, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0192.984] Process32NextW (in: hSnapshot=0x228, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0192.984] Process32NextW (in: hSnapshot=0x228, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0192.985] Process32NextW (in: hSnapshot=0x228, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0192.985] Process32NextW (in: hSnapshot=0x228, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0192.986] Process32NextW (in: hSnapshot=0x228, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0192.986] Process32NextW (in: hSnapshot=0x228, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0192.986] Process32NextW (in: hSnapshot=0x228, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0192.987] Process32NextW (in: hSnapshot=0x228, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0192.987] Process32NextW (in: hSnapshot=0x228, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0192.987] Process32NextW (in: hSnapshot=0x228, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0192.988] Process32NextW (in: hSnapshot=0x228, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0192.988] Process32NextW (in: hSnapshot=0x228, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0192.989] Process32NextW (in: hSnapshot=0x228, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0192.989] Process32NextW (in: hSnapshot=0x228, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0192.989] Process32NextW (in: hSnapshot=0x228, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0192.990] Process32NextW (in: hSnapshot=0x228, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0192.990] Process32NextW (in: hSnapshot=0x228, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3e, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0192.990] Process32NextW (in: hSnapshot=0x228, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0192.991] Process32NextW (in: hSnapshot=0x228, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0192.991] Process32NextW (in: hSnapshot=0x228, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0192.992] Process32NextW (in: hSnapshot=0x228, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0192.992] Process32NextW (in: hSnapshot=0x228, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0192.992] Process32NextW (in: hSnapshot=0x228, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0192.993] Process32NextW (in: hSnapshot=0x228, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0192.993] Process32NextW (in: hSnapshot=0x228, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0192.994] Process32NextW (in: hSnapshot=0x228, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0192.994] Process32NextW (in: hSnapshot=0x228, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0192.994] Process32NextW (in: hSnapshot=0x228, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0192.995] Process32NextW (in: hSnapshot=0x228, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0192.995] Process32NextW (in: hSnapshot=0x228, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0192.996] Process32NextW (in: hSnapshot=0x228, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0192.996] Process32NextW (in: hSnapshot=0x228, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0192.997] Process32NextW (in: hSnapshot=0x228, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0192.997] Process32NextW (in: hSnapshot=0x228, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0192.997] Process32NextW (in: hSnapshot=0x228, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0192.998] Process32NextW (in: hSnapshot=0x228, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0192.998] Process32NextW (in: hSnapshot=0x228, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0192.998] Process32NextW (in: hSnapshot=0x228, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0192.999] Process32NextW (in: hSnapshot=0x228, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0192.999] Process32NextW (in: hSnapshot=0x228, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0193.000] Process32NextW (in: hSnapshot=0x228, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0193.000] Process32NextW (in: hSnapshot=0x228, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0193.000] CloseHandle (hObject=0x228) returned 1 [0193.000] Sleep (dwMilliseconds=0x1f4) [0193.761] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2f8 [0193.766] Process32FirstW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0193.766] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0193.766] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0193.767] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0193.767] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0193.768] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0193.768] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0193.768] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0193.769] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0193.769] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0193.769] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0193.770] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0193.770] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0193.771] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0193.771] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0193.771] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0193.772] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0193.772] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x46, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0193.772] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0193.773] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0193.773] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0193.774] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0193.774] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0193.774] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0193.775] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0193.775] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0193.775] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0193.776] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0193.776] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0193.777] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0193.777] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0193.778] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0193.778] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0193.779] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0193.779] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0193.779] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0193.780] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0193.780] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0193.780] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0193.781] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0193.781] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0193.782] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0193.782] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0193.782] CloseHandle (hObject=0x2f8) returned 1 [0193.782] Sleep (dwMilliseconds=0x1f4) [0194.584] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x220 [0194.591] Process32FirstW (in: hSnapshot=0x220, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0194.591] Process32NextW (in: hSnapshot=0x220, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0194.591] Process32NextW (in: hSnapshot=0x220, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0194.592] Process32NextW (in: hSnapshot=0x220, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0194.592] Process32NextW (in: hSnapshot=0x220, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0194.592] Process32NextW (in: hSnapshot=0x220, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0194.593] Process32NextW (in: hSnapshot=0x220, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0194.593] Process32NextW (in: hSnapshot=0x220, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0194.594] Process32NextW (in: hSnapshot=0x220, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0194.594] Process32NextW (in: hSnapshot=0x220, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0194.594] Process32NextW (in: hSnapshot=0x220, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0194.595] Process32NextW (in: hSnapshot=0x220, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0194.595] Process32NextW (in: hSnapshot=0x220, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0194.595] Process32NextW (in: hSnapshot=0x220, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0194.596] Process32NextW (in: hSnapshot=0x220, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0194.596] Process32NextW (in: hSnapshot=0x220, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0194.597] Process32NextW (in: hSnapshot=0x220, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0194.597] Process32NextW (in: hSnapshot=0x220, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x46, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0194.597] Process32NextW (in: hSnapshot=0x220, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0194.598] Process32NextW (in: hSnapshot=0x220, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0194.598] Process32NextW (in: hSnapshot=0x220, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0194.598] Process32NextW (in: hSnapshot=0x220, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0194.599] Process32NextW (in: hSnapshot=0x220, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0194.599] Process32NextW (in: hSnapshot=0x220, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0194.600] Process32NextW (in: hSnapshot=0x220, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0194.600] Process32NextW (in: hSnapshot=0x220, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0194.600] Process32NextW (in: hSnapshot=0x220, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0194.601] Process32NextW (in: hSnapshot=0x220, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0194.601] Process32NextW (in: hSnapshot=0x220, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0194.601] Process32NextW (in: hSnapshot=0x220, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0194.602] Process32NextW (in: hSnapshot=0x220, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0194.602] Process32NextW (in: hSnapshot=0x220, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0194.603] Process32NextW (in: hSnapshot=0x220, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0194.603] Process32NextW (in: hSnapshot=0x220, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0194.603] Process32NextW (in: hSnapshot=0x220, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0194.604] Process32NextW (in: hSnapshot=0x220, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0194.604] Process32NextW (in: hSnapshot=0x220, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0194.605] Process32NextW (in: hSnapshot=0x220, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0194.605] Process32NextW (in: hSnapshot=0x220, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0194.606] Process32NextW (in: hSnapshot=0x220, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0194.606] Process32NextW (in: hSnapshot=0x220, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0194.606] Process32NextW (in: hSnapshot=0x220, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0194.607] Process32NextW (in: hSnapshot=0x220, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0194.607] CloseHandle (hObject=0x220) returned 1 [0194.607] Sleep (dwMilliseconds=0x1f4) [0195.301] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x224 [0195.308] Process32FirstW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0195.308] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0195.309] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0195.309] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0195.309] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0195.310] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0195.310] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0195.310] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0195.311] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0195.311] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0195.312] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0195.312] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0195.312] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0195.313] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0195.313] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0195.313] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0195.314] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0195.314] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x47, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0195.315] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0195.315] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0195.316] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0195.316] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0195.316] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0195.317] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0195.317] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0195.317] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0195.318] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0195.318] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0195.319] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0195.319] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0195.319] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0195.320] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0195.320] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0195.320] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0195.321] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0195.321] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0195.321] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0195.322] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0195.322] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0195.323] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0195.323] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0195.323] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0195.324] Process32NextW (in: hSnapshot=0x224, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0195.324] CloseHandle (hObject=0x224) returned 1 [0195.324] Sleep (dwMilliseconds=0x1f4) [0196.047] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2ec [0196.053] Process32FirstW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0196.053] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0196.053] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0196.054] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0196.054] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0196.054] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0196.055] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0196.055] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0196.056] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0196.056] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0196.056] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0196.057] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0196.057] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0196.057] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0196.058] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0196.058] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0196.059] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0196.059] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x48, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0196.059] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0196.060] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0196.060] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0196.060] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0196.061] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0196.061] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0196.062] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0196.062] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0196.062] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0196.063] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0196.063] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0196.063] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0196.064] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0196.065] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0196.065] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0196.065] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0196.066] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0196.066] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0196.066] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0196.067] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0196.067] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0196.068] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0196.068] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0196.068] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0196.069] Process32NextW (in: hSnapshot=0x2ec, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0196.069] CloseHandle (hObject=0x2ec) returned 1 [0196.069] Sleep (dwMilliseconds=0x1f4) [0196.747] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2d4 [0196.754] Process32FirstW (in: hSnapshot=0x2d4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0196.754] Process32NextW (in: hSnapshot=0x2d4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0196.754] Process32NextW (in: hSnapshot=0x2d4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0196.755] Process32NextW (in: hSnapshot=0x2d4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0196.755] Process32NextW (in: hSnapshot=0x2d4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0196.756] Process32NextW (in: hSnapshot=0x2d4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0196.756] Process32NextW (in: hSnapshot=0x2d4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0196.756] Process32NextW (in: hSnapshot=0x2d4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0196.757] Process32NextW (in: hSnapshot=0x2d4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0196.757] Process32NextW (in: hSnapshot=0x2d4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0196.758] Process32NextW (in: hSnapshot=0x2d4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0196.758] Process32NextW (in: hSnapshot=0x2d4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0196.758] Process32NextW (in: hSnapshot=0x2d4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0196.759] Process32NextW (in: hSnapshot=0x2d4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0196.759] Process32NextW (in: hSnapshot=0x2d4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0196.760] Process32NextW (in: hSnapshot=0x2d4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0196.760] Process32NextW (in: hSnapshot=0x2d4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0196.760] Process32NextW (in: hSnapshot=0x2d4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x48, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0196.761] Process32NextW (in: hSnapshot=0x2d4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0196.761] Process32NextW (in: hSnapshot=0x2d4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0196.762] Process32NextW (in: hSnapshot=0x2d4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0196.762] Process32NextW (in: hSnapshot=0x2d4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0196.762] Process32NextW (in: hSnapshot=0x2d4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0196.763] Process32NextW (in: hSnapshot=0x2d4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0196.763] Process32NextW (in: hSnapshot=0x2d4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0196.764] Process32NextW (in: hSnapshot=0x2d4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0196.764] Process32NextW (in: hSnapshot=0x2d4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0196.764] Process32NextW (in: hSnapshot=0x2d4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0196.765] Process32NextW (in: hSnapshot=0x2d4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0196.765] Process32NextW (in: hSnapshot=0x2d4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0196.765] Process32NextW (in: hSnapshot=0x2d4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0196.766] Process32NextW (in: hSnapshot=0x2d4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0196.766] Process32NextW (in: hSnapshot=0x2d4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0196.767] Process32NextW (in: hSnapshot=0x2d4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0196.767] Process32NextW (in: hSnapshot=0x2d4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0196.767] Process32NextW (in: hSnapshot=0x2d4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0196.768] Process32NextW (in: hSnapshot=0x2d4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0196.768] Process32NextW (in: hSnapshot=0x2d4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0196.769] Process32NextW (in: hSnapshot=0x2d4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0196.769] Process32NextW (in: hSnapshot=0x2d4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0196.769] Process32NextW (in: hSnapshot=0x2d4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0196.770] Process32NextW (in: hSnapshot=0x2d4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0196.770] Process32NextW (in: hSnapshot=0x2d4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0196.771] Process32NextW (in: hSnapshot=0x2d4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0196.771] CloseHandle (hObject=0x2d4) returned 1 [0196.771] Sleep (dwMilliseconds=0x1f4) [0197.387] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2d0 [0197.390] Process32FirstW (in: hSnapshot=0x2d0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0197.391] Process32NextW (in: hSnapshot=0x2d0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0197.391] Process32NextW (in: hSnapshot=0x2d0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0197.392] Process32NextW (in: hSnapshot=0x2d0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0197.392] Process32NextW (in: hSnapshot=0x2d0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0197.393] Process32NextW (in: hSnapshot=0x2d0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0197.393] Process32NextW (in: hSnapshot=0x2d0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0197.393] Process32NextW (in: hSnapshot=0x2d0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0197.394] Process32NextW (in: hSnapshot=0x2d0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0197.394] Process32NextW (in: hSnapshot=0x2d0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0197.394] Process32NextW (in: hSnapshot=0x2d0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0197.395] Process32NextW (in: hSnapshot=0x2d0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0197.395] Process32NextW (in: hSnapshot=0x2d0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0197.396] Process32NextW (in: hSnapshot=0x2d0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0197.396] Process32NextW (in: hSnapshot=0x2d0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0197.396] Process32NextW (in: hSnapshot=0x2d0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0197.397] Process32NextW (in: hSnapshot=0x2d0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0197.397] Process32NextW (in: hSnapshot=0x2d0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x48, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0197.398] Process32NextW (in: hSnapshot=0x2d0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0197.398] Process32NextW (in: hSnapshot=0x2d0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0197.398] Process32NextW (in: hSnapshot=0x2d0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0197.399] Process32NextW (in: hSnapshot=0x2d0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0197.399] Process32NextW (in: hSnapshot=0x2d0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0197.400] Process32NextW (in: hSnapshot=0x2d0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0197.400] Process32NextW (in: hSnapshot=0x2d0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0197.400] Process32NextW (in: hSnapshot=0x2d0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0197.401] Process32NextW (in: hSnapshot=0x2d0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0197.401] Process32NextW (in: hSnapshot=0x2d0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0197.401] Process32NextW (in: hSnapshot=0x2d0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0197.402] Process32NextW (in: hSnapshot=0x2d0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0197.402] Process32NextW (in: hSnapshot=0x2d0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0197.403] Process32NextW (in: hSnapshot=0x2d0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0197.403] Process32NextW (in: hSnapshot=0x2d0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0197.403] Process32NextW (in: hSnapshot=0x2d0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0197.404] Process32NextW (in: hSnapshot=0x2d0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0197.404] Process32NextW (in: hSnapshot=0x2d0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0197.405] Process32NextW (in: hSnapshot=0x2d0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0197.405] Process32NextW (in: hSnapshot=0x2d0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0197.405] Process32NextW (in: hSnapshot=0x2d0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0197.406] Process32NextW (in: hSnapshot=0x2d0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0197.406] Process32NextW (in: hSnapshot=0x2d0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0197.406] Process32NextW (in: hSnapshot=0x2d0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0197.407] Process32NextW (in: hSnapshot=0x2d0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0197.407] Process32NextW (in: hSnapshot=0x2d0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0197.408] CloseHandle (hObject=0x2d0) returned 1 [0197.408] Sleep (dwMilliseconds=0x1f4) [0198.158] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2f8 [0198.162] Process32FirstW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0198.162] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0198.163] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0198.163] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0198.164] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0198.164] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0198.164] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0198.165] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0198.165] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0198.165] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0198.166] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0198.166] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0198.167] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0198.167] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0198.167] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0198.168] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0198.168] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0198.168] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x48, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0198.169] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0198.169] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0198.170] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0198.170] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0198.170] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0198.171] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0198.171] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0198.171] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0198.172] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0198.172] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0198.173] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0198.173] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0198.173] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0198.174] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0198.174] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0198.175] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0198.175] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0198.175] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0198.176] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0198.176] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0198.176] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0198.177] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0198.177] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0198.178] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0198.178] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0198.178] Process32NextW (in: hSnapshot=0x2f8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0198.179] CloseHandle (hObject=0x2f8) returned 1 [0198.179] Sleep (dwMilliseconds=0x1f4) [0198.910] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2b0 [0198.914] Process32FirstW (in: hSnapshot=0x2b0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0198.914] Process32NextW (in: hSnapshot=0x2b0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0198.914] Process32NextW (in: hSnapshot=0x2b0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0198.915] Process32NextW (in: hSnapshot=0x2b0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0198.915] Process32NextW (in: hSnapshot=0x2b0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0198.916] Process32NextW (in: hSnapshot=0x2b0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0198.916] Process32NextW (in: hSnapshot=0x2b0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0198.916] Process32NextW (in: hSnapshot=0x2b0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0198.917] Process32NextW (in: hSnapshot=0x2b0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0198.917] Process32NextW (in: hSnapshot=0x2b0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0198.917] Process32NextW (in: hSnapshot=0x2b0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0198.918] Process32NextW (in: hSnapshot=0x2b0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0198.918] Process32NextW (in: hSnapshot=0x2b0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0198.919] Process32NextW (in: hSnapshot=0x2b0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0198.919] Process32NextW (in: hSnapshot=0x2b0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0198.919] Process32NextW (in: hSnapshot=0x2b0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0198.920] Process32NextW (in: hSnapshot=0x2b0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0198.920] Process32NextW (in: hSnapshot=0x2b0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x48, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0198.920] Process32NextW (in: hSnapshot=0x2b0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0198.921] Process32NextW (in: hSnapshot=0x2b0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0198.921] Process32NextW (in: hSnapshot=0x2b0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0198.922] Process32NextW (in: hSnapshot=0x2b0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0198.922] Process32NextW (in: hSnapshot=0x2b0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0198.922] Process32NextW (in: hSnapshot=0x2b0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0198.923] Process32NextW (in: hSnapshot=0x2b0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0198.923] Process32NextW (in: hSnapshot=0x2b0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0198.924] Process32NextW (in: hSnapshot=0x2b0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0198.924] Process32NextW (in: hSnapshot=0x2b0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0198.924] Process32NextW (in: hSnapshot=0x2b0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0198.925] Process32NextW (in: hSnapshot=0x2b0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0198.925] Process32NextW (in: hSnapshot=0x2b0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0198.926] Process32NextW (in: hSnapshot=0x2b0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0198.926] Process32NextW (in: hSnapshot=0x2b0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0198.926] Process32NextW (in: hSnapshot=0x2b0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0198.927] Process32NextW (in: hSnapshot=0x2b0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0198.927] Process32NextW (in: hSnapshot=0x2b0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0198.927] Process32NextW (in: hSnapshot=0x2b0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0198.928] Process32NextW (in: hSnapshot=0x2b0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0198.928] Process32NextW (in: hSnapshot=0x2b0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0198.929] Process32NextW (in: hSnapshot=0x2b0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0198.929] Process32NextW (in: hSnapshot=0x2b0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0198.929] Process32NextW (in: hSnapshot=0x2b0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0198.930] Process32NextW (in: hSnapshot=0x2b0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0198.930] Process32NextW (in: hSnapshot=0x2b0, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0198.930] CloseHandle (hObject=0x2b0) returned 1 [0198.930] Sleep (dwMilliseconds=0x1f4) [0199.533] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2b4 [0199.538] Process32FirstW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0199.538] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0199.539] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0199.539] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0199.540] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0199.540] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0199.540] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0199.541] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0199.541] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0199.541] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0199.542] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0199.542] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0199.543] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0199.543] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0199.543] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0199.544] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0199.544] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0199.544] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x48, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0199.545] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0199.545] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0199.546] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0199.546] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0199.546] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0199.547] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0199.547] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0199.547] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0199.548] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0199.548] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0199.549] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0199.549] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0199.550] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0199.550] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0199.551] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0199.551] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0199.551] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0199.552] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0199.552] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0199.552] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0199.553] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0199.553] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0199.554] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0199.554] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0199.554] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0199.555] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0199.555] CloseHandle (hObject=0x2b4) returned 1 [0199.555] Sleep (dwMilliseconds=0x1f4) [0200.378] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2b4 [0200.384] Process32FirstW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0200.384] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0200.385] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0200.385] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0200.385] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0200.386] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0200.386] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0200.387] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0200.387] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0200.387] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0200.388] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0200.388] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0200.388] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0200.389] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0200.389] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0200.390] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0200.390] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0200.391] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x48, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0200.391] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0200.391] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0200.392] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0200.392] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0200.393] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0200.393] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0200.393] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0200.394] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0200.394] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0200.395] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0200.395] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0200.395] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0200.396] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0200.396] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0200.397] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0200.397] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0200.397] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0200.398] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0200.398] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0200.398] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0200.399] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0200.399] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0200.400] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0200.400] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0200.400] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0200.401] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0200.401] CloseHandle (hObject=0x2b4) returned 1 [0200.401] Sleep (dwMilliseconds=0x1f4) [0201.228] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2b4 [0201.234] Process32FirstW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0201.235] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0201.235] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0201.235] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0201.236] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0201.236] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0201.237] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0201.237] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0201.237] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0201.238] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0201.238] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0201.239] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0201.239] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0201.240] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0201.240] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0201.240] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0201.241] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0201.241] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x48, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0201.241] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0201.242] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0201.242] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0201.243] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0201.243] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0201.243] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0201.245] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0201.257] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0201.264] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0201.266] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0201.268] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0201.275] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0201.277] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0201.278] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0201.287] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0201.289] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0201.296] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0201.298] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0201.299] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0201.307] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0201.314] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0201.323] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0201.329] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0201.330] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0201.337] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0201.346] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0201.347] CloseHandle (hObject=0x2b4) returned 1 [0201.354] Sleep (dwMilliseconds=0x1f4) [0203.552] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2b4 [0203.560] Process32FirstW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0203.560] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0203.561] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0203.561] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0203.561] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0203.562] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0203.562] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0203.563] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0203.563] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0203.563] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0203.564] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0203.564] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0203.564] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0203.565] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0203.565] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0203.566] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0203.566] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0203.573] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0203.574] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0203.574] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0203.575] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0203.575] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0203.575] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0203.576] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0203.576] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0203.576] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0203.577] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0203.577] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0203.578] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0203.578] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0203.578] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0203.579] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0203.579] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0203.579] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0203.580] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0203.580] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0203.581] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0203.581] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0203.581] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0203.582] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0203.582] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0203.583] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0203.583] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0203.583] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0203.584] CloseHandle (hObject=0x2b4) returned 1 [0203.585] Sleep (dwMilliseconds=0x1f4) [0204.217] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2b4 [0204.224] Process32FirstW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0204.225] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0204.225] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0204.225] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0204.226] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0204.226] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0204.227] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0204.227] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0204.227] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0204.228] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0204.228] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0204.229] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0204.229] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0204.230] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0204.230] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0204.230] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0204.231] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0204.231] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4c, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0204.232] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0204.232] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0204.232] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0204.233] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0204.233] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0204.234] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0204.234] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0204.234] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0204.235] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0204.235] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0204.236] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0204.236] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0204.237] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0204.237] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0204.238] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0204.238] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0204.238] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0204.239] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0204.239] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0204.240] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0204.240] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0204.241] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0204.241] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xfa8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0204.242] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0204.242] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0204.243] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0204.243] CloseHandle (hObject=0x2b4) returned 1 [0204.243] Sleep (dwMilliseconds=0x1f4) [0205.015] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2b4 [0205.066] Process32FirstW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0205.076] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0205.076] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0205.086] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0205.087] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0205.092] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0205.104] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0205.105] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0205.122] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0205.123] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0205.137] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0205.138] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0205.147] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0205.157] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0205.164] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0205.167] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0205.177] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0205.186] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4d, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0205.195] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0205.201] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0205.206] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0205.214] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0205.218] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0205.229] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0205.229] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0205.230] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0205.236] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0205.241] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0205.250] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0205.251] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0205.263] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0205.263] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0205.264] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0205.277] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0205.294] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0205.303] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0205.312] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0205.313] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0205.319] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0205.322] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0205.339] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0205.341] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0205.342] Process32NextW (in: hSnapshot=0x2b4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0205.414] CloseHandle (hObject=0x2b4) returned 1 [0205.414] Sleep (dwMilliseconds=0x1f4) [0206.139] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2c8 [0206.142] Process32FirstW (in: hSnapshot=0x2c8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0206.143] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0206.143] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0206.143] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0206.144] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0206.144] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0206.145] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0206.145] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0206.145] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0206.146] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0206.146] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0206.147] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0206.168] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0206.230] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0206.256] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0206.260] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0206.261] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0206.268] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x47, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0206.271] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0206.294] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0206.299] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0206.306] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0206.310] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0206.322] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0206.329] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0206.330] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0206.330] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0206.331] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0206.331] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0206.331] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0206.332] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0206.332] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0206.332] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0206.333] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0206.333] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0206.334] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0206.334] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0206.334] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0206.335] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0206.335] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0206.336] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0206.336] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0206.336] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0206.337] CloseHandle (hObject=0x2c8) returned 1 [0206.337] Sleep (dwMilliseconds=0x1f4) [0206.877] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2a4 [0206.882] Process32FirstW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0206.882] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0206.883] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0206.883] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0206.883] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0206.884] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0206.884] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0206.884] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0206.885] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0206.885] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0206.886] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0206.886] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0206.886] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0206.887] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0206.887] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0206.888] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0206.888] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0206.888] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x44, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0206.889] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0206.889] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0206.889] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0206.890] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0206.890] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0206.891] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0206.891] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0206.891] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0206.892] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0206.892] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0206.892] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0206.893] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0206.893] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0206.894] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0206.894] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0206.894] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0206.895] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0206.895] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0206.895] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0206.896] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0206.896] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0206.897] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0206.897] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0206.897] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0206.898] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0206.898] CloseHandle (hObject=0x2a4) returned 1 [0206.898] Sleep (dwMilliseconds=0x1f4) [0207.520] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2a4 [0207.922] Process32FirstW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0207.922] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0207.923] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0207.923] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0207.923] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0207.924] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0207.924] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0207.925] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0207.925] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0207.925] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0207.926] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0207.926] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0207.926] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0207.927] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0207.927] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0207.928] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0207.981] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0208.022] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x44, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0208.057] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0208.058] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0208.058] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0208.058] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0208.059] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0208.059] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0208.060] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0208.060] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0208.060] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0208.061] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0208.061] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0208.062] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0208.062] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0208.062] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0208.063] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0208.063] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0208.063] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0208.064] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0208.064] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0208.065] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0208.065] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0208.086] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0208.101] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0208.111] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0208.111] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0208.113] CloseHandle (hObject=0x2a4) returned 1 [0208.119] Sleep (dwMilliseconds=0x1f4) [0208.871] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2a4 [0209.179] Process32FirstW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0209.183] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0209.185] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0209.194] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0209.195] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0209.205] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0209.205] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0209.207] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0209.216] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0209.217] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0209.227] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0209.228] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.237] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.238] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0209.256] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.262] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.264] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.280] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x44, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.281] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.291] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.292] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.294] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.301] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.302] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.304] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0209.312] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.312] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0209.325] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0209.340] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0209.344] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0209.345] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.352] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0209.358] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0209.359] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0209.367] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0209.368] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0209.378] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0209.379] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0209.387] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0209.394] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0209.397] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.437] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.437] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0209.437] CloseHandle (hObject=0x2a4) returned 1 [0209.437] Sleep (dwMilliseconds=0x1f4) [0209.985] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2a4 [0209.991] Process32FirstW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0209.991] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0209.992] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0209.992] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0209.992] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0209.993] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0209.993] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0209.994] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0209.995] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0209.995] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0209.995] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0209.996] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.996] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.997] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0209.997] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.997] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.998] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.998] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x44, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.999] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.999] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0210.000] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0210.000] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0210.000] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0210.001] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0210.001] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0210.001] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0210.002] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0210.002] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0210.003] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0210.003] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0210.003] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0210.004] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0210.004] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0210.005] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0210.005] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0210.005] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0210.006] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0210.006] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0210.007] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0210.007] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0210.007] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0210.008] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0210.008] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0210.009] CloseHandle (hObject=0x2a4) returned 1 [0210.009] Sleep (dwMilliseconds=0x1f4) [0210.568] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2a4 [0210.585] Process32FirstW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0210.586] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0210.586] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0210.587] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0210.587] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0210.587] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0210.588] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0210.588] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0210.589] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0210.589] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0210.589] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0210.590] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0210.590] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0210.590] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0210.591] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0210.591] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0210.592] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0210.592] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x44, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0210.592] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0210.593] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0210.593] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0210.593] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0210.594] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0210.594] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0210.595] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0210.597] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0210.604] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0210.605] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0210.618] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0210.618] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0210.618] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0210.619] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0210.619] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0210.620] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0210.620] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0210.620] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0210.621] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0210.621] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0210.621] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0210.622] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0210.622] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0210.623] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0210.623] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0210.623] CloseHandle (hObject=0x2a4) returned 1 [0210.623] Sleep (dwMilliseconds=0x1f4) [0211.237] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2a4 [0211.244] Process32FirstW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0211.244] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0211.245] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0211.245] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0211.246] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0211.246] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0211.246] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0211.247] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0211.247] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0211.247] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0211.248] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0211.248] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.249] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.249] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0211.249] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.250] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.250] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.250] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x44, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.251] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.251] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.252] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.252] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.252] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.253] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.253] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0211.253] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.254] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0211.254] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0211.255] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0211.255] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0211.257] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.266] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0211.266] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0211.267] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0211.267] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0211.267] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0211.268] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0211.268] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0211.268] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0211.284] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0211.323] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.323] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.324] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0211.324] CloseHandle (hObject=0x2a4) returned 1 [0211.324] Sleep (dwMilliseconds=0x1f4) [0211.845] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2a4 [0211.848] Process32FirstW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0211.849] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0211.849] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0211.850] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0211.850] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0211.850] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0211.851] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0211.851] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0211.851] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0211.852] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0211.852] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0211.853] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.853] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.853] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0211.854] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.854] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.855] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.855] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x44, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.855] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.856] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.856] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.856] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.857] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.857] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.858] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0211.858] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.858] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0211.859] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0211.894] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0211.894] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0211.895] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.895] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0211.895] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0211.896] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0211.896] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0211.897] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0211.897] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0211.897] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0211.898] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0211.898] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0211.899] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.899] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.899] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0211.900] CloseHandle (hObject=0x2a4) returned 1 [0211.900] Sleep (dwMilliseconds=0x1f4) [0212.409] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2a4 [0212.414] Process32FirstW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0212.415] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0212.415] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0212.415] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0212.416] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0212.416] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0212.417] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0212.417] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0212.418] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0212.418] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0212.418] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0212.419] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0212.419] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0212.419] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0212.420] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0212.420] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0212.421] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0212.421] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x44, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0212.421] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0212.422] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0212.422] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0212.422] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0212.423] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0212.423] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0212.424] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0212.424] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0212.424] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0212.425] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0212.425] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0212.425] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0212.426] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0212.426] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0212.427] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0212.427] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0212.427] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0212.428] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0212.428] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0212.428] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0212.429] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0212.429] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0212.430] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0212.430] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0212.430] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0212.431] CloseHandle (hObject=0x2a4) returned 1 [0212.431] Sleep (dwMilliseconds=0x1f4) [0213.303] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2a4 [0213.308] Process32FirstW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0213.309] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0213.309] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0213.309] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0213.310] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0213.310] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0213.310] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0213.311] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0213.311] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0213.312] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0213.312] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0213.312] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.313] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.313] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0213.313] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.314] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.314] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.315] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x46, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.315] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.315] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.316] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.316] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.316] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.317] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.317] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0213.318] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.318] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0213.318] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0213.319] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0213.319] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0213.320] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.320] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0213.320] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0213.321] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0213.321] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0213.321] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0213.322] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0213.323] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0213.323] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0213.323] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0213.324] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.324] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.324] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0213.325] CloseHandle (hObject=0x2a4) returned 1 [0213.325] Sleep (dwMilliseconds=0x1f4) [0214.208] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2a4 [0214.212] Process32FirstW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0214.212] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0214.213] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0214.213] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0214.214] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0214.214] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0214.215] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0214.215] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0214.215] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0214.216] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0214.216] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0214.216] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.217] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.217] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0214.218] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.218] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.218] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.219] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x46, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.219] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.219] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.220] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.220] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.221] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.221] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.221] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0214.222] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.222] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0214.223] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0214.223] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0214.223] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0214.224] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.224] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0214.224] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0214.225] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0214.225] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0214.226] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0214.226] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0214.226] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0214.227] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0214.227] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0214.227] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.228] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.228] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0214.229] CloseHandle (hObject=0x2a4) returned 1 [0214.229] Sleep (dwMilliseconds=0x1f4) [0214.830] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2a4 [0214.835] Process32FirstW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0214.836] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0214.836] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0214.836] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0214.837] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0214.837] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0214.837] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0214.838] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0214.838] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0214.839] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0214.839] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0214.839] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.840] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.840] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0214.840] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.841] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.841] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.842] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x47, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.842] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.842] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.843] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.843] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.843] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.844] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.844] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0214.845] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.845] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0214.845] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0214.846] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0214.846] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0214.860] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.861] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0214.861] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0214.862] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0214.862] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0214.862] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0214.863] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0214.863] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0214.863] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0214.864] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0214.864] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.865] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.865] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0214.865] CloseHandle (hObject=0x2a4) returned 1 [0214.866] Sleep (dwMilliseconds=0x1f4) [0216.263] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2a4 [0216.300] Process32FirstW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0216.301] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0216.301] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0216.301] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0216.302] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0216.302] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0216.302] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0216.303] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0216.303] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0216.304] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0216.304] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0216.304] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.305] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.305] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0216.305] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.306] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.306] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.307] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x47, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.307] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.307] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.308] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.308] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.309] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.309] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.309] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0216.310] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.310] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0216.310] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0216.311] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0216.311] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0216.312] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.312] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0216.313] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0216.313] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0216.313] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0216.314] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0216.314] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0216.314] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0216.315] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0216.315] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0216.316] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.316] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.316] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0216.317] CloseHandle (hObject=0x2a4) returned 1 [0216.317] Sleep (dwMilliseconds=0x1f4) [0217.135] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2a4 [0217.268] Process32FirstW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0217.269] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0217.277] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0217.283] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0217.284] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0217.291] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0217.294] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0217.306] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0217.313] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0217.318] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0217.330] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0217.331] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0217.341] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0217.342] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0217.352] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0217.353] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0217.457] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0217.467] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x47, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0217.468] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0217.469] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0217.472] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0217.480] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0217.488] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0217.488] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0217.488] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0217.489] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0217.489] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0217.490] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0217.490] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0217.490] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0217.491] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0217.491] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0217.492] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0217.492] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0217.492] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0217.493] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0217.493] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0217.493] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0217.494] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0217.494] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0217.495] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0217.495] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0217.495] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0217.496] CloseHandle (hObject=0x2a4) returned 1 [0217.496] Sleep (dwMilliseconds=0x1f4) [0218.088] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2a4 [0218.152] Process32FirstW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0218.248] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0218.249] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0218.249] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0218.250] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0218.250] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0218.251] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0218.251] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0218.251] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0218.252] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0218.252] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0218.252] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.253] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.253] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0218.253] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.254] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.254] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.255] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x47, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.255] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.255] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.256] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.256] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.256] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.257] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.257] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0218.258] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.258] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0218.258] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0218.259] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0218.259] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0218.259] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.260] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0218.260] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0218.261] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0218.261] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0218.261] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0218.262] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0218.262] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0218.262] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0218.263] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0218.263] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.264] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.269] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0218.269] CloseHandle (hObject=0x2a4) returned 1 [0218.269] Sleep (dwMilliseconds=0x1f4) [0218.915] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2a4 [0219.001] Process32FirstW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0219.011] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0219.012] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0219.014] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0219.221] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0219.229] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0219.232] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0219.233] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0219.243] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0219.243] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0219.482] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0219.497] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0219.498] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0219.506] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0219.510] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0219.511] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0219.547] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0219.550] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x47, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0219.558] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0219.561] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0219.563] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0219.563] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0219.563] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0219.564] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0219.565] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0219.566] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0219.566] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0219.566] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0219.567] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0219.567] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0219.567] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0219.568] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0219.568] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0219.569] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0219.569] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0219.569] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0219.570] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0219.570] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0219.571] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0219.571] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0219.571] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0219.572] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0219.572] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0219.572] CloseHandle (hObject=0x2a4) returned 1 [0219.573] Sleep (dwMilliseconds=0x1f4) [0220.312] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0220.316] Process32FirstW (in: hSnapshot=0x2bc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0220.317] Process32NextW (in: hSnapshot=0x2bc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0220.317] Process32NextW (in: hSnapshot=0x2bc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0220.317] Process32NextW (in: hSnapshot=0x2bc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0220.318] Process32NextW (in: hSnapshot=0x2bc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0220.318] Process32NextW (in: hSnapshot=0x2bc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0220.319] Process32NextW (in: hSnapshot=0x2bc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0220.319] Process32NextW (in: hSnapshot=0x2bc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0220.319] Process32NextW (in: hSnapshot=0x2bc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0220.320] Process32NextW (in: hSnapshot=0x2bc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0220.320] Process32NextW (in: hSnapshot=0x2bc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0220.320] Process32NextW (in: hSnapshot=0x2bc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.321] Process32NextW (in: hSnapshot=0x2bc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.321] Process32NextW (in: hSnapshot=0x2bc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0220.322] Process32NextW (in: hSnapshot=0x2bc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.322] Process32NextW (in: hSnapshot=0x2bc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.322] Process32NextW (in: hSnapshot=0x2bc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.323] Process32NextW (in: hSnapshot=0x2bc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x47, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.323] Process32NextW (in: hSnapshot=0x2bc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.323] Process32NextW (in: hSnapshot=0x2bc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.324] Process32NextW (in: hSnapshot=0x2bc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.324] Process32NextW (in: hSnapshot=0x2bc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.325] Process32NextW (in: hSnapshot=0x2bc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.325] Process32NextW (in: hSnapshot=0x2bc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.325] Process32NextW (in: hSnapshot=0x2bc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0220.326] Process32NextW (in: hSnapshot=0x2bc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.326] Process32NextW (in: hSnapshot=0x2bc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0220.327] Process32NextW (in: hSnapshot=0x2bc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0220.327] Process32NextW (in: hSnapshot=0x2bc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0220.327] Process32NextW (in: hSnapshot=0x2bc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0220.328] Process32NextW (in: hSnapshot=0x2bc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.328] Process32NextW (in: hSnapshot=0x2bc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0220.329] Process32NextW (in: hSnapshot=0x2bc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0220.329] Process32NextW (in: hSnapshot=0x2bc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0220.329] Process32NextW (in: hSnapshot=0x2bc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0220.330] Process32NextW (in: hSnapshot=0x2bc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0220.334] Process32NextW (in: hSnapshot=0x2bc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0220.335] Process32NextW (in: hSnapshot=0x2bc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0220.335] Process32NextW (in: hSnapshot=0x2bc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0220.336] Process32NextW (in: hSnapshot=0x2bc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0220.336] Process32NextW (in: hSnapshot=0x2bc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.336] Process32NextW (in: hSnapshot=0x2bc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.337] Process32NextW (in: hSnapshot=0x2bc, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0220.337] CloseHandle (hObject=0x2bc) returned 1 [0220.337] Sleep (dwMilliseconds=0x1f4) [0221.124] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2a4 [0221.152] Process32FirstW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0221.153] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0221.153] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0221.154] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0221.154] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0221.154] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0221.155] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0221.155] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0221.156] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0221.156] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0221.158] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0221.158] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.159] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.159] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0221.160] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.160] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.160] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.161] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x47, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.161] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.161] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.162] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.162] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.163] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.163] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.163] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0221.164] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.164] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0221.164] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0221.165] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0221.165] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0221.166] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.166] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0221.166] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0221.167] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0221.167] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0221.168] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0221.168] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0221.168] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0221.169] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0221.169] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0221.169] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.170] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.170] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0221.171] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.171] Process32NextW (in: hSnapshot=0x2a4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0221.171] CloseHandle (hObject=0x2a4) returned 1 [0221.171] Sleep (dwMilliseconds=0x1f4) [0221.916] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2f4 [0221.989] Process32FirstW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0221.990] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0221.990] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0221.991] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0221.991] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0221.991] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0221.992] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0221.992] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0221.993] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0221.993] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0221.993] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0221.994] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.994] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.995] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0221.995] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.995] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.996] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.996] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x47, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.996] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.997] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.997] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.998] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.998] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.998] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.999] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0221.999] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.999] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0222.000] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0222.000] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0222.001] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0222.001] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.002] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0222.002] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0222.002] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0222.003] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0222.003] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0222.004] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0222.004] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0222.004] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0222.005] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0222.005] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.005] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.006] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0222.006] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.007] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0222.007] CloseHandle (hObject=0x2f4) returned 1 [0222.007] Sleep (dwMilliseconds=0x1f4) [0222.906] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2f4 [0222.911] Process32FirstW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0222.912] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0222.912] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0222.912] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0222.913] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0222.913] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0222.913] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0222.914] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0222.914] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0222.915] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0222.915] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0222.915] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.916] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.916] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0222.916] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.917] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.917] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.918] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4e, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.918] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.918] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.919] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.919] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.920] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.920] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.920] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0222.921] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.921] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0222.922] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0222.922] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0222.922] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0222.923] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.923] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0222.924] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0222.924] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0222.924] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0222.925] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0222.925] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0222.925] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0222.926] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0222.926] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0222.927] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.927] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.927] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0222.928] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.928] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0222.929] CloseHandle (hObject=0x2f4) returned 1 [0222.929] Sleep (dwMilliseconds=0x1f4) [0224.006] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2f4 [0224.010] Process32FirstW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0224.010] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0224.011] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0224.011] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0224.011] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0224.012] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0224.012] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0224.013] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0224.013] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1e8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0224.013] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x230, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0224.014] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0224.014] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0224.014] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0224.015] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x388, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x230, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0224.015] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0224.016] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0224.022] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0224.028] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4e, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0224.028] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0224.029] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x424, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0224.029] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0224.029] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0224.030] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0224.030] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0224.031] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0224.031] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x620, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0224.031] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0224.032] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0224.032] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0224.033] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0224.033] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0224.034] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0224.034] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x888, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x19c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0224.034] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0x998, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0224.035] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0224.035] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0224.035] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0224.036] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0224.036] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0224.037] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="shaofao.exe")) returned 1 [0224.037] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0224.037] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0224.038] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0224.038] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0224.038] Process32NextW (in: hSnapshot=0x2f4, lppe=0x2fcfcb4 | out: lppe=0x2fcfcb4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x24c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0224.039] CloseHandle (hObject=0x2f4) returned 1 [0224.039] Sleep (dwMilliseconds=0x1f4) Thread: id = 102 os_tid = 0x378 [0161.054] GetProcessHeap () returned 0x12c0000 [0161.054] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x21a) returned 0x12eb670 [0161.054] GetProcessHeap () returned 0x12c0000 [0161.054] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x28) returned 0x12d6e00 [0161.054] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x26c [0161.054] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x270 [0161.054] GetComputerNameW (in: lpBuffer=0x12eb680, nSize=0x30cfda4 | out: lpBuffer="NQDPDE", nSize=0x30cfda4) returned 1 [0161.056] GetProcessHeap () returned 0x12c0000 [0161.056] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12e8c20 [0161.056] CloseHandle (hObject=0x270) returned 1 [0161.056] CloseHandle (hObject=0x26c) returned 1 [0161.056] GetProcessHeap () returned 0x12c0000 [0161.056] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d6e00 | out: hHeap=0x12c0000) returned 1 [0161.056] GetProcessHeap () returned 0x12c0000 [0161.056] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8c20 | out: hHeap=0x12c0000) returned 1 [0161.056] GetProcessHeap () returned 0x12c0000 [0161.056] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12eb670 | out: hHeap=0x12c0000) returned 1 Thread: id = 103 os_tid = 0x390 [0161.057] GetLogicalDrives () returned 0x4 [0161.057] GetProcessHeap () returned 0x12c0000 [0161.057] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x40) returned 0x12d27f0 [0161.057] GetProcessHeap () returned 0x12c0000 [0161.057] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x28) returned 0x12d6e00 [0161.057] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x26c [0161.057] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x270 [0161.057] GetProcessHeap () returned 0x12c0000 [0161.057] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12e8c20 [0161.057] GetProcessHeap () returned 0x12c0000 [0161.057] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12e8c70 [0161.057] GetProcessHeap () returned 0x12c0000 [0161.057] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e) returned 0x12e89f0 [0161.057] GetProcessHeap () returned 0x12c0000 [0161.057] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x12d1688 [0161.058] GetProcessHeap () returned 0x12c0000 [0161.058] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d1688 | out: hHeap=0x12c0000) returned 1 [0161.058] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x12e8c70, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0161.058] GetProcessHeap () returned 0x12c0000 [0161.058] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e89f0 | out: hHeap=0x12c0000) returned 1 [0161.058] GetProcessHeap () returned 0x12c0000 [0161.058] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8c20 | out: hHeap=0x12c0000) returned 1 [0161.058] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x31cfdd4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x31cfdd4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0161.058] GetProcessHeap () returned 0x12c0000 [0161.058] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8c70 | out: hHeap=0x12c0000) returned 1 [0161.058] GetProcessHeap () returned 0x12c0000 [0161.058] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10) returned 0x12e78e0 [0161.058] GetProcessHeap () returned 0x12c0000 [0161.058] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10) returned 0x12e7850 [0161.058] GetProcessHeap () returned 0x12c0000 [0161.058] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10) returned 0x12e7a18 [0161.058] GetProcessHeap () returned 0x12c0000 [0161.058] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x12d1688 [0161.058] GetProcessHeap () returned 0x12c0000 [0161.058] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10) returned 0x12e7940 [0161.058] htonl (hostlong=0xb4197730) returned 0x307719b4 [0161.058] QueryPerformanceCounter (in: lpPerformanceCount=0x31cfcd0 | out: lpPerformanceCount=0x31cfcd0*=8879712562) returned 1 [0161.058] GetTickCount () returned 0x114033d [0161.058] GetCurrentProcessId () returned 0xf90 [0161.058] GetCurrentThreadId () returned 0x390 [0161.059] GetLocalTime (in: lpSystemTime=0x31cfcb8 | out: lpSystemTime=0x31cfcb8*(wYear=0x7e3, wMonth=0x9, wDayOfWeek=0x5, wDay=0xd, wHour=0x3, wMinute=0xa, wSecond=0x21, wMilliseconds=0x3c2)) [0161.059] SystemTimeToFileTime (in: lpSystemTime=0x31cfcb8, lpFileTime=0x31cfcc8 | out: lpFileTime=0x31cfcc8) returned 1 [0161.059] QueryPerformanceCounter (in: lpPerformanceCount=0x31cfcd0 | out: lpPerformanceCount=0x31cfcd0*=8879730932) returned 1 [0161.059] GetProcessHeap () returned 0x12c0000 [0161.059] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x28) returned 0x12d6e30 [0161.059] GetProcessHeap () returned 0x12c0000 [0161.059] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10) returned 0x12e7868 [0161.059] GetProcessHeap () returned 0x12c0000 [0161.059] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x4) returned 0x12eb820 [0161.059] GetProcessHeap () returned 0x12c0000 [0161.059] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x14) returned 0x12d8ab0 [0161.059] GetProcessHeap () returned 0x12c0000 [0161.059] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10) returned 0x12e7ac0 [0161.059] GetProcessHeap () returned 0x12c0000 [0161.059] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x80) returned 0x12d2df0 [0161.059] GetProcessHeap () returned 0x12c0000 [0161.059] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10) returned 0x12e78c8 [0161.059] GetProcessHeap () returned 0x12c0000 [0161.059] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x82) returned 0x12d13e8 [0161.059] GetProcessHeap () returned 0x12c0000 [0161.059] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10) returned 0x12e7880 [0161.059] GetProcessHeap () returned 0x12c0000 [0161.059] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x4) returned 0x12eb730 [0161.059] GetProcessHeap () returned 0x12c0000 [0161.059] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10) returned 0x12e78b0 [0161.059] GetProcessHeap () returned 0x12c0000 [0161.059] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x80) returned 0x12d0278 [0161.059] GetProcessHeap () returned 0x12c0000 [0161.059] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10) returned 0x12e7af0 [0161.059] GetProcessHeap () returned 0x12c0000 [0161.059] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x2) returned 0x12eb720 [0161.059] GetProcessHeap () returned 0x12c0000 [0161.059] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x4) returned 0x12eb700 [0161.060] GetProcessHeap () returned 0x12c0000 [0161.060] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10) returned 0x12e7ad8 [0161.060] GetProcessHeap () returned 0x12c0000 [0161.060] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x80) returned 0x12d0300 [0161.060] GetProcessHeap () returned 0x12c0000 [0161.060] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10) returned 0x12e7898 [0161.060] GetProcessHeap () returned 0x12c0000 [0161.060] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x4) returned 0x12eb800 [0161.060] GetProcessHeap () returned 0x12c0000 [0161.060] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12eb720, Size=0x82) returned 0x12cf690 [0161.060] GetProcessHeap () returned 0x12c0000 [0161.060] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12eb800, Size=0x100) returned 0x12ce2a8 [0161.060] GetProcessHeap () returned 0x12c0000 [0161.060] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10) returned 0x12e7808 [0161.060] GetProcessHeap () returned 0x12c0000 [0161.060] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x82) returned 0x12d2c28 [0161.060] GetProcessHeap () returned 0x12c0000 [0161.060] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10) returned 0x12e78f8 [0161.060] GetProcessHeap () returned 0x12c0000 [0161.060] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x82) returned 0x12d2cb8 [0161.060] GetProcessHeap () returned 0x12c0000 [0161.060] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12cf690, Size=0x104) returned 0x12cf690 [0161.060] GetProcessHeap () returned 0x12c0000 [0161.060] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12ce2a8, Size=0x200) returned 0x12ebe78 [0161.061] GetProcessHeap () returned 0x12c0000 [0161.061] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12eb700 | out: hHeap=0x12c0000) returned 1 [0161.061] GetProcessHeap () returned 0x12c0000 [0161.061] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12ebe78 | out: hHeap=0x12c0000) returned 1 [0161.061] GetProcessHeap () returned 0x12c0000 [0161.061] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e7898 | out: hHeap=0x12c0000) returned 1 [0161.061] GetProcessHeap () returned 0x12c0000 [0161.061] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d0278 | out: hHeap=0x12c0000) returned 1 [0161.061] GetProcessHeap () returned 0x12c0000 [0161.061] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e78b0 | out: hHeap=0x12c0000) returned 1 [0161.062] GetProcessHeap () returned 0x12c0000 [0161.062] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d0300 | out: hHeap=0x12c0000) returned 1 [0161.062] GetProcessHeap () returned 0x12c0000 [0161.062] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e7ad8 | out: hHeap=0x12c0000) returned 1 [0161.062] GetProcessHeap () returned 0x12c0000 [0161.062] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12cf690 | out: hHeap=0x12c0000) returned 1 [0161.062] GetProcessHeap () returned 0x12c0000 [0161.062] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e7af0 | out: hHeap=0x12c0000) returned 1 [0161.062] GetProcessHeap () returned 0x12c0000 [0161.062] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2c28 | out: hHeap=0x12c0000) returned 1 [0161.062] GetProcessHeap () returned 0x12c0000 [0161.062] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e7808 | out: hHeap=0x12c0000) returned 1 [0161.062] GetProcessHeap () returned 0x12c0000 [0161.062] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2cb8 | out: hHeap=0x12c0000) returned 1 [0161.062] GetProcessHeap () returned 0x12c0000 [0161.062] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e78f8 | out: hHeap=0x12c0000) returned 1 [0161.062] GetProcessHeap () returned 0x12c0000 [0161.062] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12eb820 | out: hHeap=0x12c0000) returned 1 [0161.062] GetProcessHeap () returned 0x12c0000 [0161.062] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e7868 | out: hHeap=0x12c0000) returned 1 [0161.062] GetProcessHeap () returned 0x12c0000 [0161.062] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d13e8 | out: hHeap=0x12c0000) returned 1 [0161.062] GetProcessHeap () returned 0x12c0000 [0161.062] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e78c8 | out: hHeap=0x12c0000) returned 1 [0161.062] GetProcessHeap () returned 0x12c0000 [0161.062] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2df0 | out: hHeap=0x12c0000) returned 1 [0161.062] GetProcessHeap () returned 0x12c0000 [0161.062] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e7ac0 | out: hHeap=0x12c0000) returned 1 [0161.062] GetProcessHeap () returned 0x12c0000 [0161.062] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12eb730 | out: hHeap=0x12c0000) returned 1 [0161.062] GetProcessHeap () returned 0x12c0000 [0161.062] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e7880 | out: hHeap=0x12c0000) returned 1 [0161.062] GetProcessHeap () returned 0x12c0000 [0161.062] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d6e30 | out: hHeap=0x12c0000) returned 1 [0161.062] GetProcessHeap () returned 0x12c0000 [0161.062] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d8ab0 | out: hHeap=0x12c0000) returned 1 [0161.062] GetProcessHeap () returned 0x12c0000 [0161.062] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0xa4) returned 0x12d09e8 [0161.062] GetProcessHeap () returned 0x12c0000 [0161.062] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e7850 | out: hHeap=0x12c0000) returned 1 [0161.062] GetProcessHeap () returned 0x12c0000 [0161.062] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e7a18 | out: hHeap=0x12c0000) returned 1 [0161.062] GetProcessHeap () returned 0x12c0000 [0161.063] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d1688 | out: hHeap=0x12c0000) returned 1 [0161.063] GetProcessHeap () returned 0x12c0000 [0161.063] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e7940 | out: hHeap=0x12c0000) returned 1 [0161.063] GetProcessHeap () returned 0x12c0000 [0161.063] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e78e0 | out: hHeap=0x12c0000) returned 1 [0161.063] GetProcessHeap () returned 0x12c0000 [0161.063] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x14) returned 0x12d8850 [0161.063] GetProcessHeap () returned 0x12c0000 [0161.063] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0xe) returned 0x12e78e0 [0161.063] ResetEvent (hEvent=0x270) returned 1 [0161.063] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x1024a4c, lpParameter=0x12d8850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x274 [0161.063] CloseHandle (hObject=0x274) returned 1 [0161.063] GetProcessHeap () returned 0x12c0000 [0161.063] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10) returned 0x12e7ac0 [0161.063] GetProcessHeap () returned 0x12c0000 [0161.063] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10) returned 0x12e7838 [0161.064] GetProcessHeap () returned 0x12c0000 [0161.064] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10) returned 0x12e7808 [0161.064] GetProcessHeap () returned 0x12c0000 [0161.064] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x12d1688 [0161.064] GetProcessHeap () returned 0x12c0000 [0161.064] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10) returned 0x12e7a18 [0161.064] htonl (hostlong=0xb4197730) returned 0x307719b4 [0161.064] GetProcessHeap () returned 0x12c0000 [0161.064] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x28) returned 0x12d6e60 [0161.064] GetProcessHeap () returned 0x12c0000 [0161.064] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10) returned 0x12e7ad8 [0161.064] GetProcessHeap () returned 0x12c0000 [0161.064] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x4) returned 0x12eba50 [0161.064] GetProcessHeap () returned 0x12c0000 [0161.064] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x14) returned 0x12d8870 [0161.064] GetProcessHeap () returned 0x12c0000 [0161.064] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10) returned 0x12e7af0 [0161.064] GetProcessHeap () returned 0x12c0000 [0161.064] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x80) returned 0x12d2df0 [0161.064] GetProcessHeap () returned 0x12c0000 [0161.064] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10) returned 0x12e7820 [0161.064] GetProcessHeap () returned 0x12c0000 [0161.064] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x82) returned 0x12d13e8 [0161.064] GetProcessHeap () returned 0x12c0000 [0161.064] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10) returned 0x12e7850 [0161.064] GetProcessHeap () returned 0x12c0000 [0161.064] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x4) returned 0x12eb900 [0161.064] GetProcessHeap () returned 0x12c0000 [0161.064] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10) returned 0x12e7868 [0161.064] GetProcessHeap () returned 0x12c0000 [0161.064] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x80) returned 0x12cf690 [0161.064] GetProcessHeap () returned 0x12c0000 [0161.064] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10) returned 0x12e7940 [0161.064] GetProcessHeap () returned 0x12c0000 [0161.064] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x2) returned 0x12eba30 [0161.064] GetProcessHeap () returned 0x12c0000 [0161.064] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x4) returned 0x12eb980 [0161.064] GetProcessHeap () returned 0x12c0000 [0161.064] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10) returned 0x12e7880 [0161.065] GetProcessHeap () returned 0x12c0000 [0161.065] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x80) returned 0x12cf718 [0161.065] GetProcessHeap () returned 0x12c0000 [0161.065] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10) returned 0x12e7898 [0161.065] GetProcessHeap () returned 0x12c0000 [0161.065] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x4) returned 0x12eb8c0 [0161.065] GetProcessHeap () returned 0x12c0000 [0161.065] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12eba30, Size=0x82) returned 0x12d0278 [0161.065] GetProcessHeap () returned 0x12c0000 [0161.065] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12eb8c0, Size=0x100) returned 0x12ce2a8 [0161.065] GetProcessHeap () returned 0x12c0000 [0161.065] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10) returned 0x12e78b0 [0161.065] GetProcessHeap () returned 0x12c0000 [0161.065] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x82) returned 0x12d2c28 [0161.065] GetProcessHeap () returned 0x12c0000 [0161.065] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10) returned 0x12e78f8 [0161.065] GetProcessHeap () returned 0x12c0000 [0161.065] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x82) returned 0x12d2cb8 [0161.065] GetProcessHeap () returned 0x12c0000 [0161.065] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12d0278, Size=0x104) returned 0x12d0278 [0161.065] GetProcessHeap () returned 0x12c0000 [0161.065] RtlReAllocateHeap (Heap=0x12c0000, Flags=0x0, Ptr=0x12ce2a8, Size=0x200) returned 0x12ebe78 [0161.066] GetProcessHeap () returned 0x12c0000 [0161.066] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12eb980 | out: hHeap=0x12c0000) returned 1 [0161.066] GetProcessHeap () returned 0x12c0000 [0161.066] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12ebe78 | out: hHeap=0x12c0000) returned 1 [0161.066] GetProcessHeap () returned 0x12c0000 [0161.066] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e7898 | out: hHeap=0x12c0000) returned 1 [0161.066] GetProcessHeap () returned 0x12c0000 [0161.066] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12cf690 | out: hHeap=0x12c0000) returned 1 [0161.066] GetProcessHeap () returned 0x12c0000 [0161.066] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e7868 | out: hHeap=0x12c0000) returned 1 [0161.066] GetProcessHeap () returned 0x12c0000 [0161.066] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12cf718 | out: hHeap=0x12c0000) returned 1 [0161.066] GetProcessHeap () returned 0x12c0000 [0161.067] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e7880 | out: hHeap=0x12c0000) returned 1 [0161.067] GetProcessHeap () returned 0x12c0000 [0161.067] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d0278 | out: hHeap=0x12c0000) returned 1 [0161.067] GetProcessHeap () returned 0x12c0000 [0161.067] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e7940 | out: hHeap=0x12c0000) returned 1 [0161.067] GetProcessHeap () returned 0x12c0000 [0161.067] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2c28 | out: hHeap=0x12c0000) returned 1 [0161.067] GetProcessHeap () returned 0x12c0000 [0161.067] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e78b0 | out: hHeap=0x12c0000) returned 1 [0161.067] GetProcessHeap () returned 0x12c0000 [0161.067] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2cb8 | out: hHeap=0x12c0000) returned 1 [0161.067] GetProcessHeap () returned 0x12c0000 [0161.067] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e78f8 | out: hHeap=0x12c0000) returned 1 [0161.067] GetProcessHeap () returned 0x12c0000 [0161.067] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12eba50 | out: hHeap=0x12c0000) returned 1 [0161.067] GetProcessHeap () returned 0x12c0000 [0161.067] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e7ad8 | out: hHeap=0x12c0000) returned 1 [0161.067] GetProcessHeap () returned 0x12c0000 [0161.067] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d13e8 | out: hHeap=0x12c0000) returned 1 [0161.067] GetProcessHeap () returned 0x12c0000 [0161.067] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e7820 | out: hHeap=0x12c0000) returned 1 [0161.067] GetProcessHeap () returned 0x12c0000 [0161.067] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d2df0 | out: hHeap=0x12c0000) returned 1 [0161.067] GetProcessHeap () returned 0x12c0000 [0161.067] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e7af0 | out: hHeap=0x12c0000) returned 1 [0161.067] GetProcessHeap () returned 0x12c0000 [0161.067] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12eb900 | out: hHeap=0x12c0000) returned 1 [0161.067] GetProcessHeap () returned 0x12c0000 [0161.067] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e7850 | out: hHeap=0x12c0000) returned 1 [0161.067] GetProcessHeap () returned 0x12c0000 [0161.067] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d6e60 | out: hHeap=0x12c0000) returned 1 [0161.067] GetProcessHeap () returned 0x12c0000 [0161.067] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d8870 | out: hHeap=0x12c0000) returned 1 [0161.067] GetProcessHeap () returned 0x12c0000 [0161.067] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0xa4) returned 0x12d1228 [0161.067] GetProcessHeap () returned 0x12c0000 [0161.067] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e7838 | out: hHeap=0x12c0000) returned 1 [0161.067] GetProcessHeap () returned 0x12c0000 [0161.067] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e7808 | out: hHeap=0x12c0000) returned 1 [0161.067] GetProcessHeap () returned 0x12c0000 [0161.067] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d1688 | out: hHeap=0x12c0000) returned 1 [0161.067] GetProcessHeap () returned 0x12c0000 [0161.068] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e7a18 | out: hHeap=0x12c0000) returned 1 [0161.068] GetProcessHeap () returned 0x12c0000 [0161.068] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e7ac0 | out: hHeap=0x12c0000) returned 1 [0161.068] GetProcessHeap () returned 0x12c0000 [0161.068] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x14) returned 0x12d8b30 [0161.068] GetProcessHeap () returned 0x12c0000 [0161.068] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0xe) returned 0x12e78b0 [0161.068] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x1024a4c, lpParameter=0x12d8b30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x274 [0161.068] CloseHandle (hObject=0x274) returned 1 [0161.069] WaitForSingleObject (hHandle=0x270, dwMilliseconds=0xffffffff) Thread: id = 104 os_tid = 0x494 [0161.096] GetLogicalDrives () returned 0x4 [0161.096] GetProcessHeap () returned 0x12c0000 [0161.096] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x20) returned 0x12e8b30 [0161.096] GetProcessHeap () returned 0x12c0000 [0161.096] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x8, Size=0x1e) returned 0x12e8bf8 [0161.096] GetProcessHeap () returned 0x12c0000 [0161.096] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x1e) returned 0x12e8c20 [0161.097] GetProcessHeap () returned 0x12c0000 [0161.097] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x90) returned 0x12d1688 [0161.097] GetProcessHeap () returned 0x12c0000 [0161.097] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d1688 | out: hHeap=0x12c0000) returned 1 [0161.097] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x12e8bf8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0161.097] GetProcessHeap () returned 0x12c0000 [0161.097] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8c20 | out: hHeap=0x12c0000) returned 1 [0161.097] GetProcessHeap () returned 0x12c0000 [0161.097] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8b30 | out: hHeap=0x12c0000) returned 1 [0161.097] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x32cfb8c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x32cfb8c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0161.097] GetProcessHeap () returned 0x12c0000 [0161.097] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e8bf8 | out: hHeap=0x12c0000) returned 1 [0161.097] GetProcessHeap () returned 0x12c0000 [0161.097] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x40) returned 0x12d2520 [0161.097] GetProcessHeap () returned 0x12c0000 [0161.097] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x28) returned 0x12d6e60 [0161.097] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x274 [0161.097] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x278 [0161.097] GetLogicalDrives () returned 0x4 [0161.097] Sleep (dwMilliseconds=0x3e8) [0162.289] GetLogicalDrives () returned 0x4 [0162.289] Sleep (dwMilliseconds=0x3e8) [0163.841] GetLogicalDrives () returned 0x4 [0163.841] Sleep (dwMilliseconds=0x3e8) [0165.018] GetLogicalDrives () returned 0x4 [0165.018] Sleep (dwMilliseconds=0x3e8) [0166.563] GetLogicalDrives () returned 0x4 [0166.563] Sleep (dwMilliseconds=0x3e8) [0167.668] GetLogicalDrives () returned 0x4 [0167.668] Sleep (dwMilliseconds=0x3e8) [0169.074] GetLogicalDrives () returned 0x4 [0169.074] Sleep (dwMilliseconds=0x3e8) [0170.130] GetLogicalDrives () returned 0x4 [0170.130] Sleep (dwMilliseconds=0x3e8) [0171.242] GetLogicalDrives () returned 0x4 [0171.242] Sleep (dwMilliseconds=0x3e8) [0172.452] GetLogicalDrives () returned 0x4 [0172.453] Sleep (dwMilliseconds=0x3e8) [0173.649] GetLogicalDrives () returned 0x4 [0173.649] Sleep (dwMilliseconds=0x3e8) [0174.827] GetLogicalDrives () returned 0x4 [0174.827] Sleep (dwMilliseconds=0x3e8) [0175.950] GetLogicalDrives () returned 0x4 [0175.950] Sleep (dwMilliseconds=0x3e8) [0177.010] GetLogicalDrives () returned 0x4 [0177.010] Sleep (dwMilliseconds=0x3e8) [0178.130] GetLogicalDrives () returned 0x4 [0178.139] Sleep (dwMilliseconds=0x3e8) [0179.237] GetLogicalDrives () returned 0x4 [0179.237] Sleep (dwMilliseconds=0x3e8) [0180.470] GetLogicalDrives () returned 0x4 [0180.471] Sleep (dwMilliseconds=0x3e8) [0181.611] GetLogicalDrives () returned 0x4 [0181.611] Sleep (dwMilliseconds=0x3e8) [0182.722] GetLogicalDrives () returned 0x4 [0182.768] Sleep (dwMilliseconds=0x3e8) [0183.897] GetLogicalDrives () returned 0x4 [0183.898] Sleep (dwMilliseconds=0x3e8) [0185.087] GetLogicalDrives () returned 0x4 [0185.087] Sleep (dwMilliseconds=0x3e8) [0186.202] GetLogicalDrives () returned 0x4 [0186.204] Sleep (dwMilliseconds=0x3e8) [0188.345] GetLogicalDrives () returned 0x4 [0188.345] Sleep (dwMilliseconds=0x3e8) [0189.479] GetLogicalDrives () returned 0x4 [0189.479] Sleep (dwMilliseconds=0x3e8) [0190.543] GetLogicalDrives () returned 0x4 [0190.544] Sleep (dwMilliseconds=0x3e8) [0191.907] GetLogicalDrives () returned 0x4 [0191.907] Sleep (dwMilliseconds=0x3e8) [0193.327] GetLogicalDrives () returned 0x4 [0193.327] Sleep (dwMilliseconds=0x3e8) [0194.667] GetLogicalDrives () returned 0x4 [0194.667] Sleep (dwMilliseconds=0x3e8) [0195.938] GetLogicalDrives () returned 0x4 [0195.938] Sleep (dwMilliseconds=0x3e8) [0197.060] GetLogicalDrives () returned 0x4 [0197.061] Sleep (dwMilliseconds=0x3e8) [0198.213] GetLogicalDrives () returned 0x4 [0198.213] Sleep (dwMilliseconds=0x3e8) [0199.347] GetLogicalDrives () returned 0x4 [0199.347] Sleep (dwMilliseconds=0x3e8) [0200.450] GetLogicalDrives () returned 0x4 [0200.450] Sleep (dwMilliseconds=0x3e8) [0203.373] GetLogicalDrives () returned 0x4 [0203.373] Sleep (dwMilliseconds=0x3e8) [0204.619] GetLogicalDrives () returned 0x4 [0204.619] Sleep (dwMilliseconds=0x3e8) [0205.880] GetLogicalDrives () returned 0x4 [0205.880] Sleep (dwMilliseconds=0x3e8) [0206.943] GetLogicalDrives () returned 0x4 [0206.944] Sleep (dwMilliseconds=0x3e8) [0208.407] GetLogicalDrives () returned 0x4 [0208.415] Sleep (dwMilliseconds=0x3e8) [0209.438] GetLogicalDrives () returned 0x4 [0209.438] Sleep (dwMilliseconds=0x3e8) [0210.502] GetLogicalDrives () returned 0x4 [0210.502] Sleep (dwMilliseconds=0x3e8) [0211.510] GetLogicalDrives () returned 0x4 [0211.510] Sleep (dwMilliseconds=0x3e8) [0212.879] GetLogicalDrives () returned 0x4 [0212.889] Sleep (dwMilliseconds=0x3e8) [0214.801] GetLogicalDrives () returned 0x4 [0214.801] Sleep (dwMilliseconds=0x3e8) [0216.478] GetLogicalDrives () returned 0x4 [0216.478] Sleep (dwMilliseconds=0x3e8) [0217.549] GetLogicalDrives () returned 0x4 [0217.549] Sleep (dwMilliseconds=0x3e8) [0218.868] GetLogicalDrives () returned 0x4 [0218.876] Sleep (dwMilliseconds=0x3e8) [0220.161] GetLogicalDrives () returned 0x4 [0220.161] Sleep (dwMilliseconds=0x3e8) [0221.444] GetLogicalDrives () returned 0x4 [0221.444] Sleep (dwMilliseconds=0x3e8) [0222.761] GetLogicalDrives () returned 0x4 [0222.764] Sleep (dwMilliseconds=0x3e8) [0224.103] GetLogicalDrives () returned 0x4 [0224.103] Sleep (dwMilliseconds=0x3e8) Thread: id = 106 os_tid = 0xcb8 [0161.202] GetProcessHeap () returned 0x12c0000 [0161.202] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x38) returned 0x12d94c8 [0161.202] GetProcessHeap () returned 0x12c0000 [0161.202] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x18) returned 0x12d8ab0 [0161.202] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x27c [0161.202] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x280 [0161.202] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x284 [0161.203] GetProcessHeap () returned 0x12c0000 [0161.203] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x12ed038 [0161.203] GetProcessHeap () returned 0x12c0000 [0161.203] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x50) returned 0x12d1a68 [0161.203] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x74c00000 [0161.203] GetProcAddress (hModule=0x74c00000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x74c16b30 [0161.203] Wow64DisableWow64FsRedirection (in: OldValue=0x30cfa2c | out: OldValue=0x30cfa2c*=0x0) returned 1 [0161.203] GetProcessHeap () returned 0x12c0000 [0161.203] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d1a68 | out: hHeap=0x12c0000) returned 1 [0161.203] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x1, lpStartAddress=0x10248ba, lpParameter=0x30cfa30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x288 [0161.204] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x1, lpStartAddress=0x10248ba, lpParameter=0x30cfa30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28c [0161.205] GetProcessHeap () returned 0x12c0000 [0161.205] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x12fd040 [0161.205] FindFirstFileW (in: lpFileName="\\\\?\\C:\\*", lpFindFileData=0x30cf7a0 | out: lpFindFileData=0x30cf7a0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x12d1a75, dwReserved1=0x74889fc4, cFileName="$GetCurrent", cAlternateFileName="$GETCU~1")) returned 0x12d91c8 [0161.205] GetProcessHeap () returned 0x12c0000 [0161.205] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130d048 [0161.206] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$GetCurrent\\*", lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0161.206] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0161.206] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Logs", cAlternateFileName="")) returned 1 [0161.206] GetProcessHeap () returned 0x12c0000 [0161.206] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131e058 [0161.207] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9608 [0161.207] FindNextFileW (in: hFindFile=0x12d9608, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.208] FindNextFileW (in: hFindFile=0x12d9608, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64f53c6d, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x64f53c6d, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x651b6235, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xa7e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="downlevel_2017_09_07_02_02_39_766.log.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="DOWNLE~1.PHO")) returned 1 [0161.208] FindNextFileW (in: hFindFile=0x12d9608, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64fa031d, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x64fa031d, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6548b0ec, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x18a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="oobe_2017_09_07_03_08_57_737.log.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="OOBE_2~1.PHO")) returned 1 [0161.208] FindNextFileW (in: hFindFile=0x12d9608, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x651dc470, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x651dc470, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x651dc470, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x142, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="PARTNE~1.PHO")) returned 1 [0161.208] FindNextFileW (in: hFindFile=0x12d9608, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x651dc470, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x651dc470, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x651dc470, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x142, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="PARTNE~1.PHO")) returned 0 [0161.208] FindClose (in: hFindFile=0x12d9608 | out: hFindFile=0x12d9608) returned 1 [0161.209] GetProcessHeap () returned 0x12c0000 [0161.209] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131e058 | out: hHeap=0x12c0000) returned 1 [0161.209] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SafeOS", cAlternateFileName="")) returned 1 [0161.209] GetProcessHeap () returned 0x12c0000 [0161.209] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131e058 [0161.210] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9788 [0161.211] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.211] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x652026d9, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x652026d9, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x656c71aa, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x233d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentOOBE.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="GETCUR~1.PHO")) returned 1 [0161.211] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x654b10d4, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x654b10d4, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x654b10d4, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x1a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentRollback.ini.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="GETCUR~2.PHO")) returned 1 [0161.211] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x654b10d4, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x654b10d4, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x654d7324, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x362, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupComplete.cmd.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="PARTNE~1.PHO")) returned 1 [0161.211] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x654fd650, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x654fd650, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x65523810, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x142, dwReserved0=0x0, dwReserved1=0x0, cFileName="preoobe.cmd.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="PREOOB~1.PHO")) returned 1 [0161.211] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65523810, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x65523810, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x65844994, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPC~1.PHO")) returned 1 [0161.211] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65523810, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x65523810, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x65844994, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPC~1.PHO")) returned 0 [0161.211] FindClose (in: hFindFile=0x12d9788 | out: hFindFile=0x12d9788) returned 1 [0161.212] GetProcessHeap () returned 0x12c0000 [0161.212] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131e058 | out: hHeap=0x12c0000) returned 1 [0161.213] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SafeOS", cAlternateFileName="")) returned 0 [0161.213] FindClose (in: hFindFile=0x12d9508 | out: hFindFile=0x12d9508) returned 1 [0161.213] GetProcessHeap () returned 0x12c0000 [0161.213] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130d048 | out: hHeap=0x12c0000) returned 1 [0161.214] FindNextFileW (in: hFindFile=0x12d91c8, lpFindFileData=0x30cf7a0 | out: lpFindFileData=0x30cf7a0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x12d1a75, dwReserved1=0x74889fc4, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 1 [0161.214] GetProcessHeap () returned 0x12c0000 [0161.214] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0161.214] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\*", lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x12d9608 [0161.215] FindNextFileW (in: hFindFile=0x12d9608, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0161.215] FindNextFileW (in: hFindFile=0x12d9608, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="S-1-5-18", cAlternateFileName="")) returned 1 [0161.215] GetProcessHeap () returned 0x12c0000 [0161.215] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131f060 [0161.215] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-18\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0161.215] FindNextFileW (in: hFindFile=0x12d97c8, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.215] FindNextFileW (in: hFindFile=0x12d97c8, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x656c71aa, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x656c71aa, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x656ed40c, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="DESKTO~1.PHO")) returned 1 [0161.215] FindNextFileW (in: hFindFile=0x12d97c8, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x656c71aa, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x656c71aa, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x656ed40c, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="DESKTO~1.PHO")) returned 0 [0161.215] FindClose (in: hFindFile=0x12d97c8 | out: hFindFile=0x12d97c8) returned 1 [0161.215] GetProcessHeap () returned 0x12c0000 [0161.215] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131f060 | out: hHeap=0x12c0000) returned 1 [0161.216] FindNextFileW (in: hFindFile=0x12d9608, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xedb73d12, ftLastAccessTime.dwHighDateTime=0x1d569cf, ftLastWriteTime.dwLowDateTime=0xedb73d12, ftLastWriteTime.dwHighDateTime=0x1d569cf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0161.216] GetProcessHeap () returned 0x12c0000 [0161.216] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131f060 [0161.216] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xedb73d12, ftLastAccessTime.dwHighDateTime=0x1d569cf, ftLastWriteTime.dwLowDateTime=0xedb73d12, ftLastWriteTime.dwHighDateTime=0x1d569cf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0161.216] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xedb73d12, ftLastAccessTime.dwHighDateTime=0x1d569cf, ftLastWriteTime.dwLowDateTime=0xedb73d12, ftLastWriteTime.dwHighDateTime=0x1d569cf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.217] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xedb73d12, ftCreationTime.dwHighDateTime=0x1d569cf, ftLastAccessTime.dwLowDateTime=0xedb73d12, ftLastAccessTime.dwHighDateTime=0x1d569cf, ftLastWriteTime.dwLowDateTime=0xedb99c50, ftLastWriteTime.dwHighDateTime=0x1d569cf, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0161.217] SetEvent (hEvent=0x280) returned 1 [0161.217] ResetEvent (hEvent=0x284) returned 1 [0161.217] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x656ed40c, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x656ed40c, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x656ed40c, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="DESKTO~1.PHO")) returned 1 [0161.217] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x656ed40c, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x656ed40c, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x656ed40c, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="DESKTO~1.PHO")) returned 0 [0161.217] FindClose (in: hFindFile=0x12d9808 | out: hFindFile=0x12d9808) returned 1 [0161.217] GetProcessHeap () returned 0x12c0000 [0161.217] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131f060 | out: hHeap=0x12c0000) returned 1 [0161.217] FindNextFileW (in: hFindFile=0x12d9608, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xedb73d12, ftLastAccessTime.dwHighDateTime=0x1d569cf, ftLastWriteTime.dwLowDateTime=0xedb73d12, ftLastWriteTime.dwHighDateTime=0x1d569cf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 0 [0161.217] FindClose (in: hFindFile=0x12d9608 | out: hFindFile=0x12d9608) returned 1 [0161.218] GetProcessHeap () returned 0x12c0000 [0161.218] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0161.218] FindNextFileW (in: hFindFile=0x12d91c8, lpFindFileData=0x30cf7a0 | out: lpFindFileData=0x30cf7a0*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x12d1a75, dwReserved1=0x74889fc4, cFileName="$WINRE_BACKUP_PARTITION.MARKER", cAlternateFileName="$WINRE~1.MAR")) returned 1 [0161.219] FindNextFileW (in: hFindFile=0x12d91c8, lpFindFileData=0x30cf7a0 | out: lpFindFileData=0x30cf7a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf94c7255, ftLastAccessTime.dwHighDateTime=0x1d569cf, ftLastWriteTime.dwLowDateTime=0xf94c7255, ftLastWriteTime.dwHighDateTime=0x1d569cf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x12d1a75, dwReserved1=0x74889fc4, cFileName="588bce7c90097ed212", cAlternateFileName="588BCE~1")) returned 1 [0161.219] GetProcessHeap () returned 0x12c0000 [0161.219] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0161.219] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\*", lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf94c7255, ftLastAccessTime.dwHighDateTime=0x1d569cf, ftLastWriteTime.dwLowDateTime=0xf94c7255, ftLastWriteTime.dwHighDateTime=0x1d569cf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0161.220] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf94c7255, ftLastAccessTime.dwHighDateTime=0x1d569cf, ftLastWriteTime.dwLowDateTime=0xf94c7255, ftLastWriteTime.dwHighDateTime=0x1d569cf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0161.220] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1025", cAlternateFileName="")) returned 1 [0161.220] GetProcessHeap () returned 0x12c0000 [0161.220] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131f060 [0161.220] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9608 [0161.221] FindNextFileW (in: hFindFile=0x12d9608, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.222] FindNextFileW (in: hFindFile=0x12d9608, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65713655, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x65713655, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x65713655, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x1e82, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0161.222] FindNextFileW (in: hFindFile=0x12d9608, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65713655, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x65713655, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x65a0e9c2, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x122f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0161.222] FindNextFileW (in: hFindFile=0x12d9608, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6586ab75, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6586ab75, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6586ab75, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4462, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0161.222] FindNextFileW (in: hFindFile=0x12d9608, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6586ab75, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6586ab75, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6586ab75, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4462, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0161.222] FindClose (in: hFindFile=0x12d9608 | out: hFindFile=0x12d9608) returned 1 [0161.222] GetProcessHeap () returned 0x12c0000 [0161.223] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131f060 | out: hHeap=0x12c0000) returned 1 [0161.223] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1028", cAlternateFileName="")) returned 1 [0161.223] GetProcessHeap () returned 0x12c0000 [0161.223] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131f060 [0161.223] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9208 [0161.224] FindNextFileW (in: hFindFile=0x12d9208, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.225] FindNextFileW (in: hFindFile=0x12d9208, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6586ab75, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6586ab75, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x65890deb, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x19a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0161.225] FindNextFileW (in: hFindFile=0x12d9208, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65890deb, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x65890deb, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x65b65ec3, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xeea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0161.225] FindNextFileW (in: hFindFile=0x12d9208, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65a34a3e, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x65a34a3e, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6602a9ec, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x3862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0161.225] FindNextFileW (in: hFindFile=0x12d9208, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65a34a3e, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x65a34a3e, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6602a9ec, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x3862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0161.225] FindClose (in: hFindFile=0x12d9208 | out: hFindFile=0x12d9208) returned 1 [0161.225] GetProcessHeap () returned 0x12c0000 [0161.226] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131f060 | out: hHeap=0x12c0000) returned 1 [0161.226] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1029", cAlternateFileName="")) returned 1 [0161.226] GetProcessHeap () returned 0x12c0000 [0161.226] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131f060 [0161.227] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0161.227] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.228] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65b8bc9e, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x65b8bc9e, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x661a7e49, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xf82, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0161.228] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66052650, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x66052650, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x664c914e, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x13d52, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0161.228] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x661a7e49, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x661a7e49, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x667ea299, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0161.228] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x661a7e49, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x661a7e49, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x667ea299, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0161.228] FindClose (in: hFindFile=0x12d9388 | out: hFindFile=0x12d9388) returned 1 [0161.228] GetProcessHeap () returned 0x12c0000 [0161.229] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131f060 | out: hHeap=0x12c0000) returned 1 [0161.229] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1030", cAlternateFileName="")) returned 1 [0161.229] GetProcessHeap () returned 0x12c0000 [0161.229] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131f060 [0161.229] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0161.230] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.230] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x664c914e, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x664c914e, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x664ef16e, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xdf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0161.231] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x664ef16e, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x664ef16e, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x66e06329, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x130c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0161.231] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x667ea299, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x667ea299, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6731997a, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0161.231] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x667ea299, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x667ea299, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6731997a, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0161.231] FindClose (in: hFindFile=0x12d92c8 | out: hFindFile=0x12d92c8) returned 1 [0161.231] GetProcessHeap () returned 0x12c0000 [0161.231] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131f060 | out: hHeap=0x12c0000) returned 1 [0161.232] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1031", cAlternateFileName="")) returned 1 [0161.232] GetProcessHeap () returned 0x12c0000 [0161.232] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131f060 [0161.232] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9608 [0161.233] FindNextFileW (in: hFindFile=0x12d9608, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.233] FindNextFileW (in: hFindFile=0x12d9608, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66e06329, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x66e06329, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x66e2c2d1, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xe52, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0161.234] FindNextFileW (in: hFindFile=0x12d9608, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66e2c2d1, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x66e2c2d1, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x66e2c2d1, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x142b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0161.234] FindNextFileW (in: hFindFile=0x12d9608, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66e52a13, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x66e52a13, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x67b25a27, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0161.234] FindNextFileW (in: hFindFile=0x12d9608, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66e52a13, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x66e52a13, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x67b25a27, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0161.234] FindClose (in: hFindFile=0x12d9608 | out: hFindFile=0x12d9608) returned 1 [0161.234] GetProcessHeap () returned 0x12c0000 [0161.234] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131f060 | out: hHeap=0x12c0000) returned 1 [0161.235] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1032", cAlternateFileName="")) returned 1 [0161.235] GetProcessHeap () returned 0x12c0000 [0161.235] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131f060 [0161.235] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0161.365] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.365] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6731997a, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6731997a, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6731997a, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x23a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0161.365] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6734094a, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6734094a, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x67b4b99e, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x15212, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0161.365] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67b25a27, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x67b25a27, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6893af0f, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4c62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0161.366] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67b25a27, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x67b25a27, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6893af0f, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4c62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0161.366] FindClose (in: hFindFile=0x12d93c8 | out: hFindFile=0x12d93c8) returned 1 [0161.367] GetProcessHeap () returned 0x12c0000 [0161.367] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131f060 | out: hHeap=0x12c0000) returned 1 [0161.367] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1033", cAlternateFileName="")) returned 1 [0161.367] GetProcessHeap () returned 0x12c0000 [0161.367] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131f060 [0161.367] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9788 [0161.368] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.368] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67b4b99e, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x67b4b99e, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x67bbe180, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xd72, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0161.368] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67bbe180, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x67bbe180, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x68bd5f2d, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x12ec2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0161.368] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6894dcea, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6894dcea, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x68f1d55e, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4462, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0161.368] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6894dcea, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6894dcea, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x68f1d55e, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4462, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0161.368] FindClose (in: hFindFile=0x12d9788 | out: hFindFile=0x12d9788) returned 1 [0161.369] GetProcessHeap () returned 0x12c0000 [0161.369] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131f060 | out: hHeap=0x12c0000) returned 1 [0161.369] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1035", cAlternateFileName="")) returned 1 [0161.369] GetProcessHeap () returned 0x12c0000 [0161.370] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131f060 [0161.370] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0161.371] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.371] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68c2247d, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x68c2247d, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x68c2247d, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xf72, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0161.371] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68c48624, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x68c48624, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x692184ff, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x12de2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0161.371] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68f43578, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x68f43578, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6923e3c3, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0161.371] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68f43578, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x68f43578, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6923e3c3, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0161.371] FindClose (in: hFindFile=0x12d92c8 | out: hFindFile=0x12d92c8) returned 1 [0161.371] GetProcessHeap () returned 0x12c0000 [0161.372] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131f060 | out: hHeap=0x12c0000) returned 1 [0161.372] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1036", cAlternateFileName="")) returned 1 [0161.372] GetProcessHeap () returned 0x12c0000 [0161.372] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131f060 [0161.372] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9788 [0161.373] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.373] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6923e3c3, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6923e3c3, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6923e3c3, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xec2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0161.373] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69264d11, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x69264d11, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6980e033, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x14522, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0161.373] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6928ce56, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6928ce56, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x69a70811, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0161.373] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6928ce56, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6928ce56, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x69a70811, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0161.373] FindClose (in: hFindFile=0x12d9788 | out: hFindFile=0x12d9788) returned 1 [0161.374] GetProcessHeap () returned 0x12c0000 [0161.374] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131f060 | out: hHeap=0x12c0000) returned 1 [0161.374] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1037", cAlternateFileName="")) returned 1 [0161.374] GetProcessHeap () returned 0x12c0000 [0161.374] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131f060 [0161.375] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0161.375] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.375] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x698341bf, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x698341bf, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6985a454, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x1bc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0161.375] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6985a454, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6985a454, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x69f0ee23, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x11a92, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0161.375] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69a9672e, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x69a9672e, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6a233686, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4262, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0161.375] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69a9672e, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x69a9672e, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6a233686, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4262, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0161.376] FindClose (in: hFindFile=0x12d9848 | out: hFindFile=0x12d9848) returned 1 [0161.376] GetProcessHeap () returned 0x12c0000 [0161.376] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131f060 | out: hHeap=0x12c0000) returned 1 [0161.377] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1038", cAlternateFileName="")) returned 1 [0161.377] GetProcessHeap () returned 0x12c0000 [0161.377] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131f060 [0161.377] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9788 [0161.378] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.378] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69f0ee23, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x69f0ee23, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x69f5b2fb, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x1192, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0161.378] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69f81571, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x69f81571, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6a4bc0f1, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x152b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0161.378] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a25ab3d, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6a25ab3d, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6a6abfba, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0161.378] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a25ab3d, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6a25ab3d, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6a6abfba, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0161.378] FindClose (in: hFindFile=0x12d9788 | out: hFindFile=0x12d9788) returned 1 [0161.379] GetProcessHeap () returned 0x12c0000 [0161.379] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131f060 | out: hHeap=0x12c0000) returned 1 [0161.379] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1040", cAlternateFileName="")) returned 1 [0161.379] GetProcessHeap () returned 0x12c0000 [0161.379] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131f060 [0161.379] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0161.380] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.380] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a4bc0f1, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6a4bc0f1, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6a4e20bb, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xf32, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0161.380] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a50834a, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6a50834a, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6ab869ca, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x139c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0161.380] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a6abfba, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6a6abfba, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6abada33, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0161.380] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a6abfba, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6a6abfba, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6abada33, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0161.380] FindClose (in: hFindFile=0x12d9388 | out: hFindFile=0x12d9388) returned 1 [0161.381] GetProcessHeap () returned 0x12c0000 [0161.381] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131f060 | out: hHeap=0x12c0000) returned 1 [0161.381] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1041", cAlternateFileName="")) returned 1 [0161.381] GetProcessHeap () returned 0x12c0000 [0161.381] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131f060 [0161.382] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0161.383] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.383] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6abada33, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6abada33, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6ac46d44, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x2882, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0161.383] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6abada33, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6abada33, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6ac1f0ad, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x10b92, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0161.383] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac1f0ad, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6ac1f0ad, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6acc60dd, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x3e62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0161.383] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac1f0ad, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6ac1f0ad, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6acc60dd, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x3e62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0161.383] FindClose (in: hFindFile=0x12d9908 | out: hFindFile=0x12d9908) returned 1 [0161.384] GetProcessHeap () returned 0x12c0000 [0161.384] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131f060 | out: hHeap=0x12c0000) returned 1 [0161.384] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1042", cAlternateFileName="")) returned 1 [0161.384] GetProcessHeap () returned 0x12c0000 [0161.384] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131f060 [0161.385] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0161.385] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.386] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac53d86, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6ac53d86, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6ac79aab, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x3282, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0161.386] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac9ff3b, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6ac9ff3b, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6ad1261c, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xffe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0161.386] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6acc60dd, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6acc60dd, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6ad1261c, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x3c62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0161.386] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6acc60dd, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6acc60dd, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6ad1261c, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x3c62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0161.386] FindClose (in: hFindFile=0x12d93c8 | out: hFindFile=0x12d93c8) returned 1 [0161.386] GetProcessHeap () returned 0x12c0000 [0161.386] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131f060 | out: hHeap=0x12c0000) returned 1 [0161.387] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1043", cAlternateFileName="")) returned 1 [0161.387] GetProcessHeap () returned 0x12c0000 [0161.387] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131f060 [0161.387] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9788 [0161.388] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.388] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ad38946, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6ad38946, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6ad5ea6e, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xed2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0161.388] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ad38946, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6ad38946, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6b3daccd, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x13822, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0161.388] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ad5ea6e, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6ad5ea6e, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6b4271b7, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4c62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0161.388] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ad5ea6e, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6ad5ea6e, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6b4271b7, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4c62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0161.388] FindClose (in: hFindFile=0x12d9788 | out: hFindFile=0x12d9788) returned 1 [0161.389] GetProcessHeap () returned 0x12c0000 [0161.389] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131f060 | out: hHeap=0x12c0000) returned 1 [0161.389] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1044", cAlternateFileName="")) returned 1 [0161.389] GetProcessHeap () returned 0x12c0000 [0161.389] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131f060 [0161.390] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9788 [0161.391] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.391] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b3daccd, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6b3daccd, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6b4011cf, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xce2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0161.391] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4011cf, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6b4011cf, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6b499891, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x136d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0161.391] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4271b7, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6b4271b7, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6b57e6c1, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4662, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0161.391] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4271b7, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6b4271b7, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6b57e6c1, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4662, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0161.391] FindClose (in: hFindFile=0x12d9788 | out: hFindFile=0x12d9788) returned 1 [0161.392] GetProcessHeap () returned 0x12c0000 [0161.392] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131f060 | out: hHeap=0x12c0000) returned 1 [0161.392] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1045", cAlternateFileName="")) returned 1 [0161.392] GetProcessHeap () returned 0x12c0000 [0161.392] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131f060 [0161.392] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9788 [0161.393] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.393] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4bfbf2, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6b4bfbf2, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6b4e5dc5, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x10c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0161.393] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b558715, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6b558715, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6b8ebd28, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x142d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0161.393] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b57e6c1, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6b57e6c1, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6b911f34, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0161.393] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b57e6c1, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6b57e6c1, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6b911f34, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0161.394] FindClose (in: hFindFile=0x12d9788 | out: hFindFile=0x12d9788) returned 1 [0161.394] GetProcessHeap () returned 0x12c0000 [0161.394] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131f060 | out: hHeap=0x12c0000) returned 1 [0161.395] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1046", cAlternateFileName="")) returned 1 [0161.395] GetProcessHeap () returned 0x12c0000 [0161.395] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131f060 [0161.395] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9788 [0161.396] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.396] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b8ebd28, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6b8ebd28, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6b9381e1, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xf62, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0161.396] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b911f34, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6b911f34, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6c1b6ac5, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x13c72, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0161.396] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b9381e1, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6b9381e1, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6c62ee60, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0161.396] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b9381e1, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6b9381e1, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6c62ee60, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0161.396] FindClose (in: hFindFile=0x12d9788 | out: hFindFile=0x12d9788) returned 1 [0161.397] GetProcessHeap () returned 0x12c0000 [0161.397] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131f060 | out: hHeap=0x12c0000) returned 1 [0161.397] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1049", cAlternateFileName="")) returned 1 [0161.397] GetProcessHeap () returned 0x12c0000 [0161.397] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131f060 [0161.397] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9788 [0161.525] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.525] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c1dcb21, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6c1dcb21, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6c202cb7, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xd5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0161.526] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c202cb7, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6c202cb7, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6c99c5ff, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x13f52, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0161.526] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c62ee60, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6c62ee60, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6cdc88dc, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0161.526] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c62ee60, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6c62ee60, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6cdc88dc, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0161.526] FindClose (in: hFindFile=0x12d9788 | out: hFindFile=0x12d9788) returned 1 [0161.526] GetProcessHeap () returned 0x12c0000 [0161.526] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131f060 | out: hHeap=0x12c0000) returned 1 [0161.526] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1053", cAlternateFileName="")) returned 1 [0161.526] GetProcessHeap () returned 0x12c0000 [0161.526] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131f060 [0161.526] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9788 [0161.527] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.527] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c99c5ff, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6c99c5ff, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6c9c26e3, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x1012, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0161.527] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c9c26e3, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6c9c26e3, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6d135ca5, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x13082, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0161.527] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cdc88dc, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6cdc88dc, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6d15bf23, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4662, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0161.527] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cdc88dc, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6cdc88dc, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6d15bf23, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4662, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0161.527] FindClose (in: hFindFile=0x12d9788 | out: hFindFile=0x12d9788) returned 1 [0161.528] GetProcessHeap () returned 0x12c0000 [0161.528] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131f060 | out: hHeap=0x12c0000) returned 1 [0161.528] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1055", cAlternateFileName="")) returned 1 [0161.528] GetProcessHeap () returned 0x12c0000 [0161.528] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131f060 [0161.528] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0161.529] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.529] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d15bf23, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6d15bf23, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6d1820d9, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x1012, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0161.529] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d15bf23, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6d15bf23, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6d1f4777, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x12d22, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0161.529] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d1820d9, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6d1820d9, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6d21aaa7, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4662, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0161.529] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d1820d9, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6d1820d9, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6d21aaa7, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4662, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0161.530] FindClose (in: hFindFile=0x12d9848 | out: hFindFile=0x12d9848) returned 1 [0161.530] GetProcessHeap () returned 0x12c0000 [0161.530] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131f060 | out: hHeap=0x12c0000) returned 1 [0161.530] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="2052", cAlternateFileName="")) returned 1 [0161.530] GetProcessHeap () returned 0x12c0000 [0161.530] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131f060 [0161.530] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0161.532] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.532] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d1f4777, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6d1f4777, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6d266eef, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x17c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0161.532] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d21aaa7, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6d21aaa7, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6d4ef748, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xee12, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0161.532] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d266eef, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6d266eef, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6db57c2c, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x3862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0161.532] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d266eef, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6d266eef, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6db57c2c, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x3862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0161.532] FindClose (in: hFindFile=0x12d9808 | out: hFindFile=0x12d9808) returned 1 [0161.533] GetProcessHeap () returned 0x12c0000 [0161.533] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131f060 | out: hHeap=0x12c0000) returned 1 [0161.533] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="2070", cAlternateFileName="")) returned 1 [0161.533] GetProcessHeap () returned 0x12c0000 [0161.533] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131f060 [0161.533] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9788 [0161.534] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.534] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d4ef748, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6d4ef748, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6d515bb8, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x10a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0161.534] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d53bc2f, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6d53bc2f, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6dff653a, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x13a82, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0161.534] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dc16ae9, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6dc16ae9, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6e33d937, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0161.534] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dc16ae9, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6dc16ae9, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6e33d937, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0161.534] FindClose (in: hFindFile=0x12d9788 | out: hFindFile=0x12d9788) returned 1 [0161.535] GetProcessHeap () returned 0x12c0000 [0161.535] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131f060 | out: hHeap=0x12c0000) returned 1 [0161.535] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="3076", cAlternateFileName="")) returned 1 [0161.535] GetProcessHeap () returned 0x12c0000 [0161.535] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131f060 [0161.535] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9788 [0161.536] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.536] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e01c7b1, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6e01c7b1, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6e6387e7, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x19a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0161.536] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e33d937, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6e33d937, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6e9cc286, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xeea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0161.536] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e6387e7, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6e6387e7, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6e9f22a3, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x3862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0161.536] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e6387e7, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6e6387e7, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6e9f22a3, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x3862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0161.536] FindClose (in: hFindFile=0x12d9788 | out: hFindFile=0x12d9788) returned 1 [0161.537] GetProcessHeap () returned 0x12c0000 [0161.537] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131f060 | out: hHeap=0x12c0000) returned 1 [0161.537] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="3082", cAlternateFileName="")) returned 1 [0161.537] GetProcessHeap () returned 0x12c0000 [0161.537] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131f060 [0161.537] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9788 [0161.538] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.538] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e9cc286, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6e9cc286, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6ea18527, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xcf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0161.538] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e9f22a3, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6e9f22a3, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6f00e45f, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x13982, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0161.538] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea18527, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6ea18527, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6f3ee02a, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0161.538] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea18527, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6ea18527, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6f3ee02a, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0161.538] FindClose (in: hFindFile=0x12d9788 | out: hFindFile=0x12d9788) returned 1 [0161.539] GetProcessHeap () returned 0x12c0000 [0161.539] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131f060 | out: hHeap=0x12c0000) returned 1 [0161.539] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Client", cAlternateFileName="")) returned 1 [0161.539] GetProcessHeap () returned 0x12c0000 [0161.539] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131f060 [0161.539] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9788 [0161.540] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.540] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f0347d7, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6f0347d7, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6f0347d7, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x31552, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="PARAME~1.PHO")) returned 1 [0161.540] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f080d45, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6f080d45, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6f080d45, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x9982, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="UIINFO~1.PHO")) returned 1 [0161.540] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f080d45, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6f080d45, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6f080d45, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x9982, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="UIINFO~1.PHO")) returned 0 [0161.540] FindClose (in: hFindFile=0x12d9788 | out: hFindFile=0x12d9788) returned 1 [0161.541] GetProcessHeap () returned 0x12c0000 [0161.541] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131f060 | out: hHeap=0x12c0000) returned 1 [0161.541] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f0a6c01, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6f0a6c01, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6f62a403, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4002, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="DHtmlHeader.html.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="DHTMLH~1.PHO")) returned 1 [0161.541] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3ee02a, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6f3ee02a, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6f7a7db2, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x15ad2, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="DisplayIcon.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="DISPLA~1.PHO")) returned 1 [0161.541] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Extended", cAlternateFileName="")) returned 1 [0161.541] GetProcessHeap () returned 0x12c0000 [0161.541] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131f060 [0161.541] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9788 [0161.542] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.542] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f62a403, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6f62a403, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6f9e3e71, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x16d92, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="PARAME~1.PHO")) returned 1 [0161.542] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7cddf9, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6f7cddf9, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6fcdedf8, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x9982, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="UIINFO~1.PHO")) returned 1 [0161.542] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7cddf9, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6f7cddf9, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6fcdedf8, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x9982, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="UIINFO~1.PHO")) returned 0 [0161.542] FindClose (in: hFindFile=0x12d9788 | out: hFindFile=0x12d9788) returned 1 [0161.543] GetProcessHeap () returned 0x12c0000 [0161.543] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131f060 | out: hHeap=0x12c0000) returned 1 [0161.543] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Graphics", cAlternateFileName="")) returned 1 [0161.543] GetProcessHeap () returned 0x12c0000 [0161.543] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131f060 [0161.543] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0161.544] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.544] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9e3e71, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6f9e3e71, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x703727ac, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x572, dwReserved0=0x0, dwReserved1=0x0, cFileName="Print.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="PRINTI~1.PHO")) returned 1 [0161.544] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7034c570, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x7034c570, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x703727ac, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate1.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="ROTATE~1.PHO")) returned 1 [0161.544] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703727ac, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x703727ac, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x70759a15, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate2.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="ROTATE~2.PHO")) returned 1 [0161.544] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70621245, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x70621245, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x7083fba3, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate3.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="ROTATE~3.PHO")) returned 1 [0161.544] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70759a15, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x70759a15, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x709431f6, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate4.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="ROTATE~4.PHO")) returned 1 [0161.545] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7085d501, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x7085d501, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x7085d501, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate5.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="RO91DD~1.PHO")) returned 1 [0161.545] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7085d501, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x7085d501, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x7088374b, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate6.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="RO7940~1.PHO")) returned 1 [0161.545] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7088374b, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x7088374b, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x7088374b, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate7.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="RO2FD9~1.PHO")) returned 1 [0161.545] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x708a99ed, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x708a99ed, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x708a99ed, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate8.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="RO77B2~1.PHO")) returned 1 [0161.545] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x708a99ed, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x708a99ed, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x708cfc15, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x572, dwReserved0=0x0, dwReserved1=0x0, cFileName="Save.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SAVEIC~1.PHO")) returned 1 [0161.545] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x708cfc15, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x708cfc15, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x708cfc15, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x9062, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPI~1.PHO")) returned 1 [0161.545] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x708f5e15, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x708f5e15, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x70a9c5ea, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x2892, dwReserved0=0x0, dwReserved1=0x0, cFileName="stop.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="STOPIC~1.PHO")) returned 1 [0161.545] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x709431f6, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x709431f6, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x70a06ec4, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x572, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqMet.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SYSREQ~1.PHO")) returned 1 [0161.545] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a06ec4, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x70a06ec4, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x70a273ba, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x582, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqNotMet.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SYSREQ~2.PHO")) returned 1 [0161.545] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a273ba, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x70a273ba, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x70a4d56e, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x2892, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="WARNIC~1.PHO")) returned 1 [0161.545] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a273ba, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x70a273ba, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x70a4d56e, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x2892, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="WARNIC~1.PHO")) returned 0 [0161.545] FindClose (in: hFindFile=0x12d9908 | out: hFindFile=0x12d9908) returned 1 [0161.546] GetProcessHeap () returned 0x12c0000 [0161.546] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131f060 | out: hHeap=0x12c0000) returned 1 [0161.546] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a4d56e, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x70a4d56e, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x70c6a71a, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xf22, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="header.bmp.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="HEADER~1.PHO")) returned 1 [0161.546] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x70e53327, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xadd395d, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Core.mzz.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="NETFX_~1.PHO")) returned 1 [0161.546] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x71702dc2, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x290312, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Core_x64.msi.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="NETFX_~2.PHO")) returned 1 [0161.546] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x719d7a93, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x719d7a93, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x71ee87cd, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x11c112, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Core_x86.msi.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="NETFX_~3.PHO")) returned 1 [0161.546] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x7206612c, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x29e23d9, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Extended.mzz.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="NETFX_~4.PHO")) returned 1 [0161.546] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72124acc, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x72124acc, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x7259d21f, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xd5112, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Extended_x64.msi.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="NE086F~1.PHO")) returned 1 [0161.546] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725e96e9, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x725e96e9, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x728720c1, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x79112, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Extended_x86.msi.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="NE52D6~1.PHO")) returned 1 [0161.547] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x727ff9dc, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x727ff9dc, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x72825c32, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x427b2, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="ParameterInfo.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="PARAME~1.PHO")) returned 1 [0161.547] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7284becc, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x7284becc, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x7297d20d, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x2d312, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="RGB9RAST_x64.msi.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="RGB9RA~1.PHO")) returned 1 [0161.547] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728be6ca, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x728be6ca, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x72a87f11, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x17312, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="RGB9Rast_x86.msi.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="RGB9RA~2.PHO")) returned 1 [0161.547] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729a33b3, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x729a33b3, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x72afb0dd, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x13242, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Setup.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPE~1.PHO")) returned 1 [0161.547] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72aae3e5, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x72aae3e5, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x72c51b56, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xc5252, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SetupEngine.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPE~2.PHO")) returned 1 [0161.547] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b46dd2, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x72b46dd2, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x72cea48c, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x48252, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SetupUi.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPU~1.PHO")) returned 1 [0161.547] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72c9e2f6, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x72c9e2f6, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x731af060, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x76a2, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SetupUi.xsd.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPU~2.PHO")) returned 1 [0161.547] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72d109f5, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x72d109f5, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x72d5cc01, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x17862, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SetupUtility.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPU~3.PHO")) returned 1 [0161.547] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72d5cc01, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x72d5cc01, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x73162add, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xa182, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SplashScreen.bmp.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SPLASH~1.PHO")) returned 1 [0161.547] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73189035, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x73189035, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x732e02a2, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x23522, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="sqmapi.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SQMAPI~1.PHO")) returned 1 [0161.547] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x731d5506, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x731d5506, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x7339eecc, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x3802, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Strings.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="STRING~1.PHO")) returned 1 [0161.547] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x732e02a2, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x732e02a2, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x7341164b, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x98f2, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="UiInfo.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="UIINFO~1.PHO")) returned 1 [0161.547] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x733c5bea, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x733c5bea, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x7358ed35, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x19782, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="watermark.bmp.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="WATERM~1.PHO")) returned 1 [0161.547] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0x739487cc, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x5b5245, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows6.0-KB956250-v6001-x64.msu.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="WINDOW~1.PHO")) returned 1 [0161.548] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0x737cb317, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x2d7652, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows6.0-KB956250-v6001-x86.msu.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="WINDOW~2.PHO")) returned 1 [0161.548] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0xf9a33116, ftLastWriteTime.dwHighDateTime=0x1d569cf, nFileSizeHigh=0x0, nFileSizeLow=0x59b300, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows6.1-KB958488-v6001-x64.msu.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="WINDOW~3.PHO")) returned 1 [0161.548] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xf9a2cfaa, ftLastWriteTime.dwHighDateTime=0x1d569cf, nFileSizeHigh=0x0, nFileSizeLow=0x2cae2b, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows6.1-KB958488-v6001-x86.msu.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="WINDOW~4.PHO")) returned 1 [0161.548] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xf9a2cfaa, ftLastWriteTime.dwHighDateTime=0x1d569cf, nFileSizeHigh=0x0, nFileSizeLow=0x2cae2b, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows6.1-KB958488-v6001-x86.msu.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="WINDOW~4.PHO")) returned 0 [0161.548] FindClose (in: hFindFile=0x12d9508 | out: hFindFile=0x12d9508) returned 1 [0161.548] GetProcessHeap () returned 0x12c0000 [0161.548] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0161.549] FindNextFileW (in: hFindFile=0x12d91c8, lpFindFileData=0x30cf7a0 | out: lpFindFileData=0x30cf7a0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6fa258, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x12d1a75, dwReserved1=0x74889fc4, cFileName="Boot", cAlternateFileName="")) returned 1 [0161.549] GetProcessHeap () returned 0x12c0000 [0161.549] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0161.552] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\*", lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x12d9788 [0161.553] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0161.553] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xac3efa99, ftLastAccessTime.dwHighDateTime=0x1d4d5d3, ftLastWriteTime.dwLowDateTime=0xac3efa99, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="BCD", cAlternateFileName="")) returned 1 [0161.553] SetEvent (hEvent=0x280) returned 1 [0161.554] ResetEvent (hEvent=0x284) returned 1 [0161.554] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0161.554] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0161.554] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0161.554] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0161.554] GetProcessHeap () returned 0x12c0000 [0161.554] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131e058 [0161.554] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\bg-BG\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0161.554] FindNextFileW (in: hFindFile=0x12d97c8, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.554] FindNextFileW (in: hFindFile=0x12d97c8, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0161.555] FindNextFileW (in: hFindFile=0x12d97c8, lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0161.555] FindClose (in: hFindFile=0x12d97c8 | out: hFindFile=0x12d97c8) returned 1 [0161.555] GetProcessHeap () returned 0x12c0000 [0161.555] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131e058 | out: hHeap=0x12c0000) returned 1 [0161.555] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4e6d79, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef4e6d79, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x175a0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="bootspaces.dll", cAlternateFileName="BOOTSP~1.DLL")) returned 1 [0161.555] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xef703e94, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0161.555] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef4fcd12, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x185a0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="bootvhd.dll", cAlternateFileName="")) returned 1 [0161.555] GetProcessHeap () returned 0x12c0000 [0161.555] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131e058 [0161.555] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0161.556] GetProcessHeap () returned 0x12c0000 [0161.556] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131e058 | out: hHeap=0x12c0000) returned 1 [0161.556] GetProcessHeap () returned 0x12c0000 [0161.557] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131e058 [0161.557] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\da-DK\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0161.557] GetProcessHeap () returned 0x12c0000 [0161.557] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131e058 | out: hHeap=0x12c0000) returned 1 [0161.557] GetProcessHeap () returned 0x12c0000 [0161.557] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131e058 [0161.557] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\de-DE\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0161.557] GetProcessHeap () returned 0x12c0000 [0161.557] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131e058 | out: hHeap=0x12c0000) returned 1 [0161.557] GetProcessHeap () returned 0x12c0000 [0161.557] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131e058 [0161.557] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\el-GR\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0161.557] GetProcessHeap () returned 0x12c0000 [0161.557] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131e058 | out: hHeap=0x12c0000) returned 1 [0161.557] GetProcessHeap () returned 0x12c0000 [0161.557] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131e058 [0161.558] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\en-GB\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0161.558] GetProcessHeap () returned 0x12c0000 [0161.558] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131e058 | out: hHeap=0x12c0000) returned 1 [0161.558] GetProcessHeap () returned 0x12c0000 [0161.558] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131e058 [0161.558] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\en-US\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0161.558] GetProcessHeap () returned 0x12c0000 [0161.558] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131e058 | out: hHeap=0x12c0000) returned 1 [0161.558] GetProcessHeap () returned 0x12c0000 [0161.558] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131e058 [0161.558] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\es-ES\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0161.558] GetProcessHeap () returned 0x12c0000 [0161.558] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131e058 | out: hHeap=0x12c0000) returned 1 [0161.558] GetProcessHeap () returned 0x12c0000 [0161.558] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131e058 [0161.558] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\es-MX\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0161.559] GetProcessHeap () returned 0x12c0000 [0161.559] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131e058 | out: hHeap=0x12c0000) returned 1 [0161.559] GetProcessHeap () returned 0x12c0000 [0161.559] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131e058 [0161.559] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\et-EE\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0161.559] GetProcessHeap () returned 0x12c0000 [0161.559] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131e058 | out: hHeap=0x12c0000) returned 1 [0161.559] GetProcessHeap () returned 0x12c0000 [0161.559] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131e058 [0161.559] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fi-FI\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0161.559] GetProcessHeap () returned 0x12c0000 [0161.559] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131e058 | out: hHeap=0x12c0000) returned 1 [0161.559] GetProcessHeap () returned 0x12c0000 [0161.559] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131e058 [0161.559] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Fonts\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0161.877] GetProcessHeap () returned 0x12c0000 [0161.877] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131e058 | out: hHeap=0x12c0000) returned 1 [0161.877] GetProcessHeap () returned 0x12c0000 [0161.877] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131e058 [0161.877] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fr-CA\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0161.879] GetProcessHeap () returned 0x12c0000 [0161.879] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131e058 | out: hHeap=0x12c0000) returned 1 [0161.879] GetProcessHeap () returned 0x12c0000 [0161.879] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131e058 [0161.879] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fr-FR\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0161.882] GetProcessHeap () returned 0x12c0000 [0161.882] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131e058 | out: hHeap=0x12c0000) returned 1 [0161.882] GetProcessHeap () returned 0x12c0000 [0161.882] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131e058 [0161.882] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\hr-HR\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0161.883] GetProcessHeap () returned 0x12c0000 [0161.883] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131e058 | out: hHeap=0x12c0000) returned 1 [0161.883] GetProcessHeap () returned 0x12c0000 [0161.883] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131e058 [0161.883] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\hu-HU\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0161.886] GetProcessHeap () returned 0x12c0000 [0161.886] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131e058 | out: hHeap=0x12c0000) returned 1 [0161.886] GetProcessHeap () returned 0x12c0000 [0161.886] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131e058 [0161.886] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\it-IT\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0161.889] GetProcessHeap () returned 0x12c0000 [0161.889] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131e058 | out: hHeap=0x12c0000) returned 1 [0161.889] GetProcessHeap () returned 0x12c0000 [0161.889] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131e058 [0161.889] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ja-JP\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0161.891] GetProcessHeap () returned 0x12c0000 [0161.891] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131e058 | out: hHeap=0x12c0000) returned 1 [0161.892] GetProcessHeap () returned 0x12c0000 [0161.892] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131e058 [0161.892] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ko-KR\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0161.894] GetProcessHeap () returned 0x12c0000 [0161.894] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131e058 | out: hHeap=0x12c0000) returned 1 [0161.894] GetProcessHeap () returned 0x12c0000 [0161.894] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131e058 [0161.894] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\lt-LT\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0161.896] GetProcessHeap () returned 0x12c0000 [0161.896] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131e058 | out: hHeap=0x12c0000) returned 1 [0161.896] GetProcessHeap () returned 0x12c0000 [0161.896] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131e058 [0161.896] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\lv-LV\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0161.897] GetProcessHeap () returned 0x12c0000 [0161.897] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131e058 | out: hHeap=0x12c0000) returned 1 [0161.900] GetProcessHeap () returned 0x12c0000 [0161.900] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131e058 [0161.900] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\nb-NO\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0161.903] GetProcessHeap () returned 0x12c0000 [0161.903] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131e058 | out: hHeap=0x12c0000) returned 1 [0161.903] GetProcessHeap () returned 0x12c0000 [0161.903] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131e058 [0161.903] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\nl-NL\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0161.906] GetProcessHeap () returned 0x12c0000 [0161.906] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131e058 | out: hHeap=0x12c0000) returned 1 [0161.906] GetProcessHeap () returned 0x12c0000 [0161.906] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131e058 [0161.906] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pl-PL\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0161.908] GetProcessHeap () returned 0x12c0000 [0161.909] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131e058 | out: hHeap=0x12c0000) returned 1 [0161.909] GetProcessHeap () returned 0x12c0000 [0161.909] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131e058 [0161.909] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pt-BR\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0161.911] GetProcessHeap () returned 0x12c0000 [0161.911] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131e058 | out: hHeap=0x12c0000) returned 1 [0161.911] GetProcessHeap () returned 0x12c0000 [0161.911] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131e058 [0161.911] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pt-PT\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0161.917] GetProcessHeap () returned 0x12c0000 [0161.917] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131e058 | out: hHeap=0x12c0000) returned 1 [0161.917] GetProcessHeap () returned 0x12c0000 [0161.917] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131e058 [0161.917] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0161.919] GetProcessHeap () returned 0x12c0000 [0161.919] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131e058 | out: hHeap=0x12c0000) returned 1 [0161.919] GetProcessHeap () returned 0x12c0000 [0161.919] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131e058 [0161.920] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Resources\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0161.921] GetProcessHeap () returned 0x12c0000 [0161.921] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cd40a0 [0161.921] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Resources\\en-US\\*", lpFindFileData=0x30ceff0 | out: lpFindFileData=0x30ceff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0161.923] GetProcessHeap () returned 0x12c0000 [0161.923] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cd40a0 | out: hHeap=0x12c0000) returned 1 [0161.923] GetProcessHeap () returned 0x12c0000 [0161.923] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131e058 | out: hHeap=0x12c0000) returned 1 [0161.923] GetProcessHeap () returned 0x12c0000 [0161.923] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131e058 [0161.924] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ro-RO\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0161.925] GetProcessHeap () returned 0x12c0000 [0161.925] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131e058 | out: hHeap=0x12c0000) returned 1 [0161.926] GetProcessHeap () returned 0x12c0000 [0161.926] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131e058 [0161.926] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ru-RU\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0161.928] GetProcessHeap () returned 0x12c0000 [0161.928] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131e058 | out: hHeap=0x12c0000) returned 1 [0161.928] GetProcessHeap () returned 0x12c0000 [0161.928] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131e058 [0161.928] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sk-SK\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0161.930] GetProcessHeap () returned 0x12c0000 [0161.930] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131e058 | out: hHeap=0x12c0000) returned 1 [0161.930] GetProcessHeap () returned 0x12c0000 [0161.930] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131e058 [0161.930] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sl-SI\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0161.931] GetProcessHeap () returned 0x12c0000 [0161.931] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131e058 | out: hHeap=0x12c0000) returned 1 [0161.931] GetProcessHeap () returned 0x12c0000 [0161.931] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131e058 [0161.931] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0161.932] GetProcessHeap () returned 0x12c0000 [0161.932] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131e058 | out: hHeap=0x12c0000) returned 1 [0161.932] GetProcessHeap () returned 0x12c0000 [0161.932] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131e058 [0161.932] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sr-Latn-RS\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0161.933] GetProcessHeap () returned 0x12c0000 [0161.933] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131e058 | out: hHeap=0x12c0000) returned 1 [0161.933] GetProcessHeap () returned 0x12c0000 [0161.933] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131e058 [0161.933] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sv-SE\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0161.933] GetProcessHeap () returned 0x12c0000 [0161.933] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131e058 | out: hHeap=0x12c0000) returned 1 [0161.933] GetProcessHeap () returned 0x12c0000 [0161.933] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131e058 [0161.933] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\tr-TR\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0161.933] GetProcessHeap () returned 0x12c0000 [0161.933] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131e058 | out: hHeap=0x12c0000) returned 1 [0161.933] GetProcessHeap () returned 0x12c0000 [0161.933] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131e058 [0161.933] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\uk-UA\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0161.933] GetProcessHeap () returned 0x12c0000 [0161.933] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131e058 | out: hHeap=0x12c0000) returned 1 [0161.933] GetProcessHeap () returned 0x12c0000 [0161.933] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131e058 [0161.933] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-CN\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0161.934] GetProcessHeap () returned 0x12c0000 [0161.934] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131e058 | out: hHeap=0x12c0000) returned 1 [0161.934] GetProcessHeap () returned 0x12c0000 [0161.934] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131e058 [0161.934] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-HK\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0161.934] GetProcessHeap () returned 0x12c0000 [0161.934] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131e058 | out: hHeap=0x12c0000) returned 1 [0161.934] GetProcessHeap () returned 0x12c0000 [0161.934] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131e058 [0161.934] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-TW\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0161.934] GetProcessHeap () returned 0x12c0000 [0161.934] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131e058 | out: hHeap=0x12c0000) returned 1 [0161.934] GetProcessHeap () returned 0x12c0000 [0161.934] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0161.935] GetProcessHeap () returned 0x12c0000 [0161.935] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cd3098 [0161.935] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ESD\\*", lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0161.936] GetProcessHeap () returned 0x12c0000 [0161.936] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cd3098 | out: hHeap=0x12c0000) returned 1 [0161.936] GetProcessHeap () returned 0x12c0000 [0161.936] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cd3098 [0161.936] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Logs\\*", lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xfe4d1c12, ftLastAccessTime.dwHighDateTime=0x1d569cf, ftLastWriteTime.dwLowDateTime=0xfe4d1c12, ftLastWriteTime.dwHighDateTime=0x1d569cf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0161.938] GetProcessHeap () returned 0x12c0000 [0161.938] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cd3098 | out: hHeap=0x12c0000) returned 1 [0161.938] GetProcessHeap () returned 0x12c0000 [0161.938] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cd3098 [0161.938] FindFirstFileW (in: lpFileName="\\\\?\\C:\\PerfLogs\\*", lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x12d9788 [0161.939] GetProcessHeap () returned 0x12c0000 [0161.939] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cd3098 | out: hHeap=0x12c0000) returned 1 [0161.939] GetProcessHeap () returned 0x12c0000 [0161.939] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cd3098 [0161.939] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\*", lpFindFileData=0x30cf510 | out: lpFindFileData=0x30cf510*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x518874ca, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x518874ca, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x12d9788 [0161.939] GetProcessHeap () returned 0x12c0000 [0161.939] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0161.939] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0161.940] GetProcessHeap () returned 0x12c0000 [0161.940] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131e058 [0161.940] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\*", lpFindFileData=0x30ceff0 | out: lpFindFileData=0x30ceff0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffe9e7, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0161.940] GetProcessHeap () returned 0x12c0000 [0161.940] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131e058 | out: hHeap=0x12c0000) returned 1 [0161.940] GetProcessHeap () returned 0x12c0000 [0161.940] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131e058 [0161.940] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\*", lpFindFileData=0x30ceff0 | out: lpFindFileData=0x30ceff0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffe9e7, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0161.940] GetProcessHeap () returned 0x12c0000 [0161.940] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce50b0 [0161.940] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\*", lpFindFileData=0x30ced60 | out: lpFindFileData=0x30ced60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81028f76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x81028f76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0161.941] GetProcessHeap () returned 0x12c0000 [0161.941] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce50b0 | out: hHeap=0x12c0000) returned 1 [0161.941] GetProcessHeap () returned 0x12c0000 [0161.941] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce50b0 [0161.941] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\*", lpFindFileData=0x30ced60 | out: lpFindFileData=0x30ced60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0161.941] GetProcessHeap () returned 0x12c0000 [0161.941] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf60c0 [0161.942] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05532b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0161.942] GetProcessHeap () returned 0x12c0000 [0161.942] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf60c0 | out: hHeap=0x12c0000) returned 1 [0161.942] GetProcessHeap () returned 0x12c0000 [0161.942] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf60c0 [0161.942] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0553f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0161.942] GetProcessHeap () returned 0x12c0000 [0161.942] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf60c0 | out: hHeap=0x12c0000) returned 1 [0161.942] GetProcessHeap () returned 0x12c0000 [0161.942] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf60c0 [0161.942] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0554b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0161.943] GetProcessHeap () returned 0x12c0000 [0161.943] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf60c0 | out: hHeap=0x12c0000) returned 1 [0161.943] GetProcessHeap () returned 0x12c0000 [0161.943] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf60c0 [0161.943] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05550d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0161.943] GetProcessHeap () returned 0x12c0000 [0161.943] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf60c0 | out: hHeap=0x12c0000) returned 1 [0161.943] GetProcessHeap () returned 0x12c0000 [0161.943] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf60c0 [0161.943] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0555b2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0161.943] GetProcessHeap () returned 0x12c0000 [0161.943] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf60c0 | out: hHeap=0x12c0000) returned 1 [0161.943] GetProcessHeap () returned 0x12c0000 [0161.943] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf60c0 [0161.943] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa055662c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0161.943] GetProcessHeap () returned 0x12c0000 [0161.943] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf60c0 | out: hHeap=0x12c0000) returned 1 [0161.943] GetProcessHeap () returned 0x12c0000 [0161.943] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf60c0 [0161.943] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0557085, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0161.943] GetProcessHeap () returned 0x12c0000 [0161.944] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf60c0 | out: hHeap=0x12c0000) returned 1 [0161.944] GetProcessHeap () returned 0x12c0000 [0161.944] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf60c0 [0161.944] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dd09d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0161.944] GetProcessHeap () returned 0x12c0000 [0161.944] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf60c0 | out: hHeap=0x12c0000) returned 1 [0161.944] GetProcessHeap () returned 0x12c0000 [0161.944] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf60c0 [0161.944] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05ddf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0161.944] GetProcessHeap () returned 0x12c0000 [0161.944] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf60c0 | out: hHeap=0x12c0000) returned 1 [0161.944] GetProcessHeap () returned 0x12c0000 [0161.944] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf60c0 [0161.944] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dea14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0161.945] GetProcessHeap () returned 0x12c0000 [0161.945] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf60c0 | out: hHeap=0x12c0000) returned 1 [0161.945] GetProcessHeap () returned 0x12c0000 [0161.945] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf60c0 [0161.945] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df011, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0161.945] GetProcessHeap () returned 0x12c0000 [0161.945] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf60c0 | out: hHeap=0x12c0000) returned 1 [0161.945] GetProcessHeap () returned 0x12c0000 [0161.945] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf60c0 [0161.945] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df7b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0161.945] GetProcessHeap () returned 0x12c0000 [0161.945] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf60c0 | out: hHeap=0x12c0000) returned 1 [0161.945] GetProcessHeap () returned 0x12c0000 [0161.945] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf60c0 [0161.945] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0635c03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0161.945] GetProcessHeap () returned 0x12c0000 [0161.945] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf60c0 | out: hHeap=0x12c0000) returned 1 [0161.945] GetProcessHeap () returned 0x12c0000 [0161.945] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf60c0 [0161.945] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06369df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0161.946] GetProcessHeap () returned 0x12c0000 [0161.946] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf60c0 | out: hHeap=0x12c0000) returned 1 [0161.946] GetProcessHeap () returned 0x12c0000 [0161.946] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf60c0 [0161.946] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0637839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0161.946] GetProcessHeap () returned 0x12c0000 [0161.946] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d070d0 [0161.946] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\*", lpFindFileData=0x30ce840 | out: lpFindFileData=0x30ce840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638633, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0161.947] GetProcessHeap () returned 0x12c0000 [0161.947] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d070d0 | out: hHeap=0x12c0000) returned 1 [0161.947] GetProcessHeap () returned 0x12c0000 [0161.947] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d070d0 [0161.947] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\*", lpFindFileData=0x30ce840 | out: lpFindFileData=0x30ce840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638c00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0161.947] GetProcessHeap () returned 0x12c0000 [0161.947] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d070d0 | out: hHeap=0x12c0000) returned 1 [0161.947] GetProcessHeap () returned 0x12c0000 [0161.947] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d070d0 [0161.947] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\*", lpFindFileData=0x30ce840 | out: lpFindFileData=0x30ce840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa063932e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0161.947] GetProcessHeap () returned 0x12c0000 [0161.947] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d070d0 | out: hHeap=0x12c0000) returned 1 [0161.947] GetProcessHeap () returned 0x12c0000 [0161.947] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d070d0 [0161.947] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\*", lpFindFileData=0x30ce840 | out: lpFindFileData=0x30ce840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cd023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0161.947] GetProcessHeap () returned 0x12c0000 [0161.947] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d070d0 | out: hHeap=0x12c0000) returned 1 [0161.947] GetProcessHeap () returned 0x12c0000 [0161.947] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d070d0 [0161.947] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\*", lpFindFileData=0x30ce840 | out: lpFindFileData=0x30ce840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cdb88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0161.948] GetProcessHeap () returned 0x12c0000 [0161.948] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d070d0 | out: hHeap=0x12c0000) returned 1 [0161.948] GetProcessHeap () returned 0x12c0000 [0161.948] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d070d0 [0161.948] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\*", lpFindFileData=0x30ce840 | out: lpFindFileData=0x30ce840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0161.948] GetProcessHeap () returned 0x12c0000 [0161.948] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d070d0 | out: hHeap=0x12c0000) returned 1 [0161.948] GetProcessHeap () returned 0x12c0000 [0161.948] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d070d0 [0161.948] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\*", lpFindFileData=0x30ce840 | out: lpFindFileData=0x30ce840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce7a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0161.948] GetProcessHeap () returned 0x12c0000 [0161.948] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d070d0 | out: hHeap=0x12c0000) returned 1 [0161.948] GetProcessHeap () returned 0x12c0000 [0161.948] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d070d0 [0161.948] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\*", lpFindFileData=0x30ce840 | out: lpFindFileData=0x30ce840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ceb7f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0161.948] GetProcessHeap () returned 0x12c0000 [0161.948] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d070d0 | out: hHeap=0x12c0000) returned 1 [0161.948] GetProcessHeap () returned 0x12c0000 [0161.948] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d070d0 [0161.948] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\*", lpFindFileData=0x30ce840 | out: lpFindFileData=0x30ce840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cef41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0161.949] GetProcessHeap () returned 0x12c0000 [0161.949] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d070d0 | out: hHeap=0x12c0000) returned 1 [0161.949] GetProcessHeap () returned 0x12c0000 [0161.949] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d070d0 [0161.949] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\*", lpFindFileData=0x30ce840 | out: lpFindFileData=0x30ce840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf371, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0161.949] GetProcessHeap () returned 0x12c0000 [0161.949] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d070d0 | out: hHeap=0x12c0000) returned 1 [0161.949] GetProcessHeap () returned 0x12c0000 [0161.949] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf60c0 | out: hHeap=0x12c0000) returned 1 [0161.949] GetProcessHeap () returned 0x12c0000 [0161.949] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf60c0 [0161.950] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0161.950] GetProcessHeap () returned 0x12c0000 [0161.950] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf60c0 | out: hHeap=0x12c0000) returned 1 [0161.950] GetProcessHeap () returned 0x12c0000 [0161.950] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf60c0 [0161.950] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0161.950] GetProcessHeap () returned 0x12c0000 [0161.950] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf60c0 | out: hHeap=0x12c0000) returned 1 [0161.950] GetProcessHeap () returned 0x12c0000 [0161.951] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf60c0 [0161.951] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0161.951] GetProcessHeap () returned 0x12c0000 [0161.951] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf60c0 | out: hHeap=0x12c0000) returned 1 [0161.951] GetProcessHeap () returned 0x12c0000 [0161.951] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf60c0 [0161.951] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\HWRCustomization\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0161.951] GetProcessHeap () returned 0x12c0000 [0161.951] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf60c0 | out: hHeap=0x12c0000) returned 1 [0161.951] GetProcessHeap () returned 0x12c0000 [0161.951] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf60c0 [0161.951] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0769b1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0161.951] GetProcessHeap () returned 0x12c0000 [0161.951] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf60c0 | out: hHeap=0x12c0000) returned 1 [0161.951] GetProcessHeap () returned 0x12c0000 [0161.951] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf60c0 [0161.951] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0161.951] GetProcessHeap () returned 0x12c0000 [0161.951] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf60c0 | out: hHeap=0x12c0000) returned 1 [0161.952] GetProcessHeap () returned 0x12c0000 [0161.952] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf60c0 [0161.952] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0161.952] GetProcessHeap () returned 0x12c0000 [0161.952] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf60c0 | out: hHeap=0x12c0000) returned 1 [0161.952] GetProcessHeap () returned 0x12c0000 [0161.952] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf60c0 [0161.952] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0161.952] GetProcessHeap () returned 0x12c0000 [0161.952] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf60c0 | out: hHeap=0x12c0000) returned 1 [0161.952] GetProcessHeap () returned 0x12c0000 [0161.952] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf60c0 [0161.952] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0161.952] GetProcessHeap () returned 0x12c0000 [0161.952] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf60c0 | out: hHeap=0x12c0000) returned 1 [0161.952] GetProcessHeap () returned 0x12c0000 [0161.952] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf60c0 [0161.952] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0161.952] GetProcessHeap () returned 0x12c0000 [0161.952] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf60c0 | out: hHeap=0x12c0000) returned 1 [0161.953] GetProcessHeap () returned 0x12c0000 [0161.953] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf60c0 [0161.953] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076bff5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0161.953] GetProcessHeap () returned 0x12c0000 [0161.953] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf60c0 | out: hHeap=0x12c0000) returned 1 [0161.953] GetProcessHeap () returned 0x12c0000 [0161.953] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf60c0 [0161.953] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0161.953] GetProcessHeap () returned 0x12c0000 [0161.953] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf60c0 | out: hHeap=0x12c0000) returned 1 [0161.953] GetProcessHeap () returned 0x12c0000 [0161.953] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf60c0 [0161.953] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0161.953] GetProcessHeap () returned 0x12c0000 [0161.953] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf60c0 | out: hHeap=0x12c0000) returned 1 [0161.953] GetProcessHeap () returned 0x12c0000 [0161.953] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf60c0 [0161.953] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0161.953] GetProcessHeap () returned 0x12c0000 [0161.953] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf60c0 | out: hHeap=0x12c0000) returned 1 [0161.953] GetProcessHeap () returned 0x12c0000 [0161.954] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf60c0 [0161.954] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0161.954] GetProcessHeap () returned 0x12c0000 [0161.954] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf60c0 | out: hHeap=0x12c0000) returned 1 [0161.954] GetProcessHeap () returned 0x12c0000 [0161.954] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf60c0 [0161.954] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0161.954] GetProcessHeap () returned 0x12c0000 [0161.954] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf60c0 | out: hHeap=0x12c0000) returned 1 [0161.954] GetProcessHeap () returned 0x12c0000 [0161.954] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf60c0 [0161.954] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0161.954] GetProcessHeap () returned 0x12c0000 [0161.954] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf60c0 | out: hHeap=0x12c0000) returned 1 [0161.954] GetProcessHeap () returned 0x12c0000 [0161.954] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf60c0 [0161.954] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0161.954] GetProcessHeap () returned 0x12c0000 [0161.954] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf60c0 | out: hHeap=0x12c0000) returned 1 [0161.954] GetProcessHeap () returned 0x12c0000 [0161.954] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf60c0 [0161.954] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0161.955] GetProcessHeap () returned 0x12c0000 [0161.955] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf60c0 | out: hHeap=0x12c0000) returned 1 [0161.955] GetProcessHeap () returned 0x12c0000 [0161.955] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf60c0 [0161.955] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0161.955] GetProcessHeap () returned 0x12c0000 [0161.955] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf60c0 | out: hHeap=0x12c0000) returned 1 [0161.955] GetProcessHeap () returned 0x12c0000 [0161.955] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf60c0 [0161.955] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0161.955] GetProcessHeap () returned 0x12c0000 [0161.955] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf60c0 | out: hHeap=0x12c0000) returned 1 [0161.955] GetProcessHeap () returned 0x12c0000 [0161.955] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf60c0 [0161.955] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0161.956] GetProcessHeap () returned 0x12c0000 [0161.956] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf60c0 | out: hHeap=0x12c0000) returned 1 [0161.956] GetProcessHeap () returned 0x12c0000 [0161.956] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf60c0 [0161.956] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0161.956] GetProcessHeap () returned 0x12c0000 [0161.956] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf60c0 | out: hHeap=0x12c0000) returned 1 [0161.956] GetProcessHeap () returned 0x12c0000 [0161.956] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf60c0 [0161.956] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0161.956] GetProcessHeap () returned 0x12c0000 [0161.956] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf60c0 | out: hHeap=0x12c0000) returned 1 [0161.956] GetProcessHeap () returned 0x12c0000 [0161.956] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf60c0 [0161.956] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0161.957] GetProcessHeap () returned 0x12c0000 [0161.957] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf60c0 | out: hHeap=0x12c0000) returned 1 [0161.957] GetProcessHeap () returned 0x12c0000 [0161.957] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf60c0 [0161.957] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0161.957] GetProcessHeap () returned 0x12c0000 [0161.957] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf60c0 | out: hHeap=0x12c0000) returned 1 [0161.957] GetProcessHeap () returned 0x12c0000 [0161.957] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce50b0 | out: hHeap=0x12c0000) returned 1 [0161.958] GetProcessHeap () returned 0x12c0000 [0161.958] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce50b0 [0161.958] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\*", lpFindFileData=0x30ced60 | out: lpFindFileData=0x30ced60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0161.959] GetProcessHeap () returned 0x12c0000 [0161.959] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf60c0 [0161.959] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa098aa4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0161.959] GetProcessHeap () returned 0x12c0000 [0161.959] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf60c0 | out: hHeap=0x12c0000) returned 1 [0161.959] GetProcessHeap () returned 0x12c0000 [0161.959] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce50b0 | out: hHeap=0x12c0000) returned 1 [0161.960] GetProcessHeap () returned 0x12c0000 [0161.960] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce50b0 [0162.228] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\*", lpFindFileData=0x30ced60 | out: lpFindFileData=0x30ced60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9f60362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0162.229] GetProcessHeap () returned 0x12c0000 [0162.229] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf50b8 [0162.229] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa0a26299, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda982389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffd11a, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0162.231] GetProcessHeap () returned 0x12c0000 [0162.231] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf50b8 | out: hHeap=0x12c0000) returned 1 [0162.231] GetProcessHeap () returned 0x12c0000 [0162.231] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce50b0 | out: hHeap=0x12c0000) returned 1 [0162.232] GetProcessHeap () returned 0x12c0000 [0162.232] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc2890 [0162.232] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x30ced60 | out: lpFindFileData=0x30ced60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0162.233] GetProcessHeap () returned 0x12c0000 [0162.233] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc2890 | out: hHeap=0x12c0000) returned 1 [0162.233] GetProcessHeap () returned 0x12c0000 [0162.233] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc2890 [0162.233] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\*", lpFindFileData=0x30ced60 | out: lpFindFileData=0x30ced60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0162.233] GetProcessHeap () returned 0x12c0000 [0162.233] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc2890 | out: hHeap=0x12c0000) returned 1 [0162.233] GetProcessHeap () returned 0x12c0000 [0162.233] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc2890 [0162.233] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\*", lpFindFileData=0x30ced60 | out: lpFindFileData=0x30ced60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0162.235] GetProcessHeap () returned 0x12c0000 [0162.235] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc2890 | out: hHeap=0x12c0000) returned 1 [0162.235] GetProcessHeap () returned 0x12c0000 [0162.235] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc2890 [0162.235] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\*", lpFindFileData=0x30ced60 | out: lpFindFileData=0x30ced60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0162.235] GetProcessHeap () returned 0x12c0000 [0162.235] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce60b8 [0162.235] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\en-US\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0162.235] GetProcessHeap () returned 0x12c0000 [0162.235] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce60b8 | out: hHeap=0x12c0000) returned 1 [0162.235] GetProcessHeap () returned 0x12c0000 [0162.235] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc2890 | out: hHeap=0x12c0000) returned 1 [0162.236] GetProcessHeap () returned 0x12c0000 [0162.236] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc2890 [0162.237] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\*", lpFindFileData=0x30ced60 | out: lpFindFileData=0x30ced60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0162.237] GetProcessHeap () returned 0x12c0000 [0162.237] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce60b8 [0162.237] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\en-US\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0162.238] GetProcessHeap () returned 0x12c0000 [0162.238] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce60b8 | out: hHeap=0x12c0000) returned 1 [0162.238] GetProcessHeap () returned 0x12c0000 [0162.238] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc2890 | out: hHeap=0x12c0000) returned 1 [0162.239] GetProcessHeap () returned 0x12c0000 [0162.239] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc2890 [0162.239] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\*", lpFindFileData=0x30ced60 | out: lpFindFileData=0x30ced60*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0162.240] GetProcessHeap () returned 0x12c0000 [0162.240] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc2890 | out: hHeap=0x12c0000) returned 1 [0162.240] GetProcessHeap () returned 0x12c0000 [0162.240] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc2890 [0162.240] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VGX\\*", lpFindFileData=0x30ced60 | out: lpFindFileData=0x30ced60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0162.240] GetProcessHeap () returned 0x12c0000 [0162.240] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc2890 | out: hHeap=0x12c0000) returned 1 [0162.240] GetProcessHeap () returned 0x12c0000 [0162.240] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc2890 [0162.240] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\*", lpFindFileData=0x30ced60 | out: lpFindFileData=0x30ced60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0162.240] GetProcessHeap () returned 0x12c0000 [0162.240] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce60b8 [0162.240] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aebd53e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0162.241] GetProcessHeap () returned 0x12c0000 [0162.241] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf70c8 [0162.241] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\*", lpFindFileData=0x30ce840 | out: lpFindFileData=0x30ce840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0162.241] GetProcessHeap () returned 0x12c0000 [0162.241] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf70c8 | out: hHeap=0x12c0000) returned 1 [0162.241] GetProcessHeap () returned 0x12c0000 [0162.241] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce60b8 | out: hHeap=0x12c0000) returned 1 [0162.242] GetProcessHeap () returned 0x12c0000 [0162.242] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc2890 | out: hHeap=0x12c0000) returned 1 [0162.243] GetProcessHeap () returned 0x12c0000 [0162.243] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131e058 | out: hHeap=0x12c0000) returned 1 [0162.244] GetProcessHeap () returned 0x12c0000 [0162.244] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131e058 [0162.244] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Services\\*", lpFindFileData=0x30ceff0 | out: lpFindFileData=0x30ceff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffe9e7, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0162.244] GetProcessHeap () returned 0x12c0000 [0162.244] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131e058 | out: hHeap=0x12c0000) returned 1 [0162.244] GetProcessHeap () returned 0x12c0000 [0162.244] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x131e058 [0162.244] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\*", lpFindFileData=0x30ceff0 | out: lpFindFileData=0x30ceff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffe9e7, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0162.245] GetProcessHeap () returned 0x12c0000 [0162.245] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce40a8 [0162.245] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\*", lpFindFileData=0x30ced60 | out: lpFindFileData=0x30ced60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffaf18, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0162.246] GetProcessHeap () returned 0x12c0000 [0162.246] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf40b0 [0162.246] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\en-US\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffcd18, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0162.246] GetProcessHeap () returned 0x12c0000 [0162.246] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf40b0 | out: hHeap=0x12c0000) returned 1 [0162.246] GetProcessHeap () returned 0x12c0000 [0162.246] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce40a8 | out: hHeap=0x12c0000) returned 1 [0162.247] GetProcessHeap () returned 0x12c0000 [0162.247] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce40a8 [0162.248] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\en-US\\*", lpFindFileData=0x30ced60 | out: lpFindFileData=0x30ced60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffaf18, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0162.248] GetProcessHeap () returned 0x12c0000 [0162.248] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce40a8 | out: hHeap=0x12c0000) returned 1 [0162.248] GetProcessHeap () returned 0x12c0000 [0162.248] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce40a8 [0162.248] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\*", lpFindFileData=0x30ced60 | out: lpFindFileData=0x30ced60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffaf18, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0162.344] GetProcessHeap () returned 0x12c0000 [0162.344] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf40b0 [0162.344] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffcd18, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0162.344] GetProcessHeap () returned 0x12c0000 [0162.344] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf40b0 | out: hHeap=0x12c0000) returned 1 [0162.344] GetProcessHeap () returned 0x12c0000 [0162.344] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce40a8 | out: hHeap=0x12c0000) returned 1 [0162.345] GetProcessHeap () returned 0x12c0000 [0162.345] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce40a8 [0162.346] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\*", lpFindFileData=0x30ced60 | out: lpFindFileData=0x30ced60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffaf18, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0162.346] GetProcessHeap () returned 0x12c0000 [0162.346] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf40b0 [0162.347] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffcd18, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0162.347] GetProcessHeap () returned 0x12c0000 [0162.347] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf40b0 | out: hHeap=0x12c0000) returned 1 [0162.347] GetProcessHeap () returned 0x12c0000 [0162.347] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce40a8 | out: hHeap=0x12c0000) returned 1 [0162.348] GetProcessHeap () returned 0x12c0000 [0162.348] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x131e058 | out: hHeap=0x12c0000) returned 1 [0162.349] GetProcessHeap () returned 0x12c0000 [0162.349] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0162.350] GetProcessHeap () returned 0x12c0000 [0162.350] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc2890 [0162.350] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4ea7bdb9, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x4ea7bdb9, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0162.352] GetProcessHeap () returned 0x12c0000 [0162.352] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130f058 [0162.352] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\*", lpFindFileData=0x30ceff0 | out: lpFindFileData=0x30ceff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffcc18, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0162.352] GetProcessHeap () returned 0x12c0000 [0162.352] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130f058 | out: hHeap=0x12c0000) returned 1 [0162.352] GetProcessHeap () returned 0x12c0000 [0162.352] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130f058 [0162.352] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\images\\*", lpFindFileData=0x30ceff0 | out: lpFindFileData=0x30ceff0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffcc18, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0162.353] GetProcessHeap () returned 0x12c0000 [0162.353] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130f058 | out: hHeap=0x12c0000) returned 1 [0162.353] GetProcessHeap () returned 0x12c0000 [0162.353] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130f058 [0162.353] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\SIGNUP\\*", lpFindFileData=0x30ceff0 | out: lpFindFileData=0x30ceff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffcc18, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0162.353] GetProcessHeap () returned 0x12c0000 [0162.353] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130f058 | out: hHeap=0x12c0000) returned 1 [0162.353] GetProcessHeap () returned 0x12c0000 [0162.353] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc2890 | out: hHeap=0x12c0000) returned 1 [0162.354] GetProcessHeap () returned 0x12c0000 [0162.354] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc2890 [0162.354] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa235ac5b, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa235ac5b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0162.355] GetProcessHeap () returned 0x12c0000 [0162.355] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130f058 [0162.355] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\*", lpFindFileData=0x30ceff0 | out: lpFindFileData=0x30ceff0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffcc18, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0162.355] GetProcessHeap () returned 0x12c0000 [0162.355] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0162.356] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\*", lpFindFileData=0x30ced60 | out: lpFindFileData=0x30ced60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffaa16, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0162.356] GetProcessHeap () returned 0x12c0000 [0162.356] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0162.356] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2891a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc816, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0162.356] GetProcessHeap () returned 0x12c0000 [0162.356] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0162.357] GetProcessHeap () returned 0x12c0000 [0162.357] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0162.357] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc816, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0162.357] GetProcessHeap () returned 0x12c0000 [0162.357] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0162.357] GetProcessHeap () returned 0x12c0000 [0162.357] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0162.357] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc816, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0162.357] GetProcessHeap () returned 0x12c0000 [0162.357] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0162.357] GetProcessHeap () returned 0x12c0000 [0162.357] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0162.358] GetProcessHeap () returned 0x12c0000 [0162.358] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0162.359] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\*", lpFindFileData=0x30ced60 | out: lpFindFileData=0x30ced60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffaa16, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0162.359] GetProcessHeap () returned 0x12c0000 [0162.359] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0162.360] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc816, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0162.360] GetProcessHeap () returned 0x12c0000 [0162.360] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0162.360] GetProcessHeap () returned 0x12c0000 [0162.360] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0162.360] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\applet\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc816, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0162.360] GetProcessHeap () returned 0x12c0000 [0162.360] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0162.360] GetProcessHeap () returned 0x12c0000 [0162.360] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0162.360] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105e2a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc816, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0162.360] GetProcessHeap () returned 0x12c0000 [0162.360] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0162.361] GetProcessHeap () returned 0x12c0000 [0162.361] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0162.361] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc816, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0162.699] GetProcessHeap () returned 0x12c0000 [0162.699] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0162.699] GetProcessHeap () returned 0x12c0000 [0162.699] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0162.699] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa11bdb26, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc816, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0163.382] GetProcessHeap () returned 0x12c0000 [0163.382] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0163.981] GetProcessHeap () returned 0x12c0000 [0163.981] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0163.981] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa122f229, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc816, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0165.163] GetProcessHeap () returned 0x12c0000 [0165.163] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0165.446] GetProcessHeap () returned 0x12c0000 [0165.446] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0165.446] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc816, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0165.446] GetProcessHeap () returned 0x12c0000 [0165.446] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0165.447] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\*", lpFindFileData=0x30ce840 | out: lpFindFileData=0x30ce840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12e7378 [0165.518] GetProcessHeap () returned 0x12c0000 [0165.518] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0165.518] GetProcessHeap () returned 0x12c0000 [0165.518] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0165.889] GetProcessHeap () returned 0x12c0000 [0165.889] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.889] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1295634, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc816, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0165.890] GetProcessHeap () returned 0x12c0000 [0165.890] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0166.701] GetProcessHeap () returned 0x12c0000 [0166.701] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0166.701] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc816, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0166.944] GetProcessHeap () returned 0x12c0000 [0166.944] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0168.920] GetProcessHeap () returned 0x12c0000 [0168.920] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0168.920] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc816, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0169.432] GetProcessHeap () returned 0x12c0000 [0169.444] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0169.510] GetProcessHeap () returned 0x12c0000 [0169.520] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0169.755] GetProcessHeap () returned 0x12c0000 [0169.755] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130f058 | out: hHeap=0x12c0000) returned 1 [0169.755] GetProcessHeap () returned 0x12c0000 [0169.755] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc2890 | out: hHeap=0x12c0000) returned 1 [0169.756] GetProcessHeap () returned 0x12c0000 [0169.756] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc2890 [0169.756] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\*", lpFindFileData=0x30cf280 | out: lpFindFileData=0x30cf280*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf9dfb986, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0169.764] GetProcessHeap () returned 0x12c0000 [0169.764] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0169.764] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\*", lpFindFileData=0x30ceff0 | out: lpFindFileData=0x30ceff0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0169.818] GetProcessHeap () returned 0x12c0000 [0169.818] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0169.819] GetProcessHeap () returned 0x12c0000 [0169.819] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0169.819] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\*", lpFindFileData=0x30ceff0 | out: lpFindFileData=0x30ceff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0170.214] GetProcessHeap () returned 0x12c0000 [0170.214] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0170.214] GetProcessHeap () returned 0x12c0000 [0170.215] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0170.215] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\*", lpFindFileData=0x30ceff0 | out: lpFindFileData=0x30ceff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0170.215] GetProcessHeap () returned 0x12c0000 [0170.215] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0170.216] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\*", lpFindFileData=0x30ced60 | out: lpFindFileData=0x30ced60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2ca2e08, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0170.472] GetProcessHeap () returned 0x12c0000 [0170.472] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0170.472] GetProcessHeap () returned 0x12c0000 [0170.472] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0170.472] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\*", lpFindFileData=0x30ced60 | out: lpFindFileData=0x30ced60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0170.472] GetProcessHeap () returned 0x12c0000 [0170.472] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0170.472] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0219.732] GetProcessHeap () returned 0x12c0000 [0219.732] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0219.733] GetProcessHeap () returned 0x12c0000 [0219.733] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fe2078 [0219.734] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0219.738] GetProcessHeap () returned 0x12c0000 [0219.738] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fc0058 [0219.738] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\*", lpFindFileData=0x30ce840 | out: lpFindFileData=0x30ce840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0220.281] GetProcessHeap () returned 0x12c0000 [0220.281] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fc0058 | out: hHeap=0x12c0000) returned 1 [0220.281] GetProcessHeap () returned 0x12c0000 [0220.282] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fe2078 | out: hHeap=0x12c0000) returned 1 [0220.285] GetProcessHeap () returned 0x12c0000 [0220.285] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0220.285] GetProcessHeap () returned 0x12c0000 [0220.286] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fe2078 [0220.286] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\*", lpFindFileData=0x30ced60 | out: lpFindFileData=0x30ced60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0220.526] GetProcessHeap () returned 0x12c0000 [0220.526] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fc0058 [0220.526] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0220.950] GetProcessHeap () returned 0x12c0000 [0220.950] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fc0058 | out: hHeap=0x12c0000) returned 1 [0220.951] GetProcessHeap () returned 0x12c0000 [0220.951] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fc0058 [0220.951] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9648 [0221.279] GetProcessHeap () returned 0x12c0000 [0221.279] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fc0058 | out: hHeap=0x12c0000) returned 1 [0221.280] GetProcessHeap () returned 0x12c0000 [0221.280] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fc0058 [0221.280] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\*", lpFindFileData=0x30cead0 | out: lpFindFileData=0x30cead0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0221.712] GetProcessHeap () returned 0x12c0000 [0221.712] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fc0058 | out: hHeap=0x12c0000) returned 1 [0221.732] GetProcessHeap () returned 0x12c0000 [0221.732] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fe2078 | out: hHeap=0x12c0000) returned 1 [0221.733] GetProcessHeap () returned 0x12c0000 [0221.733] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fe2078 [0221.734] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Flattener\\*", lpFindFileData=0x30ced60 | out: lpFindFileData=0x30ced60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114f5747, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114f5747, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0222.819] GetProcessHeap () returned 0x12c0000 [0222.819] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fe2078 | out: hHeap=0x12c0000) returned 1 [0222.819] GetProcessHeap () returned 0x12c0000 [0222.819] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fe2078 [0222.819] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\fre\\*", lpFindFileData=0x30ced60 | out: lpFindFileData=0x30ced60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0222.976] GetProcessHeap () returned 0x12c0000 [0222.976] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fe2078 | out: hHeap=0x12c0000) returned 1 [0222.976] GetProcessHeap () returned 0x12c0000 [0222.976] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fe2078 [0222.976] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Integration\\*", lpFindFileData=0x30ced60 | out: lpFindFileData=0x30ced60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b2abe77, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b2abe77, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0224.290] GetProcessHeap () returned 0x12c0000 [0224.290] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fe2078 | out: hHeap=0x12c0000) returned 1 [0224.290] GetProcessHeap () returned 0x12c0000 [0224.290] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fe2078 [0224.290] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Licenses16\\*", lpFindFileData=0x30ced60 | out: lpFindFileData=0x30ced60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2687c83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee308135, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9608 Thread: id = 107 os_tid = 0x4f0 [0161.237] GetProcessHeap () returned 0x12c0000 [0161.237] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x38) returned 0x12d9608 [0161.237] GetProcessHeap () returned 0x12c0000 [0161.237] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x18) returned 0x12d8af0 [0161.237] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x29c [0161.237] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2a0 [0161.237] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2a4 [0161.237] GetProcessHeap () returned 0x12c0000 [0161.237] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x132f948 [0161.238] GetProcessHeap () returned 0x12c0000 [0161.238] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x50) returned 0x12d1a68 [0161.238] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x74c00000 [0161.238] GetProcAddress (hModule=0x74c00000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x74c16b30 [0161.238] Wow64DisableWow64FsRedirection (in: OldValue=0x350fc2c | out: OldValue=0x350fc2c*=0x0) returned 1 [0161.238] GetProcessHeap () returned 0x12c0000 [0161.238] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d1a68 | out: hHeap=0x12c0000) returned 1 [0161.238] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x1, lpStartAddress=0x10248ba, lpParameter=0x350fc30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a8 [0161.239] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x1, lpStartAddress=0x10248ba, lpParameter=0x350fc30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ac [0161.239] GetProcessHeap () returned 0x12c0000 [0161.239] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x133f950 [0161.240] FindFirstFileW (in: lpFileName="\\\\?\\C:\\*", lpFindFileData=0x350f9a0 | out: lpFindFileData=0x350f9a0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x12d1a75, dwReserved1=0x74889fc4, cFileName="$GetCurrent", cAlternateFileName="$GETCU~1")) returned 0x12d9208 [0161.240] GetProcessHeap () returned 0x12c0000 [0161.240] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x134f958 [0161.240] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$GetCurrent\\*", lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x12d9648 [0161.240] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0161.241] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Logs", cAlternateFileName="")) returned 1 [0161.241] GetProcessHeap () returned 0x12c0000 [0161.241] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0161.241] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9788 [0161.242] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.242] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64f53c6d, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x64f53c6d, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x651b6235, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xa7e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="downlevel_2017_09_07_02_02_39_766.log.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="DOWNLE~1.PHO")) returned 1 [0161.242] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64fa031d, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x64fa031d, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6548b0ec, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x18a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="oobe_2017_09_07_03_08_57_737.log.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="OOBE_2~1.PHO")) returned 1 [0161.242] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x651dc470, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x651dc470, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x651dc470, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x142, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="PARTNE~1.PHO")) returned 1 [0161.242] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x651dc470, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x651dc470, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x651dc470, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x142, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="PARTNE~1.PHO")) returned 0 [0161.243] FindClose (in: hFindFile=0x12d9788 | out: hFindFile=0x12d9788) returned 1 [0161.243] GetProcessHeap () returned 0x12c0000 [0161.243] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0161.244] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SafeOS", cAlternateFileName="")) returned 1 [0161.244] GetProcessHeap () returned 0x12c0000 [0161.244] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0161.244] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0161.245] FindNextFileW (in: hFindFile=0x12d97c8, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.245] FindNextFileW (in: hFindFile=0x12d97c8, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x652026d9, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x652026d9, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x656c71aa, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x233d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentOOBE.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="GETCUR~1.PHO")) returned 1 [0161.245] FindNextFileW (in: hFindFile=0x12d97c8, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x654b10d4, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x654b10d4, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x654b10d4, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x1a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentRollback.ini.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="GETCUR~2.PHO")) returned 1 [0161.245] FindNextFileW (in: hFindFile=0x12d97c8, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x654b10d4, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x654b10d4, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x654d7324, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x362, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupComplete.cmd.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="PARTNE~1.PHO")) returned 1 [0161.245] FindNextFileW (in: hFindFile=0x12d97c8, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x654fd650, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x654fd650, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x65523810, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x142, dwReserved0=0x0, dwReserved1=0x0, cFileName="preoobe.cmd.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="PREOOB~1.PHO")) returned 1 [0161.245] FindNextFileW (in: hFindFile=0x12d97c8, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65523810, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x65523810, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x65844994, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPC~1.PHO")) returned 1 [0161.246] FindNextFileW (in: hFindFile=0x12d97c8, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65523810, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x65523810, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x65844994, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPC~1.PHO")) returned 0 [0161.246] FindClose (in: hFindFile=0x12d97c8 | out: hFindFile=0x12d97c8) returned 1 [0161.246] GetProcessHeap () returned 0x12c0000 [0161.246] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0161.247] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SafeOS", cAlternateFileName="")) returned 0 [0161.247] FindClose (in: hFindFile=0x12d9648 | out: hFindFile=0x12d9648) returned 1 [0161.247] GetProcessHeap () returned 0x12c0000 [0161.247] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x134f958 | out: hHeap=0x12c0000) returned 1 [0161.248] FindNextFileW (in: hFindFile=0x12d9208, lpFindFileData=0x350f9a0 | out: lpFindFileData=0x350f9a0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x12d1a75, dwReserved1=0x74889fc4, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 1 [0161.248] GetProcessHeap () returned 0x12c0000 [0161.248] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0161.249] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\*", lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x12d9648 [0161.249] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0161.249] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="S-1-5-18", cAlternateFileName="")) returned 1 [0161.249] GetProcessHeap () returned 0x12c0000 [0161.249] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1361970 [0161.249] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-18\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0161.249] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.249] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x656c71aa, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x656c71aa, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x656ed40c, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="DESKTO~1.PHO")) returned 1 [0161.249] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x656c71aa, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x656c71aa, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x656ed40c, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="DESKTO~1.PHO")) returned 0 [0161.249] FindClose (in: hFindFile=0x12d9808 | out: hFindFile=0x12d9808) returned 1 [0161.249] GetProcessHeap () returned 0x12c0000 [0161.249] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1361970 | out: hHeap=0x12c0000) returned 1 [0161.250] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xedb73d12, ftLastAccessTime.dwHighDateTime=0x1d569cf, ftLastWriteTime.dwLowDateTime=0xedb73d12, ftLastWriteTime.dwHighDateTime=0x1d569cf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0161.250] GetProcessHeap () returned 0x12c0000 [0161.250] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1361970 [0161.250] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xedb73d12, ftLastAccessTime.dwHighDateTime=0x1d569cf, ftLastWriteTime.dwLowDateTime=0xedb73d12, ftLastWriteTime.dwHighDateTime=0x1d569cf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0161.250] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xedb73d12, ftLastAccessTime.dwHighDateTime=0x1d569cf, ftLastWriteTime.dwLowDateTime=0xedb73d12, ftLastWriteTime.dwHighDateTime=0x1d569cf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.251] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xedb73d12, ftCreationTime.dwHighDateTime=0x1d569cf, ftLastAccessTime.dwLowDateTime=0xedb73d12, ftLastAccessTime.dwHighDateTime=0x1d569cf, ftLastWriteTime.dwLowDateTime=0xedb99c50, ftLastWriteTime.dwHighDateTime=0x1d569cf, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0161.251] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x656ed40c, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x656ed40c, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x656ed40c, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="DESKTO~1.PHO")) returned 1 [0161.251] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x656ed40c, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x656ed40c, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x656ed40c, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="DESKTO~1.PHO")) returned 0 [0161.251] FindClose (in: hFindFile=0x12d9848 | out: hFindFile=0x12d9848) returned 1 [0161.251] GetProcessHeap () returned 0x12c0000 [0161.251] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1361970 | out: hHeap=0x12c0000) returned 1 [0161.251] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xedb73d12, ftLastAccessTime.dwHighDateTime=0x1d569cf, ftLastWriteTime.dwLowDateTime=0xedb73d12, ftLastWriteTime.dwHighDateTime=0x1d569cf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 0 [0161.251] FindClose (in: hFindFile=0x12d9648 | out: hFindFile=0x12d9648) returned 1 [0161.252] GetProcessHeap () returned 0x12c0000 [0161.252] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0161.252] FindNextFileW (in: hFindFile=0x12d9208, lpFindFileData=0x350f9a0 | out: lpFindFileData=0x350f9a0*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x12d1a75, dwReserved1=0x74889fc4, cFileName="$WINRE_BACKUP_PARTITION.MARKER", cAlternateFileName="$WINRE~1.MAR")) returned 1 [0161.252] FindNextFileW (in: hFindFile=0x12d9208, lpFindFileData=0x350f9a0 | out: lpFindFileData=0x350f9a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf94c7255, ftLastAccessTime.dwHighDateTime=0x1d569cf, ftLastWriteTime.dwLowDateTime=0xf94c7255, ftLastWriteTime.dwHighDateTime=0x1d569cf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x12d1a75, dwReserved1=0x74889fc4, cFileName="588bce7c90097ed212", cAlternateFileName="588BCE~1")) returned 1 [0161.252] GetProcessHeap () returned 0x12c0000 [0161.253] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0161.253] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\*", lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf94c7255, ftLastAccessTime.dwHighDateTime=0x1d569cf, ftLastWriteTime.dwLowDateTime=0xf94c7255, ftLastWriteTime.dwHighDateTime=0x1d569cf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x12d9648 [0161.253] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf94c7255, ftLastAccessTime.dwHighDateTime=0x1d569cf, ftLastWriteTime.dwLowDateTime=0xf94c7255, ftLastWriteTime.dwHighDateTime=0x1d569cf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0161.253] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1025", cAlternateFileName="")) returned 1 [0161.253] GetProcessHeap () returned 0x12c0000 [0161.253] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1361970 [0161.254] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9788 [0161.254] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.254] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65713655, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x65713655, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x65713655, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x1e82, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0161.254] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65713655, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x65713655, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x65a0e9c2, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x122f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0161.255] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6586ab75, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6586ab75, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6586ab75, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4462, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0161.255] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6586ab75, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6586ab75, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6586ab75, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4462, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0161.255] FindClose (in: hFindFile=0x12d9788 | out: hFindFile=0x12d9788) returned 1 [0161.255] GetProcessHeap () returned 0x12c0000 [0161.255] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1361970 | out: hHeap=0x12c0000) returned 1 [0161.256] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1028", cAlternateFileName="")) returned 1 [0161.256] GetProcessHeap () returned 0x12c0000 [0161.256] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1361970 [0161.256] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0161.257] FindNextFileW (in: hFindFile=0x12d9248, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.257] FindNextFileW (in: hFindFile=0x12d9248, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6586ab75, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6586ab75, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x65890deb, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x19a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0161.257] FindNextFileW (in: hFindFile=0x12d9248, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65890deb, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x65890deb, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x65b65ec3, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xeea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0161.257] FindNextFileW (in: hFindFile=0x12d9248, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65a34a3e, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x65a34a3e, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6602a9ec, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x3862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0161.257] FindNextFileW (in: hFindFile=0x12d9248, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65a34a3e, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x65a34a3e, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6602a9ec, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x3862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0161.257] FindClose (in: hFindFile=0x12d9248 | out: hFindFile=0x12d9248) returned 1 [0161.258] GetProcessHeap () returned 0x12c0000 [0161.258] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1361970 | out: hHeap=0x12c0000) returned 1 [0161.259] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1029", cAlternateFileName="")) returned 1 [0161.259] GetProcessHeap () returned 0x12c0000 [0161.259] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1361970 [0161.259] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0161.260] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.260] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65b8bc9e, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x65b8bc9e, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x661a7e49, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xf82, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0161.260] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66052650, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x66052650, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x664c914e, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x13d52, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0161.260] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x661a7e49, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x661a7e49, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x667ea299, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0161.260] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x661a7e49, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x661a7e49, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x667ea299, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0161.260] FindClose (in: hFindFile=0x12d93c8 | out: hFindFile=0x12d93c8) returned 1 [0161.261] GetProcessHeap () returned 0x12c0000 [0161.261] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1361970 | out: hHeap=0x12c0000) returned 1 [0161.261] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1030", cAlternateFileName="")) returned 1 [0161.261] GetProcessHeap () returned 0x12c0000 [0161.261] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1361970 [0161.262] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0161.263] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.263] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x664c914e, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x664c914e, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x664ef16e, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xdf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0161.263] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x664ef16e, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x664ef16e, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x66e06329, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x130c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0161.263] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x667ea299, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x667ea299, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6731997a, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0161.263] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x667ea299, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x667ea299, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6731997a, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0161.263] FindClose (in: hFindFile=0x12d9308 | out: hFindFile=0x12d9308) returned 1 [0161.264] GetProcessHeap () returned 0x12c0000 [0161.264] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1361970 | out: hHeap=0x12c0000) returned 1 [0161.264] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1031", cAlternateFileName="")) returned 1 [0161.264] GetProcessHeap () returned 0x12c0000 [0161.264] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1361970 [0161.265] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9788 [0161.265] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.266] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66e06329, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x66e06329, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x66e2c2d1, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xe52, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0161.266] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66e2c2d1, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x66e2c2d1, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x66e2c2d1, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x142b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0161.266] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66e52a13, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x66e52a13, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x67b25a27, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0161.266] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66e52a13, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x66e52a13, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x67b25a27, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0161.266] FindClose (in: hFindFile=0x12d9788 | out: hFindFile=0x12d9788) returned 1 [0161.266] GetProcessHeap () returned 0x12c0000 [0161.267] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1361970 | out: hHeap=0x12c0000) returned 1 [0161.267] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1032", cAlternateFileName="")) returned 1 [0161.267] GetProcessHeap () returned 0x12c0000 [0161.267] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1361970 [0161.267] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0161.331] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.332] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6731997a, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6731997a, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6731997a, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x23a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0161.332] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6734094a, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6734094a, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x67b4b99e, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x15212, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0161.332] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67b25a27, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x67b25a27, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6893af0f, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4c62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0161.332] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67b25a27, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x67b25a27, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6893af0f, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4c62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0161.332] FindClose (in: hFindFile=0x12d93c8 | out: hFindFile=0x12d93c8) returned 1 [0161.332] GetProcessHeap () returned 0x12c0000 [0161.332] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1361970 | out: hHeap=0x12c0000) returned 1 [0161.332] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1033", cAlternateFileName="")) returned 1 [0161.332] GetProcessHeap () returned 0x12c0000 [0161.332] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1361970 [0161.333] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9788 [0161.334] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.334] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67b4b99e, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x67b4b99e, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x67bbe180, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xd72, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0161.335] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67bbe180, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x67bbe180, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x68bd5f2d, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x12ec2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0161.335] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6894dcea, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6894dcea, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x68f1d55e, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4462, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0161.335] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6894dcea, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6894dcea, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x68f1d55e, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4462, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0161.335] FindClose (in: hFindFile=0x12d9788 | out: hFindFile=0x12d9788) returned 1 [0161.336] GetProcessHeap () returned 0x12c0000 [0161.336] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1361970 | out: hHeap=0x12c0000) returned 1 [0161.336] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1035", cAlternateFileName="")) returned 1 [0161.336] GetProcessHeap () returned 0x12c0000 [0161.336] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1361970 [0161.336] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0161.337] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.337] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68c2247d, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x68c2247d, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x68c2247d, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xf72, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0161.337] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68c48624, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x68c48624, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x692184ff, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x12de2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0161.337] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68f43578, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x68f43578, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6923e3c3, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0161.338] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68f43578, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x68f43578, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6923e3c3, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0161.338] FindClose (in: hFindFile=0x12d92c8 | out: hFindFile=0x12d92c8) returned 1 [0161.338] GetProcessHeap () returned 0x12c0000 [0161.338] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1361970 | out: hHeap=0x12c0000) returned 1 [0161.339] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1036", cAlternateFileName="")) returned 1 [0161.339] GetProcessHeap () returned 0x12c0000 [0161.339] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1361970 [0161.339] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9788 [0161.340] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.340] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6923e3c3, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6923e3c3, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6923e3c3, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xec2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0161.340] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69264d11, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x69264d11, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6980e033, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x14522, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0161.340] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6928ce56, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6928ce56, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x69a70811, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0161.340] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6928ce56, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6928ce56, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x69a70811, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0161.340] FindClose (in: hFindFile=0x12d9788 | out: hFindFile=0x12d9788) returned 1 [0161.341] GetProcessHeap () returned 0x12c0000 [0161.341] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1361970 | out: hHeap=0x12c0000) returned 1 [0161.341] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1037", cAlternateFileName="")) returned 1 [0161.341] GetProcessHeap () returned 0x12c0000 [0161.341] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1361970 [0161.341] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0161.342] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.343] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x698341bf, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x698341bf, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6985a454, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x1bc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0161.343] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6985a454, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6985a454, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x69f0ee23, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x11a92, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0161.343] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69a9672e, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x69a9672e, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6a233686, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4262, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0161.343] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69a9672e, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x69a9672e, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6a233686, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4262, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0161.343] FindClose (in: hFindFile=0x12d9848 | out: hFindFile=0x12d9848) returned 1 [0161.343] GetProcessHeap () returned 0x12c0000 [0161.343] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1361970 | out: hHeap=0x12c0000) returned 1 [0161.344] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1038", cAlternateFileName="")) returned 1 [0161.344] GetProcessHeap () returned 0x12c0000 [0161.344] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1361970 [0161.344] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9788 [0161.345] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.345] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69f0ee23, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x69f0ee23, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x69f5b2fb, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x1192, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0161.345] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69f81571, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x69f81571, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6a4bc0f1, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x152b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0161.345] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a25ab3d, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6a25ab3d, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6a6abfba, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0161.345] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a25ab3d, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6a25ab3d, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6a6abfba, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0161.345] FindClose (in: hFindFile=0x12d9788 | out: hFindFile=0x12d9788) returned 1 [0161.346] GetProcessHeap () returned 0x12c0000 [0161.346] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1361970 | out: hHeap=0x12c0000) returned 1 [0161.346] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1040", cAlternateFileName="")) returned 1 [0161.346] GetProcessHeap () returned 0x12c0000 [0161.346] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1361970 [0161.347] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0161.348] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.348] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a4bc0f1, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6a4bc0f1, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6a4e20bb, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xf32, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0161.348] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a50834a, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6a50834a, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6ab869ca, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x139c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0161.348] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a6abfba, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6a6abfba, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6abada33, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0161.348] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a6abfba, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6a6abfba, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6abada33, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0161.348] FindClose (in: hFindFile=0x12d9388 | out: hFindFile=0x12d9388) returned 1 [0161.348] GetProcessHeap () returned 0x12c0000 [0161.349] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1361970 | out: hHeap=0x12c0000) returned 1 [0161.349] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1041", cAlternateFileName="")) returned 1 [0161.349] GetProcessHeap () returned 0x12c0000 [0161.349] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1361970 [0161.349] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0161.350] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.350] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6abada33, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6abada33, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6ac46d44, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x2882, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0161.350] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6abada33, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6abada33, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6ac1f0ad, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x10b92, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0161.350] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac1f0ad, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6ac1f0ad, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6acc60dd, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x3e62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0161.350] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac1f0ad, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6ac1f0ad, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6acc60dd, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x3e62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0161.350] FindClose (in: hFindFile=0x12d9908 | out: hFindFile=0x12d9908) returned 1 [0161.351] GetProcessHeap () returned 0x12c0000 [0161.351] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1361970 | out: hHeap=0x12c0000) returned 1 [0161.351] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1042", cAlternateFileName="")) returned 1 [0161.351] GetProcessHeap () returned 0x12c0000 [0161.351] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1361970 [0161.352] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0161.353] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.353] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac53d86, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6ac53d86, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6ac79aab, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x3282, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0161.353] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac9ff3b, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6ac9ff3b, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6ad1261c, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xffe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0161.353] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6acc60dd, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6acc60dd, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6ad1261c, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x3c62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0161.353] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6acc60dd, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6acc60dd, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6ad1261c, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x3c62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0161.353] FindClose (in: hFindFile=0x12d93c8 | out: hFindFile=0x12d93c8) returned 1 [0161.354] GetProcessHeap () returned 0x12c0000 [0161.354] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1361970 | out: hHeap=0x12c0000) returned 1 [0161.354] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1043", cAlternateFileName="")) returned 1 [0161.354] GetProcessHeap () returned 0x12c0000 [0161.354] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1361970 [0161.354] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9788 [0161.355] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.355] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ad38946, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6ad38946, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6ad5ea6e, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xed2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0161.355] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ad38946, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6ad38946, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6b3daccd, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x13822, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0161.355] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ad5ea6e, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6ad5ea6e, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6b4271b7, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4c62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0161.355] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ad5ea6e, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6ad5ea6e, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6b4271b7, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4c62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0161.355] FindClose (in: hFindFile=0x12d9788 | out: hFindFile=0x12d9788) returned 1 [0161.356] GetProcessHeap () returned 0x12c0000 [0161.356] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1361970 | out: hHeap=0x12c0000) returned 1 [0161.356] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1044", cAlternateFileName="")) returned 1 [0161.356] GetProcessHeap () returned 0x12c0000 [0161.357] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1361970 [0161.357] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9788 [0161.358] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.358] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b3daccd, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6b3daccd, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6b4011cf, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xce2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0161.358] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4011cf, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6b4011cf, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6b499891, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x136d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0161.358] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4271b7, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6b4271b7, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6b57e6c1, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4662, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0161.358] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4271b7, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6b4271b7, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6b57e6c1, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4662, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0161.358] FindClose (in: hFindFile=0x12d9788 | out: hFindFile=0x12d9788) returned 1 [0161.359] GetProcessHeap () returned 0x12c0000 [0161.359] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1361970 | out: hHeap=0x12c0000) returned 1 [0161.359] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1045", cAlternateFileName="")) returned 1 [0161.359] GetProcessHeap () returned 0x12c0000 [0161.359] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1361970 [0161.359] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9788 [0161.360] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.360] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4bfbf2, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6b4bfbf2, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6b4e5dc5, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x10c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0161.360] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b558715, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6b558715, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6b8ebd28, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x142d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0161.360] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b57e6c1, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6b57e6c1, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6b911f34, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0161.360] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b57e6c1, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6b57e6c1, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6b911f34, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0161.361] FindClose (in: hFindFile=0x12d9788 | out: hFindFile=0x12d9788) returned 1 [0161.361] GetProcessHeap () returned 0x12c0000 [0161.361] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1361970 | out: hHeap=0x12c0000) returned 1 [0161.362] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1046", cAlternateFileName="")) returned 1 [0161.362] GetProcessHeap () returned 0x12c0000 [0161.362] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1361970 [0161.362] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9788 [0161.363] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.363] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b8ebd28, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6b8ebd28, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6b9381e1, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xf62, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0161.363] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b911f34, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6b911f34, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6c1b6ac5, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x13c72, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0161.363] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b9381e1, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6b9381e1, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6c62ee60, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0161.363] FindNextFileW (in: hFindFile=0x12d9788, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b9381e1, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6b9381e1, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6c62ee60, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0161.363] FindClose (in: hFindFile=0x12d9788 | out: hFindFile=0x12d9788) returned 1 [0161.364] GetProcessHeap () returned 0x12c0000 [0161.364] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1361970 | out: hHeap=0x12c0000) returned 1 [0161.364] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1049", cAlternateFileName="")) returned 1 [0161.364] GetProcessHeap () returned 0x12c0000 [0161.364] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1361970 [0161.364] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0161.607] FindNextFileW (in: hFindFile=0x12d97c8, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.607] FindNextFileW (in: hFindFile=0x12d97c8, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c1dcb21, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6c1dcb21, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6c202cb7, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xd5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0161.608] FindNextFileW (in: hFindFile=0x12d97c8, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c202cb7, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6c202cb7, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6c99c5ff, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x13f52, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0161.608] FindNextFileW (in: hFindFile=0x12d97c8, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c62ee60, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6c62ee60, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6cdc88dc, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0161.610] FindNextFileW (in: hFindFile=0x12d97c8, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c62ee60, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6c62ee60, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6cdc88dc, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0161.610] FindClose (in: hFindFile=0x12d97c8 | out: hFindFile=0x12d97c8) returned 1 [0161.611] GetProcessHeap () returned 0x12c0000 [0161.611] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1361970 | out: hHeap=0x12c0000) returned 1 [0161.611] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1053", cAlternateFileName="")) returned 1 [0161.611] GetProcessHeap () returned 0x12c0000 [0161.611] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1361970 [0161.611] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0161.612] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.612] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c99c5ff, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6c99c5ff, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6c9c26e3, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x1012, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0161.612] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c9c26e3, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6c9c26e3, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6d135ca5, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x13082, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0161.612] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cdc88dc, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6cdc88dc, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6d15bf23, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4662, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0161.612] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cdc88dc, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6cdc88dc, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6d15bf23, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4662, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0161.612] FindClose (in: hFindFile=0x12d9508 | out: hFindFile=0x12d9508) returned 1 [0161.613] GetProcessHeap () returned 0x12c0000 [0161.613] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1361970 | out: hHeap=0x12c0000) returned 1 [0161.613] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1055", cAlternateFileName="")) returned 1 [0161.613] GetProcessHeap () returned 0x12c0000 [0161.613] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1361970 [0161.613] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0161.614] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.614] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d15bf23, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6d15bf23, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6d1820d9, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x1012, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0161.614] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d15bf23, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6d15bf23, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6d1f4777, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x12d22, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0161.614] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d1820d9, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6d1820d9, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6d21aaa7, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4662, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0161.614] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d1820d9, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6d1820d9, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6d21aaa7, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4662, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0161.614] FindClose (in: hFindFile=0x12d9848 | out: hFindFile=0x12d9848) returned 1 [0161.615] GetProcessHeap () returned 0x12c0000 [0161.615] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1361970 | out: hHeap=0x12c0000) returned 1 [0161.615] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="2052", cAlternateFileName="")) returned 1 [0161.615] GetProcessHeap () returned 0x12c0000 [0161.615] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1361970 [0161.615] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0161.616] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.616] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d1f4777, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6d1f4777, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6d266eef, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x17c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0161.616] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d21aaa7, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6d21aaa7, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6d4ef748, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xee12, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0161.616] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d266eef, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6d266eef, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6db57c2c, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x3862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0161.616] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d266eef, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6d266eef, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6db57c2c, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x3862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0161.616] FindClose (in: hFindFile=0x12d9808 | out: hFindFile=0x12d9808) returned 1 [0161.617] GetProcessHeap () returned 0x12c0000 [0161.617] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1361970 | out: hHeap=0x12c0000) returned 1 [0161.617] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="2070", cAlternateFileName="")) returned 1 [0161.617] GetProcessHeap () returned 0x12c0000 [0161.617] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1361970 [0161.617] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0161.618] FindNextFileW (in: hFindFile=0x12d97c8, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.618] FindNextFileW (in: hFindFile=0x12d97c8, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d4ef748, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6d4ef748, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6d515bb8, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x10a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0161.618] FindNextFileW (in: hFindFile=0x12d97c8, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d53bc2f, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6d53bc2f, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6dff653a, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x13a82, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0161.618] FindNextFileW (in: hFindFile=0x12d97c8, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dc16ae9, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6dc16ae9, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6e33d937, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0161.618] FindNextFileW (in: hFindFile=0x12d97c8, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dc16ae9, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6dc16ae9, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6e33d937, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0161.618] FindClose (in: hFindFile=0x12d97c8 | out: hFindFile=0x12d97c8) returned 1 [0161.619] GetProcessHeap () returned 0x12c0000 [0161.619] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1361970 | out: hHeap=0x12c0000) returned 1 [0161.619] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="3076", cAlternateFileName="")) returned 1 [0161.619] GetProcessHeap () returned 0x12c0000 [0161.619] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1361970 [0161.619] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0161.619] FindNextFileW (in: hFindFile=0x12d97c8, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.620] FindNextFileW (in: hFindFile=0x12d97c8, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e01c7b1, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6e01c7b1, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6e6387e7, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x19a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0161.620] FindNextFileW (in: hFindFile=0x12d97c8, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e33d937, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6e33d937, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6e9cc286, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xeea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0161.620] FindNextFileW (in: hFindFile=0x12d97c8, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e6387e7, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6e6387e7, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6e9f22a3, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x3862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0161.620] FindNextFileW (in: hFindFile=0x12d97c8, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e6387e7, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6e6387e7, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6e9f22a3, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x3862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0161.620] FindClose (in: hFindFile=0x12d97c8 | out: hFindFile=0x12d97c8) returned 1 [0161.620] GetProcessHeap () returned 0x12c0000 [0161.620] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1361970 | out: hHeap=0x12c0000) returned 1 [0161.620] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="3082", cAlternateFileName="")) returned 1 [0161.621] GetProcessHeap () returned 0x12c0000 [0161.621] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1361970 [0161.621] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0161.621] FindNextFileW (in: hFindFile=0x12d97c8, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.621] FindNextFileW (in: hFindFile=0x12d97c8, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e9cc286, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6e9cc286, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6ea18527, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xcf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="EULART~1.PHO")) returned 1 [0161.621] FindNextFileW (in: hFindFile=0x12d97c8, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e9f22a3, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6e9f22a3, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6f00e45f, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x13982, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="LOCALI~1.PHO")) returned 1 [0161.622] FindNextFileW (in: hFindFile=0x12d97c8, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea18527, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6ea18527, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6f3ee02a, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 1 [0161.622] FindNextFileW (in: hFindFile=0x12d97c8, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea18527, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6ea18527, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6f3ee02a, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPR~1.PHO")) returned 0 [0161.622] FindClose (in: hFindFile=0x12d97c8 | out: hFindFile=0x12d97c8) returned 1 [0161.622] GetProcessHeap () returned 0x12c0000 [0161.622] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1361970 | out: hHeap=0x12c0000) returned 1 [0161.622] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Client", cAlternateFileName="")) returned 1 [0161.622] GetProcessHeap () returned 0x12c0000 [0161.622] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1361970 [0161.622] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0161.623] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.623] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f0347d7, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6f0347d7, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6f0347d7, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x31552, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="PARAME~1.PHO")) returned 1 [0161.623] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f080d45, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6f080d45, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6f080d45, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x9982, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="UIINFO~1.PHO")) returned 1 [0161.623] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f080d45, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6f080d45, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6f080d45, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x9982, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="UIINFO~1.PHO")) returned 0 [0161.623] FindClose (in: hFindFile=0x12d9508 | out: hFindFile=0x12d9508) returned 1 [0161.624] GetProcessHeap () returned 0x12c0000 [0161.624] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1361970 | out: hHeap=0x12c0000) returned 1 [0161.624] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f0a6c01, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6f0a6c01, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6f62a403, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x4002, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="DHtmlHeader.html.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="DHTMLH~1.PHO")) returned 1 [0161.624] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3ee02a, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6f3ee02a, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6f7a7db2, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x15ad2, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="DisplayIcon.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="DISPLA~1.PHO")) returned 1 [0161.624] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Extended", cAlternateFileName="")) returned 1 [0161.624] GetProcessHeap () returned 0x12c0000 [0161.624] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1361970 [0161.624] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0161.625] FindNextFileW (in: hFindFile=0x12d97c8, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.625] FindNextFileW (in: hFindFile=0x12d97c8, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f62a403, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6f62a403, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6f9e3e71, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x16d92, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="PARAME~1.PHO")) returned 1 [0161.625] FindNextFileW (in: hFindFile=0x12d97c8, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7cddf9, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6f7cddf9, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6fcdedf8, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x9982, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="UIINFO~1.PHO")) returned 1 [0161.625] FindNextFileW (in: hFindFile=0x12d97c8, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7cddf9, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6f7cddf9, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x6fcdedf8, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x9982, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="UIINFO~1.PHO")) returned 0 [0161.625] FindClose (in: hFindFile=0x12d97c8 | out: hFindFile=0x12d97c8) returned 1 [0161.626] GetProcessHeap () returned 0x12c0000 [0161.626] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1361970 | out: hHeap=0x12c0000) returned 1 [0161.626] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Graphics", cAlternateFileName="")) returned 1 [0161.626] GetProcessHeap () returned 0x12c0000 [0161.626] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1361970 [0161.626] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0161.627] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.627] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9e3e71, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x6f9e3e71, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x703727ac, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x572, dwReserved0=0x0, dwReserved1=0x0, cFileName="Print.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="PRINTI~1.PHO")) returned 1 [0161.627] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7034c570, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x7034c570, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x703727ac, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate1.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="ROTATE~1.PHO")) returned 1 [0161.627] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703727ac, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x703727ac, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x70759a15, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate2.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="ROTATE~2.PHO")) returned 1 [0161.627] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70621245, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x70621245, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x7083fba3, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate3.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="ROTATE~3.PHO")) returned 1 [0161.627] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70759a15, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x70759a15, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x709431f6, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate4.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="ROTATE~4.PHO")) returned 1 [0161.628] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7085d501, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x7085d501, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x7085d501, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate5.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="RO91DD~1.PHO")) returned 1 [0161.628] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7085d501, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x7085d501, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x7088374b, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate6.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="RO7940~1.PHO")) returned 1 [0161.628] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7088374b, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x7088374b, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x7088374b, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate7.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="RO2FD9~1.PHO")) returned 1 [0161.628] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x708a99ed, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x708a99ed, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x708a99ed, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate8.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="RO77B2~1.PHO")) returned 1 [0161.628] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x708a99ed, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x708a99ed, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x708cfc15, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x572, dwReserved0=0x0, dwReserved1=0x0, cFileName="Save.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SAVEIC~1.PHO")) returned 1 [0161.628] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x708cfc15, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x708cfc15, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x708cfc15, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x9062, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPI~1.PHO")) returned 1 [0161.628] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x708f5e15, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x708f5e15, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x70a9c5ea, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x2892, dwReserved0=0x0, dwReserved1=0x0, cFileName="stop.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="STOPIC~1.PHO")) returned 1 [0161.628] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x709431f6, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x709431f6, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x70a06ec4, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x572, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqMet.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SYSREQ~1.PHO")) returned 1 [0161.628] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a06ec4, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x70a06ec4, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x70a273ba, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x582, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqNotMet.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SYSREQ~2.PHO")) returned 1 [0161.628] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a273ba, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x70a273ba, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x70a4d56e, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x2892, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="WARNIC~1.PHO")) returned 1 [0161.628] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a273ba, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x70a273ba, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x70a4d56e, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x2892, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="WARNIC~1.PHO")) returned 0 [0161.628] FindClose (in: hFindFile=0x12d9908 | out: hFindFile=0x12d9908) returned 1 [0161.629] GetProcessHeap () returned 0x12c0000 [0161.629] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1361970 | out: hHeap=0x12c0000) returned 1 [0161.629] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a4d56e, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x70a4d56e, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x70c6a71a, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xf22, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="header.bmp.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="HEADER~1.PHO")) returned 1 [0161.629] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x70e53327, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xadd395d, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Core.mzz.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="NETFX_~1.PHO")) returned 1 [0161.629] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x71702dc2, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x290312, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Core_x64.msi.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="NETFX_~2.PHO")) returned 1 [0161.629] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x719d7a93, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x719d7a93, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x71ee87cd, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x11c112, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Core_x86.msi.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="NETFX_~3.PHO")) returned 1 [0161.629] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x7206612c, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x29e23d9, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Extended.mzz.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="NETFX_~4.PHO")) returned 1 [0161.629] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72124acc, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x72124acc, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x7259d21f, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xd5112, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Extended_x64.msi.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="NE086F~1.PHO")) returned 1 [0161.629] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725e96e9, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x725e96e9, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x728720c1, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x79112, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Extended_x86.msi.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="NE52D6~1.PHO")) returned 1 [0161.629] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x727ff9dc, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x727ff9dc, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x72825c32, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x427b2, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="ParameterInfo.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="PARAME~1.PHO")) returned 1 [0161.630] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7284becc, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x7284becc, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x7297d20d, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x2d312, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="RGB9RAST_x64.msi.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="RGB9RA~1.PHO")) returned 1 [0161.630] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728be6ca, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x728be6ca, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x72a87f11, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x17312, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="RGB9Rast_x86.msi.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="RGB9RA~2.PHO")) returned 1 [0161.630] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729a33b3, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x729a33b3, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x72afb0dd, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x13242, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Setup.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPE~1.PHO")) returned 1 [0161.630] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72aae3e5, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x72aae3e5, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x72c51b56, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xc5252, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SetupEngine.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPE~2.PHO")) returned 1 [0161.630] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b46dd2, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x72b46dd2, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x72cea48c, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x48252, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SetupUi.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPU~1.PHO")) returned 1 [0161.630] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72c9e2f6, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x72c9e2f6, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x731af060, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x76a2, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SetupUi.xsd.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPU~2.PHO")) returned 1 [0161.630] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72d109f5, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x72d109f5, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x72d5cc01, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x17862, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SetupUtility.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SETUPU~3.PHO")) returned 1 [0161.630] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72d5cc01, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x72d5cc01, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x73162add, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0xa182, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SplashScreen.bmp.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SPLASH~1.PHO")) returned 1 [0161.630] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73189035, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x73189035, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x732e02a2, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x23522, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="sqmapi.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="SQMAPI~1.PHO")) returned 1 [0161.630] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x731d5506, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x731d5506, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x7339eecc, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x3802, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Strings.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="STRING~1.PHO")) returned 1 [0161.630] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x732e02a2, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x732e02a2, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x7341164b, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x98f2, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="UiInfo.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="UIINFO~1.PHO")) returned 1 [0161.630] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x733c5bea, ftCreationTime.dwHighDateTime=0x1d569c7, ftLastAccessTime.dwLowDateTime=0x733c5bea, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x7358ed35, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x19782, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="watermark.bmp.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="WATERM~1.PHO")) returned 1 [0161.630] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0x739487cc, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x5b5245, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows6.0-KB956250-v6001-x64.msu.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="WINDOW~1.PHO")) returned 1 [0161.630] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0x737cb317, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x2d7652, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows6.0-KB956250-v6001-x86.msu.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="WINDOW~2.PHO")) returned 1 [0161.631] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0xf9a33116, ftLastWriteTime.dwHighDateTime=0x1d569cf, nFileSizeHigh=0x0, nFileSizeLow=0x59b300, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows6.1-KB958488-v6001-x64.msu.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="WINDOW~3.PHO")) returned 1 [0161.631] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xf9a2cfaa, ftLastWriteTime.dwHighDateTime=0x1d569cf, nFileSizeHigh=0x0, nFileSizeLow=0x2cae2b, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows6.1-KB958488-v6001-x86.msu.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="WINDOW~4.PHO")) returned 1 [0161.631] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xf9a2cfaa, ftLastWriteTime.dwHighDateTime=0x1d569cf, nFileSizeHigh=0x0, nFileSizeLow=0x2cae2b, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows6.1-KB958488-v6001-x86.msu.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="WINDOW~4.PHO")) returned 0 [0161.631] FindClose (in: hFindFile=0x12d9648 | out: hFindFile=0x12d9648) returned 1 [0161.631] GetProcessHeap () returned 0x12c0000 [0161.631] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0161.631] FindNextFileW (in: hFindFile=0x12d9208, lpFindFileData=0x350f9a0 | out: lpFindFileData=0x350f9a0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6fa258, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x12d1a75, dwReserved1=0x74889fc4, cFileName="Boot", cAlternateFileName="")) returned 1 [0161.631] GetProcessHeap () returned 0x12c0000 [0161.631] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0161.634] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\*", lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xb8b4789, ftLastWriteTime.dwHighDateTime=0x1d569d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0161.634] FindNextFileW (in: hFindFile=0x12d97c8, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xb8b4789, ftLastWriteTime.dwHighDateTime=0x1d569d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0161.634] FindNextFileW (in: hFindFile=0x12d97c8, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xac3efa99, ftLastAccessTime.dwHighDateTime=0x1d4d5d3, ftLastWriteTime.dwLowDateTime=0xac3efa99, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="BCD", cAlternateFileName="")) returned 1 [0161.634] FindNextFileW (in: hFindFile=0x12d97c8, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0161.634] FindNextFileW (in: hFindFile=0x12d97c8, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0161.634] FindNextFileW (in: hFindFile=0x12d97c8, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0161.634] FindNextFileW (in: hFindFile=0x12d97c8, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0161.634] GetProcessHeap () returned 0x12c0000 [0161.634] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0161.634] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\bg-BG\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9648 [0161.634] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.634] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0161.634] FindNextFileW (in: hFindFile=0x12d9648, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0161.635] FindClose (in: hFindFile=0x12d9648 | out: hFindFile=0x12d9648) returned 1 [0161.635] GetProcessHeap () returned 0x12c0000 [0161.635] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0161.635] FindNextFileW (in: hFindFile=0x12d97c8, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4e6d79, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef4e6d79, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x175a0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="bootspaces.dll", cAlternateFileName="BOOTSP~1.DLL")) returned 1 [0161.635] FindNextFileW (in: hFindFile=0x12d97c8, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb842129, ftCreationTime.dwHighDateTime=0x1d569d0, ftLastAccessTime.dwLowDateTime=0xb842129, ftLastAccessTime.dwHighDateTime=0x1d569d0, ftLastWriteTime.dwLowDateTime=0xb8b4789, ftLastWriteTime.dwHighDateTime=0x1d569d0, nFileSizeHigh=0x0, nFileSizeLow=0x10102, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="BOOTSTAT.DAT.id[B4197730-2299].[britt.looper@aol.com].phoenix", cAlternateFileName="BOOTST~1.PHO")) returned 1 [0161.635] FindNextFileW (in: hFindFile=0x12d97c8, lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef4fcd12, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x185a0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="bootvhd.dll", cAlternateFileName="")) returned 1 [0161.635] GetProcessHeap () returned 0x12c0000 [0161.635] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0161.635] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0161.635] GetProcessHeap () returned 0x12c0000 [0161.635] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0161.635] GetProcessHeap () returned 0x12c0000 [0161.635] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0161.635] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\da-DK\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0161.635] GetProcessHeap () returned 0x12c0000 [0161.635] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0161.635] GetProcessHeap () returned 0x12c0000 [0161.635] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0161.635] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\de-DE\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0161.636] GetProcessHeap () returned 0x12c0000 [0161.636] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0161.636] GetProcessHeap () returned 0x12c0000 [0161.636] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0161.636] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\el-GR\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0161.636] GetProcessHeap () returned 0x12c0000 [0161.636] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0161.636] GetProcessHeap () returned 0x12c0000 [0161.636] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0161.636] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\en-GB\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0161.636] GetProcessHeap () returned 0x12c0000 [0161.636] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0161.636] GetProcessHeap () returned 0x12c0000 [0161.636] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0161.636] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\en-US\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0161.636] GetProcessHeap () returned 0x12c0000 [0161.636] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0161.636] GetProcessHeap () returned 0x12c0000 [0161.636] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0161.636] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\es-ES\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0161.636] GetProcessHeap () returned 0x12c0000 [0161.636] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0161.637] GetProcessHeap () returned 0x12c0000 [0161.637] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0161.637] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\es-MX\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0161.637] GetProcessHeap () returned 0x12c0000 [0161.637] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0161.637] GetProcessHeap () returned 0x12c0000 [0161.637] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0161.637] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\et-EE\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0161.637] GetProcessHeap () returned 0x12c0000 [0161.637] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0161.637] GetProcessHeap () returned 0x12c0000 [0161.637] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0161.637] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fi-FI\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9648 [0161.637] GetProcessHeap () returned 0x12c0000 [0161.637] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0161.637] GetProcessHeap () returned 0x12c0000 [0161.637] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0161.637] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Fonts\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0161.808] GetProcessHeap () returned 0x12c0000 [0161.808] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0161.808] GetProcessHeap () returned 0x12c0000 [0161.808] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0161.808] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fr-CA\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0161.808] GetProcessHeap () returned 0x12c0000 [0161.808] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0161.808] GetProcessHeap () returned 0x12c0000 [0161.808] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0161.808] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fr-FR\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0161.809] GetProcessHeap () returned 0x12c0000 [0161.809] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0161.809] GetProcessHeap () returned 0x12c0000 [0161.809] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0161.809] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\hr-HR\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0161.809] GetProcessHeap () returned 0x12c0000 [0161.809] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0161.809] GetProcessHeap () returned 0x12c0000 [0161.809] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0161.809] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\hu-HU\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0161.809] GetProcessHeap () returned 0x12c0000 [0161.809] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0161.809] GetProcessHeap () returned 0x12c0000 [0161.809] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0161.809] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\it-IT\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0161.810] GetProcessHeap () returned 0x12c0000 [0161.810] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0161.810] GetProcessHeap () returned 0x12c0000 [0161.810] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0161.810] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ja-JP\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0161.810] GetProcessHeap () returned 0x12c0000 [0161.810] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0161.810] GetProcessHeap () returned 0x12c0000 [0161.810] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0161.810] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ko-KR\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0161.810] GetProcessHeap () returned 0x12c0000 [0161.810] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0161.810] GetProcessHeap () returned 0x12c0000 [0161.810] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0161.810] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\lt-LT\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0161.810] GetProcessHeap () returned 0x12c0000 [0161.811] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0161.811] GetProcessHeap () returned 0x12c0000 [0161.811] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0161.811] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\lv-LV\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0161.811] GetProcessHeap () returned 0x12c0000 [0161.811] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0161.811] GetProcessHeap () returned 0x12c0000 [0161.811] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0161.811] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\nb-NO\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9648 [0161.811] GetProcessHeap () returned 0x12c0000 [0161.811] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0161.811] GetProcessHeap () returned 0x12c0000 [0161.811] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0161.811] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\nl-NL\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9648 [0161.811] GetProcessHeap () returned 0x12c0000 [0161.811] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0161.811] GetProcessHeap () returned 0x12c0000 [0161.811] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0161.812] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pl-PL\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9648 [0161.812] GetProcessHeap () returned 0x12c0000 [0161.812] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0161.812] GetProcessHeap () returned 0x12c0000 [0161.812] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0161.812] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pt-BR\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0161.812] GetProcessHeap () returned 0x12c0000 [0161.812] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0161.812] GetProcessHeap () returned 0x12c0000 [0161.812] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0161.812] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pt-PT\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0161.812] GetProcessHeap () returned 0x12c0000 [0161.812] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0161.812] GetProcessHeap () returned 0x12c0000 [0161.812] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0161.812] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9648 [0161.813] GetProcessHeap () returned 0x12c0000 [0161.813] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0161.813] GetProcessHeap () returned 0x12c0000 [0161.813] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0161.813] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Resources\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0161.813] GetProcessHeap () returned 0x12c0000 [0161.813] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ca1070 [0161.814] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Resources\\en-US\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0161.814] GetProcessHeap () returned 0x12c0000 [0161.814] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ca1070 | out: hHeap=0x12c0000) returned 1 [0161.814] GetProcessHeap () returned 0x12c0000 [0161.814] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0161.815] GetProcessHeap () returned 0x12c0000 [0161.815] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0161.815] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ro-RO\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0161.815] GetProcessHeap () returned 0x12c0000 [0161.815] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0161.815] GetProcessHeap () returned 0x12c0000 [0161.815] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0161.815] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ru-RU\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0161.816] GetProcessHeap () returned 0x12c0000 [0161.816] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0161.816] GetProcessHeap () returned 0x12c0000 [0161.816] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0161.816] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sk-SK\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0161.816] GetProcessHeap () returned 0x12c0000 [0161.816] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0161.816] GetProcessHeap () returned 0x12c0000 [0161.816] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0161.816] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sl-SI\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0161.816] GetProcessHeap () returned 0x12c0000 [0161.816] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0161.816] GetProcessHeap () returned 0x12c0000 [0161.816] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0161.816] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0161.817] GetProcessHeap () returned 0x12c0000 [0161.817] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0161.817] GetProcessHeap () returned 0x12c0000 [0161.817] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0161.817] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sr-Latn-RS\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0161.817] GetProcessHeap () returned 0x12c0000 [0161.817] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0161.817] GetProcessHeap () returned 0x12c0000 [0161.817] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0161.817] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sv-SE\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9648 [0161.817] GetProcessHeap () returned 0x12c0000 [0161.817] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0161.817] GetProcessHeap () returned 0x12c0000 [0161.817] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0161.817] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\tr-TR\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0161.817] GetProcessHeap () returned 0x12c0000 [0161.818] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0161.818] GetProcessHeap () returned 0x12c0000 [0161.818] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0161.818] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\uk-UA\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9648 [0161.818] GetProcessHeap () returned 0x12c0000 [0161.818] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0161.818] GetProcessHeap () returned 0x12c0000 [0161.818] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0161.818] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-CN\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0161.818] GetProcessHeap () returned 0x12c0000 [0161.818] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0161.818] GetProcessHeap () returned 0x12c0000 [0161.818] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0161.818] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-HK\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0161.818] GetProcessHeap () returned 0x12c0000 [0161.818] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0161.818] GetProcessHeap () returned 0x12c0000 [0161.818] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0161.818] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-TW\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9648 [0161.819] GetProcessHeap () returned 0x12c0000 [0161.819] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0161.819] GetProcessHeap () returned 0x12c0000 [0161.819] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0161.820] GetProcessHeap () returned 0x12c0000 [0161.820] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ca1070 [0161.820] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ESD\\*", lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0161.821] GetProcessHeap () returned 0x12c0000 [0161.821] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ca1070 | out: hHeap=0x12c0000) returned 1 [0161.821] GetProcessHeap () returned 0x12c0000 [0161.821] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ca1070 [0161.821] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Logs\\*", lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xfb53790d, ftLastAccessTime.dwHighDateTime=0x1d569cf, ftLastWriteTime.dwLowDateTime=0xfe4d1c12, ftLastWriteTime.dwHighDateTime=0x1d569cf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0161.825] GetProcessHeap () returned 0x12c0000 [0161.825] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ca1070 | out: hHeap=0x12c0000) returned 1 [0161.825] GetProcessHeap () returned 0x12c0000 [0161.825] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ca1070 [0161.825] FindFirstFileW (in: lpFileName="\\\\?\\C:\\PerfLogs\\*", lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0161.825] GetProcessHeap () returned 0x12c0000 [0161.825] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ca1070 | out: hHeap=0x12c0000) returned 1 [0161.825] GetProcessHeap () returned 0x12c0000 [0161.825] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ca1070 [0161.825] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\*", lpFindFileData=0x350f710 | out: lpFindFileData=0x350f710*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x518874ca, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x518874ca, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x12d9648 [0161.826] GetProcessHeap () returned 0x12c0000 [0161.826] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0161.826] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0161.826] GetProcessHeap () returned 0x12c0000 [0161.826] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0161.826] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0161.827] GetProcessHeap () returned 0x12c0000 [0161.827] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0161.827] GetProcessHeap () returned 0x12c0000 [0161.827] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0161.827] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0161.827] GetProcessHeap () returned 0x12c0000 [0161.827] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cb2080 [0161.827] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81028f76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x81028f76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0161.828] GetProcessHeap () returned 0x12c0000 [0161.828] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cb2080 | out: hHeap=0x12c0000) returned 1 [0161.828] GetProcessHeap () returned 0x12c0000 [0161.828] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cb2080 [0161.828] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0161.828] GetProcessHeap () returned 0x12c0000 [0161.828] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc3090 [0161.829] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05532b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0161.829] GetProcessHeap () returned 0x12c0000 [0161.829] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc3090 | out: hHeap=0x12c0000) returned 1 [0161.829] GetProcessHeap () returned 0x12c0000 [0161.829] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc3090 [0161.829] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0553f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0161.829] GetProcessHeap () returned 0x12c0000 [0161.829] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc3090 | out: hHeap=0x12c0000) returned 1 [0161.829] GetProcessHeap () returned 0x12c0000 [0161.829] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc3090 [0161.829] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0554b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0161.830] GetProcessHeap () returned 0x12c0000 [0161.830] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc3090 | out: hHeap=0x12c0000) returned 1 [0161.830] GetProcessHeap () returned 0x12c0000 [0161.830] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc3090 [0161.830] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05550d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0161.830] GetProcessHeap () returned 0x12c0000 [0161.830] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc3090 | out: hHeap=0x12c0000) returned 1 [0161.830] GetProcessHeap () returned 0x12c0000 [0161.830] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc3090 [0161.830] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0555b2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0161.830] GetProcessHeap () returned 0x12c0000 [0161.830] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc3090 | out: hHeap=0x12c0000) returned 1 [0161.831] GetProcessHeap () returned 0x12c0000 [0161.831] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc3090 [0161.831] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa055662c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0161.831] GetProcessHeap () returned 0x12c0000 [0161.831] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc3090 | out: hHeap=0x12c0000) returned 1 [0161.831] GetProcessHeap () returned 0x12c0000 [0161.831] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc3090 [0161.831] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0557085, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0161.831] GetProcessHeap () returned 0x12c0000 [0161.831] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc3090 | out: hHeap=0x12c0000) returned 1 [0161.831] GetProcessHeap () returned 0x12c0000 [0161.831] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc3090 [0161.831] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dd09d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0161.832] GetProcessHeap () returned 0x12c0000 [0161.832] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc3090 | out: hHeap=0x12c0000) returned 1 [0161.832] GetProcessHeap () returned 0x12c0000 [0161.832] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc3090 [0161.832] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05ddf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0161.832] GetProcessHeap () returned 0x12c0000 [0161.832] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc3090 | out: hHeap=0x12c0000) returned 1 [0161.832] GetProcessHeap () returned 0x12c0000 [0161.832] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc3090 [0161.832] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dea14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0161.832] GetProcessHeap () returned 0x12c0000 [0161.832] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc3090 | out: hHeap=0x12c0000) returned 1 [0161.832] GetProcessHeap () returned 0x12c0000 [0161.832] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc3090 [0161.832] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df011, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0161.833] GetProcessHeap () returned 0x12c0000 [0161.833] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc3090 | out: hHeap=0x12c0000) returned 1 [0161.833] GetProcessHeap () returned 0x12c0000 [0161.833] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc3090 [0161.833] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df7b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0161.833] GetProcessHeap () returned 0x12c0000 [0161.833] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc3090 | out: hHeap=0x12c0000) returned 1 [0161.833] GetProcessHeap () returned 0x12c0000 [0161.833] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc3090 [0161.833] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0635c03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0161.833] GetProcessHeap () returned 0x12c0000 [0161.833] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc3090 | out: hHeap=0x12c0000) returned 1 [0161.833] GetProcessHeap () returned 0x12c0000 [0161.833] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc3090 [0161.833] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06369df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0161.834] GetProcessHeap () returned 0x12c0000 [0161.834] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc3090 | out: hHeap=0x12c0000) returned 1 [0161.834] GetProcessHeap () returned 0x12c0000 [0161.834] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc3090 [0161.834] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0637839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0161.834] GetProcessHeap () returned 0x12c0000 [0161.834] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cd40a0 [0161.834] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638633, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0161.835] GetProcessHeap () returned 0x12c0000 [0161.835] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cd40a0 | out: hHeap=0x12c0000) returned 1 [0161.835] GetProcessHeap () returned 0x12c0000 [0161.835] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cd40a0 [0161.835] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638c00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0161.835] GetProcessHeap () returned 0x12c0000 [0161.835] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cd40a0 | out: hHeap=0x12c0000) returned 1 [0161.835] GetProcessHeap () returned 0x12c0000 [0161.835] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cd40a0 [0161.835] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa063932e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0161.835] GetProcessHeap () returned 0x12c0000 [0161.835] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cd40a0 | out: hHeap=0x12c0000) returned 1 [0161.835] GetProcessHeap () returned 0x12c0000 [0161.835] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cd40a0 [0161.835] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cd023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0161.836] GetProcessHeap () returned 0x12c0000 [0161.836] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cd40a0 | out: hHeap=0x12c0000) returned 1 [0161.836] GetProcessHeap () returned 0x12c0000 [0161.836] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cd40a0 [0161.836] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cdb88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0161.836] GetProcessHeap () returned 0x12c0000 [0161.836] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cd40a0 | out: hHeap=0x12c0000) returned 1 [0161.836] GetProcessHeap () returned 0x12c0000 [0161.836] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cd40a0 [0161.836] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0161.836] GetProcessHeap () returned 0x12c0000 [0161.836] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cd40a0 | out: hHeap=0x12c0000) returned 1 [0161.836] GetProcessHeap () returned 0x12c0000 [0161.836] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cd40a0 [0161.836] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce7a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0161.839] GetProcessHeap () returned 0x12c0000 [0161.839] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cd40a0 | out: hHeap=0x12c0000) returned 1 [0161.839] GetProcessHeap () returned 0x12c0000 [0161.839] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cd40a0 [0161.839] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ceb7f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0161.840] GetProcessHeap () returned 0x12c0000 [0161.840] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cd40a0 | out: hHeap=0x12c0000) returned 1 [0161.840] GetProcessHeap () returned 0x12c0000 [0161.840] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cd40a0 [0161.840] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cef41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0161.840] GetProcessHeap () returned 0x12c0000 [0161.840] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cd40a0 | out: hHeap=0x12c0000) returned 1 [0161.840] GetProcessHeap () returned 0x12c0000 [0161.840] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cd40a0 [0161.840] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf371, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0161.840] GetProcessHeap () returned 0x12c0000 [0161.840] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cd40a0 | out: hHeap=0x12c0000) returned 1 [0161.840] GetProcessHeap () returned 0x12c0000 [0161.840] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc3090 | out: hHeap=0x12c0000) returned 1 [0161.841] GetProcessHeap () returned 0x12c0000 [0161.841] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc3090 [0161.841] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0161.842] GetProcessHeap () returned 0x12c0000 [0161.842] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc3090 | out: hHeap=0x12c0000) returned 1 [0161.842] GetProcessHeap () returned 0x12c0000 [0161.842] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc3090 [0161.842] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0161.842] GetProcessHeap () returned 0x12c0000 [0161.842] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc3090 | out: hHeap=0x12c0000) returned 1 [0161.842] GetProcessHeap () returned 0x12c0000 [0161.842] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc3090 [0161.842] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0161.842] GetProcessHeap () returned 0x12c0000 [0161.842] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc3090 | out: hHeap=0x12c0000) returned 1 [0161.842] GetProcessHeap () returned 0x12c0000 [0161.842] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc3090 [0161.842] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\HWRCustomization\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0161.843] GetProcessHeap () returned 0x12c0000 [0161.843] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc3090 | out: hHeap=0x12c0000) returned 1 [0161.843] GetProcessHeap () returned 0x12c0000 [0161.843] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc3090 [0161.843] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0769b1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0161.843] GetProcessHeap () returned 0x12c0000 [0161.843] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc3090 | out: hHeap=0x12c0000) returned 1 [0161.843] GetProcessHeap () returned 0x12c0000 [0161.843] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc3090 [0161.843] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0161.843] GetProcessHeap () returned 0x12c0000 [0161.843] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc3090 | out: hHeap=0x12c0000) returned 1 [0161.843] GetProcessHeap () returned 0x12c0000 [0161.843] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc3090 [0161.843] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0161.844] GetProcessHeap () returned 0x12c0000 [0161.844] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc3090 | out: hHeap=0x12c0000) returned 1 [0161.844] GetProcessHeap () returned 0x12c0000 [0161.844] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc3090 [0161.844] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0161.844] GetProcessHeap () returned 0x12c0000 [0161.844] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc3090 | out: hHeap=0x12c0000) returned 1 [0161.844] GetProcessHeap () returned 0x12c0000 [0161.844] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc3090 [0161.844] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0161.844] GetProcessHeap () returned 0x12c0000 [0161.844] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc3090 | out: hHeap=0x12c0000) returned 1 [0161.844] GetProcessHeap () returned 0x12c0000 [0161.844] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc3090 [0161.844] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0161.844] GetProcessHeap () returned 0x12c0000 [0161.844] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc3090 | out: hHeap=0x12c0000) returned 1 [0161.845] GetProcessHeap () returned 0x12c0000 [0161.845] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc3090 [0161.845] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076bff5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0161.845] GetProcessHeap () returned 0x12c0000 [0161.845] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc3090 | out: hHeap=0x12c0000) returned 1 [0161.845] GetProcessHeap () returned 0x12c0000 [0161.845] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc3090 [0161.845] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0161.845] GetProcessHeap () returned 0x12c0000 [0161.845] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc3090 | out: hHeap=0x12c0000) returned 1 [0161.845] GetProcessHeap () returned 0x12c0000 [0161.845] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc3090 [0161.845] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0161.845] GetProcessHeap () returned 0x12c0000 [0161.845] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc3090 | out: hHeap=0x12c0000) returned 1 [0161.845] GetProcessHeap () returned 0x12c0000 [0161.845] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc3090 [0161.846] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0161.846] GetProcessHeap () returned 0x12c0000 [0161.846] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc3090 | out: hHeap=0x12c0000) returned 1 [0161.846] GetProcessHeap () returned 0x12c0000 [0161.846] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc3090 [0161.846] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0161.846] GetProcessHeap () returned 0x12c0000 [0161.846] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc3090 | out: hHeap=0x12c0000) returned 1 [0161.846] GetProcessHeap () returned 0x12c0000 [0161.846] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc3090 [0161.846] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0161.846] GetProcessHeap () returned 0x12c0000 [0161.846] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc3090 | out: hHeap=0x12c0000) returned 1 [0161.846] GetProcessHeap () returned 0x12c0000 [0161.846] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc3090 [0161.846] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0161.850] GetProcessHeap () returned 0x12c0000 [0161.850] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc3090 | out: hHeap=0x12c0000) returned 1 [0161.850] GetProcessHeap () returned 0x12c0000 [0161.850] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc3090 [0161.850] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0161.850] GetProcessHeap () returned 0x12c0000 [0161.850] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc3090 | out: hHeap=0x12c0000) returned 1 [0161.850] GetProcessHeap () returned 0x12c0000 [0161.850] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc3090 [0161.850] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0161.850] GetProcessHeap () returned 0x12c0000 [0161.850] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc3090 | out: hHeap=0x12c0000) returned 1 [0161.850] GetProcessHeap () returned 0x12c0000 [0161.850] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc3090 [0161.850] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0162.155] GetProcessHeap () returned 0x12c0000 [0162.155] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc3090 | out: hHeap=0x12c0000) returned 1 [0162.155] GetProcessHeap () returned 0x12c0000 [0162.155] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc3090 [0162.155] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0162.155] GetProcessHeap () returned 0x12c0000 [0162.155] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc3090 | out: hHeap=0x12c0000) returned 1 [0162.155] GetProcessHeap () returned 0x12c0000 [0162.155] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc3090 [0162.155] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0162.155] GetProcessHeap () returned 0x12c0000 [0162.155] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc3090 | out: hHeap=0x12c0000) returned 1 [0162.155] GetProcessHeap () returned 0x12c0000 [0162.155] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc3090 [0162.155] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0162.156] GetProcessHeap () returned 0x12c0000 [0162.156] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc3090 | out: hHeap=0x12c0000) returned 1 [0162.156] GetProcessHeap () returned 0x12c0000 [0162.156] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc3090 [0162.156] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0162.156] GetProcessHeap () returned 0x12c0000 [0162.156] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc3090 | out: hHeap=0x12c0000) returned 1 [0162.156] GetProcessHeap () returned 0x12c0000 [0162.156] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc3090 [0162.156] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0162.157] GetProcessHeap () returned 0x12c0000 [0162.157] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc3090 | out: hHeap=0x12c0000) returned 1 [0162.157] GetProcessHeap () returned 0x12c0000 [0162.157] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc3090 [0162.157] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0162.157] GetProcessHeap () returned 0x12c0000 [0162.157] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc3090 | out: hHeap=0x12c0000) returned 1 [0162.157] GetProcessHeap () returned 0x12c0000 [0162.157] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cb2080 | out: hHeap=0x12c0000) returned 1 [0162.158] GetProcessHeap () returned 0x12c0000 [0162.158] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cb2080 [0162.159] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0162.159] GetProcessHeap () returned 0x12c0000 [0162.159] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc3090 [0162.159] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa098aa4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffd21b, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0162.160] GetProcessHeap () returned 0x12c0000 [0162.160] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc3090 | out: hHeap=0x12c0000) returned 1 [0162.160] GetProcessHeap () returned 0x12c0000 [0162.160] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cb2080 | out: hHeap=0x12c0000) returned 1 [0162.161] GetProcessHeap () returned 0x12c0000 [0162.161] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cb2080 [0162.161] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9f60362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0162.161] GetProcessHeap () returned 0x12c0000 [0162.161] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc3090 [0162.161] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa0a26299, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda982389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffd21b, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0162.164] GetProcessHeap () returned 0x12c0000 [0162.164] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc3090 | out: hHeap=0x12c0000) returned 1 [0162.164] GetProcessHeap () returned 0x12c0000 [0162.164] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cb2080 | out: hHeap=0x12c0000) returned 1 [0162.165] GetProcessHeap () returned 0x12c0000 [0162.165] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cb2080 [0162.166] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0162.166] GetProcessHeap () returned 0x12c0000 [0162.166] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cb2080 | out: hHeap=0x12c0000) returned 1 [0162.166] GetProcessHeap () returned 0x12c0000 [0162.166] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cb2080 [0162.166] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0162.166] GetProcessHeap () returned 0x12c0000 [0162.166] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cb2080 | out: hHeap=0x12c0000) returned 1 [0162.166] GetProcessHeap () returned 0x12c0000 [0162.166] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cb2080 [0162.166] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0162.168] GetProcessHeap () returned 0x12c0000 [0162.168] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cb2080 | out: hHeap=0x12c0000) returned 1 [0162.168] GetProcessHeap () returned 0x12c0000 [0162.168] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cb2080 [0162.168] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0162.168] GetProcessHeap () returned 0x12c0000 [0162.168] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc3090 [0162.168] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\en-US\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffd21b, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0162.169] GetProcessHeap () returned 0x12c0000 [0162.169] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc3090 | out: hHeap=0x12c0000) returned 1 [0162.169] GetProcessHeap () returned 0x12c0000 [0162.169] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cb2080 | out: hHeap=0x12c0000) returned 1 [0162.170] GetProcessHeap () returned 0x12c0000 [0162.170] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cb2080 [0162.170] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0162.171] GetProcessHeap () returned 0x12c0000 [0162.171] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc3090 [0162.171] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\en-US\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffd21b, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0162.171] GetProcessHeap () returned 0x12c0000 [0162.171] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc3090 | out: hHeap=0x12c0000) returned 1 [0162.171] GetProcessHeap () returned 0x12c0000 [0162.171] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cb2080 | out: hHeap=0x12c0000) returned 1 [0162.172] GetProcessHeap () returned 0x12c0000 [0162.172] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cb2080 [0162.173] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0162.175] GetProcessHeap () returned 0x12c0000 [0162.175] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cb2080 | out: hHeap=0x12c0000) returned 1 [0162.175] GetProcessHeap () returned 0x12c0000 [0162.175] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cb2080 [0162.175] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VGX\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0162.175] GetProcessHeap () returned 0x12c0000 [0162.175] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cb2080 | out: hHeap=0x12c0000) returned 1 [0162.175] GetProcessHeap () returned 0x12c0000 [0162.175] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cb2080 [0162.175] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0162.175] GetProcessHeap () returned 0x12c0000 [0162.175] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc3090 [0162.175] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aebd53e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffd21b, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0162.177] GetProcessHeap () returned 0x12c0000 [0162.177] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf60c0 [0162.177] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0162.183] GetProcessHeap () returned 0x12c0000 [0162.183] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf60c0 | out: hHeap=0x12c0000) returned 1 [0162.183] GetProcessHeap () returned 0x12c0000 [0162.183] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc3090 | out: hHeap=0x12c0000) returned 1 [0162.184] GetProcessHeap () returned 0x12c0000 [0162.184] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cb2080 | out: hHeap=0x12c0000) returned 1 [0162.184] GetProcessHeap () returned 0x12c0000 [0162.184] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0162.184] GetProcessHeap () returned 0x12c0000 [0162.184] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0162.185] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Services\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0162.185] GetProcessHeap () returned 0x12c0000 [0162.185] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0162.185] GetProcessHeap () returned 0x12c0000 [0162.185] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0162.185] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0162.185] GetProcessHeap () returned 0x12c0000 [0162.185] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cb2080 [0162.186] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0162.186] GetProcessHeap () returned 0x12c0000 [0162.186] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cc3090 [0162.186] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\en-US\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffd21b, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0162.187] GetProcessHeap () returned 0x12c0000 [0162.187] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cc3090 | out: hHeap=0x12c0000) returned 1 [0162.187] GetProcessHeap () returned 0x12c0000 [0162.187] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cb2080 | out: hHeap=0x12c0000) returned 1 [0162.188] GetProcessHeap () returned 0x12c0000 [0162.188] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cb2080 [0162.188] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\en-US\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0162.188] GetProcessHeap () returned 0x12c0000 [0162.188] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cb2080 | out: hHeap=0x12c0000) returned 1 [0162.188] GetProcessHeap () returned 0x12c0000 [0162.188] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cb2080 [0162.188] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0162.372] GetProcessHeap () returned 0x12c0000 [0162.372] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0162.414] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffe415, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0162.414] GetProcessHeap () returned 0x12c0000 [0162.414] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0162.414] GetProcessHeap () returned 0x12c0000 [0162.414] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cb2080 | out: hHeap=0x12c0000) returned 1 [0162.415] GetProcessHeap () returned 0x12c0000 [0162.415] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cb2080 [0162.415] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0162.416] GetProcessHeap () returned 0x12c0000 [0162.416] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0162.416] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffe415, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0162.416] GetProcessHeap () returned 0x12c0000 [0162.416] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0162.416] GetProcessHeap () returned 0x12c0000 [0162.417] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cb2080 | out: hHeap=0x12c0000) returned 1 [0162.417] GetProcessHeap () returned 0x12c0000 [0162.417] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0162.418] GetProcessHeap () returned 0x12c0000 [0162.418] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0162.418] GetProcessHeap () returned 0x12c0000 [0162.418] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cb1078 [0162.419] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4ea7bdb9, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x4ea7bdb9, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0162.419] GetProcessHeap () returned 0x12c0000 [0162.419] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0162.419] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0162.419] GetProcessHeap () returned 0x12c0000 [0162.419] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0162.419] GetProcessHeap () returned 0x12c0000 [0162.420] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0162.420] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\images\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0162.420] GetProcessHeap () returned 0x12c0000 [0162.420] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0162.420] GetProcessHeap () returned 0x12c0000 [0162.420] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0162.420] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\SIGNUP\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0162.420] GetProcessHeap () returned 0x12c0000 [0162.420] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0162.420] GetProcessHeap () returned 0x12c0000 [0162.420] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cb1078 | out: hHeap=0x12c0000) returned 1 [0162.421] GetProcessHeap () returned 0x12c0000 [0162.421] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cb1078 [0162.421] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa235ac5b, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa235ac5b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0162.421] GetProcessHeap () returned 0x12c0000 [0162.421] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0162.422] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0162.422] GetProcessHeap () returned 0x12c0000 [0162.422] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0162.422] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff7e8, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0162.422] GetProcessHeap () returned 0x12c0000 [0162.422] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0162.423] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2891a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff5e7, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0162.423] GetProcessHeap () returned 0x12c0000 [0162.423] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0162.423] GetProcessHeap () returned 0x12c0000 [0162.423] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0162.423] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff5e7, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0162.423] GetProcessHeap () returned 0x12c0000 [0162.423] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0162.423] GetProcessHeap () returned 0x12c0000 [0162.423] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0162.423] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff5e7, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0162.423] GetProcessHeap () returned 0x12c0000 [0162.423] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0162.423] GetProcessHeap () returned 0x12c0000 [0162.423] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0162.424] GetProcessHeap () returned 0x12c0000 [0162.424] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0162.424] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff7e8, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0162.425] GetProcessHeap () returned 0x12c0000 [0162.425] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0162.425] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff5e7, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0162.425] GetProcessHeap () returned 0x12c0000 [0162.425] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0162.425] GetProcessHeap () returned 0x12c0000 [0162.425] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0162.425] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\applet\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff5e7, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0162.425] GetProcessHeap () returned 0x12c0000 [0162.425] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0162.425] GetProcessHeap () returned 0x12c0000 [0162.425] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0162.425] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105e2a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff5e7, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0162.426] GetProcessHeap () returned 0x12c0000 [0162.426] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0162.426] GetProcessHeap () returned 0x12c0000 [0162.426] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0162.426] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff5e7, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0162.426] GetProcessHeap () returned 0x12c0000 [0162.426] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0162.426] GetProcessHeap () returned 0x12c0000 [0162.426] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0162.426] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa11bdb26, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff5e7, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0162.426] GetProcessHeap () returned 0x12c0000 [0162.426] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0162.426] GetProcessHeap () returned 0x12c0000 [0162.426] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0162.426] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa122f229, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff5e7, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0162.426] GetProcessHeap () returned 0x12c0000 [0162.426] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0162.426] GetProcessHeap () returned 0x12c0000 [0162.426] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0162.426] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff5e7, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0162.427] GetProcessHeap () returned 0x12c0000 [0162.427] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d150c8 [0162.427] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0162.427] GetProcessHeap () returned 0x12c0000 [0162.427] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d150c8 | out: hHeap=0x12c0000) returned 1 [0162.427] GetProcessHeap () returned 0x12c0000 [0162.427] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0162.428] GetProcessHeap () returned 0x12c0000 [0162.428] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0162.428] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1295634, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff5e7, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0162.429] GetProcessHeap () returned 0x12c0000 [0162.429] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0162.429] GetProcessHeap () returned 0x12c0000 [0162.429] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0162.429] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff5e7, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0162.429] GetProcessHeap () returned 0x12c0000 [0162.429] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0162.429] GetProcessHeap () returned 0x12c0000 [0162.429] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0162.429] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff5e7, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0162.429] GetProcessHeap () returned 0x12c0000 [0162.429] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0162.430] GetProcessHeap () returned 0x12c0000 [0162.430] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0162.431] GetProcessHeap () returned 0x12c0000 [0162.431] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0162.431] GetProcessHeap () returned 0x12c0000 [0162.431] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cb1078 | out: hHeap=0x12c0000) returned 1 [0162.431] GetProcessHeap () returned 0x12c0000 [0162.431] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cb1078 [0162.432] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf9dfb986, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0162.432] GetProcessHeap () returned 0x12c0000 [0162.432] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0162.432] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0162.433] GetProcessHeap () returned 0x12c0000 [0162.433] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0162.433] GetProcessHeap () returned 0x12c0000 [0162.433] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0162.433] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0162.433] GetProcessHeap () returned 0x12c0000 [0162.433] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0162.433] GetProcessHeap () returned 0x12c0000 [0162.433] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0162.433] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0162.434] GetProcessHeap () returned 0x12c0000 [0162.434] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0162.434] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2ca2e08, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff3fa, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0162.437] GetProcessHeap () returned 0x12c0000 [0162.437] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0162.437] GetProcessHeap () returned 0x12c0000 [0162.437] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0162.437] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xfffff3fa, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0162.437] GetProcessHeap () returned 0x12c0000 [0162.437] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0162.438] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0162.440] GetProcessHeap () returned 0x12c0000 [0162.440] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0162.440] GetProcessHeap () returned 0x12c0000 [0162.440] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0162.440] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0162.441] GetProcessHeap () returned 0x12c0000 [0162.441] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0162.441] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffe015, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0162.442] GetProcessHeap () returned 0x12c0000 [0162.442] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0162.442] GetProcessHeap () returned 0x12c0000 [0162.443] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0162.443] GetProcessHeap () returned 0x12c0000 [0162.443] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0162.443] GetProcessHeap () returned 0x12c0000 [0162.443] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0162.443] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xfffff3fa, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0162.444] GetProcessHeap () returned 0x12c0000 [0162.444] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0162.444] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0162.450] GetProcessHeap () returned 0x12c0000 [0162.450] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0162.450] GetProcessHeap () returned 0x12c0000 [0162.450] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0162.450] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0162.608] GetProcessHeap () returned 0x12c0000 [0162.608] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0162.608] GetProcessHeap () returned 0x12c0000 [0162.608] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0162.608] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0162.610] GetProcessHeap () returned 0x12c0000 [0162.610] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0162.610] GetProcessHeap () returned 0x12c0000 [0162.610] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0162.611] GetProcessHeap () returned 0x12c0000 [0162.611] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0162.612] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Flattener\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114f5747, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114f5747, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xfffff3fa, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0162.614] GetProcessHeap () returned 0x12c0000 [0162.614] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0162.614] GetProcessHeap () returned 0x12c0000 [0162.614] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0162.614] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\fre\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xfffff3fa, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0162.616] GetProcessHeap () returned 0x12c0000 [0162.616] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0162.616] GetProcessHeap () returned 0x12c0000 [0162.616] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0162.616] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Integration\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b2abe77, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b2abe77, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xfffff3fa, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0162.618] GetProcessHeap () returned 0x12c0000 [0162.618] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0162.618] GetProcessHeap () returned 0x12c0000 [0162.618] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0162.618] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Licenses16\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2687c83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee308135, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xfffff3fa, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0162.639] GetProcessHeap () returned 0x12c0000 [0162.639] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0162.639] GetProcessHeap () returned 0x12c0000 [0162.639] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0162.639] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\loc\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee45f66d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x983c2c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xfffff3fa, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0162.640] GetProcessHeap () returned 0x12c0000 [0162.640] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0162.640] GetProcessHeap () returned 0x12c0000 [0162.640] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0162.640] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\mcxml\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xfffff3fa, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0162.640] GetProcessHeap () returned 0x12c0000 [0162.640] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0162.641] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92201bc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3b8c7ea5, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b8c7ea5, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc014, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0162.805] GetProcessHeap () returned 0x12c0000 [0162.805] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0162.806] GetProcessHeap () returned 0x12c0000 [0162.806] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0162.806] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\mcxml\\es-es\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99dfc61, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99dfc61, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99dfc61, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc014, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0162.806] GetProcessHeap () returned 0x12c0000 [0162.806] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0162.806] GetProcessHeap () returned 0x12c0000 [0162.806] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0162.806] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\mcxml\\fr-fr\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99473dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99473dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99473dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc014, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0162.806] GetProcessHeap () returned 0x12c0000 [0162.806] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0162.806] GetProcessHeap () returned 0x12c0000 [0162.806] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0162.806] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1164cbcb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc014, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0162.808] GetProcessHeap () returned 0x12c0000 [0162.808] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0162.808] GetProcessHeap () returned 0x12c0000 [0162.808] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0162.809] GetProcessHeap () returned 0x12c0000 [0162.809] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0162.810] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xfffff3fa, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0162.810] GetProcessHeap () returned 0x12c0000 [0162.810] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0162.811] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x66a98a1b, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x66a98a1b, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc014, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0162.811] GetProcessHeap () returned 0x12c0000 [0162.811] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0162.811] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ac4a8a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ac4a8a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ac4a8a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffde14, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0162.811] GetProcessHeap () returned 0x12c0000 [0162.811] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0162.812] GetProcessHeap () returned 0x12c0000 [0162.812] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0162.812] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1697068, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x99937c0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99937c0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffde14, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0162.813] GetProcessHeap () returned 0x12c0000 [0162.813] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0162.817] GetProcessHeap () returned 0x12c0000 [0162.817] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0162.817] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc7c11d2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffde14, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0162.819] GetProcessHeap () returned 0x12c0000 [0162.819] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0162.819] GetProcessHeap () returned 0x12c0000 [0162.819] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0162.819] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffde14, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0162.822] GetProcessHeap () returned 0x12c0000 [0162.822] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0162.822] GetProcessHeap () returned 0x12c0000 [0162.822] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0162.822] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffde14, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0162.823] GetProcessHeap () returned 0x12c0000 [0162.823] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0162.825] GetProcessHeap () returned 0x12c0000 [0162.825] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0162.826] GetProcessHeap () returned 0x12c0000 [0162.826] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0162.827] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1036\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d440f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d440f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d440f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc014, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0162.828] GetProcessHeap () returned 0x12c0000 [0162.828] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0162.828] GetProcessHeap () returned 0x12c0000 [0162.828] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0162.828] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\3082\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d440f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d440f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d440f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc014, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0162.828] GetProcessHeap () returned 0x12c0000 [0162.828] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0162.828] GetProcessHeap () returned 0x12c0000 [0162.828] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0162.828] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1295fc19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x12985c4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc014, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0162.828] GetProcessHeap () returned 0x12c0000 [0162.828] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0162.828] GetProcessHeap () returned 0x12c0000 [0162.828] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0162.828] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1335b74d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1335b74d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc014, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0162.830] GetProcessHeap () returned 0x12c0000 [0162.830] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0162.830] GetProcessHeap () returned 0x12c0000 [0162.830] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0162.830] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc7c5a96a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133819a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc014, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0162.830] GetProcessHeap () returned 0x12c0000 [0162.830] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0162.830] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd42039, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd42039, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffde14, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0162.831] GetProcessHeap () returned 0x12c0000 [0162.831] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0162.831] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x895576a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x895576a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffffc14, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0162.832] GetProcessHeap () returned 0x12c0000 [0162.832] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0162.832] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ar\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff814, cFileName=".", cAlternateFileName="")) returned 0x13274d0 [0162.834] GetProcessHeap () returned 0x12c0000 [0162.834] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0162.834] GetProcessHeap () returned 0x12c0000 [0162.834] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0162.834] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bg\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf480feb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x18157e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18157e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff814, cFileName=".", cAlternateFileName="")) returned 0x1327210 [0162.836] GetProcessHeap () returned 0x12c0000 [0162.836] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0162.836] GetProcessHeap () returned 0x12c0000 [0162.836] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0162.836] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x61b241f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x61b241f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff814, cFileName=".", cAlternateFileName="")) returned 0x1327390 [0163.077] GetProcessHeap () returned 0x12c0000 [0163.077] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0163.077] GetProcessHeap () returned 0x12c0000 [0163.077] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0163.078] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cs\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf134fca5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ee20e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ee20e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff814, cFileName=".", cAlternateFileName="")) returned 0x1327d50 [0163.079] GetProcessHeap () returned 0x12c0000 [0163.079] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0163.079] GetProcessHeap () returned 0x12c0000 [0163.079] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0163.079] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\da\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c164a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6866e01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6866e01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff814, cFileName=".", cAlternateFileName="")) returned 0x1327e10 [0163.088] GetProcessHeap () returned 0x12c0000 [0163.088] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0163.088] GetProcessHeap () returned 0x12c0000 [0163.088] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0163.088] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\de\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff814, cFileName=".", cAlternateFileName="")) returned 0x1327c10 [0163.090] GetProcessHeap () returned 0x12c0000 [0163.090] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0163.090] GetProcessHeap () returned 0x12c0000 [0163.090] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0163.090] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\el\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff814, cFileName=".", cAlternateFileName="")) returned 0x13279d0 [0163.092] GetProcessHeap () returned 0x12c0000 [0163.092] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0163.092] GetProcessHeap () returned 0x12c0000 [0163.092] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0163.092] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\es\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff814, cFileName=".", cAlternateFileName="")) returned 0x1327f10 [0163.094] GetProcessHeap () returned 0x12c0000 [0163.094] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0163.094] GetProcessHeap () returned 0x12c0000 [0163.094] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0163.094] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\et\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8719376, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8719376, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff814, cFileName=".", cAlternateFileName="")) returned 0x1327510 [0163.096] GetProcessHeap () returned 0x12c0000 [0163.096] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0163.096] GetProcessHeap () returned 0x12c0000 [0163.096] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0163.096] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\eu\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x69980f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69980f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff814, cFileName=".", cAlternateFileName="")) returned 0x1327690 [0163.104] GetProcessHeap () returned 0x12c0000 [0163.104] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0163.104] GetProcessHeap () returned 0x12c0000 [0163.104] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0163.104] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fi\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6bae279, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bae279, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff814, cFileName=".", cAlternateFileName="")) returned 0x13272d0 [0163.106] GetProcessHeap () returned 0x12c0000 [0163.106] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0163.106] GetProcessHeap () returned 0x12c0000 [0163.106] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0163.106] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fr\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff814, cFileName=".", cAlternateFileName="")) returned 0x1328d98 [0163.108] GetProcessHeap () returned 0x12c0000 [0163.108] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0163.108] GetProcessHeap () returned 0x12c0000 [0163.108] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0163.108] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gl\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e0a643, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x675bda6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x675bda6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff814, cFileName=".", cAlternateFileName="")) returned 0x1328c18 [0163.110] GetProcessHeap () returned 0x12c0000 [0163.110] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0163.110] GetProcessHeap () returned 0x12c0000 [0163.110] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0163.110] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\he\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c8cf9c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff814, cFileName=".", cAlternateFileName="")) returned 0x1328fd8 [0163.328] GetProcessHeap () returned 0x12c0000 [0163.328] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0163.329] GetProcessHeap () returned 0x12c0000 [0163.329] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0163.329] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hi\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf43e3cb7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff814, cFileName=".", cAlternateFileName="")) returned 0x1328f18 [0163.331] GetProcessHeap () returned 0x12c0000 [0163.331] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0163.331] GetProcessHeap () returned 0x12c0000 [0163.331] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0163.331] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hr\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff814, cFileName=".", cAlternateFileName="")) returned 0x1328dd8 [0163.333] GetProcessHeap () returned 0x12c0000 [0163.333] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0163.333] GetProcessHeap () returned 0x12c0000 [0163.333] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0163.333] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hu\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ebbef3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ebbef3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff814, cFileName=".", cAlternateFileName="")) returned 0x1328198 [0163.336] GetProcessHeap () returned 0x12c0000 [0163.336] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0163.336] GetProcessHeap () returned 0x12c0000 [0163.336] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0163.336] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\id\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc43098a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc43098a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff814, cFileName=".", cAlternateFileName="")) returned 0x1328498 [0163.338] GetProcessHeap () returned 0x12c0000 [0163.338] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0163.338] GetProcessHeap () returned 0x12c0000 [0163.338] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0163.338] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\it\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa89f599, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6270fd0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6270fd0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff814, cFileName=".", cAlternateFileName="")) returned 0x13283d8 [0163.341] GetProcessHeap () returned 0x12c0000 [0163.341] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0163.341] GetProcessHeap () returned 0x12c0000 [0163.341] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0163.341] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ja\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x91adba5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x91adba5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff814, cFileName=".", cAlternateFileName="")) returned 0x1328a98 [0163.342] GetProcessHeap () returned 0x12c0000 [0163.342] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0163.342] GetProcessHeap () returned 0x12c0000 [0163.343] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0163.343] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kk\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd09866, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6d2b978, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d2b978, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff814, cFileName=".", cAlternateFileName="")) returned 0x1328f58 [0163.344] GetProcessHeap () returned 0x12c0000 [0163.344] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0163.344] GetProcessHeap () returned 0x12c0000 [0163.344] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0163.344] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ko\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12b7378, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x5101cbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff814, cFileName=".", cAlternateFileName="")) returned 0x1328498 [0163.346] GetProcessHeap () returned 0x12c0000 [0163.346] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0163.346] GetProcessHeap () returned 0x12c0000 [0163.346] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0163.346] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lt\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6bad1cb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x22f6470, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff814, cFileName=".", cAlternateFileName="")) returned 0x13284d8 [0163.349] GetProcessHeap () returned 0x12c0000 [0163.349] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0163.349] GetProcessHeap () returned 0x12c0000 [0163.349] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0163.349] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lv\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x59f29de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59f29de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff814, cFileName=".", cAlternateFileName="")) returned 0x1328f58 [0163.351] GetProcessHeap () returned 0x12c0000 [0163.351] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0163.351] GetProcessHeap () returned 0x12c0000 [0163.351] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0163.351] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ms\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff814, cFileName=".", cAlternateFileName="")) returned 0x13289d8 [0163.353] GetProcessHeap () returned 0x12c0000 [0163.353] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0163.353] GetProcessHeap () returned 0x12c0000 [0163.353] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0163.353] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nl\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0822be8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff814, cFileName=".", cAlternateFileName="")) returned 0x1328718 [0163.355] GetProcessHeap () returned 0x12c0000 [0163.355] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0163.355] GetProcessHeap () returned 0x12c0000 [0163.355] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0163.355] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\no\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4409f1c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8680a1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff814, cFileName=".", cAlternateFileName="")) returned 0x1328518 [0163.357] GetProcessHeap () returned 0x12c0000 [0163.357] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0163.357] GetProcessHeap () returned 0x12c0000 [0163.357] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0163.357] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pl\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf854e731, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff814, cFileName=".", cAlternateFileName="")) returned 0x13288d8 [0163.358] GetProcessHeap () returned 0x12c0000 [0163.358] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0163.358] GetProcessHeap () returned 0x12c0000 [0163.358] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0163.358] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-BR\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf755cb7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6bfa6d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bfa6d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff814, cFileName=".", cAlternateFileName="")) returned 0x13282d8 [0163.360] GetProcessHeap () returned 0x12c0000 [0163.360] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0163.360] GetProcessHeap () returned 0x12c0000 [0163.360] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0163.360] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-pt\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff814, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0163.844] GetProcessHeap () returned 0x12c0000 [0163.844] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0163.845] GetProcessHeap () returned 0x12c0000 [0163.845] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0163.845] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ro\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff814, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0163.847] GetProcessHeap () returned 0x12c0000 [0163.847] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0163.847] GetProcessHeap () returned 0x12c0000 [0163.847] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0163.847] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ru\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf13037fa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf71003, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf71003, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff814, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0163.848] GetProcessHeap () returned 0x12c0000 [0163.848] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0163.848] GetProcessHeap () returned 0x12c0000 [0163.849] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0163.849] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sk\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff814, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0163.850] GetProcessHeap () returned 0x12c0000 [0163.850] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0163.850] GetProcessHeap () returned 0x12c0000 [0163.850] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0163.850] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sl\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff814, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0163.852] GetProcessHeap () returned 0x12c0000 [0163.852] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0163.852] GetProcessHeap () returned 0x12c0000 [0163.853] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0163.853] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf05741b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x4cd5a2f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4cd5a2f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff814, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0163.854] GetProcessHeap () returned 0x12c0000 [0163.854] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0163.854] GetProcessHeap () returned 0x12c0000 [0163.854] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0163.854] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6aee686, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6d05722, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d05722, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff814, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0163.856] GetProcessHeap () returned 0x12c0000 [0163.856] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0163.856] GetProcessHeap () returned 0x12c0000 [0163.856] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0163.856] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn-CS\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff814, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0163.857] GetProcessHeap () returned 0x12c0000 [0163.857] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0163.858] GetProcessHeap () returned 0x12c0000 [0163.858] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0163.858] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sv\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa25d2ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x670f8d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x670f8d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff814, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0163.859] GetProcessHeap () returned 0x12c0000 [0163.859] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0163.859] GetProcessHeap () returned 0x12c0000 [0163.859] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0163.859] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\th\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1860d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff814, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0163.861] GetProcessHeap () returned 0x12c0000 [0163.861] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0163.861] GetProcessHeap () returned 0x12c0000 [0163.861] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0163.861] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tr\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x453c2a7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x453c2a7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff814, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0163.862] GetProcessHeap () returned 0x12c0000 [0163.862] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0163.862] GetProcessHeap () returned 0x12c0000 [0163.863] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0163.863] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uk\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x37f90ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37f90ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff814, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0163.864] GetProcessHeap () returned 0x12c0000 [0163.864] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0163.864] GetProcessHeap () returned 0x12c0000 [0163.864] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0163.864] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\vi\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4692737, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x4abf9f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4abf9f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff814, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0163.866] GetProcessHeap () returned 0x12c0000 [0163.866] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0163.866] GetProcessHeap () returned 0x12c0000 [0163.866] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0163.866] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANS\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e56af1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x680214, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x680214, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff814, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0163.869] GetProcessHeap () returned 0x12c0000 [0163.869] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0163.869] GetProcessHeap () returned 0x12c0000 [0163.869] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0163.869] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANT\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00af60a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5581c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa5581c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff814, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0163.871] GetProcessHeap () returned 0x12c0000 [0163.871] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0163.871] GetProcessHeap () returned 0x12c0000 [0163.871] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0163.872] GetProcessHeap () returned 0x12c0000 [0163.872] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0163.873] GetProcessHeap () returned 0x12c0000 [0163.873] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0163.873] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power Map Excel Add-in\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf016e209, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffde14, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0163.874] GetProcessHeap () returned 0x12c0000 [0163.874] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0163.874] GetProcessHeap () returned 0x12c0000 [0163.874] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0163.875] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffde14, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0163.875] GetProcessHeap () returned 0x12c0000 [0163.875] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0163.875] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ar\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0163.876] GetProcessHeap () returned 0x12c0000 [0163.876] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0163.876] GetProcessHeap () returned 0x12c0000 [0163.876] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0163.876] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\bg\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133819a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0163.878] GetProcessHeap () returned 0x12c0000 [0163.878] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0163.878] GetProcessHeap () returned 0x12c0000 [0163.878] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0163.878] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ca\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42d8c51, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0164.094] GetProcessHeap () returned 0x12c0000 [0164.094] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.094] GetProcessHeap () returned 0x12c0000 [0164.094] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.094] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\cs\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9a9d821, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0164.096] GetProcessHeap () returned 0x12c0000 [0164.096] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.096] GetProcessHeap () returned 0x12c0000 [0164.096] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.096] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a6473, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0164.097] GetProcessHeap () returned 0x12c0000 [0164.098] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.098] GetProcessHeap () returned 0x12c0000 [0164.098] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.098] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\de\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0164.100] GetProcessHeap () returned 0x12c0000 [0164.100] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.100] GetProcessHeap () returned 0x12c0000 [0164.100] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.100] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\el\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf46b8986, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0164.102] GetProcessHeap () returned 0x12c0000 [0164.102] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.102] GetProcessHeap () returned 0x12c0000 [0164.102] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.102] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\es\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7582db3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0164.104] GetProcessHeap () returned 0x12c0000 [0164.104] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.104] GetProcessHeap () returned 0x12c0000 [0164.104] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.104] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b0f72e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0164.106] GetProcessHeap () returned 0x12c0000 [0164.106] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.106] GetProcessHeap () returned 0x12c0000 [0164.106] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.106] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\eu\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6d2a978, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0164.107] GetProcessHeap () returned 0x12c0000 [0164.107] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.107] GetProcessHeap () returned 0x12c0000 [0164.107] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.107] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fi\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x138defa8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x138defa8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0164.109] GetProcessHeap () returned 0x12c0000 [0164.109] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.109] GetProcessHeap () returned 0x12c0000 [0164.109] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.109] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fr\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0164.111] GetProcessHeap () returned 0x12c0000 [0164.111] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.111] GetProcessHeap () returned 0x12c0000 [0164.111] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.111] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\gl\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ac3a61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13aced2b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13aced2b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0164.112] GetProcessHeap () returned 0x12c0000 [0164.112] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.112] GetProcessHeap () returned 0x12c0000 [0164.112] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.112] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\he\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a98712, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13a8299e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13a8299e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0164.114] GetProcessHeap () returned 0x12c0000 [0164.114] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.114] GetProcessHeap () returned 0x12c0000 [0164.114] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.114] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hi\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa806c3d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1428e945, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1428e945, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0164.117] GetProcessHeap () returned 0x12c0000 [0164.117] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.117] GetProcessHeap () returned 0x12c0000 [0164.117] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.117] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hr\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13b67741, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13b67741, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0164.119] GetProcessHeap () returned 0x12c0000 [0164.119] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.119] GetProcessHeap () returned 0x12c0000 [0164.119] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.119] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6164f96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14648313, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14648313, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0164.120] GetProcessHeap () returned 0x12c0000 [0164.120] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.120] GetProcessHeap () returned 0x12c0000 [0164.120] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.120] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\id\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1434d390, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1434d390, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0164.122] GetProcessHeap () returned 0x12c0000 [0164.122] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.122] GetProcessHeap () returned 0x12c0000 [0164.122] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.122] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\it\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf964b3dd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14969496, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14969496, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0164.124] GetProcessHeap () returned 0x12c0000 [0164.124] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.124] GetProcessHeap () returned 0x12c0000 [0164.124] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.124] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ja\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf15d84bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x146e0bdc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x146e0bdc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0164.125] GetProcessHeap () returned 0x12c0000 [0164.125] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.125] GetProcessHeap () returned 0x12c0000 [0164.125] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.125] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\kk\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfae6f174, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14b330aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14b330aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0164.129] GetProcessHeap () returned 0x12c0000 [0164.129] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.129] GetProcessHeap () returned 0x12c0000 [0164.129] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.129] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ko\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14ac0994, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14ac0994, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0164.452] GetProcessHeap () returned 0x12c0000 [0164.452] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.452] GetProcessHeap () returned 0x12c0000 [0164.452] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.452] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lt\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7b529d9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x152a6704, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x152a6704, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0164.455] GetProcessHeap () returned 0x12c0000 [0164.455] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.455] GetProcessHeap () returned 0x12c0000 [0164.455] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.455] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lv\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf035e09d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0164.457] GetProcessHeap () returned 0x12c0000 [0164.457] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.457] GetProcessHeap () returned 0x12c0000 [0164.457] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.457] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ms\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42fef17, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15ab259c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ab259c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0164.459] GetProcessHeap () returned 0x12c0000 [0164.459] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.459] GetProcessHeap () returned 0x12c0000 [0164.459] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.459] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\nl\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x718b80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15a3fea8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15a3fea8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0164.462] GetProcessHeap () returned 0x12c0000 [0164.462] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.462] GetProcessHeap () returned 0x12c0000 [0164.462] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.462] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\no\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15b71118, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b71118, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0164.465] GetProcessHeap () returned 0x12c0000 [0164.465] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.465] GetProcessHeap () returned 0x12c0000 [0164.465] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.465] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pl\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf44c8b33, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15b24c93, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b24c93, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0164.468] GetProcessHeap () returned 0x12c0000 [0164.468] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.468] GetProcessHeap () returned 0x12c0000 [0164.468] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.468] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15bbd5ad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15bbd5ad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0164.471] GetProcessHeap () returned 0x12c0000 [0164.471] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.471] GetProcessHeap () returned 0x12c0000 [0164.471] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.471] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt-PT\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf475131d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15be380c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15be380c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0164.473] GetProcessHeap () returned 0x12c0000 [0164.473] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.473] GetProcessHeap () returned 0x12c0000 [0164.473] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.474] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ro\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6ac83cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15d3adab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d3adab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0164.475] GetProcessHeap () returned 0x12c0000 [0164.475] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.475] GetProcessHeap () returned 0x12c0000 [0164.476] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.476] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ru\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe00baf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15d14b21, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d14b21, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0164.477] GetProcessHeap () returned 0x12c0000 [0164.477] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.478] GetProcessHeap () returned 0x12c0000 [0164.478] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.478] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sk\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6c6bda4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15e92299, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e92299, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0164.480] GetProcessHeap () returned 0x12c0000 [0164.480] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.480] GetProcessHeap () returned 0x12c0000 [0164.480] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.480] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sl\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b359a5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15e45dad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e45dad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0164.482] GetProcessHeap () returned 0x12c0000 [0164.482] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.482] GetProcessHeap () returned 0x12c0000 [0164.482] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.482] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-cyrl\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15f04999, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15f04999, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0164.484] GetProcessHeap () returned 0x12c0000 [0164.484] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.484] GetProcessHeap () returned 0x12c0000 [0164.484] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.484] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-latn\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa879350, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x160a83ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x160a83ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0164.486] GetProcessHeap () returned 0x12c0000 [0164.486] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.486] GetProcessHeap () returned 0x12c0000 [0164.486] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.486] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-Latn-CS\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf45f9db0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15ede724, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ede724, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0164.488] GetProcessHeap () returned 0x12c0000 [0164.488] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.488] GetProcessHeap () returned 0x12c0000 [0164.488] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.488] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sv\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16035c5a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16035c5a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0164.490] GetProcessHeap () returned 0x12c0000 [0164.490] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.490] GetProcessHeap () returned 0x12c0000 [0164.490] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.490] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\th\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c66c57, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16166f59, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16166f59, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0164.705] GetProcessHeap () returned 0x12c0000 [0164.705] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.705] GetProcessHeap () returned 0x12c0000 [0164.705] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.705] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16140cde, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16140cde, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0164.707] GetProcessHeap () returned 0x12c0000 [0164.707] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.707] GetProcessHeap () returned 0x12c0000 [0164.707] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.707] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\uk\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7b9ee02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x161d962a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0164.709] GetProcessHeap () returned 0x12c0000 [0164.709] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.709] GetProcessHeap () returned 0x12c0000 [0164.709] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.709] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\vi\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf637b042, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x161d962a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0164.711] GetProcessHeap () returned 0x12c0000 [0164.711] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.711] GetProcessHeap () returned 0x12c0000 [0164.711] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.711] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHS\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4c15e5f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x163ef7bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x163ef7bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0164.713] GetProcessHeap () returned 0x12c0000 [0164.713] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.713] GetProcessHeap () returned 0x12c0000 [0164.713] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.713] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x164159c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x164159c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0164.715] GetProcessHeap () returned 0x12c0000 [0164.715] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.715] GetProcessHeap () returned 0x12c0000 [0164.715] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0164.716] GetProcessHeap () returned 0x12c0000 [0164.716] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0164.717] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffde14, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0164.717] GetProcessHeap () returned 0x12c0000 [0164.717] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.717] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x163ef7bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x163ef7bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0164.720] GetProcessHeap () returned 0x12c0000 [0164.720] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.720] GetProcessHeap () returned 0x12c0000 [0164.720] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.720] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x165b9401, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x165b9401, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0164.722] GetProcessHeap () returned 0x12c0000 [0164.722] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.722] GetProcessHeap () returned 0x12c0000 [0164.722] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.722] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16605845, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16605845, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0164.723] GetProcessHeap () returned 0x12c0000 [0164.723] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.723] GetProcessHeap () returned 0x12c0000 [0164.723] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.724] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x164ae360, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0164.725] GetProcessHeap () returned 0x12c0000 [0164.725] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.725] GetProcessHeap () returned 0x12c0000 [0164.725] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.725] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16651cf9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16651cf9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0164.727] GetProcessHeap () returned 0x12c0000 [0164.727] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.727] GetProcessHeap () returned 0x12c0000 [0164.727] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.727] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf10a1263, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1662bb01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1662bb01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0164.728] GetProcessHeap () returned 0x12c0000 [0164.728] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.728] GetProcessHeap () returned 0x12c0000 [0164.728] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.728] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0164.730] GetProcessHeap () returned 0x12c0000 [0164.730] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.730] GetProcessHeap () returned 0x12c0000 [0164.730] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.730] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff580e7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0164.732] GetProcessHeap () returned 0x12c0000 [0164.732] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.732] GetProcessHeap () returned 0x12c0000 [0164.732] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.732] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0164.732] GetProcessHeap () returned 0x12c0000 [0164.732] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.732] GetProcessHeap () returned 0x12c0000 [0164.732] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.732] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0164.734] GetProcessHeap () returned 0x12c0000 [0164.734] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.734] GetProcessHeap () returned 0x12c0000 [0164.734] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.734] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1480f75, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0164.736] GetProcessHeap () returned 0x12c0000 [0164.736] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.736] GetProcessHeap () returned 0x12c0000 [0164.736] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.736] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0194432, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0164.873] GetProcessHeap () returned 0x12c0000 [0164.873] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.873] GetProcessHeap () returned 0x12c0000 [0164.873] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.873] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0164.875] GetProcessHeap () returned 0x12c0000 [0164.875] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.875] GetProcessHeap () returned 0x12c0000 [0164.875] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.875] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf458770a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0164.876] GetProcessHeap () returned 0x12c0000 [0164.876] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.876] GetProcessHeap () returned 0x12c0000 [0164.876] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.876] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf05741b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0164.878] GetProcessHeap () returned 0x12c0000 [0164.878] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.878] GetProcessHeap () returned 0x12c0000 [0164.878] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.878] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0164.880] GetProcessHeap () returned 0x12c0000 [0164.880] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.880] GetProcessHeap () returned 0x12c0000 [0164.880] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.880] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0164.882] GetProcessHeap () returned 0x12c0000 [0164.882] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.882] GetProcessHeap () returned 0x12c0000 [0164.882] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.882] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0f23aa6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0164.883] GetProcessHeap () returned 0x12c0000 [0164.883] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.883] GetProcessHeap () returned 0x12c0000 [0164.883] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.883] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe4d066, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0164.885] GetProcessHeap () returned 0x12c0000 [0164.885] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.885] GetProcessHeap () returned 0x12c0000 [0164.885] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.885] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf158c060, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0164.887] GetProcessHeap () returned 0x12c0000 [0164.887] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.887] GetProcessHeap () returned 0x12c0000 [0164.887] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.887] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1bce2f5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0164.888] GetProcessHeap () returned 0x12c0000 [0164.888] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.888] GetProcessHeap () returned 0x12c0000 [0164.888] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.888] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0164.890] GetProcessHeap () returned 0x12c0000 [0164.890] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.890] GetProcessHeap () returned 0x12c0000 [0164.890] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.890] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0164.892] GetProcessHeap () returned 0x12c0000 [0164.892] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.892] GetProcessHeap () returned 0x12c0000 [0164.892] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.892] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ko\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe4d066, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0164.905] GetProcessHeap () returned 0x12c0000 [0164.905] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.905] GetProcessHeap () returned 0x12c0000 [0164.905] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.905] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lt\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0164.906] GetProcessHeap () returned 0x12c0000 [0164.907] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.907] GetProcessHeap () returned 0x12c0000 [0164.907] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.907] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lv\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf10a1263, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0164.908] GetProcessHeap () returned 0x12c0000 [0164.908] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.908] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf632eb9d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf632eb9d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf632eb9d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x164c0, dwReserved0=0x0, dwReserved1=0xffffde14, cFileName="MDXQueryGenerator.DLL", cAlternateFileName="MDXQUE~1.DLL")) returned 1 [0164.908] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d50bdc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d50bdc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6d50bdc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14640, dwReserved0=0x0, dwReserved1=0xffffde14, cFileName="Microsoft.AnalysisServices.AdomdClientUI.dll", cAlternateFileName="MIF69D~1.DLL")) returned 1 [0164.909] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1697068, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1697068, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf16bd2da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17bc90, dwReserved0=0x0, dwReserved1=0xffffde14, cFileName="Microsoft.AnalysisServices.Common.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0164.909] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d9d08d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d9d08d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf755cb7d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x69040, dwReserved0=0x0, dwReserved1=0xffffde14, cFileName="Microsoft.AnalysisServices.Common.Wizard.dll", cAlternateFileName="MI6388~1.DLL")) returned 1 [0164.909] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffddb96c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffddb96c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffddb96c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1af090, dwReserved0=0x0, dwReserved1=0xffffde14, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.dll", cAlternateFileName="MI8069~1.DLL")) returned 1 [0164.909] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x60f38e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60f38e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c240, dwReserved0=0x0, dwReserved1=0xffffde14, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.XmlSerializers.dll", cAlternateFileName="MI37F3~1.DLL")) returned 1 [0164.909] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf18d33e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf18d33e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf18d33e2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x664698, dwReserved0=0x0, dwReserved1=0xffffde14, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0164.909] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x520cca6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x520cca6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5612cee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a840, dwReserved0=0x0, dwReserved1=0xffffde14, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.XmlSerializers.dll", cAlternateFileName="MI3E9C~1.DLL")) returned 1 [0164.909] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x823be8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x823be8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a13a8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x100c30, dwReserved0=0x0, dwReserved1=0xffffde14, cFileName="Microsoft.AnalysisServices.Layout.dll", cAlternateFileName="MIA386~1.DLL")) returned 1 [0164.909] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0df27d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d78c8, dwReserved0=0x0, dwReserved1=0xffffde14, cFileName="Microsoft.AnalysisServices.Modeler.UI.rll", cAlternateFileName="MICROS~1.RLL")) returned 1 [0164.909] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6cc6b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6cc6b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6cc6b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x78c0, dwReserved0=0x0, dwReserved1=0xffffde14, cFileName="Microsoft.AnalysisServices.SPClient.Interfaces.DLL", cAlternateFileName="MI4938~1.DLL")) returned 1 [0164.909] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4bc999b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4bc999b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4bc999b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4c630, dwReserved0=0x0, dwReserved1=0xffffde14, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.dll", cAlternateFileName="MI0653~1.DLL")) returned 1 [0164.909] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61d7668, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61d7668, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61d7668, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6640, dwReserved0=0x0, dwReserved1=0xffffde14, cFileName="Microsoft.Dallas.OAuthClient.dll", cAlternateFileName="MIF98A~1.DLL")) returned 1 [0164.909] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfae48f06, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfae48f06, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfae48f06, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x62068, dwReserved0=0x0, dwReserved1=0xffffde14, cFileName="Microsoft.Data.ConnectionUI.Dialog.dll", cAlternateFileName="MI3A9E~1.DLL")) returned 1 [0164.910] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3858, dwReserved0=0x0, dwReserved1=0xffffde14, cFileName="Microsoft.Data.ConnectionUI.dll", cAlternateFileName="MI58F6~1.DLL")) returned 1 [0164.910] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4cd5a2f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4cd5a2f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4cfbc75, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe6098, dwReserved0=0x0, dwReserved1=0xffffde14, cFileName="Microsoft.Data.Recommendation.Client.Core.dll", cAlternateFileName="MIC655~1.DLL")) returned 1 [0164.910] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffdb5707, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffdb5707, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffdb5707, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeca8, dwReserved0=0x0, dwReserved1=0xffffde14, cFileName="Microsoft.Data.Recommendation.Client.Picasso.dll", cAlternateFileName="MI021B~1.DLL")) returned 1 [0164.910] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6dea551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6dea551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6dea551, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5840, dwReserved0=0x0, dwReserved1=0xffffde14, cFileName="Microsoft.Data.Recommendation.Client.Picasso.Sampler.dll", cAlternateFileName="MI7F2A~1.DLL")) returned 1 [0164.910] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5ad77c9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5ad77c9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5eb74f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22ec8, dwReserved0=0x0, dwReserved1=0xffffde14, cFileName="Microsoft.Data.Recommendation.Common.dll", cAlternateFileName="MI37D9~1.DLL")) returned 1 [0164.910] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa5ca8ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5ca8ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa806c3d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x146ec0, dwReserved0=0x0, dwReserved1=0xffffde14, cFileName="Microsoft.DataWarehouse.DLL", cAlternateFileName="MIA28E~1.DLL")) returned 1 [0164.910] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf00d5872, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00d5872, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9cc0, dwReserved0=0x0, dwReserved1=0xffffde14, cFileName="Microsoft.DataWarehouse.Interfaces.DLL", cAlternateFileName="MICROS~1.DLL")) returned 1 [0164.910] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c88562, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4c88562, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4cd4a32, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x18e058, dwReserved0=0x0, dwReserved1=0xffffde14, cFileName="Microsoft.Office.Interop.Excel.dll", cAlternateFileName="MIDE30~1.DLL")) returned 1 [0164.910] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4caf7cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4caf7cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4caf7cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb4ec0, dwReserved0=0x0, dwReserved1=0xffffde14, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.dll", cAlternateFileName="MI2EE4~1.DLL")) returned 1 [0164.910] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167cf4d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfd4, dwReserved0=0x0, dwReserved1=0xffffde14, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.tlb", cAlternateFileName="MICROS~1.TLB")) returned 1 [0164.910] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b61d36, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30878, dwReserved0=0x0, dwReserved1=0xffffde14, cFileName="Microsoft.ReportingServices.DataExtensions.dll", cAlternateFileName="MI8157~1.DLL")) returned 1 [0164.910] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf18f9628, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf18f9628, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1726c0, dwReserved0=0x0, dwReserved1=0xffffde14, cFileName="Microsoft.ReportingServices.Diagnostics.dll", cAlternateFileName="MIBCC9~1.DLL")) returned 1 [0164.910] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x91d3da7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x91d3da7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x97efe5f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfc60, dwReserved0=0x0, dwReserved1=0xffffde14, cFileName="Microsoft.ReportingServices.Interfaces.dll", cAlternateFileName="MI2DB2~1.DLL")) returned 1 [0164.910] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992fb3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992fb3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2283d0f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x886d8, dwReserved0=0x0, dwReserved1=0xffffde14, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.dll", cAlternateFileName="MIB40B~1.DLL")) returned 1 [0164.910] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf19b820e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf19b820e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf19b820e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1faa68, dwReserved0=0x0, dwReserved1=0xffffde14, cFileName="Microsoft.ReportingServices.QueryDesigners.dll", cAlternateFileName="MIC718~1.DLL")) returned 1 [0164.911] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0194432, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0194432, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0194432, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x36468, dwReserved0=0x0, dwReserved1=0xffffde14, cFileName="Microsoft.ReportingServices.ReportDesign.Common.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0164.911] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6bfa6d9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6bfa6d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bfa6d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15868, dwReserved0=0x0, dwReserved1=0xffffde14, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.dll", cAlternateFileName="MIBACB~1.DLL")) returned 1 [0164.911] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc0c33db, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc0c33db, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x47078, dwReserved0=0x0, dwReserved1=0xffffde14, cFileName="Microsoft.ReportingServices.RsClient.dll", cAlternateFileName="MI319B~1.DLL")) returned 1 [0164.911] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4561444, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4561444, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x85f4c0, dwReserved0=0x0, dwReserved1=0xffffde14, cFileName="Microsoft.reportviewer.common.dll", cAlternateFileName="MI70D9~1.DLL")) returned 1 [0164.911] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa4995f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa4995f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa531f86, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x872c8, dwReserved0=0x0, dwReserved1=0xffffde14, cFileName="Microsoft.reportviewer.winforms.dll", cAlternateFileName="MI925C~1.DLL")) returned 1 [0164.911] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6165f55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6165f55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6460, dwReserved0=0x0, dwReserved1=0xffffde14, cFileName="Microsoft.SqlServer.Configuration.SString.dll", cAlternateFileName="MIB00C~1.DLL")) returned 1 [0164.911] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4409f1c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4409f1c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf443017d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5e2c8, dwReserved0=0x0, dwReserved1=0xffffde14, cFileName="Microsoft.SqlServer.Types.dll", cAlternateFileName="MI4FF6~1.DLL")) returned 1 [0164.911] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffde14, cFileName="ms", cAlternateFileName="")) returned 1 [0164.911] GetProcessHeap () returned 0x12c0000 [0164.911] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.911] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ms\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0164.912] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.912] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167cf4d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1050, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0164.912] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x60f38e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60f38e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0164.912] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffd6924a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd6924a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffd6924a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x38ad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0164.912] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7d7750, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7d7750, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7d7750, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0164.912] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x618c1b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x618c1b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x618c1b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fe030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0164.913] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf37f804b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf37f804b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf3b3f424, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3038, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0164.913] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e7d566, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e7d566, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1ca90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1 [0164.913] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6c6bda4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6c6bda4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c6bda4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1 [0164.913] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5a8a2df, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a8a2df, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a8a2df, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4c050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0164.913] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfaebb622, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaebb622, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaebb622, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x47068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1 [0164.913] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb67b102, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb67b102, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb6c7584, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5478, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0164.913] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1de43d5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1de43d5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0164.913] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4c63313, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4c63313, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4c895d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a090, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0164.913] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffddb96c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffddb96c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffddb96c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x71080, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1 [0164.913] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4cd4a32, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4cd4a32, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4cd4a32, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0164.913] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc70564d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc70564d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc70564d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1 [0164.913] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf63ed72c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf63ed72c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6a7bf80, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0164.913] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x59b433, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x59b433, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5c164a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0164.913] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0089415, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0089415, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e68, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0164.913] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0089415, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0089415, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e68, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0 [0164.914] FindClose (in: hFindFile=0x12d92c8 | out: hFindFile=0x12d92c8) returned 1 [0164.914] GetProcessHeap () returned 0x12c0000 [0164.914] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.914] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03d07a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167f56e9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffde14, cFileName="nl", cAlternateFileName="")) returned 1 [0164.914] GetProcessHeap () returned 0x12c0000 [0164.914] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.914] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\nl\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03d07a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167f56e9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0164.915] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03d07a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167f56e9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.915] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167f56e9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167f56e9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x114b, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0164.915] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x718b80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x718b80, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x718b80, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd048, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0164.915] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5127e7d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5127e7d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5127e7d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0164.916] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1480f75, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1480f75, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf158c060, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0164.916] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa879350, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa879350, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1fea98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0164.916] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc0c33db, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc0c33db, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc0e95c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0164.916] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf03d07a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf03d07a0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf03d07a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1d038, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0164.916] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56853a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1 [0164.916] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a0a7fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a0a7fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a30a43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4bab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0164.916] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0da6398, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0da6398, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0dcc568, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x47ae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0164.916] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ac3289, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ac3289, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8088, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0164.916] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6c46ba0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c46ba0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c46ba0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1 [0164.916] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffdb5707, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffdb5707, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffddb96c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19ae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0164.916] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4a98712, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4a98712, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4abe91a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x71070, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1 [0164.916] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x67f4711, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67f4711, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6840bbc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1 [0164.916] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x238ed8d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x238ed8d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2984c3b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1 [0164.916] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x36c7dee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0164.916] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x68b32cb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68b32cb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x68b32cb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0164.917] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x863456d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0164.917] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x863456d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0 [0164.917] FindClose (in: hFindFile=0x12d92c8 | out: hFindFile=0x12d92c8) returned 1 [0164.917] GetProcessHeap () returned 0x12c0000 [0164.917] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.917] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf45d3b76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffde14, cFileName="no", cAlternateFileName="")) returned 1 [0164.917] GetProcessHeap () returned 0x12c0000 [0164.918] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.918] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\no\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf45d3b76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0164.918] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf45d3b76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.919] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167cf4d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x110c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0164.919] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x381f2dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x381f2dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xca90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0164.919] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x51c07e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x51c07e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x51c07e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0164.919] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6dea551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6dea551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6dea551, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0164.919] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffddb96c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffddb96c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffddb96c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1fe030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0164.919] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffd6924a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd6924a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffd6924a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0164.919] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x863456d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ba90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1 [0164.919] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8680a1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x8680a1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1 [0164.919] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x22a9f7a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22a9f7a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22a9f7a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0164.919] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b15891, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b15891, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b15891, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1 [0164.919] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18157e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18157e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18157e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0164.919] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb654e78, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb654e78, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb67b102, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0164.919] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6cc6b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6cc6b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6cc6b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19af0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0164.919] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x605aed7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x605aed7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6081126, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1 [0164.920] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6735b3a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6735b3a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6735b3a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1 [0164.920] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8719376, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x8719376, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8719376, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1 [0164.920] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf854e731, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf854e731, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9a04f26, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x38e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0164.920] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45d3b76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf45d3b76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf45f9db0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9ad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0164.920] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e7d566, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e7d566, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e7d566, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0164.920] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e7d566, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e7d566, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e7d566, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0 [0164.920] FindClose (in: hFindFile=0x12d92c8 | out: hFindFile=0x12d92c8) returned 1 [0164.921] GetProcessHeap () returned 0x12c0000 [0164.921] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.921] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5ad675f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5ad675f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5ad675f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6faa8, dwReserved0=0x0, dwReserved1=0xffffde14, cFileName="OFFICE.DLL", cAlternateFileName="")) returned 1 [0164.921] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffde14, cFileName="pl", cAlternateFileName="")) returned 1 [0164.921] GetProcessHeap () returned 0x12c0000 [0164.921] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0164.921] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pl\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0164.922] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.922] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167cf4d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0164.922] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefee59ce, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefee59ce, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0164.922] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b5bbeb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b5bbeb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b81e2e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x39080, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0164.922] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2fed144, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2fed144, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x303975a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0164.922] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4646280, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4646280, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1ffa98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0164.922] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa911c96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa911c96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa937f07, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0164.922] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1d4bb8b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d4bb8b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d71cd8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1d050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0164.922] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4c63313, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4c63313, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4c63313, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1 [0164.922] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a56cbe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a56cbe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a56cbe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0164.922] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa911c96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa911c96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa911c96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x47af0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1 [0164.922] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffddb96c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffddb96c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffddb96c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8090, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0164.923] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x633d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1 [0164.923] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x632fb8e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x632fb8e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x632fb8e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a098, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0164.923] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x69980f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x69980f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69be349, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1 [0164.923] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefee59ce, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff0bc27, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0164.923] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80fc2c4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80fc2c4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80fc2c4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb070, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1 [0164.923] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb78613f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb78613f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb7ac3b6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3ae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0164.923] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80fc2c4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80fc2c4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80fc2c4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0164.923] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf632eb9d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf632eb9d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf632eb9d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0164.923] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf632eb9d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf632eb9d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf632eb9d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0 [0164.923] FindClose (in: hFindFile=0x12d92c8 | out: hFindFile=0x12d92c8) returned 1 [0164.924] GetProcessHeap () returned 0x12c0000 [0164.924] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0164.924] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa879350, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa879350, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2ba48, dwReserved0=0x0, dwReserved1=0xffffde14, cFileName="PowerPivotExcelClientAddIn.dll", cAlternateFileName="POWERP~1.DLL")) returned 1 [0165.029] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167cf4d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab0, dwReserved0=0x0, dwReserved1=0xffffde14, cFileName="PowerPivotExcelClientAddIn.tlb", cAlternateFileName="POWERP~1.TLB")) returned 1 [0165.029] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffde14, cFileName="pt", cAlternateFileName="")) returned 1 [0165.029] GetProcessHeap () returned 0x12c0000 [0165.029] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0165.029] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0165.030] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.030] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167cf4d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x110a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0165.031] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1e0a643, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1e0a643, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf263c7d5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xca90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0165.031] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6c93006, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39088, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0165.031] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8719376, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x8719376, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8719376, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0165.031] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc47ce76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc47ce76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc47ce76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x200030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0165.031] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0089415, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00af60a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2a90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0165.031] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc646a83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc646a83, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc646a83, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1ca98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1 [0165.031] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff31e88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff580e7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0165.031] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a6c5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86cced8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0165.031] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0dcc568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0dcc568, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0df27d3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0165.031] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2984c3b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2984c3b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2f7aa31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5488, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0165.031] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1 [0165.031] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa911c96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa911c96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa911c96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1a088, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0165.031] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x637c06e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x637c06e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x637c06e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x70ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1 [0165.031] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1860d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1860d8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1860d8a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0165.032] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ac3289, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ac3289, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1 [0165.032] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa937f07, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa937f07, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfae22cc9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0165.032] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc646a83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc646a83, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc646a83, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0165.032] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf18f9628, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf18f9628, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e68, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0165.032] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf18f9628, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf18f9628, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e68, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0 [0165.032] FindClose (in: hFindFile=0x12d92c8 | out: hFindFile=0x12d92c8) returned 1 [0165.033] GetProcessHeap () returned 0x12c0000 [0165.033] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0165.033] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe00baf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffde14, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0165.033] GetProcessHeap () returned 0x12c0000 [0165.033] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0165.033] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt-PT\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe00baf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0165.034] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe00baf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.034] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167cf4d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x110e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0165.034] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa4733b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa4733b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa531f86, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0165.034] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5f9c329, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5f9c329, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5fc257f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39088, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0165.034] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4c3d17b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4c3d17b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4c63313, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0165.034] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a6c5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86cced8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x200030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0165.034] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0165.034] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefe00baf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefe00baf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00d5872, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1d038, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0165.034] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x29f7370, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x29f7370, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ebbef3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1 [0165.035] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9992797, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9992797, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99b89f6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4c050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0165.035] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5eb74f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5eb74f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5f4ff2d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1 [0165.035] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d05722, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d05722, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d05722, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0165.035] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1697068, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1697068, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf16bd2da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0165.035] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a070, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0165.035] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6aa3169, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aa3169, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6aa3169, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1 [0165.035] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7a2268a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7a2268a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7a2268a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1 [0165.035] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc40a725, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc40a725, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc40a725, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1 [0165.035] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc34bb5b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc34bb5b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc34bb5b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0165.035] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d04716, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d04716, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6d04716, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa080, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0165.035] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1d71cd8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d71cd8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d97f24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e68, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0165.035] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1d71cd8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d71cd8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d97f24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e68, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0 [0165.035] FindClose (in: hFindFile=0x12d92c8 | out: hFindFile=0x12d92c8) returned 1 [0165.036] GetProcessHeap () returned 0x12c0000 [0165.036] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0165.036] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfae48f06, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfae48f06, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfae6f174, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x174c0, dwReserved0=0x0, dwReserved1=0xffffde14, cFileName="ReportingServicesNativeClient.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0165.036] FindNextFileW (in: hFindFile=0x12d9388, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88e2fa3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x88e2fa3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffde14, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1 [0165.036] GetProcessHeap () returned 0x12c0000 [0165.036] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0165.036] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88e2fa3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x88e2fa3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0165.037] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88e2fa3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x88e2fa3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.037] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf145ad52, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf145ad52, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf145ad52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1025", cAlternateFileName="")) returned 1 [0165.037] GetProcessHeap () returned 0x12c0000 [0165.037] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0165.041] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1025\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf145ad52, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf145ad52, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf145ad52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12e72b8 [0165.042] FindNextFileW (in: hFindFile=0x12e72b8, lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf145ad52, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf145ad52, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf145ad52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.042] FindNextFileW (in: hFindFile=0x12e72b8, lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf145ad52, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf145ad52, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x110c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0165.042] FindNextFileW (in: hFindFile=0x12e72b8, lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf145ad52, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf145ad52, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x110c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0165.042] FindClose (in: hFindFile=0x12e72b8 | out: hFindFile=0x12e72b8) returned 1 [0165.042] GetProcessHeap () returned 0x12c0000 [0165.042] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0165.042] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefee59ce, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefee59ce, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1026", cAlternateFileName="")) returned 1 [0165.042] GetProcessHeap () returned 0x12c0000 [0165.042] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0165.042] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1026\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefee59ce, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefee59ce, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12e7778 [0165.043] FindNextFileW (in: hFindFile=0x12e7778, lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefee59ce, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefee59ce, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.043] FindNextFileW (in: hFindFile=0x12e7778, lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefee59ce, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0165.043] FindNextFileW (in: hFindFile=0x12e7778, lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefee59ce, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0165.043] FindClose (in: hFindFile=0x12e7778 | out: hFindFile=0x12e7778) returned 1 [0165.043] GetProcessHeap () returned 0x12c0000 [0165.043] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0165.043] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1755c61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1755c61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1755c61, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10266", cAlternateFileName="")) returned 1 [0165.043] GetProcessHeap () returned 0x12c0000 [0165.043] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0165.043] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\10266\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1755c61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1755c61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1755c61, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12e70b8 [0165.043] FindNextFileW (in: hFindFile=0x12e70b8, lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1755c61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1755c61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1755c61, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.043] FindNextFileW (in: hFindFile=0x12e70b8, lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1755c61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1755c61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0165.043] FindNextFileW (in: hFindFile=0x12e70b8, lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1755c61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1755c61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0165.043] FindClose (in: hFindFile=0x12e70b8 | out: hFindFile=0x12e70b8) returned 1 [0165.043] GetProcessHeap () returned 0x12c0000 [0165.043] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0165.043] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4266542, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4266542, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4266542, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1027", cAlternateFileName="")) returned 1 [0165.044] GetProcessHeap () returned 0x12c0000 [0165.044] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0165.044] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1027\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4266542, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4266542, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4266542, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12e71f8 [0165.044] FindNextFileW (in: hFindFile=0x12e71f8, lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4266542, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4266542, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4266542, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.044] FindNextFileW (in: hFindFile=0x12e71f8, lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4266542, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4266542, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0165.044] FindNextFileW (in: hFindFile=0x12e71f8, lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4266542, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4266542, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0165.044] FindClose (in: hFindFile=0x12e71f8 | out: hFindFile=0x12e71f8) returned 1 [0165.044] GetProcessHeap () returned 0x12c0000 [0165.044] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0165.044] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffd42fe2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd42fe2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffd42fe2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1028", cAlternateFileName="")) returned 1 [0165.044] GetProcessHeap () returned 0x12c0000 [0165.044] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0165.044] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1028\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffd42fe2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd42fe2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffd42fe2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12e7438 [0165.044] FindNextFileW (in: hFindFile=0x12e7438, lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffd42fe2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd42fe2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffd42fe2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.044] FindNextFileW (in: hFindFile=0x12e7438, lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffd42fe2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd42fe2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x106c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0165.044] FindNextFileW (in: hFindFile=0x12e7438, lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffd42fe2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd42fe2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x106c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0165.045] FindClose (in: hFindFile=0x12e7438 | out: hFindFile=0x12e7438) returned 1 [0165.045] GetProcessHeap () returned 0x12c0000 [0165.045] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0165.045] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf632eb9d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf632eb9d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf632eb9d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1029", cAlternateFileName="")) returned 1 [0165.045] GetProcessHeap () returned 0x12c0000 [0165.045] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0165.045] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1029\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf632eb9d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf632eb9d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf632eb9d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12e76b8 [0165.045] FindNextFileW (in: hFindFile=0x12e76b8, lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf632eb9d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf632eb9d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf632eb9d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.045] FindNextFileW (in: hFindFile=0x12e76b8, lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf632eb9d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf632eb9d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0165.045] FindNextFileW (in: hFindFile=0x12e76b8, lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf632eb9d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf632eb9d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0165.045] FindClose (in: hFindFile=0x12e76b8 | out: hFindFile=0x12e76b8) returned 1 [0165.045] GetProcessHeap () returned 0x12c0000 [0165.045] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0165.045] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaf7a22a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf7a22a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaf7a22a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1030", cAlternateFileName="")) returned 1 [0165.045] GetProcessHeap () returned 0x12c0000 [0165.045] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0165.045] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1030\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaf7a22a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf7a22a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaf7a22a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12e7078 [0165.046] FindNextFileW (in: hFindFile=0x12e7078, lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaf7a22a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf7a22a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaf7a22a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.046] FindNextFileW (in: hFindFile=0x12e7078, lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfaf7a22a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf7a22a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11860, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0165.046] FindNextFileW (in: hFindFile=0x12e7078, lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfaf7a22a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf7a22a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11860, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0165.046] FindClose (in: hFindFile=0x12e7078 | out: hFindFile=0x12e7078) returned 1 [0165.046] GetProcessHeap () returned 0x12c0000 [0165.046] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0165.046] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x633d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1031", cAlternateFileName="")) returned 1 [0165.046] GetProcessHeap () returned 0x12c0000 [0165.046] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0165.046] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1031\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x633d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12e71b8 [0165.046] FindNextFileW (in: hFindFile=0x12e71b8, lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x633d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.046] FindNextFileW (in: hFindFile=0x12e71b8, lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x633d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x116c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0165.046] FindNextFileW (in: hFindFile=0x12e71b8, lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x633d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x116c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0165.046] FindClose (in: hFindFile=0x12e71b8 | out: hFindFile=0x12e71b8) returned 1 [0165.046] GetProcessHeap () returned 0x12c0000 [0165.046] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0165.046] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e6a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x51e6a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x51e6a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1032", cAlternateFileName="")) returned 1 [0165.046] GetProcessHeap () returned 0x12c0000 [0165.046] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0165.047] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1032\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e6a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x51e6a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x51e6a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12e73f8 [0165.047] FindNextFileW (in: hFindFile=0x12e73f8, lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e6a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x51e6a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x51e6a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.047] FindNextFileW (in: hFindFile=0x12e73f8, lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x51e6a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x51e6a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11c60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0165.047] FindNextFileW (in: hFindFile=0x12e73f8, lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x51e6a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x51e6a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11c60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0165.047] FindClose (in: hFindFile=0x12e73f8 | out: hFindFile=0x12e73f8) returned 1 [0165.048] GetProcessHeap () returned 0x12c0000 [0165.048] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0165.048] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42d8c51, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42fef17, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42fef17, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0165.048] GetProcessHeap () returned 0x12c0000 [0165.048] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0165.048] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1033\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42d8c51, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42fef17, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42fef17, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12e7538 [0165.048] FindNextFileW (in: hFindFile=0x12e7538, lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42d8c51, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42fef17, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42fef17, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.048] FindNextFileW (in: hFindFile=0x12e7538, lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42fef17, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42fef17, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11660, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0165.048] FindNextFileW (in: hFindFile=0x12e7538, lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42fef17, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42fef17, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11660, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0165.048] FindClose (in: hFindFile=0x12e7538 | out: hFindFile=0x12e7538) returned 1 [0165.048] GetProcessHeap () returned 0x12c0000 [0165.048] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0165.048] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a56cbe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a7cf13, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1035", cAlternateFileName="")) returned 1 [0165.048] GetProcessHeap () returned 0x12c0000 [0165.048] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0165.048] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1035\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a56cbe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a7cf13, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12e76f8 [0165.050] FindNextFileW (in: hFindFile=0x12e76f8, lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a56cbe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a7cf13, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.050] FindNextFileW (in: hFindFile=0x12e76f8, lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a7cf13, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0165.050] FindNextFileW (in: hFindFile=0x12e76f8, lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a7cf13, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0165.050] FindClose (in: hFindFile=0x12e76f8 | out: hFindFile=0x12e76f8) returned 1 [0165.050] GetProcessHeap () returned 0x12c0000 [0165.050] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0165.050] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa911c96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa911c96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa911c96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1 [0165.050] GetProcessHeap () returned 0x12c0000 [0165.050] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0165.050] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1036\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa911c96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa911c96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa911c96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12e7578 [0165.050] FindNextFileW (in: hFindFile=0x12e7578, lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa911c96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa911c96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa911c96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.050] FindNextFileW (in: hFindFile=0x12e7578, lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa911c96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa911c96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11c60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0165.050] FindNextFileW (in: hFindFile=0x12e7578, lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa911c96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa911c96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11c60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0165.050] FindClose (in: hFindFile=0x12e7578 | out: hFindFile=0x12e7578) returned 1 [0165.050] GetProcessHeap () returned 0x12c0000 [0165.050] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0165.050] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67a8250, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67a8250, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1037", cAlternateFileName="")) returned 1 [0165.050] GetProcessHeap () returned 0x12c0000 [0165.051] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0165.051] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1037\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67a8250, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67a8250, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12e70f8 [0165.051] FindNextFileW (in: hFindFile=0x12e70f8, lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67a8250, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67a8250, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.051] FindNextFileW (in: hFindFile=0x12e70f8, lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x67a8250, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67a8250, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11460, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0165.051] FindNextFileW (in: hFindFile=0x12e70f8, lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x67a8250, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67a8250, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11460, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0165.051] FindClose (in: hFindFile=0x12e70f8 | out: hFindFile=0x12e70f8) returned 1 [0165.051] GetProcessHeap () returned 0x12c0000 [0165.051] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0165.051] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88e2fa3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x88e2fa3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x88e2fa3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1038", cAlternateFileName="")) returned 1 [0165.051] GetProcessHeap () returned 0x12c0000 [0165.051] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0165.051] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1038\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88e2fa3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x88e2fa3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x88e2fa3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12e7778 [0165.051] FindNextFileW (in: hFindFile=0x12e7778, lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88e2fa3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x88e2fa3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x88e2fa3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.051] FindNextFileW (in: hFindFile=0x12e7778, lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88e2fa3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x88e2fa3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0165.051] FindNextFileW (in: hFindFile=0x12e7778, lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88e2fa3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x88e2fa3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0165.052] FindClose (in: hFindFile=0x12e7778 | out: hFindFile=0x12e7778) returned 1 [0165.052] GetProcessHeap () returned 0x12c0000 [0165.052] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0165.052] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x381f2dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x381f2dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1040", cAlternateFileName="")) returned 1 [0165.052] GetProcessHeap () returned 0x12c0000 [0165.052] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0165.052] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1040\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x381f2dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x381f2dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12e71f8 [0165.053] FindNextFileW (in: hFindFile=0x12e71f8, lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x381f2dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x381f2dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.053] FindNextFileW (in: hFindFile=0x12e71f8, lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x381f2dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0165.053] FindNextFileW (in: hFindFile=0x12e71f8, lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x381f2dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0165.053] FindClose (in: hFindFile=0x12e71f8 | out: hFindFile=0x12e71f8) returned 1 [0165.054] GetProcessHeap () returned 0x12c0000 [0165.054] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0165.054] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6355df6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1041", cAlternateFileName="")) returned 1 [0165.054] GetProcessHeap () returned 0x12c0000 [0165.054] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0165.054] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1041\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6355df6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12e6ff8 [0165.054] FindNextFileW (in: hFindFile=0x12e6ff8, lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6355df6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.054] FindNextFileW (in: hFindFile=0x12e6ff8, lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0165.054] FindNextFileW (in: hFindFile=0x12e6ff8, lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0165.054] FindClose (in: hFindFile=0x12e6ff8 | out: hFindFile=0x12e6ff8) returned 1 [0165.054] GetProcessHeap () returned 0x12c0000 [0165.054] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0165.054] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf048f354, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf048f354, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf048f354, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1042", cAlternateFileName="")) returned 1 [0165.054] GetProcessHeap () returned 0x12c0000 [0165.054] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0165.054] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1042\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf048f354, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf048f354, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf048f354, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12e76f8 [0165.054] FindNextFileW (in: hFindFile=0x12e76f8, lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf048f354, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf048f354, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf048f354, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.055] FindNextFileW (in: hFindFile=0x12e76f8, lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf048f354, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf048f354, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0165.055] FindNextFileW (in: hFindFile=0x12e76f8, lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf048f354, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf048f354, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0165.055] FindClose (in: hFindFile=0x12e76f8 | out: hFindFile=0x12e76f8) returned 1 [0165.055] GetProcessHeap () returned 0x12c0000 [0165.055] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0165.055] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x303975a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1043", cAlternateFileName="")) returned 1 [0165.055] GetProcessHeap () returned 0x12c0000 [0165.055] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0165.055] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1043\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x303975a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12e73b8 [0165.055] FindNextFileW (in: hFindFile=0x12e73b8, lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x303975a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.055] FindNextFileW (in: hFindFile=0x12e73b8, lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0165.055] FindNextFileW (in: hFindFile=0x12e73b8, lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0165.055] FindClose (in: hFindFile=0x12e73b8 | out: hFindFile=0x12e73b8) returned 1 [0165.055] GetProcessHeap () returned 0x12c0000 [0165.055] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0165.055] FindNextFileW (in: hFindFile=0x12d92c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf61d7668, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1044", cAlternateFileName="")) returned 1 [0165.055] GetProcessHeap () returned 0x12c0000 [0165.055] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0165.055] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1044\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf61d7668, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12e7038 [0165.056] FindNextFileW (in: hFindFile=0x12e7038, lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf61d7668, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.056] FindNextFileW (in: hFindFile=0x12e7038, lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61fd8b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0165.056] GetProcessHeap () returned 0x12c0000 [0165.056] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0165.056] GetProcessHeap () returned 0x12c0000 [0165.056] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0165.056] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1045\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2ebae3b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2ebae3b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12e7178 [0165.056] GetProcessHeap () returned 0x12c0000 [0165.056] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0165.056] GetProcessHeap () returned 0x12c0000 [0165.056] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0165.056] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1046\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1887f3e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1887f3e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1887f3e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12e76f8 [0165.057] GetProcessHeap () returned 0x12c0000 [0165.057] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0165.057] GetProcessHeap () returned 0x12c0000 [0165.057] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0165.057] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1048\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5a8a2df, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a8a2df, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a8a2df, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12e74b8 [0165.057] GetProcessHeap () returned 0x12c0000 [0165.057] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0165.057] GetProcessHeap () returned 0x12c0000 [0165.057] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0165.057] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1049\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b87f8e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b87f8e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b87f8e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12e7338 [0165.057] GetProcessHeap () returned 0x12c0000 [0165.057] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0165.057] GetProcessHeap () returned 0x12c0000 [0165.057] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0165.057] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1050\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfcc62b13, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcc62b13, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcc62b13, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12e74b8 [0165.058] GetProcessHeap () returned 0x12c0000 [0165.058] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0165.058] GetProcessHeap () returned 0x12c0000 [0165.058] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0165.058] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1051\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x303975a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12e7738 [0165.058] GetProcessHeap () returned 0x12c0000 [0165.058] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0165.058] GetProcessHeap () returned 0x12c0000 [0165.058] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0165.058] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1053\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6bd3439, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6bd3439, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6bd3439, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12e76b8 [0165.058] GetProcessHeap () returned 0x12c0000 [0165.058] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0165.058] GetProcessHeap () returned 0x12c0000 [0165.058] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0165.058] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1054\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf443017d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf443017d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf443017d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12e7578 [0165.059] GetProcessHeap () returned 0x12c0000 [0165.059] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0165.059] GetProcessHeap () returned 0x12c0000 [0165.059] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0165.059] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1055\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0089415, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0089415, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12e7778 [0165.059] GetProcessHeap () returned 0x12c0000 [0165.059] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0165.059] GetProcessHeap () returned 0x12c0000 [0165.059] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0165.059] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1057\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12e70b8 [0165.059] GetProcessHeap () returned 0x12c0000 [0165.059] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0165.060] GetProcessHeap () returned 0x12c0000 [0165.060] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0165.060] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1058\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12e72f8 [0165.060] GetProcessHeap () returned 0x12c0000 [0165.060] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0165.060] GetProcessHeap () returned 0x12c0000 [0165.060] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0165.060] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1060\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf99b89f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99b89f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99b89f6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12e7338 [0165.060] GetProcessHeap () returned 0x12c0000 [0165.060] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0165.060] GetProcessHeap () returned 0x12c0000 [0165.060] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0165.060] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1061\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc2d943c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2d943c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2d943c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12e6ff8 [0165.060] GetProcessHeap () returned 0x12c0000 [0165.060] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0165.061] GetProcessHeap () returned 0x12c0000 [0165.061] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0165.061] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1062\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1992fb3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992fb3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992fb3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12e7338 [0165.061] GetProcessHeap () returned 0x12c0000 [0165.061] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0165.061] GetProcessHeap () returned 0x12c0000 [0165.061] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0165.061] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1063\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56853a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12e75b8 [0165.061] GetProcessHeap () returned 0x12c0000 [0165.061] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0165.061] GetProcessHeap () returned 0x12c0000 [0165.061] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0165.061] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1066\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80d6078, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12e74f8 [0165.062] GetProcessHeap () returned 0x12c0000 [0165.062] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0165.062] GetProcessHeap () returned 0x12c0000 [0165.062] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0165.062] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1069\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffe01c35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffe01c35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffe01c35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12e73f8 [0165.062] GetProcessHeap () returned 0x12c0000 [0165.062] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0165.062] GetProcessHeap () returned 0x12c0000 [0165.062] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0165.062] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1081\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5afc9d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5afc9d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5afc9d3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12e7378 [0165.062] GetProcessHeap () returned 0x12c0000 [0165.062] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0165.062] GetProcessHeap () returned 0x12c0000 [0165.062] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0165.062] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1086\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a2268a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7abb0bc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7abb0bc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12e7338 [0165.063] GetProcessHeap () returned 0x12c0000 [0165.063] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0165.063] GetProcessHeap () returned 0x12c0000 [0165.063] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0165.063] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1087\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6355df6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12e74f8 [0165.063] GetProcessHeap () returned 0x12c0000 [0165.211] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0165.212] GetProcessHeap () returned 0x12c0000 [0165.212] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0165.212] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1110\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf61fd8b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0165.215] GetProcessHeap () returned 0x12c0000 [0165.215] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0165.215] GetProcessHeap () returned 0x12c0000 [0165.215] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0165.215] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2052\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc47ce76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc47ce76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc47ce76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0165.215] GetProcessHeap () returned 0x12c0000 [0165.215] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0165.215] GetProcessHeap () returned 0x12c0000 [0165.215] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0165.215] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2070\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c40a24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c40a24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c40a24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0165.215] GetProcessHeap () returned 0x12c0000 [0165.215] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0165.216] GetProcessHeap () returned 0x12c0000 [0165.216] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0165.216] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2074\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0165.216] GetProcessHeap () returned 0x12c0000 [0165.216] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0165.216] GetProcessHeap () returned 0x12c0000 [0165.216] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0165.216] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\3082\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0165.216] GetProcessHeap () returned 0x12c0000 [0165.216] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0165.216] GetProcessHeap () returned 0x12c0000 [0165.216] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0165.216] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\9242\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67ce4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67ce4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67ce4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0165.216] GetProcessHeap () returned 0x12c0000 [0165.216] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0165.217] GetProcessHeap () returned 0x12c0000 [0165.217] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0165.217] GetProcessHeap () returned 0x12c0000 [0165.217] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0165.218] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ro\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0165.220] GetProcessHeap () returned 0x12c0000 [0165.220] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0165.220] GetProcessHeap () returned 0x12c0000 [0165.220] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0165.220] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ru\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0165.222] GetProcessHeap () returned 0x12c0000 [0165.222] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0165.222] GetProcessHeap () returned 0x12c0000 [0165.222] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0165.222] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sk\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff580e7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0165.223] GetProcessHeap () returned 0x12c0000 [0165.223] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0165.223] GetProcessHeap () returned 0x12c0000 [0165.223] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0165.224] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sl\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe99511, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0165.225] GetProcessHeap () returned 0x12c0000 [0165.225] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0165.225] GetProcessHeap () returned 0x12c0000 [0165.225] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0165.225] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-cyrl\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b5bbeb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0165.227] GetProcessHeap () returned 0x12c0000 [0165.227] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0165.227] GetProcessHeap () returned 0x12c0000 [0165.227] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0165.227] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-latn\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0165.229] GetProcessHeap () returned 0x12c0000 [0165.229] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0165.229] GetProcessHeap () returned 0x12c0000 [0165.229] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0165.229] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-Latn-CS\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0165.230] GetProcessHeap () returned 0x12c0000 [0165.230] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0165.230] GetProcessHeap () returned 0x12c0000 [0165.230] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0165.230] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sv\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02eb98a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0165.232] GetProcessHeap () returned 0x12c0000 [0165.232] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0165.232] GetProcessHeap () returned 0x12c0000 [0165.232] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0165.232] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\th\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefebf763, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0165.234] GetProcessHeap () returned 0x12c0000 [0165.234] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0165.234] GetProcessHeap () returned 0x12c0000 [0165.234] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0165.234] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tr\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c40a24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16867e02, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16867e02, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0165.236] GetProcessHeap () returned 0x12c0000 [0165.236] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0165.236] GetProcessHeap () returned 0x12c0000 [0165.236] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0165.236] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\uk\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1565dae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0165.238] GetProcessHeap () returned 0x12c0000 [0165.238] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0165.238] GetProcessHeap () returned 0x12c0000 [0165.238] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0165.238] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\vi\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf164abda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0165.240] GetProcessHeap () returned 0x12c0000 [0165.240] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0165.240] GetProcessHeap () returned 0x12c0000 [0165.240] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0165.240] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHS\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefebf763, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0165.241] GetProcessHeap () returned 0x12c0000 [0165.241] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0165.241] GetProcessHeap () returned 0x12c0000 [0165.241] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0165.242] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHT\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0165.243] GetProcessHeap () returned 0x12c0000 [0165.243] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0165.243] GetProcessHeap () returned 0x12c0000 [0165.243] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0165.244] GetProcessHeap () returned 0x12c0000 [0165.244] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.245] GetProcessHeap () returned 0x12c0000 [0165.245] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0165.245] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2ad8211, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x17728794, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17728794, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc014, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0165.246] GetProcessHeap () returned 0x12c0000 [0165.246] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.246] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x176dc2d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17774bfd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17774bfd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0165.246] GetProcessHeap () returned 0x12c0000 [0165.246] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.246] GetProcessHeap () returned 0x12c0000 [0165.246] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.246] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2ad8211, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc38b3c05, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc3bd4d47, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0165.247] GetProcessHeap () returned 0x12c0000 [0165.247] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.248] GetProcessHeap () returned 0x12c0000 [0165.248] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0165.249] GetProcessHeap () returned 0x12c0000 [0165.249] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0165.250] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x17774bfd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17774bfd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc014, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0165.252] GetProcessHeap () returned 0x12c0000 [0165.252] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0165.252] GetProcessHeap () returned 0x12c0000 [0165.252] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0165.252] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1774e9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1774e9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc014, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0165.358] GetProcessHeap () returned 0x12c0000 [0165.358] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0165.358] GetProcessHeap () returned 0x12c0000 [0165.358] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0165.358] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec4ee541, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc014, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0165.359] GetProcessHeap () returned 0x12c0000 [0165.359] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.359] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec4ee541, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf477755d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4cd4a32, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0165.360] GetProcessHeap () returned 0x12c0000 [0165.360] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.360] GetProcessHeap () returned 0x12c0000 [0165.360] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0165.362] GetProcessHeap () returned 0x12c0000 [0165.362] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0165.363] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d9058b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc014, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0165.363] GetProcessHeap () returned 0x12c0000 [0165.363] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.363] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\1033\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d9058b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0165.363] GetProcessHeap () returned 0x12c0000 [0165.363] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0165.363] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\1033\\16\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4db6809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0165.364] GetProcessHeap () returned 0x12c0000 [0165.364] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0165.364] GetProcessHeap () returned 0x12c0000 [0165.364] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.365] GetProcessHeap () returned 0x12c0000 [0165.365] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0165.368] GetProcessHeap () returned 0x12c0000 [0165.368] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0165.368] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca90ec5a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca90ec5a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc014, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0165.368] GetProcessHeap () returned 0x12c0000 [0165.368] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.368] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb548de7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff0bc27, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0165.370] GetProcessHeap () returned 0x12c0000 [0165.370] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.370] GetProcessHeap () returned 0x12c0000 [0165.370] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0165.371] GetProcessHeap () returned 0x12c0000 [0165.371] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0165.372] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x197a4903, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc014, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0165.373] GetProcessHeap () returned 0x12c0000 [0165.373] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.373] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17ff3259, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x186355ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x186355ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0165.373] GetProcessHeap () returned 0x12c0000 [0165.373] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0165.373] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0165.373] GetProcessHeap () returned 0x12c0000 [0165.373] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0165.373] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Components\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18aadbcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18aadbcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18aadbcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0165.374] GetProcessHeap () returned 0x12c0000 [0165.374] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0165.374] GetProcessHeap () returned 0x12c0000 [0165.374] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0165.374] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\ManagedObjects\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b0f9971, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0165.375] GetProcessHeap () returned 0x12c0000 [0165.375] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0165.375] GetProcessHeap () returned 0x12c0000 [0165.375] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0165.375] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Servers\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18681a5c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18681a5c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0165.376] GetProcessHeap () returned 0x12c0000 [0165.376] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0165.376] GetProcessHeap () returned 0x12c0000 [0165.376] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0165.377] GetProcessHeap () returned 0x12c0000 [0165.377] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0165.378] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1865b8d4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1865b8d4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0165.378] GetProcessHeap () returned 0x12c0000 [0165.378] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0165.378] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\Components\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1865b8d4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0165.380] GetProcessHeap () returned 0x12c0000 [0165.380] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0165.380] GetProcessHeap () returned 0x12c0000 [0165.380] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0165.380] GetProcessHeap () returned 0x12c0000 [0165.380] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.381] GetProcessHeap () returned 0x12c0000 [0165.381] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.381] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18681a5c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18ad3e4a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0165.381] GetProcessHeap () returned 0x12c0000 [0165.381] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0165.381] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18a3b641, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197321ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197321ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0165.383] GetProcessHeap () returned 0x12c0000 [0165.383] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0165.383] GetProcessHeap () returned 0x12c0000 [0165.383] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0165.383] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1907d846, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1907d846, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0165.384] GetProcessHeap () returned 0x12c0000 [0165.384] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0165.385] GetProcessHeap () returned 0x12c0000 [0165.385] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0165.385] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1bc991c1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1bc991c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0165.386] GetProcessHeap () returned 0x12c0000 [0165.386] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0165.386] GetProcessHeap () returned 0x12c0000 [0165.386] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.387] GetProcessHeap () returned 0x12c0000 [0165.387] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.388] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1907d846, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b6c9560, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b6c9560, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0165.390] GetProcessHeap () returned 0x12c0000 [0165.390] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.390] GetProcessHeap () returned 0x12c0000 [0165.390] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.390] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197a4903, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0165.390] GetProcessHeap () returned 0x12c0000 [0165.390] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0165.390] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1983d259, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1983d259, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0165.390] GetProcessHeap () returned 0x12c0000 [0165.390] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0165.390] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198afa29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198afa29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0165.392] GetProcessHeap () returned 0x12c0000 [0165.392] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0165.392] GetProcessHeap () returned 0x12c0000 [0165.392] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0165.392] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\Computers\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1983d259, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198634b7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0165.393] GetProcessHeap () returned 0x12c0000 [0165.393] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0165.673] GetProcessHeap () returned 0x12c0000 [0165.673] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0165.674] GetProcessHeap () returned 0x12c0000 [0165.674] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.675] GetProcessHeap () returned 0x12c0000 [0165.675] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.676] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf073ddf4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0165.678] GetProcessHeap () returned 0x12c0000 [0165.678] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.678] GetProcessHeap () returned 0x12c0000 [0165.678] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0165.679] GetProcessHeap () returned 0x12c0000 [0165.679] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0165.680] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19889710, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19889710, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc014, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0165.680] GetProcessHeap () returned 0x12c0000 [0165.680] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.681] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\Analysis\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12b7378, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xafa146a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0165.682] GetProcessHeap () returned 0x12c0000 [0165.682] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.682] GetProcessHeap () returned 0x12c0000 [0165.682] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.682] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\SOLVER\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41a796b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41a796b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0165.682] GetProcessHeap () returned 0x12c0000 [0165.682] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.683] GetProcessHeap () returned 0x12c0000 [0165.683] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0165.684] GetProcessHeap () returned 0x12c0000 [0165.684] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0165.685] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1b27715c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b27715c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc014, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0165.689] GetProcessHeap () returned 0x12c0000 [0165.689] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0165.689] GetProcessHeap () returned 0x12c0000 [0165.689] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0165.689] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1b22ac67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b22ac67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc014, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0165.691] GetProcessHeap () returned 0x12c0000 [0165.691] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0165.691] GetProcessHeap () returned 0x12c0000 [0165.691] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0165.691] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1b3a83c3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b3a83c3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc014, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0165.692] GetProcessHeap () returned 0x12c0000 [0165.692] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.692] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ar\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf99462e6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99462e6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99462e6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0165.693] GetProcessHeap () returned 0x12c0000 [0165.693] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.693] GetProcessHeap () returned 0x12c0000 [0165.693] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.693] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\bg\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6dea551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6dea551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6dea551, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0165.693] GetProcessHeap () returned 0x12c0000 [0165.693] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.693] GetProcessHeap () returned 0x12c0000 [0165.693] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.693] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ca\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56853a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0165.694] GetProcessHeap () returned 0x12c0000 [0165.694] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.694] GetProcessHeap () returned 0x12c0000 [0165.694] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.694] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\cs\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf803d796, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf803d796, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf803d796, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0165.694] GetProcessHeap () returned 0x12c0000 [0165.694] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.694] GetProcessHeap () returned 0x12c0000 [0165.694] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.694] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\da\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6165f55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6165f55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0165.694] GetProcessHeap () returned 0x12c0000 [0165.694] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.694] GetProcessHeap () returned 0x12c0000 [0165.694] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.694] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\de\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0165.695] GetProcessHeap () returned 0x12c0000 [0165.695] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.695] GetProcessHeap () returned 0x12c0000 [0165.695] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.695] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\el\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff0bc27, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff31e88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0165.695] GetProcessHeap () returned 0x12c0000 [0165.695] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.695] GetProcessHeap () returned 0x12c0000 [0165.695] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.695] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\en-us\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5a3de35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a3de35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a3de35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0165.695] GetProcessHeap () returned 0x12c0000 [0165.695] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.695] GetProcessHeap () returned 0x12c0000 [0165.695] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.695] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\es\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfcb7dd00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcb7dd00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcb7dd00, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0165.696] GetProcessHeap () returned 0x12c0000 [0165.696] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.696] GetProcessHeap () returned 0x12c0000 [0165.696] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.696] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\et\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0165.696] GetProcessHeap () returned 0x12c0000 [0165.696] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.696] GetProcessHeap () returned 0x12c0000 [0165.696] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.696] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\eu\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0165.696] GetProcessHeap () returned 0x12c0000 [0165.696] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.696] GetProcessHeap () returned 0x12c0000 [0165.697] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.697] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\fi\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0165.697] GetProcessHeap () returned 0x12c0000 [0165.697] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.697] GetProcessHeap () returned 0x12c0000 [0165.697] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.697] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\fr\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0165.697] GetProcessHeap () returned 0x12c0000 [0165.697] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.697] GetProcessHeap () returned 0x12c0000 [0165.697] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.697] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\gl\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa178468, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa178468, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa178468, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0165.697] GetProcessHeap () returned 0x12c0000 [0165.697] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.698] GetProcessHeap () returned 0x12c0000 [0165.698] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.698] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\he\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf618b1a4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf618b1a4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf618b1a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0165.698] GetProcessHeap () returned 0x12c0000 [0165.698] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.698] GetProcessHeap () returned 0x12c0000 [0165.698] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.698] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hi\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56853a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0165.698] GetProcessHeap () returned 0x12c0000 [0165.698] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.698] GetProcessHeap () returned 0x12c0000 [0165.698] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.698] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hr\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf480feb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf480feb5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf480feb5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0165.698] GetProcessHeap () returned 0x12c0000 [0165.698] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.699] GetProcessHeap () returned 0x12c0000 [0165.699] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.699] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hu\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4646280, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4646280, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0165.699] GetProcessHeap () returned 0x12c0000 [0165.699] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.699] GetProcessHeap () returned 0x12c0000 [0165.699] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.699] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\id\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63a229e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x63a229e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x63a229e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0165.699] GetProcessHeap () returned 0x12c0000 [0165.699] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.699] GetProcessHeap () returned 0x12c0000 [0165.699] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.699] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\it\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59b433, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x59b433, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59b433, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0165.699] GetProcessHeap () returned 0x12c0000 [0165.700] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.700] GetProcessHeap () returned 0x12c0000 [0165.700] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.700] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ja\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6aef645, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aef645, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0165.700] GetProcessHeap () returned 0x12c0000 [0165.700] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.700] GetProcessHeap () returned 0x12c0000 [0165.700] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.700] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\kk\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6781ff8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6781ff8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0165.700] GetProcessHeap () returned 0x12c0000 [0165.700] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.700] GetProcessHeap () returned 0x12c0000 [0165.700] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.700] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ko\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f9c329, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5f9c329, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5f9c329, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0165.701] GetProcessHeap () returned 0x12c0000 [0165.701] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.701] GetProcessHeap () returned 0x12c0000 [0165.701] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.701] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\lt\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1bce2f5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1bce2f5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1bf45a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0165.701] GetProcessHeap () returned 0x12c0000 [0165.701] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.701] GetProcessHeap () returned 0x12c0000 [0165.701] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.701] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\lv\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf13037fa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf13037fa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf13037fa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0165.701] GetProcessHeap () returned 0x12c0000 [0165.701] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.701] GetProcessHeap () returned 0x12c0000 [0165.701] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.701] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ms\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc21a8ad, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc21a8ad, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc21a8ad, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0165.704] GetProcessHeap () returned 0x12c0000 [0165.704] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.704] GetProcessHeap () returned 0x12c0000 [0165.704] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.704] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\nl\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaf2dd35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf2dd35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaf2dd35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0165.704] GetProcessHeap () returned 0x12c0000 [0165.704] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.704] GetProcessHeap () returned 0x12c0000 [0165.704] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.705] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\no\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffe01c35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffe01c35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffe01c35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0165.712] GetProcessHeap () returned 0x12c0000 [0165.712] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.712] GetProcessHeap () returned 0x12c0000 [0165.712] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.712] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pl\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ff786, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68ff786, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69259a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0165.712] GetProcessHeap () returned 0x12c0000 [0165.712] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.712] GetProcessHeap () returned 0x12c0000 [0165.712] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.712] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pt\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc2b31ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2b31ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0165.712] GetProcessHeap () returned 0x12c0000 [0165.712] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.712] GetProcessHeap () returned 0x12c0000 [0165.712] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.712] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pt-BR\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x386b77a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x386b77a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x386b77a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0165.713] GetProcessHeap () returned 0x12c0000 [0165.713] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.713] GetProcessHeap () returned 0x12c0000 [0165.713] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.713] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ro\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4903b8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4903b8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4903b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0165.713] GetProcessHeap () returned 0x12c0000 [0165.713] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.713] GetProcessHeap () returned 0x12c0000 [0165.713] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.713] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ru\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86a6c5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0165.713] GetProcessHeap () returned 0x12c0000 [0165.713] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.713] GetProcessHeap () returned 0x12c0000 [0165.713] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.714] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sk\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67a8250, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67a8250, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0165.714] GetProcessHeap () returned 0x12c0000 [0165.714] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.714] GetProcessHeap () returned 0x12c0000 [0165.714] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.714] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sl\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a7cf13, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a7cf13, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0165.714] GetProcessHeap () returned 0x12c0000 [0165.714] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.714] GetProcessHeap () returned 0x12c0000 [0165.714] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.714] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-BA\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1565dae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1565dae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1565dae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0165.714] GetProcessHeap () returned 0x12c0000 [0165.714] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.714] GetProcessHeap () returned 0x12c0000 [0165.714] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.714] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-CS\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf443017d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf443017d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44563cd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0165.715] GetProcessHeap () returned 0x12c0000 [0165.715] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.715] GetProcessHeap () returned 0x12c0000 [0165.715] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.715] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Latn-CS\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0165.715] GetProcessHeap () returned 0x12c0000 [0165.715] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.715] GetProcessHeap () returned 0x12c0000 [0165.715] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.715] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sv\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0165.715] GetProcessHeap () returned 0x12c0000 [0165.715] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.715] GetProcessHeap () returned 0x12c0000 [0165.715] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.715] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\th\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb67b102, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb67b102, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb6ed802, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0165.716] GetProcessHeap () returned 0x12c0000 [0165.716] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.716] GetProcessHeap () returned 0x12c0000 [0165.716] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.716] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\tr\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0165.716] GetProcessHeap () returned 0x12c0000 [0165.716] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.716] GetProcessHeap () returned 0x12c0000 [0165.716] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.716] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\uk\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80d6078, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0165.716] GetProcessHeap () returned 0x12c0000 [0165.716] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.716] GetProcessHeap () returned 0x12c0000 [0165.716] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.716] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\vi\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c46ba0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c46ba0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c46ba0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0165.717] GetProcessHeap () returned 0x12c0000 [0165.717] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.717] GetProcessHeap () returned 0x12c0000 [0165.717] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.717] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\zh-CN\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc40a725, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc40a725, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc40a725, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0165.717] GetProcessHeap () returned 0x12c0000 [0165.717] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.717] GetProcessHeap () returned 0x12c0000 [0165.717] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0165.717] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\zh-TW\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x659fb9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x659fb9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x659fb9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0165.717] GetProcessHeap () returned 0x12c0000 [0165.717] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0165.718] GetProcessHeap () returned 0x12c0000 [0165.718] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0165.719] GetProcessHeap () returned 0x12c0000 [0165.719] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0165.720] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1c8ab024, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c8ab024, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc014, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0166.016] GetProcessHeap () returned 0x12c0000 [0166.016] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0166.017] GetProcessHeap () returned 0x12c0000 [0166.017] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0166.018] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1fc86400, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1fc86400, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc014, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0166.020] GetProcessHeap () returned 0x12c0000 [0166.020] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0166.020] GetProcessHeap () returned 0x12c0000 [0166.020] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0166.020] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc348b22, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1fc39fa2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1fc39fa2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc014, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0166.022] GetProcessHeap () returned 0x12c0000 [0166.022] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0166.022] GetProcessHeap () returned 0x12c0000 [0166.022] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0166.022] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc39bed4a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb0d2731, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb0d2731, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc014, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0166.022] GetProcessHeap () returned 0x12c0000 [0166.023] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0166.023] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\1033\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc52c782a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc52c782a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc52c782a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0166.023] GetProcessHeap () returned 0x12c0000 [0166.023] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0166.023] GetProcessHeap () returned 0x12c0000 [0166.023] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0166.023] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\1036\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf318faf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf318faf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf31b5d3e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0166.023] GetProcessHeap () returned 0x12c0000 [0166.023] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0166.023] GetProcessHeap () returned 0x12c0000 [0166.023] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0166.023] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\3082\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe34d5ed4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe34d5ed4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe34d5ed4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0166.024] GetProcessHeap () returned 0x12c0000 [0166.024] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0166.024] GetProcessHeap () returned 0x12c0000 [0166.024] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0166.025] GetProcessHeap () returned 0x12c0000 [0166.025] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0166.026] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x246bb96e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x246bb96e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc014, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0166.027] GetProcessHeap () returned 0x12c0000 [0166.027] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0166.027] GetProcessHeap () returned 0x12c0000 [0166.027] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0166.028] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc3bb225, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x241382dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x241382dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc014, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0166.030] GetProcessHeap () returned 0x12c0000 [0166.030] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0166.030] GetProcessHeap () returned 0x12c0000 [0166.030] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0166.030] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\QUERIES\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeda173cc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc014, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0166.030] GetProcessHeap () returned 0x12c0000 [0166.030] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0166.030] GetProcessHeap () returned 0x12c0000 [0166.030] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0166.030] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\SAMPLES\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb48c20e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc014, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0166.030] GetProcessHeap () returned 0x12c0000 [0166.030] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0166.031] GetProcessHeap () returned 0x12c0000 [0166.031] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0166.031] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\STARTUP\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeda173cc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc014, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0166.031] GetProcessHeap () returned 0x12c0000 [0166.031] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0166.032] GetProcessHeap () returned 0x12c0000 [0166.032] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0166.032] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa326fd, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0xa326fd, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0xa326fd, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc014, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0166.032] GetProcessHeap () returned 0x12c0000 [0166.032] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0166.032] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa326fd, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4cce0ca, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4cce0ca, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0166.045] GetProcessHeap () returned 0x12c0000 [0166.045] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0166.046] GetProcessHeap () returned 0x12c0000 [0166.046] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0166.047] GetProcessHeap () returned 0x12c0000 [0166.047] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0166.048] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\XLSTART\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeda173cc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc014, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0166.048] GetProcessHeap () returned 0x12c0000 [0166.048] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0166.563] GetProcessHeap () returned 0x12c0000 [0166.563] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0166.565] GetProcessHeap () returned 0x12c0000 [0166.565] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0166.565] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\rsod\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b1a0d3d, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xfffff3fa, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0166.568] GetProcessHeap () returned 0x12c0000 [0166.568] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0166.568] GetProcessHeap () returned 0x12c0000 [0166.568] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0166.568] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Stationery\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb48c20e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb48c20e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xfffff3fa, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0166.568] GetProcessHeap () returned 0x12c0000 [0166.568] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0166.569] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb48c20e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6099da, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0166.571] GetProcessHeap () returned 0x12c0000 [0166.571] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0166.571] GetProcessHeap () returned 0x12c0000 [0166.571] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0166.572] GetProcessHeap () returned 0x12c0000 [0166.572] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0166.573] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xfffff3fa, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0166.573] GetProcessHeap () returned 0x12c0000 [0166.573] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0166.574] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb571036, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0166.574] GetProcessHeap () returned 0x12c0000 [0166.574] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0166.574] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5972d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5bd4f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5bd4f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0166.575] GetProcessHeap () returned 0x12c0000 [0166.575] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0166.575] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5972d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb62fbf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb62fbf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0166.576] GetProcessHeap () returned 0x12c0000 [0166.576] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0166.576] GetProcessHeap () returned 0x12c0000 [0166.576] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0166.576] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5bd4f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6a2342, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6a2342, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0166.578] GetProcessHeap () returned 0x12c0000 [0166.578] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0166.578] GetProcessHeap () returned 0x12c0000 [0166.578] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0166.579] GetProcessHeap () returned 0x12c0000 [0166.579] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0166.580] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\GettingStarted16\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e332373, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e332373, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e332373, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0166.584] GetProcessHeap () returned 0x12c0000 [0166.584] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0166.584] GetProcessHeap () returned 0x12c0000 [0166.584] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0166.584] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0166.584] GetProcessHeap () returned 0x12c0000 [0166.584] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0166.584] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0166.585] GetProcessHeap () returned 0x12c0000 [0166.585] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0166.585] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Notebook Templates\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0166.585] GetProcessHeap () returned 0x12c0000 [0166.585] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0166.585] GetProcessHeap () returned 0x12c0000 [0166.585] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0166.585] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb7ad38b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0166.585] GetProcessHeap () returned 0x12c0000 [0166.585] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0166.586] GetProcessHeap () returned 0x12c0000 [0166.586] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0166.586] GetProcessHeap () returned 0x12c0000 [0166.586] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0166.587] GetProcessHeap () returned 0x12c0000 [0166.587] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0166.588] GetProcessHeap () returned 0x12c0000 [0166.588] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0166.589] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\Presentation Designs\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24517fc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24517fc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0166.591] GetProcessHeap () returned 0x12c0000 [0166.591] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0166.591] GetProcessHeap () returned 0x12c0000 [0166.591] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0166.592] GetProcessHeap () returned 0x12c0000 [0166.592] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0166.592] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xfffff3fa, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0166.593] GetProcessHeap () returned 0x12c0000 [0166.593] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0166.594] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xaf31749c, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xaf31749c, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0166.594] GetProcessHeap () returned 0x12c0000 [0166.594] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0166.594] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f15ef0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xaf31749c, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x5a112a2, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0166.594] GetProcessHeap () returned 0x12c0000 [0166.594] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0166.594] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f15ef0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2e5eac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0166.595] GetProcessHeap () returned 0x12c0000 [0166.595] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0166.595] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\Heartbeat\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e2e5eac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e2e5eac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2e5eac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0166.596] GetProcessHeap () returned 0x12c0000 [0166.596] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0166.596] GetProcessHeap () returned 0x12c0000 [0166.596] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0166.597] GetProcessHeap () returned 0x12c0000 [0166.597] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0166.598] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\VISIO\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a112a2, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x5a112a2, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5a112a2, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0166.598] GetProcessHeap () returned 0x12c0000 [0166.598] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0166.598] GetProcessHeap () returned 0x12c0000 [0166.598] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0166.599] GetProcessHeap () returned 0x12c0000 [0166.599] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0166.600] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b809370, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b809370, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0166.602] GetProcessHeap () returned 0x12c0000 [0166.602] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0166.602] GetProcessHeap () returned 0x12c0000 [0166.602] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0166.603] GetProcessHeap () returned 0x12c0000 [0166.603] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0166.604] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Common Programs\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0166.604] GetProcessHeap () returned 0x12c0000 [0166.604] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0166.605] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Common Programs\\Microsoft Office 2016 Tools\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0166.830] GetProcessHeap () returned 0x12c0000 [0166.830] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0166.830] GetProcessHeap () returned 0x12c0000 [0166.830] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0166.831] GetProcessHeap () returned 0x12c0000 [0166.831] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0166.832] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x868ac6fd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x868ac6fd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0166.832] GetProcessHeap () returned 0x12c0000 [0166.832] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0166.832] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x868ac6fd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8913323b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8913323b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0166.834] GetProcessHeap () returned 0x12c0000 [0166.834] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0166.834] GetProcessHeap () returned 0x12c0000 [0166.834] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0166.835] GetProcessHeap () returned 0x12c0000 [0166.835] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0166.835] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xaf31749c, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xaf31749c, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0166.835] GetProcessHeap () returned 0x12c0000 [0166.836] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0166.836] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\DESIGNER\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb975fdf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb975fdf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb975fdf, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0166.836] GetProcessHeap () returned 0x12c0000 [0166.836] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0166.836] GetProcessHeap () returned 0x12c0000 [0166.836] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0166.836] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x868ac6fd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x52ea133, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x52ea133, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0166.836] GetProcessHeap () returned 0x12c0000 [0166.836] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0166.837] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\DW\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf477755d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x246bb96e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x246bb96e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0166.838] GetProcessHeap () returned 0x12c0000 [0166.838] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0166.838] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\DW\\1033\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf477755d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf477755d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf47e9c8f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x132aba8 [0166.839] GetProcessHeap () returned 0x12c0000 [0166.839] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0166.839] GetProcessHeap () returned 0x12c0000 [0166.839] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0166.839] GetProcessHeap () returned 0x12c0000 [0166.839] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0166.840] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EQUATION\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x868ac6fd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb976f98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb976f98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0166.841] GetProcessHeap () returned 0x12c0000 [0166.842] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0166.842] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EQUATION\\1033\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4620012, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4620012, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4620012, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x132a4a8 [0166.842] GetProcessHeap () returned 0x12c0000 [0166.842] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0166.842] GetProcessHeap () returned 0x12c0000 [0166.842] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0166.843] GetProcessHeap () returned 0x12c0000 [0166.843] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0166.843] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EURO\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf99b89f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99b89f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99b89f6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0166.844] GetProcessHeap () returned 0x12c0000 [0166.844] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0166.844] GetProcessHeap () returned 0x12c0000 [0166.844] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0166.844] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Filters\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2ca2e08, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14c6cb9, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x14c6cb9, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0166.844] GetProcessHeap () returned 0x12c0000 [0166.844] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0166.844] GetProcessHeap () returned 0x12c0000 [0166.844] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0166.844] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2e1f46, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb976f98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb976f98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0166.846] GetProcessHeap () returned 0x12c0000 [0166.846] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0166.846] GetProcessHeap () returned 0x12c0000 [0166.846] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0166.846] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Help\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12910b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x26737b32, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26737b32, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0166.847] GetProcessHeap () returned 0x12c0000 [0166.847] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0166.847] GetProcessHeap () returned 0x12c0000 [0166.847] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0166.847] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\MSClientDataMgr\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf472b09c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf472b09c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf472b09c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0166.848] GetProcessHeap () returned 0x12c0000 [0166.848] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0166.848] GetProcessHeap () returned 0x12c0000 [0166.848] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0166.848] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2803429, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x26bb01a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bb01a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0166.848] GetProcessHeap () returned 0x12c0000 [0166.848] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0166.848] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc541ed37, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb99d23b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb99d23b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x132aaa8 [0166.850] GetProcessHeap () returned 0x12c0000 [0166.850] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0166.850] GetProcessHeap () returned 0x12c0000 [0166.850] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0166.850] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Cultures\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc461cf97, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc461cf97, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc461cf97, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x132aea8 [0166.850] GetProcessHeap () returned 0x12c0000 [0166.850] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0166.850] GetProcessHeap () returned 0x12c0000 [0166.850] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0166.850] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe99511, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x24bcc96d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24bcc96d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x132ad68 [0166.851] GetProcessHeap () returned 0x12c0000 [0166.851] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fa0048 [0166.851] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\*", lpFindFileData=0x350e290 | out: lpFindFileData=0x350e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24bcc96d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24d70354, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24d70354, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x132ada8 [0166.853] GetProcessHeap () returned 0x12c0000 [0166.853] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fa0048 | out: hHeap=0x12c0000) returned 1 [0166.853] GetProcessHeap () returned 0x12c0000 [0166.853] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fa0048 [0166.853] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Resources\\*", lpFindFileData=0x350e290 | out: lpFindFileData=0x350e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4befc00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4befc00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4befc00, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x132ab68 [0166.853] GetProcessHeap () returned 0x12c0000 [0166.853] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb1058 [0166.854] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Resources\\1033\\*", lpFindFileData=0x350e000 | out: lpFindFileData=0x350e000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4befc00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4befc00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4befc00, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x132a8e8 [0166.854] GetProcessHeap () returned 0x12c0000 [0166.854] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb1058 | out: hHeap=0x12c0000) returned 1 [0166.854] GetProcessHeap () returned 0x12c0000 [0166.854] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fa0048 | out: hHeap=0x12c0000) returned 1 [0166.855] GetProcessHeap () returned 0x12c0000 [0166.855] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0166.856] GetProcessHeap () returned 0x12c0000 [0166.856] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0166.856] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\en-us\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2803429, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2803429, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2803429, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x132a6a8 [0166.857] GetProcessHeap () returned 0x12c0000 [0166.857] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0166.857] GetProcessHeap () returned 0x12c0000 [0166.857] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0166.857] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef915def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef915def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xef915def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x132af28 [0166.857] GetProcessHeap () returned 0x12c0000 [0166.858] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0166.858] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\Office.en-us\\*", lpFindFileData=0x350e290 | out: lpFindFileData=0x350e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef915def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8f6526, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x132aaa8 [0166.858] GetProcessHeap () returned 0x12c0000 [0166.858] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0166.858] GetProcessHeap () returned 0x12c0000 [0166.858] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0166.858] GetProcessHeap () returned 0x12c0000 [0166.858] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0166.859] GetProcessHeap () returned 0x12c0000 [0166.859] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0166.860] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\PROOF\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc8d02b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8d02b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0166.866] GetProcessHeap () returned 0x12c0000 [0166.866] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0166.866] GetProcessHeap () returned 0x12c0000 [0166.866] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0166.866] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc576616a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x26bd6427, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bd6427, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0166.867] GetProcessHeap () returned 0x12c0000 [0166.867] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0166.868] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\1033\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf07b04e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf07b04e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc8aa06f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x132a868 [0166.868] GetProcessHeap () returned 0x12c0000 [0166.868] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0166.868] GetProcessHeap () returned 0x12c0000 [0166.868] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0166.868] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc883e0d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x26bd6427, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bd6427, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x132ace8 [0166.868] GetProcessHeap () returned 0x12c0000 [0166.868] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0166.868] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\*", lpFindFileData=0x350e290 | out: lpFindFileData=0x350e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc883e0d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc883e0d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8aa06f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x132abe8 [0166.869] GetProcessHeap () returned 0x12c0000 [0166.869] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0166.869] GetProcessHeap () returned 0x12c0000 [0166.869] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0166.869] GetProcessHeap () returned 0x12c0000 [0166.869] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0166.870] GetProcessHeap () returned 0x12c0000 [0166.870] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0166.870] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Source Engine\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0ed7602, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0ed7602, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0ed7602, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0167.078] GetProcessHeap () returned 0x12c0000 [0167.078] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0167.079] GetProcessHeap () returned 0x12c0000 [0167.079] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0167.080] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TEXTCONV\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf15d84bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42b29f3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5f76153, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.080] GetProcessHeap () returned 0x12c0000 [0167.080] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0167.080] GetProcessHeap () returned 0x12c0000 [0167.080] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0167.080] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0167.081] GetProcessHeap () returned 0x12c0000 [0167.081] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.082] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AFTRNOON\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26bfc670, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.082] GetProcessHeap () returned 0x12c0000 [0167.082] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.082] GetProcessHeap () returned 0x12c0000 [0167.082] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.082] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ARCTIC\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.083] GetProcessHeap () returned 0x12c0000 [0167.083] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.083] GetProcessHeap () returned 0x12c0000 [0167.083] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.083] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AXIS\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.083] GetProcessHeap () returned 0x12c0000 [0167.083] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.083] GetProcessHeap () returned 0x12c0000 [0167.083] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.083] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLENDS\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a70c44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a96da3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27a96da3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.083] GetProcessHeap () returned 0x12c0000 [0167.083] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.083] GetProcessHeap () returned 0x12c0000 [0167.083] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.083] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUECALM\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a70c44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a70c44, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27a70c44, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.084] GetProcessHeap () returned 0x12c0000 [0167.084] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.084] GetProcessHeap () returned 0x12c0000 [0167.084] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.084] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUEPRNT\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.084] GetProcessHeap () returned 0x12c0000 [0167.084] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.084] GetProcessHeap () returned 0x12c0000 [0167.084] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.084] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BOLDSTRI\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a96da3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.084] GetProcessHeap () returned 0x12c0000 [0167.084] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.084] GetProcessHeap () returned 0x12c0000 [0167.085] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.085] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BREEZE\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a96da3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.085] GetProcessHeap () returned 0x12c0000 [0167.085] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.085] GetProcessHeap () returned 0x12c0000 [0167.085] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.085] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CANYON\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.085] GetProcessHeap () returned 0x12c0000 [0167.085] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.085] GetProcessHeap () returned 0x12c0000 [0167.085] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.085] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CAPSULES\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.085] GetProcessHeap () returned 0x12c0000 [0167.086] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.086] GetProcessHeap () returned 0x12c0000 [0167.086] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.086] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CASCADE\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.086] GetProcessHeap () returned 0x12c0000 [0167.086] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.086] GetProcessHeap () returned 0x12c0000 [0167.086] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.086] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\COMPASS\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.086] GetProcessHeap () returned 0x12c0000 [0167.086] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.086] GetProcessHeap () returned 0x12c0000 [0167.086] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.086] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CONCRETE\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.087] GetProcessHeap () returned 0x12c0000 [0167.087] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.087] GetProcessHeap () returned 0x12c0000 [0167.087] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.087] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\DEEPBLUE\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.087] GetProcessHeap () returned 0x12c0000 [0167.087] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.087] GetProcessHeap () returned 0x12c0000 [0167.087] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.087] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECHO\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.087] GetProcessHeap () returned 0x12c0000 [0167.087] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.087] GetProcessHeap () returned 0x12c0000 [0167.087] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.087] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECLIPSE\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.088] GetProcessHeap () returned 0x12c0000 [0167.088] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.088] GetProcessHeap () returned 0x12c0000 [0167.088] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.088] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EDGE\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.088] GetProcessHeap () returned 0x12c0000 [0167.088] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.088] GetProcessHeap () returned 0x12c0000 [0167.088] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.088] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EVRGREEN\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b2f705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b2f705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.088] GetProcessHeap () returned 0x12c0000 [0167.088] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.088] GetProcessHeap () returned 0x12c0000 [0167.088] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.088] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EXPEDITN\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b2f705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b2f705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.089] GetProcessHeap () returned 0x12c0000 [0167.089] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.089] GetProcessHeap () returned 0x12c0000 [0167.089] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.089] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ICE\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ba1ded, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ba1ded, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.089] GetProcessHeap () returned 0x12c0000 [0167.089] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.089] GetProcessHeap () returned 0x12c0000 [0167.089] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.089] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\INDUST\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b5591d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.090] GetProcessHeap () returned 0x12c0000 [0167.090] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.090] GetProcessHeap () returned 0x12c0000 [0167.090] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.090] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\IRIS\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b5591d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b7bb91, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b7bb91, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.090] GetProcessHeap () returned 0x12c0000 [0167.090] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.090] GetProcessHeap () returned 0x12c0000 [0167.090] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.090] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\JOURNAL\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b5591d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.090] GetProcessHeap () returned 0x12c0000 [0167.090] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.090] GetProcessHeap () returned 0x12c0000 [0167.091] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.091] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LAYERS\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b7bb91, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ba1ded, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ba1ded, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.091] GetProcessHeap () returned 0x12c0000 [0167.091] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.091] GetProcessHeap () returned 0x12c0000 [0167.091] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.091] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LEVEL\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b7bb91, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.091] GetProcessHeap () returned 0x12c0000 [0167.091] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.091] GetProcessHeap () returned 0x12c0000 [0167.091] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.091] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\NETWORK\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.091] GetProcessHeap () returned 0x12c0000 [0167.091] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.092] GetProcessHeap () returned 0x12c0000 [0167.092] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.092] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PAPYRUS\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.092] GetProcessHeap () returned 0x12c0000 [0167.092] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.092] GetProcessHeap () returned 0x12c0000 [0167.092] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.092] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PIXEL\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.092] GetProcessHeap () returned 0x12c0000 [0167.092] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.092] GetProcessHeap () returned 0x12c0000 [0167.092] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.092] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PROFILE\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.092] GetProcessHeap () returned 0x12c0000 [0167.092] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.093] GetProcessHeap () returned 0x12c0000 [0167.093] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.093] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\QUAD\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.093] GetProcessHeap () returned 0x12c0000 [0167.093] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.093] GetProcessHeap () returned 0x12c0000 [0167.093] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.093] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RADIAL\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.094] GetProcessHeap () returned 0x12c0000 [0167.094] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.094] GetProcessHeap () returned 0x12c0000 [0167.094] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.094] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\REFINED\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.094] GetProcessHeap () returned 0x12c0000 [0167.094] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.094] GetProcessHeap () returned 0x12c0000 [0167.094] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.094] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RICEPAPR\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.095] GetProcessHeap () returned 0x12c0000 [0167.095] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.095] GetProcessHeap () returned 0x12c0000 [0167.095] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.095] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RIPPLE\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.095] GetProcessHeap () returned 0x12c0000 [0167.095] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.095] GetProcessHeap () returned 0x12c0000 [0167.095] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.095] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RMNSQUE\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.095] GetProcessHeap () returned 0x12c0000 [0167.095] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.095] GetProcessHeap () returned 0x12c0000 [0167.095] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.095] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SATIN\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x289576aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x289576aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.096] GetProcessHeap () returned 0x12c0000 [0167.096] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.096] GetProcessHeap () returned 0x12c0000 [0167.096] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.096] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SKY\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.096] GetProcessHeap () returned 0x12c0000 [0167.096] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.096] GetProcessHeap () returned 0x12c0000 [0167.096] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.096] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SLATE\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c609b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c609b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.096] GetProcessHeap () returned 0x12c0000 [0167.097] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.097] GetProcessHeap () returned 0x12c0000 [0167.097] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.097] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SONORA\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c3a755, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.097] GetProcessHeap () returned 0x12c0000 [0167.097] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.097] GetProcessHeap () returned 0x12c0000 [0167.097] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.097] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SPRING\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.097] GetProcessHeap () returned 0x12c0000 [0167.097] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.097] GetProcessHeap () returned 0x12c0000 [0167.098] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.098] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STRTEDGE\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x28551719, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28551719, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.098] GetProcessHeap () returned 0x12c0000 [0167.098] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.098] GetProcessHeap () returned 0x12c0000 [0167.098] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.098] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STUDIO\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c3a755, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.098] GetProcessHeap () returned 0x12c0000 [0167.098] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.098] GetProcessHeap () returned 0x12c0000 [0167.098] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.099] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SUMIPNTG\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.099] GetProcessHeap () returned 0x12c0000 [0167.099] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.099] GetProcessHeap () returned 0x12c0000 [0167.099] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.099] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATER\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.099] GetProcessHeap () returned 0x12c0000 [0167.099] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.099] GetProcessHeap () returned 0x12c0000 [0167.099] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.099] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATERMAR\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.100] GetProcessHeap () returned 0x12c0000 [0167.100] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.100] GetProcessHeap () returned 0x12c0000 [0167.100] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0167.101] GetProcessHeap () returned 0x12c0000 [0167.101] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0167.101] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0dcc568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.102] GetProcessHeap () returned 0x12c0000 [0167.102] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.103] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ENES\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc85db99, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc85db99, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc883e0d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0167.106] GetProcessHeap () returned 0x12c0000 [0167.106] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.106] GetProcessHeap () returned 0x12c0000 [0167.106] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.106] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ENFR\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc8aa06f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8aa06f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0167.107] GetProcessHeap () returned 0x12c0000 [0167.107] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.107] GetProcessHeap () returned 0x12c0000 [0167.107] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.107] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ESEN\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c8cf9c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8aa06f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0167.107] GetProcessHeap () returned 0x12c0000 [0167.107] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.107] GetProcessHeap () returned 0x12c0000 [0167.107] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.107] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\FREN\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf63a12a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc91c74d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0167.107] GetProcessHeap () returned 0x12c0000 [0167.107] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.107] GetProcessHeap () returned 0x12c0000 [0167.107] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0167.108] GetProcessHeap () returned 0x12c0000 [0167.108] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0167.109] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca8c279f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca8c279f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca8c279f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0167.109] GetProcessHeap () returned 0x12c0000 [0167.109] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.110] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca8c279f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf24004e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf24004e4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.110] GetProcessHeap () returned 0x12c0000 [0167.110] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0167.110] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\1033\\*", lpFindFileData=0x350e290 | out: lpFindFileData=0x350e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb4d4679, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4d4679, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xecf3682d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1325f40 [0167.110] GetProcessHeap () returned 0x12c0000 [0167.110] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0167.110] GetProcessHeap () returned 0x12c0000 [0167.110] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.111] GetProcessHeap () returned 0x12c0000 [0167.111] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0167.112] GetProcessHeap () returned 0x12c0000 [0167.112] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0167.112] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52ea133, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x52ea133, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x52ea133, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.112] GetProcessHeap () returned 0x12c0000 [0167.112] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.113] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52ea133, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x62b5b1e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x62b5b1e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0167.114] GetProcessHeap () returned 0x12c0000 [0167.114] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.114] GetProcessHeap () returned 0x12c0000 [0167.114] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0167.115] GetProcessHeap () returned 0x12c0000 [0167.115] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0167.116] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0167.116] GetProcessHeap () returned 0x12c0000 [0167.116] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.117] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.117] GetProcessHeap () returned 0x12c0000 [0167.117] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0167.117] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\*", lpFindFileData=0x350e290 | out: lpFindFileData=0x350e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca27806, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xca27806, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1327e90 [0167.117] GetProcessHeap () returned 0x12c0000 [0167.117] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0167.117] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\1033\\*", lpFindFileData=0x350e000 | out: lpFindFileData=0x350e000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca27806, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xca27806, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xca27806, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1327d50 [0167.117] GetProcessHeap () returned 0x12c0000 [0167.118] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0167.118] GetProcessHeap () returned 0x12c0000 [0167.118] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0167.118] GetProcessHeap () returned 0x12c0000 [0167.118] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.119] GetProcessHeap () returned 0x12c0000 [0167.119] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0167.120] GetProcessHeap () returned 0x12c0000 [0167.120] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0167.121] GetProcessHeap () returned 0x12c0000 [0167.121] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0167.277] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\ODBC\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e16872b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e16872b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2272ee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.278] GetProcessHeap () returned 0x12c0000 [0167.278] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0167.278] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\ODBC\\Data Sources\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e2272ee, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e2272ee, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2272ee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0167.278] GetProcessHeap () returned 0x12c0000 [0167.278] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0167.278] GetProcessHeap () returned 0x12c0000 [0167.278] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0167.279] GetProcessHeap () returned 0x12c0000 [0167.279] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0167.280] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0167.280] GetProcessHeap () returned 0x12c0000 [0167.280] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0167.281] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\MSMAPI\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.281] GetProcessHeap () returned 0x12c0000 [0167.281] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.281] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\MSMAPI\\1033\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0167.281] GetProcessHeap () returned 0x12c0000 [0167.281] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.281] GetProcessHeap () returned 0x12c0000 [0167.281] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0167.282] GetProcessHeap () returned 0x12c0000 [0167.282] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0167.283] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\ole db\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb8dd674, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.284] GetProcessHeap () returned 0x12c0000 [0167.284] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0167.284] GetProcessHeap () returned 0x12c0000 [0167.284] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0167.285] GetProcessHeap () returned 0x12c0000 [0167.285] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0167.286] GetProcessHeap () returned 0x12c0000 [0167.286] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0167.286] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.286] GetProcessHeap () returned 0x12c0000 [0167.286] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0167.286] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26f8376, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0167.287] GetProcessHeap () returned 0x12c0000 [0167.287] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0167.287] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\EQUATION\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x28551719, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28551719, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0167.288] GetProcessHeap () returned 0x12c0000 [0167.288] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0167.288] GetProcessHeap () returned 0x12c0000 [0167.288] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0167.288] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefcf5b24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0167.289] GetProcessHeap () returned 0x12c0000 [0167.289] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.289] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1028\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12dd5ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf12dd5ae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0167.290] GetProcessHeap () returned 0x12c0000 [0167.290] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.290] GetProcessHeap () returned 0x12c0000 [0167.290] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.290] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1031\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e56af1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1e56af1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1e56af1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0167.290] GetProcessHeap () returned 0x12c0000 [0167.290] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.290] GetProcessHeap () returned 0x12c0000 [0167.290] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.290] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1033\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0501a67, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0501a67, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0501a67, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0167.290] GetProcessHeap () returned 0x12c0000 [0167.290] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.290] GetProcessHeap () returned 0x12c0000 [0167.290] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.290] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1036\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0167.291] GetProcessHeap () returned 0x12c0000 [0167.291] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.291] GetProcessHeap () returned 0x12c0000 [0167.291] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.291] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1040\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6296213, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0167.291] GetProcessHeap () returned 0x12c0000 [0167.291] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.291] GetProcessHeap () returned 0x12c0000 [0167.291] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.291] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1041\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf41cdbc1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0167.291] GetProcessHeap () returned 0x12c0000 [0167.291] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.291] GetProcessHeap () returned 0x12c0000 [0167.291] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.291] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1042\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1329a43, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1329a43, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1329a43, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0167.292] GetProcessHeap () returned 0x12c0000 [0167.292] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.292] GetProcessHeap () returned 0x12c0000 [0167.292] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.292] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1046\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b81e2e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b81e2e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b81e2e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0167.292] GetProcessHeap () returned 0x12c0000 [0167.292] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.292] GetProcessHeap () returned 0x12c0000 [0167.292] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.292] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1049\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff31e88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff31e88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0167.293] GetProcessHeap () returned 0x12c0000 [0167.293] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.293] GetProcessHeap () returned 0x12c0000 [0167.293] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.293] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\2052\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefcf5b24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefcf5b24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefcf5b24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0167.293] GetProcessHeap () returned 0x12c0000 [0167.293] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.293] GetProcessHeap () returned 0x12c0000 [0167.293] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.293] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\3082\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd68243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd68243, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0167.293] GetProcessHeap () returned 0x12c0000 [0167.293] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.294] GetProcessHeap () returned 0x12c0000 [0167.294] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0167.295] GetProcessHeap () returned 0x12c0000 [0167.295] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0167.295] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26f8376, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x28577965, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28577965, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0167.296] GetProcessHeap () returned 0x12c0000 [0167.296] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.296] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\1033\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4512fb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd4512fb5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2ebae3b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0167.297] GetProcessHeap () returned 0x12c0000 [0167.297] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.297] GetProcessHeap () returned 0x12c0000 [0167.297] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.297] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\Cultures\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc436e5a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc436e5a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc436e5a6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0167.297] GetProcessHeap () returned 0x12c0000 [0167.297] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.297] GetProcessHeap () returned 0x12c0000 [0167.297] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.297] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\en-us\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2d86b0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2d86b0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2d86b0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0167.298] GetProcessHeap () returned 0x12c0000 [0167.298] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.298] GetProcessHeap () returned 0x12c0000 [0167.298] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0167.299] GetProcessHeap () returned 0x12c0000 [0167.299] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0167.299] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Portal\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd8e49f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0167.300] GetProcessHeap () returned 0x12c0000 [0167.300] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.300] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Portal\\1033\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd8e49f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd8e49f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0167.300] GetProcessHeap () returned 0x12c0000 [0167.300] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.300] GetProcessHeap () returned 0x12c0000 [0167.300] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0167.302] GetProcessHeap () returned 0x12c0000 [0167.302] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0167.303] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc968bf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc968bf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0167.303] GetProcessHeap () returned 0x12c0000 [0167.303] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.303] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA6\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0167.304] GetProcessHeap () returned 0x12c0000 [0167.304] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.304] GetProcessHeap () returned 0x12c0000 [0167.304] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.304] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc968bf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc968bf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc968bf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0167.304] GetProcessHeap () returned 0x12c0000 [0167.304] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0167.304] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\1033\\*", lpFindFileData=0x350e290 | out: lpFindFileData=0x350e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc968bf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1324678 [0167.306] GetProcessHeap () returned 0x12c0000 [0167.306] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0167.306] GetProcessHeap () returned 0x12c0000 [0167.306] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.306] GetProcessHeap () returned 0x12c0000 [0167.306] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0167.307] GetProcessHeap () returned 0x12c0000 [0167.307] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0167.308] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c1a793, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0167.308] GetProcessHeap () returned 0x12c0000 [0167.308] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.308] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\16\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c1a793, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0167.308] GetProcessHeap () returned 0x12c0000 [0167.309] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0167.309] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\*", lpFindFileData=0x350e290 | out: lpFindFileData=0x350e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd7bf89, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd7bf89, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1324738 [0167.309] GetProcessHeap () returned 0x12c0000 [0167.309] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0167.309] GetProcessHeap () returned 0x12c0000 [0167.309] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.310] GetProcessHeap () returned 0x12c0000 [0167.310] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0167.310] GetProcessHeap () returned 0x12c0000 [0167.310] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0167.311] GetProcessHeap () returned 0x12c0000 [0167.311] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0167.312] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\System\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0167.313] GetProcessHeap () returned 0x12c0000 [0167.313] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0167.313] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\System\\ole db\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7b78b8d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0167.313] GetProcessHeap () returned 0x12c0000 [0167.313] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0167.313] GetProcessHeap () returned 0x12c0000 [0167.313] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0167.314] GetProcessHeap () returned 0x12c0000 [0167.314] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0167.315] GetProcessHeap () returned 0x12c0000 [0167.315] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0167.315] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2e11c27d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e11c27d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0167.315] GetProcessHeap () returned 0x12c0000 [0167.315] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0167.316] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb142e44, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.316] GetProcessHeap () returned 0x12c0000 [0167.316] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0167.316] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb142e44, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0167.316] GetProcessHeap () returned 0x12c0000 [0167.316] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.316] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ae4bf10, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ae4bf10, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0167.317] GetProcessHeap () returned 0x12c0000 [0167.317] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0167.317] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\Cartridges\\*", lpFindFileData=0x350e290 | out: lpFindFileData=0x350e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a6fec90, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2aebe60a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2aebe60a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1324d38 [0167.318] GetProcessHeap () returned 0x12c0000 [0167.318] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0167.318] GetProcessHeap () returned 0x12c0000 [0167.318] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0167.319] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\*", lpFindFileData=0x350e290 | out: lpFindFileData=0x350e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb142e44, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1324bf8 [0167.319] GetProcessHeap () returned 0x12c0000 [0167.319] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0167.319] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\1033\\*", lpFindFileData=0x350e000 | out: lpFindFileData=0x350e000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee45f66d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1324938 [0167.319] GetProcessHeap () returned 0x12c0000 [0167.319] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0167.319] GetProcessHeap () returned 0x12c0000 [0167.319] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0167.320] GetProcessHeap () returned 0x12c0000 [0167.320] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.320] GetProcessHeap () returned 0x12c0000 [0167.320] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0167.321] GetProcessHeap () returned 0x12c0000 [0167.321] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0167.322] GetProcessHeap () returned 0x12c0000 [0167.322] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0167.322] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Office\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e11c27d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e11c27d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e11c27d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.322] GetProcessHeap () returned 0x12c0000 [0167.323] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0167.323] GetProcessHeap () returned 0x12c0000 [0167.323] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0167.323] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0167.323] GetProcessHeap () returned 0x12c0000 [0167.323] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0167.323] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\110\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0167.323] GetProcessHeap () returned 0x12c0000 [0167.323] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.323] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\110\\Shared\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.324] GetProcessHeap () returned 0x12c0000 [0167.324] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.324] GetProcessHeap () returned 0x12c0000 [0167.324] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0167.482] GetProcessHeap () returned 0x12c0000 [0167.482] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0167.482] GetProcessHeap () returned 0x12c0000 [0167.482] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0167.482] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0167.483] GetProcessHeap () returned 0x12c0000 [0167.483] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0167.483] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.483] GetProcessHeap () returned 0x12c0000 [0167.483] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.483] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\110\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0167.484] GetProcessHeap () returned 0x12c0000 [0167.484] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.484] GetProcessHeap () returned 0x12c0000 [0167.484] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0167.491] GetProcessHeap () returned 0x12c0000 [0167.491] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0167.492] GetProcessHeap () returned 0x12c0000 [0167.492] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0167.493] GetProcessHeap () returned 0x12c0000 [0167.493] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0167.493] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0167.494] GetProcessHeap () returned 0x12c0000 [0167.494] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0167.495] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0167.495] GetProcessHeap () returned 0x12c0000 [0167.495] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0167.495] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0167.495] GetProcessHeap () returned 0x12c0000 [0167.495] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.495] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2b0d4700, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0d4700, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.496] GetProcessHeap () returned 0x12c0000 [0167.496] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0167.496] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\Cartridges\\*", lpFindFileData=0x350e290 | out: lpFindFileData=0x350e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2afef8f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b0ae4ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0ae4ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1324338 [0167.498] GetProcessHeap () returned 0x12c0000 [0167.498] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0167.498] GetProcessHeap () returned 0x12c0000 [0167.498] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0167.498] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\*", lpFindFileData=0x350e290 | out: lpFindFileData=0x350e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x13244b8 [0167.498] GetProcessHeap () returned 0x12c0000 [0167.498] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0167.498] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\1033\\*", lpFindFileData=0x350e000 | out: lpFindFileData=0x350e000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf3143659, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x13242f8 [0167.499] GetProcessHeap () returned 0x12c0000 [0167.499] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0167.499] GetProcessHeap () returned 0x12c0000 [0167.499] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0167.499] GetProcessHeap () returned 0x12c0000 [0167.499] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.500] GetProcessHeap () returned 0x12c0000 [0167.500] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0167.501] GetProcessHeap () returned 0x12c0000 [0167.501] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0167.502] GetProcessHeap () returned 0x12c0000 [0167.502] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0167.502] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2f517e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2f517e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2f517e4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0167.502] GetProcessHeap () returned 0x12c0000 [0167.502] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0167.502] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2f517e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0167.502] GetProcessHeap () returned 0x12c0000 [0167.502] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.503] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\1033\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd43957d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca99edb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e1424f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.504] GetProcessHeap () returned 0x12c0000 [0167.504] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.504] GetProcessHeap () returned 0x12c0000 [0167.504] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.504] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3201264, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2c4a611d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2c4a611d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.505] GetProcessHeap () returned 0x12c0000 [0167.505] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0167.505] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\1033\\*", lpFindFileData=0x350e290 | out: lpFindFileData=0x350e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf428c77b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf428c77b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf428c77b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1324f38 [0167.505] GetProcessHeap () returned 0x12c0000 [0167.505] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0167.505] GetProcessHeap () returned 0x12c0000 [0167.505] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0167.505] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\*", lpFindFileData=0x350e290 | out: lpFindFileData=0x350e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3201264, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1324db8 [0167.507] GetProcessHeap () returned 0x12c0000 [0167.507] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0167.507] GetProcessHeap () returned 0x12c0000 [0167.507] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.508] GetProcessHeap () returned 0x12c0000 [0167.508] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0167.509] GetProcessHeap () returned 0x12c0000 [0167.509] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0167.510] GetProcessHeap () returned 0x12c0000 [0167.510] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0167.511] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0167.511] GetProcessHeap () returned 0x12c0000 [0167.511] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0167.511] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\110\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.512] GetProcessHeap () returned 0x12c0000 [0167.512] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.512] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\110\\Shared\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0167.512] GetProcessHeap () returned 0x12c0000 [0167.512] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.512] GetProcessHeap () returned 0x12c0000 [0167.512] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0167.513] GetProcessHeap () returned 0x12c0000 [0167.513] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0167.514] GetProcessHeap () returned 0x12c0000 [0167.514] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0167.514] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.514] GetProcessHeap () returned 0x12c0000 [0167.514] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0167.514] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0167.515] GetProcessHeap () returned 0x12c0000 [0167.515] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.515] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\110\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0167.515] GetProcessHeap () returned 0x12c0000 [0167.515] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.515] GetProcessHeap () returned 0x12c0000 [0167.515] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0167.516] GetProcessHeap () returned 0x12c0000 [0167.516] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0167.517] GetProcessHeap () returned 0x12c0000 [0167.517] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0167.517] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Mozilla Firefox\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0167.517] GetProcessHeap () returned 0x12c0000 [0167.517] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0167.517] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Mozilla Firefox\\plugins\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.517] GetProcessHeap () returned 0x12c0000 [0167.517] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0167.518] GetProcessHeap () returned 0x12c0000 [0167.518] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0167.519] GetProcessHeap () returned 0x12c0000 [0167.519] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0167.519] GetProcessHeap () returned 0x12c0000 [0167.519] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0167.519] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\System\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8d7d1d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee8d7d1d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0167.520] GetProcessHeap () returned 0x12c0000 [0167.520] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0167.520] GetProcessHeap () returned 0x12c0000 [0167.520] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0167.521] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\SystemX86\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b6194c4, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b6194c4, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0167.522] GetProcessHeap () returned 0x12c0000 [0167.522] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0167.522] GetProcessHeap () returned 0x12c0000 [0167.522] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0167.522] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0167.522] GetProcessHeap () returned 0x12c0000 [0167.522] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0167.523] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.523] GetProcessHeap () returned 0x12c0000 [0167.524] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0167.524] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_64\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a65087, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0167.524] GetProcessHeap () returned 0x12c0000 [0167.524] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.524] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_64\\Microsoft.Office.Access.BusinessDataCatalog\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a65087, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0167.524] GetProcessHeap () returned 0x12c0000 [0167.524] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0167.524] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_64\\Microsoft.Office.Access.BusinessDataCatalog\\16.0.0.0__71E9BCE111E9429C\\*", lpFindFileData=0x350e290 | out: lpFindFileData=0x350e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a65087, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x13242f8 [0167.524] GetProcessHeap () returned 0x12c0000 [0167.524] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0167.525] GetProcessHeap () returned 0x12c0000 [0167.525] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.525] GetProcessHeap () returned 0x12c0000 [0167.525] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0167.526] GetProcessHeap () returned 0x12c0000 [0167.526] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0167.526] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0167.636] GetProcessHeap () returned 0x12c0000 [0167.636] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.640] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.AdomdClient\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a30a43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a30a43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a56cbe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0167.640] GetProcessHeap () returned 0x12c0000 [0167.640] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0167.640] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.AdomdClient\\11.0.0.0__89845DCD8080CC91\\*", lpFindFileData=0x350e290 | out: lpFindFileData=0x350e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a56cbe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a56cbe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a56cbe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1324df8 [0167.640] GetProcessHeap () returned 0x12c0000 [0167.640] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0167.641] GetProcessHeap () returned 0x12c0000 [0167.641] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.641] GetProcessHeap () returned 0x12c0000 [0167.641] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.641] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.SPClient.Interfaces\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd2face, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd2face, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd2face, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0167.641] GetProcessHeap () returned 0x12c0000 [0167.641] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0167.641] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.SPClient.Interfaces\\11.0.0.0__89845DCD8080CC91\\*", lpFindFileData=0x350e290 | out: lpFindFileData=0x350e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd2face, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd2face, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd2face, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1324db8 [0167.641] GetProcessHeap () returned 0x12c0000 [0167.641] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0167.641] GetProcessHeap () returned 0x12c0000 [0167.641] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.642] GetProcessHeap () returned 0x12c0000 [0167.642] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.643] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.BusinessData\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22a9f7a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22a9f7a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22d01df, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0167.643] GetProcessHeap () returned 0x12c0000 [0167.643] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0167.643] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.BusinessData\\16.0.0.0__71E9BCE111E9429C\\*", lpFindFileData=0x350e290 | out: lpFindFileData=0x350e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22d01df, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22d01df, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1324638 [0167.643] GetProcessHeap () returned 0x12c0000 [0167.643] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0167.644] GetProcessHeap () returned 0x12c0000 [0167.644] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.644] GetProcessHeap () returned 0x12c0000 [0167.644] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.645] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessApplications.Diagnostics\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x863456d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0167.645] GetProcessHeap () returned 0x12c0000 [0167.645] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0167.645] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessApplications.Diagnostics\\16.0.0.0__71E9BCE111E9429C\\*", lpFindFileData=0x350e290 | out: lpFindFileData=0x350e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x863456d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x13241f8 [0167.646] GetProcessHeap () returned 0x12c0000 [0167.646] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0167.646] GetProcessHeap () returned 0x12c0000 [0167.646] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.647] GetProcessHeap () returned 0x12c0000 [0167.647] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.647] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0167.648] GetProcessHeap () returned 0x12c0000 [0167.648] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0167.648] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData\\16.0.0.0__71E9BCE111E9429C\\*", lpFindFileData=0x350e290 | out: lpFindFileData=0x350e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x13248f8 [0167.648] GetProcessHeap () returned 0x12c0000 [0167.648] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0167.648] GetProcessHeap () returned 0x12c0000 [0167.648] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.648] GetProcessHeap () returned 0x12c0000 [0167.648] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.648] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData.Intl\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d97f24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d97f24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0167.648] GetProcessHeap () returned 0x12c0000 [0167.648] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0167.648] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData.Intl\\16.0.0.0__71E9BCE111E9429C\\*", lpFindFileData=0x350e290 | out: lpFindFileData=0x350e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d97f24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d97f24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1324838 [0167.649] GetProcessHeap () returned 0x12c0000 [0167.649] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0167.649] GetProcessHeap () returned 0x12c0000 [0167.649] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.650] GetProcessHeap () returned 0x12c0000 [0167.650] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0167.650] GetProcessHeap () returned 0x12c0000 [0167.650] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0167.651] GetProcessHeap () returned 0x12c0000 [0167.651] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0167.652] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\INF\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.653] GetProcessHeap () returned 0x12c0000 [0167.653] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0167.653] GetProcessHeap () returned 0x12c0000 [0167.653] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0167.653] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\Installer\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26abeaf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc369dacd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc369dacd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.653] GetProcessHeap () returned 0x12c0000 [0167.653] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0167.653] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\Installer\\{90160000-000F-0000-1000-0000000FF1CE}\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26abeaf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc434832e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc434832e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0167.653] GetProcessHeap () returned 0x12c0000 [0167.653] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0167.653] GetProcessHeap () returned 0x12c0000 [0167.653] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0167.653] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\Installer\\{90160000-001F-0409-1000-0000000FF1CE}\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2f507b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2f507b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2f507b2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0167.654] GetProcessHeap () returned 0x12c0000 [0167.654] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0167.654] GetProcessHeap () returned 0x12c0000 [0167.654] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0167.654] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\Installer\\{90160000-001F-040C-1000-0000000FF1CE}\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc369dacd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc369dacd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc369dacd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0167.654] GetProcessHeap () returned 0x12c0000 [0167.654] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0167.654] GetProcessHeap () returned 0x12c0000 [0167.654] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0167.654] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\Installer\\{90160000-001F-0C0A-1000-0000000FF1CE}\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc369dacd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc369dacd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc369dacd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0167.655] GetProcessHeap () returned 0x12c0000 [0167.655] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0167.655] GetProcessHeap () returned 0x12c0000 [0167.655] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0167.655] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\Installer\\{90160000-006E-0409-1000-0000000FF1CE}\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc28c2111, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc28c2111, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc28c2111, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0167.655] GetProcessHeap () returned 0x12c0000 [0167.655] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0167.655] GetProcessHeap () returned 0x12c0000 [0167.655] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0167.656] GetProcessHeap () returned 0x12c0000 [0167.656] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0167.657] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\PCHEALTH\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e24d55a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e24d55a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e273816, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0167.657] GetProcessHeap () returned 0x12c0000 [0167.657] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0167.657] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\PCHEALTH\\ERRORREP\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e273816, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e299a0e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e299a0e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.658] GetProcessHeap () returned 0x12c0000 [0167.658] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.658] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\PCHEALTH\\ERRORREP\\QHEADLES\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e299a0e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e299a0e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e299a0e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0167.658] GetProcessHeap () returned 0x12c0000 [0167.658] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.658] GetProcessHeap () returned 0x12c0000 [0167.658] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0167.658] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\PCHEALTH\\ERRORREP\\QSIGNOFF\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e299a0e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e299a0e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e299a0e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0167.658] GetProcessHeap () returned 0x12c0000 [0167.658] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0167.658] GetProcessHeap () returned 0x12c0000 [0167.658] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0167.658] GetProcessHeap () returned 0x12c0000 [0167.658] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0167.659] GetProcessHeap () returned 0x12c0000 [0167.659] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0167.660] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\SHELLNEW\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2daddbf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b285e60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b285e60, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0167.661] GetProcessHeap () returned 0x12c0000 [0167.661] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0167.661] GetProcessHeap () returned 0x12c0000 [0167.661] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0167.662] GetProcessHeap () returned 0x12c0000 [0167.662] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0167.662] GetProcessHeap () returned 0x12c0000 [0167.662] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0167.663] GetProcessHeap () returned 0x12c0000 [0167.663] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cb1078 | out: hHeap=0x12c0000) returned 1 [0167.663] GetProcessHeap () returned 0x12c0000 [0167.663] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cb1078 [0167.663] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office 15\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x4dca02c6, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x4dca02c6, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0167.663] GetProcessHeap () returned 0x12c0000 [0167.663] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0167.664] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office 15\\ClientX64\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82e68d8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x82e8efda, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0167.664] GetProcessHeap () returned 0x12c0000 [0167.664] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0167.664] GetProcessHeap () returned 0x12c0000 [0167.664] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cb1078 | out: hHeap=0x12c0000) returned 1 [0167.665] GetProcessHeap () returned 0x12c0000 [0167.665] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cb1078 [0167.666] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe99e772e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xa7154510, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xf7d369cb, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0167.827] GetProcessHeap () returned 0x12c0000 [0167.827] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0167.828] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\browser\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb0da723, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xece35df2, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xece35df2, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.828] GetProcessHeap () returned 0x12c0000 [0167.828] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0167.829] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\browser\\extensions\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd77219, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xedb40aac, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xedb40aac, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0167.829] GetProcessHeap () returned 0x12c0000 [0167.829] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0167.829] GetProcessHeap () returned 0x12c0000 [0167.830] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0167.830] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\browser\\features\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd77219, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xedb1a83d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xedb1a83d, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0167.831] GetProcessHeap () returned 0x12c0000 [0167.831] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0167.831] GetProcessHeap () returned 0x12c0000 [0167.831] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0167.831] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\browser\\VisualElements\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xece35df2, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xed7d339e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xed7d339e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0167.831] GetProcessHeap () returned 0x12c0000 [0167.831] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0167.831] GetProcessHeap () returned 0x12c0000 [0167.831] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0167.832] GetProcessHeap () returned 0x12c0000 [0167.833] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0167.833] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\defaults\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec080216, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecc92398, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecc92398, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.833] GetProcessHeap () returned 0x12c0000 [0167.833] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0167.834] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\defaults\\pref\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecc92398, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeccb8639, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xeccb8639, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0167.834] GetProcessHeap () returned 0x12c0000 [0167.834] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0167.834] GetProcessHeap () returned 0x12c0000 [0167.834] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0167.835] GetProcessHeap () returned 0x12c0000 [0167.835] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0167.835] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\dictionaries\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec0cc6d9, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecc92398, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecc92398, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0167.835] GetProcessHeap () returned 0x12c0000 [0167.835] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0167.835] GetProcessHeap () returned 0x12c0000 [0167.835] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0167.835] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\fonts\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec0f2926, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecbad561, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecbad561, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0167.836] GetProcessHeap () returned 0x12c0000 [0167.836] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0167.836] GetProcessHeap () returned 0x12c0000 [0167.836] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0167.836] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\gmp-clearkey\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec13ee02, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecaee98b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecaee98b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.836] GetProcessHeap () returned 0x12c0000 [0167.836] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0167.836] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\gmp-clearkey\\0.1\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecaee98b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecb87321, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecb87321, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0167.837] GetProcessHeap () returned 0x12c0000 [0167.837] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0167.837] GetProcessHeap () returned 0x12c0000 [0167.837] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0167.837] GetProcessHeap () returned 0x12c0000 [0167.837] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0167.837] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\uninstall\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe9d2ec34, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef639ad2, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef639ad2, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0167.837] GetProcessHeap () returned 0x12c0000 [0167.837] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0167.837] GetProcessHeap () returned 0x12c0000 [0167.837] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cb1078 | out: hHeap=0x12c0000) returned 1 [0167.838] GetProcessHeap () returned 0x12c0000 [0167.838] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cb1078 [0167.839] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709c717f, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x709c717f, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x709c717f, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0167.839] GetProcessHeap () returned 0x12c0000 [0167.839] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0167.839] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\Microsoft\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709c717f, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x709c717f, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x709c717f, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.840] GetProcessHeap () returned 0x12c0000 [0167.840] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0167.840] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709c717f, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x709c717f, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x709c717f, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0167.840] GetProcessHeap () returned 0x12c0000 [0167.840] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0167.841] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709c717f, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x709c717f, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x709c717f, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0167.841] GetProcessHeap () returned 0x12c0000 [0167.841] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0167.841] GetProcessHeap () returned 0x12c0000 [0167.841] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0167.841] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709c717f, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x709ed3a7, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x709ed3a7, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0167.843] GetProcessHeap () returned 0x12c0000 [0167.843] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0167.843] GetProcessHeap () returned 0x12c0000 [0167.843] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0167.843] GetProcessHeap () returned 0x12c0000 [0167.843] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0167.844] GetProcessHeap () returned 0x12c0000 [0167.844] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cb1078 | out: hHeap=0x12c0000) returned 1 [0167.844] GetProcessHeap () returned 0x12c0000 [0167.844] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cb1078 [0167.845] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709ed3a7, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x4dcec80c, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x4dcec80c, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0167.845] GetProcessHeap () returned 0x12c0000 [0167.845] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0167.845] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709ed3a7, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x709ed3a7, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x709ed3a7, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.845] GetProcessHeap () returned 0x12c0000 [0167.845] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0167.846] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709ed3a7, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70a5faff, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70a5faff, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0167.846] GetProcessHeap () returned 0x12c0000 [0167.846] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0167.846] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709ed3a7, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70a3987a, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70a3987a, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0167.847] GetProcessHeap () returned 0x12c0000 [0167.847] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0167.848] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70a3987a, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70a3987a, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70a3987a, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0167.848] GetProcessHeap () returned 0x12c0000 [0167.848] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0167.848] GetProcessHeap () returned 0x12c0000 [0167.848] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0167.850] GetProcessHeap () returned 0x12c0000 [0167.850] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0167.850] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70a5faff, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70af849b, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70af849b, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0167.851] GetProcessHeap () returned 0x12c0000 [0167.851] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0167.852] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70af849b, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70af849b, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0167.852] GetProcessHeap () returned 0x12c0000 [0167.852] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0167.852] GetProcessHeap () returned 0x12c0000 [0167.852] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0167.853] GetProcessHeap () returned 0x12c0000 [0167.853] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0167.854] GetProcessHeap () returned 0x12c0000 [0167.854] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0167.854] GetProcessHeap () returned 0x12c0000 [0167.855] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cb1078 | out: hHeap=0x12c0000) returned 1 [0167.855] GetProcessHeap () returned 0x12c0000 [0167.855] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cb1078 [0167.855] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\rempl\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x59f2f4b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa73e1bbd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8390c831, ftLastWriteTime.dwHighDateTime=0x1d32735, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0167.855] GetProcessHeap () returned 0x12c0000 [0167.855] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0167.855] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\rempl\\Logs\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8390c831, ftCreationTime.dwHighDateTime=0x1d32735, ftLastAccessTime.dwLowDateTime=0x86e9cd10, ftLastAccessTime.dwHighDateTime=0x1d336d7, ftLastWriteTime.dwLowDateTime=0x86e9cd10, ftLastWriteTime.dwHighDateTime=0x1d336d7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.857] GetProcessHeap () returned 0x12c0000 [0167.857] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0167.857] GetProcessHeap () returned 0x12c0000 [0167.857] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cb1078 | out: hHeap=0x12c0000) returned 1 [0167.857] GetProcessHeap () returned 0x12c0000 [0167.857] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cb1078 [0167.857] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Uninstall Information\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd2709a20, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xa747e827, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2709a20, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0167.858] GetProcessHeap () returned 0x12c0000 [0167.858] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cb1078 | out: hHeap=0x12c0000) returned 1 [0167.859] GetProcessHeap () returned 0x12c0000 [0167.859] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cb1078 [0167.859] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4c509d45, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x4ea7bdb9, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x4ea7bdb9, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0167.859] GetProcessHeap () returned 0x12c0000 [0167.859] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0167.859] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x749f4454, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa747febb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x865d24d3, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0167.859] GetProcessHeap () returned 0x12c0000 [0167.859] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0167.859] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x865d24d3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa74805fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x865d24d3, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0167.860] GetProcessHeap () returned 0x12c0000 [0167.860] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0167.860] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x865d24d3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa755519f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0167.860] GetProcessHeap () returned 0x12c0000 [0167.860] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0167.861] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e2fdd51, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa76437f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0167.861] GetProcessHeap () returned 0x12c0000 [0167.861] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0167.861] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\ar-sa\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e2fdd51, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa76f9fe7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e32400a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0167.863] GetProcessHeap () returned 0x12c0000 [0167.863] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0167.863] GetProcessHeap () returned 0x12c0000 [0167.863] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0167.863] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\bg-BG\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e32400a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa772ddc0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e32400a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0167.864] GetProcessHeap () returned 0x12c0000 [0167.864] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0167.865] GetProcessHeap () returned 0x12c0000 [0167.865] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0167.865] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\ca-ES\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa77fb761, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e34a1b4, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0167.866] GetProcessHeap () returned 0x12c0000 [0167.866] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0167.866] GetProcessHeap () returned 0x12c0000 [0167.866] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0167.866] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\ca-ES-valencia\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa78433f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e34a1b4, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0167.868] GetProcessHeap () returned 0x12c0000 [0167.868] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0167.868] GetProcessHeap () returned 0x12c0000 [0167.868] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0167.868] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\cs-CZ\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa78fe34b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3703fd, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0167.869] GetProcessHeap () returned 0x12c0000 [0167.869] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0167.869] GetProcessHeap () returned 0x12c0000 [0167.869] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0167.869] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\da-DK\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3703fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa795f898, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3703fd, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0167.965] GetProcessHeap () returned 0x12c0000 [0167.965] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0167.965] GetProcessHeap () returned 0x12c0000 [0167.965] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0167.965] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\de-AT\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3703fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa79714a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e396633, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0167.967] GetProcessHeap () returned 0x12c0000 [0167.967] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0167.967] GetProcessHeap () returned 0x12c0000 [0167.967] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0167.967] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\de-CH\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e396633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa79bb5f0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e396633, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0167.969] GetProcessHeap () returned 0x12c0000 [0167.969] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0167.969] GetProcessHeap () returned 0x12c0000 [0167.969] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0167.969] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\de-DE\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e396633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7a12def, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3bc889, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0167.970] GetProcessHeap () returned 0x12c0000 [0167.970] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0167.970] GetProcessHeap () returned 0x12c0000 [0167.970] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0167.970] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\el-GR\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7adca7e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3bc889, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0167.972] GetProcessHeap () returned 0x12c0000 [0167.972] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0167.972] GetProcessHeap () returned 0x12c0000 [0167.972] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0167.972] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-AU\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7b18143, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3e2af7, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0167.973] GetProcessHeap () returned 0x12c0000 [0167.973] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0167.973] GetProcessHeap () returned 0x12c0000 [0167.973] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0167.973] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-CA\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7b914a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3e2af7, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0167.975] GetProcessHeap () returned 0x12c0000 [0167.975] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0167.975] GetProcessHeap () returned 0x12c0000 [0167.975] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0167.975] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-GB\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7b93b92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e408d2a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0167.977] GetProcessHeap () returned 0x12c0000 [0167.977] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0167.977] GetProcessHeap () returned 0x12c0000 [0167.977] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0167.977] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-HK\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7c098ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e408d2a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0167.978] GetProcessHeap () returned 0x12c0000 [0167.978] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0167.978] GetProcessHeap () returned 0x12c0000 [0167.978] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0167.978] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-ID\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7c0b4b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e42efab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0167.980] GetProcessHeap () returned 0x12c0000 [0167.980] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0167.980] GetProcessHeap () returned 0x12c0000 [0167.980] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0167.980] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-IE\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7c6d3fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e42efab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0167.981] GetProcessHeap () returned 0x12c0000 [0167.981] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0167.982] GetProcessHeap () returned 0x12c0000 [0167.982] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0167.982] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-IN\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7ca1328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e42efab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0167.983] GetProcessHeap () returned 0x12c0000 [0167.983] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0167.983] GetProcessHeap () returned 0x12c0000 [0167.983] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0167.983] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-MY\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7d0e1e3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4551d8, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0167.985] GetProcessHeap () returned 0x12c0000 [0167.985] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0167.985] GetProcessHeap () returned 0x12c0000 [0167.985] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0167.985] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-NZ\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7d107f6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4551d8, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0167.986] GetProcessHeap () returned 0x12c0000 [0167.986] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0167.986] GetProcessHeap () returned 0x12c0000 [0167.986] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0167.986] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-PH\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7d8451a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4551d8, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0167.988] GetProcessHeap () returned 0x12c0000 [0167.988] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0167.988] GetProcessHeap () returned 0x12c0000 [0167.988] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0167.988] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-US\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7de1d75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e47b424, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0167.989] GetProcessHeap () returned 0x12c0000 [0167.990] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0167.990] GetProcessHeap () returned 0x12c0000 [0167.990] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0167.990] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-ZA\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7de3d39, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e47b424, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0167.991] GetProcessHeap () returned 0x12c0000 [0167.991] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0167.991] GetProcessHeap () returned 0x12c0000 [0167.991] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0167.991] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\es-AR\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7e82a38, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4a167a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0167.993] GetProcessHeap () returned 0x12c0000 [0167.993] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0167.993] GetProcessHeap () returned 0x12c0000 [0167.993] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0167.993] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\es-CL\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f2851c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4a167a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0167.994] GetProcessHeap () returned 0x12c0000 [0167.994] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0167.994] GetProcessHeap () returned 0x12c0000 [0167.994] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0167.994] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\es-CO\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f2a5d6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4a167a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0167.998] GetProcessHeap () returned 0x12c0000 [0167.998] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0167.998] GetProcessHeap () returned 0x12c0000 [0167.998] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0167.998] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\es-ES\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f8f938, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4c78e2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0168.000] GetProcessHeap () returned 0x12c0000 [0168.000] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0168.000] GetProcessHeap () returned 0x12c0000 [0168.000] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0168.000] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\es-MX\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f926c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4c78e2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0168.001] GetProcessHeap () returned 0x12c0000 [0168.001] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0168.001] GetProcessHeap () returned 0x12c0000 [0168.001] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0168.001] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\es-US\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7fd9866, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4c78e2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0168.003] GetProcessHeap () returned 0x12c0000 [0168.003] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0168.003] GetProcessHeap () returned 0x12c0000 [0168.003] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0168.003] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\es-XL\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4edb3a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa803fb1a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e93ff63, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0168.004] GetProcessHeap () returned 0x12c0000 [0168.004] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0168.005] GetProcessHeap () returned 0x12c0000 [0168.005] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0168.005] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\et-EE\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e9661e4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa80b9206, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ebc8896, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0168.006] GetProcessHeap () returned 0x12c0000 [0168.006] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0168.006] GetProcessHeap () returned 0x12c0000 [0168.006] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0168.006] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\eu-ES\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ebc8896, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8130bd1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ec87470, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0168.008] GetProcessHeap () returned 0x12c0000 [0168.008] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0168.008] GetProcessHeap () returned 0x12c0000 [0168.008] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0168.008] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\fi-FI\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ecad633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa817116e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ed6c2ab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0168.009] GetProcessHeap () returned 0x12c0000 [0168.009] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0168.009] GetProcessHeap () returned 0x12c0000 [0168.009] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0168.009] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\fr-BE\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ed6c2ab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa81d6f2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2a33eb, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0168.011] GetProcessHeap () returned 0x12c0000 [0168.011] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0168.011] GetProcessHeap () returned 0x12c0000 [0168.011] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0168.011] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\fr-CA\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f2a33eb, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa820b284, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2c9637, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0168.129] GetProcessHeap () returned 0x12c0000 [0168.129] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0168.129] GetProcessHeap () returned 0x12c0000 [0168.129] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0168.129] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\fr-CH\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f2c9637, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8276077, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2c9637, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0168.130] GetProcessHeap () returned 0x12c0000 [0168.130] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0168.131] GetProcessHeap () returned 0x12c0000 [0168.131] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0168.131] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\fr-FR\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f2c9637, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa830d026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2ef892, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0168.132] GetProcessHeap () returned 0x12c0000 [0168.132] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0168.132] GetProcessHeap () returned 0x12c0000 [0168.132] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0168.132] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\fr-XF\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f2ef892, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa830f28d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f315afa, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0168.134] GetProcessHeap () returned 0x12c0000 [0168.134] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0168.134] GetProcessHeap () returned 0x12c0000 [0168.134] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0168.134] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\gl-ES\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f315afa, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8397774, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f315afa, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0168.135] GetProcessHeap () returned 0x12c0000 [0168.135] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0168.135] GetProcessHeap () returned 0x12c0000 [0168.135] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0168.135] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\he-IL\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f33bd1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa83e88ef, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f33bd1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0168.137] GetProcessHeap () returned 0x12c0000 [0168.137] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0168.137] GetProcessHeap () returned 0x12c0000 [0168.137] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0168.137] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\hr-HR\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f33bd1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa83eab4d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f33bd1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0168.139] GetProcessHeap () returned 0x12c0000 [0168.139] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0168.139] GetProcessHeap () returned 0x12c0000 [0168.139] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0168.139] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\hu-HU\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f33bd1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa84655fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f361f6d, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0168.140] GetProcessHeap () returned 0x12c0000 [0168.140] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0168.140] GetProcessHeap () returned 0x12c0000 [0168.140] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0168.140] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\is-IS\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f361f6d, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa84b3b2f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f361f6d, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0168.142] GetProcessHeap () returned 0x12c0000 [0168.142] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0168.142] GetProcessHeap () returned 0x12c0000 [0168.142] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0168.142] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\it-IT\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f361f6d, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa84fae3d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3881cc, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0168.143] GetProcessHeap () returned 0x12c0000 [0168.143] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0168.143] GetProcessHeap () returned 0x12c0000 [0168.143] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0168.143] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\ja-JP\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3881cc, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa85726e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3881cc, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0168.145] GetProcessHeap () returned 0x12c0000 [0168.145] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0168.145] GetProcessHeap () returned 0x12c0000 [0168.145] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0168.145] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\ko-KR\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3881cc, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8575326, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3ae466, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0168.146] GetProcessHeap () returned 0x12c0000 [0168.146] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0168.146] GetProcessHeap () returned 0x12c0000 [0168.146] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0168.147] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\lb-LU\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3ae466, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa85bfd1b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3ae466, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0168.148] GetProcessHeap () returned 0x12c0000 [0168.148] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0168.148] GetProcessHeap () returned 0x12c0000 [0168.148] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0168.148] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\lt-LT\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3ae466, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa860670d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3d467a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0168.150] GetProcessHeap () returned 0x12c0000 [0168.150] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0168.150] GetProcessHeap () returned 0x12c0000 [0168.150] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0168.150] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\lv-LV\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3d467a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8608b57, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3d467a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0168.151] GetProcessHeap () returned 0x12c0000 [0168.151] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0168.151] GetProcessHeap () returned 0x12c0000 [0168.151] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0168.151] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\ms-MY\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3d467a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8663023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3fa8d2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0168.153] GetProcessHeap () returned 0x12c0000 [0168.153] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0168.153] GetProcessHeap () returned 0x12c0000 [0168.153] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0168.153] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\nb-NO\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3fa8d2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8664e62, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3fa8d2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0168.155] GetProcessHeap () returned 0x12c0000 [0168.155] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0168.155] GetProcessHeap () returned 0x12c0000 [0168.155] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0168.155] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\nl-BE\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3fa8d2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa86afcc3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f420b1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0168.157] GetProcessHeap () returned 0x12c0000 [0168.157] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0168.157] GetProcessHeap () returned 0x12c0000 [0168.157] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0168.157] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\nl-NL\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa86b1f8a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f420b1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0168.159] GetProcessHeap () returned 0x12c0000 [0168.159] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0168.159] GetProcessHeap () returned 0x12c0000 [0168.159] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0168.159] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\nn-NO\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8706406, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f420b1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0168.160] GetProcessHeap () returned 0x12c0000 [0168.160] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0168.160] GetProcessHeap () returned 0x12c0000 [0168.160] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0168.160] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\pl-PL\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa870879d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f741ca5, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0168.162] GetProcessHeap () returned 0x12c0000 [0168.162] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0168.162] GetProcessHeap () returned 0x12c0000 [0168.162] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0168.162] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\pt-BR\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f9f0764, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8758deb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8fb21a2e, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0168.164] GetProcessHeap () returned 0x12c0000 [0168.164] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0168.164] GetProcessHeap () returned 0x12c0000 [0168.164] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0168.164] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\pt-PT\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8fb940f6, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa879d17a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x910709ea, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0168.165] GetProcessHeap () returned 0x12c0000 [0168.165] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0168.165] GetProcessHeap () returned 0x12c0000 [0168.165] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0168.165] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\resources\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x910709ea, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8805329, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91ab8c63, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0168.167] GetProcessHeap () returned 0x12c0000 [0168.167] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0168.167] GetProcessHeap () returned 0x12c0000 [0168.167] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0168.167] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\ro-RO\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91ab8c63, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8807941, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91b2b4b0, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0168.262] GetProcessHeap () returned 0x12c0000 [0168.262] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0168.262] GetProcessHeap () returned 0x12c0000 [0168.262] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0168.262] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\ru-RU\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91b515fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8880860, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91ca8b67, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0168.264] GetProcessHeap () returned 0x12c0000 [0168.264] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0168.264] GetProcessHeap () returned 0x12c0000 [0168.264] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0168.264] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\sk-SK\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91ca8b67, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa88ef27e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92500ff3, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0168.266] GetProcessHeap () returned 0x12c0000 [0168.266] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0168.266] GetProcessHeap () returned 0x12c0000 [0168.266] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0168.266] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\sl-SI\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x926583f5, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa88f19a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92906e91, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0168.268] GetProcessHeap () returned 0x12c0000 [0168.268] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0168.268] GetProcessHeap () returned 0x12c0000 [0168.268] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0168.268] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\sr-Latn-RS\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92906e91, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8945b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92eb078f, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0168.269] GetProcessHeap () returned 0x12c0000 [0168.269] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0168.270] GetProcessHeap () returned 0x12c0000 [0168.270] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0168.270] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\sv-SE\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92eb078f, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8a33d41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x934cc975, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0168.271] GetProcessHeap () returned 0x12c0000 [0168.271] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0168.271] GetProcessHeap () returned 0x12c0000 [0168.271] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0168.271] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\th-TH\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x934cc975, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8a36304, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x93670243, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0168.273] GetProcessHeap () returned 0x12c0000 [0168.273] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0168.273] GetProcessHeap () returned 0x12c0000 [0168.273] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0168.273] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\tr-TR\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93670243, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8b3c077, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x93991459, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0168.274] GetProcessHeap () returned 0x12c0000 [0168.274] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0168.274] GetProcessHeap () returned 0x12c0000 [0168.274] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0168.274] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\uk-UA\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93991459, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8c00614, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x93a9c3f1, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0168.276] GetProcessHeap () returned 0x12c0000 [0168.276] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0168.276] GetProcessHeap () returned 0x12c0000 [0168.276] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0168.276] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\vi-VN\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93b5b0aa, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8c62177, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x949a9132, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0168.278] GetProcessHeap () returned 0x12c0000 [0168.278] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0168.278] GetProcessHeap () returned 0x12c0000 [0168.278] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0168.278] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\zh-CN\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x949a9132, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8c9dee8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94c57ba9, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0168.279] GetProcessHeap () returned 0x12c0000 [0168.279] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0168.279] GetProcessHeap () returned 0x12c0000 [0168.279] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0168.279] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\zh-HK\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94c57ba9, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8db6dd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0168.281] GetProcessHeap () returned 0x12c0000 [0168.281] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0168.281] GetProcessHeap () returned 0x12c0000 [0168.281] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0168.281] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\zh-TW\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94cf0533, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8db965a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0168.283] GetProcessHeap () returned 0x12c0000 [0168.283] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0168.283] GetProcessHeap () returned 0x12c0000 [0168.283] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0168.284] GetProcessHeap () returned 0x12c0000 [0168.284] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0168.284] GetProcessHeap () returned 0x12c0000 [0168.284] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0168.284] GetProcessHeap () returned 0x12c0000 [0168.285] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0168.285] GetProcessHeap () returned 0x12c0000 [0168.285] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0168.285] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\Logs\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c52ff94, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x53c41cd1, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x53c41cd1, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0168.286] GetProcessHeap () returned 0x12c0000 [0168.286] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0168.286] GetProcessHeap () returned 0x12c0000 [0168.286] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cb1078 | out: hHeap=0x12c0000) returned 1 [0168.287] GetProcessHeap () returned 0x12c0000 [0168.287] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cb1078 [0168.287] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4dca02c6, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x4dca02c6, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0168.288] GetProcessHeap () returned 0x12c0000 [0168.288] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0168.288] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\en-US\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa8fdc6ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0168.290] GetProcessHeap () returned 0x12c0000 [0168.290] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0168.290] GetProcessHeap () returned 0x12c0000 [0168.290] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0168.290] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\Offline\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa8fdd5e7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a4f7cc5, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0168.290] GetProcessHeap () returned 0x12c0000 [0168.290] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0168.290] GetProcessHeap () returned 0x12c0000 [0168.290] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cb1078 | out: hHeap=0x12c0000) returned 1 [0168.291] GetProcessHeap () returned 0x12c0000 [0168.291] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cb1078 [0168.291] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Defender Advanced Threat Protection\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa8fde0ed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0168.292] GetProcessHeap () returned 0x12c0000 [0168.292] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0168.292] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Defender Advanced Threat Protection\\en-US\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa8fde773, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0168.292] GetProcessHeap () returned 0x12c0000 [0168.292] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0168.292] GetProcessHeap () returned 0x12c0000 [0168.293] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cb1078 | out: hHeap=0x12c0000) returned 1 [0168.293] GetProcessHeap () returned 0x12c0000 [0168.293] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cb1078 [0168.294] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4dca02c6, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x4dca02c6, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0168.294] GetProcessHeap () returned 0x12c0000 [0168.294] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0168.295] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\en-US\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa90b7e0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0168.295] GetProcessHeap () returned 0x12c0000 [0168.295] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0168.295] GetProcessHeap () returned 0x12c0000 [0168.295] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cb1078 | out: hHeap=0x12c0000) returned 1 [0168.296] GetProcessHeap () returned 0x12c0000 [0168.296] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cb1078 [0168.296] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e4faee, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x4dcc6277, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x4dcc6277, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0168.296] GetProcessHeap () returned 0x12c0000 [0168.296] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0168.297] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9124bcc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0168.298] GetProcessHeap () returned 0x12c0000 [0168.298] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0168.298] GetProcessHeap () returned 0x12c0000 [0168.298] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0168.298] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Icons\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9125145, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0168.299] GetProcessHeap () returned 0x12c0000 [0168.299] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0168.299] GetProcessHeap () returned 0x12c0000 [0168.299] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0168.299] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Media Renderer\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9182d5a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0168.300] GetProcessHeap () returned 0x12c0000 [0168.300] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0168.300] GetProcessHeap () returned 0x12c0000 [0168.300] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0168.300] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c5441, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0168.302] GetProcessHeap () returned 0x12c0000 [0168.302] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0168.302] GetProcessHeap () returned 0x12c0000 [0168.302] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0168.302] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Skins\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c66b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0168.302] GetProcessHeap () returned 0x12c0000 [0168.302] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0168.302] GetProcessHeap () returned 0x12c0000 [0168.302] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0168.302] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Visualizations\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c754d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0168.303] GetProcessHeap () returned 0x12c0000 [0168.303] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0168.303] GetProcessHeap () returned 0x12c0000 [0168.303] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cb1078 | out: hHeap=0x12c0000) returned 1 [0168.303] GetProcessHeap () returned 0x12c0000 [0168.303] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cb1078 [0168.303] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Multimedia Platform\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa91c7efb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a4f7cc5, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0168.304] GetProcessHeap () returned 0x12c0000 [0168.304] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cb1078 | out: hHeap=0x12c0000) returned 1 [0168.304] GetProcessHeap () returned 0x12c0000 [0168.304] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cb1078 [0168.304] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa91c8710, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0168.304] GetProcessHeap () returned 0x12c0000 [0168.304] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0168.304] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\Accessories\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa91c944d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7120260d, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0168.305] GetProcessHeap () returned 0x12c0000 [0168.305] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0168.305] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\Accessories\\en-US\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c9e08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0168.305] GetProcessHeap () returned 0x12c0000 [0168.305] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0168.305] GetProcessHeap () returned 0x12c0000 [0168.305] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0168.306] GetProcessHeap () returned 0x12c0000 [0168.306] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0168.307] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa9257555, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0168.307] GetProcessHeap () returned 0x12c0000 [0168.307] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0168.308] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\en-US\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9258521, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0168.308] GetProcessHeap () returned 0x12c0000 [0168.308] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0168.360] GetProcessHeap () returned 0x12c0000 [0168.360] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0168.360] GetProcessHeap () returned 0x12c0000 [0168.360] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cb1078 | out: hHeap=0x12c0000) returned 1 [0168.361] GetProcessHeap () returned 0x12c0000 [0168.361] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cb1078 [0168.362] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4dd389cd, ftLastAccessTime.dwHighDateTime=0x1d569c7, ftLastWriteTime.dwLowDateTime=0x4dd389cd, ftLastWriteTime.dwHighDateTime=0x1d569c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0168.363] GetProcessHeap () returned 0x12c0000 [0168.363] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0168.363] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\en-US\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa92ab93a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0168.363] GetProcessHeap () returned 0x12c0000 [0168.363] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0168.363] GetProcessHeap () returned 0x12c0000 [0168.363] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cb1078 | out: hHeap=0x12c0000) returned 1 [0168.364] GetProcessHeap () returned 0x12c0000 [0168.364] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cb1078 [0168.364] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Portable Devices\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92ac52c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a51df28, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0168.364] GetProcessHeap () returned 0x12c0000 [0168.364] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cb1078 | out: hHeap=0x12c0000) returned 1 [0168.365] GetProcessHeap () returned 0x12c0000 [0168.365] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cb1078 [0168.365] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Security\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92acc65, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0168.365] GetProcessHeap () returned 0x12c0000 [0168.365] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0168.365] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Security\\BrowserCore\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92ad688, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0168.365] GetProcessHeap () returned 0x12c0000 [0168.365] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0168.366] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Security\\BrowserCore\\en-US\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa92ae2d6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0168.366] GetProcessHeap () returned 0x12c0000 [0168.366] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0168.366] GetProcessHeap () returned 0x12c0000 [0168.366] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0168.367] GetProcessHeap () returned 0x12c0000 [0168.367] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cb1078 | out: hHeap=0x12c0000) returned 1 [0168.367] GetProcessHeap () returned 0x12c0000 [0168.367] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cb1078 [0168.367] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92aed1a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0168.367] GetProcessHeap () returned 0x12c0000 [0168.367] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0168.368] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92af7c3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0168.368] GetProcessHeap () returned 0x12c0000 [0168.368] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0168.368] GetProcessHeap () returned 0x12c0000 [0168.368] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0168.368] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Shared Gadgets\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92aff0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0168.368] GetProcessHeap () returned 0x12c0000 [0168.368] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0168.368] GetProcessHeap () returned 0x12c0000 [0168.368] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cb1078 | out: hHeap=0x12c0000) returned 1 [0168.369] GetProcessHeap () returned 0x12c0000 [0168.369] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cb1078 [0168.369] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\*", lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8da88b6d, ftLastAccessTime.dwHighDateTime=0x1d3274e, ftLastWriteTime.dwLowDateTime=0x8da88b6d, ftLastWriteTime.dwHighDateTime=0x1d3274e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9508 [0168.377] GetProcessHeap () returned 0x12c0000 [0168.377] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0168.377] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x223c89ad, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xa93a9ec0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3002ee68, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0168.382] GetProcessHeap () returned 0x12c0000 [0168.382] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0168.382] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x228b384c, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xa93abe68, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x228b384c, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0168.383] GetProcessHeap () returned 0x12c0000 [0168.383] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0168.383] GetProcessHeap () returned 0x12c0000 [0168.383] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0168.383] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\Assets\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x229e4b3b, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xa94b581e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2310be20, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0168.391] GetProcessHeap () returned 0x12c0000 [0168.391] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0168.391] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\Assets\\App\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x229e4b3b, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xa95725d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x22a0ae1c, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0168.393] GetProcessHeap () returned 0x12c0000 [0168.393] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0168.393] GetProcessHeap () returned 0x12c0000 [0168.393] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0168.393] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\Assets\\Periscope\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22a31024, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xa95a0375, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x22a572ca, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0168.396] GetProcessHeap () returned 0x12c0000 [0168.396] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0168.558] GetProcessHeap () returned 0x12c0000 [0168.558] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0168.559] GetProcessHeap () returned 0x12c0000 [0168.559] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0168.559] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\js\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2310be20, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xa967b88f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2313207f, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0168.562] GetProcessHeap () returned 0x12c0000 [0168.562] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0168.562] GetProcessHeap () returned 0x12c0000 [0168.562] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0168.562] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x3002ee68, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xa967c915, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3002ee68, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0168.563] GetProcessHeap () returned 0x12c0000 [0168.563] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0168.563] GetProcessHeap () returned 0x12c0000 [0168.563] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0168.564] GetProcessHeap () returned 0x12c0000 [0168.564] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0168.564] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Deleted\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa967d4bd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0168.565] GetProcessHeap () returned 0x12c0000 [0168.565] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0168.565] GetProcessHeap () returned 0x12c0000 [0168.565] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0168.565] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96c0f12e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3c9c41d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb3c9c41d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0168.566] GetProcessHeap () returned 0x12c0000 [0168.566] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0168.567] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96c0f12e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9730ad4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x96c0f12e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0168.567] GetProcessHeap () returned 0x12c0000 [0168.567] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0168.567] GetProcessHeap () returned 0x12c0000 [0168.567] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0168.567] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb3c9c41d, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xa973141d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xb3c9c41d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0168.569] GetProcessHeap () returned 0x12c0000 [0168.569] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0168.569] GetProcessHeap () returned 0x12c0000 [0168.569] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0168.570] GetProcessHeap () returned 0x12c0000 [0168.570] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0168.570] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96dd8d87, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3cc2682, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb3cc2682, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0168.572] GetProcessHeap () returned 0x12c0000 [0168.572] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0168.573] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96dfefce, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9785683, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x96dfefce, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0168.574] GetProcessHeap () returned 0x12c0000 [0168.574] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0168.574] GetProcessHeap () returned 0x12c0000 [0168.574] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0168.574] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96dfefce, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa97d9a35, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9764f8c5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0168.576] GetProcessHeap () returned 0x12c0000 [0168.576] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0168.576] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Catalog\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96e25227, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa98a3eee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x970877d7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0168.579] GetProcessHeap () returned 0x12c0000 [0168.579] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0168.579] GetProcessHeap () returned 0x12c0000 [0168.579] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0168.579] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x970ada35, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa98a4daf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x970ada35, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0168.579] GetProcessHeap () returned 0x12c0000 [0168.579] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0168.580] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\Contrast-black\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x970ada35, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa98a634d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x970ada35, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0168.581] GetProcessHeap () returned 0x12c0000 [0168.581] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0168.581] GetProcessHeap () returned 0x12c0000 [0168.581] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0168.581] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\contrast-white\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x970ada35, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa98a6acd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x970ada35, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0168.581] GetProcessHeap () returned 0x12c0000 [0168.581] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0168.581] GetProcessHeap () returned 0x12c0000 [0168.581] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0168.583] GetProcessHeap () returned 0x12c0000 [0168.583] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0168.583] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\contrast-black\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x970ada35, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa98a7570, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x970ada35, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0168.583] GetProcessHeap () returned 0x12c0000 [0168.583] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0168.583] GetProcessHeap () returned 0x12c0000 [0168.583] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0168.583] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\contrast-white\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x970ada35, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa98a7e68, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x970ada35, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0168.583] GetProcessHeap () returned 0x12c0000 [0168.583] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0168.583] GetProcessHeap () returned 0x12c0000 [0168.583] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0168.583] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x970d3c8f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9987cd1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x972809b4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0168.586] GetProcessHeap () returned 0x12c0000 [0168.586] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0168.586] GetProcessHeap () returned 0x12c0000 [0168.587] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0168.587] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\HeroHelp\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x972809b4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa998957e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x972da738, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0168.587] GetProcessHeap () returned 0x12c0000 [0168.587] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0168.587] GetProcessHeap () returned 0x12c0000 [0168.587] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0168.587] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\manifestAssets\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97326c19, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa998a0eb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x974a57e1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0168.588] GetProcessHeap () returned 0x12c0000 [0168.588] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0168.589] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\manifestAssets\\contrast-black\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97326c19, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9a18213, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9739a738, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0168.787] GetProcessHeap () returned 0x12c0000 [0168.787] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0168.787] GetProcessHeap () returned 0x12c0000 [0168.787] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0168.787] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\manifestAssets\\contrast-white\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9739a738, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9a9f7f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x974330d0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0168.789] GetProcessHeap () returned 0x12c0000 [0168.789] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0168.789] GetProcessHeap () returned 0x12c0000 [0168.789] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0168.791] GetProcessHeap () returned 0x12c0000 [0168.791] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0168.791] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Office\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x974a57e1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9aa16f0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x975664ea, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0168.803] GetProcessHeap () returned 0x12c0000 [0168.803] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0168.803] GetProcessHeap () returned 0x12c0000 [0168.803] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0168.803] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Resources\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x975664ea, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9aa22bd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9758c747, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0168.803] GetProcessHeap () returned 0x12c0000 [0168.803] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0168.804] GetProcessHeap () returned 0x12c0000 [0168.804] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0168.804] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\TextureBitmaps\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x975d8bfa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9b12d9d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9764f8c5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0168.806] GetProcessHeap () returned 0x12c0000 [0168.806] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0168.806] GetProcessHeap () returned 0x12c0000 [0168.806] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0168.806] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Workflow\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9764f8c5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9b67c1d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x976e822e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0168.807] GetProcessHeap () returned 0x12c0000 [0168.807] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0168.808] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Workflow\\NavColumn_Black\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x976e822e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9bd111d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x977346e6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0168.820] GetProcessHeap () returned 0x12c0000 [0168.820] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0168.821] GetProcessHeap () returned 0x12c0000 [0168.821] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0168.822] GetProcessHeap () returned 0x12c0000 [0168.822] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0168.822] GetProcessHeap () returned 0x12c0000 [0168.822] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0168.822] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Common\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9853e192, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9bd24bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9853e192, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0168.825] GetProcessHeap () returned 0x12c0000 [0168.825] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0168.825] GetProcessHeap () returned 0x12c0000 [0168.825] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0168.825] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb3cc2682, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb3cc2682, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb3cc2682, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0168.825] GetProcessHeap () returned 0x12c0000 [0168.826] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0168.826] GetProcessHeap () returned 0x12c0000 [0168.826] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0168.826] GetProcessHeap () returned 0x12c0000 [0168.826] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0168.827] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x339fb10b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4a05954, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb4a05954, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0168.829] GetProcessHeap () returned 0x12c0000 [0168.829] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0168.830] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33a6d81b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9cb9e99, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x33a6d81b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0168.830] GetProcessHeap () returned 0x12c0000 [0168.830] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0168.830] GetProcessHeap () returned 0x12c0000 [0168.830] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0168.831] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ccfdd0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9cba947, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x33cf6025, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0168.831] GetProcessHeap () returned 0x12c0000 [0168.831] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0168.831] GetProcessHeap () returned 0x12c0000 [0168.831] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0168.831] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb4a05954, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb4a05954, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdfcbee3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0168.832] GetProcessHeap () returned 0x12c0000 [0168.832] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0168.832] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdfcbee3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xdfcbee3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xdfcbee3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0168.833] GetProcessHeap () returned 0x12c0000 [0168.833] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0168.833] GetProcessHeap () returned 0x12c0000 [0168.833] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0168.834] GetProcessHeap () returned 0x12c0000 [0168.834] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0168.834] GetProcessHeap () returned 0x12c0000 [0168.834] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0168.834] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33d4dd68, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb523798b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb523798b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0168.836] GetProcessHeap () returned 0x12c0000 [0168.836] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0168.837] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33d73fc1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9e44ee0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x33d73fc1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0168.837] GetProcessHeap () returned 0x12c0000 [0168.837] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0168.837] GetProcessHeap () returned 0x12c0000 [0168.837] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0168.837] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f2112c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9e45833, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x33f47386, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0169.134] GetProcessHeap () returned 0x12c0000 [0169.134] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0169.134] GetProcessHeap () returned 0x12c0000 [0169.134] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0169.134] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb523798b, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb523798b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe0183a1, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0169.135] GetProcessHeap () returned 0x12c0000 [0169.135] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0169.144] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe0183a1, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xe0183a1, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xe0183a1, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0169.145] GetProcessHeap () returned 0x12c0000 [0169.145] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0169.145] GetProcessHeap () returned 0x12c0000 [0169.145] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0169.145] GetProcessHeap () returned 0x12c0000 [0169.145] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0169.147] GetProcessHeap () returned 0x12c0000 [0169.147] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0169.147] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfa8fd8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xa9f2aac4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5e205736, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0169.149] GetProcessHeap () returned 0x12c0000 [0169.149] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0169.150] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\css\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfcf205, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xa9f2be01, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfcf205, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0169.151] GetProcessHeap () returned 0x12c0000 [0169.151] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0169.151] GetProcessHeap () returned 0x12c0000 [0169.151] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0169.151] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfcf205, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xa9f2cc20, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdff5463, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0169.153] GetProcessHeap () returned 0x12c0000 [0169.153] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0169.153] GetProcessHeap () returned 0x12c0000 [0169.153] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0169.153] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\js\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdff5463, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xa9f2d5d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdff5463, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0169.153] GetProcessHeap () returned 0x12c0000 [0169.153] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0169.153] GetProcessHeap () returned 0x12c0000 [0169.153] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0169.153] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5e205736, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x10032a71, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0x10032a71, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0169.154] GetProcessHeap () returned 0x12c0000 [0169.154] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0169.155] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x10032a71, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x10032a71, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0x10032a71, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0169.160] GetProcessHeap () returned 0x12c0000 [0169.160] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0169.160] GetProcessHeap () returned 0x12c0000 [0169.160] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0169.161] GetProcessHeap () returned 0x12c0000 [0169.161] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0169.161] GetProcessHeap () returned 0x12c0000 [0169.161] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0169.161] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdf3689c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa041d8d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5e205736, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0169.164] GetProcessHeap () returned 0x12c0000 [0169.164] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0169.164] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdf3689c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa04335f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdf3689c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0169.164] GetProcessHeap () returned 0x12c0000 [0169.164] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0169.164] GetProcessHeap () returned 0x12c0000 [0169.164] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0169.164] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5e205736, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa043ddd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5e205736, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0169.165] GetProcessHeap () returned 0x12c0000 [0169.165] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0169.165] GetProcessHeap () returned 0x12c0000 [0169.165] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0169.165] GetProcessHeap () returned 0x12c0000 [0169.165] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0169.166] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x773fa578, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa095f16, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5eed6166, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0169.168] GetProcessHeap () returned 0x12c0000 [0169.168] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0169.168] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x773fa578, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa096b21, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x773fa578, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0169.168] GetProcessHeap () returned 0x12c0000 [0169.168] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0169.168] GetProcessHeap () returned 0x12c0000 [0169.169] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0169.169] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5eed6166, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa097114, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5eed6166, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0169.169] GetProcessHeap () returned 0x12c0000 [0169.169] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0169.169] GetProcessHeap () returned 0x12c0000 [0169.169] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0169.170] GetProcessHeap () returned 0x12c0000 [0169.170] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0169.170] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7746cb84, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa097cbe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5eefc3c1, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0169.172] GetProcessHeap () returned 0x12c0000 [0169.172] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0169.173] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77492ec4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa098c51, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77492ec4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0169.173] GetProcessHeap () returned 0x12c0000 [0169.173] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0169.173] GetProcessHeap () returned 0x12c0000 [0169.173] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0169.173] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77492ec4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa0991e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77492ec4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0169.173] GetProcessHeap () returned 0x12c0000 [0169.173] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0169.174] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77492ec4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa0dcf11, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x775054bc, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0169.176] GetProcessHeap () returned 0x12c0000 [0169.176] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0169.176] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77492ec4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa0df02e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x774b901c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0169.178] GetProcessHeap () returned 0x12c0000 [0169.178] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0169.179] GetProcessHeap () returned 0x12c0000 [0169.179] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0169.179] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x774b901c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa14080b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x774df276, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0169.327] GetProcessHeap () returned 0x12c0000 [0169.327] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0169.327] GetProcessHeap () returned 0x12c0000 [0169.327] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0169.328] GetProcessHeap () returned 0x12c0000 [0169.328] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0169.328] GetProcessHeap () returned 0x12c0000 [0169.328] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0169.328] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7752b705, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa1412e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7752b705, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0169.329] GetProcessHeap () returned 0x12c0000 [0169.329] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0169.329] GetProcessHeap () returned 0x12c0000 [0169.329] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0169.329] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7752b705, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa20b499, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7755195b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0169.331] GetProcessHeap () returned 0x12c0000 [0169.331] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0169.331] GetProcessHeap () returned 0x12c0000 [0169.331] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0169.331] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x776cf25e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa20c37f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x776f534b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0169.332] GetProcessHeap () returned 0x12c0000 [0169.332] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0169.333] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x776f534b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa20cf06, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x776f534b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0169.333] GetProcessHeap () returned 0x12c0000 [0169.333] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0169.333] GetProcessHeap () returned 0x12c0000 [0169.333] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0169.334] GetProcessHeap () returned 0x12c0000 [0169.335] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0169.335] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b93d5c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa20dbad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77b93d5c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0169.335] GetProcessHeap () returned 0x12c0000 [0169.335] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0169.336] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b93d5c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa20ead2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77b93d5c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0169.336] GetProcessHeap () returned 0x12c0000 [0169.336] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0169.336] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b93d5c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa28c5b9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0169.338] GetProcessHeap () returned 0x12c0000 [0169.338] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0169.338] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Finance\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b93d5c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa28d627, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77b93d5c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0169.339] GetProcessHeap () returned 0x12c0000 [0169.339] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0169.339] GetProcessHeap () returned 0x12c0000 [0169.339] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0169.339] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\FoodAndDrink\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b93d5c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa28dd9f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77b93d5c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0169.339] GetProcessHeap () returned 0x12c0000 [0169.339] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0169.339] GetProcessHeap () returned 0x12c0000 [0169.339] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0169.339] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Health\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b93d5c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa28e968, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77b93d5c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0169.340] GetProcessHeap () returned 0x12c0000 [0169.340] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0169.340] GetProcessHeap () returned 0x12c0000 [0169.340] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0169.340] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\News\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b93d5c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa28f394, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77b93d5c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0169.340] GetProcessHeap () returned 0x12c0000 [0169.340] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0169.341] GetProcessHeap () returned 0x12c0000 [0169.341] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0169.341] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Sports\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77bb9eb0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa28fe63, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0169.341] GetProcessHeap () returned 0x12c0000 [0169.341] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0169.341] GetProcessHeap () returned 0x12c0000 [0169.341] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0169.341] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Weather\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77bb9eb0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2907e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0169.341] GetProcessHeap () returned 0x12c0000 [0169.341] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0169.341] GetProcessHeap () returned 0x12c0000 [0169.341] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0169.342] GetProcessHeap () returned 0x12c0000 [0169.342] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0169.343] GetProcessHeap () returned 0x12c0000 [0169.343] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0169.345] GetProcessHeap () returned 0x12c0000 [0169.345] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0169.345] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77bb9eb0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2911b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0169.345] GetProcessHeap () returned 0x12c0000 [0169.345] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0169.346] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77bb9eb0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa291621, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0169.347] GetProcessHeap () returned 0x12c0000 [0169.347] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0169.347] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77bb9eb0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa291d28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0169.347] GetProcessHeap () returned 0x12c0000 [0169.347] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0169.348] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77bb9eb0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa292432, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0169.348] GetProcessHeap () returned 0x12c0000 [0169.348] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0169.348] GetProcessHeap () returned 0x12c0000 [0169.348] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0169.349] GetProcessHeap () returned 0x12c0000 [0169.349] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0169.350] GetProcessHeap () returned 0x12c0000 [0169.350] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0169.351] GetProcessHeap () returned 0x12c0000 [0169.351] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0169.352] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5eefc3c1, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa292b95, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5eefc3c1, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0169.352] GetProcessHeap () returned 0x12c0000 [0169.352] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0169.352] GetProcessHeap () returned 0x12c0000 [0169.352] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0169.352] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77be010a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa293090, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77be010a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0169.353] GetProcessHeap () returned 0x12c0000 [0169.353] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0169.353] GetProcessHeap () returned 0x12c0000 [0169.353] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0169.353] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77492ec4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa0986e1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77492ec4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0169.354] GetProcessHeap () returned 0x12c0000 [0169.354] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0169.354] GetProcessHeap () returned 0x12c0000 [0169.354] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0169.354] GetProcessHeap () returned 0x12c0000 [0169.354] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0169.355] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70454cf5, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa293665, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5fac1d9b, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0169.357] GetProcessHeap () returned 0x12c0000 [0169.357] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0169.358] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70454cf5, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa293d66, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70454cf5, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0169.358] GetProcessHeap () returned 0x12c0000 [0169.358] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0169.358] GetProcessHeap () returned 0x12c0000 [0169.358] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0169.358] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5fac1d9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa2942e2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5fac1d9b, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0169.358] GetProcessHeap () returned 0x12c0000 [0169.358] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0169.358] GetProcessHeap () returned 0x12c0000 [0169.358] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0169.359] GetProcessHeap () returned 0x12c0000 [0169.359] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0169.359] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2d4c9e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5fac1d9b, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0169.663] GetProcessHeap () returned 0x12c0000 [0169.663] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0169.664] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2d61ce, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x704a11ba, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0169.665] GetProcessHeap () returned 0x12c0000 [0169.665] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0169.665] GetProcessHeap () returned 0x12c0000 [0169.665] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0169.665] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2d69dd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x704a11ba, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0169.665] GetProcessHeap () returned 0x12c0000 [0169.665] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0169.666] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2d7904, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x704ed6f5, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0169.667] GetProcessHeap () returned 0x12c0000 [0169.667] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0169.668] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa3cc321, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x704c73fb, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0169.671] GetProcessHeap () returned 0x12c0000 [0169.672] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0169.672] GetProcessHeap () returned 0x12c0000 [0169.672] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0169.672] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x704c73fb, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa457e69, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x704ed6f5, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0169.675] GetProcessHeap () returned 0x12c0000 [0169.675] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0169.675] GetProcessHeap () returned 0x12c0000 [0169.675] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0169.677] GetProcessHeap () returned 0x12c0000 [0169.677] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0169.677] GetProcessHeap () returned 0x12c0000 [0169.677] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0169.677] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x705138c0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa458f92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x705138c0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0169.677] GetProcessHeap () returned 0x12c0000 [0169.677] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0169.677] GetProcessHeap () returned 0x12c0000 [0169.677] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0169.677] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70585fca, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa459889, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x705ac224, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0169.679] GetProcessHeap () returned 0x12c0000 [0169.679] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0169.679] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x705ac224, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa45a502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x705ac224, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0169.679] GetProcessHeap () returned 0x12c0000 [0169.679] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0169.679] GetProcessHeap () returned 0x12c0000 [0169.679] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0169.680] GetProcessHeap () returned 0x12c0000 [0169.680] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0169.680] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7074fc08, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa45af55, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7074fc08, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0169.682] GetProcessHeap () returned 0x12c0000 [0169.682] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0169.682] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7074fc08, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa45be97, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7074fc08, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0169.683] GetProcessHeap () returned 0x12c0000 [0169.683] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0169.684] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7074fc08, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa45ce6a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0169.687] GetProcessHeap () returned 0x12c0000 [0169.687] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0169.687] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Finance\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7074fc08, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa45dd3d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7074fc08, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0169.687] GetProcessHeap () returned 0x12c0000 [0169.687] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0169.687] GetProcessHeap () returned 0x12c0000 [0169.687] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0169.687] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\FoodAndDrink\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7074fc08, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa45e65c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7074fc08, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0169.688] GetProcessHeap () returned 0x12c0000 [0169.688] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0169.688] GetProcessHeap () returned 0x12c0000 [0169.688] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0169.688] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Health\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7074fc08, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa45f23f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7074fc08, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0169.689] GetProcessHeap () returned 0x12c0000 [0169.689] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0169.689] GetProcessHeap () returned 0x12c0000 [0169.689] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0169.689] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\News\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7074fc08, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa45fd68, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7074fc08, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0169.689] GetProcessHeap () returned 0x12c0000 [0169.689] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0169.689] GetProcessHeap () returned 0x12c0000 [0169.689] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0169.689] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Sports\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7074fc08, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa4608e8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7074fc08, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0169.690] GetProcessHeap () returned 0x12c0000 [0169.690] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0169.690] GetProcessHeap () returned 0x12c0000 [0169.690] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0169.690] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Weather\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa461467, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0169.697] GetProcessHeap () returned 0x12c0000 [0169.697] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0169.697] GetProcessHeap () returned 0x12c0000 [0169.697] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0169.699] GetProcessHeap () returned 0x12c0000 [0169.699] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0169.699] GetProcessHeap () returned 0x12c0000 [0169.699] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0169.699] GetProcessHeap () returned 0x12c0000 [0169.700] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0169.700] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa4624cc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0169.700] GetProcessHeap () returned 0x12c0000 [0169.700] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3fb0050 [0169.701] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa463310, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9248 [0169.701] GetProcessHeap () returned 0x12c0000 [0169.701] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0169.702] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa464150, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0169.702] GetProcessHeap () returned 0x12c0000 [0169.702] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0169.703] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa464f0e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0169.703] GetProcessHeap () returned 0x12c0000 [0169.703] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0169.704] GetProcessHeap () returned 0x12c0000 [0169.704] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0169.705] GetProcessHeap () returned 0x12c0000 [0169.705] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3fb0050 | out: hHeap=0x12c0000) returned 1 [0169.705] GetProcessHeap () returned 0x12c0000 [0169.705] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0169.706] GetProcessHeap () returned 0x12c0000 [0169.706] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0169.706] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5fac1d9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa466063, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5fac1d9b, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0169.770] GetProcessHeap () returned 0x12c0000 [0169.770] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0169.770] GetProcessHeap () returned 0x12c0000 [0169.770] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0169.770] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa466b87, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0169.771] GetProcessHeap () returned 0x12c0000 [0169.771] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0169.771] GetProcessHeap () returned 0x12c0000 [0169.771] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0169.771] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2d5b50, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x704a11ba, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0169.771] GetProcessHeap () returned 0x12c0000 [0169.771] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0169.771] GetProcessHeap () returned 0x12c0000 [0169.771] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0169.772] GetProcessHeap () returned 0x12c0000 [0169.772] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0169.772] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c254236, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa53d33a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x608513a6, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0169.847] GetProcessHeap () returned 0x12c0000 [0169.847] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0169.847] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c254236, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa53e492, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c254236, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0169.848] GetProcessHeap () returned 0x12c0000 [0169.848] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0169.848] GetProcessHeap () returned 0x12c0000 [0169.848] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0169.848] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x608513a6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa53f14b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x608513a6, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0169.848] GetProcessHeap () returned 0x12c0000 [0169.848] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0169.848] GetProcessHeap () returned 0x12c0000 [0169.848] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0169.849] GetProcessHeap () returned 0x12c0000 [0169.849] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0169.850] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2a05a2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa5d0219, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x608775e5, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0169.853] GetProcessHeap () returned 0x12c0000 [0169.853] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0169.853] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa5d1b5b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c2c683a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0169.853] GetProcessHeap () returned 0x12c0000 [0169.853] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0169.854] GetProcessHeap () returned 0x12c0000 [0169.854] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0169.854] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa5d25c8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c35f15d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0169.854] GetProcessHeap () returned 0x12c0000 [0169.854] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0169.854] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa5d4131, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c35f15d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0169.856] GetProcessHeap () returned 0x12c0000 [0169.856] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0169.857] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa66b57d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c312cbd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0169.859] GetProcessHeap () returned 0x12c0000 [0169.859] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0169.860] GetProcessHeap () returned 0x12c0000 [0169.860] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0169.860] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c312cbd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa6c2ab5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c338f0b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0169.862] GetProcessHeap () returned 0x12c0000 [0169.862] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0169.862] GetProcessHeap () returned 0x12c0000 [0169.862] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0169.863] GetProcessHeap () returned 0x12c0000 [0169.863] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0169.864] GetProcessHeap () returned 0x12c0000 [0169.864] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0169.864] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c35f15d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa6c41d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c35f15d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0169.864] GetProcessHeap () returned 0x12c0000 [0169.864] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0169.864] GetProcessHeap () returned 0x12c0000 [0169.864] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0169.864] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c490576, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa6c48a4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c490576, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0169.865] GetProcessHeap () returned 0x12c0000 [0169.865] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0169.865] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c490576, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa6c51ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c490576, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0169.866] GetProcessHeap () returned 0x12c0000 [0169.866] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0169.866] GetProcessHeap () returned 0x12c0000 [0169.866] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0169.866] GetProcessHeap () returned 0x12c0000 [0169.866] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0169.867] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa6c5add, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0169.867] GetProcessHeap () returned 0x12c0000 [0169.867] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0169.867] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa6c62fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0169.867] GetProcessHeap () returned 0x12c0000 [0169.867] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0169.868] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa73b0f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0169.870] GetProcessHeap () returned 0x12c0000 [0169.870] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0169.870] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Finance\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa73c941, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0169.871] GetProcessHeap () returned 0x12c0000 [0169.871] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0169.871] GetProcessHeap () returned 0x12c0000 [0169.871] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0169.871] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\FoodAndDrink\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa73d444, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0169.871] GetProcessHeap () returned 0x12c0000 [0169.871] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0169.871] GetProcessHeap () returned 0x12c0000 [0169.871] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0169.871] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Health\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa73dce6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0169.871] GetProcessHeap () returned 0x12c0000 [0169.871] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0169.872] GetProcessHeap () returned 0x12c0000 [0169.872] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0169.872] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\News\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa73e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0169.872] GetProcessHeap () returned 0x12c0000 [0169.872] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0169.872] GetProcessHeap () returned 0x12c0000 [0169.872] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0169.872] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Sports\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa73ed8e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0169.873] GetProcessHeap () returned 0x12c0000 [0169.873] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0169.873] GetProcessHeap () returned 0x12c0000 [0169.873] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0169.873] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Weather\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa73f623, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0169.874] GetProcessHeap () returned 0x12c0000 [0169.874] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0169.874] GetProcessHeap () returned 0x12c0000 [0169.874] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0169.875] GetProcessHeap () returned 0x12c0000 [0169.875] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0169.875] GetProcessHeap () returned 0x12c0000 [0169.875] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0169.875] GetProcessHeap () returned 0x12c0000 [0169.876] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0169.876] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa7402e1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0169.876] GetProcessHeap () returned 0x12c0000 [0169.876] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0169.876] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa741010, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0169.960] GetProcessHeap () returned 0x12c0000 [0169.960] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0169.961] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa741b52, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0169.961] GetProcessHeap () returned 0x12c0000 [0169.962] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0169.962] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa742614, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0169.962] GetProcessHeap () returned 0x12c0000 [0169.962] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0169.962] GetProcessHeap () returned 0x12c0000 [0169.962] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0169.963] GetProcessHeap () returned 0x12c0000 [0169.963] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0169.963] GetProcessHeap () returned 0x12c0000 [0169.963] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0169.964] GetProcessHeap () returned 0x12c0000 [0169.964] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0169.964] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x608775e5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa743364, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x608775e5, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0169.965] GetProcessHeap () returned 0x12c0000 [0169.965] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0169.965] GetProcessHeap () returned 0x12c0000 [0169.965] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0169.965] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c9a1593, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa743cf4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c9c77d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0169.966] GetProcessHeap () returned 0x12c0000 [0169.966] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0169.966] GetProcessHeap () returned 0x12c0000 [0169.966] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0169.966] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Themes\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6caf896e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa7447d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6caf896e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0169.968] GetProcessHeap () returned 0x12c0000 [0169.968] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0169.968] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Themes\\Fonts\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6caf896e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa7452b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6caf896e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0169.969] GetProcessHeap () returned 0x12c0000 [0169.969] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0169.969] GetProcessHeap () returned 0x12c0000 [0169.969] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0169.969] GetProcessHeap () returned 0x12c0000 [0169.969] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0169.970] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa5d109a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c2c683a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0169.970] GetProcessHeap () returned 0x12c0000 [0169.970] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0169.970] GetProcessHeap () returned 0x12c0000 [0169.970] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0169.971] GetProcessHeap () returned 0x12c0000 [0169.971] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0169.971] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e476601, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb7a270e5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb7a270e5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0169.973] GetProcessHeap () returned 0x12c0000 [0169.973] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0169.974] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e4fcf04, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa7d9181, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2e4fcf04, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0169.974] GetProcessHeap () returned 0x12c0000 [0169.974] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0169.974] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppTiles\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e4fcf04, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa7da30b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2e622b9b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0169.976] GetProcessHeap () returned 0x12c0000 [0169.976] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0169.977] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e4fcf04, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa84e071, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2e563f5f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0169.980] GetProcessHeap () returned 0x12c0000 [0169.980] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0169.980] GetProcessHeap () returned 0x12c0000 [0169.980] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0169.980] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e58a1bc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa8cdeaf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2e5b0416, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0169.982] GetProcessHeap () returned 0x12c0000 [0169.982] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0169.982] GetProcessHeap () returned 0x12c0000 [0169.982] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0169.983] GetProcessHeap () returned 0x12c0000 [0169.983] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0169.984] GetProcessHeap () returned 0x12c0000 [0169.984] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0169.984] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb7a270e5, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb7a270e5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb7a270e5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0169.985] GetProcessHeap () returned 0x12c0000 [0169.985] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0169.985] GetProcessHeap () returned 0x12c0000 [0169.985] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0169.986] GetProcessHeap () returned 0x12c0000 [0169.986] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0169.986] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2cdd5a7d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb7a270e5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb7a270e5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0169.988] GetProcessHeap () returned 0x12c0000 [0169.988] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0169.989] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2cdd5a7d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa935760, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2cdd5a7d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0169.989] GetProcessHeap () returned 0x12c0000 [0169.989] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0169.989] GetProcessHeap () returned 0x12c0000 [0169.989] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0169.989] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb7a270e5, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb7a270e5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb7a270e5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0169.990] GetProcessHeap () returned 0x12c0000 [0169.990] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0169.990] GetProcessHeap () returned 0x12c0000 [0169.990] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0169.990] GetProcessHeap () returned 0x12c0000 [0169.990] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0169.990] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2ceba882, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb7a270e5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb7a270e5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0169.991] GetProcessHeap () returned 0x12c0000 [0169.991] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0169.992] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d0fdc78, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa936cde, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d0fdc78, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0169.992] GetProcessHeap () returned 0x12c0000 [0169.992] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0169.992] GetProcessHeap () returned 0x12c0000 [0169.992] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0169.992] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d1bc83f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa937267, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2db7c876, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0169.993] GetProcessHeap () returned 0x12c0000 [0169.993] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0169.993] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d1bc83f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa9d2e10, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d827806, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0169.994] GetProcessHeap () returned 0x12c0000 [0169.994] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0169.995] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d1bc83f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaaa1d3b9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d2c78be, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0170.089] GetProcessHeap () returned 0x12c0000 [0170.089] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.089] GetProcessHeap () returned 0x12c0000 [0170.089] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.089] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d2c78be, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaaa975ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d388f04, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0170.092] GetProcessHeap () returned 0x12c0000 [0170.092] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.092] GetProcessHeap () returned 0x12c0000 [0170.092] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.092] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\LiveTile\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d388f04, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaaac88c5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d46dd2e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0170.094] GetProcessHeap () returned 0x12c0000 [0170.095] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.095] GetProcessHeap () returned 0x12c0000 [0170.095] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.095] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\Spacer\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d46dd2e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaabbfeb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d50668e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0170.097] GetProcessHeap () returned 0x12c0000 [0170.097] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.097] GetProcessHeap () returned 0x12c0000 [0170.097] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.097] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\WeatherIcons\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d59f00b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaabc1237, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d59f00b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0170.097] GetProcessHeap () returned 0x12c0000 [0170.097] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0170.097] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\WeatherIcons\\30x30\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d59f00b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaac222e2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d827806, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0170.101] GetProcessHeap () returned 0x12c0000 [0170.101] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0170.101] GetProcessHeap () returned 0x12c0000 [0170.101] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.102] GetProcessHeap () returned 0x12c0000 [0170.102] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.103] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\WeatherImages\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d827806, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaac23e3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d9f144d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0170.104] GetProcessHeap () returned 0x12c0000 [0170.104] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0170.104] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\WeatherImages\\210x173\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d827806, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaaca3951, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d9cb1f4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0170.106] GetProcessHeap () returned 0x12c0000 [0170.106] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0170.106] GetProcessHeap () returned 0x12c0000 [0170.106] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0170.106] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\WeatherImages\\423x173\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d9f144d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad0c763, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2db303c4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0170.108] GetProcessHeap () returned 0x12c0000 [0170.108] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0170.108] GetProcessHeap () returned 0x12c0000 [0170.108] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.109] GetProcessHeap () returned 0x12c0000 [0170.109] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0170.109] GetProcessHeap () returned 0x12c0000 [0170.110] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0170.110] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\Attribution\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2db7c876, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad78aac, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dbabacb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0170.113] GetProcessHeap () returned 0x12c0000 [0170.113] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0170.113] GetProcessHeap () returned 0x12c0000 [0170.113] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0170.114] GetProcessHeap () returned 0x12c0000 [0170.114] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0170.114] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Configuration\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dbabacb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad79c2f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dbabacb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0170.115] GetProcessHeap () returned 0x12c0000 [0170.115] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0170.115] GetProcessHeap () returned 0x12c0000 [0170.115] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0170.115] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Images\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dbabacb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7a6fb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dbabacb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0170.115] GetProcessHeap () returned 0x12c0000 [0170.115] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0170.115] GetProcessHeap () returned 0x12c0000 [0170.115] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0170.115] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd03022, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7ad84, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd2927f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0170.115] GetProcessHeap () returned 0x12c0000 [0170.115] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0170.115] GetProcessHeap () returned 0x12c0000 [0170.115] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0170.115] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd4f4d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7b5bd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd4f4d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0170.117] GetProcessHeap () returned 0x12c0000 [0170.117] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0170.117] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls\\EndOfLife\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd4f4d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7c2d2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd4f4d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0170.118] GetProcessHeap () returned 0x12c0000 [0170.118] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.119] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls\\EndOfLife\\Assets\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd4f4d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7cee8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd4f4d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0170.119] GetProcessHeap () returned 0x12c0000 [0170.119] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.119] GetProcessHeap () returned 0x12c0000 [0170.119] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0170.119] GetProcessHeap () returned 0x12c0000 [0170.119] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0170.121] GetProcessHeap () returned 0x12c0000 [0170.121] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0170.121] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd4f4d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7d91e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd4f4d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0170.121] GetProcessHeap () returned 0x12c0000 [0170.121] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0170.122] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd4f4d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7e777, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd4f4d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d92c8 [0170.123] GetProcessHeap () returned 0x12c0000 [0170.123] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.124] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd4f4d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7f48f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd4f4d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0170.124] GetProcessHeap () returned 0x12c0000 [0170.124] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3cf30a8 [0170.124] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd4f4d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7ff09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd75732, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0170.125] GetProcessHeap () returned 0x12c0000 [0170.125] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3cf30a8 | out: hHeap=0x12c0000) returned 1 [0170.125] GetProcessHeap () returned 0x12c0000 [0170.125] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.125] GetProcessHeap () returned 0x12c0000 [0170.125] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0170.126] GetProcessHeap () returned 0x12c0000 [0170.126] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0170.127] GetProcessHeap () returned 0x12c0000 [0170.127] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0170.127] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb7a270e5, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x2d31f11, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0x2d31f11, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0170.127] GetProcessHeap () returned 0x12c0000 [0170.127] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0170.127] GetProcessHeap () returned 0x12c0000 [0170.127] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1350960 [0170.127] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d0fdc78, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa9368ce, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d1965e1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d97c8 [0170.127] GetProcessHeap () returned 0x12c0000 [0170.127] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1350960 | out: hHeap=0x12c0000) returned 1 [0170.127] GetProcessHeap () returned 0x12c0000 [0170.127] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0170.128] GetProcessHeap () returned 0x12c0000 [0170.128] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0170.129] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68f377c2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaae3acdd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x61f43dfb, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0170.251] GetProcessHeap () returned 0x12c0000 [0170.251] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0170.251] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68f5da18, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaae3d897, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x68f83c76, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0170.254] GetProcessHeap () returned 0x12c0000 [0170.254] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0170.254] GetProcessHeap () returned 0x12c0000 [0170.254] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0170.255] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x61f43dfb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaae3e4bd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x61f43dfb, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0170.255] GetProcessHeap () returned 0x12c0000 [0170.255] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0170.255] GetProcessHeap () returned 0x12c0000 [0170.255] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0170.256] GetProcessHeap () returned 0x12c0000 [0170.256] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0170.256] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68a98ed8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaaebc8e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x61f43dfb, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0170.258] GetProcessHeap () returned 0x12c0000 [0170.258] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0170.259] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68a98ed8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaaebe349, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x68a98ed8, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0170.260] GetProcessHeap () returned 0x12c0000 [0170.260] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0170.260] GetProcessHeap () returned 0x12c0000 [0170.260] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0170.260] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x61f43dfb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaaebeeeb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x61f43dfb, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0170.260] GetProcessHeap () returned 0x12c0000 [0170.260] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0170.260] GetProcessHeap () returned 0x12c0000 [0170.260] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0170.268] GetProcessHeap () returned 0x12c0000 [0170.268] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0170.268] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ae5394, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaaf17e9e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x61f43dfb, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0170.270] GetProcessHeap () returned 0x12c0000 [0170.270] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0170.271] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ae5394, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaaf18f1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x68ae5394, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0170.271] GetProcessHeap () returned 0x12c0000 [0170.271] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0170.271] GetProcessHeap () returned 0x12c0000 [0170.271] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0170.271] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ae5394, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaafbd2f7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x68bca1ad, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0170.276] GetProcessHeap () returned 0x12c0000 [0170.276] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0170.276] GetProcessHeap () returned 0x12c0000 [0170.277] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0170.277] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x61f43dfb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x134444f, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0x134444f, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0170.279] GetProcessHeap () returned 0x12c0000 [0170.279] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0170.279] GetProcessHeap () returned 0x12c0000 [0170.279] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0170.280] GetProcessHeap () returned 0x12c0000 [0170.280] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0170.281] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd526822a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab021835, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x628cd443, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0170.284] GetProcessHeap () returned 0x12c0000 [0170.284] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0170.285] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd526822a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab022752, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd526822a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0170.285] GetProcessHeap () returned 0x12c0000 [0170.285] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0170.285] GetProcessHeap () returned 0x12c0000 [0170.285] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0170.285] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x628cd443, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xab022fb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x628cd443, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0170.286] GetProcessHeap () returned 0x12c0000 [0170.286] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0170.286] GetProcessHeap () returned 0x12c0000 [0170.286] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0170.286] GetProcessHeap () returned 0x12c0000 [0170.286] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0170.286] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5373138, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab088494, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x628cd443, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0170.289] GetProcessHeap () returned 0x12c0000 [0170.289] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0170.289] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5373138, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab08a798, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd5373138, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0170.290] GetProcessHeap () returned 0x12c0000 [0170.290] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0170.290] GetProcessHeap () returned 0x12c0000 [0170.290] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0170.290] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd53994f2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab08aff3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd53994f2, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0170.378] GetProcessHeap () returned 0x12c0000 [0170.378] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0170.378] GetProcessHeap () returned 0x12c0000 [0170.378] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0170.379] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd547e1a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab08b876, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd547e1a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0170.379] GetProcessHeap () returned 0x12c0000 [0170.379] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.380] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\en-gb\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd547e1a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab08c849, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd547e1a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0170.381] GetProcessHeap () returned 0x12c0000 [0170.381] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.381] GetProcessHeap () returned 0x12c0000 [0170.381] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.381] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\en-US\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd547e1a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab08d12b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd547e1a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0170.391] GetProcessHeap () returned 0x12c0000 [0170.391] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.391] GetProcessHeap () returned 0x12c0000 [0170.391] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0170.391] GetProcessHeap () returned 0x12c0000 [0170.391] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0170.391] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x628cd443, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xab08dbee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x628cd443, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0170.392] GetProcessHeap () returned 0x12c0000 [0170.392] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0170.393] GetProcessHeap () returned 0x12c0000 [0170.393] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0170.393] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd547e1a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab08e5b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd547e1a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0170.393] GetProcessHeap () returned 0x12c0000 [0170.393] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.393] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\en-GB\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd547e1a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab08f2fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd547e1a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0170.393] GetProcessHeap () returned 0x12c0000 [0170.393] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.393] GetProcessHeap () returned 0x12c0000 [0170.393] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.393] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\en-US\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd547e1a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab08fb6f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd547e1a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0170.394] GetProcessHeap () returned 0x12c0000 [0170.394] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.394] GetProcessHeap () returned 0x12c0000 [0170.394] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0170.396] GetProcessHeap () returned 0x12c0000 [0170.396] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0170.397] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\_Resources\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5373138, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab089e41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd5373138, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0170.397] GetProcessHeap () returned 0x12c0000 [0170.397] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0170.397] GetProcessHeap () returned 0x12c0000 [0170.397] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0170.397] GetProcessHeap () returned 0x12c0000 [0170.397] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0170.397] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d296410, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb9355ef2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb9355ef2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0170.399] GetProcessHeap () returned 0x12c0000 [0170.400] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0170.400] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d2bc66a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab13f343, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9d32ed7f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0170.401] GetProcessHeap () returned 0x12c0000 [0170.401] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.403] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d308b21, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab1ce307, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9d32ed7f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9388 [0170.406] GetProcessHeap () returned 0x12c0000 [0170.406] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.406] GetProcessHeap () returned 0x12c0000 [0170.406] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.406] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d32ed7f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab1d0bd1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9d37b231, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0170.408] GetProcessHeap () returned 0x12c0000 [0170.408] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.408] GetProcessHeap () returned 0x12c0000 [0170.408] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0170.408] GetProcessHeap () returned 0x12c0000 [0170.409] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0170.409] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb9355ef2, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb9355ef2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb9355ef2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0170.410] GetProcessHeap () returned 0x12c0000 [0170.410] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0170.410] GetProcessHeap () returned 0x12c0000 [0170.410] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0170.412] GetProcessHeap () returned 0x12c0000 [0170.412] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0170.413] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c531351, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb932fcac, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb932fcac, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0170.414] GetProcessHeap () returned 0x12c0000 [0170.414] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0170.415] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c5575af, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab228e06, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9c5575af, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0170.415] GetProcessHeap () returned 0x12c0000 [0170.415] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0170.415] GetProcessHeap () returned 0x12c0000 [0170.415] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0170.415] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9cdf7b05, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab2732ed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9d1b15f4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0170.418] GetProcessHeap () returned 0x12c0000 [0170.418] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.419] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\contrast-black\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9cf75299, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab3100a2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9d080313, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0170.513] GetProcessHeap () returned 0x12c0000 [0170.513] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.513] GetProcessHeap () returned 0x12c0000 [0170.513] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.513] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\contrast-white\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d080313, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab39d704, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9d18b39b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0170.517] GetProcessHeap () returned 0x12c0000 [0170.517] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.517] GetProcessHeap () returned 0x12c0000 [0170.517] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.517] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\FileIcons\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d18b39b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab446b84, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9d1d7849, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0170.521] GetProcessHeap () returned 0x12c0000 [0170.521] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.521] GetProcessHeap () returned 0x12c0000 [0170.521] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0170.523] GetProcessHeap () returned 0x12c0000 [0170.523] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.523] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb932fcac, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xfe80d855, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe80d855, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0170.524] GetProcessHeap () returned 0x12c0000 [0170.524] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.524] GetProcessHeap () returned 0x12c0000 [0170.524] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0170.524] GetProcessHeap () returned 0x12c0000 [0170.524] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0170.524] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c3b24a6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb932fcac, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb932fcac, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0170.526] GetProcessHeap () returned 0x12c0000 [0170.526] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.526] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c3b24a6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab4afc0f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9c3b24a6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0170.526] GetProcessHeap () returned 0x12c0000 [0170.526] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.526] GetProcessHeap () returned 0x12c0000 [0170.526] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.526] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb932fcac, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb932fcac, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb932fcac, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0170.527] GetProcessHeap () returned 0x12c0000 [0170.527] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.527] GetProcessHeap () returned 0x12c0000 [0170.527] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0170.527] GetProcessHeap () returned 0x12c0000 [0170.527] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0170.528] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fe54df6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbad8fd68, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbad8fd68, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0170.529] GetProcessHeap () returned 0x12c0000 [0170.529] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.530] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fe54df6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab549f27, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7fed1b77, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0170.532] GetProcessHeap () returned 0x12c0000 [0170.532] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.532] GetProcessHeap () returned 0x12c0000 [0170.532] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.532] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbad8fd68, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbad8fd68, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbad8fd68, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0170.533] GetProcessHeap () returned 0x12c0000 [0170.533] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.533] GetProcessHeap () returned 0x12c0000 [0170.533] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0170.533] GetProcessHeap () returned 0x12c0000 [0170.533] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0170.533] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ed19195, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbad4389d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbad4389d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0170.535] GetProcessHeap () returned 0x12c0000 [0170.535] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.535] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ed19195, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab5eb5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7ed19195, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0170.535] GetProcessHeap () returned 0x12c0000 [0170.535] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.535] GetProcessHeap () returned 0x12c0000 [0170.535] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.535] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbad4389d, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbad4389d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbad4389d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0170.536] GetProcessHeap () returned 0x12c0000 [0170.536] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.536] GetProcessHeap () returned 0x12c0000 [0170.536] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0170.537] GetProcessHeap () returned 0x12c0000 [0170.537] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0170.537] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7eee2de1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbad69af3, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbad69af3, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0170.538] GetProcessHeap () returned 0x12c0000 [0170.538] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.539] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ef09035, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab5edb1a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7ef09035, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0170.539] GetProcessHeap () returned 0x12c0000 [0170.539] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.539] GetProcessHeap () returned 0x12c0000 [0170.539] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.539] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f2d055d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6bff9c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f8f31a9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0170.545] GetProcessHeap () returned 0x12c0000 [0170.546] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.546] GetProcessHeap () returned 0x12c0000 [0170.546] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.546] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f8f31a9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c0da4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f98bb1c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0170.546] GetProcessHeap () returned 0x12c0000 [0170.546] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0170.546] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f8f31a9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c1a05, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f919407, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0170.547] GetProcessHeap () returned 0x12c0000 [0170.547] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0170.548] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f8f31a9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c20a7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f919407, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0170.548] GetProcessHeap () returned 0x12c0000 [0170.548] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0170.548] GetProcessHeap () returned 0x12c0000 [0170.548] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0170.548] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f919407, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c24fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f93f661, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0170.549] GetProcessHeap () returned 0x12c0000 [0170.549] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0170.549] GetProcessHeap () returned 0x12c0000 [0170.549] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0170.550] GetProcessHeap () returned 0x12c0000 [0170.550] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0170.550] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9658ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c2a52, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f9658ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0170.551] GetProcessHeap () returned 0x12c0000 [0170.551] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0170.551] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens\\en-US\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9658ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c2f47, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f9658ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0170.635] GetProcessHeap () returned 0x12c0000 [0170.635] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0170.635] GetProcessHeap () returned 0x12c0000 [0170.635] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0170.636] GetProcessHeap () returned 0x12c0000 [0170.637] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0170.637] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\images\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9658ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c3363, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f9658ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0170.637] GetProcessHeap () returned 0x12c0000 [0170.637] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0170.638] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\images\\en-US\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9658ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c39d2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f9658ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0170.639] GetProcessHeap () returned 0x12c0000 [0170.639] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0170.639] GetProcessHeap () returned 0x12c0000 [0170.639] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0170.639] GetProcessHeap () returned 0x12c0000 [0170.639] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0170.639] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f98bb1c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c4278, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f98bb1c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0170.639] GetProcessHeap () returned 0x12c0000 [0170.639] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0170.639] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-GB\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f98bb1c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c4ac5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f98bb1c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0170.640] GetProcessHeap () returned 0x12c0000 [0170.640] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0170.640] GetProcessHeap () returned 0x12c0000 [0170.640] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0170.640] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-US\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f98bb1c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c5109, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f98bb1c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0170.642] GetProcessHeap () returned 0x12c0000 [0170.642] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0170.642] GetProcessHeap () returned 0x12c0000 [0170.642] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0170.644] GetProcessHeap () returned 0x12c0000 [0170.644] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0170.644] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\surfaceHub\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f98bb1c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c57e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f9fe269, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0170.644] GetProcessHeap () returned 0x12c0000 [0170.644] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0170.645] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\surfaceHub\\en-GB\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f98bb1c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c60ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f9fe269, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0170.645] GetProcessHeap () returned 0x12c0000 [0170.645] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0170.645] GetProcessHeap () returned 0x12c0000 [0170.645] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0170.646] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\surfaceHub\\en-US\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9fe269, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c6700, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7fa28bd5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0170.646] GetProcessHeap () returned 0x12c0000 [0170.646] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0170.646] GetProcessHeap () returned 0x12c0000 [0170.646] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0170.648] GetProcessHeap () returned 0x12c0000 [0170.648] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.648] GetProcessHeap () returned 0x12c0000 [0170.648] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.648] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbad69af3, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbad69af3, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbad69af3, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0170.648] GetProcessHeap () returned 0x12c0000 [0170.648] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.648] GetProcessHeap () returned 0x12c0000 [0170.648] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.648] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fa4ee54, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c7513, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7fa750b2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0170.648] GetProcessHeap () returned 0x12c0000 [0170.648] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0170.649] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fa750b2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab78e843, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7fac1569, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0170.653] GetProcessHeap () returned 0x12c0000 [0170.653] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0170.654] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\Images\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fa9b30b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab78f63a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7fac1569, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0170.654] GetProcessHeap () returned 0x12c0000 [0170.654] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0170.654] GetProcessHeap () returned 0x12c0000 [0170.654] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0170.654] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\PartnerJS\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fac1569, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab78fdf4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7fac1569, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0170.658] GetProcessHeap () returned 0x12c0000 [0170.658] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0170.659] GetProcessHeap () returned 0x12c0000 [0170.659] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0170.660] GetProcessHeap () returned 0x12c0000 [0170.660] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.660] GetProcessHeap () returned 0x12c0000 [0170.660] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.660] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\_Resources\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f0140b4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab5ed36f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f2aa2da, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0170.660] GetProcessHeap () returned 0x12c0000 [0170.660] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.660] GetProcessHeap () returned 0x12c0000 [0170.660] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0170.661] GetProcessHeap () returned 0x12c0000 [0170.661] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0170.661] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x287b925a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbd8a0611, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbd8a0611, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0170.663] GetProcessHeap () returned 0x12c0000 [0170.663] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.663] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x287b925a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab841b4d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x287b925a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0170.664] GetProcessHeap () returned 0x12c0000 [0170.664] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.664] GetProcessHeap () returned 0x12c0000 [0170.664] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.664] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbd8a0611, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbd8a0611, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbd8a0611, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0170.665] GetProcessHeap () returned 0x12c0000 [0170.665] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.665] GetProcessHeap () returned 0x12c0000 [0170.665] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0170.665] GetProcessHeap () returned 0x12c0000 [0170.665] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0170.665] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29a48b6f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbd8c685e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbd8c685e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0170.667] GetProcessHeap () returned 0x12c0000 [0170.667] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.667] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29a95021, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab9559ab, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x29c3c6c4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0170.669] GetProcessHeap () returned 0x12c0000 [0170.669] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.669] GetProcessHeap () returned 0x12c0000 [0170.669] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.670] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbd8c685e, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbd8c685e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbd8c685e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0170.670] GetProcessHeap () returned 0x12c0000 [0170.670] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.671] GetProcessHeap () returned 0x12c0000 [0170.671] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0170.671] GetProcessHeap () returned 0x12c0000 [0170.671] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0170.671] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2889e07b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbd8a0611, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbd8a0611, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0170.673] GetProcessHeap () returned 0x12c0000 [0170.673] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.674] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2891078c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab9bb295, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2891078c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0170.674] GetProcessHeap () returned 0x12c0000 [0170.674] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.674] GetProcessHeap () returned 0x12c0000 [0170.674] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.674] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2895cc43, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabb21004, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x28bc9f4c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0170.676] GetProcessHeap () returned 0x12c0000 [0170.677] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0170.677] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Fonts\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x289a90fa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabb2233c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x289a90fa, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0170.677] GetProcessHeap () returned 0x12c0000 [0170.677] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0170.677] GetProcessHeap () returned 0x12c0000 [0170.677] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0170.677] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Sounds\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28a67cbd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabb22dfb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x28a67cbd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0170.678] GetProcessHeap () returned 0x12c0000 [0170.678] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0170.732] GetProcessHeap () returned 0x12c0000 [0170.732] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.733] GetProcessHeap () returned 0x12c0000 [0170.733] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.733] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbd8a0611, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xfbac0b62, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfbac0b62, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0170.733] GetProcessHeap () returned 0x12c0000 [0170.734] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.734] GetProcessHeap () returned 0x12c0000 [0170.734] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.734] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2957986f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabb25901, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2993daf0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0170.736] GetProcessHeap () returned 0x12c0000 [0170.736] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.736] GetProcessHeap () returned 0x12c0000 [0170.736] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.736] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\_Resources\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x289369e5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab9baa69, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x289369e5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0170.736] GetProcessHeap () returned 0x12c0000 [0170.736] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.736] GetProcessHeap () returned 0x12c0000 [0170.736] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0170.737] GetProcessHeap () returned 0x12c0000 [0170.737] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0170.737] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac06201d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbed30aaa, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbed30aaa, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0170.739] GetProcessHeap () returned 0x12c0000 [0170.739] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.739] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac08827b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabb9e6bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xac08827b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0170.739] GetProcessHeap () returned 0x12c0000 [0170.739] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.739] GetProcessHeap () returned 0x12c0000 [0170.739] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.739] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbed30aaa, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbed30aaa, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbed30aaa, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0170.741] GetProcessHeap () returned 0x12c0000 [0170.741] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.741] GetProcessHeap () returned 0x12c0000 [0170.741] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0170.741] GetProcessHeap () returned 0x12c0000 [0170.741] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0170.741] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac29e374, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbed30aaa, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbed30aaa, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0170.741] GetProcessHeap () returned 0x12c0000 [0170.741] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.741] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac2ea82c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabba0d3c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xac2ea82c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0170.742] GetProcessHeap () returned 0x12c0000 [0170.742] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.742] GetProcessHeap () returned 0x12c0000 [0170.742] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.742] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac526b7e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabba158a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xac59928e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0170.742] GetProcessHeap () returned 0x12c0000 [0170.742] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0170.743] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\Assets\\Fonts\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac526b7e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabba219f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xac526b7e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0170.743] GetProcessHeap () returned 0x12c0000 [0170.743] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0170.743] GetProcessHeap () returned 0x12c0000 [0170.743] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0170.743] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\Assets\\Images\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac54cddc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabba2cef, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xac54cddc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0170.743] GetProcessHeap () returned 0x12c0000 [0170.743] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0170.744] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\Assets\\Images\\Tiles\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac54cddc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabbf3417, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xac59928e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0170.746] GetProcessHeap () returned 0x12c0000 [0170.746] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0170.746] GetProcessHeap () returned 0x12c0000 [0170.746] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0170.746] GetProcessHeap () returned 0x12c0000 [0170.746] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0170.746] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\Assets\\Viewer\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac59928e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabbf429c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xac657e5b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0170.747] GetProcessHeap () returned 0x12c0000 [0170.747] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0170.747] GetProcessHeap () returned 0x12c0000 [0170.747] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.748] GetProcessHeap () returned 0x12c0000 [0170.748] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.748] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbed30aaa, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xabbf4c99, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xbed30aaa, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0170.749] GetProcessHeap () returned 0x12c0000 [0170.749] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.749] GetProcessHeap () returned 0x12c0000 [0170.749] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.749] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\_Resources\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac310a85, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabba02f9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xac310a85, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0170.749] GetProcessHeap () returned 0x12c0000 [0170.749] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.749] GetProcessHeap () returned 0x12c0000 [0170.749] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0170.749] GetProcessHeap () returned 0x12c0000 [0170.749] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0170.749] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62a7e361, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc3123ced, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc3123ced, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0170.752] GetProcessHeap () returned 0x12c0000 [0170.752] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.752] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62aca818, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabc4070c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x62aca818, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0170.753] GetProcessHeap () returned 0x12c0000 [0170.753] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.753] GetProcessHeap () returned 0x12c0000 [0170.753] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.753] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\images\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62baf63d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabc41746, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x62c6e205, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0170.755] GetProcessHeap () returned 0x12c0000 [0170.755] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.755] GetProcessHeap () returned 0x12c0000 [0170.755] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.755] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\loc\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62c6e205, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabc423fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x62c6e205, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0170.755] GetProcessHeap () returned 0x12c0000 [0170.755] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.755] GetProcessHeap () returned 0x12c0000 [0170.756] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.756] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc3123ced, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xc3123ced, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc3123ced, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0170.767] GetProcessHeap () returned 0x12c0000 [0170.767] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.767] GetProcessHeap () returned 0x12c0000 [0170.767] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.767] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Office16\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x636ae280, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabc4357d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x63720995, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0170.768] GetProcessHeap () returned 0x12c0000 [0170.768] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0170.768] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Office16\\1033\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x636ae280, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabc4416c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x636ae280, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0170.769] GetProcessHeap () returned 0x12c0000 [0170.769] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0170.769] GetProcessHeap () returned 0x12c0000 [0170.769] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.769] GetProcessHeap () returned 0x12c0000 [0170.769] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.769] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\strings\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6395ccec, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabc44b63, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6395ccec, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0170.769] GetProcessHeap () returned 0x12c0000 [0170.769] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.770] GetProcessHeap () returned 0x12c0000 [0170.770] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.770] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\VFS\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6395ccec, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabc45469, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x662a39a5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0170.770] GetProcessHeap () returned 0x12c0000 [0170.770] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.770] GetProcessHeap () returned 0x12c0000 [0170.770] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.770] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x663d4c5d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabd372f0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6644736d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0170.774] GetProcessHeap () returned 0x12c0000 [0170.774] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.774] GetProcessHeap () returned 0x12c0000 [0170.774] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0170.775] GetProcessHeap () returned 0x12c0000 [0170.775] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0170.776] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x628da999, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc3123ced, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc3123ced, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0170.899] GetProcessHeap () returned 0x12c0000 [0170.899] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.899] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x628da999, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabdaf1a7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x628da999, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0170.900] GetProcessHeap () returned 0x12c0000 [0170.900] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.900] GetProcessHeap () returned 0x12c0000 [0170.900] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.900] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc3123ced, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xc3123ced, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc3123ced, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0170.900] GetProcessHeap () returned 0x12c0000 [0170.900] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.901] GetProcessHeap () returned 0x12c0000 [0170.901] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0170.901] GetProcessHeap () returned 0x12c0000 [0170.901] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0170.901] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x390dfd83, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc96ea5b4, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc96ea5b4, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0170.904] GetProcessHeap () returned 0x12c0000 [0170.904] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.904] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x391eadfd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabe0794e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3925d50d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0170.905] GetProcessHeap () returned 0x12c0000 [0170.905] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0170.905] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\Livetiles\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x39211056, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabe5a941, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x392372b0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0170.907] GetProcessHeap () returned 0x12c0000 [0170.907] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0170.907] GetProcessHeap () returned 0x12c0000 [0170.907] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.908] GetProcessHeap () returned 0x12c0000 [0170.908] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.908] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc96ea5b4, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xc96ea5b4, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc96ea5b4, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0170.909] GetProcessHeap () returned 0x12c0000 [0170.909] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.909] GetProcessHeap () returned 0x12c0000 [0170.909] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0170.910] GetProcessHeap () returned 0x12c0000 [0170.910] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0170.910] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33798b5a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc96c435e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc96c435e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0170.912] GetProcessHeap () returned 0x12c0000 [0170.912] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.912] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33798b5a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabec308c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x33798b5a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0170.913] GetProcessHeap () returned 0x12c0000 [0170.913] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.913] GetProcessHeap () returned 0x12c0000 [0170.913] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.913] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc96c435e, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xc96c435e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc96c435e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0170.914] GetProcessHeap () returned 0x12c0000 [0170.914] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.914] GetProcessHeap () returned 0x12c0000 [0170.914] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0170.923] GetProcessHeap () returned 0x12c0000 [0170.923] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0170.923] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34052404, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc96ea5b4, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc96ea5b4, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0170.925] GetProcessHeap () returned 0x12c0000 [0170.925] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.925] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340ead73, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabf3049c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x340ead73, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0170.926] GetProcessHeap () returned 0x12c0000 [0170.926] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.926] GetProcessHeap () returned 0x12c0000 [0170.926] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.926] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.Awards\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x342422a4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabf30abf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x342422a4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0170.926] GetProcessHeap () returned 0x12c0000 [0170.926] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0170.926] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.Awards\\Assets\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x342422a4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabf96d1f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x342b49b5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0170.929] GetProcessHeap () returned 0x12c0000 [0170.929] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0170.929] GetProcessHeap () returned 0x12c0000 [0170.929] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0170.929] GetProcessHeap () returned 0x12c0000 [0170.929] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0170.929] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x342dac13, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabf9793f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x342dac13, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0170.930] GetProcessHeap () returned 0x12c0000 [0170.930] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0170.930] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\Assets\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x342dac13, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabffc808, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3472fed7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0170.931] GetProcessHeap () returned 0x12c0000 [0170.931] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0170.932] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\Assets\\Animation\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x342dac13, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac04346d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x344583a2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0170.934] GetProcessHeap () returned 0x12c0000 [0170.934] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0170.935] GetProcessHeap () returned 0x12c0000 [0170.935] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0170.935] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\Assets\\Audio\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3447e5fb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac043e7b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3447e5fb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0170.935] GetProcessHeap () returned 0x12c0000 [0170.935] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0170.935] GetProcessHeap () returned 0x12c0000 [0171.013] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.013] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\Assets\\Calendar\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x344f0d0c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac044536, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x344f0d0c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0171.014] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x344f0d0c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac044536, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x344f0d0c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.014] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x344f0d0c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x344f0d0c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x344f0d0c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="checkmark.png", cAlternateFileName="")) returned 1 [0171.014] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x344f0d0c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x344f0d0c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x344f0d0c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="corrupt.png", cAlternateFileName="")) returned 1 [0171.014] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x344f0d0c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x344f0d0c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x344f0d0c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x21c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ribbonicon.png", cAlternateFileName="")) returned 1 [0171.014] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x344f0d0c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x344f0d0c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x344f0d0c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x21c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ribbonicon.png", cAlternateFileName="")) returned 0 [0171.014] FindClose (in: hFindFile=0x12d9308 | out: hFindFile=0x12d9308) returned 1 [0171.015] GetProcessHeap () returned 0x12c0000 [0171.015] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.015] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x344f0d0c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x344f0d0c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x344f0d0c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="DC_HolderEarned.png", cAlternateFileName="")) returned 1 [0171.015] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x344f0d0c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x344f0d0c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x344f0d0c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x21c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DC_HolderUnearned.png", cAlternateFileName="")) returned 1 [0171.015] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x344f0d0c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x344f0d0c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x344f0d0c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x10bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="diamond_Badge_Earned.png", cAlternateFileName="")) returned 1 [0171.015] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x344f0d0c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x344f0d0c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x344f0d0c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x17b, dwReserved0=0x0, dwReserved1=0x0, cFileName="difficultyStar.png", cAlternateFileName="")) returned 1 [0171.015] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34516f6a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34516f6a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34516f6a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x121a, dwReserved0=0x0, dwReserved1=0x0, cFileName="gold_Badge_Earned.png", cAlternateFileName="")) returned 1 [0171.015] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34516f6a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3453d1c3, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3453d1c3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4f3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="particles.png", cAlternateFileName="")) returned 1 [0171.015] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3453d1c3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac044a68, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x345651d2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perfect", cAlternateFileName="")) returned 1 [0171.015] GetProcessHeap () returned 0x12c0000 [0171.015] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.015] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\Assets\\Perfect\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3453d1c3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac044a68, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x345651d2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0171.016] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3453d1c3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac044a68, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x345651d2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.016] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3453d1c3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3453d1c3, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3453d1c3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x259, dwReserved0=0x0, dwReserved1=0x0, cFileName="crown.png", cAlternateFileName="")) returned 1 [0171.016] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3453d1c3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3453d1c3, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3453d1c3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ribbon.png", cAlternateFileName="")) returned 1 [0171.016] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3453d1c3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3453d1c3, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3453d1c3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x177, dwReserved0=0x0, dwReserved1=0x0, cFileName="ribbon_1.png", cAlternateFileName="")) returned 1 [0171.016] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3453d1c3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3453d1c3, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3453d1c3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ribbon_2.png", cAlternateFileName="")) returned 1 [0171.016] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x345651d2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x345651d2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x345651d2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x179, dwReserved0=0x0, dwReserved1=0x0, cFileName="ribbon_3.png", cAlternateFileName="")) returned 1 [0171.016] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x345651d2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3458b455, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3458b455, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="SnapPerfectRibbon.png", cAlternateFileName="")) returned 1 [0171.016] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x345651d2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3458b455, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3458b455, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="SnapPerfectRibbon.png", cAlternateFileName="")) returned 0 [0171.016] FindClose (in: hFindFile=0x12d9308 | out: hFindFile=0x12d9308) returned 1 [0171.016] GetProcessHeap () returned 0x12c0000 [0171.016] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.016] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3458b455, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac0bb1e2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3464a018, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Popups", cAlternateFileName="")) returned 1 [0171.017] GetProcessHeap () returned 0x12c0000 [0171.017] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.017] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\Assets\\Popups\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3458b455, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac0bb1e2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3464a018, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0171.018] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3458b455, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac0bb1e2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3464a018, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.019] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3458b455, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x345b16ae, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x345b16ae, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4e8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BronzeBadgeEarned.png", cAlternateFileName="")) returned 1 [0171.019] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x345b16ae, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x345d7908, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x345d7908, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x7528, dwReserved0=0x0, dwReserved1=0x0, cFileName="DiamondBadgeEarned.png", cAlternateFileName="")) returned 1 [0171.019] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x345d7908, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x345fdb65, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x345fdb65, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x9928, dwReserved0=0x0, dwReserved1=0x0, cFileName="FUE2_Image.png", cAlternateFileName="")) returned 1 [0171.019] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x345fdb65, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x345fdb65, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x345fdb65, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xbf02, dwReserved0=0x0, dwReserved1=0x0, cFileName="FUE2_Image_4.png", cAlternateFileName="")) returned 1 [0171.019] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x345fdb65, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34623dbf, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34623dbf, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4b5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoldBadgeEarned.png", cAlternateFileName="")) returned 1 [0171.019] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34623dbf, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3464a018, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3464a018, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x6726, dwReserved0=0x0, dwReserved1=0x0, cFileName="PerfectEarned.jpg", cAlternateFileName="")) returned 1 [0171.019] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3464a018, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3464a018, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3464a018, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x48d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SilverBadgeEarned.png", cAlternateFileName="")) returned 1 [0171.019] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3464a018, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac12f3ab, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34670276, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Upsell", cAlternateFileName="")) returned 1 [0171.019] GetProcessHeap () returned 0x12c0000 [0171.019] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0171.019] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\Assets\\Popups\\Upsell\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3464a018, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac12f3ab, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34670276, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0171.021] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3464a018, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac12f3ab, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34670276, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.021] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3464a018, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3464a018, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3464a018, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x10c99, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.jpg", cAlternateFileName="")) returned 1 [0171.021] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3464a018, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3464a018, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3464a018, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x27ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar.png", cAlternateFileName="")) returned 1 [0171.021] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3464a018, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3464a018, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3464a018, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x67a, dwReserved0=0x0, dwReserved1=0x0, cFileName="close_button.jpg", cAlternateFileName="")) returned 1 [0171.021] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3464a018, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3464a018, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3464a018, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="dont_ask_button.jpg", cAlternateFileName="")) returned 1 [0171.022] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3464a018, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3464a018, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3464a018, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="dont_ask_check.png", cAlternateFileName="")) returned 1 [0171.022] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34670276, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34670276, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34670276, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x9a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="green_button.png", cAlternateFileName="")) returned 1 [0171.022] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34670276, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34670276, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34670276, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x9a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="green_button.png", cAlternateFileName="")) returned 0 [0171.022] FindClose (in: hFindFile=0x12d93c8 | out: hFindFile=0x12d93c8) returned 1 [0171.023] GetProcessHeap () returned 0x12c0000 [0171.023] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0171.023] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3464a018, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac12f3ab, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34670276, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Upsell", cAlternateFileName="")) returned 0 [0171.023] FindClose (in: hFindFile=0x12d9308 | out: hFindFile=0x12d9308) returned 1 [0171.023] GetProcessHeap () returned 0x12c0000 [0171.023] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.023] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34670276, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac18e78c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34708be4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrizeHistory", cAlternateFileName="PRIZEH~1")) returned 1 [0171.023] GetProcessHeap () returned 0x12c0000 [0171.023] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.023] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\Assets\\PrizeHistory\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34670276, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac18e78c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34708be4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0171.025] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34670276, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac18e78c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34708be4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.025] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34670276, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34670276, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34670276, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x418a, dwReserved0=0x0, dwReserved1=0x0, cFileName="3_badges_bronze.png", cAlternateFileName="")) returned 1 [0171.026] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34670276, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34670276, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34670276, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4504, dwReserved0=0x0, dwReserved1=0x0, cFileName="3_badges_gold.png", cAlternateFileName="")) returned 1 [0171.026] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34670276, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34670276, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34670276, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x432f, dwReserved0=0x0, dwReserved1=0x0, cFileName="3_badges_none.png", cAlternateFileName="")) returned 1 [0171.026] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34670276, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34670276, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34670276, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4349, dwReserved0=0x0, dwReserved1=0x0, cFileName="3_badges_silver.png", cAlternateFileName="")) returned 1 [0171.026] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34670276, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34670276, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34670276, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x6f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="awards_badge_base.png", cAlternateFileName="")) returned 1 [0171.026] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x346964cf, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x346964cf, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x346964cf, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x142b, dwReserved0=0x0, dwReserved1=0x0, cFileName="awards_base.jpg", cAlternateFileName="")) returned 1 [0171.026] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x346964cf, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x346bc72d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x346bc72d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x6bf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="awards_bronze.png", cAlternateFileName="")) returned 1 [0171.026] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x346bc72d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x346bc72d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x346bc72d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x67b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="awards_diamond.png", cAlternateFileName="")) returned 1 [0171.026] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x346bc72d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x346bc72d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x346bc72d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x7307, dwReserved0=0x0, dwReserved1=0x0, cFileName="awards_gold.png", cAlternateFileName="")) returned 1 [0171.026] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x346bc72d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x346e2986, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x346e2986, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x8139, dwReserved0=0x0, dwReserved1=0x0, cFileName="awards_perfect_ribbon.png", cAlternateFileName="")) returned 1 [0171.026] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x346e2986, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x346e2986, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x346e2986, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x6a43, dwReserved0=0x0, dwReserved1=0x0, cFileName="awards_silver.png", cAlternateFileName="")) returned 1 [0171.026] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34708be4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34708be4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34708be4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5134, dwReserved0=0x0, dwReserved1=0x0, cFileName="badges_bronze.png", cAlternateFileName="")) returned 1 [0171.026] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34708be4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34708be4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34708be4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5868, dwReserved0=0x0, dwReserved1=0x0, cFileName="badges_diamond.png", cAlternateFileName="")) returned 1 [0171.027] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34708be4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34708be4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34708be4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5301, dwReserved0=0x0, dwReserved1=0x0, cFileName="badges_gold.png", cAlternateFileName="")) returned 1 [0171.027] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34708be4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34708be4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34708be4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x592d, dwReserved0=0x0, dwReserved1=0x0, cFileName="badges_none.png", cAlternateFileName="")) returned 1 [0171.027] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34708be4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34708be4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34708be4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x50cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="badges_silver.png", cAlternateFileName="")) returned 1 [0171.027] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34708be4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34708be4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34708be4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x50cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="badges_silver.png", cAlternateFileName="")) returned 0 [0171.027] FindClose (in: hFindFile=0x12d9308 | out: hFindFile=0x12d9308) returned 1 [0171.028] GetProcessHeap () returned 0x12c0000 [0171.028] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.028] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34708be4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac18f047, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34708be4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProgressBar", cAlternateFileName="PROGRE~1")) returned 1 [0171.028] GetProcessHeap () returned 0x12c0000 [0171.028] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.028] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\Assets\\ProgressBar\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34708be4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac18f047, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34708be4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0171.028] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34708be4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac18f047, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34708be4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.028] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34708be4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3472ee3e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3472ee3e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x485, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProgressBack.jpg", cAlternateFileName="")) returned 1 [0171.028] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34708be4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34708be4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34708be4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x48f, dwReserved0=0x0, dwReserved1=0x0, cFileName="progress_foreground.jpg", cAlternateFileName="")) returned 1 [0171.028] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34708be4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34708be4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34708be4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x48f, dwReserved0=0x0, dwReserved1=0x0, cFileName="progress_foreground.jpg", cAlternateFileName="")) returned 0 [0171.029] FindClose (in: hFindFile=0x12d9308 | out: hFindFile=0x12d9308) returned 1 [0171.029] GetProcessHeap () returned 0x12c0000 [0171.029] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.029] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3472fed7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3472fed7, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3472fed7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1f4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ribbon.png", cAlternateFileName="")) returned 1 [0171.029] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3472fed7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3472fed7, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3472fed7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x117d, dwReserved0=0x0, dwReserved1=0x0, cFileName="silver_Badge_Earned.png", cAlternateFileName="")) returned 1 [0171.029] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3472fed7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac18f99f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3472fed7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tab", cAlternateFileName="")) returned 1 [0171.029] GetProcessHeap () returned 0x12c0000 [0171.029] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.029] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\Assets\\Tab\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3472fed7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac18f99f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3472fed7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0171.030] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3472fed7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac18f99f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3472fed7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.030] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3472fed7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3472fed7, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3472fed7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x40e, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabCalendar.png", cAlternateFileName="")) returned 1 [0171.030] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3472fed7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3472fed7, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3472fed7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x8f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabComing.png", cAlternateFileName="")) returned 1 [0171.030] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3472fed7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3472fed7, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3472fed7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x9dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabMaster.png", cAlternateFileName="")) returned 1 [0171.030] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3472fed7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34756164, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34756164, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x56a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabTiles.png", cAlternateFileName="")) returned 1 [0171.030] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3472fed7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34756164, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34756164, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x56a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabTiles.png", cAlternateFileName="")) returned 0 [0171.030] FindClose (in: hFindFile=0x12d9308 | out: hFindFile=0x12d9308) returned 1 [0171.030] GetProcessHeap () returned 0x12c0000 [0171.030] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.030] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3472fed7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac18f99f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3472fed7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tab", cAlternateFileName="")) returned 0 [0171.030] FindClose (in: hFindFile=0x12d9908 | out: hFindFile=0x12d9908) returned 1 [0171.030] GetProcessHeap () returned 0x12c0000 [0171.030] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0171.032] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x342dac13, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabffc808, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3472fed7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 0 [0171.032] FindClose (in: hFindFile=0x12d9848 | out: hFindFile=0x12d9848) returned 1 [0171.032] GetProcessHeap () returned 0x12c0000 [0171.032] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0171.032] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3477c3bd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac190436, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3477c3bd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Arkadium.Win10.News", cAlternateFileName="ARKADI~1.NEW")) returned 1 [0171.032] GetProcessHeap () returned 0x12c0000 [0171.032] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0171.032] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.News\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3477c3bd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac190436, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3477c3bd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0171.032] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3477c3bd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac190436, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3477c3bd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.032] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3477c3bd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac1fc576, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x347a261b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1 [0171.032] GetProcessHeap () returned 0x12c0000 [0171.033] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0171.033] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.News\\Assets\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3477c3bd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac1fc576, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x347a261b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0171.035] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3477c3bd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac1fc576, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x347a261b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.035] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x347a261b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x347a261b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x347a261b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x19b, dwReserved0=0x0, dwReserved1=0x0, cFileName="newsBackground.html", cAlternateFileName="")) returned 1 [0171.035] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3477c3bd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3477c3bd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3477c3bd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x83, dwReserved0=0x0, dwReserved1=0x0, cFileName="news_button.png", cAlternateFileName="")) returned 1 [0171.035] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3477c3bd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3477c3bd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3477c3bd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="news_button_down.png", cAlternateFileName="")) returned 1 [0171.036] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3477c3bd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3477c3bd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3477c3bd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xad, dwReserved0=0x0, dwReserved1=0x0, cFileName="news_button_over.png", cAlternateFileName="")) returned 1 [0171.036] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3477c3bd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3477c3bd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3477c3bd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x20a, dwReserved0=0x0, dwReserved1=0x0, cFileName="News_icon-over.png", cAlternateFileName="")) returned 1 [0171.036] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3477c3bd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3477c3bd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3477c3bd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x208, dwReserved0=0x0, dwReserved1=0x0, cFileName="News_icon-press.png", cAlternateFileName="")) returned 1 [0171.036] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3477c3bd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3477c3bd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3477c3bd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x222, dwReserved0=0x0, dwReserved1=0x0, cFileName="News_icon-up.png", cAlternateFileName="")) returned 1 [0171.036] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3477c3bd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3477c3bd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3477c3bd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x222, dwReserved0=0x0, dwReserved1=0x0, cFileName="News_icon-up.png", cAlternateFileName="")) returned 0 [0171.036] FindClose (in: hFindFile=0x12d9848 | out: hFindFile=0x12d9848) returned 1 [0171.037] GetProcessHeap () returned 0x12c0000 [0171.037] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0171.037] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3477c3bd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac1fc576, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x347a261b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 0 [0171.037] FindClose (in: hFindFile=0x12d9908 | out: hFindFile=0x12d9908) returned 1 [0171.037] GetProcessHeap () returned 0x12c0000 [0171.037] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0171.037] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347a261b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac1fd71d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x347a261b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Arkadium.Win10.StarClub", cAlternateFileName="ARKADI~1.STA")) returned 1 [0171.037] GetProcessHeap () returned 0x12c0000 [0171.037] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0171.037] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.StarClub\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347a261b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac1fd71d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x347a261b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0171.037] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347a261b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac1fd71d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x347a261b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.037] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347a261b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac275cac, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3499a434, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1 [0171.038] GetProcessHeap () returned 0x12c0000 [0171.038] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0171.038] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.StarClub\\Assets\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347a261b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac275cac, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3499a434, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0171.039] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347a261b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac275cac, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3499a434, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.040] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347a261b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac318bc0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x347eead2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Animation", cAlternateFileName="ANIMAT~1")) returned 1 [0171.040] GetProcessHeap () returned 0x12c0000 [0171.040] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.041] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.StarClub\\Assets\\Animation\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347a261b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac318bc0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x347eead2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0171.043] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347a261b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac318bc0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x347eead2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.043] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x347a261b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x347a261b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x347a261b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4070, dwReserved0=0x0, dwReserved1=0x0, cFileName="coins out burst_00018.png", cAlternateFileName="")) returned 1 [0171.043] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x347a261b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x347eead2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x347eead2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x7f8a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="crown-animation.png", cAlternateFileName="")) returned 1 [0171.043] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x347a261b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x347a261b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x347a261b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x11d22, dwReserved0=0x0, dwReserved1=0x0, cFileName="crown_2.png", cAlternateFileName="")) returned 1 [0171.044] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x347a261b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x347a261b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x347a261b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2f26, dwReserved0=0x0, dwReserved1=0x0, cFileName="crown_sparking.png", cAlternateFileName="")) returned 1 [0171.044] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x347eead2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x347eead2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x347eead2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x109b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="star-bursting-187x170.png", cAlternateFileName="")) returned 1 [0171.044] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x347eead2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34814d2b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34814d2b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xada1, dwReserved0=0x0, dwReserved1=0x0, cFileName="unlocking-animation-187x169.png", cAlternateFileName="")) returned 1 [0171.044] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x347eead2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34814d2b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34814d2b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xada1, dwReserved0=0x0, dwReserved1=0x0, cFileName="unlocking-animation-187x169.png", cAlternateFileName="")) returned 0 [0171.044] FindClose (in: hFindFile=0x12d9308 | out: hFindFile=0x12d9308) returned 1 [0171.045] GetProcessHeap () returned 0x12c0000 [0171.045] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.045] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34814d2b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac3196ed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34814d2b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Badges", cAlternateFileName="")) returned 1 [0171.045] GetProcessHeap () returned 0x12c0000 [0171.045] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.045] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.StarClub\\Assets\\Badges\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34814d2b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac3196ed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34814d2b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0171.046] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34814d2b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac3196ed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34814d2b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.046] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34814d2b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34814d2b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34814d2b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x84e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NewCollection.png", cAlternateFileName="")) returned 1 [0171.046] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34814d2b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34814d2b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34814d2b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x84e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NewCollection.png", cAlternateFileName="")) returned 0 [0171.046] FindClose (in: hFindFile=0x12d9848 | out: hFindFile=0x12d9848) returned 1 [0171.046] GetProcessHeap () returned 0x12c0000 [0171.046] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.046] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3483af85, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3483af85, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3483af85, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="collection_base.png", cAlternateFileName="")) returned 1 [0171.046] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3483af85, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3483af85, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3483af85, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x137d, dwReserved0=0x0, dwReserved1=0x0, cFileName="collection_grey.png", cAlternateFileName="")) returned 1 [0171.046] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3483af85, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x348653d9, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x348653d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x29ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="crown.png", cAlternateFileName="")) returned 1 [0171.046] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34866a16, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34866a16, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34866a16, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x17b, dwReserved0=0x0, dwReserved1=0x0, cFileName="difficultyStar.png", cAlternateFileName="")) returned 1 [0171.046] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x348690f1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3488f374, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3488f374, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4aee, dwReserved0=0x0, dwReserved1=0x0, cFileName="fue_1_1.png", cAlternateFileName="")) returned 1 [0171.047] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3488f374, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x348b55cd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x348b55cd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x41da, dwReserved0=0x0, dwReserved1=0x0, cFileName="fue_2_1.png", cAlternateFileName="")) returned 1 [0171.047] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x348b55cd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x348b55cd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x348b55cd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3711, dwReserved0=0x0, dwReserved1=0x0, cFileName="fue_3_1.png", cAlternateFileName="")) returned 1 [0171.047] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x348b55cd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x348b55cd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x348b55cd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x6b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="glow.png", cAlternateFileName="")) returned 1 [0171.047] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x348b55cd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x348b55cd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x348b55cd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0171.047] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x348b55cd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x348b55cd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x348b55cd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x43b, dwReserved0=0x0, dwReserved1=0x0, cFileName="lock.png", cAlternateFileName="")) returned 1 [0171.047] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x348b55cd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x348b55cd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x348b55cd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x54c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="main_tile.png", cAlternateFileName="")) returned 1 [0171.047] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x348b55cd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x348db826, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x348db826, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x853, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_collection_available.png", cAlternateFileName="")) returned 1 [0171.047] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x348db826, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac319e44, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x348db826, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pin", cAlternateFileName="")) returned 1 [0171.047] GetProcessHeap () returned 0x12c0000 [0171.047] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.047] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.StarClub\\Assets\\Pin\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x348db826, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac319e44, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x348db826, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0171.048] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x348db826, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac319e44, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x348db826, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.048] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x348db826, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x348db826, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x348db826, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1e84, dwReserved0=0x0, dwReserved1=0x0, cFileName="155x105.png", cAlternateFileName="")) returned 1 [0171.048] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x348db826, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x348db826, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x348db826, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x613a, dwReserved0=0x0, dwReserved1=0x0, cFileName="270x270.png", cAlternateFileName="")) returned 1 [0171.048] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x348db826, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x348db826, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x348db826, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x613a, dwReserved0=0x0, dwReserved1=0x0, cFileName="270x270.png", cAlternateFileName="")) returned 0 [0171.048] FindClose (in: hFindFile=0x12d9308 | out: hFindFile=0x12d9308) returned 1 [0171.048] GetProcessHeap () returned 0x12c0000 [0171.048] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.048] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x348db826, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x348db826, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x348db826, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1f4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ribbon.png", cAlternateFileName="")) returned 1 [0171.048] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x348db826, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac36e3cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34927cf5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sounds", cAlternateFileName="")) returned 1 [0171.048] GetProcessHeap () returned 0x12c0000 [0171.048] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.048] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.StarClub\\Assets\\Sounds\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x348db826, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac36e3cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34927cf5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0171.177] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x348db826, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac36e3cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34927cf5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.177] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34901a89, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34901a89, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34901a89, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1945a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CollectedStars.wav", cAlternateFileName="")) returned 1 [0171.177] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34901a89, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34901a89, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34901a89, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1dc5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrownAppearance.wav", cAlternateFileName="")) returned 1 [0171.177] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34901a89, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34927cf5, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34927cf5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1bc5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="StarsFlying_D.wav", cAlternateFileName="")) returned 1 [0171.177] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34927cf5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34927cf5, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34927cf5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1b45a, dwReserved0=0x0, dwReserved1=0x0, cFileName="StarsFlying_D_Gliss.wav", cAlternateFileName="")) returned 1 [0171.177] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34927cf5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34927cf5, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34927cf5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x29eac, dwReserved0=0x0, dwReserved1=0x0, cFileName="StarsLand_F.wav", cAlternateFileName="")) returned 1 [0171.178] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34927cf5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3494df4a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3494df4a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x12fc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StarUnlock_D.wav", cAlternateFileName="")) returned 1 [0171.178] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34927cf5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3494df4a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3494df4a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x12fc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StarUnlock_D.wav", cAlternateFileName="")) returned 0 [0171.178] FindClose (in: hFindFile=0x12d9308 | out: hFindFile=0x12d9308) returned 1 [0171.178] GetProcessHeap () returned 0x12c0000 [0171.178] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.178] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3494df4a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3494df4a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3494df4a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="Star-Club-button_gold.png", cAlternateFileName="")) returned 1 [0171.178] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3494df4a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3494df4a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3494df4a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x218, dwReserved0=0x0, dwReserved1=0x0, cFileName="Star-Club-button_white.png", cAlternateFileName="")) returned 1 [0171.179] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x349741c3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3499a434, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3499a434, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x710e, dwReserved0=0x0, dwReserved1=0x0, cFileName="star-rotating-57x54.png", cAlternateFileName="")) returned 1 [0171.179] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3494df4a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3494df4a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3494df4a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x87e, dwReserved0=0x0, dwReserved1=0x0, cFileName="star.png", cAlternateFileName="")) returned 1 [0171.179] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3494df4a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3494df4a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3494df4a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3163, dwReserved0=0x0, dwReserved1=0x0, cFileName="StarClubTile.Small.jpg", cAlternateFileName="")) returned 1 [0171.179] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3494df4a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3494df4a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3494df4a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2f85, dwReserved0=0x0, dwReserved1=0x0, cFileName="StarClubTile.Small_.jpg", cAlternateFileName="")) returned 1 [0171.179] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3494df4a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x349741c3, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x349741c3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x56a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="StarClubTile.Wide.jpg", cAlternateFileName="")) returned 1 [0171.179] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x349741c3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x349741c3, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x349741c3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x465, dwReserved0=0x0, dwReserved1=0x0, cFileName="StarIcon.png", cAlternateFileName="")) returned 1 [0171.179] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3499a434, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac36f571, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3499a434, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stripes", cAlternateFileName="")) returned 1 [0171.179] GetProcessHeap () returned 0x12c0000 [0171.179] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.179] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.StarClub\\Assets\\Stripes\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3499a434, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac36f571, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3499a434, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0171.179] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3499a434, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac36f571, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3499a434, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.179] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3499a434, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3499a434, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3499a434, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xf13, dwReserved0=0x0, dwReserved1=0x0, cFileName="NewCollection.png", cAlternateFileName="")) returned 1 [0171.180] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3499a434, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3499a434, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3499a434, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xf13, dwReserved0=0x0, dwReserved1=0x0, cFileName="NewCollection.png", cAlternateFileName="")) returned 0 [0171.180] FindClose (in: hFindFile=0x12d9848 | out: hFindFile=0x12d9848) returned 1 [0171.180] GetProcessHeap () returned 0x12c0000 [0171.180] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.180] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3499a434, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac36f571, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3499a434, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stripes", cAlternateFileName="")) returned 0 [0171.180] FindClose (in: hFindFile=0x12d93c8 | out: hFindFile=0x12d93c8) returned 1 [0171.180] GetProcessHeap () returned 0x12c0000 [0171.180] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0171.181] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347a261b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac275cac, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3499a434, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 0 [0171.181] FindClose (in: hFindFile=0x12d9908 | out: hFindFile=0x12d9908) returned 1 [0171.181] GetProcessHeap () returned 0x12c0000 [0171.181] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0171.181] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3499a434, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac3703f0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3499a434, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Arkadium.Win10.Upsell", cAlternateFileName="ARKADI~1.UPS")) returned 1 [0171.181] GetProcessHeap () returned 0x12c0000 [0171.181] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0171.181] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.Upsell\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3499a434, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac3703f0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3499a434, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0171.182] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3499a434, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac3703f0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3499a434, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.182] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3499a434, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac371336, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3499a434, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0171.182] GetProcessHeap () returned 0x12c0000 [0171.182] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0171.183] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.Upsell\\Default\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3499a434, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac371336, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3499a434, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0171.183] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3499a434, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac371336, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3499a434, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.183] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3499a434, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x349c067b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x349c067b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xb66f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCasualGames.zip", cAlternateFileName="")) returned 1 [0171.183] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3499a434, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x349c067b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x349c067b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xb66f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCasualGames.zip", cAlternateFileName="")) returned 0 [0171.183] FindClose (in: hFindFile=0x12d9908 | out: hFindFile=0x12d9908) returned 1 [0171.183] GetProcessHeap () returned 0x12c0000 [0171.183] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0171.183] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3499a434, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac371336, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3499a434, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 0 [0171.183] FindClose (in: hFindFile=0x12d9848 | out: hFindFile=0x12d9848) returned 1 [0171.183] GetProcessHeap () returned 0x12c0000 [0171.183] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0171.183] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x349e68bd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac371ee7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x349e68bd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Arkadium.Win10.Xaml.Toolkit", cAlternateFileName="ARKADI~1.TOO")) returned 1 [0171.183] GetProcessHeap () returned 0x12c0000 [0171.183] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0171.183] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.Xaml.Toolkit\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x349e68bd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac371ee7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x349e68bd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0171.184] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x349e68bd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac371ee7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x349e68bd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.184] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x349e68bd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac487abd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34af1924, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1 [0171.184] GetProcessHeap () returned 0x12c0000 [0171.184] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0171.184] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.Xaml.Toolkit\\Assets\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x349e68bd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac487abd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34af1924, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0171.185] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x349e68bd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac487abd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34af1924, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.185] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x349e68bd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x349e68bd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x349e68bd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x10f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Arkadium-logo-credit.png", cAlternateFileName="")) returned 1 [0171.186] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x349e68bd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac488be1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34a0cb16, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Buttons", cAlternateFileName="")) returned 1 [0171.186] GetProcessHeap () returned 0x12c0000 [0171.186] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.187] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.Xaml.Toolkit\\Assets\\Buttons\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x349e68bd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac488be1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34a0cb16, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0171.187] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x349e68bd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac488be1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34a0cb16, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.187] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x349e68bd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac489905, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x349e68bd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Back", cAlternateFileName="")) returned 1 [0171.187] GetProcessHeap () returned 0x12c0000 [0171.187] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0171.187] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.Xaml.Toolkit\\Assets\\Buttons\\Back\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x349e68bd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac489905, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x349e68bd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0171.188] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x349e68bd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac489905, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x349e68bd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.188] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x349e68bd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x349e68bd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x349e68bd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x135, dwReserved0=0x0, dwReserved1=0x0, cFileName="Back-over.png", cAlternateFileName="")) returned 1 [0171.188] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x349e68bd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x349e68bd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x349e68bd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Back-press.png", cAlternateFileName="")) returned 1 [0171.188] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x349e68bd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x349e68bd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x349e68bd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x136, dwReserved0=0x0, dwReserved1=0x0, cFileName="Back-up.png", cAlternateFileName="")) returned 1 [0171.188] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x349e68bd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x349e68bd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x349e68bd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Back.png", cAlternateFileName="")) returned 1 [0171.188] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x349e68bd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x349e68bd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x349e68bd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Back.png", cAlternateFileName="")) returned 0 [0171.188] FindClose (in: hFindFile=0x12d93c8 | out: hFindFile=0x12d93c8) returned 1 [0171.188] GetProcessHeap () returned 0x12c0000 [0171.188] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0171.188] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34a0cb16, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac52ad21, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34a32d6a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Menu", cAlternateFileName="")) returned 1 [0171.188] GetProcessHeap () returned 0x12c0000 [0171.188] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0171.188] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.Xaml.Toolkit\\Assets\\Buttons\\Menu\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34a0cb16, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac52ad21, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34a32d6a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0171.190] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34a0cb16, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac52ad21, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34a32d6a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.190] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34a0cb16, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34a0cb16, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34a0cb16, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xba, dwReserved0=0x0, dwReserved1=0x0, cFileName="Menu-over.png", cAlternateFileName="")) returned 1 [0171.190] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34a32d6a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34a32d6a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34a32d6a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Menu-press.png", cAlternateFileName="")) returned 1 [0171.190] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34a32d6a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34a32d6a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34a32d6a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Menu-up.png", cAlternateFileName="")) returned 1 [0171.190] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34a0cb16, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34a0cb16, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34a0cb16, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x88a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Menu_back-over.png", cAlternateFileName="")) returned 1 [0171.190] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34a0cb16, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34a0cb16, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34a0cb16, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x961, dwReserved0=0x0, dwReserved1=0x0, cFileName="Menu_back-pressed.png", cAlternateFileName="")) returned 1 [0171.190] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34a0cb16, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34a0cb16, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34a0cb16, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x808, dwReserved0=0x0, dwReserved1=0x0, cFileName="Menu_back.png", cAlternateFileName="")) returned 1 [0171.190] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34a0cb16, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34a0cb16, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34a0cb16, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x65, dwReserved0=0x0, dwReserved1=0x0, cFileName="Menu_black-over.png", cAlternateFileName="")) returned 1 [0171.190] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34a0cb16, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34a0cb16, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34a0cb16, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Menu_black-press.png", cAlternateFileName="")) returned 1 [0171.190] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34a0cb16, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34a0cb16, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34a0cb16, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x65, dwReserved0=0x0, dwReserved1=0x0, cFileName="Menu_black-up.png", cAlternateFileName="")) returned 1 [0171.190] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34a0cb16, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34a0cb16, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34a0cb16, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x65, dwReserved0=0x0, dwReserved1=0x0, cFileName="Menu_black-up.png", cAlternateFileName="")) returned 0 [0171.190] FindClose (in: hFindFile=0x12d93c8 | out: hFindFile=0x12d93c8) returned 1 [0171.191] GetProcessHeap () returned 0x12c0000 [0171.191] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0171.191] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34a0cb16, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac52ad21, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34a32d6a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Menu", cAlternateFileName="")) returned 0 [0171.191] FindClose (in: hFindFile=0x12d9308 | out: hFindFile=0x12d9308) returned 1 [0171.191] GetProcessHeap () returned 0x12c0000 [0171.191] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.192] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34a32d6a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34acb6c6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34acb6c6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5625, dwReserved0=0x0, dwReserved1=0x0, cFileName="CardsLoadingSpritesheet.png", cAlternateFileName="")) returned 1 [0171.192] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34acb6c6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34acb6c6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34acb6c6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe05a, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameOverPopUp_D.wav", cAlternateFileName="")) returned 1 [0171.192] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34acb6c6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac52b9f7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34af1924, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hud", cAlternateFileName="")) returned 1 [0171.192] GetProcessHeap () returned 0x12c0000 [0171.192] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.193] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.Xaml.Toolkit\\Assets\\Hud\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34acb6c6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac52b9f7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34af1924, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0171.193] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34acb6c6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac52b9f7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34af1924, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.193] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34acb6c6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34acb6c6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34acb6c6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x417, dwReserved0=0x0, dwReserved1=0x0, cFileName="Background.png", cAlternateFileName="")) returned 1 [0171.194] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34acb6c6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34acb6c6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34acb6c6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xb0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NumberGrid.png", cAlternateFileName="")) returned 1 [0171.194] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34af1924, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34af1924, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34af1924, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x734, dwReserved0=0x0, dwReserved1=0x0, cFileName="TitleGrid.png", cAlternateFileName="")) returned 1 [0171.194] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34af1924, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34af1924, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34af1924, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x734, dwReserved0=0x0, dwReserved1=0x0, cFileName="TitleGrid.png", cAlternateFileName="")) returned 0 [0171.194] FindClose (in: hFindFile=0x12d9308 | out: hFindFile=0x12d9308) returned 1 [0171.198] GetProcessHeap () returned 0x12c0000 [0171.198] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.198] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34af1924, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34af1924, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34af1924, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3452, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftLogo.png", cAlternateFileName="")) returned 1 [0171.198] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34af1924, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac5cdd03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34b17b7d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XboxControl", cAlternateFileName="XBOXCO~1")) returned 1 [0171.198] GetProcessHeap () returned 0x12c0000 [0171.198] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.198] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.Xaml.Toolkit\\Assets\\XboxControl\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34af1924, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac5cdd03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34b17b7d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0171.201] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34af1924, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac5cdd03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34b17b7d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.201] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34af1924, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34af1924, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34af1924, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x26a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet_icon.png", cAlternateFileName="")) returned 1 [0171.201] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34af1924, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34af1924, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34af1924, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="User_icon-up.png", cAlternateFileName="")) returned 1 [0171.201] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34af1924, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34af1924, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34af1924, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xbox-over.png", cAlternateFileName="")) returned 1 [0171.201] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34af1924, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34b17b7d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34b17b7d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x28d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xbox-press.png", cAlternateFileName="")) returned 1 [0171.201] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34b17b7d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34b17b7d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34b17b7d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x29d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xbox-up.png", cAlternateFileName="")) returned 1 [0171.201] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34b17b7d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34b17b7d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34b17b7d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x29d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xbox-up.png", cAlternateFileName="")) returned 0 [0171.201] FindClose (in: hFindFile=0x12d9308 | out: hFindFile=0x12d9308) returned 1 [0171.202] GetProcessHeap () returned 0x12c0000 [0171.202] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.202] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34af1924, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac5cdd03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34b17b7d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XboxControl", cAlternateFileName="XBOXCO~1")) returned 0 [0171.202] FindClose (in: hFindFile=0x12d9908 | out: hFindFile=0x12d9908) returned 1 [0171.202] GetProcessHeap () returned 0x12c0000 [0171.202] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0171.202] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x349e68bd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac487abd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34af1924, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 0 [0171.203] FindClose (in: hFindFile=0x12d9848 | out: hFindFile=0x12d9848) returned 1 [0171.203] GetProcessHeap () returned 0x12c0000 [0171.203] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0171.204] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34b17b7d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac644067, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x377f6ca3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1 [0171.204] GetProcessHeap () returned 0x12c0000 [0171.204] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0171.204] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34b17b7d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac644067, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x377f6ca3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0171.206] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34b17b7d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac644067, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x377f6ca3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.207] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34b17b7d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34b17b7d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34b17b7d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4392, dwReserved0=0x0, dwReserved1=0x0, cFileName="ads_casualgames_300x250.png", cAlternateFileName="")) returned 1 [0171.207] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34b17b7d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34b17b7d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34b17b7d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3233, dwReserved0=0x0, dwReserved1=0x0, cFileName="ads_casualgames_728x90.png", cAlternateFileName="")) returned 1 [0171.207] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34b3ddd7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34b3ddd7, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34b3ddd7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x110a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ads_premium.jpg", cAlternateFileName="")) returned 1 [0171.207] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34b3ddd7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34b64035, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34b64035, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xc1c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ads_win10_300x250.scale-200.jpg", cAlternateFileName="")) returned 1 [0171.207] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34b64035, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34b64035, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34b64035, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xc61a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ads_win10_728x90.scale-200.jpg", cAlternateFileName="")) returned 1 [0171.207] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34b64035, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac645b09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34b64035, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Advertisement", cAlternateFileName="ADVERT~1")) returned 1 [0171.207] GetProcessHeap () returned 0x12c0000 [0171.207] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0171.208] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Advertisement\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34b64035, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac645b09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34b64035, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0171.208] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34b64035, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac645b09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34b64035, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.208] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34b64035, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34b64035, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34b64035, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1fd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ads_320x50px.jpg", cAlternateFileName="")) returned 1 [0171.208] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34b64035, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34b64035, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34b64035, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1fd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ads_320x50px.jpg", cAlternateFileName="")) returned 0 [0171.208] FindClose (in: hFindFile=0x12d9908 | out: hFindFile=0x12d9908) returned 1 [0171.208] GetProcessHeap () returned 0x12c0000 [0171.208] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0171.208] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34b64035, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac6cbcfb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34c48e56, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Audio", cAlternateFileName="")) returned 1 [0171.208] GetProcessHeap () returned 0x12c0000 [0171.208] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0171.208] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Audio\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34b64035, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac6cbcfb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34c48e56, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0171.210] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34b64035, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac6cbcfb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34c48e56, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.210] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34b64035, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34b64035, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34b64035, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x105a, dwReserved0=0x0, dwReserved1=0x0, cFileName="checkbox.wav", cAlternateFileName="")) returned 1 [0171.210] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34b64035, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34b64035, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34b64035, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x185a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Click_G.wav", cAlternateFileName="")) returned 1 [0171.210] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34b8a28e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34b8a28e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34b8a28e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xc45a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoinProgress_A.wav", cAlternateFileName="")) returned 1 [0171.210] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34b8a28e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34bd6745, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34bd6745, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1705a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoinsFlyToBar_D.wav", cAlternateFileName="")) returned 1 [0171.210] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34bd6745, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34bd6745, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34bd6745, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1145a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Daily_challenge_Coins Hit progress bar.wav", cAlternateFileName="")) returned 1 [0171.210] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34bd6745, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34bfc99e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34bfc99e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xd05a, dwReserved0=0x0, dwReserved1=0x0, cFileName="dcFireworks_E.wav", cAlternateFileName="")) returned 1 [0171.210] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34bfc99e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34bfc99e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34bfc99e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xb05a, dwReserved0=0x0, dwReserved1=0x0, cFileName="dcGoalCollapse_D.wav", cAlternateFileName="")) returned 1 [0171.210] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34bfc99e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34bfc99e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34bfc99e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x885a, dwReserved0=0x0, dwReserved1=0x0, cFileName="dcGoalFly_D.wav", cAlternateFileName="")) returned 1 [0171.210] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34c22bfc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34c22bfc, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34c22bfc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x545a, dwReserved0=0x0, dwReserved1=0x0, cFileName="dcGoalPopUp_A.wav", cAlternateFileName="")) returned 1 [0171.210] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34c22bfc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34c22bfc, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34c22bfc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xcc5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="firework1.wav", cAlternateFileName="")) returned 1 [0171.210] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34c22bfc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34c22bfc, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34c22bfc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x305a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MenuClose_D.wav", cAlternateFileName="")) returned 1 [0171.210] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34c22bfc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34c22bfc, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34c22bfc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x305a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MenuOpen_D.wav", cAlternateFileName="")) returned 1 [0171.210] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34c22bfc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34c22bfc, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34c22bfc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x8c5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="opt-in-ad-popup.wav", cAlternateFileName="")) returned 1 [0171.211] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34c48e56, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34c48e56, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34c48e56, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xf85a, dwReserved0=0x0, dwReserved1=0x0, cFileName="RibbonHit_A.wav", cAlternateFileName="")) returned 1 [0171.211] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34c48e56, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34c48e56, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34c48e56, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x185a, dwReserved0=0x0, dwReserved1=0x0, cFileName="slide_in.wav", cAlternateFileName="")) returned 1 [0171.211] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34c48e56, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34c48e56, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34c48e56, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x403c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui_collapsing.wav", cAlternateFileName="")) returned 1 [0171.211] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34c48e56, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34c48e56, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34c48e56, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x403c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui_collapsing.wav", cAlternateFileName="")) returned 0 [0171.211] FindClose (in: hFindFile=0x12d9908 | out: hFindFile=0x12d9908) returned 1 [0171.211] GetProcessHeap () returned 0x12c0000 [0171.212] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0171.212] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34c48e56, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac6cce12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x350306db, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Awards", cAlternateFileName="")) returned 1 [0171.212] GetProcessHeap () returned 0x12c0000 [0171.212] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0171.212] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Awards\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34c48e56, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac6cce12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x350306db, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0171.213] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34c48e56, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac6cce12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x350306db, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.213] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34c48e56, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac779db7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34d56040, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="challenge", cAlternateFileName="CHALLE~1")) returned 1 [0171.214] GetProcessHeap () returned 0x12c0000 [0171.214] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.214] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Awards\\challenge\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34c48e56, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac779db7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34d56040, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0171.216] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34c48e56, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac779db7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34d56040, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.216] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34c48e56, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34c48e56, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34c48e56, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x294f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Become_a_Star_.png", cAlternateFileName="")) returned 1 [0171.216] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34c48e56, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34c48e56, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34c48e56, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3f1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Become_a_Star_Unearned_small.png", cAlternateFileName="")) returned 1 [0171.216] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34c48e56, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34c6fec6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34c6fec6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3557, dwReserved0=0x0, dwReserved1=0x0, cFileName="Become_a_Superstar_.png", cAlternateFileName="")) returned 1 [0171.216] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34c711f5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34c9747d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34c9747d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Become_a_Superstar_Unearned_small.png", cAlternateFileName="")) returned 1 [0171.216] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34c9747d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34c9747d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34c9747d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2f99, dwReserved0=0x0, dwReserved1=0x0, cFileName="Came_To_Play_.png", cAlternateFileName="")) returned 1 [0171.216] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34c9747d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34c9747d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34c9747d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4dab, dwReserved0=0x0, dwReserved1=0x0, cFileName="Came_To_Play_Unearned_small.png", cAlternateFileName="")) returned 1 [0171.216] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34c9747d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34c9747d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34c9747d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2dde, dwReserved0=0x0, dwReserved1=0x0, cFileName="Came_To_Win_.png", cAlternateFileName="")) returned 1 [0171.243] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34c9747d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34cbd6d1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34cbd6d1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x548b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Came_To_Win_Unearned_small.png", cAlternateFileName="")) returned 1 [0171.243] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34cbd6d1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34cbd6d1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34cbd6d1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2f45, dwReserved0=0x0, dwReserved1=0x0, cFileName="Diamonds_are_Forever_.png", cAlternateFileName="")) returned 1 [0171.243] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34cbd6d1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34cbd6d1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34cbd6d1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5a41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Diamonds_are_Forever_Unearned_small.png", cAlternateFileName="")) returned 1 [0171.243] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34cbd6d1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34ce392a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34ce392a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2f7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gimme_Five_.png", cAlternateFileName="")) returned 1 [0171.243] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34ce392a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34ce392a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34ce392a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x50c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gimme_Five_Unearned_small.png", cAlternateFileName="")) returned 1 [0171.243] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34ce392a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34d2fde2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34d2fde2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x348f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Go-for_the_Gold_.png", cAlternateFileName="")) returned 1 [0171.243] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34d2fde2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34d2fde2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34d2fde2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x583b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Go-for_the_Gold_Unearned_small.png", cAlternateFileName="")) returned 1 [0171.243] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34ce392a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34ce392a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34ce392a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3288, dwReserved0=0x0, dwReserved1=0x0, cFileName="Go_for_the_Bronze_.png", cAlternateFileName="")) returned 1 [0171.243] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34ce392a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34ce392a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34ce392a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5658, dwReserved0=0x0, dwReserved1=0x0, cFileName="Go_for_the_Bronze_Unearned_small.png", cAlternateFileName="")) returned 1 [0171.243] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34ce392a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x34ce392a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x34ce392a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x333d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Go_for_the_Silver_.png", cAlternateFileName="")) returned 1 [0171.244] GetProcessHeap () returned 0x12c0000 [0171.244] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.244] GetProcessHeap () returned 0x12c0000 [0171.244] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.244] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Awards\\common\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34d56040, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac7e1fd7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34e610ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0171.247] GetProcessHeap () returned 0x12c0000 [0171.247] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.247] GetProcessHeap () returned 0x12c0000 [0171.247] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.247] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Awards\\freecell\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34e610ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac845f95, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34e87318, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0171.249] GetProcessHeap () returned 0x12c0000 [0171.249] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.249] GetProcessHeap () returned 0x12c0000 [0171.249] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.249] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Awards\\klondike\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34ead571, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac8488db, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34ef9a28, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0171.252] GetProcessHeap () returned 0x12c0000 [0171.252] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.252] GetProcessHeap () returned 0x12c0000 [0171.252] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.252] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Awards\\pyramid\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34f1fc81, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac8a1411, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34f97d43, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0171.254] GetProcessHeap () returned 0x12c0000 [0171.254] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.254] GetProcessHeap () returned 0x12c0000 [0171.254] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.254] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Awards\\spider\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34f97d43, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac8e55e7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3500a487, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0171.256] GetProcessHeap () returned 0x12c0000 [0171.256] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.256] GetProcessHeap () returned 0x12c0000 [0171.256] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.256] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Awards\\tripeaks\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x350306db, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac95908b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x350c904a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0171.259] GetProcessHeap () returned 0x12c0000 [0171.259] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.259] GetProcessHeap () returned 0x12c0000 [0171.259] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0171.260] GetProcessHeap () returned 0x12c0000 [0171.260] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0171.260] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Buttons\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x350f002f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac95a2c9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x352c9059, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0171.262] GetProcessHeap () returned 0x12c0000 [0171.262] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.263] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Buttons\\Deal\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x350f002f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac9df1ec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3513c50b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0171.265] GetProcessHeap () returned 0x12c0000 [0171.265] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.265] GetProcessHeap () returned 0x12c0000 [0171.266] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.266] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Buttons\\FullScreen\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3513c50b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaca3dcfb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x35197d53, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0171.268] GetProcessHeap () returned 0x12c0000 [0171.268] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.268] GetProcessHeap () returned 0x12c0000 [0171.268] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.268] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Buttons\\GiveUp\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35197d53, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaca840b3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x351bdfd6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0171.270] GetProcessHeap () returned 0x12c0000 [0171.270] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.270] GetProcessHeap () returned 0x12c0000 [0171.270] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.270] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Buttons\\Solve\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x351bdfd6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xacad2aaa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x35256944, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0171.273] GetProcessHeap () returned 0x12c0000 [0171.273] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.273] GetProcessHeap () returned 0x12c0000 [0171.273] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.273] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Buttons\\TryAgain\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3527cb9e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xacc01122, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x352c9059, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0171.275] GetProcessHeap () returned 0x12c0000 [0171.275] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.275] GetProcessHeap () returned 0x12c0000 [0171.275] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.276] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Buttons\\Undo\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352c9059, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xacc863de, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x352f22cf, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0171.278] GetProcessHeap () returned 0x12c0000 [0171.278] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.278] GetProcessHeap () returned 0x12c0000 [0171.278] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0171.304] GetProcessHeap () returned 0x12c0000 [0171.344] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0171.344] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\DailyChallenges\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3533dfe8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaccce3d2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x355540e1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0171.346] GetProcessHeap () returned 0x12c0000 [0171.346] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.347] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\DailyChallenges\\Icons\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35364241, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xacccf58b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x35364241, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0171.348] GetProcessHeap () returned 0x12c0000 [0171.348] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.348] GetProcessHeap () returned 0x12c0000 [0171.348] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.348] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\DailyChallenges\\LobbyTiles\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x353b06f8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xacd36e5b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x353d6951, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0171.350] GetProcessHeap () returned 0x12c0000 [0171.350] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.350] GetProcessHeap () returned 0x12c0000 [0171.350] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.350] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\DailyChallenges\\Popup\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x353fcbab, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xacd9987b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x35495519, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0171.352] GetProcessHeap () returned 0x12c0000 [0171.352] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.352] GetProcessHeap () returned 0x12c0000 [0171.352] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.352] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\DailyChallenges\\Tile\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x355540e1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xacd9a8ce, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x355540e1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0171.353] GetProcessHeap () returned 0x12c0000 [0171.353] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.353] GetProcessHeap () returned 0x12c0000 [0171.353] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0171.354] GetProcessHeap () returned 0x12c0000 [0171.354] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0171.354] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Fireworks\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3557a33f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xacd9b495, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x355a0598, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0171.355] GetProcessHeap () returned 0x12c0000 [0171.355] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0171.355] GetProcessHeap () returned 0x12c0000 [0171.355] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0171.355] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Fues\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x355c67f6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xace02661, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3576d4df, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0171.357] GetProcessHeap () returned 0x12c0000 [0171.357] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0171.357] GetProcessHeap () returned 0x12c0000 [0171.357] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0171.358] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\GameEnd\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35793738, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xace05649, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3582c0a2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0171.360] GetProcessHeap () returned 0x12c0000 [0171.360] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0171.360] GetProcessHeap () returned 0x12c0000 [0171.360] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0171.360] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35852300, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xace066b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x35f531bc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0171.361] GetProcessHeap () returned 0x12c0000 [0171.361] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.362] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\FreeCell\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35878559, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xace07319, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x35878559, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0171.363] GetProcessHeap () returned 0x12c0000 [0171.363] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0171.363] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\FreeCell\\ResPacks\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35878559, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xace07e04, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x35878559, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0171.363] GetProcessHeap () returned 0x12c0000 [0171.363] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0171.363] GetProcessHeap () returned 0x12c0000 [0171.363] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.364] GetProcessHeap () returned 0x12c0000 [0171.364] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.365] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\Klondike\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3589e7b7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xace08745, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3589e7b7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0171.366] GetProcessHeap () returned 0x12c0000 [0171.366] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0171.366] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\Klondike\\ResPacks\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3589e7b7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xace091ed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3589e7b7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0171.366] GetProcessHeap () returned 0x12c0000 [0171.366] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0171.366] GetProcessHeap () returned 0x12c0000 [0171.366] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.366] GetProcessHeap () returned 0x12c0000 [0171.366] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.366] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\Localization\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x358c4a10, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xacf1abf4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x35d3d0be, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0171.369] GetProcessHeap () returned 0x12c0000 [0171.369] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.370] GetProcessHeap () returned 0x12c0000 [0171.370] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.370] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\Particles\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35d3d0be, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xacf1b816, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x35dd5a2c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0171.370] GetProcessHeap () returned 0x12c0000 [0171.370] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.370] GetProcessHeap () returned 0x12c0000 [0171.370] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.370] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\Pyramid\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35dfbc86, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xacf1c555, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x35e21edf, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0171.370] GetProcessHeap () returned 0x12c0000 [0171.370] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0171.370] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\Pyramid\\ResPacks\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35e21edf, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xacf1d153, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x35e21edf, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0171.371] GetProcessHeap () returned 0x12c0000 [0171.371] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0171.371] GetProcessHeap () returned 0x12c0000 [0171.371] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.371] GetProcessHeap () returned 0x12c0000 [0171.371] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.371] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\Spider\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35e48142, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xacf1dfdd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x35e6e396, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0171.372] GetProcessHeap () returned 0x12c0000 [0171.372] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0171.372] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\Spider\\ResPacks\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35e48142, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xacf1ef18, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x35e48142, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0171.372] GetProcessHeap () returned 0x12c0000 [0171.372] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0171.372] GetProcessHeap () returned 0x12c0000 [0171.372] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.373] GetProcessHeap () returned 0x12c0000 [0171.373] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.374] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\Theme\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35e6e396, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xacf1f832, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x35f2cf5e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0171.374] GetProcessHeap () returned 0x12c0000 [0171.374] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.374] GetProcessHeap () returned 0x12c0000 [0171.374] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.374] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\TriPeaks\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35f531bc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xacf1fefc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x35fc58cc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0171.375] GetProcessHeap () returned 0x12c0000 [0171.375] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0171.375] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\TriPeaks\\ResPacks\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35f531bc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xacf20a89, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x35f531bc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0171.376] GetProcessHeap () returned 0x12c0000 [0171.376] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0171.376] GetProcessHeap () returned 0x12c0000 [0171.376] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.376] GetProcessHeap () returned 0x12c0000 [0171.376] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0171.377] GetProcessHeap () returned 0x12c0000 [0171.377] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0171.377] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\HowToPlay\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36011d7f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xacf21496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x363fa5db, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0171.543] GetProcessHeap () returned 0x12c0000 [0171.543] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.543] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\HowToPlay\\DailyChallenges\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36011d7f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad048c46, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3605e236, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0171.546] GetProcessHeap () returned 0x12c0000 [0171.546] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.546] GetProcessHeap () returned 0x12c0000 [0171.546] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.546] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\HowToPlay\\FreeCell\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3605e236, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad0b7bdb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x360f6ba4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0171.548] GetProcessHeap () returned 0x12c0000 [0171.548] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.548] GetProcessHeap () returned 0x12c0000 [0171.548] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.549] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\HowToPlay\\Klondike\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3611cdfe, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad0ba445, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x361db9c5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0171.551] GetProcessHeap () returned 0x12c0000 [0171.551] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.551] GetProcessHeap () returned 0x12c0000 [0171.551] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.551] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\HowToPlay\\Pyramid\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36227e81, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad119406, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x362e6a44, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0171.553] GetProcessHeap () returned 0x12c0000 [0171.553] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.553] GetProcessHeap () returned 0x12c0000 [0171.553] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.554] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\HowToPlay\\Spider\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3630cca2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad1cdf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x363d4386, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0171.556] GetProcessHeap () returned 0x12c0000 [0171.556] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.556] GetProcessHeap () returned 0x12c0000 [0171.556] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.556] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\HowToPlay\\StarClub\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x363d4386, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad1ce7fc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x363fa5db, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0171.556] GetProcessHeap () returned 0x12c0000 [0171.556] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.556] GetProcessHeap () returned 0x12c0000 [0171.556] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.556] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\HowToPlay\\TriPeaks\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x363fa5db, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad1d0ffd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3644e45a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0171.559] GetProcessHeap () returned 0x12c0000 [0171.559] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.559] GetProcessHeap () returned 0x12c0000 [0171.559] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0171.560] GetProcessHeap () returned 0x12c0000 [0171.560] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0171.560] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x364746b3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad239fed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3650d026, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0171.563] GetProcessHeap () returned 0x12c0000 [0171.563] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0171.563] GetProcessHeap () returned 0x12c0000 [0171.563] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0171.563] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Livetiles\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3650d026, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad2b592c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x365a5990, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0171.565] GetProcessHeap () returned 0x12c0000 [0171.565] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0171.565] GetProcessHeap () returned 0x12c0000 [0171.565] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0171.565] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\MainPage\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x365a5990, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad3440cd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x365cbbe9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0171.567] GetProcessHeap () returned 0x12c0000 [0171.567] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0171.567] GetProcessHeap () returned 0x12c0000 [0171.567] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0171.567] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\MainPageState2\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x365cbbe9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad346b82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36664553, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0171.570] GetProcessHeap () returned 0x12c0000 [0171.570] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0171.571] GetProcessHeap () returned 0x12c0000 [0171.571] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0171.571] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\News\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36664553, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad34763e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36664553, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0171.571] GetProcessHeap () returned 0x12c0000 [0171.571] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0171.571] GetProcessHeap () returned 0x12c0000 [0171.571] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0171.571] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\OptInPopup\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3668a7b1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad348156, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3668a7b1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0171.572] GetProcessHeap () returned 0x12c0000 [0171.572] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0171.572] GetProcessHeap () returned 0x12c0000 [0171.572] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0171.572] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\PopUp\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x366b0a0a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad348e3e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x366b0a0a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0171.572] GetProcessHeap () returned 0x12c0000 [0171.572] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0171.572] GetProcessHeap () returned 0x12c0000 [0171.572] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0171.572] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\SampleHeader\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x366fcec2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad349c2a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36723120, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0171.573] GetProcessHeap () returned 0x12c0000 [0171.573] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0171.573] GetProcessHeap () returned 0x12c0000 [0171.573] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0171.573] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\SplashScreen\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36723120, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad3af563, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36749379, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0171.575] GetProcessHeap () returned 0x12c0000 [0171.575] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0171.575] GetProcessHeap () returned 0x12c0000 [0171.575] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0171.575] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\StarClub\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3676f5d7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad3b11e3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36795830, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0171.578] GetProcessHeap () returned 0x12c0000 [0171.578] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0171.578] GetProcessHeap () returned 0x12c0000 [0171.578] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0171.578] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Statistics\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x367bba89, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad3b1c47, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x367e1ce3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0171.578] GetProcessHeap () returned 0x12c0000 [0171.578] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0171.578] GetProcessHeap () returned 0x12c0000 [0171.578] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0171.578] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Store\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36807f40, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad3b269d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36807f40, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0171.706] GetProcessHeap () returned 0x12c0000 [0171.706] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0171.706] GetProcessHeap () returned 0x12c0000 [0171.706] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0171.706] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\ThemeCreation\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3682e19a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad463d9a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36a24610, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0171.709] GetProcessHeap () returned 0x12c0000 [0171.709] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.710] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\ThemeCreation\\Effects\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x368c6b0d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad4dd181, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36939219, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0171.712] GetProcessHeap () returned 0x12c0000 [0171.712] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.712] GetProcessHeap () returned 0x12c0000 [0171.712] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0171.712] GetProcessHeap () returned 0x12c0000 [0171.712] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0171.712] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\ThemeDownload\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36a24610, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad4ddf83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36a4a88e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0171.712] GetProcessHeap () returned 0x12c0000 [0171.712] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0171.712] GetProcessHeap () returned 0x12c0000 [0171.712] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0171.712] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\ThemePreview\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36a4a88e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad4de80d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36c3a737, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0171.715] GetProcessHeap () returned 0x12c0000 [0171.715] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.715] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\ThemePreview\\Backgrounds\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36a4a88e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad524849, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36abcfa3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0171.720] GetProcessHeap () returned 0x12c0000 [0171.721] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.721] GetProcessHeap () returned 0x12c0000 [0171.721] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.721] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\ThemePreview\\CardBacks\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36abcfa3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad56501d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36b09456, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0171.725] GetProcessHeap () returned 0x12c0000 [0171.725] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.725] GetProcessHeap () returned 0x12c0000 [0171.725] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.725] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\ThemePreview\\Effects\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36b2f6b4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad565f3b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36c144d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0171.728] GetProcessHeap () returned 0x12c0000 [0171.728] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.728] GetProcessHeap () returned 0x12c0000 [0171.728] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.728] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\ThemePreview\\Themes\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36c3a737, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad603ea4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36cd309d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0171.732] GetProcessHeap () returned 0x12c0000 [0171.732] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.732] GetProcessHeap () returned 0x12c0000 [0171.732] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0171.733] GetProcessHeap () returned 0x12c0000 [0171.733] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0171.733] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Themes\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36cf92fa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad604f5a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x374f1a3e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0171.735] GetProcessHeap () returned 0x12c0000 [0171.735] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.736] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Themes\\Aquarium\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36cf92fa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad660916, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36db7ebd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0171.738] GetProcessHeap () returned 0x12c0000 [0171.738] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0171.738] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Themes\\Aquarium\\mask\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36db7ebd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad6bc21d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36e9cce3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0171.740] GetProcessHeap () returned 0x12c0000 [0171.740] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0171.740] GetProcessHeap () returned 0x12c0000 [0171.740] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.740] GetProcessHeap () returned 0x12c0000 [0171.740] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.740] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Themes\\Autumn\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36e9cce3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad6c0df3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36f5b8ab, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0171.742] GetProcessHeap () returned 0x12c0000 [0171.742] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0171.742] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Themes\\Autumn\\mask\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36f5b8ab, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad73344c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36fcdfbb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0171.885] GetProcessHeap () returned 0x12c0000 [0171.885] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0171.885] GetProcessHeap () returned 0x12c0000 [0171.885] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.886] GetProcessHeap () returned 0x12c0000 [0171.886] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.887] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Themes\\Beach\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36ff4214, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad77eea6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x370ff293, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0171.889] GetProcessHeap () returned 0x12c0000 [0171.889] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0171.889] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Themes\\Beach\\mask\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x370ff293, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad7cec66, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x37197c02, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0171.891] GetProcessHeap () returned 0x12c0000 [0171.891] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0171.891] GetProcessHeap () returned 0x12c0000 [0171.891] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.892] GetProcessHeap () returned 0x12c0000 [0171.892] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.892] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Themes\\Classic\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x371bde5b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad7d10a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3728a569, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0171.893] GetProcessHeap () returned 0x12c0000 [0171.894] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0171.894] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Themes\\Classic\\mask\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3728a569, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad8a1f96, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x372fcc79, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0171.896] GetProcessHeap () returned 0x12c0000 [0171.896] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0171.896] GetProcessHeap () returned 0x12c0000 [0171.896] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.896] GetProcessHeap () returned 0x12c0000 [0171.896] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.896] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Themes\\Fable\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x372fcc79, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad912c92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x37399629, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0171.898] GetProcessHeap () returned 0x12c0000 [0171.898] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.898] GetProcessHeap () returned 0x12c0000 [0171.898] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.898] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Themes\\Jumbo\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37399629, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad991296, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x374581f1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0171.900] GetProcessHeap () returned 0x12c0000 [0171.900] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0171.900] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Themes\\Jumbo\\mask\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x374581f1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xada1e8d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x374f1a3e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0171.902] GetProcessHeap () returned 0x12c0000 [0171.902] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0171.902] GetProcessHeap () returned 0x12c0000 [0171.902] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.902] GetProcessHeap () returned 0x12c0000 [0171.902] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.902] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Themes\\Mobile\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x374f1a3e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xada1fcdb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x374f1a3e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0171.907] GetProcessHeap () returned 0x12c0000 [0171.907] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.907] GetProcessHeap () returned 0x12c0000 [0171.907] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.907] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Themes\\Western\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x374f1a3e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xada5d89c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x376785a9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0171.909] GetProcessHeap () returned 0x12c0000 [0171.909] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0171.909] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Themes\\Western\\mask\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x374f1a3e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xada602f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x37593788, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0171.911] GetProcessHeap () returned 0x12c0000 [0171.911] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0171.911] GetProcessHeap () returned 0x12c0000 [0171.911] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0171.912] GetProcessHeap () returned 0x12c0000 [0171.912] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0171.912] GetProcessHeap () returned 0x12c0000 [0171.912] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0171.912] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Tiles\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3769e802, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadb15f48, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x376c4a60, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0171.916] GetProcessHeap () returned 0x12c0000 [0171.916] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0171.916] GetProcessHeap () returned 0x12c0000 [0171.916] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0171.916] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Tournament\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x376ebbff, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadb1841a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x377d0a4a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0171.918] GetProcessHeap () returned 0x12c0000 [0171.918] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0171.918] GetProcessHeap () returned 0x12c0000 [0171.918] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0171.918] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\XboxControl\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x377d0a4a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadb19197, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x377f6ca3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0171.919] GetProcessHeap () returned 0x12c0000 [0171.919] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0171.919] GetProcessHeap () returned 0x12c0000 [0171.919] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0171.919] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\XboxFlow\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x377f6ca3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadb19d17, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x377f6ca3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0171.919] GetProcessHeap () returned 0x12c0000 [0171.919] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0171.919] GetProcessHeap () returned 0x12c0000 [0171.919] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0171.921] GetProcessHeap () returned 0x12c0000 [0171.921] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0171.921] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Avatars\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37974437, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadb1ac8e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x37974437, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0171.922] GetProcessHeap () returned 0x12c0000 [0171.922] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0171.922] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Avatars\\Assets\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37974437, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadb1bdb7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x37974437, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0171.923] GetProcessHeap () returned 0x12c0000 [0171.923] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0171.923] GetProcessHeap () returned 0x12c0000 [0171.923] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0171.923] GetProcessHeap () returned 0x12c0000 [0171.923] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0171.923] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc96ea5b4, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xdae86288, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xdae86288, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0171.923] GetProcessHeap () returned 0x12c0000 [0171.923] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0171.923] GetProcessHeap () returned 0x12c0000 [0171.923] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0171.923] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\SharpDXEngine\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37e86909, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadb1ce25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x37e86909, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0171.924] GetProcessHeap () returned 0x12c0000 [0171.924] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0171.924] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\SharpDXEngine\\Rendering\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37e86909, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadb1d39d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x37e86909, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0171.924] GetProcessHeap () returned 0x12c0000 [0171.924] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0171.925] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\SharpDXEngine\\Rendering\\Shaders\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37e86909, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadb1d9b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x37e86909, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0172.026] GetProcessHeap () returned 0x12c0000 [0172.026] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0172.026] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\SharpDXEngine\\Rendering\\Shaders\\Builtin\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37e86909, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadb1de6c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x37ef901a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0172.027] GetProcessHeap () returned 0x12c0000 [0172.027] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0172.027] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\SharpDXEngine\\Rendering\\Shaders\\Builtin\\Bin\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37e86909, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadb98b45, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x37ef901a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131e4c8 [0172.029] GetProcessHeap () returned 0x12c0000 [0172.029] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0172.029] GetProcessHeap () returned 0x12c0000 [0172.029] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0172.029] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\SharpDXEngine\\Rendering\\Shaders\\Builtin\\HLSL\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37ef901a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadbfe34d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x37f709ad, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131e248 [0172.032] GetProcessHeap () returned 0x12c0000 [0172.032] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0172.032] GetProcessHeap () returned 0x12c0000 [0172.032] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0172.033] GetProcessHeap () returned 0x12c0000 [0172.033] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0172.033] GetProcessHeap () returned 0x12c0000 [0172.033] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0172.034] GetProcessHeap () returned 0x12c0000 [0172.034] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0172.034] GetProcessHeap () returned 0x12c0000 [0172.034] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0172.035] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\_Resources\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34110fcc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabf2fada, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3421c04b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0172.037] GetProcessHeap () returned 0x12c0000 [0172.037] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0172.037] GetProcessHeap () returned 0x12c0000 [0172.037] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0172.037] GetProcessHeap () returned 0x12c0000 [0172.037] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0172.038] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_split.scale-100_8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a98e846, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xcb314296, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcb314296, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0172.041] GetProcessHeap () returned 0x12c0000 [0172.041] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0172.042] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a9dacf8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadc94d2f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6aa271af, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0172.046] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a9dacf8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadc94d2f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6aa271af, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.046] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a9dacf8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6a9dacf8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6a9dacf8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="LockScreenLogo.scale-100.png", cAlternateFileName="")) returned 1 [0172.047] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6aa00f56, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6aa00f56, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6aa00f56, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x7de, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preview.scale-100_layoutdir-LTR.png", cAlternateFileName="")) returned 1 [0172.047] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6aa00f56, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6aa00f56, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6aa00f56, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x7e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preview.scale-100_layoutdir-RTL.png", cAlternateFileName="")) returned 1 [0172.047] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6aa00f56, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6aa00f56, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6aa00f56, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xfb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashScreen.scale-100.png", cAlternateFileName="")) returned 1 [0172.047] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6aa00f56, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6aa00f56, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6aa00f56, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Square150x150Logo.scale-100.png", cAlternateFileName="")) returned 1 [0172.047] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6aa00f56, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6aa00f56, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6aa00f56, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x91b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Square310x310Logo.scale-100.png", cAlternateFileName="")) returned 1 [0172.047] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6aa00f56, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6aa00f56, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6aa00f56, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Square44x44Logo.scale-100.png", cAlternateFileName="")) returned 1 [0172.047] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6aa00f56, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6aa00f56, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6aa00f56, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x135, dwReserved0=0x0, dwReserved1=0x0, cFileName="Square71x71Logo.scale-100.png", cAlternateFileName="")) returned 1 [0172.047] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6aa00f56, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6aa00f56, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6aa00f56, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x105, dwReserved0=0x0, dwReserved1=0x0, cFileName="StoreLogo.scale-100.png", cAlternateFileName="")) returned 1 [0172.047] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6aa271af, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6aa271af, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6aa271af, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x49c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wide310x150Logo.scale-100.png", cAlternateFileName="")) returned 1 [0172.047] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6aa271af, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6aa271af, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6aa271af, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x865, dwReserved0=0x0, dwReserved1=0x0, cFileName="YellowAbstractNote.scale-100.png", cAlternateFileName="")) returned 1 [0172.047] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6aa271af, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6aa271af, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6aa271af, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x865, dwReserved0=0x0, dwReserved1=0x0, cFileName="YellowAbstractNote.scale-100.png", cAlternateFileName="")) returned 0 [0172.047] FindClose (in: hFindFile=0x12d9848 | out: hFindFile=0x12d9848) returned 1 [0172.048] GetProcessHeap () returned 0x12c0000 [0172.048] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0172.048] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xcb314296, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xcb314296, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcb314296, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1 [0172.048] GetProcessHeap () returned 0x12c0000 [0172.048] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0172.048] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xcb314296, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xcb314296, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcb314296, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0172.050] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xcb314296, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xcb314296, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcb314296, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.050] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xcb314296, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xcb314296, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcb314296, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0172.050] FindClose (in: hFindFile=0x12d9848 | out: hFindFile=0x12d9848) returned 1 [0172.050] GetProcessHeap () returned 0x12c0000 [0172.050] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0172.050] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6aa271af, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6aa271af, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6aa271af, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x658, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1 [0172.050] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6aa271af, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6aa271af, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6aa271af, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x658, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 0 [0172.051] FindClose (in: hFindFile=0x12d9808 | out: hFindFile=0x12d9808) returned 1 [0172.051] GetProcessHeap () returned 0x12c0000 [0172.051] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0172.051] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69c2543c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xcb2ee04f, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcb2ee04f, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIFFC1~1.0_N")) returned 1 [0172.051] GetProcessHeap () returned 0x12c0000 [0172.051] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0172.052] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69c2543c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xcb2ee04f, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcb2ee04f, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0172.058] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69c2543c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xcb2ee04f, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcb2ee04f, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.058] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69dc8e24, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x69dc8e24, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x69dc8e24, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1 [0172.059] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69c2543c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadd6c838, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69c2543c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1 [0172.059] GetProcessHeap () returned 0x12c0000 [0172.059] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0172.059] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69c2543c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadd6c838, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69c2543c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0172.059] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69c2543c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadd6c838, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69c2543c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.059] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69c2543c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x69c4b69e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x69c4b69e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x402d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 1 [0172.059] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69c2543c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x69c4b69e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x69c4b69e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x402d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 0 [0172.059] FindClose (in: hFindFile=0x12d9808 | out: hFindFile=0x12d9808) returned 1 [0172.059] GetProcessHeap () returned 0x12c0000 [0172.059] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0172.060] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69dc8e24, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x69dc8e24, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x69dc8e24, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x299d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1 [0172.060] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xcb2ee04f, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xcb2ee04f, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcb2ee04f, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1 [0172.060] GetProcessHeap () returned 0x12c0000 [0172.060] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0172.060] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xcb2ee04f, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xcb2ee04f, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcb2ee04f, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0172.066] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xcb2ee04f, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xcb2ee04f, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcb2ee04f, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.066] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xcb2ee04f, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xcb2ee04f, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcb2ee04f, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0172.066] FindClose (in: hFindFile=0x12d9808 | out: hFindFile=0x12d9808) returned 1 [0172.066] GetProcessHeap () returned 0x12c0000 [0172.066] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0172.066] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xcb2ee04f, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xcb2ee04f, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcb2ee04f, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0 [0172.066] FindClose (in: hFindFile=0x12d9908 | out: hFindFile=0x12d9908) returned 1 [0172.067] GetProcessHeap () returned 0x12c0000 [0172.067] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0172.067] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69e152fc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xcb2ee04f, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcb2ee04f, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MicrosoftStickyNotes_1.4.101.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIAB25~1.0_X")) returned 1 [0172.067] GetProcessHeap () returned 0x12c0000 [0172.067] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0172.068] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69e152fc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xcb2ee04f, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcb2ee04f, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0172.069] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69e152fc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xcb2ee04f, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcb2ee04f, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.069] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e152fc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x69e3b535, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x69e3b535, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x9141, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1 [0172.069] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e152fc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x69e152fc, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x69e152fc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x430e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1 [0172.070] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69e3b535, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadd6eb7b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69e3b535, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1 [0172.070] GetProcessHeap () returned 0x12c0000 [0172.070] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0172.070] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69e3b535, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadd6eb7b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69e3b535, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0172.071] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69e3b535, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadd6eb7b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69e3b535, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.071] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e3b535, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x69e3b535, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x69e3b535, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3263, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 1 [0172.071] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e3b535, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x69e3b535, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x69e3b535, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3263, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 0 [0172.071] FindClose (in: hFindFile=0x12d93c8 | out: hFindFile=0x12d93c8) returned 1 [0172.071] GetProcessHeap () returned 0x12c0000 [0172.071] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0172.071] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e3b535, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x69e3b535, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x69e3b535, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x29c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1 [0172.071] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69e879ec, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaddf87aa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69efa0fc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1 [0172.071] GetProcessHeap () returned 0x12c0000 [0172.071] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0172.071] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69e879ec, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaddf87aa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69efa0fc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0172.073] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69e879ec, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaddf87aa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69efa0fc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.073] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e879ec, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x69e879ec, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x69e879ec, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="LockScreenLogo.scale-200.png", cAlternateFileName="")) returned 1 [0172.073] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e879ec, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x69e879ec, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x69e879ec, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x143e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preview.scale-200_layoutdir-LTR.png", cAlternateFileName="")) returned 1 [0172.073] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e879ec, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x69eadc4a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x69eadc4a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1446, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preview.scale-200_layoutdir-RTL.png", cAlternateFileName="")) returned 1 [0172.073] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69eadc4a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x69eadc4a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x69eadc4a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3839, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashScreen.scale-200.png", cAlternateFileName="")) returned 1 [0172.073] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69eadc4a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x69eadc4a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x69eadc4a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x899, dwReserved0=0x0, dwReserved1=0x0, cFileName="Square150x150Logo.scale-200.png", cAlternateFileName="")) returned 1 [0172.073] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69eadc4a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x69eadc4a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x69eadc4a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1ed9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Square310x310Logo.scale-200.png", cAlternateFileName="")) returned 1 [0172.073] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69eadc4a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x69eadc4a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x69eadc4a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Square44x44Logo.scale-200.png", cAlternateFileName="")) returned 1 [0172.073] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69eadc4a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x69eadc4a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x69eadc4a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Square44x44Logo.targetsize-16_altform-unplated.png", cAlternateFileName="")) returned 1 [0172.073] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69ed3ea3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x69ed3ea3, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x69ed3ea3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Square44x44Logo.targetsize-24_altform-unplated.png", cAlternateFileName="")) returned 1 [0172.073] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69ed3ea3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x69ed3ea3, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x69ed3ea3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x847, dwReserved0=0x0, dwReserved1=0x0, cFileName="Square44x44Logo.targetsize-256_altform-unplated.png", cAlternateFileName="")) returned 1 [0172.073] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69ed3ea3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x69ed3ea3, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x69ed3ea3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Square44x44Logo.targetsize-48_altform-unplated.png", cAlternateFileName="")) returned 1 [0172.074] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69ed3ea3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x69ed3ea3, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x69ed3ea3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x322, dwReserved0=0x0, dwReserved1=0x0, cFileName="Square71x71Logo.scale-200.png", cAlternateFileName="")) returned 1 [0172.074] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69efa0fc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x69efa0fc, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x69efa0fc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x257, dwReserved0=0x0, dwReserved1=0x0, cFileName="StoreLogo.scale-200.png", cAlternateFileName="")) returned 1 [0172.074] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69efa0fc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x69efa0fc, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x69efa0fc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xf18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wide310x150Logo.scale-200.png", cAlternateFileName="")) returned 1 [0172.074] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69efa0fc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x69efa0fc, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x69efa0fc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1286, dwReserved0=0x0, dwReserved1=0x0, cFileName="YellowAbstractNote.scale-200.png", cAlternateFileName="")) returned 1 [0172.074] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69efa0fc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x69efa0fc, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x69efa0fc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1286, dwReserved0=0x0, dwReserved1=0x0, cFileName="YellowAbstractNote.scale-200.png", cAlternateFileName="")) returned 0 [0172.074] FindClose (in: hFindFile=0x12d9808 | out: hFindFile=0x12d9808) returned 1 [0172.075] GetProcessHeap () returned 0x12c0000 [0172.075] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0172.075] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69efa0fc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x69f2035a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x69f2035a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x100b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="clrcompression.dll", cAlternateFileName="")) returned 1 [0172.075] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69f2035a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x69fb8cc4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x69fb8cc4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1e0cd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Applications.Telemetry.Windows.dll", cAlternateFileName="")) returned 1 [0172.075] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69fb8cc4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x69fb8cc4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x69fb8cc4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Applications.Telemetry.Windows.winmd", cAlternateFileName="")) returned 1 [0172.075] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69fdef22, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6a051632, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6a051632, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1b3898, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Graphics.Canvas.dll", cAlternateFileName="")) returned 1 [0172.075] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a051632, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6a051632, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6a051632, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x42698, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Graphics.Canvas.winmd", cAlternateFileName="")) returned 1 [0172.075] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a051632, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6a1f5020, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6a1f5020, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4afe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Input.Ink.Analysis.dll", cAlternateFileName="")) returned 1 [0172.075] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a21b279, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6a2414d2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6a2414d2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Input.Ink.Analysis.winmd", cAlternateFileName="")) returned 1 [0172.075] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a2414d2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6a26772b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6a26772b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5d200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Notes.Upgrade.dll", cAlternateFileName="")) returned 1 [0172.075] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a26772b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6a26772b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6a26772b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Notes.Upgrade.winmd", cAlternateFileName="")) returned 1 [0172.075] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a28d989, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6a8837c7, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6a8837c7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x10b6a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.StickyNotes.dll", cAlternateFileName="")) returned 1 [0172.075] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a8837c7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6a8a9a20, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6a8a9a20, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.StickyNotes.exe", cAlternateFileName="")) returned 1 [0172.075] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a8a9a20, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaddf973d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6a8a9a20, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.StickyNotes.Views", cAlternateFileName="MICROS~1.VIE")) returned 1 [0172.075] GetProcessHeap () returned 0x12c0000 [0172.075] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0172.075] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_x64__8wekyb3d8bbwe\\Microsoft.StickyNotes.Views\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a8a9a20, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaddf973d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6a8a9a20, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0172.076] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a8a9a20, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaddf973d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6a8a9a20, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.076] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a8a9a20, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaddfa4dd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6a8a9a20, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Images", cAlternateFileName="")) returned 1 [0172.157] GetProcessHeap () returned 0x12c0000 [0172.157] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0172.157] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_x64__8wekyb3d8bbwe\\Microsoft.StickyNotes.Views\\Images\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a8a9a20, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaddfa4dd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6a8a9a20, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0172.158] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a8a9a20, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaddfa4dd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6a8a9a20, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.158] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a8a9a20, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6a8a9a20, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6a8a9a20, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x213c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Frown.png", cAlternateFileName="")) returned 1 [0172.158] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a8a9a20, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6a8a9a20, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6a8a9a20, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2192, dwReserved0=0x0, dwReserved1=0x0, cFileName="Loading.png", cAlternateFileName="")) returned 1 [0172.158] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a8a9a20, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6a8a9a20, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6a8a9a20, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x253a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Smile.png", cAlternateFileName="")) returned 1 [0172.158] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a8a9a20, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6a8a9a20, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6a8a9a20, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x253a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Smile.png", cAlternateFileName="")) returned 0 [0172.158] FindClose (in: hFindFile=0x12d93c8 | out: hFindFile=0x12d93c8) returned 1 [0172.158] GetProcessHeap () returned 0x12c0000 [0172.158] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0172.158] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a8a9a20, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaddfa4dd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6a8a9a20, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Images", cAlternateFileName="")) returned 0 [0172.158] FindClose (in: hFindFile=0x12d9848 | out: hFindFile=0x12d9848) returned 1 [0172.158] GetProcessHeap () returned 0x12c0000 [0172.158] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0172.158] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xcb2ee04f, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xd8b5b46d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xd8b5b46d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1 [0172.158] GetProcessHeap () returned 0x12c0000 [0172.158] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0172.158] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xcb2ee04f, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xd8b5b46d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xd8b5b46d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0172.159] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xcb2ee04f, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xd8b5b46d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xd8b5b46d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.159] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xda83c36b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xda83c36b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xda83c36b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x37f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.44828b84.pri", cAlternateFileName="RESOUR~1.PRI")) returned 1 [0172.159] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xda83c36b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xda83c36b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xda83c36b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x37f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000-MergedResources-0.pri", cAlternateFileName="")) returned 1 [0172.159] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xda83c36b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xda83c36b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xda83c36b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x37f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000-MergedResources-0.pri", cAlternateFileName="")) returned 0 [0172.159] FindClose (in: hFindFile=0x12d9808 | out: hFindFile=0x12d9808) returned 1 [0172.159] GetProcessHeap () returned 0x12c0000 [0172.159] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0172.159] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a8cfc83, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaddfb0cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6a8cfc83, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1 [0172.159] GetProcessHeap () returned 0x12c0000 [0172.159] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0172.159] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_x64__8wekyb3d8bbwe\\Resources\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a8cfc83, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaddfb0cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6a8cfc83, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0172.159] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a8cfc83, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaddfb0cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6a8cfc83, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.159] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a8cfc83, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6a8cfc83, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6a8cfc83, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4bac, dwReserved0=0x0, dwReserved1=0x0, cFileName="DemoModeInk.dat", cAlternateFileName="")) returned 1 [0172.159] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a8cfc83, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6a8cfc83, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6a8cfc83, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4bac, dwReserved0=0x0, dwReserved1=0x0, cFileName="DemoModeInk.dat", cAlternateFileName="")) returned 0 [0172.160] FindClose (in: hFindFile=0x12d93c8 | out: hFindFile=0x12d93c8) returned 1 [0172.160] GetProcessHeap () returned 0x12c0000 [0172.160] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0172.160] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a8cfc83, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6a8cfc83, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6a8cfc83, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1fe70, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1 [0172.160] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a8cfc83, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6a9685e8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6a9685e8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x169600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlite3.dll", cAlternateFileName="")) returned 1 [0172.160] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69e61793, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadd6e3ea, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69e61793, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Resources", cAlternateFileName="_RESOU~1")) returned 1 [0172.160] GetProcessHeap () returned 0x12c0000 [0172.160] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0172.160] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_x64__8wekyb3d8bbwe\\_Resources\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69e61793, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadd6e3ea, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69e61793, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0172.160] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69e61793, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadd6e3ea, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69e61793, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.160] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e61793, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x69e61793, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x69e61793, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xaf1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.rsrc", cAlternateFileName="")) returned 1 [0172.160] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e61793, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x69e61793, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x69e61793, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xaf1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.rsrc", cAlternateFileName="")) returned 1 [0172.160] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e61793, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x69e61793, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x69e61793, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x507, dwReserved0=0x0, dwReserved1=0x0, cFileName="2.rsrc", cAlternateFileName="")) returned 1 [0172.160] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e61793, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x69e61793, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x69e61793, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x83f, dwReserved0=0x0, dwReserved1=0x0, cFileName="3.rsrc", cAlternateFileName="")) returned 1 [0172.160] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e61793, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x69e61793, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x69e61793, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x226, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.txt", cAlternateFileName="")) returned 1 [0172.160] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e61793, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x69e61793, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x69e61793, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x226, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.txt", cAlternateFileName="")) returned 0 [0172.160] FindClose (in: hFindFile=0x12d9808 | out: hFindFile=0x12d9808) returned 1 [0172.161] GetProcessHeap () returned 0x12c0000 [0172.161] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0172.161] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69e61793, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadd6e3ea, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69e61793, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Resources", cAlternateFileName="_RESOU~1")) returned 0 [0172.161] FindClose (in: hFindFile=0x12d9308 | out: hFindFile=0x12d9308) returned 1 [0172.161] GetProcessHeap () returned 0x12c0000 [0172.161] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0172.162] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa16112ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xcd2853a0, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcd2853a0, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MSPaint_1.1702.28017.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI34B5~1.0_N")) returned 1 [0172.162] GetProcessHeap () returned 0x12c0000 [0172.162] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0172.162] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa16112ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xcd2853a0, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcd2853a0, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0172.164] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa16112ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xcd2853a0, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcd2853a0, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.164] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa178ea44, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa178ea44, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa178ea44, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1 [0172.164] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa16112ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadea87cd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa16112ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1 [0172.165] GetProcessHeap () returned 0x12c0000 [0172.166] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0172.166] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa16112ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadea87cd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa16112ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0172.167] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa16112ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadea87cd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa16112ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.167] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa16112ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1637513, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1637513, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x145b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 1 [0172.167] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa16112ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1637513, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1637513, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x145b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 0 [0172.167] FindClose (in: hFindFile=0x12d9908 | out: hFindFile=0x12d9908) returned 1 [0172.167] GetProcessHeap () returned 0x12c0000 [0172.167] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0172.167] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa178ea44, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa17b4c9e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa17b4c9e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x299d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1 [0172.167] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xcd2853a0, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xcd2853a0, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcd2853a0, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1 [0172.167] GetProcessHeap () returned 0x12c0000 [0172.167] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0172.167] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xcd2853a0, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xcd2853a0, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcd2853a0, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0172.169] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xcd2853a0, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xcd2853a0, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcd2853a0, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.169] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xcd2853a0, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xcd2853a0, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcd2853a0, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0172.169] FindClose (in: hFindFile=0x12d9848 | out: hFindFile=0x12d9848) returned 1 [0172.169] GetProcessHeap () returned 0x12c0000 [0172.169] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0172.169] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xcd2853a0, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xcd2853a0, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcd2853a0, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0 [0172.169] FindClose (in: hFindFile=0x12d9808 | out: hFindFile=0x12d9808) returned 1 [0172.169] GetProcessHeap () returned 0x12c0000 [0172.169] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0172.170] FindNextFileW (in: hFindFile=0x12d9508, lpFindFileData=0x350f480 | out: lpFindFileData=0x350f480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa17daefc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xcd2853a0, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcd2853a0, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI21E8~1.0_X")) returned 1 [0172.170] GetProcessHeap () returned 0x12c0000 [0172.170] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0172.170] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa17daefc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xcd2853a0, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcd2853a0, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0172.174] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa17daefc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xcd2853a0, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcd2853a0, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.175] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1801155, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1801155, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1801155, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x16d83, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1 [0172.175] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa17daefc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1801155, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1801155, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xcb65, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1 [0172.175] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1801155, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadeaa4f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa18273b3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1 [0172.175] GetProcessHeap () returned 0x12c0000 [0172.175] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0172.175] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1801155, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadeaa4f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa18273b3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0172.175] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1801155, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadeaa4f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa18273b3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.176] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa18273b3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa18273b3, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa18273b3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3ea5, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 1 [0172.176] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa18273b3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa18273b3, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa18273b3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3ea5, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 0 [0172.176] FindClose (in: hFindFile=0x12d9848 | out: hFindFile=0x12d9848) returned 1 [0172.176] GetProcessHeap () returned 0x12c0000 [0172.176] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0172.176] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1801155, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1801155, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1801155, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x29c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1 [0172.176] FindNextFileW (in: hFindFile=0x12d9808, lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa18273b3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadeab676, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa2f98f1f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1 [0172.176] GetProcessHeap () returned 0x12c0000 [0172.176] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0172.176] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa18273b3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadeab676, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa2f98f1f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0172.177] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa18273b3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadeab676, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa2f98f1f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.177] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa18273b3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadeac2bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa18273b3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0172.178] GetProcessHeap () returned 0x12c0000 [0172.178] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0172.178] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\Assets\\Fonts\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa18273b3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadeac2bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa18273b3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0172.178] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa18273b3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadeac2bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa18273b3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.178] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa18273b3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa18273b3, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa18273b3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x52a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BhaiMDL2.1.84.ttf", cAlternateFileName="")) returned 1 [0172.178] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa18273b3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa184d60c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa184d60c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4210, dwReserved0=0x0, dwReserved1=0x0, cFileName="PaintA.ttf", cAlternateFileName="")) returned 1 [0172.178] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa18273b3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa184d60c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa184d60c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4210, dwReserved0=0x0, dwReserved1=0x0, cFileName="PaintA.ttf", cAlternateFileName="")) returned 0 [0172.178] FindClose (in: hFindFile=0x12d9908 | out: hFindFile=0x12d9908) returned 1 [0172.178] GetProcessHeap () returned 0x12c0000 [0172.178] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0172.178] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa184d60c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa184d60c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa184d60c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x528, dwReserved0=0x0, dwReserved1=0x0, cFileName="Icons.ttf", cAlternateFileName="")) returned 1 [0172.178] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa184d60c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadeacbdb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa184d60c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Images", cAlternateFileName="")) returned 1 [0172.178] GetProcessHeap () returned 0x12c0000 [0172.179] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0172.179] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\Assets\\Images\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa184d60c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadeacbdb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa184d60c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0172.180] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa184d60c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadeacbdb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa184d60c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.180] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa184d60c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadff5e06, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa1e1d1ec, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stickers", cAlternateFileName="")) returned 1 [0172.180] GetProcessHeap () returned 0x12c0000 [0172.180] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0172.181] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\Assets\\Images\\Stickers\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa184d60c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadff5e06, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa1e1d1ec, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0172.183] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa184d60c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadff5e06, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa1e1d1ec, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.183] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa184d60c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1873865, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1873865, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x40080, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Bark.dxt", cAlternateFileName="")) returned 1 [0172.183] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1873865, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1899ac3, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1899ac3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x52a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_CatEye.png", cAlternateFileName="")) returned 1 [0172.183] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1899ac3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1899ac3, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1899ac3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x117ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Cloud.png", cAlternateFileName="")) returned 1 [0172.183] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1899ac3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa18bfd21, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa18bfd21, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x40080, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Concrete.dxt", cAlternateFileName="")) returned 1 [0172.183] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa18bfd21, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa193242d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa193242d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3e23, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_DogEar.png", cAlternateFileName="")) returned 1 [0172.184] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa193242d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa193242d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa193242d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4e43, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_DogNose.png", cAlternateFileName="")) returned 1 [0172.184] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa193242d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa195868b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa195868b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3dea, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Ear.png", cAlternateFileName="")) returned 1 [0172.184] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa195868b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa197e8e4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa197e8e4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4f03, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Eye.png", cAlternateFileName="")) returned 1 [0172.184] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa197e8e4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa19a4b42, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa19a4b42, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x33a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Eyebrow.png", cAlternateFileName="")) returned 1 [0172.184] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa19a4b42, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa19a4b42, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa19a4b42, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4a02, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_EyeLashEye.png", cAlternateFileName="")) returned 1 [0172.184] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa19a4b42, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa19a4b42, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa19a4b42, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4fec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_EyeLookingUp.png", cAlternateFileName="")) returned 1 [0172.184] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa19a4b42, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa19cad9b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa19cad9b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x40080, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Fur.dxt", cAlternateFileName="")) returned 1 [0172.184] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa19cad9b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa19cad9b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa19cad9b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3d6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Glasses.png", cAlternateFileName="")) returned 1 [0172.184] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa19cad9b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1a17253, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1a17253, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x40080, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Gravel.dxt", cAlternateFileName="")) returned 1 [0172.184] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1a3d4ac, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1a6370a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1a6370a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x139cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Heart.png", cAlternateFileName="")) returned 1 [0172.184] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1a6370a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1a89963, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1a89963, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x40080, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Hedge.dxt", cAlternateFileName="")) returned 1 [0172.184] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1a89963, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1aafbbc, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1aafbbc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xf43c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Kiss.png", cAlternateFileName="")) returned 1 [0172.184] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1aafbbc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1b4852b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1b4852b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x176f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Lollipop.png", cAlternateFileName="")) returned 1 [0172.184] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1b4852b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1b6e784, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1b6e784, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x40080, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Marble.dxt", cAlternateFileName="")) returned 1 [0172.185] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1b6e784, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1b6e784, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1b6e784, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x45e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_MouseEar.png", cAlternateFileName="")) returned 1 [0172.185] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1b6e784, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1b6e784, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1b6e784, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x52ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_MouseNose.png", cAlternateFileName="")) returned 1 [0172.185] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1b6e784, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1b949e2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1b949e2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x10efe, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Moustache.png", cAlternateFileName="")) returned 1 [0172.185] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1b949e2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1b949e2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1b949e2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x125e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_NinjaCat.png", cAlternateFileName="")) returned 1 [0172.185] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1b949e2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1b949e2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1b949e2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x49a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Nose.png", cAlternateFileName="")) returned 1 [0172.185] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1b949e2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1be0e99, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1be0e99, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5bed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_OwlEye.png", cAlternateFileName="")) returned 1 [0172.185] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1be0e99, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1be0e99, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1be0e99, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x49d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_PigEar.png", cAlternateFileName="")) returned 1 [0172.192] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1c070f7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1c070f7, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1c070f7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x41e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_PigNose.png", cAlternateFileName="")) returned 1 [0172.192] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1c070f7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1c2d34c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1c2d34c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5d1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Planet.png", cAlternateFileName="")) returned 1 [0172.192] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1c2d34c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1c535aa, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1c535aa, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x11bdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Rainbow.png", cAlternateFileName="")) returned 1 [0172.192] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1c535aa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1c535aa, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1c535aa, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5e6d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_ReptileEye.png", cAlternateFileName="")) returned 1 [0172.193] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1c535aa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1c79803, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1c79803, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2a77, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_SadMouth.png", cAlternateFileName="")) returned 1 [0172.193] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1c79803, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1c79803, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1c79803, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x40080, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Sand.dxt", cAlternateFileName="")) returned 1 [0172.193] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1c79803, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1cc5cba, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1cc5cba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x160c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Spiral.png", cAlternateFileName="")) returned 1 [0172.193] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1cc5cba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1cc5cba, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1cc5cba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x16573, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Star.png", cAlternateFileName="")) returned 1 [0172.193] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1cc5cba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1cebf13, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1cebf13, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x72aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Sun.png", cAlternateFileName="")) returned 1 [0172.193] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1cebf13, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1d12171, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1d12171, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1048e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Sunglasses.png", cAlternateFileName="")) returned 1 [0172.193] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1d12171, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1d383cb, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1d383cb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2e30, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_TeethSmile.png", cAlternateFileName="")) returned 1 [0172.193] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1d383cb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1d383cb, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1d383cb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3c49, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Tongue.png", cAlternateFileName="")) returned 1 [0172.193] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1d383cb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1d5e624, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1d5e624, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x40080, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Wood.dxt", cAlternateFileName="")) returned 1 [0172.193] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1d5e624, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1e1d1ec, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1e1d1ec, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4e36, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_WorriedEye.png", cAlternateFileName="")) returned 1 [0172.193] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1e1d1ec, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae053910, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa2937ee9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thumbnails", cAlternateFileName="THUMBN~1")) returned 1 [0172.193] GetProcessHeap () returned 0x12c0000 [0172.193] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0172.193] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\Assets\\Images\\Stickers\\Thumbnails\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1e1d1ec, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae053910, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa2937ee9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0172.198] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1e1d1ec, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae053910, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa2937ee9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.201] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1e1d1ec, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1e1d1ec, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1e1d1ec, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x935, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_4_Point_Star.png", cAlternateFileName="")) returned 1 [0172.201] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1e4344a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1e4344a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1e4344a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x9a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_5_Point_Star.png", cAlternateFileName="")) returned 1 [0172.202] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1e4344a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1e696a3, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1e696a3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x6a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_6_Point_Star.png", cAlternateFileName="")) returned 1 [0172.202] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1e696a3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1e696a3, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1e696a3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x52d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_Arrow.png", cAlternateFileName="")) returned 1 [0172.202] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1e696a3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1e8f901, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1e8f901, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x15ff2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_Bark.png", cAlternateFileName="")) returned 1 [0172.202] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1e8f901, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1e8f901, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1e8f901, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1c9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_CatEye.png", cAlternateFileName="")) returned 1 [0172.202] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1e8f901, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1e8f901, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1e8f901, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x96a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_Chevron.png", cAlternateFileName="")) returned 1 [0172.202] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1e8f901, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1e8f901, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1e8f901, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x520, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_circle.png", cAlternateFileName="")) returned 1 [0172.202] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1e8f901, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1e8f901, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1e8f901, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xeea, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_Cloud.png", cAlternateFileName="")) returned 1 [0172.202] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1e8f901, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1e8f901, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1e8f901, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x8a79, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_Concrete.png", cAlternateFileName="")) returned 1 [0172.202] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1e8f901, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1e8f901, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1e8f901, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x284, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_Cross.png", cAlternateFileName="")) returned 1 [0172.202] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1eb5b5a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1eb5b5a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1eb5b5a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x44b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_Diamond.png", cAlternateFileName="")) returned 1 [0172.202] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1eb5b5a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1eb5b5a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1eb5b5a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x11c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_DogEar.png", cAlternateFileName="")) returned 1 [0172.202] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1eb5b5a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1eb5b5a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1eb5b5a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1657, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_DogNose.png", cAlternateFileName="")) returned 1 [0172.203] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1eb5b5a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1eb5b5a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1eb5b5a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1299, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_Ear.png", cAlternateFileName="")) returned 1 [0172.203] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1eb5b5a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1eb5b5a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1eb5b5a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xc50, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_Explosion.png", cAlternateFileName="")) returned 1 [0172.203] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1eb5b5a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1eb5b5a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1eb5b5a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1710, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_Eye.png", cAlternateFileName="")) returned 1 [0172.203] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1eb5b5a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1eb5b5a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1eb5b5a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_Eyebrow.png", cAlternateFileName="")) returned 1 [0172.203] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1eb5b5a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1edbdb8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1edbdb8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x146e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_EyeLashEye.png", cAlternateFileName="")) returned 1 [0172.203] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1edbdb8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1edbdb8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1edbdb8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x176c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_EyeLookingUp.png", cAlternateFileName="")) returned 1 [0172.203] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1edbdb8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1edbdb8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1edbdb8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x6eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_Flag.png", cAlternateFileName="")) returned 1 [0172.203] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1edbdb8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1f02011, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1f02011, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x13c14, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_Fur.png", cAlternateFileName="")) returned 1 [0172.203] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1f02011, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1f02011, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1f02011, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x106b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_Glasses.png", cAlternateFileName="")) returned 1 [0172.203] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1f2826a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1f2826a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1f2826a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1491c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_Gravel.png", cAlternateFileName="")) returned 1 [0172.203] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1f2826a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1f4e4c8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1f4e4c8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x12c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_Heart.png", cAlternateFileName="")) returned 1 [0172.203] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1f4e4c8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1f74722, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1f74722, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xb94, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_Heart_Shape.png", cAlternateFileName="")) returned 1 [0172.203] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1f74722, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1f74722, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1f74722, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1694d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_Hedge.png", cAlternateFileName="")) returned 1 [0172.203] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1f74722, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1f9a97b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1f9a97b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x7bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_Hexagon.png", cAlternateFileName="")) returned 1 [0172.206] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1f9a97b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1f9a97b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1f9a97b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xea7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_Kiss.png", cAlternateFileName="")) returned 1 [0172.207] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1f9a97b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1f9a97b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1f9a97b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x926, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_Lightning_Bolt.png", cAlternateFileName="")) returned 1 [0172.207] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1f9a97b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1fc0bd9, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1fc0bd9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1739, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_Lollipop.png", cAlternateFileName="")) returned 1 [0172.207] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa20ad4ab, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa25b46b4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa25b46b4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x16858, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_Marble.png", cAlternateFileName="")) returned 1 [0172.207] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa25b46b4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa25da912, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa25da912, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x8f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_Moon.png", cAlternateFileName="")) returned 1 [0172.207] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa25da912, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa2600bb1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa2600bb1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1372, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_MouseEar.png", cAlternateFileName="")) returned 1 [0172.207] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2600bb1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa2600bb1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa2600bb1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_MouseNose.png", cAlternateFileName="")) returned 1 [0172.207] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2600bb1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa262d3dc, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa262d3dc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x111b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_Moustache.png", cAlternateFileName="")) returned 1 [0172.207] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa262d3dc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa2653660, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa2653660, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x15c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_NinjaCat.png", cAlternateFileName="")) returned 1 [0172.207] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2653660, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa26798b9, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa26798b9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1512, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_Nose.png", cAlternateFileName="")) returned 1 [0172.207] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa26798b9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa26798b9, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa26798b9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x21d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_OwlEye.png", cAlternateFileName="")) returned 1 [0172.207] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa26798b9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa26798b9, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa26798b9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x785, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_Pentagon.png", cAlternateFileName="")) returned 1 [0172.207] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa26798b9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa269fb17, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa269fb17, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x14ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_PigEar.png", cAlternateFileName="")) returned 1 [0172.207] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa269fb17, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa269fb17, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa269fb17, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1355, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_PigNose.png", cAlternateFileName="")) returned 1 [0172.207] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa269fb17, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa269fb17, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa269fb17, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_Pill.png", cAlternateFileName="")) returned 1 [0172.208] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa269fb17, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa26c5d70, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa26c5d70, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x7f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_Pipe_Bend.png", cAlternateFileName="")) returned 1 [0172.208] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa26c5d70, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa26c5d70, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa26c5d70, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2337, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_Planet.png", cAlternateFileName="")) returned 1 [0172.208] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa26c5d70, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa26c5d70, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa26c5d70, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1012, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_Rainbow.png", cAlternateFileName="")) returned 1 [0172.208] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa26c5d70, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa26ebfc9, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa26ebfc9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1cb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_ReptileEye.png", cAlternateFileName="")) returned 1 [0172.208] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa26ebfc9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa26ebfc9, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa26ebfc9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_Right_Angle_Triangle.png", cAlternateFileName="")) returned 1 [0172.208] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2738480, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa2738480, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa2738480, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x224, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_Rounded_Square.png", cAlternateFileName="")) returned 1 [0172.208] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2738480, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa2738480, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa2738480, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xb9d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_SadMouth.png", cAlternateFileName="")) returned 1 [0172.208] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2738480, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa2784938, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa2784938, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x144d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_Sand.png", cAlternateFileName="")) returned 1 [0172.208] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2784938, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa2784938, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa2784938, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x144d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_Skull.png", cAlternateFileName="")) returned 1 [0172.208] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa27aab91, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa27d0dea, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa27d0dea, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x429, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_Speech_Bubble.png", cAlternateFileName="")) returned 1 [0172.208] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa27d0dea, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa27f7048, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa27f7048, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x18bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_Spiral.png", cAlternateFileName="")) returned 1 [0172.208] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa27f7048, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa27f7048, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa27f7048, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_Square.png", cAlternateFileName="")) returned 1 [0172.208] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa27f7048, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa27f7048, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa27f7048, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x13e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_Star.png", cAlternateFileName="")) returned 1 [0172.209] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa27f7048, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa281d2a1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa281d2a1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1add, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_Sun.png", cAlternateFileName="")) returned 1 [0172.209] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa281d2a1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa281d2a1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa281d2a1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1300, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_Sunglasses.png", cAlternateFileName="")) returned 1 [0172.209] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa281d2a1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa281d2a1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa281d2a1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xf16, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_TeethSmile.png", cAlternateFileName="")) returned 1 [0172.209] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa281d2a1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa281d2a1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa281d2a1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xb36, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_Thought_Bubble.png", cAlternateFileName="")) returned 1 [0172.209] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa281d2a1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa281d2a1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa281d2a1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x233, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_Tick.png", cAlternateFileName="")) returned 1 [0172.209] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2870a62, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa2896ce1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa2896ce1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1097, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_Tongue.png", cAlternateFileName="")) returned 1 [0172.209] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2896ce1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa2911c8f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa2911c8f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x74c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_Triangle.png", cAlternateFileName="")) returned 1 [0172.209] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2911c8f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa2937ee9, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa2937ee9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xb0dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_Wood.png", cAlternateFileName="")) returned 1 [0172.209] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2937ee9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa295e142, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa295e142, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x16de, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_WorriedEye.png", cAlternateFileName="")) returned 1 [0172.209] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2937ee9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa295e142, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa295e142, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x16de, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticker_Icon_WorriedEye.png", cAlternateFileName="")) returned 0 [0172.209] FindClose (in: hFindFile=0x12d93c8 | out: hFindFile=0x12d93c8) returned 1 [0172.210] GetProcessHeap () returned 0x12c0000 [0172.210] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0172.210] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1e1d1ec, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae053910, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa2937ee9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thumbnails", cAlternateFileName="THUMBN~1")) returned 0 [0172.210] FindClose (in: hFindFile=0x12d9308 | out: hFindFile=0x12d9308) returned 1 [0172.210] GetProcessHeap () returned 0x12c0000 [0172.210] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0172.211] FindNextFileW (in: hFindFile=0x12d9908, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa184d60c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadff5e06, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa1e1d1ec, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stickers", cAlternateFileName="")) returned 0 [0172.211] FindClose (in: hFindFile=0x12d9908 | out: hFindFile=0x12d9908) returned 1 [0172.211] GetProcessHeap () returned 0x12c0000 [0172.211] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0172.211] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa295e142, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa295e142, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa295e142, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x78be, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logo.png", cAlternateFileName="")) returned 1 [0172.211] FindNextFileW (in: hFindFile=0x12d9848, lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa29843a0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae054a1f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa2eff0ed, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logos", cAlternateFileName="")) returned 1 [0172.211] GetProcessHeap () returned 0x12c0000 [0172.212] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0172.212] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\Assets\\Logos\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa29843a0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae054a1f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa2eff0ed, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0172.403] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa29843a0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae054a1f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa2eff0ed, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.403] FindNextFileW (in: hFindFile=0x12d9308, lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa29843a0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae12b3bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa29d0853, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BadgeLogo", cAlternateFileName="BADGEL~1")) returned 1 [0172.403] GetProcessHeap () returned 0x12c0000 [0172.403] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0172.404] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\Assets\\Logos\\BadgeLogo\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa29843a0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae12b3bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa29d0853, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0172.406] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa29843a0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae12b3bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa29d0853, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.406] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa29843a0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa29843a0, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa29843a0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="PaintApplist.scale-100.png", cAlternateFileName="")) returned 1 [0172.406] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa29843a0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa29843a0, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa29843a0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x50ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="PaintApplist.scale-125.png", cAlternateFileName="")) returned 1 [0172.406] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa29843a0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa29843a0, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa29843a0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x51f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PaintApplist.scale-150.png", cAlternateFileName="")) returned 1 [0172.406] FindNextFileW (in: hFindFile=0x12d93c8, lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa29aa5f9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa29d0853, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa29d0853, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5572, dwReserved0=0x0, dwReserved1=0x0, cFileName="PaintApplist.scale-200.png", cAlternateFileName="")) returned 1 [0172.407] GetProcessHeap () returned 0x12c0000 [0172.407] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0172.407] GetProcessHeap () returned 0x12c0000 [0172.407] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0172.407] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\Assets\\Logos\\SplashScreen\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa29d0853, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae1f1d1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa2b01b2f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0172.409] GetProcessHeap () returned 0x12c0000 [0172.409] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0172.409] GetProcessHeap () returned 0x12c0000 [0172.409] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0172.409] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\Assets\\Logos\\Square150x150\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2b01b2f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae1f47d0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa2caac59, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0172.412] GetProcessHeap () returned 0x12c0000 [0172.412] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0172.412] GetProcessHeap () returned 0x12c0000 [0172.412] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0172.412] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\Assets\\Logos\\Square310x310\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2cafa91, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae2671bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa2cfbf72, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0172.414] GetProcessHeap () returned 0x12c0000 [0172.414] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0172.414] GetProcessHeap () returned 0x12c0000 [0172.414] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0172.414] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\Assets\\Logos\\Square44x44\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2d221c7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae268742, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa2e586d2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0172.417] GetProcessHeap () returned 0x12c0000 [0172.417] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0172.417] GetProcessHeap () returned 0x12c0000 [0172.417] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0172.417] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\Assets\\Logos\\Square71x71\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2e586d2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae26a4c5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa2e7e910, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0172.426] GetProcessHeap () returned 0x12c0000 [0172.426] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0172.426] GetProcessHeap () returned 0x12c0000 [0172.426] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0172.426] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\Assets\\Logos\\StoreLogo\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2eb2c15, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae2b9598, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa2ed8e94, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0172.429] GetProcessHeap () returned 0x12c0000 [0172.429] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0172.429] GetProcessHeap () returned 0x12c0000 [0172.429] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0172.429] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\Assets\\Logos\\Wide310x150\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2eff0ed, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae32081c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa2f4b5a4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0172.431] GetProcessHeap () returned 0x12c0000 [0172.431] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0172.431] GetProcessHeap () returned 0x12c0000 [0172.431] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0172.432] GetProcessHeap () returned 0x12c0000 [0172.432] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0172.433] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\Assets\\PDP\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2f72ca1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae32171a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa2f72ca1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0172.435] GetProcessHeap () returned 0x12c0000 [0172.435] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0172.435] GetProcessHeap () returned 0x12c0000 [0172.435] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0172.435] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\Assets\\Videos\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2f98f1f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae321d67, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa2f98f1f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0172.435] GetProcessHeap () returned 0x12c0000 [0172.435] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0172.436] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\Assets\\Videos\\Help\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2f98f1f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae3225d2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa2fe53db, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0172.436] GetProcessHeap () returned 0x12c0000 [0172.436] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0172.437] GetProcessHeap () returned 0x12c0000 [0172.437] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0172.438] GetProcessHeap () returned 0x12c0000 [0172.438] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0172.438] GetProcessHeap () returned 0x12c0000 [0172.438] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0172.438] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\Content\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa30ca1fc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae322e08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa30ca1fc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0172.438] GetProcessHeap () returned 0x12c0000 [0172.438] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0172.438] GetProcessHeap () returned 0x12c0000 [0172.438] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0172.438] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\CoreEngine\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa30f045a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae32349e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa30f045a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0172.685] GetProcessHeap () returned 0x12c0000 [0172.685] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0172.686] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\CoreEngine\\Data\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa30f045a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae323c6c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa31af01d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0172.686] GetProcessHeap () returned 0x12c0000 [0172.686] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0172.687] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\CoreEngine\\Data\\3DBrush\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa30f045a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae3c2040, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa313c90c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0172.689] GetProcessHeap () returned 0x12c0000 [0172.689] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0172.689] GetProcessHeap () returned 0x12c0000 [0172.689] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0172.689] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\CoreEngine\\Data\\BrushProfile\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3162b66, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae3c32ff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa3162b66, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0172.690] GetProcessHeap () returned 0x12c0000 [0172.690] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0172.690] GetProcessHeap () returned 0x12c0000 [0172.690] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0172.691] GetProcessHeap () returned 0x12c0000 [0172.691] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0172.691] GetProcessHeap () returned 0x12c0000 [0172.691] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0172.691] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xcd2853a0, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xcd2853a0, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcd2853a0, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0172.694] GetProcessHeap () returned 0x12c0000 [0172.694] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0172.695] GetProcessHeap () returned 0x12c0000 [0172.695] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0172.695] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\SurfaceProfiles\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa442943f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae416fc0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa4580975, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0172.697] GetProcessHeap () returned 0x12c0000 [0172.697] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0172.697] GetProcessHeap () returned 0x12c0000 [0172.697] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0172.697] GetProcessHeap () returned 0x12c0000 [0172.697] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0172.698] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb21852be, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae4c23b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69869570, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0172.700] GetProcessHeap () returned 0x12c0000 [0172.700] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0172.700] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb21ab500, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae4c3e79, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xb21ab500, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0172.700] GetProcessHeap () returned 0x12c0000 [0172.701] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0172.702] GetProcessHeap () returned 0x12c0000 [0172.702] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0172.702] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x69869570, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd88c5fc4, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xd88c5fc4, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0172.702] GetProcessHeap () returned 0x12c0000 [0172.702] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0172.702] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd88c5fc4, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xd88c5fc4, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xd88c5fc4, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0172.705] GetProcessHeap () returned 0x12c0000 [0172.705] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0172.706] GetProcessHeap () returned 0x12c0000 [0172.706] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0172.706] GetProcessHeap () returned 0x12c0000 [0172.706] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0172.706] GetProcessHeap () returned 0x12c0000 [0172.706] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0172.707] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb23e79d9, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae58079f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69b6448c, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0172.709] GetProcessHeap () returned 0x12c0000 [0172.709] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0172.709] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb240dc54, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae5814c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xb240dc54, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0172.710] GetProcessHeap () returned 0x12c0000 [0172.710] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0172.710] GetProcessHeap () returned 0x12c0000 [0172.710] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0172.710] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x69b6448c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd9da2999, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xd9da2999, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0172.710] GetProcessHeap () returned 0x12c0000 [0172.710] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0172.710] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9da2999, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xd9da2999, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xd9da2999, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0172.712] GetProcessHeap () returned 0x12c0000 [0172.712] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0172.712] GetProcessHeap () returned 0x12c0000 [0172.712] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0172.712] GetProcessHeap () returned 0x12c0000 [0172.712] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0172.713] GetProcessHeap () returned 0x12c0000 [0172.713] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0172.713] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f97eba2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae61172a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5c39f778, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0172.732] GetProcessHeap () returned 0x12c0000 [0172.732] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0172.733] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f97eba2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae6123e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4f97eba2, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0172.733] GetProcessHeap () returned 0x12c0000 [0172.733] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0172.733] GetProcessHeap () returned 0x12c0000 [0172.733] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0172.733] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5c39f778, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xdae53146, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xdae53146, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0172.734] GetProcessHeap () returned 0x12c0000 [0172.734] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0172.734] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdae53146, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x12ce6df5, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0x12ce6df5, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0172.736] GetProcessHeap () returned 0x12c0000 [0172.736] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0172.742] GetProcessHeap () returned 0x12c0000 [0172.742] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0172.742] GetProcessHeap () returned 0x12c0000 [0172.742] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0172.743] GetProcessHeap () returned 0x12c0000 [0172.743] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0172.743] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4fbe1144, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae652687, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5be1c081, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0172.746] GetProcessHeap () returned 0x12c0000 [0172.746] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0172.746] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4fbe1144, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae653223, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4fbe1144, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0172.747] GetProcessHeap () returned 0x12c0000 [0172.747] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0172.747] GetProcessHeap () returned 0x12c0000 [0172.747] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0172.747] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5be1c081, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xdb90dade, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xdb90dade, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0172.747] GetProcessHeap () returned 0x12c0000 [0172.747] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0172.747] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdb90dade, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xd257af62, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xd257af62, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0172.749] GetProcessHeap () returned 0x12c0000 [0172.749] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0172.749] GetProcessHeap () returned 0x12c0000 [0172.749] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0172.749] GetProcessHeap () returned 0x12c0000 [0172.749] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0172.750] GetProcessHeap () returned 0x12c0000 [0172.750] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0172.750] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x569db5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb046ec20, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb046ec20, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0173.180] GetProcessHeap () returned 0x12c0000 [0173.180] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0173.180] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b6267, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae6c9f8a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5b6267, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0173.181] GetProcessHeap () returned 0x12c0000 [0173.181] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0173.181] GetProcessHeap () returned 0x12c0000 [0173.181] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0173.181] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb046ec20, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb046ec20, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdb9fcec, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0173.182] GetProcessHeap () returned 0x12c0000 [0173.182] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0173.183] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdb79a84, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xdb79a84, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xdb9fcec, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0173.183] GetProcessHeap () returned 0x12c0000 [0173.183] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0173.183] GetProcessHeap () returned 0x12c0000 [0173.183] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0173.183] GetProcessHeap () returned 0x12c0000 [0173.183] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0173.184] GetProcessHeap () returned 0x12c0000 [0173.184] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0173.184] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf855c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf7c444d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xaf7c444d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0173.187] GetProcessHeap () returned 0x12c0000 [0173.187] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0173.187] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc44a0e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae726a29, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc44a0e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0173.188] GetProcessHeap () returned 0x12c0000 [0173.188] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0173.188] GetProcessHeap () returned 0x12c0000 [0173.188] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0173.188] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xaf7c444d, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xaf7c444d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd96398a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0173.189] GetProcessHeap () returned 0x12c0000 [0173.189] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0173.189] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd96398a, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xd96398a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xd96398a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0173.190] GetProcessHeap () returned 0x12c0000 [0173.190] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0173.190] GetProcessHeap () returned 0x12c0000 [0173.190] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0173.190] GetProcessHeap () returned 0x12c0000 [0173.190] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0173.191] GetProcessHeap () returned 0x12c0000 [0173.191] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0173.191] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x115e8dfa, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xae7e244c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x12f3e2a7, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0173.194] GetProcessHeap () returned 0x12c0000 [0173.194] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0173.194] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11909f6c, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xae7e4415, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x11909f6c, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0173.195] GetProcessHeap () returned 0x12c0000 [0173.195] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0173.195] GetProcessHeap () returned 0x12c0000 [0173.195] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0173.195] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x12f3e2a7, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xdbfe8744, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xdbfe8744, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0173.196] GetProcessHeap () returned 0x12c0000 [0173.196] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0173.196] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdbfe8744, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa8c8ab51, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xa8c8ab51, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0173.197] GetProcessHeap () returned 0x12c0000 [0173.197] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0173.197] GetProcessHeap () returned 0x12c0000 [0173.197] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0173.197] GetProcessHeap () returned 0x12c0000 [0173.197] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0173.198] GetProcessHeap () returned 0x12c0000 [0173.198] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0173.198] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x13f7c62e, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xae87e1ef, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x164e3d2d, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0173.200] GetProcessHeap () returned 0x12c0000 [0173.200] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0173.200] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14120099, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xae88003f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x14120099, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0173.201] GetProcessHeap () returned 0x12c0000 [0173.201] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0173.201] GetProcessHeap () returned 0x12c0000 [0173.201] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0173.201] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x164e3d2d, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xdc925941, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xdc925941, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0173.202] GetProcessHeap () returned 0x12c0000 [0173.202] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0173.202] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc925941, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa8e2e542, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xa8e2e542, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0173.202] GetProcessHeap () returned 0x12c0000 [0173.202] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0173.203] GetProcessHeap () returned 0x12c0000 [0173.203] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0173.203] GetProcessHeap () returned 0x12c0000 [0173.203] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0173.204] GetProcessHeap () returned 0x12c0000 [0173.204] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0173.204] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb26701cd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae8ff986, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69da07d7, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0173.206] GetProcessHeap () returned 0x12c0000 [0173.206] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0173.206] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb2696342, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae900a2d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xb2696342, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0173.206] GetProcessHeap () returned 0x12c0000 [0173.206] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0173.206] GetProcessHeap () returned 0x12c0000 [0173.206] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0173.206] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x69da07d7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xdd0e53b5, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xdd0e53b5, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0173.207] GetProcessHeap () returned 0x12c0000 [0173.207] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0173.207] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdd0e53b5, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xdd0e53b5, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xdd0e53b5, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0173.208] GetProcessHeap () returned 0x12c0000 [0173.208] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0173.208] GetProcessHeap () returned 0x12c0000 [0173.208] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0173.208] GetProcessHeap () returned 0x12c0000 [0173.208] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0173.209] GetProcessHeap () returned 0x12c0000 [0173.209] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0173.209] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb26e2784, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae9b674b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69fb68e3, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0173.210] GetProcessHeap () returned 0x12c0000 [0173.210] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0173.211] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb2708a61, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae9b8a01, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xb2708a61, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0173.211] GetProcessHeap () returned 0x12c0000 [0173.211] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0173.211] GetProcessHeap () returned 0x12c0000 [0173.211] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0173.211] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x69fb68e3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xddc386b4, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xddc386b4, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0173.211] GetProcessHeap () returned 0x12c0000 [0173.211] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0173.212] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xddc386b4, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xddc386b4, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xddc386b4, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0173.212] GetProcessHeap () returned 0x12c0000 [0173.212] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0173.213] GetProcessHeap () returned 0x12c0000 [0173.213] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0173.213] GetProcessHeap () returned 0x12c0000 [0173.213] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0173.213] GetProcessHeap () returned 0x12c0000 [0173.213] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0173.214] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ff4e801, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaea38daa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5c77f49b, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0173.560] GetProcessHeap () returned 0x12c0000 [0173.560] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0173.561] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ff74b34, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaea3adf2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4ff74b34, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0173.561] GetProcessHeap () returned 0x12c0000 [0173.561] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0173.561] GetProcessHeap () returned 0x12c0000 [0173.561] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0173.561] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5c77f49b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xde4445ea, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xde4445ea, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0173.562] GetProcessHeap () returned 0x12c0000 [0173.562] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0173.562] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde4445ea, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xd28c236f, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xd28c236f, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0173.563] GetProcessHeap () returned 0x12c0000 [0173.563] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0173.563] GetProcessHeap () returned 0x12c0000 [0173.563] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0173.563] GetProcessHeap () returned 0x12c0000 [0173.563] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0173.564] GetProcessHeap () returned 0x12c0000 [0173.564] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0173.564] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ffc0fdc, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaeaf585c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5c58f618, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0173.566] GetProcessHeap () returned 0x12c0000 [0173.566] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0173.566] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ffc0fdc, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaeaf6ce9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4ffc0fdc, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0173.567] GetProcessHeap () returned 0x12c0000 [0173.567] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0173.567] GetProcessHeap () returned 0x12c0000 [0173.567] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0173.567] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5c58f618, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xdefbdb44, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xdefbdb44, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0173.567] GetProcessHeap () returned 0x12c0000 [0173.567] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0173.568] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdefbdb44, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xd28e85c8, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xd28e85c8, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0173.569] GetProcessHeap () returned 0x12c0000 [0173.569] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0173.569] GetProcessHeap () returned 0x12c0000 [0173.569] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0173.569] GetProcessHeap () returned 0x12c0000 [0173.569] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0173.579] GetProcessHeap () returned 0x12c0000 [0173.579] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0173.580] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1096e68, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae30dca7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xae30dca7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0173.581] GetProcessHeap () returned 0x12c0000 [0173.581] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0173.582] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10e331a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaeb8d82b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x10e331a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0173.582] GetProcessHeap () returned 0x12c0000 [0173.582] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0173.582] GetProcessHeap () returned 0x12c0000 [0173.582] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0173.582] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xae30dca7, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xae30dca7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd51152b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0173.583] GetProcessHeap () returned 0x12c0000 [0173.583] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0173.583] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd51152b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xd51152b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xd51152b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0173.584] GetProcessHeap () returned 0x12c0000 [0173.584] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0173.584] GetProcessHeap () returned 0x12c0000 [0173.584] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0173.584] GetProcessHeap () returned 0x12c0000 [0173.584] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0173.585] GetProcessHeap () returned 0x12c0000 [0173.585] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0173.585] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11c813b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad7e0bf4, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xad7e0bf4, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0173.587] GetProcessHeap () returned 0x12c0000 [0173.587] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0173.587] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1260aaa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaec89e61, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1260aaa, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0173.587] GetProcessHeap () returned 0x12c0000 [0173.588] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0173.588] GetProcessHeap () returned 0x12c0000 [0173.588] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0173.588] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xad7e0bf4, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xad7e0bf4, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd478c3a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0173.588] GetProcessHeap () returned 0x12c0000 [0173.588] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0173.588] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd478c3a, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xd478c3a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xd478c3a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0173.589] GetProcessHeap () returned 0x12c0000 [0173.589] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0173.594] GetProcessHeap () returned 0x12c0000 [0173.594] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0173.594] GetProcessHeap () returned 0x12c0000 [0173.594] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0173.595] GetProcessHeap () returned 0x12c0000 [0173.595] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0173.595] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f6d5e4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad0dfe61, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xad0dfe61, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0173.597] GetProcessHeap () returned 0x12c0000 [0173.597] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0173.597] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f93841, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaecdd562, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x33f93841, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0173.598] GetProcessHeap () returned 0x12c0000 [0173.598] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0173.598] GetProcessHeap () returned 0x12c0000 [0173.598] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0173.598] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xad0dfe61, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xad0dfe61, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd64283b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0173.598] GetProcessHeap () returned 0x12c0000 [0173.598] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0173.599] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd61c5d8, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xd61c5d8, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xd6b4f3c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0173.599] GetProcessHeap () returned 0x12c0000 [0173.600] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0173.600] GetProcessHeap () returned 0x12c0000 [0173.600] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0173.600] GetProcessHeap () returned 0x12c0000 [0173.600] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0173.600] GetProcessHeap () returned 0x12c0000 [0173.600] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0173.601] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33fb9a9b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaca2b3ac, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xaca2b3ac, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0173.790] GetProcessHeap () returned 0x12c0000 [0173.790] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0173.791] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33fdfcf4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaed7d57f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x33fdfcf4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0173.791] GetProcessHeap () returned 0x12c0000 [0173.791] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0173.791] GetProcessHeap () returned 0x12c0000 [0173.791] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0173.791] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xaca2b3ac, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xaca2b3ac, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd40665d, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0173.792] GetProcessHeap () returned 0x12c0000 [0173.792] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0173.793] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd40665d, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xd40665d, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xd40665d, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0173.793] GetProcessHeap () returned 0x12c0000 [0173.793] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0173.793] GetProcessHeap () returned 0x12c0000 [0173.793] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0173.793] GetProcessHeap () returned 0x12c0000 [0173.793] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0173.794] GetProcessHeap () returned 0x12c0000 [0173.794] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0173.794] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b404f13, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xaee25a0f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1c25330e, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0173.806] GetProcessHeap () returned 0x12c0000 [0173.806] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0173.806] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b667506, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xaee2755c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1b68d6c9, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0173.806] GetProcessHeap () returned 0x12c0000 [0173.807] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0173.807] GetProcessHeap () returned 0x12c0000 [0173.807] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0173.807] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1c25330e, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xdf70aeab, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xdf70aeab, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0173.807] GetProcessHeap () returned 0x12c0000 [0173.807] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0173.808] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdf70aeab, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa8fd1f17, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xa8fd1f17, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0173.808] GetProcessHeap () returned 0x12c0000 [0173.808] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0173.808] GetProcessHeap () returned 0x12c0000 [0173.808] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0173.808] GetProcessHeap () returned 0x12c0000 [0173.808] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0173.809] GetProcessHeap () returned 0x12c0000 [0173.809] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0173.809] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ac94c, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xaef00b37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1dc41199, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0173.812] GetProcessHeap () returned 0x12c0000 [0173.812] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0173.812] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d3c29bb, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xaef031dc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1d3c29bb, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0173.813] GetProcessHeap () returned 0x12c0000 [0173.813] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0173.813] GetProcessHeap () returned 0x12c0000 [0173.813] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0173.813] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1dc41199, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xdfdbf898, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xdfdbf898, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0173.814] GetProcessHeap () returned 0x12c0000 [0173.814] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0173.814] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdfdbf898, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa904464d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xa904464d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0173.815] GetProcessHeap () returned 0x12c0000 [0173.815] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0173.815] GetProcessHeap () returned 0x12c0000 [0173.815] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0173.815] GetProcessHeap () returned 0x12c0000 [0173.815] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0173.816] GetProcessHeap () returned 0x12c0000 [0173.816] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0173.816] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59460ee7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd1ed095d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd1ed095d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0173.819] GetProcessHeap () returned 0x12c0000 [0173.819] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0173.819] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\animations\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x595b8410, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaef96f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x597b1fa2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0173.822] GetProcessHeap () returned 0x12c0000 [0173.822] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0173.822] GetProcessHeap () returned 0x12c0000 [0173.822] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0173.822] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594ad391, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaef981fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x594ad391, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0173.822] GetProcessHeap () returned 0x12c0000 [0173.822] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0173.822] GetProcessHeap () returned 0x12c0000 [0173.822] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0173.822] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\en-gb\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59b93c35, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf014f53, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x59c527fd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0173.825] GetProcessHeap () returned 0x12c0000 [0173.825] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0173.825] GetProcessHeap () returned 0x12c0000 [0173.825] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0173.825] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\en-us\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59c527fd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf0838ba, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x59e1c43f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0173.827] GetProcessHeap () returned 0x12c0000 [0173.827] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0173.827] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\en-us\\jscripts\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59c9ecb4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf084920, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x59c9ecb4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0173.828] GetProcessHeap () returned 0x12c0000 [0173.828] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0173.828] GetProcessHeap () returned 0x12c0000 [0173.828] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0173.828] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\en-us\\pages\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59e1c43f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf085638, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x59e1c43f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0173.828] GetProcessHeap () returned 0x12c0000 [0173.828] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0173.828] GetProcessHeap () returned 0x12c0000 [0173.828] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0173.828] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\en-us\\styles\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59e1c43f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf0862ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x59e4269d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0173.829] GetProcessHeap () returned 0x12c0000 [0173.829] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0173.829] GetProcessHeap () returned 0x12c0000 [0173.829] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0173.830] GetProcessHeap () returned 0x12c0000 [0173.830] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0173.830] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\font\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59e4269d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf086b6a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x59e4269d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0173.830] GetProcessHeap () returned 0x12c0000 [0173.830] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0173.830] GetProcessHeap () returned 0x12c0000 [0173.830] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0173.830] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\fonts\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59e4269d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf0873c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x59e4269d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0173.831] GetProcessHeap () returned 0x12c0000 [0173.831] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0173.831] GetProcessHeap () returned 0x12c0000 [0173.831] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0173.831] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\images\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a00c2e3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf19691b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5b6b3675, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0174.039] GetProcessHeap () returned 0x12c0000 [0174.039] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0174.039] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\images\\contrast-black\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a8f7f56, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf27329f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5acfe8e6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0174.050] GetProcessHeap () returned 0x12c0000 [0174.050] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0174.050] GetProcessHeap () returned 0x12c0000 [0174.050] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0174.050] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\images\\contrast-white\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5acfe8e6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf35a206, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5b07f008, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0174.056] GetProcessHeap () returned 0x12c0000 [0174.056] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0174.061] GetProcessHeap () returned 0x12c0000 [0174.061] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0174.061] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\images\\osf\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b665011, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf3b3b3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5b6b3675, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0174.066] GetProcessHeap () returned 0x12c0000 [0174.066] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0174.066] GetProcessHeap () returned 0x12c0000 [0174.066] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0174.066] GetProcessHeap () returned 0x12c0000 [0174.066] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0174.067] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\jscripts\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b6b3675, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf3b4e8d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5b6d8db2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0174.067] GetProcessHeap () returned 0x12c0000 [0174.067] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0174.067] GetProcessHeap () returned 0x12c0000 [0174.067] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0174.067] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\manifests\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b6d8db2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf3b57d0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5b6d8db2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0174.068] GetProcessHeap () returned 0x12c0000 [0174.068] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0174.068] GetProcessHeap () returned 0x12c0000 [0174.068] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0174.068] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd1ed095d, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xd1ed095d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd1ed095d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0174.069] GetProcessHeap () returned 0x12c0000 [0174.069] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0174.070] GetProcessHeap () returned 0x12c0000 [0174.070] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0174.070] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\pages\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5db81172, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf3b6b86, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5db81172, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0174.070] GetProcessHeap () returned 0x12c0000 [0174.070] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0174.070] GetProcessHeap () returned 0x12c0000 [0174.070] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0174.070] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\sr-cyrl-cs\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5dde3722, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf3b7384, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5dde3722, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0174.071] GetProcessHeap () returned 0x12c0000 [0174.071] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0174.071] GetProcessHeap () returned 0x12c0000 [0174.071] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0174.071] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\sr-latn-cs\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5dde3722, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf3b7fcf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5dde3722, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0174.071] GetProcessHeap () returned 0x12c0000 [0174.071] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0174.071] GetProcessHeap () returned 0x12c0000 [0174.071] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0174.071] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\xaml\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5de0997c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf3b8a1c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5de0997c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0174.071] GetProcessHeap () returned 0x12c0000 [0174.071] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0174.072] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\xaml\\onenote\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5de0997c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf435cd5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5dea7b9b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0174.074] GetProcessHeap () returned 0x12c0000 [0174.074] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0174.074] GetProcessHeap () returned 0x12c0000 [0174.074] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0174.075] GetProcessHeap () returned 0x12c0000 [0174.075] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0174.075] GetProcessHeap () returned 0x12c0000 [0174.075] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0174.075] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_2015.7668.58071.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58fa379e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd1eaa713, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd1eaa713, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0174.077] GetProcessHeap () returned 0x12c0000 [0174.077] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0174.077] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_2015.7668.58071.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58fa379e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf4f3df1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x58fa379e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0174.077] GetProcessHeap () returned 0x12c0000 [0174.077] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0174.077] GetProcessHeap () returned 0x12c0000 [0174.077] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0174.077] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_2015.7668.58071.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd1eaa713, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xd1eaa713, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd1eaa713, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0174.294] GetProcessHeap () returned 0x12c0000 [0174.294] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0174.294] GetProcessHeap () returned 0x12c0000 [0174.294] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0174.299] GetProcessHeap () returned 0x12c0000 [0174.299] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0174.300] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa599a57e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf561945, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6e6321cd, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0174.302] GetProcessHeap () returned 0x12c0000 [0174.302] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0174.302] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa599a57e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf5639e6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa599a57e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0174.304] GetProcessHeap () returned 0x12c0000 [0174.304] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0174.304] GetProcessHeap () returned 0x12c0000 [0174.304] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0174.304] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa59c07d4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf5645f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa59c07d4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0174.304] GetProcessHeap () returned 0x12c0000 [0174.304] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0174.304] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\Assets\\WebPlayer\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa59c07d4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf5e05e2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa5da4145, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0174.309] GetProcessHeap () returned 0x12c0000 [0174.309] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0174.309] GetProcessHeap () returned 0x12c0000 [0174.309] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0174.309] GetProcessHeap () returned 0x12c0000 [0174.309] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0174.309] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\en-us\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa602cafb, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf65cc53, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa611194e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0174.311] GetProcessHeap () returned 0x12c0000 [0174.311] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0174.312] GetProcessHeap () returned 0x12c0000 [0174.312] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0174.312] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\fonts\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa611194e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf65eae6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa611194e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0174.312] GetProcessHeap () returned 0x12c0000 [0174.312] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0174.312] GetProcessHeap () returned 0x12c0000 [0174.312] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0174.312] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\images\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa611194e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf75f944, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6794654, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0174.317] GetProcessHeap () returned 0x12c0000 [0174.317] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0174.317] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\images\\contrast-black\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa62b52e7, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf83e928, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6373eb6, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0174.321] GetProcessHeap () returned 0x12c0000 [0174.321] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0174.321] GetProcessHeap () returned 0x12c0000 [0174.321] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0174.322] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\images\\contrast-white\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6373eb6, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf8d0215, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa644c9ea, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0174.327] GetProcessHeap () returned 0x12c0000 [0174.327] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0174.329] GetProcessHeap () returned 0x12c0000 [0174.329] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0174.330] GetProcessHeap () returned 0x12c0000 [0174.330] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0174.330] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6e6321cd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaf8d1431, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6e6321cd, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0174.331] GetProcessHeap () returned 0x12c0000 [0174.331] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0174.331] GetProcessHeap () returned 0x12c0000 [0174.332] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0174.332] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\storyclientui_xaml\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa786af81, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf8d1b15, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa786af81, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0174.332] GetProcessHeap () returned 0x12c0000 [0174.332] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0174.332] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\storyclientui_xaml\\view\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa786af81, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf8d21fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa78911fc, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0174.333] GetProcessHeap () returned 0x12c0000 [0174.333] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0174.334] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\storyclientui_xaml\\view\\landing\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa786af81, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf8d2741, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa78911fc, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0174.334] GetProcessHeap () returned 0x12c0000 [0174.334] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0174.334] GetProcessHeap () returned 0x12c0000 [0174.334] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0174.334] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\storyclientui_xaml\\view\\shared\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa78911fc, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf8d2bfe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa78911fc, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0174.335] GetProcessHeap () returned 0x12c0000 [0174.335] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0174.335] GetProcessHeap () returned 0x12c0000 [0174.335] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0174.335] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\storyclientui_xaml\\view\\story\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa78911fc, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf943e43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa78b7317, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0174.337] GetProcessHeap () returned 0x12c0000 [0174.337] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0174.337] GetProcessHeap () returned 0x12c0000 [0174.337] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0174.338] GetProcessHeap () returned 0x12c0000 [0174.338] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0174.339] GetProcessHeap () returned 0x12c0000 [0174.339] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0174.339] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\xaml\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7c24a57, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf945b92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa7c24a57, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0174.339] GetProcessHeap () returned 0x12c0000 [0174.339] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0174.339] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\xaml\\mso\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7c24a57, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf9b0041, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa7c4acb9, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0174.551] GetProcessHeap () returned 0x12c0000 [0174.551] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0174.551] GetProcessHeap () returned 0x12c0000 [0174.552] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0174.553] GetProcessHeap () returned 0x12c0000 [0174.553] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0174.553] GetProcessHeap () returned 0x12c0000 [0174.553] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0174.553] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa57d3c26, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xafabb342, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6e60bed5, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0174.555] GetProcessHeap () returned 0x12c0000 [0174.555] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0174.556] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa57d3c26, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xafabc4b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa57d3c26, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0174.556] GetProcessHeap () returned 0x12c0000 [0174.556] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0174.556] GetProcessHeap () returned 0x12c0000 [0174.556] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0174.556] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6e60bed5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xafabcf70, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6e60bed5, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0174.557] GetProcessHeap () returned 0x12c0000 [0174.557] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0174.557] GetProcessHeap () returned 0x12c0000 [0174.557] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0174.557] GetProcessHeap () returned 0x12c0000 [0174.557] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0174.558] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ef508f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd45db281, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd45db281, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0174.560] GetProcessHeap () returned 0x12c0000 [0174.560] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0174.560] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2000117, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafabf4fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x21c9d54, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0174.562] GetProcessHeap () returned 0x12c0000 [0174.562] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0174.563] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2000117, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafb54c83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2072835, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0174.567] GetProcessHeap () returned 0x12c0000 [0174.567] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0174.567] GetProcessHeap () returned 0x12c0000 [0174.567] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0174.567] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2072835, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafbab880, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x210b18c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0174.571] GetProcessHeap () returned 0x12c0000 [0174.571] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0174.571] GetProcessHeap () returned 0x12c0000 [0174.571] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0174.572] GetProcessHeap () returned 0x12c0000 [0174.572] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0174.572] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd45db281, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xd45db281, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd45db281, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0174.573] GetProcessHeap () returned 0x12c0000 [0174.573] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0174.573] GetProcessHeap () returned 0x12c0000 [0174.573] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0174.574] GetProcessHeap () returned 0x12c0000 [0174.574] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0174.574] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f76a4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd45db281, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd45db281, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0174.576] GetProcessHeap () returned 0x12c0000 [0174.576] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0174.576] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f76a4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafbae931, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4f76a4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0174.577] GetProcessHeap () returned 0x12c0000 [0174.577] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0174.577] GetProcessHeap () returned 0x12c0000 [0174.577] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0174.577] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd45db281, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xd45db281, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd45db281, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0174.578] GetProcessHeap () returned 0x12c0000 [0174.578] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0174.578] GetProcessHeap () returned 0x12c0000 [0174.578] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0174.579] GetProcessHeap () returned 0x12c0000 [0174.579] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0174.579] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16dc6f6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd45db281, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd45db281, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0174.581] GetProcessHeap () returned 0x12c0000 [0174.581] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0174.581] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x170294f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafbb05d6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x170294f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0174.582] GetProcessHeap () returned 0x12c0000 [0174.582] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0174.582] GetProcessHeap () returned 0x12c0000 [0174.582] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0174.582] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x170294f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafbf828d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1b3b5a8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0174.584] GetProcessHeap () returned 0x12c0000 [0174.584] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0174.584] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\Assets\\contrast-black\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x170294f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafbfa501, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x18645b9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0174.586] GetProcessHeap () returned 0x12c0000 [0174.586] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0174.586] GetProcessHeap () returned 0x12c0000 [0174.586] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0174.586] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\Assets\\contrast-white\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18645b9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafc4ec6a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x19e1d44, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0174.589] GetProcessHeap () returned 0x12c0000 [0174.589] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0174.589] GetProcessHeap () returned 0x12c0000 [0174.589] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0174.589] GetProcessHeap () returned 0x12c0000 [0174.589] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0174.589] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd45db281, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xd5bf8796, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xd5bf8796, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0174.589] GetProcessHeap () returned 0x12c0000 [0174.589] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0174.589] GetProcessHeap () returned 0x12c0000 [0174.589] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0174.590] GetProcessHeap () returned 0x12c0000 [0174.590] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0174.591] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x255053c0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd61ded48, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd61ded48, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0174.771] GetProcessHeap () returned 0x12c0000 [0174.771] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0174.772] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x25557698, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafc5120a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2564079d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0174.775] GetProcessHeap () returned 0x12c0000 [0174.775] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0174.775] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x25557698, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafcf43cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x255a7e0e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0174.777] GetProcessHeap () returned 0x12c0000 [0174.777] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0174.777] GetProcessHeap () returned 0x12c0000 [0174.777] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0174.777] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x255a7e0e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafd6c55f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x255f42ea, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0174.779] GetProcessHeap () returned 0x12c0000 [0174.780] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0174.780] GetProcessHeap () returned 0x12c0000 [0174.780] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0174.780] GetProcessHeap () returned 0x12c0000 [0174.780] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0174.780] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd61ded48, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xd61ded48, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd61ded48, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0174.782] GetProcessHeap () returned 0x12c0000 [0174.782] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0174.782] GetProcessHeap () returned 0x12c0000 [0174.782] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0174.782] GetProcessHeap () returned 0x12c0000 [0174.782] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0174.783] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2499f315, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd61ded48, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd61ded48, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0174.784] GetProcessHeap () returned 0x12c0000 [0174.785] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0174.785] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x249c5573, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafd6f7c8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x249c5573, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0174.786] GetProcessHeap () returned 0x12c0000 [0174.786] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0174.786] GetProcessHeap () returned 0x12c0000 [0174.786] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0174.786] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x249eb7cc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafdc1431, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x24bc56a8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0174.787] GetProcessHeap () returned 0x12c0000 [0174.787] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0174.788] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\Assets\\contrast-black\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x249eb7cc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafe104e1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x24a5dedd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0174.790] GetProcessHeap () returned 0x12c0000 [0174.790] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0174.790] GetProcessHeap () returned 0x12c0000 [0174.790] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0174.790] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\Assets\\contrast-white\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24a5dedd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafe13300, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x24ad5f3c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0174.793] GetProcessHeap () returned 0x12c0000 [0174.793] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0174.793] GetProcessHeap () returned 0x12c0000 [0174.793] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0174.793] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\Assets\\Fonts\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24ad5f3c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafe13de4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x24ad5f3c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0174.811] GetProcessHeap () returned 0x12c0000 [0174.811] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0174.811] GetProcessHeap () returned 0x12c0000 [0174.811] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0174.811] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\Assets\\Sounds\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b52f97, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafe1485b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x24bc56a8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0174.811] GetProcessHeap () returned 0x12c0000 [0174.811] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0174.812] GetProcessHeap () returned 0x12c0000 [0174.812] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0174.812] GetProcessHeap () returned 0x12c0000 [0174.812] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0174.813] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd61ded48, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xd442d6fc, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xd442d6fc, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0174.813] GetProcessHeap () returned 0x12c0000 [0174.814] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0174.814] GetProcessHeap () returned 0x12c0000 [0174.814] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0174.814] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\Strings\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x25492ca6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafe15ed6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x25492ca6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0174.814] GetProcessHeap () returned 0x12c0000 [0174.814] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0174.814] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\Strings\\en-US\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x25492ca6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafe16ee0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x25492ca6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0174.815] GetProcessHeap () returned 0x12c0000 [0174.815] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0174.815] GetProcessHeap () returned 0x12c0000 [0174.815] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0174.815] GetProcessHeap () returned 0x12c0000 [0174.815] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0174.816] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\_Resources\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x249c5573, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafd6f1ac, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x249c5573, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0174.816] GetProcessHeap () returned 0x12c0000 [0174.816] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0174.816] GetProcessHeap () returned 0x12c0000 [0174.816] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0174.817] GetProcessHeap () returned 0x12c0000 [0174.817] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0174.817] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_2017.222.1920.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x248ba4f4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd61ded48, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd61ded48, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0174.819] GetProcessHeap () returned 0x12c0000 [0174.819] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0174.819] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_2017.222.1920.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x248ba4f4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafe6e80a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x248ba4f4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0174.819] GetProcessHeap () returned 0x12c0000 [0174.819] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0174.819] GetProcessHeap () returned 0x12c0000 [0174.819] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0174.820] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_2017.222.1920.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd61ded48, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xd61ded48, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd61ded48, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0174.820] GetProcessHeap () returned 0x12c0000 [0174.820] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0174.820] GetProcessHeap () returned 0x12c0000 [0174.820] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0174.821] GetProcessHeap () returned 0x12c0000 [0174.821] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0174.821] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x367c081d, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xaff5073a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x37eb3642, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0174.823] GetProcessHeap () returned 0x12c0000 [0174.823] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0174.823] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36b540f8, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xb004bc29, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36b540f8, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0174.824] GetProcessHeap () returned 0x12c0000 [0174.824] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0174.824] GetProcessHeap () returned 0x12c0000 [0174.824] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0174.824] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x37eb3642, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xe4deabeb, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xe4deabeb, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0174.995] GetProcessHeap () returned 0x12c0000 [0174.995] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0174.995] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4deabeb, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa90b6d32, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xa90b6d32, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0174.996] GetProcessHeap () returned 0x12c0000 [0174.996] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0174.996] GetProcessHeap () returned 0x12c0000 [0174.996] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0174.996] GetProcessHeap () returned 0x12c0000 [0174.996] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0174.997] GetProcessHeap () returned 0x12c0000 [0174.997] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0174.997] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3979638c, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xb00f9315, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3a630d34, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0174.999] GetProcessHeap () returned 0x12c0000 [0174.999] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0174.999] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x39a1ec32, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xb00fa945, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x39a1ec32, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0175.000] GetProcessHeap () returned 0x12c0000 [0175.000] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.000] GetProcessHeap () returned 0x12c0000 [0175.000] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.000] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x3a630d34, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xe56b56ac, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xe56b56ac, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0175.001] GetProcessHeap () returned 0x12c0000 [0175.001] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0175.001] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56b56ac, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa91031f7, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xa91031f7, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0175.002] GetProcessHeap () returned 0x12c0000 [0175.002] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0175.002] GetProcessHeap () returned 0x12c0000 [0175.002] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.002] GetProcessHeap () returned 0x12c0000 [0175.002] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0175.008] GetProcessHeap () returned 0x12c0000 [0175.008] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0175.009] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbff4e2d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xdba3c24b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba3c24b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0175.011] GetProcessHeap () returned 0x12c0000 [0175.011] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.011] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdba3c24b, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xdba3c24b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba3c24b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0175.011] GetProcessHeap () returned 0x12c0000 [0175.011] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.011] GetProcessHeap () returned 0x12c0000 [0175.012] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.012] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc0b39f5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb020b681, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc0b39f5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0175.012] GetProcessHeap () returned 0x12c0000 [0175.012] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0175.013] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc0b39f5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb02ab869, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1725bd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0175.014] GetProcessHeap () returned 0x12c0000 [0175.014] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0175.015] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\Images\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc0d9c4e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb02ac9ec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc0d9c4e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0175.016] GetProcessHeap () returned 0x12c0000 [0175.016] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0175.016] GetProcessHeap () returned 0x12c0000 [0175.016] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0175.016] GetProcessHeap () returned 0x12c0000 [0175.016] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.016] GetProcessHeap () returned 0x12c0000 [0175.016] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0175.018] GetProcessHeap () returned 0x12c0000 [0175.018] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0175.018] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73778cb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xdba15ff2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba15ff2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0175.020] GetProcessHeap () returned 0x12c0000 [0175.020] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.020] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73778cb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0335567, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x73778cb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0175.021] GetProcessHeap () returned 0x12c0000 [0175.021] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.021] GetProcessHeap () returned 0x12c0000 [0175.021] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.021] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdba15ff2, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xdba15ff2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba15ff2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0175.021] GetProcessHeap () returned 0x12c0000 [0175.021] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.021] GetProcessHeap () returned 0x12c0000 [0175.021] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0175.022] GetProcessHeap () returned 0x12c0000 [0175.022] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0175.022] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7410239, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xdba15ff2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba15ff2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0175.025] GetProcessHeap () returned 0x12c0000 [0175.025] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.025] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745c6e7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb03fc1b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x745c6e7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0175.025] GetProcessHeap () returned 0x12c0000 [0175.025] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.025] GetProcessHeap () returned 0x12c0000 [0175.025] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.025] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdba15ff2, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x888bff4e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x888bff4e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0175.026] GetProcessHeap () returned 0x12c0000 [0175.026] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.026] GetProcessHeap () returned 0x12c0000 [0175.026] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.026] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd5c51, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb03fd343, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x887a4f1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0175.026] GetProcessHeap () returned 0x12c0000 [0175.026] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0175.026] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd5c51, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb045bfbe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8854298, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0175.029] GetProcessHeap () returned 0x12c0000 [0175.029] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0175.030] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd5c51, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb04fda55, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x81ebd4a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0175.032] GetProcessHeap () returned 0x12c0000 [0175.032] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0175.032] GetProcessHeap () returned 0x12c0000 [0175.032] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0175.032] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Images\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x825e45b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb05006d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x83b598c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0175.205] GetProcessHeap () returned 0x12c0000 [0175.205] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0175.205] GetProcessHeap () returned 0x12c0000 [0175.206] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0175.206] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Text\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8854298, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0501269, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8854298, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0175.206] GetProcessHeap () returned 0x12c0000 [0175.206] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0175.206] GetProcessHeap () returned 0x12c0000 [0175.206] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0175.207] GetProcessHeap () returned 0x12c0000 [0175.207] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0175.208] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Designs\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x887a4f1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb05022d8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab6490e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0175.208] GetProcessHeap () returned 0x12c0000 [0175.208] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0175.209] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Designs\\Emoticons\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x887a4f1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb05031a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9229e15, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0175.210] GetProcessHeap () returned 0x12c0000 [0175.210] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0175.210] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Designs\\Emoticons\\large\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x887a4f1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb05f6ee8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9229e15, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0175.214] GetProcessHeap () returned 0x12c0000 [0175.214] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0175.214] GetProcessHeap () returned 0x12c0000 [0175.214] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0175.214] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Designs\\Emoticons\\small\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9229e15, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb067e10d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x97fd903, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0175.219] GetProcessHeap () returned 0x12c0000 [0175.219] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0175.219] GetProcessHeap () returned 0x12c0000 [0175.219] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0175.220] GetProcessHeap () returned 0x12c0000 [0175.220] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0175.221] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Designs\\Flags\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9823b5c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb067f17b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa4790d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0175.222] GetProcessHeap () returned 0x12c0000 [0175.222] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0175.222] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Designs\\Flags\\large\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9823b5c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0801800, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa4790d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0175.231] GetProcessHeap () returned 0x12c0000 [0175.231] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0175.231] GetProcessHeap () returned 0x12c0000 [0175.231] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0175.231] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Designs\\Flags\\small\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4790d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb08d0d29, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab6490e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0175.241] GetProcessHeap () returned 0x12c0000 [0175.241] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0175.241] GetProcessHeap () returned 0x12c0000 [0175.241] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0175.242] GetProcessHeap () returned 0x12c0000 [0175.242] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0175.242] GetProcessHeap () returned 0x12c0000 [0175.242] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.243] GetProcessHeap () returned 0x12c0000 [0175.243] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.243] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\_Resources\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7482940, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb03fb4c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7482940, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0175.243] GetProcessHeap () returned 0x12c0000 [0175.243] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.243] GetProcessHeap () returned 0x12c0000 [0175.243] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0175.244] GetProcessHeap () returned 0x12c0000 [0175.244] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0175.244] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x137b8f21, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xdfec7dad, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdfec7dad, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0175.420] GetProcessHeap () returned 0x12c0000 [0175.420] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.421] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x138053d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0975177, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x138053d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0175.421] GetProcessHeap () returned 0x12c0000 [0175.421] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.421] GetProcessHeap () returned 0x12c0000 [0175.421] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.421] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x138053d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb09dc5d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1385188b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0175.425] GetProcessHeap () returned 0x12c0000 [0175.425] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.425] GetProcessHeap () returned 0x12c0000 [0175.425] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.425] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdfec7dad, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xdfec7dad, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdfec7dad, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0175.427] GetProcessHeap () returned 0x12c0000 [0175.427] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.427] GetProcessHeap () returned 0x12c0000 [0175.427] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0175.428] GetProcessHeap () returned 0x12c0000 [0175.428] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0175.428] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1374681a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xdfea1b47, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdfea1b47, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0175.430] GetProcessHeap () returned 0x12c0000 [0175.430] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.431] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1374681a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0a25f5b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1374681a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0175.431] GetProcessHeap () returned 0x12c0000 [0175.431] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.431] GetProcessHeap () returned 0x12c0000 [0175.431] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.431] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdfea1b47, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb0a26390, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdfea1b47, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0175.432] GetProcessHeap () returned 0x12c0000 [0175.432] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.432] GetProcessHeap () returned 0x12c0000 [0175.432] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0175.432] GetProcessHeap () returned 0x12c0000 [0175.432] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0175.433] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9eace405, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb0a85441, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5b9575e3, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0175.434] GetProcessHeap () returned 0x12c0000 [0175.434] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.435] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9eace405, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb0a862ba, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9eace405, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0175.435] GetProcessHeap () returned 0x12c0000 [0175.435] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.435] GetProcessHeap () returned 0x12c0000 [0175.435] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.435] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5b9575e3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe5ee7834, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xe5ee7834, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0175.435] GetProcessHeap () returned 0x12c0000 [0175.435] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0175.436] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ee7834, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xe5ee7834, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xe5ee7834, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0175.437] GetProcessHeap () returned 0x12c0000 [0175.437] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0175.437] GetProcessHeap () returned 0x12c0000 [0175.437] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.437] GetProcessHeap () returned 0x12c0000 [0175.437] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0175.438] GetProcessHeap () returned 0x12c0000 [0175.438] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0175.438] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9eb8d19b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb0ace717, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5b6ced31, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0175.440] GetProcessHeap () returned 0x12c0000 [0175.440] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.440] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ebb321a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb0acfda8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9ebb321a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0175.440] GetProcessHeap () returned 0x12c0000 [0175.440] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.440] GetProcessHeap () returned 0x12c0000 [0175.440] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.440] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5b6ced31, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe665ae03, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xe665ae03, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0175.441] GetProcessHeap () returned 0x12c0000 [0175.441] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0175.441] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe665ae03, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xe665ae03, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xe665ae03, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0175.441] GetProcessHeap () returned 0x12c0000 [0175.441] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0175.441] GetProcessHeap () returned 0x12c0000 [0175.441] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.442] GetProcessHeap () returned 0x12c0000 [0175.442] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0175.442] GetProcessHeap () returned 0x12c0000 [0175.442] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0175.443] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12fc9b2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb13a1d82, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb13a1d82, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0175.444] GetProcessHeap () returned 0x12c0000 [0175.444] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.445] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1348e69, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0b1b1e8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1348e69, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0175.445] GetProcessHeap () returned 0x12c0000 [0175.445] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.445] GetProcessHeap () returned 0x12c0000 [0175.445] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.445] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb13a1d82, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xec3ce583, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xec3ce583, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0175.446] GetProcessHeap () returned 0x12c0000 [0175.446] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0175.446] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec3ce583, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xec3ce583, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xec3ce583, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0175.447] GetProcessHeap () returned 0x12c0000 [0175.447] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0175.447] GetProcessHeap () returned 0x12c0000 [0175.448] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.448] GetProcessHeap () returned 0x12c0000 [0175.448] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0175.448] GetProcessHeap () returned 0x12c0000 [0175.449] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0175.449] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1538d09, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0d397aa, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb0d397aa, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0175.451] GetProcessHeap () returned 0x12c0000 [0175.451] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.451] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x155ef67, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0bda2d2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x155ef67, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0175.451] GetProcessHeap () returned 0x12c0000 [0175.451] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.451] GetProcessHeap () returned 0x12c0000 [0175.451] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.451] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb0d397aa, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xec1de6d7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xec1de6d7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0175.452] GetProcessHeap () returned 0x12c0000 [0175.452] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0175.453] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec1de6d7, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xec1de6d7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xec1de6d7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0175.453] GetProcessHeap () returned 0x12c0000 [0175.453] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0175.453] GetProcessHeap () returned 0x12c0000 [0175.453] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.453] GetProcessHeap () returned 0x12c0000 [0175.453] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0175.454] GetProcessHeap () returned 0x12c0000 [0175.454] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0175.455] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7e7ba3c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xe09a894e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe09a894e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0175.549] GetProcessHeap () returned 0x12c0000 [0175.549] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.550] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7e7ba3c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0c2f555, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa7e7ba3c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0175.551] GetProcessHeap () returned 0x12c0000 [0175.551] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.551] GetProcessHeap () returned 0x12c0000 [0175.551] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.551] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe098276e, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb0c2fbb1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe098276e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0175.552] GetProcessHeap () returned 0x12c0000 [0175.552] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.552] GetProcessHeap () returned 0x12c0000 [0175.552] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0175.552] GetProcessHeap () returned 0x12c0000 [0175.552] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0175.553] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8150701, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xe09a894e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe09a894e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0175.554] GetProcessHeap () returned 0x12c0000 [0175.554] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.554] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa819cbaf, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0d1f064, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa819cbaf, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0175.555] GetProcessHeap () returned 0x12c0000 [0175.555] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.555] GetProcessHeap () returned 0x12c0000 [0175.555] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.555] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa819cbaf, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0d716f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa820f2c9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0175.557] GetProcessHeap () returned 0x12c0000 [0175.557] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.557] GetProcessHeap () returned 0x12c0000 [0175.557] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.557] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\js\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa820f2c9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0d721ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa820f2c9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0175.557] GetProcessHeap () returned 0x12c0000 [0175.557] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.557] GetProcessHeap () returned 0x12c0000 [0175.557] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.558] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe09a894e, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xc770c60a, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc770c60a, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0175.558] GetProcessHeap () returned 0x12c0000 [0175.558] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0175.558] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc770c60a, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc770c60a, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc770c60a, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0175.562] GetProcessHeap () returned 0x12c0000 [0175.562] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0175.562] GetProcessHeap () returned 0x12c0000 [0175.562] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.563] GetProcessHeap () returned 0x12c0000 [0175.563] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0175.563] GetProcessHeap () returned 0x12c0000 [0175.564] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0175.564] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe563d29, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb0e615f0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x716c6041, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0175.566] GetProcessHeap () returned 0x12c0000 [0175.566] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.566] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe589f8c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb0f30e8c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xbe5b019c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0175.568] GetProcessHeap () returned 0x12c0000 [0175.568] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.568] GetProcessHeap () returned 0x12c0000 [0175.568] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.568] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x716c6041, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xb0f31d41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x716c6041, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0175.569] GetProcessHeap () returned 0x12c0000 [0175.569] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.569] GetProcessHeap () returned 0x12c0000 [0175.569] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0175.570] GetProcessHeap () returned 0x12c0000 [0175.570] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0175.570] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86d169f9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xe8ca3fa7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe8ca3fa7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0175.571] GetProcessHeap () returned 0x12c0000 [0175.571] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.571] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86d3cc52, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0f84b23, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x86deed4d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0175.574] GetProcessHeap () returned 0x12c0000 [0175.574] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.574] GetProcessHeap () returned 0x12c0000 [0175.574] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.574] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86deed4d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0f85922, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x86deed4d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0175.574] GetProcessHeap () returned 0x12c0000 [0175.574] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0175.574] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86deed4d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb104434a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x86e3b22e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0175.576] GetProcessHeap () returned 0x12c0000 [0175.576] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0175.576] GetProcessHeap () returned 0x12c0000 [0175.576] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.576] GetProcessHeap () returned 0x12c0000 [0175.576] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.577] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe8ca3fa7, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xe8ca3fa7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe8ca3fa7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0175.577] GetProcessHeap () returned 0x12c0000 [0175.577] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.578] GetProcessHeap () returned 0x12c0000 [0175.578] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0175.578] GetProcessHeap () returned 0x12c0000 [0175.578] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0175.579] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86e61487, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xe8ca3fa7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe8ca3fa7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0175.581] GetProcessHeap () returned 0x12c0000 [0175.581] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.582] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86ead93a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb10a896e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x86ef9df1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0175.584] GetProcessHeap () returned 0x12c0000 [0175.584] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.584] GetProcessHeap () returned 0x12c0000 [0175.584] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.584] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86ef9df1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb10a9b5e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x86ef9df1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0175.585] GetProcessHeap () returned 0x12c0000 [0175.585] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0175.585] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86ef9df1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1139167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x86f5a04b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0175.588] GetProcessHeap () returned 0x12c0000 [0175.588] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0175.588] GetProcessHeap () returned 0x12c0000 [0175.588] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.588] GetProcessHeap () returned 0x12c0000 [0175.588] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.588] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe8ca3fa7, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xe8ca3fa7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe8ca3fa7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0175.588] GetProcessHeap () returned 0x12c0000 [0175.588] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.588] GetProcessHeap () returned 0x12c0000 [0175.588] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0175.589] GetProcessHeap () returned 0x12c0000 [0175.589] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0175.589] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845121d2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xe8ca3fa7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe8ca3fa7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0175.590] GetProcessHeap () returned 0x12c0000 [0175.590] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.590] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppCS\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x846696fa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb113db64, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x846696fa, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0175.590] GetProcessHeap () returned 0x12c0000 [0175.590] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0175.590] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppCS\\Assets\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x846696fa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb113ea79, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x846696fa, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0175.591] GetProcessHeap () returned 0x12c0000 [0175.591] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0175.591] GetProcessHeap () returned 0x12c0000 [0175.591] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.591] GetProcessHeap () returned 0x12c0000 [0175.591] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.592] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845848da, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb113f7c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x845848da, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0175.592] GetProcessHeap () returned 0x12c0000 [0175.592] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.592] GetProcessHeap () returned 0x12c0000 [0175.592] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.592] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8468f958, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb120ddc0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x85423bf4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0175.729] GetProcessHeap () returned 0x12c0000 [0175.729] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.729] GetProcessHeap () returned 0x12c0000 [0175.729] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.729] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Bing.Immersive\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x854700ab, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb120f88d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x854700ab, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0175.730] GetProcessHeap () returned 0x12c0000 [0175.730] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0175.730] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Bing.Immersive\\Shaders\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x854700ab, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1210963, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8549630e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0175.731] GetProcessHeap () returned 0x12c0000 [0175.731] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0175.731] GetProcessHeap () returned 0x12c0000 [0175.731] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.731] GetProcessHeap () returned 0x12c0000 [0175.731] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.732] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Lumia.AppTk.NativeDirect3d.UAP\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8565ff4b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1211054, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8565ff4b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0175.732] GetProcessHeap () returned 0x12c0000 [0175.732] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.732] GetProcessHeap () returned 0x12c0000 [0175.732] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.732] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Lumia.VideoTk\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85744d6c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1306fa7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x857b747c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0175.734] GetProcessHeap () returned 0x12c0000 [0175.734] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.734] GetProcessHeap () returned 0x12c0000 [0175.734] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.734] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Lumia.ViewerPlugin\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x857b747c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1308123, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x858571c5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0175.736] GetProcessHeap () returned 0x12c0000 [0175.736] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0175.737] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x857b747c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb136b57a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x85803933, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0175.739] GetProcessHeap () returned 0x12c0000 [0175.739] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0175.739] GetProcessHeap () returned 0x12c0000 [0175.739] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0175.739] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Lumia.ViewerPlugin\\CinemagraphDelegate\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85830f47, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb136be4d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x85830f47, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0175.739] GetProcessHeap () returned 0x12c0000 [0175.739] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0175.740] GetProcessHeap () returned 0x12c0000 [0175.740] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0175.740] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Common\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85830f47, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb136cb5e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x85830f47, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0175.740] GetProcessHeap () returned 0x12c0000 [0175.740] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0175.740] GetProcessHeap () returned 0x12c0000 [0175.740] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0175.740] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Lumia.ViewerPlugin\\CompositeSurface\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x858571c5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb136d809, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x858571c5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0175.741] GetProcessHeap () returned 0x12c0000 [0175.741] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0175.741] GetProcessHeap () returned 0x12c0000 [0175.741] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0175.741] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Lumia.ViewerPlugin\\JpegSurface\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x858571c5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb136e08a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x858571c5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0175.741] GetProcessHeap () returned 0x12c0000 [0175.741] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0175.741] GetProcessHeap () returned 0x12c0000 [0175.741] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0175.741] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Lumia.ViewerPlugin\\ReliveSurfaces\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x858571c5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb136e5d8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8587d423, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0175.742] GetProcessHeap () returned 0x12c0000 [0175.742] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0175.743] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Lumia.ViewerPlugin\\ReliveSurfaces\\Preview\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x858571c5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb136f0e3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x858571c5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0175.743] GetProcessHeap () returned 0x12c0000 [0175.743] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0175.743] GetProcessHeap () returned 0x12c0000 [0175.743] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0175.743] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Lumia.ViewerPlugin\\ReliveSurfaces\\Sequence\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x858571c5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb136fa8b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x858571c5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0175.744] GetProcessHeap () returned 0x12c0000 [0175.744] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0175.744] GetProcessHeap () returned 0x12c0000 [0175.744] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0175.744] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Lumia.ViewerPlugin\\ReliveSurfaces\\Video\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8587d423, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb13701c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8587d423, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0175.744] GetProcessHeap () returned 0x12c0000 [0175.744] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0175.744] GetProcessHeap () returned 0x12c0000 [0175.745] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0175.745] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Lumia.ViewerPlugin\\ReliveSurfaces\\ZoomPan\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8587d423, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb13708b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8587d423, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0175.745] GetProcessHeap () returned 0x12c0000 [0175.745] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0175.745] GetProcessHeap () returned 0x12c0000 [0175.745] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0175.746] GetProcessHeap () returned 0x12c0000 [0175.746] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.746] GetProcessHeap () returned 0x12c0000 [0175.746] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.746] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe8ca3fa7, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xec4ff828, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xec4ff828, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0175.746] GetProcessHeap () returned 0x12c0000 [0175.746] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.747] GetProcessHeap () returned 0x12c0000 [0175.747] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.747] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\PhotosApp\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8644bef6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1371afa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x86472154, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0175.747] GetProcessHeap () returned 0x12c0000 [0175.747] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0175.747] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\PhotosApp\\Assets\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86472154, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1372638, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x86472154, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0175.748] GetProcessHeap () returned 0x12c0000 [0175.748] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0175.748] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\PhotosApp\\Assets\\ThirdPartyNotices\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86472154, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb13730f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x86472154, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0175.749] GetProcessHeap () returned 0x12c0000 [0175.749] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0175.749] GetProcessHeap () returned 0x12c0000 [0175.749] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0175.750] GetProcessHeap () returned 0x12c0000 [0175.750] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.750] GetProcessHeap () returned 0x12c0000 [0175.750] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0175.751] GetProcessHeap () returned 0x12c0000 [0175.751] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0175.751] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84322329, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xe8c7dd6a, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe8c7dd6a, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0175.753] GetProcessHeap () returned 0x12c0000 [0175.753] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.753] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84322329, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb13da82d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x84322329, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0175.753] GetProcessHeap () returned 0x12c0000 [0175.753] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.753] GetProcessHeap () returned 0x12c0000 [0175.753] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.753] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe8c7dd6a, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xe8c7dd6a, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe8c7dd6a, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0175.754] GetProcessHeap () returned 0x12c0000 [0175.754] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.754] GetProcessHeap () returned 0x12c0000 [0175.754] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0175.754] GetProcessHeap () returned 0x12c0000 [0175.754] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0175.755] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x485b9d47, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xebb94597, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xebb94597, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0175.756] GetProcessHeap () returned 0x12c0000 [0175.756] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.757] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x485b9d47, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1437fbe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4878db60, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0175.760] GetProcessHeap () returned 0x12c0000 [0175.760] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.760] GetProcessHeap () returned 0x12c0000 [0175.760] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.761] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xebb94597, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xebb94597, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xebb94597, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0175.762] GetProcessHeap () returned 0x12c0000 [0175.762] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.762] GetProcessHeap () returned 0x12c0000 [0175.762] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0175.762] GetProcessHeap () returned 0x12c0000 [0175.762] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0175.763] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x479ad420, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xebb94597, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xebb94597, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0175.906] GetProcessHeap () returned 0x12c0000 [0175.906] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.906] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x47a4c028, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb143a0a2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x47a4c028, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0175.907] GetProcessHeap () returned 0x12c0000 [0175.907] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.907] GetProcessHeap () returned 0x12c0000 [0175.907] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.907] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x47a7225c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1502df3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x48164a4b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0175.915] GetProcessHeap () returned 0x12c0000 [0175.915] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.916] GetProcessHeap () returned 0x12c0000 [0175.916] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.916] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xebb94597, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x85720f04, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x85720f04, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0175.916] GetProcessHeap () returned 0x12c0000 [0175.916] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.916] GetProcessHeap () returned 0x12c0000 [0175.916] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0175.924] GetProcessHeap () returned 0x12c0000 [0175.924] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0175.924] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x47932bea, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xebb94597, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xebb94597, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0175.926] GetProcessHeap () returned 0x12c0000 [0175.926] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.927] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x47932bea, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb15ba85a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x47932bea, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0175.928] GetProcessHeap () returned 0x12c0000 [0175.928] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.928] GetProcessHeap () returned 0x12c0000 [0175.928] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.928] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xebb94597, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xebb94597, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xebb94597, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0175.929] GetProcessHeap () returned 0x12c0000 [0175.929] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.929] GetProcessHeap () returned 0x12c0000 [0175.929] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0175.929] GetProcessHeap () returned 0x12c0000 [0175.929] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0175.929] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c8c485e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xee789c53, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xee789c53, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0175.931] GetProcessHeap () returned 0x12c0000 [0175.931] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.931] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c910d15, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb160da7b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4c9f5b36, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0175.934] GetProcessHeap () returned 0x12c0000 [0175.934] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.934] GetProcessHeap () returned 0x12c0000 [0175.934] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.934] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xee789c53, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xee789c53, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xee789c53, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0175.935] GetProcessHeap () returned 0x12c0000 [0175.935] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.936] GetProcessHeap () returned 0x12c0000 [0175.936] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0175.936] GetProcessHeap () returned 0x12c0000 [0175.936] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0175.937] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c079ab6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xee763a10, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xee763a10, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0175.939] GetProcessHeap () returned 0x12c0000 [0175.939] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.939] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c0c5f69, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1610dce, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4c0c5f69, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0175.939] GetProcessHeap () returned 0x12c0000 [0175.939] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.939] GetProcessHeap () returned 0x12c0000 [0175.939] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.939] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c0ee003, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1753caa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4c55722f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0175.946] GetProcessHeap () returned 0x12c0000 [0175.946] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.946] GetProcessHeap () returned 0x12c0000 [0175.946] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.947] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xee763a10, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xc1bb8bed, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc1bb8bed, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0175.947] GetProcessHeap () returned 0x12c0000 [0175.947] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.947] GetProcessHeap () returned 0x12c0000 [0175.947] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0175.948] GetProcessHeap () returned 0x12c0000 [0175.948] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0175.948] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4bcf41f6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xee763a10, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xee763a10, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0175.957] GetProcessHeap () returned 0x12c0000 [0175.957] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.957] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4bd1a450, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb17a168b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4bd1a450, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0175.957] GetProcessHeap () returned 0x12c0000 [0175.958] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.958] GetProcessHeap () returned 0x12c0000 [0175.958] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.958] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xee763a10, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xee763a10, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xee763a10, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0175.958] GetProcessHeap () returned 0x12c0000 [0175.958] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.959] GetProcessHeap () returned 0x12c0000 [0175.959] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0175.959] GetProcessHeap () returned 0x12c0000 [0175.959] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0175.959] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x924af4b0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf0ee0a7b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf0ee0a7b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0175.961] GetProcessHeap () returned 0x12c0000 [0175.961] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.961] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x924d5709, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb184beda, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x924d5709, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0175.962] GetProcessHeap () returned 0x12c0000 [0175.962] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0175.962] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x924d5709, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb18b5b34, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x925289b3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0175.965] GetProcessHeap () returned 0x12c0000 [0175.965] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0175.965] GetProcessHeap () returned 0x12c0000 [0175.965] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.965] GetProcessHeap () returned 0x12c0000 [0175.965] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.965] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf0ee0a7b, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xf0ee0a7b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf0ee0a7b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0175.966] GetProcessHeap () returned 0x12c0000 [0175.966] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.966] GetProcessHeap () returned 0x12c0000 [0175.966] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0175.966] GetProcessHeap () returned 0x12c0000 [0175.966] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0175.966] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92a96d25, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf0ee0a7b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf0ee0a7b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0175.968] GetProcessHeap () returned 0x12c0000 [0175.968] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.968] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92ae31dc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb196874e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92ae31dc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0175.968] GetProcessHeap () returned 0x12c0000 [0175.968] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0175.968] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92ae31dc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1a4790e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92d27c4b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0175.971] GetProcessHeap () returned 0x12c0000 [0175.971] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0175.971] GetProcessHeap () returned 0x12c0000 [0175.971] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.971] GetProcessHeap () returned 0x12c0000 [0175.971] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.971] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf0ee0a7b, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xf0ee0a7b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf0ee0a7b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0175.972] GetProcessHeap () returned 0x12c0000 [0175.972] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.972] GetProcessHeap () returned 0x12c0000 [0175.972] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0175.972] GetProcessHeap () returned 0x12c0000 [0175.972] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0175.972] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91aa5e6e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf0eba822, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf0eba822, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0175.974] GetProcessHeap () returned 0x12c0000 [0175.974] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.974] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91aa5e6e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1ad3afc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91aa5e6e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0175.974] GetProcessHeap () returned 0x12c0000 [0175.974] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.974] GetProcessHeap () returned 0x12c0000 [0175.974] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.974] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf0eba822, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xf0eba822, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf0eba822, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0175.975] GetProcessHeap () returned 0x12c0000 [0175.975] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.975] GetProcessHeap () returned 0x12c0000 [0175.975] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0175.975] GetProcessHeap () returned 0x12c0000 [0175.975] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0175.975] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91d7ab3d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf0eba822, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf0eba822, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0175.977] GetProcessHeap () returned 0x12c0000 [0175.977] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.977] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91dc6fe6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1b532af, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91dc6fe6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0175.977] GetProcessHeap () returned 0x12c0000 [0175.977] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.977] GetProcessHeap () returned 0x12c0000 [0175.978] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.978] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91dc6fe6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1b53ee0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91e396fc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0175.978] GetProcessHeap () returned 0x12c0000 [0175.978] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0175.978] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\EnsoUI\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91dc6fe6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1b54824, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91ded244, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0175.979] GetProcessHeap () returned 0x12c0000 [0175.979] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0175.979] GetProcessHeap () returned 0x12c0000 [0175.979] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0175.979] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91ded244, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1c1b81a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91e1349e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0175.981] GetProcessHeap () returned 0x12c0000 [0175.981] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0175.981] GetProcessHeap () returned 0x12c0000 [0175.981] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0175.981] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Sounds\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91e1349e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1c1c741, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91e396fc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0175.981] GetProcessHeap () returned 0x12c0000 [0175.981] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0175.981] GetProcessHeap () returned 0x12c0000 [0175.981] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0175.981] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91e396fc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1c9ee0f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92141e7c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0175.987] GetProcessHeap () returned 0x12c0000 [0175.987] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0175.987] GetProcessHeap () returned 0x12c0000 [0175.987] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.988] GetProcessHeap () returned 0x12c0000 [0175.988] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.988] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf0eba822, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb1ca075e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xf0eba822, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0175.989] GetProcessHeap () returned 0x12c0000 [0175.989] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.989] GetProcessHeap () returned 0x12c0000 [0175.989] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0175.989] GetProcessHeap () returned 0x12c0000 [0175.989] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0175.989] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182554a4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf78f971b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf78f971b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0175.990] GetProcessHeap () returned 0x12c0000 [0175.990] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.990] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18314067, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1cf6222, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x18314067, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0175.995] GetProcessHeap () returned 0x12c0000 [0175.995] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.995] GetProcessHeap () returned 0x12c0000 [0175.995] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.995] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-gb\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186f3da6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1d89b7d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x187b296e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0175.997] GetProcessHeap () returned 0x12c0000 [0175.997] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0175.997] GetProcessHeap () returned 0x12c0000 [0175.998] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0175.998] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x187f4c6b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1e11b3c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x189221ca, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.030] GetProcessHeap () returned 0x12c0000 [0176.030] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0176.030] GetProcessHeap () returned 0x12c0000 [0176.030] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0176.030] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\fonts\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x189948d6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1e12880, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x189948d6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0176.030] GetProcessHeap () returned 0x12c0000 [0176.030] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0176.031] GetProcessHeap () returned 0x12c0000 [0176.031] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0176.031] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x199ac747, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1f59bda, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1d9063ff, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0176.041] GetProcessHeap () returned 0x12c0000 [0176.041] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0176.042] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\contrast-black\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1aa1da70, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb20a74ff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1b6ddbe6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0176.066] GetProcessHeap () returned 0x12c0000 [0176.066] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0176.066] GetProcessHeap () returned 0x12c0000 [0176.066] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0176.066] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\contrast-white\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b72a09e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb213bc33, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1c4bf701, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0176.079] GetProcessHeap () returned 0x12c0000 [0176.079] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0176.089] GetProcessHeap () returned 0x12c0000 [0176.089] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0176.089] GetProcessHeap () returned 0x12c0000 [0176.089] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0176.090] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf78f971b, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xf78f971b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf78f971b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.090] GetProcessHeap () returned 0x12c0000 [0176.090] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0176.090] GetProcessHeap () returned 0x12c0000 [0176.090] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0176.090] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\models\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1dad0045, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb21bd0e7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1dd36a78, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0176.134] GetProcessHeap () returned 0x12c0000 [0176.134] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0176.135] GetProcessHeap () returned 0x12c0000 [0176.135] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0176.135] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\sr-cyrl-cs\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x203a8a50, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb21be58d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x203a8a50, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0176.135] GetProcessHeap () returned 0x12c0000 [0176.135] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0176.135] GetProcessHeap () returned 0x12c0000 [0176.135] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0176.135] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\sr-latn-cs\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x203a8a50, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb21bf209, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x203a8a50, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0176.136] GetProcessHeap () returned 0x12c0000 [0176.136] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0176.136] GetProcessHeap () returned 0x12c0000 [0176.136] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0176.136] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\telemetryrules\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x203ceca9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb21bffdc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x203f4f02, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.136] GetProcessHeap () returned 0x12c0000 [0176.136] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0176.136] GetProcessHeap () returned 0x12c0000 [0176.136] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0176.137] GetProcessHeap () returned 0x12c0000 [0176.137] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0176.137] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x181968dc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf78d353e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf78d353e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0176.139] GetProcessHeap () returned 0x12c0000 [0176.139] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0176.139] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x181bcb35, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2264955, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x181bcb35, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0176.140] GetProcessHeap () returned 0x12c0000 [0176.140] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0176.140] GetProcessHeap () returned 0x12c0000 [0176.140] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0176.140] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf78d353e, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb2264fc2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xf78d353e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0176.140] GetProcessHeap () returned 0x12c0000 [0176.140] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0176.140] GetProcessHeap () returned 0x12c0000 [0176.140] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0176.141] GetProcessHeap () returned 0x12c0000 [0176.141] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0176.141] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50f88bbd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf97d1eca, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf97d1eca, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.143] GetProcessHeap () returned 0x12c0000 [0176.143] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0176.143] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50faee11, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb236c85a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51099929, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0176.146] GetProcessHeap () returned 0x12c0000 [0176.146] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0176.146] GetProcessHeap () returned 0x12c0000 [0176.146] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0176.146] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf97d1eca, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xf97d1eca, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf97d1eca, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0176.147] GetProcessHeap () returned 0x12c0000 [0176.147] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0176.147] GetProcessHeap () returned 0x12c0000 [0176.147] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0176.148] GetProcessHeap () returned 0x12c0000 [0176.148] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0176.148] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ff71b46, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf97abca3, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf97abca3, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.149] GetProcessHeap () returned 0x12c0000 [0176.149] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0176.150] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ff71b46, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb23d70f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4ff71b46, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0176.150] GetProcessHeap () returned 0x12c0000 [0176.150] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0176.150] GetProcessHeap () returned 0x12c0000 [0176.150] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0176.150] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf97abca3, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xf97abca3, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf97abca3, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0176.151] GetProcessHeap () returned 0x12c0000 [0176.151] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0176.151] GetProcessHeap () returned 0x12c0000 [0176.151] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0176.151] GetProcessHeap () returned 0x12c0000 [0176.151] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0176.152] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5011552a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf97abca3, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf97abca3, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0176.153] GetProcessHeap () returned 0x12c0000 [0176.153] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0176.154] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5013b788, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb23d8b82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x501619e2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0176.154] GetProcessHeap () returned 0x12c0000 [0176.154] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0176.154] GetProcessHeap () returned 0x12c0000 [0176.154] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0176.154] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50187c3b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb24969c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x50509bf1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0176.157] GetProcessHeap () returned 0x12c0000 [0176.157] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0176.158] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\Fonts\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x501ade99, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2497e66, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x501ade99, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0176.158] GetProcessHeap () returned 0x12c0000 [0176.158] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0176.161] GetProcessHeap () returned 0x12c0000 [0176.161] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0176.161] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\Retail\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504bd736, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2498947, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x504e398f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.162] GetProcessHeap () returned 0x12c0000 [0176.162] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0176.162] GetProcessHeap () returned 0x12c0000 [0176.162] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0176.162] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\ThankYou\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504e398f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2499429, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x50509bf1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0176.162] GetProcessHeap () returned 0x12c0000 [0176.162] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0176.162] GetProcessHeap () returned 0x12c0000 [0176.162] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0176.163] GetProcessHeap () returned 0x12c0000 [0176.163] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0176.163] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\HoloAssets\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x505560a4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb249a097, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x505560a4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0176.163] GetProcessHeap () returned 0x12c0000 [0176.163] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0176.163] GetProcessHeap () returned 0x12c0000 [0176.164] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0176.164] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf97abca3, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbeb29071, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xbeb29071, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0176.164] GetProcessHeap () returned 0x12c0000 [0176.164] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0176.164] GetProcessHeap () returned 0x12c0000 [0176.164] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0176.164] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Styling\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e0b429, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb249b3d8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x50e0b429, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0176.164] GetProcessHeap () returned 0x12c0000 [0176.164] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0176.164] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Styling\\css\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e0b429, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb249c186, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x50e31682, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0176.165] GetProcessHeap () returned 0x12c0000 [0176.165] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0176.165] GetProcessHeap () returned 0x12c0000 [0176.165] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0176.165] GetProcessHeap () returned 0x12c0000 [0176.165] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0176.166] GetProcessHeap () returned 0x12c0000 [0176.166] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0176.166] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8aea982c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xfd4ea481, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xfd4ea481, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0176.168] GetProcessHeap () returned 0x12c0000 [0176.168] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0176.168] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8aea982c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb253a43f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8aea982c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.168] GetProcessHeap () returned 0x12c0000 [0176.168] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0176.169] GetProcessHeap () returned 0x12c0000 [0176.169] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0176.169] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfd4ea481, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xfd4ea481, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xfd4ea481, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.170] GetProcessHeap () returned 0x12c0000 [0176.170] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0176.170] GetProcessHeap () returned 0x12c0000 [0176.170] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0176.171] GetProcessHeap () returned 0x12c0000 [0176.171] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0176.171] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d01521b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xfd5106b5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xfd5106b5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0176.256] GetProcessHeap () returned 0x12c0000 [0176.256] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0176.256] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d0fa03c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb253d3a4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d25784d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0176.257] GetProcessHeap () returned 0x12c0000 [0176.257] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0176.257] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppTiles\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d0fa03c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb25946d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d198c81, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.259] GetProcessHeap () returned 0x12c0000 [0176.259] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.260] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d0fa03c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb25f5277, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d12029a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0176.262] GetProcessHeap () returned 0x12c0000 [0176.262] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.262] GetProcessHeap () returned 0x12c0000 [0176.262] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.262] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d12029a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb263e5bd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d172a07, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0176.265] GetProcessHeap () returned 0x12c0000 [0176.265] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.265] GetProcessHeap () returned 0x12c0000 [0176.265] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0176.265] GetProcessHeap () returned 0x12c0000 [0176.265] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0176.265] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\Images\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d198c81, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb263f1df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d198c81, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.265] GetProcessHeap () returned 0x12c0000 [0176.265] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.265] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\Images\\Ratings\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d198c81, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb26aeba4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d2315ef, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0176.268] GetProcessHeap () returned 0x12c0000 [0176.268] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.268] GetProcessHeap () returned 0x12c0000 [0176.268] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0176.268] GetProcessHeap () returned 0x12c0000 [0176.268] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0176.268] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d25784d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb26afa42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d733784, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.269] GetProcessHeap () returned 0x12c0000 [0176.269] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.269] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Car\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d25784d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb26b084c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d2a3d00, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0176.270] GetProcessHeap () returned 0x12c0000 [0176.270] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0176.270] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Car\\LTR\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d25784d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb273bedf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d27daa6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0176.272] GetProcessHeap () returned 0x12c0000 [0176.272] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0176.273] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Car\\LTR\\contrast-black\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d25784d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb273ce6d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d25784d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131ed08 [0176.273] GetProcessHeap () returned 0x12c0000 [0176.273] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0176.273] GetProcessHeap () returned 0x12c0000 [0176.273] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0176.273] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Car\\LTR\\contrast-white\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d25784d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb273db4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d27daa6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131edc8 [0176.273] GetProcessHeap () returned 0x12c0000 [0176.273] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0176.274] GetProcessHeap () returned 0x12c0000 [0176.274] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0176.274] GetProcessHeap () returned 0x12c0000 [0176.274] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0176.275] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Car\\RTL\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d2a3d00, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb27a8e4b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d2c9f5d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0176.277] GetProcessHeap () returned 0x12c0000 [0176.277] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0176.277] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Car\\RTL\\contrast-black\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d2a3d00, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb27a9e30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d2a3d00, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131f008 [0176.277] GetProcessHeap () returned 0x12c0000 [0176.277] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0176.278] GetProcessHeap () returned 0x12c0000 [0176.278] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0176.278] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Car\\RTL\\contrast-white\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d2a3d00, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb27aa7bb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d2c9f5d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131e0c8 [0176.278] GetProcessHeap () returned 0x12c0000 [0176.278] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0176.278] GetProcessHeap () returned 0x12c0000 [0176.278] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0176.279] GetProcessHeap () returned 0x12c0000 [0176.279] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.280] GetProcessHeap () returned 0x12c0000 [0176.280] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.280] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Collections\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d2c9f5d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb27f7692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d2f25ea, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0176.281] GetProcessHeap () returned 0x12c0000 [0176.281] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0176.281] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Collections\\contrast-black\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d2c9f5d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb287144a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d2c9f5d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0176.285] GetProcessHeap () returned 0x12c0000 [0176.285] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0176.285] GetProcessHeap () returned 0x12c0000 [0176.285] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0176.285] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Collections\\contrast-white\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d2f25ea, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb28bfbaf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d2f25ea, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0176.288] GetProcessHeap () returned 0x12c0000 [0176.288] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0176.288] GetProcessHeap () returned 0x12c0000 [0176.288] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.289] GetProcessHeap () returned 0x12c0000 [0176.289] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.290] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d318869, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb28c0a27, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d51986a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0176.291] GetProcessHeap () returned 0x12c0000 [0176.291] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0176.291] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Car\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d318869, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb28c1827, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d368a9d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0176.291] GetProcessHeap () returned 0x12c0000 [0176.291] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0176.291] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Car\\LTR\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d318869, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb290fc02, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d33eac2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131ec48 [0176.415] GetProcessHeap () returned 0x12c0000 [0176.415] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0176.415] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Car\\LTR\\contrast-black\\*", lpFindFileData=0x350e290 | out: lpFindFileData=0x350e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d318869, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb29109e3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d318869, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131ef88 [0176.416] GetProcessHeap () returned 0x12c0000 [0176.416] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0176.416] GetProcessHeap () returned 0x12c0000 [0176.416] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0176.416] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Car\\LTR\\contrast-white\\*", lpFindFileData=0x350e290 | out: lpFindFileData=0x350e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d318869, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb291154c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d33eac2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131e888 [0176.416] GetProcessHeap () returned 0x12c0000 [0176.416] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0176.416] GetProcessHeap () returned 0x12c0000 [0176.416] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0176.417] GetProcessHeap () returned 0x12c0000 [0176.417] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0176.418] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Car\\RTL\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d368a9d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2956f28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d390da3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131e808 [0176.419] GetProcessHeap () returned 0x12c0000 [0176.419] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0176.419] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Car\\RTL\\contrast-black\\*", lpFindFileData=0x350e290 | out: lpFindFileData=0x350e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d368a9d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2957dbe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d36ab20, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131e148 [0176.420] GetProcessHeap () returned 0x12c0000 [0176.420] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0176.420] GetProcessHeap () returned 0x12c0000 [0176.420] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0176.420] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Car\\RTL\\contrast-white\\*", lpFindFileData=0x350e290 | out: lpFindFileData=0x350e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d36ab20, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb29586aa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d390da3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131e248 [0176.421] GetProcessHeap () returned 0x12c0000 [0176.421] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0176.421] GetProcessHeap () returned 0x12c0000 [0176.421] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0176.421] GetProcessHeap () returned 0x12c0000 [0176.421] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0176.422] GetProcessHeap () returned 0x12c0000 [0176.422] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0176.422] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Home\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d390da3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2959420, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d4034b3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0176.422] GetProcessHeap () returned 0x12c0000 [0176.422] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0176.422] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Home\\LTR\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d390da3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb29bb252, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d4034b3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131e1c8 [0176.424] GetProcessHeap () returned 0x12c0000 [0176.424] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0176.424] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Home\\LTR\\contrast-black\\*", lpFindFileData=0x350e290 | out: lpFindFileData=0x350e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d390da3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb29bc390, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d3b6ffc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131e488 [0176.425] GetProcessHeap () returned 0x12c0000 [0176.425] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0176.425] GetProcessHeap () returned 0x12c0000 [0176.425] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0176.425] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Home\\LTR\\contrast-white\\*", lpFindFileData=0x350e290 | out: lpFindFileData=0x350e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d3b6ffc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb29bcc45, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d3dd25a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131e648 [0176.426] GetProcessHeap () returned 0x12c0000 [0176.426] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0176.426] GetProcessHeap () returned 0x12c0000 [0176.426] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0176.426] GetProcessHeap () returned 0x12c0000 [0176.426] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0176.426] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Home\\RTL\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d4034b3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2a0b8ce, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d44f96b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131e3c8 [0176.427] GetProcessHeap () returned 0x12c0000 [0176.427] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0176.427] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Home\\RTL\\contrast-black\\*", lpFindFileData=0x350e290 | out: lpFindFileData=0x350e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d4034b3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2a0c5bd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d4034b3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131e6c8 [0176.428] GetProcessHeap () returned 0x12c0000 [0176.428] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0176.428] GetProcessHeap () returned 0x12c0000 [0176.428] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0176.428] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Home\\RTL\\contrast-white\\*", lpFindFileData=0x350e290 | out: lpFindFileData=0x350e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d42970d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2a0cbbe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d42970d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131e408 [0176.429] GetProcessHeap () returned 0x12c0000 [0176.429] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0176.429] GetProcessHeap () returned 0x12c0000 [0176.429] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0176.429] GetProcessHeap () returned 0x12c0000 [0176.429] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0176.430] GetProcessHeap () returned 0x12c0000 [0176.430] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0176.430] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Place\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d44f96b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2a0dbbe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d4c207b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0176.430] GetProcessHeap () returned 0x12c0000 [0176.430] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0176.431] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Place\\LTR\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d44f96b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2a5dcf9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d4c207b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131e8c8 [0176.432] GetProcessHeap () returned 0x12c0000 [0176.432] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0176.432] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Place\\LTR\\contrast-black\\*", lpFindFileData=0x350e290 | out: lpFindFileData=0x350e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d44f96b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2a5ee8f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d475bc4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131ed08 [0176.433] GetProcessHeap () returned 0x12c0000 [0176.433] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0176.433] GetProcessHeap () returned 0x12c0000 [0176.433] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0176.433] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Place\\LTR\\contrast-white\\*", lpFindFileData=0x350e290 | out: lpFindFileData=0x350e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d475bc4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2a5f62e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d49be1d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131eb88 [0176.434] GetProcessHeap () returned 0x12c0000 [0176.434] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0176.434] GetProcessHeap () returned 0x12c0000 [0176.434] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0176.434] GetProcessHeap () returned 0x12c0000 [0176.434] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0176.435] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Place\\RTL\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d4c207b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2ab3fd5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d51986a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131ee08 [0176.437] GetProcessHeap () returned 0x12c0000 [0176.437] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0176.437] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Place\\RTL\\contrast-black\\*", lpFindFileData=0x350e290 | out: lpFindFileData=0x350e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d4c207b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2ab4bf2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d4edfec, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131efc8 [0176.437] GetProcessHeap () returned 0x12c0000 [0176.437] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0176.437] GetProcessHeap () returned 0x12c0000 [0176.437] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0176.437] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Place\\RTL\\contrast-white\\*", lpFindFileData=0x350e290 | out: lpFindFileData=0x350e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d4f35ec, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2ab52e8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d4f35ec, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131ea08 [0176.437] GetProcessHeap () returned 0x12c0000 [0176.438] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0176.438] GetProcessHeap () returned 0x12c0000 [0176.438] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0176.438] GetProcessHeap () returned 0x12c0000 [0176.438] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0176.440] GetProcessHeap () returned 0x12c0000 [0176.440] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0176.440] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Work\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d51986a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2ab5f49, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d565d22, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0176.441] GetProcessHeap () returned 0x12c0000 [0176.441] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0176.441] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Work\\LTR\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d51986a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2aff91b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d565d22, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131e6c8 [0176.443] GetProcessHeap () returned 0x12c0000 [0176.443] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0176.443] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Work\\LTR\\contrast-black\\*", lpFindFileData=0x350e290 | out: lpFindFileData=0x350e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d51986a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2b006c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d53fac4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131e588 [0176.443] GetProcessHeap () returned 0x12c0000 [0176.443] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0176.443] GetProcessHeap () returned 0x12c0000 [0176.443] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0176.443] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Work\\LTR\\contrast-white\\*", lpFindFileData=0x350e290 | out: lpFindFileData=0x350e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d53fac4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2b00f23, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d53fac4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131e7c8 [0176.454] GetProcessHeap () returned 0x12c0000 [0176.454] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0176.454] GetProcessHeap () returned 0x12c0000 [0176.454] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0176.455] GetProcessHeap () returned 0x12c0000 [0176.455] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0176.456] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Work\\RTL\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d565d22, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2b5c666, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d5b21d4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131ec88 [0176.458] GetProcessHeap () returned 0x12c0000 [0176.458] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0176.458] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Work\\RTL\\contrast-black\\*", lpFindFileData=0x350e290 | out: lpFindFileData=0x350e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d565d22, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2b5e29a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d58bf7b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131ec48 [0176.458] GetProcessHeap () returned 0x12c0000 [0176.458] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0176.458] GetProcessHeap () returned 0x12c0000 [0176.458] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0176.458] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Work\\RTL\\contrast-white\\*", lpFindFileData=0x350e290 | out: lpFindFileData=0x350e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d58bf7b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2b5ed79, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d5b21d4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131edc8 [0176.458] GetProcessHeap () returned 0x12c0000 [0176.458] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0176.459] GetProcessHeap () returned 0x12c0000 [0176.459] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0176.459] GetProcessHeap () returned 0x12c0000 [0176.459] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0176.460] GetProcessHeap () returned 0x12c0000 [0176.460] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.461] GetProcessHeap () returned 0x12c0000 [0176.461] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.461] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Home\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d5d8432, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2ba78f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d64ab43, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0176.530] GetProcessHeap () returned 0x12c0000 [0176.530] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0176.530] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Home\\contrast-black\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d5d8432, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2ba8ace, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d5d8432, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0176.531] GetProcessHeap () returned 0x12c0000 [0176.532] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0176.532] GetProcessHeap () returned 0x12c0000 [0176.532] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0176.532] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Home\\contrast-white\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d5d8432, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2ba9318, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d5fe690, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0176.532] GetProcessHeap () returned 0x12c0000 [0176.532] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0176.532] GetProcessHeap () returned 0x12c0000 [0176.532] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.532] GetProcessHeap () returned 0x12c0000 [0176.532] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.532] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Place\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d64ab43, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2c19005, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d696ffa, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0176.534] GetProcessHeap () returned 0x12c0000 [0176.534] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0176.534] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Place\\contrast-black\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d64ab43, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2c19f2d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d670d9c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0176.534] GetProcessHeap () returned 0x12c0000 [0176.534] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0176.534] GetProcessHeap () returned 0x12c0000 [0176.534] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0176.534] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Place\\contrast-white\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d670d9c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2c1a7b0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d696ffa, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0176.535] GetProcessHeap () returned 0x12c0000 [0176.535] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0176.535] GetProcessHeap () returned 0x12c0000 [0176.535] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.535] GetProcessHeap () returned 0x12c0000 [0176.535] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.535] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\TrafficHub\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d696ffa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2c3062e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d733784, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0176.537] GetProcessHeap () returned 0x12c0000 [0176.537] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0176.537] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\TrafficHub\\contrast-black\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d696ffa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2c31253, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d6bd253, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0176.537] GetProcessHeap () returned 0x12c0000 [0176.537] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0176.537] GetProcessHeap () returned 0x12c0000 [0176.537] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0176.537] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\TrafficHub\\contrast-white\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d6bd253, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2c31b07, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d70d530, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0176.537] GetProcessHeap () returned 0x12c0000 [0176.538] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0176.538] GetProcessHeap () returned 0x12c0000 [0176.538] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.538] GetProcessHeap () returned 0x12c0000 [0176.538] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.538] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Work\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d733784, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2c99e2e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d77fc3b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0176.540] GetProcessHeap () returned 0x12c0000 [0176.540] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0176.540] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Work\\contrast-black\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d733784, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2c9b0f4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d7599e2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0176.540] GetProcessHeap () returned 0x12c0000 [0176.540] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0176.540] GetProcessHeap () returned 0x12c0000 [0176.540] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0176.540] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Work\\contrast-white\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d7599e2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2c9bc21, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d7599e2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0176.541] GetProcessHeap () returned 0x12c0000 [0176.541] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0176.541] GetProcessHeap () returned 0x12c0000 [0176.541] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.541] GetProcessHeap () returned 0x12c0000 [0176.541] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0176.542] GetProcessHeap () returned 0x12c0000 [0176.542] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0176.542] GetProcessHeap () returned 0x12c0000 [0176.542] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0176.542] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfd5106b5, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xfd5106b5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xfd5106b5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0176.543] GetProcessHeap () returned 0x12c0000 [0176.543] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0176.543] GetProcessHeap () returned 0x12c0000 [0176.543] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0176.543] GetProcessHeap () returned 0x12c0000 [0176.544] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0176.544] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b07346e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xfd4ea481, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xfd4ea481, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0176.545] GetProcessHeap () returned 0x12c0000 [0176.545] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0176.546] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\AppCore\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b0e5b7f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2ced312, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b0e5b7f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.546] GetProcessHeap () returned 0x12c0000 [0176.546] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0176.546] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\AppCore\\Location\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b0e5b7f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2cee18a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b0e5b7f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0176.547] GetProcessHeap () returned 0x12c0000 [0176.547] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.548] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\AppCore\\Location\\Shifter\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b0e5b7f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2ceec4f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b0e5b7f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0176.548] GetProcessHeap () returned 0x12c0000 [0176.548] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.548] GetProcessHeap () returned 0x12c0000 [0176.548] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0176.549] GetProcessHeap () returned 0x12c0000 [0176.549] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0176.549] GetProcessHeap () returned 0x12c0000 [0176.549] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0176.549] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b0e5b7f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2cef683, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b0e5b7f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0176.550] GetProcessHeap () returned 0x12c0000 [0176.550] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0176.550] GetProcessHeap () returned 0x12c0000 [0176.550] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0176.550] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b0e5b7f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2cf0464, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c38a336, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0176.551] GetProcessHeap () returned 0x12c0000 [0176.551] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0176.551] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b0e5b7f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2e0460d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b3cb0d0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.554] GetProcessHeap () returned 0x12c0000 [0176.554] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.555] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b0e5b7f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2e8edc6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b1d14c0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0176.557] GetProcessHeap () returned 0x12c0000 [0176.557] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.557] GetProcessHeap () returned 0x12c0000 [0176.557] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.557] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b1f771a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2e902ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2e62aa, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0176.562] GetProcessHeap () returned 0x12c0000 [0176.562] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.562] GetProcessHeap () returned 0x12c0000 [0176.562] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0176.563] GetProcessHeap () returned 0x12c0000 [0176.563] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0176.564] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\Fonts\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b3cb0d0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2e90b88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b3cb0d0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0176.564] GetProcessHeap () returned 0x12c0000 [0176.564] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0176.564] GetProcessHeap () returned 0x12c0000 [0176.564] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0176.564] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\Images\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b3cb0d0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2efb6c2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b4afef1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0176.566] GetProcessHeap () returned 0x12c0000 [0176.566] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.567] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\Images\\LayersControl\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b3cb0d0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2efbe2a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b3f1329, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.567] GetProcessHeap () returned 0x12c0000 [0176.567] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.567] GetProcessHeap () returned 0x12c0000 [0176.567] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.567] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\Images\\PrintAndShare\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b3f1329, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2f3152f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b4afef1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.697] GetProcessHeap () returned 0x12c0000 [0176.698] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.698] GetProcessHeap () returned 0x12c0000 [0176.698] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.698] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\Images\\RadialControl\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b4afef1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2fc69fb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b4afef1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.700] GetProcessHeap () returned 0x12c0000 [0176.700] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.700] GetProcessHeap () returned 0x12c0000 [0176.700] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.700] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\Images\\Ratings\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b4afef1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2ff63a8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b4d614a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.703] GetProcessHeap () returned 0x12c0000 [0176.703] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.703] GetProcessHeap () returned 0x12c0000 [0176.703] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0176.704] GetProcessHeap () returned 0x12c0000 [0176.704] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0176.705] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\LiveTiles\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b4fc3a8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3087d01, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b76acf2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0176.707] GetProcessHeap () returned 0x12c0000 [0176.707] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0176.707] GetProcessHeap () returned 0x12c0000 [0176.707] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0176.707] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b8e847d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb30890e1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c2f19a3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0176.708] GetProcessHeap () returned 0x12c0000 [0176.708] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.709] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Car\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b8e847d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3089937, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ba3f9af, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.709] GetProcessHeap () returned 0x12c0000 [0176.709] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0176.710] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Car\\LTR\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b8e847d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb30f908c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ba19755, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0176.712] GetProcessHeap () returned 0x12c0000 [0176.712] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0176.712] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Car\\LTR\\contrast-black\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b8e847d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb30f9fa9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b980de7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131f850 [0176.712] GetProcessHeap () returned 0x12c0000 [0176.712] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0176.712] GetProcessHeap () returned 0x12c0000 [0176.712] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0176.712] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Car\\LTR\\contrast-white\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b9a7045, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb30fa4e4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b9f34f7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131f650 [0176.713] GetProcessHeap () returned 0x12c0000 [0176.713] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0176.713] GetProcessHeap () returned 0x12c0000 [0176.713] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0176.713] GetProcessHeap () returned 0x12c0000 [0176.713] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0176.713] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Car\\RTL\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ba3f9af, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb30fb71e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bad9e55, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0176.714] GetProcessHeap () returned 0x12c0000 [0176.714] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0176.714] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Car\\RTL\\contrast-black\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ba3f9af, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb30fbf46, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ba8be66, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131f750 [0176.715] GetProcessHeap () returned 0x12c0000 [0176.715] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0176.715] GetProcessHeap () returned 0x12c0000 [0176.715] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0176.715] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Car\\RTL\\contrast-white\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ba8be66, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb30fc3a4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bab3bcd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131f3d0 [0176.715] GetProcessHeap () returned 0x12c0000 [0176.715] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0176.716] GetProcessHeap () returned 0x12c0000 [0176.716] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0176.716] GetProcessHeap () returned 0x12c0000 [0176.716] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.717] GetProcessHeap () returned 0x12c0000 [0176.717] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.717] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Collections\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bad9e55, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb314cc17, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bb73c04, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.719] GetProcessHeap () returned 0x12c0000 [0176.719] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0176.719] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Collections\\contrast-black\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bad9e55, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb31cde56, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bb000a9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0176.722] GetProcessHeap () returned 0x12c0000 [0176.722] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0176.722] GetProcessHeap () returned 0x12c0000 [0176.722] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0176.722] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Collections\\contrast-white\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bb26303, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3233df3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bb4c561, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0176.725] GetProcessHeap () returned 0x12c0000 [0176.725] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0176.725] GetProcessHeap () returned 0x12c0000 [0176.725] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.725] GetProcessHeap () returned 0x12c0000 [0176.725] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.725] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bb73c04, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb32348f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c003fae, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.725] GetProcessHeap () returned 0x12c0000 [0176.725] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0176.725] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Car\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bb73c04, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb323545e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bc327f1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0176.726] GetProcessHeap () returned 0x12c0000 [0176.726] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0176.726] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Car\\LTR\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bb73c04, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb32914e4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bc0c598, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131f510 [0176.728] GetProcessHeap () returned 0x12c0000 [0176.728] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0176.728] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Car\\LTR\\contrast-black\\*", lpFindFileData=0x350e290 | out: lpFindFileData=0x350e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bb73c04, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb32922fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bb99e88, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131f1d0 [0176.728] GetProcessHeap () returned 0x12c0000 [0176.728] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0176.729] GetProcessHeap () returned 0x12c0000 [0176.729] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0176.729] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Car\\LTR\\contrast-white\\*", lpFindFileData=0x350e290 | out: lpFindFileData=0x350e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bb99e88, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3292b75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bbc00e1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131f290 [0176.729] GetProcessHeap () returned 0x12c0000 [0176.729] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0176.729] GetProcessHeap () returned 0x12c0000 [0176.729] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0176.730] GetProcessHeap () returned 0x12c0000 [0176.730] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0176.730] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Car\\RTL\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bc327f1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb330b8a0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bd6f0f8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131f550 [0176.732] GetProcessHeap () returned 0x12c0000 [0176.732] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0176.732] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Car\\RTL\\contrast-black\\*", lpFindFileData=0x350e290 | out: lpFindFileData=0x350e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bc327f1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb330ca4b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bcf7199, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131f1d0 [0176.732] GetProcessHeap () returned 0x12c0000 [0176.732] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0176.733] GetProcessHeap () returned 0x12c0000 [0176.733] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0176.733] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Car\\RTL\\contrast-white\\*", lpFindFileData=0x350e290 | out: lpFindFileData=0x350e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bcf7199, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb330d4eb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bd1d3f2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131f4d0 [0176.771] GetProcessHeap () returned 0x12c0000 [0176.771] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0176.771] GetProcessHeap () returned 0x12c0000 [0176.771] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0176.772] GetProcessHeap () returned 0x12c0000 [0176.772] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0176.772] GetProcessHeap () returned 0x12c0000 [0176.772] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0176.772] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Home\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bd6f0f8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb330e45c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8be0c854, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0176.773] GetProcessHeap () returned 0x12c0000 [0176.773] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0176.773] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Home\\LTR\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bd6f0f8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb335dfb4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8be0c854, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131f4d0 [0176.774] GetProcessHeap () returned 0x12c0000 [0176.774] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0176.774] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Home\\LTR\\contrast-black\\*", lpFindFileData=0x350e290 | out: lpFindFileData=0x350e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bd6f0f8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb335ec08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bd95377, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131f450 [0176.775] GetProcessHeap () returned 0x12c0000 [0176.775] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0176.775] GetProcessHeap () returned 0x12c0000 [0176.775] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0176.775] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Home\\LTR\\contrast-white\\*", lpFindFileData=0x350e290 | out: lpFindFileData=0x350e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bd95377, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb335eff0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bde65da, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131f1d0 [0176.776] GetProcessHeap () returned 0x12c0000 [0176.776] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0176.776] GetProcessHeap () returned 0x12c0000 [0176.776] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0176.776] GetProcessHeap () returned 0x12c0000 [0176.776] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0176.777] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Home\\RTL\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be0c854, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb33b18c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8beaa4cc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1370ba0 [0176.778] GetProcessHeap () returned 0x12c0000 [0176.778] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0176.779] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Home\\RTL\\contrast-black\\*", lpFindFileData=0x350e290 | out: lpFindFileData=0x350e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be0c854, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb33b285d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8be5a264, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1371120 [0176.779] GetProcessHeap () returned 0x12c0000 [0176.779] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0176.779] GetProcessHeap () returned 0x12c0000 [0176.779] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0176.779] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Home\\RTL\\contrast-white\\*", lpFindFileData=0x350e290 | out: lpFindFileData=0x350e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be5a264, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb33b30cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8be804ec, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1370ea0 [0176.779] GetProcessHeap () returned 0x12c0000 [0176.779] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0176.780] GetProcessHeap () returned 0x12c0000 [0176.780] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0176.780] GetProcessHeap () returned 0x12c0000 [0176.780] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0176.781] GetProcessHeap () returned 0x12c0000 [0176.781] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0176.781] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Place\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8beaa4cc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb33b37ec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bf6b61f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0176.782] GetProcessHeap () returned 0x12c0000 [0176.782] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0176.782] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Place\\LTR\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8beaa4cc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3404bd2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bf6b61f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131fc10 [0176.784] GetProcessHeap () returned 0x12c0000 [0176.784] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0176.784] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Place\\LTR\\contrast-black\\*", lpFindFileData=0x350e290 | out: lpFindFileData=0x350e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8beaa4cc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb34056ab, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bef69a4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131fe90 [0176.784] GetProcessHeap () returned 0x12c0000 [0176.784] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0176.784] GetProcessHeap () returned 0x12c0000 [0176.784] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0176.784] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Place\\LTR\\contrast-white\\*", lpFindFileData=0x350e290 | out: lpFindFileData=0x350e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bef69a4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3405f23, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bf1cbfd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131fc50 [0176.785] GetProcessHeap () returned 0x12c0000 [0176.785] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0176.785] GetProcessHeap () returned 0x12c0000 [0176.785] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0176.785] GetProcessHeap () returned 0x12c0000 [0176.785] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0176.785] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Place\\RTL\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bf6b61f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3454610, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bfddd50, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131f7d0 [0176.787] GetProcessHeap () returned 0x12c0000 [0176.787] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0176.787] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Place\\RTL\\contrast-black\\*", lpFindFileData=0x350e290 | out: lpFindFileData=0x350e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bf6b61f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3455631, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bf9189e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131f290 [0176.787] GetProcessHeap () returned 0x12c0000 [0176.787] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0176.787] GetProcessHeap () returned 0x12c0000 [0176.787] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0176.787] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Place\\RTL\\contrast-white\\*", lpFindFileData=0x350e290 | out: lpFindFileData=0x350e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bfb7af7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3456035, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bfddd50, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131f110 [0176.788] GetProcessHeap () returned 0x12c0000 [0176.788] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0176.788] GetProcessHeap () returned 0x12c0000 [0176.788] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0176.788] GetProcessHeap () returned 0x12c0000 [0176.788] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0176.789] GetProcessHeap () returned 0x12c0000 [0176.789] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0176.789] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Work\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c003fae, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3456e12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c0766c3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0176.790] GetProcessHeap () returned 0x12c0000 [0176.790] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0176.790] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Work\\LTR\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c003fae, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb34fccf8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c0766c3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131fd10 [0176.792] GetProcessHeap () returned 0x12c0000 [0176.792] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0176.792] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Work\\LTR\\contrast-black\\*", lpFindFileData=0x350e290 | out: lpFindFileData=0x350e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c003fae, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb34fe0e7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c003fae, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131fb10 [0176.792] GetProcessHeap () returned 0x12c0000 [0176.792] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0176.792] GetProcessHeap () returned 0x12c0000 [0176.793] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0176.793] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Work\\LTR\\contrast-white\\*", lpFindFileData=0x350e290 | out: lpFindFileData=0x350e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c02a20c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb34fec79, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c050465, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131f990 [0176.793] GetProcessHeap () returned 0x12c0000 [0176.793] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0176.793] GetProcessHeap () returned 0x12c0000 [0176.793] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0176.794] GetProcessHeap () returned 0x12c0000 [0176.794] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d230c0 [0176.794] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Work\\RTL\\*", lpFindFileData=0x350e520 | out: lpFindFileData=0x350e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c0766c3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb350145a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c0a185e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131f210 [0176.796] GetProcessHeap () returned 0x12c0000 [0176.796] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0176.796] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Work\\RTL\\contrast-black\\*", lpFindFileData=0x350e290 | out: lpFindFileData=0x350e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c0766c3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3501ce9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c0766c3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131f4d0 [0176.816] GetProcessHeap () returned 0x12c0000 [0176.816] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0176.817] GetProcessHeap () returned 0x12c0000 [0176.817] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d330c8 [0176.817] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Work\\RTL\\contrast-white\\*", lpFindFileData=0x350e290 | out: lpFindFileData=0x350e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c0766c3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb350228b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c0a185e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131f3d0 [0176.817] GetProcessHeap () returned 0x12c0000 [0176.817] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d330c8 | out: hHeap=0x12c0000) returned 1 [0176.817] GetProcessHeap () returned 0x12c0000 [0176.817] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d230c0 | out: hHeap=0x12c0000) returned 1 [0176.818] GetProcessHeap () returned 0x12c0000 [0176.818] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0176.818] GetProcessHeap () returned 0x12c0000 [0176.818] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.819] GetProcessHeap () returned 0x12c0000 [0176.819] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.820] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Home\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c0a185e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb35c9bed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c1ac8fd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.822] GetProcessHeap () returned 0x12c0000 [0176.822] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0176.822] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Home\\contrast-black\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c0c7adc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb35cac6f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c13a1ed, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0176.822] GetProcessHeap () returned 0x12c0000 [0176.822] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0176.822] GetProcessHeap () returned 0x12c0000 [0176.822] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0176.822] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Home\\contrast-white\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c13a1ed, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb35cb8cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c1866a4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0176.823] GetProcessHeap () returned 0x12c0000 [0176.823] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0176.823] GetProcessHeap () returned 0x12c0000 [0176.823] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.823] GetProcessHeap () returned 0x12c0000 [0176.823] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.823] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Place\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c1ac8fd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3623b8b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c26b4c5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.825] GetProcessHeap () returned 0x12c0000 [0176.825] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0176.825] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Place\\contrast-black\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c1ac8fd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb362499b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c1f8db5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0176.826] GetProcessHeap () returned 0x12c0000 [0176.826] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0176.826] GetProcessHeap () returned 0x12c0000 [0176.826] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0176.826] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Place\\contrast-white\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c1f8db5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3625294, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c24526c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0176.832] GetProcessHeap () returned 0x12c0000 [0176.832] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0176.832] GetProcessHeap () returned 0x12c0000 [0176.832] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.832] GetProcessHeap () returned 0x12c0000 [0176.832] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.832] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\TrafficHub\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c26b4c5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb367a3f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c2f19a3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.834] GetProcessHeap () returned 0x12c0000 [0176.834] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0176.834] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\TrafficHub\\contrast-black\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c26b4c5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb367b39d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c29171e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0176.835] GetProcessHeap () returned 0x12c0000 [0176.835] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0176.835] GetProcessHeap () returned 0x12c0000 [0176.835] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0176.835] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\TrafficHub\\contrast-white\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c29171e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb367bae1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c2b797c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0176.835] GetProcessHeap () returned 0x12c0000 [0176.835] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0176.835] GetProcessHeap () returned 0x12c0000 [0176.835] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.836] GetProcessHeap () returned 0x12c0000 [0176.836] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.837] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Work\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c2f19a3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb36c962c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c3640d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.838] GetProcessHeap () returned 0x12c0000 [0176.838] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0176.838] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Work\\contrast-black\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c2f19a3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb36ca3a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c317c21, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0176.839] GetProcessHeap () returned 0x12c0000 [0176.839] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0176.839] GetProcessHeap () returned 0x12c0000 [0176.839] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0176.839] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Work\\contrast-white\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c317c21, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb36caca0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c317c21, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0176.840] GetProcessHeap () returned 0x12c0000 [0176.840] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0176.840] GetProcessHeap () returned 0x12c0000 [0176.840] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.840] GetProcessHeap () returned 0x12c0000 [0176.840] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0176.841] GetProcessHeap () returned 0x12c0000 [0176.841] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0176.841] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\Sounds\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c38a336, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb36cb89c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c38a336, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0176.842] GetProcessHeap () returned 0x12c0000 [0176.842] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0176.842] GetProcessHeap () returned 0x12c0000 [0176.842] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0176.842] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\Voices\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c38a336, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb36cc1d6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c57a1d6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0176.842] GetProcessHeap () returned 0x12c0000 [0176.842] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.843] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\Voices\\beeps\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c38a336, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb36ccb49, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c3fca47, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.844] GetProcessHeap () returned 0x12c0000 [0176.844] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0176.844] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\Voices\\beeps\\beeps\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c38a336, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb36cd6ff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c38a336, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0176.844] GetProcessHeap () returned 0x12c0000 [0176.844] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0176.844] GetProcessHeap () returned 0x12c0000 [0176.844] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.845] GetProcessHeap () returned 0x12c0000 [0176.845] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.846] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\Voices\\en-GB\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c422ca0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb36ce29e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c422ca0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.846] GetProcessHeap () returned 0x12c0000 [0176.846] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0176.846] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\Voices\\en-GB\\en-GB_female_TTS\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c422ca0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb37661f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c4bb60f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0176.848] GetProcessHeap () returned 0x12c0000 [0176.848] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0176.848] GetProcessHeap () returned 0x12c0000 [0176.848] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.848] GetProcessHeap () returned 0x12c0000 [0176.848] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.848] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\Voices\\en-IN\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c4bb60f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3766d81, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c4bb60f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.849] GetProcessHeap () returned 0x12c0000 [0176.849] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0176.849] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\Voices\\en-IN\\en-IN_female_TTS\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c4bb60f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb37c2829, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c553f78, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0176.851] GetProcessHeap () returned 0x12c0000 [0176.851] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0176.851] GetProcessHeap () returned 0x12c0000 [0176.852] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.852] GetProcessHeap () returned 0x12c0000 [0176.852] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.852] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\Voices\\en-US\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c57a1d6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb37c3803, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c57a1d6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.852] GetProcessHeap () returned 0x12c0000 [0176.852] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0176.852] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\Voices\\en-US\\en-US_female_TTS\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c57a1d6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb381afc6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c5c668d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0176.854] GetProcessHeap () returned 0x12c0000 [0176.854] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0176.854] GetProcessHeap () returned 0x12c0000 [0176.854] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.854] GetProcessHeap () returned 0x12c0000 [0176.854] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0176.855] GetProcessHeap () returned 0x12c0000 [0176.855] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0176.855] GetProcessHeap () returned 0x12c0000 [0176.856] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0176.856] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Microsoft.Bing.Client.Graph\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8cd4055a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb381c4eb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8cd4055a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.856] GetProcessHeap () returned 0x12c0000 [0176.856] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0176.856] GetProcessHeap () returned 0x12c0000 [0176.856] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0176.856] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfd4ea481, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbd1c01b1, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xbd1c01b1, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.857] GetProcessHeap () returned 0x12c0000 [0176.857] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0176.857] GetProcessHeap () returned 0x12c0000 [0176.857] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0176.857] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Speech\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8cdb2c6b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb381d673, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8cdd8ec4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0176.857] GetProcessHeap () returned 0x12c0000 [0176.857] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0176.857] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Speech\\en-GB\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8cdb2c6b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb381e43a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8cdb2c6b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0176.858] GetProcessHeap () returned 0x12c0000 [0176.858] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0176.858] GetProcessHeap () returned 0x12c0000 [0176.858] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0176.858] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Speech\\en-US\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8cdd8ec4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb381eaf6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8cdd8ec4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0176.858] GetProcessHeap () returned 0x12c0000 [0176.858] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0176.858] GetProcessHeap () returned 0x12c0000 [0176.858] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0176.858] GetProcessHeap () returned 0x12c0000 [0176.858] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x1360968 | out: hHeap=0x12c0000) returned 1 [0176.859] GetProcessHeap () returned 0x12c0000 [0176.859] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1360968 [0176.859] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x350f1f0 | out: lpFindFileData=0x350f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1384417, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb391b556, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7c923e77, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9808 [0176.912] GetProcessHeap () returned 0x12c0000 [0176.912] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0176.912] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1384417, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb391ec44, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1384417, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.913] GetProcessHeap () returned 0x12c0000 [0176.913] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0176.913] GetProcessHeap () returned 0x12c0000 [0176.913] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0176.913] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1384417, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3a006ef, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1501b56, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0176.923] GetProcessHeap () returned 0x12c0000 [0176.923] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0176.923] GetProcessHeap () returned 0x12c0000 [0176.923] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0176.923] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\Common\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1501b56, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3a0227c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1501b56, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0176.924] GetProcessHeap () returned 0x12c0000 [0176.924] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0176.925] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\Common\\NavigationData\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1501b56, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3a02903, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1501b56, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0176.925] GetProcessHeap () returned 0x12c0000 [0176.925] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0176.925] GetProcessHeap () returned 0x12c0000 [0176.925] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0176.925] GetProcessHeap () returned 0x12c0000 [0176.925] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0176.925] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\CompanionAppCore\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd15e6aaa, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3a03176, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd15e6aaa, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0176.925] GetProcessHeap () returned 0x12c0000 [0176.925] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0176.925] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\CompanionAppCore\\Data\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd15e6aaa, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3a03a8b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd15e6aaa, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0176.926] GetProcessHeap () returned 0x12c0000 [0176.926] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0176.926] GetProcessHeap () returned 0x12c0000 [0176.926] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3ce30a0 | out: hHeap=0x12c0000) returned 1 [0176.926] GetProcessHeap () returned 0x12c0000 [0176.926] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3ce30a0 [0176.926] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\*", lpFindFileData=0x350ef60 | out: lpFindFileData=0x350ef60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd160cc79, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3acabea, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1b1da7e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9848 [0176.928] GetProcessHeap () returned 0x12c0000 [0176.928] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0176.928] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\af-ZA\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd160cc79, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3acc02c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd160cc79, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.929] GetProcessHeap () returned 0x12c0000 [0176.929] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.930] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\af-ZA\\deeplink\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd160cc79, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3acce34, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd160cc79, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0176.930] GetProcessHeap () returned 0x12c0000 [0176.930] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.930] GetProcessHeap () returned 0x12c0000 [0176.930] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.930] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\af-ZA\\Windows\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd160cc79, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3acd31e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd160cc79, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0176.930] GetProcessHeap () returned 0x12c0000 [0176.930] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.930] GetProcessHeap () returned 0x12c0000 [0176.930] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0176.930] GetProcessHeap () returned 0x12c0000 [0176.931] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0176.931] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\am-ET\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd160cc79, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3acd818, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1632e44, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0176.931] GetProcessHeap () returned 0x12c0000 [0176.931] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.931] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\am-ET\\deeplink\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd160cc79, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3acded2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1632e44, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0176.932] GetProcessHeap () returned 0x12c0000 [0176.932] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.932] GetProcessHeap () returned 0x12c0000 [0176.932] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.932] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\am-ET\\resources\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1632e44, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3ace3d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1632e44, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.932] GetProcessHeap () returned 0x12c0000 [0176.932] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0176.932] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\am-ET\\resources\\css\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1632e44, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3ace965, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1632e44, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0176.932] GetProcessHeap () returned 0x12c0000 [0176.932] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0176.932] GetProcessHeap () returned 0x12c0000 [0176.932] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.932] GetProcessHeap () returned 0x12c0000 [0176.932] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.933] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\am-ET\\Windows\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1632e44, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3acf05e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1632e44, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.933] GetProcessHeap () returned 0x12c0000 [0176.933] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.933] GetProcessHeap () returned 0x12c0000 [0176.933] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0176.935] GetProcessHeap () returned 0x12c0000 [0176.935] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0176.935] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ar-sa\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1632e44, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3acf640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd165909e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.935] GetProcessHeap () returned 0x12c0000 [0176.935] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.936] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ar-sa\\deeplink\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1632e44, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3acfd4c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1632e44, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0176.937] GetProcessHeap () returned 0x12c0000 [0176.937] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.937] GetProcessHeap () returned 0x12c0000 [0176.937] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.937] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ar-sa\\Windows\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd165909e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3ad02d8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd165909e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0176.937] GetProcessHeap () returned 0x12c0000 [0176.937] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.937] GetProcessHeap () returned 0x12c0000 [0176.937] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0176.937] GetProcessHeap () returned 0x12c0000 [0176.937] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0176.937] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\az-latn-az\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd165909e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b61797, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd165909e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0176.938] GetProcessHeap () returned 0x12c0000 [0176.938] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.938] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\az-latn-az\\deeplink\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd165909e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b628a0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd165909e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.939] GetProcessHeap () returned 0x12c0000 [0176.939] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.939] GetProcessHeap () returned 0x12c0000 [0176.939] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.939] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\az-latn-az\\Windows\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd165909e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b62f31, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd165909e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.939] GetProcessHeap () returned 0x12c0000 [0176.939] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.939] GetProcessHeap () returned 0x12c0000 [0176.939] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0176.940] GetProcessHeap () returned 0x12c0000 [0176.940] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0176.941] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\be-by\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd165909e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b63663, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd167f3a4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0176.941] GetProcessHeap () returned 0x12c0000 [0176.941] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.942] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\be-by\\deeplink\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd165909e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b63d32, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd165909e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.942] GetProcessHeap () returned 0x12c0000 [0176.942] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.943] GetProcessHeap () returned 0x12c0000 [0176.943] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.943] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\be-by\\Windows\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd167f3a4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b64526, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd167f3a4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.943] GetProcessHeap () returned 0x12c0000 [0176.943] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.943] GetProcessHeap () returned 0x12c0000 [0176.943] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0176.944] GetProcessHeap () returned 0x12c0000 [0176.944] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0176.944] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\bg-BG\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd167f3a4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b64c64, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd167f3a4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0176.945] GetProcessHeap () returned 0x12c0000 [0176.945] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.946] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\bg-BG\\deeplink\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd167f3a4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b654be, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd167f3a4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.946] GetProcessHeap () returned 0x12c0000 [0176.946] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.946] GetProcessHeap () returned 0x12c0000 [0176.946] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.946] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\bg-BG\\Windows\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd167f3a4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b65cf3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd167f3a4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.947] GetProcessHeap () returned 0x12c0000 [0176.947] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.947] GetProcessHeap () returned 0x12c0000 [0176.947] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0176.947] GetProcessHeap () returned 0x12c0000 [0176.947] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0176.947] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\bn-BD\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd167f3a4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b66403, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16a561b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0176.947] GetProcessHeap () returned 0x12c0000 [0176.947] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.947] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\bn-BD\\deeplink\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd167f3a4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b66cd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd167f3a4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.948] GetProcessHeap () returned 0x12c0000 [0176.948] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.948] GetProcessHeap () returned 0x12c0000 [0176.948] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.948] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\bn-BD\\resources\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16a561b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b6731c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16a561b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.948] GetProcessHeap () returned 0x12c0000 [0176.948] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0176.948] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\bn-BD\\resources\\css\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16a561b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b67c32, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16a561b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0176.949] GetProcessHeap () returned 0x12c0000 [0176.949] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0176.949] GetProcessHeap () returned 0x12c0000 [0176.949] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.949] GetProcessHeap () returned 0x12c0000 [0176.949] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.949] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\bn-BD\\Windows\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16a561b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b681e6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16a561b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.950] GetProcessHeap () returned 0x12c0000 [0176.950] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.950] GetProcessHeap () returned 0x12c0000 [0176.950] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0176.951] GetProcessHeap () returned 0x12c0000 [0176.951] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0176.951] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ca-es\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16a561b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b68832, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16a561b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0176.951] GetProcessHeap () returned 0x12c0000 [0176.951] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.952] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ca-es\\deeplink\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16a561b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b69102, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16a561b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0176.952] GetProcessHeap () returned 0x12c0000 [0176.952] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.953] GetProcessHeap () returned 0x12c0000 [0176.953] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.953] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ca-es\\Windows\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16a561b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b6990e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16a561b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.966] GetProcessHeap () returned 0x12c0000 [0176.966] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.967] GetProcessHeap () returned 0x12c0000 [0176.967] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0176.967] GetProcessHeap () returned 0x12c0000 [0176.967] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0176.967] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\cs-cz\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16a561b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b6a067, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16cb7a8, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0176.967] GetProcessHeap () returned 0x12c0000 [0176.967] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.967] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\cs-cz\\deeplink\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16a561b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b6a7df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16cb7a8, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.967] GetProcessHeap () returned 0x12c0000 [0176.967] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.968] GetProcessHeap () returned 0x12c0000 [0176.968] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.968] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\cs-cz\\Windows\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16cb7a8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b6ad9a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16cb7a8, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0176.968] GetProcessHeap () returned 0x12c0000 [0176.968] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.976] GetProcessHeap () returned 0x12c0000 [0176.976] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0176.977] GetProcessHeap () returned 0x12c0000 [0176.977] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0176.977] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\da-dk\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16cb7a8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b6b4e6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16cb7a8, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0176.978] GetProcessHeap () returned 0x12c0000 [0176.978] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.979] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\da-dk\\deeplink\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16cb7a8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b6bbf7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16cb7a8, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.979] GetProcessHeap () returned 0x12c0000 [0176.979] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.979] GetProcessHeap () returned 0x12c0000 [0176.979] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.979] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\da-dk\\Windows\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16cb7a8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b6c350, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16cb7a8, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.979] GetProcessHeap () returned 0x12c0000 [0176.980] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.980] GetProcessHeap () returned 0x12c0000 [0176.980] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0176.980] GetProcessHeap () returned 0x12c0000 [0176.980] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0176.980] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\de-de\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16cb7a8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b6cb42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16f1ad8, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0176.980] GetProcessHeap () returned 0x12c0000 [0176.980] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.980] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\de-de\\deeplink\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16cb7a8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b6d3c3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16f1ad8, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.981] GetProcessHeap () returned 0x12c0000 [0176.981] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.981] GetProcessHeap () returned 0x12c0000 [0176.981] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.981] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\de-de\\Windows\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16f1ad8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b6da8e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16f1ad8, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.981] GetProcessHeap () returned 0x12c0000 [0176.981] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.981] GetProcessHeap () returned 0x12c0000 [0176.981] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0176.981] GetProcessHeap () returned 0x12c0000 [0176.981] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0176.981] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\el-GR\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16f1ad8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b6e28a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16f1ad8, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0176.982] GetProcessHeap () returned 0x12c0000 [0176.982] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.982] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\el-GR\\deeplink\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16f1ad8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b6eb1c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16f1ad8, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.982] GetProcessHeap () returned 0x12c0000 [0176.982] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.982] GetProcessHeap () returned 0x12c0000 [0176.982] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.982] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\el-GR\\Windows\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16f1ad8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b6f1bd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16f1ad8, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.983] GetProcessHeap () returned 0x12c0000 [0176.983] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.983] GetProcessHeap () returned 0x12c0000 [0176.983] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0176.984] GetProcessHeap () returned 0x12c0000 [0176.984] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0176.984] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\en-gb\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16f1ad8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b6fa3d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1717d00, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0176.985] GetProcessHeap () returned 0x12c0000 [0176.985] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.986] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\en-gb\\deeplink\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16f1ad8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b703f4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16f1ad8, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.986] GetProcessHeap () returned 0x12c0000 [0176.986] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.986] GetProcessHeap () returned 0x12c0000 [0176.986] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.986] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\en-gb\\Windows\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1717d00, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b70aaf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1717d00, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.986] GetProcessHeap () returned 0x12c0000 [0176.986] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.986] GetProcessHeap () returned 0x12c0000 [0176.986] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0176.986] GetProcessHeap () returned 0x12c0000 [0176.986] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0176.986] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\en-US\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1717d00, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b711cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1717d00, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0176.987] GetProcessHeap () returned 0x12c0000 [0176.987] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.987] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\en-US\\deeplink\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1717d00, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b71a29, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1717d00, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.987] GetProcessHeap () returned 0x12c0000 [0176.988] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.988] GetProcessHeap () returned 0x12c0000 [0176.988] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.988] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\en-US\\windows\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1717d00, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b71f78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1717d00, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.988] GetProcessHeap () returned 0x12c0000 [0176.988] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.988] GetProcessHeap () returned 0x12c0000 [0176.988] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0176.989] GetProcessHeap () returned 0x12c0000 [0176.989] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0176.989] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\es-es\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1717d00, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b727df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd173df84, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.990] GetProcessHeap () returned 0x12c0000 [0176.990] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.990] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\es-es\\deeplink\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1717d00, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b72faa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1717d00, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0176.991] GetProcessHeap () returned 0x12c0000 [0176.991] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.991] GetProcessHeap () returned 0x12c0000 [0176.991] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.991] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\es-es\\Windows\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd173df84, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b73624, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd173df84, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0176.992] GetProcessHeap () returned 0x12c0000 [0176.992] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.992] GetProcessHeap () returned 0x12c0000 [0176.992] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0176.992] GetProcessHeap () returned 0x12c0000 [0176.992] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0176.992] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\es-mx\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd173df84, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b73d44, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd173df84, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.992] GetProcessHeap () returned 0x12c0000 [0176.992] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.992] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\es-mx\\deeplink\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd173df84, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b74495, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd173df84, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0176.992] GetProcessHeap () returned 0x12c0000 [0176.992] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.992] GetProcessHeap () returned 0x12c0000 [0176.992] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.992] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\es-mx\\Windows\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd173df84, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b749df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd173df84, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0176.993] GetProcessHeap () returned 0x12c0000 [0176.993] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.993] GetProcessHeap () returned 0x12c0000 [0176.993] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0176.993] GetProcessHeap () returned 0x12c0000 [0176.993] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0176.993] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\et-ee\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd173df84, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b7522b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1764198, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0176.994] GetProcessHeap () returned 0x12c0000 [0176.994] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.994] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\et-ee\\deeplink\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd173df84, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b75a56, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd173df84, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.994] GetProcessHeap () returned 0x12c0000 [0176.994] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.994] GetProcessHeap () returned 0x12c0000 [0176.994] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.994] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\et-ee\\Windows\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1764198, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b75f90, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1764198, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.994] GetProcessHeap () returned 0x12c0000 [0176.994] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.994] GetProcessHeap () returned 0x12c0000 [0176.994] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0176.995] GetProcessHeap () returned 0x12c0000 [0176.995] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0176.996] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\eu-es\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1764198, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b765cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1764198, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0176.996] GetProcessHeap () returned 0x12c0000 [0176.996] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.997] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\eu-es\\deeplink\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1764198, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b76c22, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1764198, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.998] GetProcessHeap () returned 0x12c0000 [0176.998] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.998] GetProcessHeap () returned 0x12c0000 [0176.998] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.998] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\eu-es\\Windows\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1764198, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b77226, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1764198, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.998] GetProcessHeap () returned 0x12c0000 [0176.998] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.998] GetProcessHeap () returned 0x12c0000 [0176.998] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0176.998] GetProcessHeap () returned 0x12c0000 [0176.998] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0176.998] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\fa-IR\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1764198, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b77b4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1764198, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0176.998] GetProcessHeap () returned 0x12c0000 [0176.998] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.998] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\fa-IR\\deeplink\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1764198, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bc632d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1764198, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0176.999] GetProcessHeap () returned 0x12c0000 [0176.999] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0176.999] GetProcessHeap () returned 0x12c0000 [0176.999] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0176.999] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\fa-IR\\Windows\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1764198, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bc6cda, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd178a438, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0177.000] GetProcessHeap () returned 0x12c0000 [0177.000] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0177.000] GetProcessHeap () returned 0x12c0000 [0177.000] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0177.001] GetProcessHeap () returned 0x12c0000 [0177.001] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0177.001] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\fi-fi\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd178a438, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bc768e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd178a438, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0177.001] GetProcessHeap () returned 0x12c0000 [0177.001] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0177.002] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\fi-fi\\deeplink\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd178a438, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bc8033, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd178a438, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0177.003] GetProcessHeap () returned 0x12c0000 [0177.003] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0177.003] GetProcessHeap () returned 0x12c0000 [0177.003] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0177.003] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\fi-fi\\Windows\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd178a438, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bc8d4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd178a438, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0177.003] GetProcessHeap () returned 0x12c0000 [0177.003] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0177.003] GetProcessHeap () returned 0x12c0000 [0177.004] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0177.004] GetProcessHeap () returned 0x12c0000 [0177.004] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0177.004] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\fil-PH\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd178a438, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bc981d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd178a438, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0177.004] GetProcessHeap () returned 0x12c0000 [0177.004] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0177.004] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\fil-PH\\deeplink\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd178a438, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bca430, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd178a438, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0177.004] GetProcessHeap () returned 0x12c0000 [0177.004] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0177.004] GetProcessHeap () returned 0x12c0000 [0177.004] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0177.004] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\fil-PH\\Windows\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd178a438, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bcb11e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd178a438, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0177.005] GetProcessHeap () returned 0x12c0000 [0177.005] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0177.005] GetProcessHeap () returned 0x12c0000 [0177.005] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0177.005] GetProcessHeap () returned 0x12c0000 [0177.005] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0177.005] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\fr-ca\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17b0696, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bcb5a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17b0696, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0177.006] GetProcessHeap () returned 0x12c0000 [0177.006] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0177.006] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\fr-ca\\deeplink\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17b0696, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bcbb7a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17b0696, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0177.006] GetProcessHeap () returned 0x12c0000 [0177.006] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0177.006] GetProcessHeap () returned 0x12c0000 [0177.006] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0177.006] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\fr-ca\\Windows\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17b0696, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bcc04f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17b0696, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0177.006] GetProcessHeap () returned 0x12c0000 [0177.006] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0177.006] GetProcessHeap () returned 0x12c0000 [0177.006] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0177.007] GetProcessHeap () returned 0x12c0000 [0177.007] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0177.008] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\fr-fr\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17b0696, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bcc44b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17b0696, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0177.008] GetProcessHeap () returned 0x12c0000 [0177.008] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0177.009] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\fr-fr\\deeplink\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17b0696, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bcc9ea, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17b0696, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0177.016] GetProcessHeap () returned 0x12c0000 [0177.016] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0177.016] GetProcessHeap () returned 0x12c0000 [0177.016] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0177.016] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\fr-fr\\Windows\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17b0696, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bcce17, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17b0696, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0177.016] GetProcessHeap () returned 0x12c0000 [0177.016] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0177.016] GetProcessHeap () returned 0x12c0000 [0177.016] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0177.016] GetProcessHeap () returned 0x12c0000 [0177.016] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0177.016] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\gl-es\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17b0696, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bcd223, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17d68f4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0177.017] GetProcessHeap () returned 0x12c0000 [0177.017] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0177.017] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\gl-es\\deeplink\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17b0696, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bcd7e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17d68f4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0177.017] GetProcessHeap () returned 0x12c0000 [0177.018] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0177.018] GetProcessHeap () returned 0x12c0000 [0177.018] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0177.018] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\gl-es\\Windows\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17d68f4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bcdd23, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17d68f4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0177.018] GetProcessHeap () returned 0x12c0000 [0177.018] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0177.019] GetProcessHeap () returned 0x12c0000 [0177.019] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0177.019] GetProcessHeap () returned 0x12c0000 [0177.019] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0177.019] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ha-Latn-NG\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17d68f4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bce143, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17d68f4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0177.019] GetProcessHeap () returned 0x12c0000 [0177.019] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0177.019] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ha-Latn-NG\\deeplink\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17d68f4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bce7d8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17d68f4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0177.019] GetProcessHeap () returned 0x12c0000 [0177.019] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0177.019] GetProcessHeap () returned 0x12c0000 [0177.019] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0177.019] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ha-Latn-NG\\Windows\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17d68f4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bcec49, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17d68f4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0177.020] GetProcessHeap () returned 0x12c0000 [0177.020] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0177.020] GetProcessHeap () returned 0x12c0000 [0177.020] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0177.021] GetProcessHeap () returned 0x12c0000 [0177.021] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0177.021] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\he-IL\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17d68f4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bcf06e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17fcb09, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0177.022] GetProcessHeap () returned 0x12c0000 [0177.022] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0177.023] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\he-IL\\deeplink\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17d68f4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bcf5c5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17fcb09, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0177.023] GetProcessHeap () returned 0x12c0000 [0177.023] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0177.023] GetProcessHeap () returned 0x12c0000 [0177.023] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0177.023] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\he-IL\\Windows\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17fcb09, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bcf98d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17fcb09, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0177.024] GetProcessHeap () returned 0x12c0000 [0177.024] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0177.024] GetProcessHeap () returned 0x12c0000 [0177.024] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0177.025] GetProcessHeap () returned 0x12c0000 [0177.025] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0177.025] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\hi-in\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17fcb09, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bcfd54, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17fcb09, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0177.025] GetProcessHeap () returned 0x12c0000 [0177.025] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0177.026] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\hi-in\\deeplink\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17fcb09, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd0298, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17fcb09, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0177.027] GetProcessHeap () returned 0x12c0000 [0177.027] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0177.027] GetProcessHeap () returned 0x12c0000 [0177.027] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0177.027] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\hi-in\\resources\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17fcb09, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd0653, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17fcb09, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0177.027] GetProcessHeap () returned 0x12c0000 [0177.027] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0177.027] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\hi-in\\resources\\css\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17fcb09, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd0b90, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17fcb09, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0177.032] GetProcessHeap () returned 0x12c0000 [0177.032] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0177.032] GetProcessHeap () returned 0x12c0000 [0177.032] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0177.032] GetProcessHeap () returned 0x12c0000 [0177.032] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0177.032] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\hi-in\\Windows\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17fcb09, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd1000, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17fcb09, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0177.032] GetProcessHeap () returned 0x12c0000 [0177.032] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0177.032] GetProcessHeap () returned 0x12c0000 [0177.032] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0177.033] GetProcessHeap () returned 0x12c0000 [0177.034] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0177.034] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\hr-HR\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17fcb09, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd1485, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1822dad, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0177.035] GetProcessHeap () returned 0x12c0000 [0177.035] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0177.035] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\hr-HR\\deeplink\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17fcb09, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd195d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1822dad, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0177.036] GetProcessHeap () returned 0x12c0000 [0177.036] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0177.036] GetProcessHeap () returned 0x12c0000 [0177.036] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0177.036] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\hr-HR\\Windows\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1822dad, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd1d15, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1822dad, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0177.036] GetProcessHeap () returned 0x12c0000 [0177.036] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0177.036] GetProcessHeap () returned 0x12c0000 [0177.036] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0177.036] GetProcessHeap () returned 0x12c0000 [0177.036] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0177.036] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\hu-HU\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1822dad, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd21c9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1822dad, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0177.036] GetProcessHeap () returned 0x12c0000 [0177.036] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0177.037] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\hu-HU\\deeplink\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1822dad, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd271d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1822dad, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0177.037] GetProcessHeap () returned 0x12c0000 [0177.037] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0177.037] GetProcessHeap () returned 0x12c0000 [0177.037] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0177.037] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\hu-HU\\Windows\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1822dad, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd2b5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1822dad, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0177.038] GetProcessHeap () returned 0x12c0000 [0177.038] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0177.038] GetProcessHeap () returned 0x12c0000 [0177.038] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0177.038] GetProcessHeap () returned 0x12c0000 [0177.038] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0177.038] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\id-ID\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1822dad, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd2fa8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1848fd2, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0177.038] GetProcessHeap () returned 0x12c0000 [0177.038] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0177.038] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\id-ID\\deeplink\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1822dad, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd34f6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1848fd2, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0177.038] GetProcessHeap () returned 0x12c0000 [0177.038] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0177.038] GetProcessHeap () returned 0x12c0000 [0177.038] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0177.038] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\id-ID\\Windows\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1848fd2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd38c2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1848fd2, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0177.039] GetProcessHeap () returned 0x12c0000 [0177.039] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0177.039] GetProcessHeap () returned 0x12c0000 [0177.039] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0177.041] GetProcessHeap () returned 0x12c0000 [0177.041] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0177.041] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\is-is\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1848fd2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd3d56, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1848fd2, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0177.041] GetProcessHeap () returned 0x12c0000 [0177.041] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0177.042] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\is-is\\deeplink\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1848fd2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd42ff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1848fd2, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0177.042] GetProcessHeap () returned 0x12c0000 [0177.042] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0177.042] GetProcessHeap () returned 0x12c0000 [0177.042] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0177.042] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\is-is\\Windows\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1848fd2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd46d4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1848fd2, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0177.043] GetProcessHeap () returned 0x12c0000 [0177.043] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0177.043] GetProcessHeap () returned 0x12c0000 [0177.043] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0177.043] GetProcessHeap () returned 0x12c0000 [0177.043] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0177.043] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\it-it\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1848fd2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd4a8c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd186f25d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0177.043] GetProcessHeap () returned 0x12c0000 [0177.044] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0177.044] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\it-it\\deeplink\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1848fd2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd4fe2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd186f25d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0177.044] GetProcessHeap () returned 0x12c0000 [0177.044] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0177.044] GetProcessHeap () returned 0x12c0000 [0177.044] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0177.044] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\it-it\\Windows\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd186f25d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd53d6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd186f25d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0177.044] GetProcessHeap () returned 0x12c0000 [0177.044] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0177.044] GetProcessHeap () returned 0x12c0000 [0177.044] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0177.045] GetProcessHeap () returned 0x12c0000 [0177.045] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0177.046] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ja-jp\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd186f25d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd57a8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd186f25d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0177.046] GetProcessHeap () returned 0x12c0000 [0177.046] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0177.047] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ja-jp\\deeplink\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd186f25d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd5d75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd186f25d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0177.047] GetProcessHeap () returned 0x12c0000 [0177.047] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0177.048] GetProcessHeap () returned 0x12c0000 [0177.048] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0177.048] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ja-jp\\resources\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd186f25d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd6141, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd186f25d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0177.048] GetProcessHeap () returned 0x12c0000 [0177.048] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0177.048] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ja-jp\\resources\\css\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd186f25d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd6651, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd186f25d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0177.048] GetProcessHeap () returned 0x12c0000 [0177.048] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0177.048] GetProcessHeap () returned 0x12c0000 [0177.048] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0177.049] GetProcessHeap () returned 0x12c0000 [0177.049] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0177.049] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ja-jp\\Windows\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd186f25d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd6abe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd186f25d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0177.049] GetProcessHeap () returned 0x12c0000 [0177.049] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0177.049] GetProcessHeap () returned 0x12c0000 [0177.049] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0177.050] GetProcessHeap () returned 0x12c0000 [0177.050] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0177.050] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\kk-kz\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd186f25d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd6f76, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18954bb, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0177.053] GetProcessHeap () returned 0x12c0000 [0177.053] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0177.054] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\kk-kz\\deeplink\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd186f25d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd7454, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18954bb, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0177.054] GetProcessHeap () returned 0x12c0000 [0177.054] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0177.054] GetProcessHeap () returned 0x12c0000 [0177.054] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0177.054] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\kk-kz\\Windows\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18954bb, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd78b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18954bb, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0177.055] GetProcessHeap () returned 0x12c0000 [0177.055] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0177.055] GetProcessHeap () returned 0x12c0000 [0177.055] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0177.056] GetProcessHeap () returned 0x12c0000 [0177.056] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0177.056] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\km-KH\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18954bb, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd7d0e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18954bb, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0177.056] GetProcessHeap () returned 0x12c0000 [0177.056] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0177.057] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\km-KH\\deeplink\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18954bb, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd8256, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18954bb, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0177.060] GetProcessHeap () returned 0x12c0000 [0177.060] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0177.060] GetProcessHeap () returned 0x12c0000 [0177.060] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0177.060] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\km-KH\\resources\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18954bb, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd8622, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18954bb, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0177.060] GetProcessHeap () returned 0x12c0000 [0177.060] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0177.060] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\km-KH\\resources\\css\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18954bb, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd8b2b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18954bb, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0177.060] GetProcessHeap () returned 0x12c0000 [0177.060] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0177.060] GetProcessHeap () returned 0x12c0000 [0177.060] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0177.061] GetProcessHeap () returned 0x12c0000 [0177.061] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0177.061] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\km-KH\\Windows\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18954bb, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd903b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18954bb, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0177.061] GetProcessHeap () returned 0x12c0000 [0177.061] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0177.061] GetProcessHeap () returned 0x12c0000 [0177.061] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0177.062] GetProcessHeap () returned 0x12c0000 [0177.062] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0177.062] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\kn-in\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18954bb, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd94c8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18bb71d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0177.063] GetProcessHeap () returned 0x12c0000 [0177.063] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0177.066] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\kn-in\\deeplink\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18954bb, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd99f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18bb71d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0177.069] GetProcessHeap () returned 0x12c0000 [0177.069] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0177.069] GetProcessHeap () returned 0x12c0000 [0177.069] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0177.069] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\kn-in\\resources\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18bb71d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd9dad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18bb71d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0177.069] GetProcessHeap () returned 0x12c0000 [0177.069] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0177.069] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\kn-in\\resources\\css\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18bb71d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bda31e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18bb71d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0177.069] GetProcessHeap () returned 0x12c0000 [0177.069] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d130b8 | out: hHeap=0x12c0000) returned 1 [0177.070] GetProcessHeap () returned 0x12c0000 [0177.070] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0177.070] GetProcessHeap () returned 0x12c0000 [0177.070] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0177.070] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\kn-in\\Windows\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18bb71d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bda7e6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18bb71d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0177.074] GetProcessHeap () returned 0x12c0000 [0177.074] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0177.074] GetProcessHeap () returned 0x12c0000 [0177.074] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x130e050 | out: hHeap=0x12c0000) returned 1 [0177.075] GetProcessHeap () returned 0x12c0000 [0177.075] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x130e050 [0177.075] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ko-kr\\*", lpFindFileData=0x350ecd0 | out: lpFindFileData=0x350ecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18bb71d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bdac7b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18e1926, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d93c8 [0177.075] GetProcessHeap () returned 0x12c0000 [0177.076] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0177.076] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ko-kr\\deeplink\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18bb71d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bdb185, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18bb71d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0177.077] GetProcessHeap () returned 0x12c0000 [0177.077] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d030b0 | out: hHeap=0x12c0000) returned 1 [0177.077] GetProcessHeap () returned 0x12c0000 [0177.077] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d030b0 [0177.077] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ko-kr\\resources\\*", lpFindFileData=0x350ea40 | out: lpFindFileData=0x350ea40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18bb71d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bdb54a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18bb71d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9908 [0177.077] GetProcessHeap () returned 0x12c0000 [0177.077] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3d130b8 [0177.077] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ko-kr\\resources\\css\\*", lpFindFileData=0x350e7b0 | out: lpFindFileData=0x350e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18bb71d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bdbc73, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18bb71d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12d9308 [0195.782] GetProcessHeap () returned 0x12c0000 [0195.782] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x4012088 [0195.783] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\*", lpFindFileData=0x350e000 | out: lpFindFileData=0x350e000*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x8addc228, ftCreationTime.dwHighDateTime=0x1d32716, ftLastAccessTime.dwLowDateTime=0xdaf50849, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xdaf50849, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4059048 [0206.595] GetProcessHeap () returned 0x12c0000 [0206.599] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x50) returned 0x4059210 [0206.600] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x74c00000 [0206.601] GetProcAddress (hModule=0x74c00000, lpProcName="Wow64RevertWow64FsRedirection") returned 0x74c16b50 [0206.601] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0206.607] CloseHandle (hObject=0x29c) returned 1 [0206.608] CloseHandle (hObject=0x2a0) returned 1 [0206.608] CloseHandle (hObject=0x2a4) returned 1 [0206.608] GetProcessHeap () returned 0x12c0000 [0206.608] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x132f948 | out: hHeap=0x12c0000) returned 1 [0206.613] GetProcessHeap () returned 0x12c0000 [0206.613] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d8af0 | out: hHeap=0x12c0000) returned 1 [0206.613] GetProcessHeap () returned 0x12c0000 [0206.613] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d9608 | out: hHeap=0x12c0000) returned 1 [0206.613] GetProcessHeap () returned 0x12c0000 [0206.613] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d1228 | out: hHeap=0x12c0000) returned 1 [0206.613] GetProcessHeap () returned 0x12c0000 [0206.613] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12e78b0 | out: hHeap=0x12c0000) returned 1 [0206.613] GetProcessHeap () returned 0x12c0000 [0206.613] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d8b30 | out: hHeap=0x12c0000) returned 1 Thread: id = 108 os_tid = 0x5cc [0161.318] GetProcessHeap () returned 0x12c0000 [0161.318] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1372258 [0161.318] GetProcessHeap () returned 0x12c0000 [0161.318] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1382260 [0161.318] GetProcessHeap () returned 0x12c0000 [0161.318] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x28) returned 0x12d6bc0 [0161.318] GetProcessHeap () returned 0x12c0000 [0161.318] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x110102) returned 0x3a11020 [0161.322] GetProcessHeap () returned 0x12c0000 [0161.322] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x50) returned 0x12d1a68 [0161.322] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x74c00000 [0161.322] GetProcAddress (hModule=0x74c00000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x74c16b30 [0161.322] Wow64DisableWow64FsRedirection (in: OldValue=0x364fb08 | out: OldValue=0x364fb08*=0x0) returned 1 [0161.322] GetProcessHeap () returned 0x12c0000 [0161.322] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d1a68 | out: hHeap=0x12c0000) returned 1 [0161.322] CreateFileW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8 [0161.322] GetFileSizeEx (in: hFile=0x2b8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=129) returned 1 [0161.323] CloseHandle (hObject=0x2b8) returned 1 [0161.323] GetFileAttributesW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini")) returned 0x26 [0161.323] GetFileAttributesW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini")) returned 0x26 [0161.323] GetFileAttributesW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0x26 [0161.323] ResetEvent (hEvent=0x280) returned 1 [0161.323] SetEvent (hEvent=0x284) returned 1 [0161.323] CreateFileW (lpFileName="\\\\?\\C:\\$WINRE_BACKUP_PARTITION.MARKER" (normalized: "c:\\$winre_backup_partition.marker"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8 [0161.326] GetFileSizeEx (in: hFile=0x2b8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=0) returned 1 [0161.326] CloseHandle (hObject=0x2b8) returned 1 [0161.326] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.583] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\bootvhd.dll" (normalized: "c:\\boot\\bootvhd.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.583] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=99744) returned 1 [0161.583] CloseHandle (hObject=0x2c4) returned 1 [0161.584] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\bootvhd.dll" (normalized: "c:\\boot\\bootvhd.dll")) returned 0x20 [0161.584] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\bootvhd.dll" (normalized: "c:\\boot\\bootvhd.dll")) returned 0x20 [0161.584] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\bootvhd.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\bootvhd.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.584] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\bootvhd.dll" (normalized: "c:\\boot\\bootvhd.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.584] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.584] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=76632) returned 1 [0161.584] CloseHandle (hObject=0x2c4) returned 1 [0161.584] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui")) returned 0x20 [0161.584] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui")) returned 0x20 [0161.584] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.585] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.585] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\memtest.exe.mui" (normalized: "c:\\boot\\cs-cz\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.585] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=45472) returned 1 [0161.585] CloseHandle (hObject=0x2c4) returned 1 [0161.585] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\memtest.exe.mui" (normalized: "c:\\boot\\cs-cz\\memtest.exe.mui")) returned 0x20 [0161.585] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\memtest.exe.mui" (normalized: "c:\\boot\\cs-cz\\memtest.exe.mui")) returned 0x20 [0161.585] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\memtest.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\cs-cz\\memtest.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.585] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\memtest.exe.mui" (normalized: "c:\\boot\\cs-cz\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.585] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.586] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=75616) returned 1 [0161.586] CloseHandle (hObject=0x2c4) returned 1 [0161.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui")) returned 0x20 [0161.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui")) returned 0x20 [0161.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.586] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.586] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\memtest.exe.mui" (normalized: "c:\\boot\\da-dk\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.589] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=45472) returned 1 [0161.589] CloseHandle (hObject=0x2c4) returned 1 [0161.589] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\memtest.exe.mui" (normalized: "c:\\boot\\da-dk\\memtest.exe.mui")) returned 0x20 [0161.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\memtest.exe.mui" (normalized: "c:\\boot\\da-dk\\memtest.exe.mui")) returned 0x20 [0161.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\memtest.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\da-dk\\memtest.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.590] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\memtest.exe.mui" (normalized: "c:\\boot\\da-dk\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.590] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.590] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=79200) returned 1 [0161.590] CloseHandle (hObject=0x2c4) returned 1 [0161.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui")) returned 0x20 [0161.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui")) returned 0x20 [0161.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.590] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.591] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\memtest.exe.mui" (normalized: "c:\\boot\\de-de\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.591] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=45984) returned 1 [0161.591] CloseHandle (hObject=0x2c4) returned 1 [0161.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\memtest.exe.mui" (normalized: "c:\\boot\\de-de\\memtest.exe.mui")) returned 0x20 [0161.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\memtest.exe.mui" (normalized: "c:\\boot\\de-de\\memtest.exe.mui")) returned 0x20 [0161.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\memtest.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\de-de\\memtest.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.591] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\memtest.exe.mui" (normalized: "c:\\boot\\de-de\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.591] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.591] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=80224) returned 1 [0161.591] CloseHandle (hObject=0x2c4) returned 1 [0161.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui")) returned 0x20 [0161.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui")) returned 0x20 [0161.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.592] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.592] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\memtest.exe.mui" (normalized: "c:\\boot\\el-gr\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.592] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=46496) returned 1 [0161.592] CloseHandle (hObject=0x2c4) returned 1 [0161.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\memtest.exe.mui" (normalized: "c:\\boot\\el-gr\\memtest.exe.mui")) returned 0x20 [0161.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\memtest.exe.mui" (normalized: "c:\\boot\\el-gr\\memtest.exe.mui")) returned 0x20 [0161.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\memtest.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\el-gr\\memtest.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.592] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\memtest.exe.mui" (normalized: "c:\\boot\\el-gr\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.593] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\en-GB\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-gb\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.593] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=74072) returned 1 [0161.593] CloseHandle (hObject=0x2c4) returned 1 [0161.593] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-GB\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-gb\\bootmgr.exe.mui")) returned 0x20 [0161.593] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-GB\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-gb\\bootmgr.exe.mui")) returned 0x20 [0161.593] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-GB\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\en-gb\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.593] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\en-GB\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-gb\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.593] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.593] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=74144) returned 1 [0161.593] CloseHandle (hObject=0x2c4) returned 1 [0161.593] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui")) returned 0x20 [0161.594] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui")) returned 0x20 [0161.594] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.594] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.594] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.594] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=44960) returned 1 [0161.594] CloseHandle (hObject=0x2c4) returned 1 [0161.594] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui")) returned 0x20 [0161.594] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui")) returned 0x20 [0161.594] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\en-us\\memtest.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.594] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.595] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.595] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=77664) returned 1 [0161.595] CloseHandle (hObject=0x2c4) returned 1 [0161.595] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui")) returned 0x20 [0161.595] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui")) returned 0x20 [0161.595] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.595] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.595] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\memtest.exe.mui" (normalized: "c:\\boot\\es-es\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.595] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=45984) returned 1 [0161.595] CloseHandle (hObject=0x2c4) returned 1 [0161.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\memtest.exe.mui" (normalized: "c:\\boot\\es-es\\memtest.exe.mui")) returned 0x20 [0161.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\memtest.exe.mui" (normalized: "c:\\boot\\es-es\\memtest.exe.mui")) returned 0x20 [0161.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\memtest.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\es-es\\memtest.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.596] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\memtest.exe.mui" (normalized: "c:\\boot\\es-es\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.596] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\es-MX\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-mx\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.596] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=77664) returned 1 [0161.596] CloseHandle (hObject=0x2c4) returned 1 [0161.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-MX\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-mx\\bootmgr.exe.mui")) returned 0x20 [0161.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-MX\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-mx\\bootmgr.exe.mui")) returned 0x20 [0161.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-MX\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\es-mx\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.596] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\es-MX\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-mx\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.597] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\et-EE\\bootmgr.exe.mui" (normalized: "c:\\boot\\et-ee\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.597] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=75104) returned 1 [0161.597] CloseHandle (hObject=0x2c4) returned 1 [0161.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\et-EE\\bootmgr.exe.mui" (normalized: "c:\\boot\\et-ee\\bootmgr.exe.mui")) returned 0x20 [0161.599] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\et-EE\\bootmgr.exe.mui" (normalized: "c:\\boot\\et-ee\\bootmgr.exe.mui")) returned 0x20 [0161.599] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\et-EE\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\et-ee\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.599] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\et-EE\\bootmgr.exe.mui" (normalized: "c:\\boot\\et-ee\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.599] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.599] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=76640) returned 1 [0161.599] CloseHandle (hObject=0x2c4) returned 1 [0161.599] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui")) returned 0x20 [0161.599] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui")) returned 0x20 [0161.599] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.599] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.599] ResetEvent (hEvent=0x280) returned 1 [0161.600] SetEvent (hEvent=0x284) returned 1 [0161.600] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\memtest.exe.mui" (normalized: "c:\\boot\\fi-fi\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.600] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=45472) returned 1 [0161.600] CloseHandle (hObject=0x2c4) returned 1 [0161.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\memtest.exe.mui" (normalized: "c:\\boot\\fi-fi\\memtest.exe.mui")) returned 0x20 [0161.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\memtest.exe.mui" (normalized: "c:\\boot\\fi-fi\\memtest.exe.mui")) returned 0x20 [0161.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\memtest.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\fi-fi\\memtest.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.600] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\memtest.exe.mui" (normalized: "c:\\boot\\fi-fi\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.600] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.853] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.853] ResetEvent (hEvent=0x280) returned 1 [0161.853] SetEvent (hEvent=0x284) returned 1 [0161.853] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.854] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3878410) returned 1 [0161.854] CloseHandle (hObject=0x2c4) returned 1 [0161.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf")) returned 0x20 [0161.854] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\fonts\\cht_boot.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0 [0161.855] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\fonts\\cht_boot.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf")) returned 0 [0161.855] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.858] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.858] ResetEvent (hEvent=0x280) returned 1 [0161.858] SetEvent (hEvent=0x284) returned 1 [0161.858] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.859] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2373000) returned 1 [0161.859] CloseHandle (hObject=0x2c4) returned 1 [0161.859] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf")) returned 0x20 [0161.859] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\fonts\\kor_boot.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0 [0161.859] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\fonts\\kor_boot.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf")) returned 0 [0161.859] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.862] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.862] ResetEvent (hEvent=0x280) returned 1 [0161.862] SetEvent (hEvent=0x284) returned 1 [0161.862] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\malgun_boot.ttf" (normalized: "c:\\boot\\fonts\\malgun_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.863] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=177414) returned 1 [0161.863] CloseHandle (hObject=0x2c4) returned 1 [0161.863] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\malgun_boot.ttf" (normalized: "c:\\boot\\fonts\\malgun_boot.ttf")) returned 0x20 [0161.863] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\malgun_boot.ttf" (normalized: "c:\\boot\\fonts\\malgun_boot.ttf")) returned 0x20 [0161.863] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\malgun_boot.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\fonts\\malgun_boot.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.863] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\malgun_boot.ttf" (normalized: "c:\\boot\\fonts\\malgun_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.863] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.865] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.866] ResetEvent (hEvent=0x280) returned 1 [0161.866] SetEvent (hEvent=0x284) returned 1 [0161.866] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\meiryo_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryo_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.867] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=145419) returned 1 [0161.867] CloseHandle (hObject=0x2c4) returned 1 [0161.867] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\meiryo_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryo_boot.ttf")) returned 0x20 [0161.867] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\meiryo_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryo_boot.ttf")) returned 0x20 [0161.867] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\meiryo_boot.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\fonts\\meiryo_boot.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.867] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\meiryo_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryo_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.867] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.868] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.869] ResetEvent (hEvent=0x280) returned 1 [0161.869] SetEvent (hEvent=0x284) returned 1 [0161.869] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msjh_boot.ttf" (normalized: "c:\\boot\\fonts\\msjh_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.869] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=164347) returned 1 [0161.869] CloseHandle (hObject=0x2c4) returned 1 [0161.869] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msjh_boot.ttf" (normalized: "c:\\boot\\fonts\\msjh_boot.ttf")) returned 0x20 [0161.869] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msjh_boot.ttf" (normalized: "c:\\boot\\fonts\\msjh_boot.ttf")) returned 0x20 [0161.869] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msjh_boot.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\fonts\\msjh_boot.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.869] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msjh_boot.ttf" (normalized: "c:\\boot\\fonts\\msjh_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.870] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.871] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.871] ResetEvent (hEvent=0x280) returned 1 [0161.871] SetEvent (hEvent=0x284) returned 1 [0161.871] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msyh_boot.ttf" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.872] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=156245) returned 1 [0161.872] CloseHandle (hObject=0x2c4) returned 1 [0161.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msyh_boot.ttf" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf")) returned 0x20 [0161.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msyh_boot.ttf" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf")) returned 0x20 [0161.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msyh_boot.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.872] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msyh_boot.ttf" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.872] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.873] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.874] ResetEvent (hEvent=0x280) returned 1 [0161.874] SetEvent (hEvent=0x284) returned 1 [0161.874] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segoen_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoen_slboot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.874] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=85862) returned 1 [0161.874] CloseHandle (hObject=0x2c4) returned 1 [0161.874] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segoen_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoen_slboot.ttf")) returned 0x20 [0161.874] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segoen_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoen_slboot.ttf")) returned 0x20 [0161.874] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segoen_slboot.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\fonts\\segoen_slboot.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.874] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segoen_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoen_slboot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.875] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.876] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.876] ResetEvent (hEvent=0x280) returned 1 [0161.876] SetEvent (hEvent=0x284) returned 1 [0161.876] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.877] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=49091) returned 1 [0161.877] CloseHandle (hObject=0x2c4) returned 1 [0161.877] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf")) returned 0x20 [0161.877] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf")) returned 0x20 [0161.877] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.877] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.877] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.879] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.879] ResetEvent (hEvent=0x280) returned 1 [0161.879] SetEvent (hEvent=0x284) returned 1 [0161.879] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.880] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=79192) returned 1 [0161.880] CloseHandle (hObject=0x2c4) returned 1 [0161.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui")) returned 0x20 [0161.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui")) returned 0x20 [0161.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.880] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.880] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.881] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.882] ResetEvent (hEvent=0x280) returned 1 [0161.882] SetEvent (hEvent=0x284) returned 1 [0161.882] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\hr-HR\\bootmgr.exe.mui" (normalized: "c:\\boot\\hr-hr\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.883] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=76640) returned 1 [0161.883] CloseHandle (hObject=0x2c4) returned 1 [0161.883] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hr-HR\\bootmgr.exe.mui" (normalized: "c:\\boot\\hr-hr\\bootmgr.exe.mui")) returned 0x20 [0161.883] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hr-HR\\bootmgr.exe.mui" (normalized: "c:\\boot\\hr-hr\\bootmgr.exe.mui")) returned 0x20 [0161.883] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hr-HR\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\hr-hr\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.883] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\hr-HR\\bootmgr.exe.mui" (normalized: "c:\\boot\\hr-hr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.883] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.885] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.885] ResetEvent (hEvent=0x280) returned 1 [0161.885] SetEvent (hEvent=0x284) returned 1 [0161.885] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\memtest.exe.mui" (normalized: "c:\\boot\\hu-hu\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.885] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=45976) returned 1 [0161.885] CloseHandle (hObject=0x2c4) returned 1 [0161.885] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\memtest.exe.mui" (normalized: "c:\\boot\\hu-hu\\memtest.exe.mui")) returned 0x20 [0161.886] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\memtest.exe.mui" (normalized: "c:\\boot\\hu-hu\\memtest.exe.mui")) returned 0x20 [0161.886] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\memtest.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\hu-hu\\memtest.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.886] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\memtest.exe.mui" (normalized: "c:\\boot\\hu-hu\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.886] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.887] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.888] ResetEvent (hEvent=0x280) returned 1 [0161.888] SetEvent (hEvent=0x284) returned 1 [0161.888] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\memtest.exe.mui" (normalized: "c:\\boot\\it-it\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.888] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=45472) returned 1 [0161.888] CloseHandle (hObject=0x2c4) returned 1 [0161.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\memtest.exe.mui" (normalized: "c:\\boot\\it-it\\memtest.exe.mui")) returned 0x20 [0161.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\memtest.exe.mui" (normalized: "c:\\boot\\it-it\\memtest.exe.mui")) returned 0x20 [0161.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\memtest.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\it-it\\memtest.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.888] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\memtest.exe.mui" (normalized: "c:\\boot\\it-it\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.889] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.890] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.890] ResetEvent (hEvent=0x280) returned 1 [0161.891] SetEvent (hEvent=0x284) returned 1 [0161.891] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\memtest.exe.mui" (normalized: "c:\\boot\\ja-jp\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.891] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=42904) returned 1 [0161.891] CloseHandle (hObject=0x2c4) returned 1 [0161.891] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\memtest.exe.mui" (normalized: "c:\\boot\\ja-jp\\memtest.exe.mui")) returned 0x20 [0161.891] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\memtest.exe.mui" (normalized: "c:\\boot\\ja-jp\\memtest.exe.mui")) returned 0x20 [0161.891] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\memtest.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\ja-jp\\memtest.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.891] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\memtest.exe.mui" (normalized: "c:\\boot\\ja-jp\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.891] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.893] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.893] ResetEvent (hEvent=0x280) returned 1 [0161.893] SetEvent (hEvent=0x284) returned 1 [0161.893] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\memtest.exe.mui" (normalized: "c:\\boot\\ko-kr\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.894] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=42912) returned 1 [0161.894] CloseHandle (hObject=0x2c4) returned 1 [0161.894] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\memtest.exe.mui" (normalized: "c:\\boot\\ko-kr\\memtest.exe.mui")) returned 0x20 [0161.894] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\memtest.exe.mui" (normalized: "c:\\boot\\ko-kr\\memtest.exe.mui")) returned 0x20 [0161.894] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\memtest.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\ko-kr\\memtest.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.894] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\memtest.exe.mui" (normalized: "c:\\boot\\ko-kr\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.894] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.896] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.896] ResetEvent (hEvent=0x280) returned 1 [0161.896] SetEvent (hEvent=0x284) returned 1 [0161.896] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\lv-LV\\bootmgr.exe.mui" (normalized: "c:\\boot\\lv-lv\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.897] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=75608) returned 1 [0161.897] CloseHandle (hObject=0x2c4) returned 1 [0161.897] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\lv-LV\\bootmgr.exe.mui" (normalized: "c:\\boot\\lv-lv\\bootmgr.exe.mui")) returned 0x20 [0161.897] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\lv-LV\\bootmgr.exe.mui" (normalized: "c:\\boot\\lv-lv\\bootmgr.exe.mui")) returned 0x20 [0161.897] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\lv-LV\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\lv-lv\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.897] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\lv-LV\\bootmgr.exe.mui" (normalized: "c:\\boot\\lv-lv\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.897] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.900] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.901] ResetEvent (hEvent=0x280) returned 1 [0161.901] SetEvent (hEvent=0x284) returned 1 [0161.901] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.901] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=75616) returned 1 [0161.901] CloseHandle (hObject=0x2c4) returned 1 [0161.901] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui")) returned 0x20 [0161.901] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui")) returned 0x20 [0161.901] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.901] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.902] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.903] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.903] ResetEvent (hEvent=0x280) returned 1 [0161.903] SetEvent (hEvent=0x284) returned 1 [0161.904] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.904] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=78176) returned 1 [0161.904] CloseHandle (hObject=0x2c4) returned 1 [0161.904] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui")) returned 0x20 [0161.904] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui")) returned 0x20 [0161.904] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.904] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.904] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.906] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.906] ResetEvent (hEvent=0x280) returned 1 [0161.906] SetEvent (hEvent=0x284) returned 1 [0161.906] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.907] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=77656) returned 1 [0161.907] CloseHandle (hObject=0x2c4) returned 1 [0161.907] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui")) returned 0x20 [0161.907] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui")) returned 0x20 [0161.907] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.907] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.907] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.908] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.909] ResetEvent (hEvent=0x280) returned 1 [0161.909] SetEvent (hEvent=0x284) returned 1 [0161.909] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.909] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=76640) returned 1 [0161.909] CloseHandle (hObject=0x2c4) returned 1 [0161.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui")) returned 0x20 [0161.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui")) returned 0x20 [0161.910] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.910] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.910] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.911] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.914] ResetEvent (hEvent=0x280) returned 1 [0161.914] SetEvent (hEvent=0x284) returned 1 [0161.915] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.915] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=76640) returned 1 [0161.915] CloseHandle (hObject=0x2c4) returned 1 [0161.915] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui")) returned 0x20 [0161.915] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui")) returned 0x20 [0161.915] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.915] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.915] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.917] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.917] ResetEvent (hEvent=0x280) returned 1 [0161.917] SetEvent (hEvent=0x284) returned 1 [0161.917] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\bootmgr.exe.mui" (normalized: "c:\\boot\\qps-ploc\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.918] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=74080) returned 1 [0161.918] CloseHandle (hObject=0x2c4) returned 1 [0161.918] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\bootmgr.exe.mui" (normalized: "c:\\boot\\qps-ploc\\bootmgr.exe.mui")) returned 0x20 [0161.918] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\bootmgr.exe.mui" (normalized: "c:\\boot\\qps-ploc\\bootmgr.exe.mui")) returned 0x20 [0161.918] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\qps-ploc\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.918] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\bootmgr.exe.mui" (normalized: "c:\\boot\\qps-ploc\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.918] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.919] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.920] ResetEvent (hEvent=0x280) returned 1 [0161.920] SetEvent (hEvent=0x284) returned 1 [0161.920] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Resources\\bootres.dll" (normalized: "c:\\boot\\resources\\bootres.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.920] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=92576) returned 1 [0161.920] CloseHandle (hObject=0x2c4) returned 1 [0161.920] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Resources\\bootres.dll" (normalized: "c:\\boot\\resources\\bootres.dll")) returned 0x20 [0161.920] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Resources\\bootres.dll" (normalized: "c:\\boot\\resources\\bootres.dll")) returned 0x20 [0161.921] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Resources\\bootres.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\resources\\bootres.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.921] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Resources\\bootres.dll" (normalized: "c:\\boot\\resources\\bootres.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.921] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.922] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.924] ResetEvent (hEvent=0x280) returned 1 [0161.924] SetEvent (hEvent=0x284) returned 1 [0161.925] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ro-RO\\bootmgr.exe.mui" (normalized: "c:\\boot\\ro-ro\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.925] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=76128) returned 1 [0161.925] CloseHandle (hObject=0x2c4) returned 1 [0161.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ro-RO\\bootmgr.exe.mui" (normalized: "c:\\boot\\ro-ro\\bootmgr.exe.mui")) returned 0x20 [0161.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ro-RO\\bootmgr.exe.mui" (normalized: "c:\\boot\\ro-ro\\bootmgr.exe.mui")) returned 0x20 [0161.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ro-RO\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\ro-ro\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.925] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ro-RO\\bootmgr.exe.mui" (normalized: "c:\\boot\\ro-ro\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.925] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.927] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.927] ResetEvent (hEvent=0x280) returned 1 [0161.927] SetEvent (hEvent=0x284) returned 1 [0161.927] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\memtest.exe.mui" (normalized: "c:\\boot\\ru-ru\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.928] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=44960) returned 1 [0161.928] CloseHandle (hObject=0x2c4) returned 1 [0161.928] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\memtest.exe.mui" (normalized: "c:\\boot\\ru-ru\\memtest.exe.mui")) returned 0x20 [0161.928] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\memtest.exe.mui" (normalized: "c:\\boot\\ru-ru\\memtest.exe.mui")) returned 0x20 [0161.928] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\memtest.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\ru-ru\\memtest.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.928] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\memtest.exe.mui" (normalized: "c:\\boot\\ru-ru\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.928] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.929] ResetEvent (hEvent=0x280) returned 1 [0161.929] SetEvent (hEvent=0x284) returned 1 [0161.929] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sk-SK\\bootmgr.exe.mui" (normalized: "c:\\boot\\sk-sk\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.929] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=77144) returned 1 [0161.929] CloseHandle (hObject=0x2c4) returned 1 [0161.929] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sk-SK\\bootmgr.exe.mui" (normalized: "c:\\boot\\sk-sk\\bootmgr.exe.mui")) returned 0x20 [0161.929] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sk-SK\\bootmgr.exe.mui" (normalized: "c:\\boot\\sk-sk\\bootmgr.exe.mui")) returned 0x20 [0161.929] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sk-SK\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\sk-sk\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.930] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sk-SK\\bootmgr.exe.mui" (normalized: "c:\\boot\\sk-sk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.930] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.930] ResetEvent (hEvent=0x280) returned 1 [0161.930] SetEvent (hEvent=0x284) returned 1 [0161.930] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sl-SI\\bootmgr.exe.mui" (normalized: "c:\\boot\\sl-si\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.930] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=76640) returned 1 [0161.931] CloseHandle (hObject=0x2c4) returned 1 [0161.931] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sl-SI\\bootmgr.exe.mui" (normalized: "c:\\boot\\sl-si\\bootmgr.exe.mui")) returned 0x20 [0161.931] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sl-SI\\bootmgr.exe.mui" (normalized: "c:\\boot\\sl-si\\bootmgr.exe.mui")) returned 0x20 [0161.931] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sl-SI\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\sl-si\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.931] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sl-SI\\bootmgr.exe.mui" (normalized: "c:\\boot\\sl-si\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.931] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.931] ResetEvent (hEvent=0x280) returned 1 [0161.931] SetEvent (hEvent=0x284) returned 1 [0161.932] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.932] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=77152) returned 1 [0161.932] CloseHandle (hObject=0x2c4) returned 1 [0161.932] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\bootmgr.exe.mui")) returned 0x20 [0161.932] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\bootmgr.exe.mui")) returned 0x20 [0161.932] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\sr-latn-cs\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.932] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.932] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0162.154] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-RS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-rs\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0162.190] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=77152) returned 1 [0162.190] CloseHandle (hObject=0x2c8) returned 1 [0162.190] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-RS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-rs\\bootmgr.exe.mui")) returned 0x20 [0162.190] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-RS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-rs\\bootmgr.exe.mui")) returned 0x20 [0162.190] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-RS\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\sr-latn-rs\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0162.190] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-RS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-rs\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0162.190] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0162.190] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=76128) returned 1 [0162.191] CloseHandle (hObject=0x2c8) returned 1 [0162.191] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui")) returned 0x20 [0162.191] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui")) returned 0x20 [0162.191] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0162.191] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0162.191] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\memtest.exe.mui" (normalized: "c:\\boot\\sv-se\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0162.191] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=44952) returned 1 [0162.191] CloseHandle (hObject=0x2c8) returned 1 [0162.191] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\memtest.exe.mui" (normalized: "c:\\boot\\sv-se\\memtest.exe.mui")) returned 0x20 [0162.191] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\memtest.exe.mui" (normalized: "c:\\boot\\sv-se\\memtest.exe.mui")) returned 0x20 [0162.191] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\memtest.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\sv-se\\memtest.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0162.192] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\memtest.exe.mui" (normalized: "c:\\boot\\sv-se\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0162.192] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0162.192] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=75096) returned 1 [0162.192] CloseHandle (hObject=0x2c8) returned 1 [0162.192] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui")) returned 0x20 [0162.192] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui")) returned 0x20 [0162.192] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0162.192] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0162.192] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\memtest.exe.mui" (normalized: "c:\\boot\\tr-tr\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0162.193] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=45472) returned 1 [0162.193] CloseHandle (hObject=0x2c8) returned 1 [0162.193] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\memtest.exe.mui" (normalized: "c:\\boot\\tr-tr\\memtest.exe.mui")) returned 0x20 [0162.193] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\memtest.exe.mui" (normalized: "c:\\boot\\tr-tr\\memtest.exe.mui")) returned 0x20 [0162.193] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\memtest.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\tr-tr\\memtest.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0162.193] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\memtest.exe.mui" (normalized: "c:\\boot\\tr-tr\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0162.193] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\uk-UA\\bootmgr.exe.mui" (normalized: "c:\\boot\\uk-ua\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0162.193] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=77152) returned 1 [0162.193] CloseHandle (hObject=0x2c8) returned 1 [0162.193] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\uk-UA\\bootmgr.exe.mui" (normalized: "c:\\boot\\uk-ua\\bootmgr.exe.mui")) returned 0x20 [0162.193] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\uk-UA\\bootmgr.exe.mui" (normalized: "c:\\boot\\uk-ua\\bootmgr.exe.mui")) returned 0x20 [0162.194] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\uk-UA\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\uk-ua\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0162.194] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\uk-UA\\bootmgr.exe.mui" (normalized: "c:\\boot\\uk-ua\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0162.194] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\updaterevokesipolicy.p7b" (normalized: "c:\\boot\\updaterevokesipolicy.p7b"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0162.194] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=4662) returned 1 [0162.194] CloseHandle (hObject=0x2c8) returned 1 [0162.194] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\updaterevokesipolicy.p7b" (normalized: "c:\\boot\\updaterevokesipolicy.p7b")) returned 0x20 [0162.194] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\updaterevokesipolicy.p7b" (normalized: "c:\\boot\\updaterevokesipolicy.p7b")) returned 0x20 [0162.194] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\updaterevokesipolicy.p7b.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\updaterevokesipolicy.p7b.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0162.194] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\updaterevokesipolicy.p7b" (normalized: "c:\\boot\\updaterevokesipolicy.p7b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0162.195] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0162.195] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=63840) returned 1 [0162.195] CloseHandle (hObject=0x2c8) returned 1 [0162.195] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui")) returned 0x20 [0162.195] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui")) returned 0x20 [0162.195] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0162.195] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0162.195] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\memtest.exe.mui" (normalized: "c:\\boot\\zh-cn\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0162.196] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=42400) returned 1 [0162.196] CloseHandle (hObject=0x2c8) returned 1 [0162.196] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\memtest.exe.mui" (normalized: "c:\\boot\\zh-cn\\memtest.exe.mui")) returned 0x20 [0162.196] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\memtest.exe.mui" (normalized: "c:\\boot\\zh-cn\\memtest.exe.mui")) returned 0x20 [0162.196] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\memtest.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\zh-cn\\memtest.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0162.196] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\memtest.exe.mui" (normalized: "c:\\boot\\zh-cn\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0162.196] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0162.196] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=63832) returned 1 [0162.196] CloseHandle (hObject=0x2c8) returned 1 [0162.198] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui")) returned 0x20 [0162.198] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui")) returned 0x20 [0162.198] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0162.198] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0162.198] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\memtest.exe.mui" (normalized: "c:\\boot\\zh-hk\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0162.198] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=42328) returned 1 [0162.198] CloseHandle (hObject=0x2c8) returned 1 [0162.198] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\memtest.exe.mui" (normalized: "c:\\boot\\zh-hk\\memtest.exe.mui")) returned 0x20 [0162.198] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\memtest.exe.mui" (normalized: "c:\\boot\\zh-hk\\memtest.exe.mui")) returned 0x20 [0162.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\memtest.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\zh-hk\\memtest.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0162.199] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\memtest.exe.mui" (normalized: "c:\\boot\\zh-hk\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0162.199] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0162.199] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=63840) returned 1 [0162.199] CloseHandle (hObject=0x2c8) returned 1 [0162.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui")) returned 0x20 [0162.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui")) returned 0x20 [0162.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0162.199] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0162.200] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\memtest.exe.mui" (normalized: "c:\\boot\\zh-tw\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0162.200] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=42392) returned 1 [0162.200] CloseHandle (hObject=0x2c8) returned 1 [0162.200] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\memtest.exe.mui" (normalized: "c:\\boot\\zh-tw\\memtest.exe.mui")) returned 0x20 [0162.200] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\memtest.exe.mui" (normalized: "c:\\boot\\zh-tw\\memtest.exe.mui")) returned 0x20 [0162.200] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\memtest.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\zh-tw\\memtest.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0162.200] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\memtest.exe.mui" (normalized: "c:\\boot\\zh-tw\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0162.200] CreateFileW (lpFileName="\\\\?\\C:\\bootmgr" (normalized: "c:\\bootmgr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0162.201] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=395226) returned 1 [0162.201] CloseHandle (hObject=0x2c8) returned 1 [0162.201] GetFileAttributesW (lpFileName="\\\\?\\C:\\bootmgr" (normalized: "c:\\bootmgr")) returned 0x27 [0162.201] SetFileAttributesW (lpFileName="\\\\?\\C:\\bootmgr", dwFileAttributes=0x26) returned 0 [0162.202] GetFileAttributesW (lpFileName="\\\\?\\C:\\bootmgr" (normalized: "c:\\bootmgr")) returned 0x27 [0162.202] GetFileAttributesW (lpFileName="\\\\?\\C:\\bootmgr.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\bootmgr.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0162.202] CreateFileW (lpFileName="\\\\?\\C:\\bootmgr" (normalized: "c:\\bootmgr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0162.202] SetFileAttributesW (lpFileName="\\\\?\\C:\\bootmgr", dwFileAttributes=0x27) returned 0 [0162.202] CreateFileW (lpFileName="\\\\?\\C:\\BOOTNXT" (normalized: "c:\\bootnxt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0162.202] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1) returned 1 [0162.202] CloseHandle (hObject=0x2c8) returned 1 [0162.202] GetFileAttributesW (lpFileName="\\\\?\\C:\\BOOTNXT" (normalized: "c:\\bootnxt")) returned 0x26 [0162.202] GetFileAttributesW (lpFileName="\\\\?\\C:\\BOOTNXT" (normalized: "c:\\bootnxt")) returned 0x26 [0162.202] GetFileAttributesW (lpFileName="\\\\?\\C:\\BOOTNXT.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\bootnxt.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0162.202] CreateFileW (lpFileName="\\\\?\\C:\\BOOTNXT" (normalized: "c:\\bootnxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0162.202] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0162.203] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0162.203] CreateFileW (lpFileName="\\\\?\\C:\\BOOTNXT.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\bootnxt.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x26, hTemplateFile=0x0) returned 0x2d0 [0162.205] ReadFile (in: hFile=0x2c8, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1, lpOverlapped=0x0) returned 1 [0162.221] WriteFile (in: hFile=0x2d0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x10, lpOverlapped=0x0) returned 1 [0162.222] WriteFile (in: hFile=0x2d0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xe2, lpOverlapped=0x0) returned 1 [0162.222] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0162.222] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0162.222] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1, lpOverlapped=0x0) returned 1 [0162.223] FlushFileBuffers (hFile=0x2c8) returned 1 [0162.646] FlushFileBuffers (hFile=0x2d0) returned 1 [0162.655] CloseHandle (hObject=0x2c8) returned 1 [0162.656] CloseHandle (hObject=0x2d0) returned 1 [0162.656] DeleteFileW (lpFileName="\\\\?\\C:\\BOOTNXT" (normalized: "c:\\bootnxt")) returned 1 [0162.657] SetEvent (hEvent=0x27c) returned 1 [0162.657] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0162.657] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=18624) returned 1 [0162.657] CloseHandle (hObject=0x2d0) returned 1 [0162.657] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll")) returned 0x20 [0162.657] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll")) returned 0x20 [0162.657] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0162.657] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0162.658] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0162.658] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0162.658] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c8 [0162.659] ReadFile (in: hFile=0x2d0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x48c0, lpOverlapped=0x0) returned 1 [0162.661] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x48d0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x48d0, lpOverlapped=0x0) returned 1 [0162.664] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x112, lpOverlapped=0x0) returned 1 [0162.664] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0162.664] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0162.664] WriteFile (in: hFile=0x2d0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x48c0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x48c0, lpOverlapped=0x0) returned 1 [0162.664] FlushFileBuffers (hFile=0x2d0) returned 1 [0162.855] FlushFileBuffers (hFile=0x2c8) returned 1 [0162.857] CloseHandle (hObject=0x2d0) returned 1 [0162.857] CloseHandle (hObject=0x2c8) returned 1 [0162.857] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll")) returned 1 [0162.874] SetEvent (hEvent=0x27c) returned 1 [0162.875] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0162.875] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=18624) returned 1 [0162.875] CloseHandle (hObject=0x2c8) returned 1 [0162.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll")) returned 0x20 [0162.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll")) returned 0x20 [0162.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0162.876] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0162.876] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0162.876] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0162.876] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d0 [0162.876] ReadFile (in: hFile=0x2c8, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x48c0, lpOverlapped=0x0) returned 1 [0162.879] WriteFile (in: hFile=0x2d0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x48d0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x48d0, lpOverlapped=0x0) returned 1 [0162.881] WriteFile (in: hFile=0x2d0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x122, lpOverlapped=0x0) returned 1 [0162.881] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0162.881] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0162.881] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x48c0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x48c0, lpOverlapped=0x0) returned 1 [0162.882] FlushFileBuffers (hFile=0x2c8) returned 1 [0163.130] FlushFileBuffers (hFile=0x2d0) returned 1 [0163.132] CloseHandle (hObject=0x2c8) returned 1 [0163.132] CloseHandle (hObject=0x2d0) returned 1 [0163.132] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll")) returned 1 [0163.134] SetEvent (hEvent=0x27c) returned 1 [0163.134] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0163.134] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=20672) returned 1 [0163.134] CloseHandle (hObject=0x2d0) returned 1 [0163.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll")) returned 0x20 [0163.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll")) returned 0x20 [0163.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0163.134] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0163.135] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0163.135] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0163.135] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c8 [0163.135] ReadFile (in: hFile=0x2d0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x50c0, lpOverlapped=0x0) returned 1 [0163.137] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x50d0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x50d0, lpOverlapped=0x0) returned 1 [0163.139] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x122, lpOverlapped=0x0) returned 1 [0163.139] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0163.139] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0163.139] WriteFile (in: hFile=0x2d0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x50c0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x50c0, lpOverlapped=0x0) returned 1 [0163.139] FlushFileBuffers (hFile=0x2d0) returned 1 [0163.141] FlushFileBuffers (hFile=0x2c8) returned 1 [0163.142] CloseHandle (hObject=0x2d0) returned 1 [0163.143] CloseHandle (hObject=0x2c8) returned 1 [0163.143] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll")) returned 1 [0163.144] SetEvent (hEvent=0x27c) returned 1 [0163.144] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0163.144] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=19648) returned 1 [0163.144] CloseHandle (hObject=0x2c8) returned 1 [0163.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll")) returned 0x20 [0163.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll")) returned 0x20 [0163.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0163.145] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0163.145] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0163.145] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0163.145] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d0 [0163.145] ReadFile (in: hFile=0x2c8, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4cc0, lpOverlapped=0x0) returned 1 [0163.147] WriteFile (in: hFile=0x2d0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4cd0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4cd0, lpOverlapped=0x0) returned 1 [0163.149] WriteFile (in: hFile=0x2d0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x112, lpOverlapped=0x0) returned 1 [0163.149] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0163.149] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0163.149] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4cc0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4cc0, lpOverlapped=0x0) returned 1 [0163.149] FlushFileBuffers (hFile=0x2c8) returned 1 [0163.960] FlushFileBuffers (hFile=0x2d0) returned 1 [0163.962] CloseHandle (hObject=0x2c8) returned 1 [0163.962] CloseHandle (hObject=0x2d0) returned 1 [0163.962] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll")) returned 1 [0163.964] SetEvent (hEvent=0x27c) returned 1 [0163.964] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0163.964] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=26816) returned 1 [0163.964] CloseHandle (hObject=0x2d0) returned 1 [0163.966] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll")) returned 0x20 [0163.966] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll")) returned 0x20 [0163.966] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0163.966] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0163.966] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0163.967] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0163.967] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c8 [0163.979] ReadFile (in: hFile=0x2d0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x68c0, lpOverlapped=0x0) returned 1 [0163.982] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x68d0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x68d0, lpOverlapped=0x0) returned 1 [0163.984] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x122, lpOverlapped=0x0) returned 1 [0163.984] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0163.984] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0163.984] WriteFile (in: hFile=0x2d0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x68c0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x68c0, lpOverlapped=0x0) returned 1 [0163.985] FlushFileBuffers (hFile=0x2d0) returned 1 [0164.258] FlushFileBuffers (hFile=0x2c8) returned 1 [0164.260] CloseHandle (hObject=0x2d0) returned 1 [0164.261] CloseHandle (hObject=0x2c8) returned 1 [0164.261] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll")) returned 1 [0164.262] SetEvent (hEvent=0x27c) returned 1 [0164.262] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0164.262] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=19648) returned 1 [0164.263] CloseHandle (hObject=0x2c8) returned 1 [0164.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll")) returned 0x20 [0164.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll")) returned 0x20 [0164.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0164.263] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0164.263] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0164.263] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0164.263] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d0 [0164.263] ReadFile (in: hFile=0x2c8, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4cc0, lpOverlapped=0x0) returned 1 [0164.267] WriteFile (in: hFile=0x2d0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4cd0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4cd0, lpOverlapped=0x0) returned 1 [0164.269] WriteFile (in: hFile=0x2d0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x122, lpOverlapped=0x0) returned 1 [0164.269] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0164.269] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0164.269] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4cc0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4cc0, lpOverlapped=0x0) returned 1 [0164.270] FlushFileBuffers (hFile=0x2c8) returned 1 [0164.291] FlushFileBuffers (hFile=0x2d0) returned 1 [0164.294] CloseHandle (hObject=0x2c8) returned 1 [0164.294] CloseHandle (hObject=0x2d0) returned 1 [0164.294] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll")) returned 1 [0164.295] SetEvent (hEvent=0x27c) returned 1 [0164.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0164.295] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=24768) returned 1 [0164.295] CloseHandle (hObject=0x2d0) returned 1 [0164.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll")) returned 0x20 [0164.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll")) returned 0x20 [0164.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0164.296] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0164.296] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0164.296] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0164.296] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c8 [0164.296] ReadFile (in: hFile=0x2d0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x60c0, lpOverlapped=0x0) returned 1 [0164.299] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x60d0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x60d0, lpOverlapped=0x0) returned 1 [0164.300] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x112, lpOverlapped=0x0) returned 1 [0164.300] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0164.300] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0164.300] WriteFile (in: hFile=0x2d0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x60c0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x60c0, lpOverlapped=0x0) returned 1 [0164.301] FlushFileBuffers (hFile=0x2d0) returned 1 [0165.169] FlushFileBuffers (hFile=0x2c8) returned 1 [0165.440] CloseHandle (hObject=0x2d0) returned 1 [0165.440] CloseHandle (hObject=0x2c8) returned 1 [0165.440] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll")) returned 1 [0165.442] SetEvent (hEvent=0x27c) returned 1 [0165.442] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0165.442] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=19136) returned 1 [0165.442] CloseHandle (hObject=0x2c8) returned 1 [0165.442] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll")) returned 0x20 [0165.442] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll")) returned 0x20 [0165.442] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0165.442] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0165.442] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0165.443] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0165.443] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d0 [0165.443] ReadFile (in: hFile=0x2c8, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4ac0, lpOverlapped=0x0) returned 1 [0165.447] WriteFile (in: hFile=0x2d0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4ad0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4ad0, lpOverlapped=0x0) returned 1 [0165.448] WriteFile (in: hFile=0x2d0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x122, lpOverlapped=0x0) returned 1 [0165.449] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0165.449] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0165.449] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4ac0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4ac0, lpOverlapped=0x0) returned 1 [0165.449] FlushFileBuffers (hFile=0x2c8) returned 1 [0165.461] FlushFileBuffers (hFile=0x2d0) returned 1 [0165.479] CloseHandle (hObject=0x2c8) returned 1 [0165.479] CloseHandle (hObject=0x2d0) returned 1 [0165.479] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll")) returned 1 [0165.481] SetEvent (hEvent=0x27c) returned 1 [0165.481] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvfilesystemmetadata.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0165.481] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=307416) returned 1 [0165.481] CloseHandle (hObject=0x2d0) returned 1 [0165.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvfilesystemmetadata.dll")) returned 0x20 [0165.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvfilesystemmetadata.dll")) returned 0x20 [0165.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvfilesystemmetadata.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0165.481] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvfilesystemmetadata.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0165.482] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0165.482] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2118360) returned 1 [0165.482] CloseHandle (hObject=0x2d0) returned 1 [0165.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll")) returned 0x20 [0165.482] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 1 [0165.483] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0165.483] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll")) returned 1 [0165.483] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvapi.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0165.484] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=468696) returned 1 [0165.484] CloseHandle (hObject=0x2d0) returned 1 [0165.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvapi.dll")) returned 0x20 [0165.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvapi.dll")) returned 0x20 [0165.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvapi.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0165.484] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0165.484] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0165.484] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=396960) returned 1 [0165.484] CloseHandle (hObject=0x2d0) returned 1 [0165.485] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll")) returned 0x20 [0165.485] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll")) returned 0x20 [0165.485] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0165.485] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0165.485] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0165.485] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0165.485] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c8 [0165.485] ReadFile (in: hFile=0x2d0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x60ea0, lpOverlapped=0x0) returned 1 [0165.525] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x60eb0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x60eb0, lpOverlapped=0x0) returned 1 [0165.534] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x102, lpOverlapped=0x0) returned 1 [0165.534] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0165.534] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0165.534] WriteFile (in: hFile=0x2d0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x60ea0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x60ea0, lpOverlapped=0x0) returned 1 [0165.536] FlushFileBuffers (hFile=0x2d0) returned 1 [0165.816] FlushFileBuffers (hFile=0x2c8) returned 1 [0165.820] CloseHandle (hObject=0x2d0) returned 1 [0165.820] CloseHandle (hObject=0x2c8) returned 1 [0165.820] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll")) returned 1 [0165.825] SetEvent (hEvent=0x27c) returned 1 [0165.825] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0165.825] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=473760) returned 1 [0165.825] CloseHandle (hObject=0x2c8) returned 1 [0165.825] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll")) returned 0x20 [0165.825] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll")) returned 0x20 [0165.825] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0165.825] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0165.826] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0165.826] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0165.826] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d0 [0165.826] ReadFile (in: hFile=0x2c8, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x73aa0, lpOverlapped=0x0) returned 1 [0165.841] WriteFile (in: hFile=0x2d0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x73ab0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x73ab0, lpOverlapped=0x0) returned 1 [0165.850] WriteFile (in: hFile=0x2d0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x102, lpOverlapped=0x0) returned 1 [0165.850] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0165.850] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0165.850] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x73aa0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x73aa0, lpOverlapped=0x0) returned 1 [0165.852] FlushFileBuffers (hFile=0x2c8) returned 1 [0166.415] FlushFileBuffers (hFile=0x2d0) returned 1 [0166.420] CloseHandle (hObject=0x2c8) returned 1 [0166.421] CloseHandle (hObject=0x2d0) returned 1 [0166.421] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll")) returned 1 [0166.427] SetEvent (hEvent=0x27c) returned 1 [0166.427] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0166.427] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2285736) returned 1 [0166.427] CloseHandle (hObject=0x2d0) returned 1 [0166.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll")) returned 0x20 [0166.427] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 1 [0166.428] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0166.431] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f900 | out: lpNewFilePointer=0x0) returned 1 [0166.431] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f900 | out: lpNewFilePointer=0x0) returned 1 [0166.431] ReadFile (in: hFile=0x2d0, lpBuffer=0x3a11058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x364f90c, lpOverlapped=0x0 | out: lpBuffer=0x3a11058*, lpNumberOfBytesRead=0x364f90c*=0x40000, lpOverlapped=0x0) returned 1 [0166.443] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0xba038, lpNewFilePointer=0x0, dwMoveMethod=0x364f900 | out: lpNewFilePointer=0x0) returned 1 [0166.443] ReadFile (in: hFile=0x2d0, lpBuffer=0x3a51058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x364f90c, lpOverlapped=0x0 | out: lpBuffer=0x3a51058*, lpNumberOfBytesRead=0x364f90c*=0x40000, lpOverlapped=0x0) returned 1 [0166.449] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x1ee0a8, lpNewFilePointer=0x0, dwMoveMethod=0x364f900 | out: lpNewFilePointer=0x0) returned 1 [0166.450] ReadFile (in: hFile=0x2d0, lpBuffer=0x3a91058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x364f90c, lpOverlapped=0x0 | out: lpBuffer=0x3a91058*, lpNumberOfBytesRead=0x364f90c*=0x40000, lpOverlapped=0x0) returned 1 [0166.732] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa70 | out: lpNewFilePointer=0x0) returned 1 [0166.733] WriteFile (in: hFile=0x2d0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xc0122, lpNumberOfBytesWritten=0x364fa68, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa68*=0xc0122, lpOverlapped=0x0) returned 1 [0166.748] SetEndOfFile (hFile=0x2d0) returned 1 [0166.749] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x1ee0a8, lpNewFilePointer=0x0, dwMoveMethod=0x364f908 | out: lpNewFilePointer=0x0) returned 1 [0166.749] WriteFile (in: hFile=0x2d0, lpBuffer=0x3ad115a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x364f914, lpOverlapped=0x0 | out: lpBuffer=0x3ad115a*, lpNumberOfBytesWritten=0x364f914*=0x40000, lpOverlapped=0x0) returned 1 [0166.750] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0xba038, lpNewFilePointer=0x0, dwMoveMethod=0x364f908 | out: lpNewFilePointer=0x0) returned 1 [0166.750] WriteFile (in: hFile=0x2d0, lpBuffer=0x3ad115a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x364f914, lpOverlapped=0x0 | out: lpBuffer=0x3ad115a*, lpNumberOfBytesWritten=0x364f914*=0x40000, lpOverlapped=0x0) returned 1 [0166.753] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f908 | out: lpNewFilePointer=0x0) returned 1 [0166.753] WriteFile (in: hFile=0x2d0, lpBuffer=0x3ad115a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x364f914, lpOverlapped=0x0 | out: lpBuffer=0x3ad115a*, lpNumberOfBytesWritten=0x364f914*=0x40000, lpOverlapped=0x0) returned 1 [0166.754] FlushFileBuffers (hFile=0x2d0) returned 1 [0167.871] CloseHandle (hObject=0x2d0) returned 1 [0167.871] SetEvent (hEvent=0x27c) returned 1 [0167.872] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0167.872] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=4136) returned 1 [0167.872] CloseHandle (hObject=0x2d0) returned 1 [0167.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml")) returned 0x20 [0167.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml")) returned 0x20 [0167.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0167.873] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0167.873] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0167.873] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0167.873] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2ec [0167.874] ReadFile (in: hFile=0x2d0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1028, lpOverlapped=0x0) returned 1 [0167.875] WriteFile (in: hFile=0x2ec, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1030, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1030, lpOverlapped=0x0) returned 1 [0167.876] WriteFile (in: hFile=0x2ec, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x102, lpOverlapped=0x0) returned 1 [0167.876] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0167.876] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0167.877] WriteFile (in: hFile=0x2d0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1028, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1028, lpOverlapped=0x0) returned 1 [0167.877] FlushFileBuffers (hFile=0x2d0) returned 1 [0168.168] FlushFileBuffers (hFile=0x2ec) returned 1 [0168.407] CloseHandle (hObject=0x2d0) returned 1 [0168.407] CloseHandle (hObject=0x2ec) returned 1 [0168.407] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml")) returned 1 [0168.408] SetEvent (hEvent=0x27c) returned 1 [0168.408] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec [0168.409] GetFileSizeEx (in: hFile=0x2ec, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=902328) returned 1 [0168.409] CloseHandle (hObject=0x2ec) returned 1 [0168.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll")) returned 0x20 [0168.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll")) returned 0x20 [0168.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0168.409] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec [0168.409] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0168.409] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0168.409] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d0 [0168.410] ReadFile (in: hFile=0x2ec, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xdc4b8, lpOverlapped=0x0) returned 1 [0168.437] WriteFile (in: hFile=0x2d0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xdc4c0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xdc4c0, lpOverlapped=0x0) returned 1 [0168.595] WriteFile (in: hFile=0x2d0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0168.595] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0168.595] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0168.595] WriteFile (in: hFile=0x2ec, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xdc4b8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xdc4b8, lpOverlapped=0x0) returned 1 [0168.598] FlushFileBuffers (hFile=0x2ec) returned 1 [0169.192] FlushFileBuffers (hFile=0x2d0) returned 1 [0169.195] CloseHandle (hObject=0x2ec) returned 1 [0169.195] CloseHandle (hObject=0x2d0) returned 1 [0169.195] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll")) returned 1 [0169.206] SetEvent (hEvent=0x27c) returned 1 [0169.206] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mavinject32.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0169.206] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=358616) returned 1 [0169.206] CloseHandle (hObject=0x2d0) returned 1 [0169.207] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mavinject32.exe")) returned 0x20 [0169.207] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mavinject32.exe")) returned 0x20 [0169.207] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mavinject32.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0169.207] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mavinject32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0169.207] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0169.207] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0169.207] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mavinject32.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2ec [0169.208] ReadFile (in: hFile=0x2d0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x578d8, lpOverlapped=0x0) returned 1 [0169.221] WriteFile (in: hFile=0x2ec, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x578e0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x578e0, lpOverlapped=0x0) returned 1 [0169.228] WriteFile (in: hFile=0x2ec, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0169.228] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0169.228] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0169.228] WriteFile (in: hFile=0x2d0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x578d8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x578d8, lpOverlapped=0x0) returned 1 [0169.230] FlushFileBuffers (hFile=0x2d0) returned 1 [0169.531] FlushFileBuffers (hFile=0x2ec) returned 1 [0169.534] CloseHandle (hObject=0x2d0) returned 1 [0169.534] CloseHandle (hObject=0x2ec) returned 1 [0169.534] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mavinject32.exe")) returned 1 [0169.538] SetEvent (hEvent=0x27c) returned 1 [0169.539] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec [0169.539] GetFileSizeEx (in: hFile=0x2ec, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=996568) returned 1 [0169.539] CloseHandle (hObject=0x2ec) returned 1 [0169.539] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll")) returned 0x20 [0169.539] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll")) returned 0x20 [0169.539] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0169.539] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec [0169.540] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0169.540] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0169.540] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d0 [0169.541] ReadFile (in: hFile=0x2ec, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xf34d8, lpOverlapped=0x0) returned 1 [0169.584] WriteFile (in: hFile=0x2d0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf34e0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf34e0, lpOverlapped=0x0) returned 1 [0169.723] WriteFile (in: hFile=0x2d0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x102, lpOverlapped=0x0) returned 1 [0169.725] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0169.725] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0169.725] WriteFile (in: hFile=0x2ec, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf34d8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xf34d8, lpOverlapped=0x0) returned 1 [0169.730] FlushFileBuffers (hFile=0x2ec) returned 1 [0169.736] FlushFileBuffers (hFile=0x2d0) returned 1 [0169.740] CloseHandle (hObject=0x2ec) returned 1 [0169.740] CloseHandle (hObject=0x2d0) returned 1 [0169.740] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll")) returned 1 [0169.754] SetEvent (hEvent=0x27c) returned 1 [0169.754] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0169.754] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2776664) returned 1 [0169.754] CloseHandle (hObject=0x2d0) returned 1 [0169.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe")) returned 0x20 [0169.754] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 1 [0169.773] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0169.784] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe")) returned 1 [0169.785] SetEvent (hEvent=0x27c) returned 1 [0169.785] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c0 [0169.786] GetFileSizeEx (in: hFile=0x2c0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=4450) returned 1 [0169.786] CloseHandle (hObject=0x2c0) returned 1 [0169.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml")) returned 0x20 [0169.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml")) returned 0x20 [0169.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0169.786] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c0 [0169.786] SetFilePointerEx (in: hFile=0x2c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0169.786] SetFilePointerEx (in: hFile=0x2c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0169.786] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2ec [0169.787] ReadFile (in: hFile=0x2c0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1162, lpOverlapped=0x0) returned 1 [0169.788] WriteFile (in: hFile=0x2ec, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1170, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1170, lpOverlapped=0x0) returned 1 [0169.789] WriteFile (in: hFile=0x2ec, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x112, lpOverlapped=0x0) returned 1 [0169.790] SetFilePointerEx (in: hFile=0x2c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0169.790] SetFilePointerEx (in: hFile=0x2c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0169.790] WriteFile (in: hFile=0x2c0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1162, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1162, lpOverlapped=0x0) returned 1 [0169.790] FlushFileBuffers (hFile=0x2c0) returned 1 [0169.792] FlushFileBuffers (hFile=0x2ec) returned 1 [0169.801] CloseHandle (hObject=0x2c0) returned 1 [0169.801] CloseHandle (hObject=0x2ec) returned 1 [0169.801] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml")) returned 1 [0169.803] SetEvent (hEvent=0x27c) returned 1 [0169.803] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\streamserver.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec [0169.803] GetFileSizeEx (in: hFile=0x2ec, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1053784) returned 1 [0169.803] CloseHandle (hObject=0x2ec) returned 1 [0169.803] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\streamserver.dll")) returned 0x20 [0169.803] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\streamserver.dll")) returned 0x20 [0169.803] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\streamserver.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0169.803] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\streamserver.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0169.804] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec [0169.804] GetFileSizeEx (in: hFile=0x2ec, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=982720) returned 1 [0169.804] CloseHandle (hObject=0x2ec) returned 1 [0169.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll")) returned 0x20 [0169.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll")) returned 0x20 [0169.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0169.804] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec [0169.804] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0169.805] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0169.805] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c0 [0169.805] ReadFile (in: hFile=0x2ec, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xefec0, lpOverlapped=0x0) returned 1 [0169.835] WriteFile (in: hFile=0x2c0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xefed0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xefed0, lpOverlapped=0x0) returned 1 [0169.932] WriteFile (in: hFile=0x2c0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0169.932] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0169.932] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0169.932] WriteFile (in: hFile=0x2ec, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xefec0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xefec0, lpOverlapped=0x0) returned 1 [0169.935] FlushFileBuffers (hFile=0x2ec) returned 1 [0170.147] FlushFileBuffers (hFile=0x2c0) returned 1 [0170.150] CloseHandle (hObject=0x2ec) returned 1 [0170.150] CloseHandle (hObject=0x2c0) returned 1 [0170.150] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll")) returned 1 [0170.169] SetEvent (hEvent=0x27c) returned 1 [0170.169] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c0 [0170.170] GetFileSizeEx (in: hFile=0x2c0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1434) returned 1 [0170.170] CloseHandle (hObject=0x2c0) returned 1 [0170.170] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml")) returned 0x20 [0170.170] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml")) returned 0x20 [0170.170] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.171] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.171] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c0 [0170.171] GetFileSizeEx (in: hFile=0x2c0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=212) returned 1 [0170.171] CloseHandle (hObject=0x2c0) returned 1 [0170.171] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml")) returned 0x20 [0170.172] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml")) returned 0x20 [0170.172] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.172] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.172] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c0 [0170.172] GetFileSizeEx (in: hFile=0x2c0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=903) returned 1 [0170.172] CloseHandle (hObject=0x2c0) returned 1 [0170.173] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml")) returned 0x20 [0170.173] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml")) returned 0x20 [0170.173] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.173] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.173] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c0 [0170.173] GetFileSizeEx (in: hFile=0x2c0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=215) returned 1 [0170.174] CloseHandle (hObject=0x2c0) returned 1 [0170.174] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert.xml")) returned 0x20 [0170.174] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert.xml")) returned 0x20 [0170.174] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.174] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.174] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c0 [0170.175] GetFileSizeEx (in: hFile=0x2c0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=384) returned 1 [0170.175] CloseHandle (hObject=0x2c0) returned 1 [0170.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml")) returned 0x20 [0170.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml")) returned 0x20 [0170.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.185] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.185] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c0 [0170.186] GetFileSizeEx (in: hFile=0x2c0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=903) returned 1 [0170.186] CloseHandle (hObject=0x2c0) returned 1 [0170.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml")) returned 0x20 [0170.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml")) returned 0x20 [0170.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.186] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.187] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c0 [0170.187] GetFileSizeEx (in: hFile=0x2c0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=392) returned 1 [0170.187] CloseHandle (hObject=0x2c0) returned 1 [0170.187] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml")) returned 0x20 [0170.187] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml")) returned 0x20 [0170.187] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.187] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.188] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c0 [0170.188] GetFileSizeEx (in: hFile=0x2c0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=693) returned 1 [0170.188] CloseHandle (hObject=0x2c0) returned 1 [0170.188] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml")) returned 0x20 [0170.188] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml")) returned 0x20 [0170.188] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.188] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.189] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c0 [0170.189] GetFileSizeEx (in: hFile=0x2c0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3333) returned 1 [0170.189] CloseHandle (hObject=0x2c0) returned 1 [0170.189] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml")) returned 0x20 [0170.189] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml")) returned 0x20 [0170.190] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.190] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.190] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\basealtgr_rtl.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c0 [0170.190] GetFileSizeEx (in: hFile=0x2c0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=247) returned 1 [0170.190] CloseHandle (hObject=0x2c0) returned 1 [0170.190] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\basealtgr_rtl.xml")) returned 0x20 [0170.191] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\basealtgr_rtl.xml")) returned 0x20 [0170.191] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\basealtgr_rtl.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.191] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\basealtgr_rtl.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.191] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c0 [0170.191] GetFileSizeEx (in: hFile=0x2c0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3524) returned 1 [0170.191] CloseHandle (hObject=0x2c0) returned 1 [0170.191] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml")) returned 0x20 [0170.192] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml")) returned 0x20 [0170.192] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.192] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.192] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c0 [0170.192] GetFileSizeEx (in: hFile=0x2c0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3529) returned 1 [0170.192] CloseHandle (hObject=0x2c0) returned 1 [0170.193] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml")) returned 0x20 [0170.193] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml")) returned 0x20 [0170.193] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.193] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.193] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c0 [0170.194] GetFileSizeEx (in: hFile=0x2c0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=738) returned 1 [0170.194] CloseHandle (hObject=0x2c0) returned 1 [0170.194] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml")) returned 0x20 [0170.194] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml")) returned 0x20 [0170.194] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.194] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.194] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c0 [0170.195] GetFileSizeEx (in: hFile=0x2c0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=804) returned 1 [0170.195] CloseHandle (hObject=0x2c0) returned 1 [0170.195] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml")) returned 0x20 [0170.195] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml")) returned 0x20 [0170.195] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.195] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.195] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c0 [0170.196] GetFileSizeEx (in: hFile=0x2c0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=488) returned 1 [0170.196] CloseHandle (hObject=0x2c0) returned 1 [0170.196] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml")) returned 0x20 [0170.196] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml")) returned 0x20 [0170.196] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.196] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.196] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c0 [0170.197] GetFileSizeEx (in: hFile=0x2c0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=617) returned 1 [0170.197] CloseHandle (hObject=0x2c0) returned 1 [0170.197] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml")) returned 0x20 [0170.197] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml")) returned 0x20 [0170.197] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.197] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.197] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c0 [0170.198] GetFileSizeEx (in: hFile=0x2c0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=16616) returned 1 [0170.198] CloseHandle (hObject=0x2c0) returned 1 [0170.198] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml")) returned 0x20 [0170.198] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml")) returned 0x20 [0170.198] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.198] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.198] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c0 [0170.199] GetFileSizeEx (in: hFile=0x2c0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=15097) returned 1 [0170.199] CloseHandle (hObject=0x2c0) returned 1 [0170.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml")) returned 0x20 [0170.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml")) returned 0x20 [0170.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.199] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.200] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c0 [0170.200] GetFileSizeEx (in: hFile=0x2c0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=9803) returned 1 [0170.200] CloseHandle (hObject=0x2c0) returned 1 [0170.200] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml")) returned 0x20 [0170.200] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml")) returned 0x20 [0170.200] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.200] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.201] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0170.317] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=11067) returned 1 [0170.317] CloseHandle (hObject=0x2cc) returned 1 [0170.317] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml")) returned 0x20 [0170.317] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml")) returned 0x20 [0170.318] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.318] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.318] SetEvent (hEvent=0x27c) returned 1 [0170.320] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0170.320] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=10947) returned 1 [0170.320] CloseHandle (hObject=0x2cc) returned 1 [0170.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml")) returned 0x20 [0170.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml")) returned 0x20 [0170.321] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.321] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.321] SetEvent (hEvent=0x27c) returned 1 [0170.321] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0170.322] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=44506) returned 1 [0170.322] CloseHandle (hObject=0x2cc) returned 1 [0170.322] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml")) returned 0x20 [0170.322] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml")) returned 0x20 [0170.322] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.322] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.322] SetEvent (hEvent=0x27c) returned 1 [0170.322] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0170.323] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=737) returned 1 [0170.323] CloseHandle (hObject=0x2cc) returned 1 [0170.323] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml")) returned 0x20 [0170.323] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml")) returned 0x20 [0170.323] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.323] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.323] SetEvent (hEvent=0x27c) returned 1 [0170.324] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0170.324] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=221) returned 1 [0170.324] CloseHandle (hObject=0x2cc) returned 1 [0170.324] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml")) returned 0x20 [0170.324] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml")) returned 0x20 [0170.324] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.324] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.325] SetEvent (hEvent=0x27c) returned 1 [0170.325] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0170.325] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=471) returned 1 [0170.325] CloseHandle (hObject=0x2cc) returned 1 [0170.325] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml")) returned 0x20 [0170.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml")) returned 0x20 [0170.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.326] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.326] SetEvent (hEvent=0x27c) returned 1 [0170.327] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0170.327] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=215) returned 1 [0170.327] CloseHandle (hObject=0x2cc) returned 1 [0170.327] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml")) returned 0x20 [0170.327] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml")) returned 0x20 [0170.327] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.327] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.327] SetEvent (hEvent=0x27c) returned 1 [0170.328] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0170.328] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1069) returned 1 [0170.328] CloseHandle (hObject=0x2cc) returned 1 [0170.328] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml")) returned 0x20 [0170.328] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml")) returned 0x20 [0170.328] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.328] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.328] SetEvent (hEvent=0x27c) returned 1 [0170.329] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0170.329] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=213) returned 1 [0170.329] CloseHandle (hObject=0x2cc) returned 1 [0170.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml")) returned 0x20 [0170.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml")) returned 0x20 [0170.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.330] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.330] SetEvent (hEvent=0x27c) returned 1 [0170.330] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0170.330] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1853) returned 1 [0170.330] CloseHandle (hObject=0x2cc) returned 1 [0170.331] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml")) returned 0x20 [0170.331] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml")) returned 0x20 [0170.331] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.331] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.331] SetEvent (hEvent=0x27c) returned 1 [0170.331] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0170.332] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=219) returned 1 [0170.332] CloseHandle (hObject=0x2cc) returned 1 [0170.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml")) returned 0x20 [0170.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml")) returned 0x20 [0170.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.332] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.332] SetEvent (hEvent=0x27c) returned 1 [0170.333] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0170.333] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=924) returned 1 [0170.333] CloseHandle (hObject=0x2cc) returned 1 [0170.333] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml")) returned 0x20 [0170.333] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml")) returned 0x20 [0170.333] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.333] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.333] SetEvent (hEvent=0x27c) returned 1 [0170.334] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0170.334] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=215) returned 1 [0170.334] CloseHandle (hObject=0x2cc) returned 1 [0170.334] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml")) returned 0x20 [0170.334] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml")) returned 0x20 [0170.334] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.334] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.335] SetEvent (hEvent=0x27c) returned 1 [0170.335] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0170.335] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=694) returned 1 [0170.335] CloseHandle (hObject=0x2cc) returned 1 [0170.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml")) returned 0x20 [0170.336] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml")) returned 0x20 [0170.336] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.336] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.336] SetEvent (hEvent=0x27c) returned 1 [0170.336] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0170.336] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=805) returned 1 [0170.337] CloseHandle (hObject=0x2cc) returned 1 [0170.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml")) returned 0x20 [0170.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml")) returned 0x20 [0170.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.337] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.337] SetEvent (hEvent=0x27c) returned 1 [0170.337] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0170.338] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3823) returned 1 [0170.338] CloseHandle (hObject=0x2cc) returned 1 [0170.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml")) returned 0x20 [0170.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml")) returned 0x20 [0170.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.338] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.338] SetEvent (hEvent=0x27c) returned 1 [0170.339] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0170.339] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=591) returned 1 [0170.339] CloseHandle (hObject=0x2cc) returned 1 [0170.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml")) returned 0x20 [0170.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml")) returned 0x20 [0170.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.339] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.339] SetEvent (hEvent=0x27c) returned 1 [0170.340] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0170.340] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=9728) returned 1 [0170.340] CloseHandle (hObject=0x2cc) returned 1 [0170.340] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il\\tipresx.dll.mui")) returned 0x20 [0170.340] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il\\tipresx.dll.mui")) returned 0x20 [0170.340] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.341] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.341] SetEvent (hEvent=0x27c) returned 1 [0170.341] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0170.341] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=10240) returned 1 [0170.341] CloseHandle (hObject=0x2cc) returned 1 [0170.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr\\tipresx.dll.mui")) returned 0x20 [0170.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr\\tipresx.dll.mui")) returned 0x20 [0170.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.342] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.342] SetEvent (hEvent=0x27c) returned 1 [0170.342] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0170.343] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=10240) returned 1 [0170.343] CloseHandle (hObject=0x2cc) returned 1 [0170.343] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu\\tipresx.dll.mui")) returned 0x20 [0170.343] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu\\tipresx.dll.mui")) returned 0x20 [0170.343] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.343] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.343] SetEvent (hEvent=0x27c) returned 1 [0170.343] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcommonlm.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0170.344] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=46624) returned 1 [0170.344] CloseHandle (hObject=0x2cc) returned 1 [0170.344] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcommonlm.dat")) returned 0x20 [0170.344] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcommonlm.dat")) returned 0x20 [0170.344] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcommonlm.dat.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.344] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcommonlm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.344] SetEvent (hEvent=0x27c) returned 1 [0170.345] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenclm.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0170.345] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=498624) returned 1 [0170.345] CloseHandle (hObject=0x2cc) returned 1 [0170.345] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenclm.dat")) returned 0x20 [0170.345] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenclm.dat")) returned 0x20 [0170.345] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenclm.dat.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.345] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenclm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.346] SetEvent (hEvent=0x27c) returned 1 [0170.346] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrlatinlm.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0170.346] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1100592) returned 1 [0170.346] CloseHandle (hObject=0x2cc) returned 1 [0170.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrlatinlm.dat")) returned 0x20 [0170.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrlatinlm.dat")) returned 0x20 [0170.347] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrlatinlm.dat.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.347] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrlatinlm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.347] SetEvent (hEvent=0x27c) returned 1 [0170.347] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0170.347] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2515696) returned 1 [0170.348] CloseHandle (hObject=0x2cc) returned 1 [0170.348] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat")) returned 0x20 [0170.348] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0 [0170.348] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat.id[b4197730-2299].[britt.looper@aol.com].phoenix"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat")) returned 0 [0170.348] SetEvent (hEvent=0x27c) returned 1 [0170.348] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0170.349] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3380096) returned 1 [0170.349] CloseHandle (hObject=0x2cc) returned 1 [0170.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat")) returned 0x20 [0170.349] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0 [0170.349] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat.id[b4197730-2299].[britt.looper@aol.com].phoenix"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat")) returned 0 [0170.349] SetEvent (hEvent=0x27c) returned 1 [0170.350] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkDiv.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkdiv.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0170.350] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=361472) returned 1 [0170.350] CloseHandle (hObject=0x2cc) returned 1 [0170.350] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkDiv.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkdiv.dll")) returned 0x20 [0170.350] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkDiv.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkdiv.dll")) returned 0x20 [0170.350] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkDiv.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkdiv.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.350] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkDiv.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkdiv.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.350] SetEvent (hEvent=0x27c) returned 1 [0170.351] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0170.351] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2018304) returned 1 [0170.351] CloseHandle (hObject=0x2cc) returned 1 [0170.351] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll")) returned 0x20 [0170.351] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0 [0170.352] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll")) returned 0 [0170.352] SetEvent (hEvent=0x27c) returned 1 [0170.353] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InputPersonalization.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inputpersonalization.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0170.354] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=367104) returned 1 [0170.354] CloseHandle (hObject=0x2cc) returned 1 [0170.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InputPersonalization.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inputpersonalization.exe")) returned 0x20 [0170.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InputPersonalization.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inputpersonalization.exe")) returned 0x20 [0170.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InputPersonalization.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inputpersonalization.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.354] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InputPersonalization.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inputpersonalization.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.354] SetEvent (hEvent=0x27c) returned 1 [0170.355] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsar.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0170.356] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2418) returned 1 [0170.356] CloseHandle (hObject=0x2cc) returned 1 [0170.356] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsar.xml")) returned 0x20 [0170.356] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsar.xml")) returned 0x20 [0170.356] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsar.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.356] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsar.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.356] SetEvent (hEvent=0x27c) returned 1 [0170.473] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0170.473] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2592) returned 1 [0170.473] CloseHandle (hObject=0x2c8) returned 1 [0170.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml")) returned 0x20 [0170.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml")) returned 0x20 [0170.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.473] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.473] SetEvent (hEvent=0x27c) returned 1 [0170.474] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0170.474] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=10240) returned 1 [0170.474] CloseHandle (hObject=0x2c8) returned 1 [0170.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl\\tipresx.dll.mui")) returned 0x20 [0170.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl\\tipresx.dll.mui")) returned 0x20 [0170.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.474] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.474] SetEvent (hEvent=0x27c) returned 1 [0170.475] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0170.475] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=10752) returned 1 [0170.475] CloseHandle (hObject=0x2c8) returned 1 [0170.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br\\tipresx.dll.mui")) returned 0x20 [0170.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br\\tipresx.dll.mui")) returned 0x20 [0170.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.475] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.475] SetEvent (hEvent=0x27c) returned 1 [0170.476] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0170.476] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=10752) returned 1 [0170.476] CloseHandle (hObject=0x2c8) returned 1 [0170.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt\\tipresx.dll.mui")) returned 0x20 [0170.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt\\tipresx.dll.mui")) returned 0x20 [0170.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.476] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.476] SetEvent (hEvent=0x27c) returned 1 [0170.478] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0170.479] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=10752) returned 1 [0170.479] CloseHandle (hObject=0x2c8) returned 1 [0170.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro\\tipresx.dll.mui")) returned 0x20 [0170.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro\\tipresx.dll.mui")) returned 0x20 [0170.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.479] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.479] SetEvent (hEvent=0x27c) returned 1 [0170.479] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\rtscom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\rtscom.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0170.480] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=177664) returned 1 [0170.480] CloseHandle (hObject=0x2c8) returned 1 [0170.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\rtscom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\rtscom.dll")) returned 0x20 [0170.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\rtscom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\rtscom.dll")) returned 0x20 [0170.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\rtscom.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\rtscom.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.480] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\rtscom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\rtscom.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.480] SetEvent (hEvent=0x27c) returned 1 [0170.480] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0170.481] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=10240) returned 1 [0170.481] CloseHandle (hObject=0x2c8) returned 1 [0170.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru\\tipresx.dll.mui")) returned 0x20 [0170.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru\\tipresx.dll.mui")) returned 0x20 [0170.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.481] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.481] SetEvent (hEvent=0x27c) returned 1 [0170.481] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ShapeCollector.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\shapecollector.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0170.482] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=733696) returned 1 [0170.482] CloseHandle (hObject=0x2c8) returned 1 [0170.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ShapeCollector.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\shapecollector.exe")) returned 0x20 [0170.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ShapeCollector.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\shapecollector.exe")) returned 0x20 [0170.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ShapeCollector.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\shapecollector.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.482] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ShapeCollector.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\shapecollector.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.482] SetEvent (hEvent=0x27c) returned 1 [0170.483] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0170.483] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=10752) returned 1 [0170.483] CloseHandle (hObject=0x2c8) returned 1 [0170.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk\\tipresx.dll.mui")) returned 0x20 [0170.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk\\tipresx.dll.mui")) returned 0x20 [0170.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.483] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.483] SetEvent (hEvent=0x27c) returned 1 [0170.484] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0170.484] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=10240) returned 1 [0170.484] CloseHandle (hObject=0x2c8) returned 1 [0170.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\tipresx.dll.mui")) returned 0x20 [0170.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\tipresx.dll.mui")) returned 0x20 [0170.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.484] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.484] SetEvent (hEvent=0x27c) returned 1 [0170.485] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-rs\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0170.485] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=9728) returned 1 [0170.485] CloseHandle (hObject=0x2c8) returned 1 [0170.485] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-rs\\tipresx.dll.mui")) returned 0x20 [0170.485] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-rs\\tipresx.dll.mui")) returned 0x20 [0170.485] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-rs\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.485] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-rs\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.485] SetEvent (hEvent=0x27c) returned 1 [0170.486] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0170.486] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=10240) returned 1 [0170.486] CloseHandle (hObject=0x2c8) returned 1 [0170.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se\\tipresx.dll.mui")) returned 0x20 [0170.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se\\tipresx.dll.mui")) returned 0x20 [0170.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.486] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.486] SetEvent (hEvent=0x27c) returned 1 [0170.487] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabIpsps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabipsps.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0170.487] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=41984) returned 1 [0170.487] CloseHandle (hObject=0x2c8) returned 1 [0170.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabIpsps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabipsps.dll")) returned 0x20 [0170.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabIpsps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabipsps.dll")) returned 0x20 [0170.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabIpsps.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabipsps.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.487] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabIpsps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabipsps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.487] SetEvent (hEvent=0x27c) returned 1 [0170.488] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0170.488] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=4101632) returned 1 [0170.488] CloseHandle (hObject=0x2c8) returned 1 [0170.488] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll")) returned 0x20 [0170.488] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0 [0170.488] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll")) returned 0 [0170.489] SetEvent (hEvent=0x27c) returned 1 [0170.489] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabTip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabtip.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0170.489] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=391040) returned 1 [0170.489] CloseHandle (hObject=0x2c8) returned 1 [0170.489] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabTip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabtip.exe")) returned 0x20 [0170.489] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabTip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabtip.exe")) returned 0x20 [0170.489] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabTip.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabtip.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.490] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabTip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabtip.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.490] SetEvent (hEvent=0x27c) returned 1 [0170.490] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0170.490] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=9728) returned 1 [0170.490] CloseHandle (hObject=0x2c8) returned 1 [0170.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th\\tipresx.dll.mui")) returned 0x20 [0170.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th\\tipresx.dll.mui")) returned 0x20 [0170.491] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.491] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.491] SetEvent (hEvent=0x27c) returned 1 [0170.491] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TipRes.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipres.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0170.491] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1086464) returned 1 [0170.491] CloseHandle (hObject=0x2c8) returned 1 [0170.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TipRes.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipres.dll")) returned 0x20 [0170.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TipRes.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipres.dll")) returned 0x20 [0170.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TipRes.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipres.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.492] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TipRes.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipres.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.492] SetEvent (hEvent=0x27c) returned 1 [0170.492] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipresx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipresx.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0170.493] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=22016) returned 1 [0170.493] CloseHandle (hObject=0x2c8) returned 1 [0170.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipresx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipresx.dll")) returned 0x20 [0170.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipresx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipresx.dll")) returned 0x20 [0170.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipresx.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipresx.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.493] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipresx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipresx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.493] SetEvent (hEvent=0x27c) returned 1 [0170.494] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipskins.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipskins.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0170.494] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1053184) returned 1 [0170.494] CloseHandle (hObject=0x2c8) returned 1 [0170.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipskins.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipskins.dll")) returned 0x20 [0170.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipskins.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipskins.dll")) returned 0x20 [0170.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipskins.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipskins.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.495] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipskins.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipskins.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.495] SetEvent (hEvent=0x27c) returned 1 [0170.495] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tiptsf.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tiptsf.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0170.496] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=647584) returned 1 [0170.496] CloseHandle (hObject=0x2c8) returned 1 [0170.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tiptsf.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tiptsf.dll")) returned 0x20 [0170.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tiptsf.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tiptsf.dll")) returned 0x20 [0170.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tiptsf.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tiptsf.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.496] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tiptsf.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tiptsf.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.496] SetEvent (hEvent=0x27c) returned 1 [0170.497] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tpcps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tpcps.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0170.497] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=96768) returned 1 [0170.497] CloseHandle (hObject=0x2c8) returned 1 [0170.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tpcps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tpcps.dll")) returned 0x20 [0170.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tpcps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tpcps.dll")) returned 0x20 [0170.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tpcps.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tpcps.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.498] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tpcps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tpcps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.498] SetEvent (hEvent=0x27c) returned 1 [0170.498] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0170.499] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=10240) returned 1 [0170.499] CloseHandle (hObject=0x2c8) returned 1 [0170.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr\\tipresx.dll.mui")) returned 0x20 [0170.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr\\tipresx.dll.mui")) returned 0x20 [0170.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.499] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.499] SetEvent (hEvent=0x27c) returned 1 [0170.500] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0170.500] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=10240) returned 1 [0170.500] CloseHandle (hObject=0x2c8) returned 1 [0170.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua\\tipresx.dll.mui")) returned 0x20 [0170.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua\\tipresx.dll.mui")) returned 0x20 [0170.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.501] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.501] SetEvent (hEvent=0x27c) returned 1 [0170.501] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0170.502] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=7168) returned 1 [0170.502] CloseHandle (hObject=0x2c8) returned 1 [0170.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn\\tipresx.dll.mui")) returned 0x20 [0170.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn\\tipresx.dll.mui")) returned 0x20 [0170.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.502] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.502] SetEvent (hEvent=0x27c) returned 1 [0170.503] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0170.503] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=7168) returned 1 [0170.503] CloseHandle (hObject=0x2c8) returned 1 [0170.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw\\tipresx.dll.mui")) returned 0x20 [0170.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw\\tipresx.dll.mui")) returned 0x20 [0170.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.504] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.504] SetEvent (hEvent=0x27c) returned 1 [0170.504] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\msinfo32.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\msinfo32.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0170.505] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=30720) returned 1 [0170.505] CloseHandle (hObject=0x2c8) returned 1 [0170.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\msinfo32.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\msinfo32.exe.mui")) returned 0x20 [0170.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\msinfo32.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\msinfo32.exe.mui")) returned 0x20 [0170.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\msinfo32.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\msinfo32.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.505] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\msinfo32.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\msinfo32.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.505] SetEvent (hEvent=0x27c) returned 1 [0170.506] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\msinfo32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\msinfo32.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0170.506] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=370176) returned 1 [0170.506] CloseHandle (hObject=0x2c8) returned 1 [0170.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\msinfo32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\msinfo32.exe")) returned 0x20 [0170.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\msinfo32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\msinfo32.exe")) returned 0x20 [0170.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\msinfo32.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\msinfo32.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.507] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\msinfo32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\msinfo32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.507] SetEvent (hEvent=0x27c) returned 1 [0170.507] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0170.508] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=363728) returned 1 [0170.508] CloseHandle (hObject=0x2c8) returned 1 [0170.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe")) returned 0x20 [0170.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe")) returned 0x20 [0170.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.508] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0170.508] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0170.508] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0170.508] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e0 [0170.592] ReadFile (in: hFile=0x2c8, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x58cd0, lpOverlapped=0x0) returned 1 [0170.604] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x58ce0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x58ce0, lpOverlapped=0x0) returned 1 [0170.612] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0170.612] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0170.612] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0170.612] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x58cd0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x58cd0, lpOverlapped=0x0) returned 1 [0170.614] FlushFileBuffers (hFile=0x2c8) returned 1 [0170.842] FlushFileBuffers (hFile=0x2e0) returned 1 [0170.844] CloseHandle (hObject=0x2c8) returned 1 [0170.844] CloseHandle (hObject=0x2e0) returned 1 [0170.844] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe")) returned 1 [0170.848] SetEvent (hEvent=0x27c) returned 1 [0170.848] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0170.849] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=590523) returned 1 [0170.849] CloseHandle (hObject=0x2e0) returned 1 [0170.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms")) returned 0x20 [0170.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms")) returned 0x20 [0170.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.849] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0170.849] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0170.850] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0170.850] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c8 [0170.850] ReadFile (in: hFile=0x2e0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x902bb, lpOverlapped=0x0) returned 1 [0170.868] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x902c0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x902c0, lpOverlapped=0x0) returned 1 [0170.977] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x112, lpOverlapped=0x0) returned 1 [0170.977] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0170.977] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0170.977] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x902bb, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x902bb, lpOverlapped=0x0) returned 1 [0170.979] FlushFileBuffers (hFile=0x2e0) returned 1 [0171.117] FlushFileBuffers (hFile=0x2c8) returned 1 [0171.119] CloseHandle (hObject=0x2e0) returned 1 [0171.119] CloseHandle (hObject=0x2c8) returned 1 [0171.119] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms")) returned 1 [0171.126] SetEvent (hEvent=0x27c) returned 1 [0171.126] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig.companion.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0171.126] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=18624) returned 1 [0171.126] CloseHandle (hObject=0x2c8) returned 1 [0171.126] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig.companion.dll")) returned 0x20 [0171.126] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig.companion.dll")) returned 0x20 [0171.126] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig.companion.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0171.127] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig.companion.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0171.127] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0171.127] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0171.127] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig.companion.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e0 [0171.127] ReadFile (in: hFile=0x2c8, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x48c0, lpOverlapped=0x0) returned 1 [0171.129] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x48d0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x48d0, lpOverlapped=0x0) returned 1 [0171.130] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x112, lpOverlapped=0x0) returned 1 [0171.131] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0171.131] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0171.131] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x48c0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x48c0, lpOverlapped=0x0) returned 1 [0171.131] FlushFileBuffers (hFile=0x2c8) returned 1 [0171.134] FlushFileBuffers (hFile=0x2e0) returned 1 [0171.136] CloseHandle (hObject=0x2c8) returned 1 [0171.136] CloseHandle (hObject=0x2e0) returned 1 [0171.136] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig.companion.dll")) returned 1 [0171.137] SetEvent (hEvent=0x27c) returned 1 [0171.137] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0171.138] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=244296) returned 1 [0171.138] CloseHandle (hObject=0x2e0) returned 1 [0171.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe")) returned 0x20 [0171.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe")) returned 0x20 [0171.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0171.138] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0171.138] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0171.140] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0171.140] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c8 [0171.140] ReadFile (in: hFile=0x2e0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x3ba48, lpOverlapped=0x0) returned 1 [0171.148] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3ba50, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3ba50, lpOverlapped=0x0) returned 1 [0171.153] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xe2, lpOverlapped=0x0) returned 1 [0171.153] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0171.153] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0171.153] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3ba48, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x3ba48, lpOverlapped=0x0) returned 1 [0171.160] FlushFileBuffers (hFile=0x2e0) returned 1 [0171.286] FlushFileBuffers (hFile=0x2c8) returned 1 [0171.288] CloseHandle (hObject=0x2e0) returned 1 [0171.288] CloseHandle (hObject=0x2c8) returned 1 [0171.288] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe")) returned 1 [0171.294] SetEvent (hEvent=0x27c) returned 1 [0171.294] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0171.295] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=255) returned 1 [0171.295] CloseHandle (hObject=0x2c8) returned 1 [0171.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm")) returned 0x20 [0171.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm")) returned 0x20 [0171.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0171.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0171.296] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0171.296] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1074) returned 1 [0171.297] CloseHandle (hObject=0x2c8) returned 1 [0171.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg")) returned 0x20 [0171.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg")) returned 0x20 [0171.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0171.297] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0171.297] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0171.298] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=645) returned 1 [0171.298] CloseHandle (hObject=0x2c8) returned 1 [0171.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini")) returned 0x26 [0171.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini")) returned 0x26 [0171.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0171.298] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0171.298] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0171.298] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0171.298] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x26, hTemplateFile=0x0) returned 0x2e0 [0171.299] ReadFile (in: hFile=0x2c8, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x285, lpOverlapped=0x0) returned 1 [0171.300] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x290, lpOverlapped=0x0) returned 1 [0171.301] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0171.302] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0171.302] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0171.302] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x285, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x285, lpOverlapped=0x0) returned 1 [0171.302] FlushFileBuffers (hFile=0x2c8) returned 1 [0171.304] FlushFileBuffers (hFile=0x2e0) returned 1 [0171.306] CloseHandle (hObject=0x2c8) returned 1 [0171.306] CloseHandle (hObject=0x2e0) returned 1 [0171.306] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini")) returned 1 [0171.308] SetEvent (hEvent=0x27c) returned 1 [0171.308] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0171.308] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=231) returned 1 [0171.308] CloseHandle (hObject=0x2e0) returned 1 [0171.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm")) returned 0x20 [0171.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm")) returned 0x20 [0171.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0171.309] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0171.309] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0171.309] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=23871) returned 1 [0171.309] CloseHandle (hObject=0x2e0) returned 1 [0171.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg")) returned 0x20 [0171.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg")) returned 0x20 [0171.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0171.310] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0171.310] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0171.310] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=237) returned 1 [0171.310] CloseHandle (hObject=0x2e0) returned 1 [0171.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm")) returned 0x20 [0171.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm")) returned 0x20 [0171.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0171.311] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0171.311] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0171.313] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=6406) returned 1 [0171.313] CloseHandle (hObject=0x2e0) returned 1 [0171.313] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg")) returned 0x20 [0171.313] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg")) returned 0x20 [0171.313] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0171.313] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0171.313] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0171.314] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=235) returned 1 [0171.314] CloseHandle (hObject=0x2e0) returned 1 [0171.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm")) returned 0x20 [0171.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm")) returned 0x20 [0171.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0171.314] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0171.314] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0171.314] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=4222) returned 1 [0171.314] CloseHandle (hObject=0x2e0) returned 1 [0171.315] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg")) returned 0x20 [0171.315] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg")) returned 0x20 [0171.315] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0171.315] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0171.315] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0171.315] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=237) returned 1 [0171.315] CloseHandle (hObject=0x2e0) returned 1 [0171.315] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm")) returned 0x20 [0171.315] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm")) returned 0x20 [0171.315] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0171.315] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0171.316] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0171.316] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=6381) returned 1 [0171.316] CloseHandle (hObject=0x2e0) returned 1 [0171.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg")) returned 0x20 [0171.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg")) returned 0x20 [0171.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0171.316] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0171.316] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0171.317] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=232) returned 1 [0171.317] CloseHandle (hObject=0x2e0) returned 1 [0171.317] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm")) returned 0x20 [0171.317] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm")) returned 0x20 [0171.317] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0171.317] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0171.317] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0171.317] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=5115) returned 1 [0171.317] CloseHandle (hObject=0x2e0) returned 1 [0171.318] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg")) returned 0x20 [0171.318] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg")) returned 0x20 [0171.318] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0171.318] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0171.318] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0171.318] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=233) returned 1 [0171.318] CloseHandle (hObject=0x2e0) returned 1 [0171.318] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.htm")) returned 0x20 [0171.318] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.htm")) returned 0x20 [0171.318] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.htm.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0171.318] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0171.319] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0171.319] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1920) returned 1 [0171.319] CloseHandle (hObject=0x2e0) returned 1 [0171.319] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg")) returned 0x20 [0171.319] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg")) returned 0x20 [0171.319] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0171.319] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0171.319] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Shades of Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shades of blue.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0171.321] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=237) returned 1 [0171.321] CloseHandle (hObject=0x2e0) returned 1 [0171.321] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Shades of Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shades of blue.htm")) returned 0x20 [0171.321] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Shades of Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shades of blue.htm")) returned 0x20 [0171.321] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Shades of Blue.htm.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shades of blue.htm.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0171.321] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Shades of Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shades of blue.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0171.321] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0171.321] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=4734) returned 1 [0171.321] CloseHandle (hObject=0x2e0) returned 1 [0171.322] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg")) returned 0x20 [0171.322] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg")) returned 0x20 [0171.322] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0171.322] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0171.322] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Soft Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\soft blue.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0171.322] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=232) returned 1 [0171.322] CloseHandle (hObject=0x2e0) returned 1 [0171.322] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Soft Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\soft blue.htm")) returned 0x20 [0171.322] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Soft Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\soft blue.htm")) returned 0x20 [0171.322] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Soft Blue.htm.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\soft blue.htm.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0171.322] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Soft Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\soft blue.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0171.323] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0171.323] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=10569) returned 1 [0171.323] CloseHandle (hObject=0x2e0) returned 1 [0171.323] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg")) returned 0x20 [0171.323] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg")) returned 0x20 [0171.323] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0171.323] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0171.323] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0171.324] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=230) returned 1 [0171.324] CloseHandle (hObject=0x2e0) returned 1 [0171.324] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm")) returned 0x20 [0171.324] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm")) returned 0x20 [0171.324] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0171.324] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0171.324] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0171.324] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=7505) returned 1 [0171.324] CloseHandle (hObject=0x2e0) returned 1 [0171.324] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg")) returned 0x20 [0171.325] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg")) returned 0x20 [0171.325] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0171.325] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0171.325] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0171.325] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=990032) returned 1 [0171.325] CloseHandle (hObject=0x2e0) returned 1 [0171.325] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll")) returned 0x20 [0171.325] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll")) returned 0x20 [0171.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0171.326] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0171.326] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0171.326] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0171.326] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c8 [0171.327] ReadFile (in: hFile=0x2e0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xf1b50, lpOverlapped=0x0) returned 1 [0171.479] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf1b60, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf1b60, lpOverlapped=0x0) returned 1 [0171.500] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0171.500] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0171.500] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0171.500] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf1b50, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xf1b50, lpOverlapped=0x0) returned 1 [0171.503] FlushFileBuffers (hFile=0x2e0) returned 1 [0171.756] FlushFileBuffers (hFile=0x2c8) returned 1 [0171.761] CloseHandle (hObject=0x2e0) returned 1 [0171.761] CloseHandle (hObject=0x2c8) returned 1 [0171.761] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll")) returned 1 [0171.770] SetEvent (hEvent=0x27c) returned 1 [0171.770] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\vgx.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0171.771] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=987136) returned 1 [0171.771] CloseHandle (hObject=0x2c8) returned 1 [0171.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\vgx.dll")) returned 0x20 [0171.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\vgx.dll")) returned 0x20 [0171.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\vgx.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0171.771] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\vgx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0171.771] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0171.772] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=12448) returned 1 [0171.772] CloseHandle (hObject=0x2c8) returned 1 [0171.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll")) returned 0x20 [0171.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll")) returned 0x20 [0171.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0171.773] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0171.773] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0171.773] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0171.773] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e0 [0171.775] ReadFile (in: hFile=0x2c8, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x30a0, lpOverlapped=0x0) returned 1 [0171.777] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x30b0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x30b0, lpOverlapped=0x0) returned 1 [0171.778] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x102, lpOverlapped=0x0) returned 1 [0171.778] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0171.778] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0171.778] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x30a0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x30a0, lpOverlapped=0x0) returned 1 [0171.778] FlushFileBuffers (hFile=0x2c8) returned 1 [0171.810] FlushFileBuffers (hFile=0x2e0) returned 1 [0171.826] CloseHandle (hObject=0x2c8) returned 1 [0171.827] CloseHandle (hObject=0x2e0) returned 1 [0171.827] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll")) returned 1 [0171.828] SetEvent (hEvent=0x27c) returned 1 [0171.828] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0171.828] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=100488) returned 1 [0171.828] CloseHandle (hObject=0x2e0) returned 1 [0171.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe")) returned 0x20 [0171.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe")) returned 0x20 [0171.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0171.829] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0171.829] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0171.829] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0171.829] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c8 [0171.829] ReadFile (in: hFile=0x2e0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x18888, lpOverlapped=0x0) returned 1 [0171.835] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x18890, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x18890, lpOverlapped=0x0) returned 1 [0171.837] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x102, lpOverlapped=0x0) returned 1 [0171.837] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0171.837] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0171.838] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x18888, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x18888, lpOverlapped=0x0) returned 1 [0171.838] FlushFileBuffers (hFile=0x2e0) returned 1 [0172.046] FlushFileBuffers (hFile=0x2c8) returned 1 [0172.053] CloseHandle (hObject=0x2e0) returned 1 [0172.053] CloseHandle (hObject=0x2c8) returned 1 [0172.053] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe")) returned 1 [0172.055] SetEvent (hEvent=0x27c) returned 1 [0172.055] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0172.056] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=48872) returned 1 [0172.056] CloseHandle (hObject=0x2c8) returned 1 [0172.056] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll")) returned 0x20 [0172.056] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll")) returned 0x20 [0172.056] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.056] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0172.056] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0172.056] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0172.056] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e0 [0172.057] ReadFile (in: hFile=0x2c8, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xbee8, lpOverlapped=0x0) returned 1 [0172.061] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xbef0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xbef0, lpOverlapped=0x0) returned 1 [0172.063] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x102, lpOverlapped=0x0) returned 1 [0172.063] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0172.063] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0172.063] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xbee8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xbee8, lpOverlapped=0x0) returned 1 [0172.064] FlushFileBuffers (hFile=0x2c8) returned 1 [0172.442] FlushFileBuffers (hFile=0x2e0) returned 1 [0172.444] CloseHandle (hObject=0x2c8) returned 1 [0172.444] CloseHandle (hObject=0x2e0) returned 1 [0172.444] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll")) returned 1 [0172.446] SetEvent (hEvent=0x27c) returned 1 [0172.446] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0172.446] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=17048) returned 1 [0172.446] CloseHandle (hObject=0x2e0) returned 1 [0172.446] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb")) returned 0x20 [0172.446] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb")) returned 0x20 [0172.446] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.446] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0172.447] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0172.447] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0172.447] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c8 [0172.447] ReadFile (in: hFile=0x2e0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4298, lpOverlapped=0x0) returned 1 [0172.450] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x42a0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x42a0, lpOverlapped=0x0) returned 1 [0172.451] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0172.451] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0172.451] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0172.451] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4298, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4298, lpOverlapped=0x0) returned 1 [0172.451] FlushFileBuffers (hFile=0x2e0) returned 1 [0172.454] FlushFileBuffers (hFile=0x2c8) returned 1 [0172.455] CloseHandle (hObject=0x2e0) returned 1 [0172.456] CloseHandle (hObject=0x2c8) returned 1 [0172.456] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb")) returned 1 [0172.457] SetEvent (hEvent=0x27c) returned 1 [0172.457] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0172.457] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=22680) returned 1 [0172.457] CloseHandle (hObject=0x2c8) returned 1 [0172.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb")) returned 0x20 [0172.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb")) returned 0x20 [0172.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.458] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0172.458] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0172.458] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0172.458] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e0 [0172.458] ReadFile (in: hFile=0x2c8, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x5898, lpOverlapped=0x0) returned 1 [0172.461] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x58a0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x58a0, lpOverlapped=0x0) returned 1 [0172.462] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0172.462] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0172.462] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0172.462] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5898, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x5898, lpOverlapped=0x0) returned 1 [0172.463] FlushFileBuffers (hFile=0x2c8) returned 1 [0172.465] FlushFileBuffers (hFile=0x2e0) returned 1 [0172.467] CloseHandle (hObject=0x2c8) returned 1 [0172.467] CloseHandle (hObject=0x2e0) returned 1 [0172.467] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb")) returned 1 [0172.468] SetEvent (hEvent=0x27c) returned 1 [0172.468] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0172.469] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2702) returned 1 [0172.469] CloseHandle (hObject=0x2e0) returned 1 [0172.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp")) returned 0x20 [0172.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp")) returned 0x20 [0172.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Services\\verisign.bmp.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\services\\verisign.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.469] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.469] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adojavas.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0172.470] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=14856) returned 1 [0172.470] CloseHandle (hObject=0x2e0) returned 1 [0172.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adojavas.inc")) returned 0x20 [0172.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adojavas.inc")) returned 0x20 [0172.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ado\\adojavas.inc.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.470] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adojavas.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.471] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adovbs.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0172.471] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=15195) returned 1 [0172.471] CloseHandle (hObject=0x2e0) returned 1 [0172.471] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adovbs.inc")) returned 0x20 [0172.471] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adovbs.inc")) returned 0x20 [0172.471] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ado\\adovbs.inc.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.471] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adovbs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.471] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\msader15.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0172.472] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=17920) returned 1 [0172.472] CloseHandle (hObject=0x2e0) returned 1 [0172.472] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\msader15.dll.mui")) returned 0x20 [0172.472] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\msader15.dll.mui")) returned 0x20 [0172.472] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\msader15.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.472] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\msader15.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.472] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msader15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msader15.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0172.472] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2560) returned 1 [0172.472] CloseHandle (hObject=0x2e0) returned 1 [0172.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msader15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msader15.dll")) returned 0x20 [0172.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msader15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msader15.dll")) returned 0x20 [0172.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msader15.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ado\\msader15.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.473] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msader15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msader15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.473] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msado15.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0172.473] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1233920) returned 1 [0172.473] CloseHandle (hObject=0x2e0) returned 1 [0172.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msado15.dll")) returned 0x20 [0172.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msado15.dll")) returned 0x20 [0172.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado15.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ado\\msado15.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.474] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msado15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.474] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado20.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0172.474] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=50688) returned 1 [0172.474] CloseHandle (hObject=0x2e0) returned 1 [0172.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado20.tlb")) returned 0x20 [0172.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado20.tlb")) returned 0x20 [0172.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ado\\msado20.tlb.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.474] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado20.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.475] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado21.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0172.475] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=53760) returned 1 [0172.475] CloseHandle (hObject=0x2e0) returned 1 [0172.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado21.tlb")) returned 0x20 [0172.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado21.tlb")) returned 0x20 [0172.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ado\\msado21.tlb.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.475] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado21.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.475] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado25.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0172.476] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=69632) returned 1 [0172.476] CloseHandle (hObject=0x2e0) returned 1 [0172.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado25.tlb")) returned 0x20 [0172.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado25.tlb")) returned 0x20 [0172.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ado\\msado25.tlb.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.476] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado25.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.476] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado26.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0172.476] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=70656) returned 1 [0172.476] CloseHandle (hObject=0x2e0) returned 1 [0172.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado26.tlb")) returned 0x20 [0172.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado26.tlb")) returned 0x20 [0172.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ado\\msado26.tlb.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.477] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado26.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.477] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado27.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0172.477] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=71168) returned 1 [0172.477] CloseHandle (hObject=0x2e0) returned 1 [0172.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado27.tlb")) returned 0x20 [0172.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado27.tlb")) returned 0x20 [0172.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ado\\msado27.tlb.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.477] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado27.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.478] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado28.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0172.478] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=70656) returned 1 [0172.478] CloseHandle (hObject=0x2e0) returned 1 [0172.478] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado28.tlb")) returned 0x20 [0172.478] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado28.tlb")) returned 0x20 [0172.478] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ado\\msado28.tlb.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.478] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.478] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado60.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0172.479] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=70656) returned 1 [0172.479] CloseHandle (hObject=0x2e0) returned 1 [0172.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado60.tlb")) returned 0x20 [0172.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado60.tlb")) returned 0x20 [0172.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ado\\msado60.tlb.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.479] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado60.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.479] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0172.479] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=364032) returned 1 [0172.479] CloseHandle (hObject=0x2e0) returned 1 [0172.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd.dll")) returned 0x20 [0172.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd.dll")) returned 0x20 [0172.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.480] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.480] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd28.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0172.480] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=13824) returned 1 [0172.480] CloseHandle (hObject=0x2e0) returned 1 [0172.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd28.tlb")) returned 0x20 [0172.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd28.tlb")) returned 0x20 [0172.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd28.tlb.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.480] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.480] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msador15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msador15.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0172.481] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=45568) returned 1 [0172.481] CloseHandle (hObject=0x2e0) returned 1 [0172.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msador15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msador15.dll")) returned 0x20 [0172.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msador15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msador15.dll")) returned 0x20 [0172.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msador15.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ado\\msador15.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.481] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msador15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msador15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.481] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msador28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msador28.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0172.482] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=35840) returned 1 [0172.482] CloseHandle (hObject=0x2e0) returned 1 [0172.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msador28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msador28.tlb")) returned 0x20 [0172.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msador28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msador28.tlb")) returned 0x20 [0172.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msador28.tlb.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ado\\msador28.tlb.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.482] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msador28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msador28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.482] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadox.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0172.482] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=404992) returned 1 [0172.482] CloseHandle (hObject=0x2e0) returned 1 [0172.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadox.dll")) returned 0x20 [0172.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadox.dll")) returned 0x20 [0172.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ado\\msadox.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.483] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadox.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.483] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadox28.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0172.483] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=24576) returned 1 [0172.483] CloseHandle (hObject=0x2e0) returned 1 [0172.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadox28.tlb")) returned 0x20 [0172.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadox28.tlb")) returned 0x20 [0172.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ado\\msadox28.tlb.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.483] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadox28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.484] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadrh15.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0172.484] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=91136) returned 1 [0172.484] CloseHandle (hObject=0x2e0) returned 1 [0172.488] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadrh15.dll")) returned 0x20 [0172.489] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadrh15.dll")) returned 0x20 [0172.489] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ado\\msadrh15.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.489] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadrh15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.489] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\DirectDB.dll" (normalized: "c:\\program files\\common files\\system\\directdb.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0172.489] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=32768) returned 1 [0172.489] CloseHandle (hObject=0x2e0) returned 1 [0172.489] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\DirectDB.dll" (normalized: "c:\\program files\\common files\\system\\directdb.dll")) returned 0x20 [0172.489] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\DirectDB.dll" (normalized: "c:\\program files\\common files\\system\\directdb.dll")) returned 0x20 [0172.489] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\DirectDB.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\directdb.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.489] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\DirectDB.dll" (normalized: "c:\\program files\\common files\\system\\directdb.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.490] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\en-US\\wab32res.dll.mui" (normalized: "c:\\program files\\common files\\system\\en-us\\wab32res.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0172.490] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=94208) returned 1 [0172.490] CloseHandle (hObject=0x2e0) returned 1 [0172.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\en-US\\wab32res.dll.mui" (normalized: "c:\\program files\\common files\\system\\en-us\\wab32res.dll.mui")) returned 0x20 [0172.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\en-US\\wab32res.dll.mui" (normalized: "c:\\program files\\common files\\system\\en-us\\wab32res.dll.mui")) returned 0x20 [0172.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\en-US\\wab32res.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\en-us\\wab32res.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.490] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\en-US\\wab32res.dll.mui" (normalized: "c:\\program files\\common files\\system\\en-us\\wab32res.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.490] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcjavas.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0172.491] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=630) returned 1 [0172.491] CloseHandle (hObject=0x2e0) returned 1 [0172.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcjavas.inc")) returned 0x20 [0172.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcjavas.inc")) returned 0x20 [0172.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\msadc\\adcjavas.inc.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.492] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcjavas.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.492] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcvbs.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0172.492] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=623) returned 1 [0172.492] CloseHandle (hObject=0x2e0) returned 1 [0172.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcvbs.inc")) returned 0x20 [0172.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcvbs.inc")) returned 0x20 [0172.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\msadc\\adcvbs.inc.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.493] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcvbs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.493] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcer.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0172.493] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=10240) returned 1 [0172.493] CloseHandle (hObject=0x2e0) returned 1 [0172.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcer.dll.mui")) returned 0x20 [0172.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcer.dll.mui")) returned 0x20 [0172.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcer.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.493] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcer.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.494] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcor.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcor.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0172.494] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=6144) returned 1 [0172.494] CloseHandle (hObject=0x2e0) returned 1 [0172.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcor.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcor.dll.mui")) returned 0x20 [0172.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcor.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcor.dll.mui")) returned 0x20 [0172.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcor.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcor.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.494] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcor.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcor.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.494] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msaddsr.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0172.494] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=14336) returned 1 [0172.495] CloseHandle (hObject=0x2e0) returned 1 [0172.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msaddsr.dll.mui")) returned 0x20 [0172.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msaddsr.dll.mui")) returned 0x20 [0172.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msaddsr.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.495] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msaddsr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.495] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaprsr.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0172.495] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=7680) returned 1 [0172.495] CloseHandle (hObject=0x2e0) returned 1 [0172.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaprsr.dll.mui")) returned 0x20 [0172.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaprsr.dll.mui")) returned 0x20 [0172.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaprsr.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.496] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaprsr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.496] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaremr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaremr.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0172.496] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=6144) returned 1 [0172.496] CloseHandle (hObject=0x2e0) returned 1 [0172.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaremr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaremr.dll.mui")) returned 0x20 [0172.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaremr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaremr.dll.mui")) returned 0x20 [0172.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaremr.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaremr.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.496] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaremr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaremr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.496] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadce.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadce.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0172.499] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=695296) returned 1 [0172.499] CloseHandle (hObject=0x2e0) returned 1 [0172.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadce.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadce.dll")) returned 0x20 [0172.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadce.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadce.dll")) returned 0x20 [0172.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadce.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\msadc\\msadce.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.500] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadce.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadce.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.500] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcer.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcer.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0172.500] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2560) returned 1 [0172.500] CloseHandle (hObject=0x2e0) returned 1 [0172.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcer.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcer.dll")) returned 0x20 [0172.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcer.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcer.dll")) returned 0x20 [0172.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcer.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcer.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.500] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcer.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcer.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.501] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadco.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadco.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0172.501] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=242688) returned 1 [0172.501] CloseHandle (hObject=0x2e0) returned 1 [0172.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadco.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadco.dll")) returned 0x20 [0172.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadco.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadco.dll")) returned 0x20 [0172.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadco.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\msadc\\msadco.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.501] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadco.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadco.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.501] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcor.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcor.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0172.502] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2560) returned 1 [0172.502] CloseHandle (hObject=0x2e0) returned 1 [0172.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcor.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcor.dll")) returned 0x20 [0172.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcor.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcor.dll")) returned 0x20 [0172.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcor.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcor.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.502] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcor.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcor.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.502] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadds.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadds.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0172.502] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=279552) returned 1 [0172.502] CloseHandle (hObject=0x2e0) returned 1 [0172.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadds.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadds.dll")) returned 0x20 [0172.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadds.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadds.dll")) returned 0x20 [0172.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadds.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\msadc\\msadds.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.503] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadds.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadds.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.503] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msaddsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msaddsr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0172.503] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2560) returned 1 [0172.503] CloseHandle (hObject=0x2e0) returned 1 [0172.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msaddsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msaddsr.dll")) returned 0x20 [0172.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msaddsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msaddsr.dll")) returned 0x20 [0172.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msaddsr.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\msadc\\msaddsr.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.503] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msaddsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msaddsr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.503] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprsr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0172.504] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2560) returned 1 [0172.504] CloseHandle (hObject=0x2e0) returned 1 [0172.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprsr.dll")) returned 0x20 [0172.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprsr.dll")) returned 0x20 [0172.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprsr.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprsr.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.504] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprsr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.504] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprst.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprst.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0172.504] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=356352) returned 1 [0172.504] CloseHandle (hObject=0x2e0) returned 1 [0172.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprst.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprst.dll")) returned 0x20 [0172.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprst.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprst.dll")) returned 0x20 [0172.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprst.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprst.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.505] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprst.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprst.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.505] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdarem.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0172.505] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=221696) returned 1 [0172.505] CloseHandle (hObject=0x2e0) returned 1 [0172.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdarem.dll")) returned 0x20 [0172.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdarem.dll")) returned 0x20 [0172.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\msadc\\msdarem.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.505] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdarem.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.506] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaremr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaremr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0172.506] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2560) returned 1 [0172.506] CloseHandle (hObject=0x2e0) returned 1 [0172.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaremr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaremr.dll")) returned 0x20 [0172.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaremr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaremr.dll")) returned 0x20 [0172.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaremr.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaremr.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.506] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaremr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaremr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.506] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdfmap.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdfmap.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0172.507] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=31744) returned 1 [0172.507] CloseHandle (hObject=0x2e0) returned 1 [0172.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdfmap.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdfmap.dll")) returned 0x20 [0172.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdfmap.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdfmap.dll")) returned 0x20 [0172.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdfmap.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\msadc\\msdfmap.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.507] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdfmap.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdfmap.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.507] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\msdasqlr.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\msdasqlr.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0172.507] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=6144) returned 1 [0172.508] CloseHandle (hObject=0x2e0) returned 1 [0172.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\msdasqlr.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\msdasqlr.dll.mui")) returned 0x20 [0172.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\msdasqlr.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\msdasqlr.dll.mui")) returned 0x20 [0172.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\msdasqlr.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\msdasqlr.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.508] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\msdasqlr.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\msdasqlr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.508] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\oledb32r.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\oledb32r.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0172.508] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=48128) returned 1 [0172.508] CloseHandle (hObject=0x2e0) returned 1 [0172.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\oledb32r.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\oledb32r.dll.mui")) returned 0x20 [0172.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\oledb32r.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\oledb32r.dll.mui")) returned 0x20 [0172.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\oledb32r.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\oledb32r.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.509] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\oledb32r.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\oledb32r.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.509] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqloledb.rll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0172.510] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=44032) returned 1 [0172.510] CloseHandle (hObject=0x2e0) returned 1 [0172.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqloledb.rll.mui")) returned 0x20 [0172.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqloledb.rll.mui")) returned 0x20 [0172.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqloledb.rll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.510] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqloledb.rll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.510] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqlxmlx.rll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0172.511] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=18432) returned 1 [0172.511] CloseHandle (hObject=0x2e0) returned 1 [0172.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqlxmlx.rll.mui")) returned 0x20 [0172.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqlxmlx.rll.mui")) returned 0x20 [0172.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqlxmlx.rll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.511] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqlxmlx.rll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.511] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaosp.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaosp.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0172.511] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=99840) returned 1 [0172.511] CloseHandle (hObject=0x2e0) returned 1 [0172.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaosp.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaosp.dll")) returned 0x20 [0172.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaosp.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaosp.dll")) returned 0x20 [0172.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaosp.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaosp.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.512] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaosp.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaosp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.512] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaps.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0172.512] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=376320) returned 1 [0172.512] CloseHandle (hObject=0x2e0) returned 1 [0172.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaps.dll")) returned 0x20 [0172.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaps.dll")) returned 0x20 [0172.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaps.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaps.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.512] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.512] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasql.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasql.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0172.513] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=698368) returned 1 [0172.513] CloseHandle (hObject=0x2e0) returned 1 [0172.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasql.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasql.dll")) returned 0x20 [0172.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasql.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasql.dll")) returned 0x20 [0172.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasql.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasql.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.513] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasql.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasql.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.513] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasqlr.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasqlr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0172.857] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=54784) returned 1 [0172.857] CloseHandle (hObject=0x2e0) returned 1 [0172.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasqlr.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasqlr.dll")) returned 0x20 [0172.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasqlr.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasqlr.dll")) returned 0x20 [0172.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasqlr.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasqlr.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.858] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasqlr.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasqlr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.858] SetEvent (hEvent=0x27c) returned 1 [0172.859] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\bci.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0172.859] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=16960) returned 1 [0172.859] CloseHandle (hObject=0x2e0) returned 1 [0172.859] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\bci.dll")) returned 0x20 [0172.859] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\bci.dll")) returned 0x20 [0172.859] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\bci.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.859] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\bci.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0172.859] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0172.860] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0172.860] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\bci.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c8 [0172.860] ReadFile (in: hFile=0x2e0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4240, lpOverlapped=0x0) returned 1 [0172.862] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4250, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4250, lpOverlapped=0x0) returned 1 [0172.863] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xe2, lpOverlapped=0x0) returned 1 [0172.864] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0172.864] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0172.864] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4240, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4240, lpOverlapped=0x0) returned 1 [0172.864] FlushFileBuffers (hFile=0x2e0) returned 1 [0173.306] FlushFileBuffers (hFile=0x2c8) returned 1 [0173.309] CloseHandle (hObject=0x2e0) returned 1 [0173.309] CloseHandle (hObject=0x2c8) returned 1 [0173.309] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\bci.dll")) returned 1 [0173.311] SetEvent (hEvent=0x27c) returned 1 [0173.311] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dcpr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0173.311] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=159808) returned 1 [0173.311] CloseHandle (hObject=0x2c8) returned 1 [0173.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dcpr.dll")) returned 0x20 [0173.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dcpr.dll")) returned 0x20 [0173.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dcpr.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0173.311] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dcpr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0173.312] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0173.312] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0173.312] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dcpr.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e0 [0173.312] ReadFile (in: hFile=0x2c8, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x27040, lpOverlapped=0x0) returned 1 [0173.318] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x27050, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x27050, lpOverlapped=0x0) returned 1 [0173.322] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0173.322] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0173.322] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0173.322] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x27040, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x27040, lpOverlapped=0x0) returned 1 [0173.323] FlushFileBuffers (hFile=0x2c8) returned 1 [0173.631] FlushFileBuffers (hFile=0x2e0) returned 1 [0173.633] CloseHandle (hObject=0x2c8) returned 1 [0173.633] CloseHandle (hObject=0x2e0) returned 1 [0173.634] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dcpr.dll")) returned 1 [0173.636] SetEvent (hEvent=0x27c) returned 1 [0173.636] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\decora_sse.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0173.636] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=86080) returned 1 [0173.636] CloseHandle (hObject=0x2e0) returned 1 [0173.636] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\decora_sse.dll")) returned 0x20 [0173.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\decora_sse.dll")) returned 0x20 [0173.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\decora_sse.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0173.637] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\decora_sse.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0173.637] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0173.637] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0173.637] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\decora_sse.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c8 [0173.637] ReadFile (in: hFile=0x2e0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x15040, lpOverlapped=0x0) returned 1 [0173.641] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x15050, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x15050, lpOverlapped=0x0) returned 1 [0173.644] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0173.644] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0173.644] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0173.644] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x15040, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x15040, lpOverlapped=0x0) returned 1 [0173.644] FlushFileBuffers (hFile=0x2e0) returned 1 [0173.860] FlushFileBuffers (hFile=0x2c8) returned 1 [0173.861] CloseHandle (hObject=0x2e0) returned 1 [0173.861] CloseHandle (hObject=0x2c8) returned 1 [0173.862] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\decora_sse.dll")) returned 1 [0173.864] SetEvent (hEvent=0x27c) returned 1 [0173.864] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0173.864] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=587840) returned 1 [0173.864] CloseHandle (hObject=0x2c8) returned 1 [0173.864] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll")) returned 0x20 [0173.864] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll")) returned 0x20 [0173.864] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0173.865] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0173.865] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0173.865] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0173.865] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e0 [0173.865] ReadFile (in: hFile=0x2c8, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x8f840, lpOverlapped=0x0) returned 1 [0173.893] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8f850, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x8f850, lpOverlapped=0x0) returned 1 [0174.132] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0174.132] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0174.132] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0174.132] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8f840, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x8f840, lpOverlapped=0x0) returned 1 [0174.134] FlushFileBuffers (hFile=0x2c8) returned 1 [0174.443] FlushFileBuffers (hFile=0x2e0) returned 1 [0174.445] CloseHandle (hObject=0x2c8) returned 1 [0174.445] CloseHandle (hObject=0x2e0) returned 1 [0174.445] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll")) returned 1 [0174.452] SetEvent (hEvent=0x27c) returned 1 [0174.452] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\npdeployjava1.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0174.454] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1156672) returned 1 [0174.454] CloseHandle (hObject=0x2e0) returned 1 [0174.454] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\npdeployjava1.dll")) returned 0x20 [0174.454] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\npdeployjava1.dll")) returned 0x20 [0174.455] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\npdeployjava1.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0174.455] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\npdeployjava1.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0174.455] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0174.455] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0174.455] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\npdeployjava1.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c8 [0174.455] ReadFile (in: hFile=0x2e0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x110100, lpOverlapped=0x0) returned 1 [0174.602] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x110100, lpOverlapped=0x0) returned 1 [0174.647] ReadFile (in: hFile=0x2e0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xa540, lpOverlapped=0x0) returned 1 [0174.648] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xa550, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xa550, lpOverlapped=0x0) returned 1 [0174.649] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x102, lpOverlapped=0x0) returned 1 [0174.650] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0174.650] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0174.650] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x110102, lpOverlapped=0x0) returned 1 [0174.655] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xa53e, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xa53e, lpOverlapped=0x0) returned 1 [0174.656] FlushFileBuffers (hFile=0x2e0) returned 1 [0175.038] FlushFileBuffers (hFile=0x2c8) returned 1 [0175.044] CloseHandle (hObject=0x2e0) returned 1 [0175.044] CloseHandle (hObject=0x2c8) returned 1 [0175.044] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\npdeployjava1.dll")) returned 1 [0175.054] SetEvent (hEvent=0x27c) returned 1 [0175.055] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fontmanager.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0175.055] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=274496) returned 1 [0175.055] CloseHandle (hObject=0x2c8) returned 1 [0175.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fontmanager.dll")) returned 0x20 [0175.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fontmanager.dll")) returned 0x20 [0175.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fontmanager.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0175.055] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fontmanager.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0175.055] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0175.055] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0175.055] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fontmanager.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e0 [0175.056] ReadFile (in: hFile=0x2c8, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x43040, lpOverlapped=0x0) returned 1 [0175.066] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x43050, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x43050, lpOverlapped=0x0) returned 1 [0175.071] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0175.071] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0175.071] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0175.071] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x43040, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x43040, lpOverlapped=0x0) returned 1 [0175.072] FlushFileBuffers (hFile=0x2c8) returned 1 [0175.263] FlushFileBuffers (hFile=0x2e0) returned 1 [0175.265] CloseHandle (hObject=0x2c8) returned 1 [0175.265] CloseHandle (hObject=0x2e0) returned 1 [0175.265] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fontmanager.dll")) returned 1 [0175.268] SetEvent (hEvent=0x27c) returned 1 [0175.268] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0175.269] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=265792) returned 1 [0175.269] CloseHandle (hObject=0x2e0) returned 1 [0175.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll")) returned 0x20 [0175.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll")) returned 0x20 [0175.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0175.269] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0175.269] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0175.269] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0175.269] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c8 [0175.270] ReadFile (in: hFile=0x2e0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x40e40, lpOverlapped=0x0) returned 1 [0175.282] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x40e50, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x40e50, lpOverlapped=0x0) returned 1 [0175.299] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0175.299] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0175.299] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0175.299] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x40e40, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x40e40, lpOverlapped=0x0) returned 1 [0175.301] FlushFileBuffers (hFile=0x2e0) returned 1 [0175.599] FlushFileBuffers (hFile=0x2c8) returned 1 [0175.602] CloseHandle (hObject=0x2e0) returned 1 [0175.602] CloseHandle (hObject=0x2c8) returned 1 [0175.602] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll")) returned 1 [0175.605] SetEvent (hEvent=0x27c) returned 1 [0175.606] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\gstreamer-lite.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0175.606] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=619584) returned 1 [0175.606] CloseHandle (hObject=0x2c8) returned 1 [0175.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\gstreamer-lite.dll")) returned 0x20 [0175.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\gstreamer-lite.dll")) returned 0x20 [0175.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\gstreamer-lite.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0175.606] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\gstreamer-lite.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0175.606] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0175.607] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0175.607] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\gstreamer-lite.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e0 [0175.607] ReadFile (in: hFile=0x2c8, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x97440, lpOverlapped=0x0) returned 1 [0175.639] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x97450, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x97450, lpOverlapped=0x0) returned 1 [0175.651] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x102, lpOverlapped=0x0) returned 1 [0175.652] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0175.652] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0175.652] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x97440, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x97440, lpOverlapped=0x0) returned 1 [0175.654] FlushFileBuffers (hFile=0x2c8) returned 1 [0175.852] FlushFileBuffers (hFile=0x2e0) returned 1 [0175.854] CloseHandle (hObject=0x2c8) returned 1 [0175.855] CloseHandle (hObject=0x2e0) returned 1 [0175.855] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\gstreamer-lite.dll")) returned 1 [0175.862] SetEvent (hEvent=0x27c) returned 1 [0175.862] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\instrument.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0175.863] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=123456) returned 1 [0175.863] CloseHandle (hObject=0x2e0) returned 1 [0175.863] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\instrument.dll")) returned 0x20 [0175.863] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\instrument.dll")) returned 0x20 [0175.863] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\instrument.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0175.863] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\instrument.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0175.863] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0175.863] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0175.863] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\instrument.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c8 [0175.864] ReadFile (in: hFile=0x2e0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1e240, lpOverlapped=0x0) returned 1 [0175.873] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1e250, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1e250, lpOverlapped=0x0) returned 1 [0175.876] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0175.877] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0175.877] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0175.877] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1e240, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1e240, lpOverlapped=0x0) returned 1 [0175.877] FlushFileBuffers (hFile=0x2e0) returned 1 [0176.002] FlushFileBuffers (hFile=0x2c8) returned 1 [0176.008] CloseHandle (hObject=0x2e0) returned 1 [0176.008] CloseHandle (hObject=0x2c8) returned 1 [0176.009] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\instrument.dll")) returned 1 [0176.010] SetEvent (hEvent=0x27c) returned 1 [0176.010] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pkcs11.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pkcs11.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0176.011] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=63552) returned 1 [0176.011] CloseHandle (hObject=0x2c8) returned 1 [0176.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pkcs11.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pkcs11.dll")) returned 0x20 [0176.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pkcs11.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pkcs11.dll")) returned 0x20 [0176.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pkcs11.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pkcs11.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0176.011] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pkcs11.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pkcs11.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0176.011] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0176.011] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0176.011] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pkcs11.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pkcs11.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e0 [0176.012] ReadFile (in: hFile=0x2c8, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xf840, lpOverlapped=0x0) returned 1 [0176.015] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf850, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf850, lpOverlapped=0x0) returned 1 [0176.017] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0176.018] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0176.018] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0176.018] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf840, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xf840, lpOverlapped=0x0) returned 1 [0176.018] FlushFileBuffers (hFile=0x2c8) returned 1 [0176.175] FlushFileBuffers (hFile=0x2e0) returned 1 [0176.177] CloseHandle (hObject=0x2c8) returned 1 [0176.177] CloseHandle (hObject=0x2e0) returned 1 [0176.177] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pkcs11.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pkcs11.dll")) returned 1 [0176.178] SetEvent (hEvent=0x27c) returned 1 [0176.179] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java-rmi.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0176.179] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=15936) returned 1 [0176.179] CloseHandle (hObject=0x2e0) returned 1 [0176.179] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java-rmi.exe")) returned 0x20 [0176.179] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java-rmi.exe")) returned 0x20 [0176.179] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java-rmi.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0176.179] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java-rmi.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0176.179] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0176.179] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0176.180] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java-rmi.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c8 [0176.180] ReadFile (in: hFile=0x2e0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x3e40, lpOverlapped=0x0) returned 1 [0176.183] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3e50, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3e50, lpOverlapped=0x0) returned 1 [0176.185] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0176.185] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0176.185] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0176.185] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3e40, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x3e40, lpOverlapped=0x0) returned 1 [0176.185] FlushFileBuffers (hFile=0x2e0) returned 1 [0176.209] FlushFileBuffers (hFile=0x2c8) returned 1 [0176.218] CloseHandle (hObject=0x2e0) returned 1 [0176.218] CloseHandle (hObject=0x2c8) returned 1 [0176.218] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java-rmi.exe")) returned 1 [0176.219] SetEvent (hEvent=0x27c) returned 1 [0176.219] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0176.220] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=206912) returned 1 [0176.220] CloseHandle (hObject=0x2c8) returned 1 [0176.220] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.exe")) returned 0x20 [0176.220] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.exe")) returned 0x20 [0176.220] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0176.220] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0176.220] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0176.220] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0176.220] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e0 [0176.221] ReadFile (in: hFile=0x2c8, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x32840, lpOverlapped=0x0) returned 1 [0176.230] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x32850, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x32850, lpOverlapped=0x0) returned 1 [0176.234] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0176.234] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0176.235] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0176.235] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x32840, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x32840, lpOverlapped=0x0) returned 1 [0176.236] FlushFileBuffers (hFile=0x2c8) returned 1 [0176.343] FlushFileBuffers (hFile=0x2e0) returned 1 [0176.344] CloseHandle (hObject=0x2c8) returned 1 [0176.344] CloseHandle (hObject=0x2e0) returned 1 [0176.344] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.exe")) returned 1 [0176.347] SetEvent (hEvent=0x27c) returned 1 [0176.347] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.cpl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0176.347] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=187392) returned 1 [0176.347] CloseHandle (hObject=0x2e0) returned 1 [0176.347] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.cpl")) returned 0x20 [0176.347] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.cpl")) returned 0x20 [0176.347] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.cpl.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0176.347] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.cpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0176.348] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0176.348] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0176.348] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.cpl.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c8 [0176.348] ReadFile (in: hFile=0x2e0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2dc00, lpOverlapped=0x0) returned 1 [0176.354] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2dc10, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2dc10, lpOverlapped=0x0) returned 1 [0176.358] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0176.359] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0176.359] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0176.359] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2dc00, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2dc00, lpOverlapped=0x0) returned 1 [0176.359] FlushFileBuffers (hFile=0x2e0) returned 1 [0176.377] FlushFileBuffers (hFile=0x2c8) returned 1 [0176.393] CloseHandle (hObject=0x2e0) returned 1 [0176.393] CloseHandle (hObject=0x2c8) returned 1 [0176.393] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.cpl")) returned 1 [0176.395] SetEvent (hEvent=0x27c) returned 1 [0176.395] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0176.395] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=69184) returned 1 [0176.395] CloseHandle (hObject=0x2c8) returned 1 [0176.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font.dll")) returned 0x20 [0176.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font.dll")) returned 0x20 [0176.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0176.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0176.396] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0176.396] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0176.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e0 [0176.397] ReadFile (in: hFile=0x2c8, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x10e40, lpOverlapped=0x0) returned 1 [0176.401] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x10e50, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x10e50, lpOverlapped=0x0) returned 1 [0176.402] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0176.403] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0176.403] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0176.403] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x10e40, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x10e40, lpOverlapped=0x0) returned 1 [0176.403] FlushFileBuffers (hFile=0x2c8) returned 1 [0176.470] FlushFileBuffers (hFile=0x2e0) returned 1 [0176.472] CloseHandle (hObject=0x2c8) returned 1 [0176.472] CloseHandle (hObject=0x2e0) returned 1 [0176.472] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font.dll")) returned 1 [0176.473] SetEvent (hEvent=0x27c) returned 1 [0176.473] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0176.474] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=538176) returned 1 [0176.474] CloseHandle (hObject=0x2e0) returned 1 [0176.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll")) returned 0x20 [0176.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll")) returned 0x20 [0176.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0176.474] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0176.474] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0176.475] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0176.475] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c8 [0176.475] ReadFile (in: hFile=0x2e0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x83640, lpOverlapped=0x0) returned 1 [0176.492] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x83650, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x83650, lpOverlapped=0x0) returned 1 [0176.504] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x102, lpOverlapped=0x0) returned 1 [0176.504] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0176.504] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0176.504] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x83640, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x83640, lpOverlapped=0x0) returned 1 [0176.506] FlushFileBuffers (hFile=0x2e0) returned 1 [0176.621] FlushFileBuffers (hFile=0x2c8) returned 1 [0176.624] CloseHandle (hObject=0x2e0) returned 1 [0176.624] CloseHandle (hObject=0x2c8) returned 1 [0176.624] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll")) returned 1 [0176.630] SetEvent (hEvent=0x27c) returned 1 [0176.630] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaw.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0176.630] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=206912) returned 1 [0176.630] CloseHandle (hObject=0x2c8) returned 1 [0176.630] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaw.exe")) returned 0x20 [0176.630] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaw.exe")) returned 0x20 [0176.630] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaw.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0176.631] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaw.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0176.631] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0176.631] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0176.631] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaw.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e0 [0176.631] ReadFile (in: hFile=0x2c8, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x32840, lpOverlapped=0x0) returned 1 [0176.638] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x32850, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x32850, lpOverlapped=0x0) returned 1 [0176.653] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0176.653] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0176.653] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0176.653] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x32840, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x32840, lpOverlapped=0x0) returned 1 [0176.654] FlushFileBuffers (hFile=0x2c8) returned 1 [0177.085] FlushFileBuffers (hFile=0x2e0) returned 1 [0177.110] CloseHandle (hObject=0x2c8) returned 1 [0177.110] CloseHandle (hObject=0x2e0) returned 1 [0177.110] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaw.exe")) returned 1 [0177.112] SetEvent (hEvent=0x27c) returned 1 [0177.113] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java_crw_demo.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java_crw_demo.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0177.113] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=29760) returned 1 [0177.113] CloseHandle (hObject=0x2e0) returned 1 [0177.113] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java_crw_demo.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java_crw_demo.dll")) returned 0x20 [0177.113] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java_crw_demo.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java_crw_demo.dll")) returned 0x20 [0177.113] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java_crw_demo.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java_crw_demo.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0177.113] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java_crw_demo.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java_crw_demo.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0177.113] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0177.113] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0177.113] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java_crw_demo.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java_crw_demo.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c8 [0177.114] ReadFile (in: hFile=0x2e0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x7440, lpOverlapped=0x0) returned 1 [0177.335] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7450, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x7450, lpOverlapped=0x0) returned 1 [0177.336] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x102, lpOverlapped=0x0) returned 1 [0177.337] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0177.337] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0177.337] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7440, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x7440, lpOverlapped=0x0) returned 1 [0177.337] FlushFileBuffers (hFile=0x2e0) returned 1 [0177.433] FlushFileBuffers (hFile=0x2c8) returned 1 [0177.434] CloseHandle (hObject=0x2e0) returned 1 [0177.434] CloseHandle (hObject=0x2c8) returned 1 [0177.434] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java_crw_demo.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java_crw_demo.dll")) returned 1 [0177.435] SetEvent (hEvent=0x27c) returned 1 [0177.436] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jdwp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jdwp.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0177.436] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=201792) returned 1 [0177.436] CloseHandle (hObject=0x2c8) returned 1 [0177.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jdwp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jdwp.dll")) returned 0x20 [0177.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jdwp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jdwp.dll")) returned 0x20 [0177.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jdwp.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jdwp.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0177.436] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jdwp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jdwp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0177.437] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0177.437] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0177.437] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jdwp.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jdwp.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e0 [0177.437] ReadFile (in: hFile=0x2c8, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x31440, lpOverlapped=0x0) returned 1 [0177.444] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x31450, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x31450, lpOverlapped=0x0) returned 1 [0177.448] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0177.449] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0177.449] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0177.449] WriteFile (in: hFile=0x2c8, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x31440, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x31440, lpOverlapped=0x0) returned 1 [0177.449] FlushFileBuffers (hFile=0x2c8) returned 1 [0177.647] FlushFileBuffers (hFile=0x2e0) returned 1 [0177.651] CloseHandle (hObject=0x2c8) returned 1 [0177.651] CloseHandle (hObject=0x2e0) returned 1 [0177.652] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jdwp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jdwp.dll")) returned 1 [0177.654] SetEvent (hEvent=0x27c) returned 1 [0177.655] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxwebkit.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0177.655] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=41503296) returned 1 [0177.655] CloseHandle (hObject=0x2e0) returned 1 [0177.655] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxwebkit.dll")) returned 0x20 [0177.655] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxwebkit.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxwebkit.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 1 [0177.656] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxwebkit.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0177.656] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f900 | out: lpNewFilePointer=0x0) returned 1 [0177.657] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f900 | out: lpNewFilePointer=0x0) returned 1 [0177.657] ReadFile (in: hFile=0x2e0, lpBuffer=0x3a11058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x364f90c, lpOverlapped=0x0 | out: lpBuffer=0x3a11058*, lpNumberOfBytesRead=0x364f90c*=0x40000, lpOverlapped=0x0) returned 1 [0177.703] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0xd318c0, lpNewFilePointer=0x0, dwMoveMethod=0x364f900 | out: lpNewFilePointer=0x0) returned 1 [0177.703] ReadFile (in: hFile=0x2e0, lpBuffer=0x3a51058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x364f90c, lpOverlapped=0x0 | out: lpBuffer=0x3a51058*, lpNumberOfBytesRead=0x364f90c*=0x40000, lpOverlapped=0x0) returned 1 [0177.722] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x2754a40, lpNewFilePointer=0x0, dwMoveMethod=0x364f900 | out: lpNewFilePointer=0x0) returned 1 [0177.722] ReadFile (in: hFile=0x2e0, lpBuffer=0x3a91058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x364f90c, lpOverlapped=0x0 | out: lpBuffer=0x3a91058*, lpNumberOfBytesRead=0x364f90c*=0x40000, lpOverlapped=0x0) returned 1 [0177.748] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa70 | out: lpNewFilePointer=0x0) returned 1 [0177.748] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xc0112, lpNumberOfBytesWritten=0x364fa68, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa68*=0xc0112, lpOverlapped=0x0) returned 1 [0177.933] SetEndOfFile (hFile=0x2e0) returned 1 [0177.934] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x2754a40, lpNewFilePointer=0x0, dwMoveMethod=0x364f908 | out: lpNewFilePointer=0x0) returned 1 [0177.934] WriteFile (in: hFile=0x2e0, lpBuffer=0x3ad114a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x364f914, lpOverlapped=0x0 | out: lpBuffer=0x3ad114a*, lpNumberOfBytesWritten=0x364f914*=0x40000, lpOverlapped=0x0) returned 1 [0177.936] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0xd318c0, lpNewFilePointer=0x0, dwMoveMethod=0x364f908 | out: lpNewFilePointer=0x0) returned 1 [0177.936] WriteFile (in: hFile=0x2e0, lpBuffer=0x3ad114a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x364f914, lpOverlapped=0x0 | out: lpBuffer=0x3ad114a*, lpNumberOfBytesWritten=0x364f914*=0x40000, lpOverlapped=0x0) returned 1 [0177.937] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f908 | out: lpNewFilePointer=0x0) returned 1 [0177.937] WriteFile (in: hFile=0x2e0, lpBuffer=0x3ad114a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x364f914, lpOverlapped=0x0 | out: lpBuffer=0x3ad114a*, lpNumberOfBytesWritten=0x364f914*=0x40000, lpOverlapped=0x0) returned 1 [0177.938] FlushFileBuffers (hFile=0x2e0) returned 1 [0178.215] CloseHandle (hObject=0x2e0) returned 1 [0178.215] SetEvent (hEvent=0x27c) returned 1 [0178.215] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2launcher.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0178.216] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=112192) returned 1 [0178.216] CloseHandle (hObject=0x2e0) returned 1 [0178.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2launcher.exe")) returned 0x20 [0178.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2launcher.exe")) returned 0x20 [0178.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2launcher.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0178.216] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2launcher.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0178.216] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0178.217] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0178.217] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2launcher.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2cc [0178.217] ReadFile (in: hFile=0x2e0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1b640, lpOverlapped=0x0) returned 1 [0178.223] WriteFile (in: hFile=0x2cc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1b650, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1b650, lpOverlapped=0x0) returned 1 [0178.226] WriteFile (in: hFile=0x2cc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0178.226] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0178.226] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0178.226] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1b640, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1b640, lpOverlapped=0x0) returned 1 [0178.227] FlushFileBuffers (hFile=0x2e0) returned 1 [0178.388] FlushFileBuffers (hFile=0x2cc) returned 1 [0178.390] CloseHandle (hObject=0x2e0) returned 1 [0178.390] CloseHandle (hObject=0x2cc) returned 1 [0178.390] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2launcher.exe")) returned 1 [0178.392] SetEvent (hEvent=0x27c) returned 1 [0178.392] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2ssv.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0178.393] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=235584) returned 1 [0178.393] CloseHandle (hObject=0x2cc) returned 1 [0178.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2ssv.dll")) returned 0x20 [0178.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2ssv.dll")) returned 0x20 [0178.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2ssv.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2ssv.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0178.393] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2ssv.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0178.393] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0178.393] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0178.393] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2ssv.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2ssv.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e0 [0178.394] ReadFile (in: hFile=0x2cc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x39840, lpOverlapped=0x0) returned 1 [0178.402] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x39850, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x39850, lpOverlapped=0x0) returned 1 [0178.406] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0178.406] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0178.406] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0178.406] WriteFile (in: hFile=0x2cc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x39840, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x39840, lpOverlapped=0x0) returned 1 [0178.407] FlushFileBuffers (hFile=0x2cc) returned 1 [0178.475] FlushFileBuffers (hFile=0x2e0) returned 1 [0178.498] CloseHandle (hObject=0x2cc) returned 1 [0178.498] CloseHandle (hObject=0x2e0) returned 1 [0178.498] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2ssv.dll")) returned 1 [0178.501] SetEvent (hEvent=0x27c) returned 1 [0178.501] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsdt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsdt.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0178.501] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=18496) returned 1 [0178.501] CloseHandle (hObject=0x2e0) returned 1 [0178.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsdt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsdt.dll")) returned 0x20 [0178.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsdt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsdt.dll")) returned 0x20 [0178.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsdt.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsdt.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0178.502] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsdt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsdt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0178.502] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0178.502] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0178.502] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsdt.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsdt.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2cc [0178.502] ReadFile (in: hFile=0x2e0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4840, lpOverlapped=0x0) returned 1 [0178.505] WriteFile (in: hFile=0x2cc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4850, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4850, lpOverlapped=0x0) returned 1 [0178.506] WriteFile (in: hFile=0x2cc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0178.506] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0178.506] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0178.506] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4840, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4840, lpOverlapped=0x0) returned 1 [0178.506] FlushFileBuffers (hFile=0x2e0) returned 1 [0178.508] FlushFileBuffers (hFile=0x2cc) returned 1 [0178.510] CloseHandle (hObject=0x2e0) returned 1 [0178.510] CloseHandle (hObject=0x2cc) returned 1 [0178.510] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsdt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsdt.dll")) returned 1 [0178.511] SetEvent (hEvent=0x27c) returned 1 [0178.511] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsound.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsound.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0178.511] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=35392) returned 1 [0178.511] CloseHandle (hObject=0x2cc) returned 1 [0178.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsound.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsound.dll")) returned 0x20 [0178.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsound.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsound.dll")) returned 0x20 [0178.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsound.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsound.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0178.512] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsound.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsound.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0178.512] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0178.512] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0178.512] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsound.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsound.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e0 [0178.512] ReadFile (in: hFile=0x2cc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x8a40, lpOverlapped=0x0) returned 1 [0178.515] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8a50, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x8a50, lpOverlapped=0x0) returned 1 [0178.516] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0178.517] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0178.517] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0178.517] WriteFile (in: hFile=0x2cc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8a40, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x8a40, lpOverlapped=0x0) returned 1 [0178.517] FlushFileBuffers (hFile=0x2cc) returned 1 [0178.770] FlushFileBuffers (hFile=0x2e0) returned 1 [0178.772] CloseHandle (hObject=0x2cc) returned 1 [0178.772] CloseHandle (hObject=0x2e0) returned 1 [0178.772] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsound.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsound.dll")) returned 1 [0178.774] SetEvent (hEvent=0x27c) returned 1 [0178.774] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kcms.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0178.774] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=220736) returned 1 [0178.774] CloseHandle (hObject=0x2e0) returned 1 [0178.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kcms.dll")) returned 0x20 [0178.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kcms.dll")) returned 0x20 [0178.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kcms.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kcms.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0178.775] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kcms.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0178.775] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0178.775] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0178.775] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kcms.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kcms.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2cc [0178.775] ReadFile (in: hFile=0x2e0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x35e40, lpOverlapped=0x0) returned 1 [0178.783] WriteFile (in: hFile=0x2cc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x35e50, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x35e50, lpOverlapped=0x0) returned 1 [0178.788] WriteFile (in: hFile=0x2cc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0178.788] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0178.788] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0178.788] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x35e40, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x35e40, lpOverlapped=0x0) returned 1 [0178.789] FlushFileBuffers (hFile=0x2e0) returned 1 [0178.992] FlushFileBuffers (hFile=0x2cc) returned 1 [0178.994] CloseHandle (hObject=0x2e0) returned 1 [0178.994] CloseHandle (hObject=0x2cc) returned 1 [0178.994] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kcms.dll")) returned 1 [0178.997] SetEvent (hEvent=0x27c) returned 1 [0178.997] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kinit.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0178.997] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=16448) returned 1 [0178.997] CloseHandle (hObject=0x2cc) returned 1 [0178.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kinit.exe")) returned 0x20 [0178.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kinit.exe")) returned 0x20 [0178.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kinit.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0178.997] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kinit.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0178.998] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0178.998] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0178.998] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kinit.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e0 [0179.011] ReadFile (in: hFile=0x2cc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4040, lpOverlapped=0x0) returned 1 [0179.013] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4050, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4050, lpOverlapped=0x0) returned 1 [0179.014] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0179.015] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0179.015] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0179.015] WriteFile (in: hFile=0x2cc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4040, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4040, lpOverlapped=0x0) returned 1 [0179.015] FlushFileBuffers (hFile=0x2cc) returned 1 [0179.205] FlushFileBuffers (hFile=0x2e0) returned 1 [0179.209] CloseHandle (hObject=0x2cc) returned 1 [0179.209] CloseHandle (hObject=0x2e0) returned 1 [0179.209] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kinit.exe")) returned 1 [0179.211] SetEvent (hEvent=0x27c) returned 1 [0179.211] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\management.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\management.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0179.211] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=36928) returned 1 [0179.211] CloseHandle (hObject=0x2e0) returned 1 [0179.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\management.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\management.dll")) returned 0x20 [0179.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\management.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\management.dll")) returned 0x20 [0179.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\management.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\management.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0179.211] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\management.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\management.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0179.212] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0179.212] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0179.212] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\management.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\management.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2cc [0179.212] ReadFile (in: hFile=0x2e0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x9040, lpOverlapped=0x0) returned 1 [0179.216] WriteFile (in: hFile=0x2cc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x9050, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x9050, lpOverlapped=0x0) returned 1 [0179.217] WriteFile (in: hFile=0x2cc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0179.218] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0179.218] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0179.218] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x9040, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x9040, lpOverlapped=0x0) returned 1 [0179.218] FlushFileBuffers (hFile=0x2e0) returned 1 [0179.428] FlushFileBuffers (hFile=0x2cc) returned 1 [0179.431] CloseHandle (hObject=0x2e0) returned 1 [0179.432] CloseHandle (hObject=0x2cc) returned 1 [0179.432] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\management.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\management.dll")) returned 1 [0179.433] SetEvent (hEvent=0x27c) returned 1 [0179.433] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcp120.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0179.434] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=660128) returned 1 [0179.434] CloseHandle (hObject=0x2cc) returned 1 [0179.434] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcp120.dll")) returned 0x20 [0179.434] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcp120.dll")) returned 0x20 [0179.434] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcp120.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0179.434] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcp120.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0179.434] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0179.434] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0179.434] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcp120.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e0 [0179.435] ReadFile (in: hFile=0x2cc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xa12a0, lpOverlapped=0x0) returned 1 [0179.457] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xa12b0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xa12b0, lpOverlapped=0x0) returned 1 [0179.596] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0179.596] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0179.596] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0179.596] WriteFile (in: hFile=0x2cc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xa12a0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xa12a0, lpOverlapped=0x0) returned 1 [0179.599] FlushFileBuffers (hFile=0x2cc) returned 1 [0179.818] FlushFileBuffers (hFile=0x2e0) returned 1 [0179.820] CloseHandle (hObject=0x2cc) returned 1 [0179.820] CloseHandle (hObject=0x2e0) returned 1 [0179.821] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcp120.dll")) returned 1 [0179.828] SetEvent (hEvent=0x27c) returned 1 [0179.828] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr120.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0179.828] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=963232) returned 1 [0179.828] CloseHandle (hObject=0x2e0) returned 1 [0179.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr120.dll")) returned 0x20 [0179.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr120.dll")) returned 0x20 [0179.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr120.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0179.829] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr120.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0179.829] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0179.829] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0179.829] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr120.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2cc [0179.830] ReadFile (in: hFile=0x2e0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xeb2a0, lpOverlapped=0x0) returned 1 [0179.946] WriteFile (in: hFile=0x2cc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xeb2b0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xeb2b0, lpOverlapped=0x0) returned 1 [0179.965] WriteFile (in: hFile=0x2cc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0179.965] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0179.966] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0179.966] WriteFile (in: hFile=0x2e0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xeb2a0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xeb2a0, lpOverlapped=0x0) returned 1 [0179.969] FlushFileBuffers (hFile=0x2e0) returned 1 [0180.077] FlushFileBuffers (hFile=0x2cc) returned 1 [0180.079] CloseHandle (hObject=0x2e0) returned 1 [0180.079] CloseHandle (hObject=0x2cc) returned 1 [0180.080] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr120.dll")) returned 1 [0180.090] SetEvent (hEvent=0x27c) returned 1 [0180.090] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\nio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\nio.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0180.090] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=60480) returned 1 [0180.090] CloseHandle (hObject=0x2cc) returned 1 [0180.090] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\nio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\nio.dll")) returned 0x20 [0180.091] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\nio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\nio.dll")) returned 0x20 [0180.091] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\nio.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\nio.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0180.137] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\nio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\nio.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0180.137] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0180.137] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0180.137] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\nio.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\nio.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c4 [0180.138] ReadFile (in: hFile=0x2d0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xec40, lpOverlapped=0x0) returned 1 [0180.145] WriteFile (in: hFile=0x2c4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xec50, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xec50, lpOverlapped=0x0) returned 1 [0180.148] WriteFile (in: hFile=0x2c4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xe2, lpOverlapped=0x0) returned 1 [0180.148] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0180.148] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0180.148] WriteFile (in: hFile=0x2d0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xec40, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xec40, lpOverlapped=0x0) returned 1 [0180.149] FlushFileBuffers (hFile=0x2d0) returned 1 [0180.155] FlushFileBuffers (hFile=0x2c4) returned 1 [0180.159] CloseHandle (hObject=0x2d0) returned 1 [0180.159] CloseHandle (hObject=0x2c4) returned 1 [0180.159] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\nio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\nio.dll")) returned 1 [0180.161] SetEvent (hEvent=0x27c) returned 1 [0180.161] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\orbd.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0180.161] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=16448) returned 1 [0180.161] CloseHandle (hObject=0x2c4) returned 1 [0180.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\orbd.exe")) returned 0x20 [0180.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\orbd.exe")) returned 0x20 [0180.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\orbd.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0180.161] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\orbd.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0180.162] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0180.162] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0180.162] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\orbd.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d0 [0180.162] ReadFile (in: hFile=0x2c4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4040, lpOverlapped=0x0) returned 1 [0180.166] WriteFile (in: hFile=0x2d0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4050, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4050, lpOverlapped=0x0) returned 1 [0180.167] WriteFile (in: hFile=0x2d0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0180.167] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0180.167] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0180.167] WriteFile (in: hFile=0x2c4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4040, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4040, lpOverlapped=0x0) returned 1 [0180.168] FlushFileBuffers (hFile=0x2c4) returned 1 [0180.178] FlushFileBuffers (hFile=0x2d0) returned 1 [0180.179] CloseHandle (hObject=0x2c4) returned 1 [0180.179] CloseHandle (hObject=0x2d0) returned 1 [0180.179] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\orbd.exe")) returned 1 [0180.180] SetEvent (hEvent=0x27c) returned 1 [0180.180] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0180.181] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=829264) returned 1 [0180.181] CloseHandle (hObject=0x2d0) returned 1 [0180.181] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll")) returned 0x20 [0180.181] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll")) returned 0x20 [0180.181] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0180.181] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0180.181] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0180.181] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0180.181] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c4 [0180.182] ReadFile (in: hFile=0x2d0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xca750, lpOverlapped=0x0) returned 1 [0180.207] WriteFile (in: hFile=0x2c4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xca760, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xca760, lpOverlapped=0x0) returned 1 [0180.301] WriteFile (in: hFile=0x2c4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0180.301] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0180.301] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0180.301] WriteFile (in: hFile=0x2d0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xca750, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xca750, lpOverlapped=0x0) returned 1 [0180.304] FlushFileBuffers (hFile=0x2d0) returned 1 [0180.447] FlushFileBuffers (hFile=0x2c4) returned 1 [0180.451] CloseHandle (hObject=0x2d0) returned 1 [0180.451] CloseHandle (hObject=0x2c4) returned 1 [0180.451] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll")) returned 1 [0180.459] SetEvent (hEvent=0x27c) returned 1 [0180.459] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\policytool.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0180.459] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=16448) returned 1 [0180.460] CloseHandle (hObject=0x2c4) returned 1 [0180.460] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\policytool.exe")) returned 0x20 [0180.460] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\policytool.exe")) returned 0x20 [0180.460] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\policytool.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0180.460] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\policytool.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0180.460] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0180.460] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0180.460] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\policytool.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d0 [0180.461] ReadFile (in: hFile=0x2c4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4040, lpOverlapped=0x0) returned 1 [0180.465] WriteFile (in: hFile=0x2d0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4050, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4050, lpOverlapped=0x0) returned 1 [0180.466] WriteFile (in: hFile=0x2d0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0180.466] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0180.466] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0180.466] WriteFile (in: hFile=0x2c4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4040, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4040, lpOverlapped=0x0) returned 1 [0180.467] FlushFileBuffers (hFile=0x2c4) returned 1 [0180.551] FlushFileBuffers (hFile=0x2d0) returned 1 [0180.552] CloseHandle (hObject=0x2c4) returned 1 [0180.552] CloseHandle (hObject=0x2d0) returned 1 [0180.553] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\policytool.exe")) returned 1 [0180.554] SetEvent (hEvent=0x27c) returned 1 [0180.554] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_d3d.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_d3d.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0180.554] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=130624) returned 1 [0180.555] CloseHandle (hObject=0x2d0) returned 1 [0180.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_d3d.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_d3d.dll")) returned 0x20 [0180.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_d3d.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_d3d.dll")) returned 0x20 [0180.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_d3d.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_d3d.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0180.555] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_d3d.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_d3d.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0180.555] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0180.555] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0180.555] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_d3d.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_d3d.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c4 [0180.556] ReadFile (in: hFile=0x2d0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1fe40, lpOverlapped=0x0) returned 1 [0180.561] WriteFile (in: hFile=0x2c4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1fe50, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1fe50, lpOverlapped=0x0) returned 1 [0180.564] WriteFile (in: hFile=0x2c4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0180.564] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0180.564] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0180.564] WriteFile (in: hFile=0x2d0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1fe40, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1fe40, lpOverlapped=0x0) returned 1 [0180.565] FlushFileBuffers (hFile=0x2d0) returned 1 [0180.595] FlushFileBuffers (hFile=0x2c4) returned 1 [0180.599] CloseHandle (hObject=0x2d0) returned 1 [0180.599] CloseHandle (hObject=0x2c4) returned 1 [0180.599] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_d3d.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_d3d.dll")) returned 1 [0180.601] SetEvent (hEvent=0x27c) returned 1 [0180.601] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\resource.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\resource.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0180.601] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=15424) returned 1 [0180.601] CloseHandle (hObject=0x2c4) returned 1 [0180.601] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\resource.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\resource.dll")) returned 0x20 [0180.602] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\resource.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\resource.dll")) returned 0x20 [0180.602] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\resource.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\resource.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0180.602] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\resource.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\resource.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0180.602] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0180.602] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0180.602] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\resource.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\resource.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d0 [0180.602] ReadFile (in: hFile=0x2c4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x3c40, lpOverlapped=0x0) returned 1 [0180.606] WriteFile (in: hFile=0x2d0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3c50, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3c50, lpOverlapped=0x0) returned 1 [0180.608] WriteFile (in: hFile=0x2d0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0180.608] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0180.608] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0180.608] WriteFile (in: hFile=0x2c4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3c40, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x3c40, lpOverlapped=0x0) returned 1 [0180.609] FlushFileBuffers (hFile=0x2c4) returned 1 [0180.612] FlushFileBuffers (hFile=0x2d0) returned 1 [0180.619] CloseHandle (hObject=0x2c4) returned 1 [0180.619] CloseHandle (hObject=0x2d0) returned 1 [0180.619] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\resource.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\resource.dll")) returned 1 [0180.621] SetEvent (hEvent=0x27c) returned 1 [0180.621] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmid.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0180.621] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=15936) returned 1 [0180.621] CloseHandle (hObject=0x2d0) returned 1 [0180.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmid.exe")) returned 0x20 [0180.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmid.exe")) returned 0x20 [0180.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmid.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0180.621] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmid.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0180.622] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0180.622] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0180.622] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmid.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c4 [0180.622] ReadFile (in: hFile=0x2d0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x3e40, lpOverlapped=0x0) returned 1 [0180.626] WriteFile (in: hFile=0x2c4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3e50, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3e50, lpOverlapped=0x0) returned 1 [0180.627] WriteFile (in: hFile=0x2c4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0180.628] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0180.628] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0180.628] WriteFile (in: hFile=0x2d0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3e40, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x3e40, lpOverlapped=0x0) returned 1 [0180.628] FlushFileBuffers (hFile=0x2d0) returned 1 [0180.818] FlushFileBuffers (hFile=0x2c4) returned 1 [0180.819] CloseHandle (hObject=0x2d0) returned 1 [0180.819] CloseHandle (hObject=0x2c4) returned 1 [0180.819] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmid.exe")) returned 1 [0180.821] SetEvent (hEvent=0x27c) returned 1 [0180.821] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\classes.jsa"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0180.821] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=18677760) returned 1 [0180.821] CloseHandle (hObject=0x2c4) returned 1 [0180.821] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\classes.jsa")) returned 0x21 [0180.821] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa", dwFileAttributes=0x20) returned 1 [0180.822] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\classes.jsa"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\classes.jsa.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 1 [0180.823] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\classes.jsa.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0180.823] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f900 | out: lpNewFilePointer=0x0) returned 1 [0180.823] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f900 | out: lpNewFilePointer=0x0) returned 1 [0180.824] ReadFile (in: hFile=0x2c4, lpBuffer=0x3a11058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x364f90c, lpOverlapped=0x0 | out: lpBuffer=0x3a11058*, lpNumberOfBytesRead=0x364f90c*=0x40000, lpOverlapped=0x0) returned 1 [0180.826] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x5f0000, lpNewFilePointer=0x0, dwMoveMethod=0x364f900 | out: lpNewFilePointer=0x0) returned 1 [0180.826] ReadFile (in: hFile=0x2c4, lpBuffer=0x3a51058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x364f90c, lpOverlapped=0x0 | out: lpBuffer=0x3a51058*, lpNumberOfBytesRead=0x364f90c*=0x40000, lpOverlapped=0x0) returned 1 [0180.833] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x1190000, lpNewFilePointer=0x0, dwMoveMethod=0x364f900 | out: lpNewFilePointer=0x0) returned 1 [0180.833] ReadFile (in: hFile=0x2c4, lpBuffer=0x3a91058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x364f90c, lpOverlapped=0x0 | out: lpBuffer=0x3a91058*, lpNumberOfBytesRead=0x364f90c*=0x40000, lpOverlapped=0x0) returned 1 [0180.843] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa70 | out: lpNewFilePointer=0x0) returned 1 [0180.843] WriteFile (in: hFile=0x2c4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x364fa68, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa68*=0xc0102, lpOverlapped=0x0) returned 1 [0180.987] SetEndOfFile (hFile=0x2c4) returned 1 [0180.987] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x1190000, lpNewFilePointer=0x0, dwMoveMethod=0x364f908 | out: lpNewFilePointer=0x0) returned 1 [0180.987] WriteFile (in: hFile=0x2c4, lpBuffer=0x3ad113a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x364f914, lpOverlapped=0x0 | out: lpBuffer=0x3ad113a*, lpNumberOfBytesWritten=0x364f914*=0x40000, lpOverlapped=0x0) returned 1 [0180.990] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x5f0000, lpNewFilePointer=0x0, dwMoveMethod=0x364f908 | out: lpNewFilePointer=0x0) returned 1 [0180.990] WriteFile (in: hFile=0x2c4, lpBuffer=0x3ad113a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x364f914, lpOverlapped=0x0 | out: lpBuffer=0x3ad113a*, lpNumberOfBytesWritten=0x364f914*=0x40000, lpOverlapped=0x0) returned 1 [0180.992] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f908 | out: lpNewFilePointer=0x0) returned 1 [0180.992] WriteFile (in: hFile=0x2c4, lpBuffer=0x3ad113a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x364f914, lpOverlapped=0x0 | out: lpBuffer=0x3ad113a*, lpNumberOfBytesWritten=0x364f914*=0x40000, lpOverlapped=0x0) returned 1 [0180.993] FlushFileBuffers (hFile=0x2c4) returned 1 [0181.148] CloseHandle (hObject=0x2c4) returned 1 [0181.148] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa.id[B4197730-2299].[britt.looper@aol.com].phoenix", dwFileAttributes=0x21) returned 1 [0181.149] SetEvent (hEvent=0x27c) returned 1 [0181.149] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0181.149] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1423) returned 1 [0181.149] CloseHandle (hObject=0x2c4) returned 1 [0181.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt")) returned 0x20 [0181.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt")) returned 0x20 [0181.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0181.149] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0181.150] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0181.150] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0181.150] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2dc [0181.150] ReadFile (in: hFile=0x2c4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x58f, lpOverlapped=0x0) returned 1 [0181.151] WriteFile (in: hFile=0x2dc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x590, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x590, lpOverlapped=0x0) returned 1 [0181.156] WriteFile (in: hFile=0x2dc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0181.157] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0181.157] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0181.157] WriteFile (in: hFile=0x2c4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x58f, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x58f, lpOverlapped=0x0) returned 1 [0181.157] FlushFileBuffers (hFile=0x2c4) returned 1 [0181.165] FlushFileBuffers (hFile=0x2dc) returned 1 [0181.166] CloseHandle (hObject=0x2c4) returned 1 [0181.167] CloseHandle (hObject=0x2dc) returned 1 [0181.167] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt")) returned 1 [0181.168] SetEvent (hEvent=0x27c) returned 1 [0181.168] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\servertool.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2dc [0181.168] GetFileSizeEx (in: hFile=0x2dc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=16448) returned 1 [0181.168] CloseHandle (hObject=0x2dc) returned 1 [0181.168] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\servertool.exe")) returned 0x20 [0181.168] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\servertool.exe")) returned 0x20 [0181.168] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\servertool.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0181.169] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\servertool.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2dc [0181.169] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0181.169] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0181.169] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\servertool.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c4 [0181.169] ReadFile (in: hFile=0x2dc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4040, lpOverlapped=0x0) returned 1 [0181.172] WriteFile (in: hFile=0x2c4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4050, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4050, lpOverlapped=0x0) returned 1 [0181.173] WriteFile (in: hFile=0x2c4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0181.174] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0181.174] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0181.174] WriteFile (in: hFile=0x2dc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4040, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4040, lpOverlapped=0x0) returned 1 [0181.174] FlushFileBuffers (hFile=0x2dc) returned 1 [0181.176] FlushFileBuffers (hFile=0x2c4) returned 1 [0181.177] CloseHandle (hObject=0x2dc) returned 1 [0181.177] CloseHandle (hObject=0x2c4) returned 1 [0181.178] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\servertool.exe")) returned 1 [0181.179] SetEvent (hEvent=0x27c) returned 1 [0181.179] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\splashscreen.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\splashscreen.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0181.179] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=204864) returned 1 [0181.179] CloseHandle (hObject=0x2c4) returned 1 [0181.179] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\splashscreen.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\splashscreen.dll")) returned 0x20 [0181.179] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\splashscreen.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\splashscreen.dll")) returned 0x20 [0181.179] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\splashscreen.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\splashscreen.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0181.179] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\splashscreen.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\splashscreen.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0181.180] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0181.180] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0181.180] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\splashscreen.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\splashscreen.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2dc [0181.180] ReadFile (in: hFile=0x2c4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x32040, lpOverlapped=0x0) returned 1 [0181.189] WriteFile (in: hFile=0x2dc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x32050, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x32050, lpOverlapped=0x0) returned 1 [0181.193] WriteFile (in: hFile=0x2dc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x102, lpOverlapped=0x0) returned 1 [0181.194] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0181.194] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0181.194] WriteFile (in: hFile=0x2c4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x32040, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x32040, lpOverlapped=0x0) returned 1 [0181.195] FlushFileBuffers (hFile=0x2c4) returned 1 [0181.308] FlushFileBuffers (hFile=0x2dc) returned 1 [0181.311] CloseHandle (hObject=0x2c4) returned 1 [0181.311] CloseHandle (hObject=0x2dc) returned 1 [0181.311] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\splashscreen.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\splashscreen.dll")) returned 1 [0181.313] SetEvent (hEvent=0x27c) returned 1 [0181.313] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssv.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2dc [0181.314] GetFileSizeEx (in: hFile=0x2dc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=571968) returned 1 [0181.314] CloseHandle (hObject=0x2dc) returned 1 [0181.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssv.dll")) returned 0x20 [0181.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssv.dll")) returned 0x20 [0181.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssv.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0181.314] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssv.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2dc [0181.314] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0181.314] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0181.314] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssv.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c4 [0181.315] ReadFile (in: hFile=0x2dc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x8ba40, lpOverlapped=0x0) returned 1 [0181.336] WriteFile (in: hFile=0x2c4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8ba50, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x8ba50, lpOverlapped=0x0) returned 1 [0181.346] WriteFile (in: hFile=0x2c4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xe2, lpOverlapped=0x0) returned 1 [0181.346] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0181.346] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0181.346] WriteFile (in: hFile=0x2dc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8ba40, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x8ba40, lpOverlapped=0x0) returned 1 [0181.348] FlushFileBuffers (hFile=0x2dc) returned 1 [0181.584] FlushFileBuffers (hFile=0x2c4) returned 1 [0181.586] CloseHandle (hObject=0x2dc) returned 1 [0181.586] CloseHandle (hObject=0x2c4) returned 1 [0181.586] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssv.dll")) returned 1 [0181.593] SetEvent (hEvent=0x27c) returned 1 [0181.593] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssvagent.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0181.594] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=70208) returned 1 [0181.594] CloseHandle (hObject=0x2c4) returned 1 [0181.594] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssvagent.exe")) returned 0x20 [0181.594] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssvagent.exe")) returned 0x20 [0181.594] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssvagent.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0181.594] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssvagent.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0181.594] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0181.595] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0181.595] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssvagent.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2dc [0181.595] ReadFile (in: hFile=0x2c4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x11240, lpOverlapped=0x0) returned 1 [0181.602] WriteFile (in: hFile=0x2dc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x11250, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x11250, lpOverlapped=0x0) returned 1 [0181.604] WriteFile (in: hFile=0x2dc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0181.604] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0181.604] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0181.605] WriteFile (in: hFile=0x2c4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x11240, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x11240, lpOverlapped=0x0) returned 1 [0181.605] FlushFileBuffers (hFile=0x2c4) returned 1 [0181.767] FlushFileBuffers (hFile=0x2dc) returned 1 [0181.768] CloseHandle (hObject=0x2c4) returned 1 [0181.768] CloseHandle (hObject=0x2dc) returned 1 [0181.768] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssvagent.exe")) returned 1 [0181.770] SetEvent (hEvent=0x27c) returned 1 [0181.770] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunec.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunec.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2dc [0181.770] GetFileSizeEx (in: hFile=0x2dc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=135744) returned 1 [0181.770] CloseHandle (hObject=0x2dc) returned 1 [0181.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunec.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunec.dll")) returned 0x20 [0181.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunec.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunec.dll")) returned 0x20 [0181.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunec.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunec.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0181.771] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunec.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunec.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2dc [0181.771] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0181.771] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0181.771] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunec.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunec.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c4 [0181.771] ReadFile (in: hFile=0x2dc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x21240, lpOverlapped=0x0) returned 1 [0181.779] WriteFile (in: hFile=0x2c4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x21250, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x21250, lpOverlapped=0x0) returned 1 [0181.783] WriteFile (in: hFile=0x2c4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0181.783] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0181.783] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0181.783] WriteFile (in: hFile=0x2dc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x21240, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x21240, lpOverlapped=0x0) returned 1 [0181.784] FlushFileBuffers (hFile=0x2dc) returned 1 [0181.925] FlushFileBuffers (hFile=0x2c4) returned 1 [0181.926] CloseHandle (hObject=0x2dc) returned 1 [0181.926] CloseHandle (hObject=0x2c4) returned 1 [0181.927] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunec.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunec.dll")) returned 1 [0181.929] SetEvent (hEvent=0x27c) returned 1 [0181.929] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\t2k.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0181.929] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=255040) returned 1 [0181.929] CloseHandle (hObject=0x2c4) returned 1 [0181.929] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\t2k.dll")) returned 0x20 [0181.929] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\t2k.dll")) returned 0x20 [0181.929] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\t2k.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\t2k.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0181.929] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\t2k.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0181.930] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0181.930] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0181.930] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\t2k.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\t2k.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2dc [0181.931] ReadFile (in: hFile=0x2c4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x3e440, lpOverlapped=0x0) returned 1 [0181.940] WriteFile (in: hFile=0x2dc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3e450, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3e450, lpOverlapped=0x0) returned 1 [0181.945] WriteFile (in: hFile=0x2dc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xe2, lpOverlapped=0x0) returned 1 [0181.946] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0181.946] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0181.946] WriteFile (in: hFile=0x2c4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3e440, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x3e440, lpOverlapped=0x0) returned 1 [0181.947] FlushFileBuffers (hFile=0x2c4) returned 1 [0182.663] FlushFileBuffers (hFile=0x2dc) returned 1 [0182.686] CloseHandle (hObject=0x2c4) returned 1 [0182.686] CloseHandle (hObject=0x2dc) returned 1 [0182.686] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\t2k.dll")) returned 1 [0182.689] SetEvent (hEvent=0x27c) returned 1 [0182.689] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack200.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2dc [0182.689] GetFileSizeEx (in: hFile=0x2dc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=197184) returned 1 [0182.689] CloseHandle (hObject=0x2dc) returned 1 [0182.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack200.exe")) returned 0x20 [0182.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack200.exe")) returned 0x20 [0182.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack200.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0182.690] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack200.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2dc [0182.690] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0182.690] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0182.690] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack200.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c4 [0182.690] ReadFile (in: hFile=0x2dc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x30240, lpOverlapped=0x0) returned 1 [0182.777] WriteFile (in: hFile=0x2c4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x30250, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x30250, lpOverlapped=0x0) returned 1 [0182.781] WriteFile (in: hFile=0x2c4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0182.781] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0182.782] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0182.782] WriteFile (in: hFile=0x2dc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x30240, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x30240, lpOverlapped=0x0) returned 1 [0182.782] FlushFileBuffers (hFile=0x2dc) returned 1 [0183.064] FlushFileBuffers (hFile=0x2c4) returned 1 [0183.072] CloseHandle (hObject=0x2dc) returned 1 [0183.072] CloseHandle (hObject=0x2c4) returned 1 [0183.072] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack200.exe")) returned 1 [0183.075] SetEvent (hEvent=0x27c) returned 1 [0183.075] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0183.076] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=24128) returned 1 [0183.076] CloseHandle (hObject=0x2c4) returned 1 [0183.076] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll")) returned 0x20 [0183.076] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll")) returned 0x20 [0183.076] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0183.076] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0183.076] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0183.076] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0183.076] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2dc [0183.077] ReadFile (in: hFile=0x2c4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x5e40, lpOverlapped=0x0) returned 1 [0183.115] WriteFile (in: hFile=0x2dc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5e50, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x5e50, lpOverlapped=0x0) returned 1 [0183.116] WriteFile (in: hFile=0x2dc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x102, lpOverlapped=0x0) returned 1 [0183.116] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0183.116] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0183.116] WriteFile (in: hFile=0x2c4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5e40, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x5e40, lpOverlapped=0x0) returned 1 [0183.117] FlushFileBuffers (hFile=0x2c4) returned 1 [0183.314] FlushFileBuffers (hFile=0x2dc) returned 1 [0183.315] CloseHandle (hObject=0x2c4) returned 1 [0183.315] CloseHandle (hObject=0x2dc) returned 1 [0183.315] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll")) returned 1 [0183.317] SetEvent (hEvent=0x27c) returned 1 [0183.317] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\wsdetect.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\wsdetect.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2dc [0183.317] GetFileSizeEx (in: hFile=0x2dc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=192576) returned 1 [0183.317] CloseHandle (hObject=0x2dc) returned 1 [0183.317] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\wsdetect.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\wsdetect.dll")) returned 0x20 [0183.317] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\wsdetect.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\wsdetect.dll")) returned 0x20 [0183.317] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\wsdetect.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\wsdetect.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0183.317] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\wsdetect.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\wsdetect.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2dc [0183.317] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0183.318] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0183.318] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\wsdetect.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\wsdetect.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c4 [0183.318] ReadFile (in: hFile=0x2dc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2f040, lpOverlapped=0x0) returned 1 [0183.361] WriteFile (in: hFile=0x2c4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2f050, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2f050, lpOverlapped=0x0) returned 1 [0183.366] WriteFile (in: hFile=0x2c4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0183.366] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0183.366] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0183.366] WriteFile (in: hFile=0x2dc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2f040, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2f040, lpOverlapped=0x0) returned 1 [0183.367] FlushFileBuffers (hFile=0x2dc) returned 1 [0183.647] FlushFileBuffers (hFile=0x2c4) returned 1 [0183.658] CloseHandle (hObject=0x2dc) returned 1 [0183.658] CloseHandle (hObject=0x2c4) returned 1 [0183.659] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\wsdetect.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\wsdetect.dll")) returned 1 [0183.661] SetEvent (hEvent=0x27c) returned 1 [0183.661] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0183.661] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3244) returned 1 [0183.661] CloseHandle (hObject=0x2c4) returned 1 [0183.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright")) returned 0x20 [0183.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright")) returned 0x20 [0183.662] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0183.662] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0183.662] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0183.662] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0183.662] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2dc [0183.662] ReadFile (in: hFile=0x2c4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xcac, lpOverlapped=0x0) returned 1 [0183.663] WriteFile (in: hFile=0x2dc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xcb0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xcb0, lpOverlapped=0x0) returned 1 [0183.664] WriteFile (in: hFile=0x2dc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0183.664] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0183.664] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0183.664] WriteFile (in: hFile=0x2c4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xcac, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xcac, lpOverlapped=0x0) returned 1 [0183.664] FlushFileBuffers (hFile=0x2c4) returned 1 [0184.048] FlushFileBuffers (hFile=0x2dc) returned 1 [0184.050] CloseHandle (hObject=0x2c4) returned 1 [0184.050] CloseHandle (hObject=0x2dc) returned 1 [0184.055] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright")) returned 1 [0184.056] SetEvent (hEvent=0x27c) returned 1 [0184.056] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2dc [0184.056] GetFileSizeEx (in: hFile=0x2dc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=84355) returned 1 [0184.056] CloseHandle (hObject=0x2dc) returned 1 [0184.056] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist")) returned 0x20 [0184.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist")) returned 0x20 [0184.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0184.057] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2dc [0184.057] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0184.057] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0184.057] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c4 [0184.058] ReadFile (in: hFile=0x2dc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x14983, lpOverlapped=0x0) returned 1 [0184.059] WriteFile (in: hFile=0x2c4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x14990, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x14990, lpOverlapped=0x0) returned 1 [0184.061] WriteFile (in: hFile=0x2c4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0184.061] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0184.062] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0184.062] WriteFile (in: hFile=0x2dc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x14983, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x14983, lpOverlapped=0x0) returned 1 [0184.062] FlushFileBuffers (hFile=0x2dc) returned 1 [0184.205] FlushFileBuffers (hFile=0x2c4) returned 1 [0184.208] CloseHandle (hObject=0x2dc) returned 1 [0184.208] CloseHandle (hObject=0x2c4) returned 1 [0184.208] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist")) returned 1 [0184.210] SetEvent (hEvent=0x27c) returned 1 [0184.210] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0184.211] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=632) returned 1 [0184.211] CloseHandle (hObject=0x2c4) returned 1 [0184.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf")) returned 0x20 [0184.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf")) returned 0x20 [0184.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0184.211] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0184.211] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0184.211] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0184.211] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2dc [0184.212] ReadFile (in: hFile=0x2c4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x278, lpOverlapped=0x0) returned 1 [0184.212] WriteFile (in: hFile=0x2dc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x280, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x280, lpOverlapped=0x0) returned 1 [0184.213] WriteFile (in: hFile=0x2dc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xe2, lpOverlapped=0x0) returned 1 [0184.213] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0184.213] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0184.213] WriteFile (in: hFile=0x2c4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x278, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x278, lpOverlapped=0x0) returned 1 [0184.213] FlushFileBuffers (hFile=0x2c4) returned 1 [0184.221] FlushFileBuffers (hFile=0x2dc) returned 1 [0184.224] CloseHandle (hObject=0x2c4) returned 1 [0184.224] CloseHandle (hObject=0x2dc) returned 1 [0184.224] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf")) returned 1 [0184.225] SetEvent (hEvent=0x27c) returned 1 [0184.225] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2dc [0184.225] GetFileSizeEx (in: hFile=0x2dc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=274474) returned 1 [0184.225] CloseHandle (hObject=0x2dc) returned 1 [0184.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf")) returned 0x20 [0184.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf")) returned 0x20 [0184.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0184.226] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2dc [0184.226] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0184.226] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0184.226] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c4 [0184.226] ReadFile (in: hFile=0x2dc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4302a, lpOverlapped=0x0) returned 1 [0184.230] WriteFile (in: hFile=0x2c4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x43030, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x43030, lpOverlapped=0x0) returned 1 [0184.236] WriteFile (in: hFile=0x2c4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xe2, lpOverlapped=0x0) returned 1 [0184.237] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0184.237] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0184.237] WriteFile (in: hFile=0x2dc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4302a, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4302a, lpOverlapped=0x0) returned 1 [0184.237] FlushFileBuffers (hFile=0x2dc) returned 1 [0184.379] FlushFileBuffers (hFile=0x2c4) returned 1 [0184.382] CloseHandle (hObject=0x2dc) returned 1 [0184.382] CloseHandle (hObject=0x2c4) returned 1 [0184.382] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf")) returned 1 [0184.385] SetEvent (hEvent=0x27c) returned 1 [0184.386] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0184.386] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2860) returned 1 [0184.386] CloseHandle (hObject=0x2c4) returned 1 [0184.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages.properties")) returned 0x20 [0184.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages.properties")) returned 0x20 [0184.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0184.386] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0184.386] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0184.386] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0184.386] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2dc [0184.387] ReadFile (in: hFile=0x2c4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xb2c, lpOverlapped=0x0) returned 1 [0184.387] WriteFile (in: hFile=0x2dc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xb30, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xb30, lpOverlapped=0x0) returned 1 [0184.388] WriteFile (in: hFile=0x2dc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x102, lpOverlapped=0x0) returned 1 [0184.388] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0184.388] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0184.388] WriteFile (in: hFile=0x2c4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xb2c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xb2c, lpOverlapped=0x0) returned 1 [0184.389] FlushFileBuffers (hFile=0x2c4) returned 1 [0184.397] FlushFileBuffers (hFile=0x2dc) returned 1 [0184.399] CloseHandle (hObject=0x2c4) returned 1 [0184.399] CloseHandle (hObject=0x2dc) returned 1 [0184.400] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages.properties")) returned 1 [0184.400] SetEvent (hEvent=0x27c) returned 1 [0184.401] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2dc [0184.401] GetFileSizeEx (in: hFile=0x2dc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3600) returned 1 [0184.401] CloseHandle (hObject=0x2dc) returned 1 [0184.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties")) returned 0x20 [0184.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties")) returned 0x20 [0184.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0184.401] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2dc [0184.401] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0184.401] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0184.401] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c4 [0184.402] ReadFile (in: hFile=0x2dc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xe10, lpOverlapped=0x0) returned 1 [0184.402] WriteFile (in: hFile=0x2c4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xe20, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xe20, lpOverlapped=0x0) returned 1 [0184.403] WriteFile (in: hFile=0x2c4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x102, lpOverlapped=0x0) returned 1 [0184.403] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0184.403] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0184.403] WriteFile (in: hFile=0x2dc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xe10, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xe10, lpOverlapped=0x0) returned 1 [0184.404] FlushFileBuffers (hFile=0x2dc) returned 1 [0184.415] FlushFileBuffers (hFile=0x2c4) returned 1 [0184.425] CloseHandle (hObject=0x2dc) returned 1 [0184.425] CloseHandle (hObject=0x2c4) returned 1 [0184.425] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties")) returned 1 [0184.426] SetEvent (hEvent=0x27c) returned 1 [0184.426] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0184.427] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3223) returned 1 [0184.427] CloseHandle (hObject=0x2c4) returned 1 [0184.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties")) returned 0x20 [0184.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties")) returned 0x20 [0184.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0184.427] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0184.427] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0184.427] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0184.427] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2dc [0184.428] ReadFile (in: hFile=0x2c4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xc97, lpOverlapped=0x0) returned 1 [0184.428] WriteFile (in: hFile=0x2dc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xca0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xca0, lpOverlapped=0x0) returned 1 [0184.429] WriteFile (in: hFile=0x2dc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x102, lpOverlapped=0x0) returned 1 [0184.429] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0184.430] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0184.430] WriteFile (in: hFile=0x2c4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xc97, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xc97, lpOverlapped=0x0) returned 1 [0184.430] FlushFileBuffers (hFile=0x2c4) returned 1 [0184.453] FlushFileBuffers (hFile=0x2dc) returned 1 [0184.459] CloseHandle (hObject=0x2c4) returned 1 [0184.459] CloseHandle (hObject=0x2dc) returned 1 [0184.460] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties")) returned 1 [0184.461] SetEvent (hEvent=0x27c) returned 1 [0184.461] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2dc [0184.461] GetFileSizeEx (in: hFile=0x2dc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=5712) returned 1 [0184.461] CloseHandle (hObject=0x2dc) returned 1 [0184.461] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties")) returned 0x20 [0184.461] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties")) returned 0x20 [0184.461] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0184.461] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2dc [0184.461] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0184.462] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0184.462] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c4 [0184.462] ReadFile (in: hFile=0x2dc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1650, lpOverlapped=0x0) returned 1 [0184.462] WriteFile (in: hFile=0x2c4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1660, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1660, lpOverlapped=0x0) returned 1 [0184.463] WriteFile (in: hFile=0x2c4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x102, lpOverlapped=0x0) returned 1 [0184.464] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0184.464] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0184.464] WriteFile (in: hFile=0x2dc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1650, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1650, lpOverlapped=0x0) returned 1 [0184.464] FlushFileBuffers (hFile=0x2dc) returned 1 [0184.477] FlushFileBuffers (hFile=0x2c4) returned 1 [0184.483] CloseHandle (hObject=0x2dc) returned 1 [0184.483] CloseHandle (hObject=0x2c4) returned 1 [0184.483] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties")) returned 1 [0184.484] SetEvent (hEvent=0x27c) returned 1 [0184.484] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0184.485] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3409) returned 1 [0184.485] CloseHandle (hObject=0x2c4) returned 1 [0184.485] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties")) returned 0x20 [0184.485] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties")) returned 0x20 [0184.485] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0184.485] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0184.485] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0184.485] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0184.485] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2dc [0184.486] ReadFile (in: hFile=0x2c4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xd51, lpOverlapped=0x0) returned 1 [0184.486] WriteFile (in: hFile=0x2dc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xd60, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xd60, lpOverlapped=0x0) returned 1 [0184.487] WriteFile (in: hFile=0x2dc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x102, lpOverlapped=0x0) returned 1 [0184.487] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0184.487] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0184.487] WriteFile (in: hFile=0x2c4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xd51, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xd51, lpOverlapped=0x0) returned 1 [0184.487] FlushFileBuffers (hFile=0x2c4) returned 1 [0184.497] FlushFileBuffers (hFile=0x2dc) returned 1 [0184.503] CloseHandle (hObject=0x2c4) returned 1 [0184.503] CloseHandle (hObject=0x2dc) returned 1 [0184.503] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties")) returned 1 [0184.504] SetEvent (hEvent=0x27c) returned 1 [0184.504] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_hk.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2dc [0184.505] GetFileSizeEx (in: hFile=0x2dc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3752) returned 1 [0184.505] CloseHandle (hObject=0x2dc) returned 1 [0184.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_hk.properties")) returned 0x20 [0184.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_hk.properties")) returned 0x20 [0184.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_hk.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0184.505] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_hk.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2dc [0184.505] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0184.505] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0184.505] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_hk.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c4 [0184.506] ReadFile (in: hFile=0x2dc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xea8, lpOverlapped=0x0) returned 1 [0184.506] WriteFile (in: hFile=0x2c4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xeb0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xeb0, lpOverlapped=0x0) returned 1 [0184.509] WriteFile (in: hFile=0x2c4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x112, lpOverlapped=0x0) returned 1 [0184.509] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0184.509] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0184.509] WriteFile (in: hFile=0x2dc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xea8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xea8, lpOverlapped=0x0) returned 1 [0184.509] FlushFileBuffers (hFile=0x2dc) returned 1 [0184.518] FlushFileBuffers (hFile=0x2c4) returned 1 [0184.520] CloseHandle (hObject=0x2dc) returned 1 [0184.521] CloseHandle (hObject=0x2c4) returned 1 [0184.521] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_hk.properties")) returned 1 [0184.522] SetEvent (hEvent=0x27c) returned 1 [0184.522] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0184.522] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=8590) returned 1 [0184.522] CloseHandle (hObject=0x2c4) returned 1 [0184.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif")) returned 0x20 [0184.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif")) returned 0x20 [0184.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0184.522] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0184.523] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0184.523] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0184.523] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2dc [0184.523] ReadFile (in: hFile=0x2c4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x218e, lpOverlapped=0x0) returned 1 [0184.523] WriteFile (in: hFile=0x2dc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2190, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2190, lpOverlapped=0x0) returned 1 [0184.525] WriteFile (in: hFile=0x2dc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0184.525] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0184.525] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0184.525] WriteFile (in: hFile=0x2c4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x218e, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x218e, lpOverlapped=0x0) returned 1 [0184.525] FlushFileBuffers (hFile=0x2c4) returned 1 [0184.535] FlushFileBuffers (hFile=0x2dc) returned 1 [0184.538] CloseHandle (hObject=0x2c4) returned 1 [0184.538] CloseHandle (hObject=0x2dc) returned 1 [0184.538] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif")) returned 1 [0184.539] SetEvent (hEvent=0x27c) returned 1 [0184.539] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2dc [0184.539] GetFileSizeEx (in: hFile=0x2dc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=7805) returned 1 [0184.539] CloseHandle (hObject=0x2dc) returned 1 [0184.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif")) returned 0x20 [0184.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif")) returned 0x20 [0184.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0184.540] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2dc [0184.540] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0184.540] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0184.540] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c4 [0184.541] ReadFile (in: hFile=0x2dc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1e7d, lpOverlapped=0x0) returned 1 [0184.541] WriteFile (in: hFile=0x2c4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1e80, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1e80, lpOverlapped=0x0) returned 1 [0184.542] WriteFile (in: hFile=0x2c4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x102, lpOverlapped=0x0) returned 1 [0184.542] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0184.542] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0184.543] WriteFile (in: hFile=0x2dc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1e7d, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1e7d, lpOverlapped=0x0) returned 1 [0184.543] FlushFileBuffers (hFile=0x2dc) returned 1 [0184.553] FlushFileBuffers (hFile=0x2c4) returned 1 [0184.555] CloseHandle (hObject=0x2dc) returned 1 [0184.555] CloseHandle (hObject=0x2c4) returned 1 [0184.555] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif")) returned 1 [0184.557] SetEvent (hEvent=0x27c) returned 1 [0184.557] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0184.557] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=5040094) returned 1 [0184.557] CloseHandle (hObject=0x2c4) returned 1 [0184.557] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar")) returned 0x20 [0184.557] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 1 [0184.558] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0184.559] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f900 | out: lpNewFilePointer=0x0) returned 1 [0184.559] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f900 | out: lpNewFilePointer=0x0) returned 1 [0184.559] ReadFile (in: hFile=0x2c4, lpBuffer=0x3a11058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x364f90c, lpOverlapped=0x0 | out: lpBuffer=0x3a11058*, lpNumberOfBytesRead=0x364f90c*=0x40000, lpOverlapped=0x0) returned 1 [0184.574] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x19a29f, lpNewFilePointer=0x0, dwMoveMethod=0x364f900 | out: lpNewFilePointer=0x0) returned 1 [0184.575] ReadFile (in: hFile=0x2c4, lpBuffer=0x3a51058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x364f90c, lpOverlapped=0x0 | out: lpBuffer=0x3a51058*, lpNumberOfBytesRead=0x364f90c*=0x40000, lpOverlapped=0x0) returned 1 [0184.595] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x48e7de, lpNewFilePointer=0x0, dwMoveMethod=0x364f900 | out: lpNewFilePointer=0x0) returned 1 [0184.595] ReadFile (in: hFile=0x2c4, lpBuffer=0x3a91058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x364f90c, lpOverlapped=0x0 | out: lpBuffer=0x3a91058*, lpNumberOfBytesRead=0x364f90c*=0x40000, lpOverlapped=0x0) returned 1 [0184.612] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa70 | out: lpNewFilePointer=0x0) returned 1 [0184.612] WriteFile (in: hFile=0x2c4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x364fa68, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa68*=0xc0102, lpOverlapped=0x0) returned 1 [0184.874] SetEndOfFile (hFile=0x2c4) returned 1 [0184.875] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x48e7de, lpNewFilePointer=0x0, dwMoveMethod=0x364f908 | out: lpNewFilePointer=0x0) returned 1 [0184.875] WriteFile (in: hFile=0x2c4, lpBuffer=0x3ad113a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x364f914, lpOverlapped=0x0 | out: lpBuffer=0x3ad113a*, lpNumberOfBytesWritten=0x364f914*=0x40000, lpOverlapped=0x0) returned 1 [0184.877] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x19a29f, lpNewFilePointer=0x0, dwMoveMethod=0x364f908 | out: lpNewFilePointer=0x0) returned 1 [0184.877] WriteFile (in: hFile=0x2c4, lpBuffer=0x3ad113a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x364f914, lpOverlapped=0x0 | out: lpBuffer=0x3ad113a*, lpNumberOfBytesWritten=0x364f914*=0x40000, lpOverlapped=0x0) returned 1 [0184.879] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f908 | out: lpNewFilePointer=0x0) returned 1 [0184.879] WriteFile (in: hFile=0x2c4, lpBuffer=0x3ad113a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x364f914, lpOverlapped=0x0 | out: lpBuffer=0x3ad113a*, lpNumberOfBytesWritten=0x364f914*=0x40000, lpOverlapped=0x0) returned 1 [0184.880] FlushFileBuffers (hFile=0x2c4) returned 1 [0185.157] CloseHandle (hObject=0x2c4) returned 1 [0185.157] SetEvent (hEvent=0x27c) returned 1 [0185.157] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0185.158] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=44516) returned 1 [0185.158] CloseHandle (hObject=0x2c4) returned 1 [0185.158] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar")) returned 0x20 [0185.158] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar")) returned 0x20 [0185.158] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0185.158] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0185.158] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0185.158] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0185.158] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d4 [0185.160] ReadFile (in: hFile=0x2c4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xade4, lpOverlapped=0x0) returned 1 [0185.161] WriteFile (in: hFile=0x2d4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xadf0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xadf0, lpOverlapped=0x0) returned 1 [0185.163] WriteFile (in: hFile=0x2d4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0185.163] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0185.163] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0185.163] WriteFile (in: hFile=0x2c4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xade4, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xade4, lpOverlapped=0x0) returned 1 [0185.164] FlushFileBuffers (hFile=0x2c4) returned 1 [0185.553] FlushFileBuffers (hFile=0x2d4) returned 1 [0185.555] CloseHandle (hObject=0x2c4) returned 1 [0185.555] CloseHandle (hObject=0x2d4) returned 1 [0185.555] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar")) returned 1 [0185.556] SetEvent (hEvent=0x27c) returned 1 [0185.557] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0185.557] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2204781) returned 1 [0185.557] CloseHandle (hObject=0x2d4) returned 1 [0185.557] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar")) returned 0x20 [0185.557] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 1 [0185.558] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0185.558] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f900 | out: lpNewFilePointer=0x0) returned 1 [0185.558] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f900 | out: lpNewFilePointer=0x0) returned 1 [0185.558] ReadFile (in: hFile=0x2d4, lpBuffer=0x3a11058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x364f90c, lpOverlapped=0x0 | out: lpBuffer=0x3a11058*, lpNumberOfBytesRead=0x364f90c*=0x40000, lpOverlapped=0x0) returned 1 [0185.573] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0xb36cf, lpNewFilePointer=0x0, dwMoveMethod=0x364f900 | out: lpNewFilePointer=0x0) returned 1 [0185.573] ReadFile (in: hFile=0x2d4, lpBuffer=0x3a51058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x364f90c, lpOverlapped=0x0 | out: lpBuffer=0x3a51058*, lpNumberOfBytesRead=0x364f90c*=0x40000, lpOverlapped=0x0) returned 1 [0185.593] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x1da46d, lpNewFilePointer=0x0, dwMoveMethod=0x364f900 | out: lpNewFilePointer=0x0) returned 1 [0185.593] ReadFile (in: hFile=0x2d4, lpBuffer=0x3a91058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x364f90c, lpOverlapped=0x0 | out: lpBuffer=0x3a91058*, lpNumberOfBytesRead=0x364f90c*=0x40000, lpOverlapped=0x0) returned 1 [0185.815] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa70 | out: lpNewFilePointer=0x0) returned 1 [0185.815] WriteFile (in: hFile=0x2d4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xc0112, lpNumberOfBytesWritten=0x364fa68, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa68*=0xc0112, lpOverlapped=0x0) returned 1 [0185.838] SetEndOfFile (hFile=0x2d4) returned 1 [0185.838] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x1da46d, lpNewFilePointer=0x0, dwMoveMethod=0x364f908 | out: lpNewFilePointer=0x0) returned 1 [0185.838] WriteFile (in: hFile=0x2d4, lpBuffer=0x3ad114a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x364f914, lpOverlapped=0x0 | out: lpBuffer=0x3ad114a*, lpNumberOfBytesWritten=0x364f914*=0x40000, lpOverlapped=0x0) returned 1 [0185.840] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0xb36cf, lpNewFilePointer=0x0, dwMoveMethod=0x364f908 | out: lpNewFilePointer=0x0) returned 1 [0185.840] WriteFile (in: hFile=0x2d4, lpBuffer=0x3ad114a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x364f914, lpOverlapped=0x0 | out: lpBuffer=0x3ad114a*, lpNumberOfBytesWritten=0x364f914*=0x40000, lpOverlapped=0x0) returned 1 [0185.842] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f908 | out: lpNewFilePointer=0x0) returned 1 [0185.842] WriteFile (in: hFile=0x2d4, lpBuffer=0x3ad114a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x364f914, lpOverlapped=0x0 | out: lpBuffer=0x3ad114a*, lpNumberOfBytesWritten=0x364f914*=0x40000, lpOverlapped=0x0) returned 1 [0185.843] FlushFileBuffers (hFile=0x2d4) returned 1 [0186.065] CloseHandle (hObject=0x2d4) returned 1 [0186.065] SetEvent (hEvent=0x27c) returned 1 [0186.065] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0186.066] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=42185) returned 1 [0186.066] CloseHandle (hObject=0x2d4) returned 1 [0186.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar")) returned 0x20 [0186.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar")) returned 0x20 [0186.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0186.066] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0186.067] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0186.067] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0186.067] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2fc [0186.067] ReadFile (in: hFile=0x2d4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xa4c9, lpOverlapped=0x0) returned 1 [0186.068] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xa4d0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xa4d0, lpOverlapped=0x0) returned 1 [0186.070] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0186.070] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0186.070] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0186.070] WriteFile (in: hFile=0x2d4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xa4c9, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xa4c9, lpOverlapped=0x0) returned 1 [0186.071] FlushFileBuffers (hFile=0x2d4) returned 1 [0186.204] FlushFileBuffers (hFile=0x2fc) returned 1 [0186.206] CloseHandle (hObject=0x2d4) returned 1 [0186.206] CloseHandle (hObject=0x2fc) returned 1 [0186.206] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar")) returned 1 [0186.208] SetEvent (hEvent=0x27c) returned 1 [0186.208] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0186.209] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=32699) returned 1 [0186.209] CloseHandle (hObject=0x2fc) returned 1 [0186.209] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar")) returned 0x20 [0186.209] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar")) returned 0x20 [0186.209] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0186.209] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0186.209] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0186.209] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0186.209] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d4 [0186.210] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x7fbb, lpOverlapped=0x0) returned 1 [0186.210] WriteFile (in: hFile=0x2d4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7fc0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x7fc0, lpOverlapped=0x0) returned 1 [0186.212] WriteFile (in: hFile=0x2d4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0186.212] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0186.212] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0186.212] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7fbb, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x7fbb, lpOverlapped=0x0) returned 1 [0186.213] FlushFileBuffers (hFile=0x2fc) returned 1 [0186.362] FlushFileBuffers (hFile=0x2d4) returned 1 [0186.364] CloseHandle (hObject=0x2fc) returned 1 [0186.364] CloseHandle (hObject=0x2d4) returned 1 [0186.364] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar")) returned 1 [0186.365] SetEvent (hEvent=0x27c) returned 1 [0186.366] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0186.366] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=68924) returned 1 [0186.366] CloseHandle (hObject=0x2d4) returned 1 [0186.366] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar")) returned 0x20 [0186.366] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar")) returned 0x20 [0186.366] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0186.366] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0186.366] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0186.366] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0186.367] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2fc [0186.367] ReadFile (in: hFile=0x2d4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x10d3c, lpOverlapped=0x0) returned 1 [0186.368] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x10d40, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x10d40, lpOverlapped=0x0) returned 1 [0186.371] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0186.371] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0186.371] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0186.371] WriteFile (in: hFile=0x2d4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x10d3c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x10d3c, lpOverlapped=0x0) returned 1 [0186.371] FlushFileBuffers (hFile=0x2d4) returned 1 [0188.033] FlushFileBuffers (hFile=0x2fc) returned 1 [0188.035] CloseHandle (hObject=0x2d4) returned 1 [0188.035] CloseHandle (hObject=0x2fc) returned 1 [0188.035] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar")) returned 1 [0188.037] SetEvent (hEvent=0x27c) returned 1 [0188.037] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0188.037] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=75124) returned 1 [0188.037] CloseHandle (hObject=0x2fc) returned 1 [0188.037] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf")) returned 0x20 [0188.037] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf")) returned 0x20 [0188.037] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0188.038] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0188.038] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0188.038] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0188.038] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d4 [0188.038] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x12574, lpOverlapped=0x0) returned 1 [0188.040] WriteFile (in: hFile=0x2d4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x12580, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x12580, lpOverlapped=0x0) returned 1 [0188.043] WriteFile (in: hFile=0x2d4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x112, lpOverlapped=0x0) returned 1 [0188.043] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0188.043] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0188.043] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x12574, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x12574, lpOverlapped=0x0) returned 1 [0188.044] FlushFileBuffers (hFile=0x2fc) returned 1 [0188.084] FlushFileBuffers (hFile=0x2d4) returned 1 [0188.088] CloseHandle (hObject=0x2fc) returned 1 [0188.088] CloseHandle (hObject=0x2d4) returned 1 [0188.088] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf")) returned 1 [0188.089] SetEvent (hEvent=0x27c) returned 1 [0188.090] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0188.090] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=344908) returned 1 [0188.090] CloseHandle (hObject=0x2d4) returned 1 [0188.090] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf")) returned 0x20 [0188.090] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf")) returned 0x20 [0188.090] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0188.090] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0188.090] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0188.090] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0188.090] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2fc [0188.091] ReadFile (in: hFile=0x2d4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x5434c, lpOverlapped=0x0) returned 1 [0188.097] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x54350, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x54350, lpOverlapped=0x0) returned 1 [0188.104] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x102, lpOverlapped=0x0) returned 1 [0188.104] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0188.104] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0188.104] WriteFile (in: hFile=0x2d4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5434c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x5434c, lpOverlapped=0x0) returned 1 [0188.105] FlushFileBuffers (hFile=0x2d4) returned 1 [0188.409] FlushFileBuffers (hFile=0x2fc) returned 1 [0188.411] CloseHandle (hObject=0x2d4) returned 1 [0188.411] CloseHandle (hObject=0x2fc) returned 1 [0188.411] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf")) returned 1 [0188.415] SetEvent (hEvent=0x27c) returned 1 [0188.415] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0188.415] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=698236) returned 1 [0188.415] CloseHandle (hObject=0x2fc) returned 1 [0188.415] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf")) returned 0x20 [0188.415] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf")) returned 0x20 [0188.415] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0188.416] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0188.416] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0188.416] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0188.416] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d4 [0188.417] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xaa77c, lpOverlapped=0x0) returned 1 [0188.429] WriteFile (in: hFile=0x2d4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xaa780, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xaa780, lpOverlapped=0x0) returned 1 [0188.441] WriteFile (in: hFile=0x2d4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x102, lpOverlapped=0x0) returned 1 [0188.441] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0188.441] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0188.441] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xaa77c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xaa77c, lpOverlapped=0x0) returned 1 [0188.443] FlushFileBuffers (hFile=0x2fc) returned 1 [0188.870] FlushFileBuffers (hFile=0x2d4) returned 1 [0188.872] CloseHandle (hObject=0x2fc) returned 1 [0188.872] CloseHandle (hObject=0x2d4) returned 1 [0188.872] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf")) returned 1 [0188.878] SetEvent (hEvent=0x27c) returned 1 [0188.879] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0188.879] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=242700) returned 1 [0188.879] CloseHandle (hObject=0x2d4) returned 1 [0188.879] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf")) returned 0x20 [0188.879] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf")) returned 0x20 [0188.879] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0188.879] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0188.879] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0188.879] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0188.880] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2fc [0188.880] ReadFile (in: hFile=0x2d4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x3b40c, lpOverlapped=0x0) returned 1 [0188.885] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3b410, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3b410, lpOverlapped=0x0) returned 1 [0188.889] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x112, lpOverlapped=0x0) returned 1 [0188.889] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0188.889] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0188.889] WriteFile (in: hFile=0x2d4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3b40c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x3b40c, lpOverlapped=0x0) returned 1 [0188.890] FlushFileBuffers (hFile=0x2d4) returned 1 [0189.254] FlushFileBuffers (hFile=0x2fc) returned 1 [0189.256] CloseHandle (hObject=0x2d4) returned 1 [0189.256] CloseHandle (hObject=0x2fc) returned 1 [0189.256] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf")) returned 1 [0189.259] SetEvent (hEvent=0x27c) returned 1 [0189.259] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0189.259] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=116446) returned 1 [0189.259] CloseHandle (hObject=0x2fc) returned 1 [0189.259] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar")) returned 0x20 [0189.259] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar")) returned 0x20 [0189.259] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0189.259] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0189.259] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0189.259] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0189.260] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d4 [0189.260] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1c6de, lpOverlapped=0x0) returned 1 [0189.263] WriteFile (in: hFile=0x2d4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1c6e0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1c6e0, lpOverlapped=0x0) returned 1 [0189.265] WriteFile (in: hFile=0x2d4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xe2, lpOverlapped=0x0) returned 1 [0189.266] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0189.266] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0189.266] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1c6de, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1c6de, lpOverlapped=0x0) returned 1 [0189.266] FlushFileBuffers (hFile=0x2fc) returned 1 [0189.530] FlushFileBuffers (hFile=0x2d4) returned 1 [0189.531] CloseHandle (hObject=0x2fc) returned 1 [0189.531] CloseHandle (hObject=0x2d4) returned 1 [0189.531] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar")) returned 1 [0189.533] SetEvent (hEvent=0x27c) returned 1 [0189.533] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0189.533] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=20109) returned 1 [0189.533] CloseHandle (hObject=0x2d4) returned 1 [0189.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc")) returned 0x20 [0189.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc")) returned 0x20 [0189.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0189.534] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0189.534] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0189.534] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0189.534] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2fc [0189.534] ReadFile (in: hFile=0x2d4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4e8d, lpOverlapped=0x0) returned 1 [0189.535] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4e90, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4e90, lpOverlapped=0x0) returned 1 [0189.537] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0189.537] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0189.537] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0189.537] WriteFile (in: hFile=0x2d4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4e8d, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4e8d, lpOverlapped=0x0) returned 1 [0189.537] FlushFileBuffers (hFile=0x2d4) returned 1 [0189.693] FlushFileBuffers (hFile=0x2fc) returned 1 [0189.709] CloseHandle (hObject=0x2d4) returned 1 [0189.709] CloseHandle (hObject=0x2fc) returned 1 [0189.709] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc")) returned 1 [0189.710] SetEvent (hEvent=0x27c) returned 1 [0189.711] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0189.711] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=560581) returned 1 [0189.711] CloseHandle (hObject=0x2fc) returned 1 [0189.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar")) returned 0x20 [0189.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar")) returned 0x20 [0189.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0189.711] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0189.711] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0189.711] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0189.712] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d4 [0189.712] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x88dc5, lpOverlapped=0x0) returned 1 [0189.722] WriteFile (in: hFile=0x2d4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x88dd0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x88dd0, lpOverlapped=0x0) returned 1 [0189.751] WriteFile (in: hFile=0x2d4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xe2, lpOverlapped=0x0) returned 1 [0189.751] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0189.751] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0189.751] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x88dc5, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x88dc5, lpOverlapped=0x0) returned 1 [0189.753] FlushFileBuffers (hFile=0x2fc) returned 1 [0190.119] FlushFileBuffers (hFile=0x2d4) returned 1 [0190.122] CloseHandle (hObject=0x2fc) returned 1 [0190.122] CloseHandle (hObject=0x2d4) returned 1 [0190.122] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar")) returned 1 [0190.128] SetEvent (hEvent=0x27c) returned 1 [0190.128] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0190.128] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2856) returned 1 [0190.128] CloseHandle (hObject=0x2d4) returned 1 [0190.128] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template")) returned 0x20 [0190.128] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template")) returned 0x20 [0190.128] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0190.128] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0190.129] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0190.129] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0190.129] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2fc [0190.129] ReadFile (in: hFile=0x2d4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xb28, lpOverlapped=0x0) returned 1 [0190.130] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xb30, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xb30, lpOverlapped=0x0) returned 1 [0190.131] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x112, lpOverlapped=0x0) returned 1 [0190.131] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0190.131] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0190.131] WriteFile (in: hFile=0x2d4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xb28, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xb28, lpOverlapped=0x0) returned 1 [0190.132] FlushFileBuffers (hFile=0x2d4) returned 1 [0190.208] FlushFileBuffers (hFile=0x2fc) returned 1 [0190.223] CloseHandle (hObject=0x2d4) returned 1 [0190.223] CloseHandle (hObject=0x2fc) returned 1 [0190.223] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template")) returned 1 [0190.224] SetEvent (hEvent=0x27c) returned 1 [0190.224] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0190.224] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3376) returned 1 [0190.224] CloseHandle (hObject=0x2fc) returned 1 [0190.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template")) returned 0x20 [0190.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template")) returned 0x20 [0190.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0190.225] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0190.225] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0190.225] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0190.225] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d4 [0190.226] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xd30, lpOverlapped=0x0) returned 1 [0190.226] WriteFile (in: hFile=0x2d4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xd40, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xd40, lpOverlapped=0x0) returned 1 [0190.227] WriteFile (in: hFile=0x2d4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x102, lpOverlapped=0x0) returned 1 [0190.228] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0190.228] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0190.228] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xd30, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xd30, lpOverlapped=0x0) returned 1 [0190.228] FlushFileBuffers (hFile=0x2fc) returned 1 [0190.230] FlushFileBuffers (hFile=0x2d4) returned 1 [0190.231] CloseHandle (hObject=0x2fc) returned 1 [0190.231] CloseHandle (hObject=0x2d4) returned 1 [0190.231] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template")) returned 1 [0190.232] SetEvent (hEvent=0x27c) returned 1 [0190.232] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0190.233] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=381) returned 1 [0190.233] CloseHandle (hObject=0x2d4) returned 1 [0190.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar")) returned 0x20 [0190.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar")) returned 0x20 [0190.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0190.233] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0190.233] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0190.233] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0190.233] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2fc [0190.234] ReadFile (in: hFile=0x2d4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x17d, lpOverlapped=0x0) returned 1 [0190.234] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x180, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x180, lpOverlapped=0x0) returned 1 [0190.235] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x102, lpOverlapped=0x0) returned 1 [0190.236] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0190.236] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0190.236] WriteFile (in: hFile=0x2d4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x17d, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x17d, lpOverlapped=0x0) returned 1 [0190.237] FlushFileBuffers (hFile=0x2d4) returned 1 [0190.239] FlushFileBuffers (hFile=0x2fc) returned 1 [0190.241] CloseHandle (hObject=0x2d4) returned 1 [0190.241] CloseHandle (hObject=0x2fc) returned 1 [0190.242] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar")) returned 1 [0190.243] SetEvent (hEvent=0x27c) returned 1 [0190.243] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0190.243] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2126) returned 1 [0190.243] CloseHandle (hObject=0x2fc) returned 1 [0190.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index")) returned 0x20 [0190.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index")) returned 0x20 [0190.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0190.243] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0190.243] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0190.243] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0190.243] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d4 [0190.244] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x84e, lpOverlapped=0x0) returned 1 [0190.245] WriteFile (in: hFile=0x2d4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x850, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x850, lpOverlapped=0x0) returned 1 [0190.246] WriteFile (in: hFile=0x2d4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0190.247] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0190.247] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0190.247] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x84e, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x84e, lpOverlapped=0x0) returned 1 [0190.247] FlushFileBuffers (hFile=0x2fc) returned 1 [0190.248] FlushFileBuffers (hFile=0x2d4) returned 1 [0190.250] CloseHandle (hObject=0x2fc) returned 1 [0190.250] CloseHandle (hObject=0x2d4) returned 1 [0190.250] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index")) returned 1 [0190.251] SetEvent (hEvent=0x27c) returned 1 [0190.251] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\net.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0190.251] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=4464) returned 1 [0190.251] CloseHandle (hObject=0x2d4) returned 1 [0190.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\net.properties")) returned 0x20 [0190.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\net.properties")) returned 0x20 [0190.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\net.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0190.251] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\net.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0190.252] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0190.252] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0190.252] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\net.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2fc [0190.252] ReadFile (in: hFile=0x2d4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1170, lpOverlapped=0x0) returned 1 [0190.253] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1180, lpOverlapped=0x0) returned 1 [0190.254] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0190.254] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0190.254] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0190.254] WriteFile (in: hFile=0x2d4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1170, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1170, lpOverlapped=0x0) returned 1 [0190.254] FlushFileBuffers (hFile=0x2d4) returned 1 [0190.256] FlushFileBuffers (hFile=0x2fc) returned 1 [0190.257] CloseHandle (hObject=0x2d4) returned 1 [0190.257] CloseHandle (hObject=0x2fc) returned 1 [0190.258] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\net.properties")) returned 1 [0190.259] SetEvent (hEvent=0x27c) returned 1 [0190.259] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0190.259] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1923211) returned 1 [0190.259] CloseHandle (hObject=0x2fc) returned 1 [0190.259] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar")) returned 0x20 [0190.259] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 1 [0190.260] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0190.260] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f900 | out: lpNewFilePointer=0x0) returned 1 [0190.260] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f900 | out: lpNewFilePointer=0x0) returned 1 [0190.260] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x364f90c, lpOverlapped=0x0 | out: lpBuffer=0x3a11058*, lpNumberOfBytesRead=0x364f90c*=0x40000, lpOverlapped=0x0) returned 1 [0190.270] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x9c82e, lpNewFilePointer=0x0, dwMoveMethod=0x364f900 | out: lpNewFilePointer=0x0) returned 1 [0190.270] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a51058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x364f90c, lpOverlapped=0x0 | out: lpBuffer=0x3a51058*, lpNumberOfBytesRead=0x364f90c*=0x40000, lpOverlapped=0x0) returned 1 [0190.279] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x19588b, lpNewFilePointer=0x0, dwMoveMethod=0x364f900 | out: lpNewFilePointer=0x0) returned 1 [0190.279] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a91058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x364f90c, lpOverlapped=0x0 | out: lpBuffer=0x3a91058*, lpNumberOfBytesRead=0x364f90c*=0x40000, lpOverlapped=0x0) returned 1 [0190.297] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa70 | out: lpNewFilePointer=0x0) returned 1 [0190.297] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x364fa68, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa68*=0xc0102, lpOverlapped=0x0) returned 1 [0190.430] SetEndOfFile (hFile=0x2fc) returned 1 [0190.430] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x19588b, lpNewFilePointer=0x0, dwMoveMethod=0x364f908 | out: lpNewFilePointer=0x0) returned 1 [0190.430] WriteFile (in: hFile=0x2fc, lpBuffer=0x3ad113a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x364f914, lpOverlapped=0x0 | out: lpBuffer=0x3ad113a*, lpNumberOfBytesWritten=0x364f914*=0x40000, lpOverlapped=0x0) returned 1 [0190.433] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x9c82e, lpNewFilePointer=0x0, dwMoveMethod=0x364f908 | out: lpNewFilePointer=0x0) returned 1 [0190.433] WriteFile (in: hFile=0x2fc, lpBuffer=0x3ad113a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x364f914, lpOverlapped=0x0 | out: lpBuffer=0x3ad113a*, lpNumberOfBytesWritten=0x364f914*=0x40000, lpOverlapped=0x0) returned 1 [0190.435] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f908 | out: lpNewFilePointer=0x0) returned 1 [0190.435] WriteFile (in: hFile=0x2fc, lpBuffer=0x3ad113a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x364f914, lpOverlapped=0x0 | out: lpBuffer=0x3ad113a*, lpNumberOfBytesWritten=0x364f914*=0x40000, lpOverlapped=0x0) returned 1 [0190.436] FlushFileBuffers (hFile=0x2fc) returned 1 [0190.765] CloseHandle (hObject=0x2fc) returned 1 [0190.765] SetEvent (hEvent=0x27c) returned 1 [0190.765] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0190.765] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=54560347) returned 1 [0190.766] CloseHandle (hObject=0x2fc) returned 1 [0190.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar")) returned 0x20 [0190.766] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 1 [0190.767] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0190.767] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f900 | out: lpNewFilePointer=0x0) returned 1 [0190.767] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f900 | out: lpNewFilePointer=0x0) returned 1 [0190.767] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x364f90c, lpOverlapped=0x0 | out: lpBuffer=0x3a11058*, lpNumberOfBytesRead=0x364f90c*=0x40000, lpOverlapped=0x0) returned 1 [0190.777] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x115821e, lpNewFilePointer=0x0, dwMoveMethod=0x364f900 | out: lpNewFilePointer=0x0) returned 1 [0190.777] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a51058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x364f90c, lpOverlapped=0x0 | out: lpBuffer=0x3a51058*, lpNumberOfBytesRead=0x364f90c*=0x40000, lpOverlapped=0x0) returned 1 [0190.785] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x33c865b, lpNewFilePointer=0x0, dwMoveMethod=0x364f900 | out: lpNewFilePointer=0x0) returned 1 [0190.785] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a91058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x364f90c, lpOverlapped=0x0 | out: lpBuffer=0x3a91058*, lpNumberOfBytesRead=0x364f90c*=0x40000, lpOverlapped=0x0) returned 1 [0190.804] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa70 | out: lpNewFilePointer=0x0) returned 1 [0190.804] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x364fa68, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa68*=0xc0102, lpOverlapped=0x0) returned 1 [0191.033] SetEndOfFile (hFile=0x2fc) returned 1 [0191.033] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x33c865b, lpNewFilePointer=0x0, dwMoveMethod=0x364f908 | out: lpNewFilePointer=0x0) returned 1 [0191.033] WriteFile (in: hFile=0x2fc, lpBuffer=0x3ad113a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x364f914, lpOverlapped=0x0 | out: lpBuffer=0x3ad113a*, lpNumberOfBytesWritten=0x364f914*=0x40000, lpOverlapped=0x0) returned 1 [0191.035] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x115821e, lpNewFilePointer=0x0, dwMoveMethod=0x364f908 | out: lpNewFilePointer=0x0) returned 1 [0191.035] WriteFile (in: hFile=0x2fc, lpBuffer=0x3ad113a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x364f914, lpOverlapped=0x0 | out: lpBuffer=0x3ad113a*, lpNumberOfBytesWritten=0x364f914*=0x40000, lpOverlapped=0x0) returned 1 [0191.036] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f908 | out: lpNewFilePointer=0x0) returned 1 [0191.036] WriteFile (in: hFile=0x2fc, lpBuffer=0x3ad113a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x364f914, lpOverlapped=0x0 | out: lpBuffer=0x3ad113a*, lpNumberOfBytesWritten=0x364f914*=0x40000, lpOverlapped=0x0) returned 1 [0191.036] FlushFileBuffers (hFile=0x2fc) returned 1 [0191.233] CloseHandle (hObject=0x2fc) returned 1 [0191.233] SetEvent (hEvent=0x27c) returned 1 [0191.233] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.security"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0191.233] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=36524) returned 1 [0191.234] CloseHandle (hObject=0x2fc) returned 1 [0191.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.security")) returned 0x20 [0191.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.security")) returned 0x20 [0191.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.security.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0191.234] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.security"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0191.234] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0191.234] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0191.234] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.security.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x224 [0191.235] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x8eac, lpOverlapped=0x0) returned 1 [0191.236] WriteFile (in: hFile=0x224, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8eb0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x8eb0, lpOverlapped=0x0) returned 1 [0191.237] WriteFile (in: hFile=0x224, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0191.237] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0191.238] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0191.238] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8eac, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x8eac, lpOverlapped=0x0) returned 1 [0191.238] FlushFileBuffers (hFile=0x2fc) returned 1 [0191.483] FlushFileBuffers (hFile=0x224) returned 1 [0191.500] CloseHandle (hObject=0x2fc) returned 1 [0191.501] CloseHandle (hObject=0x224) returned 1 [0191.501] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.security")) returned 1 [0191.502] SetEvent (hEvent=0x27c) returned 1 [0191.502] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224 [0191.503] GetFileSizeEx (in: hFile=0x224, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=40) returned 1 [0191.503] CloseHandle (hObject=0x224) returned 1 [0191.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license")) returned 0x20 [0191.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license")) returned 0x20 [0191.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0191.503] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224 [0191.503] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0191.503] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0191.503] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2fc [0191.504] ReadFile (in: hFile=0x224, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x28, lpOverlapped=0x0) returned 1 [0191.504] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x30, lpOverlapped=0x0) returned 1 [0191.505] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xe2, lpOverlapped=0x0) returned 1 [0191.506] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0191.506] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0191.506] WriteFile (in: hFile=0x224, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x28, lpOverlapped=0x0) returned 1 [0191.506] FlushFileBuffers (hFile=0x224) returned 1 [0191.518] FlushFileBuffers (hFile=0x2fc) returned 1 [0191.529] CloseHandle (hObject=0x224) returned 1 [0191.529] CloseHandle (hObject=0x2fc) returned 1 [0191.529] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license")) returned 1 [0191.530] SetEvent (hEvent=0x27c) returned 1 [0191.530] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\release" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0191.530] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=528) returned 1 [0191.530] CloseHandle (hObject=0x2fc) returned 1 [0191.530] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\release" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release")) returned 0x20 [0191.530] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\release" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release")) returned 0x20 [0191.530] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\release.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0191.530] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\release" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0191.531] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0191.531] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0191.531] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\release.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x224 [0191.531] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x210, lpOverlapped=0x0) returned 1 [0191.532] WriteFile (in: hFile=0x224, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x220, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x220, lpOverlapped=0x0) returned 1 [0191.533] WriteFile (in: hFile=0x224, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xe2, lpOverlapped=0x0) returned 1 [0191.533] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0191.533] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0191.533] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x210, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x210, lpOverlapped=0x0) returned 1 [0191.533] FlushFileBuffers (hFile=0x2fc) returned 1 [0191.544] FlushFileBuffers (hFile=0x224) returned 1 [0191.547] CloseHandle (hObject=0x2fc) returned 1 [0191.547] CloseHandle (hObject=0x224) returned 1 [0191.548] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\release" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release")) returned 1 [0191.549] SetEvent (hEvent=0x27c) returned 1 [0191.549] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224 [0191.549] GetFileSizeEx (in: hFile=0x224, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=63933) returned 1 [0191.549] CloseHandle (hObject=0x224) returned 1 [0191.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt")) returned 0x20 [0191.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt")) returned 0x20 [0191.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0191.549] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224 [0191.549] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0191.549] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0191.549] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2fc [0191.550] ReadFile (in: hFile=0x224, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xf9bd, lpOverlapped=0x0) returned 1 [0191.551] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf9c0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf9c0, lpOverlapped=0x0) returned 1 [0191.553] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x122, lpOverlapped=0x0) returned 1 [0191.553] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0191.554] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0191.554] WriteFile (in: hFile=0x224, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf9bd, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xf9bd, lpOverlapped=0x0) returned 1 [0191.554] FlushFileBuffers (hFile=0x224) returned 1 [0191.740] FlushFileBuffers (hFile=0x2fc) returned 1 [0191.750] CloseHandle (hObject=0x224) returned 1 [0191.750] CloseHandle (hObject=0x2fc) returned 1 [0191.750] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt")) returned 1 [0191.752] SetEvent (hEvent=0x27c) returned 1 [0191.752] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0191.752] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=5944055) returned 1 [0191.752] CloseHandle (hObject=0x2fc) returned 1 [0191.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml")) returned 0x20 [0191.752] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\AppXManifest.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 1 [0191.753] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\AppXManifest.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0191.753] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f900 | out: lpNewFilePointer=0x0) returned 1 [0191.753] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f900 | out: lpNewFilePointer=0x0) returned 1 [0191.753] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x364f90c, lpOverlapped=0x0 | out: lpBuffer=0x3a11058*, lpNumberOfBytesRead=0x364f90c*=0x40000, lpOverlapped=0x0) returned 1 [0191.756] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x1e3ba7, lpNewFilePointer=0x0, dwMoveMethod=0x364f900 | out: lpNewFilePointer=0x0) returned 1 [0191.756] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a51058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x364f90c, lpOverlapped=0x0 | out: lpBuffer=0x3a51058*, lpNumberOfBytesRead=0x364f90c*=0x40000, lpOverlapped=0x0) returned 1 [0191.762] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x56b2f7, lpNewFilePointer=0x0, dwMoveMethod=0x364f900 | out: lpNewFilePointer=0x0) returned 1 [0191.762] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a91058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x364f90c, lpOverlapped=0x0 | out: lpBuffer=0x3a91058*, lpNumberOfBytesRead=0x364f90c*=0x40000, lpOverlapped=0x0) returned 1 [0191.775] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa70 | out: lpNewFilePointer=0x0) returned 1 [0191.775] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xc0112, lpNumberOfBytesWritten=0x364fa68, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa68*=0xc0112, lpOverlapped=0x0) returned 1 [0192.000] SetEndOfFile (hFile=0x2fc) returned 1 [0192.000] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x56b2f7, lpNewFilePointer=0x0, dwMoveMethod=0x364f908 | out: lpNewFilePointer=0x0) returned 1 [0192.000] WriteFile (in: hFile=0x2fc, lpBuffer=0x3ad114a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x364f914, lpOverlapped=0x0 | out: lpBuffer=0x3ad114a*, lpNumberOfBytesWritten=0x364f914*=0x40000, lpOverlapped=0x0) returned 1 [0192.002] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x1e3ba7, lpNewFilePointer=0x0, dwMoveMethod=0x364f908 | out: lpNewFilePointer=0x0) returned 1 [0192.002] WriteFile (in: hFile=0x2fc, lpBuffer=0x3ad114a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x364f914, lpOverlapped=0x0 | out: lpBuffer=0x3ad114a*, lpNumberOfBytesWritten=0x364f914*=0x40000, lpOverlapped=0x0) returned 1 [0192.006] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f908 | out: lpNewFilePointer=0x0) returned 1 [0192.006] WriteFile (in: hFile=0x2fc, lpBuffer=0x3ad114a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x364f914, lpOverlapped=0x0 | out: lpBuffer=0x3ad114a*, lpNumberOfBytesWritten=0x364f914*=0x40000, lpOverlapped=0x0) returned 1 [0192.007] FlushFileBuffers (hFile=0x2fc) returned 1 [0192.015] CloseHandle (hObject=0x2fc) returned 1 [0192.015] SetEvent (hEvent=0x27c) returned 1 [0192.015] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0192.015] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=94467) returned 1 [0192.015] CloseHandle (hObject=0x2fc) returned 1 [0192.015] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs")) returned 0x20 [0192.015] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs")) returned 0x20 [0192.016] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0192.016] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0192.016] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0192.016] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0192.016] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x224 [0192.016] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x17103, lpOverlapped=0x0) returned 1 [0192.025] WriteFile (in: hFile=0x224, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x17110, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x17110, lpOverlapped=0x0) returned 1 [0192.027] WriteFile (in: hFile=0x224, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0192.028] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0192.028] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0192.028] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x17103, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x17103, lpOverlapped=0x0) returned 1 [0192.028] FlushFileBuffers (hFile=0x2fc) returned 1 [0192.704] FlushFileBuffers (hFile=0x224) returned 1 [0192.705] CloseHandle (hObject=0x2fc) returned 1 [0192.705] CloseHandle (hObject=0x224) returned 1 [0192.705] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs")) returned 1 [0192.707] SetEvent (hEvent=0x27c) returned 1 [0192.707] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224 [0192.708] GetFileSizeEx (in: hFile=0x224, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1533) returned 1 [0192.708] CloseHandle (hObject=0x224) returned 1 [0192.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml")) returned 0x220 [0192.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml")) returned 0x220 [0192.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0192.708] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224 [0192.708] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0192.708] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0192.708] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0192.709] ReadFile (in: hFile=0x224, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x5fd, lpOverlapped=0x0) returned 1 [0192.709] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x600, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x600, lpOverlapped=0x0) returned 1 [0192.710] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x142, lpOverlapped=0x0) returned 1 [0192.711] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0192.711] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0192.711] WriteFile (in: hFile=0x224, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5fd, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x5fd, lpOverlapped=0x0) returned 1 [0192.711] FlushFileBuffers (hFile=0x224) returned 1 [0192.714] FlushFileBuffers (hFile=0x2fc) returned 1 [0192.716] CloseHandle (hObject=0x224) returned 1 [0192.716] CloseHandle (hObject=0x2fc) returned 1 [0192.716] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml")) returned 1 [0192.717] SetEvent (hEvent=0x27c) returned 1 [0192.717] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0192.717] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=800867) returned 1 [0192.717] CloseHandle (hObject=0x2fc) returned 1 [0192.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml")) returned 0x220 [0192.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml")) returned 0x220 [0192.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0192.718] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0192.718] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0192.718] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0192.718] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x224 [0192.718] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xc3863, lpOverlapped=0x0) returned 1 [0192.738] WriteFile (in: hFile=0x224, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xc3870, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xc3870, lpOverlapped=0x0) returned 1 [0192.753] WriteFile (in: hFile=0x224, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x142, lpOverlapped=0x0) returned 1 [0192.753] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0192.753] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0192.753] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xc3863, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xc3863, lpOverlapped=0x0) returned 1 [0192.755] FlushFileBuffers (hFile=0x2fc) returned 1 [0193.104] FlushFileBuffers (hFile=0x224) returned 1 [0193.107] CloseHandle (hObject=0x2fc) returned 1 [0193.107] CloseHandle (hObject=0x224) returned 1 [0193.107] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml")) returned 1 [0193.114] SetEvent (hEvent=0x27c) returned 1 [0193.115] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224 [0193.115] GetFileSizeEx (in: hFile=0x224, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1261) returned 1 [0193.115] CloseHandle (hObject=0x224) returned 1 [0193.115] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml")) returned 0x220 [0193.115] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml")) returned 0x220 [0193.115] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0193.115] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224 [0193.115] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0193.115] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0193.115] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0193.129] ReadFile (in: hFile=0x224, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4ed, lpOverlapped=0x0) returned 1 [0193.132] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4f0, lpOverlapped=0x0) returned 1 [0193.134] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x142, lpOverlapped=0x0) returned 1 [0193.134] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0193.134] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0193.134] WriteFile (in: hFile=0x224, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4ed, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4ed, lpOverlapped=0x0) returned 1 [0193.134] FlushFileBuffers (hFile=0x224) returned 1 [0193.143] FlushFileBuffers (hFile=0x2fc) returned 1 [0193.146] CloseHandle (hObject=0x224) returned 1 [0193.146] CloseHandle (hObject=0x2fc) returned 1 [0193.146] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml")) returned 1 [0193.148] SetEvent (hEvent=0x27c) returned 1 [0193.148] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0193.148] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=253712) returned 1 [0193.148] CloseHandle (hObject=0x2fc) returned 1 [0193.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml")) returned 0x220 [0193.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml")) returned 0x220 [0193.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0193.149] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0193.149] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0193.149] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0193.149] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x224 [0193.150] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x3df10, lpOverlapped=0x0) returned 1 [0193.154] WriteFile (in: hFile=0x224, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3df20, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3df20, lpOverlapped=0x0) returned 1 [0193.160] WriteFile (in: hFile=0x224, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x142, lpOverlapped=0x0) returned 1 [0193.160] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0193.160] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0193.160] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3df10, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x3df10, lpOverlapped=0x0) returned 1 [0193.161] FlushFileBuffers (hFile=0x2fc) returned 1 [0193.179] FlushFileBuffers (hFile=0x224) returned 1 [0193.182] CloseHandle (hObject=0x2fc) returned 1 [0193.182] CloseHandle (hObject=0x224) returned 1 [0193.182] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml")) returned 1 [0193.185] SetEvent (hEvent=0x27c) returned 1 [0193.185] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0193.186] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1124942) returned 1 [0193.186] CloseHandle (hObject=0x2f8) returned 1 [0193.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml")) returned 0x220 [0193.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml")) returned 0x220 [0193.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0193.188] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224 [0193.188] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0193.188] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0193.188] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0193.194] ReadFile (in: hFile=0x224, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x110100, lpOverlapped=0x0) returned 1 [0193.224] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x110100, lpOverlapped=0x0) returned 1 [0193.541] ReadFile (in: hFile=0x224, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x294e, lpOverlapped=0x0) returned 1 [0193.542] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2950, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2950, lpOverlapped=0x0) returned 1 [0193.542] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x142, lpOverlapped=0x0) returned 1 [0193.542] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0193.543] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0193.543] WriteFile (in: hFile=0x224, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x110102, lpOverlapped=0x0) returned 1 [0193.548] WriteFile (in: hFile=0x224, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x294c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x294c, lpOverlapped=0x0) returned 1 [0193.548] FlushFileBuffers (hFile=0x224) returned 1 [0193.915] FlushFileBuffers (hFile=0x2fc) returned 1 [0193.922] CloseHandle (hObject=0x224) returned 1 [0193.922] CloseHandle (hObject=0x2fc) returned 1 [0193.922] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml")) returned 1 [0193.932] SetEvent (hEvent=0x27c) returned 1 [0193.933] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0193.933] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=215883) returned 1 [0193.933] CloseHandle (hObject=0x2fc) returned 1 [0193.933] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml")) returned 0x220 [0193.933] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml")) returned 0x220 [0193.934] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0193.934] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0193.934] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0193.934] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0193.934] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x224 [0193.935] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x34b4b, lpOverlapped=0x0) returned 1 [0193.938] WriteFile (in: hFile=0x224, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x34b50, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x34b50, lpOverlapped=0x0) returned 1 [0193.942] WriteFile (in: hFile=0x224, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x142, lpOverlapped=0x0) returned 1 [0193.942] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0193.943] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0193.943] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x34b4b, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x34b4b, lpOverlapped=0x0) returned 1 [0193.943] FlushFileBuffers (hFile=0x2fc) returned 1 [0193.956] FlushFileBuffers (hFile=0x224) returned 1 [0193.959] CloseHandle (hObject=0x2fc) returned 1 [0193.959] CloseHandle (hObject=0x224) returned 1 [0193.959] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml")) returned 1 [0193.961] SetEvent (hEvent=0x27c) returned 1 [0193.961] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224 [0193.962] GetFileSizeEx (in: hFile=0x224, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1261) returned 1 [0193.962] CloseHandle (hObject=0x224) returned 1 [0193.962] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml")) returned 0x220 [0193.962] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml")) returned 0x220 [0193.962] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0193.962] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224 [0193.962] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0193.962] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0193.962] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0193.963] ReadFile (in: hFile=0x224, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4ed, lpOverlapped=0x0) returned 1 [0193.963] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4f0, lpOverlapped=0x0) returned 1 [0193.965] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x142, lpOverlapped=0x0) returned 1 [0193.965] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0193.965] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0193.965] WriteFile (in: hFile=0x224, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4ed, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4ed, lpOverlapped=0x0) returned 1 [0193.965] FlushFileBuffers (hFile=0x224) returned 1 [0194.008] FlushFileBuffers (hFile=0x2fc) returned 1 [0194.013] CloseHandle (hObject=0x224) returned 1 [0194.013] CloseHandle (hObject=0x2fc) returned 1 [0194.013] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml")) returned 1 [0194.015] SetEvent (hEvent=0x27c) returned 1 [0194.016] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0194.016] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=14913) returned 1 [0194.016] CloseHandle (hObject=0x2fc) returned 1 [0194.016] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml")) returned 0x220 [0194.016] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml")) returned 0x220 [0194.016] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0194.017] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0194.017] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0194.017] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0194.017] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x224 [0194.018] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x3a41, lpOverlapped=0x0) returned 1 [0194.020] WriteFile (in: hFile=0x224, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3a50, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3a50, lpOverlapped=0x0) returned 1 [0194.021] WriteFile (in: hFile=0x224, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x142, lpOverlapped=0x0) returned 1 [0194.021] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0194.022] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0194.022] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3a41, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x3a41, lpOverlapped=0x0) returned 1 [0194.022] FlushFileBuffers (hFile=0x2fc) returned 1 [0194.406] FlushFileBuffers (hFile=0x224) returned 1 [0194.408] CloseHandle (hObject=0x2fc) returned 1 [0194.408] CloseHandle (hObject=0x224) returned 1 [0194.408] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml")) returned 1 [0194.410] SetEvent (hEvent=0x27c) returned 1 [0194.410] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224 [0194.410] GetFileSizeEx (in: hFile=0x224, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1261) returned 1 [0194.410] CloseHandle (hObject=0x224) returned 1 [0194.411] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml")) returned 0x220 [0194.411] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml")) returned 0x220 [0194.411] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0194.411] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224 [0194.411] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0194.411] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0194.411] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0194.412] ReadFile (in: hFile=0x224, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4ed, lpOverlapped=0x0) returned 1 [0194.413] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4f0, lpOverlapped=0x0) returned 1 [0194.414] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x142, lpOverlapped=0x0) returned 1 [0194.415] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0194.415] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0194.415] WriteFile (in: hFile=0x224, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4ed, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4ed, lpOverlapped=0x0) returned 1 [0194.415] FlushFileBuffers (hFile=0x224) returned 1 [0194.422] FlushFileBuffers (hFile=0x2fc) returned 1 [0194.425] CloseHandle (hObject=0x224) returned 1 [0194.425] CloseHandle (hObject=0x2fc) returned 1 [0194.426] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml")) returned 1 [0194.427] SetEvent (hEvent=0x27c) returned 1 [0194.427] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0194.427] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=65002) returned 1 [0194.427] CloseHandle (hObject=0x2fc) returned 1 [0194.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml")) returned 0x220 [0194.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml")) returned 0x220 [0194.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0194.428] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0194.428] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0194.428] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0194.428] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x224 [0194.429] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xfdea, lpOverlapped=0x0) returned 1 [0194.431] WriteFile (in: hFile=0x224, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xfdf0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xfdf0, lpOverlapped=0x0) returned 1 [0194.433] WriteFile (in: hFile=0x224, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x142, lpOverlapped=0x0) returned 1 [0194.434] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0194.434] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0194.434] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xfdea, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xfdea, lpOverlapped=0x0) returned 1 [0194.434] FlushFileBuffers (hFile=0x2fc) returned 1 [0194.502] FlushFileBuffers (hFile=0x224) returned 1 [0194.935] CloseHandle (hObject=0x2fc) returned 1 [0194.935] CloseHandle (hObject=0x224) returned 1 [0194.935] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml")) returned 1 [0194.971] SetEvent (hEvent=0x27c) returned 1 [0194.972] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224 [0194.982] GetFileSizeEx (in: hFile=0x224, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1261) returned 1 [0194.982] CloseHandle (hObject=0x224) returned 1 [0194.982] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml")) returned 0x220 [0194.983] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml")) returned 0x220 [0194.983] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0194.991] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224 [0194.991] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0194.991] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0194.991] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0194.994] ReadFile (in: hFile=0x224, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4ed, lpOverlapped=0x0) returned 1 [0195.018] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4f0, lpOverlapped=0x0) returned 1 [0195.064] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x142, lpOverlapped=0x0) returned 1 [0195.064] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0195.064] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0195.064] WriteFile (in: hFile=0x224, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4ed, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4ed, lpOverlapped=0x0) returned 1 [0195.065] FlushFileBuffers (hFile=0x224) returned 1 [0195.067] FlushFileBuffers (hFile=0x2fc) returned 1 [0195.068] CloseHandle (hObject=0x224) returned 1 [0195.068] CloseHandle (hObject=0x2fc) returned 1 [0195.068] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml")) returned 1 [0195.070] SetEvent (hEvent=0x27c) returned 1 [0195.070] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0195.070] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1261) returned 1 [0195.070] CloseHandle (hObject=0x2fc) returned 1 [0195.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml")) returned 0x220 [0195.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml")) returned 0x220 [0195.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0195.070] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0195.070] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0195.070] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0195.071] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x224 [0195.071] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4ed, lpOverlapped=0x0) returned 1 [0195.072] WriteFile (in: hFile=0x224, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4f0, lpOverlapped=0x0) returned 1 [0195.078] WriteFile (in: hFile=0x224, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x142, lpOverlapped=0x0) returned 1 [0195.078] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0195.078] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0195.078] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4ed, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4ed, lpOverlapped=0x0) returned 1 [0195.079] FlushFileBuffers (hFile=0x2fc) returned 1 [0195.082] FlushFileBuffers (hFile=0x224) returned 1 [0195.083] CloseHandle (hObject=0x2fc) returned 1 [0195.083] CloseHandle (hObject=0x224) returned 1 [0195.083] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml")) returned 1 [0195.085] SetEvent (hEvent=0x27c) returned 1 [0195.085] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224 [0195.085] GetFileSizeEx (in: hFile=0x224, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3375) returned 1 [0195.085] CloseHandle (hObject=0x224) returned 1 [0195.085] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml")) returned 0x220 [0195.085] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml")) returned 0x220 [0195.085] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0195.085] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x224 [0195.085] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0195.085] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0195.086] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0195.086] ReadFile (in: hFile=0x224, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xd2f, lpOverlapped=0x0) returned 1 [0195.087] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xd30, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xd30, lpOverlapped=0x0) returned 1 [0195.088] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x142, lpOverlapped=0x0) returned 1 [0195.088] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0195.088] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0195.088] WriteFile (in: hFile=0x224, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xd2f, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xd2f, lpOverlapped=0x0) returned 1 [0195.089] FlushFileBuffers (hFile=0x224) returned 1 [0195.092] FlushFileBuffers (hFile=0x2fc) returned 1 [0195.093] CloseHandle (hObject=0x224) returned 1 [0195.093] CloseHandle (hObject=0x2fc) returned 1 [0195.093] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml")) returned 1 [0195.094] SetEvent (hEvent=0x27c) returned 1 [0195.094] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0195.095] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2173046) returned 1 [0195.095] CloseHandle (hObject=0x2fc) returned 1 [0195.095] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml")) returned 0x220 [0195.095] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 1 [0195.096] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0195.096] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f900 | out: lpNewFilePointer=0x0) returned 1 [0195.096] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f900 | out: lpNewFilePointer=0x0) returned 1 [0195.096] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x364f90c, lpOverlapped=0x0 | out: lpBuffer=0x3a11058*, lpNumberOfBytesRead=0x364f90c*=0x40000, lpOverlapped=0x0) returned 1 [0195.105] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0xb0d7c, lpNewFilePointer=0x0, dwMoveMethod=0x364f900 | out: lpNewFilePointer=0x0) returned 1 [0195.107] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a51058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x364f90c, lpOverlapped=0x0 | out: lpBuffer=0x3a51058*, lpNumberOfBytesRead=0x364f90c*=0x40000, lpOverlapped=0x0) returned 1 [0195.114] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x1d2876, lpNewFilePointer=0x0, dwMoveMethod=0x364f900 | out: lpNewFilePointer=0x0) returned 1 [0195.114] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a91058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x364f90c, lpOverlapped=0x0 | out: lpBuffer=0x3a91058*, lpNumberOfBytesRead=0x364f90c*=0x40000, lpOverlapped=0x0) returned 1 [0195.140] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa70 | out: lpNewFilePointer=0x0) returned 1 [0195.140] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xc0122, lpNumberOfBytesWritten=0x364fa68, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa68*=0xc0122, lpOverlapped=0x0) returned 1 [0195.336] SetEndOfFile (hFile=0x2fc) returned 1 [0195.337] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x1d2876, lpNewFilePointer=0x0, dwMoveMethod=0x364f908 | out: lpNewFilePointer=0x0) returned 1 [0195.337] WriteFile (in: hFile=0x2fc, lpBuffer=0x3ad115a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x364f914, lpOverlapped=0x0 | out: lpBuffer=0x3ad115a*, lpNumberOfBytesWritten=0x364f914*=0x40000, lpOverlapped=0x0) returned 1 [0195.338] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0xb0d7c, lpNewFilePointer=0x0, dwMoveMethod=0x364f908 | out: lpNewFilePointer=0x0) returned 1 [0195.338] WriteFile (in: hFile=0x2fc, lpBuffer=0x3ad115a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x364f914, lpOverlapped=0x0 | out: lpBuffer=0x3ad115a*, lpNumberOfBytesWritten=0x364f914*=0x40000, lpOverlapped=0x0) returned 1 [0195.340] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f908 | out: lpNewFilePointer=0x0) returned 1 [0195.340] WriteFile (in: hFile=0x2fc, lpBuffer=0x3ad115a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x364f914, lpOverlapped=0x0 | out: lpBuffer=0x3ad115a*, lpNumberOfBytesWritten=0x364f914*=0x40000, lpOverlapped=0x0) returned 1 [0195.341] FlushFileBuffers (hFile=0x2fc) returned 1 [0195.732] CloseHandle (hObject=0x2fc) returned 1 [0195.732] SetEvent (hEvent=0x27c) returned 1 [0195.732] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l2-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0195.733] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=18624) returned 1 [0195.733] CloseHandle (hObject=0x2fc) returned 1 [0195.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l2-1-0.dll")) returned 0x220 [0195.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l2-1-0.dll")) returned 0x220 [0195.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l2-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0195.733] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l2-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0195.734] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0195.734] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0195.734] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l2-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0195.736] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x48c0, lpOverlapped=0x0) returned 1 [0195.738] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x48d0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x48d0, lpOverlapped=0x0) returned 1 [0195.740] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x112, lpOverlapped=0x0) returned 1 [0195.740] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0195.740] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0195.740] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x48c0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x48c0, lpOverlapped=0x0) returned 1 [0195.740] FlushFileBuffers (hFile=0x2fc) returned 1 [0195.945] FlushFileBuffers (hFile=0x21c) returned 1 [0195.957] CloseHandle (hObject=0x2fc) returned 1 [0195.957] CloseHandle (hObject=0x21c) returned 1 [0195.957] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l2-1-0.dll")) returned 1 [0195.959] SetEvent (hEvent=0x27c) returned 1 [0195.959] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0195.959] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=19136) returned 1 [0195.959] CloseHandle (hObject=0x21c) returned 1 [0195.960] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll")) returned 0x220 [0195.960] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll")) returned 0x220 [0195.960] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0195.960] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0195.960] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0195.960] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0195.960] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0195.961] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4ac0, lpOverlapped=0x0) returned 1 [0195.963] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4ad0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4ad0, lpOverlapped=0x0) returned 1 [0195.964] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x132, lpOverlapped=0x0) returned 1 [0195.965] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0195.965] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0195.965] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4ac0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4ac0, lpOverlapped=0x0) returned 1 [0195.965] FlushFileBuffers (hFile=0x21c) returned 1 [0195.993] FlushFileBuffers (hFile=0x2fc) returned 1 [0195.994] CloseHandle (hObject=0x21c) returned 1 [0195.995] CloseHandle (hObject=0x2fc) returned 1 [0195.995] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll")) returned 1 [0195.996] SetEvent (hEvent=0x27c) returned 1 [0195.996] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0195.996] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=18624) returned 1 [0195.997] CloseHandle (hObject=0x2fc) returned 1 [0195.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll")) returned 0x220 [0195.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll")) returned 0x220 [0195.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0195.997] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0195.997] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0195.997] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0195.997] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0195.998] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x48c0, lpOverlapped=0x0) returned 1 [0196.000] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x48d0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x48d0, lpOverlapped=0x0) returned 1 [0196.001] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x122, lpOverlapped=0x0) returned 1 [0196.002] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0196.002] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0196.002] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x48c0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x48c0, lpOverlapped=0x0) returned 1 [0196.002] FlushFileBuffers (hFile=0x2fc) returned 1 [0196.133] FlushFileBuffers (hFile=0x21c) returned 1 [0196.134] CloseHandle (hObject=0x2fc) returned 1 [0196.135] CloseHandle (hObject=0x21c) returned 1 [0196.135] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll")) returned 1 [0196.137] SetEvent (hEvent=0x27c) returned 1 [0196.147] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0196.148] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=11616) returned 1 [0196.148] CloseHandle (hObject=0x21c) returned 1 [0196.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll")) returned 0x220 [0196.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll")) returned 0x220 [0196.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0196.149] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0196.149] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0196.149] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0196.149] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0196.150] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2d60, lpOverlapped=0x0) returned 1 [0196.153] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2d70, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2d70, lpOverlapped=0x0) returned 1 [0196.155] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x122, lpOverlapped=0x0) returned 1 [0196.155] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0196.155] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0196.155] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2d60, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2d60, lpOverlapped=0x0) returned 1 [0196.155] FlushFileBuffers (hFile=0x21c) returned 1 [0196.160] FlushFileBuffers (hFile=0x2fc) returned 1 [0196.162] CloseHandle (hObject=0x21c) returned 1 [0196.162] CloseHandle (hObject=0x2fc) returned 1 [0196.162] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll")) returned 1 [0196.164] SetEvent (hEvent=0x27c) returned 1 [0196.164] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0196.164] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=19648) returned 1 [0196.164] CloseHandle (hObject=0x2fc) returned 1 [0196.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll")) returned 0x220 [0196.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll")) returned 0x220 [0196.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0196.165] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0196.165] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0196.165] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0196.165] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0196.165] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4cc0, lpOverlapped=0x0) returned 1 [0196.168] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4cd0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4cd0, lpOverlapped=0x0) returned 1 [0196.170] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x112, lpOverlapped=0x0) returned 1 [0196.170] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0196.170] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0196.170] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4cc0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4cc0, lpOverlapped=0x0) returned 1 [0196.170] FlushFileBuffers (hFile=0x2fc) returned 1 [0196.176] FlushFileBuffers (hFile=0x21c) returned 1 [0196.178] CloseHandle (hObject=0x2fc) returned 1 [0196.178] CloseHandle (hObject=0x21c) returned 1 [0196.178] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll")) returned 1 [0196.180] SetEvent (hEvent=0x27c) returned 1 [0196.180] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0196.180] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=22720) returned 1 [0196.180] CloseHandle (hObject=0x21c) returned 1 [0196.180] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll")) returned 0x220 [0196.180] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll")) returned 0x220 [0196.180] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0196.181] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0196.181] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0196.181] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0196.181] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0196.182] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x58c0, lpOverlapped=0x0) returned 1 [0196.184] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x58d0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x58d0, lpOverlapped=0x0) returned 1 [0196.185] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x122, lpOverlapped=0x0) returned 1 [0196.185] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0196.185] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0196.186] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x58c0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x58c0, lpOverlapped=0x0) returned 1 [0196.186] FlushFileBuffers (hFile=0x21c) returned 1 [0196.427] FlushFileBuffers (hFile=0x2fc) returned 1 [0196.428] CloseHandle (hObject=0x21c) returned 1 [0196.428] CloseHandle (hObject=0x2fc) returned 1 [0196.428] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll")) returned 1 [0196.430] SetEvent (hEvent=0x27c) returned 1 [0196.430] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0196.430] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=20672) returned 1 [0196.430] CloseHandle (hObject=0x2fc) returned 1 [0196.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll")) returned 0x220 [0196.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll")) returned 0x220 [0196.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0196.431] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0196.431] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0196.431] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0196.431] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0196.432] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x50c0, lpOverlapped=0x0) returned 1 [0196.434] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x50d0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x50d0, lpOverlapped=0x0) returned 1 [0196.435] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x122, lpOverlapped=0x0) returned 1 [0196.435] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0196.435] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0196.435] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x50c0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x50c0, lpOverlapped=0x0) returned 1 [0196.436] FlushFileBuffers (hFile=0x2fc) returned 1 [0196.622] FlushFileBuffers (hFile=0x21c) returned 1 [0196.623] CloseHandle (hObject=0x2fc) returned 1 [0196.623] CloseHandle (hObject=0x21c) returned 1 [0196.624] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll")) returned 1 [0196.625] SetEvent (hEvent=0x27c) returned 1 [0196.625] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0196.625] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=19136) returned 1 [0196.625] CloseHandle (hObject=0x21c) returned 1 [0196.625] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll")) returned 0x220 [0196.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll")) returned 0x220 [0196.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0196.626] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0196.626] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0196.626] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0196.626] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0196.627] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4ac0, lpOverlapped=0x0) returned 1 [0196.629] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4ad0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4ad0, lpOverlapped=0x0) returned 1 [0196.630] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x122, lpOverlapped=0x0) returned 1 [0196.631] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0196.631] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0196.631] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4ac0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4ac0, lpOverlapped=0x0) returned 1 [0196.631] FlushFileBuffers (hFile=0x21c) returned 1 [0196.886] FlushFileBuffers (hFile=0x2fc) returned 1 [0196.894] CloseHandle (hObject=0x21c) returned 1 [0196.894] CloseHandle (hObject=0x2fc) returned 1 [0196.894] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll")) returned 1 [0196.896] SetEvent (hEvent=0x27c) returned 1 [0196.896] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0196.896] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=26816) returned 1 [0196.896] CloseHandle (hObject=0x2fc) returned 1 [0196.897] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll")) returned 0x220 [0196.897] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll")) returned 0x220 [0196.897] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0196.897] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0196.897] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0196.897] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0196.897] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0196.898] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x68c0, lpOverlapped=0x0) returned 1 [0196.900] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x68d0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x68d0, lpOverlapped=0x0) returned 1 [0196.901] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x122, lpOverlapped=0x0) returned 1 [0196.902] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0196.902] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0196.902] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x68c0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x68c0, lpOverlapped=0x0) returned 1 [0196.902] FlushFileBuffers (hFile=0x2fc) returned 1 [0196.920] FlushFileBuffers (hFile=0x21c) returned 1 [0196.921] CloseHandle (hObject=0x2fc) returned 1 [0196.921] CloseHandle (hObject=0x21c) returned 1 [0196.921] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll")) returned 1 [0196.923] SetEvent (hEvent=0x27c) returned 1 [0196.923] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0196.923] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=19648) returned 1 [0196.923] CloseHandle (hObject=0x21c) returned 1 [0196.923] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll")) returned 0x220 [0196.923] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll")) returned 0x220 [0196.923] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0196.923] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0196.924] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0196.924] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0196.924] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0196.924] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4cc0, lpOverlapped=0x0) returned 1 [0196.926] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4cd0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4cd0, lpOverlapped=0x0) returned 1 [0196.928] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x122, lpOverlapped=0x0) returned 1 [0196.928] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0196.928] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0196.928] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4cc0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4cc0, lpOverlapped=0x0) returned 1 [0196.928] FlushFileBuffers (hFile=0x21c) returned 1 [0197.049] FlushFileBuffers (hFile=0x2fc) returned 1 [0197.050] CloseHandle (hObject=0x21c) returned 1 [0197.050] CloseHandle (hObject=0x2fc) returned 1 [0197.051] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll")) returned 1 [0197.052] SetEvent (hEvent=0x27c) returned 1 [0197.052] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0197.053] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=24768) returned 1 [0197.053] CloseHandle (hObject=0x2fc) returned 1 [0197.053] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll")) returned 0x220 [0197.053] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll")) returned 0x220 [0197.053] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0197.053] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0197.053] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0197.053] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0197.053] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0197.054] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x60c0, lpOverlapped=0x0) returned 1 [0197.056] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x60d0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x60d0, lpOverlapped=0x0) returned 1 [0197.058] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x112, lpOverlapped=0x0) returned 1 [0197.058] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0197.059] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0197.059] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x60c0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x60c0, lpOverlapped=0x0) returned 1 [0197.059] FlushFileBuffers (hFile=0x2fc) returned 1 [0197.287] FlushFileBuffers (hFile=0x21c) returned 1 [0197.288] CloseHandle (hObject=0x2fc) returned 1 [0197.288] CloseHandle (hObject=0x21c) returned 1 [0197.288] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll")) returned 1 [0197.290] SetEvent (hEvent=0x27c) returned 1 [0197.290] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0197.291] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=21184) returned 1 [0197.291] CloseHandle (hObject=0x21c) returned 1 [0197.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll")) returned 0x220 [0197.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll")) returned 0x220 [0197.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0197.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0197.291] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0197.291] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0197.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0197.292] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x52c0, lpOverlapped=0x0) returned 1 [0197.294] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x52d0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x52d0, lpOverlapped=0x0) returned 1 [0197.295] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x112, lpOverlapped=0x0) returned 1 [0197.296] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0197.296] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0197.296] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x52c0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x52c0, lpOverlapped=0x0) returned 1 [0197.296] FlushFileBuffers (hFile=0x21c) returned 1 [0197.458] FlushFileBuffers (hFile=0x2fc) returned 1 [0197.491] CloseHandle (hObject=0x21c) returned 1 [0197.491] CloseHandle (hObject=0x2fc) returned 1 [0197.496] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll")) returned 1 [0197.498] SetEvent (hEvent=0x27c) returned 1 [0197.498] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate64.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0197.498] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=255192) returned 1 [0197.498] CloseHandle (hObject=0x2fc) returned 1 [0197.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate64.exe")) returned 0x220 [0197.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate64.exe")) returned 0x220 [0197.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate64.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0197.499] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0197.499] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0197.499] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0197.499] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate64.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0197.500] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x3e4d8, lpOverlapped=0x0) returned 1 [0197.511] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3e4e0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3e4e0, lpOverlapped=0x0) returned 1 [0197.519] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x102, lpOverlapped=0x0) returned 1 [0197.519] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0197.519] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0197.519] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3e4d8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x3e4d8, lpOverlapped=0x0) returned 1 [0197.521] FlushFileBuffers (hFile=0x2fc) returned 1 [0197.845] FlushFileBuffers (hFile=0x21c) returned 1 [0197.932] CloseHandle (hObject=0x2fc) returned 1 [0197.933] CloseHandle (hObject=0x21c) returned 1 [0197.933] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate64.exe")) returned 1 [0197.936] SetEvent (hEvent=0x27c) returned 1 [0197.936] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\C2R32.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\c2r32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0197.936] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\C2R64.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\c2r64.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0197.936] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\concrt140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\concrt140.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0197.937] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=332968) returned 1 [0197.937] CloseHandle (hObject=0x21c) returned 1 [0197.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\concrt140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\concrt140.dll")) returned 0x220 [0197.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\concrt140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\concrt140.dll")) returned 0x220 [0197.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\concrt140.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\concrt140.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0197.937] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\concrt140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\concrt140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0197.937] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0197.937] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0197.937] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\concrt140.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\concrt140.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0197.938] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x514a8, lpOverlapped=0x0) returned 1 [0197.949] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x514b0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x514b0, lpOverlapped=0x0) returned 1 [0197.962] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0197.962] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0197.963] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0197.963] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x514a8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x514a8, lpOverlapped=0x0) returned 1 [0197.964] FlushFileBuffers (hFile=0x21c) returned 1 [0198.272] FlushFileBuffers (hFile=0x2fc) returned 1 [0198.275] CloseHandle (hObject=0x21c) returned 1 [0198.275] CloseHandle (hObject=0x2fc) returned 1 [0198.275] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\concrt140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\concrt140.dll")) returned 1 [0198.279] SetEvent (hEvent=0x27c) returned 1 [0198.279] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\msvcp120.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp120.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0198.279] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=660136) returned 1 [0198.279] CloseHandle (hObject=0x2fc) returned 1 [0198.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\msvcp120.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp120.dll")) returned 0x220 [0198.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\msvcp120.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp120.dll")) returned 0x220 [0198.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\msvcp120.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp120.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0198.280] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\msvcp120.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp120.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0198.280] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0198.280] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0198.280] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\msvcp120.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp120.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0198.280] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xa12a8, lpOverlapped=0x0) returned 1 [0198.305] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xa12b0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xa12b0, lpOverlapped=0x0) returned 1 [0198.437] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0198.438] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0198.438] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0198.438] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xa12a8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xa12a8, lpOverlapped=0x0) returned 1 [0198.440] FlushFileBuffers (hFile=0x2fc) returned 1 [0198.564] FlushFileBuffers (hFile=0x21c) returned 1 [0198.566] CloseHandle (hObject=0x2fc) returned 1 [0198.566] CloseHandle (hObject=0x21c) returned 1 [0198.566] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\msvcp120.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp120.dll")) returned 1 [0198.572] SetEvent (hEvent=0x27c) returned 1 [0198.573] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\msvcp140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp140.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0198.573] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=635040) returned 1 [0198.573] CloseHandle (hObject=0x21c) returned 1 [0198.573] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\msvcp140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp140.dll")) returned 0x220 [0198.573] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\msvcp140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp140.dll")) returned 0x220 [0198.573] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\msvcp140.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp140.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0198.573] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\msvcp140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0198.573] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0198.573] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0198.574] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\msvcp140.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp140.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0198.575] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x9b0a0, lpOverlapped=0x0) returned 1 [0198.596] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x9b0b0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x9b0b0, lpOverlapped=0x0) returned 1 [0198.608] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0198.609] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0198.609] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0198.609] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x9b0a0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x9b0a0, lpOverlapped=0x0) returned 1 [0198.610] FlushFileBuffers (hFile=0x21c) returned 1 [0198.794] FlushFileBuffers (hFile=0x2fc) returned 1 [0198.796] CloseHandle (hObject=0x21c) returned 1 [0198.797] CloseHandle (hObject=0x2fc) returned 1 [0198.797] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\msvcp140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp140.dll")) returned 1 [0198.812] SetEvent (hEvent=0x27c) returned 1 [0198.812] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\msvcr120.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcr120.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0198.812] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=963240) returned 1 [0198.812] CloseHandle (hObject=0x2fc) returned 1 [0198.812] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\msvcr120.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcr120.dll")) returned 0x220 [0198.812] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\msvcr120.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcr120.dll")) returned 0x220 [0198.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\msvcr120.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcr120.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0198.813] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\msvcr120.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcr120.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0198.813] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0198.813] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0198.813] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\msvcr120.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcr120.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0198.813] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xeb2a8, lpOverlapped=0x0) returned 1 [0198.858] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xeb2b0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xeb2b0, lpOverlapped=0x0) returned 1 [0199.050] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0199.050] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0199.050] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0199.050] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xeb2a8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xeb2a8, lpOverlapped=0x0) returned 1 [0199.053] FlushFileBuffers (hFile=0x2fc) returned 1 [0199.405] FlushFileBuffers (hFile=0x21c) returned 1 [0199.407] CloseHandle (hObject=0x2fc) returned 1 [0199.407] CloseHandle (hObject=0x21c) returned 1 [0199.408] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\msvcr120.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcr120.dll")) returned 1 [0199.416] SetEvent (hEvent=0x27c) returned 1 [0199.416] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\vccorlib140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vccorlib140.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0199.417] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=390320) returned 1 [0199.417] CloseHandle (hObject=0x21c) returned 1 [0199.417] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\vccorlib140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vccorlib140.dll")) returned 0x220 [0199.417] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\vccorlib140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vccorlib140.dll")) returned 0x220 [0199.417] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\vccorlib140.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\vccorlib140.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0199.417] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\vccorlib140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vccorlib140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0199.417] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0199.417] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0199.417] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\vccorlib140.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\vccorlib140.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0199.418] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x5f4b0, lpOverlapped=0x0) returned 1 [0199.430] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5f4c0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x5f4c0, lpOverlapped=0x0) returned 1 [0199.436] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0199.437] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0199.437] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0199.437] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5f4b0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x5f4b0, lpOverlapped=0x0) returned 1 [0199.438] FlushFileBuffers (hFile=0x21c) returned 1 [0199.683] FlushFileBuffers (hFile=0x2fc) returned 1 [0199.684] CloseHandle (hObject=0x21c) returned 1 [0199.684] CloseHandle (hObject=0x2fc) returned 1 [0199.685] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\vccorlib140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vccorlib140.dll")) returned 1 [0199.689] SetEvent (hEvent=0x27c) returned 1 [0199.689] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0199.689] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=9024) returned 1 [0199.689] CloseHandle (hObject=0x2fc) returned 1 [0199.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif")) returned 0x220 [0199.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif")) returned 0x220 [0199.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0199.690] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0199.690] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0199.691] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0199.691] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0199.691] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2340, lpOverlapped=0x0) returned 1 [0199.692] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2350, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2350, lpOverlapped=0x0) returned 1 [0199.693] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0199.693] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0199.694] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0199.694] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2340, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2340, lpOverlapped=0x0) returned 1 [0199.694] FlushFileBuffers (hFile=0x2fc) returned 1 [0199.698] FlushFileBuffers (hFile=0x21c) returned 1 [0199.699] CloseHandle (hObject=0x2fc) returned 1 [0199.699] CloseHandle (hObject=0x21c) returned 1 [0199.700] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif")) returned 1 [0199.701] SetEvent (hEvent=0x27c) returned 1 [0199.701] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0199.701] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=7216) returned 1 [0199.701] CloseHandle (hObject=0x21c) returned 1 [0199.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif")) returned 0x220 [0199.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif")) returned 0x220 [0199.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0199.701] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0199.702] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0199.702] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0199.702] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0199.702] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1c30, lpOverlapped=0x0) returned 1 [0199.703] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1c40, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1c40, lpOverlapped=0x0) returned 1 [0199.704] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0199.704] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0199.704] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0199.704] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1c30, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1c30, lpOverlapped=0x0) returned 1 [0199.705] FlushFileBuffers (hFile=0x21c) returned 1 [0199.718] FlushFileBuffers (hFile=0x2fc) returned 1 [0199.721] CloseHandle (hObject=0x21c) returned 1 [0199.721] CloseHandle (hObject=0x2fc) returned 1 [0199.722] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif")) returned 1 [0199.723] SetEvent (hEvent=0x27c) returned 1 [0199.723] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0199.724] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=14873) returned 1 [0199.724] CloseHandle (hObject=0x2fc) returned 1 [0199.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif")) returned 0x220 [0199.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif")) returned 0x220 [0199.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0199.724] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0199.724] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0199.724] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0199.724] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0199.725] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x3a19, lpOverlapped=0x0) returned 1 [0199.727] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3a20, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3a20, lpOverlapped=0x0) returned 1 [0199.729] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0199.729] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0199.729] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0199.729] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3a19, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x3a19, lpOverlapped=0x0) returned 1 [0199.730] FlushFileBuffers (hFile=0x2fc) returned 1 [0199.762] FlushFileBuffers (hFile=0x21c) returned 1 [0199.764] CloseHandle (hObject=0x2fc) returned 1 [0199.764] CloseHandle (hObject=0x21c) returned 1 [0199.764] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif")) returned 1 [0199.765] SetEvent (hEvent=0x27c) returned 1 [0199.765] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0199.766] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=6684) returned 1 [0199.766] CloseHandle (hObject=0x21c) returned 1 [0199.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif")) returned 0x220 [0199.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif")) returned 0x220 [0199.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0199.766] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0199.766] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0199.766] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0199.766] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0199.767] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1a1c, lpOverlapped=0x0) returned 1 [0199.768] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1a20, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1a20, lpOverlapped=0x0) returned 1 [0199.769] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0199.769] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0199.769] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0199.769] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1a1c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1a1c, lpOverlapped=0x0) returned 1 [0199.770] FlushFileBuffers (hFile=0x21c) returned 1 [0199.772] FlushFileBuffers (hFile=0x2fc) returned 1 [0199.779] CloseHandle (hObject=0x21c) returned 1 [0199.779] CloseHandle (hObject=0x2fc) returned 1 [0199.779] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif")) returned 1 [0199.780] SetEvent (hEvent=0x27c) returned 1 [0199.780] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0199.780] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3251) returned 1 [0199.780] CloseHandle (hObject=0x2fc) returned 1 [0199.780] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif")) returned 0x220 [0199.780] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif")) returned 0x220 [0199.780] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0199.780] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0199.781] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0199.781] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0199.781] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0199.781] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xcb3, lpOverlapped=0x0) returned 1 [0199.782] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xcc0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xcc0, lpOverlapped=0x0) returned 1 [0199.783] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0199.783] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0199.783] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0199.783] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xcb3, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xcb3, lpOverlapped=0x0) returned 1 [0199.784] FlushFileBuffers (hFile=0x2fc) returned 1 [0199.792] FlushFileBuffers (hFile=0x21c) returned 1 [0199.796] CloseHandle (hObject=0x2fc) returned 1 [0199.796] CloseHandle (hObject=0x21c) returned 1 [0199.796] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif")) returned 1 [0199.797] SetEvent (hEvent=0x27c) returned 1 [0199.797] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0199.797] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=8097) returned 1 [0199.797] CloseHandle (hObject=0x21c) returned 1 [0199.797] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif")) returned 0x220 [0199.797] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif")) returned 0x220 [0199.797] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0199.798] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0199.798] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0199.798] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0199.798] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0199.798] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1fa1, lpOverlapped=0x0) returned 1 [0199.799] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1fb0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1fb0, lpOverlapped=0x0) returned 1 [0199.800] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0199.801] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0199.801] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0199.801] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1fa1, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1fa1, lpOverlapped=0x0) returned 1 [0199.801] FlushFileBuffers (hFile=0x21c) returned 1 [0199.811] FlushFileBuffers (hFile=0x2fc) returned 1 [0199.812] CloseHandle (hObject=0x21c) returned 1 [0199.813] CloseHandle (hObject=0x2fc) returned 1 [0199.813] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif")) returned 1 [0199.814] SetEvent (hEvent=0x27c) returned 1 [0199.814] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0199.814] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=11891) returned 1 [0199.814] CloseHandle (hObject=0x2fc) returned 1 [0199.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif")) returned 0x220 [0199.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif")) returned 0x220 [0199.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0199.814] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0199.814] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0199.815] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0199.815] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0199.815] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2e73, lpOverlapped=0x0) returned 1 [0199.816] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2e80, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2e80, lpOverlapped=0x0) returned 1 [0199.817] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0199.818] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0199.818] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0199.818] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2e73, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2e73, lpOverlapped=0x0) returned 1 [0199.818] FlushFileBuffers (hFile=0x2fc) returned 1 [0199.821] FlushFileBuffers (hFile=0x21c) returned 1 [0199.829] CloseHandle (hObject=0x2fc) returned 1 [0199.829] CloseHandle (hObject=0x21c) returned 1 [0199.829] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif")) returned 1 [0199.830] SetEvent (hEvent=0x27c) returned 1 [0199.830] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0199.830] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=502) returned 1 [0199.831] CloseHandle (hObject=0x21c) returned 1 [0199.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif")) returned 0x220 [0199.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif")) returned 0x220 [0199.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0199.831] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0199.831] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0199.831] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0199.831] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0199.844] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1f6, lpOverlapped=0x0) returned 1 [0199.845] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x200, lpOverlapped=0x0) returned 1 [0199.846] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0199.847] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0199.847] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0199.847] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1f6, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1f6, lpOverlapped=0x0) returned 1 [0199.847] FlushFileBuffers (hFile=0x21c) returned 1 [0199.851] FlushFileBuffers (hFile=0x2fc) returned 1 [0199.862] CloseHandle (hObject=0x21c) returned 1 [0199.863] CloseHandle (hObject=0x2fc) returned 1 [0199.864] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif")) returned 1 [0199.865] SetEvent (hEvent=0x27c) returned 1 [0199.865] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0199.865] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3484) returned 1 [0199.865] CloseHandle (hObject=0x2fc) returned 1 [0199.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif")) returned 0x220 [0199.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif")) returned 0x220 [0199.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0199.865] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0199.866] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0199.866] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0199.866] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0199.866] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xd9c, lpOverlapped=0x0) returned 1 [0199.867] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xda0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xda0, lpOverlapped=0x0) returned 1 [0199.868] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0199.868] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0199.868] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0199.868] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xd9c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xd9c, lpOverlapped=0x0) returned 1 [0199.868] FlushFileBuffers (hFile=0x2fc) returned 1 [0199.878] FlushFileBuffers (hFile=0x21c) returned 1 [0199.880] CloseHandle (hObject=0x2fc) returned 1 [0199.880] CloseHandle (hObject=0x21c) returned 1 [0199.880] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif")) returned 1 [0199.882] SetEvent (hEvent=0x27c) returned 1 [0199.882] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0199.882] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=12482) returned 1 [0199.882] CloseHandle (hObject=0x21c) returned 1 [0199.882] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif")) returned 0x220 [0199.882] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif")) returned 0x220 [0199.882] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0199.882] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0199.882] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0199.882] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0199.882] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0199.883] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x30c2, lpOverlapped=0x0) returned 1 [0199.884] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x30d0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x30d0, lpOverlapped=0x0) returned 1 [0199.885] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0199.885] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0199.885] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0199.885] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x30c2, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x30c2, lpOverlapped=0x0) returned 1 [0199.886] FlushFileBuffers (hFile=0x21c) returned 1 [0199.894] FlushFileBuffers (hFile=0x2fc) returned 1 [0199.897] CloseHandle (hObject=0x21c) returned 1 [0199.897] CloseHandle (hObject=0x2fc) returned 1 [0199.897] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif")) returned 1 [0199.898] SetEvent (hEvent=0x27c) returned 1 [0199.898] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0199.898] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2596) returned 1 [0199.898] CloseHandle (hObject=0x2fc) returned 1 [0199.898] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif")) returned 0x220 [0199.898] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif")) returned 0x220 [0199.898] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0199.899] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0199.899] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0199.899] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0199.899] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0199.899] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xa24, lpOverlapped=0x0) returned 1 [0199.900] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xa30, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xa30, lpOverlapped=0x0) returned 1 [0199.901] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0199.901] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0199.901] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0199.901] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xa24, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xa24, lpOverlapped=0x0) returned 1 [0199.902] FlushFileBuffers (hFile=0x2fc) returned 1 [0199.911] FlushFileBuffers (hFile=0x21c) returned 1 [0199.913] CloseHandle (hObject=0x2fc) returned 1 [0199.913] CloseHandle (hObject=0x21c) returned 1 [0199.913] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif")) returned 1 [0199.914] SetEvent (hEvent=0x27c) returned 1 [0199.915] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0199.915] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=15308) returned 1 [0199.915] CloseHandle (hObject=0x21c) returned 1 [0199.915] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif")) returned 0x220 [0199.915] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif")) returned 0x220 [0199.915] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0199.915] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0199.915] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0199.915] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0199.915] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0199.916] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x3bcc, lpOverlapped=0x0) returned 1 [0199.917] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3bd0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3bd0, lpOverlapped=0x0) returned 1 [0199.918] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0199.918] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0199.918] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0199.918] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3bcc, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x3bcc, lpOverlapped=0x0) returned 1 [0199.919] FlushFileBuffers (hFile=0x21c) returned 1 [0199.929] FlushFileBuffers (hFile=0x2fc) returned 1 [0199.932] CloseHandle (hObject=0x21c) returned 1 [0199.932] CloseHandle (hObject=0x2fc) returned 1 [0199.932] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif")) returned 1 [0199.933] SetEvent (hEvent=0x27c) returned 1 [0199.933] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0199.933] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=4955) returned 1 [0199.934] CloseHandle (hObject=0x2fc) returned 1 [0199.934] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif")) returned 0x220 [0199.934] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif")) returned 0x220 [0199.934] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0199.934] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0199.934] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0199.934] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0199.934] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0199.935] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x135b, lpOverlapped=0x0) returned 1 [0199.936] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1360, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1360, lpOverlapped=0x0) returned 1 [0199.937] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0199.937] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0199.937] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0199.937] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x135b, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x135b, lpOverlapped=0x0) returned 1 [0199.937] FlushFileBuffers (hFile=0x2fc) returned 1 [0199.947] FlushFileBuffers (hFile=0x21c) returned 1 [0199.950] CloseHandle (hObject=0x2fc) returned 1 [0199.950] CloseHandle (hObject=0x21c) returned 1 [0199.950] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif")) returned 1 [0199.951] SetEvent (hEvent=0x27c) returned 1 [0199.951] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0199.951] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1146) returned 1 [0199.951] CloseHandle (hObject=0x21c) returned 1 [0199.951] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif")) returned 0x220 [0199.951] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif")) returned 0x220 [0199.951] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0199.952] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0199.952] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0199.952] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0199.952] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0199.952] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x47a, lpOverlapped=0x0) returned 1 [0199.953] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x480, lpOverlapped=0x0) returned 1 [0199.954] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0199.955] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0199.955] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0199.955] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x47a, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x47a, lpOverlapped=0x0) returned 1 [0199.955] FlushFileBuffers (hFile=0x21c) returned 1 [0199.964] FlushFileBuffers (hFile=0x2fc) returned 1 [0199.967] CloseHandle (hObject=0x21c) returned 1 [0199.967] CloseHandle (hObject=0x2fc) returned 1 [0199.967] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif")) returned 1 [0199.968] SetEvent (hEvent=0x27c) returned 1 [0199.968] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0199.968] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=6984) returned 1 [0199.969] CloseHandle (hObject=0x2fc) returned 1 [0199.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif")) returned 0x220 [0199.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif")) returned 0x220 [0199.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0199.969] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0199.969] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0199.969] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0199.969] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0199.970] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1b48, lpOverlapped=0x0) returned 1 [0199.970] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1b50, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1b50, lpOverlapped=0x0) returned 1 [0199.972] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0199.972] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0199.972] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0199.972] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1b48, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1b48, lpOverlapped=0x0) returned 1 [0199.972] FlushFileBuffers (hFile=0x2fc) returned 1 [0199.982] FlushFileBuffers (hFile=0x21c) returned 1 [0199.984] CloseHandle (hObject=0x2fc) returned 1 [0199.984] CloseHandle (hObject=0x21c) returned 1 [0199.985] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif")) returned 1 [0199.986] SetEvent (hEvent=0x27c) returned 1 [0199.986] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0199.986] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=8582) returned 1 [0199.986] CloseHandle (hObject=0x21c) returned 1 [0199.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif")) returned 0x220 [0199.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif")) returned 0x220 [0199.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0199.986] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0199.986] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0199.987] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0199.987] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0199.987] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2186, lpOverlapped=0x0) returned 1 [0199.988] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2190, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2190, lpOverlapped=0x0) returned 1 [0200.005] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0200.006] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.006] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.006] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2186, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2186, lpOverlapped=0x0) returned 1 [0200.006] FlushFileBuffers (hFile=0x21c) returned 1 [0200.016] FlushFileBuffers (hFile=0x2fc) returned 1 [0200.020] CloseHandle (hObject=0x21c) returned 1 [0200.020] CloseHandle (hObject=0x2fc) returned 1 [0200.020] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif")) returned 1 [0200.021] SetEvent (hEvent=0x27c) returned 1 [0200.022] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0200.022] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=5375) returned 1 [0200.022] CloseHandle (hObject=0x2fc) returned 1 [0200.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif")) returned 0x220 [0200.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif")) returned 0x220 [0200.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.022] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0200.022] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.022] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.022] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0200.023] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x14ff, lpOverlapped=0x0) returned 1 [0200.024] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1500, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1500, lpOverlapped=0x0) returned 1 [0200.025] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0200.025] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.025] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.025] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x14ff, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x14ff, lpOverlapped=0x0) returned 1 [0200.026] FlushFileBuffers (hFile=0x2fc) returned 1 [0200.035] FlushFileBuffers (hFile=0x21c) returned 1 [0200.038] CloseHandle (hObject=0x2fc) returned 1 [0200.038] CloseHandle (hObject=0x21c) returned 1 [0200.038] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif")) returned 1 [0200.039] SetEvent (hEvent=0x27c) returned 1 [0200.039] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0200.039] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=5016) returned 1 [0200.040] CloseHandle (hObject=0x21c) returned 1 [0200.040] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif")) returned 0x220 [0200.040] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif")) returned 0x220 [0200.040] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.040] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0200.040] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.040] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.040] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0200.041] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1398, lpOverlapped=0x0) returned 1 [0200.041] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x13a0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x13a0, lpOverlapped=0x0) returned 1 [0200.042] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0200.043] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.043] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.043] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1398, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1398, lpOverlapped=0x0) returned 1 [0200.043] FlushFileBuffers (hFile=0x21c) returned 1 [0200.055] FlushFileBuffers (hFile=0x2fc) returned 1 [0200.057] CloseHandle (hObject=0x21c) returned 1 [0200.057] CloseHandle (hObject=0x2fc) returned 1 [0200.057] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif")) returned 1 [0200.058] SetEvent (hEvent=0x27c) returned 1 [0200.058] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0200.058] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3966) returned 1 [0200.059] CloseHandle (hObject=0x2fc) returned 1 [0200.059] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif")) returned 0x220 [0200.059] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif")) returned 0x220 [0200.059] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.059] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0200.059] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.059] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.059] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0200.059] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xf7e, lpOverlapped=0x0) returned 1 [0200.060] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf80, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf80, lpOverlapped=0x0) returned 1 [0200.061] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0200.062] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.062] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.062] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf7e, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xf7e, lpOverlapped=0x0) returned 1 [0200.062] FlushFileBuffers (hFile=0x2fc) returned 1 [0200.066] FlushFileBuffers (hFile=0x21c) returned 1 [0200.075] CloseHandle (hObject=0x2fc) returned 1 [0200.075] CloseHandle (hObject=0x21c) returned 1 [0200.087] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif")) returned 1 [0200.088] SetEvent (hEvent=0x27c) returned 1 [0200.088] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0200.088] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3120) returned 1 [0200.088] CloseHandle (hObject=0x21c) returned 1 [0200.088] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif")) returned 0x220 [0200.088] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif")) returned 0x220 [0200.088] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.089] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0200.089] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.089] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.089] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0200.089] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xc30, lpOverlapped=0x0) returned 1 [0200.090] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xc40, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xc40, lpOverlapped=0x0) returned 1 [0200.091] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0200.091] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.091] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.091] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xc30, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xc30, lpOverlapped=0x0) returned 1 [0200.092] FlushFileBuffers (hFile=0x21c) returned 1 [0200.102] FlushFileBuffers (hFile=0x2fc) returned 1 [0200.104] CloseHandle (hObject=0x21c) returned 1 [0200.105] CloseHandle (hObject=0x2fc) returned 1 [0200.105] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif")) returned 1 [0200.106] SetEvent (hEvent=0x27c) returned 1 [0200.106] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0200.106] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=4734) returned 1 [0200.106] CloseHandle (hObject=0x2fc) returned 1 [0200.106] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf")) returned 0x220 [0200.106] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf")) returned 0x220 [0200.106] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.106] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0200.106] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.106] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.106] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0200.107] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x127e, lpOverlapped=0x0) returned 1 [0200.108] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1280, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1280, lpOverlapped=0x0) returned 1 [0200.109] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0200.109] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.109] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.109] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x127e, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x127e, lpOverlapped=0x0) returned 1 [0200.109] FlushFileBuffers (hFile=0x2fc) returned 1 [0200.118] FlushFileBuffers (hFile=0x21c) returned 1 [0200.121] CloseHandle (hObject=0x2fc) returned 1 [0200.121] CloseHandle (hObject=0x21c) returned 1 [0200.121] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf")) returned 1 [0200.122] SetEvent (hEvent=0x27c) returned 1 [0200.122] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0200.122] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=20578) returned 1 [0200.122] CloseHandle (hObject=0x21c) returned 1 [0200.122] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf")) returned 0x220 [0200.122] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf")) returned 0x220 [0200.122] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.122] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0200.123] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.123] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.123] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0200.123] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x5062, lpOverlapped=0x0) returned 1 [0200.124] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5070, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x5070, lpOverlapped=0x0) returned 1 [0200.126] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0200.126] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.126] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.126] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5062, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x5062, lpOverlapped=0x0) returned 1 [0200.126] FlushFileBuffers (hFile=0x21c) returned 1 [0200.136] FlushFileBuffers (hFile=0x2fc) returned 1 [0200.139] CloseHandle (hObject=0x21c) returned 1 [0200.139] CloseHandle (hObject=0x2fc) returned 1 [0200.139] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf")) returned 1 [0200.140] SetEvent (hEvent=0x27c) returned 1 [0200.140] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0200.140] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=14428) returned 1 [0200.140] CloseHandle (hObject=0x2fc) returned 1 [0200.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf")) returned 0x220 [0200.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf")) returned 0x220 [0200.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.141] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0200.141] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.141] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.141] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0200.141] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x385c, lpOverlapped=0x0) returned 1 [0200.142] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3860, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3860, lpOverlapped=0x0) returned 1 [0200.143] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0200.144] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.144] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.144] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x385c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x385c, lpOverlapped=0x0) returned 1 [0200.144] FlushFileBuffers (hFile=0x2fc) returned 1 [0200.154] FlushFileBuffers (hFile=0x21c) returned 1 [0200.159] CloseHandle (hObject=0x2fc) returned 1 [0200.159] CloseHandle (hObject=0x21c) returned 1 [0200.159] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf")) returned 1 [0200.160] SetEvent (hEvent=0x27c) returned 1 [0200.160] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0200.161] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3344) returned 1 [0200.161] CloseHandle (hObject=0x21c) returned 1 [0200.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf")) returned 0x220 [0200.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf")) returned 0x220 [0200.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.161] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0200.161] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.161] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.162] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0200.162] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xd10, lpOverlapped=0x0) returned 1 [0200.163] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xd20, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xd20, lpOverlapped=0x0) returned 1 [0200.164] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0200.164] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.164] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.164] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xd10, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xd10, lpOverlapped=0x0) returned 1 [0200.164] FlushFileBuffers (hFile=0x21c) returned 1 [0200.173] FlushFileBuffers (hFile=0x2fc) returned 1 [0200.176] CloseHandle (hObject=0x21c) returned 1 [0200.176] CloseHandle (hObject=0x2fc) returned 1 [0200.176] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf")) returned 1 [0200.177] SetEvent (hEvent=0x27c) returned 1 [0200.177] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0200.177] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=7968) returned 1 [0200.177] CloseHandle (hObject=0x2fc) returned 1 [0200.177] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf")) returned 0x220 [0200.178] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf")) returned 0x220 [0200.178] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.178] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0200.178] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.178] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.178] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0200.178] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1f20, lpOverlapped=0x0) returned 1 [0200.179] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1f30, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1f30, lpOverlapped=0x0) returned 1 [0200.180] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0200.181] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.181] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.181] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1f20, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1f20, lpOverlapped=0x0) returned 1 [0200.181] FlushFileBuffers (hFile=0x2fc) returned 1 [0200.190] FlushFileBuffers (hFile=0x21c) returned 1 [0200.192] CloseHandle (hObject=0x2fc) returned 1 [0200.192] CloseHandle (hObject=0x21c) returned 1 [0200.192] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf")) returned 1 [0200.193] SetEvent (hEvent=0x27c) returned 1 [0200.194] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0200.194] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=26332) returned 1 [0200.194] CloseHandle (hObject=0x21c) returned 1 [0200.194] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf")) returned 0x220 [0200.194] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf")) returned 0x220 [0200.194] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.194] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0200.194] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.194] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.194] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0200.195] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x66dc, lpOverlapped=0x0) returned 1 [0200.196] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x66e0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x66e0, lpOverlapped=0x0) returned 1 [0200.197] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0200.198] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.198] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.198] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x66dc, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x66dc, lpOverlapped=0x0) returned 1 [0200.198] FlushFileBuffers (hFile=0x21c) returned 1 [0200.207] FlushFileBuffers (hFile=0x2fc) returned 1 [0200.210] CloseHandle (hObject=0x21c) returned 1 [0200.210] CloseHandle (hObject=0x2fc) returned 1 [0200.210] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf")) returned 1 [0200.211] SetEvent (hEvent=0x27c) returned 1 [0200.211] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0200.211] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3746) returned 1 [0200.211] CloseHandle (hObject=0x2fc) returned 1 [0200.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf")) returned 0x220 [0200.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf")) returned 0x220 [0200.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.212] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0200.212] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.212] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.212] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0200.212] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xea2, lpOverlapped=0x0) returned 1 [0200.213] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xeb0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xeb0, lpOverlapped=0x0) returned 1 [0200.214] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0200.214] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.214] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.214] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xea2, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xea2, lpOverlapped=0x0) returned 1 [0200.215] FlushFileBuffers (hFile=0x2fc) returned 1 [0200.225] FlushFileBuffers (hFile=0x21c) returned 1 [0200.227] CloseHandle (hObject=0x2fc) returned 1 [0200.227] CloseHandle (hObject=0x21c) returned 1 [0200.227] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf")) returned 1 [0200.228] SetEvent (hEvent=0x27c) returned 1 [0200.228] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0200.228] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3012) returned 1 [0200.228] CloseHandle (hObject=0x21c) returned 1 [0200.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf")) returned 0x220 [0200.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf")) returned 0x220 [0200.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.228] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0200.228] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.229] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.229] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0200.229] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xbc4, lpOverlapped=0x0) returned 1 [0200.230] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xbd0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xbd0, lpOverlapped=0x0) returned 1 [0200.231] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0200.231] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.231] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.231] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xbc4, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xbc4, lpOverlapped=0x0) returned 1 [0200.231] FlushFileBuffers (hFile=0x21c) returned 1 [0200.235] FlushFileBuffers (hFile=0x2fc) returned 1 [0200.243] CloseHandle (hObject=0x21c) returned 1 [0200.243] CloseHandle (hObject=0x2fc) returned 1 [0200.243] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf")) returned 1 [0200.244] SetEvent (hEvent=0x27c) returned 1 [0200.244] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0200.244] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=7372) returned 1 [0200.244] CloseHandle (hObject=0x2fc) returned 1 [0200.244] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf")) returned 0x220 [0200.244] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf")) returned 0x220 [0200.244] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.245] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0200.245] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.245] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.245] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0200.245] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1ccc, lpOverlapped=0x0) returned 1 [0200.246] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1cd0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1cd0, lpOverlapped=0x0) returned 1 [0200.247] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0200.248] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.248] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.248] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1ccc, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1ccc, lpOverlapped=0x0) returned 1 [0200.248] FlushFileBuffers (hFile=0x2fc) returned 1 [0200.251] FlushFileBuffers (hFile=0x21c) returned 1 [0200.260] CloseHandle (hObject=0x2fc) returned 1 [0200.260] CloseHandle (hObject=0x21c) returned 1 [0200.260] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf")) returned 1 [0200.261] SetEvent (hEvent=0x27c) returned 1 [0200.261] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0200.261] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=6632) returned 1 [0200.261] CloseHandle (hObject=0x21c) returned 1 [0200.261] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf")) returned 0x220 [0200.261] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf")) returned 0x220 [0200.261] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.261] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0200.262] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.262] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.262] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0200.262] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x19e8, lpOverlapped=0x0) returned 1 [0200.263] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x19f0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x19f0, lpOverlapped=0x0) returned 1 [0200.264] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0200.264] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.264] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.264] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x19e8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x19e8, lpOverlapped=0x0) returned 1 [0200.265] FlushFileBuffers (hFile=0x21c) returned 1 [0200.271] FlushFileBuffers (hFile=0x2fc) returned 1 [0200.292] CloseHandle (hObject=0x21c) returned 1 [0200.292] CloseHandle (hObject=0x2fc) returned 1 [0200.292] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf")) returned 1 [0200.295] SetEvent (hEvent=0x27c) returned 1 [0200.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0200.295] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=9240) returned 1 [0200.295] CloseHandle (hObject=0x2fc) returned 1 [0200.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf")) returned 0x220 [0200.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf")) returned 0x220 [0200.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0200.296] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.296] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.296] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0200.297] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2418, lpOverlapped=0x0) returned 1 [0200.300] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2420, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2420, lpOverlapped=0x0) returned 1 [0200.302] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0200.302] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.302] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.302] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2418, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2418, lpOverlapped=0x0) returned 1 [0200.302] FlushFileBuffers (hFile=0x2fc) returned 1 [0200.308] FlushFileBuffers (hFile=0x21c) returned 1 [0200.309] CloseHandle (hObject=0x2fc) returned 1 [0200.309] CloseHandle (hObject=0x21c) returned 1 [0200.309] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf")) returned 1 [0200.310] SetEvent (hEvent=0x27c) returned 1 [0200.310] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0200.310] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2344) returned 1 [0200.311] CloseHandle (hObject=0x21c) returned 1 [0200.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf")) returned 0x220 [0200.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf")) returned 0x220 [0200.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.311] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0200.311] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.311] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.311] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0200.312] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x928, lpOverlapped=0x0) returned 1 [0200.312] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x930, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x930, lpOverlapped=0x0) returned 1 [0200.313] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0200.314] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.314] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.314] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x928, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x928, lpOverlapped=0x0) returned 1 [0200.314] FlushFileBuffers (hFile=0x21c) returned 1 [0200.316] FlushFileBuffers (hFile=0x2fc) returned 1 [0200.406] CloseHandle (hObject=0x21c) returned 1 [0200.406] CloseHandle (hObject=0x2fc) returned 1 [0200.406] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf")) returned 1 [0200.408] SetEvent (hEvent=0x27c) returned 1 [0200.408] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0200.408] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=6060) returned 1 [0200.408] CloseHandle (hObject=0x2fc) returned 1 [0200.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf")) returned 0x220 [0200.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf")) returned 0x220 [0200.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.408] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0200.409] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.409] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.409] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0200.409] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x17ac, lpOverlapped=0x0) returned 1 [0200.410] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x17b0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x17b0, lpOverlapped=0x0) returned 1 [0200.411] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0200.412] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.412] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.412] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x17ac, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x17ac, lpOverlapped=0x0) returned 1 [0200.412] FlushFileBuffers (hFile=0x2fc) returned 1 [0200.425] FlushFileBuffers (hFile=0x21c) returned 1 [0200.427] CloseHandle (hObject=0x2fc) returned 1 [0200.427] CloseHandle (hObject=0x21c) returned 1 [0200.427] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf")) returned 1 [0200.428] SetEvent (hEvent=0x27c) returned 1 [0200.428] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0200.428] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2636) returned 1 [0200.428] CloseHandle (hObject=0x21c) returned 1 [0200.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf")) returned 0x220 [0200.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf")) returned 0x220 [0200.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.428] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0200.429] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.429] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.429] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0200.429] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xa4c, lpOverlapped=0x0) returned 1 [0200.430] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xa50, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xa50, lpOverlapped=0x0) returned 1 [0200.431] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0200.431] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.431] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.431] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xa4c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xa4c, lpOverlapped=0x0) returned 1 [0200.432] FlushFileBuffers (hFile=0x21c) returned 1 [0200.435] FlushFileBuffers (hFile=0x2fc) returned 1 [0200.444] CloseHandle (hObject=0x21c) returned 1 [0200.445] CloseHandle (hObject=0x2fc) returned 1 [0200.445] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf")) returned 1 [0200.446] SetEvent (hEvent=0x27c) returned 1 [0200.446] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0200.446] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=4612) returned 1 [0200.446] CloseHandle (hObject=0x2fc) returned 1 [0200.446] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf")) returned 0x220 [0200.446] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf")) returned 0x220 [0200.446] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.446] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0200.446] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.446] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.447] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0200.447] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1204, lpOverlapped=0x0) returned 1 [0200.448] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1210, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1210, lpOverlapped=0x0) returned 1 [0200.449] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0200.449] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.449] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.449] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1204, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1204, lpOverlapped=0x0) returned 1 [0200.449] FlushFileBuffers (hFile=0x2fc) returned 1 [0200.453] FlushFileBuffers (hFile=0x21c) returned 1 [0200.465] CloseHandle (hObject=0x2fc) returned 1 [0200.467] CloseHandle (hObject=0x21c) returned 1 [0200.467] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf")) returned 1 [0200.468] SetEvent (hEvent=0x27c) returned 1 [0200.468] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0200.469] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=7668) returned 1 [0200.469] CloseHandle (hObject=0x21c) returned 1 [0200.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf")) returned 0x220 [0200.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf")) returned 0x220 [0200.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.469] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0200.469] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.469] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.469] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0200.470] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1df4, lpOverlapped=0x0) returned 1 [0200.471] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1e00, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1e00, lpOverlapped=0x0) returned 1 [0200.472] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0200.472] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.472] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.472] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1df4, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1df4, lpOverlapped=0x0) returned 1 [0200.473] FlushFileBuffers (hFile=0x21c) returned 1 [0200.477] FlushFileBuffers (hFile=0x2fc) returned 1 [0200.484] CloseHandle (hObject=0x21c) returned 1 [0200.485] CloseHandle (hObject=0x2fc) returned 1 [0200.485] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf")) returned 1 [0200.486] SetEvent (hEvent=0x27c) returned 1 [0200.486] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0200.486] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=7804) returned 1 [0200.486] CloseHandle (hObject=0x2fc) returned 1 [0200.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf")) returned 0x220 [0200.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf")) returned 0x220 [0200.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.487] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0200.487] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.487] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.487] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0200.487] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1e7c, lpOverlapped=0x0) returned 1 [0200.488] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1e80, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1e80, lpOverlapped=0x0) returned 1 [0200.490] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0200.490] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.490] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.490] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1e7c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1e7c, lpOverlapped=0x0) returned 1 [0200.490] FlushFileBuffers (hFile=0x2fc) returned 1 [0200.494] FlushFileBuffers (hFile=0x21c) returned 1 [0200.502] CloseHandle (hObject=0x2fc) returned 1 [0200.502] CloseHandle (hObject=0x21c) returned 1 [0200.502] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf")) returned 1 [0200.503] SetEvent (hEvent=0x27c) returned 1 [0200.503] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0200.504] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2016) returned 1 [0200.504] CloseHandle (hObject=0x21c) returned 1 [0200.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf")) returned 0x220 [0200.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf")) returned 0x220 [0200.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.504] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0200.504] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.504] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.504] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0200.505] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x7e0, lpOverlapped=0x0) returned 1 [0200.506] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7f0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x7f0, lpOverlapped=0x0) returned 1 [0200.507] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0200.507] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.507] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.507] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7e0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x7e0, lpOverlapped=0x0) returned 1 [0200.507] FlushFileBuffers (hFile=0x21c) returned 1 [0200.511] FlushFileBuffers (hFile=0x2fc) returned 1 [0200.521] CloseHandle (hObject=0x21c) returned 1 [0200.521] CloseHandle (hObject=0x2fc) returned 1 [0200.521] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf")) returned 1 [0200.522] SetEvent (hEvent=0x27c) returned 1 [0200.522] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0200.522] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3348) returned 1 [0200.522] CloseHandle (hObject=0x2fc) returned 1 [0200.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf")) returned 0x220 [0200.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf")) returned 0x220 [0200.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.522] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0200.523] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.523] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.523] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0200.523] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xd14, lpOverlapped=0x0) returned 1 [0200.524] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xd20, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xd20, lpOverlapped=0x0) returned 1 [0200.525] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0200.525] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.525] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.526] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xd14, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xd14, lpOverlapped=0x0) returned 1 [0200.526] FlushFileBuffers (hFile=0x2fc) returned 1 [0200.529] FlushFileBuffers (hFile=0x21c) returned 1 [0200.539] CloseHandle (hObject=0x2fc) returned 1 [0200.539] CloseHandle (hObject=0x21c) returned 1 [0200.540] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf")) returned 1 [0200.541] SetEvent (hEvent=0x27c) returned 1 [0200.541] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0200.541] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3228) returned 1 [0200.541] CloseHandle (hObject=0x21c) returned 1 [0200.541] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf")) returned 0x220 [0200.541] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf")) returned 0x220 [0200.541] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.541] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0200.542] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.542] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.542] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0200.542] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xc9c, lpOverlapped=0x0) returned 1 [0200.543] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xca0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xca0, lpOverlapped=0x0) returned 1 [0200.544] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0200.545] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.545] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.545] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xc9c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xc9c, lpOverlapped=0x0) returned 1 [0200.545] FlushFileBuffers (hFile=0x21c) returned 1 [0200.549] FlushFileBuffers (hFile=0x2fc) returned 1 [0200.558] CloseHandle (hObject=0x21c) returned 1 [0200.558] CloseHandle (hObject=0x2fc) returned 1 [0200.558] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf")) returned 1 [0200.560] SetEvent (hEvent=0x27c) returned 1 [0200.560] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0200.560] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=4996) returned 1 [0200.560] CloseHandle (hObject=0x2fc) returned 1 [0200.560] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf")) returned 0x220 [0200.560] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf")) returned 0x220 [0200.560] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.561] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0200.561] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.561] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.561] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0200.561] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1384, lpOverlapped=0x0) returned 1 [0200.562] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1390, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1390, lpOverlapped=0x0) returned 1 [0200.563] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0200.564] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.564] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.564] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1384, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1384, lpOverlapped=0x0) returned 1 [0200.564] FlushFileBuffers (hFile=0x2fc) returned 1 [0200.568] FlushFileBuffers (hFile=0x21c) returned 1 [0200.578] CloseHandle (hObject=0x2fc) returned 1 [0200.578] CloseHandle (hObject=0x21c) returned 1 [0200.578] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf")) returned 1 [0200.579] SetEvent (hEvent=0x27c) returned 1 [0200.580] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0200.580] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=7384) returned 1 [0200.580] CloseHandle (hObject=0x21c) returned 1 [0200.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid")) returned 0x220 [0200.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid")) returned 0x220 [0200.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.580] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0200.581] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.581] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.581] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0200.581] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1cd8, lpOverlapped=0x0) returned 1 [0200.583] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1ce0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1ce0, lpOverlapped=0x0) returned 1 [0200.584] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0200.584] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.584] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.584] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1cd8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1cd8, lpOverlapped=0x0) returned 1 [0200.585] FlushFileBuffers (hFile=0x21c) returned 1 [0200.589] FlushFileBuffers (hFile=0x2fc) returned 1 [0200.600] CloseHandle (hObject=0x21c) returned 1 [0200.600] CloseHandle (hObject=0x2fc) returned 1 [0200.600] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid")) returned 1 [0200.601] SetEvent (hEvent=0x27c) returned 1 [0200.601] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0200.601] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=26886) returned 1 [0200.601] CloseHandle (hObject=0x2fc) returned 1 [0200.601] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf")) returned 0x220 [0200.601] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf")) returned 0x220 [0200.601] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.601] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0200.602] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.602] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.602] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0200.602] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x6906, lpOverlapped=0x0) returned 1 [0200.603] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x6910, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x6910, lpOverlapped=0x0) returned 1 [0200.605] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0200.605] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.605] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.606] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x6906, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x6906, lpOverlapped=0x0) returned 1 [0200.606] FlushFileBuffers (hFile=0x2fc) returned 1 [0200.611] FlushFileBuffers (hFile=0x21c) returned 1 [0200.620] CloseHandle (hObject=0x2fc) returned 1 [0200.620] CloseHandle (hObject=0x21c) returned 1 [0200.621] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf")) returned 1 [0200.622] SetEvent (hEvent=0x27c) returned 1 [0200.622] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0200.622] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=11636) returned 1 [0200.622] CloseHandle (hObject=0x21c) returned 1 [0200.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf")) returned 0x220 [0200.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf")) returned 0x220 [0200.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.622] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0200.623] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.623] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.623] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0200.623] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2d74, lpOverlapped=0x0) returned 1 [0200.624] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2d80, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2d80, lpOverlapped=0x0) returned 1 [0200.625] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0200.626] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.626] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.626] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2d74, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2d74, lpOverlapped=0x0) returned 1 [0200.626] FlushFileBuffers (hFile=0x21c) returned 1 [0200.631] FlushFileBuffers (hFile=0x2fc) returned 1 [0200.641] CloseHandle (hObject=0x21c) returned 1 [0200.641] CloseHandle (hObject=0x2fc) returned 1 [0200.641] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf")) returned 1 [0200.642] SetEvent (hEvent=0x27c) returned 1 [0200.642] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0200.642] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=16180) returned 1 [0200.642] CloseHandle (hObject=0x2fc) returned 1 [0200.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf")) returned 0x220 [0200.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf")) returned 0x220 [0200.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.642] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0200.643] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.643] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.643] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0200.643] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x3f34, lpOverlapped=0x0) returned 1 [0200.644] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3f40, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3f40, lpOverlapped=0x0) returned 1 [0200.646] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0200.646] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.646] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.646] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3f34, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x3f34, lpOverlapped=0x0) returned 1 [0200.646] FlushFileBuffers (hFile=0x2fc) returned 1 [0200.650] FlushFileBuffers (hFile=0x21c) returned 1 [0200.660] CloseHandle (hObject=0x2fc) returned 1 [0200.660] CloseHandle (hObject=0x21c) returned 1 [0200.660] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf")) returned 1 [0200.661] SetEvent (hEvent=0x27c) returned 1 [0200.661] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0200.661] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=16112) returned 1 [0200.662] CloseHandle (hObject=0x21c) returned 1 [0200.662] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf")) returned 0x220 [0200.662] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf")) returned 0x220 [0200.662] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.662] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0200.662] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.662] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.662] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0200.663] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x3ef0, lpOverlapped=0x0) returned 1 [0200.664] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3f00, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3f00, lpOverlapped=0x0) returned 1 [0200.665] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0200.665] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.665] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.665] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3ef0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x3ef0, lpOverlapped=0x0) returned 1 [0200.665] FlushFileBuffers (hFile=0x21c) returned 1 [0200.669] FlushFileBuffers (hFile=0x2fc) returned 1 [0200.678] CloseHandle (hObject=0x21c) returned 1 [0200.678] CloseHandle (hObject=0x2fc) returned 1 [0200.679] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf")) returned 1 [0200.680] SetEvent (hEvent=0x27c) returned 1 [0200.680] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0200.680] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=26748) returned 1 [0200.680] CloseHandle (hObject=0x2fc) returned 1 [0200.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf")) returned 0x220 [0200.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf")) returned 0x220 [0200.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.680] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0200.681] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.681] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.681] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0200.681] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x687c, lpOverlapped=0x0) returned 1 [0200.683] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x6880, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x6880, lpOverlapped=0x0) returned 1 [0200.684] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0200.684] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.685] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.685] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x687c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x687c, lpOverlapped=0x0) returned 1 [0200.685] FlushFileBuffers (hFile=0x2fc) returned 1 [0200.697] FlushFileBuffers (hFile=0x21c) returned 1 [0200.700] CloseHandle (hObject=0x2fc) returned 1 [0200.700] CloseHandle (hObject=0x21c) returned 1 [0200.700] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf")) returned 1 [0200.701] SetEvent (hEvent=0x27c) returned 1 [0200.701] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0200.701] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=4066) returned 1 [0200.702] CloseHandle (hObject=0x21c) returned 1 [0200.702] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf")) returned 0x220 [0200.702] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf")) returned 0x220 [0200.702] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.702] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0200.702] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.702] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.702] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0200.703] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xfe2, lpOverlapped=0x0) returned 1 [0200.703] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xff0, lpOverlapped=0x0) returned 1 [0200.705] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0200.706] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.706] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.706] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xfe2, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xfe2, lpOverlapped=0x0) returned 1 [0200.706] FlushFileBuffers (hFile=0x21c) returned 1 [0200.716] FlushFileBuffers (hFile=0x2fc) returned 1 [0200.719] CloseHandle (hObject=0x21c) returned 1 [0200.719] CloseHandle (hObject=0x2fc) returned 1 [0200.719] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf")) returned 1 [0200.720] SetEvent (hEvent=0x27c) returned 1 [0200.720] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0200.720] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=24778) returned 1 [0200.720] CloseHandle (hObject=0x2fc) returned 1 [0200.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf")) returned 0x220 [0200.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf")) returned 0x220 [0200.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0200.721] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.721] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0200.722] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x60ca, lpOverlapped=0x0) returned 1 [0200.723] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x60d0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x60d0, lpOverlapped=0x0) returned 1 [0200.724] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0200.725] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.725] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.725] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x60ca, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x60ca, lpOverlapped=0x0) returned 1 [0200.725] FlushFileBuffers (hFile=0x2fc) returned 1 [0200.728] FlushFileBuffers (hFile=0x21c) returned 1 [0200.729] CloseHandle (hObject=0x2fc) returned 1 [0200.730] CloseHandle (hObject=0x21c) returned 1 [0200.730] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf")) returned 1 [0200.731] SetEvent (hEvent=0x27c) returned 1 [0200.731] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0200.731] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=47996) returned 1 [0200.731] CloseHandle (hObject=0x21c) returned 1 [0200.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf")) returned 0x220 [0200.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf")) returned 0x220 [0200.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.732] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0200.732] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.732] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.732] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0200.733] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xbb7c, lpOverlapped=0x0) returned 1 [0200.734] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xbb80, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xbb80, lpOverlapped=0x0) returned 1 [0200.736] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0200.736] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.736] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.736] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xbb7c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xbb7c, lpOverlapped=0x0) returned 1 [0200.737] FlushFileBuffers (hFile=0x21c) returned 1 [0200.740] FlushFileBuffers (hFile=0x2fc) returned 1 [0200.741] CloseHandle (hObject=0x21c) returned 1 [0200.741] CloseHandle (hObject=0x2fc) returned 1 [0200.742] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf")) returned 1 [0200.743] SetEvent (hEvent=0x27c) returned 1 [0200.743] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0200.743] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=40206) returned 1 [0200.743] CloseHandle (hObject=0x2fc) returned 1 [0200.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf")) returned 0x220 [0200.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf")) returned 0x220 [0200.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.744] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0200.744] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.744] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.744] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0200.744] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x9d0e, lpOverlapped=0x0) returned 1 [0200.746] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x9d10, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x9d10, lpOverlapped=0x0) returned 1 [0200.747] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0200.747] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.747] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.747] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x9d0e, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x9d0e, lpOverlapped=0x0) returned 1 [0200.748] FlushFileBuffers (hFile=0x2fc) returned 1 [0200.755] FlushFileBuffers (hFile=0x21c) returned 1 [0200.759] CloseHandle (hObject=0x2fc) returned 1 [0200.759] CloseHandle (hObject=0x21c) returned 1 [0200.759] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf")) returned 1 [0200.765] SetEvent (hEvent=0x27c) returned 1 [0200.765] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0200.765] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=47786) returned 1 [0200.765] CloseHandle (hObject=0x21c) returned 1 [0200.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf")) returned 0x220 [0200.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf")) returned 0x220 [0200.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.765] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0200.766] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.766] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.766] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0200.766] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xbaaa, lpOverlapped=0x0) returned 1 [0200.768] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xbab0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xbab0, lpOverlapped=0x0) returned 1 [0200.770] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0200.770] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.770] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.770] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xbaaa, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xbaaa, lpOverlapped=0x0) returned 1 [0200.771] FlushFileBuffers (hFile=0x21c) returned 1 [0200.775] FlushFileBuffers (hFile=0x2fc) returned 1 [0200.777] CloseHandle (hObject=0x21c) returned 1 [0200.777] CloseHandle (hObject=0x2fc) returned 1 [0200.777] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf")) returned 1 [0200.778] SetEvent (hEvent=0x27c) returned 1 [0200.778] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0200.778] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=14540) returned 1 [0200.778] CloseHandle (hObject=0x2fc) returned 1 [0200.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf")) returned 0x220 [0200.779] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf")) returned 0x220 [0200.779] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.779] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0200.779] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.779] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.779] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0200.780] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x38cc, lpOverlapped=0x0) returned 1 [0200.781] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x38d0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x38d0, lpOverlapped=0x0) returned 1 [0200.782] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0200.782] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.782] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.782] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x38cc, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x38cc, lpOverlapped=0x0) returned 1 [0200.782] FlushFileBuffers (hFile=0x2fc) returned 1 [0200.786] FlushFileBuffers (hFile=0x21c) returned 1 [0200.788] CloseHandle (hObject=0x2fc) returned 1 [0200.788] CloseHandle (hObject=0x21c) returned 1 [0200.788] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf")) returned 1 [0200.789] SetEvent (hEvent=0x27c) returned 1 [0200.789] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0200.789] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=20554) returned 1 [0200.790] CloseHandle (hObject=0x21c) returned 1 [0200.790] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf")) returned 0x220 [0200.790] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf")) returned 0x220 [0200.790] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.790] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0200.790] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.790] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.790] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0200.791] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x504a, lpOverlapped=0x0) returned 1 [0200.792] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5050, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x5050, lpOverlapped=0x0) returned 1 [0200.793] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0200.793] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.794] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.794] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x504a, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x504a, lpOverlapped=0x0) returned 1 [0200.794] FlushFileBuffers (hFile=0x21c) returned 1 [0200.796] FlushFileBuffers (hFile=0x2fc) returned 1 [0200.828] CloseHandle (hObject=0x21c) returned 1 [0200.828] CloseHandle (hObject=0x2fc) returned 1 [0200.828] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf")) returned 1 [0200.829] SetEvent (hEvent=0x27c) returned 1 [0200.830] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0200.830] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=7966) returned 1 [0200.830] CloseHandle (hObject=0x2fc) returned 1 [0200.830] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf")) returned 0x220 [0200.830] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf")) returned 0x220 [0200.830] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.830] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0200.830] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.830] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.830] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0200.831] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1f1e, lpOverlapped=0x0) returned 1 [0200.841] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1f20, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1f20, lpOverlapped=0x0) returned 1 [0200.843] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0200.843] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.843] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.844] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1f1e, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1f1e, lpOverlapped=0x0) returned 1 [0200.844] FlushFileBuffers (hFile=0x2fc) returned 1 [0200.846] FlushFileBuffers (hFile=0x21c) returned 1 [0200.848] CloseHandle (hObject=0x2fc) returned 1 [0200.849] CloseHandle (hObject=0x21c) returned 1 [0200.849] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf")) returned 1 [0200.850] SetEvent (hEvent=0x27c) returned 1 [0200.850] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0200.850] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=13515) returned 1 [0200.850] CloseHandle (hObject=0x21c) returned 1 [0200.850] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif")) returned 0x220 [0200.850] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif")) returned 0x220 [0200.850] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.851] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0200.851] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.851] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.851] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0200.852] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x34cb, lpOverlapped=0x0) returned 1 [0200.853] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x34d0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x34d0, lpOverlapped=0x0) returned 1 [0200.856] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0200.856] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.856] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.856] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x34cb, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x34cb, lpOverlapped=0x0) returned 1 [0200.856] FlushFileBuffers (hFile=0x21c) returned 1 [0200.859] FlushFileBuffers (hFile=0x2fc) returned 1 [0200.860] CloseHandle (hObject=0x21c) returned 1 [0200.860] CloseHandle (hObject=0x2fc) returned 1 [0200.860] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif")) returned 1 [0200.862] SetEvent (hEvent=0x27c) returned 1 [0200.862] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0200.862] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=20189) returned 1 [0200.862] CloseHandle (hObject=0x2fc) returned 1 [0200.862] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif")) returned 0x220 [0200.862] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif")) returned 0x220 [0200.862] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.862] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0200.862] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.862] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.862] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0200.863] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4edd, lpOverlapped=0x0) returned 1 [0200.864] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4ee0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4ee0, lpOverlapped=0x0) returned 1 [0200.865] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0200.866] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.866] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.866] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4edd, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4edd, lpOverlapped=0x0) returned 1 [0200.866] FlushFileBuffers (hFile=0x2fc) returned 1 [0200.868] FlushFileBuffers (hFile=0x21c) returned 1 [0200.869] CloseHandle (hObject=0x2fc) returned 1 [0200.869] CloseHandle (hObject=0x21c) returned 1 [0200.870] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif")) returned 1 [0200.871] SetEvent (hEvent=0x27c) returned 1 [0200.871] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0200.871] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=20454) returned 1 [0200.871] CloseHandle (hObject=0x21c) returned 1 [0200.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif")) returned 0x220 [0200.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif")) returned 0x220 [0200.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.871] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0200.871] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.871] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0200.871] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0200.872] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4fe6, lpOverlapped=0x0) returned 1 [0200.873] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4ff0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4ff0, lpOverlapped=0x0) returned 1 [0200.874] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0200.874] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.875] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0200.875] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4fe6, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4fe6, lpOverlapped=0x0) returned 1 [0200.875] FlushFileBuffers (hFile=0x21c) returned 1 [0200.915] FlushFileBuffers (hFile=0x2fc) returned 1 [0201.696] CloseHandle (hObject=0x21c) returned 1 [0201.696] CloseHandle (hObject=0x2fc) returned 1 [0201.697] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif")) returned 1 [0201.698] SetEvent (hEvent=0x27c) returned 1 [0201.698] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0201.699] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=4976) returned 1 [0201.699] CloseHandle (hObject=0x2fc) returned 1 [0201.699] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf")) returned 0x220 [0201.699] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf")) returned 0x220 [0201.699] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.699] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0201.699] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0201.700] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0201.700] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0201.700] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1370, lpOverlapped=0x0) returned 1 [0201.703] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1380, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1380, lpOverlapped=0x0) returned 1 [0201.704] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0201.704] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0201.704] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0201.704] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1370, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1370, lpOverlapped=0x0) returned 1 [0201.704] FlushFileBuffers (hFile=0x2fc) returned 1 [0201.716] FlushFileBuffers (hFile=0x21c) returned 1 [0201.718] CloseHandle (hObject=0x2fc) returned 1 [0201.718] CloseHandle (hObject=0x21c) returned 1 [0201.718] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf")) returned 1 [0201.719] SetEvent (hEvent=0x27c) returned 1 [0201.719] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00200_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0201.720] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3104) returned 1 [0201.721] CloseHandle (hObject=0x21c) returned 1 [0201.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00200_.wmf")) returned 0x220 [0201.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00200_.wmf")) returned 0x220 [0201.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00200_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00200_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0201.721] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0201.721] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0201.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00200_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0201.722] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xc20, lpOverlapped=0x0) returned 1 [0201.725] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xc30, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xc30, lpOverlapped=0x0) returned 1 [0201.726] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0201.727] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0201.727] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0201.727] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xc20, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xc20, lpOverlapped=0x0) returned 1 [0201.727] FlushFileBuffers (hFile=0x21c) returned 1 [0201.736] FlushFileBuffers (hFile=0x2fc) returned 1 [0201.739] CloseHandle (hObject=0x21c) returned 1 [0201.739] CloseHandle (hObject=0x2fc) returned 1 [0201.739] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00200_.wmf")) returned 1 [0201.740] SetEvent (hEvent=0x27c) returned 1 [0201.740] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00438_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0201.742] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1212) returned 1 [0201.742] CloseHandle (hObject=0x2fc) returned 1 [0201.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00438_.wmf")) returned 0x220 [0201.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00438_.wmf")) returned 0x220 [0201.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00438_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.742] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00438_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0201.742] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0201.742] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0201.742] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00438_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0201.743] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4bc, lpOverlapped=0x0) returned 1 [0201.748] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4c0, lpOverlapped=0x0) returned 1 [0201.749] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0201.749] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0201.749] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0201.750] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4bc, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4bc, lpOverlapped=0x0) returned 1 [0201.750] FlushFileBuffers (hFile=0x2fc) returned 1 [0201.755] FlushFileBuffers (hFile=0x21c) returned 1 [0201.759] CloseHandle (hObject=0x2fc) returned 1 [0201.759] CloseHandle (hObject=0x21c) returned 1 [0201.759] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00438_.wmf")) returned 1 [0201.760] SetEvent (hEvent=0x27c) returned 1 [0201.761] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0201.761] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=5580) returned 1 [0201.761] CloseHandle (hObject=0x21c) returned 1 [0201.761] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf")) returned 0x220 [0201.761] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf")) returned 0x220 [0201.761] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.762] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0201.762] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0201.762] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0201.762] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0201.762] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x15cc, lpOverlapped=0x0) returned 1 [0201.764] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x15d0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x15d0, lpOverlapped=0x0) returned 1 [0201.765] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0201.765] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0201.765] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0201.765] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x15cc, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x15cc, lpOverlapped=0x0) returned 1 [0201.766] FlushFileBuffers (hFile=0x21c) returned 1 [0201.774] FlushFileBuffers (hFile=0x2fc) returned 1 [0201.775] CloseHandle (hObject=0x21c) returned 1 [0201.776] CloseHandle (hObject=0x2fc) returned 1 [0201.776] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf")) returned 1 [0201.777] SetEvent (hEvent=0x27c) returned 1 [0201.777] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00442_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0201.777] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2488) returned 1 [0201.777] CloseHandle (hObject=0x2fc) returned 1 [0201.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00442_.wmf")) returned 0x220 [0201.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00442_.wmf")) returned 0x220 [0201.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00442_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.778] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00442_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0201.778] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0201.778] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0201.778] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00442_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0201.778] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x9b8, lpOverlapped=0x0) returned 1 [0201.780] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x9c0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x9c0, lpOverlapped=0x0) returned 1 [0201.781] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0201.781] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0201.781] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0201.781] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x9b8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x9b8, lpOverlapped=0x0) returned 1 [0201.782] FlushFileBuffers (hFile=0x2fc) returned 1 [0201.784] FlushFileBuffers (hFile=0x21c) returned 1 [0201.797] CloseHandle (hObject=0x2fc) returned 1 [0201.797] CloseHandle (hObject=0x21c) returned 1 [0201.797] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00442_.wmf")) returned 1 [0201.798] SetEvent (hEvent=0x27c) returned 1 [0201.798] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00444_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0201.800] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3896) returned 1 [0201.800] CloseHandle (hObject=0x21c) returned 1 [0201.800] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00444_.wmf")) returned 0x220 [0201.800] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00444_.wmf")) returned 0x220 [0201.800] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00444_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.800] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00444_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0201.800] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0201.800] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0201.800] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00444_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0201.801] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xf38, lpOverlapped=0x0) returned 1 [0201.803] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf40, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf40, lpOverlapped=0x0) returned 1 [0201.804] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0201.804] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0201.804] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0201.804] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf38, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xf38, lpOverlapped=0x0) returned 1 [0201.804] FlushFileBuffers (hFile=0x21c) returned 1 [0201.811] FlushFileBuffers (hFile=0x2fc) returned 1 [0201.816] CloseHandle (hObject=0x21c) returned 1 [0201.816] CloseHandle (hObject=0x2fc) returned 1 [0201.817] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00444_.wmf")) returned 1 [0201.818] SetEvent (hEvent=0x27c) returned 1 [0201.818] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00453_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0201.818] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2436) returned 1 [0201.818] CloseHandle (hObject=0x2fc) returned 1 [0201.818] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00453_.wmf")) returned 0x220 [0201.818] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00453_.wmf")) returned 0x220 [0201.818] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00453_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.819] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00453_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0201.819] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0201.819] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0201.819] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00453_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0201.819] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x984, lpOverlapped=0x0) returned 1 [0201.821] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x990, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x990, lpOverlapped=0x0) returned 1 [0201.822] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0201.822] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0201.822] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0201.823] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x984, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x984, lpOverlapped=0x0) returned 1 [0201.823] FlushFileBuffers (hFile=0x2fc) returned 1 [0201.830] FlushFileBuffers (hFile=0x21c) returned 1 [0201.847] CloseHandle (hObject=0x2fc) returned 1 [0201.847] CloseHandle (hObject=0x21c) returned 1 [0201.847] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00453_.wmf")) returned 1 [0201.849] SetEvent (hEvent=0x27c) returned 1 [0201.849] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0201.853] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=7176) returned 1 [0201.853] CloseHandle (hObject=0x21c) returned 1 [0201.853] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf")) returned 0x220 [0201.853] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf")) returned 0x220 [0201.853] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.853] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0201.853] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0201.853] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0201.853] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0201.854] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1c08, lpOverlapped=0x0) returned 1 [0201.856] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1c10, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1c10, lpOverlapped=0x0) returned 1 [0201.857] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0201.858] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0201.858] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0201.858] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1c08, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1c08, lpOverlapped=0x0) returned 1 [0201.858] FlushFileBuffers (hFile=0x21c) returned 1 [0201.876] FlushFileBuffers (hFile=0x2fc) returned 1 [0201.879] CloseHandle (hObject=0x21c) returned 1 [0201.879] CloseHandle (hObject=0x2fc) returned 1 [0201.879] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf")) returned 1 [0201.880] SetEvent (hEvent=0x27c) returned 1 [0201.880] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0201.881] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=14996) returned 1 [0201.881] CloseHandle (hObject=0x2fc) returned 1 [0201.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf")) returned 0x220 [0201.882] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf")) returned 0x220 [0201.882] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.882] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0201.882] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0201.882] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0201.882] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0201.883] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x3a94, lpOverlapped=0x0) returned 1 [0201.886] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3aa0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3aa0, lpOverlapped=0x0) returned 1 [0201.887] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0201.888] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0201.888] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0201.888] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3a94, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x3a94, lpOverlapped=0x0) returned 1 [0201.888] FlushFileBuffers (hFile=0x2fc) returned 1 [0201.895] FlushFileBuffers (hFile=0x21c) returned 1 [0201.898] CloseHandle (hObject=0x2fc) returned 1 [0201.898] CloseHandle (hObject=0x21c) returned 1 [0201.898] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf")) returned 1 [0201.899] SetEvent (hEvent=0x27c) returned 1 [0201.899] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01637_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0201.900] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3948) returned 1 [0201.900] CloseHandle (hObject=0x21c) returned 1 [0201.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01637_.wmf")) returned 0x220 [0201.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01637_.wmf")) returned 0x220 [0201.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01637_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.900] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01637_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0201.901] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0201.901] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0201.901] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01637_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0201.901] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xf6c, lpOverlapped=0x0) returned 1 [0201.903] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf70, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf70, lpOverlapped=0x0) returned 1 [0201.904] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0201.905] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0201.905] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0201.905] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf6c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xf6c, lpOverlapped=0x0) returned 1 [0201.905] FlushFileBuffers (hFile=0x21c) returned 1 [0201.913] FlushFileBuffers (hFile=0x2fc) returned 1 [0201.923] CloseHandle (hObject=0x21c) returned 1 [0201.923] CloseHandle (hObject=0x2fc) returned 1 [0201.923] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01637_.wmf")) returned 1 [0201.924] SetEvent (hEvent=0x27c) returned 1 [0201.924] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0201.925] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=4236) returned 1 [0201.925] CloseHandle (hObject=0x2fc) returned 1 [0201.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf")) returned 0x220 [0201.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf")) returned 0x220 [0201.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.925] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0201.925] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0201.925] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0201.925] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0201.926] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x108c, lpOverlapped=0x0) returned 1 [0201.928] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1090, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1090, lpOverlapped=0x0) returned 1 [0201.929] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0201.929] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0201.929] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0201.929] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x108c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x108c, lpOverlapped=0x0) returned 1 [0201.930] FlushFileBuffers (hFile=0x2fc) returned 1 [0201.940] FlushFileBuffers (hFile=0x21c) returned 1 [0201.945] CloseHandle (hObject=0x2fc) returned 1 [0201.945] CloseHandle (hObject=0x21c) returned 1 [0201.946] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf")) returned 1 [0201.947] SetEvent (hEvent=0x27c) returned 1 [0201.947] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cg1606.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0201.947] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3564) returned 1 [0201.947] CloseHandle (hObject=0x21c) returned 1 [0201.948] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cg1606.wmf")) returned 0x220 [0201.948] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cg1606.wmf")) returned 0x220 [0201.948] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cg1606.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.948] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cg1606.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0201.948] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0201.948] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0201.948] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cg1606.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0201.949] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xdec, lpOverlapped=0x0) returned 1 [0201.951] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xdf0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xdf0, lpOverlapped=0x0) returned 1 [0201.952] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0201.952] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0201.952] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0201.952] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xdec, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xdec, lpOverlapped=0x0) returned 1 [0201.952] FlushFileBuffers (hFile=0x21c) returned 1 [0201.963] FlushFileBuffers (hFile=0x2fc) returned 1 [0201.966] CloseHandle (hObject=0x21c) returned 1 [0201.966] CloseHandle (hObject=0x2fc) returned 1 [0201.966] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cg1606.wmf")) returned 1 [0201.967] SetEvent (hEvent=0x27c) returned 1 [0201.967] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic2.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0201.969] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2262) returned 1 [0201.969] CloseHandle (hObject=0x2fc) returned 1 [0201.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic2.wmf")) returned 0x220 [0201.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic2.wmf")) returned 0x220 [0201.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic2.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.969] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic2.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0201.969] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0201.969] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0201.969] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic2.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0201.970] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x8d6, lpOverlapped=0x0) returned 1 [0201.976] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8e0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x8e0, lpOverlapped=0x0) returned 1 [0201.977] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0201.977] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0201.977] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0201.977] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8d6, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x8d6, lpOverlapped=0x0) returned 1 [0201.977] FlushFileBuffers (hFile=0x2fc) returned 1 [0201.984] FlushFileBuffers (hFile=0x21c) returned 1 [0201.987] CloseHandle (hObject=0x2fc) returned 1 [0201.987] CloseHandle (hObject=0x21c) returned 1 [0201.987] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic2.wmf")) returned 1 [0201.988] SetEvent (hEvent=0x27c) returned 1 [0201.988] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0201.994] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=6970) returned 1 [0201.995] CloseHandle (hObject=0x21c) returned 1 [0201.995] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid")) returned 0x220 [0201.995] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid")) returned 0x220 [0201.995] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.995] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0201.995] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0201.995] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0201.995] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0201.996] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1b3a, lpOverlapped=0x0) returned 1 [0202.002] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1b40, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1b40, lpOverlapped=0x0) returned 1 [0202.003] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0202.003] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.003] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.003] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1b3a, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1b3a, lpOverlapped=0x0) returned 1 [0202.003] FlushFileBuffers (hFile=0x21c) returned 1 [0202.009] FlushFileBuffers (hFile=0x2fc) returned 1 [0202.016] CloseHandle (hObject=0x21c) returned 1 [0202.016] CloseHandle (hObject=0x2fc) returned 1 [0202.016] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid")) returned 1 [0202.017] SetEvent (hEvent=0x27c) returned 1 [0202.017] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0202.018] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=49546) returned 1 [0202.018] CloseHandle (hObject=0x2fc) returned 1 [0202.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf")) returned 0x220 [0202.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf")) returned 0x220 [0202.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.018] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0202.018] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.019] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.019] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0202.019] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xc18a, lpOverlapped=0x0) returned 1 [0202.022] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xc190, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xc190, lpOverlapped=0x0) returned 1 [0202.024] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0202.024] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.024] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.024] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xc18a, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xc18a, lpOverlapped=0x0) returned 1 [0202.025] FlushFileBuffers (hFile=0x2fc) returned 1 [0202.033] FlushFileBuffers (hFile=0x21c) returned 1 [0202.036] CloseHandle (hObject=0x2fc) returned 1 [0202.036] CloseHandle (hObject=0x21c) returned 1 [0202.036] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf")) returned 1 [0202.038] SetEvent (hEvent=0x27c) returned 1 [0202.038] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0202.038] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=10326) returned 1 [0202.038] CloseHandle (hObject=0x21c) returned 1 [0202.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf")) returned 0x220 [0202.039] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf")) returned 0x220 [0202.039] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.039] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0202.039] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.039] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.039] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0202.039] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2856, lpOverlapped=0x0) returned 1 [0202.041] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2860, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2860, lpOverlapped=0x0) returned 1 [0202.042] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0202.043] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.043] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.043] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2856, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2856, lpOverlapped=0x0) returned 1 [0202.043] FlushFileBuffers (hFile=0x21c) returned 1 [0202.054] FlushFileBuffers (hFile=0x2fc) returned 1 [0202.056] CloseHandle (hObject=0x21c) returned 1 [0202.056] CloseHandle (hObject=0x2fc) returned 1 [0202.056] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf")) returned 1 [0202.057] SetEvent (hEvent=0x27c) returned 1 [0202.057] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00121_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0202.058] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=8256) returned 1 [0202.059] CloseHandle (hObject=0x2fc) returned 1 [0202.059] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00121_.wmf")) returned 0x220 [0202.059] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00121_.wmf")) returned 0x220 [0202.059] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00121_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.059] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00121_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0202.059] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.059] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.059] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00121_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0202.060] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2040, lpOverlapped=0x0) returned 1 [0202.062] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2050, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2050, lpOverlapped=0x0) returned 1 [0202.063] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0202.063] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.063] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.063] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2040, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2040, lpOverlapped=0x0) returned 1 [0202.063] FlushFileBuffers (hFile=0x2fc) returned 1 [0202.069] FlushFileBuffers (hFile=0x21c) returned 1 [0202.077] CloseHandle (hObject=0x2fc) returned 1 [0202.077] CloseHandle (hObject=0x21c) returned 1 [0202.077] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00121_.wmf")) returned 1 [0202.078] SetEvent (hEvent=0x27c) returned 1 [0202.078] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00255_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0202.080] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2690) returned 1 [0202.080] CloseHandle (hObject=0x21c) returned 1 [0202.080] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00255_.wmf")) returned 0x220 [0202.080] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00255_.wmf")) returned 0x220 [0202.080] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00255_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.080] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00255_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0202.080] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.080] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.080] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00255_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0202.081] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xa82, lpOverlapped=0x0) returned 1 [0202.083] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xa90, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xa90, lpOverlapped=0x0) returned 1 [0202.084] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0202.084] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.084] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.084] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xa82, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xa82, lpOverlapped=0x0) returned 1 [0202.084] FlushFileBuffers (hFile=0x21c) returned 1 [0202.095] FlushFileBuffers (hFile=0x2fc) returned 1 [0202.098] CloseHandle (hObject=0x21c) returned 1 [0202.098] CloseHandle (hObject=0x2fc) returned 1 [0202.098] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00255_.wmf")) returned 1 [0202.099] SetEvent (hEvent=0x27c) returned 1 [0202.099] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00261_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0202.100] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=37974) returned 1 [0202.100] CloseHandle (hObject=0x2fc) returned 1 [0202.100] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00261_.wmf")) returned 0x220 [0202.100] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00261_.wmf")) returned 0x220 [0202.100] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00261_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.100] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00261_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0202.100] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.100] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.100] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00261_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0202.101] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x9456, lpOverlapped=0x0) returned 1 [0202.103] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x9460, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x9460, lpOverlapped=0x0) returned 1 [0202.105] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0202.105] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.105] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.105] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x9456, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x9456, lpOverlapped=0x0) returned 1 [0202.105] FlushFileBuffers (hFile=0x2fc) returned 1 [0202.116] FlushFileBuffers (hFile=0x21c) returned 1 [0202.121] CloseHandle (hObject=0x2fc) returned 1 [0202.121] CloseHandle (hObject=0x21c) returned 1 [0202.121] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00261_.wmf")) returned 1 [0202.123] SetEvent (hEvent=0x27c) returned 1 [0202.123] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00372_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0202.124] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=792) returned 1 [0202.124] CloseHandle (hObject=0x21c) returned 1 [0202.124] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00372_.wmf")) returned 0x220 [0202.124] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00372_.wmf")) returned 0x220 [0202.124] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00372_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.124] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00372_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0202.124] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.124] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.124] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00372_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0202.125] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x318, lpOverlapped=0x0) returned 1 [0202.127] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x320, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x320, lpOverlapped=0x0) returned 1 [0202.128] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0202.128] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.128] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.128] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x318, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x318, lpOverlapped=0x0) returned 1 [0202.128] FlushFileBuffers (hFile=0x21c) returned 1 [0202.138] FlushFileBuffers (hFile=0x2fc) returned 1 [0202.140] CloseHandle (hObject=0x21c) returned 1 [0202.140] CloseHandle (hObject=0x2fc) returned 1 [0202.140] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00372_.wmf")) returned 1 [0202.141] SetEvent (hEvent=0x27c) returned 1 [0202.142] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00407_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0202.143] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=7828) returned 1 [0202.143] CloseHandle (hObject=0x2fc) returned 1 [0202.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00407_.wmf")) returned 0x220 [0202.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00407_.wmf")) returned 0x220 [0202.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00407_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.143] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00407_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0202.143] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.143] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.143] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00407_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0202.144] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1e94, lpOverlapped=0x0) returned 1 [0202.146] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1ea0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1ea0, lpOverlapped=0x0) returned 1 [0202.147] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0202.147] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.147] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.148] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1e94, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1e94, lpOverlapped=0x0) returned 1 [0202.148] FlushFileBuffers (hFile=0x2fc) returned 1 [0202.161] FlushFileBuffers (hFile=0x21c) returned 1 [0202.163] CloseHandle (hObject=0x2fc) returned 1 [0202.163] CloseHandle (hObject=0x21c) returned 1 [0202.163] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00407_.wmf")) returned 1 [0202.164] SetEvent (hEvent=0x27c) returned 1 [0202.164] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00414_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0202.165] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=42908) returned 1 [0202.165] CloseHandle (hObject=0x21c) returned 1 [0202.165] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00414_.wmf")) returned 0x220 [0202.165] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00414_.wmf")) returned 0x220 [0202.165] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00414_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.165] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00414_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0202.165] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.165] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.165] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00414_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0202.166] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xa79c, lpOverlapped=0x0) returned 1 [0202.169] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xa7a0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xa7a0, lpOverlapped=0x0) returned 1 [0202.171] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0202.171] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.171] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.171] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xa79c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xa79c, lpOverlapped=0x0) returned 1 [0202.171] FlushFileBuffers (hFile=0x21c) returned 1 [0202.185] FlushFileBuffers (hFile=0x2fc) returned 1 [0202.187] CloseHandle (hObject=0x21c) returned 1 [0202.187] CloseHandle (hObject=0x2fc) returned 1 [0202.188] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00414_.wmf")) returned 1 [0202.189] SetEvent (hEvent=0x27c) returned 1 [0202.189] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00437_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0202.189] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1932) returned 1 [0202.190] CloseHandle (hObject=0x2fc) returned 1 [0202.190] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00437_.wmf")) returned 0x220 [0202.190] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00437_.wmf")) returned 0x220 [0202.190] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00437_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.190] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00437_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0202.190] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.190] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.190] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00437_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0202.190] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x78c, lpOverlapped=0x0) returned 1 [0202.192] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x790, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x790, lpOverlapped=0x0) returned 1 [0202.193] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0202.194] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.194] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.194] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x78c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x78c, lpOverlapped=0x0) returned 1 [0202.194] FlushFileBuffers (hFile=0x2fc) returned 1 [0202.203] FlushFileBuffers (hFile=0x21c) returned 1 [0202.205] CloseHandle (hObject=0x2fc) returned 1 [0202.205] CloseHandle (hObject=0x21c) returned 1 [0202.205] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00437_.wmf")) returned 1 [0202.206] SetEvent (hEvent=0x27c) returned 1 [0202.206] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00449_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0202.207] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=9992) returned 1 [0202.207] CloseHandle (hObject=0x21c) returned 1 [0202.207] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00449_.wmf")) returned 0x220 [0202.207] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00449_.wmf")) returned 0x220 [0202.207] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00449_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.207] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00449_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0202.207] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.207] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.207] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00449_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0202.208] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2708, lpOverlapped=0x0) returned 1 [0202.210] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2710, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2710, lpOverlapped=0x0) returned 1 [0202.211] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0202.211] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.211] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.211] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2708, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2708, lpOverlapped=0x0) returned 1 [0202.211] FlushFileBuffers (hFile=0x21c) returned 1 [0202.222] FlushFileBuffers (hFile=0x2fc) returned 1 [0202.224] CloseHandle (hObject=0x21c) returned 1 [0202.224] CloseHandle (hObject=0x2fc) returned 1 [0202.224] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00449_.wmf")) returned 1 [0202.225] SetEvent (hEvent=0x27c) returned 1 [0202.225] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00705_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0202.226] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=24588) returned 1 [0202.226] CloseHandle (hObject=0x2fc) returned 1 [0202.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00705_.wmf")) returned 0x220 [0202.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00705_.wmf")) returned 0x220 [0202.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00705_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.226] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00705_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0202.226] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.226] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.226] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00705_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0202.227] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x600c, lpOverlapped=0x0) returned 1 [0202.229] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x6010, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x6010, lpOverlapped=0x0) returned 1 [0202.231] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0202.231] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.231] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.231] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x600c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x600c, lpOverlapped=0x0) returned 1 [0202.231] FlushFileBuffers (hFile=0x2fc) returned 1 [0202.243] FlushFileBuffers (hFile=0x21c) returned 1 [0202.245] CloseHandle (hObject=0x2fc) returned 1 [0202.245] CloseHandle (hObject=0x21c) returned 1 [0202.245] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00705_.wmf")) returned 1 [0202.246] SetEvent (hEvent=0x27c) returned 1 [0202.247] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01039_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0202.247] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=14820) returned 1 [0202.247] CloseHandle (hObject=0x21c) returned 1 [0202.247] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01039_.wmf")) returned 0x220 [0202.247] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01039_.wmf")) returned 0x220 [0202.247] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01039_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.248] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01039_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0202.248] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.248] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.248] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01039_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0202.248] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x39e4, lpOverlapped=0x0) returned 1 [0202.250] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x39f0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x39f0, lpOverlapped=0x0) returned 1 [0202.251] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0202.252] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.252] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.252] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x39e4, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x39e4, lpOverlapped=0x0) returned 1 [0202.252] FlushFileBuffers (hFile=0x21c) returned 1 [0202.256] FlushFileBuffers (hFile=0x2fc) returned 1 [0202.264] CloseHandle (hObject=0x21c) returned 1 [0202.264] CloseHandle (hObject=0x2fc) returned 1 [0202.264] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01039_.wmf")) returned 1 [0202.265] SetEvent (hEvent=0x27c) returned 1 [0202.266] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01139_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0202.266] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3632) returned 1 [0202.266] CloseHandle (hObject=0x2fc) returned 1 [0202.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01139_.wmf")) returned 0x220 [0202.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01139_.wmf")) returned 0x220 [0202.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01139_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.266] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01139_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0202.267] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.267] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.267] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01139_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0202.267] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xe30, lpOverlapped=0x0) returned 1 [0202.269] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xe40, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xe40, lpOverlapped=0x0) returned 1 [0202.270] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0202.271] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.271] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.271] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xe30, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xe30, lpOverlapped=0x0) returned 1 [0202.271] FlushFileBuffers (hFile=0x2fc) returned 1 [0202.273] FlushFileBuffers (hFile=0x21c) returned 1 [0202.281] CloseHandle (hObject=0x2fc) returned 1 [0202.281] CloseHandle (hObject=0x21c) returned 1 [0202.282] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01139_.wmf")) returned 1 [0202.283] SetEvent (hEvent=0x27c) returned 1 [0202.283] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01143_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0202.283] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2140) returned 1 [0202.283] CloseHandle (hObject=0x21c) returned 1 [0202.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01143_.wmf")) returned 0x220 [0202.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01143_.wmf")) returned 0x220 [0202.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01143_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.284] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01143_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0202.284] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.284] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.284] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01143_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0202.284] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x85c, lpOverlapped=0x0) returned 1 [0202.287] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x860, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x860, lpOverlapped=0x0) returned 1 [0202.288] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0202.288] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.288] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.288] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x85c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x85c, lpOverlapped=0x0) returned 1 [0202.288] FlushFileBuffers (hFile=0x21c) returned 1 [0202.296] FlushFileBuffers (hFile=0x2fc) returned 1 [0202.300] CloseHandle (hObject=0x21c) returned 1 [0202.300] CloseHandle (hObject=0x2fc) returned 1 [0202.300] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01143_.wmf")) returned 1 [0202.301] SetEvent (hEvent=0x27c) returned 1 [0202.301] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01146_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0202.302] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2796) returned 1 [0202.302] CloseHandle (hObject=0x2fc) returned 1 [0202.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01146_.wmf")) returned 0x220 [0202.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01146_.wmf")) returned 0x220 [0202.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01146_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.302] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01146_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0202.302] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.302] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.302] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01146_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0202.303] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xaec, lpOverlapped=0x0) returned 1 [0202.305] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xaf0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xaf0, lpOverlapped=0x0) returned 1 [0202.306] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0202.306] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.306] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.306] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xaec, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xaec, lpOverlapped=0x0) returned 1 [0202.306] FlushFileBuffers (hFile=0x2fc) returned 1 [0202.317] FlushFileBuffers (hFile=0x21c) returned 1 [0202.318] CloseHandle (hObject=0x2fc) returned 1 [0202.323] CloseHandle (hObject=0x21c) returned 1 [0202.323] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01146_.wmf")) returned 1 [0202.324] SetEvent (hEvent=0x27c) returned 1 [0202.324] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01152_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0202.324] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2960) returned 1 [0202.324] CloseHandle (hObject=0x21c) returned 1 [0202.324] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01152_.wmf")) returned 0x220 [0202.324] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01152_.wmf")) returned 0x220 [0202.325] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01152_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.325] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01152_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0202.325] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.325] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.325] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01152_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0202.325] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xb90, lpOverlapped=0x0) returned 1 [0202.327] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xba0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xba0, lpOverlapped=0x0) returned 1 [0202.328] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0202.328] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.328] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.329] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xb90, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xb90, lpOverlapped=0x0) returned 1 [0202.329] FlushFileBuffers (hFile=0x21c) returned 1 [0202.339] FlushFileBuffers (hFile=0x2fc) returned 1 [0202.342] CloseHandle (hObject=0x21c) returned 1 [0202.342] CloseHandle (hObject=0x2fc) returned 1 [0202.342] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01152_.wmf")) returned 1 [0202.343] SetEvent (hEvent=0x27c) returned 1 [0202.343] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01160_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0202.345] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2228) returned 1 [0202.345] CloseHandle (hObject=0x2fc) returned 1 [0202.345] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01160_.wmf")) returned 0x220 [0202.345] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01160_.wmf")) returned 0x220 [0202.345] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01160_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.345] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01160_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0202.345] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.345] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.345] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01160_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0202.346] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x8b4, lpOverlapped=0x0) returned 1 [0202.351] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x8c0, lpOverlapped=0x0) returned 1 [0202.352] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0202.352] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.352] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.353] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8b4, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x8b4, lpOverlapped=0x0) returned 1 [0202.353] FlushFileBuffers (hFile=0x2fc) returned 1 [0202.358] FlushFileBuffers (hFile=0x21c) returned 1 [0202.360] CloseHandle (hObject=0x2fc) returned 1 [0202.360] CloseHandle (hObject=0x21c) returned 1 [0202.360] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01160_.wmf")) returned 1 [0202.361] SetEvent (hEvent=0x27c) returned 1 [0202.361] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01163_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0202.362] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2300) returned 1 [0202.362] CloseHandle (hObject=0x21c) returned 1 [0202.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01163_.wmf")) returned 0x220 [0202.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01163_.wmf")) returned 0x220 [0202.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01163_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.362] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01163_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0202.362] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.362] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.362] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01163_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0202.363] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x8fc, lpOverlapped=0x0) returned 1 [0202.365] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x900, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x900, lpOverlapped=0x0) returned 1 [0202.365] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0202.366] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.366] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.366] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8fc, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x8fc, lpOverlapped=0x0) returned 1 [0202.366] FlushFileBuffers (hFile=0x21c) returned 1 [0202.376] FlushFileBuffers (hFile=0x2fc) returned 1 [0202.377] CloseHandle (hObject=0x21c) returned 1 [0202.377] CloseHandle (hObject=0x2fc) returned 1 [0202.377] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01163_.wmf")) returned 1 [0202.378] SetEvent (hEvent=0x27c) returned 1 [0202.379] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01167_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0202.379] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2080) returned 1 [0202.379] CloseHandle (hObject=0x2fc) returned 1 [0202.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01167_.wmf")) returned 0x220 [0202.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01167_.wmf")) returned 0x220 [0202.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01167_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.380] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01167_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0202.380] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.380] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.380] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01167_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0202.380] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x820, lpOverlapped=0x0) returned 1 [0202.382] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x830, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x830, lpOverlapped=0x0) returned 1 [0202.383] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0202.383] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.383] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.384] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x820, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x820, lpOverlapped=0x0) returned 1 [0202.384] FlushFileBuffers (hFile=0x2fc) returned 1 [0202.386] FlushFileBuffers (hFile=0x21c) returned 1 [0202.392] CloseHandle (hObject=0x2fc) returned 1 [0202.393] CloseHandle (hObject=0x21c) returned 1 [0202.393] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01167_.wmf")) returned 1 [0202.394] SetEvent (hEvent=0x27c) returned 1 [0202.394] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01169_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0202.394] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2020) returned 1 [0202.394] CloseHandle (hObject=0x21c) returned 1 [0202.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01169_.wmf")) returned 0x220 [0202.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01169_.wmf")) returned 0x220 [0202.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01169_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.395] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01169_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0202.395] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.395] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.395] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01169_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0202.395] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x7e4, lpOverlapped=0x0) returned 1 [0202.400] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7f0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x7f0, lpOverlapped=0x0) returned 1 [0202.403] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0202.403] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.403] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.403] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7e4, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x7e4, lpOverlapped=0x0) returned 1 [0202.403] FlushFileBuffers (hFile=0x21c) returned 1 [0202.413] FlushFileBuffers (hFile=0x2fc) returned 1 [0202.423] CloseHandle (hObject=0x21c) returned 1 [0202.423] CloseHandle (hObject=0x2fc) returned 1 [0202.423] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01169_.wmf")) returned 1 [0202.424] SetEvent (hEvent=0x27c) returned 1 [0202.424] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01171_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0202.425] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2052) returned 1 [0202.425] CloseHandle (hObject=0x2fc) returned 1 [0202.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01171_.wmf")) returned 0x220 [0202.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01171_.wmf")) returned 0x220 [0202.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01171_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.433] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01171_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0202.433] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.433] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.433] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01171_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0202.434] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x804, lpOverlapped=0x0) returned 1 [0202.438] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x810, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x810, lpOverlapped=0x0) returned 1 [0202.439] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0202.439] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.440] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.440] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x804, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x804, lpOverlapped=0x0) returned 1 [0202.440] FlushFileBuffers (hFile=0x2fc) returned 1 [0202.449] FlushFileBuffers (hFile=0x21c) returned 1 [0202.452] CloseHandle (hObject=0x2fc) returned 1 [0202.452] CloseHandle (hObject=0x21c) returned 1 [0202.452] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01171_.wmf")) returned 1 [0202.453] SetEvent (hEvent=0x27c) returned 1 [0202.453] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01173_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0202.456] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1804) returned 1 [0202.456] CloseHandle (hObject=0x21c) returned 1 [0202.456] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01173_.wmf")) returned 0x220 [0202.456] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01173_.wmf")) returned 0x220 [0202.456] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01173_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.456] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01173_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0202.456] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.456] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.456] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01173_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0202.457] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x70c, lpOverlapped=0x0) returned 1 [0202.462] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x710, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x710, lpOverlapped=0x0) returned 1 [0202.463] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0202.463] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.464] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.464] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x70c, lpOverlapped=0x0) returned 1 [0202.464] FlushFileBuffers (hFile=0x21c) returned 1 [0202.468] FlushFileBuffers (hFile=0x2fc) returned 1 [0202.471] CloseHandle (hObject=0x21c) returned 1 [0202.471] CloseHandle (hObject=0x2fc) returned 1 [0202.471] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01173_.wmf")) returned 1 [0202.472] SetEvent (hEvent=0x27c) returned 1 [0202.472] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01178_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0202.473] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3796) returned 1 [0202.473] CloseHandle (hObject=0x2fc) returned 1 [0202.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01178_.wmf")) returned 0x220 [0202.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01178_.wmf")) returned 0x220 [0202.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01178_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.473] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01178_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0202.473] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.473] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.473] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01178_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0202.474] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xed4, lpOverlapped=0x0) returned 1 [0202.479] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xee0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xee0, lpOverlapped=0x0) returned 1 [0202.480] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0202.480] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.480] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.480] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xed4, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xed4, lpOverlapped=0x0) returned 1 [0202.480] FlushFileBuffers (hFile=0x2fc) returned 1 [0202.488] FlushFileBuffers (hFile=0x21c) returned 1 [0202.491] CloseHandle (hObject=0x2fc) returned 1 [0202.492] CloseHandle (hObject=0x21c) returned 1 [0202.492] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01178_.wmf")) returned 1 [0202.493] SetEvent (hEvent=0x27c) returned 1 [0202.494] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01180_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0202.496] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2084) returned 1 [0202.496] CloseHandle (hObject=0x2b0) returned 1 [0202.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01180_.wmf")) returned 0x220 [0202.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01180_.wmf")) returned 0x220 [0202.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01180_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.497] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01180_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0202.497] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.497] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.497] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01180_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0202.498] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x824, lpOverlapped=0x0) returned 1 [0202.504] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x830, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x830, lpOverlapped=0x0) returned 1 [0202.505] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0202.506] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.506] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.506] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x824, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x824, lpOverlapped=0x0) returned 1 [0202.506] FlushFileBuffers (hFile=0x2b0) returned 1 [0202.510] FlushFileBuffers (hFile=0x2f4) returned 1 [0202.513] CloseHandle (hObject=0x2b0) returned 1 [0202.513] CloseHandle (hObject=0x2f4) returned 1 [0202.513] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01180_.wmf")) returned 1 [0202.514] SetEvent (hEvent=0x27c) returned 1 [0202.514] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01182_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0202.515] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2996) returned 1 [0202.515] CloseHandle (hObject=0x2f4) returned 1 [0202.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01182_.wmf")) returned 0x220 [0202.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01182_.wmf")) returned 0x220 [0202.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01182_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.515] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01182_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0202.515] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.515] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.515] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01182_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0202.516] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xbb4, lpOverlapped=0x0) returned 1 [0202.521] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xbc0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xbc0, lpOverlapped=0x0) returned 1 [0202.522] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0202.523] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.523] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.523] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xbb4, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xbb4, lpOverlapped=0x0) returned 1 [0202.523] FlushFileBuffers (hFile=0x2f4) returned 1 [0202.527] FlushFileBuffers (hFile=0x2b0) returned 1 [0202.530] CloseHandle (hObject=0x2f4) returned 1 [0202.530] CloseHandle (hObject=0x2b0) returned 1 [0202.530] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01182_.wmf")) returned 1 [0202.531] SetEvent (hEvent=0x27c) returned 1 [0202.531] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01186_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0202.532] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=8564) returned 1 [0202.532] CloseHandle (hObject=0x2b0) returned 1 [0202.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01186_.wmf")) returned 0x220 [0202.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01186_.wmf")) returned 0x220 [0202.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01186_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.532] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01186_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0202.532] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.532] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.532] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01186_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0202.533] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2174, lpOverlapped=0x0) returned 1 [0202.539] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2180, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2180, lpOverlapped=0x0) returned 1 [0202.540] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0202.540] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.540] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.541] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2174, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2174, lpOverlapped=0x0) returned 1 [0202.541] FlushFileBuffers (hFile=0x2b0) returned 1 [0202.546] FlushFileBuffers (hFile=0x2f4) returned 1 [0202.548] CloseHandle (hObject=0x2b0) returned 1 [0202.548] CloseHandle (hObject=0x2f4) returned 1 [0202.548] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01186_.wmf")) returned 1 [0202.549] SetEvent (hEvent=0x27c) returned 1 [0202.549] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01434_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0202.551] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=900) returned 1 [0202.551] CloseHandle (hObject=0x2f4) returned 1 [0202.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01434_.wmf")) returned 0x220 [0202.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01434_.wmf")) returned 0x220 [0202.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01434_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.551] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01434_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0202.551] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.551] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.551] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01434_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0202.552] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x384, lpOverlapped=0x0) returned 1 [0202.557] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x390, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x390, lpOverlapped=0x0) returned 1 [0202.558] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0202.558] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.559] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.559] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x384, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x384, lpOverlapped=0x0) returned 1 [0202.559] FlushFileBuffers (hFile=0x2f4) returned 1 [0202.568] FlushFileBuffers (hFile=0x2b0) returned 1 [0202.570] CloseHandle (hObject=0x2f4) returned 1 [0202.570] CloseHandle (hObject=0x2b0) returned 1 [0202.570] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01434_.wmf")) returned 1 [0202.571] SetEvent (hEvent=0x27c) returned 1 [0202.571] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01586_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0202.572] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2324) returned 1 [0202.572] CloseHandle (hObject=0x2b0) returned 1 [0202.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01586_.wmf")) returned 0x220 [0202.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01586_.wmf")) returned 0x220 [0202.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01586_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.572] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01586_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0202.572] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.572] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.572] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01586_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0202.573] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x914, lpOverlapped=0x0) returned 1 [0202.575] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x920, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x920, lpOverlapped=0x0) returned 1 [0202.576] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0202.576] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.576] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.576] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x914, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x914, lpOverlapped=0x0) returned 1 [0202.576] FlushFileBuffers (hFile=0x2b0) returned 1 [0202.583] FlushFileBuffers (hFile=0x2f4) returned 1 [0202.588] CloseHandle (hObject=0x2b0) returned 1 [0202.588] CloseHandle (hObject=0x2f4) returned 1 [0202.588] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01586_.wmf")) returned 1 [0202.589] SetEvent (hEvent=0x27c) returned 1 [0202.589] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01629_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0202.590] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=580) returned 1 [0202.591] CloseHandle (hObject=0x2f4) returned 1 [0202.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01629_.wmf")) returned 0x220 [0202.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01629_.wmf")) returned 0x220 [0202.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01629_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.591] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01629_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0202.591] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.591] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.591] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01629_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0202.591] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x244, lpOverlapped=0x0) returned 1 [0202.593] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x250, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x250, lpOverlapped=0x0) returned 1 [0202.593] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0202.594] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.594] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.594] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x244, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x244, lpOverlapped=0x0) returned 1 [0202.594] FlushFileBuffers (hFile=0x2f4) returned 1 [0202.597] FlushFileBuffers (hFile=0x2b0) returned 1 [0202.606] CloseHandle (hObject=0x2f4) returned 1 [0202.606] CloseHandle (hObject=0x2b0) returned 1 [0202.606] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01629_.wmf")) returned 1 [0202.607] SetEvent (hEvent=0x27c) returned 1 [0202.608] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01631_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0202.608] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=552) returned 1 [0202.608] CloseHandle (hObject=0x2b0) returned 1 [0202.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01631_.wmf")) returned 0x220 [0202.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01631_.wmf")) returned 0x220 [0202.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01631_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.609] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01631_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0202.609] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.609] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.609] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01631_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0202.609] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x228, lpOverlapped=0x0) returned 1 [0202.610] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x230, lpOverlapped=0x0) returned 1 [0202.611] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0202.612] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.612] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.612] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x228, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x228, lpOverlapped=0x0) returned 1 [0202.612] FlushFileBuffers (hFile=0x2b0) returned 1 [0202.615] FlushFileBuffers (hFile=0x2f4) returned 1 [0202.617] CloseHandle (hObject=0x2b0) returned 1 [0202.617] CloseHandle (hObject=0x2f4) returned 1 [0202.617] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01631_.wmf")) returned 1 [0202.618] SetEvent (hEvent=0x27c) returned 1 [0202.618] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01761_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0202.619] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=4148) returned 1 [0202.619] CloseHandle (hObject=0x2f4) returned 1 [0202.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01761_.wmf")) returned 0x220 [0202.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01761_.wmf")) returned 0x220 [0202.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01761_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.619] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01761_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0202.620] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.620] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.620] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01761_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0202.620] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1034, lpOverlapped=0x0) returned 1 [0202.622] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1040, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1040, lpOverlapped=0x0) returned 1 [0202.623] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0202.623] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.623] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.623] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1034, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1034, lpOverlapped=0x0) returned 1 [0202.624] FlushFileBuffers (hFile=0x2f4) returned 1 [0202.638] FlushFileBuffers (hFile=0x2b0) returned 1 [0202.642] CloseHandle (hObject=0x2f4) returned 1 [0202.642] CloseHandle (hObject=0x2b0) returned 1 [0202.642] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01761_.wmf")) returned 1 [0202.643] SetEvent (hEvent=0x27c) returned 1 [0202.643] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01793_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0202.643] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3252) returned 1 [0202.643] CloseHandle (hObject=0x2b0) returned 1 [0202.644] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01793_.wmf")) returned 0x220 [0202.644] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01793_.wmf")) returned 0x220 [0202.644] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01793_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.644] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01793_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0202.644] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.644] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.644] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01793_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0202.646] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xcb4, lpOverlapped=0x0) returned 1 [0202.648] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xcc0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xcc0, lpOverlapped=0x0) returned 1 [0202.649] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0202.649] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.649] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.649] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xcb4, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xcb4, lpOverlapped=0x0) returned 1 [0202.650] FlushFileBuffers (hFile=0x2b0) returned 1 [0202.657] FlushFileBuffers (hFile=0x2f4) returned 1 [0202.661] CloseHandle (hObject=0x2b0) returned 1 [0202.661] CloseHandle (hObject=0x2f4) returned 1 [0202.661] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01793_.wmf")) returned 1 [0202.662] SetEvent (hEvent=0x27c) returned 1 [0202.662] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00010_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0202.663] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1382) returned 1 [0202.663] CloseHandle (hObject=0x2f4) returned 1 [0202.663] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00010_.wmf")) returned 0x220 [0202.664] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00010_.wmf")) returned 0x220 [0202.664] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00010_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.664] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00010_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0202.664] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.664] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.664] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00010_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0202.664] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x566, lpOverlapped=0x0) returned 1 [0202.666] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x570, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x570, lpOverlapped=0x0) returned 1 [0202.667] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0202.668] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.668] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.668] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x566, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x566, lpOverlapped=0x0) returned 1 [0202.668] FlushFileBuffers (hFile=0x2f4) returned 1 [0202.678] FlushFileBuffers (hFile=0x2b0) returned 1 [0202.681] CloseHandle (hObject=0x2f4) returned 1 [0202.681] CloseHandle (hObject=0x2b0) returned 1 [0202.681] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00010_.wmf")) returned 1 [0202.682] SetEvent (hEvent=0x27c) returned 1 [0202.682] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00172_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0202.682] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2700) returned 1 [0202.682] CloseHandle (hObject=0x2b0) returned 1 [0202.682] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00172_.wmf")) returned 0x220 [0202.682] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00172_.wmf")) returned 0x220 [0202.683] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00172_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.683] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00172_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0202.683] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.683] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.683] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00172_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0202.683] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xa8c, lpOverlapped=0x0) returned 1 [0202.685] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xa90, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xa90, lpOverlapped=0x0) returned 1 [0202.686] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0202.686] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.686] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.686] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xa8c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xa8c, lpOverlapped=0x0) returned 1 [0202.686] FlushFileBuffers (hFile=0x2b0) returned 1 [0202.697] FlushFileBuffers (hFile=0x2f4) returned 1 [0202.702] CloseHandle (hObject=0x2b0) returned 1 [0202.702] CloseHandle (hObject=0x2f4) returned 1 [0202.702] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00172_.wmf")) returned 1 [0202.703] SetEvent (hEvent=0x27c) returned 1 [0202.703] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00006_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0202.704] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=13936) returned 1 [0202.704] CloseHandle (hObject=0x2f4) returned 1 [0202.704] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00006_.wmf")) returned 0x220 [0202.704] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00006_.wmf")) returned 0x220 [0202.704] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00006_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.704] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00006_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0202.705] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.705] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.705] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00006_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0202.705] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x3670, lpOverlapped=0x0) returned 1 [0202.711] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3680, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3680, lpOverlapped=0x0) returned 1 [0202.712] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0202.712] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.712] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.712] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3670, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x3670, lpOverlapped=0x0) returned 1 [0202.713] FlushFileBuffers (hFile=0x2f4) returned 1 [0202.717] FlushFileBuffers (hFile=0x2b0) returned 1 [0202.720] CloseHandle (hObject=0x2f4) returned 1 [0202.720] CloseHandle (hObject=0x2b0) returned 1 [0202.720] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00006_.wmf")) returned 1 [0202.721] SetEvent (hEvent=0x27c) returned 1 [0202.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00222_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0202.721] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=12356) returned 1 [0202.721] CloseHandle (hObject=0x2b0) returned 1 [0202.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00222_.wmf")) returned 0x220 [0202.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00222_.wmf")) returned 0x220 [0202.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00222_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.722] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00222_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0202.722] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.722] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.722] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00222_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0202.722] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x3044, lpOverlapped=0x0) returned 1 [0202.724] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3050, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3050, lpOverlapped=0x0) returned 1 [0202.725] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0202.726] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.726] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.726] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3044, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x3044, lpOverlapped=0x0) returned 1 [0202.726] FlushFileBuffers (hFile=0x2b0) returned 1 [0202.734] FlushFileBuffers (hFile=0x2f4) returned 1 [0202.736] CloseHandle (hObject=0x2b0) returned 1 [0202.736] CloseHandle (hObject=0x2f4) returned 1 [0202.736] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00222_.wmf")) returned 1 [0202.737] SetEvent (hEvent=0x27c) returned 1 [0202.737] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00319_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0202.737] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2280) returned 1 [0202.737] CloseHandle (hObject=0x2f4) returned 1 [0202.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00319_.wmf")) returned 0x220 [0202.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00319_.wmf")) returned 0x220 [0202.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00319_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.738] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00319_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0202.738] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.738] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.738] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00319_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0202.738] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x8e8, lpOverlapped=0x0) returned 1 [0202.740] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8f0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x8f0, lpOverlapped=0x0) returned 1 [0202.741] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0202.741] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.741] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.741] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8e8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x8e8, lpOverlapped=0x0) returned 1 [0202.741] FlushFileBuffers (hFile=0x2f4) returned 1 [0202.744] FlushFileBuffers (hFile=0x2b0) returned 1 [0202.747] CloseHandle (hObject=0x2f4) returned 1 [0202.747] CloseHandle (hObject=0x2b0) returned 1 [0202.747] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00319_.wmf")) returned 1 [0202.748] SetEvent (hEvent=0x27c) returned 1 [0202.748] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00397_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0202.750] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=17308) returned 1 [0202.750] CloseHandle (hObject=0x2f4) returned 1 [0202.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00397_.wmf")) returned 0x220 [0202.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00397_.wmf")) returned 0x220 [0202.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00397_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.752] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00397_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0202.752] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.752] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.752] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00397_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0202.752] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x439c, lpOverlapped=0x0) returned 1 [0202.757] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x43a0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x43a0, lpOverlapped=0x0) returned 1 [0202.758] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0202.758] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.758] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.759] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x439c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x439c, lpOverlapped=0x0) returned 1 [0202.759] FlushFileBuffers (hFile=0x21c) returned 1 [0202.764] FlushFileBuffers (hFile=0x2fc) returned 1 [0202.770] CloseHandle (hObject=0x21c) returned 1 [0202.770] CloseHandle (hObject=0x2fc) returned 1 [0202.770] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00397_.wmf")) returned 1 [0202.771] SetEvent (hEvent=0x27c) returned 1 [0202.771] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\explr_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0202.772] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=10562) returned 1 [0202.772] CloseHandle (hObject=0x2fc) returned 1 [0202.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\explr_01.mid")) returned 0x220 [0202.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\explr_01.mid")) returned 0x220 [0202.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\explr_01.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.772] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\explr_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0202.772] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.772] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.772] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\explr_01.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0202.773] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2942, lpOverlapped=0x0) returned 1 [0202.780] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2950, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2950, lpOverlapped=0x0) returned 1 [0202.781] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0202.781] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.781] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.781] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2942, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2942, lpOverlapped=0x0) returned 1 [0202.781] FlushFileBuffers (hFile=0x2fc) returned 1 [0202.784] FlushFileBuffers (hFile=0x21c) returned 1 [0202.793] CloseHandle (hObject=0x2fc) returned 1 [0202.793] CloseHandle (hObject=0x21c) returned 1 [0202.793] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\explr_01.mid")) returned 1 [0202.794] SetEvent (hEvent=0x27c) returned 1 [0202.794] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00074_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0202.796] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=17850) returned 1 [0202.796] CloseHandle (hObject=0x21c) returned 1 [0202.796] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00074_.wmf")) returned 0x220 [0202.796] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00074_.wmf")) returned 0x220 [0202.796] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00074_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.796] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00074_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0202.796] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.796] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.796] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00074_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0202.797] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x45ba, lpOverlapped=0x0) returned 1 [0202.799] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x45c0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x45c0, lpOverlapped=0x0) returned 1 [0202.800] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0202.801] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.801] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.801] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x45ba, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x45ba, lpOverlapped=0x0) returned 1 [0202.801] FlushFileBuffers (hFile=0x21c) returned 1 [0202.810] FlushFileBuffers (hFile=0x2fc) returned 1 [0202.812] CloseHandle (hObject=0x21c) returned 1 [0202.812] CloseHandle (hObject=0x2fc) returned 1 [0202.812] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00074_.wmf")) returned 1 [0202.813] SetEvent (hEvent=0x27c) returned 1 [0202.813] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00077_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0202.814] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=30240) returned 1 [0202.814] CloseHandle (hObject=0x2fc) returned 1 [0202.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00077_.wmf")) returned 0x220 [0202.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00077_.wmf")) returned 0x220 [0202.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00077_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.814] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00077_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0202.814] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.814] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.814] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00077_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0202.815] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x7620, lpOverlapped=0x0) returned 1 [0202.817] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7630, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x7630, lpOverlapped=0x0) returned 1 [0202.818] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0202.819] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.819] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.819] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7620, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x7620, lpOverlapped=0x0) returned 1 [0202.819] FlushFileBuffers (hFile=0x2fc) returned 1 [0202.822] FlushFileBuffers (hFile=0x21c) returned 1 [0202.843] CloseHandle (hObject=0x2fc) returned 1 [0202.843] CloseHandle (hObject=0x21c) returned 1 [0202.843] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00077_.wmf")) returned 1 [0202.844] SetEvent (hEvent=0x27c) returned 1 [0202.844] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00090_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0202.845] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=14194) returned 1 [0202.845] CloseHandle (hObject=0x21c) returned 1 [0202.845] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00090_.wmf")) returned 0x220 [0202.845] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00090_.wmf")) returned 0x220 [0202.845] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00090_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.845] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00090_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0202.845] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.845] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.845] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00090_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0202.846] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x3772, lpOverlapped=0x0) returned 1 [0202.849] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3780, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3780, lpOverlapped=0x0) returned 1 [0202.850] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0202.850] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.850] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.850] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3772, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x3772, lpOverlapped=0x0) returned 1 [0202.850] FlushFileBuffers (hFile=0x21c) returned 1 [0202.853] FlushFileBuffers (hFile=0x2fc) returned 1 [0202.860] CloseHandle (hObject=0x21c) returned 1 [0202.860] CloseHandle (hObject=0x2fc) returned 1 [0202.860] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00090_.wmf")) returned 1 [0202.861] SetEvent (hEvent=0x27c) returned 1 [0202.861] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00296_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0202.862] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=15856) returned 1 [0202.862] CloseHandle (hObject=0x2fc) returned 1 [0202.862] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00296_.wmf")) returned 0x220 [0202.862] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00296_.wmf")) returned 0x220 [0202.862] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00296_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.862] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00296_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0202.862] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.862] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.862] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00296_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0202.862] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x3df0, lpOverlapped=0x0) returned 1 [0202.871] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3e00, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3e00, lpOverlapped=0x0) returned 1 [0202.872] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0202.872] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.873] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.873] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3df0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x3df0, lpOverlapped=0x0) returned 1 [0202.873] FlushFileBuffers (hFile=0x2fc) returned 1 [0202.876] FlushFileBuffers (hFile=0x21c) returned 1 [0202.888] CloseHandle (hObject=0x2fc) returned 1 [0202.888] CloseHandle (hObject=0x21c) returned 1 [0202.888] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00296_.wmf")) returned 1 [0202.889] SetEvent (hEvent=0x27c) returned 1 [0202.889] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00306_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0202.890] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=46814) returned 1 [0202.890] CloseHandle (hObject=0x21c) returned 1 [0202.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00306_.wmf")) returned 0x220 [0202.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00306_.wmf")) returned 0x220 [0202.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00306_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.890] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00306_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0202.890] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.890] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.890] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00306_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0202.891] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xb6de, lpOverlapped=0x0) returned 1 [0202.897] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xb6e0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xb6e0, lpOverlapped=0x0) returned 1 [0202.899] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0202.900] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.900] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.900] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xb6de, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xb6de, lpOverlapped=0x0) returned 1 [0202.900] FlushFileBuffers (hFile=0x21c) returned 1 [0202.903] FlushFileBuffers (hFile=0x2fc) returned 1 [0202.912] CloseHandle (hObject=0x21c) returned 1 [0202.912] CloseHandle (hObject=0x2fc) returned 1 [0202.912] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00306_.wmf")) returned 1 [0202.913] SetEvent (hEvent=0x27c) returned 1 [0202.913] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00361_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0202.914] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=4074) returned 1 [0202.914] CloseHandle (hObject=0x2fc) returned 1 [0202.914] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00361_.wmf")) returned 0x220 [0202.914] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00361_.wmf")) returned 0x220 [0202.914] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00361_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.914] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00361_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0202.914] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.914] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0202.914] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00361_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0202.915] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xfea, lpOverlapped=0x0) returned 1 [0202.919] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xff0, lpOverlapped=0x0) returned 1 [0202.920] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0202.921] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.921] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0202.921] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xfea, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xfea, lpOverlapped=0x0) returned 1 [0202.921] FlushFileBuffers (hFile=0x2fc) returned 1 [0202.924] FlushFileBuffers (hFile=0x21c) returned 1 [0203.622] CloseHandle (hObject=0x2fc) returned 1 [0203.622] CloseHandle (hObject=0x21c) returned 1 [0203.622] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00361_.wmf")) returned 1 [0203.624] SetEvent (hEvent=0x27c) returned 1 [0203.624] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01193_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0203.626] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1160) returned 1 [0203.626] CloseHandle (hObject=0x21c) returned 1 [0203.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01193_.wmf")) returned 0x220 [0203.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01193_.wmf")) returned 0x220 [0203.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01193_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0203.626] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01193_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0203.626] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0203.626] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0203.626] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01193_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0203.627] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x488, lpOverlapped=0x0) returned 1 [0203.629] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x490, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x490, lpOverlapped=0x0) returned 1 [0203.630] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0203.630] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0203.631] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0203.631] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x488, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x488, lpOverlapped=0x0) returned 1 [0203.631] FlushFileBuffers (hFile=0x21c) returned 1 [0203.637] FlushFileBuffers (hFile=0x2fc) returned 1 [0203.649] CloseHandle (hObject=0x21c) returned 1 [0203.649] CloseHandle (hObject=0x2fc) returned 1 [0203.650] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01193_.wmf")) returned 1 [0203.651] SetEvent (hEvent=0x27c) returned 1 [0203.651] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01548_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0203.654] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=10316) returned 1 [0203.654] CloseHandle (hObject=0x2fc) returned 1 [0203.654] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01548_.wmf")) returned 0x220 [0203.654] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01548_.wmf")) returned 0x220 [0203.654] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01548_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0203.654] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01548_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0203.654] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0203.654] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0203.654] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01548_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0203.655] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x284c, lpOverlapped=0x0) returned 1 [0203.658] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2850, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2850, lpOverlapped=0x0) returned 1 [0203.659] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0203.660] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0203.660] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0203.660] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x284c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x284c, lpOverlapped=0x0) returned 1 [0203.660] FlushFileBuffers (hFile=0x2fc) returned 1 [0203.676] FlushFileBuffers (hFile=0x21c) returned 1 [0203.680] CloseHandle (hObject=0x2fc) returned 1 [0203.680] CloseHandle (hObject=0x21c) returned 1 [0203.680] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01548_.wmf")) returned 1 [0203.682] SetEvent (hEvent=0x27c) returned 1 [0203.682] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01658_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0203.683] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=17924) returned 1 [0203.683] CloseHandle (hObject=0x21c) returned 1 [0203.683] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01658_.wmf")) returned 0x220 [0203.683] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01658_.wmf")) returned 0x220 [0203.683] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01658_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0203.683] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01658_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0203.683] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0203.683] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0203.684] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01658_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0203.684] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4604, lpOverlapped=0x0) returned 1 [0203.687] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4610, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4610, lpOverlapped=0x0) returned 1 [0203.689] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0203.689] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0203.689] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0203.689] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4604, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4604, lpOverlapped=0x0) returned 1 [0203.689] FlushFileBuffers (hFile=0x21c) returned 1 [0203.698] FlushFileBuffers (hFile=0x2fc) returned 1 [0203.705] CloseHandle (hObject=0x21c) returned 1 [0203.705] CloseHandle (hObject=0x2fc) returned 1 [0203.705] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01658_.wmf")) returned 1 [0203.707] SetEvent (hEvent=0x27c) returned 1 [0203.707] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01660_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0203.708] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=12958) returned 1 [0203.708] CloseHandle (hObject=0x2fc) returned 1 [0203.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01660_.wmf")) returned 0x220 [0203.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01660_.wmf")) returned 0x220 [0203.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01660_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0203.708] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01660_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0203.709] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0203.709] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0203.709] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01660_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0203.710] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x329e, lpOverlapped=0x0) returned 1 [0203.712] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x32a0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x32a0, lpOverlapped=0x0) returned 1 [0203.714] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0203.714] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0203.714] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0203.714] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x329e, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x329e, lpOverlapped=0x0) returned 1 [0203.714] FlushFileBuffers (hFile=0x2fc) returned 1 [0203.718] FlushFileBuffers (hFile=0x21c) returned 1 [0203.735] CloseHandle (hObject=0x2fc) returned 1 [0203.736] CloseHandle (hObject=0x21c) returned 1 [0203.736] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01660_.wmf")) returned 1 [0203.737] SetEvent (hEvent=0x27c) returned 1 [0203.737] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02071_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0203.738] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2188) returned 1 [0203.738] CloseHandle (hObject=0x21c) returned 1 [0203.738] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02071_.wmf")) returned 0x220 [0203.738] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02071_.wmf")) returned 0x220 [0203.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02071_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0203.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02071_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0203.741] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0203.741] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0203.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02071_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0203.742] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x88c, lpOverlapped=0x0) returned 1 [0203.744] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x890, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x890, lpOverlapped=0x0) returned 1 [0203.745] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0203.745] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0203.745] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0203.745] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x88c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x88c, lpOverlapped=0x0) returned 1 [0203.746] FlushFileBuffers (hFile=0x21c) returned 1 [0203.756] FlushFileBuffers (hFile=0x2fc) returned 1 [0203.758] CloseHandle (hObject=0x21c) returned 1 [0203.758] CloseHandle (hObject=0x2fc) returned 1 [0203.758] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02071_.wmf")) returned 1 [0203.759] SetEvent (hEvent=0x27c) returned 1 [0203.759] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02088_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0203.760] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3696) returned 1 [0203.760] CloseHandle (hObject=0x2fc) returned 1 [0203.760] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02088_.wmf")) returned 0x220 [0203.760] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02088_.wmf")) returned 0x220 [0203.760] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02088_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0203.761] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02088_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0203.761] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0203.761] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0203.761] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02088_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0203.761] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xe70, lpOverlapped=0x0) returned 1 [0203.763] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xe80, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xe80, lpOverlapped=0x0) returned 1 [0203.764] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0203.765] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0203.765] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0203.765] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xe70, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xe70, lpOverlapped=0x0) returned 1 [0203.765] FlushFileBuffers (hFile=0x2fc) returned 1 [0203.774] FlushFileBuffers (hFile=0x21c) returned 1 [0203.776] CloseHandle (hObject=0x2fc) returned 1 [0203.776] CloseHandle (hObject=0x21c) returned 1 [0203.776] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02088_.wmf")) returned 1 [0203.777] SetEvent (hEvent=0x27c) returned 1 [0203.777] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02115_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0203.778] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=4660) returned 1 [0203.778] CloseHandle (hObject=0x21c) returned 1 [0203.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02115_.wmf")) returned 0x220 [0203.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02115_.wmf")) returned 0x220 [0203.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02115_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0203.778] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02115_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0203.778] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0203.778] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0203.778] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02115_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0203.779] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1234, lpOverlapped=0x0) returned 1 [0203.781] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1240, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1240, lpOverlapped=0x0) returned 1 [0203.782] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0203.782] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0203.782] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0203.782] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1234, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1234, lpOverlapped=0x0) returned 1 [0203.782] FlushFileBuffers (hFile=0x21c) returned 1 [0203.792] FlushFileBuffers (hFile=0x2fc) returned 1 [0203.794] CloseHandle (hObject=0x21c) returned 1 [0203.794] CloseHandle (hObject=0x2fc) returned 1 [0203.794] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02115_.wmf")) returned 1 [0203.795] SetEvent (hEvent=0x27c) returned 1 [0203.795] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02141_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0203.797] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2636) returned 1 [0203.797] CloseHandle (hObject=0x2fc) returned 1 [0203.797] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02141_.wmf")) returned 0x220 [0203.797] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02141_.wmf")) returned 0x220 [0203.797] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02141_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0203.797] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02141_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0203.797] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0203.797] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0203.797] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02141_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0203.798] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xa4c, lpOverlapped=0x0) returned 1 [0203.800] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xa50, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xa50, lpOverlapped=0x0) returned 1 [0203.801] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0203.801] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0203.801] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0203.801] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xa4c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xa4c, lpOverlapped=0x0) returned 1 [0203.801] FlushFileBuffers (hFile=0x2fc) returned 1 [0203.813] FlushFileBuffers (hFile=0x21c) returned 1 [0203.825] CloseHandle (hObject=0x2fc) returned 1 [0203.825] CloseHandle (hObject=0x21c) returned 1 [0203.825] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02141_.wmf")) returned 1 [0203.827] SetEvent (hEvent=0x27c) returned 1 [0203.827] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02153_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0203.828] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=5392) returned 1 [0203.828] CloseHandle (hObject=0x21c) returned 1 [0203.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02153_.wmf")) returned 0x220 [0203.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02153_.wmf")) returned 0x220 [0203.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02153_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0203.828] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02153_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0203.828] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0203.828] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0203.829] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02153_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0203.829] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1510, lpOverlapped=0x0) returned 1 [0203.843] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1520, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1520, lpOverlapped=0x0) returned 1 [0203.844] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0203.845] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0203.845] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0203.845] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1510, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1510, lpOverlapped=0x0) returned 1 [0203.845] FlushFileBuffers (hFile=0x21c) returned 1 [0203.866] FlushFileBuffers (hFile=0x2fc) returned 1 [0203.873] CloseHandle (hObject=0x21c) returned 1 [0203.873] CloseHandle (hObject=0x2fc) returned 1 [0203.873] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02153_.wmf")) returned 1 [0203.874] SetEvent (hEvent=0x27c) returned 1 [0203.874] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02158_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0203.875] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1648) returned 1 [0203.875] CloseHandle (hObject=0x2fc) returned 1 [0203.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02158_.wmf")) returned 0x220 [0203.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02158_.wmf")) returned 0x220 [0203.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02158_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0203.875] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02158_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0203.875] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0203.875] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0203.876] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02158_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0203.876] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x670, lpOverlapped=0x0) returned 1 [0203.878] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x680, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x680, lpOverlapped=0x0) returned 1 [0203.879] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0203.879] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0203.880] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0203.880] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x670, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x670, lpOverlapped=0x0) returned 1 [0203.880] FlushFileBuffers (hFile=0x2fc) returned 1 [0203.882] FlushFileBuffers (hFile=0x21c) returned 1 [0203.883] CloseHandle (hObject=0x2fc) returned 1 [0203.884] CloseHandle (hObject=0x21c) returned 1 [0203.884] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02158_.wmf")) returned 1 [0203.885] SetEvent (hEvent=0x27c) returned 1 [0203.885] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02161_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0203.886] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3128) returned 1 [0203.886] CloseHandle (hObject=0x21c) returned 1 [0203.886] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02161_.wmf")) returned 0x220 [0203.886] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02161_.wmf")) returned 0x220 [0203.886] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02161_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0203.886] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02161_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0203.886] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0203.886] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0203.886] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02161_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0203.887] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xc38, lpOverlapped=0x0) returned 1 [0203.889] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xc40, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xc40, lpOverlapped=0x0) returned 1 [0203.890] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0203.890] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0203.891] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0203.891] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xc38, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xc38, lpOverlapped=0x0) returned 1 [0203.891] FlushFileBuffers (hFile=0x21c) returned 1 [0203.893] FlushFileBuffers (hFile=0x2fc) returned 1 [0203.894] CloseHandle (hObject=0x21c) returned 1 [0203.894] CloseHandle (hObject=0x2fc) returned 1 [0203.897] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02161_.wmf")) returned 1 [0203.898] SetEvent (hEvent=0x27c) returned 1 [0203.898] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0203.899] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=12981) returned 1 [0203.899] CloseHandle (hObject=0x2fc) returned 1 [0203.899] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_01.mid")) returned 0x220 [0203.899] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_01.mid")) returned 0x220 [0203.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_01.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0203.900] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0203.900] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0203.900] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0203.900] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_01.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0203.901] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x32b5, lpOverlapped=0x0) returned 1 [0203.903] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x32c0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x32c0, lpOverlapped=0x0) returned 1 [0203.905] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0203.905] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0203.905] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0203.905] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x32b5, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x32b5, lpOverlapped=0x0) returned 1 [0203.905] FlushFileBuffers (hFile=0x2fc) returned 1 [0203.908] FlushFileBuffers (hFile=0x21c) returned 1 [0203.910] CloseHandle (hObject=0x2fc) returned 1 [0203.911] CloseHandle (hObject=0x21c) returned 1 [0203.911] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_01.mid")) returned 1 [0203.912] SetEvent (hEvent=0x27c) returned 1 [0203.912] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_02.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0203.913] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=9318) returned 1 [0203.913] CloseHandle (hObject=0x21c) returned 1 [0203.913] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_02.mid")) returned 0x220 [0203.913] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_02.mid")) returned 0x220 [0203.913] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_02.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0203.913] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_02.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0203.913] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0203.913] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0203.913] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_02.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0203.914] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2466, lpOverlapped=0x0) returned 1 [0203.916] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2470, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2470, lpOverlapped=0x0) returned 1 [0203.918] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0203.918] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0203.918] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0203.918] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2466, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2466, lpOverlapped=0x0) returned 1 [0203.918] FlushFileBuffers (hFile=0x21c) returned 1 [0203.951] FlushFileBuffers (hFile=0x2fc) returned 1 [0203.952] CloseHandle (hObject=0x21c) returned 1 [0203.952] CloseHandle (hObject=0x2fc) returned 1 [0203.953] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_02.mid")) returned 1 [0203.954] SetEvent (hEvent=0x27c) returned 1 [0203.954] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\flap.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0203.955] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2070) returned 1 [0203.955] CloseHandle (hObject=0x2fc) returned 1 [0203.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\flap.wmf")) returned 0x220 [0203.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\flap.wmf")) returned 0x220 [0203.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\flap.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0203.956] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\flap.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0203.956] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0203.956] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0203.956] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\flap.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0203.957] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x816, lpOverlapped=0x0) returned 1 [0203.959] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x820, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x820, lpOverlapped=0x0) returned 1 [0203.960] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0203.960] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0203.960] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0203.960] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x816, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x816, lpOverlapped=0x0) returned 1 [0203.960] FlushFileBuffers (hFile=0x2fc) returned 1 [0203.965] FlushFileBuffers (hFile=0x21c) returned 1 [0203.966] CloseHandle (hObject=0x2fc) returned 1 [0203.967] CloseHandle (hObject=0x21c) returned 1 [0203.967] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\flap.wmf")) returned 1 [0203.968] SetEvent (hEvent=0x27c) returned 1 [0203.968] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grden_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0203.969] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=7567) returned 1 [0203.969] CloseHandle (hObject=0x21c) returned 1 [0203.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grden_01.mid")) returned 0x220 [0203.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grden_01.mid")) returned 0x220 [0203.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grden_01.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0203.969] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grden_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0203.969] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0203.969] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0203.969] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grden_01.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0203.970] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1d8f, lpOverlapped=0x0) returned 1 [0203.972] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1d90, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1d90, lpOverlapped=0x0) returned 1 [0203.973] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0203.973] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0203.973] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0203.974] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1d8f, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1d8f, lpOverlapped=0x0) returned 1 [0203.974] FlushFileBuffers (hFile=0x21c) returned 1 [0203.976] FlushFileBuffers (hFile=0x2fc) returned 1 [0203.977] CloseHandle (hObject=0x21c) returned 1 [0203.977] CloseHandle (hObject=0x2fc) returned 1 [0203.977] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grden_01.mid")) returned 1 [0203.979] SetEvent (hEvent=0x27c) returned 1 [0203.979] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grid_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0203.979] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=6331) returned 1 [0203.980] CloseHandle (hObject=0x2fc) returned 1 [0203.980] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grid_01.mid")) returned 0x220 [0203.980] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grid_01.mid")) returned 0x220 [0203.980] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grid_01.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0203.980] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grid_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0203.980] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0203.980] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0203.980] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grid_01.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0203.981] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x18bb, lpOverlapped=0x0) returned 1 [0203.983] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x18c0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x18c0, lpOverlapped=0x0) returned 1 [0203.984] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0203.984] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0203.984] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0203.985] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x18bb, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x18bb, lpOverlapped=0x0) returned 1 [0203.985] FlushFileBuffers (hFile=0x2fc) returned 1 [0203.987] FlushFileBuffers (hFile=0x21c) returned 1 [0203.991] CloseHandle (hObject=0x2fc) returned 1 [0203.991] CloseHandle (hObject=0x21c) returned 1 [0203.992] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grid_01.mid")) returned 1 [0203.993] SetEvent (hEvent=0x27c) returned 1 [0203.993] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00057_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0203.994] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3764) returned 1 [0203.994] CloseHandle (hObject=0x21c) returned 1 [0203.994] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00057_.wmf")) returned 0x220 [0203.994] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00057_.wmf")) returned 0x220 [0203.994] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00057_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0203.994] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00057_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0203.994] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0203.994] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0203.994] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00057_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0203.995] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xeb4, lpOverlapped=0x0) returned 1 [0203.997] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xec0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xec0, lpOverlapped=0x0) returned 1 [0203.998] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0203.998] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0203.998] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0203.998] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xeb4, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xeb4, lpOverlapped=0x0) returned 1 [0203.999] FlushFileBuffers (hFile=0x21c) returned 1 [0204.004] FlushFileBuffers (hFile=0x2fc) returned 1 [0204.005] CloseHandle (hObject=0x21c) returned 1 [0204.005] CloseHandle (hObject=0x2fc) returned 1 [0204.006] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00057_.wmf")) returned 1 [0204.007] SetEvent (hEvent=0x27c) returned 1 [0204.007] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00084_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0204.008] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2472) returned 1 [0204.008] CloseHandle (hObject=0x2fc) returned 1 [0204.008] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00084_.wmf")) returned 0x220 [0204.008] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00084_.wmf")) returned 0x220 [0204.008] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00084_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0204.009] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00084_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0204.009] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0204.009] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0204.009] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00084_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0204.009] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x9a8, lpOverlapped=0x0) returned 1 [0204.011] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x9b0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x9b0, lpOverlapped=0x0) returned 1 [0204.012] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0204.012] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0204.012] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0204.012] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x9a8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x9a8, lpOverlapped=0x0) returned 1 [0204.013] FlushFileBuffers (hFile=0x2fc) returned 1 [0204.015] FlushFileBuffers (hFile=0x21c) returned 1 [0204.016] CloseHandle (hObject=0x2fc) returned 1 [0204.016] CloseHandle (hObject=0x21c) returned 1 [0204.016] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00084_.wmf")) returned 1 [0204.017] SetEvent (hEvent=0x27c) returned 1 [0204.017] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00231_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0204.019] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2232) returned 1 [0204.019] CloseHandle (hObject=0x21c) returned 1 [0204.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00231_.wmf")) returned 0x220 [0204.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00231_.wmf")) returned 0x220 [0204.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00231_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0204.019] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00231_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0204.019] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0204.019] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0204.019] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00231_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0204.020] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x8b8, lpOverlapped=0x0) returned 1 [0204.022] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x8c0, lpOverlapped=0x0) returned 1 [0204.023] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0204.023] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0204.023] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0204.023] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8b8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x8b8, lpOverlapped=0x0) returned 1 [0204.023] FlushFileBuffers (hFile=0x21c) returned 1 [0204.025] FlushFileBuffers (hFile=0x2fc) returned 1 [0204.027] CloseHandle (hObject=0x21c) returned 1 [0204.027] CloseHandle (hObject=0x2fc) returned 1 [0204.027] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00231_.wmf")) returned 1 [0204.028] SetEvent (hEvent=0x27c) returned 1 [0204.028] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00235_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0204.029] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1026) returned 1 [0204.029] CloseHandle (hObject=0x2fc) returned 1 [0204.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00235_.wmf")) returned 0x220 [0204.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00235_.wmf")) returned 0x220 [0204.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00235_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0204.029] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00235_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0204.029] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0204.029] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0204.029] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00235_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0204.030] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x402, lpOverlapped=0x0) returned 1 [0204.031] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x410, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x410, lpOverlapped=0x0) returned 1 [0204.032] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0204.033] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0204.033] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0204.033] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x402, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x402, lpOverlapped=0x0) returned 1 [0204.033] FlushFileBuffers (hFile=0x2fc) returned 1 [0204.035] FlushFileBuffers (hFile=0x21c) returned 1 [0204.036] CloseHandle (hObject=0x2fc) returned 1 [0204.036] CloseHandle (hObject=0x21c) returned 1 [0204.036] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00235_.wmf")) returned 1 [0204.037] SetEvent (hEvent=0x27c) returned 1 [0204.038] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00236_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0204.038] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3286) returned 1 [0204.038] CloseHandle (hObject=0x21c) returned 1 [0204.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00236_.wmf")) returned 0x220 [0204.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00236_.wmf")) returned 0x220 [0204.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00236_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0204.039] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00236_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0204.039] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0204.039] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0204.039] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00236_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0204.039] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xcd6, lpOverlapped=0x0) returned 1 [0204.041] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xce0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xce0, lpOverlapped=0x0) returned 1 [0204.042] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0204.042] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0204.042] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0204.042] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xcd6, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xcd6, lpOverlapped=0x0) returned 1 [0204.043] FlushFileBuffers (hFile=0x21c) returned 1 [0204.045] FlushFileBuffers (hFile=0x2fc) returned 1 [0204.046] CloseHandle (hObject=0x21c) returned 1 [0204.046] CloseHandle (hObject=0x2fc) returned 1 [0204.046] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00236_.wmf")) returned 1 [0204.047] SetEvent (hEvent=0x27c) returned 1 [0204.048] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00241_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0204.048] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1960) returned 1 [0204.048] CloseHandle (hObject=0x2fc) returned 1 [0204.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00241_.wmf")) returned 0x220 [0204.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00241_.wmf")) returned 0x220 [0204.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00241_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0204.049] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00241_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0204.049] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0204.049] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0204.049] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00241_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0204.050] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x7a8, lpOverlapped=0x0) returned 1 [0204.059] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7b0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x7b0, lpOverlapped=0x0) returned 1 [0204.061] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0204.061] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0204.061] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0204.061] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7a8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x7a8, lpOverlapped=0x0) returned 1 [0204.061] FlushFileBuffers (hFile=0x2fc) returned 1 [0204.068] FlushFileBuffers (hFile=0x21c) returned 1 [0204.070] CloseHandle (hObject=0x2fc) returned 1 [0204.070] CloseHandle (hObject=0x21c) returned 1 [0204.070] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00241_.wmf")) returned 1 [0204.071] SetEvent (hEvent=0x27c) returned 1 [0204.071] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00260_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0204.072] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3662) returned 1 [0204.072] CloseHandle (hObject=0x21c) returned 1 [0204.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00260_.wmf")) returned 0x220 [0204.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00260_.wmf")) returned 0x220 [0204.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00260_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0204.072] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00260_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0204.072] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0204.073] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0204.073] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00260_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0204.073] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xe4e, lpOverlapped=0x0) returned 1 [0204.075] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xe50, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xe50, lpOverlapped=0x0) returned 1 [0204.076] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0204.076] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0204.076] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0204.076] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xe4e, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xe4e, lpOverlapped=0x0) returned 1 [0204.076] FlushFileBuffers (hFile=0x21c) returned 1 [0204.078] FlushFileBuffers (hFile=0x2fc) returned 1 [0204.080] CloseHandle (hObject=0x21c) returned 1 [0204.080] CloseHandle (hObject=0x2fc) returned 1 [0204.080] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00260_.wmf")) returned 1 [0204.081] SetEvent (hEvent=0x27c) returned 1 [0204.081] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00276_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0204.082] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3016) returned 1 [0204.082] CloseHandle (hObject=0x2fc) returned 1 [0204.088] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00276_.wmf")) returned 0x220 [0204.088] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00276_.wmf")) returned 0x220 [0204.088] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00276_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0204.088] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00276_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0204.088] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0204.088] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0204.088] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00276_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0204.089] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xbc8, lpOverlapped=0x0) returned 1 [0204.584] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xbd0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xbd0, lpOverlapped=0x0) returned 1 [0204.587] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0204.587] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0204.587] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0204.587] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xbc8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xbc8, lpOverlapped=0x0) returned 1 [0204.587] FlushFileBuffers (hFile=0x2fc) returned 1 [0204.727] FlushFileBuffers (hFile=0x21c) returned 1 [0204.818] CloseHandle (hObject=0x2fc) returned 1 [0204.819] CloseHandle (hObject=0x21c) returned 1 [0204.819] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00276_.wmf")) returned 1 [0204.820] SetEvent (hEvent=0x27c) returned 1 [0204.820] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00513_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0204.820] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=818) returned 1 [0204.820] CloseHandle (hObject=0x21c) returned 1 [0204.820] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00513_.wmf")) returned 0x220 [0204.820] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00513_.wmf")) returned 0x220 [0204.820] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00513_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0204.820] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00513_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0204.821] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0204.821] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0204.821] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00513_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0204.825] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x332, lpOverlapped=0x0) returned 1 [0204.826] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x340, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x340, lpOverlapped=0x0) returned 1 [0204.827] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0204.828] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0204.828] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0204.828] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x332, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x332, lpOverlapped=0x0) returned 1 [0204.828] FlushFileBuffers (hFile=0x21c) returned 1 [0204.850] FlushFileBuffers (hFile=0x2fc) returned 1 [0204.853] CloseHandle (hObject=0x21c) returned 1 [0204.854] CloseHandle (hObject=0x2fc) returned 1 [0204.854] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00513_.wmf")) returned 1 [0204.855] SetEvent (hEvent=0x27c) returned 1 [0204.855] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00526_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0204.856] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=13538) returned 1 [0204.856] CloseHandle (hObject=0x2fc) returned 1 [0204.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00526_.wmf")) returned 0x220 [0204.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00526_.wmf")) returned 0x220 [0204.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00526_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0204.857] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00526_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0204.857] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0204.857] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0204.857] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00526_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0204.858] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x34e2, lpOverlapped=0x0) returned 1 [0204.863] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x34f0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x34f0, lpOverlapped=0x0) returned 1 [0204.865] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0204.865] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0204.865] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0204.865] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x34e2, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x34e2, lpOverlapped=0x0) returned 1 [0204.865] FlushFileBuffers (hFile=0x2fc) returned 1 [0204.870] FlushFileBuffers (hFile=0x21c) returned 1 [0204.872] CloseHandle (hObject=0x2fc) returned 1 [0204.872] CloseHandle (hObject=0x21c) returned 1 [0204.872] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00526_.wmf")) returned 1 [0204.874] SetEvent (hEvent=0x27c) returned 1 [0204.874] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00546_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0204.874] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3718) returned 1 [0204.874] CloseHandle (hObject=0x21c) returned 1 [0204.874] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00546_.wmf")) returned 0x220 [0204.874] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00546_.wmf")) returned 0x220 [0204.874] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00546_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0204.874] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00546_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0204.875] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0204.875] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0204.875] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00546_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0204.875] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xe86, lpOverlapped=0x0) returned 1 [0204.887] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xe90, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xe90, lpOverlapped=0x0) returned 1 [0204.888] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0204.888] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0204.888] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0204.888] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xe86, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xe86, lpOverlapped=0x0) returned 1 [0204.888] FlushFileBuffers (hFile=0x21c) returned 1 [0204.905] FlushFileBuffers (hFile=0x2fc) returned 1 [0204.907] CloseHandle (hObject=0x21c) returned 1 [0204.907] CloseHandle (hObject=0x2fc) returned 1 [0204.907] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00546_.wmf")) returned 1 [0204.908] SetEvent (hEvent=0x27c) returned 1 [0204.908] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00602_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0204.909] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1400) returned 1 [0204.909] CloseHandle (hObject=0x2fc) returned 1 [0204.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00602_.wmf")) returned 0x220 [0204.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00602_.wmf")) returned 0x220 [0204.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00602_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0204.909] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00602_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0204.909] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0204.909] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0204.909] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00602_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0204.911] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x578, lpOverlapped=0x0) returned 1 [0204.912] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x580, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x580, lpOverlapped=0x0) returned 1 [0204.913] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0204.913] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0204.914] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0204.914] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x578, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x578, lpOverlapped=0x0) returned 1 [0204.914] FlushFileBuffers (hFile=0x2fc) returned 1 [0204.916] FlushFileBuffers (hFile=0x21c) returned 1 [0204.922] CloseHandle (hObject=0x2fc) returned 1 [0204.922] CloseHandle (hObject=0x21c) returned 1 [0204.922] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00602_.wmf")) returned 1 [0204.923] SetEvent (hEvent=0x27c) returned 1 [0204.923] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00623_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0204.924] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=10644) returned 1 [0204.924] CloseHandle (hObject=0x21c) returned 1 [0204.924] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00623_.wmf")) returned 0x220 [0204.924] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00623_.wmf")) returned 0x220 [0204.924] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00623_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0204.924] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00623_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0204.924] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0204.924] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0204.924] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00623_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0204.925] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2994, lpOverlapped=0x0) returned 1 [0204.929] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x29a0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x29a0, lpOverlapped=0x0) returned 1 [0204.931] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0204.931] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0204.931] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0204.931] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2994, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2994, lpOverlapped=0x0) returned 1 [0204.931] FlushFileBuffers (hFile=0x21c) returned 1 [0204.934] FlushFileBuffers (hFile=0x2fc) returned 1 [0204.942] CloseHandle (hObject=0x21c) returned 1 [0204.942] CloseHandle (hObject=0x2fc) returned 1 [0204.942] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00623_.wmf")) returned 1 [0204.943] SetEvent (hEvent=0x27c) returned 1 [0204.943] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00636_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0204.944] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1568) returned 1 [0204.944] CloseHandle (hObject=0x2fc) returned 1 [0204.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00636_.wmf")) returned 0x220 [0204.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00636_.wmf")) returned 0x220 [0204.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00636_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0204.944] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00636_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0204.944] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0204.944] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0204.944] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00636_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0204.945] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x620, lpOverlapped=0x0) returned 1 [0204.948] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x630, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x630, lpOverlapped=0x0) returned 1 [0204.948] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0204.949] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0204.949] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0204.949] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x620, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x620, lpOverlapped=0x0) returned 1 [0204.949] FlushFileBuffers (hFile=0x2fc) returned 1 [0204.951] FlushFileBuffers (hFile=0x21c) returned 1 [0204.954] CloseHandle (hObject=0x2fc) returned 1 [0204.954] CloseHandle (hObject=0x21c) returned 1 [0204.954] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00636_.wmf")) returned 1 [0204.956] SetEvent (hEvent=0x27c) returned 1 [0204.956] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00681_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0204.958] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=9300) returned 1 [0204.958] CloseHandle (hObject=0x2fc) returned 1 [0204.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00681_.wmf")) returned 0x220 [0204.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00681_.wmf")) returned 0x220 [0204.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00681_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0204.959] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00681_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0204.959] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0204.959] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0204.959] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00681_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0204.960] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2454, lpOverlapped=0x0) returned 1 [0204.965] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2460, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2460, lpOverlapped=0x0) returned 1 [0204.966] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0204.966] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0204.967] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0204.967] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2454, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2454, lpOverlapped=0x0) returned 1 [0204.967] FlushFileBuffers (hFile=0x2b0) returned 1 [0204.970] FlushFileBuffers (hFile=0x2f4) returned 1 [0204.979] CloseHandle (hObject=0x2b0) returned 1 [0204.981] CloseHandle (hObject=0x2f4) returned 1 [0204.981] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00681_.wmf")) returned 1 [0204.982] SetEvent (hEvent=0x27c) returned 1 [0204.982] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00687_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0204.983] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=4340) returned 1 [0204.983] CloseHandle (hObject=0x2f4) returned 1 [0204.983] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00687_.wmf")) returned 0x220 [0204.983] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00687_.wmf")) returned 0x220 [0204.983] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00687_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0204.983] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00687_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0204.983] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0204.983] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0204.984] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00687_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0204.985] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x10f4, lpOverlapped=0x0) returned 1 [0204.987] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1100, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1100, lpOverlapped=0x0) returned 1 [0204.988] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0204.988] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0204.988] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0204.988] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x10f4, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x10f4, lpOverlapped=0x0) returned 1 [0204.988] FlushFileBuffers (hFile=0x2f4) returned 1 [0204.990] FlushFileBuffers (hFile=0x2b0) returned 1 [0204.992] CloseHandle (hObject=0x2f4) returned 1 [0204.992] CloseHandle (hObject=0x2b0) returned 1 [0204.992] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00687_.wmf")) returned 1 [0204.993] SetEvent (hEvent=0x27c) returned 1 [0204.993] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00688_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0204.993] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=7084) returned 1 [0204.993] CloseHandle (hObject=0x2b0) returned 1 [0204.993] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00688_.wmf")) returned 0x220 [0204.993] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00688_.wmf")) returned 0x220 [0204.993] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00688_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0204.994] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00688_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0204.994] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0204.994] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0204.994] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00688_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0204.994] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1bac, lpOverlapped=0x0) returned 1 [0204.996] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1bb0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1bb0, lpOverlapped=0x0) returned 1 [0204.997] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0204.997] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0204.997] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0204.997] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1bac, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1bac, lpOverlapped=0x0) returned 1 [0204.997] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.000] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.001] CloseHandle (hObject=0x2b0) returned 1 [0205.001] CloseHandle (hObject=0x2f4) returned 1 [0205.001] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00688_.wmf")) returned 1 [0205.009] SetEvent (hEvent=0x27c) returned 1 [0205.009] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00693_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.009] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=7098) returned 1 [0205.010] CloseHandle (hObject=0x2f4) returned 1 [0205.010] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00693_.wmf")) returned 0x220 [0205.010] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00693_.wmf")) returned 0x220 [0205.010] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00693_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.010] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00693_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.010] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.010] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.010] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00693_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0205.010] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1bba, lpOverlapped=0x0) returned 1 [0205.012] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1bc0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1bc0, lpOverlapped=0x0) returned 1 [0205.013] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.013] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.013] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.014] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1bba, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1bba, lpOverlapped=0x0) returned 1 [0205.014] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.016] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.017] CloseHandle (hObject=0x2f4) returned 1 [0205.017] CloseHandle (hObject=0x2b0) returned 1 [0205.017] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00693_.wmf")) returned 1 [0205.018] SetEvent (hEvent=0x27c) returned 1 [0205.019] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01013_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.019] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2848) returned 1 [0205.020] CloseHandle (hObject=0x2b0) returned 1 [0205.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01013_.wmf")) returned 0x220 [0205.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01013_.wmf")) returned 0x220 [0205.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01013_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.020] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01013_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.020] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.020] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.020] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01013_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0205.020] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xb20, lpOverlapped=0x0) returned 1 [0205.022] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xb30, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xb30, lpOverlapped=0x0) returned 1 [0205.023] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.023] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.023] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.023] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xb20, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xb20, lpOverlapped=0x0) returned 1 [0205.023] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.026] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.029] CloseHandle (hObject=0x2b0) returned 1 [0205.029] CloseHandle (hObject=0x2f4) returned 1 [0205.029] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01013_.wmf")) returned 1 [0205.030] SetEvent (hEvent=0x27c) returned 1 [0205.031] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01015_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.031] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1148) returned 1 [0205.031] CloseHandle (hObject=0x2f4) returned 1 [0205.031] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01015_.wmf")) returned 0x220 [0205.031] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01015_.wmf")) returned 0x220 [0205.031] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01015_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.031] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01015_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.031] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.031] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.031] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01015_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0205.032] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x47c, lpOverlapped=0x0) returned 1 [0205.034] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x480, lpOverlapped=0x0) returned 1 [0205.034] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.035] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.035] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.035] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x47c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x47c, lpOverlapped=0x0) returned 1 [0205.035] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.037] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.038] CloseHandle (hObject=0x2f4) returned 1 [0205.038] CloseHandle (hObject=0x2b0) returned 1 [0205.038] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01015_.wmf")) returned 1 [0205.039] SetEvent (hEvent=0x27c) returned 1 [0205.039] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01058_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.040] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2756) returned 1 [0205.040] CloseHandle (hObject=0x2b0) returned 1 [0205.041] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01058_.wmf")) returned 0x220 [0205.041] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01058_.wmf")) returned 0x220 [0205.041] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01058_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.041] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01058_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.041] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.041] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.041] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01058_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0205.041] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xac4, lpOverlapped=0x0) returned 1 [0205.043] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xad0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xad0, lpOverlapped=0x0) returned 1 [0205.044] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.044] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.044] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.044] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xac4, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xac4, lpOverlapped=0x0) returned 1 [0205.044] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.047] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.048] CloseHandle (hObject=0x2b0) returned 1 [0205.048] CloseHandle (hObject=0x2f4) returned 1 [0205.048] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01058_.wmf")) returned 1 [0205.049] SetEvent (hEvent=0x27c) returned 1 [0205.049] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01065_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.051] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1268) returned 1 [0205.051] CloseHandle (hObject=0x2f4) returned 1 [0205.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01065_.wmf")) returned 0x220 [0205.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01065_.wmf")) returned 0x220 [0205.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01065_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.051] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01065_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.051] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.051] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.051] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01065_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0205.052] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4f4, lpOverlapped=0x0) returned 1 [0205.053] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x500, lpOverlapped=0x0) returned 1 [0205.054] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.054] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.054] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.054] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4f4, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4f4, lpOverlapped=0x0) returned 1 [0205.055] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.057] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.058] CloseHandle (hObject=0x2f4) returned 1 [0205.058] CloseHandle (hObject=0x2b0) returned 1 [0205.058] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01065_.wmf")) returned 1 [0205.059] SetEvent (hEvent=0x27c) returned 1 [0205.060] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01080_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.060] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=5000) returned 1 [0205.060] CloseHandle (hObject=0x2b0) returned 1 [0205.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01080_.wmf")) returned 0x220 [0205.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01080_.wmf")) returned 0x220 [0205.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01080_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.060] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01080_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.060] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.061] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.061] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01080_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0205.061] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1388, lpOverlapped=0x0) returned 1 [0205.063] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1390, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1390, lpOverlapped=0x0) returned 1 [0205.064] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.064] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.064] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.064] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1388, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1388, lpOverlapped=0x0) returned 1 [0205.064] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.068] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.069] CloseHandle (hObject=0x2b0) returned 1 [0205.069] CloseHandle (hObject=0x2f4) returned 1 [0205.069] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01080_.wmf")) returned 1 [0205.070] SetEvent (hEvent=0x27c) returned 1 [0205.070] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01242_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.071] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=7340) returned 1 [0205.071] CloseHandle (hObject=0x2f4) returned 1 [0205.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01242_.wmf")) returned 0x220 [0205.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01242_.wmf")) returned 0x220 [0205.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01242_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.071] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01242_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.071] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.071] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.071] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01242_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0205.072] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1cac, lpOverlapped=0x0) returned 1 [0205.073] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1cb0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1cb0, lpOverlapped=0x0) returned 1 [0205.074] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.075] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.075] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.075] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1cac, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1cac, lpOverlapped=0x0) returned 1 [0205.075] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.078] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.079] CloseHandle (hObject=0x2f4) returned 1 [0205.079] CloseHandle (hObject=0x2b0) returned 1 [0205.079] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01242_.wmf")) returned 1 [0205.080] SetEvent (hEvent=0x27c) returned 1 [0205.080] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01291_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.080] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=15806) returned 1 [0205.081] CloseHandle (hObject=0x2b0) returned 1 [0205.081] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01291_.wmf")) returned 0x220 [0205.081] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01291_.wmf")) returned 0x220 [0205.081] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01291_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.081] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01291_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.081] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.081] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.081] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01291_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0205.082] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x3dbe, lpOverlapped=0x0) returned 1 [0205.083] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3dc0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3dc0, lpOverlapped=0x0) returned 1 [0205.085] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.085] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.085] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.085] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3dbe, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x3dbe, lpOverlapped=0x0) returned 1 [0205.085] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.087] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.089] CloseHandle (hObject=0x2b0) returned 1 [0205.089] CloseHandle (hObject=0x2f4) returned 1 [0205.089] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01291_.wmf")) returned 1 [0205.090] SetEvent (hEvent=0x27c) returned 1 [0205.090] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01329_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.090] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=6016) returned 1 [0205.090] CloseHandle (hObject=0x2f4) returned 1 [0205.090] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01329_.wmf")) returned 0x220 [0205.091] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01329_.wmf")) returned 0x220 [0205.091] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01329_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.091] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01329_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.091] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.091] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.091] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01329_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0205.091] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1780, lpOverlapped=0x0) returned 1 [0205.093] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1790, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1790, lpOverlapped=0x0) returned 1 [0205.094] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.094] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.094] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.094] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1780, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1780, lpOverlapped=0x0) returned 1 [0205.094] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.097] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.098] CloseHandle (hObject=0x2f4) returned 1 [0205.098] CloseHandle (hObject=0x2b0) returned 1 [0205.098] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01329_.wmf")) returned 1 [0205.099] SetEvent (hEvent=0x27c) returned 1 [0205.099] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01461_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.100] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=5958) returned 1 [0205.100] CloseHandle (hObject=0x2b0) returned 1 [0205.100] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01461_.wmf")) returned 0x220 [0205.100] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01461_.wmf")) returned 0x220 [0205.100] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01461_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.100] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01461_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.100] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.100] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.100] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01461_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0205.101] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1746, lpOverlapped=0x0) returned 1 [0205.102] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1750, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1750, lpOverlapped=0x0) returned 1 [0205.103] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.103] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.103] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.103] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1746, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1746, lpOverlapped=0x0) returned 1 [0205.104] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.106] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.107] CloseHandle (hObject=0x2b0) returned 1 [0205.107] CloseHandle (hObject=0x2f4) returned 1 [0205.107] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01461_.wmf")) returned 1 [0205.108] SetEvent (hEvent=0x27c) returned 1 [0205.108] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01618_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.108] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=7296) returned 1 [0205.108] CloseHandle (hObject=0x2f4) returned 1 [0205.109] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01618_.wmf")) returned 0x220 [0205.109] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01618_.wmf")) returned 0x220 [0205.109] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01618_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.109] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01618_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.109] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.109] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.109] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01618_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0205.109] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1c80, lpOverlapped=0x0) returned 1 [0205.111] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1c90, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1c90, lpOverlapped=0x0) returned 1 [0205.112] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.112] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.112] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.112] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1c80, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1c80, lpOverlapped=0x0) returned 1 [0205.112] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.114] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.116] CloseHandle (hObject=0x2f4) returned 1 [0205.116] CloseHandle (hObject=0x2b0) returned 1 [0205.116] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01618_.wmf")) returned 1 [0205.117] SetEvent (hEvent=0x27c) returned 1 [0205.117] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01759_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.118] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=5414) returned 1 [0205.118] CloseHandle (hObject=0x2b0) returned 1 [0205.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01759_.wmf")) returned 0x220 [0205.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01759_.wmf")) returned 0x220 [0205.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01759_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.118] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01759_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.118] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.118] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.118] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01759_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0205.119] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1526, lpOverlapped=0x0) returned 1 [0205.120] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1530, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1530, lpOverlapped=0x0) returned 1 [0205.121] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.121] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.121] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.121] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1526, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1526, lpOverlapped=0x0) returned 1 [0205.121] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.124] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.131] CloseHandle (hObject=0x2b0) returned 1 [0205.131] CloseHandle (hObject=0x2f4) returned 1 [0205.131] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01759_.wmf")) returned 1 [0205.132] SetEvent (hEvent=0x27c) returned 1 [0205.132] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01875_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.132] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2616) returned 1 [0205.132] CloseHandle (hObject=0x2f4) returned 1 [0205.132] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01875_.wmf")) returned 0x220 [0205.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01875_.wmf")) returned 0x220 [0205.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01875_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.133] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01875_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.133] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.133] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.133] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01875_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0205.133] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xa38, lpOverlapped=0x0) returned 1 [0205.135] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xa40, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xa40, lpOverlapped=0x0) returned 1 [0205.136] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.136] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.136] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.136] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xa38, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xa38, lpOverlapped=0x0) returned 1 [0205.136] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.139] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.140] CloseHandle (hObject=0x2f4) returned 1 [0205.140] CloseHandle (hObject=0x2b0) returned 1 [0205.140] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01875_.wmf")) returned 1 [0205.141] SetEvent (hEvent=0x27c) returned 1 [0205.141] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01923_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.141] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=26706) returned 1 [0205.141] CloseHandle (hObject=0x2b0) returned 1 [0205.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01923_.wmf")) returned 0x220 [0205.142] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01923_.wmf")) returned 0x220 [0205.142] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01923_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.142] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01923_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.142] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.142] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.142] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01923_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0205.142] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x6852, lpOverlapped=0x0) returned 1 [0205.145] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x6860, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x6860, lpOverlapped=0x0) returned 1 [0205.146] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.146] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.146] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.146] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x6852, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x6852, lpOverlapped=0x0) returned 1 [0205.147] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.149] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.150] CloseHandle (hObject=0x2b0) returned 1 [0205.150] CloseHandle (hObject=0x2f4) returned 1 [0205.150] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01923_.wmf")) returned 1 [0205.151] SetEvent (hEvent=0x27c) returned 1 [0205.151] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02155_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.152] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2704) returned 1 [0205.152] CloseHandle (hObject=0x2f4) returned 1 [0205.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02155_.wmf")) returned 0x220 [0205.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02155_.wmf")) returned 0x220 [0205.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02155_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.152] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02155_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.152] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.152] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.152] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02155_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0205.153] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xa90, lpOverlapped=0x0) returned 1 [0205.154] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xaa0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xaa0, lpOverlapped=0x0) returned 1 [0205.155] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.155] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.155] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.155] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xa90, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xa90, lpOverlapped=0x0) returned 1 [0205.155] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.159] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.160] CloseHandle (hObject=0x2f4) returned 1 [0205.160] CloseHandle (hObject=0x2b0) returned 1 [0205.161] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02155_.wmf")) returned 1 [0205.161] SetEvent (hEvent=0x27c) returned 1 [0205.162] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02166_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.162] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1324) returned 1 [0205.162] CloseHandle (hObject=0x2b0) returned 1 [0205.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02166_.wmf")) returned 0x220 [0205.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02166_.wmf")) returned 0x220 [0205.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02166_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.163] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02166_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.163] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.163] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.163] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02166_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0205.163] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x52c, lpOverlapped=0x0) returned 1 [0205.165] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x530, lpOverlapped=0x0) returned 1 [0205.166] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.166] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.166] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.166] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x52c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x52c, lpOverlapped=0x0) returned 1 [0205.166] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.169] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.170] CloseHandle (hObject=0x2b0) returned 1 [0205.170] CloseHandle (hObject=0x2f4) returned 1 [0205.170] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02166_.wmf")) returned 1 [0205.171] SetEvent (hEvent=0x27c) returned 1 [0205.171] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02282_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.171] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=7932) returned 1 [0205.171] CloseHandle (hObject=0x2f4) returned 1 [0205.171] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02282_.wmf")) returned 0x220 [0205.172] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02282_.wmf")) returned 0x220 [0205.172] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02282_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.172] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02282_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.172] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.172] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.172] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02282_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0205.172] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1efc, lpOverlapped=0x0) returned 1 [0205.174] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1f00, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1f00, lpOverlapped=0x0) returned 1 [0205.175] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.175] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.175] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.175] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1efc, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1efc, lpOverlapped=0x0) returned 1 [0205.175] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.177] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.179] CloseHandle (hObject=0x2f4) returned 1 [0205.179] CloseHandle (hObject=0x2b0) returned 1 [0205.179] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02282_.wmf")) returned 1 [0205.180] SetEvent (hEvent=0x27c) returned 1 [0205.180] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02298_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.181] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=5552) returned 1 [0205.181] CloseHandle (hObject=0x2b0) returned 1 [0205.181] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02298_.wmf")) returned 0x220 [0205.181] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02298_.wmf")) returned 0x220 [0205.181] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02298_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.181] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02298_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.181] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.181] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.181] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02298_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0205.182] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x15b0, lpOverlapped=0x0) returned 1 [0205.183] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x15c0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x15c0, lpOverlapped=0x0) returned 1 [0205.184] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.184] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.185] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.185] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x15b0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x15b0, lpOverlapped=0x0) returned 1 [0205.185] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.187] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.188] CloseHandle (hObject=0x2b0) returned 1 [0205.188] CloseHandle (hObject=0x2f4) returned 1 [0205.188] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02298_.wmf")) returned 1 [0205.189] SetEvent (hEvent=0x27c) returned 1 [0205.189] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02312_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.189] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=4970) returned 1 [0205.190] CloseHandle (hObject=0x2f4) returned 1 [0205.190] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02312_.wmf")) returned 0x220 [0205.190] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02312_.wmf")) returned 0x220 [0205.190] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02312_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.190] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02312_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.190] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.190] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.190] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02312_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0205.191] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x136a, lpOverlapped=0x0) returned 1 [0205.192] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1370, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1370, lpOverlapped=0x0) returned 1 [0205.193] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.193] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.194] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.194] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x136a, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x136a, lpOverlapped=0x0) returned 1 [0205.194] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.196] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.197] CloseHandle (hObject=0x2f4) returned 1 [0205.197] CloseHandle (hObject=0x2b0) returned 1 [0205.197] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02312_.wmf")) returned 1 [0205.198] SetEvent (hEvent=0x27c) returned 1 [0205.198] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02313_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.199] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3082) returned 1 [0205.199] CloseHandle (hObject=0x2b0) returned 1 [0205.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02313_.wmf")) returned 0x220 [0205.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02313_.wmf")) returned 0x220 [0205.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02313_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.199] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02313_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.199] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.200] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.200] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02313_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0205.200] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xc0a, lpOverlapped=0x0) returned 1 [0205.202] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xc10, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xc10, lpOverlapped=0x0) returned 1 [0205.203] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.203] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.203] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.203] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xc0a, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xc0a, lpOverlapped=0x0) returned 1 [0205.203] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.208] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.210] CloseHandle (hObject=0x2b0) returned 1 [0205.210] CloseHandle (hObject=0x2f4) returned 1 [0205.210] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02313_.wmf")) returned 1 [0205.211] SetEvent (hEvent=0x27c) returned 1 [0205.211] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00005_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.212] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=23300) returned 1 [0205.212] CloseHandle (hObject=0x2f4) returned 1 [0205.212] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00005_.wmf")) returned 0x220 [0205.212] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00005_.wmf")) returned 0x220 [0205.212] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00005_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.212] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00005_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.212] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.212] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.212] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00005_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0205.213] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x5b04, lpOverlapped=0x0) returned 1 [0205.215] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5b10, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x5b10, lpOverlapped=0x0) returned 1 [0205.217] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.217] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.217] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.217] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5b04, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x5b04, lpOverlapped=0x0) returned 1 [0205.217] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.219] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.220] CloseHandle (hObject=0x2f4) returned 1 [0205.220] CloseHandle (hObject=0x2b0) returned 1 [0205.220] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00005_.wmf")) returned 1 [0205.221] SetEvent (hEvent=0x27c) returned 1 [0205.222] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00114_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.223] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=22116) returned 1 [0205.223] CloseHandle (hObject=0x2b0) returned 1 [0205.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00114_.wmf")) returned 0x220 [0205.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00114_.wmf")) returned 0x220 [0205.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00114_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.223] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00114_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.223] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.223] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.223] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00114_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0205.224] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x5664, lpOverlapped=0x0) returned 1 [0205.226] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5670, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x5670, lpOverlapped=0x0) returned 1 [0205.227] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.228] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.228] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.228] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5664, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x5664, lpOverlapped=0x0) returned 1 [0205.228] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.231] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.232] CloseHandle (hObject=0x2b0) returned 1 [0205.232] CloseHandle (hObject=0x2f4) returned 1 [0205.232] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00114_.wmf")) returned 1 [0205.233] SetEvent (hEvent=0x27c) returned 1 [0205.233] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00116_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.234] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=15852) returned 1 [0205.234] CloseHandle (hObject=0x2f4) returned 1 [0205.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00116_.wmf")) returned 0x220 [0205.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00116_.wmf")) returned 0x220 [0205.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00116_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.234] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00116_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.234] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.234] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.234] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00116_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0205.235] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x3dec, lpOverlapped=0x0) returned 1 [0205.237] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3df0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3df0, lpOverlapped=0x0) returned 1 [0205.238] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.239] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.239] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.239] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3dec, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x3dec, lpOverlapped=0x0) returned 1 [0205.239] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.242] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.243] CloseHandle (hObject=0x2f4) returned 1 [0205.243] CloseHandle (hObject=0x2b0) returned 1 [0205.243] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00116_.wmf")) returned 1 [0205.244] SetEvent (hEvent=0x27c) returned 1 [0205.244] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00172_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.245] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2832) returned 1 [0205.245] CloseHandle (hObject=0x2b0) returned 1 [0205.246] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00172_.wmf")) returned 0x220 [0205.246] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00172_.wmf")) returned 0x220 [0205.246] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00172_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.246] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00172_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.246] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.246] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.246] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00172_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0205.247] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xb10, lpOverlapped=0x0) returned 1 [0205.248] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xb20, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xb20, lpOverlapped=0x0) returned 1 [0205.249] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.249] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.249] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.249] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xb10, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xb10, lpOverlapped=0x0) returned 1 [0205.250] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.252] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.253] CloseHandle (hObject=0x2b0) returned 1 [0205.253] CloseHandle (hObject=0x2f4) returned 1 [0205.253] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00172_.wmf")) returned 1 [0205.254] SetEvent (hEvent=0x27c) returned 1 [0205.254] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00426_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.255] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=68776) returned 1 [0205.255] CloseHandle (hObject=0x2f4) returned 1 [0205.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00426_.wmf")) returned 0x220 [0205.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00426_.wmf")) returned 0x220 [0205.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00426_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.255] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00426_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.255] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.255] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.255] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00426_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0205.256] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x10ca8, lpOverlapped=0x0) returned 1 [0205.259] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x10cb0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x10cb0, lpOverlapped=0x0) returned 1 [0205.261] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.262] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.262] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.262] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x10ca8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x10ca8, lpOverlapped=0x0) returned 1 [0205.262] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.265] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.266] CloseHandle (hObject=0x2f4) returned 1 [0205.267] CloseHandle (hObject=0x2b0) returned 1 [0205.267] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00426_.wmf")) returned 1 [0205.269] SetEvent (hEvent=0x27c) returned 1 [0205.270] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\htech_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.271] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=7178) returned 1 [0205.271] CloseHandle (hObject=0x2b0) returned 1 [0205.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\htech_01.mid")) returned 0x220 [0205.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\htech_01.mid")) returned 0x220 [0205.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\htech_01.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.272] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\htech_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.272] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.272] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.272] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\htech_01.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0205.272] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1c0a, lpOverlapped=0x0) returned 1 [0205.274] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1c10, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1c10, lpOverlapped=0x0) returned 1 [0205.275] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.276] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.276] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.276] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1c0a, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1c0a, lpOverlapped=0x0) returned 1 [0205.276] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.279] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.280] CloseHandle (hObject=0x2b0) returned 1 [0205.280] CloseHandle (hObject=0x2f4) returned 1 [0205.280] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\htech_01.mid")) returned 1 [0205.282] SetEvent (hEvent=0x27c) returned 1 [0205.282] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00046_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.283] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1158) returned 1 [0205.283] CloseHandle (hObject=0x2f4) returned 1 [0205.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00046_.wmf")) returned 0x220 [0205.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00046_.wmf")) returned 0x220 [0205.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00046_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.284] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00046_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.284] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.284] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.284] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00046_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0205.284] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x486, lpOverlapped=0x0) returned 1 [0205.287] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x490, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x490, lpOverlapped=0x0) returned 1 [0205.289] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.289] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.289] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.289] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x486, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x486, lpOverlapped=0x0) returned 1 [0205.289] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.291] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.294] CloseHandle (hObject=0x2f4) returned 1 [0205.294] CloseHandle (hObject=0x2b0) returned 1 [0205.294] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00046_.wmf")) returned 1 [0205.295] SetEvent (hEvent=0x27c) returned 1 [0205.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00118_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.296] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=792) returned 1 [0205.296] CloseHandle (hObject=0x2b0) returned 1 [0205.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00118_.wmf")) returned 0x220 [0205.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00118_.wmf")) returned 0x220 [0205.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00118_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.296] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00118_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.296] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.297] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.297] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00118_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0205.297] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x318, lpOverlapped=0x0) returned 1 [0205.300] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x320, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x320, lpOverlapped=0x0) returned 1 [0205.301] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.301] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.301] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.301] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x318, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x318, lpOverlapped=0x0) returned 1 [0205.301] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.303] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.305] CloseHandle (hObject=0x2b0) returned 1 [0205.305] CloseHandle (hObject=0x2f4) returned 1 [0205.305] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00118_.wmf")) returned 1 [0205.306] SetEvent (hEvent=0x27c) returned 1 [0205.306] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00177_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.306] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1074) returned 1 [0205.306] CloseHandle (hObject=0x2f4) returned 1 [0205.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00177_.wmf")) returned 0x220 [0205.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00177_.wmf")) returned 0x220 [0205.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00177_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.307] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00177_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.307] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.307] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.307] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00177_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0205.307] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x432, lpOverlapped=0x0) returned 1 [0205.309] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x440, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x440, lpOverlapped=0x0) returned 1 [0205.310] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.310] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.311] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.311] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x432, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x432, lpOverlapped=0x0) returned 1 [0205.311] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.314] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.315] CloseHandle (hObject=0x2f4) returned 1 [0205.315] CloseHandle (hObject=0x2b0) returned 1 [0205.316] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00177_.wmf")) returned 1 [0205.316] SetEvent (hEvent=0x27c) returned 1 [0205.317] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00204_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.317] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1848) returned 1 [0205.317] CloseHandle (hObject=0x2b0) returned 1 [0205.317] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00204_.wmf")) returned 0x220 [0205.317] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00204_.wmf")) returned 0x220 [0205.317] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00204_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.317] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00204_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.318] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.318] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.318] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00204_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0205.318] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x738, lpOverlapped=0x0) returned 1 [0205.320] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x740, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x740, lpOverlapped=0x0) returned 1 [0205.321] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.321] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.321] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.321] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x738, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x738, lpOverlapped=0x0) returned 1 [0205.321] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.323] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.325] CloseHandle (hObject=0x2b0) returned 1 [0205.325] CloseHandle (hObject=0x2f4) returned 1 [0205.325] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00204_.wmf")) returned 1 [0205.326] SetEvent (hEvent=0x27c) returned 1 [0205.326] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00233_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.326] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=11190) returned 1 [0205.326] CloseHandle (hObject=0x2f4) returned 1 [0205.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00233_.wmf")) returned 0x220 [0205.327] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00233_.wmf")) returned 0x220 [0205.327] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00233_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.327] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00233_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.327] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.327] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.327] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00233_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0205.328] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2bb6, lpOverlapped=0x0) returned 1 [0205.329] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2bc0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2bc0, lpOverlapped=0x0) returned 1 [0205.330] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.330] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.331] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.331] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2bb6, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2bb6, lpOverlapped=0x0) returned 1 [0205.331] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.333] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.334] CloseHandle (hObject=0x2f4) returned 1 [0205.334] CloseHandle (hObject=0x2b0) returned 1 [0205.334] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00233_.wmf")) returned 1 [0205.335] SetEvent (hEvent=0x27c) returned 1 [0205.335] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00343_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.336] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1892) returned 1 [0205.336] CloseHandle (hObject=0x2b0) returned 1 [0205.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00343_.wmf")) returned 0x220 [0205.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00343_.wmf")) returned 0x220 [0205.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00343_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.337] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00343_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.337] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.337] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.337] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00343_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0205.338] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x764, lpOverlapped=0x0) returned 1 [0205.339] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x770, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x770, lpOverlapped=0x0) returned 1 [0205.340] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.340] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.340] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.340] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x764, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x764, lpOverlapped=0x0) returned 1 [0205.341] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.343] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.344] CloseHandle (hObject=0x2b0) returned 1 [0205.344] CloseHandle (hObject=0x2f4) returned 1 [0205.344] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00343_.wmf")) returned 1 [0205.345] SetEvent (hEvent=0x27c) returned 1 [0205.345] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00346_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.345] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=696) returned 1 [0205.345] CloseHandle (hObject=0x2f4) returned 1 [0205.345] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00346_.wmf")) returned 0x220 [0205.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00346_.wmf")) returned 0x220 [0205.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00346_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.346] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00346_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.346] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.346] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.346] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00346_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0205.347] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2b8, lpOverlapped=0x0) returned 1 [0205.347] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2c0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2c0, lpOverlapped=0x0) returned 1 [0205.348] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.349] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.349] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.349] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2b8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2b8, lpOverlapped=0x0) returned 1 [0205.349] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.351] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.352] CloseHandle (hObject=0x2f4) returned 1 [0205.352] CloseHandle (hObject=0x2b0) returned 1 [0205.352] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00346_.wmf")) returned 1 [0205.353] SetEvent (hEvent=0x27c) returned 1 [0205.353] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00351_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.354] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1928) returned 1 [0205.354] CloseHandle (hObject=0x2b0) returned 1 [0205.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00351_.wmf")) returned 0x220 [0205.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00351_.wmf")) returned 0x220 [0205.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00351_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.354] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00351_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.354] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.354] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.354] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00351_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0205.355] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x788, lpOverlapped=0x0) returned 1 [0205.356] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x790, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x790, lpOverlapped=0x0) returned 1 [0205.357] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.357] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.357] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.357] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x788, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x788, lpOverlapped=0x0) returned 1 [0205.358] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.360] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.361] CloseHandle (hObject=0x2b0) returned 1 [0205.361] CloseHandle (hObject=0x2f4) returned 1 [0205.361] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00351_.wmf")) returned 1 [0205.362] SetEvent (hEvent=0x27c) returned 1 [0205.362] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00557_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.363] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=9172) returned 1 [0205.363] CloseHandle (hObject=0x2f4) returned 1 [0205.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00557_.wmf")) returned 0x220 [0205.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00557_.wmf")) returned 0x220 [0205.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00557_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.363] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00557_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.363] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.363] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.363] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00557_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0205.364] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x23d4, lpOverlapped=0x0) returned 1 [0205.365] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x23e0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x23e0, lpOverlapped=0x0) returned 1 [0205.366] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.367] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.367] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.367] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x23d4, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x23d4, lpOverlapped=0x0) returned 1 [0205.367] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.369] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.371] CloseHandle (hObject=0x2f4) returned 1 [0205.371] CloseHandle (hObject=0x2b0) returned 1 [0205.371] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00557_.wmf")) returned 1 [0205.372] SetEvent (hEvent=0x27c) returned 1 [0205.372] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00915_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.373] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=12748) returned 1 [0205.373] CloseHandle (hObject=0x2b0) returned 1 [0205.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00915_.wmf")) returned 0x220 [0205.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00915_.wmf")) returned 0x220 [0205.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00915_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.374] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00915_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.374] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.374] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.374] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00915_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0205.374] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x31cc, lpOverlapped=0x0) returned 1 [0205.376] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x31d0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x31d0, lpOverlapped=0x0) returned 1 [0205.378] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.378] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.378] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.378] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x31cc, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x31cc, lpOverlapped=0x0) returned 1 [0205.378] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.380] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.382] CloseHandle (hObject=0x2b0) returned 1 [0205.382] CloseHandle (hObject=0x2f4) returned 1 [0205.382] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00915_.wmf")) returned 1 [0205.383] SetEvent (hEvent=0x27c) returned 1 [0205.383] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00919_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.383] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=6920) returned 1 [0205.383] CloseHandle (hObject=0x2f4) returned 1 [0205.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00919_.wmf")) returned 0x220 [0205.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00919_.wmf")) returned 0x220 [0205.384] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00919_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.384] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00919_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.384] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.384] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.384] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00919_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0205.384] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1b08, lpOverlapped=0x0) returned 1 [0205.386] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1b10, lpOverlapped=0x0) returned 1 [0205.387] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.387] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.387] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.387] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1b08, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1b08, lpOverlapped=0x0) returned 1 [0205.387] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.389] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.390] CloseHandle (hObject=0x2f4) returned 1 [0205.390] CloseHandle (hObject=0x2b0) returned 1 [0205.390] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00919_.wmf")) returned 1 [0205.391] SetEvent (hEvent=0x27c) returned 1 [0205.391] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00956_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.392] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1256) returned 1 [0205.392] CloseHandle (hObject=0x2b0) returned 1 [0205.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00956_.wmf")) returned 0x220 [0205.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00956_.wmf")) returned 0x220 [0205.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00956_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.392] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00956_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.392] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.392] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.392] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00956_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0205.393] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4e8, lpOverlapped=0x0) returned 1 [0205.394] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4f0, lpOverlapped=0x0) returned 1 [0205.395] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.396] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.396] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.396] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4e8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4e8, lpOverlapped=0x0) returned 1 [0205.396] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.398] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.399] CloseHandle (hObject=0x2b0) returned 1 [0205.399] CloseHandle (hObject=0x2f4) returned 1 [0205.399] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00956_.wmf")) returned 1 [0205.400] SetEvent (hEvent=0x27c) returned 1 [0205.400] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00957_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.401] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2944) returned 1 [0205.401] CloseHandle (hObject=0x2f4) returned 1 [0205.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00957_.wmf")) returned 0x220 [0205.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00957_.wmf")) returned 0x220 [0205.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00957_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.401] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00957_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.401] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.401] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.401] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00957_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0205.402] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xb80, lpOverlapped=0x0) returned 1 [0205.456] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xb90, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xb90, lpOverlapped=0x0) returned 1 [0205.457] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.458] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.458] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.458] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xb80, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xb80, lpOverlapped=0x0) returned 1 [0205.458] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.487] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.491] CloseHandle (hObject=0x2f4) returned 1 [0205.491] CloseHandle (hObject=0x2b0) returned 1 [0205.491] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00957_.wmf")) returned 1 [0205.492] SetEvent (hEvent=0x27c) returned 1 [0205.492] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\indst_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.493] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=8568) returned 1 [0205.493] CloseHandle (hObject=0x2b0) returned 1 [0205.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\indst_01.mid")) returned 0x220 [0205.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\indst_01.mid")) returned 0x220 [0205.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\indst_01.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.493] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\indst_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.493] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.493] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.494] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\indst_01.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0205.494] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2178, lpOverlapped=0x0) returned 1 [0205.496] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2180, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2180, lpOverlapped=0x0) returned 1 [0205.497] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.498] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.498] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.498] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2178, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2178, lpOverlapped=0x0) returned 1 [0205.498] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.515] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.516] CloseHandle (hObject=0x2b0) returned 1 [0205.517] CloseHandle (hObject=0x2f4) returned 1 [0205.517] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\indst_01.mid")) returned 1 [0205.518] SetEvent (hEvent=0x27c) returned 1 [0205.518] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0075478.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.519] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1220) returned 1 [0205.519] CloseHandle (hObject=0x2f4) returned 1 [0205.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0075478.gif")) returned 0x220 [0205.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0075478.gif")) returned 0x220 [0205.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0075478.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.519] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0075478.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.519] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.519] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.519] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0075478.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0205.520] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4c4, lpOverlapped=0x0) returned 1 [0205.521] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4d0, lpOverlapped=0x0) returned 1 [0205.535] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.535] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.535] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.535] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4c4, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4c4, lpOverlapped=0x0) returned 1 [0205.535] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.539] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.541] CloseHandle (hObject=0x2f4) returned 1 [0205.541] CloseHandle (hObject=0x2b0) returned 1 [0205.541] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0075478.gif")) returned 1 [0205.542] SetEvent (hEvent=0x27c) returned 1 [0205.542] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086384.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.543] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=9734) returned 1 [0205.543] CloseHandle (hObject=0x2b0) returned 1 [0205.543] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086384.wmf")) returned 0x220 [0205.543] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086384.wmf")) returned 0x220 [0205.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086384.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.544] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086384.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.544] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.544] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.544] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086384.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0205.545] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2606, lpOverlapped=0x0) returned 1 [0205.546] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2610, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2610, lpOverlapped=0x0) returned 1 [0205.547] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.548] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.548] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.548] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2606, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2606, lpOverlapped=0x0) returned 1 [0205.548] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.550] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.551] CloseHandle (hObject=0x2b0) returned 1 [0205.552] CloseHandle (hObject=0x2f4) returned 1 [0205.552] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086384.wmf")) returned 1 [0205.553] SetEvent (hEvent=0x27c) returned 1 [0205.553] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086420.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.553] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=9596) returned 1 [0205.553] CloseHandle (hObject=0x2f4) returned 1 [0205.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086420.wmf")) returned 0x220 [0205.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086420.wmf")) returned 0x220 [0205.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086420.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.554] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086420.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.554] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.554] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.554] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086420.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0205.555] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x257c, lpOverlapped=0x0) returned 1 [0205.556] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2580, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2580, lpOverlapped=0x0) returned 1 [0205.557] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.558] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.558] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.558] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x257c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x257c, lpOverlapped=0x0) returned 1 [0205.558] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.560] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.562] CloseHandle (hObject=0x2f4) returned 1 [0205.562] CloseHandle (hObject=0x2b0) returned 1 [0205.562] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086420.wmf")) returned 1 [0205.563] SetEvent (hEvent=0x27c) returned 1 [0205.563] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086424.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.564] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=17016) returned 1 [0205.564] CloseHandle (hObject=0x2b0) returned 1 [0205.564] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086424.wmf")) returned 0x220 [0205.564] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086424.wmf")) returned 0x220 [0205.564] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086424.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.564] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086424.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.564] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.564] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.565] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086424.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0205.565] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4278, lpOverlapped=0x0) returned 1 [0205.567] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4280, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4280, lpOverlapped=0x0) returned 1 [0205.569] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.569] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.569] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.569] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4278, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4278, lpOverlapped=0x0) returned 1 [0205.569] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.574] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.576] CloseHandle (hObject=0x2b0) returned 1 [0205.576] CloseHandle (hObject=0x2f4) returned 1 [0205.576] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086424.wmf")) returned 1 [0205.577] SetEvent (hEvent=0x27c) returned 1 [0205.577] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086426.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.578] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=21782) returned 1 [0205.578] CloseHandle (hObject=0x2f4) returned 1 [0205.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086426.wmf")) returned 0x220 [0205.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086426.wmf")) returned 0x220 [0205.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086426.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.578] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086426.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.578] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.578] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.579] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086426.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0205.579] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x5516, lpOverlapped=0x0) returned 1 [0205.581] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5520, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x5520, lpOverlapped=0x0) returned 1 [0205.583] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.583] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.583] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.583] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5516, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x5516, lpOverlapped=0x0) returned 1 [0205.583] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.586] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.587] CloseHandle (hObject=0x2f4) returned 1 [0205.587] CloseHandle (hObject=0x2b0) returned 1 [0205.587] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086426.wmf")) returned 1 [0205.588] SetEvent (hEvent=0x27c) returned 1 [0205.588] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086428.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.589] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=35346) returned 1 [0205.589] CloseHandle (hObject=0x2b0) returned 1 [0205.589] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086428.wmf")) returned 0x220 [0205.589] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086428.wmf")) returned 0x220 [0205.589] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086428.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.589] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086428.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.589] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.589] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.589] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086428.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0205.590] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x8a12, lpOverlapped=0x0) returned 1 [0205.593] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8a20, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x8a20, lpOverlapped=0x0) returned 1 [0205.595] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.595] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.595] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.595] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8a12, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x8a12, lpOverlapped=0x0) returned 1 [0205.595] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.598] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.599] CloseHandle (hObject=0x2b0) returned 1 [0205.599] CloseHandle (hObject=0x2f4) returned 1 [0205.599] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086428.wmf")) returned 1 [0205.600] SetEvent (hEvent=0x27c) returned 1 [0205.601] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086432.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.602] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=33434) returned 1 [0205.602] CloseHandle (hObject=0x2f4) returned 1 [0205.602] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086432.wmf")) returned 0x220 [0205.602] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086432.wmf")) returned 0x220 [0205.602] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086432.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.602] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086432.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.602] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.602] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.602] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086432.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0205.603] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x829a, lpOverlapped=0x0) returned 1 [0205.605] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x82a0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x82a0, lpOverlapped=0x0) returned 1 [0205.608] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.608] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.608] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.608] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x829a, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x829a, lpOverlapped=0x0) returned 1 [0205.608] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.611] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.612] CloseHandle (hObject=0x2f4) returned 1 [0205.612] CloseHandle (hObject=0x2b0) returned 1 [0205.612] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086432.wmf")) returned 1 [0205.613] SetEvent (hEvent=0x27c) returned 1 [0205.613] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086478.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.614] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=14174) returned 1 [0205.614] CloseHandle (hObject=0x2b0) returned 1 [0205.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086478.wmf")) returned 0x220 [0205.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086478.wmf")) returned 0x220 [0205.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086478.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.614] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086478.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.614] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.614] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.614] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086478.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0205.615] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x375e, lpOverlapped=0x0) returned 1 [0205.617] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3760, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3760, lpOverlapped=0x0) returned 1 [0205.618] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.618] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.618] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.618] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x375e, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x375e, lpOverlapped=0x0) returned 1 [0205.618] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.621] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.623] CloseHandle (hObject=0x2b0) returned 1 [0205.623] CloseHandle (hObject=0x2f4) returned 1 [0205.623] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086478.wmf")) returned 1 [0205.624] SetEvent (hEvent=0x27c) returned 1 [0205.624] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089945.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.625] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=19898) returned 1 [0205.625] CloseHandle (hObject=0x2f4) returned 1 [0205.625] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089945.wmf")) returned 0x220 [0205.625] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089945.wmf")) returned 0x220 [0205.625] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089945.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.625] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089945.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.626] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.626] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.626] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089945.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0205.626] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4dba, lpOverlapped=0x0) returned 1 [0205.628] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4dc0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4dc0, lpOverlapped=0x0) returned 1 [0205.629] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.630] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.630] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.630] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4dba, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4dba, lpOverlapped=0x0) returned 1 [0205.630] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.632] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.633] CloseHandle (hObject=0x2f4) returned 1 [0205.633] CloseHandle (hObject=0x2b0) returned 1 [0205.633] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089945.wmf")) returned 1 [0205.634] SetEvent (hEvent=0x27c) returned 1 [0205.635] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089992.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.635] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=15680) returned 1 [0205.635] CloseHandle (hObject=0x2b0) returned 1 [0205.635] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089992.wmf")) returned 0x220 [0205.635] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089992.wmf")) returned 0x220 [0205.636] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089992.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.636] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089992.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.636] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.636] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.636] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089992.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0205.636] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x3d40, lpOverlapped=0x0) returned 1 [0205.639] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3d50, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3d50, lpOverlapped=0x0) returned 1 [0205.640] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.640] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.640] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.640] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3d40, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x3d40, lpOverlapped=0x0) returned 1 [0205.640] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.643] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.645] CloseHandle (hObject=0x2b0) returned 1 [0205.645] CloseHandle (hObject=0x2f4) returned 1 [0205.645] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089992.wmf")) returned 1 [0205.646] SetEvent (hEvent=0x27c) returned 1 [0205.646] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090027.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.647] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=21268) returned 1 [0205.647] CloseHandle (hObject=0x2f4) returned 1 [0205.647] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090027.wmf")) returned 0x220 [0205.647] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090027.wmf")) returned 0x220 [0205.647] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090027.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.647] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090027.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.648] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.648] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.648] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090027.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0205.648] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x5314, lpOverlapped=0x0) returned 1 [0205.650] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5320, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x5320, lpOverlapped=0x0) returned 1 [0205.651] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.652] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.652] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.652] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5314, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x5314, lpOverlapped=0x0) returned 1 [0205.652] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.656] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.658] CloseHandle (hObject=0x2f4) returned 1 [0205.658] CloseHandle (hObject=0x2b0) returned 1 [0205.658] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090027.wmf")) returned 1 [0205.659] SetEvent (hEvent=0x27c) returned 1 [0205.659] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090087.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.661] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=46936) returned 1 [0205.661] CloseHandle (hObject=0x2b0) returned 1 [0205.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090087.wmf")) returned 0x220 [0205.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090087.wmf")) returned 0x220 [0205.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090087.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.661] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090087.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.661] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.661] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.661] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090087.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0205.662] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xb758, lpOverlapped=0x0) returned 1 [0205.669] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xb760, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xb760, lpOverlapped=0x0) returned 1 [0205.671] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.671] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.671] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.671] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xb758, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xb758, lpOverlapped=0x0) returned 1 [0205.672] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.677] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.679] CloseHandle (hObject=0x2b0) returned 1 [0205.679] CloseHandle (hObject=0x2f4) returned 1 [0205.679] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090087.wmf")) returned 1 [0205.681] SetEvent (hEvent=0x27c) returned 1 [0205.681] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090149.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.681] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=28212) returned 1 [0205.681] CloseHandle (hObject=0x2f4) returned 1 [0205.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090149.wmf")) returned 0x220 [0205.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090149.wmf")) returned 0x220 [0205.682] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090149.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.682] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090149.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.682] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.682] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.682] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090149.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0205.682] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x6e34, lpOverlapped=0x0) returned 1 [0205.685] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x6e40, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x6e40, lpOverlapped=0x0) returned 1 [0205.687] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.687] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.687] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.687] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x6e34, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x6e34, lpOverlapped=0x0) returned 1 [0205.687] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.697] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.699] CloseHandle (hObject=0x2f4) returned 1 [0205.699] CloseHandle (hObject=0x2b0) returned 1 [0205.699] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090149.wmf")) returned 1 [0205.700] SetEvent (hEvent=0x27c) returned 1 [0205.700] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090777.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.702] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3332) returned 1 [0205.702] CloseHandle (hObject=0x2b0) returned 1 [0205.702] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090777.wmf")) returned 0x220 [0205.702] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090777.wmf")) returned 0x220 [0205.702] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090777.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.702] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090777.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.702] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.702] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.702] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090777.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0205.703] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xd04, lpOverlapped=0x0) returned 1 [0205.704] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xd10, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xd10, lpOverlapped=0x0) returned 1 [0205.705] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.706] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.706] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.706] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xd04, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xd04, lpOverlapped=0x0) returned 1 [0205.706] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.718] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.720] CloseHandle (hObject=0x2b0) returned 1 [0205.720] CloseHandle (hObject=0x2f4) returned 1 [0205.720] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090777.wmf")) returned 1 [0205.721] SetEvent (hEvent=0x27c) returned 1 [0205.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090781.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.721] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=5314) returned 1 [0205.721] CloseHandle (hObject=0x2f4) returned 1 [0205.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090781.wmf")) returned 0x220 [0205.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090781.wmf")) returned 0x220 [0205.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090781.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.722] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090781.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.722] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.722] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.722] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090781.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0205.722] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x14c2, lpOverlapped=0x0) returned 1 [0205.724] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x14d0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x14d0, lpOverlapped=0x0) returned 1 [0205.725] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.725] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.726] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.726] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x14c2, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x14c2, lpOverlapped=0x0) returned 1 [0205.726] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.744] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.748] CloseHandle (hObject=0x2f4) returned 1 [0205.748] CloseHandle (hObject=0x2b0) returned 1 [0205.748] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090781.wmf")) returned 1 [0205.749] SetEvent (hEvent=0x27c) returned 1 [0205.749] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0093905.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.749] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=42050) returned 1 [0205.749] CloseHandle (hObject=0x2b0) returned 1 [0205.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0093905.wmf")) returned 0x220 [0205.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0093905.wmf")) returned 0x220 [0205.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0093905.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.750] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0093905.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.750] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.750] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.750] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0093905.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0205.750] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xa442, lpOverlapped=0x0) returned 1 [0205.753] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xa450, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xa450, lpOverlapped=0x0) returned 1 [0205.755] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.755] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.755] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.755] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xa442, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xa442, lpOverlapped=0x0) returned 1 [0205.755] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.763] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.766] CloseHandle (hObject=0x2b0) returned 1 [0205.766] CloseHandle (hObject=0x2f4) returned 1 [0205.766] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0093905.wmf")) returned 1 [0205.768] SetEvent (hEvent=0x27c) returned 1 [0205.768] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099145.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.769] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=24759) returned 1 [0205.769] CloseHandle (hObject=0x2f4) returned 1 [0205.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099145.jpg")) returned 0x220 [0205.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099145.jpg")) returned 0x220 [0205.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099145.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.769] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099145.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.769] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.769] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.769] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099145.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0205.770] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x60b7, lpOverlapped=0x0) returned 1 [0205.776] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x60c0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x60c0, lpOverlapped=0x0) returned 1 [0205.777] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.777] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.777] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.777] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x60b7, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x60b7, lpOverlapped=0x0) returned 1 [0205.778] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.784] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.787] CloseHandle (hObject=0x2f4) returned 1 [0205.787] CloseHandle (hObject=0x2b0) returned 1 [0205.787] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099145.jpg")) returned 1 [0205.789] SetEvent (hEvent=0x27c) returned 1 [0205.789] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099147.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.790] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=24377) returned 1 [0205.790] CloseHandle (hObject=0x2b0) returned 1 [0205.790] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099147.jpg")) returned 0x220 [0205.790] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099147.jpg")) returned 0x220 [0205.790] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099147.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.790] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099147.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.790] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.790] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.790] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099147.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0205.791] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x5f39, lpOverlapped=0x0) returned 1 [0205.797] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5f40, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x5f40, lpOverlapped=0x0) returned 1 [0205.799] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.799] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.799] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.799] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5f39, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x5f39, lpOverlapped=0x0) returned 1 [0205.799] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.805] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.808] CloseHandle (hObject=0x2b0) returned 1 [0205.808] CloseHandle (hObject=0x2f4) returned 1 [0205.808] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099147.jpg")) returned 1 [0205.809] SetEvent (hEvent=0x27c) returned 1 [0205.809] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099149.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.810] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=73214) returned 1 [0205.810] CloseHandle (hObject=0x2f4) returned 1 [0205.810] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099149.wmf")) returned 0x220 [0205.810] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099149.wmf")) returned 0x220 [0205.810] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099149.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.810] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099149.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.810] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.810] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.810] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099149.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0205.811] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x11dfe, lpOverlapped=0x0) returned 1 [0205.815] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x11e00, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x11e00, lpOverlapped=0x0) returned 1 [0205.817] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.818] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.818] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.818] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x11dfe, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x11dfe, lpOverlapped=0x0) returned 1 [0205.818] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.933] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.935] CloseHandle (hObject=0x2f4) returned 1 [0205.935] CloseHandle (hObject=0x2b0) returned 1 [0205.935] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099149.wmf")) returned 1 [0205.936] SetEvent (hEvent=0x27c) returned 1 [0205.936] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.937] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=9671) returned 1 [0205.937] CloseHandle (hObject=0x2b0) returned 1 [0205.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg")) returned 0x220 [0205.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg")) returned 0x220 [0205.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.937] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.938] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.938] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.938] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0205.938] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x25c7, lpOverlapped=0x0) returned 1 [0205.940] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x25d0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x25d0, lpOverlapped=0x0) returned 1 [0205.941] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.942] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.942] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.942] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x25c7, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x25c7, lpOverlapped=0x0) returned 1 [0205.942] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.945] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.955] CloseHandle (hObject=0x2b0) returned 1 [0205.955] CloseHandle (hObject=0x2f4) returned 1 [0205.955] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg")) returned 1 [0205.956] SetEvent (hEvent=0x27c) returned 1 [0205.956] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.958] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=27546) returned 1 [0205.958] CloseHandle (hObject=0x2f4) returned 1 [0205.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf")) returned 0x220 [0205.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf")) returned 0x220 [0205.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.959] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0205.959] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.959] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.959] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0205.960] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x6b9a, lpOverlapped=0x0) returned 1 [0205.963] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x6ba0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x6ba0, lpOverlapped=0x0) returned 1 [0205.964] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.964] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.964] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.964] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x6b9a, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x6b9a, lpOverlapped=0x0) returned 1 [0205.964] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.974] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.976] CloseHandle (hObject=0x2f4) returned 1 [0205.976] CloseHandle (hObject=0x2b0) returned 1 [0205.976] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf")) returned 1 [0205.977] SetEvent (hEvent=0x27c) returned 1 [0205.977] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.978] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=7154) returned 1 [0205.978] CloseHandle (hObject=0x2b0) returned 1 [0205.978] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg")) returned 0x220 [0205.978] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg")) returned 0x220 [0205.978] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.978] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0205.978] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.978] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0205.978] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0205.979] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1bf2, lpOverlapped=0x0) returned 1 [0205.980] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1c00, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1c00, lpOverlapped=0x0) returned 1 [0205.982] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0205.982] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.982] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0205.982] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1bf2, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1bf2, lpOverlapped=0x0) returned 1 [0205.982] FlushFileBuffers (hFile=0x2b0) returned 1 [0205.992] FlushFileBuffers (hFile=0x2f4) returned 1 [0205.996] CloseHandle (hObject=0x2b0) returned 1 [0205.996] CloseHandle (hObject=0x2f4) returned 1 [0205.996] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg")) returned 1 [0206.001] SetEvent (hEvent=0x27c) returned 1 [0206.002] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0206.002] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=22356) returned 1 [0206.002] CloseHandle (hObject=0x2f4) returned 1 [0206.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf")) returned 0x220 [0206.003] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf")) returned 0x220 [0206.003] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.003] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0206.003] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.003] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.003] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0206.004] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x5754, lpOverlapped=0x0) returned 1 [0206.006] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5760, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x5760, lpOverlapped=0x0) returned 1 [0206.007] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0206.007] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.007] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.008] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5754, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x5754, lpOverlapped=0x0) returned 1 [0206.008] FlushFileBuffers (hFile=0x2f4) returned 1 [0206.010] FlushFileBuffers (hFile=0x2b0) returned 1 [0206.020] CloseHandle (hObject=0x2f4) returned 1 [0206.020] CloseHandle (hObject=0x2b0) returned 1 [0206.020] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf")) returned 1 [0206.021] SetEvent (hEvent=0x27c) returned 1 [0206.021] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0206.023] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=50490) returned 1 [0206.023] CloseHandle (hObject=0x2b0) returned 1 [0206.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg")) returned 0x220 [0206.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg")) returned 0x220 [0206.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.023] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0206.023] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.023] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.023] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0206.024] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xc53a, lpOverlapped=0x0) returned 1 [0206.028] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xc540, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xc540, lpOverlapped=0x0) returned 1 [0206.030] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0206.030] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.030] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.030] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xc53a, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xc53a, lpOverlapped=0x0) returned 1 [0206.030] FlushFileBuffers (hFile=0x2b0) returned 1 [0206.043] FlushFileBuffers (hFile=0x2f4) returned 1 [0206.046] CloseHandle (hObject=0x2b0) returned 1 [0206.046] CloseHandle (hObject=0x2f4) returned 1 [0206.046] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg")) returned 1 [0206.047] SetEvent (hEvent=0x27c) returned 1 [0206.047] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0206.049] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=43949) returned 1 [0206.049] CloseHandle (hObject=0x2f4) returned 1 [0206.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg")) returned 0x220 [0206.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg")) returned 0x220 [0206.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.049] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0206.049] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.050] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.050] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0206.050] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xabad, lpOverlapped=0x0) returned 1 [0206.054] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xabb0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xabb0, lpOverlapped=0x0) returned 1 [0206.055] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0206.056] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.056] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.056] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xabad, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xabad, lpOverlapped=0x0) returned 1 [0206.056] FlushFileBuffers (hFile=0x2f4) returned 1 [0206.066] FlushFileBuffers (hFile=0x2b0) returned 1 [0206.068] CloseHandle (hObject=0x2f4) returned 1 [0206.068] CloseHandle (hObject=0x2b0) returned 1 [0206.068] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg")) returned 1 [0206.069] SetEvent (hEvent=0x27c) returned 1 [0206.069] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0206.070] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=10192) returned 1 [0206.070] CloseHandle (hObject=0x2b0) returned 1 [0206.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf")) returned 0x220 [0206.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf")) returned 0x220 [0206.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.071] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0206.071] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.071] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.071] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0206.071] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x27d0, lpOverlapped=0x0) returned 1 [0206.073] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x27e0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x27e0, lpOverlapped=0x0) returned 1 [0206.074] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0206.075] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.075] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.075] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x27d0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x27d0, lpOverlapped=0x0) returned 1 [0206.075] FlushFileBuffers (hFile=0x2b0) returned 1 [0206.083] FlushFileBuffers (hFile=0x2f4) returned 1 [0206.088] CloseHandle (hObject=0x2b0) returned 1 [0206.088] CloseHandle (hObject=0x2f4) returned 1 [0206.088] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf")) returned 1 [0206.089] SetEvent (hEvent=0x27c) returned 1 [0206.089] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0206.090] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=8754) returned 1 [0206.090] CloseHandle (hObject=0x2f4) returned 1 [0206.090] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf")) returned 0x220 [0206.091] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf")) returned 0x220 [0206.091] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.091] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0206.091] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.091] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.091] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0206.092] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2232, lpOverlapped=0x0) returned 1 [0206.094] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2240, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2240, lpOverlapped=0x0) returned 1 [0206.095] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0206.095] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.095] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.095] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2232, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2232, lpOverlapped=0x0) returned 1 [0206.095] FlushFileBuffers (hFile=0x2f4) returned 1 [0206.108] FlushFileBuffers (hFile=0x2b0) returned 1 [0206.110] CloseHandle (hObject=0x2f4) returned 1 [0206.110] CloseHandle (hObject=0x2b0) returned 1 [0206.110] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf")) returned 1 [0206.111] SetEvent (hEvent=0x27c) returned 1 [0206.111] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099173.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0206.112] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=37140) returned 1 [0206.112] CloseHandle (hObject=0x2b0) returned 1 [0206.112] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099173.wmf")) returned 0x220 [0206.112] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099173.wmf")) returned 0x220 [0206.112] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099173.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.112] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099173.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0206.112] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.112] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.113] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099173.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0206.113] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x9114, lpOverlapped=0x0) returned 1 [0206.116] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x9120, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x9120, lpOverlapped=0x0) returned 1 [0206.118] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0206.118] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.118] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.118] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x9114, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x9114, lpOverlapped=0x0) returned 1 [0206.118] FlushFileBuffers (hFile=0x2b0) returned 1 [0206.129] FlushFileBuffers (hFile=0x2f4) returned 1 [0206.131] CloseHandle (hObject=0x2b0) returned 1 [0206.131] CloseHandle (hObject=0x2f4) returned 1 [0206.131] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099173.wmf")) returned 1 [0206.133] SetEvent (hEvent=0x27c) returned 1 [0206.133] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099175.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0206.134] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=9744) returned 1 [0206.134] CloseHandle (hObject=0x2f4) returned 1 [0206.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099175.wmf")) returned 0x220 [0206.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099175.wmf")) returned 0x220 [0206.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099175.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.134] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099175.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0206.134] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.134] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.135] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099175.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0206.135] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2610, lpOverlapped=0x0) returned 1 [0206.148] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2620, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2620, lpOverlapped=0x0) returned 1 [0206.149] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0206.149] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.149] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.149] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2610, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2610, lpOverlapped=0x0) returned 1 [0206.149] FlushFileBuffers (hFile=0x2f4) returned 1 [0206.159] FlushFileBuffers (hFile=0x2b0) returned 1 [0206.163] CloseHandle (hObject=0x2f4) returned 1 [0206.163] CloseHandle (hObject=0x2b0) returned 1 [0206.163] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099175.wmf")) returned 1 [0206.164] SetEvent (hEvent=0x27c) returned 1 [0206.164] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099177.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0206.165] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=5386) returned 1 [0206.165] CloseHandle (hObject=0x2b0) returned 1 [0206.165] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099177.wmf")) returned 0x220 [0206.165] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099177.wmf")) returned 0x220 [0206.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099177.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.166] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099177.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0206.166] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.166] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.166] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099177.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0206.167] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x150a, lpOverlapped=0x0) returned 1 [0206.169] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1510, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1510, lpOverlapped=0x0) returned 1 [0206.170] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0206.170] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.170] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.170] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x150a, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x150a, lpOverlapped=0x0) returned 1 [0206.170] FlushFileBuffers (hFile=0x2b0) returned 1 [0206.181] FlushFileBuffers (hFile=0x2f4) returned 1 [0206.183] CloseHandle (hObject=0x2b0) returned 1 [0206.184] CloseHandle (hObject=0x2f4) returned 1 [0206.184] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099177.wmf")) returned 1 [0206.185] SetEvent (hEvent=0x27c) returned 1 [0206.185] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099179.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0206.186] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=9154) returned 1 [0206.186] CloseHandle (hObject=0x2f4) returned 1 [0206.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099179.wmf")) returned 0x220 [0206.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099179.wmf")) returned 0x220 [0206.187] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099179.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.187] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099179.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0206.187] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.187] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.187] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099179.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0206.188] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x23c2, lpOverlapped=0x0) returned 1 [0206.193] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x23d0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x23d0, lpOverlapped=0x0) returned 1 [0206.195] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0206.195] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.195] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.195] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x23c2, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x23c2, lpOverlapped=0x0) returned 1 [0206.195] FlushFileBuffers (hFile=0x2f4) returned 1 [0206.200] FlushFileBuffers (hFile=0x2b0) returned 1 [0206.202] CloseHandle (hObject=0x2f4) returned 1 [0206.202] CloseHandle (hObject=0x2b0) returned 1 [0206.202] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099179.wmf")) returned 1 [0206.203] SetEvent (hEvent=0x27c) returned 1 [0206.204] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099181.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0206.204] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1198) returned 1 [0206.204] CloseHandle (hObject=0x2b0) returned 1 [0206.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099181.wmf")) returned 0x220 [0206.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099181.wmf")) returned 0x220 [0206.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099181.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.205] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099181.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0206.205] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.205] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.205] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099181.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0206.206] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4ae, lpOverlapped=0x0) returned 1 [0206.207] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4b0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4b0, lpOverlapped=0x0) returned 1 [0206.208] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0206.209] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.209] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.209] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4ae, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4ae, lpOverlapped=0x0) returned 1 [0206.209] FlushFileBuffers (hFile=0x2b0) returned 1 [0206.218] FlushFileBuffers (hFile=0x2f4) returned 1 [0206.220] CloseHandle (hObject=0x2b0) returned 1 [0206.220] CloseHandle (hObject=0x2f4) returned 1 [0206.220] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099181.wmf")) returned 1 [0206.221] SetEvent (hEvent=0x27c) returned 1 [0206.222] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099183.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0206.222] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=4946) returned 1 [0206.222] CloseHandle (hObject=0x2f4) returned 1 [0206.222] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099183.wmf")) returned 0x220 [0206.222] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099183.wmf")) returned 0x220 [0206.222] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099183.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.223] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099183.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0206.223] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.223] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.223] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099183.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0206.223] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1352, lpOverlapped=0x0) returned 1 [0206.225] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1360, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1360, lpOverlapped=0x0) returned 1 [0206.227] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0206.227] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.227] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.227] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1352, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1352, lpOverlapped=0x0) returned 1 [0206.227] FlushFileBuffers (hFile=0x2f4) returned 1 [0206.231] FlushFileBuffers (hFile=0x2b0) returned 1 [0206.232] CloseHandle (hObject=0x2f4) returned 1 [0206.232] CloseHandle (hObject=0x2b0) returned 1 [0206.232] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099183.wmf")) returned 1 [0206.234] SetEvent (hEvent=0x27c) returned 1 [0206.234] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099184.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0206.235] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=4118) returned 1 [0206.235] CloseHandle (hObject=0x2b0) returned 1 [0206.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099184.wmf")) returned 0x220 [0206.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099184.wmf")) returned 0x220 [0206.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099184.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.236] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099184.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0206.236] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.236] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.236] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099184.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0206.237] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1016, lpOverlapped=0x0) returned 1 [0206.240] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1020, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1020, lpOverlapped=0x0) returned 1 [0206.241] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0206.241] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.241] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.241] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1016, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1016, lpOverlapped=0x0) returned 1 [0206.241] FlushFileBuffers (hFile=0x2b0) returned 1 [0206.244] FlushFileBuffers (hFile=0x2f4) returned 1 [0206.245] CloseHandle (hObject=0x2b0) returned 1 [0206.245] CloseHandle (hObject=0x2f4) returned 1 [0206.245] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099184.wmf")) returned 1 [0206.251] SetEvent (hEvent=0x27c) returned 1 [0206.251] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099185.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0206.253] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3282) returned 1 [0206.253] CloseHandle (hObject=0x2f4) returned 1 [0206.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099185.jpg")) returned 0x220 [0206.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099185.jpg")) returned 0x220 [0206.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099185.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.253] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099185.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0206.253] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.254] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.254] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099185.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0206.255] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xcd2, lpOverlapped=0x0) returned 1 [0206.257] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xce0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xce0, lpOverlapped=0x0) returned 1 [0206.258] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0206.258] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.258] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.258] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xcd2, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xcd2, lpOverlapped=0x0) returned 1 [0206.258] FlushFileBuffers (hFile=0x2f4) returned 1 [0206.262] FlushFileBuffers (hFile=0x2b0) returned 1 [0206.263] CloseHandle (hObject=0x2f4) returned 1 [0206.263] CloseHandle (hObject=0x2b0) returned 1 [0206.263] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099185.jpg")) returned 1 [0206.264] SetEvent (hEvent=0x27c) returned 1 [0206.264] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099186.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0206.265] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=16738) returned 1 [0206.265] CloseHandle (hObject=0x2b0) returned 1 [0206.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099186.jpg")) returned 0x220 [0206.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099186.jpg")) returned 0x220 [0206.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099186.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.265] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099186.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0206.265] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.266] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.266] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099186.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0206.266] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4162, lpOverlapped=0x0) returned 1 [0206.268] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4170, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4170, lpOverlapped=0x0) returned 1 [0206.270] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0206.270] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.270] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.270] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4162, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4162, lpOverlapped=0x0) returned 1 [0206.270] FlushFileBuffers (hFile=0x2b0) returned 1 [0206.272] FlushFileBuffers (hFile=0x2f4) returned 1 [0206.284] CloseHandle (hObject=0x2b0) returned 1 [0206.284] CloseHandle (hObject=0x2f4) returned 1 [0206.284] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099186.jpg")) returned 1 [0206.287] SetEvent (hEvent=0x27c) returned 1 [0206.287] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099187.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0206.290] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=24528) returned 1 [0206.290] CloseHandle (hObject=0x2f4) returned 1 [0206.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099187.jpg")) returned 0x220 [0206.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099187.jpg")) returned 0x220 [0206.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099187.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.290] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099187.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0206.290] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.290] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099187.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0206.292] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x5fd0, lpOverlapped=0x0) returned 1 [0206.295] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5fe0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x5fe0, lpOverlapped=0x0) returned 1 [0206.296] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0206.297] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.297] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.297] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5fd0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x5fd0, lpOverlapped=0x0) returned 1 [0206.297] FlushFileBuffers (hFile=0x2f4) returned 1 [0206.299] FlushFileBuffers (hFile=0x2b0) returned 1 [0206.301] CloseHandle (hObject=0x2f4) returned 1 [0206.301] CloseHandle (hObject=0x2b0) returned 1 [0206.301] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099187.jpg")) returned 1 [0206.302] SetEvent (hEvent=0x27c) returned 1 [0206.303] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099188.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0206.303] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=9080) returned 1 [0206.303] CloseHandle (hObject=0x2b0) returned 1 [0206.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099188.jpg")) returned 0x220 [0206.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099188.jpg")) returned 0x220 [0206.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099188.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.304] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099188.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0206.304] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.304] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.304] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099188.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0206.305] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2378, lpOverlapped=0x0) returned 1 [0206.306] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2380, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2380, lpOverlapped=0x0) returned 1 [0206.307] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0206.308] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.308] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.308] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2378, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2378, lpOverlapped=0x0) returned 1 [0206.308] FlushFileBuffers (hFile=0x2b0) returned 1 [0206.310] FlushFileBuffers (hFile=0x2f4) returned 1 [0206.312] CloseHandle (hObject=0x2b0) returned 1 [0206.312] CloseHandle (hObject=0x2f4) returned 1 [0206.312] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099188.jpg")) returned 1 [0206.313] SetEvent (hEvent=0x27c) returned 1 [0206.313] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099189.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0206.314] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=8076) returned 1 [0206.314] CloseHandle (hObject=0x2f4) returned 1 [0206.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099189.jpg")) returned 0x220 [0206.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099189.jpg")) returned 0x220 [0206.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099189.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.314] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099189.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0206.314] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.314] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.314] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099189.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0206.315] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1f8c, lpOverlapped=0x0) returned 1 [0206.317] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1f90, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1f90, lpOverlapped=0x0) returned 1 [0206.319] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0206.320] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.320] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.320] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1f8c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1f8c, lpOverlapped=0x0) returned 1 [0206.320] FlushFileBuffers (hFile=0x2f4) returned 1 [0206.322] FlushFileBuffers (hFile=0x2b0) returned 1 [0206.323] CloseHandle (hObject=0x2f4) returned 1 [0206.324] CloseHandle (hObject=0x2b0) returned 1 [0206.324] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099189.jpg")) returned 1 [0206.325] SetEvent (hEvent=0x27c) returned 1 [0206.325] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099190.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0206.326] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=43892) returned 1 [0206.326] CloseHandle (hObject=0x2b0) returned 1 [0206.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099190.jpg")) returned 0x220 [0206.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099190.jpg")) returned 0x220 [0206.327] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099190.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.327] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099190.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0206.327] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.327] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.327] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099190.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0206.328] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xab74, lpOverlapped=0x0) returned 1 [0206.339] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xab80, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xab80, lpOverlapped=0x0) returned 1 [0206.341] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0206.341] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.341] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.341] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xab74, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xab74, lpOverlapped=0x0) returned 1 [0206.341] FlushFileBuffers (hFile=0x2b0) returned 1 [0206.363] FlushFileBuffers (hFile=0x2f4) returned 1 [0206.364] CloseHandle (hObject=0x2b0) returned 1 [0206.364] CloseHandle (hObject=0x2f4) returned 1 [0206.364] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099190.jpg")) returned 1 [0206.365] SetEvent (hEvent=0x27c) returned 1 [0206.366] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099191.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0206.367] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=62367) returned 1 [0206.367] CloseHandle (hObject=0x2f4) returned 1 [0206.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099191.jpg")) returned 0x220 [0206.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099191.jpg")) returned 0x220 [0206.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099191.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.367] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099191.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0206.367] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.367] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.367] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099191.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0206.368] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xf39f, lpOverlapped=0x0) returned 1 [0206.371] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf3a0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf3a0, lpOverlapped=0x0) returned 1 [0206.373] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0206.373] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.373] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.373] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf39f, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xf39f, lpOverlapped=0x0) returned 1 [0206.374] FlushFileBuffers (hFile=0x2f4) returned 1 [0206.386] FlushFileBuffers (hFile=0x2b0) returned 1 [0206.388] CloseHandle (hObject=0x2f4) returned 1 [0206.388] CloseHandle (hObject=0x2b0) returned 1 [0206.388] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099191.jpg")) returned 1 [0206.389] SetEvent (hEvent=0x27c) returned 1 [0206.390] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099193.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0206.390] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=35546) returned 1 [0206.390] CloseHandle (hObject=0x2b0) returned 1 [0206.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099193.gif")) returned 0x220 [0206.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099193.gif")) returned 0x220 [0206.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099193.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.390] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099193.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0206.390] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.390] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.391] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099193.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0206.391] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x8ada, lpOverlapped=0x0) returned 1 [0206.393] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8ae0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x8ae0, lpOverlapped=0x0) returned 1 [0206.395] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0206.395] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.395] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.395] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8ada, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x8ada, lpOverlapped=0x0) returned 1 [0206.395] FlushFileBuffers (hFile=0x2b0) returned 1 [0206.398] FlushFileBuffers (hFile=0x2f4) returned 1 [0206.407] CloseHandle (hObject=0x2b0) returned 1 [0206.407] CloseHandle (hObject=0x2f4) returned 1 [0206.407] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099193.gif")) returned 1 [0206.409] SetEvent (hEvent=0x27c) returned 1 [0206.409] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099195.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0206.411] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=19923) returned 1 [0206.411] CloseHandle (hObject=0x2f4) returned 1 [0206.411] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099195.gif")) returned 0x220 [0206.411] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099195.gif")) returned 0x220 [0206.411] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099195.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.411] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099195.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0206.411] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.411] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.411] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099195.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0206.412] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4dd3, lpOverlapped=0x0) returned 1 [0206.414] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4de0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4de0, lpOverlapped=0x0) returned 1 [0206.415] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0206.416] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.416] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.416] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4dd3, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4dd3, lpOverlapped=0x0) returned 1 [0206.416] FlushFileBuffers (hFile=0x2f4) returned 1 [0206.438] FlushFileBuffers (hFile=0x2b0) returned 1 [0206.441] CloseHandle (hObject=0x2f4) returned 1 [0206.441] CloseHandle (hObject=0x2b0) returned 1 [0206.442] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099195.gif")) returned 1 [0206.443] SetEvent (hEvent=0x27c) returned 1 [0206.443] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099197.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0206.444] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=10898) returned 1 [0206.444] CloseHandle (hObject=0x2b0) returned 1 [0206.444] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099197.gif")) returned 0x220 [0206.444] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099197.gif")) returned 0x220 [0206.444] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099197.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.444] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099197.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0206.444] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.444] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.444] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099197.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0206.445] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2a92, lpOverlapped=0x0) returned 1 [0206.449] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2aa0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2aa0, lpOverlapped=0x0) returned 1 [0206.450] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0206.450] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.450] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.451] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2a92, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2a92, lpOverlapped=0x0) returned 1 [0206.451] FlushFileBuffers (hFile=0x2b0) returned 1 [0206.459] FlushFileBuffers (hFile=0x2f4) returned 1 [0206.461] CloseHandle (hObject=0x2b0) returned 1 [0206.461] CloseHandle (hObject=0x2f4) returned 1 [0206.461] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099197.gif")) returned 1 [0206.462] SetEvent (hEvent=0x27c) returned 1 [0206.462] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099199.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0206.463] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=33975) returned 1 [0206.463] CloseHandle (hObject=0x2f4) returned 1 [0206.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099199.gif")) returned 0x220 [0206.464] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099199.gif")) returned 0x220 [0206.464] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099199.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.464] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099199.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0206.464] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.464] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.464] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099199.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0206.465] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x84b7, lpOverlapped=0x0) returned 1 [0206.469] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x84c0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x84c0, lpOverlapped=0x0) returned 1 [0206.471] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0206.471] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.471] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.471] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x84b7, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x84b7, lpOverlapped=0x0) returned 1 [0206.471] FlushFileBuffers (hFile=0x2f4) returned 1 [0206.482] FlushFileBuffers (hFile=0x2b0) returned 1 [0206.483] CloseHandle (hObject=0x2f4) returned 1 [0206.484] CloseHandle (hObject=0x2b0) returned 1 [0206.484] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099199.gif")) returned 1 [0206.485] SetEvent (hEvent=0x27c) returned 1 [0206.485] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099201.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0206.486] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=51401) returned 1 [0206.486] CloseHandle (hObject=0x2b0) returned 1 [0206.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099201.gif")) returned 0x220 [0206.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099201.gif")) returned 0x220 [0206.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099201.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.486] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099201.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0206.486] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.486] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.486] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099201.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0206.487] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xc8c9, lpOverlapped=0x0) returned 1 [0206.490] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xc8d0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xc8d0, lpOverlapped=0x0) returned 1 [0206.492] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0206.492] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.492] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.492] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xc8c9, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xc8c9, lpOverlapped=0x0) returned 1 [0206.493] FlushFileBuffers (hFile=0x2b0) returned 1 [0206.495] FlushFileBuffers (hFile=0x2f4) returned 1 [0206.504] CloseHandle (hObject=0x2b0) returned 1 [0206.504] CloseHandle (hObject=0x2f4) returned 1 [0206.504] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099201.gif")) returned 1 [0206.505] SetEvent (hEvent=0x27c) returned 1 [0206.505] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099203.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0206.506] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3904) returned 1 [0206.506] CloseHandle (hObject=0x2f4) returned 1 [0206.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099203.gif")) returned 0x220 [0206.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099203.gif")) returned 0x220 [0206.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099203.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.506] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099203.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0206.506] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.506] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.506] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099203.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0206.507] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xf40, lpOverlapped=0x0) returned 1 [0206.509] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf50, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf50, lpOverlapped=0x0) returned 1 [0206.510] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0206.510] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.511] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.511] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf40, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xf40, lpOverlapped=0x0) returned 1 [0206.511] FlushFileBuffers (hFile=0x2f4) returned 1 [0206.513] FlushFileBuffers (hFile=0x2b0) returned 1 [0206.641] CloseHandle (hObject=0x2f4) returned 1 [0206.641] CloseHandle (hObject=0x2b0) returned 1 [0206.641] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099203.gif")) returned 1 [0206.642] SetEvent (hEvent=0x27c) returned 1 [0206.642] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101860.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0206.644] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=32184) returned 1 [0206.644] CloseHandle (hObject=0x2b0) returned 1 [0206.644] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101860.bmp")) returned 0x220 [0206.644] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101860.bmp")) returned 0x220 [0206.644] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101860.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.644] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101860.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0206.644] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.644] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.645] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101860.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0206.645] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x7db8, lpOverlapped=0x0) returned 1 [0206.648] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7dc0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x7dc0, lpOverlapped=0x0) returned 1 [0206.649] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0206.650] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.650] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.650] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7db8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x7db8, lpOverlapped=0x0) returned 1 [0206.650] FlushFileBuffers (hFile=0x2b0) returned 1 [0206.653] FlushFileBuffers (hFile=0x2f4) returned 1 [0206.654] CloseHandle (hObject=0x2b0) returned 1 [0206.654] CloseHandle (hObject=0x2f4) returned 1 [0206.654] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101860.bmp")) returned 1 [0206.655] SetEvent (hEvent=0x27c) returned 1 [0206.656] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101861.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0206.656] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=32184) returned 1 [0206.656] CloseHandle (hObject=0x2f4) returned 1 [0206.656] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101861.bmp")) returned 0x220 [0206.657] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101861.bmp")) returned 0x220 [0206.657] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101861.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.657] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101861.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0206.657] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.657] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.657] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101861.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0206.658] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x7db8, lpOverlapped=0x0) returned 1 [0206.661] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7dc0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x7dc0, lpOverlapped=0x0) returned 1 [0206.662] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0206.662] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.663] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.663] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7db8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x7db8, lpOverlapped=0x0) returned 1 [0206.663] FlushFileBuffers (hFile=0x2f4) returned 1 [0206.750] FlushFileBuffers (hFile=0x2b0) returned 1 [0206.753] CloseHandle (hObject=0x2f4) returned 1 [0206.753] CloseHandle (hObject=0x2b0) returned 1 [0206.753] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101861.bmp")) returned 1 [0206.754] SetEvent (hEvent=0x27c) returned 1 [0206.755] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101980.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0206.755] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=16104) returned 1 [0206.755] CloseHandle (hObject=0x2b0) returned 1 [0206.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101980.wmf")) returned 0x220 [0206.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101980.wmf")) returned 0x220 [0206.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101980.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.756] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101980.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0206.756] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.756] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.756] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101980.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0206.757] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x3ee8, lpOverlapped=0x0) returned 1 [0206.758] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3ef0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3ef0, lpOverlapped=0x0) returned 1 [0206.759] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0206.760] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.760] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.760] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3ee8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x3ee8, lpOverlapped=0x0) returned 1 [0206.760] FlushFileBuffers (hFile=0x2b0) returned 1 [0206.762] FlushFileBuffers (hFile=0x2f4) returned 1 [0206.763] CloseHandle (hObject=0x2b0) returned 1 [0206.764] CloseHandle (hObject=0x2f4) returned 1 [0206.764] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101980.wmf")) returned 1 [0206.765] SetEvent (hEvent=0x27c) returned 1 [0206.765] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102002.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0206.766] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=15988) returned 1 [0206.766] CloseHandle (hObject=0x2f4) returned 1 [0206.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102002.wmf")) returned 0x220 [0206.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102002.wmf")) returned 0x220 [0206.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102002.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.766] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102002.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0206.766] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.766] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.766] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102002.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0206.767] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x3e74, lpOverlapped=0x0) returned 1 [0206.769] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3e80, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3e80, lpOverlapped=0x0) returned 1 [0206.771] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0206.771] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.771] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.771] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3e74, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x3e74, lpOverlapped=0x0) returned 1 [0206.771] FlushFileBuffers (hFile=0x2f4) returned 1 [0206.774] FlushFileBuffers (hFile=0x2b0) returned 1 [0206.776] CloseHandle (hObject=0x2f4) returned 1 [0206.776] CloseHandle (hObject=0x2b0) returned 1 [0206.776] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102002.wmf")) returned 1 [0206.777] SetEvent (hEvent=0x27c) returned 1 [0206.777] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102594.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0206.778] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=27000) returned 1 [0206.778] CloseHandle (hObject=0x2b0) returned 1 [0206.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102594.wmf")) returned 0x220 [0206.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102594.wmf")) returned 0x220 [0206.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102594.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.778] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102594.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0206.778] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.778] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.778] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102594.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0206.779] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x6978, lpOverlapped=0x0) returned 1 [0206.781] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x6980, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x6980, lpOverlapped=0x0) returned 1 [0206.783] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0206.783] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.783] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.783] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x6978, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x6978, lpOverlapped=0x0) returned 1 [0206.783] FlushFileBuffers (hFile=0x2b0) returned 1 [0206.853] FlushFileBuffers (hFile=0x2f4) returned 1 [0206.855] CloseHandle (hObject=0x2b0) returned 1 [0206.855] CloseHandle (hObject=0x2f4) returned 1 [0206.855] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102594.wmf")) returned 1 [0206.856] SetEvent (hEvent=0x27c) returned 1 [0206.856] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103058.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0206.857] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=17344) returned 1 [0206.857] CloseHandle (hObject=0x2f4) returned 1 [0206.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103058.wmf")) returned 0x220 [0206.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103058.wmf")) returned 0x220 [0206.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103058.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.858] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103058.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0206.858] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.858] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.858] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103058.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0206.859] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x43c0, lpOverlapped=0x0) returned 1 [0206.861] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x43d0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x43d0, lpOverlapped=0x0) returned 1 [0206.862] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0206.862] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.863] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.863] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x43c0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x43c0, lpOverlapped=0x0) returned 1 [0206.863] FlushFileBuffers (hFile=0x2f4) returned 1 [0206.865] FlushFileBuffers (hFile=0x2b0) returned 1 [0206.867] CloseHandle (hObject=0x2f4) returned 1 [0206.867] CloseHandle (hObject=0x2b0) returned 1 [0206.867] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103058.wmf")) returned 1 [0206.868] SetEvent (hEvent=0x27c) returned 1 [0206.868] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103262.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0206.869] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=12900) returned 1 [0206.869] CloseHandle (hObject=0x2b0) returned 1 [0206.870] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103262.wmf")) returned 0x220 [0206.870] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103262.wmf")) returned 0x220 [0206.870] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103262.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.870] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103262.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0206.870] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.870] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.870] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103262.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0206.871] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x3264, lpOverlapped=0x0) returned 1 [0206.873] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3270, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3270, lpOverlapped=0x0) returned 1 [0206.874] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0206.874] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.874] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.874] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3264, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x3264, lpOverlapped=0x0) returned 1 [0206.875] FlushFileBuffers (hFile=0x2b0) returned 1 [0206.904] FlushFileBuffers (hFile=0x2f4) returned 1 [0206.911] CloseHandle (hObject=0x2b0) returned 1 [0206.912] CloseHandle (hObject=0x2f4) returned 1 [0206.912] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103262.wmf")) returned 1 [0206.913] SetEvent (hEvent=0x27c) returned 1 [0206.913] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103812.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0206.913] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=5908) returned 1 [0206.913] CloseHandle (hObject=0x2f4) returned 1 [0206.914] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103812.wmf")) returned 0x220 [0206.914] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103812.wmf")) returned 0x220 [0206.914] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103812.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.914] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103812.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0206.914] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.914] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.914] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103812.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0206.915] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1714, lpOverlapped=0x0) returned 1 [0206.920] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1720, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1720, lpOverlapped=0x0) returned 1 [0206.922] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0206.922] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.922] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.922] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1714, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1714, lpOverlapped=0x0) returned 1 [0206.923] FlushFileBuffers (hFile=0x2f4) returned 1 [0206.926] FlushFileBuffers (hFile=0x2b0) returned 1 [0206.932] CloseHandle (hObject=0x2f4) returned 1 [0206.932] CloseHandle (hObject=0x2b0) returned 1 [0206.933] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103812.wmf")) returned 1 [0206.933] SetEvent (hEvent=0x27c) returned 1 [0206.934] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105230.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0206.934] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=5172) returned 1 [0206.934] CloseHandle (hObject=0x2b0) returned 1 [0206.934] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105230.wmf")) returned 0x220 [0206.934] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105230.wmf")) returned 0x220 [0206.934] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105230.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.934] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105230.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0206.935] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.935] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.935] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105230.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0206.935] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1434, lpOverlapped=0x0) returned 1 [0206.941] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1440, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1440, lpOverlapped=0x0) returned 1 [0206.948] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0206.949] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.949] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.949] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1434, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1434, lpOverlapped=0x0) returned 1 [0206.949] FlushFileBuffers (hFile=0x2b0) returned 1 [0206.952] FlushFileBuffers (hFile=0x2f4) returned 1 [0206.953] CloseHandle (hObject=0x2b0) returned 1 [0206.953] CloseHandle (hObject=0x2f4) returned 1 [0206.953] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105230.wmf")) returned 1 [0206.954] SetEvent (hEvent=0x27c) returned 1 [0206.954] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105232.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0206.955] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=5632) returned 1 [0206.955] CloseHandle (hObject=0x2f4) returned 1 [0206.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105232.wmf")) returned 0x220 [0206.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105232.wmf")) returned 0x220 [0206.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105232.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.956] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105232.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0206.956] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.956] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.956] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105232.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0206.957] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1600, lpOverlapped=0x0) returned 1 [0206.958] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1610, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1610, lpOverlapped=0x0) returned 1 [0206.960] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0206.960] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.960] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.960] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1600, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1600, lpOverlapped=0x0) returned 1 [0206.960] FlushFileBuffers (hFile=0x2f4) returned 1 [0206.963] FlushFileBuffers (hFile=0x2b0) returned 1 [0206.964] CloseHandle (hObject=0x2f4) returned 1 [0206.964] CloseHandle (hObject=0x2b0) returned 1 [0206.964] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105232.wmf")) returned 1 [0206.965] SetEvent (hEvent=0x27c) returned 1 [0206.965] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105234.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0206.966] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3444) returned 1 [0206.967] CloseHandle (hObject=0x2b0) returned 1 [0206.967] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105234.wmf")) returned 0x220 [0206.967] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105234.wmf")) returned 0x220 [0206.967] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105234.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.967] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105234.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0206.967] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.967] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.967] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105234.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0206.968] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xd74, lpOverlapped=0x0) returned 1 [0206.969] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xd80, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xd80, lpOverlapped=0x0) returned 1 [0206.970] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0206.971] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.971] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.971] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xd74, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xd74, lpOverlapped=0x0) returned 1 [0206.971] FlushFileBuffers (hFile=0x2b0) returned 1 [0206.973] FlushFileBuffers (hFile=0x2f4) returned 1 [0206.974] CloseHandle (hObject=0x2b0) returned 1 [0206.974] CloseHandle (hObject=0x2f4) returned 1 [0206.975] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105234.wmf")) returned 1 [0206.976] SetEvent (hEvent=0x27c) returned 1 [0206.976] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105238.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0206.976] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=17172) returned 1 [0206.976] CloseHandle (hObject=0x2f4) returned 1 [0206.976] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105238.wmf")) returned 0x220 [0206.976] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105238.wmf")) returned 0x220 [0206.977] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105238.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.977] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105238.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0206.977] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.977] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.977] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105238.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0206.977] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4314, lpOverlapped=0x0) returned 1 [0206.979] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4320, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4320, lpOverlapped=0x0) returned 1 [0206.980] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0206.981] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.981] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.981] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4314, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4314, lpOverlapped=0x0) returned 1 [0206.981] FlushFileBuffers (hFile=0x2f4) returned 1 [0206.983] FlushFileBuffers (hFile=0x2b0) returned 1 [0206.984] CloseHandle (hObject=0x2f4) returned 1 [0206.984] CloseHandle (hObject=0x2b0) returned 1 [0206.984] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105238.wmf")) returned 1 [0206.985] SetEvent (hEvent=0x27c) returned 1 [0206.986] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105240.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0206.986] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=11532) returned 1 [0206.986] CloseHandle (hObject=0x2b0) returned 1 [0206.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105240.wmf")) returned 0x220 [0206.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105240.wmf")) returned 0x220 [0206.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105240.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.986] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105240.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0206.986] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.987] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.987] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105240.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0206.987] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2d0c, lpOverlapped=0x0) returned 1 [0206.989] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2d10, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2d10, lpOverlapped=0x0) returned 1 [0206.990] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0206.991] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.991] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0206.991] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2d0c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2d0c, lpOverlapped=0x0) returned 1 [0206.991] FlushFileBuffers (hFile=0x2b0) returned 1 [0206.993] FlushFileBuffers (hFile=0x2f4) returned 1 [0206.994] CloseHandle (hObject=0x2b0) returned 1 [0206.995] CloseHandle (hObject=0x2f4) returned 1 [0206.995] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105240.wmf")) returned 1 [0206.996] SetEvent (hEvent=0x27c) returned 1 [0206.996] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105244.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0206.996] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=11228) returned 1 [0206.996] CloseHandle (hObject=0x2f4) returned 1 [0206.996] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105244.wmf")) returned 0x220 [0206.996] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105244.wmf")) returned 0x220 [0206.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105244.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.997] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105244.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0206.997] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.997] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0206.997] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105244.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0206.997] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2bdc, lpOverlapped=0x0) returned 1 [0206.999] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2be0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2be0, lpOverlapped=0x0) returned 1 [0207.000] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0207.001] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.001] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.001] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2bdc, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2bdc, lpOverlapped=0x0) returned 1 [0207.001] FlushFileBuffers (hFile=0x2f4) returned 1 [0207.004] FlushFileBuffers (hFile=0x2b0) returned 1 [0207.005] CloseHandle (hObject=0x2f4) returned 1 [0207.005] CloseHandle (hObject=0x2b0) returned 1 [0207.005] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105244.wmf")) returned 1 [0207.006] SetEvent (hEvent=0x27c) returned 1 [0207.006] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105246.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0207.007] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=19328) returned 1 [0207.007] CloseHandle (hObject=0x2b0) returned 1 [0207.007] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105246.wmf")) returned 0x220 [0207.007] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105246.wmf")) returned 0x220 [0207.007] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105246.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.007] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105246.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0207.007] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.007] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.007] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105246.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0207.008] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4b80, lpOverlapped=0x0) returned 1 [0207.010] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4b90, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4b90, lpOverlapped=0x0) returned 1 [0207.011] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0207.011] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.011] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.011] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4b80, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4b80, lpOverlapped=0x0) returned 1 [0207.011] FlushFileBuffers (hFile=0x2b0) returned 1 [0207.020] FlushFileBuffers (hFile=0x2f4) returned 1 [0207.026] CloseHandle (hObject=0x2b0) returned 1 [0207.026] CloseHandle (hObject=0x2f4) returned 1 [0207.026] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105246.wmf")) returned 1 [0207.027] SetEvent (hEvent=0x27c) returned 1 [0207.027] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105266.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0207.031] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=5908) returned 1 [0207.032] CloseHandle (hObject=0x2f4) returned 1 [0207.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105266.wmf")) returned 0x220 [0207.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105266.wmf")) returned 0x220 [0207.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105266.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.032] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105266.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0207.032] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.033] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.033] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105266.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0207.033] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1714, lpOverlapped=0x0) returned 1 [0207.035] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1720, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1720, lpOverlapped=0x0) returned 1 [0207.036] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0207.036] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.036] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.036] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1714, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1714, lpOverlapped=0x0) returned 1 [0207.037] FlushFileBuffers (hFile=0x2f4) returned 1 [0207.044] FlushFileBuffers (hFile=0x2b0) returned 1 [0207.048] CloseHandle (hObject=0x2f4) returned 1 [0207.049] CloseHandle (hObject=0x2b0) returned 1 [0207.049] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105266.wmf")) returned 1 [0207.050] SetEvent (hEvent=0x27c) returned 1 [0207.050] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105276.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0207.050] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=19240) returned 1 [0207.050] CloseHandle (hObject=0x2b0) returned 1 [0207.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105276.wmf")) returned 0x220 [0207.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105276.wmf")) returned 0x220 [0207.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105276.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.051] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105276.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0207.051] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.051] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.051] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105276.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0207.051] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4b28, lpOverlapped=0x0) returned 1 [0207.054] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4b30, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4b30, lpOverlapped=0x0) returned 1 [0207.055] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0207.056] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.056] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.056] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4b28, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4b28, lpOverlapped=0x0) returned 1 [0207.056] FlushFileBuffers (hFile=0x2b0) returned 1 [0207.063] FlushFileBuffers (hFile=0x2f4) returned 1 [0207.068] CloseHandle (hObject=0x2b0) returned 1 [0207.068] CloseHandle (hObject=0x2f4) returned 1 [0207.068] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105276.wmf")) returned 1 [0207.069] SetEvent (hEvent=0x27c) returned 1 [0207.069] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105282.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0207.070] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=4796) returned 1 [0207.070] CloseHandle (hObject=0x2f4) returned 1 [0207.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105282.wmf")) returned 0x220 [0207.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105282.wmf")) returned 0x220 [0207.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105282.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.070] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105282.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0207.070] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.070] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.070] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105282.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0207.071] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x12bc, lpOverlapped=0x0) returned 1 [0207.073] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x12c0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x12c0, lpOverlapped=0x0) returned 1 [0207.074] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0207.074] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.074] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.075] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x12bc, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x12bc, lpOverlapped=0x0) returned 1 [0207.075] FlushFileBuffers (hFile=0x2f4) returned 1 [0207.077] FlushFileBuffers (hFile=0x2b0) returned 1 [0207.085] CloseHandle (hObject=0x2f4) returned 1 [0207.085] CloseHandle (hObject=0x2b0) returned 1 [0207.085] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105282.wmf")) returned 1 [0207.086] SetEvent (hEvent=0x27c) returned 1 [0207.086] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105288.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0207.087] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=15832) returned 1 [0207.087] CloseHandle (hObject=0x2b0) returned 1 [0207.087] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105288.wmf")) returned 0x220 [0207.087] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105288.wmf")) returned 0x220 [0207.087] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105288.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.087] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105288.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0207.087] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.087] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.087] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105288.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0207.100] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x3dd8, lpOverlapped=0x0) returned 1 [0207.104] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3de0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3de0, lpOverlapped=0x0) returned 1 [0207.105] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0207.105] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.105] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.105] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3dd8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x3dd8, lpOverlapped=0x0) returned 1 [0207.105] FlushFileBuffers (hFile=0x2b0) returned 1 [0207.116] FlushFileBuffers (hFile=0x2f4) returned 1 [0207.118] CloseHandle (hObject=0x2b0) returned 1 [0207.118] CloseHandle (hObject=0x2f4) returned 1 [0207.118] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105288.wmf")) returned 1 [0207.119] SetEvent (hEvent=0x27c) returned 1 [0207.119] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105294.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0207.120] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=5504) returned 1 [0207.120] CloseHandle (hObject=0x2f4) returned 1 [0207.120] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105294.wmf")) returned 0x220 [0207.120] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105294.wmf")) returned 0x220 [0207.120] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105294.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.120] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105294.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0207.120] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.120] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.120] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105294.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0207.121] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1580, lpOverlapped=0x0) returned 1 [0207.123] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1590, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1590, lpOverlapped=0x0) returned 1 [0207.124] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0207.125] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.125] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.125] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1580, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1580, lpOverlapped=0x0) returned 1 [0207.125] FlushFileBuffers (hFile=0x2f4) returned 1 [0207.213] FlushFileBuffers (hFile=0x2b0) returned 1 [0207.215] CloseHandle (hObject=0x2f4) returned 1 [0207.215] CloseHandle (hObject=0x2b0) returned 1 [0207.215] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105294.wmf")) returned 1 [0207.216] SetEvent (hEvent=0x27c) returned 1 [0207.217] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105336.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0207.217] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2900) returned 1 [0207.217] CloseHandle (hObject=0x2b0) returned 1 [0207.217] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105336.wmf")) returned 0x220 [0207.217] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105336.wmf")) returned 0x220 [0207.217] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105336.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.217] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105336.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0207.218] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.218] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.218] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105336.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0207.218] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xb54, lpOverlapped=0x0) returned 1 [0207.220] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xb60, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xb60, lpOverlapped=0x0) returned 1 [0207.221] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0207.222] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.222] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.222] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xb54, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xb54, lpOverlapped=0x0) returned 1 [0207.222] FlushFileBuffers (hFile=0x2b0) returned 1 [0207.230] FlushFileBuffers (hFile=0x2f4) returned 1 [0207.232] CloseHandle (hObject=0x2b0) returned 1 [0207.232] CloseHandle (hObject=0x2f4) returned 1 [0207.232] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105336.wmf")) returned 1 [0207.233] SetEvent (hEvent=0x27c) returned 1 [0207.233] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105348.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0207.233] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=17060) returned 1 [0207.234] CloseHandle (hObject=0x2f4) returned 1 [0207.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105348.wmf")) returned 0x220 [0207.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105348.wmf")) returned 0x220 [0207.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105348.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.234] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105348.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0207.234] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.234] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.234] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105348.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0207.235] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x42a4, lpOverlapped=0x0) returned 1 [0207.245] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x42b0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x42b0, lpOverlapped=0x0) returned 1 [0207.247] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0207.247] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.247] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.247] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x42a4, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x42a4, lpOverlapped=0x0) returned 1 [0207.247] FlushFileBuffers (hFile=0x2f4) returned 1 [0207.260] FlushFileBuffers (hFile=0x2b0) returned 1 [0207.263] CloseHandle (hObject=0x2f4) returned 1 [0207.263] CloseHandle (hObject=0x2b0) returned 1 [0207.263] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105348.wmf")) returned 1 [0207.264] SetEvent (hEvent=0x27c) returned 1 [0207.265] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105368.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0207.265] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=12380) returned 1 [0207.265] CloseHandle (hObject=0x2b0) returned 1 [0207.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105368.wmf")) returned 0x220 [0207.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105368.wmf")) returned 0x220 [0207.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105368.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.266] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105368.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0207.266] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.266] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.266] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105368.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0207.267] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x305c, lpOverlapped=0x0) returned 1 [0207.269] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3060, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3060, lpOverlapped=0x0) returned 1 [0207.270] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0207.270] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.270] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.270] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x305c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x305c, lpOverlapped=0x0) returned 1 [0207.270] FlushFileBuffers (hFile=0x2b0) returned 1 [0207.276] FlushFileBuffers (hFile=0x2f4) returned 1 [0207.280] CloseHandle (hObject=0x2b0) returned 1 [0207.280] CloseHandle (hObject=0x2f4) returned 1 [0207.280] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105368.wmf")) returned 1 [0207.281] SetEvent (hEvent=0x27c) returned 1 [0207.281] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105378.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0207.282] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=4964) returned 1 [0207.282] CloseHandle (hObject=0x2f4) returned 1 [0207.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105378.wmf")) returned 0x220 [0207.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105378.wmf")) returned 0x220 [0207.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105378.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.282] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105378.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0207.282] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.282] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.282] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105378.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0207.283] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1364, lpOverlapped=0x0) returned 1 [0207.285] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1370, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1370, lpOverlapped=0x0) returned 1 [0207.287] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0207.287] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.287] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.287] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1364, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1364, lpOverlapped=0x0) returned 1 [0207.287] FlushFileBuffers (hFile=0x2f4) returned 1 [0207.290] FlushFileBuffers (hFile=0x2b0) returned 1 [0207.294] CloseHandle (hObject=0x2f4) returned 1 [0207.294] CloseHandle (hObject=0x2b0) returned 1 [0207.295] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105378.wmf")) returned 1 [0207.296] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105384.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0207.296] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=5880) returned 1 [0207.296] CloseHandle (hObject=0x2b0) returned 1 [0207.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105384.wmf")) returned 0x220 [0207.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105384.wmf")) returned 0x220 [0207.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105384.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.298] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105384.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0207.298] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.298] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.298] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105384.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0207.300] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x16f8, lpOverlapped=0x0) returned 1 [0207.304] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1700, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1700, lpOverlapped=0x0) returned 1 [0207.305] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0207.305] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.305] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.305] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x16f8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x16f8, lpOverlapped=0x0) returned 1 [0207.305] FlushFileBuffers (hFile=0x2f4) returned 1 [0207.309] FlushFileBuffers (hFile=0x2fc) returned 1 [0207.317] CloseHandle (hObject=0x2f4) returned 1 [0207.317] CloseHandle (hObject=0x2fc) returned 1 [0207.317] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105384.wmf")) returned 1 [0207.318] SetEvent (hEvent=0x27c) returned 1 [0207.318] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105388.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0207.320] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=8252) returned 1 [0207.320] CloseHandle (hObject=0x2fc) returned 1 [0207.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105388.wmf")) returned 0x220 [0207.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105388.wmf")) returned 0x220 [0207.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105388.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.320] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105388.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0207.320] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.320] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.321] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105388.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0207.321] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x203c, lpOverlapped=0x0) returned 1 [0207.323] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2040, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2040, lpOverlapped=0x0) returned 1 [0207.324] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0207.324] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.324] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.324] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x203c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x203c, lpOverlapped=0x0) returned 1 [0207.325] FlushFileBuffers (hFile=0x2fc) returned 1 [0207.334] FlushFileBuffers (hFile=0x2f4) returned 1 [0207.337] CloseHandle (hObject=0x2fc) returned 1 [0207.337] CloseHandle (hObject=0x2f4) returned 1 [0207.337] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105388.wmf")) returned 1 [0207.338] SetEvent (hEvent=0x27c) returned 1 [0207.338] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105396.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0207.339] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=11012) returned 1 [0207.339] CloseHandle (hObject=0x2f4) returned 1 [0207.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105396.wmf")) returned 0x220 [0207.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105396.wmf")) returned 0x220 [0207.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105396.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.339] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105396.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0207.339] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.339] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.339] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105396.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0207.340] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2b04, lpOverlapped=0x0) returned 1 [0207.342] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2b10, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2b10, lpOverlapped=0x0) returned 1 [0207.343] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0207.343] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.343] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.343] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2b04, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2b04, lpOverlapped=0x0) returned 1 [0207.343] FlushFileBuffers (hFile=0x2f4) returned 1 [0207.351] FlushFileBuffers (hFile=0x2fc) returned 1 [0207.353] CloseHandle (hObject=0x2f4) returned 1 [0207.353] CloseHandle (hObject=0x2fc) returned 1 [0207.353] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105396.wmf")) returned 1 [0207.354] SetEvent (hEvent=0x27c) returned 1 [0207.354] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105410.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0207.354] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=20444) returned 1 [0207.354] CloseHandle (hObject=0x2fc) returned 1 [0207.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105410.wmf")) returned 0x220 [0207.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105410.wmf")) returned 0x220 [0207.355] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105410.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.355] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105410.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0207.355] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.355] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.355] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105410.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0207.355] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4fdc, lpOverlapped=0x0) returned 1 [0207.357] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4fe0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4fe0, lpOverlapped=0x0) returned 1 [0207.359] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0207.359] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.359] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.359] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4fdc, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4fdc, lpOverlapped=0x0) returned 1 [0207.360] FlushFileBuffers (hFile=0x2fc) returned 1 [0207.364] FlushFileBuffers (hFile=0x2f4) returned 1 [0207.425] CloseHandle (hObject=0x2fc) returned 1 [0207.425] CloseHandle (hObject=0x2f4) returned 1 [0207.425] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105410.wmf")) returned 1 [0207.427] SetEvent (hEvent=0x27c) returned 1 [0207.427] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105496.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0207.427] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=5156) returned 1 [0207.427] CloseHandle (hObject=0x2f4) returned 1 [0207.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105496.wmf")) returned 0x220 [0207.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105496.wmf")) returned 0x220 [0207.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105496.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.427] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105496.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0207.428] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.428] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.428] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105496.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0207.428] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1424, lpOverlapped=0x0) returned 1 [0207.430] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1430, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1430, lpOverlapped=0x0) returned 1 [0207.431] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0207.432] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.432] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.432] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1424, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1424, lpOverlapped=0x0) returned 1 [0207.432] FlushFileBuffers (hFile=0x2f4) returned 1 [0207.441] FlushFileBuffers (hFile=0x2fc) returned 1 [0207.443] CloseHandle (hObject=0x2f4) returned 1 [0207.443] CloseHandle (hObject=0x2fc) returned 1 [0207.443] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105496.wmf")) returned 1 [0207.444] SetEvent (hEvent=0x27c) returned 1 [0207.444] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105504.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0207.444] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=4148) returned 1 [0207.444] CloseHandle (hObject=0x2fc) returned 1 [0207.445] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105504.wmf")) returned 0x220 [0207.445] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105504.wmf")) returned 0x220 [0207.445] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105504.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.445] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105504.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0207.446] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.446] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.446] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105504.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0207.446] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1034, lpOverlapped=0x0) returned 1 [0207.448] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1040, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1040, lpOverlapped=0x0) returned 1 [0207.449] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0207.449] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.449] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.449] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1034, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1034, lpOverlapped=0x0) returned 1 [0207.450] FlushFileBuffers (hFile=0x2fc) returned 1 [0207.460] FlushFileBuffers (hFile=0x2f4) returned 1 [0207.467] CloseHandle (hObject=0x2fc) returned 1 [0207.467] CloseHandle (hObject=0x2f4) returned 1 [0207.468] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105504.wmf")) returned 1 [0207.469] SetEvent (hEvent=0x27c) returned 1 [0207.469] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105520.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0207.470] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=31812) returned 1 [0207.470] CloseHandle (hObject=0x2f4) returned 1 [0207.471] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105520.wmf")) returned 0x220 [0207.471] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105520.wmf")) returned 0x220 [0207.471] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105520.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.471] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105520.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0207.471] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.471] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.471] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105520.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0207.471] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x7c44, lpOverlapped=0x0) returned 1 [0207.475] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7c50, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x7c50, lpOverlapped=0x0) returned 1 [0207.476] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0207.476] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.476] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.476] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7c44, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x7c44, lpOverlapped=0x0) returned 1 [0207.477] FlushFileBuffers (hFile=0x2f4) returned 1 [0207.486] FlushFileBuffers (hFile=0x2fc) returned 1 [0207.488] CloseHandle (hObject=0x2f4) returned 1 [0207.488] CloseHandle (hObject=0x2fc) returned 1 [0207.488] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105520.wmf")) returned 1 [0207.490] SetEvent (hEvent=0x27c) returned 1 [0207.490] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105530.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0207.490] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=7384) returned 1 [0207.490] CloseHandle (hObject=0x2fc) returned 1 [0207.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105530.wmf")) returned 0x220 [0207.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105530.wmf")) returned 0x220 [0207.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105530.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.491] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105530.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0207.491] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.491] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.491] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105530.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0207.491] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1cd8, lpOverlapped=0x0) returned 1 [0207.493] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1ce0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1ce0, lpOverlapped=0x0) returned 1 [0207.494] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0207.495] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.495] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.495] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1cd8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1cd8, lpOverlapped=0x0) returned 1 [0207.495] FlushFileBuffers (hFile=0x2fc) returned 1 [0207.501] FlushFileBuffers (hFile=0x2f4) returned 1 [0207.505] CloseHandle (hObject=0x2fc) returned 1 [0207.505] CloseHandle (hObject=0x2f4) returned 1 [0207.505] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105530.wmf")) returned 1 [0207.507] SetEvent (hEvent=0x27c) returned 1 [0207.507] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105600.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0207.507] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=8680) returned 1 [0207.507] CloseHandle (hObject=0x2f4) returned 1 [0207.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105600.wmf")) returned 0x220 [0207.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105600.wmf")) returned 0x220 [0207.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105600.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.507] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105600.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0207.508] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.508] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.508] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105600.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0207.508] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x21e8, lpOverlapped=0x0) returned 1 [0207.510] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x21f0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x21f0, lpOverlapped=0x0) returned 1 [0207.511] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0207.512] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.512] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.512] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x21e8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x21e8, lpOverlapped=0x0) returned 1 [0207.512] FlushFileBuffers (hFile=0x2f4) returned 1 [0207.515] FlushFileBuffers (hFile=0x2fc) returned 1 [0207.524] CloseHandle (hObject=0x2f4) returned 1 [0207.524] CloseHandle (hObject=0x2fc) returned 1 [0207.524] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105600.wmf")) returned 1 [0207.525] SetEvent (hEvent=0x27c) returned 1 [0207.525] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105710.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0207.526] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=13808) returned 1 [0207.526] CloseHandle (hObject=0x2fc) returned 1 [0207.526] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105710.wmf")) returned 0x220 [0207.526] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105710.wmf")) returned 0x220 [0207.526] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105710.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.526] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105710.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0207.526] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.526] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.526] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105710.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0207.527] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x35f0, lpOverlapped=0x0) returned 1 [0207.530] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3600, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3600, lpOverlapped=0x0) returned 1 [0207.532] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0207.532] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.532] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.532] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x35f0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x35f0, lpOverlapped=0x0) returned 1 [0207.532] FlushFileBuffers (hFile=0x2fc) returned 1 [0207.541] FlushFileBuffers (hFile=0x2f4) returned 1 [0207.546] CloseHandle (hObject=0x2fc) returned 1 [0207.546] CloseHandle (hObject=0x2f4) returned 1 [0207.546] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105710.wmf")) returned 1 [0207.547] SetEvent (hEvent=0x27c) returned 1 [0207.547] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105912.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0207.547] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=11720) returned 1 [0207.547] CloseHandle (hObject=0x2f4) returned 1 [0207.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105912.wmf")) returned 0x220 [0207.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105912.wmf")) returned 0x220 [0207.548] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105912.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.548] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105912.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0207.548] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.548] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.548] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105912.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0207.567] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2dc8, lpOverlapped=0x0) returned 1 [0207.569] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2dd0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2dd0, lpOverlapped=0x0) returned 1 [0207.570] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0207.570] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.570] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.570] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2dc8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2dc8, lpOverlapped=0x0) returned 1 [0207.570] FlushFileBuffers (hFile=0x2f4) returned 1 [0207.580] FlushFileBuffers (hFile=0x2fc) returned 1 [0207.582] CloseHandle (hObject=0x2f4) returned 1 [0207.582] CloseHandle (hObject=0x2fc) returned 1 [0207.582] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105912.wmf")) returned 1 [0207.583] SetEvent (hEvent=0x27c) returned 1 [0207.583] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106020.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0207.583] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=10060) returned 1 [0207.583] CloseHandle (hObject=0x2fc) returned 1 [0207.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106020.wmf")) returned 0x220 [0207.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106020.wmf")) returned 0x220 [0207.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106020.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.584] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106020.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0207.584] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.584] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.584] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106020.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0207.584] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x274c, lpOverlapped=0x0) returned 1 [0207.586] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2750, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2750, lpOverlapped=0x0) returned 1 [0207.587] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0207.588] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.588] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.588] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x274c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x274c, lpOverlapped=0x0) returned 1 [0207.588] FlushFileBuffers (hFile=0x2fc) returned 1 [0207.597] FlushFileBuffers (hFile=0x2f4) returned 1 [0207.599] CloseHandle (hObject=0x2fc) returned 1 [0207.599] CloseHandle (hObject=0x2f4) returned 1 [0207.599] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106020.wmf")) returned 1 [0207.600] SetEvent (hEvent=0x27c) returned 1 [0207.600] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106146.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0207.600] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=23548) returned 1 [0207.601] CloseHandle (hObject=0x2f4) returned 1 [0207.601] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106146.wmf")) returned 0x220 [0207.601] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106146.wmf")) returned 0x220 [0207.601] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106146.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.601] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106146.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0207.601] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.601] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.601] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106146.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0207.601] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x5bfc, lpOverlapped=0x0) returned 1 [0207.604] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5c00, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x5c00, lpOverlapped=0x0) returned 1 [0207.605] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0207.605] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.605] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.605] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5bfc, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x5bfc, lpOverlapped=0x0) returned 1 [0207.606] FlushFileBuffers (hFile=0x2f4) returned 1 [0207.608] FlushFileBuffers (hFile=0x2fc) returned 1 [0207.614] CloseHandle (hObject=0x2f4) returned 1 [0207.614] CloseHandle (hObject=0x2fc) returned 1 [0207.614] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106146.wmf")) returned 1 [0207.616] SetEvent (hEvent=0x27c) returned 1 [0207.616] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106222.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0207.616] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=19600) returned 1 [0207.616] CloseHandle (hObject=0x2fc) returned 1 [0207.616] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106222.wmf")) returned 0x220 [0207.616] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106222.wmf")) returned 0x220 [0207.616] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106222.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.616] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106222.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0207.616] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.617] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.617] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106222.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0207.617] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4c90, lpOverlapped=0x0) returned 1 [0207.622] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4ca0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4ca0, lpOverlapped=0x0) returned 1 [0207.624] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0207.624] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.624] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.624] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4c90, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4c90, lpOverlapped=0x0) returned 1 [0207.624] FlushFileBuffers (hFile=0x2fc) returned 1 [0207.629] FlushFileBuffers (hFile=0x2f4) returned 1 [0207.635] CloseHandle (hObject=0x2fc) returned 1 [0207.635] CloseHandle (hObject=0x2f4) returned 1 [0207.635] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106222.wmf")) returned 1 [0207.636] SetEvent (hEvent=0x27c) returned 1 [0207.636] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106816.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0207.637] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3332) returned 1 [0207.637] CloseHandle (hObject=0x2f4) returned 1 [0207.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106816.wmf")) returned 0x220 [0207.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106816.wmf")) returned 0x220 [0207.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106816.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.637] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106816.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0207.637] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.637] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.637] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106816.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0207.638] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xd04, lpOverlapped=0x0) returned 1 [0207.642] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xd10, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xd10, lpOverlapped=0x0) returned 1 [0207.643] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0207.643] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.643] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.643] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xd04, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xd04, lpOverlapped=0x0) returned 1 [0207.643] FlushFileBuffers (hFile=0x2f4) returned 1 [0207.647] FlushFileBuffers (hFile=0x2fc) returned 1 [0207.656] CloseHandle (hObject=0x2f4) returned 1 [0207.656] CloseHandle (hObject=0x2fc) returned 1 [0207.656] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106816.wmf")) returned 1 [0207.657] SetEvent (hEvent=0x27c) returned 1 [0207.657] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107024.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0207.659] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3020) returned 1 [0207.659] CloseHandle (hObject=0x2fc) returned 1 [0207.659] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107024.wmf")) returned 0x220 [0207.659] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107024.wmf")) returned 0x220 [0207.659] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107024.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.659] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107024.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0207.659] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.659] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.660] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107024.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0207.660] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xbcc, lpOverlapped=0x0) returned 1 [0207.662] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xbd0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xbd0, lpOverlapped=0x0) returned 1 [0207.663] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0207.663] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.664] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.664] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xbcc, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xbcc, lpOverlapped=0x0) returned 1 [0207.664] FlushFileBuffers (hFile=0x2fc) returned 1 [0207.673] FlushFileBuffers (hFile=0x2f4) returned 1 [0207.676] CloseHandle (hObject=0x2fc) returned 1 [0207.676] CloseHandle (hObject=0x2f4) returned 1 [0207.676] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107024.wmf")) returned 1 [0207.677] SetEvent (hEvent=0x27c) returned 1 [0207.677] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107042.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0207.678] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=9048) returned 1 [0207.678] CloseHandle (hObject=0x2f4) returned 1 [0207.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107042.wmf")) returned 0x220 [0207.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107042.wmf")) returned 0x220 [0207.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107042.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.678] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107042.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0207.678] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.678] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.678] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107042.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0207.679] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2358, lpOverlapped=0x0) returned 1 [0207.681] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2360, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2360, lpOverlapped=0x0) returned 1 [0207.682] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0207.682] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.682] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.682] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2358, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2358, lpOverlapped=0x0) returned 1 [0207.683] FlushFileBuffers (hFile=0x2f4) returned 1 [0207.692] FlushFileBuffers (hFile=0x2fc) returned 1 [0207.695] CloseHandle (hObject=0x2f4) returned 1 [0207.695] CloseHandle (hObject=0x2fc) returned 1 [0207.695] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107042.wmf")) returned 1 [0207.696] SetEvent (hEvent=0x27c) returned 1 [0207.696] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107130.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0207.697] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=27084) returned 1 [0207.697] CloseHandle (hObject=0x2fc) returned 1 [0207.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107130.wmf")) returned 0x220 [0207.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107130.wmf")) returned 0x220 [0207.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107130.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.697] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107130.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0207.697] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.697] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.697] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107130.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0207.698] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x69cc, lpOverlapped=0x0) returned 1 [0207.701] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x69d0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x69d0, lpOverlapped=0x0) returned 1 [0207.703] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0207.703] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.703] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.703] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x69cc, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x69cc, lpOverlapped=0x0) returned 1 [0207.703] FlushFileBuffers (hFile=0x2fc) returned 1 [0207.711] FlushFileBuffers (hFile=0x2f4) returned 1 [0207.717] CloseHandle (hObject=0x2fc) returned 1 [0207.717] CloseHandle (hObject=0x2f4) returned 1 [0207.717] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107130.wmf")) returned 1 [0207.718] SetEvent (hEvent=0x27c) returned 1 [0207.718] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107134.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0207.719] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=48388) returned 1 [0207.719] CloseHandle (hObject=0x2f4) returned 1 [0207.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107134.wmf")) returned 0x220 [0207.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107134.wmf")) returned 0x220 [0207.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107134.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.720] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107134.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0207.720] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.720] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.720] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107134.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0207.721] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xbd04, lpOverlapped=0x0) returned 1 [0207.724] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xbd10, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xbd10, lpOverlapped=0x0) returned 1 [0207.726] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0207.726] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.726] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.726] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xbd04, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xbd04, lpOverlapped=0x0) returned 1 [0207.727] FlushFileBuffers (hFile=0x2f4) returned 1 [0207.738] FlushFileBuffers (hFile=0x2fc) returned 1 [0207.740] CloseHandle (hObject=0x2f4) returned 1 [0207.740] CloseHandle (hObject=0x2fc) returned 1 [0207.740] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107134.wmf")) returned 1 [0207.742] SetEvent (hEvent=0x27c) returned 1 [0207.742] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107146.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0207.743] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=14996) returned 1 [0207.743] CloseHandle (hObject=0x2fc) returned 1 [0207.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107146.wmf")) returned 0x220 [0207.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107146.wmf")) returned 0x220 [0207.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107146.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.743] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107146.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0207.743] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.743] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.743] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107146.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0207.744] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x3a94, lpOverlapped=0x0) returned 1 [0207.747] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3aa0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3aa0, lpOverlapped=0x0) returned 1 [0207.748] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0207.749] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.749] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.749] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3a94, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x3a94, lpOverlapped=0x0) returned 1 [0207.749] FlushFileBuffers (hFile=0x2fc) returned 1 [0207.751] FlushFileBuffers (hFile=0x2f4) returned 1 [0207.758] CloseHandle (hObject=0x2fc) returned 1 [0207.759] CloseHandle (hObject=0x2f4) returned 1 [0207.759] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107146.wmf")) returned 1 [0207.760] SetEvent (hEvent=0x27c) returned 1 [0207.760] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107150.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0207.760] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=13456) returned 1 [0207.760] CloseHandle (hObject=0x2f4) returned 1 [0207.760] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107150.wmf")) returned 0x220 [0207.760] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107150.wmf")) returned 0x220 [0207.761] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107150.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.761] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107150.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0207.761] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.761] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.761] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107150.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0207.762] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x3490, lpOverlapped=0x0) returned 1 [0207.766] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x34a0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x34a0, lpOverlapped=0x0) returned 1 [0207.768] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0207.768] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.768] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.768] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3490, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x3490, lpOverlapped=0x0) returned 1 [0207.768] FlushFileBuffers (hFile=0x2f4) returned 1 [0207.772] FlushFileBuffers (hFile=0x2fc) returned 1 [0207.786] CloseHandle (hObject=0x2f4) returned 1 [0207.788] CloseHandle (hObject=0x2fc) returned 1 [0207.788] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107150.wmf")) returned 1 [0207.789] SetEvent (hEvent=0x27c) returned 1 [0207.789] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107154.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0207.790] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=22300) returned 1 [0207.790] CloseHandle (hObject=0x2fc) returned 1 [0207.790] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107154.wmf")) returned 0x220 [0207.790] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107154.wmf")) returned 0x220 [0207.790] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107154.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.790] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107154.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0207.790] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.790] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.790] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107154.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0207.791] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x571c, lpOverlapped=0x0) returned 1 [0207.794] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5720, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x5720, lpOverlapped=0x0) returned 1 [0207.796] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0207.796] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.796] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.796] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x571c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x571c, lpOverlapped=0x0) returned 1 [0207.796] FlushFileBuffers (hFile=0x2fc) returned 1 [0207.799] FlushFileBuffers (hFile=0x2f4) returned 1 [0207.809] CloseHandle (hObject=0x2fc) returned 1 [0207.809] CloseHandle (hObject=0x2f4) returned 1 [0207.809] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107154.wmf")) returned 1 [0207.810] SetEvent (hEvent=0x27c) returned 1 [0207.810] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107182.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0207.811] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=16100) returned 1 [0207.811] CloseHandle (hObject=0x2f4) returned 1 [0207.811] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107182.wmf")) returned 0x220 [0207.811] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107182.wmf")) returned 0x220 [0207.811] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107182.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.811] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107182.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0207.811] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.811] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.811] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107182.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0207.812] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x3ee4, lpOverlapped=0x0) returned 1 [0207.815] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3ef0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3ef0, lpOverlapped=0x0) returned 1 [0207.816] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0207.816] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.816] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.816] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3ee4, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x3ee4, lpOverlapped=0x0) returned 1 [0207.816] FlushFileBuffers (hFile=0x2f4) returned 1 [0207.819] FlushFileBuffers (hFile=0x2fc) returned 1 [0207.825] CloseHandle (hObject=0x2f4) returned 1 [0207.825] CloseHandle (hObject=0x2fc) returned 1 [0207.825] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107182.wmf")) returned 1 [0207.826] SetEvent (hEvent=0x27c) returned 1 [0207.827] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107192.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0207.827] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=9968) returned 1 [0207.827] CloseHandle (hObject=0x2fc) returned 1 [0207.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107192.wmf")) returned 0x220 [0207.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107192.wmf")) returned 0x220 [0207.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107192.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.827] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107192.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0207.827] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.827] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.827] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107192.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0207.828] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x26f0, lpOverlapped=0x0) returned 1 [0207.833] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2700, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2700, lpOverlapped=0x0) returned 1 [0207.834] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0207.834] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.834] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.834] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x26f0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x26f0, lpOverlapped=0x0) returned 1 [0207.835] FlushFileBuffers (hFile=0x2fc) returned 1 [0207.891] FlushFileBuffers (hFile=0x2f4) returned 1 [0207.898] CloseHandle (hObject=0x2fc) returned 1 [0207.898] CloseHandle (hObject=0x2f4) returned 1 [0207.898] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107192.wmf")) returned 1 [0207.900] SetEvent (hEvent=0x27c) returned 1 [0207.900] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107258.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0207.900] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=8552) returned 1 [0207.900] CloseHandle (hObject=0x2f4) returned 1 [0207.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107258.wmf")) returned 0x220 [0207.901] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107258.wmf")) returned 0x220 [0207.901] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107258.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.901] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107258.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0207.901] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.901] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.901] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107258.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0207.902] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2168, lpOverlapped=0x0) returned 1 [0207.907] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2170, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2170, lpOverlapped=0x0) returned 1 [0207.909] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0207.909] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.909] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.909] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2168, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2168, lpOverlapped=0x0) returned 1 [0207.909] FlushFileBuffers (hFile=0x2f4) returned 1 [0207.914] FlushFileBuffers (hFile=0x2fc) returned 1 [0207.931] CloseHandle (hObject=0x2f4) returned 1 [0207.932] CloseHandle (hObject=0x2fc) returned 1 [0207.932] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107258.wmf")) returned 1 [0207.933] SetEvent (hEvent=0x27c) returned 1 [0207.933] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107264.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0207.935] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=5272) returned 1 [0207.935] CloseHandle (hObject=0x2fc) returned 1 [0207.935] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107264.wmf")) returned 0x220 [0207.935] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107264.wmf")) returned 0x220 [0207.935] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107264.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.936] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107264.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0207.936] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.936] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.936] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107264.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0207.937] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1498, lpOverlapped=0x0) returned 1 [0207.939] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x14a0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x14a0, lpOverlapped=0x0) returned 1 [0207.940] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0207.940] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.940] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.940] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1498, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1498, lpOverlapped=0x0) returned 1 [0207.940] FlushFileBuffers (hFile=0x2fc) returned 1 [0207.950] FlushFileBuffers (hFile=0x2f4) returned 1 [0207.953] CloseHandle (hObject=0x2fc) returned 1 [0207.953] CloseHandle (hObject=0x2f4) returned 1 [0207.953] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107264.wmf")) returned 1 [0207.954] SetEvent (hEvent=0x27c) returned 1 [0207.954] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107280.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0207.955] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=11108) returned 1 [0207.955] CloseHandle (hObject=0x2f4) returned 1 [0207.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107280.wmf")) returned 0x220 [0207.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107280.wmf")) returned 0x220 [0207.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107280.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.956] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107280.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0207.956] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.956] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.956] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107280.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0207.956] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2b64, lpOverlapped=0x0) returned 1 [0207.962] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2b70, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2b70, lpOverlapped=0x0) returned 1 [0207.963] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0207.963] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.964] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.964] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2b64, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2b64, lpOverlapped=0x0) returned 1 [0207.964] FlushFileBuffers (hFile=0x2f4) returned 1 [0207.974] FlushFileBuffers (hFile=0x2fc) returned 1 [0207.976] CloseHandle (hObject=0x2f4) returned 1 [0207.976] CloseHandle (hObject=0x2fc) returned 1 [0207.976] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107280.wmf")) returned 1 [0207.977] SetEvent (hEvent=0x27c) returned 1 [0207.978] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107288.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0207.979] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=13436) returned 1 [0207.979] CloseHandle (hObject=0x2fc) returned 1 [0207.979] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107288.wmf")) returned 0x220 [0207.979] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107288.wmf")) returned 0x220 [0207.979] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107288.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.979] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107288.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0207.979] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.979] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0207.979] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107288.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0207.980] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x347c, lpOverlapped=0x0) returned 1 [0207.982] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3480, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3480, lpOverlapped=0x0) returned 1 [0207.984] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0207.984] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.984] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0207.984] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x347c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x347c, lpOverlapped=0x0) returned 1 [0207.984] FlushFileBuffers (hFile=0x2fc) returned 1 [0207.991] FlushFileBuffers (hFile=0x2f4) returned 1 [0207.996] CloseHandle (hObject=0x2fc) returned 1 [0207.997] CloseHandle (hObject=0x2f4) returned 1 [0207.997] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107288.wmf")) returned 1 [0207.998] SetEvent (hEvent=0x27c) returned 1 [0207.999] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107300.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0207.999] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2460) returned 1 [0207.999] CloseHandle (hObject=0x2f4) returned 1 [0207.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107300.wmf")) returned 0x220 [0208.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107300.wmf")) returned 0x220 [0208.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107300.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.000] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107300.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0208.000] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.000] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.000] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107300.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0208.001] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x99c, lpOverlapped=0x0) returned 1 [0208.003] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x9a0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x9a0, lpOverlapped=0x0) returned 1 [0208.004] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0208.004] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.004] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.004] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x99c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x99c, lpOverlapped=0x0) returned 1 [0208.004] FlushFileBuffers (hFile=0x2f4) returned 1 [0208.015] FlushFileBuffers (hFile=0x2fc) returned 1 [0208.017] CloseHandle (hObject=0x2f4) returned 1 [0208.017] CloseHandle (hObject=0x2fc) returned 1 [0208.017] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107300.wmf")) returned 1 [0208.018] SetEvent (hEvent=0x27c) returned 1 [0208.018] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107308.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0208.019] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=15888) returned 1 [0208.019] CloseHandle (hObject=0x2fc) returned 1 [0208.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107308.wmf")) returned 0x220 [0208.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107308.wmf")) returned 0x220 [0208.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107308.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.019] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107308.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0208.019] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.019] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.019] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107308.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0208.020] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x3e10, lpOverlapped=0x0) returned 1 [0208.022] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3e20, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3e20, lpOverlapped=0x0) returned 1 [0208.024] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0208.024] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.024] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.024] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3e10, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x3e10, lpOverlapped=0x0) returned 1 [0208.024] FlushFileBuffers (hFile=0x2fc) returned 1 [0208.037] FlushFileBuffers (hFile=0x2f4) returned 1 [0208.041] CloseHandle (hObject=0x2fc) returned 1 [0208.041] CloseHandle (hObject=0x2f4) returned 1 [0208.041] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107308.wmf")) returned 1 [0208.042] SetEvent (hEvent=0x27c) returned 1 [0208.043] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107316.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0208.044] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=11288) returned 1 [0208.044] CloseHandle (hObject=0x2f4) returned 1 [0208.044] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107316.wmf")) returned 0x220 [0208.044] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107316.wmf")) returned 0x220 [0208.044] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107316.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.044] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107316.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0208.044] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.044] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.044] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107316.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0208.045] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2c18, lpOverlapped=0x0) returned 1 [0208.048] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2c20, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2c20, lpOverlapped=0x0) returned 1 [0208.049] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0208.049] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.049] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.049] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2c18, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2c18, lpOverlapped=0x0) returned 1 [0208.049] FlushFileBuffers (hFile=0x2f4) returned 1 [0208.068] FlushFileBuffers (hFile=0x2fc) returned 1 [0208.070] CloseHandle (hObject=0x2f4) returned 1 [0208.070] CloseHandle (hObject=0x2fc) returned 1 [0208.070] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107316.wmf")) returned 1 [0208.072] SetEvent (hEvent=0x27c) returned 1 [0208.072] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107342.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0208.073] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=4244) returned 1 [0208.073] CloseHandle (hObject=0x2fc) returned 1 [0208.074] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107342.wmf")) returned 0x220 [0208.074] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107342.wmf")) returned 0x220 [0208.074] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107342.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.074] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107342.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0208.074] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.074] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.074] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107342.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0208.075] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1094, lpOverlapped=0x0) returned 1 [0208.077] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x10a0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x10a0, lpOverlapped=0x0) returned 1 [0208.078] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0208.078] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.078] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.078] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1094, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1094, lpOverlapped=0x0) returned 1 [0208.078] FlushFileBuffers (hFile=0x2fc) returned 1 [0208.089] FlushFileBuffers (hFile=0x2f4) returned 1 [0208.091] CloseHandle (hObject=0x2fc) returned 1 [0208.092] CloseHandle (hObject=0x2f4) returned 1 [0208.092] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107342.wmf")) returned 1 [0208.093] SetEvent (hEvent=0x27c) returned 1 [0208.093] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107350.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0208.094] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=23672) returned 1 [0208.094] CloseHandle (hObject=0x2f4) returned 1 [0208.094] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107350.wmf")) returned 0x220 [0208.094] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107350.wmf")) returned 0x220 [0208.094] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107350.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.094] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107350.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0208.094] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.094] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.094] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107350.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0208.095] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x5c78, lpOverlapped=0x0) returned 1 [0208.097] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5c80, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x5c80, lpOverlapped=0x0) returned 1 [0208.099] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0208.099] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.099] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.099] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5c78, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x5c78, lpOverlapped=0x0) returned 1 [0208.099] FlushFileBuffers (hFile=0x2f4) returned 1 [0208.363] FlushFileBuffers (hFile=0x2fc) returned 1 [0208.364] CloseHandle (hObject=0x2f4) returned 1 [0208.364] CloseHandle (hObject=0x2fc) returned 1 [0208.365] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107350.wmf")) returned 1 [0208.366] SetEvent (hEvent=0x27c) returned 1 [0208.366] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107490.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0208.367] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=16468) returned 1 [0208.367] CloseHandle (hObject=0x2fc) returned 1 [0208.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107490.wmf")) returned 0x220 [0208.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107490.wmf")) returned 0x220 [0208.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107490.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.367] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107490.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0208.368] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.368] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.368] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107490.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0208.369] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4054, lpOverlapped=0x0) returned 1 [0208.372] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4060, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4060, lpOverlapped=0x0) returned 1 [0208.373] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0208.373] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.373] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.373] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4054, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4054, lpOverlapped=0x0) returned 1 [0208.373] FlushFileBuffers (hFile=0x2fc) returned 1 [0208.380] FlushFileBuffers (hFile=0x2f4) returned 1 [0208.384] CloseHandle (hObject=0x2fc) returned 1 [0208.384] CloseHandle (hObject=0x2f4) returned 1 [0208.384] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107490.wmf")) returned 1 [0208.385] SetEvent (hEvent=0x27c) returned 1 [0208.385] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107494.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0208.386] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=6424) returned 1 [0208.386] CloseHandle (hObject=0x2f4) returned 1 [0208.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107494.wmf")) returned 0x220 [0208.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107494.wmf")) returned 0x220 [0208.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107494.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.387] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107494.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0208.387] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.387] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.387] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107494.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0208.387] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1918, lpOverlapped=0x0) returned 1 [0208.390] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1920, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1920, lpOverlapped=0x0) returned 1 [0208.391] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0208.391] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.391] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.391] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1918, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1918, lpOverlapped=0x0) returned 1 [0208.391] FlushFileBuffers (hFile=0x2f4) returned 1 [0208.401] FlushFileBuffers (hFile=0x2fc) returned 1 [0208.402] CloseHandle (hObject=0x2f4) returned 1 [0208.402] CloseHandle (hObject=0x2fc) returned 1 [0208.403] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107494.wmf")) returned 1 [0208.404] SetEvent (hEvent=0x27c) returned 1 [0208.404] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107500.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0208.404] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=4200) returned 1 [0208.404] CloseHandle (hObject=0x2fc) returned 1 [0208.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107500.wmf")) returned 0x220 [0208.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107500.wmf")) returned 0x220 [0208.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107500.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.405] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107500.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0208.405] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.405] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.405] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107500.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0208.405] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1068, lpOverlapped=0x0) returned 1 [0208.407] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1070, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1070, lpOverlapped=0x0) returned 1 [0208.408] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0208.409] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.409] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.409] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1068, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1068, lpOverlapped=0x0) returned 1 [0208.409] FlushFileBuffers (hFile=0x2fc) returned 1 [0208.419] FlushFileBuffers (hFile=0x2f4) returned 1 [0208.422] CloseHandle (hObject=0x2fc) returned 1 [0208.422] CloseHandle (hObject=0x2f4) returned 1 [0208.422] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107500.wmf")) returned 1 [0208.423] SetEvent (hEvent=0x27c) returned 1 [0208.423] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107512.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0208.424] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=11404) returned 1 [0208.424] CloseHandle (hObject=0x2f4) returned 1 [0208.424] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107512.wmf")) returned 0x220 [0208.424] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107512.wmf")) returned 0x220 [0208.424] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107512.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.424] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107512.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0208.424] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.424] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.424] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107512.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0208.425] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2c8c, lpOverlapped=0x0) returned 1 [0208.427] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2c90, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2c90, lpOverlapped=0x0) returned 1 [0208.428] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0208.428] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.428] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.428] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2c8c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2c8c, lpOverlapped=0x0) returned 1 [0208.428] FlushFileBuffers (hFile=0x2f4) returned 1 [0208.450] FlushFileBuffers (hFile=0x2fc) returned 1 [0208.452] CloseHandle (hObject=0x2f4) returned 1 [0208.452] CloseHandle (hObject=0x2fc) returned 1 [0208.452] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107512.wmf")) returned 1 [0208.453] SetEvent (hEvent=0x27c) returned 1 [0208.453] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107516.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0208.455] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=14008) returned 1 [0208.455] CloseHandle (hObject=0x2fc) returned 1 [0208.455] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107516.wmf")) returned 0x220 [0208.455] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107516.wmf")) returned 0x220 [0208.455] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107516.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.455] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107516.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0208.455] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.455] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.455] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107516.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0208.456] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x36b8, lpOverlapped=0x0) returned 1 [0208.467] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x36c0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x36c0, lpOverlapped=0x0) returned 1 [0208.471] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0208.474] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.474] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.474] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x36b8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x36b8, lpOverlapped=0x0) returned 1 [0208.474] FlushFileBuffers (hFile=0x2fc) returned 1 [0208.488] FlushFileBuffers (hFile=0x2f4) returned 1 [0208.494] CloseHandle (hObject=0x2fc) returned 1 [0208.494] CloseHandle (hObject=0x2f4) returned 1 [0208.494] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107516.wmf")) returned 1 [0208.495] SetEvent (hEvent=0x27c) returned 1 [0208.495] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107528.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0208.496] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=6792) returned 1 [0208.496] CloseHandle (hObject=0x2f4) returned 1 [0208.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107528.wmf")) returned 0x220 [0208.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107528.wmf")) returned 0x220 [0208.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107528.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.496] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107528.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0208.497] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.497] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.497] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107528.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0208.498] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1a88, lpOverlapped=0x0) returned 1 [0208.500] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1a90, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1a90, lpOverlapped=0x0) returned 1 [0208.500] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0208.501] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.501] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.501] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1a88, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1a88, lpOverlapped=0x0) returned 1 [0208.501] FlushFileBuffers (hFile=0x2f4) returned 1 [0208.504] FlushFileBuffers (hFile=0x2fc) returned 1 [0208.505] CloseHandle (hObject=0x2f4) returned 1 [0208.505] CloseHandle (hObject=0x2fc) returned 1 [0208.505] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107528.wmf")) returned 1 [0208.506] SetEvent (hEvent=0x27c) returned 1 [0208.507] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107544.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0208.508] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=26768) returned 1 [0208.508] CloseHandle (hObject=0x2fc) returned 1 [0208.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107544.wmf")) returned 0x220 [0208.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107544.wmf")) returned 0x220 [0208.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107544.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.508] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107544.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0208.508] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.508] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.509] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107544.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0208.509] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x6890, lpOverlapped=0x0) returned 1 [0208.512] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x68a0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x68a0, lpOverlapped=0x0) returned 1 [0208.513] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0208.514] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.514] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.514] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x6890, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x6890, lpOverlapped=0x0) returned 1 [0208.514] FlushFileBuffers (hFile=0x2fc) returned 1 [0208.516] FlushFileBuffers (hFile=0x2f4) returned 1 [0208.518] CloseHandle (hObject=0x2fc) returned 1 [0208.518] CloseHandle (hObject=0x2f4) returned 1 [0208.518] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107544.wmf")) returned 1 [0208.519] SetEvent (hEvent=0x27c) returned 1 [0208.519] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107658.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0208.520] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=7072) returned 1 [0208.520] CloseHandle (hObject=0x2f4) returned 1 [0208.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107658.wmf")) returned 0x220 [0208.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107658.wmf")) returned 0x220 [0208.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107658.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.521] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107658.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0208.521] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.521] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.521] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107658.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0208.522] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1ba0, lpOverlapped=0x0) returned 1 [0208.523] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1bb0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1bb0, lpOverlapped=0x0) returned 1 [0208.524] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0208.525] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.525] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.525] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1ba0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1ba0, lpOverlapped=0x0) returned 1 [0208.525] FlushFileBuffers (hFile=0x2f4) returned 1 [0208.527] FlushFileBuffers (hFile=0x2fc) returned 1 [0208.528] CloseHandle (hObject=0x2f4) returned 1 [0208.528] CloseHandle (hObject=0x2fc) returned 1 [0208.529] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107658.wmf")) returned 1 [0208.530] SetEvent (hEvent=0x27c) returned 1 [0208.530] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107708.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0208.531] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=4808) returned 1 [0208.531] CloseHandle (hObject=0x2fc) returned 1 [0208.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107708.wmf")) returned 0x220 [0208.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107708.wmf")) returned 0x220 [0208.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107708.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.531] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107708.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0208.531] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.531] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.531] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107708.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0208.532] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x12c8, lpOverlapped=0x0) returned 1 [0208.534] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x12d0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x12d0, lpOverlapped=0x0) returned 1 [0208.535] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0208.535] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.535] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.535] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x12c8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x12c8, lpOverlapped=0x0) returned 1 [0208.535] FlushFileBuffers (hFile=0x2fc) returned 1 [0208.537] FlushFileBuffers (hFile=0x2f4) returned 1 [0208.539] CloseHandle (hObject=0x2fc) returned 1 [0208.539] CloseHandle (hObject=0x2f4) returned 1 [0208.539] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107708.wmf")) returned 1 [0208.540] SetEvent (hEvent=0x27c) returned 1 [0208.540] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107712.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0208.541] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=4636) returned 1 [0208.541] CloseHandle (hObject=0x2f4) returned 1 [0208.541] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107712.wmf")) returned 0x220 [0208.541] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107712.wmf")) returned 0x220 [0208.541] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107712.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.541] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107712.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0208.542] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.542] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.542] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107712.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0208.543] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x121c, lpOverlapped=0x0) returned 1 [0208.544] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1220, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1220, lpOverlapped=0x0) returned 1 [0208.545] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0208.545] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.545] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.545] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x121c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x121c, lpOverlapped=0x0) returned 1 [0208.546] FlushFileBuffers (hFile=0x2f4) returned 1 [0208.549] FlushFileBuffers (hFile=0x2fc) returned 1 [0208.551] CloseHandle (hObject=0x2f4) returned 1 [0208.551] CloseHandle (hObject=0x2fc) returned 1 [0208.551] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107712.wmf")) returned 1 [0208.552] SetEvent (hEvent=0x27c) returned 1 [0208.552] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107718.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0208.553] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3800) returned 1 [0208.553] CloseHandle (hObject=0x2fc) returned 1 [0208.553] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107718.wmf")) returned 0x220 [0208.553] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107718.wmf")) returned 0x220 [0208.553] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107718.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.553] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107718.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0208.553] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.553] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.553] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107718.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0208.554] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xed8, lpOverlapped=0x0) returned 1 [0208.556] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xee0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xee0, lpOverlapped=0x0) returned 1 [0208.556] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0208.557] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.557] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.557] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xed8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xed8, lpOverlapped=0x0) returned 1 [0208.557] FlushFileBuffers (hFile=0x2fc) returned 1 [0208.559] FlushFileBuffers (hFile=0x2f4) returned 1 [0208.560] CloseHandle (hObject=0x2fc) returned 1 [0208.560] CloseHandle (hObject=0x2f4) returned 1 [0208.560] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107718.wmf")) returned 1 [0208.561] SetEvent (hEvent=0x27c) returned 1 [0208.561] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107722.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0208.562] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=8260) returned 1 [0208.562] CloseHandle (hObject=0x2f4) returned 1 [0208.562] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107722.wmf")) returned 0x220 [0208.562] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107722.wmf")) returned 0x220 [0208.562] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107722.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.563] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107722.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0208.563] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.563] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.563] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107722.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0208.564] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2044, lpOverlapped=0x0) returned 1 [0208.565] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2050, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2050, lpOverlapped=0x0) returned 1 [0208.566] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0208.567] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.567] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.567] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2044, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2044, lpOverlapped=0x0) returned 1 [0208.567] FlushFileBuffers (hFile=0x2f4) returned 1 [0208.569] FlushFileBuffers (hFile=0x2fc) returned 1 [0208.570] CloseHandle (hObject=0x2f4) returned 1 [0208.570] CloseHandle (hObject=0x2fc) returned 1 [0208.570] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107722.wmf")) returned 1 [0208.571] SetEvent (hEvent=0x27c) returned 1 [0208.571] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107724.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0208.572] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=7016) returned 1 [0208.572] CloseHandle (hObject=0x2fc) returned 1 [0208.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107724.wmf")) returned 0x220 [0208.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107724.wmf")) returned 0x220 [0208.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107724.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.572] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107724.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0208.572] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.572] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.573] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107724.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0208.573] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1b68, lpOverlapped=0x0) returned 1 [0208.575] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1b70, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1b70, lpOverlapped=0x0) returned 1 [0208.577] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0208.577] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.577] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.577] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1b68, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1b68, lpOverlapped=0x0) returned 1 [0208.577] FlushFileBuffers (hFile=0x2fc) returned 1 [0208.579] FlushFileBuffers (hFile=0x2f4) returned 1 [0208.581] CloseHandle (hObject=0x2fc) returned 1 [0208.581] CloseHandle (hObject=0x2f4) returned 1 [0208.581] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107724.wmf")) returned 1 [0208.582] SetEvent (hEvent=0x27c) returned 1 [0208.582] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107728.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0208.583] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=5492) returned 1 [0208.583] CloseHandle (hObject=0x2f4) returned 1 [0208.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107728.wmf")) returned 0x220 [0208.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107728.wmf")) returned 0x220 [0208.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107728.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.583] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107728.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0208.583] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.583] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.583] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107728.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0208.584] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1574, lpOverlapped=0x0) returned 1 [0208.586] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1580, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1580, lpOverlapped=0x0) returned 1 [0208.587] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0208.587] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.587] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.587] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1574, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1574, lpOverlapped=0x0) returned 1 [0208.587] FlushFileBuffers (hFile=0x2f4) returned 1 [0208.590] FlushFileBuffers (hFile=0x2fc) returned 1 [0208.591] CloseHandle (hObject=0x2f4) returned 1 [0208.591] CloseHandle (hObject=0x2fc) returned 1 [0208.591] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107728.wmf")) returned 1 [0208.592] SetEvent (hEvent=0x27c) returned 1 [0208.592] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107730.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0208.593] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3060) returned 1 [0208.593] CloseHandle (hObject=0x2fc) returned 1 [0208.593] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107730.wmf")) returned 0x220 [0208.593] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107730.wmf")) returned 0x220 [0208.593] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107730.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.593] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107730.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0208.593] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.593] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.593] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107730.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0208.594] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xbf4, lpOverlapped=0x0) returned 1 [0208.596] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xc00, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xc00, lpOverlapped=0x0) returned 1 [0208.597] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0208.597] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.597] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.597] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xbf4, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xbf4, lpOverlapped=0x0) returned 1 [0208.597] FlushFileBuffers (hFile=0x2fc) returned 1 [0208.599] FlushFileBuffers (hFile=0x2f4) returned 1 [0208.601] CloseHandle (hObject=0x2fc) returned 1 [0208.601] CloseHandle (hObject=0x2f4) returned 1 [0208.601] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107730.wmf")) returned 1 [0208.602] SetEvent (hEvent=0x27c) returned 1 [0208.602] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107734.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0208.602] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3140) returned 1 [0208.602] CloseHandle (hObject=0x2f4) returned 1 [0208.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107734.wmf")) returned 0x220 [0208.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107734.wmf")) returned 0x220 [0208.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107734.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.603] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107734.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0208.603] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.603] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.603] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107734.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0208.604] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xc44, lpOverlapped=0x0) returned 1 [0208.605] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xc50, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xc50, lpOverlapped=0x0) returned 1 [0208.606] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0208.606] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.606] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.606] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xc44, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xc44, lpOverlapped=0x0) returned 1 [0208.607] FlushFileBuffers (hFile=0x2f4) returned 1 [0208.609] FlushFileBuffers (hFile=0x2fc) returned 1 [0208.610] CloseHandle (hObject=0x2f4) returned 1 [0208.610] CloseHandle (hObject=0x2fc) returned 1 [0208.610] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107734.wmf")) returned 1 [0208.611] SetEvent (hEvent=0x27c) returned 1 [0208.611] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107742.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0208.612] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3644) returned 1 [0208.612] CloseHandle (hObject=0x2fc) returned 1 [0208.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107742.wmf")) returned 0x220 [0208.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107742.wmf")) returned 0x220 [0208.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107742.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.612] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107742.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0208.612] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.613] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.613] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107742.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0208.613] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xe3c, lpOverlapped=0x0) returned 1 [0208.615] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xe40, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xe40, lpOverlapped=0x0) returned 1 [0208.616] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0208.616] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.616] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.616] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xe3c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xe3c, lpOverlapped=0x0) returned 1 [0208.616] FlushFileBuffers (hFile=0x2fc) returned 1 [0208.619] FlushFileBuffers (hFile=0x2f4) returned 1 [0208.620] CloseHandle (hObject=0x2fc) returned 1 [0208.620] CloseHandle (hObject=0x2f4) returned 1 [0208.620] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107742.wmf")) returned 1 [0208.621] SetEvent (hEvent=0x27c) returned 1 [0208.621] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107744.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0208.622] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=5004) returned 1 [0208.622] CloseHandle (hObject=0x2f4) returned 1 [0208.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107744.wmf")) returned 0x220 [0208.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107744.wmf")) returned 0x220 [0208.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107744.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.622] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107744.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0208.622] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.622] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.622] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107744.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0208.635] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x138c, lpOverlapped=0x0) returned 1 [0208.636] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1390, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1390, lpOverlapped=0x0) returned 1 [0208.637] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0208.638] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.638] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.638] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x138c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x138c, lpOverlapped=0x0) returned 1 [0208.638] FlushFileBuffers (hFile=0x2f4) returned 1 [0208.642] FlushFileBuffers (hFile=0x2fc) returned 1 [0208.643] CloseHandle (hObject=0x2f4) returned 1 [0208.643] CloseHandle (hObject=0x2fc) returned 1 [0208.643] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107744.wmf")) returned 1 [0208.644] SetEvent (hEvent=0x27c) returned 1 [0208.644] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107746.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0208.645] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=4788) returned 1 [0208.645] CloseHandle (hObject=0x2fc) returned 1 [0208.645] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107746.wmf")) returned 0x220 [0208.645] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107746.wmf")) returned 0x220 [0208.645] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107746.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.646] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107746.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0208.646] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.646] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.646] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107746.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0208.647] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x12b4, lpOverlapped=0x0) returned 1 [0208.648] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x12c0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x12c0, lpOverlapped=0x0) returned 1 [0208.649] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0208.650] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.650] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.650] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x12b4, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x12b4, lpOverlapped=0x0) returned 1 [0208.650] FlushFileBuffers (hFile=0x2fc) returned 1 [0208.653] FlushFileBuffers (hFile=0x2f4) returned 1 [0208.654] CloseHandle (hObject=0x2fc) returned 1 [0208.654] CloseHandle (hObject=0x2f4) returned 1 [0208.654] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107746.wmf")) returned 1 [0208.655] SetEvent (hEvent=0x27c) returned 1 [0208.656] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107748.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0208.657] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=8224) returned 1 [0208.657] CloseHandle (hObject=0x2f4) returned 1 [0208.657] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107748.wmf")) returned 0x220 [0208.657] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107748.wmf")) returned 0x220 [0208.657] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107748.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.657] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107748.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0208.657] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.658] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.658] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107748.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0208.658] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2020, lpOverlapped=0x0) returned 1 [0208.660] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2030, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2030, lpOverlapped=0x0) returned 1 [0208.661] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0208.661] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.662] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.662] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2020, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2020, lpOverlapped=0x0) returned 1 [0208.662] FlushFileBuffers (hFile=0x2f4) returned 1 [0208.664] FlushFileBuffers (hFile=0x2fc) returned 1 [0208.665] CloseHandle (hObject=0x2f4) returned 1 [0208.665] CloseHandle (hObject=0x2fc) returned 1 [0208.665] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107748.wmf")) returned 1 [0208.667] SetEvent (hEvent=0x27c) returned 1 [0208.667] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107750.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0208.668] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=4716) returned 1 [0208.668] CloseHandle (hObject=0x2fc) returned 1 [0208.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107750.wmf")) returned 0x220 [0208.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107750.wmf")) returned 0x220 [0208.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107750.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.669] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107750.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0208.669] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.669] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.669] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107750.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0208.670] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x126c, lpOverlapped=0x0) returned 1 [0208.672] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1270, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1270, lpOverlapped=0x0) returned 1 [0208.674] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0208.674] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.674] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.674] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x126c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x126c, lpOverlapped=0x0) returned 1 [0208.674] FlushFileBuffers (hFile=0x2fc) returned 1 [0208.677] FlushFileBuffers (hFile=0x2f4) returned 1 [0208.679] CloseHandle (hObject=0x2fc) returned 1 [0208.679] CloseHandle (hObject=0x2f4) returned 1 [0208.679] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107750.wmf")) returned 1 [0208.680] SetEvent (hEvent=0x27c) returned 1 [0208.680] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0136865.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0208.681] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=16710) returned 1 [0208.681] CloseHandle (hObject=0x2f4) returned 1 [0208.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0136865.wmf")) returned 0x220 [0208.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0136865.wmf")) returned 0x220 [0208.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0136865.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.682] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0136865.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0208.682] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.682] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.682] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0136865.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0208.683] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4146, lpOverlapped=0x0) returned 1 [0208.685] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4150, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4150, lpOverlapped=0x0) returned 1 [0208.686] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0208.686] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.686] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.687] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4146, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4146, lpOverlapped=0x0) returned 1 [0208.687] FlushFileBuffers (hFile=0x2f4) returned 1 [0208.689] FlushFileBuffers (hFile=0x2fc) returned 1 [0208.690] CloseHandle (hObject=0x2f4) returned 1 [0208.690] CloseHandle (hObject=0x2fc) returned 1 [0208.690] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0136865.wmf")) returned 1 [0208.692] SetEvent (hEvent=0x27c) returned 1 [0208.692] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0144773.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0208.693] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=40231) returned 1 [0208.693] CloseHandle (hObject=0x2fc) returned 1 [0208.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0144773.jpg")) returned 0x220 [0208.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0144773.jpg")) returned 0x220 [0208.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0144773.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.693] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0144773.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0208.693] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.693] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.693] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0144773.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0208.695] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x9d27, lpOverlapped=0x0) returned 1 [0208.697] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x9d30, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x9d30, lpOverlapped=0x0) returned 1 [0208.699] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0208.699] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.700] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.700] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x9d27, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x9d27, lpOverlapped=0x0) returned 1 [0208.700] FlushFileBuffers (hFile=0x2fc) returned 1 [0208.703] FlushFileBuffers (hFile=0x2f4) returned 1 [0208.705] CloseHandle (hObject=0x2fc) returned 1 [0208.705] CloseHandle (hObject=0x2f4) returned 1 [0208.705] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0144773.jpg")) returned 1 [0208.706] SetEvent (hEvent=0x27c) returned 1 [0208.706] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145168.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0208.708] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=33657) returned 1 [0208.708] CloseHandle (hObject=0x2f4) returned 1 [0208.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145168.jpg")) returned 0x220 [0208.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145168.jpg")) returned 0x220 [0208.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145168.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.708] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145168.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0208.709] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.709] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.709] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145168.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0208.710] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x8379, lpOverlapped=0x0) returned 1 [0208.712] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8380, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x8380, lpOverlapped=0x0) returned 1 [0208.715] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0208.715] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.715] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.716] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8379, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x8379, lpOverlapped=0x0) returned 1 [0208.716] FlushFileBuffers (hFile=0x2f4) returned 1 [0208.718] FlushFileBuffers (hFile=0x2fc) returned 1 [0208.719] CloseHandle (hObject=0x2f4) returned 1 [0208.719] CloseHandle (hObject=0x2fc) returned 1 [0208.720] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145168.jpg")) returned 1 [0208.721] SetEvent (hEvent=0x27c) returned 1 [0208.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145212.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0208.722] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=61633) returned 1 [0208.722] CloseHandle (hObject=0x2fc) returned 1 [0208.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145212.jpg")) returned 0x220 [0208.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145212.jpg")) returned 0x220 [0208.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145212.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.722] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145212.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0208.722] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.722] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.722] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145212.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0208.723] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xf0c1, lpOverlapped=0x0) returned 1 [0208.727] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf0d0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf0d0, lpOverlapped=0x0) returned 1 [0208.729] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0208.729] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.729] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.729] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf0c1, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xf0c1, lpOverlapped=0x0) returned 1 [0208.729] FlushFileBuffers (hFile=0x2fc) returned 1 [0208.733] FlushFileBuffers (hFile=0x2f4) returned 1 [0208.734] CloseHandle (hObject=0x2fc) returned 1 [0208.735] CloseHandle (hObject=0x2f4) returned 1 [0208.735] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145212.jpg")) returned 1 [0208.736] SetEvent (hEvent=0x27c) returned 1 [0208.736] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145272.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0208.737] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=49238) returned 1 [0208.737] CloseHandle (hObject=0x2f4) returned 1 [0208.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145272.jpg")) returned 0x220 [0208.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145272.jpg")) returned 0x220 [0208.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145272.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.738] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145272.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0208.738] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.738] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.738] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145272.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0208.739] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xc056, lpOverlapped=0x0) returned 1 [0208.742] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xc060, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xc060, lpOverlapped=0x0) returned 1 [0208.744] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0208.744] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.744] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.744] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xc056, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xc056, lpOverlapped=0x0) returned 1 [0208.744] FlushFileBuffers (hFile=0x2f4) returned 1 [0208.747] FlushFileBuffers (hFile=0x2fc) returned 1 [0208.748] CloseHandle (hObject=0x2f4) returned 1 [0208.749] CloseHandle (hObject=0x2fc) returned 1 [0208.749] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145272.jpg")) returned 1 [0208.750] SetEvent (hEvent=0x27c) returned 1 [0208.750] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145361.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0208.751] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=21125) returned 1 [0208.751] CloseHandle (hObject=0x2fc) returned 1 [0208.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145361.jpg")) returned 0x220 [0208.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145361.jpg")) returned 0x220 [0208.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145361.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.752] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145361.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0208.752] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.752] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.752] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145361.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0208.753] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x5285, lpOverlapped=0x0) returned 1 [0208.755] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5290, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x5290, lpOverlapped=0x0) returned 1 [0208.756] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0208.757] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.757] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.757] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5285, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x5285, lpOverlapped=0x0) returned 1 [0208.757] FlushFileBuffers (hFile=0x2fc) returned 1 [0208.760] FlushFileBuffers (hFile=0x2f4) returned 1 [0208.761] CloseHandle (hObject=0x2fc) returned 1 [0208.761] CloseHandle (hObject=0x2f4) returned 1 [0208.761] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145361.jpg")) returned 1 [0208.762] SetEvent (hEvent=0x27c) returned 1 [0208.763] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145373.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0208.764] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=17867) returned 1 [0208.764] CloseHandle (hObject=0x2f4) returned 1 [0208.764] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145373.jpg")) returned 0x220 [0208.764] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145373.jpg")) returned 0x220 [0208.764] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145373.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.765] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145373.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0208.765] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.765] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.765] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145373.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0208.766] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x45cb, lpOverlapped=0x0) returned 1 [0208.768] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x45d0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x45d0, lpOverlapped=0x0) returned 1 [0208.769] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0208.769] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.769] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.770] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x45cb, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x45cb, lpOverlapped=0x0) returned 1 [0208.770] FlushFileBuffers (hFile=0x2f4) returned 1 [0208.772] FlushFileBuffers (hFile=0x2fc) returned 1 [0208.773] CloseHandle (hObject=0x2f4) returned 1 [0208.773] CloseHandle (hObject=0x2fc) returned 1 [0208.773] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145373.jpg")) returned 1 [0208.774] SetEvent (hEvent=0x27c) returned 1 [0208.775] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145669.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0208.776] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=31850) returned 1 [0208.776] CloseHandle (hObject=0x2fc) returned 1 [0208.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145669.jpg")) returned 0x220 [0208.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145669.jpg")) returned 0x220 [0208.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145669.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.776] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145669.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0208.776] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.776] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.776] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145669.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0208.777] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x7c6a, lpOverlapped=0x0) returned 1 [0208.782] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7c70, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x7c70, lpOverlapped=0x0) returned 1 [0208.784] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0208.784] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.784] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.784] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7c6a, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x7c6a, lpOverlapped=0x0) returned 1 [0208.784] FlushFileBuffers (hFile=0x2fc) returned 1 [0208.787] FlushFileBuffers (hFile=0x2f4) returned 1 [0208.789] CloseHandle (hObject=0x2fc) returned 1 [0208.789] CloseHandle (hObject=0x2f4) returned 1 [0208.789] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145669.jpg")) returned 1 [0208.790] SetEvent (hEvent=0x27c) returned 1 [0208.790] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145707.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0208.791] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=36820) returned 1 [0208.791] CloseHandle (hObject=0x2f4) returned 1 [0208.791] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145707.jpg")) returned 0x220 [0208.791] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145707.jpg")) returned 0x220 [0208.791] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145707.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.792] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145707.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0208.792] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.792] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.792] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145707.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0208.793] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x8fd4, lpOverlapped=0x0) returned 1 [0208.796] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8fe0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x8fe0, lpOverlapped=0x0) returned 1 [0208.797] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0208.798] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.798] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.798] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8fd4, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x8fd4, lpOverlapped=0x0) returned 1 [0208.798] FlushFileBuffers (hFile=0x2f4) returned 1 [0208.801] FlushFileBuffers (hFile=0x2fc) returned 1 [0208.808] CloseHandle (hObject=0x2f4) returned 1 [0208.808] CloseHandle (hObject=0x2fc) returned 1 [0208.809] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145707.jpg")) returned 1 [0208.810] SetEvent (hEvent=0x27c) returned 1 [0208.810] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145810.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0208.811] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=36792) returned 1 [0208.811] CloseHandle (hObject=0x2fc) returned 1 [0208.811] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145810.jpg")) returned 0x220 [0208.811] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145810.jpg")) returned 0x220 [0208.811] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145810.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.811] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145810.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0208.812] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.812] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.812] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145810.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0208.813] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x8fb8, lpOverlapped=0x0) returned 1 [0208.815] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8fc0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x8fc0, lpOverlapped=0x0) returned 1 [0208.817] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0208.818] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.818] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.818] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8fb8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x8fb8, lpOverlapped=0x0) returned 1 [0208.818] FlushFileBuffers (hFile=0x2fc) returned 1 [0208.821] FlushFileBuffers (hFile=0x2f4) returned 1 [0208.833] CloseHandle (hObject=0x2fc) returned 1 [0208.833] CloseHandle (hObject=0x2f4) returned 1 [0208.833] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145810.jpg")) returned 1 [0208.834] SetEvent (hEvent=0x27c) returned 1 [0208.834] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145895.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0208.850] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=33958) returned 1 [0208.850] CloseHandle (hObject=0x2f4) returned 1 [0208.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145895.jpg")) returned 0x220 [0208.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145895.jpg")) returned 0x220 [0208.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145895.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.852] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145895.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0208.852] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.852] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.852] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145895.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0208.854] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x84a6, lpOverlapped=0x0) returned 1 [0208.859] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x84b0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x84b0, lpOverlapped=0x0) returned 1 [0208.861] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0208.861] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.861] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.861] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x84a6, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x84a6, lpOverlapped=0x0) returned 1 [0208.862] FlushFileBuffers (hFile=0x2f4) returned 1 [0208.875] FlushFileBuffers (hFile=0x2fc) returned 1 [0208.877] CloseHandle (hObject=0x2f4) returned 1 [0208.877] CloseHandle (hObject=0x2fc) returned 1 [0208.877] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145895.jpg")) returned 1 [0208.878] SetEvent (hEvent=0x27c) returned 1 [0208.878] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0146142.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0208.881] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=46508) returned 1 [0208.881] CloseHandle (hObject=0x2fc) returned 1 [0208.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0146142.jpg")) returned 0x220 [0208.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0146142.jpg")) returned 0x220 [0208.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0146142.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.881] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0146142.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0208.881] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.881] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.882] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0146142.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0208.883] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xb5ac, lpOverlapped=0x0) returned 1 [0208.888] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xb5b0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xb5b0, lpOverlapped=0x0) returned 1 [0208.890] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0208.890] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.890] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.890] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xb5ac, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xb5ac, lpOverlapped=0x0) returned 1 [0208.891] FlushFileBuffers (hFile=0x2fc) returned 1 [0208.899] FlushFileBuffers (hFile=0x2f4) returned 1 [0208.905] CloseHandle (hObject=0x2fc) returned 1 [0208.906] CloseHandle (hObject=0x2f4) returned 1 [0208.906] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0146142.jpg")) returned 1 [0208.907] SetEvent (hEvent=0x27c) returned 1 [0208.907] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148757.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0208.908] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=67540) returned 1 [0208.908] CloseHandle (hObject=0x2f4) returned 1 [0208.908] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148757.jpg")) returned 0x220 [0208.908] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148757.jpg")) returned 0x220 [0208.908] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148757.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.909] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148757.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0208.909] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.909] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.909] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148757.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0208.910] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x107d4, lpOverlapped=0x0) returned 1 [0208.914] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x107e0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x107e0, lpOverlapped=0x0) returned 1 [0208.916] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0208.916] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.916] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.916] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x107d4, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x107d4, lpOverlapped=0x0) returned 1 [0208.916] FlushFileBuffers (hFile=0x2f4) returned 1 [0208.930] FlushFileBuffers (hFile=0x2fc) returned 1 [0208.932] CloseHandle (hObject=0x2f4) returned 1 [0208.932] CloseHandle (hObject=0x2fc) returned 1 [0208.932] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148757.jpg")) returned 1 [0208.934] SetEvent (hEvent=0x27c) returned 1 [0208.934] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149018.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0208.935] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=27393) returned 1 [0208.935] CloseHandle (hObject=0x2fc) returned 1 [0208.935] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149018.jpg")) returned 0x220 [0208.935] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149018.jpg")) returned 0x220 [0208.935] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149018.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.935] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149018.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0208.935] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.935] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.936] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149018.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0208.936] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x6b01, lpOverlapped=0x0) returned 1 [0208.939] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x6b10, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x6b10, lpOverlapped=0x0) returned 1 [0208.940] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0208.940] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.940] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.940] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x6b01, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x6b01, lpOverlapped=0x0) returned 1 [0208.941] FlushFileBuffers (hFile=0x2fc) returned 1 [0208.954] FlushFileBuffers (hFile=0x2f4) returned 1 [0208.956] CloseHandle (hObject=0x2fc) returned 1 [0208.956] CloseHandle (hObject=0x2f4) returned 1 [0208.956] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149018.jpg")) returned 1 [0208.957] SetEvent (hEvent=0x27c) returned 1 [0208.957] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150150.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0208.958] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=46404) returned 1 [0208.958] CloseHandle (hObject=0x2f4) returned 1 [0208.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150150.wmf")) returned 0x220 [0208.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150150.wmf")) returned 0x220 [0208.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150150.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.959] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150150.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0208.959] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.959] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.959] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150150.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0208.960] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xb544, lpOverlapped=0x0) returned 1 [0208.963] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xb550, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xb550, lpOverlapped=0x0) returned 1 [0208.964] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0208.965] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.965] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.965] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xb544, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xb544, lpOverlapped=0x0) returned 1 [0208.965] FlushFileBuffers (hFile=0x2f4) returned 1 [0208.977] FlushFileBuffers (hFile=0x2fc) returned 1 [0208.979] CloseHandle (hObject=0x2f4) returned 1 [0208.979] CloseHandle (hObject=0x2fc) returned 1 [0208.979] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150150.wmf")) returned 1 [0208.980] SetEvent (hEvent=0x27c) returned 1 [0208.981] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151041.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0208.982] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=4356) returned 1 [0208.982] CloseHandle (hObject=0x2fc) returned 1 [0208.982] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151041.wmf")) returned 0x220 [0208.982] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151041.wmf")) returned 0x220 [0208.983] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151041.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.983] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151041.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0208.983] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.983] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0208.983] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151041.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0208.984] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1104, lpOverlapped=0x0) returned 1 [0208.986] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1110, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1110, lpOverlapped=0x0) returned 1 [0208.987] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0208.987] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.987] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0208.988] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1104, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1104, lpOverlapped=0x0) returned 1 [0208.988] FlushFileBuffers (hFile=0x2fc) returned 1 [0208.997] FlushFileBuffers (hFile=0x2f4) returned 1 [0208.999] CloseHandle (hObject=0x2fc) returned 1 [0208.999] CloseHandle (hObject=0x2f4) returned 1 [0208.999] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151041.wmf")) returned 1 [0209.000] SetEvent (hEvent=0x27c) returned 1 [0209.000] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151047.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0209.001] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=18500) returned 1 [0209.001] CloseHandle (hObject=0x2f4) returned 1 [0209.001] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151047.wmf")) returned 0x220 [0209.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151047.wmf")) returned 0x220 [0209.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151047.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0209.002] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151047.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0209.002] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.002] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.002] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151047.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0209.003] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4844, lpOverlapped=0x0) returned 1 [0209.005] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4850, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4850, lpOverlapped=0x0) returned 1 [0209.007] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0209.007] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.007] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.007] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4844, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4844, lpOverlapped=0x0) returned 1 [0209.007] FlushFileBuffers (hFile=0x2f4) returned 1 [0209.019] FlushFileBuffers (hFile=0x2fc) returned 1 [0209.022] CloseHandle (hObject=0x2f4) returned 1 [0209.022] CloseHandle (hObject=0x2fc) returned 1 [0209.022] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151047.wmf")) returned 1 [0209.023] SetEvent (hEvent=0x27c) returned 1 [0209.023] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151061.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0209.025] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=6752) returned 1 [0209.025] CloseHandle (hObject=0x2fc) returned 1 [0209.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151061.wmf")) returned 0x220 [0209.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151061.wmf")) returned 0x220 [0209.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151061.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0209.025] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151061.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0209.025] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.025] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.025] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151061.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0209.027] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1a60, lpOverlapped=0x0) returned 1 [0209.037] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1a70, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1a70, lpOverlapped=0x0) returned 1 [0209.038] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0209.038] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.039] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.039] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1a60, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1a60, lpOverlapped=0x0) returned 1 [0209.039] FlushFileBuffers (hFile=0x2fc) returned 1 [0209.094] FlushFileBuffers (hFile=0x2f4) returned 1 [0209.096] CloseHandle (hObject=0x2fc) returned 1 [0209.096] CloseHandle (hObject=0x2f4) returned 1 [0209.096] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151061.wmf")) returned 1 [0209.097] SetEvent (hEvent=0x27c) returned 1 [0209.097] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151067.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0209.098] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=13204) returned 1 [0209.098] CloseHandle (hObject=0x2f4) returned 1 [0209.099] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151067.wmf")) returned 0x220 [0209.099] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151067.wmf")) returned 0x220 [0209.099] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151067.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0209.099] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151067.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0209.099] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.099] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.099] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151067.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0209.100] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x3394, lpOverlapped=0x0) returned 1 [0209.102] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x33a0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x33a0, lpOverlapped=0x0) returned 1 [0209.104] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0209.104] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.104] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.104] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3394, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x3394, lpOverlapped=0x0) returned 1 [0209.104] FlushFileBuffers (hFile=0x2f4) returned 1 [0209.113] FlushFileBuffers (hFile=0x2fc) returned 1 [0209.115] CloseHandle (hObject=0x2f4) returned 1 [0209.115] CloseHandle (hObject=0x2fc) returned 1 [0209.115] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151067.wmf")) returned 1 [0209.116] SetEvent (hEvent=0x27c) returned 1 [0209.117] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151581.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0209.117] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=10752) returned 1 [0209.118] CloseHandle (hObject=0x2fc) returned 1 [0209.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151581.wmf")) returned 0x220 [0209.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151581.wmf")) returned 0x220 [0209.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151581.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0209.118] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151581.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0209.118] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.118] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.118] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151581.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0209.119] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2a00, lpOverlapped=0x0) returned 1 [0209.121] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2a10, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2a10, lpOverlapped=0x0) returned 1 [0209.122] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0209.122] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.122] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.122] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2a00, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2a00, lpOverlapped=0x0) returned 1 [0209.122] FlushFileBuffers (hFile=0x2fc) returned 1 [0209.135] FlushFileBuffers (hFile=0x2f4) returned 1 [0209.136] CloseHandle (hObject=0x2fc) returned 1 [0209.136] CloseHandle (hObject=0x2f4) returned 1 [0209.136] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151581.wmf")) returned 1 [0209.138] SetEvent (hEvent=0x27c) returned 1 [0209.138] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152430.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0209.139] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=14132) returned 1 [0209.139] CloseHandle (hObject=0x2f4) returned 1 [0209.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152430.wmf")) returned 0x220 [0209.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152430.wmf")) returned 0x220 [0209.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152430.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0209.140] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152430.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0209.140] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.140] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.140] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152430.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0209.140] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x3734, lpOverlapped=0x0) returned 1 [0209.142] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3740, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3740, lpOverlapped=0x0) returned 1 [0209.143] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0209.144] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.144] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.144] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3734, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x3734, lpOverlapped=0x0) returned 1 [0209.144] FlushFileBuffers (hFile=0x2f4) returned 1 [0209.146] FlushFileBuffers (hFile=0x2fc) returned 1 [0209.147] CloseHandle (hObject=0x2f4) returned 1 [0209.147] CloseHandle (hObject=0x2fc) returned 1 [0209.147] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152430.wmf")) returned 1 [0209.149] SetEvent (hEvent=0x27c) returned 1 [0209.149] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152432.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0209.149] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=16492) returned 1 [0209.150] CloseHandle (hObject=0x2fc) returned 1 [0209.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152432.wmf")) returned 0x220 [0209.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152432.wmf")) returned 0x220 [0209.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152432.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0209.150] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152432.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0209.150] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.150] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.150] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152432.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0209.151] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x406c, lpOverlapped=0x0) returned 1 [0209.153] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4070, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4070, lpOverlapped=0x0) returned 1 [0209.156] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0209.157] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.157] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.157] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x406c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x406c, lpOverlapped=0x0) returned 1 [0209.157] FlushFileBuffers (hFile=0x2fc) returned 1 [0209.160] FlushFileBuffers (hFile=0x2f4) returned 1 [0209.161] CloseHandle (hObject=0x2fc) returned 1 [0209.161] CloseHandle (hObject=0x2f4) returned 1 [0209.161] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152432.wmf")) returned 1 [0209.162] SetEvent (hEvent=0x27c) returned 1 [0209.162] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152436.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0209.163] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=11340) returned 1 [0209.164] CloseHandle (hObject=0x2f4) returned 1 [0209.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152436.wmf")) returned 0x220 [0209.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152436.wmf")) returned 0x220 [0209.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152436.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0209.164] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152436.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0209.164] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.164] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.164] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152436.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0209.165] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2c4c, lpOverlapped=0x0) returned 1 [0209.167] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2c50, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2c50, lpOverlapped=0x0) returned 1 [0209.168] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0209.169] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.169] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.169] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2c4c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2c4c, lpOverlapped=0x0) returned 1 [0209.169] FlushFileBuffers (hFile=0x2f4) returned 1 [0209.173] FlushFileBuffers (hFile=0x2fc) returned 1 [0209.175] CloseHandle (hObject=0x2f4) returned 1 [0209.175] CloseHandle (hObject=0x2fc) returned 1 [0209.175] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152436.wmf")) returned 1 [0209.176] SetEvent (hEvent=0x27c) returned 1 [0209.176] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152556.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0209.177] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=16432) returned 1 [0209.177] CloseHandle (hObject=0x2fc) returned 1 [0209.177] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152556.wmf")) returned 0x220 [0209.177] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152556.wmf")) returned 0x220 [0209.177] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152556.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0209.177] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152556.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0209.177] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.177] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.177] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152556.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0209.178] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4030, lpOverlapped=0x0) returned 1 [0209.180] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4040, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4040, lpOverlapped=0x0) returned 1 [0209.182] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0209.182] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.182] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.182] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4030, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4030, lpOverlapped=0x0) returned 1 [0209.182] FlushFileBuffers (hFile=0x2fc) returned 1 [0209.185] FlushFileBuffers (hFile=0x2f4) returned 1 [0209.186] CloseHandle (hObject=0x2fc) returned 1 [0209.186] CloseHandle (hObject=0x2f4) returned 1 [0209.186] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152556.wmf")) returned 1 [0209.187] SetEvent (hEvent=0x27c) returned 1 [0209.188] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152558.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0209.189] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=16052) returned 1 [0209.189] CloseHandle (hObject=0x2f4) returned 1 [0209.189] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152558.wmf")) returned 0x220 [0209.189] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152558.wmf")) returned 0x220 [0209.189] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152558.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0209.189] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152558.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0209.189] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.189] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.189] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152558.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0209.190] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x3eb4, lpOverlapped=0x0) returned 1 [0209.192] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3ec0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3ec0, lpOverlapped=0x0) returned 1 [0209.193] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0209.193] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.194] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.194] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3eb4, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x3eb4, lpOverlapped=0x0) returned 1 [0209.194] FlushFileBuffers (hFile=0x2f4) returned 1 [0209.196] FlushFileBuffers (hFile=0x2fc) returned 1 [0209.197] CloseHandle (hObject=0x2f4) returned 1 [0209.197] CloseHandle (hObject=0x2fc) returned 1 [0209.197] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152558.wmf")) returned 1 [0209.198] SetEvent (hEvent=0x27c) returned 1 [0209.198] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152560.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0209.199] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=10880) returned 1 [0209.199] CloseHandle (hObject=0x2fc) returned 1 [0209.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152560.wmf")) returned 0x220 [0209.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152560.wmf")) returned 0x220 [0209.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152560.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0209.199] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152560.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0209.200] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.200] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.200] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152560.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0209.200] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2a80, lpOverlapped=0x0) returned 1 [0209.202] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2a90, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2a90, lpOverlapped=0x0) returned 1 [0209.204] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0209.204] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.204] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.204] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2a80, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2a80, lpOverlapped=0x0) returned 1 [0209.204] FlushFileBuffers (hFile=0x2fc) returned 1 [0209.207] FlushFileBuffers (hFile=0x2f4) returned 1 [0209.208] CloseHandle (hObject=0x2fc) returned 1 [0209.208] CloseHandle (hObject=0x2f4) returned 1 [0209.208] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152560.wmf")) returned 1 [0209.210] SetEvent (hEvent=0x27c) returned 1 [0209.210] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152568.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0209.211] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3696) returned 1 [0209.211] CloseHandle (hObject=0x2f4) returned 1 [0209.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152568.wmf")) returned 0x220 [0209.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152568.wmf")) returned 0x220 [0209.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152568.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0209.211] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152568.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0209.211] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.211] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.211] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152568.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0209.212] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xe70, lpOverlapped=0x0) returned 1 [0209.214] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xe80, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xe80, lpOverlapped=0x0) returned 1 [0209.215] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0209.215] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.215] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.215] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xe70, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xe70, lpOverlapped=0x0) returned 1 [0209.215] FlushFileBuffers (hFile=0x2f4) returned 1 [0209.218] FlushFileBuffers (hFile=0x2fc) returned 1 [0209.219] CloseHandle (hObject=0x2f4) returned 1 [0209.219] CloseHandle (hObject=0x2fc) returned 1 [0209.219] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152568.wmf")) returned 1 [0209.220] SetEvent (hEvent=0x27c) returned 1 [0209.221] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152570.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0209.221] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3368) returned 1 [0209.221] CloseHandle (hObject=0x2fc) returned 1 [0209.222] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152570.wmf")) returned 0x220 [0209.222] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152570.wmf")) returned 0x220 [0209.222] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152570.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0209.222] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152570.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0209.222] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.222] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.222] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152570.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0209.223] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xd28, lpOverlapped=0x0) returned 1 [0209.224] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xd30, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xd30, lpOverlapped=0x0) returned 1 [0209.226] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0209.226] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.226] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.226] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xd28, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xd28, lpOverlapped=0x0) returned 1 [0209.226] FlushFileBuffers (hFile=0x2fc) returned 1 [0209.228] FlushFileBuffers (hFile=0x2f4) returned 1 [0209.229] CloseHandle (hObject=0x2fc) returned 1 [0209.229] CloseHandle (hObject=0x2f4) returned 1 [0209.229] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152570.wmf")) returned 1 [0209.230] SetEvent (hEvent=0x27c) returned 1 [0209.231] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152590.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0209.232] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=10932) returned 1 [0209.232] CloseHandle (hObject=0x2f4) returned 1 [0209.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152590.wmf")) returned 0x220 [0209.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152590.wmf")) returned 0x220 [0209.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152590.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0209.232] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152590.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0209.232] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.232] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.232] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152590.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0209.233] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2ab4, lpOverlapped=0x0) returned 1 [0209.235] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2ac0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2ac0, lpOverlapped=0x0) returned 1 [0209.236] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0209.236] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.236] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.236] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2ab4, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2ab4, lpOverlapped=0x0) returned 1 [0209.236] FlushFileBuffers (hFile=0x2f4) returned 1 [0209.238] FlushFileBuffers (hFile=0x2fc) returned 1 [0209.239] CloseHandle (hObject=0x2f4) returned 1 [0209.240] CloseHandle (hObject=0x2fc) returned 1 [0209.240] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152590.wmf")) returned 1 [0209.241] SetEvent (hEvent=0x27c) returned 1 [0209.241] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152594.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0209.242] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=6340) returned 1 [0209.242] CloseHandle (hObject=0x2fc) returned 1 [0209.242] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152594.wmf")) returned 0x220 [0209.242] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152594.wmf")) returned 0x220 [0209.242] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152594.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0209.242] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152594.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0209.242] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.242] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.242] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152594.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0209.243] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x18c4, lpOverlapped=0x0) returned 1 [0209.244] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x18d0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x18d0, lpOverlapped=0x0) returned 1 [0209.245] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0209.246] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.246] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.246] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x18c4, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x18c4, lpOverlapped=0x0) returned 1 [0209.246] FlushFileBuffers (hFile=0x2fc) returned 1 [0209.248] FlushFileBuffers (hFile=0x2f4) returned 1 [0209.249] CloseHandle (hObject=0x2fc) returned 1 [0209.249] CloseHandle (hObject=0x2f4) returned 1 [0209.249] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152594.wmf")) returned 1 [0209.250] SetEvent (hEvent=0x27c) returned 1 [0209.250] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152600.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0209.253] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=9768) returned 1 [0209.253] CloseHandle (hObject=0x2f4) returned 1 [0209.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152600.wmf")) returned 0x220 [0209.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152600.wmf")) returned 0x220 [0209.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152600.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0209.253] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152600.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0209.253] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.253] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.253] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152600.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0209.254] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2628, lpOverlapped=0x0) returned 1 [0209.257] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2630, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2630, lpOverlapped=0x0) returned 1 [0209.258] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0209.259] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.259] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.259] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2628, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2628, lpOverlapped=0x0) returned 1 [0209.259] FlushFileBuffers (hFile=0x2f4) returned 1 [0209.264] FlushFileBuffers (hFile=0x2fc) returned 1 [0209.266] CloseHandle (hObject=0x2f4) returned 1 [0209.266] CloseHandle (hObject=0x2fc) returned 1 [0209.266] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152600.wmf")) returned 1 [0209.267] SetEvent (hEvent=0x27c) returned 1 [0209.268] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152602.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0209.274] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=6276) returned 1 [0209.274] CloseHandle (hObject=0x2fc) returned 1 [0209.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152602.wmf")) returned 0x220 [0209.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152602.wmf")) returned 0x220 [0209.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152602.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0209.275] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152602.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0209.275] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.275] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.275] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152602.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0209.276] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1884, lpOverlapped=0x0) returned 1 [0209.278] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1890, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1890, lpOverlapped=0x0) returned 1 [0209.279] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0209.279] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.279] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.279] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1884, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1884, lpOverlapped=0x0) returned 1 [0209.279] FlushFileBuffers (hFile=0x2fc) returned 1 [0209.282] FlushFileBuffers (hFile=0x2f4) returned 1 [0209.283] CloseHandle (hObject=0x2fc) returned 1 [0209.283] CloseHandle (hObject=0x2f4) returned 1 [0209.283] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152602.wmf")) returned 1 [0209.284] SetEvent (hEvent=0x27c) returned 1 [0209.284] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152606.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0209.285] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=16632) returned 1 [0209.285] CloseHandle (hObject=0x2f4) returned 1 [0209.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152606.wmf")) returned 0x220 [0209.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152606.wmf")) returned 0x220 [0209.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152606.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0209.285] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152606.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0209.286] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.286] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.286] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152606.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0209.286] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x40f8, lpOverlapped=0x0) returned 1 [0209.288] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4100, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4100, lpOverlapped=0x0) returned 1 [0209.289] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0209.290] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.290] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.290] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x40f8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x40f8, lpOverlapped=0x0) returned 1 [0209.290] FlushFileBuffers (hFile=0x2f4) returned 1 [0209.292] FlushFileBuffers (hFile=0x2fc) returned 1 [0209.294] CloseHandle (hObject=0x2f4) returned 1 [0209.294] CloseHandle (hObject=0x2fc) returned 1 [0209.294] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152606.wmf")) returned 1 [0209.295] SetEvent (hEvent=0x27c) returned 1 [0209.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152608.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0209.296] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=12436) returned 1 [0209.296] CloseHandle (hObject=0x2fc) returned 1 [0209.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152608.wmf")) returned 0x220 [0209.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152608.wmf")) returned 0x220 [0209.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152608.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0209.296] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152608.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0209.296] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.296] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.296] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152608.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0209.297] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x3094, lpOverlapped=0x0) returned 1 [0209.299] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x30a0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x30a0, lpOverlapped=0x0) returned 1 [0209.300] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0209.300] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.300] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.300] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3094, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x3094, lpOverlapped=0x0) returned 1 [0209.300] FlushFileBuffers (hFile=0x2fc) returned 1 [0209.303] FlushFileBuffers (hFile=0x2f4) returned 1 [0209.304] CloseHandle (hObject=0x2fc) returned 1 [0209.304] CloseHandle (hObject=0x2f4) returned 1 [0209.304] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152608.wmf")) returned 1 [0209.305] SetEvent (hEvent=0x27c) returned 1 [0209.306] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152610.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0209.307] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=5960) returned 1 [0209.307] CloseHandle (hObject=0x2f4) returned 1 [0209.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152610.wmf")) returned 0x220 [0209.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152610.wmf")) returned 0x220 [0209.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152610.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0209.307] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152610.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0209.307] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.307] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.307] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152610.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0209.308] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1748, lpOverlapped=0x0) returned 1 [0209.310] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1750, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1750, lpOverlapped=0x0) returned 1 [0209.311] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0209.311] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.311] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.311] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1748, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1748, lpOverlapped=0x0) returned 1 [0209.311] FlushFileBuffers (hFile=0x2f4) returned 1 [0209.314] FlushFileBuffers (hFile=0x2fc) returned 1 [0209.315] CloseHandle (hObject=0x2f4) returned 1 [0209.315] CloseHandle (hObject=0x2fc) returned 1 [0209.315] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152610.wmf")) returned 1 [0209.316] SetEvent (hEvent=0x27c) returned 1 [0209.316] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152622.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0209.318] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=9604) returned 1 [0209.318] CloseHandle (hObject=0x2fc) returned 1 [0209.318] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152622.wmf")) returned 0x220 [0209.318] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152622.wmf")) returned 0x220 [0209.318] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152622.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0209.318] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152622.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0209.318] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.318] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.318] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152622.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0209.319] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2584, lpOverlapped=0x0) returned 1 [0209.320] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2590, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2590, lpOverlapped=0x0) returned 1 [0209.321] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0209.322] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.322] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.322] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2584, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2584, lpOverlapped=0x0) returned 1 [0209.322] FlushFileBuffers (hFile=0x2fc) returned 1 [0209.324] FlushFileBuffers (hFile=0x2f4) returned 1 [0209.325] CloseHandle (hObject=0x2fc) returned 1 [0209.325] CloseHandle (hObject=0x2f4) returned 1 [0209.325] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152622.wmf")) returned 1 [0209.326] SetEvent (hEvent=0x27c) returned 1 [0209.327] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152626.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0209.327] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=26248) returned 1 [0209.327] CloseHandle (hObject=0x2f4) returned 1 [0209.327] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152626.wmf")) returned 0x220 [0209.328] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152626.wmf")) returned 0x220 [0209.328] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152626.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0209.328] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152626.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0209.328] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.328] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.328] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152626.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0209.329] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x6688, lpOverlapped=0x0) returned 1 [0209.331] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x6690, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x6690, lpOverlapped=0x0) returned 1 [0209.332] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0209.332] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.332] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.332] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x6688, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x6688, lpOverlapped=0x0) returned 1 [0209.332] FlushFileBuffers (hFile=0x2f4) returned 1 [0209.334] FlushFileBuffers (hFile=0x2fc) returned 1 [0209.335] CloseHandle (hObject=0x2f4) returned 1 [0209.336] CloseHandle (hObject=0x2fc) returned 1 [0209.336] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152626.wmf")) returned 1 [0209.337] SetEvent (hEvent=0x27c) returned 1 [0209.337] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152628.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0209.338] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=30812) returned 1 [0209.338] CloseHandle (hObject=0x2fc) returned 1 [0209.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152628.wmf")) returned 0x220 [0209.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152628.wmf")) returned 0x220 [0209.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152628.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0209.338] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152628.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0209.338] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.338] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.338] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152628.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0209.339] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x785c, lpOverlapped=0x0) returned 1 [0209.341] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7860, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x7860, lpOverlapped=0x0) returned 1 [0209.343] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0209.343] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.343] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.343] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x785c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x785c, lpOverlapped=0x0) returned 1 [0209.343] FlushFileBuffers (hFile=0x2fc) returned 1 [0209.346] FlushFileBuffers (hFile=0x2f4) returned 1 [0209.347] CloseHandle (hObject=0x2fc) returned 1 [0209.347] CloseHandle (hObject=0x2f4) returned 1 [0209.347] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152628.wmf")) returned 1 [0209.348] SetEvent (hEvent=0x27c) returned 1 [0209.348] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152688.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0209.349] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=34676) returned 1 [0209.349] CloseHandle (hObject=0x2f4) returned 1 [0209.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152688.wmf")) returned 0x220 [0209.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152688.wmf")) returned 0x220 [0209.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152688.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0209.349] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152688.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0209.350] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.350] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.350] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152688.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0209.350] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x8774, lpOverlapped=0x0) returned 1 [0209.353] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8780, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x8780, lpOverlapped=0x0) returned 1 [0209.354] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0209.354] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.354] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.354] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8774, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x8774, lpOverlapped=0x0) returned 1 [0209.355] FlushFileBuffers (hFile=0x2f4) returned 1 [0209.358] FlushFileBuffers (hFile=0x2fc) returned 1 [0209.360] CloseHandle (hObject=0x2f4) returned 1 [0209.360] CloseHandle (hObject=0x2fc) returned 1 [0209.360] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152688.wmf")) returned 1 [0209.361] SetEvent (hEvent=0x27c) returned 1 [0209.361] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152690.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0209.362] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1268) returned 1 [0209.362] CloseHandle (hObject=0x2fc) returned 1 [0209.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152690.wmf")) returned 0x220 [0209.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152690.wmf")) returned 0x220 [0209.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152690.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0209.362] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152690.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0209.363] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.363] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.363] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152690.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0209.363] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4f4, lpOverlapped=0x0) returned 1 [0209.365] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x500, lpOverlapped=0x0) returned 1 [0209.366] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0209.367] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.367] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.367] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4f4, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4f4, lpOverlapped=0x0) returned 1 [0209.367] FlushFileBuffers (hFile=0x2fc) returned 1 [0209.369] FlushFileBuffers (hFile=0x2f4) returned 1 [0209.370] CloseHandle (hObject=0x2fc) returned 1 [0209.370] CloseHandle (hObject=0x2f4) returned 1 [0209.370] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152690.wmf")) returned 1 [0209.371] SetEvent (hEvent=0x27c) returned 1 [0209.371] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152694.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0209.373] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1348) returned 1 [0209.373] CloseHandle (hObject=0x2f4) returned 1 [0209.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152694.wmf")) returned 0x220 [0209.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152694.wmf")) returned 0x220 [0209.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152694.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0209.373] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152694.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0209.373] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.373] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.373] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152694.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0209.374] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x544, lpOverlapped=0x0) returned 1 [0209.376] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x550, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x550, lpOverlapped=0x0) returned 1 [0209.377] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0209.377] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.377] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.377] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x544, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x544, lpOverlapped=0x0) returned 1 [0209.377] FlushFileBuffers (hFile=0x2f4) returned 1 [0209.379] FlushFileBuffers (hFile=0x2fc) returned 1 [0209.380] CloseHandle (hObject=0x2f4) returned 1 [0209.380] CloseHandle (hObject=0x2fc) returned 1 [0209.381] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152694.wmf")) returned 1 [0209.381] SetEvent (hEvent=0x27c) returned 1 [0209.382] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152696.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0209.382] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=7320) returned 1 [0209.382] CloseHandle (hObject=0x2fc) returned 1 [0209.382] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152696.wmf")) returned 0x220 [0209.382] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152696.wmf")) returned 0x220 [0209.382] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152696.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0209.382] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152696.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0209.382] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.383] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.383] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152696.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0209.383] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1c98, lpOverlapped=0x0) returned 1 [0209.385] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1ca0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1ca0, lpOverlapped=0x0) returned 1 [0209.386] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0209.386] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.386] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.386] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1c98, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1c98, lpOverlapped=0x0) returned 1 [0209.386] FlushFileBuffers (hFile=0x2fc) returned 1 [0209.388] FlushFileBuffers (hFile=0x2f4) returned 1 [0209.389] CloseHandle (hObject=0x2fc) returned 1 [0209.390] CloseHandle (hObject=0x2f4) returned 1 [0209.390] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152696.wmf")) returned 1 [0209.391] SetEvent (hEvent=0x27c) returned 1 [0209.391] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152698.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0209.392] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1208) returned 1 [0209.392] CloseHandle (hObject=0x2f4) returned 1 [0209.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152698.wmf")) returned 0x220 [0209.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152698.wmf")) returned 0x220 [0209.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152698.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0209.392] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152698.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0209.392] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.392] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.392] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152698.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0209.393] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4b8, lpOverlapped=0x0) returned 1 [0209.394] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4c0, lpOverlapped=0x0) returned 1 [0209.395] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0209.395] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.396] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.396] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4b8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4b8, lpOverlapped=0x0) returned 1 [0209.396] FlushFileBuffers (hFile=0x2f4) returned 1 [0209.398] FlushFileBuffers (hFile=0x2fc) returned 1 [0209.399] CloseHandle (hObject=0x2f4) returned 1 [0209.399] CloseHandle (hObject=0x2fc) returned 1 [0209.399] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152698.wmf")) returned 1 [0209.400] SetEvent (hEvent=0x27c) returned 1 [0209.400] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152702.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0209.402] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1208) returned 1 [0209.402] CloseHandle (hObject=0x2fc) returned 1 [0209.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152702.wmf")) returned 0x220 [0209.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152702.wmf")) returned 0x220 [0209.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152702.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0209.402] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152702.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0209.402] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.402] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.402] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152702.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0209.403] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4b8, lpOverlapped=0x0) returned 1 [0209.404] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4c0, lpOverlapped=0x0) returned 1 [0209.405] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0209.405] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.406] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.406] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4b8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4b8, lpOverlapped=0x0) returned 1 [0209.406] FlushFileBuffers (hFile=0x2fc) returned 1 [0209.408] FlushFileBuffers (hFile=0x2f4) returned 1 [0209.409] CloseHandle (hObject=0x2fc) returned 1 [0209.409] CloseHandle (hObject=0x2f4) returned 1 [0209.409] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152702.wmf")) returned 1 [0209.410] SetEvent (hEvent=0x27c) returned 1 [0209.410] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152704.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0209.411] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1652) returned 1 [0209.411] CloseHandle (hObject=0x2f4) returned 1 [0209.411] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152704.wmf")) returned 0x220 [0209.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152704.wmf")) returned 0x220 [0209.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152704.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0209.412] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152704.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0209.412] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.412] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.412] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152704.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0209.412] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x674, lpOverlapped=0x0) returned 1 [0209.414] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x680, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x680, lpOverlapped=0x0) returned 1 [0209.415] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0209.415] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.415] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.415] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x674, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x674, lpOverlapped=0x0) returned 1 [0209.415] FlushFileBuffers (hFile=0x2f4) returned 1 [0209.419] FlushFileBuffers (hFile=0x2fc) returned 1 [0209.420] CloseHandle (hObject=0x2f4) returned 1 [0209.420] CloseHandle (hObject=0x2fc) returned 1 [0209.420] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152704.wmf")) returned 1 [0209.425] SetEvent (hEvent=0x27c) returned 1 [0209.426] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152708.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0209.426] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=4908) returned 1 [0209.426] CloseHandle (hObject=0x2fc) returned 1 [0209.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152708.wmf")) returned 0x220 [0209.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152708.wmf")) returned 0x220 [0209.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152708.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0209.427] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152708.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0209.427] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.427] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.427] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152708.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0209.427] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x132c, lpOverlapped=0x0) returned 1 [0209.429] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1330, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1330, lpOverlapped=0x0) returned 1 [0209.430] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0209.431] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.431] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.431] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x132c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x132c, lpOverlapped=0x0) returned 1 [0209.431] FlushFileBuffers (hFile=0x2fc) returned 1 [0209.552] FlushFileBuffers (hFile=0x2f4) returned 1 [0209.555] CloseHandle (hObject=0x2fc) returned 1 [0209.555] CloseHandle (hObject=0x2f4) returned 1 [0209.555] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152708.wmf")) returned 1 [0209.556] SetEvent (hEvent=0x27c) returned 1 [0209.556] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152716.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0209.557] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=4580) returned 1 [0209.557] CloseHandle (hObject=0x2f4) returned 1 [0209.557] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152716.wmf")) returned 0x220 [0209.557] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152716.wmf")) returned 0x220 [0209.557] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152716.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0209.557] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152716.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0209.557] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.557] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.558] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152716.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0209.559] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x11e4, lpOverlapped=0x0) returned 1 [0209.616] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x11f0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x11f0, lpOverlapped=0x0) returned 1 [0209.619] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0209.619] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.619] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.619] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x11e4, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x11e4, lpOverlapped=0x0) returned 1 [0209.619] FlushFileBuffers (hFile=0x2f4) returned 1 [0209.728] FlushFileBuffers (hFile=0x2fc) returned 1 [0209.729] CloseHandle (hObject=0x2f4) returned 1 [0209.729] CloseHandle (hObject=0x2fc) returned 1 [0209.729] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152716.wmf")) returned 1 [0209.731] SetEvent (hEvent=0x27c) returned 1 [0209.731] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152722.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0209.734] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=7020) returned 1 [0209.734] CloseHandle (hObject=0x2fc) returned 1 [0209.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152722.wmf")) returned 0x220 [0209.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152722.wmf")) returned 0x220 [0209.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152722.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0209.734] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152722.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0209.734] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.734] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.734] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152722.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0209.736] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1b6c, lpOverlapped=0x0) returned 1 [0209.737] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1b70, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1b70, lpOverlapped=0x0) returned 1 [0209.738] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0209.739] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.739] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.739] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1b6c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1b6c, lpOverlapped=0x0) returned 1 [0209.739] FlushFileBuffers (hFile=0x2fc) returned 1 [0209.756] FlushFileBuffers (hFile=0x2f4) returned 1 [0209.766] CloseHandle (hObject=0x2fc) returned 1 [0209.767] CloseHandle (hObject=0x2f4) returned 1 [0209.767] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152722.wmf")) returned 1 [0209.776] SetEvent (hEvent=0x27c) returned 1 [0209.776] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152882.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0209.780] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=9072) returned 1 [0209.780] CloseHandle (hObject=0x2f4) returned 1 [0209.780] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152882.wmf")) returned 0x220 [0209.780] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152882.wmf")) returned 0x220 [0209.780] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152882.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0209.780] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152882.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0209.780] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.780] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.781] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152882.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0209.781] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2370, lpOverlapped=0x0) returned 1 [0209.789] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2380, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2380, lpOverlapped=0x0) returned 1 [0209.791] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0209.792] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.792] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.792] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2370, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2370, lpOverlapped=0x0) returned 1 [0209.792] FlushFileBuffers (hFile=0x2f4) returned 1 [0209.829] FlushFileBuffers (hFile=0x2fc) returned 1 [0209.892] CloseHandle (hObject=0x2f4) returned 1 [0209.892] CloseHandle (hObject=0x2fc) returned 1 [0209.892] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152882.wmf")) returned 1 [0209.896] SetEvent (hEvent=0x27c) returned 1 [0209.896] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152892.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0209.898] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=10668) returned 1 [0209.898] CloseHandle (hObject=0x2fc) returned 1 [0209.899] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152892.wmf")) returned 0x220 [0209.899] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152892.wmf")) returned 0x220 [0209.899] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152892.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0209.899] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152892.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0209.899] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.900] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.900] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152892.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0209.901] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x29ac, lpOverlapped=0x0) returned 1 [0209.903] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x29b0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x29b0, lpOverlapped=0x0) returned 1 [0209.904] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0209.905] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.905] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.905] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x29ac, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x29ac, lpOverlapped=0x0) returned 1 [0209.905] FlushFileBuffers (hFile=0x2fc) returned 1 [0209.959] FlushFileBuffers (hFile=0x2f4) returned 1 [0209.965] CloseHandle (hObject=0x2fc) returned 1 [0209.965] CloseHandle (hObject=0x2f4) returned 1 [0209.966] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152892.wmf")) returned 1 [0209.967] SetEvent (hEvent=0x27c) returned 1 [0209.967] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152894.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0209.968] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=11348) returned 1 [0209.968] CloseHandle (hObject=0x2f4) returned 1 [0209.968] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152894.wmf")) returned 0x220 [0209.968] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152894.wmf")) returned 0x220 [0209.968] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152894.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0209.968] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152894.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0209.969] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.969] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0209.969] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152894.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0209.970] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2c54, lpOverlapped=0x0) returned 1 [0209.973] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2c60, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2c60, lpOverlapped=0x0) returned 1 [0209.977] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0209.977] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.977] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0209.977] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2c54, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2c54, lpOverlapped=0x0) returned 1 [0209.978] FlushFileBuffers (hFile=0x2f4) returned 1 [0210.269] FlushFileBuffers (hFile=0x2fc) returned 1 [0210.276] CloseHandle (hObject=0x2f4) returned 1 [0210.276] CloseHandle (hObject=0x2fc) returned 1 [0210.277] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152894.wmf")) returned 1 [0210.278] SetEvent (hEvent=0x27c) returned 1 [0210.278] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153087.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0210.279] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1912) returned 1 [0210.279] CloseHandle (hObject=0x2fc) returned 1 [0210.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153087.wmf")) returned 0x220 [0210.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153087.wmf")) returned 0x220 [0210.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153087.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0210.280] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153087.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0210.280] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0210.280] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0210.280] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153087.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0210.281] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x778, lpOverlapped=0x0) returned 1 [0210.283] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x780, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x780, lpOverlapped=0x0) returned 1 [0210.284] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0210.285] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0210.285] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0210.285] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x778, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x778, lpOverlapped=0x0) returned 1 [0210.285] FlushFileBuffers (hFile=0x2fc) returned 1 [0210.290] FlushFileBuffers (hFile=0x2f4) returned 1 [0210.319] CloseHandle (hObject=0x2fc) returned 1 [0210.319] CloseHandle (hObject=0x2f4) returned 1 [0210.319] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153087.wmf")) returned 1 [0210.320] SetEvent (hEvent=0x27c) returned 1 [0210.320] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153091.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0210.321] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=8136) returned 1 [0210.321] CloseHandle (hObject=0x2f4) returned 1 [0210.321] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153091.wmf")) returned 0x220 [0210.321] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153091.wmf")) returned 0x220 [0210.321] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153091.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0210.321] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153091.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0210.322] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0210.322] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0210.322] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153091.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0210.323] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1fc8, lpOverlapped=0x0) returned 1 [0210.325] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1fd0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1fd0, lpOverlapped=0x0) returned 1 [0210.327] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0210.327] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0210.327] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0210.327] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1fc8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1fc8, lpOverlapped=0x0) returned 1 [0210.328] FlushFileBuffers (hFile=0x2f4) returned 1 [0210.330] FlushFileBuffers (hFile=0x2fc) returned 1 [0210.343] CloseHandle (hObject=0x2f4) returned 1 [0210.343] CloseHandle (hObject=0x2fc) returned 1 [0210.343] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153091.wmf")) returned 1 [0210.344] SetEvent (hEvent=0x27c) returned 1 [0210.344] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153095.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0210.345] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3704) returned 1 [0210.345] CloseHandle (hObject=0x2fc) returned 1 [0210.345] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153095.wmf")) returned 0x220 [0210.345] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153095.wmf")) returned 0x220 [0210.345] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153095.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0210.345] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153095.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0210.345] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0210.346] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0210.346] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153095.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0210.346] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xe78, lpOverlapped=0x0) returned 1 [0210.350] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xe80, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xe80, lpOverlapped=0x0) returned 1 [0210.351] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0210.351] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0210.351] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0210.351] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xe78, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xe78, lpOverlapped=0x0) returned 1 [0210.351] FlushFileBuffers (hFile=0x2fc) returned 1 [0210.361] FlushFileBuffers (hFile=0x2f4) returned 1 [0210.369] CloseHandle (hObject=0x2fc) returned 1 [0210.369] CloseHandle (hObject=0x2f4) returned 1 [0210.369] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153095.wmf")) returned 1 [0210.370] SetEvent (hEvent=0x27c) returned 1 [0210.370] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153273.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0210.374] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=20096) returned 1 [0210.374] CloseHandle (hObject=0x2f4) returned 1 [0210.374] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153273.wmf")) returned 0x220 [0210.374] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153273.wmf")) returned 0x220 [0210.374] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153273.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0210.375] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153273.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0210.375] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0210.375] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0210.375] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153273.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0210.376] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4e80, lpOverlapped=0x0) returned 1 [0210.378] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4e90, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4e90, lpOverlapped=0x0) returned 1 [0210.379] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0210.380] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0210.380] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0210.380] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4e80, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4e80, lpOverlapped=0x0) returned 1 [0210.380] FlushFileBuffers (hFile=0x2f4) returned 1 [0210.389] FlushFileBuffers (hFile=0x2fc) returned 1 [0210.405] CloseHandle (hObject=0x2f4) returned 1 [0210.406] CloseHandle (hObject=0x2fc) returned 1 [0210.406] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153273.wmf")) returned 1 [0210.407] SetEvent (hEvent=0x27c) returned 1 [0210.407] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153302.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0210.408] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=30800) returned 1 [0210.408] CloseHandle (hObject=0x2fc) returned 1 [0210.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153302.wmf")) returned 0x220 [0210.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153302.wmf")) returned 0x220 [0210.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153302.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0210.408] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153302.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0210.409] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0210.409] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0210.409] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153302.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0210.410] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x7850, lpOverlapped=0x0) returned 1 [0210.425] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7860, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x7860, lpOverlapped=0x0) returned 1 [0210.426] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0210.427] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0210.427] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0210.427] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7850, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x7850, lpOverlapped=0x0) returned 1 [0210.427] FlushFileBuffers (hFile=0x2fc) returned 1 [0210.437] FlushFileBuffers (hFile=0x2f4) returned 1 [0210.440] CloseHandle (hObject=0x2fc) returned 1 [0210.441] CloseHandle (hObject=0x2f4) returned 1 [0210.441] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153302.wmf")) returned 1 [0210.442] SetEvent (hEvent=0x27c) returned 1 [0210.442] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153305.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0210.443] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=38488) returned 1 [0210.443] CloseHandle (hObject=0x2f4) returned 1 [0210.443] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153305.wmf")) returned 0x220 [0210.443] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153305.wmf")) returned 0x220 [0210.444] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153305.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0210.444] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153305.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0210.444] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0210.444] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0210.444] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153305.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0210.445] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x9658, lpOverlapped=0x0) returned 1 [0210.448] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x9660, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x9660, lpOverlapped=0x0) returned 1 [0210.449] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0210.450] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0210.450] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0210.450] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x9658, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x9658, lpOverlapped=0x0) returned 1 [0210.450] FlushFileBuffers (hFile=0x2f4) returned 1 [0210.467] FlushFileBuffers (hFile=0x2fc) returned 1 [0210.471] CloseHandle (hObject=0x2f4) returned 1 [0210.471] CloseHandle (hObject=0x2fc) returned 1 [0210.471] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153305.wmf")) returned 1 [0210.472] SetEvent (hEvent=0x27c) returned 1 [0210.472] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153313.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0210.476] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=16952) returned 1 [0210.476] CloseHandle (hObject=0x21c) returned 1 [0210.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153313.wmf")) returned 0x220 [0210.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153313.wmf")) returned 0x220 [0210.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153313.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0210.476] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153313.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0210.476] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0210.476] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0210.476] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153313.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0210.478] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4238, lpOverlapped=0x0) returned 1 [0210.482] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4240, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4240, lpOverlapped=0x0) returned 1 [0210.484] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0210.484] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0210.484] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0210.484] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4238, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4238, lpOverlapped=0x0) returned 1 [0210.484] FlushFileBuffers (hFile=0x21c) returned 1 [0210.489] FlushFileBuffers (hFile=0x2b0) returned 1 [0210.491] CloseHandle (hObject=0x21c) returned 1 [0210.491] CloseHandle (hObject=0x2b0) returned 1 [0210.491] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153313.wmf")) returned 1 [0210.493] SetEvent (hEvent=0x27c) returned 1 [0210.493] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153508.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0210.494] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=34256) returned 1 [0210.494] CloseHandle (hObject=0x2b0) returned 1 [0210.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153508.wmf")) returned 0x220 [0210.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153508.wmf")) returned 0x220 [0210.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153508.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0210.495] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153508.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0210.495] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0210.495] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0210.495] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153508.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0210.496] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x85d0, lpOverlapped=0x0) returned 1 [0210.508] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x85e0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x85e0, lpOverlapped=0x0) returned 1 [0210.510] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0210.510] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0210.510] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0210.510] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x85d0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x85d0, lpOverlapped=0x0) returned 1 [0210.510] FlushFileBuffers (hFile=0x2b0) returned 1 [0210.514] FlushFileBuffers (hFile=0x21c) returned 1 [0210.521] CloseHandle (hObject=0x2b0) returned 1 [0210.521] CloseHandle (hObject=0x21c) returned 1 [0210.521] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153508.wmf")) returned 1 [0210.522] SetEvent (hEvent=0x27c) returned 1 [0210.522] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153518.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0210.523] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=12528) returned 1 [0210.523] CloseHandle (hObject=0x21c) returned 1 [0210.523] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153518.wmf")) returned 0x220 [0210.523] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153518.wmf")) returned 0x220 [0210.523] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153518.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0210.523] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153518.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0210.524] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0210.524] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0210.524] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153518.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0210.525] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x30f0, lpOverlapped=0x0) returned 1 [0210.529] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3100, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3100, lpOverlapped=0x0) returned 1 [0210.530] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0210.531] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0210.531] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0210.531] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x30f0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x30f0, lpOverlapped=0x0) returned 1 [0210.531] FlushFileBuffers (hFile=0x21c) returned 1 [0210.535] FlushFileBuffers (hFile=0x2b0) returned 1 [0210.561] CloseHandle (hObject=0x21c) returned 1 [0210.561] CloseHandle (hObject=0x2b0) returned 1 [0210.561] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153518.wmf")) returned 1 [0210.562] SetEvent (hEvent=0x27c) returned 1 [0210.562] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157167.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0210.565] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=46702) returned 1 [0210.565] CloseHandle (hObject=0x2b0) returned 1 [0210.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157167.wmf")) returned 0x220 [0210.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157167.wmf")) returned 0x220 [0210.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157167.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0210.565] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157167.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0210.565] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0210.565] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0210.565] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157167.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0210.566] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xb66e, lpOverlapped=0x0) returned 1 [0210.574] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xb670, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xb670, lpOverlapped=0x0) returned 1 [0210.579] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0210.579] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0210.580] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0210.580] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xb66e, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xb66e, lpOverlapped=0x0) returned 1 [0210.580] FlushFileBuffers (hFile=0x2b0) returned 1 [0210.597] FlushFileBuffers (hFile=0x21c) returned 1 [0210.608] CloseHandle (hObject=0x2b0) returned 1 [0210.608] CloseHandle (hObject=0x21c) returned 1 [0210.609] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157167.wmf")) returned 1 [0210.610] SetEvent (hEvent=0x27c) returned 1 [0210.610] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157191.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0210.611] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=17912) returned 1 [0210.611] CloseHandle (hObject=0x21c) returned 1 [0210.611] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157191.wmf")) returned 0x220 [0210.611] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157191.wmf")) returned 0x220 [0210.611] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157191.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0210.611] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157191.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0210.611] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0210.611] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0210.612] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157191.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0210.612] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x45f8, lpOverlapped=0x0) returned 1 [0210.614] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4600, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4600, lpOverlapped=0x0) returned 1 [0210.615] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0210.616] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0210.616] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0210.616] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x45f8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x45f8, lpOverlapped=0x0) returned 1 [0210.616] FlushFileBuffers (hFile=0x21c) returned 1 [0210.635] FlushFileBuffers (hFile=0x2b0) returned 1 [0210.638] CloseHandle (hObject=0x21c) returned 1 [0210.638] CloseHandle (hObject=0x2b0) returned 1 [0210.638] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157191.wmf")) returned 1 [0210.639] SetEvent (hEvent=0x27c) returned 1 [0210.639] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157831.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0210.641] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=11396) returned 1 [0210.641] CloseHandle (hObject=0x2b0) returned 1 [0210.641] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157831.wmf")) returned 0x220 [0210.641] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157831.wmf")) returned 0x220 [0210.641] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157831.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0210.641] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157831.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0210.641] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0210.641] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0210.642] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157831.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0210.643] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2c84, lpOverlapped=0x0) returned 1 [0210.649] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2c90, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2c90, lpOverlapped=0x0) returned 1 [0210.650] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0210.650] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0210.650] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0210.650] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2c84, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2c84, lpOverlapped=0x0) returned 1 [0210.650] FlushFileBuffers (hFile=0x2b0) returned 1 [0210.655] FlushFileBuffers (hFile=0x21c) returned 1 [0210.658] CloseHandle (hObject=0x2b0) returned 1 [0210.658] CloseHandle (hObject=0x21c) returned 1 [0210.658] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157831.wmf")) returned 1 [0210.659] SetEvent (hEvent=0x27c) returned 1 [0210.659] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158477.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158477.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0210.660] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=17966) returned 1 [0210.660] CloseHandle (hObject=0x21c) returned 1 [0210.660] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158477.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158477.wmf")) returned 0x220 [0210.660] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158477.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158477.wmf")) returned 0x220 [0210.660] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158477.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158477.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0210.661] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158477.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158477.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0210.661] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0210.661] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0210.661] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158477.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158477.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0210.662] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x462e, lpOverlapped=0x0) returned 1 [0210.675] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4630, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4630, lpOverlapped=0x0) returned 1 [0210.677] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0210.677] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0210.677] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0210.677] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x462e, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x462e, lpOverlapped=0x0) returned 1 [0210.677] FlushFileBuffers (hFile=0x21c) returned 1 [0210.683] FlushFileBuffers (hFile=0x2b0) returned 1 [0210.685] CloseHandle (hObject=0x21c) returned 1 [0210.687] CloseHandle (hObject=0x2b0) returned 1 [0210.687] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158477.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158477.wmf")) returned 1 [0210.688] SetEvent (hEvent=0x27c) returned 1 [0210.688] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0164153.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0210.690] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=46484) returned 1 [0210.690] CloseHandle (hObject=0x2b0) returned 1 [0210.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0164153.jpg")) returned 0x220 [0210.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0164153.jpg")) returned 0x220 [0210.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0164153.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0210.690] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0164153.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0210.690] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0210.690] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0210.690] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0164153.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0210.692] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xb594, lpOverlapped=0x0) returned 1 [0210.702] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xb5a0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xb5a0, lpOverlapped=0x0) returned 1 [0210.713] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0210.714] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0210.714] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0210.714] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xb594, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xb594, lpOverlapped=0x0) returned 1 [0210.725] FlushFileBuffers (hFile=0x2b0) returned 1 [0210.768] FlushFileBuffers (hFile=0x21c) returned 1 [0210.776] CloseHandle (hObject=0x2b0) returned 1 [0210.776] CloseHandle (hObject=0x21c) returned 1 [0210.776] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0164153.jpg")) returned 1 [0210.777] SetEvent (hEvent=0x27c) returned 1 [0210.778] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171847.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171847.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0210.783] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=6888) returned 1 [0210.783] CloseHandle (hObject=0x21c) returned 1 [0210.783] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171847.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171847.wmf")) returned 0x220 [0210.783] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171847.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171847.wmf")) returned 0x220 [0210.783] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171847.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171847.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0210.783] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171847.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171847.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0210.783] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0210.783] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0210.783] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171847.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171847.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0210.784] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1ae8, lpOverlapped=0x0) returned 1 [0210.803] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1af0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1af0, lpOverlapped=0x0) returned 1 [0210.804] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0210.804] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0210.805] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0210.805] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1ae8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1ae8, lpOverlapped=0x0) returned 1 [0210.805] FlushFileBuffers (hFile=0x21c) returned 1 [0210.807] FlushFileBuffers (hFile=0x2b0) returned 1 [0210.818] CloseHandle (hObject=0x21c) returned 1 [0210.818] CloseHandle (hObject=0x2b0) returned 1 [0210.818] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171847.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171847.wmf")) returned 1 [0210.819] SetEvent (hEvent=0x27c) returned 1 [0210.820] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172067.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0210.822] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=7028) returned 1 [0210.822] CloseHandle (hObject=0x2b0) returned 1 [0210.822] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172067.wmf")) returned 0x220 [0210.822] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172067.wmf")) returned 0x220 [0210.822] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172067.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172067.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0210.822] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172067.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0210.822] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0210.822] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0210.822] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172067.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172067.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0210.823] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1b74, lpOverlapped=0x0) returned 1 [0210.826] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1b80, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1b80, lpOverlapped=0x0) returned 1 [0210.827] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0210.827] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0210.827] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0210.827] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1b74, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1b74, lpOverlapped=0x0) returned 1 [0210.828] FlushFileBuffers (hFile=0x2b0) returned 1 [0210.864] FlushFileBuffers (hFile=0x21c) returned 1 [0210.865] CloseHandle (hObject=0x2b0) returned 1 [0210.866] CloseHandle (hObject=0x21c) returned 1 [0210.866] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172067.wmf")) returned 1 [0210.867] SetEvent (hEvent=0x27c) returned 1 [0210.867] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174315.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174315.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0210.869] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=5864) returned 1 [0210.869] CloseHandle (hObject=0x21c) returned 1 [0210.869] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174315.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174315.wmf")) returned 0x220 [0210.869] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174315.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174315.wmf")) returned 0x220 [0210.869] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174315.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174315.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0210.869] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174315.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174315.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0210.869] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0210.869] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0210.869] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174315.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174315.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0210.870] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x16e8, lpOverlapped=0x0) returned 1 [0210.872] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x16f0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x16f0, lpOverlapped=0x0) returned 1 [0210.874] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0210.875] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0210.875] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0210.876] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x16e8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x16e8, lpOverlapped=0x0) returned 1 [0210.876] FlushFileBuffers (hFile=0x21c) returned 1 [0210.896] FlushFileBuffers (hFile=0x2b0) returned 1 [0210.964] CloseHandle (hObject=0x21c) returned 1 [0210.964] CloseHandle (hObject=0x2b0) returned 1 [0210.964] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174315.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174315.wmf")) returned 1 [0210.965] SetEvent (hEvent=0x27c) returned 1 [0210.965] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174952.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0210.966] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=24982) returned 1 [0210.966] CloseHandle (hObject=0x2b0) returned 1 [0210.966] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174952.jpg")) returned 0x220 [0210.966] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174952.jpg")) returned 0x220 [0210.966] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174952.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0210.967] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174952.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0210.967] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0210.967] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0210.967] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174952.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0210.967] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x6196, lpOverlapped=0x0) returned 1 [0210.982] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x61a0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x61a0, lpOverlapped=0x0) returned 1 [0210.984] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0210.984] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0210.984] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0210.984] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x6196, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x6196, lpOverlapped=0x0) returned 1 [0210.984] FlushFileBuffers (hFile=0x2b0) returned 1 [0211.159] FlushFileBuffers (hFile=0x21c) returned 1 [0211.166] CloseHandle (hObject=0x2b0) returned 1 [0211.166] CloseHandle (hObject=0x21c) returned 1 [0211.166] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174952.jpg")) returned 1 [0211.167] SetEvent (hEvent=0x27c) returned 1 [0211.167] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175428.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0211.169] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=14552) returned 1 [0211.169] CloseHandle (hObject=0x21c) returned 1 [0211.169] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175428.jpg")) returned 0x220 [0211.169] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175428.jpg")) returned 0x220 [0211.169] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175428.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0211.169] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175428.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0211.169] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0211.169] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0211.169] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175428.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0211.170] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x38d8, lpOverlapped=0x0) returned 1 [0211.174] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x38e0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x38e0, lpOverlapped=0x0) returned 1 [0211.175] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0211.175] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0211.175] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0211.175] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x38d8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x38d8, lpOverlapped=0x0) returned 1 [0211.175] FlushFileBuffers (hFile=0x21c) returned 1 [0211.188] FlushFileBuffers (hFile=0x2b0) returned 1 [0211.205] CloseHandle (hObject=0x21c) returned 1 [0211.206] CloseHandle (hObject=0x2b0) returned 1 [0211.206] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175428.jpg")) returned 1 [0211.207] SetEvent (hEvent=0x27c) returned 1 [0211.207] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177257.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0211.208] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=45358) returned 1 [0211.208] CloseHandle (hObject=0x2b0) returned 1 [0211.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177257.jpg")) returned 0x220 [0211.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177257.jpg")) returned 0x220 [0211.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177257.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0211.208] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177257.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0211.208] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0211.208] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0211.209] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177257.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0211.210] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xb12e, lpOverlapped=0x0) returned 1 [0211.219] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xb130, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xb130, lpOverlapped=0x0) returned 1 [0211.221] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0211.221] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0211.221] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0211.221] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xb12e, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xb12e, lpOverlapped=0x0) returned 1 [0211.222] FlushFileBuffers (hFile=0x2b0) returned 1 [0211.257] FlushFileBuffers (hFile=0x21c) returned 1 [0211.260] CloseHandle (hObject=0x2b0) returned 1 [0211.260] CloseHandle (hObject=0x21c) returned 1 [0211.260] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177257.jpg")) returned 1 [0211.261] SetEvent (hEvent=0x27c) returned 1 [0211.261] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178348.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0211.262] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=36989) returned 1 [0211.262] CloseHandle (hObject=0x21c) returned 1 [0211.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178348.jpg")) returned 0x220 [0211.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178348.jpg")) returned 0x220 [0211.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178348.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0211.263] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178348.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0211.263] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0211.263] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0211.263] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178348.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0211.264] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x907d, lpOverlapped=0x0) returned 1 [0211.270] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x9080, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x9080, lpOverlapped=0x0) returned 1 [0211.272] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0211.272] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0211.272] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0211.272] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x907d, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x907d, lpOverlapped=0x0) returned 1 [0211.272] FlushFileBuffers (hFile=0x21c) returned 1 [0211.280] FlushFileBuffers (hFile=0x2b0) returned 1 [0211.286] CloseHandle (hObject=0x21c) returned 1 [0211.286] CloseHandle (hObject=0x2b0) returned 1 [0211.286] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178348.jpg")) returned 1 [0211.287] SetEvent (hEvent=0x27c) returned 1 [0211.287] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178460.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0211.288] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=26531) returned 1 [0211.288] CloseHandle (hObject=0x2b0) returned 1 [0211.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178460.jpg")) returned 0x220 [0211.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178460.jpg")) returned 0x220 [0211.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178460.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0211.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178460.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0211.288] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0211.288] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0211.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178460.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0211.289] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x67a3, lpOverlapped=0x0) returned 1 [0211.305] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x67b0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x67b0, lpOverlapped=0x0) returned 1 [0211.306] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0211.306] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0211.307] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0211.307] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x67a3, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x67a3, lpOverlapped=0x0) returned 1 [0211.307] FlushFileBuffers (hFile=0x2b0) returned 1 [0211.309] FlushFileBuffers (hFile=0x21c) returned 1 [0211.317] CloseHandle (hObject=0x2b0) returned 1 [0211.317] CloseHandle (hObject=0x21c) returned 1 [0211.318] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178460.jpg")) returned 1 [0211.319] SetEvent (hEvent=0x27c) returned 1 [0211.319] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178632.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0211.320] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=23338) returned 1 [0211.320] CloseHandle (hObject=0x21c) returned 1 [0211.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178632.jpg")) returned 0x220 [0211.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178632.jpg")) returned 0x220 [0211.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178632.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0211.320] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178632.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0211.321] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0211.321] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0211.321] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178632.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0211.321] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x5b2a, lpOverlapped=0x0) returned 1 [0211.352] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5b30, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x5b30, lpOverlapped=0x0) returned 1 [0211.353] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0211.353] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0211.353] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0211.354] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5b2a, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x5b2a, lpOverlapped=0x0) returned 1 [0211.354] FlushFileBuffers (hFile=0x21c) returned 1 [0211.358] FlushFileBuffers (hFile=0x2b0) returned 1 [0211.387] CloseHandle (hObject=0x21c) returned 1 [0211.391] CloseHandle (hObject=0x2b0) returned 1 [0211.391] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178632.jpg")) returned 1 [0211.393] SetEvent (hEvent=0x27c) returned 1 [0211.393] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178932.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0211.396] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=35340) returned 1 [0211.396] CloseHandle (hObject=0x2b0) returned 1 [0211.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178932.jpg")) returned 0x220 [0211.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178932.jpg")) returned 0x220 [0211.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178932.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0211.397] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178932.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0211.397] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0211.397] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0211.397] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178932.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0211.398] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x8a0c, lpOverlapped=0x0) returned 1 [0211.424] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8a10, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x8a10, lpOverlapped=0x0) returned 1 [0211.426] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0211.426] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0211.426] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0211.426] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8a0c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x8a0c, lpOverlapped=0x0) returned 1 [0211.426] FlushFileBuffers (hFile=0x2b0) returned 1 [0211.489] FlushFileBuffers (hFile=0x21c) returned 1 [0211.576] CloseHandle (hObject=0x2b0) returned 1 [0211.577] CloseHandle (hObject=0x21c) returned 1 [0211.577] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178932.jpg")) returned 1 [0211.586] SetEvent (hEvent=0x27c) returned 1 [0211.598] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182888.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182888.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0211.622] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=24392) returned 1 [0211.622] CloseHandle (hObject=0x21c) returned 1 [0211.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182888.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182888.wmf")) returned 0x220 [0211.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182888.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182888.wmf")) returned 0x220 [0211.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182888.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182888.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0211.622] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182888.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182888.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0211.622] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0211.622] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0211.622] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182888.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182888.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0211.623] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x5f48, lpOverlapped=0x0) returned 1 [0211.628] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5f50, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x5f50, lpOverlapped=0x0) returned 1 [0211.629] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0211.629] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0211.629] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0211.629] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5f48, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x5f48, lpOverlapped=0x0) returned 1 [0211.630] FlushFileBuffers (hFile=0x21c) returned 1 [0211.643] FlushFileBuffers (hFile=0x2b0) returned 1 [0211.785] CloseHandle (hObject=0x21c) returned 1 [0211.798] CloseHandle (hObject=0x2b0) returned 1 [0211.799] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182888.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182888.wmf")) returned 1 [0211.801] SetEvent (hEvent=0x27c) returned 1 [0211.801] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183574.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183574.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0211.803] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=19274) returned 1 [0211.803] CloseHandle (hObject=0x2b0) returned 1 [0211.803] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183574.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183574.wmf")) returned 0x220 [0211.803] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183574.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183574.wmf")) returned 0x220 [0211.803] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183574.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183574.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0211.803] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183574.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183574.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0211.804] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0211.804] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0211.804] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183574.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183574.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0211.805] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4b4a, lpOverlapped=0x0) returned 1 [0211.808] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4b50, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4b50, lpOverlapped=0x0) returned 1 [0211.810] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0211.811] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0211.811] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0211.811] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4b4a, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4b4a, lpOverlapped=0x0) returned 1 [0211.811] FlushFileBuffers (hFile=0x2b0) returned 1 [0211.816] FlushFileBuffers (hFile=0x21c) returned 1 [0211.823] CloseHandle (hObject=0x2b0) returned 1 [0211.823] CloseHandle (hObject=0x21c) returned 1 [0211.823] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183574.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183574.wmf")) returned 1 [0211.824] SetEvent (hEvent=0x27c) returned 1 [0211.824] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185774.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185774.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0211.825] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=20038) returned 1 [0211.825] CloseHandle (hObject=0x21c) returned 1 [0211.825] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185774.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185774.wmf")) returned 0x220 [0211.825] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185774.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185774.wmf")) returned 0x220 [0211.825] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185774.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185774.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0211.826] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185774.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185774.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0211.826] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0211.826] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0211.826] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185774.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185774.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0211.827] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4e46, lpOverlapped=0x0) returned 1 [0211.831] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4e50, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4e50, lpOverlapped=0x0) returned 1 [0211.832] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0211.833] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0211.833] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0211.833] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4e46, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4e46, lpOverlapped=0x0) returned 1 [0211.833] FlushFileBuffers (hFile=0x21c) returned 1 [0211.864] FlushFileBuffers (hFile=0x2b0) returned 1 [0211.873] CloseHandle (hObject=0x21c) returned 1 [0211.873] CloseHandle (hObject=0x2b0) returned 1 [0211.873] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185774.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185774.wmf")) returned 1 [0211.874] SetEvent (hEvent=0x27c) returned 1 [0211.874] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185776.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185776.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0211.875] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=27096) returned 1 [0211.875] CloseHandle (hObject=0x2b0) returned 1 [0211.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185776.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185776.wmf")) returned 0x220 [0211.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185776.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185776.wmf")) returned 0x220 [0211.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185776.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185776.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0211.876] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185776.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185776.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0211.876] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0211.876] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0211.876] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185776.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185776.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0211.877] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x69d8, lpOverlapped=0x0) returned 1 [0211.880] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x69e0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x69e0, lpOverlapped=0x0) returned 1 [0211.881] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0211.881] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0211.882] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0211.882] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x69d8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x69d8, lpOverlapped=0x0) returned 1 [0211.882] FlushFileBuffers (hFile=0x2b0) returned 1 [0211.908] FlushFileBuffers (hFile=0x21c) returned 1 [0211.946] CloseHandle (hObject=0x2b0) returned 1 [0211.946] CloseHandle (hObject=0x21c) returned 1 [0211.947] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185776.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185776.wmf")) returned 1 [0211.948] SetEvent (hEvent=0x27c) returned 1 [0211.948] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185780.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185780.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0211.950] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=59734) returned 1 [0211.950] CloseHandle (hObject=0x21c) returned 1 [0211.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185780.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185780.wmf")) returned 0x220 [0211.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185780.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185780.wmf")) returned 0x220 [0211.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185780.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185780.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0211.950] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185780.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185780.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0211.950] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0211.950] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0211.950] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185780.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185780.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0211.951] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xe956, lpOverlapped=0x0) returned 1 [0211.973] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xe960, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xe960, lpOverlapped=0x0) returned 1 [0211.975] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0211.976] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0211.976] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0211.976] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xe956, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xe956, lpOverlapped=0x0) returned 1 [0211.976] FlushFileBuffers (hFile=0x21c) returned 1 [0211.995] FlushFileBuffers (hFile=0x2b0) returned 1 [0212.005] CloseHandle (hObject=0x21c) returned 1 [0212.005] CloseHandle (hObject=0x2b0) returned 1 [0212.005] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185780.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185780.wmf")) returned 1 [0212.007] SetEvent (hEvent=0x27c) returned 1 [0212.007] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185796.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185796.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0212.009] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=25868) returned 1 [0212.009] CloseHandle (hObject=0x2b0) returned 1 [0212.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185796.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185796.wmf")) returned 0x220 [0212.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185796.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185796.wmf")) returned 0x220 [0212.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185796.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185796.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.009] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185796.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185796.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0212.009] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.009] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.009] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185796.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185796.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0212.011] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x650c, lpOverlapped=0x0) returned 1 [0212.040] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x6510, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x6510, lpOverlapped=0x0) returned 1 [0212.042] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0212.042] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.042] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.042] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x650c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x650c, lpOverlapped=0x0) returned 1 [0212.043] FlushFileBuffers (hFile=0x2b0) returned 1 [0212.046] FlushFileBuffers (hFile=0x21c) returned 1 [0212.048] CloseHandle (hObject=0x2b0) returned 1 [0212.049] CloseHandle (hObject=0x21c) returned 1 [0212.049] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185796.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185796.wmf")) returned 1 [0212.050] SetEvent (hEvent=0x27c) returned 1 [0212.050] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185798.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185798.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0212.053] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=33824) returned 1 [0212.053] CloseHandle (hObject=0x21c) returned 1 [0212.053] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185798.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185798.wmf")) returned 0x220 [0212.053] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185798.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185798.wmf")) returned 0x220 [0212.053] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185798.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185798.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.053] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185798.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185798.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0212.053] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.053] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.054] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185798.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185798.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0212.055] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x8420, lpOverlapped=0x0) returned 1 [0212.062] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8430, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x8430, lpOverlapped=0x0) returned 1 [0212.064] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0212.065] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.065] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.065] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8420, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x8420, lpOverlapped=0x0) returned 1 [0212.065] FlushFileBuffers (hFile=0x21c) returned 1 [0212.082] FlushFileBuffers (hFile=0x2b0) returned 1 [0212.086] CloseHandle (hObject=0x21c) returned 1 [0212.086] CloseHandle (hObject=0x2b0) returned 1 [0212.086] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185798.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185798.wmf")) returned 1 [0212.087] SetEvent (hEvent=0x27c) returned 1 [0212.087] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185806.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185806.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0212.089] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=30522) returned 1 [0212.089] CloseHandle (hObject=0x2b0) returned 1 [0212.089] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185806.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185806.wmf")) returned 0x220 [0212.090] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185806.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185806.wmf")) returned 0x220 [0212.090] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185806.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185806.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.090] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185806.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185806.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0212.090] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.090] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.090] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185806.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185806.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0212.091] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x773a, lpOverlapped=0x0) returned 1 [0212.101] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7740, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x7740, lpOverlapped=0x0) returned 1 [0212.102] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0212.102] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.103] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.103] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x773a, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x773a, lpOverlapped=0x0) returned 1 [0212.103] FlushFileBuffers (hFile=0x2b0) returned 1 [0212.109] FlushFileBuffers (hFile=0x21c) returned 1 [0212.112] CloseHandle (hObject=0x2b0) returned 1 [0212.112] CloseHandle (hObject=0x21c) returned 1 [0212.112] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185806.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185806.wmf")) returned 1 [0212.113] SetEvent (hEvent=0x27c) returned 1 [0212.113] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185828.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185828.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0212.115] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=7796) returned 1 [0212.115] CloseHandle (hObject=0x21c) returned 1 [0212.115] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185828.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185828.wmf")) returned 0x220 [0212.115] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185828.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185828.wmf")) returned 0x220 [0212.115] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185828.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185828.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.115] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185828.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185828.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0212.115] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.116] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.116] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185828.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185828.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0212.117] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1e74, lpOverlapped=0x0) returned 1 [0212.120] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1e80, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1e80, lpOverlapped=0x0) returned 1 [0212.121] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0212.121] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.122] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.122] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1e74, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1e74, lpOverlapped=0x0) returned 1 [0212.122] FlushFileBuffers (hFile=0x21c) returned 1 [0212.129] FlushFileBuffers (hFile=0x2b0) returned 1 [0212.131] CloseHandle (hObject=0x21c) returned 1 [0212.131] CloseHandle (hObject=0x2b0) returned 1 [0212.131] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185828.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185828.wmf")) returned 1 [0212.132] SetEvent (hEvent=0x27c) returned 1 [0212.132] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185842.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185842.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0212.134] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=14308) returned 1 [0212.134] CloseHandle (hObject=0x2b0) returned 1 [0212.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185842.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185842.wmf")) returned 0x220 [0212.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185842.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185842.wmf")) returned 0x220 [0212.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185842.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185842.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.134] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185842.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185842.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0212.134] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.134] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.134] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185842.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185842.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0212.135] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x37e4, lpOverlapped=0x0) returned 1 [0212.138] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x37f0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x37f0, lpOverlapped=0x0) returned 1 [0212.139] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0212.139] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.139] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.139] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x37e4, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x37e4, lpOverlapped=0x0) returned 1 [0212.140] FlushFileBuffers (hFile=0x2b0) returned 1 [0212.148] FlushFileBuffers (hFile=0x21c) returned 1 [0212.151] CloseHandle (hObject=0x2b0) returned 1 [0212.151] CloseHandle (hObject=0x21c) returned 1 [0212.151] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185842.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185842.wmf")) returned 1 [0212.152] SetEvent (hEvent=0x27c) returned 1 [0212.153] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186360.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0212.154] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=33850) returned 1 [0212.154] CloseHandle (hObject=0x21c) returned 1 [0212.154] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186360.wmf")) returned 0x220 [0212.154] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186360.wmf")) returned 0x220 [0212.154] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186360.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186360.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.154] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186360.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0212.154] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.154] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.154] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186360.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186360.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0212.155] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x843a, lpOverlapped=0x0) returned 1 [0212.161] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8440, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x8440, lpOverlapped=0x0) returned 1 [0212.162] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0212.163] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.163] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.163] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x843a, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x843a, lpOverlapped=0x0) returned 1 [0212.163] FlushFileBuffers (hFile=0x21c) returned 1 [0212.172] FlushFileBuffers (hFile=0x2b0) returned 1 [0212.174] CloseHandle (hObject=0x21c) returned 1 [0212.174] CloseHandle (hObject=0x2b0) returned 1 [0212.174] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186360.wmf")) returned 1 [0212.175] SetEvent (hEvent=0x27c) returned 1 [0212.175] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186364.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0212.176] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=18212) returned 1 [0212.176] CloseHandle (hObject=0x2b0) returned 1 [0212.176] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186364.wmf")) returned 0x220 [0212.176] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186364.wmf")) returned 0x220 [0212.176] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186364.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186364.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.176] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186364.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0212.176] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.176] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.176] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186364.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186364.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0212.177] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4724, lpOverlapped=0x0) returned 1 [0212.179] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4730, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4730, lpOverlapped=0x0) returned 1 [0212.180] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0212.181] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.181] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.181] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4724, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4724, lpOverlapped=0x0) returned 1 [0212.181] FlushFileBuffers (hFile=0x2b0) returned 1 [0212.191] FlushFileBuffers (hFile=0x21c) returned 1 [0212.193] CloseHandle (hObject=0x2b0) returned 1 [0212.193] CloseHandle (hObject=0x21c) returned 1 [0212.193] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186364.wmf")) returned 1 [0212.194] SetEvent (hEvent=0x27c) returned 1 [0212.194] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187815.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187815.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0212.195] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=5376) returned 1 [0212.195] CloseHandle (hObject=0x21c) returned 1 [0212.196] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187815.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187815.wmf")) returned 0x220 [0212.196] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187815.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187815.wmf")) returned 0x220 [0212.196] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187815.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187815.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.196] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187815.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187815.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0212.196] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.196] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.196] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187815.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187815.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0212.197] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1500, lpOverlapped=0x0) returned 1 [0212.233] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1510, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1510, lpOverlapped=0x0) returned 1 [0212.236] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0212.236] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.236] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.236] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1500, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1500, lpOverlapped=0x0) returned 1 [0212.241] FlushFileBuffers (hFile=0x21c) returned 1 [0212.257] FlushFileBuffers (hFile=0x2b0) returned 1 [0212.270] CloseHandle (hObject=0x21c) returned 1 [0212.270] CloseHandle (hObject=0x2b0) returned 1 [0212.270] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187815.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187815.wmf")) returned 1 [0212.271] SetEvent (hEvent=0x27c) returned 1 [0212.271] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187819.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187819.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0212.272] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=10352) returned 1 [0212.272] CloseHandle (hObject=0x2b0) returned 1 [0212.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187819.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187819.wmf")) returned 0x220 [0212.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187819.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187819.wmf")) returned 0x220 [0212.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187819.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187819.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.273] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187819.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187819.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0212.273] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.273] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.273] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187819.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187819.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0212.274] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2870, lpOverlapped=0x0) returned 1 [0212.276] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2880, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2880, lpOverlapped=0x0) returned 1 [0212.277] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0212.277] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.277] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.278] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2870, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2870, lpOverlapped=0x0) returned 1 [0212.278] FlushFileBuffers (hFile=0x2b0) returned 1 [0212.286] FlushFileBuffers (hFile=0x21c) returned 1 [0212.288] CloseHandle (hObject=0x2b0) returned 1 [0212.288] CloseHandle (hObject=0x21c) returned 1 [0212.288] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187819.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187819.wmf")) returned 1 [0212.289] SetEvent (hEvent=0x27c) returned 1 [0212.289] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187829.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187829.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0212.294] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=12352) returned 1 [0212.294] CloseHandle (hObject=0x21c) returned 1 [0212.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187829.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187829.wmf")) returned 0x220 [0212.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187829.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187829.wmf")) returned 0x220 [0212.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187829.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187829.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187829.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187829.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0212.295] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.295] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.296] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187829.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187829.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0212.296] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x3040, lpOverlapped=0x0) returned 1 [0212.298] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3050, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3050, lpOverlapped=0x0) returned 1 [0212.301] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0212.301] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.301] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.301] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3040, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x3040, lpOverlapped=0x0) returned 1 [0212.302] FlushFileBuffers (hFile=0x21c) returned 1 [0212.316] FlushFileBuffers (hFile=0x2b0) returned 1 [0212.318] CloseHandle (hObject=0x21c) returned 1 [0212.318] CloseHandle (hObject=0x2b0) returned 1 [0212.318] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187829.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187829.wmf")) returned 1 [0212.319] SetEvent (hEvent=0x27c) returned 1 [0212.319] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187837.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187837.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0212.321] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=16354) returned 1 [0212.321] CloseHandle (hObject=0x2b0) returned 1 [0212.321] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187837.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187837.wmf")) returned 0x220 [0212.321] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187837.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187837.wmf")) returned 0x220 [0212.321] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187837.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187837.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.321] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187837.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187837.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0212.321] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.321] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.321] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187837.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187837.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0212.323] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x3fe2, lpOverlapped=0x0) returned 1 [0212.325] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3ff0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3ff0, lpOverlapped=0x0) returned 1 [0212.327] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0212.327] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.327] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.327] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3fe2, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x3fe2, lpOverlapped=0x0) returned 1 [0212.327] FlushFileBuffers (hFile=0x2b0) returned 1 [0212.336] FlushFileBuffers (hFile=0x21c) returned 1 [0212.553] CloseHandle (hObject=0x2b0) returned 1 [0212.553] CloseHandle (hObject=0x21c) returned 1 [0212.553] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187837.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187837.wmf")) returned 1 [0212.555] SetEvent (hEvent=0x27c) returned 1 [0212.555] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187859.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187859.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0212.556] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2732) returned 1 [0212.556] CloseHandle (hObject=0x21c) returned 1 [0212.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187859.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187859.wmf")) returned 0x220 [0212.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187859.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187859.wmf")) returned 0x220 [0212.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187859.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187859.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.556] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187859.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187859.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0212.556] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.556] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.556] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187859.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187859.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0212.557] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xaac, lpOverlapped=0x0) returned 1 [0212.560] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xab0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xab0, lpOverlapped=0x0) returned 1 [0212.560] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0212.561] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.561] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.561] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xaac, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xaac, lpOverlapped=0x0) returned 1 [0212.561] FlushFileBuffers (hFile=0x21c) returned 1 [0212.573] FlushFileBuffers (hFile=0x2b0) returned 1 [0212.574] CloseHandle (hObject=0x21c) returned 1 [0212.574] CloseHandle (hObject=0x2b0) returned 1 [0212.574] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187859.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187859.wmf")) returned 1 [0212.575] SetEvent (hEvent=0x27c) returned 1 [0212.576] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187863.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187863.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0212.576] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=10820) returned 1 [0212.576] CloseHandle (hObject=0x2b0) returned 1 [0212.576] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187863.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187863.wmf")) returned 0x220 [0212.576] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187863.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187863.wmf")) returned 0x220 [0212.576] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187863.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187863.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.577] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187863.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187863.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0212.577] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.577] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.577] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187863.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187863.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0212.577] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2a44, lpOverlapped=0x0) returned 1 [0212.579] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2a50, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2a50, lpOverlapped=0x0) returned 1 [0212.580] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0212.581] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.581] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.581] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2a44, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2a44, lpOverlapped=0x0) returned 1 [0212.581] FlushFileBuffers (hFile=0x2b0) returned 1 [0212.593] FlushFileBuffers (hFile=0x21c) returned 1 [0212.596] CloseHandle (hObject=0x2b0) returned 1 [0212.596] CloseHandle (hObject=0x21c) returned 1 [0212.596] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187863.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187863.wmf")) returned 1 [0212.597] SetEvent (hEvent=0x27c) returned 1 [0212.597] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187883.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187883.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0212.598] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2100) returned 1 [0212.598] CloseHandle (hObject=0x21c) returned 1 [0212.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187883.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187883.wmf")) returned 0x220 [0212.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187883.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187883.wmf")) returned 0x220 [0212.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187883.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187883.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.598] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187883.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187883.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0212.598] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.598] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.598] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187883.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187883.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0212.599] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x834, lpOverlapped=0x0) returned 1 [0212.601] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x840, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x840, lpOverlapped=0x0) returned 1 [0212.605] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0212.606] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.606] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.606] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x834, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x834, lpOverlapped=0x0) returned 1 [0212.606] FlushFileBuffers (hFile=0x21c) returned 1 [0212.612] FlushFileBuffers (hFile=0x2b0) returned 1 [0212.619] CloseHandle (hObject=0x21c) returned 1 [0212.620] CloseHandle (hObject=0x2b0) returned 1 [0212.620] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187883.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187883.wmf")) returned 1 [0212.621] SetEvent (hEvent=0x27c) returned 1 [0212.621] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187895.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187895.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0212.621] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3472) returned 1 [0212.621] CloseHandle (hObject=0x2b0) returned 1 [0212.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187895.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187895.wmf")) returned 0x220 [0212.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187895.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187895.wmf")) returned 0x220 [0212.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187895.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187895.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.622] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187895.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187895.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0212.622] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.622] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.622] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187895.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187895.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0212.623] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xd90, lpOverlapped=0x0) returned 1 [0212.624] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xda0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xda0, lpOverlapped=0x0) returned 1 [0212.625] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0212.626] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.626] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.626] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xd90, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xd90, lpOverlapped=0x0) returned 1 [0212.626] FlushFileBuffers (hFile=0x2b0) returned 1 [0212.633] FlushFileBuffers (hFile=0x21c) returned 1 [0212.638] CloseHandle (hObject=0x2b0) returned 1 [0212.642] CloseHandle (hObject=0x21c) returned 1 [0212.642] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187895.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187895.wmf")) returned 1 [0212.643] SetEvent (hEvent=0x27c) returned 1 [0212.643] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188511.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188511.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0212.644] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=10716) returned 1 [0212.644] CloseHandle (hObject=0x21c) returned 1 [0212.644] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188511.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188511.wmf")) returned 0x220 [0212.644] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188511.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188511.wmf")) returned 0x220 [0212.644] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188511.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188511.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.645] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188511.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188511.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0212.645] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.645] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.645] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188511.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188511.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0212.646] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x29dc, lpOverlapped=0x0) returned 1 [0212.648] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x29e0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x29e0, lpOverlapped=0x0) returned 1 [0212.649] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0212.649] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.649] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.649] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x29dc, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x29dc, lpOverlapped=0x0) returned 1 [0212.649] FlushFileBuffers (hFile=0x21c) returned 1 [0212.661] FlushFileBuffers (hFile=0x2b0) returned 1 [0212.663] CloseHandle (hObject=0x21c) returned 1 [0212.663] CloseHandle (hObject=0x2b0) returned 1 [0212.663] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188511.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188511.wmf")) returned 1 [0212.664] SetEvent (hEvent=0x27c) returned 1 [0212.664] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188519.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188519.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0212.666] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=5824) returned 1 [0212.666] CloseHandle (hObject=0x2b0) returned 1 [0212.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188519.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188519.wmf")) returned 0x220 [0212.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188519.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188519.wmf")) returned 0x220 [0212.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188519.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188519.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.666] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188519.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188519.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0212.666] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.667] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.667] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188519.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188519.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0212.667] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x16c0, lpOverlapped=0x0) returned 1 [0212.669] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x16d0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x16d0, lpOverlapped=0x0) returned 1 [0212.671] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0212.671] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.671] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.671] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x16c0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x16c0, lpOverlapped=0x0) returned 1 [0212.671] FlushFileBuffers (hFile=0x2b0) returned 1 [0212.683] FlushFileBuffers (hFile=0x21c) returned 1 [0212.686] CloseHandle (hObject=0x2b0) returned 1 [0212.686] CloseHandle (hObject=0x21c) returned 1 [0212.686] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188519.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188519.wmf")) returned 1 [0212.687] SetEvent (hEvent=0x27c) returned 1 [0212.688] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188667.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188667.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0212.688] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=16030) returned 1 [0212.688] CloseHandle (hObject=0x21c) returned 1 [0212.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188667.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188667.wmf")) returned 0x220 [0212.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188667.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188667.wmf")) returned 0x220 [0212.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188667.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188667.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.689] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188667.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188667.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0212.689] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.689] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.689] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188667.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188667.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0212.689] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x3e9e, lpOverlapped=0x0) returned 1 [0212.692] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3ea0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3ea0, lpOverlapped=0x0) returned 1 [0212.694] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0212.694] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.694] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.694] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3e9e, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x3e9e, lpOverlapped=0x0) returned 1 [0212.695] FlushFileBuffers (hFile=0x21c) returned 1 [0212.704] FlushFileBuffers (hFile=0x2b0) returned 1 [0212.706] CloseHandle (hObject=0x21c) returned 1 [0212.706] CloseHandle (hObject=0x2b0) returned 1 [0212.706] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188667.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188667.wmf")) returned 1 [0212.707] SetEvent (hEvent=0x27c) returned 1 [0212.707] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188679.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188679.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0212.708] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=13162) returned 1 [0212.708] CloseHandle (hObject=0x2b0) returned 1 [0212.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188679.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188679.wmf")) returned 0x220 [0212.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188679.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188679.wmf")) returned 0x220 [0212.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188679.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188679.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.708] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188679.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188679.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0212.708] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.709] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.709] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188679.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188679.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0212.709] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x336a, lpOverlapped=0x0) returned 1 [0212.712] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3370, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3370, lpOverlapped=0x0) returned 1 [0212.713] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0212.714] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.714] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.714] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x336a, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x336a, lpOverlapped=0x0) returned 1 [0212.714] FlushFileBuffers (hFile=0x2b0) returned 1 [0212.720] FlushFileBuffers (hFile=0x21c) returned 1 [0212.727] CloseHandle (hObject=0x2b0) returned 1 [0212.727] CloseHandle (hObject=0x21c) returned 1 [0212.727] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188679.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188679.wmf")) returned 1 [0212.728] SetEvent (hEvent=0x27c) returned 1 [0212.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195254.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195254.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0212.730] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=4534) returned 1 [0212.730] CloseHandle (hObject=0x21c) returned 1 [0212.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195254.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195254.wmf")) returned 0x220 [0212.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195254.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195254.wmf")) returned 0x220 [0212.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195254.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195254.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.730] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195254.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195254.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0212.730] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.730] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.730] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195254.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195254.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0212.731] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x11b6, lpOverlapped=0x0) returned 1 [0212.737] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x11c0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x11c0, lpOverlapped=0x0) returned 1 [0212.739] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0212.739] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.739] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.739] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x11b6, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x11b6, lpOverlapped=0x0) returned 1 [0212.739] FlushFileBuffers (hFile=0x21c) returned 1 [0212.742] FlushFileBuffers (hFile=0x2b0) returned 1 [0212.751] CloseHandle (hObject=0x21c) returned 1 [0212.751] CloseHandle (hObject=0x2b0) returned 1 [0212.751] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195254.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195254.wmf")) returned 1 [0212.752] SetEvent (hEvent=0x27c) returned 1 [0212.753] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195320.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195320.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0212.753] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=29432) returned 1 [0212.753] CloseHandle (hObject=0x2b0) returned 1 [0212.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195320.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195320.wmf")) returned 0x220 [0212.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195320.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195320.wmf")) returned 0x220 [0212.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195320.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195320.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.753] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195320.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195320.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0212.753] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.754] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.754] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195320.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195320.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0212.754] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x72f8, lpOverlapped=0x0) returned 1 [0212.759] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7300, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x7300, lpOverlapped=0x0) returned 1 [0212.761] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0212.761] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.761] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.761] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x72f8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x72f8, lpOverlapped=0x0) returned 1 [0212.762] FlushFileBuffers (hFile=0x2b0) returned 1 [0212.765] FlushFileBuffers (hFile=0x21c) returned 1 [0212.772] CloseHandle (hObject=0x2b0) returned 1 [0212.772] CloseHandle (hObject=0x21c) returned 1 [0212.772] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195320.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195320.wmf")) returned 1 [0212.774] SetEvent (hEvent=0x27c) returned 1 [0212.774] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195428.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195428.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0212.778] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=18622) returned 1 [0212.778] CloseHandle (hObject=0x21c) returned 1 [0212.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195428.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195428.wmf")) returned 0x220 [0212.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195428.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195428.wmf")) returned 0x220 [0212.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195428.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195428.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.779] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195428.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195428.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0212.779] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.779] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.779] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195428.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195428.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0212.779] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x48be, lpOverlapped=0x0) returned 1 [0212.782] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x48c0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x48c0, lpOverlapped=0x0) returned 1 [0212.783] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0212.784] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.784] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.784] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x48be, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x48be, lpOverlapped=0x0) returned 1 [0212.784] FlushFileBuffers (hFile=0x21c) returned 1 [0212.797] FlushFileBuffers (hFile=0x2b0) returned 1 [0212.799] CloseHandle (hObject=0x21c) returned 1 [0212.800] CloseHandle (hObject=0x2b0) returned 1 [0212.800] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195428.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195428.wmf")) returned 1 [0212.801] SetEvent (hEvent=0x27c) returned 1 [0212.801] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195788.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195788.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0212.802] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3004) returned 1 [0212.802] CloseHandle (hObject=0x2b0) returned 1 [0212.802] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195788.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195788.wmf")) returned 0x220 [0212.802] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195788.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195788.wmf")) returned 0x220 [0212.802] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195788.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195788.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.802] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195788.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195788.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0212.802] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.802] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.802] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195788.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195788.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0212.803] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xbbc, lpOverlapped=0x0) returned 1 [0212.804] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xbc0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xbc0, lpOverlapped=0x0) returned 1 [0212.805] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0212.806] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.806] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.806] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xbbc, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xbbc, lpOverlapped=0x0) returned 1 [0212.806] FlushFileBuffers (hFile=0x2b0) returned 1 [0212.809] FlushFileBuffers (hFile=0x21c) returned 1 [0212.819] CloseHandle (hObject=0x2b0) returned 1 [0212.820] CloseHandle (hObject=0x21c) returned 1 [0212.820] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195788.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195788.wmf")) returned 1 [0212.821] SetEvent (hEvent=0x27c) returned 1 [0212.821] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196110.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196110.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0212.822] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=5326) returned 1 [0212.822] CloseHandle (hObject=0x21c) returned 1 [0212.822] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196110.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196110.wmf")) returned 0x220 [0212.822] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196110.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196110.wmf")) returned 0x220 [0212.822] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196110.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196110.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.822] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196110.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196110.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0212.822] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.823] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.823] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196110.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196110.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0212.823] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x14ce, lpOverlapped=0x0) returned 1 [0212.826] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x14d0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x14d0, lpOverlapped=0x0) returned 1 [0212.827] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0212.827] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.827] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.827] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x14ce, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x14ce, lpOverlapped=0x0) returned 1 [0212.827] FlushFileBuffers (hFile=0x21c) returned 1 [0212.848] FlushFileBuffers (hFile=0x2b0) returned 1 [0212.852] CloseHandle (hObject=0x21c) returned 1 [0212.852] CloseHandle (hObject=0x2b0) returned 1 [0212.852] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196110.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196110.wmf")) returned 1 [0212.853] SetEvent (hEvent=0x27c) returned 1 [0212.853] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196354.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196354.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0212.855] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=13702) returned 1 [0212.855] CloseHandle (hObject=0x2b0) returned 1 [0212.855] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196354.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196354.wmf")) returned 0x220 [0212.855] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196354.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196354.wmf")) returned 0x220 [0212.855] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196354.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196354.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.855] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196354.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196354.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0212.855] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.856] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.856] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196354.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196354.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0212.857] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x3586, lpOverlapped=0x0) returned 1 [0212.859] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3590, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3590, lpOverlapped=0x0) returned 1 [0212.860] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0212.861] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.861] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.861] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3586, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x3586, lpOverlapped=0x0) returned 1 [0212.861] FlushFileBuffers (hFile=0x2b0) returned 1 [0212.868] FlushFileBuffers (hFile=0x21c) returned 1 [0212.872] CloseHandle (hObject=0x2b0) returned 1 [0212.872] CloseHandle (hObject=0x21c) returned 1 [0212.872] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196354.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196354.wmf")) returned 1 [0212.874] SetEvent (hEvent=0x27c) returned 1 [0212.874] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196364.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0212.874] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=5708) returned 1 [0212.874] CloseHandle (hObject=0x21c) returned 1 [0212.874] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196364.wmf")) returned 0x220 [0212.874] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196364.wmf")) returned 0x220 [0212.874] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196364.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196364.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.875] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196364.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0212.875] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.875] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.875] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196364.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196364.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0212.877] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x164c, lpOverlapped=0x0) returned 1 [0212.879] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1650, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1650, lpOverlapped=0x0) returned 1 [0212.881] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0212.881] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.881] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.881] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x164c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x164c, lpOverlapped=0x0) returned 1 [0212.882] FlushFileBuffers (hFile=0x21c) returned 1 [0212.893] FlushFileBuffers (hFile=0x2b0) returned 1 [0212.895] CloseHandle (hObject=0x21c) returned 1 [0212.895] CloseHandle (hObject=0x2b0) returned 1 [0212.895] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196364.wmf")) returned 1 [0212.896] SetEvent (hEvent=0x27c) returned 1 [0212.897] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197983.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0197983.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0212.898] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=26252) returned 1 [0212.898] CloseHandle (hObject=0x2b0) returned 1 [0212.898] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197983.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0197983.wmf")) returned 0x220 [0212.898] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197983.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0197983.wmf")) returned 0x220 [0212.898] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197983.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0197983.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.898] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197983.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0197983.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0212.899] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.899] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.899] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197983.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0197983.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0212.899] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x668c, lpOverlapped=0x0) returned 1 [0212.902] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x6690, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x6690, lpOverlapped=0x0) returned 1 [0212.903] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0212.904] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.904] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.904] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x668c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x668c, lpOverlapped=0x0) returned 1 [0212.904] FlushFileBuffers (hFile=0x2b0) returned 1 [0212.913] FlushFileBuffers (hFile=0x21c) returned 1 [0212.919] CloseHandle (hObject=0x2b0) returned 1 [0212.919] CloseHandle (hObject=0x21c) returned 1 [0212.919] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197983.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0197983.wmf")) returned 1 [0212.920] SetEvent (hEvent=0x27c) returned 1 [0212.921] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198020.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0212.921] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=23726) returned 1 [0212.921] CloseHandle (hObject=0x21c) returned 1 [0212.921] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198020.wmf")) returned 0x220 [0212.921] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198020.wmf")) returned 0x220 [0212.922] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198020.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198020.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.922] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198020.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0212.922] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.922] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.922] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198020.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198020.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0212.922] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x5cae, lpOverlapped=0x0) returned 1 [0212.925] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5cb0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x5cb0, lpOverlapped=0x0) returned 1 [0212.926] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0212.926] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.926] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.927] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5cae, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x5cae, lpOverlapped=0x0) returned 1 [0212.927] FlushFileBuffers (hFile=0x21c) returned 1 [0212.929] FlushFileBuffers (hFile=0x2b0) returned 1 [0212.940] CloseHandle (hObject=0x21c) returned 1 [0212.940] CloseHandle (hObject=0x2b0) returned 1 [0212.940] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198020.wmf")) returned 1 [0212.941] SetEvent (hEvent=0x27c) returned 1 [0212.941] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198022.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198022.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0212.943] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=26148) returned 1 [0212.943] CloseHandle (hObject=0x2b0) returned 1 [0212.943] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198022.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198022.wmf")) returned 0x220 [0212.943] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198022.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198022.wmf")) returned 0x220 [0212.943] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198022.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198022.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.943] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198022.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198022.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0212.943] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.944] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.944] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198022.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198022.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0212.944] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x6624, lpOverlapped=0x0) returned 1 [0212.947] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x6630, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x6630, lpOverlapped=0x0) returned 1 [0212.948] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0212.949] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.949] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.949] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x6624, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x6624, lpOverlapped=0x0) returned 1 [0212.949] FlushFileBuffers (hFile=0x2b0) returned 1 [0212.952] FlushFileBuffers (hFile=0x21c) returned 1 [0212.958] CloseHandle (hObject=0x2b0) returned 1 [0212.958] CloseHandle (hObject=0x21c) returned 1 [0212.959] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198022.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198022.wmf")) returned 1 [0212.960] SetEvent (hEvent=0x27c) returned 1 [0212.960] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198102.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198102.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0212.964] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=54964) returned 1 [0212.964] CloseHandle (hObject=0x21c) returned 1 [0212.964] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198102.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198102.wmf")) returned 0x220 [0212.964] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198102.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198102.wmf")) returned 0x220 [0212.964] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198102.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198102.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.964] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198102.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198102.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0212.964] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.965] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.965] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198102.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198102.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0212.965] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xd6b4, lpOverlapped=0x0) returned 1 [0212.969] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xd6c0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xd6c0, lpOverlapped=0x0) returned 1 [0212.971] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0212.971] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.972] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.972] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xd6b4, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xd6b4, lpOverlapped=0x0) returned 1 [0212.972] FlushFileBuffers (hFile=0x21c) returned 1 [0212.980] FlushFileBuffers (hFile=0x2b0) returned 1 [0212.985] CloseHandle (hObject=0x21c) returned 1 [0212.985] CloseHandle (hObject=0x2b0) returned 1 [0212.990] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198102.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198102.wmf")) returned 1 [0212.991] SetEvent (hEvent=0x27c) returned 1 [0212.991] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198226.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198226.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0212.992] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=41906) returned 1 [0212.992] CloseHandle (hObject=0x2b0) returned 1 [0212.992] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198226.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198226.wmf")) returned 0x220 [0212.992] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198226.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198226.wmf")) returned 0x220 [0212.992] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198226.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198226.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.992] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198226.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198226.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0212.992] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.992] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0212.992] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198226.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198226.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0212.993] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xa3b2, lpOverlapped=0x0) returned 1 [0212.997] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xa3c0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xa3c0, lpOverlapped=0x0) returned 1 [0212.999] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0212.999] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.999] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0212.999] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xa3b2, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xa3b2, lpOverlapped=0x0) returned 1 [0212.999] FlushFileBuffers (hFile=0x2b0) returned 1 [0213.002] FlushFileBuffers (hFile=0x21c) returned 1 [0213.016] CloseHandle (hObject=0x2b0) returned 1 [0213.016] CloseHandle (hObject=0x21c) returned 1 [0213.016] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198226.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198226.wmf")) returned 1 [0213.017] SetEvent (hEvent=0x27c) returned 1 [0213.017] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198372.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198372.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0213.019] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=28572) returned 1 [0213.019] CloseHandle (hObject=0x21c) returned 1 [0213.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198372.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198372.wmf")) returned 0x220 [0213.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198372.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198372.wmf")) returned 0x220 [0213.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198372.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198372.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0213.020] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198372.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198372.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0213.020] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.020] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.020] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198372.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198372.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0213.021] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x6f9c, lpOverlapped=0x0) returned 1 [0213.023] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x6fa0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x6fa0, lpOverlapped=0x0) returned 1 [0213.025] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0213.025] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.025] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.025] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x6f9c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x6f9c, lpOverlapped=0x0) returned 1 [0213.026] FlushFileBuffers (hFile=0x21c) returned 1 [0213.033] FlushFileBuffers (hFile=0x2b0) returned 1 [0213.039] CloseHandle (hObject=0x21c) returned 1 [0213.039] CloseHandle (hObject=0x2b0) returned 1 [0213.039] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198372.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198372.wmf")) returned 1 [0213.040] SetEvent (hEvent=0x27c) returned 1 [0213.040] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198447.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198447.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0213.041] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=49676) returned 1 [0213.041] CloseHandle (hObject=0x2b0) returned 1 [0213.041] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198447.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198447.wmf")) returned 0x220 [0213.041] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198447.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198447.wmf")) returned 0x220 [0213.041] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198447.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198447.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0213.041] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198447.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198447.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0213.042] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.042] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.042] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198447.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198447.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0213.042] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xc20c, lpOverlapped=0x0) returned 1 [0213.046] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xc210, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xc210, lpOverlapped=0x0) returned 1 [0213.048] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0213.048] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.048] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.048] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xc20c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xc20c, lpOverlapped=0x0) returned 1 [0213.048] FlushFileBuffers (hFile=0x2b0) returned 1 [0213.051] FlushFileBuffers (hFile=0x21c) returned 1 [0213.062] CloseHandle (hObject=0x2b0) returned 1 [0213.062] CloseHandle (hObject=0x21c) returned 1 [0213.062] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198447.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198447.wmf")) returned 1 [0213.064] SetEvent (hEvent=0x27c) returned 1 [0213.064] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198712.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198712.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0213.064] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=57722) returned 1 [0213.064] CloseHandle (hObject=0x21c) returned 1 [0213.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198712.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198712.wmf")) returned 0x220 [0213.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198712.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198712.wmf")) returned 0x220 [0213.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198712.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198712.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0213.065] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198712.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198712.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0213.065] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.065] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.065] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198712.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198712.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0213.066] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xe17a, lpOverlapped=0x0) returned 1 [0213.070] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xe180, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xe180, lpOverlapped=0x0) returned 1 [0213.071] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0213.072] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.072] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.072] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xe17a, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xe17a, lpOverlapped=0x0) returned 1 [0213.072] FlushFileBuffers (hFile=0x21c) returned 1 [0213.075] FlushFileBuffers (hFile=0x2b0) returned 1 [0213.081] CloseHandle (hObject=0x21c) returned 1 [0213.081] CloseHandle (hObject=0x2b0) returned 1 [0213.082] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198712.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198712.wmf")) returned 1 [0213.083] SetEvent (hEvent=0x27c) returned 1 [0213.083] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199303.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199303.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0213.094] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=31822) returned 1 [0213.094] CloseHandle (hObject=0x2b0) returned 1 [0213.094] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199303.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199303.wmf")) returned 0x220 [0213.094] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199303.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199303.wmf")) returned 0x220 [0213.094] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199303.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199303.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0213.095] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199303.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199303.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0213.095] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.095] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.095] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199303.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199303.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0213.096] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x7c4e, lpOverlapped=0x0) returned 1 [0213.098] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7c50, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x7c50, lpOverlapped=0x0) returned 1 [0213.100] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0213.100] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.100] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.100] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7c4e, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x7c4e, lpOverlapped=0x0) returned 1 [0213.100] FlushFileBuffers (hFile=0x2b0) returned 1 [0213.109] FlushFileBuffers (hFile=0x21c) returned 1 [0213.115] CloseHandle (hObject=0x2b0) returned 1 [0213.116] CloseHandle (hObject=0x21c) returned 1 [0213.116] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199303.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199303.wmf")) returned 1 [0213.117] SetEvent (hEvent=0x27c) returned 1 [0213.117] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199423.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199423.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0213.118] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=26154) returned 1 [0213.118] CloseHandle (hObject=0x21c) returned 1 [0213.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199423.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199423.wmf")) returned 0x220 [0213.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199423.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199423.wmf")) returned 0x220 [0213.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199423.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199423.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0213.118] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199423.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199423.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0213.118] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.118] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.118] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199423.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199423.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0213.119] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x662a, lpOverlapped=0x0) returned 1 [0213.122] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x6630, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x6630, lpOverlapped=0x0) returned 1 [0213.123] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0213.124] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.124] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.124] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x662a, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x662a, lpOverlapped=0x0) returned 1 [0213.124] FlushFileBuffers (hFile=0x21c) returned 1 [0213.127] FlushFileBuffers (hFile=0x2b0) returned 1 [0213.134] CloseHandle (hObject=0x21c) returned 1 [0213.134] CloseHandle (hObject=0x2b0) returned 1 [0213.134] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199423.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199423.wmf")) returned 1 [0213.138] SetEvent (hEvent=0x27c) returned 1 [0213.138] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199429.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199429.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0213.139] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=16676) returned 1 [0213.139] CloseHandle (hObject=0x2b0) returned 1 [0213.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199429.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199429.wmf")) returned 0x220 [0213.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199429.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199429.wmf")) returned 0x220 [0213.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199429.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199429.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0213.140] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199429.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199429.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0213.140] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.140] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.140] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199429.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199429.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0213.141] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4124, lpOverlapped=0x0) returned 1 [0213.143] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4130, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4130, lpOverlapped=0x0) returned 1 [0213.144] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0213.145] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.145] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.145] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4124, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4124, lpOverlapped=0x0) returned 1 [0213.145] FlushFileBuffers (hFile=0x2b0) returned 1 [0213.150] FlushFileBuffers (hFile=0x21c) returned 1 [0213.151] CloseHandle (hObject=0x2b0) returned 1 [0213.151] CloseHandle (hObject=0x21c) returned 1 [0213.151] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199429.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199429.wmf")) returned 1 [0213.152] SetEvent (hEvent=0x27c) returned 1 [0213.152] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199465.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199465.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0213.162] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=5060) returned 1 [0213.162] CloseHandle (hObject=0x21c) returned 1 [0213.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199465.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199465.wmf")) returned 0x220 [0213.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199465.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199465.wmf")) returned 0x220 [0213.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199465.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199465.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0213.162] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199465.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199465.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0213.162] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.162] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.162] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199465.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199465.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0213.164] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x13c4, lpOverlapped=0x0) returned 1 [0213.166] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x13d0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x13d0, lpOverlapped=0x0) returned 1 [0213.167] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0213.167] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.167] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.168] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x13c4, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x13c4, lpOverlapped=0x0) returned 1 [0213.168] FlushFileBuffers (hFile=0x21c) returned 1 [0213.170] FlushFileBuffers (hFile=0x2b0) returned 1 [0213.171] CloseHandle (hObject=0x21c) returned 1 [0213.171] CloseHandle (hObject=0x2b0) returned 1 [0213.171] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199465.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199465.wmf")) returned 1 [0213.172] SetEvent (hEvent=0x27c) returned 1 [0213.172] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199469.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199469.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0213.174] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=13756) returned 1 [0213.174] CloseHandle (hObject=0x2b0) returned 1 [0213.174] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199469.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199469.wmf")) returned 0x220 [0213.174] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199469.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199469.wmf")) returned 0x220 [0213.174] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199469.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199469.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0213.174] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199469.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199469.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0213.174] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.174] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.174] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199469.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199469.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0213.175] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x35bc, lpOverlapped=0x0) returned 1 [0213.177] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x35c0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x35c0, lpOverlapped=0x0) returned 1 [0213.178] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0213.179] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.179] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.179] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x35bc, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x35bc, lpOverlapped=0x0) returned 1 [0213.179] FlushFileBuffers (hFile=0x2b0) returned 1 [0213.181] FlushFileBuffers (hFile=0x21c) returned 1 [0213.182] CloseHandle (hObject=0x2b0) returned 1 [0213.182] CloseHandle (hObject=0x21c) returned 1 [0213.182] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199469.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199469.wmf")) returned 1 [0213.183] SetEvent (hEvent=0x27c) returned 1 [0213.183] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199473.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199473.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0213.184] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=10776) returned 1 [0213.184] CloseHandle (hObject=0x21c) returned 1 [0213.184] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199473.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199473.wmf")) returned 0x220 [0213.184] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199473.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199473.wmf")) returned 0x220 [0213.184] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199473.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199473.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0213.184] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199473.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199473.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0213.185] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.185] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.185] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199473.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199473.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0213.185] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2a18, lpOverlapped=0x0) returned 1 [0213.187] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2a20, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2a20, lpOverlapped=0x0) returned 1 [0213.188] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0213.188] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.188] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.188] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2a18, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2a18, lpOverlapped=0x0) returned 1 [0213.188] FlushFileBuffers (hFile=0x21c) returned 1 [0213.193] FlushFileBuffers (hFile=0x2b0) returned 1 [0213.200] CloseHandle (hObject=0x21c) returned 1 [0213.200] CloseHandle (hObject=0x2b0) returned 1 [0213.200] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199473.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199473.wmf")) returned 1 [0213.201] SetEvent (hEvent=0x27c) returned 1 [0213.201] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199475.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199475.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0213.203] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=5252) returned 1 [0213.203] CloseHandle (hObject=0x2b0) returned 1 [0213.203] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199475.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199475.wmf")) returned 0x220 [0213.203] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199475.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199475.wmf")) returned 0x220 [0213.203] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199475.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199475.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0213.203] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199475.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199475.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0213.203] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.203] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.204] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199475.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199475.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0213.205] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1484, lpOverlapped=0x0) returned 1 [0213.208] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1490, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1490, lpOverlapped=0x0) returned 1 [0213.209] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0213.209] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.209] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.209] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1484, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1484, lpOverlapped=0x0) returned 1 [0213.209] FlushFileBuffers (hFile=0x2b0) returned 1 [0213.215] FlushFileBuffers (hFile=0x21c) returned 1 [0213.219] CloseHandle (hObject=0x2b0) returned 1 [0213.220] CloseHandle (hObject=0x21c) returned 1 [0213.220] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199475.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199475.wmf")) returned 1 [0213.221] SetEvent (hEvent=0x27c) returned 1 [0213.221] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199483.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199483.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0213.222] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=10164) returned 1 [0213.222] CloseHandle (hObject=0x21c) returned 1 [0213.222] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199483.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199483.wmf")) returned 0x220 [0213.222] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199483.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199483.wmf")) returned 0x220 [0213.222] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199483.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199483.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0213.222] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199483.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199483.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0213.222] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.222] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.222] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199483.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199483.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0213.224] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x27b4, lpOverlapped=0x0) returned 1 [0213.225] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x27c0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x27c0, lpOverlapped=0x0) returned 1 [0213.226] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0213.227] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.227] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.227] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x27b4, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x27b4, lpOverlapped=0x0) returned 1 [0213.227] FlushFileBuffers (hFile=0x21c) returned 1 [0213.230] FlushFileBuffers (hFile=0x2b0) returned 1 [0213.231] CloseHandle (hObject=0x21c) returned 1 [0213.231] CloseHandle (hObject=0x2b0) returned 1 [0213.231] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199483.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199483.wmf")) returned 1 [0213.232] SetEvent (hEvent=0x27c) returned 1 [0213.232] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199609.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199609.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0213.234] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=12332) returned 1 [0213.234] CloseHandle (hObject=0x2b0) returned 1 [0213.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199609.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199609.wmf")) returned 0x220 [0213.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199609.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199609.wmf")) returned 0x220 [0213.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199609.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199609.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0213.234] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199609.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199609.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0213.234] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.235] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.235] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199609.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199609.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0213.235] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x302c, lpOverlapped=0x0) returned 1 [0213.237] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3030, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3030, lpOverlapped=0x0) returned 1 [0213.238] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0213.239] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.239] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.239] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x302c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x302c, lpOverlapped=0x0) returned 1 [0213.239] FlushFileBuffers (hFile=0x2b0) returned 1 [0213.241] FlushFileBuffers (hFile=0x21c) returned 1 [0213.242] CloseHandle (hObject=0x2b0) returned 1 [0213.242] CloseHandle (hObject=0x21c) returned 1 [0213.242] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199609.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199609.wmf")) returned 1 [0213.244] SetEvent (hEvent=0x27c) returned 1 [0213.244] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200151.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0213.245] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=8196) returned 1 [0213.246] CloseHandle (hObject=0x21c) returned 1 [0213.246] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200151.wmf")) returned 0x220 [0213.246] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200151.wmf")) returned 0x220 [0213.246] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200151.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200151.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0213.246] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200151.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0213.246] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.246] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.246] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200151.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200151.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0213.247] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2004, lpOverlapped=0x0) returned 1 [0213.249] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2010, lpOverlapped=0x0) returned 1 [0213.250] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0213.250] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.250] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.250] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2004, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2004, lpOverlapped=0x0) returned 1 [0213.251] FlushFileBuffers (hFile=0x21c) returned 1 [0213.252] FlushFileBuffers (hFile=0x2b0) returned 1 [0213.254] CloseHandle (hObject=0x21c) returned 1 [0213.254] CloseHandle (hObject=0x2b0) returned 1 [0213.254] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200151.wmf")) returned 1 [0213.255] SetEvent (hEvent=0x27c) returned 1 [0213.255] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200163.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0213.256] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=7180) returned 1 [0213.256] CloseHandle (hObject=0x2b0) returned 1 [0213.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200163.wmf")) returned 0x220 [0213.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200163.wmf")) returned 0x220 [0213.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200163.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200163.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0213.257] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200163.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0213.257] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.257] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.257] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200163.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200163.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0213.258] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1c0c, lpOverlapped=0x0) returned 1 [0213.260] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1c10, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1c10, lpOverlapped=0x0) returned 1 [0213.261] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0213.261] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.261] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.261] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1c0c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1c0c, lpOverlapped=0x0) returned 1 [0213.261] FlushFileBuffers (hFile=0x2b0) returned 1 [0213.264] FlushFileBuffers (hFile=0x21c) returned 1 [0213.268] CloseHandle (hObject=0x2b0) returned 1 [0213.269] CloseHandle (hObject=0x21c) returned 1 [0213.269] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200163.wmf")) returned 1 [0213.270] SetEvent (hEvent=0x27c) returned 1 [0213.270] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200183.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0213.271] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=5312) returned 1 [0213.271] CloseHandle (hObject=0x21c) returned 1 [0213.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200183.wmf")) returned 0x220 [0213.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200183.wmf")) returned 0x220 [0213.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200183.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200183.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0213.272] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200183.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0213.272] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.272] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.272] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200183.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200183.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0213.273] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x14c0, lpOverlapped=0x0) returned 1 [0213.274] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x14d0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x14d0, lpOverlapped=0x0) returned 1 [0213.276] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0213.276] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.276] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.276] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x14c0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x14c0, lpOverlapped=0x0) returned 1 [0213.276] FlushFileBuffers (hFile=0x21c) returned 1 [0213.279] FlushFileBuffers (hFile=0x2b0) returned 1 [0213.280] CloseHandle (hObject=0x21c) returned 1 [0213.280] CloseHandle (hObject=0x2b0) returned 1 [0213.280] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200183.wmf")) returned 1 [0213.281] SetEvent (hEvent=0x27c) returned 1 [0213.281] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200189.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200189.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0213.282] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=8060) returned 1 [0213.282] CloseHandle (hObject=0x2b0) returned 1 [0213.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200189.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200189.wmf")) returned 0x220 [0213.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200189.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200189.wmf")) returned 0x220 [0213.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200189.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200189.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0213.282] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200189.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200189.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0213.282] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.282] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.283] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200189.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200189.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0213.283] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1f7c, lpOverlapped=0x0) returned 1 [0213.285] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1f80, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1f80, lpOverlapped=0x0) returned 1 [0213.286] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0213.287] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.287] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.287] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1f7c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1f7c, lpOverlapped=0x0) returned 1 [0213.287] FlushFileBuffers (hFile=0x2b0) returned 1 [0213.289] FlushFileBuffers (hFile=0x21c) returned 1 [0213.523] CloseHandle (hObject=0x2b0) returned 1 [0213.523] CloseHandle (hObject=0x21c) returned 1 [0213.523] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200189.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200189.wmf")) returned 1 [0213.524] SetEvent (hEvent=0x27c) returned 1 [0213.524] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0202045.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0202045.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0213.526] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=42254) returned 1 [0213.526] CloseHandle (hObject=0x21c) returned 1 [0213.526] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0202045.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0202045.jpg")) returned 0x220 [0213.526] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0202045.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0202045.jpg")) returned 0x220 [0213.526] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0202045.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0202045.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0213.527] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0202045.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0202045.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0213.527] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.527] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.527] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0202045.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0202045.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0213.530] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xa50e, lpOverlapped=0x0) returned 1 [0213.533] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xa510, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xa510, lpOverlapped=0x0) returned 1 [0213.535] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0213.535] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.535] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.535] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xa50e, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xa50e, lpOverlapped=0x0) returned 1 [0213.535] FlushFileBuffers (hFile=0x21c) returned 1 [0213.645] FlushFileBuffers (hFile=0x2b0) returned 1 [0213.646] CloseHandle (hObject=0x21c) returned 1 [0213.646] CloseHandle (hObject=0x2b0) returned 1 [0213.647] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0202045.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0202045.jpg")) returned 1 [0213.648] SetEvent (hEvent=0x27c) returned 1 [0213.648] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214934.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0214934.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0213.649] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=31926) returned 1 [0213.649] CloseHandle (hObject=0x2b0) returned 1 [0213.649] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214934.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0214934.wmf")) returned 0x220 [0213.649] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214934.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0214934.wmf")) returned 0x220 [0213.649] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214934.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0214934.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0213.649] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214934.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0214934.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0213.649] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.649] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.649] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214934.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0214934.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0213.650] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x7cb6, lpOverlapped=0x0) returned 1 [0213.653] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7cc0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x7cc0, lpOverlapped=0x0) returned 1 [0213.654] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0213.654] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.654] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.654] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7cb6, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x7cb6, lpOverlapped=0x0) returned 1 [0213.655] FlushFileBuffers (hFile=0x2b0) returned 1 [0213.660] FlushFileBuffers (hFile=0x21c) returned 1 [0213.661] CloseHandle (hObject=0x2b0) returned 1 [0213.661] CloseHandle (hObject=0x21c) returned 1 [0213.661] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214934.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0214934.wmf")) returned 1 [0213.662] SetEvent (hEvent=0x27c) returned 1 [0213.662] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214948.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0214948.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0213.664] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=44794) returned 1 [0213.664] CloseHandle (hObject=0x21c) returned 1 [0213.664] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214948.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0214948.wmf")) returned 0x220 [0213.664] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214948.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0214948.wmf")) returned 0x220 [0213.664] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214948.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0214948.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0213.664] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214948.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0214948.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0213.664] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.664] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.665] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214948.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0214948.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0213.666] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xaefa, lpOverlapped=0x0) returned 1 [0213.668] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xaf00, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xaf00, lpOverlapped=0x0) returned 1 [0213.670] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0213.670] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.670] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.670] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xaefa, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xaefa, lpOverlapped=0x0) returned 1 [0213.670] FlushFileBuffers (hFile=0x21c) returned 1 [0213.672] FlushFileBuffers (hFile=0x2b0) returned 1 [0213.674] CloseHandle (hObject=0x21c) returned 1 [0213.674] CloseHandle (hObject=0x2b0) returned 1 [0213.674] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214948.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0214948.wmf")) returned 1 [0213.675] SetEvent (hEvent=0x27c) returned 1 [0213.675] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215070.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215070.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0213.677] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=11628) returned 1 [0213.677] CloseHandle (hObject=0x2b0) returned 1 [0213.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215070.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215070.wmf")) returned 0x220 [0213.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215070.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215070.wmf")) returned 0x220 [0213.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215070.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215070.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0213.677] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215070.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215070.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0213.677] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.677] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.677] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215070.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215070.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0213.678] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2d6c, lpOverlapped=0x0) returned 1 [0213.680] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2d70, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2d70, lpOverlapped=0x0) returned 1 [0213.681] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0213.681] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.681] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.681] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2d6c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2d6c, lpOverlapped=0x0) returned 1 [0213.681] FlushFileBuffers (hFile=0x2b0) returned 1 [0213.683] FlushFileBuffers (hFile=0x21c) returned 1 [0213.684] CloseHandle (hObject=0x2b0) returned 1 [0213.684] CloseHandle (hObject=0x21c) returned 1 [0213.685] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215070.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215070.wmf")) returned 1 [0213.686] SetEvent (hEvent=0x27c) returned 1 [0213.686] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215076.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215076.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0213.686] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=8016) returned 1 [0213.687] CloseHandle (hObject=0x21c) returned 1 [0213.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215076.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215076.wmf")) returned 0x220 [0213.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215076.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215076.wmf")) returned 0x220 [0213.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215076.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215076.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0213.687] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215076.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215076.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0213.687] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.687] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.687] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215076.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215076.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0213.688] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1f50, lpOverlapped=0x0) returned 1 [0213.689] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1f60, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1f60, lpOverlapped=0x0) returned 1 [0213.690] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0213.691] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.691] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.691] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1f50, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1f50, lpOverlapped=0x0) returned 1 [0213.691] FlushFileBuffers (hFile=0x21c) returned 1 [0213.692] FlushFileBuffers (hFile=0x2b0) returned 1 [0213.694] CloseHandle (hObject=0x21c) returned 1 [0213.694] CloseHandle (hObject=0x2b0) returned 1 [0213.694] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215076.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215076.wmf")) returned 1 [0213.695] SetEvent (hEvent=0x27c) returned 1 [0213.695] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215210.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215210.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0213.696] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=33230) returned 1 [0213.696] CloseHandle (hObject=0x2b0) returned 1 [0213.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215210.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215210.wmf")) returned 0x220 [0213.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215210.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215210.wmf")) returned 0x220 [0213.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215210.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215210.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0213.696] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215210.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215210.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0213.696] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.696] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.696] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215210.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215210.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0213.697] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x81ce, lpOverlapped=0x0) returned 1 [0213.700] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x81d0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x81d0, lpOverlapped=0x0) returned 1 [0213.701] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0213.701] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.701] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.701] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x81ce, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x81ce, lpOverlapped=0x0) returned 1 [0213.702] FlushFileBuffers (hFile=0x2b0) returned 1 [0213.703] FlushFileBuffers (hFile=0x21c) returned 1 [0213.705] CloseHandle (hObject=0x2b0) returned 1 [0213.705] CloseHandle (hObject=0x21c) returned 1 [0213.705] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215210.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215210.wmf")) returned 1 [0213.706] SetEvent (hEvent=0x27c) returned 1 [0213.706] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215709.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215709.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0213.707] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=9290) returned 1 [0213.707] CloseHandle (hObject=0x21c) returned 1 [0213.707] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215709.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215709.wmf")) returned 0x220 [0213.707] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215709.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215709.wmf")) returned 0x220 [0213.707] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215709.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215709.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0213.707] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215709.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215709.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0213.708] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.708] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.708] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215709.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215709.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0213.708] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x244a, lpOverlapped=0x0) returned 1 [0213.710] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2450, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2450, lpOverlapped=0x0) returned 1 [0213.711] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0213.711] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.712] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.712] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x244a, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x244a, lpOverlapped=0x0) returned 1 [0213.712] FlushFileBuffers (hFile=0x21c) returned 1 [0213.716] FlushFileBuffers (hFile=0x2b0) returned 1 [0213.717] CloseHandle (hObject=0x21c) returned 1 [0213.718] CloseHandle (hObject=0x2b0) returned 1 [0213.718] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215709.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215709.wmf")) returned 1 [0213.719] SetEvent (hEvent=0x27c) returned 1 [0213.719] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215710.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215710.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0213.720] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=17826) returned 1 [0213.720] CloseHandle (hObject=0x2b0) returned 1 [0213.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215710.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215710.wmf")) returned 0x220 [0213.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215710.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215710.wmf")) returned 0x220 [0213.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215710.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215710.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0213.720] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215710.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215710.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0213.720] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.721] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215710.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215710.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0213.721] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x45a2, lpOverlapped=0x0) returned 1 [0213.725] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x45b0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x45b0, lpOverlapped=0x0) returned 1 [0213.727] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0213.727] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.727] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.727] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x45a2, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x45a2, lpOverlapped=0x0) returned 1 [0213.727] FlushFileBuffers (hFile=0x2b0) returned 1 [0213.729] FlushFileBuffers (hFile=0x21c) returned 1 [0213.731] CloseHandle (hObject=0x2b0) returned 1 [0213.731] CloseHandle (hObject=0x21c) returned 1 [0213.731] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215710.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215710.wmf")) returned 1 [0213.732] SetEvent (hEvent=0x27c) returned 1 [0213.732] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215718.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215718.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0213.733] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=5618) returned 1 [0213.733] CloseHandle (hObject=0x21c) returned 1 [0213.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215718.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215718.wmf")) returned 0x220 [0213.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215718.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215718.wmf")) returned 0x220 [0213.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215718.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215718.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0213.733] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215718.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215718.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0213.733] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.733] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.733] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215718.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215718.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0213.734] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x15f2, lpOverlapped=0x0) returned 1 [0213.735] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1600, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1600, lpOverlapped=0x0) returned 1 [0213.736] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0213.737] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.737] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.737] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x15f2, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x15f2, lpOverlapped=0x0) returned 1 [0213.737] FlushFileBuffers (hFile=0x21c) returned 1 [0213.739] FlushFileBuffers (hFile=0x2b0) returned 1 [0213.741] CloseHandle (hObject=0x21c) returned 1 [0213.741] CloseHandle (hObject=0x2b0) returned 1 [0213.741] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215718.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215718.wmf")) returned 1 [0213.742] SetEvent (hEvent=0x27c) returned 1 [0213.742] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216112.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216112.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0213.743] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=42883) returned 1 [0213.743] CloseHandle (hObject=0x2b0) returned 1 [0213.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216112.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216112.jpg")) returned 0x220 [0213.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216112.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216112.jpg")) returned 0x220 [0213.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216112.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216112.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0213.743] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216112.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216112.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0213.743] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.743] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.743] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216112.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216112.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0213.744] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xa783, lpOverlapped=0x0) returned 1 [0213.747] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xa790, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xa790, lpOverlapped=0x0) returned 1 [0213.749] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0213.749] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.749] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.749] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xa783, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xa783, lpOverlapped=0x0) returned 1 [0213.749] FlushFileBuffers (hFile=0x2b0) returned 1 [0213.752] FlushFileBuffers (hFile=0x21c) returned 1 [0213.753] CloseHandle (hObject=0x2b0) returned 1 [0213.753] CloseHandle (hObject=0x21c) returned 1 [0213.753] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216112.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216112.jpg")) returned 1 [0213.754] SetEvent (hEvent=0x27c) returned 1 [0213.754] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216153.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216153.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0213.756] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=21620) returned 1 [0213.756] CloseHandle (hObject=0x21c) returned 1 [0213.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216153.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216153.jpg")) returned 0x220 [0213.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216153.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216153.jpg")) returned 0x220 [0213.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216153.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216153.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0213.756] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216153.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216153.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0213.756] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.756] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.756] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216153.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216153.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0213.757] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x5474, lpOverlapped=0x0) returned 1 [0213.883] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5480, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x5480, lpOverlapped=0x0) returned 1 [0213.884] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0213.884] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.884] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.884] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5474, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x5474, lpOverlapped=0x0) returned 1 [0213.885] FlushFileBuffers (hFile=0x21c) returned 1 [0213.900] FlushFileBuffers (hFile=0x2b0) returned 1 [0213.901] CloseHandle (hObject=0x21c) returned 1 [0213.901] CloseHandle (hObject=0x2b0) returned 1 [0213.902] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216153.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216153.jpg")) returned 1 [0213.903] SetEvent (hEvent=0x27c) returned 1 [0213.903] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216540.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216540.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0213.905] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=42120) returned 1 [0213.905] CloseHandle (hObject=0x2b0) returned 1 [0213.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216540.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216540.wmf")) returned 0x220 [0213.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216540.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216540.wmf")) returned 0x220 [0213.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216540.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216540.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0213.905] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216540.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216540.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0213.905] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.905] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.905] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216540.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216540.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0213.906] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xa488, lpOverlapped=0x0) returned 1 [0213.909] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xa490, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xa490, lpOverlapped=0x0) returned 1 [0213.911] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0213.911] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.911] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.911] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xa488, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xa488, lpOverlapped=0x0) returned 1 [0213.911] FlushFileBuffers (hFile=0x2b0) returned 1 [0213.913] FlushFileBuffers (hFile=0x21c) returned 1 [0213.915] CloseHandle (hObject=0x2b0) returned 1 [0213.922] CloseHandle (hObject=0x21c) returned 1 [0213.922] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216540.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216540.wmf")) returned 1 [0213.924] SetEvent (hEvent=0x27c) returned 1 [0213.924] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216570.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216570.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0213.925] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=24796) returned 1 [0213.925] CloseHandle (hObject=0x21c) returned 1 [0213.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216570.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216570.wmf")) returned 0x220 [0213.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216570.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216570.wmf")) returned 0x220 [0213.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216570.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216570.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0213.925] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216570.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216570.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0213.925] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.925] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.925] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216570.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216570.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0213.930] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x60dc, lpOverlapped=0x0) returned 1 [0213.932] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x60e0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x60e0, lpOverlapped=0x0) returned 1 [0213.933] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0213.934] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.934] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.934] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x60dc, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x60dc, lpOverlapped=0x0) returned 1 [0213.934] FlushFileBuffers (hFile=0x21c) returned 1 [0213.936] FlushFileBuffers (hFile=0x2b0) returned 1 [0213.937] CloseHandle (hObject=0x21c) returned 1 [0213.937] CloseHandle (hObject=0x2b0) returned 1 [0213.937] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216570.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216570.wmf")) returned 1 [0213.939] SetEvent (hEvent=0x27c) returned 1 [0213.939] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216600.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0213.940] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=8006) returned 1 [0213.940] CloseHandle (hObject=0x2b0) returned 1 [0213.940] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216600.wmf")) returned 0x220 [0213.940] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216600.wmf")) returned 0x220 [0213.940] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216600.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216600.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0213.941] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216600.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0213.941] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.941] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.942] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216600.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216600.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0213.942] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1f46, lpOverlapped=0x0) returned 1 [0213.944] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1f50, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1f50, lpOverlapped=0x0) returned 1 [0213.945] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0213.945] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.945] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.945] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1f46, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1f46, lpOverlapped=0x0) returned 1 [0213.945] FlushFileBuffers (hFile=0x2b0) returned 1 [0213.960] FlushFileBuffers (hFile=0x21c) returned 1 [0213.962] CloseHandle (hObject=0x2b0) returned 1 [0213.962] CloseHandle (hObject=0x21c) returned 1 [0213.963] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216600.wmf")) returned 1 [0213.964] SetEvent (hEvent=0x27c) returned 1 [0213.964] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216874.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216874.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0213.966] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=39738) returned 1 [0213.966] CloseHandle (hObject=0x21c) returned 1 [0213.966] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216874.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216874.wmf")) returned 0x220 [0213.966] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216874.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216874.wmf")) returned 0x220 [0213.966] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216874.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216874.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0213.966] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216874.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216874.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0213.966] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.966] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.966] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216874.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216874.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0213.967] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x9b3a, lpOverlapped=0x0) returned 1 [0213.974] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x9b40, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x9b40, lpOverlapped=0x0) returned 1 [0213.976] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0213.977] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.977] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.977] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x9b3a, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x9b3a, lpOverlapped=0x0) returned 1 [0213.977] FlushFileBuffers (hFile=0x21c) returned 1 [0213.985] FlushFileBuffers (hFile=0x2b0) returned 1 [0213.987] CloseHandle (hObject=0x21c) returned 1 [0213.987] CloseHandle (hObject=0x2b0) returned 1 [0213.987] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216874.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216874.wmf")) returned 1 [0213.988] SetEvent (hEvent=0x27c) returned 1 [0213.989] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217302.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0213.989] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3482) returned 1 [0213.989] CloseHandle (hObject=0x2b0) returned 1 [0213.990] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217302.wmf")) returned 0x220 [0213.990] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217302.wmf")) returned 0x220 [0213.990] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217302.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217302.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0213.990] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217302.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0213.990] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.990] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0213.990] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217302.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217302.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0213.991] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xd9a, lpOverlapped=0x0) returned 1 [0213.992] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xda0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xda0, lpOverlapped=0x0) returned 1 [0213.993] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0213.994] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.994] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0213.994] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xd9a, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xd9a, lpOverlapped=0x0) returned 1 [0213.994] FlushFileBuffers (hFile=0x2b0) returned 1 [0214.001] FlushFileBuffers (hFile=0x21c) returned 1 [0214.005] CloseHandle (hObject=0x2b0) returned 1 [0214.005] CloseHandle (hObject=0x21c) returned 1 [0214.005] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217302.wmf")) returned 1 [0214.010] SetEvent (hEvent=0x27c) returned 1 [0214.010] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227419.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227419.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0214.011] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=35542) returned 1 [0214.011] CloseHandle (hObject=0x21c) returned 1 [0214.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227419.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227419.jpg")) returned 0x220 [0214.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227419.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227419.jpg")) returned 0x220 [0214.012] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227419.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227419.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.012] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227419.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227419.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0214.012] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.012] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.012] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227419.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227419.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0214.012] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x8ad6, lpOverlapped=0x0) returned 1 [0214.015] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8ae0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x8ae0, lpOverlapped=0x0) returned 1 [0214.017] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0214.017] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.017] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.017] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8ad6, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x8ad6, lpOverlapped=0x0) returned 1 [0214.017] FlushFileBuffers (hFile=0x21c) returned 1 [0214.032] FlushFileBuffers (hFile=0x2b0) returned 1 [0214.035] CloseHandle (hObject=0x21c) returned 1 [0214.035] CloseHandle (hObject=0x2b0) returned 1 [0214.035] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227419.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227419.jpg")) returned 1 [0214.037] SetEvent (hEvent=0x27c) returned 1 [0214.037] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228823.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0228823.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0214.039] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=26022) returned 1 [0214.039] CloseHandle (hObject=0x2b0) returned 1 [0214.040] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228823.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0228823.wmf")) returned 0x220 [0214.040] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228823.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0228823.wmf")) returned 0x220 [0214.040] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228823.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0228823.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.040] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228823.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0228823.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0214.040] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.040] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.040] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228823.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0228823.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0214.042] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x65a6, lpOverlapped=0x0) returned 1 [0214.046] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x65b0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x65b0, lpOverlapped=0x0) returned 1 [0214.048] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0214.049] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.049] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.049] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x65a6, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x65a6, lpOverlapped=0x0) returned 1 [0214.049] FlushFileBuffers (hFile=0x2b0) returned 1 [0214.059] FlushFileBuffers (hFile=0x21c) returned 1 [0214.061] CloseHandle (hObject=0x2b0) returned 1 [0214.061] CloseHandle (hObject=0x21c) returned 1 [0214.061] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228823.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0228823.wmf")) returned 1 [0214.062] SetEvent (hEvent=0x27c) returned 1 [0214.062] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230553.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0230553.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0214.063] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=7594) returned 1 [0214.063] CloseHandle (hObject=0x21c) returned 1 [0214.063] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230553.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0230553.wmf")) returned 0x220 [0214.063] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230553.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0230553.wmf")) returned 0x220 [0214.064] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230553.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0230553.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.064] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230553.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0230553.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0214.064] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.064] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.064] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230553.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0230553.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0214.065] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1daa, lpOverlapped=0x0) returned 1 [0214.066] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1db0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1db0, lpOverlapped=0x0) returned 1 [0214.067] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0214.068] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.068] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.068] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1daa, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1daa, lpOverlapped=0x0) returned 1 [0214.068] FlushFileBuffers (hFile=0x21c) returned 1 [0214.070] FlushFileBuffers (hFile=0x2b0) returned 1 [0214.077] CloseHandle (hObject=0x21c) returned 1 [0214.077] CloseHandle (hObject=0x2b0) returned 1 [0214.078] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230553.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0230553.wmf")) returned 1 [0214.079] SetEvent (hEvent=0x27c) returned 1 [0214.079] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232171.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0214.079] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=13098) returned 1 [0214.079] CloseHandle (hObject=0x2b0) returned 1 [0214.079] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232171.wmf")) returned 0x220 [0214.080] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232171.wmf")) returned 0x220 [0214.080] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232171.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232171.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.080] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232171.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0214.080] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.080] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.080] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232171.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232171.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0214.081] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x332a, lpOverlapped=0x0) returned 1 [0214.085] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3330, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3330, lpOverlapped=0x0) returned 1 [0214.086] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0214.087] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.087] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.087] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x332a, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x332a, lpOverlapped=0x0) returned 1 [0214.087] FlushFileBuffers (hFile=0x2b0) returned 1 [0214.095] FlushFileBuffers (hFile=0x21c) returned 1 [0214.106] CloseHandle (hObject=0x2b0) returned 1 [0214.107] CloseHandle (hObject=0x21c) returned 1 [0214.107] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232171.wmf")) returned 1 [0214.108] SetEvent (hEvent=0x27c) returned 1 [0214.108] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232395.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232395.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0214.112] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=41094) returned 1 [0214.112] CloseHandle (hObject=0x21c) returned 1 [0214.112] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232395.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232395.wmf")) returned 0x220 [0214.112] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232395.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232395.wmf")) returned 0x220 [0214.112] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232395.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232395.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.112] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232395.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232395.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0214.112] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.112] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.113] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232395.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232395.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0214.115] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xa086, lpOverlapped=0x0) returned 1 [0214.118] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xa090, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xa090, lpOverlapped=0x0) returned 1 [0214.120] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0214.120] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.120] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.120] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xa086, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xa086, lpOverlapped=0x0) returned 1 [0214.120] FlushFileBuffers (hFile=0x21c) returned 1 [0214.131] FlushFileBuffers (hFile=0x2b0) returned 1 [0214.134] CloseHandle (hObject=0x21c) returned 1 [0214.134] CloseHandle (hObject=0x2b0) returned 1 [0214.135] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232395.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232395.wmf")) returned 1 [0214.137] SetEvent (hEvent=0x27c) returned 1 [0214.137] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232797.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232797.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0214.138] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=35228) returned 1 [0214.138] CloseHandle (hObject=0x2b0) returned 1 [0214.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232797.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232797.wmf")) returned 0x220 [0214.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232797.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232797.wmf")) returned 0x220 [0214.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232797.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232797.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.138] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232797.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232797.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0214.138] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.138] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.138] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232797.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232797.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0214.139] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x899c, lpOverlapped=0x0) returned 1 [0214.142] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x89a0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x89a0, lpOverlapped=0x0) returned 1 [0214.143] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0214.144] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.144] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.144] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x899c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x899c, lpOverlapped=0x0) returned 1 [0214.144] FlushFileBuffers (hFile=0x2b0) returned 1 [0214.151] FlushFileBuffers (hFile=0x21c) returned 1 [0214.156] CloseHandle (hObject=0x2b0) returned 1 [0214.156] CloseHandle (hObject=0x21c) returned 1 [0214.156] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232797.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232797.wmf")) returned 1 [0214.158] SetEvent (hEvent=0x27c) returned 1 [0214.158] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233512.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233512.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0214.160] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=9960) returned 1 [0214.160] CloseHandle (hObject=0x21c) returned 1 [0214.160] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233512.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233512.wmf")) returned 0x220 [0214.160] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233512.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233512.wmf")) returned 0x220 [0214.160] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233512.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233512.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.160] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233512.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233512.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0214.160] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.160] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.161] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233512.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233512.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0214.161] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x26e8, lpOverlapped=0x0) returned 1 [0214.164] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x26f0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x26f0, lpOverlapped=0x0) returned 1 [0214.165] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0214.165] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.165] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.165] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x26e8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x26e8, lpOverlapped=0x0) returned 1 [0214.165] FlushFileBuffers (hFile=0x21c) returned 1 [0214.175] FlushFileBuffers (hFile=0x2b0) returned 1 [0214.179] CloseHandle (hObject=0x21c) returned 1 [0214.180] CloseHandle (hObject=0x2b0) returned 1 [0214.180] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233512.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233512.wmf")) returned 1 [0214.181] SetEvent (hEvent=0x27c) returned 1 [0214.181] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233992.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233992.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0214.182] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=38750) returned 1 [0214.182] CloseHandle (hObject=0x2b0) returned 1 [0214.182] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233992.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233992.wmf")) returned 0x220 [0214.182] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233992.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233992.wmf")) returned 0x220 [0214.183] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233992.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233992.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.183] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233992.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233992.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0214.183] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.183] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.183] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233992.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233992.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0214.183] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x975e, lpOverlapped=0x0) returned 1 [0214.187] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x9760, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x9760, lpOverlapped=0x0) returned 1 [0214.188] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0214.189] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.189] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.189] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x975e, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x975e, lpOverlapped=0x0) returned 1 [0214.189] FlushFileBuffers (hFile=0x2b0) returned 1 [0214.196] FlushFileBuffers (hFile=0x21c) returned 1 [0214.246] CloseHandle (hObject=0x2b0) returned 1 [0214.246] CloseHandle (hObject=0x21c) returned 1 [0214.246] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233992.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233992.wmf")) returned 1 [0214.247] SetEvent (hEvent=0x27c) returned 1 [0214.247] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234001.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234001.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0214.266] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=19264) returned 1 [0214.266] CloseHandle (hObject=0x21c) returned 1 [0214.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234001.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234001.wmf")) returned 0x220 [0214.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234001.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234001.wmf")) returned 0x220 [0214.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234001.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234001.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.267] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234001.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234001.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0214.267] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.267] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.267] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234001.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234001.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0214.268] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4b40, lpOverlapped=0x0) returned 1 [0214.271] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4b50, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4b50, lpOverlapped=0x0) returned 1 [0214.272] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0214.272] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.272] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.272] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4b40, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4b40, lpOverlapped=0x0) returned 1 [0214.273] FlushFileBuffers (hFile=0x21c) returned 1 [0214.296] FlushFileBuffers (hFile=0x2b0) returned 1 [0214.298] CloseHandle (hObject=0x21c) returned 1 [0214.299] CloseHandle (hObject=0x2b0) returned 1 [0214.299] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234001.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234001.wmf")) returned 1 [0214.300] SetEvent (hEvent=0x27c) returned 1 [0214.300] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237225.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237225.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0214.301] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=52128) returned 1 [0214.301] CloseHandle (hObject=0x2b0) returned 1 [0214.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237225.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237225.wmf")) returned 0x220 [0214.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237225.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237225.wmf")) returned 0x220 [0214.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237225.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237225.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.302] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237225.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237225.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0214.302] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.302] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.302] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237225.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237225.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0214.303] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xcba0, lpOverlapped=0x0) returned 1 [0214.307] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xcbb0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xcbb0, lpOverlapped=0x0) returned 1 [0214.312] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0214.312] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.312] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.312] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xcba0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xcba0, lpOverlapped=0x0) returned 1 [0214.313] FlushFileBuffers (hFile=0x2b0) returned 1 [0214.324] FlushFileBuffers (hFile=0x21c) returned 1 [0214.327] CloseHandle (hObject=0x2b0) returned 1 [0214.327] CloseHandle (hObject=0x21c) returned 1 [0214.327] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237225.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237225.wmf")) returned 1 [0214.328] SetEvent (hEvent=0x27c) returned 1 [0214.328] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237336.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237336.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0214.330] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=24770) returned 1 [0214.330] CloseHandle (hObject=0x21c) returned 1 [0214.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237336.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237336.wmf")) returned 0x220 [0214.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237336.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237336.wmf")) returned 0x220 [0214.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237336.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237336.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.330] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237336.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237336.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0214.330] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.330] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.331] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237336.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237336.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0214.332] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x60c2, lpOverlapped=0x0) returned 1 [0214.336] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x60d0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x60d0, lpOverlapped=0x0) returned 1 [0214.337] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0214.337] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.337] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.337] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x60c2, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x60c2, lpOverlapped=0x0) returned 1 [0214.338] FlushFileBuffers (hFile=0x21c) returned 1 [0214.346] FlushFileBuffers (hFile=0x2b0) returned 1 [0214.348] CloseHandle (hObject=0x21c) returned 1 [0214.348] CloseHandle (hObject=0x2b0) returned 1 [0214.348] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237336.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237336.wmf")) returned 1 [0214.349] SetEvent (hEvent=0x27c) returned 1 [0214.349] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238333.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238333.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0214.350] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=22944) returned 1 [0214.350] CloseHandle (hObject=0x2b0) returned 1 [0214.351] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238333.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238333.wmf")) returned 0x220 [0214.351] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238333.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238333.wmf")) returned 0x220 [0214.351] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238333.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238333.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.351] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238333.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238333.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0214.351] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.351] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.351] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238333.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238333.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0214.352] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x59a0, lpOverlapped=0x0) returned 1 [0214.355] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x59b0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x59b0, lpOverlapped=0x0) returned 1 [0214.359] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0214.359] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.359] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.359] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x59a0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x59a0, lpOverlapped=0x0) returned 1 [0214.359] FlushFileBuffers (hFile=0x2b0) returned 1 [0214.370] FlushFileBuffers (hFile=0x21c) returned 1 [0214.377] CloseHandle (hObject=0x2b0) returned 1 [0214.377] CloseHandle (hObject=0x21c) returned 1 [0214.377] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238333.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238333.wmf")) returned 1 [0214.378] SetEvent (hEvent=0x27c) returned 1 [0214.378] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238959.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238959.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0214.380] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=7484) returned 1 [0214.380] CloseHandle (hObject=0x21c) returned 1 [0214.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238959.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238959.wmf")) returned 0x220 [0214.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238959.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238959.wmf")) returned 0x220 [0214.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238959.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238959.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.381] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238959.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238959.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0214.381] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.381] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.381] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238959.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238959.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0214.382] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1d3c, lpOverlapped=0x0) returned 1 [0214.384] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1d40, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1d40, lpOverlapped=0x0) returned 1 [0214.385] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0214.385] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.385] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.385] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1d3c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1d3c, lpOverlapped=0x0) returned 1 [0214.385] FlushFileBuffers (hFile=0x21c) returned 1 [0214.396] FlushFileBuffers (hFile=0x2b0) returned 1 [0214.398] CloseHandle (hObject=0x21c) returned 1 [0214.398] CloseHandle (hObject=0x2b0) returned 1 [0214.398] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238959.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238959.wmf")) returned 1 [0214.399] SetEvent (hEvent=0x27c) returned 1 [0214.400] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239057.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239057.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0214.400] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=4740) returned 1 [0214.400] CloseHandle (hObject=0x2b0) returned 1 [0214.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239057.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239057.wmf")) returned 0x220 [0214.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239057.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239057.wmf")) returned 0x220 [0214.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239057.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239057.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.401] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239057.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239057.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0214.401] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.401] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.401] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239057.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239057.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0214.402] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1284, lpOverlapped=0x0) returned 1 [0214.403] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1290, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1290, lpOverlapped=0x0) returned 1 [0214.405] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0214.405] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.405] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.405] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1284, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1284, lpOverlapped=0x0) returned 1 [0214.405] FlushFileBuffers (hFile=0x2b0) returned 1 [0214.415] FlushFileBuffers (hFile=0x21c) returned 1 [0214.419] CloseHandle (hObject=0x2b0) returned 1 [0214.420] CloseHandle (hObject=0x21c) returned 1 [0214.420] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239057.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239057.wmf")) returned 1 [0214.421] SetEvent (hEvent=0x27c) returned 1 [0214.421] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239079.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239079.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0214.422] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=4756) returned 1 [0214.422] CloseHandle (hObject=0x21c) returned 1 [0214.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239079.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239079.wmf")) returned 0x220 [0214.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239079.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239079.wmf")) returned 0x220 [0214.423] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239079.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239079.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.423] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239079.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239079.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0214.423] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.423] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.423] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239079.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239079.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0214.424] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1294, lpOverlapped=0x0) returned 1 [0214.429] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x12a0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x12a0, lpOverlapped=0x0) returned 1 [0214.430] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0214.431] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.431] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.431] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1294, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1294, lpOverlapped=0x0) returned 1 [0214.432] FlushFileBuffers (hFile=0x21c) returned 1 [0214.443] FlushFileBuffers (hFile=0x2b0) returned 1 [0214.446] CloseHandle (hObject=0x21c) returned 1 [0214.446] CloseHandle (hObject=0x2b0) returned 1 [0214.446] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239079.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239079.wmf")) returned 1 [0214.447] SetEvent (hEvent=0x27c) returned 1 [0214.447] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239611.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239611.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0214.449] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=33828) returned 1 [0214.449] CloseHandle (hObject=0x2b0) returned 1 [0214.449] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239611.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239611.wmf")) returned 0x220 [0214.449] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239611.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239611.wmf")) returned 0x220 [0214.449] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239611.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239611.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.449] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239611.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239611.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0214.449] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.449] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.449] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239611.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239611.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0214.450] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x8424, lpOverlapped=0x0) returned 1 [0214.454] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8430, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x8430, lpOverlapped=0x0) returned 1 [0214.456] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0214.456] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.456] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.456] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8424, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x8424, lpOverlapped=0x0) returned 1 [0214.456] FlushFileBuffers (hFile=0x2b0) returned 1 [0214.464] FlushFileBuffers (hFile=0x21c) returned 1 [0214.466] CloseHandle (hObject=0x2b0) returned 1 [0214.466] CloseHandle (hObject=0x21c) returned 1 [0214.466] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239611.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239611.wmf")) returned 1 [0214.467] SetEvent (hEvent=0x27c) returned 1 [0214.468] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239941.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239941.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0214.468] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=5144) returned 1 [0214.468] CloseHandle (hObject=0x21c) returned 1 [0214.468] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239941.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239941.wmf")) returned 0x220 [0214.468] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239941.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239941.wmf")) returned 0x220 [0214.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239941.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239941.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.469] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239941.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239941.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0214.469] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.469] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.469] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239941.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239941.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0214.470] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1418, lpOverlapped=0x0) returned 1 [0214.472] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1420, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1420, lpOverlapped=0x0) returned 1 [0214.473] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0214.473] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.473] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.473] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1418, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1418, lpOverlapped=0x0) returned 1 [0214.473] FlushFileBuffers (hFile=0x21c) returned 1 [0214.476] FlushFileBuffers (hFile=0x2b0) returned 1 [0214.482] CloseHandle (hObject=0x21c) returned 1 [0214.483] CloseHandle (hObject=0x2b0) returned 1 [0214.483] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239941.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239941.wmf")) returned 1 [0214.485] SetEvent (hEvent=0x27c) returned 1 [0214.485] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239951.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239951.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0214.490] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=7232) returned 1 [0214.490] CloseHandle (hObject=0x2b0) returned 1 [0214.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239951.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239951.wmf")) returned 0x220 [0214.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239951.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239951.wmf")) returned 0x220 [0214.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239951.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239951.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.490] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239951.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239951.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0214.490] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.490] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.490] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239951.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239951.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0214.491] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1c40, lpOverlapped=0x0) returned 1 [0214.493] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1c50, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1c50, lpOverlapped=0x0) returned 1 [0214.494] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0214.495] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.495] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.495] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1c40, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1c40, lpOverlapped=0x0) returned 1 [0214.495] FlushFileBuffers (hFile=0x2b0) returned 1 [0214.497] FlushFileBuffers (hFile=0x21c) returned 1 [0214.508] CloseHandle (hObject=0x2b0) returned 1 [0214.508] CloseHandle (hObject=0x21c) returned 1 [0214.508] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239951.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239951.wmf")) returned 1 [0214.509] SetEvent (hEvent=0x27c) returned 1 [0214.509] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239955.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239955.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0214.510] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=4936) returned 1 [0214.510] CloseHandle (hObject=0x21c) returned 1 [0214.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239955.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239955.wmf")) returned 0x220 [0214.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239955.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239955.wmf")) returned 0x220 [0214.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239955.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239955.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.511] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239955.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239955.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0214.511] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.511] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.511] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239955.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239955.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0214.512] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1348, lpOverlapped=0x0) returned 1 [0214.514] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1350, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1350, lpOverlapped=0x0) returned 1 [0214.515] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0214.515] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.515] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.515] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1348, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1348, lpOverlapped=0x0) returned 1 [0214.515] FlushFileBuffers (hFile=0x21c) returned 1 [0214.518] FlushFileBuffers (hFile=0x2b0) returned 1 [0214.530] CloseHandle (hObject=0x21c) returned 1 [0214.531] CloseHandle (hObject=0x2b0) returned 1 [0214.531] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239955.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239955.wmf")) returned 1 [0214.532] SetEvent (hEvent=0x27c) returned 1 [0214.532] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239967.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239967.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0214.534] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=5452) returned 1 [0214.534] CloseHandle (hObject=0x2b0) returned 1 [0214.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239967.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239967.wmf")) returned 0x220 [0214.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239967.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239967.wmf")) returned 0x220 [0214.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239967.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239967.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.535] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239967.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239967.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0214.535] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.535] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.535] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239967.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239967.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0214.536] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x154c, lpOverlapped=0x0) returned 1 [0214.538] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1550, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1550, lpOverlapped=0x0) returned 1 [0214.539] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0214.539] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.539] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.539] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x154c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x154c, lpOverlapped=0x0) returned 1 [0214.539] FlushFileBuffers (hFile=0x2b0) returned 1 [0214.549] FlushFileBuffers (hFile=0x21c) returned 1 [0214.552] CloseHandle (hObject=0x2b0) returned 1 [0214.552] CloseHandle (hObject=0x21c) returned 1 [0214.552] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239967.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239967.wmf")) returned 1 [0214.553] SetEvent (hEvent=0x27c) returned 1 [0214.553] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239975.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239975.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0214.554] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3488) returned 1 [0214.554] CloseHandle (hObject=0x21c) returned 1 [0214.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239975.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239975.wmf")) returned 0x220 [0214.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239975.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239975.wmf")) returned 0x220 [0214.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239975.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239975.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.555] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239975.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239975.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0214.555] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.555] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.555] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239975.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239975.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0214.556] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xda0, lpOverlapped=0x0) returned 1 [0214.559] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xdb0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xdb0, lpOverlapped=0x0) returned 1 [0214.560] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0214.560] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.560] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.560] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xda0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xda0, lpOverlapped=0x0) returned 1 [0214.561] FlushFileBuffers (hFile=0x21c) returned 1 [0214.570] FlushFileBuffers (hFile=0x2b0) returned 1 [0214.572] CloseHandle (hObject=0x21c) returned 1 [0214.572] CloseHandle (hObject=0x2b0) returned 1 [0214.572] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239975.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239975.wmf")) returned 1 [0214.573] SetEvent (hEvent=0x27c) returned 1 [0214.574] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240157.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240157.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0214.575] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=7672) returned 1 [0214.575] CloseHandle (hObject=0x2b0) returned 1 [0214.575] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240157.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240157.wmf")) returned 0x220 [0214.575] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240157.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240157.wmf")) returned 0x220 [0214.575] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240157.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240157.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.575] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240157.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240157.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0214.575] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.575] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.575] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240157.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240157.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0214.576] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1df8, lpOverlapped=0x0) returned 1 [0214.578] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1e00, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1e00, lpOverlapped=0x0) returned 1 [0214.579] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0214.579] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.579] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.579] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1df8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1df8, lpOverlapped=0x0) returned 1 [0214.579] FlushFileBuffers (hFile=0x2b0) returned 1 [0214.585] FlushFileBuffers (hFile=0x21c) returned 1 [0214.595] CloseHandle (hObject=0x2b0) returned 1 [0214.595] CloseHandle (hObject=0x21c) returned 1 [0214.595] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240157.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240157.wmf")) returned 1 [0214.596] SetEvent (hEvent=0x27c) returned 1 [0214.596] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240189.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240189.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0214.599] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3524) returned 1 [0214.599] CloseHandle (hObject=0x21c) returned 1 [0214.599] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240189.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240189.wmf")) returned 0x220 [0214.599] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240189.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240189.wmf")) returned 0x220 [0214.599] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240189.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240189.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.599] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240189.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240189.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0214.599] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.599] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.599] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240189.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240189.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0214.600] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xdc4, lpOverlapped=0x0) returned 1 [0214.602] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xdd0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xdd0, lpOverlapped=0x0) returned 1 [0214.603] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0214.603] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.603] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.603] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xdc4, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xdc4, lpOverlapped=0x0) returned 1 [0214.603] FlushFileBuffers (hFile=0x21c) returned 1 [0214.616] FlushFileBuffers (hFile=0x2b0) returned 1 [0214.620] CloseHandle (hObject=0x21c) returned 1 [0214.620] CloseHandle (hObject=0x2b0) returned 1 [0214.620] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240189.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240189.wmf")) returned 1 [0214.621] SetEvent (hEvent=0x27c) returned 1 [0214.621] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241019.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241019.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0214.622] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2350) returned 1 [0214.622] CloseHandle (hObject=0x2b0) returned 1 [0214.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241019.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241019.wmf")) returned 0x220 [0214.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241019.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241019.wmf")) returned 0x220 [0214.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241019.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241019.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.622] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241019.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241019.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0214.622] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.622] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.622] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241019.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241019.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0214.623] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x92e, lpOverlapped=0x0) returned 1 [0214.625] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x930, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x930, lpOverlapped=0x0) returned 1 [0214.626] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0214.626] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.626] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.626] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x92e, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x92e, lpOverlapped=0x0) returned 1 [0214.627] FlushFileBuffers (hFile=0x2b0) returned 1 [0214.629] FlushFileBuffers (hFile=0x21c) returned 1 [0214.640] CloseHandle (hObject=0x2b0) returned 1 [0214.640] CloseHandle (hObject=0x21c) returned 1 [0214.640] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241019.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241019.wmf")) returned 1 [0214.642] SetEvent (hEvent=0x27c) returned 1 [0214.642] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241041.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241041.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0214.644] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2342) returned 1 [0214.644] CloseHandle (hObject=0x21c) returned 1 [0214.644] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241041.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241041.wmf")) returned 0x220 [0214.644] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241041.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241041.wmf")) returned 0x220 [0214.644] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241041.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241041.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.645] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241041.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241041.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0214.645] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.645] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.645] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241041.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241041.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0214.646] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x926, lpOverlapped=0x0) returned 1 [0214.648] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x930, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x930, lpOverlapped=0x0) returned 1 [0214.649] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0214.650] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.650] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.650] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x926, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x926, lpOverlapped=0x0) returned 1 [0214.650] FlushFileBuffers (hFile=0x21c) returned 1 [0214.662] FlushFileBuffers (hFile=0x2b0) returned 1 [0214.664] CloseHandle (hObject=0x21c) returned 1 [0214.664] CloseHandle (hObject=0x2b0) returned 1 [0214.665] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241041.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241041.wmf")) returned 1 [0214.666] SetEvent (hEvent=0x27c) returned 1 [0214.666] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241077.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241077.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0214.668] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2090) returned 1 [0214.669] CloseHandle (hObject=0x2b0) returned 1 [0214.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241077.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241077.wmf")) returned 0x220 [0214.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241077.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241077.wmf")) returned 0x220 [0214.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241077.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241077.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.669] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241077.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241077.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0214.669] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.669] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.669] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241077.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241077.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0214.670] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x82a, lpOverlapped=0x0) returned 1 [0214.673] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x830, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x830, lpOverlapped=0x0) returned 1 [0214.674] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0214.674] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.674] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.675] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x82a, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x82a, lpOverlapped=0x0) returned 1 [0214.675] FlushFileBuffers (hFile=0x2b0) returned 1 [0214.684] FlushFileBuffers (hFile=0x21c) returned 1 [0214.689] CloseHandle (hObject=0x2b0) returned 1 [0214.689] CloseHandle (hObject=0x21c) returned 1 [0214.689] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241077.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241077.wmf")) returned 1 [0214.690] SetEvent (hEvent=0x27c) returned 1 [0214.690] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241781.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0214.692] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1970) returned 1 [0214.692] CloseHandle (hObject=0x21c) returned 1 [0214.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241781.wmf")) returned 0x220 [0214.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241781.wmf")) returned 0x220 [0214.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241781.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241781.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.692] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241781.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0214.692] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.693] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.693] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241781.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241781.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0214.694] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x7b2, lpOverlapped=0x0) returned 1 [0214.696] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7c0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x7c0, lpOverlapped=0x0) returned 1 [0214.698] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0214.698] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.698] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.698] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7b2, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x7b2, lpOverlapped=0x0) returned 1 [0214.698] FlushFileBuffers (hFile=0x21c) returned 1 [0214.707] FlushFileBuffers (hFile=0x2b0) returned 1 [0214.716] CloseHandle (hObject=0x21c) returned 1 [0214.716] CloseHandle (hObject=0x2b0) returned 1 [0214.716] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241781.wmf")) returned 1 [0214.717] SetEvent (hEvent=0x27c) returned 1 [0214.717] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250997.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0250997.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0214.726] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=26968) returned 1 [0214.726] CloseHandle (hObject=0x2b0) returned 1 [0214.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250997.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0250997.wmf")) returned 0x220 [0214.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250997.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0250997.wmf")) returned 0x220 [0214.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250997.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0250997.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.727] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250997.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0250997.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0214.727] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.727] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.727] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250997.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0250997.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0214.728] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x6958, lpOverlapped=0x0) returned 1 [0214.732] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x6960, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x6960, lpOverlapped=0x0) returned 1 [0214.733] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0214.734] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.734] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.734] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x6958, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x6958, lpOverlapped=0x0) returned 1 [0214.734] FlushFileBuffers (hFile=0x2b0) returned 1 [0214.752] FlushFileBuffers (hFile=0x21c) returned 1 [0214.756] CloseHandle (hObject=0x2b0) returned 1 [0214.756] CloseHandle (hObject=0x21c) returned 1 [0214.756] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250997.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0250997.wmf")) returned 1 [0214.758] SetEvent (hEvent=0x27c) returned 1 [0214.758] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252629.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0252629.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0214.759] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2786) returned 1 [0214.759] CloseHandle (hObject=0x21c) returned 1 [0214.759] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252629.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0252629.wmf")) returned 0x220 [0214.760] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252629.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0252629.wmf")) returned 0x220 [0214.760] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252629.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0252629.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.762] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252629.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0252629.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0214.763] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.763] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.763] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252629.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0252629.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0214.766] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xae2, lpOverlapped=0x0) returned 1 [0214.769] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xaf0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xaf0, lpOverlapped=0x0) returned 1 [0214.771] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0214.771] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.771] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.771] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xae2, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xae2, lpOverlapped=0x0) returned 1 [0214.772] FlushFileBuffers (hFile=0x21c) returned 1 [0214.785] FlushFileBuffers (hFile=0x2b0) returned 1 [0214.790] CloseHandle (hObject=0x21c) returned 1 [0214.790] CloseHandle (hObject=0x2b0) returned 1 [0214.790] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252629.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0252629.wmf")) returned 1 [0214.791] SetEvent (hEvent=0x27c) returned 1 [0214.792] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0278702.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0278702.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0214.794] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3946) returned 1 [0214.794] CloseHandle (hObject=0x2b0) returned 1 [0214.794] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0278702.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0278702.wmf")) returned 0x220 [0214.794] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0278702.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0278702.wmf")) returned 0x220 [0214.794] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0278702.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0278702.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.795] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0278702.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0278702.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0214.795] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.795] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.795] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0278702.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0278702.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0214.796] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xf6a, lpOverlapped=0x0) returned 1 [0214.798] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf70, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf70, lpOverlapped=0x0) returned 1 [0214.799] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0214.799] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.799] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.800] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf6a, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xf6a, lpOverlapped=0x0) returned 1 [0214.800] FlushFileBuffers (hFile=0x2b0) returned 1 [0214.802] FlushFileBuffers (hFile=0x21c) returned 1 [0214.884] CloseHandle (hObject=0x2b0) returned 1 [0214.885] CloseHandle (hObject=0x21c) returned 1 [0214.885] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0278702.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0278702.wmf")) returned 1 [0214.886] SetEvent (hEvent=0x27c) returned 1 [0214.886] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0280468.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0280468.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0214.888] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=73198) returned 1 [0214.888] CloseHandle (hObject=0x21c) returned 1 [0214.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0280468.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0280468.wmf")) returned 0x220 [0214.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0280468.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0280468.wmf")) returned 0x220 [0214.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0280468.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0280468.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.888] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0280468.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0280468.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0214.889] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.889] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.889] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0280468.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0280468.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0214.890] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x11dee, lpOverlapped=0x0) returned 1 [0214.893] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x11df0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x11df0, lpOverlapped=0x0) returned 1 [0214.895] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0214.896] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.896] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.896] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x11dee, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x11dee, lpOverlapped=0x0) returned 1 [0214.896] FlushFileBuffers (hFile=0x21c) returned 1 [0214.904] FlushFileBuffers (hFile=0x2b0) returned 1 [0214.910] CloseHandle (hObject=0x21c) returned 1 [0214.910] CloseHandle (hObject=0x2b0) returned 1 [0214.911] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0280468.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0280468.wmf")) returned 1 [0214.912] SetEvent (hEvent=0x27c) returned 1 [0214.912] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281243.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281243.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0214.913] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=46516) returned 1 [0214.913] CloseHandle (hObject=0x2b0) returned 1 [0214.913] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281243.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281243.wmf")) returned 0x220 [0214.913] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281243.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281243.wmf")) returned 0x220 [0214.913] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281243.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281243.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.913] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281243.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281243.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0214.913] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.913] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.913] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281243.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281243.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0214.915] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xb5b4, lpOverlapped=0x0) returned 1 [0214.917] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xb5c0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xb5c0, lpOverlapped=0x0) returned 1 [0214.919] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0214.919] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.919] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.919] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xb5b4, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xb5b4, lpOverlapped=0x0) returned 1 [0214.920] FlushFileBuffers (hFile=0x2b0) returned 1 [0214.928] FlushFileBuffers (hFile=0x21c) returned 1 [0214.932] CloseHandle (hObject=0x2b0) returned 1 [0214.932] CloseHandle (hObject=0x21c) returned 1 [0214.932] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281243.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281243.wmf")) returned 1 [0214.934] SetEvent (hEvent=0x27c) returned 1 [0214.934] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281632.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281632.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0214.936] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=14420) returned 1 [0214.936] CloseHandle (hObject=0x21c) returned 1 [0214.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281632.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281632.wmf")) returned 0x220 [0214.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281632.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281632.wmf")) returned 0x220 [0214.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281632.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281632.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.936] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281632.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281632.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0214.936] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.936] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.936] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281632.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281632.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0214.937] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x3854, lpOverlapped=0x0) returned 1 [0214.941] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3860, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3860, lpOverlapped=0x0) returned 1 [0214.942] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0214.943] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.943] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.943] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3854, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x3854, lpOverlapped=0x0) returned 1 [0214.943] FlushFileBuffers (hFile=0x21c) returned 1 [0214.952] FlushFileBuffers (hFile=0x2b0) returned 1 [0214.954] CloseHandle (hObject=0x21c) returned 1 [0214.954] CloseHandle (hObject=0x2b0) returned 1 [0214.954] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281632.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281632.wmf")) returned 1 [0214.955] SetEvent (hEvent=0x27c) returned 1 [0214.955] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281640.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281640.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0214.956] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=12530) returned 1 [0214.956] CloseHandle (hObject=0x2b0) returned 1 [0214.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281640.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281640.wmf")) returned 0x220 [0214.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281640.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281640.wmf")) returned 0x220 [0214.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281640.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281640.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.956] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281640.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281640.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0214.956] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.956] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.956] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281640.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281640.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0214.957] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x30f2, lpOverlapped=0x0) returned 1 [0214.959] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3100, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3100, lpOverlapped=0x0) returned 1 [0214.960] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0214.960] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.960] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.960] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x30f2, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x30f2, lpOverlapped=0x0) returned 1 [0214.961] FlushFileBuffers (hFile=0x2b0) returned 1 [0214.963] FlushFileBuffers (hFile=0x21c) returned 1 [0214.975] CloseHandle (hObject=0x2b0) returned 1 [0214.975] CloseHandle (hObject=0x21c) returned 1 [0214.975] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281640.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281640.wmf")) returned 1 [0214.976] SetEvent (hEvent=0x27c) returned 1 [0214.976] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282928.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282928.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0214.978] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=33126) returned 1 [0214.978] CloseHandle (hObject=0x21c) returned 1 [0214.978] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282928.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282928.wmf")) returned 0x220 [0214.979] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282928.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282928.wmf")) returned 0x220 [0214.979] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282928.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282928.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.979] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282928.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282928.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0214.979] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.979] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.979] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282928.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282928.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0214.980] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x8166, lpOverlapped=0x0) returned 1 [0214.983] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8170, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x8170, lpOverlapped=0x0) returned 1 [0214.984] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0214.985] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.985] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0214.985] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8166, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x8166, lpOverlapped=0x0) returned 1 [0214.985] FlushFileBuffers (hFile=0x21c) returned 1 [0214.994] FlushFileBuffers (hFile=0x2b0) returned 1 [0214.996] CloseHandle (hObject=0x21c) returned 1 [0214.996] CloseHandle (hObject=0x2b0) returned 1 [0214.996] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282928.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282928.wmf")) returned 1 [0214.997] SetEvent (hEvent=0x27c) returned 1 [0214.997] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285462.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285462.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0214.998] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=14474) returned 1 [0214.998] CloseHandle (hObject=0x2b0) returned 1 [0214.998] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285462.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285462.wmf")) returned 0x220 [0214.998] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285462.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285462.wmf")) returned 0x220 [0214.998] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285462.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285462.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.998] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285462.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285462.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0214.998] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.998] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0214.998] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285462.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285462.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0214.999] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x388a, lpOverlapped=0x0) returned 1 [0215.002] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3890, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3890, lpOverlapped=0x0) returned 1 [0215.003] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0215.004] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0215.004] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0215.004] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x388a, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x388a, lpOverlapped=0x0) returned 1 [0215.004] FlushFileBuffers (hFile=0x2b0) returned 1 [0215.011] FlushFileBuffers (hFile=0x21c) returned 1 [0215.015] CloseHandle (hObject=0x2b0) returned 1 [0215.015] CloseHandle (hObject=0x21c) returned 1 [0215.015] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285462.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285462.wmf")) returned 1 [0215.016] SetEvent (hEvent=0x27c) returned 1 [0215.017] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285780.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285780.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0215.017] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=31068) returned 1 [0215.017] CloseHandle (hObject=0x21c) returned 1 [0215.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285780.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285780.wmf")) returned 0x220 [0215.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285780.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285780.wmf")) returned 0x220 [0215.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285780.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285780.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.017] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285780.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285780.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0215.018] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0215.018] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0215.018] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285780.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285780.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0215.018] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x795c, lpOverlapped=0x0) returned 1 [0215.021] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7960, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x7960, lpOverlapped=0x0) returned 1 [0215.023] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0215.023] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0215.023] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0215.023] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x795c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x795c, lpOverlapped=0x0) returned 1 [0215.023] FlushFileBuffers (hFile=0x21c) returned 1 [0215.031] FlushFileBuffers (hFile=0x2b0) returned 1 [0215.036] CloseHandle (hObject=0x21c) returned 1 [0215.036] CloseHandle (hObject=0x2b0) returned 1 [0215.036] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285780.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285780.wmf")) returned 1 [0215.037] SetEvent (hEvent=0x27c) returned 1 [0215.037] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285792.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285792.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0215.041] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=11956) returned 1 [0215.041] CloseHandle (hObject=0x2b0) returned 1 [0215.041] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285792.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285792.wmf")) returned 0x220 [0215.041] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285792.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285792.wmf")) returned 0x220 [0215.041] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285792.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285792.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.041] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285792.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285792.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0215.041] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0215.041] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0215.041] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285792.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285792.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0215.042] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2eb4, lpOverlapped=0x0) returned 1 [0215.044] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2ec0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2ec0, lpOverlapped=0x0) returned 1 [0215.045] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0215.045] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0215.045] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0215.046] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2eb4, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2eb4, lpOverlapped=0x0) returned 1 [0215.046] FlushFileBuffers (hFile=0x2b0) returned 1 [0215.055] FlushFileBuffers (hFile=0x21c) returned 1 [0215.058] CloseHandle (hObject=0x2b0) returned 1 [0215.058] CloseHandle (hObject=0x21c) returned 1 [0215.058] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285792.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285792.wmf")) returned 1 [0215.059] SetEvent (hEvent=0x27c) returned 1 [0215.059] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285808.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285808.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0215.060] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=9204) returned 1 [0215.060] CloseHandle (hObject=0x21c) returned 1 [0215.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285808.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285808.wmf")) returned 0x220 [0215.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285808.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285808.wmf")) returned 0x220 [0215.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285808.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285808.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.060] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285808.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285808.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0215.061] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0215.061] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0215.061] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285808.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285808.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0215.061] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x23f4, lpOverlapped=0x0) returned 1 [0215.063] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2400, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2400, lpOverlapped=0x0) returned 1 [0215.064] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0215.065] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0215.065] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0215.065] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x23f4, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x23f4, lpOverlapped=0x0) returned 1 [0215.065] FlushFileBuffers (hFile=0x21c) returned 1 [0215.074] FlushFileBuffers (hFile=0x2b0) returned 1 [0215.076] CloseHandle (hObject=0x21c) returned 1 [0215.076] CloseHandle (hObject=0x2b0) returned 1 [0215.076] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285808.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285808.wmf")) returned 1 [0215.077] SetEvent (hEvent=0x27c) returned 1 [0215.077] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285822.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285822.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0215.079] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=8608) returned 1 [0215.079] CloseHandle (hObject=0x2b0) returned 1 [0215.079] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285822.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285822.wmf")) returned 0x220 [0215.079] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285822.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285822.wmf")) returned 0x220 [0215.079] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285822.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285822.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.079] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285822.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285822.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0215.079] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0215.079] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0215.079] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285822.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285822.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0215.080] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x21a0, lpOverlapped=0x0) returned 1 [0215.090] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x21b0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x21b0, lpOverlapped=0x0) returned 1 [0215.091] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0215.092] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0215.092] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0215.092] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x21a0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x21a0, lpOverlapped=0x0) returned 1 [0215.092] FlushFileBuffers (hFile=0x2b0) returned 1 [0215.442] FlushFileBuffers (hFile=0x21c) returned 1 [0215.444] CloseHandle (hObject=0x2b0) returned 1 [0215.444] CloseHandle (hObject=0x21c) returned 1 [0215.444] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285822.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285822.wmf")) returned 1 [0215.446] SetEvent (hEvent=0x27c) returned 1 [0215.446] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0291794.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0291794.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0215.448] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=9616) returned 1 [0215.448] CloseHandle (hObject=0x21c) returned 1 [0215.448] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0291794.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0291794.wmf")) returned 0x220 [0215.448] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0291794.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0291794.wmf")) returned 0x220 [0215.448] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0291794.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0291794.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.448] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0291794.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0291794.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0215.448] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0215.448] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0215.448] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0291794.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0291794.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0215.450] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2590, lpOverlapped=0x0) returned 1 [0215.453] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x25a0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x25a0, lpOverlapped=0x0) returned 1 [0215.454] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0215.454] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0215.454] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0215.454] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2590, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2590, lpOverlapped=0x0) returned 1 [0215.455] FlushFileBuffers (hFile=0x21c) returned 1 [0215.463] FlushFileBuffers (hFile=0x2b0) returned 1 [0215.467] CloseHandle (hObject=0x21c) returned 1 [0215.467] CloseHandle (hObject=0x2b0) returned 1 [0215.467] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0291794.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0291794.wmf")) returned 1 [0215.468] SetEvent (hEvent=0x27c) returned 1 [0215.468] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292270.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292270.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0215.470] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=31398) returned 1 [0215.470] CloseHandle (hObject=0x2b0) returned 1 [0215.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292270.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292270.wmf")) returned 0x220 [0215.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292270.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292270.wmf")) returned 0x220 [0215.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292270.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292270.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.470] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292270.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292270.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0215.470] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0215.470] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0215.470] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292270.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292270.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0215.472] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x7aa6, lpOverlapped=0x0) returned 1 [0215.474] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7ab0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x7ab0, lpOverlapped=0x0) returned 1 [0215.476] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0215.476] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0215.477] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0215.477] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7aa6, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x7aa6, lpOverlapped=0x0) returned 1 [0215.477] FlushFileBuffers (hFile=0x2b0) returned 1 [0215.489] FlushFileBuffers (hFile=0x21c) returned 1 [0215.491] CloseHandle (hObject=0x2b0) returned 1 [0215.492] CloseHandle (hObject=0x21c) returned 1 [0215.492] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292270.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292270.wmf")) returned 1 [0215.493] SetEvent (hEvent=0x27c) returned 1 [0215.493] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292278.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292278.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0215.494] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=13912) returned 1 [0215.494] CloseHandle (hObject=0x21c) returned 1 [0215.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292278.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292278.wmf")) returned 0x220 [0215.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292278.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292278.wmf")) returned 0x220 [0215.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292278.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292278.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.495] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292278.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292278.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0215.495] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0215.495] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0215.495] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292278.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292278.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0215.496] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x3658, lpOverlapped=0x0) returned 1 [0215.498] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3660, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3660, lpOverlapped=0x0) returned 1 [0215.499] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0215.500] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0215.500] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0215.500] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3658, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x3658, lpOverlapped=0x0) returned 1 [0215.500] FlushFileBuffers (hFile=0x21c) returned 1 [0215.510] FlushFileBuffers (hFile=0x2b0) returned 1 [0215.515] CloseHandle (hObject=0x21c) returned 1 [0215.515] CloseHandle (hObject=0x2b0) returned 1 [0215.515] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292278.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292278.wmf")) returned 1 [0215.516] SetEvent (hEvent=0x27c) returned 1 [0215.517] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293800.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0293800.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0215.518] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=4774) returned 1 [0215.518] CloseHandle (hObject=0x2b0) returned 1 [0215.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293800.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0293800.wmf")) returned 0x220 [0215.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293800.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0293800.wmf")) returned 0x220 [0215.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293800.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0293800.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.518] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293800.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0293800.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0215.518] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0215.518] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0215.518] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293800.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0293800.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0215.519] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x12a6, lpOverlapped=0x0) returned 1 [0215.521] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x12b0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x12b0, lpOverlapped=0x0) returned 1 [0215.522] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0215.523] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0215.523] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0215.523] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x12a6, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x12a6, lpOverlapped=0x0) returned 1 [0215.523] FlushFileBuffers (hFile=0x2b0) returned 1 [0215.525] FlushFileBuffers (hFile=0x21c) returned 1 [0215.526] CloseHandle (hObject=0x2b0) returned 1 [0215.526] CloseHandle (hObject=0x21c) returned 1 [0215.526] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293800.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0293800.wmf")) returned 1 [0215.527] SetEvent (hEvent=0x27c) returned 1 [0215.528] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293832.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0293832.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0215.529] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=6078) returned 1 [0215.529] CloseHandle (hObject=0x21c) returned 1 [0215.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293832.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0293832.wmf")) returned 0x220 [0215.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293832.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0293832.wmf")) returned 0x220 [0215.530] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293832.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0293832.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.530] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293832.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0293832.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0215.530] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0215.530] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0215.530] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293832.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0293832.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0215.531] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x17be, lpOverlapped=0x0) returned 1 [0215.533] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x17c0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x17c0, lpOverlapped=0x0) returned 1 [0215.534] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0215.534] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0215.534] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0215.534] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x17be, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x17be, lpOverlapped=0x0) returned 1 [0215.534] FlushFileBuffers (hFile=0x21c) returned 1 [0215.537] FlushFileBuffers (hFile=0x2b0) returned 1 [0215.538] CloseHandle (hObject=0x21c) returned 1 [0215.538] CloseHandle (hObject=0x2b0) returned 1 [0215.538] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293832.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0293832.wmf")) returned 1 [0215.539] SetEvent (hEvent=0x27c) returned 1 [0215.539] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294989.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0294989.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0215.541] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=14302) returned 1 [0215.541] CloseHandle (hObject=0x2b0) returned 1 [0215.541] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294989.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0294989.wmf")) returned 0x220 [0215.541] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294989.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0294989.wmf")) returned 0x220 [0215.541] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294989.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0294989.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.541] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294989.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0294989.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0215.541] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0215.541] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0215.541] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294989.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0294989.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0215.543] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x37de, lpOverlapped=0x0) returned 1 [0215.545] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x37e0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x37e0, lpOverlapped=0x0) returned 1 [0215.546] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0215.547] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0215.547] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0215.547] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x37de, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x37de, lpOverlapped=0x0) returned 1 [0215.547] FlushFileBuffers (hFile=0x2b0) returned 1 [0215.552] FlushFileBuffers (hFile=0x21c) returned 1 [0215.553] CloseHandle (hObject=0x2b0) returned 1 [0215.553] CloseHandle (hObject=0x21c) returned 1 [0215.553] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294989.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0294989.wmf")) returned 1 [0215.555] SetEvent (hEvent=0x27c) returned 1 [0215.555] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294991.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0294991.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0215.556] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=24960) returned 1 [0215.556] CloseHandle (hObject=0x21c) returned 1 [0215.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294991.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0294991.wmf")) returned 0x220 [0215.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294991.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0294991.wmf")) returned 0x220 [0215.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294991.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0294991.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.556] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294991.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0294991.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0215.556] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0215.556] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0215.556] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294991.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0294991.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0215.557] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x6180, lpOverlapped=0x0) returned 1 [0215.560] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x6190, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x6190, lpOverlapped=0x0) returned 1 [0215.561] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0215.561] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0215.561] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0215.562] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x6180, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x6180, lpOverlapped=0x0) returned 1 [0215.562] FlushFileBuffers (hFile=0x21c) returned 1 [0215.564] FlushFileBuffers (hFile=0x2b0) returned 1 [0215.597] CloseHandle (hObject=0x21c) returned 1 [0215.597] CloseHandle (hObject=0x2b0) returned 1 [0215.597] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294991.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0294991.wmf")) returned 1 [0215.598] SetEvent (hEvent=0x27c) returned 1 [0215.599] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0295069.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0295069.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0215.600] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=8626) returned 1 [0215.600] CloseHandle (hObject=0x2b0) returned 1 [0215.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0295069.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0295069.wmf")) returned 0x220 [0215.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0295069.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0295069.wmf")) returned 0x220 [0215.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0295069.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0295069.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.600] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0295069.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0295069.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0215.600] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0215.600] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0215.600] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0295069.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0295069.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0215.602] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x21b2, lpOverlapped=0x0) returned 1 [0215.603] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x21c0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x21c0, lpOverlapped=0x0) returned 1 [0215.604] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0215.605] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0215.605] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0215.605] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x21b2, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x21b2, lpOverlapped=0x0) returned 1 [0215.605] FlushFileBuffers (hFile=0x2b0) returned 1 [0215.606] FlushFileBuffers (hFile=0x21c) returned 1 [0215.611] CloseHandle (hObject=0x2b0) returned 1 [0215.611] CloseHandle (hObject=0x21c) returned 1 [0215.612] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0295069.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0295069.wmf")) returned 1 [0215.613] SetEvent (hEvent=0x27c) returned 1 [0215.613] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296277.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296277.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0215.615] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=58412) returned 1 [0215.615] CloseHandle (hObject=0x21c) returned 1 [0215.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296277.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296277.wmf")) returned 0x220 [0215.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296277.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296277.wmf")) returned 0x220 [0215.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296277.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296277.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.616] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296277.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296277.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0215.616] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0215.616] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0215.616] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296277.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296277.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0215.617] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xe42c, lpOverlapped=0x0) returned 1 [0215.628] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xe430, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xe430, lpOverlapped=0x0) returned 1 [0215.630] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0215.630] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0215.630] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0215.630] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xe42c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xe42c, lpOverlapped=0x0) returned 1 [0215.631] FlushFileBuffers (hFile=0x21c) returned 1 [0215.641] FlushFileBuffers (hFile=0x2b0) returned 1 [0215.643] CloseHandle (hObject=0x21c) returned 1 [0215.643] CloseHandle (hObject=0x2b0) returned 1 [0215.644] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296277.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296277.wmf")) returned 1 [0215.645] SetEvent (hEvent=0x27c) returned 1 [0215.645] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296288.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0215.646] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=67564) returned 1 [0215.646] CloseHandle (hObject=0x2b0) returned 1 [0215.646] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296288.wmf")) returned 0x220 [0215.647] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296288.wmf")) returned 0x220 [0215.647] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296288.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296288.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.647] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296288.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0215.647] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0215.647] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0215.647] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296288.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296288.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0215.648] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x107ec, lpOverlapped=0x0) returned 1 [0215.652] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x107f0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x107f0, lpOverlapped=0x0) returned 1 [0215.654] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0215.654] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0215.654] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0215.654] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x107ec, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x107ec, lpOverlapped=0x0) returned 1 [0215.654] FlushFileBuffers (hFile=0x2b0) returned 1 [0215.664] FlushFileBuffers (hFile=0x21c) returned 1 [0215.671] CloseHandle (hObject=0x2b0) returned 1 [0215.671] CloseHandle (hObject=0x21c) returned 1 [0215.671] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296288.wmf")) returned 1 [0215.672] SetEvent (hEvent=0x27c) returned 1 [0215.673] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297269.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297269.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0215.675] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=15652) returned 1 [0215.675] CloseHandle (hObject=0x21c) returned 1 [0215.676] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297269.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297269.wmf")) returned 0x220 [0215.676] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297269.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297269.wmf")) returned 0x220 [0215.676] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297269.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297269.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.676] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297269.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297269.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0215.676] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0215.676] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0215.676] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297269.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297269.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0215.677] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x3d24, lpOverlapped=0x0) returned 1 [0215.680] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3d30, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3d30, lpOverlapped=0x0) returned 1 [0215.681] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0215.681] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0215.681] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0215.682] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3d24, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x3d24, lpOverlapped=0x0) returned 1 [0215.682] FlushFileBuffers (hFile=0x21c) returned 1 [0215.692] FlushFileBuffers (hFile=0x2b0) returned 1 [0215.694] CloseHandle (hObject=0x21c) returned 1 [0215.694] CloseHandle (hObject=0x2b0) returned 1 [0215.695] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297269.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297269.wmf")) returned 1 [0215.696] SetEvent (hEvent=0x27c) returned 1 [0215.696] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297727.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297727.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0215.697] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=15516) returned 1 [0215.697] CloseHandle (hObject=0x2b0) returned 1 [0215.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297727.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297727.wmf")) returned 0x220 [0215.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297727.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297727.wmf")) returned 0x220 [0215.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297727.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297727.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.698] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297727.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297727.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0215.698] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0215.698] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0215.698] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297727.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297727.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0215.699] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x3c9c, lpOverlapped=0x0) returned 1 [0215.702] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3ca0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3ca0, lpOverlapped=0x0) returned 1 [0215.703] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0215.704] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0215.704] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0215.704] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3c9c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x3c9c, lpOverlapped=0x0) returned 1 [0215.704] FlushFileBuffers (hFile=0x2b0) returned 1 [0215.715] FlushFileBuffers (hFile=0x21c) returned 1 [0215.716] CloseHandle (hObject=0x2b0) returned 1 [0215.716] CloseHandle (hObject=0x21c) returned 1 [0215.717] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297727.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297727.wmf")) returned 1 [0215.718] SetEvent (hEvent=0x27c) returned 1 [0215.718] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297759.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297759.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0215.719] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=18784) returned 1 [0215.719] CloseHandle (hObject=0x21c) returned 1 [0215.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297759.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297759.wmf")) returned 0x220 [0215.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297759.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297759.wmf")) returned 0x220 [0215.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297759.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297759.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.719] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297759.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297759.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0215.719] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0215.719] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0215.719] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297759.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297759.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0215.720] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4960, lpOverlapped=0x0) returned 1 [0215.722] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4970, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4970, lpOverlapped=0x0) returned 1 [0215.723] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0215.724] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0215.724] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0215.724] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4960, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4960, lpOverlapped=0x0) returned 1 [0215.724] FlushFileBuffers (hFile=0x21c) returned 1 [0215.733] FlushFileBuffers (hFile=0x2b0) returned 1 [0215.737] CloseHandle (hObject=0x21c) returned 1 [0215.737] CloseHandle (hObject=0x2b0) returned 1 [0215.738] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297759.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297759.wmf")) returned 1 [0215.739] SetEvent (hEvent=0x27c) returned 1 [0215.739] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301044.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301044.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0215.741] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=11022) returned 1 [0215.741] CloseHandle (hObject=0x2b0) returned 1 [0215.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301044.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301044.wmf")) returned 0x220 [0215.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301044.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301044.wmf")) returned 0x220 [0215.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301044.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301044.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301044.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301044.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0215.741] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0215.741] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0215.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301044.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301044.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0215.742] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2b0e, lpOverlapped=0x0) returned 1 [0215.744] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2b10, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2b10, lpOverlapped=0x0) returned 1 [0215.745] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0215.746] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0215.746] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0215.746] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2b0e, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2b0e, lpOverlapped=0x0) returned 1 [0215.746] FlushFileBuffers (hFile=0x2b0) returned 1 [0215.753] FlushFileBuffers (hFile=0x21c) returned 1 [0215.758] CloseHandle (hObject=0x2b0) returned 1 [0215.758] CloseHandle (hObject=0x21c) returned 1 [0215.758] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301044.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301044.wmf")) returned 1 [0215.759] SetEvent (hEvent=0x27c) returned 1 [0215.759] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301418.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301418.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0215.760] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=19034) returned 1 [0215.760] CloseHandle (hObject=0x21c) returned 1 [0215.760] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301418.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301418.wmf")) returned 0x220 [0215.760] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301418.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301418.wmf")) returned 0x220 [0215.760] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301418.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301418.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.760] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301418.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301418.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0215.760] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0215.760] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0215.761] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301418.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301418.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0215.761] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4a5a, lpOverlapped=0x0) returned 1 [0215.764] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4a60, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4a60, lpOverlapped=0x0) returned 1 [0215.765] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0215.765] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0215.765] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0215.765] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4a5a, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4a5a, lpOverlapped=0x0) returned 1 [0215.765] FlushFileBuffers (hFile=0x21c) returned 1 [0215.781] FlushFileBuffers (hFile=0x2b0) returned 1 [0215.784] CloseHandle (hObject=0x21c) returned 1 [0215.784] CloseHandle (hObject=0x2b0) returned 1 [0215.784] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301418.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301418.wmf")) returned 1 [0215.785] SetEvent (hEvent=0x27c) returned 1 [0215.785] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304371.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304371.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0215.787] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3616) returned 1 [0215.787] CloseHandle (hObject=0x2b0) returned 1 [0215.787] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304371.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304371.wmf")) returned 0x220 [0215.788] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304371.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304371.wmf")) returned 0x220 [0215.788] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304371.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304371.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.788] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304371.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304371.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0215.788] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0215.788] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0215.788] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304371.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304371.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0215.789] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xe20, lpOverlapped=0x0) returned 1 [0215.791] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xe30, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xe30, lpOverlapped=0x0) returned 1 [0215.792] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0215.793] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0215.793] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0215.793] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xe20, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xe20, lpOverlapped=0x0) returned 1 [0215.793] FlushFileBuffers (hFile=0x2b0) returned 1 [0215.796] FlushFileBuffers (hFile=0x21c) returned 1 [0215.813] CloseHandle (hObject=0x2b0) returned 1 [0215.813] CloseHandle (hObject=0x21c) returned 1 [0215.813] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304371.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304371.wmf")) returned 1 [0215.815] SetEvent (hEvent=0x27c) returned 1 [0215.816] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304853.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304853.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0215.816] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=18958) returned 1 [0215.816] CloseHandle (hObject=0x21c) returned 1 [0215.816] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304853.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304853.wmf")) returned 0x220 [0215.817] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304853.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304853.wmf")) returned 0x220 [0215.817] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304853.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304853.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.817] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304853.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304853.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0215.817] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0215.817] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0215.817] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304853.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304853.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0215.818] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4a0e, lpOverlapped=0x0) returned 1 [0215.820] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4a10, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4a10, lpOverlapped=0x0) returned 1 [0215.822] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0215.822] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0215.822] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0215.822] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4a0e, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4a0e, lpOverlapped=0x0) returned 1 [0215.822] FlushFileBuffers (hFile=0x21c) returned 1 [0215.831] FlushFileBuffers (hFile=0x2b0) returned 1 [0215.835] CloseHandle (hObject=0x21c) returned 1 [0215.835] CloseHandle (hObject=0x2b0) returned 1 [0215.836] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304853.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304853.wmf")) returned 1 [0215.837] SetEvent (hEvent=0x27c) returned 1 [0215.837] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304875.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304875.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0215.838] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=20366) returned 1 [0215.838] CloseHandle (hObject=0x2b0) returned 1 [0215.838] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304875.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304875.wmf")) returned 0x220 [0215.838] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304875.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304875.wmf")) returned 0x220 [0215.838] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304875.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304875.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.839] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304875.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304875.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0215.839] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0215.839] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0215.839] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304875.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304875.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0215.840] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4f8e, lpOverlapped=0x0) returned 1 [0215.843] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4f90, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4f90, lpOverlapped=0x0) returned 1 [0215.845] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0215.845] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0215.846] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0215.846] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4f8e, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4f8e, lpOverlapped=0x0) returned 1 [0215.846] FlushFileBuffers (hFile=0x2b0) returned 1 [0215.869] FlushFileBuffers (hFile=0x21c) returned 1 [0215.873] CloseHandle (hObject=0x2b0) returned 1 [0215.873] CloseHandle (hObject=0x21c) returned 1 [0215.873] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304875.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304875.wmf")) returned 1 [0215.874] SetEvent (hEvent=0x27c) returned 1 [0215.874] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309567.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309567.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0215.876] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=21580) returned 1 [0215.876] CloseHandle (hObject=0x21c) returned 1 [0215.877] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309567.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309567.jpg")) returned 0x220 [0215.877] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309567.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309567.jpg")) returned 0x220 [0215.877] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309567.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309567.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.877] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309567.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309567.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0215.877] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0215.877] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0215.877] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309567.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309567.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0215.878] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x544c, lpOverlapped=0x0) returned 1 [0215.881] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5450, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x5450, lpOverlapped=0x0) returned 1 [0215.882] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0215.883] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0215.883] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0215.883] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x544c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x544c, lpOverlapped=0x0) returned 1 [0215.883] FlushFileBuffers (hFile=0x21c) returned 1 [0215.890] FlushFileBuffers (hFile=0x2b0) returned 1 [0215.895] CloseHandle (hObject=0x21c) returned 1 [0215.895] CloseHandle (hObject=0x2b0) returned 1 [0215.895] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309567.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309567.jpg")) returned 1 [0215.897] SetEvent (hEvent=0x27c) returned 1 [0215.897] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309598.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309598.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0215.897] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=33264) returned 1 [0215.897] CloseHandle (hObject=0x2b0) returned 1 [0215.898] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309598.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309598.jpg")) returned 0x220 [0215.898] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309598.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309598.jpg")) returned 0x220 [0215.898] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309598.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309598.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.898] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309598.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309598.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0215.898] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0215.898] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0215.898] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309598.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309598.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0215.899] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x81f0, lpOverlapped=0x0) returned 1 [0215.902] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8200, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x8200, lpOverlapped=0x0) returned 1 [0215.904] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0215.904] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0215.904] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0215.904] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x81f0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x81f0, lpOverlapped=0x0) returned 1 [0215.905] FlushFileBuffers (hFile=0x2b0) returned 1 [0215.907] FlushFileBuffers (hFile=0x21c) returned 1 [0215.914] CloseHandle (hObject=0x2b0) returned 1 [0215.915] CloseHandle (hObject=0x21c) returned 1 [0215.915] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309598.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309598.jpg")) returned 1 [0215.916] SetEvent (hEvent=0x27c) returned 1 [0215.916] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309705.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309705.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0215.921] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=19162) returned 1 [0215.921] CloseHandle (hObject=0x21c) returned 1 [0215.921] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309705.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309705.jpg")) returned 0x220 [0215.921] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309705.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309705.jpg")) returned 0x220 [0215.921] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309705.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309705.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.922] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309705.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309705.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0215.922] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0215.922] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0215.922] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309705.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309705.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0215.922] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4ada, lpOverlapped=0x0) returned 1 [0215.925] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4ae0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4ae0, lpOverlapped=0x0) returned 1 [0215.926] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0215.927] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0215.927] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0215.927] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4ada, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4ada, lpOverlapped=0x0) returned 1 [0215.927] FlushFileBuffers (hFile=0x21c) returned 1 [0215.929] FlushFileBuffers (hFile=0x2b0) returned 1 [0215.939] CloseHandle (hObject=0x21c) returned 1 [0215.939] CloseHandle (hObject=0x2b0) returned 1 [0215.939] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309705.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309705.jpg")) returned 1 [0215.940] SetEvent (hEvent=0x27c) returned 1 [0215.940] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309904.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309904.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0215.942] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=8420) returned 1 [0215.942] CloseHandle (hObject=0x2b0) returned 1 [0215.942] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309904.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309904.wmf")) returned 0x220 [0215.942] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309904.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309904.wmf")) returned 0x220 [0215.942] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309904.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309904.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.942] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309904.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309904.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0215.942] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0215.942] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0215.942] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309904.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309904.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0215.943] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x20e4, lpOverlapped=0x0) returned 1 [0215.945] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x20f0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x20f0, lpOverlapped=0x0) returned 1 [0215.947] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0215.947] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0215.947] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0215.947] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x20e4, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x20e4, lpOverlapped=0x0) returned 1 [0215.947] FlushFileBuffers (hFile=0x2b0) returned 1 [0215.960] FlushFileBuffers (hFile=0x21c) returned 1 [0216.012] CloseHandle (hObject=0x2b0) returned 1 [0216.012] CloseHandle (hObject=0x21c) returned 1 [0216.012] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309904.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309904.wmf")) returned 1 [0216.013] SetEvent (hEvent=0x27c) returned 1 [0216.014] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313896.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313896.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0216.016] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=37146) returned 1 [0216.017] CloseHandle (hObject=0x21c) returned 1 [0216.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313896.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313896.jpg")) returned 0x220 [0216.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313896.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313896.jpg")) returned 0x220 [0216.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313896.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313896.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.017] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313896.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313896.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0216.017] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.017] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.017] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313896.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313896.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0216.018] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x911a, lpOverlapped=0x0) returned 1 [0216.021] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x9120, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x9120, lpOverlapped=0x0) returned 1 [0216.023] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0216.023] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.023] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.023] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x911a, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x911a, lpOverlapped=0x0) returned 1 [0216.024] FlushFileBuffers (hFile=0x21c) returned 1 [0216.031] FlushFileBuffers (hFile=0x2b0) returned 1 [0216.037] CloseHandle (hObject=0x21c) returned 1 [0216.038] CloseHandle (hObject=0x2b0) returned 1 [0216.038] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313896.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313896.jpg")) returned 1 [0216.039] SetEvent (hEvent=0x27c) returned 1 [0216.039] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313970.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313970.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0216.041] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=33195) returned 1 [0216.041] CloseHandle (hObject=0x2b0) returned 1 [0216.041] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313970.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313970.jpg")) returned 0x220 [0216.041] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313970.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313970.jpg")) returned 0x220 [0216.041] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313970.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313970.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.041] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313970.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313970.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0216.042] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.042] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.042] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313970.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313970.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0216.042] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x81ab, lpOverlapped=0x0) returned 1 [0216.046] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x81b0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x81b0, lpOverlapped=0x0) returned 1 [0216.051] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0216.051] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.051] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.051] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x81ab, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x81ab, lpOverlapped=0x0) returned 1 [0216.052] FlushFileBuffers (hFile=0x2b0) returned 1 [0216.058] FlushFileBuffers (hFile=0x21c) returned 1 [0216.066] CloseHandle (hObject=0x2b0) returned 1 [0216.066] CloseHandle (hObject=0x21c) returned 1 [0216.066] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313970.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313970.jpg")) returned 1 [0216.067] SetEvent (hEvent=0x27c) returned 1 [0216.067] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0314068.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0314068.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0216.068] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=16626) returned 1 [0216.068] CloseHandle (hObject=0x21c) returned 1 [0216.068] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0314068.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0314068.jpg")) returned 0x220 [0216.068] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0314068.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0314068.jpg")) returned 0x220 [0216.068] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0314068.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0314068.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.068] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0314068.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0314068.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0216.068] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.069] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.069] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0314068.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0314068.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0216.069] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x40f2, lpOverlapped=0x0) returned 1 [0216.072] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4100, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4100, lpOverlapped=0x0) returned 1 [0216.073] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0216.073] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.073] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.073] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x40f2, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x40f2, lpOverlapped=0x0) returned 1 [0216.073] FlushFileBuffers (hFile=0x21c) returned 1 [0216.075] FlushFileBuffers (hFile=0x2b0) returned 1 [0216.076] CloseHandle (hObject=0x21c) returned 1 [0216.076] CloseHandle (hObject=0x2b0) returned 1 [0216.076] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0314068.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0314068.jpg")) returned 1 [0216.078] SetEvent (hEvent=0x27c) returned 1 [0216.078] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315580.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315580.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0216.079] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=19202) returned 1 [0216.079] CloseHandle (hObject=0x2b0) returned 1 [0216.079] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315580.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315580.jpg")) returned 0x220 [0216.080] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315580.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315580.jpg")) returned 0x220 [0216.080] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315580.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315580.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.080] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315580.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315580.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0216.080] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.080] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.080] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315580.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315580.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0216.080] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4b02, lpOverlapped=0x0) returned 1 [0216.083] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4b10, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4b10, lpOverlapped=0x0) returned 1 [0216.085] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0216.085] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.085] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.085] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4b02, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4b02, lpOverlapped=0x0) returned 1 [0216.086] FlushFileBuffers (hFile=0x2b0) returned 1 [0216.088] FlushFileBuffers (hFile=0x21c) returned 1 [0216.089] CloseHandle (hObject=0x2b0) returned 1 [0216.089] CloseHandle (hObject=0x21c) returned 1 [0216.089] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315580.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315580.jpg")) returned 1 [0216.090] SetEvent (hEvent=0x27c) returned 1 [0216.090] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315612.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315612.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0216.091] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=16954) returned 1 [0216.091] CloseHandle (hObject=0x21c) returned 1 [0216.091] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315612.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315612.jpg")) returned 0x220 [0216.092] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315612.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315612.jpg")) returned 0x220 [0216.092] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315612.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315612.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.092] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315612.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315612.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0216.092] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.092] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.092] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315612.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315612.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0216.093] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x423a, lpOverlapped=0x0) returned 1 [0216.108] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4240, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4240, lpOverlapped=0x0) returned 1 [0216.110] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0216.110] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.110] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.110] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x423a, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x423a, lpOverlapped=0x0) returned 1 [0216.110] FlushFileBuffers (hFile=0x21c) returned 1 [0216.113] FlushFileBuffers (hFile=0x2b0) returned 1 [0216.114] CloseHandle (hObject=0x21c) returned 1 [0216.114] CloseHandle (hObject=0x2b0) returned 1 [0216.114] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315612.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315612.jpg")) returned 1 [0216.115] SetEvent (hEvent=0x27c) returned 1 [0216.115] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318448.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318448.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0216.116] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=16768) returned 1 [0216.116] CloseHandle (hObject=0x2b0) returned 1 [0216.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318448.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318448.wmf")) returned 0x220 [0216.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318448.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318448.wmf")) returned 0x220 [0216.117] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318448.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318448.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.117] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318448.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318448.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0216.117] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.117] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.117] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318448.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318448.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0216.118] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4180, lpOverlapped=0x0) returned 1 [0216.120] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4190, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4190, lpOverlapped=0x0) returned 1 [0216.121] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0216.122] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.122] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.122] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4180, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4180, lpOverlapped=0x0) returned 1 [0216.122] FlushFileBuffers (hFile=0x2b0) returned 1 [0216.124] FlushFileBuffers (hFile=0x21c) returned 1 [0216.125] CloseHandle (hObject=0x2b0) returned 1 [0216.126] CloseHandle (hObject=0x21c) returned 1 [0216.126] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318448.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318448.wmf")) returned 1 [0216.127] SetEvent (hEvent=0x27c) returned 1 [0216.127] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318804.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318804.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0216.128] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=11770) returned 1 [0216.128] CloseHandle (hObject=0x21c) returned 1 [0216.128] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318804.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318804.wmf")) returned 0x220 [0216.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318804.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318804.wmf")) returned 0x220 [0216.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318804.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318804.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.129] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318804.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318804.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0216.129] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.129] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.129] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318804.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318804.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0216.130] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2dfa, lpOverlapped=0x0) returned 1 [0216.131] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2e00, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2e00, lpOverlapped=0x0) returned 1 [0216.132] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0216.133] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.133] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.133] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2dfa, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2dfa, lpOverlapped=0x0) returned 1 [0216.133] FlushFileBuffers (hFile=0x21c) returned 1 [0216.135] FlushFileBuffers (hFile=0x2b0) returned 1 [0216.136] CloseHandle (hObject=0x21c) returned 1 [0216.136] CloseHandle (hObject=0x2b0) returned 1 [0216.136] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318804.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318804.wmf")) returned 1 [0216.137] SetEvent (hEvent=0x27c) returned 1 [0216.137] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318810.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318810.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0216.138] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=10430) returned 1 [0216.139] CloseHandle (hObject=0x2b0) returned 1 [0216.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318810.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318810.wmf")) returned 0x220 [0216.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318810.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318810.wmf")) returned 0x220 [0216.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318810.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318810.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.139] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318810.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318810.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0216.139] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.139] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.139] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318810.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318810.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0216.140] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x28be, lpOverlapped=0x0) returned 1 [0216.142] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x28c0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x28c0, lpOverlapped=0x0) returned 1 [0216.143] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0216.143] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.143] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.143] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x28be, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x28be, lpOverlapped=0x0) returned 1 [0216.143] FlushFileBuffers (hFile=0x2b0) returned 1 [0216.147] FlushFileBuffers (hFile=0x21c) returned 1 [0216.148] CloseHandle (hObject=0x2b0) returned 1 [0216.148] CloseHandle (hObject=0x21c) returned 1 [0216.148] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318810.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318810.wmf")) returned 1 [0216.149] SetEvent (hEvent=0x27c) returned 1 [0216.150] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0321179.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0321179.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0216.150] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=9431) returned 1 [0216.150] CloseHandle (hObject=0x21c) returned 1 [0216.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0321179.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0321179.jpg")) returned 0x220 [0216.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0321179.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0321179.jpg")) returned 0x220 [0216.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0321179.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0321179.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.151] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0321179.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0321179.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0216.151] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.151] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.151] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0321179.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0321179.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0216.151] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x24d7, lpOverlapped=0x0) returned 1 [0216.153] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x24e0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x24e0, lpOverlapped=0x0) returned 1 [0216.154] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0216.154] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.154] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.154] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x24d7, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x24d7, lpOverlapped=0x0) returned 1 [0216.154] FlushFileBuffers (hFile=0x21c) returned 1 [0216.157] FlushFileBuffers (hFile=0x2b0) returned 1 [0216.159] CloseHandle (hObject=0x21c) returned 1 [0216.159] CloseHandle (hObject=0x2b0) returned 1 [0216.159] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0321179.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0321179.jpg")) returned 1 [0216.160] SetEvent (hEvent=0x27c) returned 1 [0216.160] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324694.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0324694.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0216.161] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=12280) returned 1 [0216.161] CloseHandle (hObject=0x2b0) returned 1 [0216.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324694.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0324694.wmf")) returned 0x220 [0216.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324694.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0324694.wmf")) returned 0x220 [0216.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324694.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0324694.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.161] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324694.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0324694.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0216.161] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.161] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.161] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324694.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0324694.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0216.162] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2ff8, lpOverlapped=0x0) returned 1 [0216.164] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3000, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3000, lpOverlapped=0x0) returned 1 [0216.165] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0216.165] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.165] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.165] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2ff8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2ff8, lpOverlapped=0x0) returned 1 [0216.165] FlushFileBuffers (hFile=0x2b0) returned 1 [0216.167] FlushFileBuffers (hFile=0x21c) returned 1 [0216.168] CloseHandle (hObject=0x2b0) returned 1 [0216.168] CloseHandle (hObject=0x21c) returned 1 [0216.169] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324694.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0324694.wmf")) returned 1 [0216.170] SetEvent (hEvent=0x27c) returned 1 [0216.170] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324704.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0324704.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0216.170] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=11902) returned 1 [0216.170] CloseHandle (hObject=0x21c) returned 1 [0216.171] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324704.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0324704.wmf")) returned 0x220 [0216.171] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324704.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0324704.wmf")) returned 0x220 [0216.171] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324704.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0324704.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.171] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324704.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0324704.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0216.171] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.171] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.171] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324704.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0324704.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0216.183] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2e7e, lpOverlapped=0x0) returned 1 [0216.185] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2e80, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2e80, lpOverlapped=0x0) returned 1 [0216.186] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0216.186] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.186] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.186] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2e7e, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2e7e, lpOverlapped=0x0) returned 1 [0216.186] FlushFileBuffers (hFile=0x21c) returned 1 [0216.190] FlushFileBuffers (hFile=0x2b0) returned 1 [0216.194] CloseHandle (hObject=0x21c) returned 1 [0216.195] CloseHandle (hObject=0x2b0) returned 1 [0216.195] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324704.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0324704.wmf")) returned 1 [0216.196] SetEvent (hEvent=0x27c) returned 1 [0216.196] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0337280.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0337280.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0216.197] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=12896) returned 1 [0216.197] CloseHandle (hObject=0x2b0) returned 1 [0216.198] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0337280.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0337280.jpg")) returned 0x220 [0216.198] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0337280.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0337280.jpg")) returned 0x220 [0216.198] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0337280.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0337280.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.198] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0337280.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0337280.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0216.198] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.198] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.198] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0337280.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0337280.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0216.199] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x3260, lpOverlapped=0x0) returned 1 [0216.201] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3270, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3270, lpOverlapped=0x0) returned 1 [0216.202] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0216.202] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.202] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.202] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3260, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x3260, lpOverlapped=0x0) returned 1 [0216.203] FlushFileBuffers (hFile=0x2b0) returned 1 [0216.205] FlushFileBuffers (hFile=0x21c) returned 1 [0216.206] CloseHandle (hObject=0x2b0) returned 1 [0216.206] CloseHandle (hObject=0x21c) returned 1 [0216.206] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0337280.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0337280.jpg")) returned 1 [0216.207] SetEvent (hEvent=0x27c) returned 1 [0216.207] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341328.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341328.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0216.209] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=10196) returned 1 [0216.209] CloseHandle (hObject=0x21c) returned 1 [0216.209] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341328.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341328.jpg")) returned 0x220 [0216.209] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341328.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341328.jpg")) returned 0x220 [0216.209] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341328.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341328.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.209] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341328.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341328.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0216.209] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.209] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.209] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341328.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341328.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0216.210] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x27d4, lpOverlapped=0x0) returned 1 [0216.212] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x27e0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x27e0, lpOverlapped=0x0) returned 1 [0216.213] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0216.214] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.214] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.214] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x27d4, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x27d4, lpOverlapped=0x0) returned 1 [0216.214] FlushFileBuffers (hFile=0x21c) returned 1 [0216.216] FlushFileBuffers (hFile=0x2b0) returned 1 [0216.217] CloseHandle (hObject=0x21c) returned 1 [0216.217] CloseHandle (hObject=0x2b0) returned 1 [0216.218] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341328.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341328.jpg")) returned 1 [0216.219] SetEvent (hEvent=0x27c) returned 1 [0216.219] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341344.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341344.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0216.220] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=11485) returned 1 [0216.220] CloseHandle (hObject=0x2b0) returned 1 [0216.220] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341344.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341344.jpg")) returned 0x220 [0216.220] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341344.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341344.jpg")) returned 0x220 [0216.220] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341344.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341344.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.220] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341344.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341344.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0216.220] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.220] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.220] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341344.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341344.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0216.221] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2cdd, lpOverlapped=0x0) returned 1 [0216.222] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2ce0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2ce0, lpOverlapped=0x0) returned 1 [0216.223] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0216.224] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.224] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.224] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2cdd, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2cdd, lpOverlapped=0x0) returned 1 [0216.224] FlushFileBuffers (hFile=0x2b0) returned 1 [0216.226] FlushFileBuffers (hFile=0x21c) returned 1 [0216.227] CloseHandle (hObject=0x2b0) returned 1 [0216.227] CloseHandle (hObject=0x21c) returned 1 [0216.228] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341344.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341344.jpg")) returned 1 [0216.228] SetEvent (hEvent=0x27c) returned 1 [0216.229] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341439.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341439.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0216.229] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=19565) returned 1 [0216.229] CloseHandle (hObject=0x21c) returned 1 [0216.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341439.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341439.jpg")) returned 0x220 [0216.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341439.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341439.jpg")) returned 0x220 [0216.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341439.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341439.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.230] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341439.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341439.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0216.230] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.230] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.230] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341439.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341439.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0216.231] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4c6d, lpOverlapped=0x0) returned 1 [0216.232] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4c70, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4c70, lpOverlapped=0x0) returned 1 [0216.237] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0216.238] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.238] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.238] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4c6d, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4c6d, lpOverlapped=0x0) returned 1 [0216.238] FlushFileBuffers (hFile=0x21c) returned 1 [0216.243] FlushFileBuffers (hFile=0x2b0) returned 1 [0216.244] CloseHandle (hObject=0x21c) returned 1 [0216.244] CloseHandle (hObject=0x2b0) returned 1 [0216.244] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341439.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341439.jpg")) returned 1 [0216.245] SetEvent (hEvent=0x27c) returned 1 [0216.245] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341447.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341447.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0216.246] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=19160) returned 1 [0216.246] CloseHandle (hObject=0x2b0) returned 1 [0216.246] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341447.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341447.jpg")) returned 0x220 [0216.246] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341447.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341447.jpg")) returned 0x220 [0216.246] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341447.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341447.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.247] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341447.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341447.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0216.247] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.247] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.247] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341447.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341447.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0216.247] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4ad8, lpOverlapped=0x0) returned 1 [0216.249] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4ae0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4ae0, lpOverlapped=0x0) returned 1 [0216.251] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0216.251] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.251] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.251] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4ad8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4ad8, lpOverlapped=0x0) returned 1 [0216.251] FlushFileBuffers (hFile=0x2b0) returned 1 [0216.253] FlushFileBuffers (hFile=0x21c) returned 1 [0216.254] CloseHandle (hObject=0x2b0) returned 1 [0216.254] CloseHandle (hObject=0x21c) returned 1 [0216.254] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341447.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341447.jpg")) returned 1 [0216.255] SetEvent (hEvent=0x27c) returned 1 [0216.255] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341448.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341448.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0216.256] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=21187) returned 1 [0216.256] CloseHandle (hObject=0x21c) returned 1 [0216.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341448.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341448.jpg")) returned 0x220 [0216.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341448.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341448.jpg")) returned 0x220 [0216.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341448.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341448.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.257] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341448.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341448.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0216.257] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.257] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.257] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341448.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341448.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0216.258] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x52c3, lpOverlapped=0x0) returned 1 [0216.260] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x52d0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x52d0, lpOverlapped=0x0) returned 1 [0216.261] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0216.261] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.262] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.262] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x52c3, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x52c3, lpOverlapped=0x0) returned 1 [0216.262] FlushFileBuffers (hFile=0x21c) returned 1 [0216.264] FlushFileBuffers (hFile=0x2b0) returned 1 [0216.266] CloseHandle (hObject=0x21c) returned 1 [0216.266] CloseHandle (hObject=0x2b0) returned 1 [0216.266] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341448.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341448.jpg")) returned 1 [0216.267] SetEvent (hEvent=0x27c) returned 1 [0216.267] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341455.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341455.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0216.269] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=29783) returned 1 [0216.269] CloseHandle (hObject=0x2b0) returned 1 [0216.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341455.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341455.jpg")) returned 0x220 [0216.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341455.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341455.jpg")) returned 0x220 [0216.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341455.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341455.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.269] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341455.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341455.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0216.269] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.269] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.269] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341455.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341455.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0216.270] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x7457, lpOverlapped=0x0) returned 1 [0216.273] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7460, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x7460, lpOverlapped=0x0) returned 1 [0216.274] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0216.275] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.275] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.275] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7457, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x7457, lpOverlapped=0x0) returned 1 [0216.275] FlushFileBuffers (hFile=0x2b0) returned 1 [0216.277] FlushFileBuffers (hFile=0x21c) returned 1 [0216.279] CloseHandle (hObject=0x2b0) returned 1 [0216.279] CloseHandle (hObject=0x21c) returned 1 [0216.279] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341455.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341455.jpg")) returned 1 [0216.280] SetEvent (hEvent=0x27c) returned 1 [0216.280] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341475.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341475.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0216.281] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=43490) returned 1 [0216.281] CloseHandle (hObject=0x21c) returned 1 [0216.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341475.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341475.jpg")) returned 0x220 [0216.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341475.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341475.jpg")) returned 0x220 [0216.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341475.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341475.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.282] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341475.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341475.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0216.282] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.282] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.282] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341475.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341475.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0216.283] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xa9e2, lpOverlapped=0x0) returned 1 [0216.286] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xa9f0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xa9f0, lpOverlapped=0x0) returned 1 [0216.287] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0216.288] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.288] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.288] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xa9e2, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xa9e2, lpOverlapped=0x0) returned 1 [0216.288] FlushFileBuffers (hFile=0x21c) returned 1 [0216.290] FlushFileBuffers (hFile=0x2b0) returned 1 [0216.292] CloseHandle (hObject=0x21c) returned 1 [0216.292] CloseHandle (hObject=0x2b0) returned 1 [0216.292] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341475.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341475.jpg")) returned 1 [0216.293] SetEvent (hEvent=0x27c) returned 1 [0216.293] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341499.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341499.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0216.294] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=16099) returned 1 [0216.294] CloseHandle (hObject=0x2b0) returned 1 [0216.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341499.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341499.jpg")) returned 0x220 [0216.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341499.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341499.jpg")) returned 0x220 [0216.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341499.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341499.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.294] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341499.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341499.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0216.294] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.294] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.294] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341499.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341499.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0216.295] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x3ee3, lpOverlapped=0x0) returned 1 [0216.330] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3ef0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3ef0, lpOverlapped=0x0) returned 1 [0216.332] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0216.332] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.332] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.332] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3ee3, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x3ee3, lpOverlapped=0x0) returned 1 [0216.332] FlushFileBuffers (hFile=0x2b0) returned 1 [0216.336] FlushFileBuffers (hFile=0x21c) returned 1 [0216.337] CloseHandle (hObject=0x2b0) returned 1 [0216.337] CloseHandle (hObject=0x21c) returned 1 [0216.338] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341499.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341499.jpg")) returned 1 [0216.339] SetEvent (hEvent=0x27c) returned 1 [0216.339] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341534.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341534.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0216.341] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=8074) returned 1 [0216.341] CloseHandle (hObject=0x21c) returned 1 [0216.341] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341534.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341534.jpg")) returned 0x220 [0216.341] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341534.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341534.jpg")) returned 0x220 [0216.341] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341534.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341534.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.342] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341534.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341534.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0216.342] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.342] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.342] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341534.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341534.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0216.343] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1f8a, lpOverlapped=0x0) returned 1 [0216.352] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1f90, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1f90, lpOverlapped=0x0) returned 1 [0216.353] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0216.353] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.353] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.353] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1f8a, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1f8a, lpOverlapped=0x0) returned 1 [0216.354] FlushFileBuffers (hFile=0x21c) returned 1 [0216.356] FlushFileBuffers (hFile=0x2b0) returned 1 [0216.357] CloseHandle (hObject=0x21c) returned 1 [0216.357] CloseHandle (hObject=0x2b0) returned 1 [0216.357] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341534.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341534.jpg")) returned 1 [0216.358] SetEvent (hEvent=0x27c) returned 1 [0216.358] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341551.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341551.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0216.360] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=23126) returned 1 [0216.360] CloseHandle (hObject=0x2b0) returned 1 [0216.360] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341551.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341551.jpg")) returned 0x220 [0216.360] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341551.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341551.jpg")) returned 0x220 [0216.360] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341551.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341551.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.360] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341551.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341551.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0216.360] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.361] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.361] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341551.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341551.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0216.362] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x5a56, lpOverlapped=0x0) returned 1 [0216.365] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5a60, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x5a60, lpOverlapped=0x0) returned 1 [0216.366] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0216.366] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.366] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.366] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5a56, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x5a56, lpOverlapped=0x0) returned 1 [0216.367] FlushFileBuffers (hFile=0x2b0) returned 1 [0216.372] FlushFileBuffers (hFile=0x21c) returned 1 [0216.374] CloseHandle (hObject=0x2b0) returned 1 [0216.374] CloseHandle (hObject=0x21c) returned 1 [0216.374] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341551.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341551.jpg")) returned 1 [0216.375] SetEvent (hEvent=0x27c) returned 1 [0216.375] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341554.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341554.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0216.377] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=28483) returned 1 [0216.377] CloseHandle (hObject=0x21c) returned 1 [0216.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341554.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341554.jpg")) returned 0x220 [0216.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341554.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341554.jpg")) returned 0x220 [0216.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341554.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341554.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.377] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341554.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341554.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0216.377] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.377] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.377] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341554.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341554.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0216.378] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x6f43, lpOverlapped=0x0) returned 1 [0216.381] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x6f50, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x6f50, lpOverlapped=0x0) returned 1 [0216.383] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0216.383] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.383] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.383] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x6f43, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x6f43, lpOverlapped=0x0) returned 1 [0216.384] FlushFileBuffers (hFile=0x21c) returned 1 [0216.394] FlushFileBuffers (hFile=0x2b0) returned 1 [0216.397] CloseHandle (hObject=0x21c) returned 1 [0216.397] CloseHandle (hObject=0x2b0) returned 1 [0216.397] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341554.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341554.jpg")) returned 1 [0216.398] SetEvent (hEvent=0x27c) returned 1 [0216.398] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341559.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341559.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0216.399] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=26739) returned 1 [0216.399] CloseHandle (hObject=0x2b0) returned 1 [0216.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341559.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341559.jpg")) returned 0x220 [0216.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341559.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341559.jpg")) returned 0x220 [0216.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341559.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341559.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.399] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341559.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341559.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0216.400] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.400] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.400] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341559.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341559.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0216.401] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x6873, lpOverlapped=0x0) returned 1 [0216.403] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x6880, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x6880, lpOverlapped=0x0) returned 1 [0216.404] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0216.405] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.405] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.405] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x6873, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x6873, lpOverlapped=0x0) returned 1 [0216.405] FlushFileBuffers (hFile=0x2b0) returned 1 [0216.415] FlushFileBuffers (hFile=0x21c) returned 1 [0216.418] CloseHandle (hObject=0x2b0) returned 1 [0216.418] CloseHandle (hObject=0x21c) returned 1 [0216.418] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341559.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341559.jpg")) returned 1 [0216.420] SetEvent (hEvent=0x27c) returned 1 [0216.420] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341634.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341634.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0216.422] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=7803) returned 1 [0216.422] CloseHandle (hObject=0x21c) returned 1 [0216.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341634.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341634.jpg")) returned 0x220 [0216.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341634.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341634.jpg")) returned 0x220 [0216.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341634.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341634.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.422] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341634.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341634.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0216.422] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.422] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.422] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341634.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341634.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0216.423] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1e7b, lpOverlapped=0x0) returned 1 [0216.426] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1e80, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1e80, lpOverlapped=0x0) returned 1 [0216.427] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0216.428] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.428] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.428] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1e7b, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1e7b, lpOverlapped=0x0) returned 1 [0216.428] FlushFileBuffers (hFile=0x21c) returned 1 [0216.439] FlushFileBuffers (hFile=0x2b0) returned 1 [0216.442] CloseHandle (hObject=0x21c) returned 1 [0216.442] CloseHandle (hObject=0x2b0) returned 1 [0216.442] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341634.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341634.jpg")) returned 1 [0216.443] SetEvent (hEvent=0x27c) returned 1 [0216.443] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341645.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341645.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0216.444] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=8230) returned 1 [0216.444] CloseHandle (hObject=0x2b0) returned 1 [0216.444] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341645.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341645.jpg")) returned 0x220 [0216.444] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341645.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341645.jpg")) returned 0x220 [0216.445] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341645.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341645.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.445] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341645.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341645.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0216.445] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.445] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.445] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341645.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341645.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0216.446] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2026, lpOverlapped=0x0) returned 1 [0216.449] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2030, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2030, lpOverlapped=0x0) returned 1 [0216.450] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0216.450] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.450] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.450] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2026, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2026, lpOverlapped=0x0) returned 1 [0216.450] FlushFileBuffers (hFile=0x2b0) returned 1 [0216.458] FlushFileBuffers (hFile=0x21c) returned 1 [0216.460] CloseHandle (hObject=0x2b0) returned 1 [0216.460] CloseHandle (hObject=0x21c) returned 1 [0216.460] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341645.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341645.jpg")) returned 1 [0216.461] SetEvent (hEvent=0x27c) returned 1 [0216.462] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341654.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341654.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0216.463] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=15743) returned 1 [0216.463] CloseHandle (hObject=0x21c) returned 1 [0216.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341654.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341654.jpg")) returned 0x220 [0216.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341654.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341654.jpg")) returned 0x220 [0216.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341654.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341654.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.463] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341654.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341654.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0216.464] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.464] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.464] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341654.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341654.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0216.464] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x3d7f, lpOverlapped=0x0) returned 1 [0216.467] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3d80, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3d80, lpOverlapped=0x0) returned 1 [0216.468] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0216.469] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.469] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.469] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3d7f, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x3d7f, lpOverlapped=0x0) returned 1 [0216.469] FlushFileBuffers (hFile=0x21c) returned 1 [0216.651] FlushFileBuffers (hFile=0x2b0) returned 1 [0216.652] CloseHandle (hObject=0x21c) returned 1 [0216.653] CloseHandle (hObject=0x2b0) returned 1 [0216.653] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341654.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341654.jpg")) returned 1 [0216.654] SetEvent (hEvent=0x27c) returned 1 [0216.654] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382942.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382942.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0216.656] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=91450) returned 1 [0216.656] CloseHandle (hObject=0x2b0) returned 1 [0216.656] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382942.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382942.jpg")) returned 0x220 [0216.656] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382942.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382942.jpg")) returned 0x220 [0216.656] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382942.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382942.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.656] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382942.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382942.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0216.656] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.657] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.657] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382942.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382942.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0216.658] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1653a, lpOverlapped=0x0) returned 1 [0216.662] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x16540, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x16540, lpOverlapped=0x0) returned 1 [0216.664] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0216.665] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.665] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.665] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1653a, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1653a, lpOverlapped=0x0) returned 1 [0216.665] FlushFileBuffers (hFile=0x2b0) returned 1 [0216.668] FlushFileBuffers (hFile=0x21c) returned 1 [0216.669] CloseHandle (hObject=0x2b0) returned 1 [0216.670] CloseHandle (hObject=0x21c) returned 1 [0216.670] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382942.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382942.jpg")) returned 1 [0216.671] SetEvent (hEvent=0x27c) returned 1 [0216.671] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382944.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382944.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0216.672] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=81437) returned 1 [0216.672] CloseHandle (hObject=0x21c) returned 1 [0216.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382944.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382944.jpg")) returned 0x220 [0216.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382944.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382944.jpg")) returned 0x220 [0216.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382944.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382944.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.673] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382944.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382944.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0216.673] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.673] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.673] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382944.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382944.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0216.674] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x13e1d, lpOverlapped=0x0) returned 1 [0216.678] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x13e20, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x13e20, lpOverlapped=0x0) returned 1 [0216.680] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0216.681] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.681] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.681] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x13e1d, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x13e1d, lpOverlapped=0x0) returned 1 [0216.681] FlushFileBuffers (hFile=0x21c) returned 1 [0216.684] FlushFileBuffers (hFile=0x2b0) returned 1 [0216.685] CloseHandle (hObject=0x21c) returned 1 [0216.685] CloseHandle (hObject=0x2b0) returned 1 [0216.685] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382944.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382944.jpg")) returned 1 [0216.687] SetEvent (hEvent=0x27c) returned 1 [0216.687] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382947.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382947.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0216.688] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=86812) returned 1 [0216.688] CloseHandle (hObject=0x2b0) returned 1 [0216.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382947.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382947.jpg")) returned 0x220 [0216.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382947.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382947.jpg")) returned 0x220 [0216.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382947.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382947.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.689] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382947.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382947.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0216.689] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.689] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.689] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382947.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382947.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0216.690] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1531c, lpOverlapped=0x0) returned 1 [0216.695] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x15320, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x15320, lpOverlapped=0x0) returned 1 [0216.697] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0216.697] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.698] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.698] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1531c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1531c, lpOverlapped=0x0) returned 1 [0216.698] FlushFileBuffers (hFile=0x2b0) returned 1 [0216.705] FlushFileBuffers (hFile=0x21c) returned 1 [0216.709] CloseHandle (hObject=0x2b0) returned 1 [0216.710] CloseHandle (hObject=0x21c) returned 1 [0216.710] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382947.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382947.jpg")) returned 1 [0216.715] SetEvent (hEvent=0x27c) returned 1 [0216.715] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382948.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382948.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0216.717] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=109879) returned 1 [0216.717] CloseHandle (hObject=0x21c) returned 1 [0216.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382948.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382948.jpg")) returned 0x220 [0216.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382948.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382948.jpg")) returned 0x220 [0216.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382948.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382948.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.717] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382948.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382948.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0216.717] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.717] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.717] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382948.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382948.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0216.719] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1ad37, lpOverlapped=0x0) returned 1 [0216.723] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1ad40, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1ad40, lpOverlapped=0x0) returned 1 [0216.726] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0216.726] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.726] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.726] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1ad37, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1ad37, lpOverlapped=0x0) returned 1 [0216.727] FlushFileBuffers (hFile=0x21c) returned 1 [0216.731] FlushFileBuffers (hFile=0x2b0) returned 1 [0216.733] CloseHandle (hObject=0x21c) returned 1 [0216.733] CloseHandle (hObject=0x2b0) returned 1 [0216.734] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382948.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382948.jpg")) returned 1 [0216.735] SetEvent (hEvent=0x27c) returned 1 [0216.736] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382950.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382950.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0216.737] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=96466) returned 1 [0216.737] CloseHandle (hObject=0x2b0) returned 1 [0216.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382950.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382950.jpg")) returned 0x220 [0216.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382950.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382950.jpg")) returned 0x220 [0216.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382950.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382950.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.737] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382950.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382950.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0216.737] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.737] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.737] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382950.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382950.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0216.739] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x178d2, lpOverlapped=0x0) returned 1 [0216.759] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x178e0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x178e0, lpOverlapped=0x0) returned 1 [0216.762] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0216.762] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.762] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.762] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x178d2, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x178d2, lpOverlapped=0x0) returned 1 [0216.763] FlushFileBuffers (hFile=0x2b0) returned 1 [0216.773] FlushFileBuffers (hFile=0x21c) returned 1 [0216.775] CloseHandle (hObject=0x2b0) returned 1 [0216.775] CloseHandle (hObject=0x21c) returned 1 [0216.776] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382950.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382950.jpg")) returned 1 [0216.778] SetEvent (hEvent=0x27c) returned 1 [0216.778] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382952.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382952.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0216.779] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=96073) returned 1 [0216.779] CloseHandle (hObject=0x21c) returned 1 [0216.779] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382952.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382952.jpg")) returned 0x220 [0216.780] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382952.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382952.jpg")) returned 0x220 [0216.780] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382952.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382952.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.780] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382952.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382952.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0216.780] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.780] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.780] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382952.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382952.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0216.781] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x17749, lpOverlapped=0x0) returned 1 [0216.787] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x17750, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x17750, lpOverlapped=0x0) returned 1 [0216.789] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0216.790] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.790] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.790] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x17749, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x17749, lpOverlapped=0x0) returned 1 [0216.790] FlushFileBuffers (hFile=0x21c) returned 1 [0216.802] FlushFileBuffers (hFile=0x2b0) returned 1 [0216.809] CloseHandle (hObject=0x21c) returned 1 [0216.809] CloseHandle (hObject=0x2b0) returned 1 [0216.809] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382952.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382952.jpg")) returned 1 [0216.811] SetEvent (hEvent=0x27c) returned 1 [0216.811] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382955.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382955.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0216.816] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=90095) returned 1 [0216.816] CloseHandle (hObject=0x2b0) returned 1 [0216.816] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382955.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382955.jpg")) returned 0x220 [0216.816] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382955.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382955.jpg")) returned 0x220 [0216.816] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382955.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382955.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.816] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382955.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382955.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0216.816] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.816] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.816] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382955.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382955.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0216.817] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x15fef, lpOverlapped=0x0) returned 1 [0216.821] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x15ff0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x15ff0, lpOverlapped=0x0) returned 1 [0216.824] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0216.824] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.824] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.824] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x15fef, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x15fef, lpOverlapped=0x0) returned 1 [0216.825] FlushFileBuffers (hFile=0x2b0) returned 1 [0216.835] FlushFileBuffers (hFile=0x21c) returned 1 [0216.844] CloseHandle (hObject=0x2b0) returned 1 [0216.844] CloseHandle (hObject=0x21c) returned 1 [0216.844] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382955.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382955.jpg")) returned 1 [0216.846] SetEvent (hEvent=0x27c) returned 1 [0216.846] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382958.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382958.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0216.861] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=103399) returned 1 [0216.861] CloseHandle (hObject=0x21c) returned 1 [0216.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382958.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382958.jpg")) returned 0x220 [0216.862] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382958.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382958.jpg")) returned 0x220 [0216.862] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382958.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382958.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.862] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382958.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382958.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0216.862] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.862] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.862] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382958.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382958.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0216.863] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x193e7, lpOverlapped=0x0) returned 1 [0216.868] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x193f0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x193f0, lpOverlapped=0x0) returned 1 [0216.871] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0216.871] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.871] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.871] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x193e7, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x193e7, lpOverlapped=0x0) returned 1 [0216.872] FlushFileBuffers (hFile=0x21c) returned 1 [0216.876] FlushFileBuffers (hFile=0x2b0) returned 1 [0216.889] CloseHandle (hObject=0x21c) returned 1 [0216.889] CloseHandle (hObject=0x2b0) returned 1 [0216.890] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382958.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382958.jpg")) returned 1 [0216.891] SetEvent (hEvent=0x27c) returned 1 [0216.892] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382960.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382960.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0216.894] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=107508) returned 1 [0216.894] CloseHandle (hObject=0x2b0) returned 1 [0216.894] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382960.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382960.jpg")) returned 0x220 [0216.894] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382960.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382960.jpg")) returned 0x220 [0216.894] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382960.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382960.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.894] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382960.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382960.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0216.894] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.894] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.894] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382960.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382960.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0216.895] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1a3f4, lpOverlapped=0x0) returned 1 [0216.900] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1a400, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1a400, lpOverlapped=0x0) returned 1 [0216.903] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0216.903] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.903] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.903] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1a3f4, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1a3f4, lpOverlapped=0x0) returned 1 [0216.903] FlushFileBuffers (hFile=0x2b0) returned 1 [0216.923] FlushFileBuffers (hFile=0x21c) returned 1 [0216.926] CloseHandle (hObject=0x2b0) returned 1 [0216.926] CloseHandle (hObject=0x21c) returned 1 [0216.926] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382960.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382960.jpg")) returned 1 [0216.928] SetEvent (hEvent=0x27c) returned 1 [0216.928] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382962.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382962.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0216.929] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=114423) returned 1 [0216.929] CloseHandle (hObject=0x21c) returned 1 [0216.929] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382962.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382962.jpg")) returned 0x220 [0216.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382962.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382962.jpg")) returned 0x220 [0216.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382962.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382962.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.930] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382962.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382962.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0216.930] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.930] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.930] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382962.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382962.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0216.931] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1bef7, lpOverlapped=0x0) returned 1 [0216.936] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1bf00, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1bf00, lpOverlapped=0x0) returned 1 [0216.939] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0216.939] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.939] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.939] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1bef7, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1bef7, lpOverlapped=0x0) returned 1 [0216.940] FlushFileBuffers (hFile=0x21c) returned 1 [0216.961] FlushFileBuffers (hFile=0x2b0) returned 1 [0216.966] CloseHandle (hObject=0x21c) returned 1 [0216.966] CloseHandle (hObject=0x2b0) returned 1 [0216.966] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382962.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382962.jpg")) returned 1 [0216.967] SetEvent (hEvent=0x27c) returned 1 [0216.968] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382965.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382965.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0216.970] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=113410) returned 1 [0216.970] CloseHandle (hObject=0x2b0) returned 1 [0216.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382965.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382965.jpg")) returned 0x220 [0216.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382965.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382965.jpg")) returned 0x220 [0216.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382965.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382965.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.971] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382965.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382965.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0216.971] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.971] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0216.971] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382965.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382965.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0216.972] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1bb02, lpOverlapped=0x0) returned 1 [0216.977] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1bb10, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1bb10, lpOverlapped=0x0) returned 1 [0216.980] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0216.980] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.980] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0216.980] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1bb02, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1bb02, lpOverlapped=0x0) returned 1 [0216.981] FlushFileBuffers (hFile=0x2b0) returned 1 [0216.999] FlushFileBuffers (hFile=0x21c) returned 1 [0217.001] CloseHandle (hObject=0x2b0) returned 1 [0217.001] CloseHandle (hObject=0x21c) returned 1 [0217.001] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382965.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382965.jpg")) returned 1 [0217.003] SetEvent (hEvent=0x27c) returned 1 [0217.003] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382967.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382967.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0217.005] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=93448) returned 1 [0217.005] CloseHandle (hObject=0x21c) returned 1 [0217.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382967.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382967.jpg")) returned 0x220 [0217.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382967.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382967.jpg")) returned 0x220 [0217.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382967.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382967.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.005] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382967.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382967.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0217.006] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0217.006] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0217.006] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382967.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382967.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0217.007] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x16d08, lpOverlapped=0x0) returned 1 [0217.012] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x16d10, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x16d10, lpOverlapped=0x0) returned 1 [0217.014] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0217.014] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0217.014] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0217.014] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x16d08, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x16d08, lpOverlapped=0x0) returned 1 [0217.014] FlushFileBuffers (hFile=0x21c) returned 1 [0217.029] FlushFileBuffers (hFile=0x2b0) returned 1 [0217.031] CloseHandle (hObject=0x21c) returned 1 [0217.031] CloseHandle (hObject=0x2b0) returned 1 [0217.031] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382967.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382967.jpg")) returned 1 [0217.033] SetEvent (hEvent=0x27c) returned 1 [0217.033] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382969.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382969.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0217.034] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=96159) returned 1 [0217.034] CloseHandle (hObject=0x2b0) returned 1 [0217.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382969.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382969.jpg")) returned 0x220 [0217.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382969.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382969.jpg")) returned 0x220 [0217.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382969.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382969.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.034] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382969.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382969.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0217.034] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0217.034] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0217.034] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382969.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382969.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0217.035] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1779f, lpOverlapped=0x0) returned 1 [0217.042] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x177a0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x177a0, lpOverlapped=0x0) returned 1 [0217.044] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0217.044] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0217.045] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0217.045] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1779f, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1779f, lpOverlapped=0x0) returned 1 [0217.045] FlushFileBuffers (hFile=0x2b0) returned 1 [0217.053] FlushFileBuffers (hFile=0x21c) returned 1 [0217.069] CloseHandle (hObject=0x2b0) returned 1 [0217.069] CloseHandle (hObject=0x21c) returned 1 [0217.069] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382969.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382969.jpg")) returned 1 [0217.071] SetEvent (hEvent=0x27c) returned 1 [0217.071] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384862.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384862.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0217.072] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=102633) returned 1 [0217.072] CloseHandle (hObject=0x21c) returned 1 [0217.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384862.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384862.jpg")) returned 0x220 [0217.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384862.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384862.jpg")) returned 0x220 [0217.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384862.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384862.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.072] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384862.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384862.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0217.072] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0217.072] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0217.072] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384862.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384862.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0217.073] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x190e9, lpOverlapped=0x0) returned 1 [0217.083] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x190f0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x190f0, lpOverlapped=0x0) returned 1 [0217.086] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0217.086] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0217.086] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0217.086] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x190e9, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x190e9, lpOverlapped=0x0) returned 1 [0217.087] FlushFileBuffers (hFile=0x21c) returned 1 [0217.090] FlushFileBuffers (hFile=0x2b0) returned 1 [0217.114] CloseHandle (hObject=0x21c) returned 1 [0217.115] CloseHandle (hObject=0x2b0) returned 1 [0217.115] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384862.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384862.jpg")) returned 1 [0217.116] SetEvent (hEvent=0x27c) returned 1 [0217.116] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384888.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384888.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0217.117] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=81971) returned 1 [0217.117] CloseHandle (hObject=0x2b0) returned 1 [0217.117] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384888.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384888.jpg")) returned 0x220 [0217.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384888.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384888.jpg")) returned 0x220 [0217.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384888.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384888.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.118] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384888.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384888.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0217.118] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0217.118] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0217.118] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384888.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384888.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0217.119] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x14033, lpOverlapped=0x0) returned 1 [0217.123] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x14040, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x14040, lpOverlapped=0x0) returned 1 [0217.125] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0217.126] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0217.126] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0217.126] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x14033, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x14033, lpOverlapped=0x0) returned 1 [0217.126] FlushFileBuffers (hFile=0x2b0) returned 1 [0217.183] FlushFileBuffers (hFile=0x21c) returned 1 [0217.194] CloseHandle (hObject=0x2b0) returned 1 [0217.194] CloseHandle (hObject=0x21c) returned 1 [0217.194] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384888.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384888.jpg")) returned 1 [0217.196] SetEvent (hEvent=0x27c) returned 1 [0217.196] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384900.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384900.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0217.198] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=71552) returned 1 [0217.198] CloseHandle (hObject=0x21c) returned 1 [0217.198] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384900.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384900.jpg")) returned 0x220 [0217.198] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384900.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384900.jpg")) returned 0x220 [0217.198] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384900.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384900.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.198] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384900.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384900.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0217.198] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0217.198] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0217.198] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384900.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384900.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0217.200] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x11780, lpOverlapped=0x0) returned 1 [0217.203] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x11790, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x11790, lpOverlapped=0x0) returned 1 [0217.205] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0217.205] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0217.205] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0217.205] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x11780, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x11780, lpOverlapped=0x0) returned 1 [0217.206] FlushFileBuffers (hFile=0x21c) returned 1 [0217.208] FlushFileBuffers (hFile=0x2b0) returned 1 [0217.210] CloseHandle (hObject=0x21c) returned 1 [0217.210] CloseHandle (hObject=0x2b0) returned 1 [0217.210] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384900.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384900.jpg")) returned 1 [0217.212] SetEvent (hEvent=0x27c) returned 1 [0217.212] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386120.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386120.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0217.213] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=30842) returned 1 [0217.213] CloseHandle (hObject=0x2b0) returned 1 [0217.213] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386120.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386120.jpg")) returned 0x220 [0217.213] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386120.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386120.jpg")) returned 0x220 [0217.213] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386120.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386120.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.213] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386120.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386120.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0217.213] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0217.214] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0217.214] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386120.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386120.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0217.215] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x787a, lpOverlapped=0x0) returned 1 [0217.217] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7880, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x7880, lpOverlapped=0x0) returned 1 [0217.218] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0217.219] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0217.219] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0217.219] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x787a, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x787a, lpOverlapped=0x0) returned 1 [0217.219] FlushFileBuffers (hFile=0x2b0) returned 1 [0217.222] FlushFileBuffers (hFile=0x21c) returned 1 [0217.223] CloseHandle (hObject=0x2b0) returned 1 [0217.223] CloseHandle (hObject=0x21c) returned 1 [0217.223] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386120.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386120.jpg")) returned 1 [0217.224] SetEvent (hEvent=0x27c) returned 1 [0217.224] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386267.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386267.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0217.225] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=43294) returned 1 [0217.225] CloseHandle (hObject=0x21c) returned 1 [0217.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386267.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386267.jpg")) returned 0x220 [0217.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386267.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386267.jpg")) returned 0x220 [0217.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386267.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386267.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.226] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386267.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386267.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0217.226] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0217.226] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0217.226] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386267.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386267.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0217.227] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xa91e, lpOverlapped=0x0) returned 1 [0217.230] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xa920, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xa920, lpOverlapped=0x0) returned 1 [0217.232] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0217.232] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0217.232] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0217.232] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xa91e, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xa91e, lpOverlapped=0x0) returned 1 [0217.232] FlushFileBuffers (hFile=0x21c) returned 1 [0217.235] FlushFileBuffers (hFile=0x2b0) returned 1 [0217.236] CloseHandle (hObject=0x21c) returned 1 [0217.236] CloseHandle (hObject=0x2b0) returned 1 [0217.236] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386267.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386267.jpg")) returned 1 [0217.237] SetEvent (hEvent=0x27c) returned 1 [0217.237] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386270.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386270.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0217.239] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=15171) returned 1 [0217.239] CloseHandle (hObject=0x2b0) returned 1 [0217.239] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386270.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386270.jpg")) returned 0x220 [0217.239] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386270.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386270.jpg")) returned 0x220 [0217.239] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386270.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386270.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.239] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386270.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386270.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0217.239] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0217.239] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0217.239] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386270.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386270.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0217.240] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x3b43, lpOverlapped=0x0) returned 1 [0217.242] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3b50, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3b50, lpOverlapped=0x0) returned 1 [0217.244] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0217.245] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0217.245] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0217.245] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3b43, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x3b43, lpOverlapped=0x0) returned 1 [0217.245] FlushFileBuffers (hFile=0x2b0) returned 1 [0217.247] FlushFileBuffers (hFile=0x21c) returned 1 [0217.248] CloseHandle (hObject=0x2b0) returned 1 [0217.248] CloseHandle (hObject=0x21c) returned 1 [0217.248] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386270.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386270.jpg")) returned 1 [0217.249] SetEvent (hEvent=0x27c) returned 1 [0217.249] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386485.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386485.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0217.250] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=14698) returned 1 [0217.250] CloseHandle (hObject=0x21c) returned 1 [0217.250] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386485.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386485.jpg")) returned 0x220 [0217.250] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386485.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386485.jpg")) returned 0x220 [0217.250] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386485.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386485.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.250] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386485.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386485.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0217.250] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0217.250] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0217.250] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386485.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386485.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0217.251] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x396a, lpOverlapped=0x0) returned 1 [0217.253] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3970, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3970, lpOverlapped=0x0) returned 1 [0217.255] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0217.255] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0217.255] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0217.255] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x396a, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x396a, lpOverlapped=0x0) returned 1 [0217.255] FlushFileBuffers (hFile=0x21c) returned 1 [0217.258] FlushFileBuffers (hFile=0x2b0) returned 1 [0217.259] CloseHandle (hObject=0x21c) returned 1 [0217.259] CloseHandle (hObject=0x2b0) returned 1 [0217.259] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386485.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386485.jpg")) returned 1 [0217.260] SetEvent (hEvent=0x27c) returned 1 [0217.260] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386764.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386764.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0217.261] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=26942) returned 1 [0217.262] CloseHandle (hObject=0x2b0) returned 1 [0217.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386764.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386764.jpg")) returned 0x220 [0217.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386764.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386764.jpg")) returned 0x220 [0217.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386764.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386764.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.262] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386764.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386764.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0217.262] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0217.262] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0217.262] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386764.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386764.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0217.263] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x693e, lpOverlapped=0x0) returned 1 [0217.265] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x6940, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x6940, lpOverlapped=0x0) returned 1 [0217.267] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0217.267] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0217.267] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0217.267] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x693e, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x693e, lpOverlapped=0x0) returned 1 [0217.267] FlushFileBuffers (hFile=0x2b0) returned 1 [0217.270] FlushFileBuffers (hFile=0x21c) returned 1 [0217.271] CloseHandle (hObject=0x2b0) returned 1 [0217.271] CloseHandle (hObject=0x21c) returned 1 [0217.271] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386764.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386764.jpg")) returned 1 [0217.272] SetEvent (hEvent=0x27c) returned 1 [0217.272] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387337.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387337.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0217.274] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=51978) returned 1 [0217.274] CloseHandle (hObject=0x21c) returned 1 [0217.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387337.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387337.jpg")) returned 0x220 [0217.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387337.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387337.jpg")) returned 0x220 [0217.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387337.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387337.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.274] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387337.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387337.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0217.274] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0217.274] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0217.274] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387337.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387337.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0217.275] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xcb0a, lpOverlapped=0x0) returned 1 [0217.278] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xcb10, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xcb10, lpOverlapped=0x0) returned 1 [0217.280] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0217.280] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0217.280] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0217.280] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xcb0a, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xcb0a, lpOverlapped=0x0) returned 1 [0217.280] FlushFileBuffers (hFile=0x21c) returned 1 [0217.284] FlushFileBuffers (hFile=0x2b0) returned 1 [0217.285] CloseHandle (hObject=0x21c) returned 1 [0217.285] CloseHandle (hObject=0x2b0) returned 1 [0217.285] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387337.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387337.jpg")) returned 1 [0217.287] SetEvent (hEvent=0x27c) returned 1 [0217.287] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387578.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387578.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0217.288] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=27884) returned 1 [0217.288] CloseHandle (hObject=0x2b0) returned 1 [0217.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387578.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387578.jpg")) returned 0x220 [0217.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387578.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387578.jpg")) returned 0x220 [0217.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387578.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387578.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387578.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387578.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0217.288] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0217.288] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0217.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387578.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387578.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0217.289] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x6cec, lpOverlapped=0x0) returned 1 [0217.291] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x6cf0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x6cf0, lpOverlapped=0x0) returned 1 [0217.293] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0217.293] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0217.293] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0217.293] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x6cec, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x6cec, lpOverlapped=0x0) returned 1 [0217.293] FlushFileBuffers (hFile=0x2b0) returned 1 [0217.296] FlushFileBuffers (hFile=0x21c) returned 1 [0217.297] CloseHandle (hObject=0x2b0) returned 1 [0217.297] CloseHandle (hObject=0x21c) returned 1 [0217.297] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387578.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387578.jpg")) returned 1 [0217.298] SetEvent (hEvent=0x27c) returned 1 [0217.298] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387591.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387591.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0217.299] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=39111) returned 1 [0217.299] CloseHandle (hObject=0x21c) returned 1 [0217.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387591.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387591.jpg")) returned 0x220 [0217.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387591.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387591.jpg")) returned 0x220 [0217.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387591.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387591.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.299] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387591.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387591.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0217.300] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0217.300] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0217.300] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387591.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387591.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0217.301] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x98c7, lpOverlapped=0x0) returned 1 [0217.303] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x98d0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x98d0, lpOverlapped=0x0) returned 1 [0217.304] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0217.305] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0217.305] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0217.305] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x98c7, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x98c7, lpOverlapped=0x0) returned 1 [0217.305] FlushFileBuffers (hFile=0x21c) returned 1 [0217.307] FlushFileBuffers (hFile=0x2b0) returned 1 [0217.308] CloseHandle (hObject=0x21c) returned 1 [0217.308] CloseHandle (hObject=0x2b0) returned 1 [0217.308] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387591.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387591.jpg")) returned 1 [0217.309] SetEvent (hEvent=0x27c) returned 1 [0217.309] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387604.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387604.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0217.310] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=47551) returned 1 [0217.310] CloseHandle (hObject=0x2b0) returned 1 [0217.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387604.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387604.jpg")) returned 0x220 [0217.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387604.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387604.jpg")) returned 0x220 [0217.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387604.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387604.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.310] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387604.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387604.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0217.310] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0217.310] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0217.311] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387604.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387604.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0217.311] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xb9bf, lpOverlapped=0x0) returned 1 [0217.314] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xb9c0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xb9c0, lpOverlapped=0x0) returned 1 [0217.316] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0217.316] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0217.316] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0217.316] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xb9bf, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xb9bf, lpOverlapped=0x0) returned 1 [0217.316] FlushFileBuffers (hFile=0x2b0) returned 1 [0217.318] FlushFileBuffers (hFile=0x21c) returned 1 [0217.320] CloseHandle (hObject=0x2b0) returned 1 [0217.320] CloseHandle (hObject=0x21c) returned 1 [0217.320] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387604.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387604.jpg")) returned 1 [0217.321] SetEvent (hEvent=0x27c) returned 1 [0217.321] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387882.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387882.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0217.323] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=39148) returned 1 [0217.323] CloseHandle (hObject=0x21c) returned 1 [0217.323] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387882.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387882.jpg")) returned 0x220 [0217.323] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387882.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387882.jpg")) returned 0x220 [0217.323] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387882.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387882.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.323] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387882.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387882.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0217.323] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0217.323] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0217.323] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387882.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387882.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0217.324] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x98ec, lpOverlapped=0x0) returned 1 [0217.326] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x98f0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x98f0, lpOverlapped=0x0) returned 1 [0217.328] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0217.328] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0217.328] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0217.328] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x98ec, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x98ec, lpOverlapped=0x0) returned 1 [0217.329] FlushFileBuffers (hFile=0x21c) returned 1 [0217.331] FlushFileBuffers (hFile=0x2b0) returned 1 [0217.332] CloseHandle (hObject=0x21c) returned 1 [0217.332] CloseHandle (hObject=0x2b0) returned 1 [0217.332] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387882.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387882.jpg")) returned 1 [0217.334] SetEvent (hEvent=0x27c) returned 1 [0217.334] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387895.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0217.335] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=32243) returned 1 [0217.335] CloseHandle (hObject=0x2b0) returned 1 [0217.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387895.jpg")) returned 0x220 [0217.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387895.jpg")) returned 0x220 [0217.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387895.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387895.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.335] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387895.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0217.335] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0217.335] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0217.335] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387895.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387895.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0217.336] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x7df3, lpOverlapped=0x0) returned 1 [0217.338] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7e00, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x7e00, lpOverlapped=0x0) returned 1 [0217.340] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0217.340] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0217.340] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0217.340] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7df3, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x7df3, lpOverlapped=0x0) returned 1 [0217.340] FlushFileBuffers (hFile=0x2b0) returned 1 [0217.343] FlushFileBuffers (hFile=0x21c) returned 1 [0217.344] CloseHandle (hObject=0x2b0) returned 1 [0217.344] CloseHandle (hObject=0x21c) returned 1 [0217.344] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387895.jpg")) returned 1 [0217.345] SetEvent (hEvent=0x27c) returned 1 [0217.345] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0390072.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0390072.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0217.346] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=13596) returned 1 [0217.346] CloseHandle (hObject=0x21c) returned 1 [0217.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0390072.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0390072.jpg")) returned 0x220 [0217.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0390072.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0390072.jpg")) returned 0x220 [0217.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0390072.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0390072.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.346] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0390072.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0390072.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0217.346] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0217.347] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0217.347] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0390072.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0390072.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0217.347] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x351c, lpOverlapped=0x0) returned 1 [0217.349] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3520, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3520, lpOverlapped=0x0) returned 1 [0217.351] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0217.351] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0217.351] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0217.351] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x351c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x351c, lpOverlapped=0x0) returned 1 [0217.352] FlushFileBuffers (hFile=0x21c) returned 1 [0217.354] FlushFileBuffers (hFile=0x2b0) returned 1 [0217.355] CloseHandle (hObject=0x21c) returned 1 [0217.355] CloseHandle (hObject=0x2b0) returned 1 [0217.355] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0390072.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0390072.jpg")) returned 1 [0217.356] SetEvent (hEvent=0x27c) returned 1 [0217.356] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400001.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400001.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0217.357] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=202883) returned 1 [0217.357] CloseHandle (hObject=0x2b0) returned 1 [0217.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400001.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400001.png")) returned 0x220 [0217.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400001.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400001.png")) returned 0x220 [0217.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400001.PNG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400001.png.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.358] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400001.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400001.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0217.358] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0217.358] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0217.358] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400001.PNG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400001.png.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0217.359] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x31883, lpOverlapped=0x0) returned 1 [0217.461] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x31890, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x31890, lpOverlapped=0x0) returned 1 [0217.465] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0217.465] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0217.465] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0217.466] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x31883, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x31883, lpOverlapped=0x0) returned 1 [0217.466] FlushFileBuffers (hFile=0x2b0) returned 1 [0217.471] FlushFileBuffers (hFile=0x21c) returned 1 [0217.472] CloseHandle (hObject=0x2b0) returned 1 [0217.472] CloseHandle (hObject=0x21c) returned 1 [0217.472] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400001.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400001.png")) returned 1 [0217.475] SetEvent (hEvent=0x27c) returned 1 [0217.475] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400002.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400002.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0217.476] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=89417) returned 1 [0217.476] CloseHandle (hObject=0x21c) returned 1 [0217.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400002.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400002.png")) returned 0x220 [0217.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400002.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400002.png")) returned 0x220 [0217.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400002.PNG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400002.png.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.477] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400002.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400002.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0217.477] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0217.477] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0217.477] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400002.PNG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400002.png.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0217.478] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x15d49, lpOverlapped=0x0) returned 1 [0217.482] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x15d50, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x15d50, lpOverlapped=0x0) returned 1 [0217.485] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0217.485] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0217.485] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0217.485] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x15d49, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x15d49, lpOverlapped=0x0) returned 1 [0217.486] FlushFileBuffers (hFile=0x21c) returned 1 [0217.823] FlushFileBuffers (hFile=0x2b0) returned 1 [0217.826] CloseHandle (hObject=0x21c) returned 1 [0217.826] CloseHandle (hObject=0x2b0) returned 1 [0217.826] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400002.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400002.png")) returned 1 [0217.827] SetEvent (hEvent=0x27c) returned 1 [0217.828] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00417_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00417_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0217.828] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=5950) returned 1 [0217.828] CloseHandle (hObject=0x2b0) returned 1 [0217.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00417_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00417_.wmf")) returned 0x220 [0217.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00417_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00417_.wmf")) returned 0x220 [0217.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00417_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00417_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.829] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00417_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00417_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0217.829] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0217.829] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0217.829] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00417_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00417_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0217.830] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x173e, lpOverlapped=0x0) returned 1 [0217.831] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1740, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1740, lpOverlapped=0x0) returned 1 [0217.832] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0217.833] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0217.833] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0217.833] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x173e, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x173e, lpOverlapped=0x0) returned 1 [0217.833] FlushFileBuffers (hFile=0x2b0) returned 1 [0217.842] FlushFileBuffers (hFile=0x21c) returned 1 [0217.845] CloseHandle (hObject=0x2b0) returned 1 [0217.845] CloseHandle (hObject=0x21c) returned 1 [0217.845] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00417_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00417_.wmf")) returned 1 [0217.846] SetEvent (hEvent=0x27c) returned 1 [0217.846] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00438_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0217.861] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=12088) returned 1 [0217.861] CloseHandle (hObject=0x21c) returned 1 [0217.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00438_.wmf")) returned 0x220 [0217.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00438_.wmf")) returned 0x220 [0217.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00438_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00438_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.861] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00438_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0217.861] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0217.861] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0217.861] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00438_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00438_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0217.863] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2f38, lpOverlapped=0x0) returned 1 [0217.864] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2f40, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2f40, lpOverlapped=0x0) returned 1 [0217.866] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0217.866] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0217.866] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0217.866] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2f38, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2f38, lpOverlapped=0x0) returned 1 [0217.866] FlushFileBuffers (hFile=0x21c) returned 1 [0217.873] FlushFileBuffers (hFile=0x2b0) returned 1 [0217.878] CloseHandle (hObject=0x21c) returned 1 [0217.878] CloseHandle (hObject=0x2b0) returned 1 [0217.878] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00438_.wmf")) returned 1 [0217.879] SetEvent (hEvent=0x27c) returned 1 [0217.880] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00454_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00454_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0217.881] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=5504) returned 1 [0217.881] CloseHandle (hObject=0x2b0) returned 1 [0217.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00454_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00454_.wmf")) returned 0x220 [0217.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00454_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00454_.wmf")) returned 0x220 [0217.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00454_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00454_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.881] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00454_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00454_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0217.881] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0217.881] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0217.882] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00454_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00454_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0217.882] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1580, lpOverlapped=0x0) returned 1 [0217.884] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1590, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1590, lpOverlapped=0x0) returned 1 [0217.885] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0217.885] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0217.885] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0217.885] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1580, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1580, lpOverlapped=0x0) returned 1 [0217.886] FlushFileBuffers (hFile=0x2b0) returned 1 [0217.893] FlushFileBuffers (hFile=0x21c) returned 1 [0217.897] CloseHandle (hObject=0x2b0) returned 1 [0217.897] CloseHandle (hObject=0x21c) returned 1 [0217.897] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00454_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00454_.wmf")) returned 1 [0217.898] SetEvent (hEvent=0x27c) returned 1 [0217.898] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00462_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00462_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0217.899] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=20332) returned 1 [0217.899] CloseHandle (hObject=0x21c) returned 1 [0217.899] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00462_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00462_.wmf")) returned 0x220 [0217.899] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00462_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00462_.wmf")) returned 0x220 [0217.899] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00462_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00462_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.899] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00462_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00462_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0217.899] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0217.899] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0217.899] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00462_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00462_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0217.900] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4f6c, lpOverlapped=0x0) returned 1 [0217.902] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4f70, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4f70, lpOverlapped=0x0) returned 1 [0217.903] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0217.904] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0217.904] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0217.904] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4f6c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4f6c, lpOverlapped=0x0) returned 1 [0217.904] FlushFileBuffers (hFile=0x21c) returned 1 [0217.911] FlushFileBuffers (hFile=0x2b0) returned 1 [0217.918] CloseHandle (hObject=0x21c) returned 1 [0217.918] CloseHandle (hObject=0x2b0) returned 1 [0217.918] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00462_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00462_.wmf")) returned 1 [0217.920] SetEvent (hEvent=0x27c) returned 1 [0217.920] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00494_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00494_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0217.921] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2360) returned 1 [0217.921] CloseHandle (hObject=0x2b0) returned 1 [0217.921] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00494_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00494_.wmf")) returned 0x220 [0217.922] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00494_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00494_.wmf")) returned 0x220 [0217.922] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00494_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00494_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.922] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00494_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00494_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0217.922] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0217.922] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0217.922] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00494_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00494_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0217.923] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x938, lpOverlapped=0x0) returned 1 [0217.925] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x940, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x940, lpOverlapped=0x0) returned 1 [0217.926] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0217.926] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0217.926] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0217.926] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x938, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x938, lpOverlapped=0x0) returned 1 [0217.926] FlushFileBuffers (hFile=0x2b0) returned 1 [0217.936] FlushFileBuffers (hFile=0x21c) returned 1 [0217.938] CloseHandle (hObject=0x2b0) returned 1 [0217.938] CloseHandle (hObject=0x21c) returned 1 [0217.938] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00494_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00494_.wmf")) returned 1 [0217.939] SetEvent (hEvent=0x27c) returned 1 [0217.939] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00523_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00523_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0217.940] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=28410) returned 1 [0217.940] CloseHandle (hObject=0x21c) returned 1 [0217.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00523_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00523_.wmf")) returned 0x220 [0217.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00523_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00523_.wmf")) returned 0x220 [0217.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00523_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00523_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.941] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00523_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00523_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0217.941] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0217.941] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0217.941] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00523_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00523_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0217.942] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x6efa, lpOverlapped=0x0) returned 1 [0217.947] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x6f00, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x6f00, lpOverlapped=0x0) returned 1 [0217.948] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0217.948] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0217.949] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0217.949] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x6efa, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x6efa, lpOverlapped=0x0) returned 1 [0217.949] FlushFileBuffers (hFile=0x21c) returned 1 [0217.963] FlushFileBuffers (hFile=0x2b0) returned 1 [0217.965] CloseHandle (hObject=0x21c) returned 1 [0217.966] CloseHandle (hObject=0x2b0) returned 1 [0217.966] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00523_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00523_.wmf")) returned 1 [0217.967] SetEvent (hEvent=0x27c) returned 1 [0217.967] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00530_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00530_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0217.968] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=18300) returned 1 [0217.968] CloseHandle (hObject=0x2b0) returned 1 [0217.968] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00530_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00530_.wmf")) returned 0x220 [0217.968] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00530_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00530_.wmf")) returned 0x220 [0217.968] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00530_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00530_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.968] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00530_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00530_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0217.969] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0217.969] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0217.969] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00530_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00530_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0217.970] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x477c, lpOverlapped=0x0) returned 1 [0217.972] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4780, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4780, lpOverlapped=0x0) returned 1 [0217.973] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0217.973] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0217.973] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0217.973] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x477c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x477c, lpOverlapped=0x0) returned 1 [0217.973] FlushFileBuffers (hFile=0x2b0) returned 1 [0217.982] FlushFileBuffers (hFile=0x21c) returned 1 [0217.984] CloseHandle (hObject=0x2b0) returned 1 [0217.984] CloseHandle (hObject=0x21c) returned 1 [0217.984] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00530_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00530_.wmf")) returned 1 [0217.985] SetEvent (hEvent=0x27c) returned 1 [0217.985] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00538_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00538_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0217.987] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=32020) returned 1 [0217.987] CloseHandle (hObject=0x21c) returned 1 [0217.987] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00538_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00538_.wmf")) returned 0x220 [0217.987] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00538_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00538_.wmf")) returned 0x220 [0217.987] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00538_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00538_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.987] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00538_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00538_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0217.987] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0217.987] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0217.987] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00538_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00538_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0217.988] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x7d14, lpOverlapped=0x0) returned 1 [0217.991] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7d20, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x7d20, lpOverlapped=0x0) returned 1 [0217.992] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0217.992] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0217.992] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0217.993] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7d14, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x7d14, lpOverlapped=0x0) returned 1 [0217.993] FlushFileBuffers (hFile=0x21c) returned 1 [0218.002] FlushFileBuffers (hFile=0x2b0) returned 1 [0218.006] CloseHandle (hObject=0x21c) returned 1 [0218.006] CloseHandle (hObject=0x2b0) returned 1 [0218.006] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00538_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00538_.wmf")) returned 1 [0218.007] SetEvent (hEvent=0x27c) returned 1 [0218.007] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00784_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00784_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0218.009] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=30296) returned 1 [0218.009] CloseHandle (hObject=0x2b0) returned 1 [0218.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00784_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00784_.wmf")) returned 0x220 [0218.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00784_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00784_.wmf")) returned 0x220 [0218.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00784_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00784_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.009] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00784_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00784_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0218.009] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0218.009] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0218.009] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00784_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00784_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0218.010] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x7658, lpOverlapped=0x0) returned 1 [0218.012] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7660, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x7660, lpOverlapped=0x0) returned 1 [0218.014] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0218.014] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0218.014] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0218.014] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7658, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x7658, lpOverlapped=0x0) returned 1 [0218.014] FlushFileBuffers (hFile=0x2b0) returned 1 [0218.024] FlushFileBuffers (hFile=0x21c) returned 1 [0218.027] CloseHandle (hObject=0x2b0) returned 1 [0218.027] CloseHandle (hObject=0x21c) returned 1 [0218.027] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00784_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00784_.wmf")) returned 1 [0218.028] SetEvent (hEvent=0x27c) returned 1 [0218.028] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00806_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00806_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0218.029] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1928) returned 1 [0218.029] CloseHandle (hObject=0x21c) returned 1 [0218.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00806_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00806_.wmf")) returned 0x220 [0218.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00806_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00806_.wmf")) returned 0x220 [0218.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00806_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00806_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.030] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00806_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00806_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0218.030] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0218.030] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0218.030] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00806_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00806_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0218.031] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x788, lpOverlapped=0x0) returned 1 [0218.036] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x790, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x790, lpOverlapped=0x0) returned 1 [0218.037] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0218.037] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0218.037] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0218.038] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x788, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x788, lpOverlapped=0x0) returned 1 [0218.038] FlushFileBuffers (hFile=0x21c) returned 1 [0218.051] FlushFileBuffers (hFile=0x2b0) returned 1 [0218.075] CloseHandle (hObject=0x21c) returned 1 [0218.075] CloseHandle (hObject=0x2b0) returned 1 [0218.075] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00806_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00806_.wmf")) returned 1 [0218.076] SetEvent (hEvent=0x27c) returned 1 [0218.076] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00808_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0218.078] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1300) returned 1 [0218.078] CloseHandle (hObject=0x2b0) returned 1 [0218.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00808_.wmf")) returned 0x220 [0218.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00808_.wmf")) returned 0x220 [0218.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00808_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00808_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.078] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00808_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0218.078] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0218.078] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0218.078] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00808_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00808_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0218.079] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x514, lpOverlapped=0x0) returned 1 [0218.081] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x520, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x520, lpOverlapped=0x0) returned 1 [0218.082] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0218.083] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0218.083] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0218.083] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x514, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x514, lpOverlapped=0x0) returned 1 [0218.083] FlushFileBuffers (hFile=0x2b0) returned 1 [0218.093] FlushFileBuffers (hFile=0x21c) returned 1 [0218.116] CloseHandle (hObject=0x2b0) returned 1 [0218.116] CloseHandle (hObject=0x21c) returned 1 [0218.116] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00808_.wmf")) returned 1 [0218.117] SetEvent (hEvent=0x27c) returned 1 [0218.117] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00810_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00810_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0218.119] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3416) returned 1 [0218.119] CloseHandle (hObject=0x21c) returned 1 [0218.119] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00810_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00810_.wmf")) returned 0x220 [0218.119] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00810_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00810_.wmf")) returned 0x220 [0218.119] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00810_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00810_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.119] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00810_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00810_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0218.119] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0218.119] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0218.119] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00810_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00810_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0218.120] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xd58, lpOverlapped=0x0) returned 1 [0218.122] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xd60, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xd60, lpOverlapped=0x0) returned 1 [0218.123] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0218.124] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0218.124] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0218.124] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xd58, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xd58, lpOverlapped=0x0) returned 1 [0218.124] FlushFileBuffers (hFile=0x21c) returned 1 [0218.132] FlushFileBuffers (hFile=0x2b0) returned 1 [0218.136] CloseHandle (hObject=0x21c) returned 1 [0218.136] CloseHandle (hObject=0x2b0) returned 1 [0218.136] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00810_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00810_.wmf")) returned 1 [0218.137] SetEvent (hEvent=0x27c) returned 1 [0218.137] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01064_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01064_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0218.138] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=31814) returned 1 [0218.138] CloseHandle (hObject=0x2b0) returned 1 [0218.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01064_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01064_.wmf")) returned 0x220 [0218.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01064_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01064_.wmf")) returned 0x220 [0218.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01064_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01064_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.138] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01064_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01064_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0218.138] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0218.138] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0218.138] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01064_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01064_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0218.139] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x7c46, lpOverlapped=0x0) returned 1 [0218.142] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7c50, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x7c50, lpOverlapped=0x0) returned 1 [0218.143] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0218.143] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0218.144] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0218.144] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7c46, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x7c46, lpOverlapped=0x0) returned 1 [0218.144] FlushFileBuffers (hFile=0x2b0) returned 1 [0218.152] FlushFileBuffers (hFile=0x21c) returned 1 [0218.158] CloseHandle (hObject=0x2b0) returned 1 [0218.159] CloseHandle (hObject=0x21c) returned 1 [0218.159] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01064_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01064_.wmf")) returned 1 [0218.160] SetEvent (hEvent=0x27c) returned 1 [0218.160] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01069_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01069_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0218.162] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=6782) returned 1 [0218.162] CloseHandle (hObject=0x21c) returned 1 [0218.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01069_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01069_.wmf")) returned 0x220 [0218.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01069_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01069_.wmf")) returned 0x220 [0218.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01069_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01069_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.162] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01069_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01069_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0218.162] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0218.162] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0218.163] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01069_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01069_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0218.163] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1a7e, lpOverlapped=0x0) returned 1 [0218.165] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1a80, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1a80, lpOverlapped=0x0) returned 1 [0218.166] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0218.166] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0218.166] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0218.167] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1a7e, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1a7e, lpOverlapped=0x0) returned 1 [0218.167] FlushFileBuffers (hFile=0x21c) returned 1 [0218.176] FlushFileBuffers (hFile=0x2b0) returned 1 [0218.178] CloseHandle (hObject=0x21c) returned 1 [0218.179] CloseHandle (hObject=0x2b0) returned 1 [0218.179] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01069_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01069_.wmf")) returned 1 [0218.180] SetEvent (hEvent=0x27c) returned 1 [0218.180] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01126_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01126_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0218.180] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2928) returned 1 [0218.180] CloseHandle (hObject=0x2b0) returned 1 [0218.181] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01126_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01126_.wmf")) returned 0x220 [0218.181] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01126_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01126_.wmf")) returned 0x220 [0218.181] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01126_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01126_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.181] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01126_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01126_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0218.181] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0218.181] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0218.181] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01126_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01126_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0218.182] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xb70, lpOverlapped=0x0) returned 1 [0218.183] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xb80, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xb80, lpOverlapped=0x0) returned 1 [0218.184] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0218.184] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0218.185] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0218.185] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xb70, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xb70, lpOverlapped=0x0) returned 1 [0218.185] FlushFileBuffers (hFile=0x2b0) returned 1 [0218.194] FlushFileBuffers (hFile=0x21c) returned 1 [0218.197] CloseHandle (hObject=0x2b0) returned 1 [0218.197] CloseHandle (hObject=0x21c) returned 1 [0218.197] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01126_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01126_.wmf")) returned 1 [0218.198] SetEvent (hEvent=0x27c) returned 1 [0218.198] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01141_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0218.199] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=5848) returned 1 [0218.199] CloseHandle (hObject=0x21c) returned 1 [0218.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01141_.wmf")) returned 0x220 [0218.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01141_.wmf")) returned 0x220 [0218.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01141_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01141_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.199] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01141_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0218.200] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0218.200] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0218.200] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01141_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01141_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0218.200] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x16d8, lpOverlapped=0x0) returned 1 [0218.206] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x16e0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x16e0, lpOverlapped=0x0) returned 1 [0218.207] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0218.207] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0218.207] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0218.207] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x16d8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x16d8, lpOverlapped=0x0) returned 1 [0218.207] FlushFileBuffers (hFile=0x21c) returned 1 [0218.212] FlushFileBuffers (hFile=0x2b0) returned 1 [0218.215] CloseHandle (hObject=0x21c) returned 1 [0218.215] CloseHandle (hObject=0x2b0) returned 1 [0218.215] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01141_.wmf")) returned 1 [0218.216] SetEvent (hEvent=0x27c) returned 1 [0218.216] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01149_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01149_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0218.217] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=4680) returned 1 [0218.217] CloseHandle (hObject=0x2b0) returned 1 [0218.217] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01149_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01149_.wmf")) returned 0x220 [0218.217] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01149_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01149_.wmf")) returned 0x220 [0218.217] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01149_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01149_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.218] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01149_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01149_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0218.218] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0218.218] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0218.218] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01149_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01149_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0218.219] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1248, lpOverlapped=0x0) returned 1 [0218.220] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1250, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1250, lpOverlapped=0x0) returned 1 [0218.221] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0218.222] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0218.222] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0218.222] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1248, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1248, lpOverlapped=0x0) returned 1 [0218.222] FlushFileBuffers (hFile=0x2b0) returned 1 [0218.231] FlushFileBuffers (hFile=0x21c) returned 1 [0218.234] CloseHandle (hObject=0x2b0) returned 1 [0218.234] CloseHandle (hObject=0x21c) returned 1 [0218.234] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01149_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01149_.wmf")) returned 1 [0218.235] SetEvent (hEvent=0x27c) returned 1 [0218.235] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01154_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01154_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0218.239] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=5552) returned 1 [0218.239] CloseHandle (hObject=0x21c) returned 1 [0218.239] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01154_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01154_.wmf")) returned 0x220 [0218.239] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01154_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01154_.wmf")) returned 0x220 [0218.239] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01154_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01154_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.240] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01154_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01154_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0218.240] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0218.240] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0218.240] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01154_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01154_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0218.240] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x15b0, lpOverlapped=0x0) returned 1 [0218.265] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x15c0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x15c0, lpOverlapped=0x0) returned 1 [0218.266] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0218.267] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0218.267] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0218.267] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x15b0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x15b0, lpOverlapped=0x0) returned 1 [0218.267] FlushFileBuffers (hFile=0x21c) returned 1 [0218.278] FlushFileBuffers (hFile=0x2b0) returned 1 [0218.285] CloseHandle (hObject=0x21c) returned 1 [0218.285] CloseHandle (hObject=0x2b0) returned 1 [0218.285] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01154_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01154_.wmf")) returned 1 [0218.286] SetEvent (hEvent=0x27c) returned 1 [0218.286] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01161_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01161_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0218.301] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=5780) returned 1 [0218.302] CloseHandle (hObject=0x21c) returned 1 [0218.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01161_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01161_.wmf")) returned 0x220 [0218.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01161_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01161_.wmf")) returned 0x220 [0218.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01161_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01161_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.305] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01161_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01161_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0218.305] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0218.305] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0218.305] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01161_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01161_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0218.306] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1694, lpOverlapped=0x0) returned 1 [0218.310] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x16a0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x16a0, lpOverlapped=0x0) returned 1 [0218.312] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0218.312] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0218.312] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0218.312] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1694, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1694, lpOverlapped=0x0) returned 1 [0218.312] FlushFileBuffers (hFile=0x2fc) returned 1 [0218.316] FlushFileBuffers (hFile=0x2f4) returned 1 [0218.319] CloseHandle (hObject=0x2fc) returned 1 [0218.319] CloseHandle (hObject=0x2f4) returned 1 [0218.319] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01161_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01161_.wmf")) returned 1 [0218.321] SetEvent (hEvent=0x27c) returned 1 [0218.321] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01293_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01293_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0218.324] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=28912) returned 1 [0218.324] CloseHandle (hObject=0x2fc) returned 1 [0218.324] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01293_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01293_.wmf")) returned 0x220 [0218.324] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01293_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01293_.wmf")) returned 0x220 [0218.324] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01293_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01293_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.326] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01293_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01293_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0218.326] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0218.326] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0218.327] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01293_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01293_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0218.328] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x70f0, lpOverlapped=0x0) returned 1 [0218.333] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7100, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x7100, lpOverlapped=0x0) returned 1 [0218.335] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0218.335] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0218.335] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0218.335] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x70f0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x70f0, lpOverlapped=0x0) returned 1 [0218.335] FlushFileBuffers (hFile=0x21c) returned 1 [0218.339] FlushFileBuffers (hFile=0x2b0) returned 1 [0218.348] CloseHandle (hObject=0x21c) returned 1 [0218.348] CloseHandle (hObject=0x2b0) returned 1 [0218.348] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01293_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01293_.wmf")) returned 1 [0218.349] SetEvent (hEvent=0x27c) returned 1 [0218.349] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01356_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01356_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0218.351] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=18226) returned 1 [0218.351] CloseHandle (hObject=0x2b0) returned 1 [0218.351] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01356_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01356_.wmf")) returned 0x220 [0218.351] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01356_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01356_.wmf")) returned 0x220 [0218.351] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01356_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01356_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.351] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01356_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01356_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0218.351] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0218.351] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0218.351] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01356_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01356_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0218.352] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4732, lpOverlapped=0x0) returned 1 [0218.356] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4740, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4740, lpOverlapped=0x0) returned 1 [0218.357] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0218.357] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0218.357] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0218.357] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4732, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4732, lpOverlapped=0x0) returned 1 [0218.357] FlushFileBuffers (hFile=0x2b0) returned 1 [0218.368] FlushFileBuffers (hFile=0x21c) returned 1 [0218.371] CloseHandle (hObject=0x2b0) returned 1 [0218.371] CloseHandle (hObject=0x21c) returned 1 [0218.371] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01356_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01356_.wmf")) returned 1 [0218.372] SetEvent (hEvent=0x27c) returned 1 [0218.372] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01358_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01358_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0218.375] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3438) returned 1 [0218.375] CloseHandle (hObject=0x2fc) returned 1 [0218.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01358_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01358_.wmf")) returned 0x220 [0218.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01358_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01358_.wmf")) returned 0x220 [0218.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01358_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01358_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.375] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01358_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01358_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0218.375] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0218.375] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0218.375] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01358_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01358_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0218.378] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xd6e, lpOverlapped=0x0) returned 1 [0218.381] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xd70, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xd70, lpOverlapped=0x0) returned 1 [0218.383] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0218.383] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0218.383] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0218.383] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xd6e, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xd6e, lpOverlapped=0x0) returned 1 [0218.383] FlushFileBuffers (hFile=0x2fc) returned 1 [0218.390] FlushFileBuffers (hFile=0x2f4) returned 1 [0218.392] CloseHandle (hObject=0x2fc) returned 1 [0218.392] CloseHandle (hObject=0x2f4) returned 1 [0218.392] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01358_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01358_.wmf")) returned 1 [0218.393] SetEvent (hEvent=0x27c) returned 1 [0218.393] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01368_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01368_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0218.394] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=263186) returned 1 [0218.394] CloseHandle (hObject=0x2f4) returned 1 [0218.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01368_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01368_.wmf")) returned 0x220 [0218.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01368_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01368_.wmf")) returned 0x220 [0218.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01368_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01368_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.395] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01368_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01368_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0218.395] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0218.395] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0218.395] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01368_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01368_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0218.396] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x40412, lpOverlapped=0x0) returned 1 [0218.406] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x40420, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x40420, lpOverlapped=0x0) returned 1 [0218.411] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0218.411] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0218.411] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0218.411] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x40412, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x40412, lpOverlapped=0x0) returned 1 [0218.412] FlushFileBuffers (hFile=0x2f4) returned 1 [0218.423] FlushFileBuffers (hFile=0x2fc) returned 1 [0218.433] CloseHandle (hObject=0x2f4) returned 1 [0218.433] CloseHandle (hObject=0x2fc) returned 1 [0218.433] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01368_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01368_.wmf")) returned 1 [0218.437] SetEvent (hEvent=0x27c) returned 1 [0218.437] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01468_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01468_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0218.440] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=20098) returned 1 [0218.440] CloseHandle (hObject=0x2fc) returned 1 [0218.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01468_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01468_.wmf")) returned 0x220 [0218.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01468_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01468_.wmf")) returned 0x220 [0218.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01468_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01468_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.440] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01468_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01468_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0218.440] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0218.441] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0218.441] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01468_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01468_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0218.441] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4e82, lpOverlapped=0x0) returned 1 [0218.444] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4e90, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4e90, lpOverlapped=0x0) returned 1 [0218.445] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0218.446] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0218.446] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0218.446] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4e82, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4e82, lpOverlapped=0x0) returned 1 [0218.446] FlushFileBuffers (hFile=0x2fc) returned 1 [0218.459] FlushFileBuffers (hFile=0x2f4) returned 1 [0218.460] CloseHandle (hObject=0x2fc) returned 1 [0218.460] CloseHandle (hObject=0x2f4) returned 1 [0218.460] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01468_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01468_.wmf")) returned 1 [0218.461] SetEvent (hEvent=0x27c) returned 1 [0218.461] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01472_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01472_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0218.462] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=8232) returned 1 [0218.462] CloseHandle (hObject=0x2f4) returned 1 [0218.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01472_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01472_.wmf")) returned 0x220 [0218.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01472_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01472_.wmf")) returned 0x220 [0218.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01472_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01472_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.463] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01472_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01472_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0218.463] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0218.463] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0218.463] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01472_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01472_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0218.464] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2028, lpOverlapped=0x0) returned 1 [0218.465] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2030, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2030, lpOverlapped=0x0) returned 1 [0218.467] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0218.468] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0218.468] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0218.468] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2028, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2028, lpOverlapped=0x0) returned 1 [0218.468] FlushFileBuffers (hFile=0x2f4) returned 1 [0218.470] FlushFileBuffers (hFile=0x2fc) returned 1 [0218.472] CloseHandle (hObject=0x2f4) returned 1 [0218.472] CloseHandle (hObject=0x2fc) returned 1 [0218.472] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01472_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01472_.wmf")) returned 1 [0218.473] SetEvent (hEvent=0x27c) returned 1 [0218.473] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01473_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01473_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0218.474] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=10414) returned 1 [0218.474] CloseHandle (hObject=0x2fc) returned 1 [0218.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01473_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01473_.wmf")) returned 0x220 [0218.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01473_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01473_.wmf")) returned 0x220 [0218.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01473_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01473_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.474] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01473_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01473_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0218.474] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0218.474] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0218.474] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01473_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01473_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0218.475] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x28ae, lpOverlapped=0x0) returned 1 [0218.477] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x28b0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x28b0, lpOverlapped=0x0) returned 1 [0218.478] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0218.479] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0218.479] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0218.479] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x28ae, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x28ae, lpOverlapped=0x0) returned 1 [0218.479] FlushFileBuffers (hFile=0x2fc) returned 1 [0218.481] FlushFileBuffers (hFile=0x2f4) returned 1 [0218.483] CloseHandle (hObject=0x2fc) returned 1 [0218.483] CloseHandle (hObject=0x2f4) returned 1 [0218.483] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01473_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01473_.wmf")) returned 1 [0218.487] SetEvent (hEvent=0x27c) returned 1 [0218.487] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01474_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01474_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0218.488] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=13468) returned 1 [0218.488] CloseHandle (hObject=0x2f4) returned 1 [0218.489] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01474_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01474_.wmf")) returned 0x220 [0218.489] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01474_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01474_.wmf")) returned 0x220 [0218.489] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01474_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01474_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.489] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01474_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01474_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0218.489] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0218.489] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0218.489] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01474_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01474_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0218.490] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x349c, lpOverlapped=0x0) returned 1 [0218.493] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x34a0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x34a0, lpOverlapped=0x0) returned 1 [0218.494] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0218.494] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0218.494] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0218.494] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x349c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x349c, lpOverlapped=0x0) returned 1 [0218.494] FlushFileBuffers (hFile=0x2f4) returned 1 [0218.538] FlushFileBuffers (hFile=0x2fc) returned 1 [0218.541] CloseHandle (hObject=0x2f4) returned 1 [0218.542] CloseHandle (hObject=0x2fc) returned 1 [0218.542] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01474_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01474_.wmf")) returned 1 [0218.543] SetEvent (hEvent=0x27c) returned 1 [0218.543] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01682_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01682_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0218.546] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3208) returned 1 [0218.546] CloseHandle (hObject=0x2f4) returned 1 [0218.546] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01682_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01682_.wmf")) returned 0x220 [0218.546] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01682_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01682_.wmf")) returned 0x220 [0218.546] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01682_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01682_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.647] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01682_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01682_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0218.647] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0218.647] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0218.648] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01682_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01682_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0218.649] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xc88, lpOverlapped=0x0) returned 1 [0218.653] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xc90, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xc90, lpOverlapped=0x0) returned 1 [0218.654] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0218.654] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0218.654] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0218.654] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xc88, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xc88, lpOverlapped=0x0) returned 1 [0218.655] FlushFileBuffers (hFile=0x21c) returned 1 [0218.658] FlushFileBuffers (hFile=0x2b0) returned 1 [0218.668] CloseHandle (hObject=0x21c) returned 1 [0218.668] CloseHandle (hObject=0x2b0) returned 1 [0218.668] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01682_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01682_.wmf")) returned 1 [0218.669] SetEvent (hEvent=0x27c) returned 1 [0218.669] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01848_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01848_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0218.671] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1120) returned 1 [0218.672] CloseHandle (hObject=0x2b0) returned 1 [0218.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01848_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01848_.wmf")) returned 0x220 [0218.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01848_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01848_.wmf")) returned 0x220 [0218.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01848_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01848_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.672] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01848_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01848_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0218.672] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0218.672] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0218.672] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01848_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01848_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0218.673] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x460, lpOverlapped=0x0) returned 1 [0218.675] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x470, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x470, lpOverlapped=0x0) returned 1 [0218.679] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0218.679] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0218.679] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0218.679] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x460, lpOverlapped=0x0) returned 1 [0218.679] FlushFileBuffers (hFile=0x2b0) returned 1 [0218.689] FlushFileBuffers (hFile=0x21c) returned 1 [0218.693] CloseHandle (hObject=0x2b0) returned 1 [0218.693] CloseHandle (hObject=0x21c) returned 1 [0218.693] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01848_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01848_.wmf")) returned 1 [0218.694] SetEvent (hEvent=0x27c) returned 1 [0218.694] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01852_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01852_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0218.694] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=4408) returned 1 [0218.694] CloseHandle (hObject=0x21c) returned 1 [0218.694] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01852_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01852_.wmf")) returned 0x220 [0218.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01852_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01852_.wmf")) returned 0x220 [0218.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01852_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01852_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.695] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01852_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01852_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0218.695] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0218.695] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0218.695] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01852_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01852_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0218.696] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1138, lpOverlapped=0x0) returned 1 [0218.697] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1140, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1140, lpOverlapped=0x0) returned 1 [0218.701] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0218.701] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0218.701] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0218.701] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1138, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1138, lpOverlapped=0x0) returned 1 [0218.701] FlushFileBuffers (hFile=0x21c) returned 1 [0218.710] FlushFileBuffers (hFile=0x2b0) returned 1 [0218.711] CloseHandle (hObject=0x21c) returned 1 [0218.711] CloseHandle (hObject=0x2b0) returned 1 [0218.711] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01852_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01852_.wmf")) returned 1 [0218.712] SetEvent (hEvent=0x27c) returned 1 [0218.713] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01866_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01866_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0218.713] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3512) returned 1 [0218.713] CloseHandle (hObject=0x2b0) returned 1 [0218.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01866_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01866_.wmf")) returned 0x220 [0218.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01866_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01866_.wmf")) returned 0x220 [0218.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01866_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01866_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.714] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01866_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01866_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0218.714] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0218.714] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0218.714] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01866_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01866_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0218.714] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xdb8, lpOverlapped=0x0) returned 1 [0218.716] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xdc0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xdc0, lpOverlapped=0x0) returned 1 [0218.717] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0218.717] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0218.717] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0218.717] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xdb8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xdb8, lpOverlapped=0x0) returned 1 [0218.717] FlushFileBuffers (hFile=0x2b0) returned 1 [0218.720] FlushFileBuffers (hFile=0x21c) returned 1 [0218.729] CloseHandle (hObject=0x2b0) returned 1 [0218.729] CloseHandle (hObject=0x21c) returned 1 [0218.729] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01866_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01866_.wmf")) returned 1 [0218.730] SetEvent (hEvent=0x27c) returned 1 [0218.731] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02041_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02041_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0218.732] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2328) returned 1 [0218.732] CloseHandle (hObject=0x21c) returned 1 [0218.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02041_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02041_.wmf")) returned 0x220 [0218.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02041_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02041_.wmf")) returned 0x220 [0218.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02041_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02041_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.733] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02041_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02041_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0218.733] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0218.733] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0218.733] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02041_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02041_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0218.734] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x918, lpOverlapped=0x0) returned 1 [0218.735] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x920, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x920, lpOverlapped=0x0) returned 1 [0218.736] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0218.737] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0218.737] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0218.737] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x918, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x918, lpOverlapped=0x0) returned 1 [0218.737] FlushFileBuffers (hFile=0x21c) returned 1 [0218.744] FlushFileBuffers (hFile=0x2b0) returned 1 [0218.748] CloseHandle (hObject=0x21c) returned 1 [0218.748] CloseHandle (hObject=0x2b0) returned 1 [0218.748] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02041_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02041_.wmf")) returned 1 [0218.749] SetEvent (hEvent=0x27c) returned 1 [0218.750] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02091_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02091_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0218.751] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1140) returned 1 [0218.751] CloseHandle (hObject=0x2b0) returned 1 [0218.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02091_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02091_.wmf")) returned 0x220 [0218.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02091_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02091_.wmf")) returned 0x220 [0218.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02091_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02091_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.751] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02091_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02091_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0218.751] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0218.751] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0218.752] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02091_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02091_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0218.752] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x474, lpOverlapped=0x0) returned 1 [0218.755] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x480, lpOverlapped=0x0) returned 1 [0218.756] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0218.756] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0218.756] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0218.756] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x474, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x474, lpOverlapped=0x0) returned 1 [0218.756] FlushFileBuffers (hFile=0x2b0) returned 1 [0218.764] FlushFileBuffers (hFile=0x21c) returned 1 [0218.767] CloseHandle (hObject=0x2b0) returned 1 [0218.767] CloseHandle (hObject=0x21c) returned 1 [0218.767] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02091_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02091_.wmf")) returned 1 [0218.768] SetEvent (hEvent=0x27c) returned 1 [0218.768] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02093_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02093_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0218.771] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=672) returned 1 [0218.771] CloseHandle (hObject=0x21c) returned 1 [0218.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02093_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02093_.wmf")) returned 0x220 [0218.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02093_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02093_.wmf")) returned 0x220 [0218.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02093_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02093_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.772] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02093_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02093_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0218.772] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0218.772] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0218.772] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02093_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02093_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0218.772] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2a0, lpOverlapped=0x0) returned 1 [0218.774] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2b0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2b0, lpOverlapped=0x0) returned 1 [0218.775] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0218.775] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0218.775] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0218.775] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2a0, lpOverlapped=0x0) returned 1 [0218.775] FlushFileBuffers (hFile=0x21c) returned 1 [0218.779] FlushFileBuffers (hFile=0x2b0) returned 1 [0218.787] CloseHandle (hObject=0x21c) returned 1 [0218.787] CloseHandle (hObject=0x2b0) returned 1 [0218.787] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02093_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02093_.wmf")) returned 1 [0218.788] SetEvent (hEvent=0x27c) returned 1 [0218.788] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02125_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02125_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0218.789] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=18454) returned 1 [0218.789] CloseHandle (hObject=0x2b0) returned 1 [0218.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02125_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02125_.wmf")) returned 0x220 [0218.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02125_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02125_.wmf")) returned 0x220 [0218.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02125_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02125_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.789] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02125_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02125_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0218.789] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0218.790] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0218.790] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02125_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02125_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0218.790] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4816, lpOverlapped=0x0) returned 1 [0218.793] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4820, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4820, lpOverlapped=0x0) returned 1 [0218.795] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0218.795] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0218.795] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0218.795] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4816, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4816, lpOverlapped=0x0) returned 1 [0218.795] FlushFileBuffers (hFile=0x2b0) returned 1 [0218.803] FlushFileBuffers (hFile=0x21c) returned 1 [0218.808] CloseHandle (hObject=0x2b0) returned 1 [0218.808] CloseHandle (hObject=0x21c) returned 1 [0218.808] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02125_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02125_.wmf")) returned 1 [0218.809] SetEvent (hEvent=0x27c) returned 1 [0218.809] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02127_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02127_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0218.810] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=4068) returned 1 [0218.811] CloseHandle (hObject=0x21c) returned 1 [0218.811] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02127_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02127_.wmf")) returned 0x220 [0218.811] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02127_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02127_.wmf")) returned 0x220 [0218.811] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02127_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02127_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.811] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02127_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02127_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0218.812] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0218.812] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0218.812] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02127_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02127_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0218.812] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xfe4, lpOverlapped=0x0) returned 1 [0218.814] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xff0, lpOverlapped=0x0) returned 1 [0218.815] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0218.816] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0218.816] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0218.816] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xfe4, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xfe4, lpOverlapped=0x0) returned 1 [0218.816] FlushFileBuffers (hFile=0x21c) returned 1 [0218.826] FlushFileBuffers (hFile=0x2b0) returned 1 [0219.588] CloseHandle (hObject=0x21c) returned 1 [0219.588] CloseHandle (hObject=0x2b0) returned 1 [0219.588] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02127_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02127_.wmf")) returned 1 [0219.589] SetEvent (hEvent=0x27c) returned 1 [0219.589] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02441_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0219.591] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=12824) returned 1 [0219.591] CloseHandle (hObject=0x2b0) returned 1 [0219.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02441_.wmf")) returned 0x220 [0219.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02441_.wmf")) returned 0x220 [0219.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02441_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02441_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0219.592] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02441_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0219.592] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0219.592] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0219.592] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02441_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02441_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0219.593] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x3218, lpOverlapped=0x0) returned 1 [0219.595] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3220, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3220, lpOverlapped=0x0) returned 1 [0219.598] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0219.598] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0219.598] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0219.598] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3218, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x3218, lpOverlapped=0x0) returned 1 [0219.598] FlushFileBuffers (hFile=0x2b0) returned 1 [0219.601] FlushFileBuffers (hFile=0x21c) returned 1 [0219.603] CloseHandle (hObject=0x2b0) returned 1 [0219.603] CloseHandle (hObject=0x21c) returned 1 [0219.603] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02441_.wmf")) returned 1 [0219.607] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02444_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0219.608] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2188) returned 1 [0219.608] CloseHandle (hObject=0x2fc) returned 1 [0219.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02444_.wmf")) returned 0x220 [0219.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02444_.wmf")) returned 0x220 [0219.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02444_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02444_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0219.608] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02444_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0219.609] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0219.609] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0219.609] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02444_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02444_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0219.609] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x88c, lpOverlapped=0x0) returned 1 [0219.613] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x890, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x890, lpOverlapped=0x0) returned 1 [0219.614] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0219.615] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0219.615] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0219.615] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x88c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x88c, lpOverlapped=0x0) returned 1 [0219.615] FlushFileBuffers (hFile=0x2fc) returned 1 [0219.618] FlushFileBuffers (hFile=0x2f4) returned 1 [0219.623] CloseHandle (hObject=0x2fc) returned 1 [0219.624] CloseHandle (hObject=0x2f4) returned 1 [0219.624] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02444_.wmf")) returned 1 [0219.626] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02448_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02448_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0219.626] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2208) returned 1 [0219.626] CloseHandle (hObject=0x2f4) returned 1 [0219.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02448_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02448_.wmf")) returned 0x220 [0219.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02448_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02448_.wmf")) returned 0x220 [0219.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02448_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02448_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0219.626] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02448_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02448_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0219.627] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0219.627] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0219.627] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02448_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02448_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0219.627] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x8a0, lpOverlapped=0x0) returned 1 [0219.631] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8b0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x8b0, lpOverlapped=0x0) returned 1 [0219.632] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0219.633] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0219.633] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0219.633] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8a0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x8a0, lpOverlapped=0x0) returned 1 [0219.633] FlushFileBuffers (hFile=0x2f4) returned 1 [0219.636] FlushFileBuffers (hFile=0x2fc) returned 1 [0219.644] CloseHandle (hObject=0x2f4) returned 1 [0219.644] CloseHandle (hObject=0x2fc) returned 1 [0219.645] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02448_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02448_.wmf")) returned 1 [0219.646] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02451_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02451_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0219.647] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3440) returned 1 [0219.647] CloseHandle (hObject=0x2fc) returned 1 [0219.647] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02451_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02451_.wmf")) returned 0x220 [0219.647] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02451_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02451_.wmf")) returned 0x220 [0219.647] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02451_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02451_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0219.647] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02451_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02451_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0219.648] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0219.648] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0219.648] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02451_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02451_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0219.652] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xd70, lpOverlapped=0x0) returned 1 [0219.654] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xd80, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xd80, lpOverlapped=0x0) returned 1 [0219.655] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0219.655] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0219.655] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0219.655] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xd70, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xd70, lpOverlapped=0x0) returned 1 [0219.655] FlushFileBuffers (hFile=0x2fc) returned 1 [0219.664] FlushFileBuffers (hFile=0x2f4) returned 1 [0219.668] CloseHandle (hObject=0x2fc) returned 1 [0219.668] CloseHandle (hObject=0x2f4) returned 1 [0219.668] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02451_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02451_.wmf")) returned 1 [0219.669] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\nbook_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0219.670] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=5968) returned 1 [0219.670] CloseHandle (hObject=0x2f4) returned 1 [0219.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\nbook_01.mid")) returned 0x220 [0219.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\nbook_01.mid")) returned 0x220 [0219.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\nbook_01.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0219.671] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\nbook_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0219.671] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0219.671] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0219.671] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\nbook_01.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0219.672] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1750, lpOverlapped=0x0) returned 1 [0219.674] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1760, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1760, lpOverlapped=0x0) returned 1 [0219.675] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0219.675] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0219.675] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0219.675] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1750, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1750, lpOverlapped=0x0) returned 1 [0219.676] FlushFileBuffers (hFile=0x2f4) returned 1 [0219.685] FlushFileBuffers (hFile=0x2fc) returned 1 [0219.687] CloseHandle (hObject=0x2f4) returned 1 [0219.687] CloseHandle (hObject=0x2fc) returned 1 [0219.687] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\nbook_01.mid")) returned 1 [0219.688] SetEvent (hEvent=0x27c) returned 1 [0219.688] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\outdr_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0219.689] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=6644) returned 1 [0219.689] CloseHandle (hObject=0x2fc) returned 1 [0219.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\outdr_01.mid")) returned 0x220 [0219.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\outdr_01.mid")) returned 0x220 [0219.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\outdr_01.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0219.689] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\outdr_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0219.690] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0219.690] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0219.690] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\outdr_01.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0219.690] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x19f4, lpOverlapped=0x0) returned 1 [0219.692] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1a00, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1a00, lpOverlapped=0x0) returned 1 [0219.693] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0219.694] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0219.694] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0219.694] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x19f4, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x19f4, lpOverlapped=0x0) returned 1 [0219.694] FlushFileBuffers (hFile=0x2fc) returned 1 [0219.701] FlushFileBuffers (hFile=0x2f4) returned 1 [0219.705] CloseHandle (hObject=0x2fc) returned 1 [0219.705] CloseHandle (hObject=0x2f4) returned 1 [0219.705] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\outdr_01.mid")) returned 1 [0219.706] SetEvent (hEvent=0x27c) returned 1 [0219.707] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0219.707] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=6491) returned 1 [0219.707] CloseHandle (hObject=0x2f4) returned 1 [0219.707] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_01.mid")) returned 0x220 [0219.707] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_01.mid")) returned 0x220 [0219.707] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_01.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0219.707] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0219.707] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0219.708] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0219.708] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_01.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0219.708] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x195b, lpOverlapped=0x0) returned 1 [0219.710] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1960, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1960, lpOverlapped=0x0) returned 1 [0219.711] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0219.711] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0219.711] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0219.712] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x195b, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x195b, lpOverlapped=0x0) returned 1 [0219.712] FlushFileBuffers (hFile=0x2f4) returned 1 [0219.719] FlushFileBuffers (hFile=0x2fc) returned 1 [0219.726] CloseHandle (hObject=0x2f4) returned 1 [0219.726] CloseHandle (hObject=0x2fc) returned 1 [0219.726] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_01.mid")) returned 1 [0219.727] SetEvent (hEvent=0x27c) returned 1 [0219.727] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_03.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0219.728] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=8538) returned 1 [0219.728] CloseHandle (hObject=0x2fc) returned 1 [0219.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_03.mid")) returned 0x220 [0219.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_03.mid")) returned 0x220 [0219.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_03.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0219.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_03.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0219.728] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0219.728] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0219.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_03.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0219.729] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x215a, lpOverlapped=0x0) returned 1 [0219.739] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2160, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2160, lpOverlapped=0x0) returned 1 [0219.740] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0219.741] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0219.741] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0219.741] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x215a, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x215a, lpOverlapped=0x0) returned 1 [0219.741] FlushFileBuffers (hFile=0x2fc) returned 1 [0219.751] FlushFileBuffers (hFile=0x2f4) returned 1 [0219.753] CloseHandle (hObject=0x2fc) returned 1 [0219.753] CloseHandle (hObject=0x2f4) returned 1 [0219.753] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_03.mid")) returned 1 [0219.754] SetEvent (hEvent=0x27c) returned 1 [0219.754] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_05.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0219.756] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=6020) returned 1 [0219.756] CloseHandle (hObject=0x2f4) returned 1 [0219.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_05.mid")) returned 0x220 [0219.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_05.mid")) returned 0x220 [0219.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_05.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0219.756] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_05.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0219.756] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0219.756] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0219.756] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_05.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0219.757] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1784, lpOverlapped=0x0) returned 1 [0219.759] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1790, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1790, lpOverlapped=0x0) returned 1 [0219.760] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0219.761] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0219.761] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0219.761] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1784, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1784, lpOverlapped=0x0) returned 1 [0219.761] FlushFileBuffers (hFile=0x2f4) returned 1 [0219.772] FlushFileBuffers (hFile=0x2fc) returned 1 [0219.774] CloseHandle (hObject=0x2f4) returned 1 [0219.774] CloseHandle (hObject=0x2fc) returned 1 [0219.774] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_05.mid")) returned 1 [0219.775] SetEvent (hEvent=0x27c) returned 1 [0219.775] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_07.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0219.776] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=6564) returned 1 [0219.776] CloseHandle (hObject=0x2fc) returned 1 [0219.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_07.mid")) returned 0x220 [0219.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_07.mid")) returned 0x220 [0219.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_07.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0219.776] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_07.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0219.776] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0219.776] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0219.776] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_07.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0219.777] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x19a4, lpOverlapped=0x0) returned 1 [0219.778] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x19b0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x19b0, lpOverlapped=0x0) returned 1 [0219.779] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0219.780] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0219.780] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0219.780] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x19a4, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x19a4, lpOverlapped=0x0) returned 1 [0219.780] FlushFileBuffers (hFile=0x2fc) returned 1 [0219.783] FlushFileBuffers (hFile=0x2f4) returned 1 [0219.791] CloseHandle (hObject=0x2fc) returned 1 [0219.791] CloseHandle (hObject=0x2f4) returned 1 [0219.791] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_07.mid")) returned 1 [0219.792] SetEvent (hEvent=0x27c) returned 1 [0219.792] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_09.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0219.793] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=6764) returned 1 [0219.793] CloseHandle (hObject=0x2f4) returned 1 [0219.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_09.mid")) returned 0x220 [0219.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_09.mid")) returned 0x220 [0219.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_09.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0219.793] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_09.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0219.793] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0219.793] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0219.794] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_09.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0219.794] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1a6c, lpOverlapped=0x0) returned 1 [0219.797] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1a70, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1a70, lpOverlapped=0x0) returned 1 [0219.798] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0219.798] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0219.798] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0219.798] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1a6c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1a6c, lpOverlapped=0x0) returned 1 [0219.798] FlushFileBuffers (hFile=0x2f4) returned 1 [0219.801] FlushFileBuffers (hFile=0x2fc) returned 1 [0219.810] CloseHandle (hObject=0x2f4) returned 1 [0219.810] CloseHandle (hObject=0x2fc) returned 1 [0219.810] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_09.mid")) returned 1 [0219.812] SetEvent (hEvent=0x27c) returned 1 [0219.812] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00013_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0219.813] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=24896) returned 1 [0219.813] CloseHandle (hObject=0x2fc) returned 1 [0219.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00013_.wmf")) returned 0x220 [0219.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00013_.wmf")) returned 0x220 [0219.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00013_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00013_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0219.813] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00013_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0219.813] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0219.813] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0219.813] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00013_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00013_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0219.814] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x6140, lpOverlapped=0x0) returned 1 [0219.818] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x6150, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x6150, lpOverlapped=0x0) returned 1 [0219.820] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0219.820] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0219.820] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0219.820] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x6140, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x6140, lpOverlapped=0x0) returned 1 [0219.820] FlushFileBuffers (hFile=0x2fc) returned 1 [0219.823] FlushFileBuffers (hFile=0x2f4) returned 1 [0219.832] CloseHandle (hObject=0x2fc) returned 1 [0219.832] CloseHandle (hObject=0x2f4) returned 1 [0219.832] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00013_.wmf")) returned 1 [0219.835] SetEvent (hEvent=0x27c) returned 1 [0219.835] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00034_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00034_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0219.835] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=15708) returned 1 [0219.835] CloseHandle (hObject=0x2f4) returned 1 [0219.835] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00034_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00034_.wmf")) returned 0x220 [0219.835] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00034_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00034_.wmf")) returned 0x220 [0219.836] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00034_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00034_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0219.836] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00034_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00034_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0219.836] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0219.836] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0219.836] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00034_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00034_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0219.840] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x3d5c, lpOverlapped=0x0) returned 1 [0219.845] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3d60, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3d60, lpOverlapped=0x0) returned 1 [0219.847] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0219.847] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0219.847] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0219.847] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3d5c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x3d5c, lpOverlapped=0x0) returned 1 [0219.848] FlushFileBuffers (hFile=0x2f4) returned 1 [0219.864] FlushFileBuffers (hFile=0x2fc) returned 1 [0219.875] CloseHandle (hObject=0x2f4) returned 1 [0219.875] CloseHandle (hObject=0x2fc) returned 1 [0219.875] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00034_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00034_.wmf")) returned 1 [0219.876] SetEvent (hEvent=0x27c) returned 1 [0219.876] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00050_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00050_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0219.879] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=19736) returned 1 [0219.879] CloseHandle (hObject=0x2fc) returned 1 [0219.879] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00050_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00050_.wmf")) returned 0x220 [0219.879] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00050_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00050_.wmf")) returned 0x220 [0219.879] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00050_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00050_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0219.879] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00050_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00050_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0219.879] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0219.879] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0219.879] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00050_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00050_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0219.880] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4d18, lpOverlapped=0x0) returned 1 [0219.882] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4d20, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4d20, lpOverlapped=0x0) returned 1 [0219.883] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0219.884] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0219.884] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0219.884] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4d18, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4d18, lpOverlapped=0x0) returned 1 [0219.884] FlushFileBuffers (hFile=0x2fc) returned 1 [0219.894] FlushFileBuffers (hFile=0x2f4) returned 1 [0219.903] CloseHandle (hObject=0x2fc) returned 1 [0219.904] CloseHandle (hObject=0x2f4) returned 1 [0219.904] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00050_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00050_.wmf")) returned 1 [0219.905] SetEvent (hEvent=0x27c) returned 1 [0219.905] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00231_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00231_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0219.908] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2228) returned 1 [0219.908] CloseHandle (hObject=0x2f4) returned 1 [0219.908] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00231_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00231_.wmf")) returned 0x220 [0219.908] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00231_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00231_.wmf")) returned 0x220 [0219.908] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00231_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00231_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0219.908] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00231_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00231_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0219.908] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0219.908] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0219.908] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00231_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00231_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0219.909] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x8b4, lpOverlapped=0x0) returned 1 [0219.913] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x8c0, lpOverlapped=0x0) returned 1 [0219.914] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0219.914] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0219.914] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0219.914] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8b4, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x8b4, lpOverlapped=0x0) returned 1 [0219.914] FlushFileBuffers (hFile=0x2f4) returned 1 [0219.926] FlushFileBuffers (hFile=0x2fc) returned 1 [0219.927] CloseHandle (hObject=0x2f4) returned 1 [0219.928] CloseHandle (hObject=0x2fc) returned 1 [0219.928] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00231_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00231_.wmf")) returned 1 [0219.929] SetEvent (hEvent=0x27c) returned 1 [0219.929] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00468_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00468_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0219.930] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=23204) returned 1 [0219.930] CloseHandle (hObject=0x2fc) returned 1 [0219.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00468_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00468_.wmf")) returned 0x220 [0219.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00468_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00468_.wmf")) returned 0x220 [0219.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00468_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00468_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0219.930] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00468_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00468_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0219.930] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0219.930] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0219.930] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00468_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00468_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0219.931] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x5aa4, lpOverlapped=0x0) returned 1 [0219.936] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5ab0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x5ab0, lpOverlapped=0x0) returned 1 [0219.937] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0219.937] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0219.937] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0219.937] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5aa4, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x5aa4, lpOverlapped=0x0) returned 1 [0219.938] FlushFileBuffers (hFile=0x2fc) returned 1 [0219.949] FlushFileBuffers (hFile=0x2f4) returned 1 [0219.958] CloseHandle (hObject=0x2fc) returned 1 [0219.958] CloseHandle (hObject=0x2f4) returned 1 [0219.958] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00468_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00468_.wmf")) returned 1 [0219.959] SetEvent (hEvent=0x27c) returned 1 [0219.960] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00485_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00485_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0219.960] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=16676) returned 1 [0219.961] CloseHandle (hObject=0x2f4) returned 1 [0219.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00485_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00485_.wmf")) returned 0x220 [0219.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00485_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00485_.wmf")) returned 0x220 [0219.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00485_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00485_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0219.961] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00485_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00485_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0219.961] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0219.961] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0219.961] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00485_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00485_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0219.962] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4124, lpOverlapped=0x0) returned 1 [0219.964] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4130, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4130, lpOverlapped=0x0) returned 1 [0219.965] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0219.966] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0219.966] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0219.966] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4124, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4124, lpOverlapped=0x0) returned 1 [0219.966] FlushFileBuffers (hFile=0x2f4) returned 1 [0219.981] FlushFileBuffers (hFile=0x2fc) returned 1 [0219.986] CloseHandle (hObject=0x2f4) returned 1 [0219.986] CloseHandle (hObject=0x2fc) returned 1 [0219.986] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00485_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00485_.wmf")) returned 1 [0219.987] SetEvent (hEvent=0x27c) returned 1 [0219.987] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00531_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00531_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0219.988] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=7908) returned 1 [0219.988] CloseHandle (hObject=0x2fc) returned 1 [0219.988] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00531_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00531_.wmf")) returned 0x220 [0219.989] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00531_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00531_.wmf")) returned 0x220 [0219.989] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00531_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00531_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0219.989] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00531_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00531_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0219.989] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0219.989] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0219.989] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00531_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00531_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0219.990] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1ee4, lpOverlapped=0x0) returned 1 [0219.992] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1ef0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1ef0, lpOverlapped=0x0) returned 1 [0219.993] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0219.993] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0219.993] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0219.993] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1ee4, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1ee4, lpOverlapped=0x0) returned 1 [0219.993] FlushFileBuffers (hFile=0x2fc) returned 1 [0220.009] FlushFileBuffers (hFile=0x2f4) returned 1 [0220.015] CloseHandle (hObject=0x2fc) returned 1 [0220.015] CloseHandle (hObject=0x2f4) returned 1 [0220.015] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00531_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00531_.wmf")) returned 1 [0220.016] SetEvent (hEvent=0x27c) returned 1 [0220.016] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00555_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00555_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0220.018] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=5132) returned 1 [0220.018] CloseHandle (hObject=0x2f4) returned 1 [0220.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00555_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00555_.wmf")) returned 0x220 [0220.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00555_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00555_.wmf")) returned 0x220 [0220.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00555_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00555_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.018] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00555_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00555_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0220.018] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0220.018] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0220.018] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00555_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00555_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0220.019] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x140c, lpOverlapped=0x0) returned 1 [0220.021] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1410, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1410, lpOverlapped=0x0) returned 1 [0220.023] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0220.023] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0220.023] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0220.023] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x140c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x140c, lpOverlapped=0x0) returned 1 [0220.023] FlushFileBuffers (hFile=0x2f4) returned 1 [0220.029] FlushFileBuffers (hFile=0x2fc) returned 1 [0220.035] CloseHandle (hObject=0x2f4) returned 1 [0220.035] CloseHandle (hObject=0x2fc) returned 1 [0220.035] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00555_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00555_.wmf")) returned 1 [0220.036] SetEvent (hEvent=0x27c) returned 1 [0220.036] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00563_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00563_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0220.037] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=22128) returned 1 [0220.038] CloseHandle (hObject=0x2fc) returned 1 [0220.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00563_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00563_.wmf")) returned 0x220 [0220.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00563_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00563_.wmf")) returned 0x220 [0220.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00563_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00563_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.038] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00563_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00563_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0220.038] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0220.038] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0220.038] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00563_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00563_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0220.039] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x5670, lpOverlapped=0x0) returned 1 [0220.042] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5680, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x5680, lpOverlapped=0x0) returned 1 [0220.043] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0220.044] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0220.044] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0220.044] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5670, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x5670, lpOverlapped=0x0) returned 1 [0220.044] FlushFileBuffers (hFile=0x2fc) returned 1 [0220.052] FlushFileBuffers (hFile=0x2f4) returned 1 [0220.055] CloseHandle (hObject=0x2fc) returned 1 [0220.055] CloseHandle (hObject=0x2f4) returned 1 [0220.055] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00563_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00563_.wmf")) returned 1 [0220.056] SetEvent (hEvent=0x27c) returned 1 [0220.057] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00608_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00608_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0220.058] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=6440) returned 1 [0220.058] CloseHandle (hObject=0x2f4) returned 1 [0220.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00608_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00608_.wmf")) returned 0x220 [0220.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00608_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00608_.wmf")) returned 0x220 [0220.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00608_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00608_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.058] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00608_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00608_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0220.058] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0220.058] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0220.058] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00608_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00608_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0220.059] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1928, lpOverlapped=0x0) returned 1 [0220.065] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1930, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1930, lpOverlapped=0x0) returned 1 [0220.066] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0220.066] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0220.066] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0220.066] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1928, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1928, lpOverlapped=0x0) returned 1 [0220.066] FlushFileBuffers (hFile=0x2f4) returned 1 [0220.074] FlushFileBuffers (hFile=0x2fc) returned 1 [0220.075] CloseHandle (hObject=0x2f4) returned 1 [0220.075] CloseHandle (hObject=0x2fc) returned 1 [0220.076] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00608_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00608_.wmf")) returned 1 [0220.077] SetEvent (hEvent=0x27c) returned 1 [0220.077] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00640_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00640_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0220.077] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=45356) returned 1 [0220.077] CloseHandle (hObject=0x2fc) returned 1 [0220.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00640_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00640_.wmf")) returned 0x220 [0220.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00640_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00640_.wmf")) returned 0x220 [0220.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00640_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00640_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.078] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00640_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00640_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0220.078] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0220.078] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0220.078] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00640_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00640_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0220.079] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xb12c, lpOverlapped=0x0) returned 1 [0220.082] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xb130, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xb130, lpOverlapped=0x0) returned 1 [0220.084] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0220.084] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0220.084] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0220.084] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xb12c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xb12c, lpOverlapped=0x0) returned 1 [0220.084] FlushFileBuffers (hFile=0x2fc) returned 1 [0220.096] FlushFileBuffers (hFile=0x2f4) returned 1 [0220.099] CloseHandle (hObject=0x2fc) returned 1 [0220.099] CloseHandle (hObject=0x2f4) returned 1 [0220.099] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00640_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00640_.wmf")) returned 1 [0220.100] SetEvent (hEvent=0x27c) returned 1 [0220.101] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00685_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00685_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0220.101] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=4234) returned 1 [0220.101] CloseHandle (hObject=0x2f4) returned 1 [0220.101] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00685_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00685_.wmf")) returned 0x220 [0220.101] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00685_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00685_.wmf")) returned 0x220 [0220.101] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00685_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00685_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.101] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00685_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00685_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0220.102] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0220.102] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0220.102] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00685_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00685_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0220.102] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x108a, lpOverlapped=0x0) returned 1 [0220.106] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1090, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1090, lpOverlapped=0x0) returned 1 [0220.107] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0220.107] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0220.107] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0220.107] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x108a, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x108a, lpOverlapped=0x0) returned 1 [0220.108] FlushFileBuffers (hFile=0x2f4) returned 1 [0220.159] FlushFileBuffers (hFile=0x2fc) returned 1 [0220.172] CloseHandle (hObject=0x2f4) returned 1 [0220.172] CloseHandle (hObject=0x2fc) returned 1 [0220.172] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00685_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00685_.wmf")) returned 1 [0220.173] SetEvent (hEvent=0x27c) returned 1 [0220.174] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00693_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00693_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0220.176] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=4408) returned 1 [0220.176] CloseHandle (hObject=0x2fc) returned 1 [0220.176] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00693_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00693_.wmf")) returned 0x220 [0220.176] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00693_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00693_.wmf")) returned 0x220 [0220.176] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00693_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00693_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.176] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00693_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00693_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0220.176] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0220.177] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0220.177] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00693_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00693_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0220.178] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1138, lpOverlapped=0x0) returned 1 [0220.181] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1140, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1140, lpOverlapped=0x0) returned 1 [0220.182] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0220.182] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0220.182] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0220.182] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1138, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1138, lpOverlapped=0x0) returned 1 [0220.182] FlushFileBuffers (hFile=0x2fc) returned 1 [0220.192] FlushFileBuffers (hFile=0x2f4) returned 1 [0220.194] CloseHandle (hObject=0x2fc) returned 1 [0220.194] CloseHandle (hObject=0x2f4) returned 1 [0220.194] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00693_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00693_.wmf")) returned 1 [0220.195] SetEvent (hEvent=0x27c) returned 1 [0220.195] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00723_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00723_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0220.196] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=6908) returned 1 [0220.196] CloseHandle (hObject=0x2f4) returned 1 [0220.196] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00723_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00723_.wmf")) returned 0x220 [0220.196] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00723_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00723_.wmf")) returned 0x220 [0220.196] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00723_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00723_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.196] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00723_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00723_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0220.196] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0220.196] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0220.196] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00723_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00723_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0220.197] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1afc, lpOverlapped=0x0) returned 1 [0220.199] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1b00, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1b00, lpOverlapped=0x0) returned 1 [0220.200] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0220.200] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0220.201] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0220.201] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1afc, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1afc, lpOverlapped=0x0) returned 1 [0220.201] FlushFileBuffers (hFile=0x2f4) returned 1 [0220.216] FlushFileBuffers (hFile=0x2fc) returned 1 [0220.219] CloseHandle (hObject=0x2f4) returned 1 [0220.219] CloseHandle (hObject=0x2fc) returned 1 [0220.219] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00723_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00723_.wmf")) returned 1 [0220.220] SetEvent (hEvent=0x27c) returned 1 [0220.221] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00737_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00737_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0220.221] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=40492) returned 1 [0220.221] CloseHandle (hObject=0x2fc) returned 1 [0220.221] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00737_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00737_.wmf")) returned 0x220 [0220.221] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00737_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00737_.wmf")) returned 0x220 [0220.221] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00737_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00737_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.221] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00737_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00737_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0220.222] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0220.222] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0220.222] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00737_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00737_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0220.222] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x9e2c, lpOverlapped=0x0) returned 1 [0220.225] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x9e30, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x9e30, lpOverlapped=0x0) returned 1 [0220.227] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0220.228] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0220.228] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0220.228] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x9e2c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x9e2c, lpOverlapped=0x0) returned 1 [0220.228] FlushFileBuffers (hFile=0x2fc) returned 1 [0220.252] FlushFileBuffers (hFile=0x2f4) returned 1 [0220.254] CloseHandle (hObject=0x2fc) returned 1 [0220.254] CloseHandle (hObject=0x2f4) returned 1 [0220.254] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00737_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00737_.wmf")) returned 1 [0220.255] SetEvent (hEvent=0x27c) returned 1 [0220.255] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00898_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00898_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0220.256] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=6408) returned 1 [0220.256] CloseHandle (hObject=0x2f4) returned 1 [0220.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00898_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00898_.wmf")) returned 0x220 [0220.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00898_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00898_.wmf")) returned 0x220 [0220.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00898_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00898_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.257] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00898_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00898_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0220.257] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0220.257] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0220.257] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00898_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00898_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0220.259] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1908, lpOverlapped=0x0) returned 1 [0220.260] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1910, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1910, lpOverlapped=0x0) returned 1 [0220.261] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0220.262] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0220.262] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0220.262] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1908, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1908, lpOverlapped=0x0) returned 1 [0220.262] FlushFileBuffers (hFile=0x2f4) returned 1 [0220.271] FlushFileBuffers (hFile=0x2fc) returned 1 [0220.275] CloseHandle (hObject=0x2f4) returned 1 [0220.275] CloseHandle (hObject=0x2fc) returned 1 [0220.275] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00898_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00898_.wmf")) returned 1 [0220.276] SetEvent (hEvent=0x27c) returned 1 [0220.276] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00998_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00998_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0220.277] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=10500) returned 1 [0220.277] CloseHandle (hObject=0x2fc) returned 1 [0220.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00998_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00998_.wmf")) returned 0x220 [0220.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00998_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00998_.wmf")) returned 0x220 [0220.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00998_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00998_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.277] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00998_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00998_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0220.278] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0220.278] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0220.278] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00998_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00998_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0220.278] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2904, lpOverlapped=0x0) returned 1 [0220.287] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2910, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2910, lpOverlapped=0x0) returned 1 [0220.288] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0220.288] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0220.288] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0220.288] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2904, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2904, lpOverlapped=0x0) returned 1 [0220.288] FlushFileBuffers (hFile=0x2fc) returned 1 [0220.291] FlushFileBuffers (hFile=0x2f4) returned 1 [0220.300] CloseHandle (hObject=0x2fc) returned 1 [0220.300] CloseHandle (hObject=0x2f4) returned 1 [0220.300] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00998_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00998_.wmf")) returned 1 [0220.301] SetEvent (hEvent=0x27c) returned 1 [0220.302] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01172_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0220.303] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1436) returned 1 [0220.303] CloseHandle (hObject=0x2f4) returned 1 [0220.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01172_.wmf")) returned 0x220 [0220.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01172_.wmf")) returned 0x220 [0220.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01172_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01172_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.304] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01172_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0220.304] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0220.304] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0220.304] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01172_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01172_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0220.305] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x59c, lpOverlapped=0x0) returned 1 [0220.331] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5a0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x5a0, lpOverlapped=0x0) returned 1 [0220.332] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0220.332] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0220.332] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0220.332] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x59c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x59c, lpOverlapped=0x0) returned 1 [0220.332] FlushFileBuffers (hFile=0x2f4) returned 1 [0220.483] FlushFileBuffers (hFile=0x2fc) returned 1 [0220.487] CloseHandle (hObject=0x2f4) returned 1 [0220.487] CloseHandle (hObject=0x2fc) returned 1 [0220.487] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01172_.wmf")) returned 1 [0220.488] SetEvent (hEvent=0x27c) returned 1 [0220.488] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01797_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01797_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0220.489] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3546) returned 1 [0220.489] CloseHandle (hObject=0x2fc) returned 1 [0220.489] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01797_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01797_.wmf")) returned 0x220 [0220.489] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01797_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01797_.wmf")) returned 0x220 [0220.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01797_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01797_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.490] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01797_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01797_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0220.490] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0220.490] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0220.490] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01797_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01797_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0220.491] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xdda, lpOverlapped=0x0) returned 1 [0220.493] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xde0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xde0, lpOverlapped=0x0) returned 1 [0220.495] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0220.495] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0220.495] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0220.495] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xdda, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xdda, lpOverlapped=0x0) returned 1 [0220.495] FlushFileBuffers (hFile=0x2fc) returned 1 [0220.503] FlushFileBuffers (hFile=0x2f4) returned 1 [0220.507] CloseHandle (hObject=0x2fc) returned 1 [0220.507] CloseHandle (hObject=0x2f4) returned 1 [0220.507] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01797_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01797_.wmf")) returned 1 [0220.509] SetEvent (hEvent=0x27c) returned 1 [0220.509] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02169_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02169_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0220.509] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=8132) returned 1 [0220.509] CloseHandle (hObject=0x2f4) returned 1 [0220.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02169_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02169_.wmf")) returned 0x220 [0220.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02169_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02169_.wmf")) returned 0x220 [0220.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02169_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02169_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.510] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02169_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02169_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0220.510] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0220.510] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0220.510] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02169_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02169_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0220.511] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1fc4, lpOverlapped=0x0) returned 1 [0220.513] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1fd0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1fd0, lpOverlapped=0x0) returned 1 [0220.514] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0220.514] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0220.514] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0220.514] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1fc4, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1fc4, lpOverlapped=0x0) returned 1 [0220.515] FlushFileBuffers (hFile=0x2f4) returned 1 [0220.517] FlushFileBuffers (hFile=0x2fc) returned 1 [0220.523] CloseHandle (hObject=0x2f4) returned 1 [0220.523] CloseHandle (hObject=0x2fc) returned 1 [0220.524] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02169_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02169_.wmf")) returned 1 [0220.525] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02263_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02263_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0220.532] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=33358) returned 1 [0220.532] CloseHandle (hObject=0x2f4) returned 1 [0220.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02263_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02263_.wmf")) returned 0x220 [0220.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02263_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02263_.wmf")) returned 0x220 [0220.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02263_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02263_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.532] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02263_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02263_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0220.533] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0220.533] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0220.533] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02263_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02263_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2bc [0220.533] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x824e, lpOverlapped=0x0) returned 1 [0220.536] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8250, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x8250, lpOverlapped=0x0) returned 1 [0220.539] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0220.539] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0220.539] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0220.539] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x824e, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x824e, lpOverlapped=0x0) returned 1 [0220.539] FlushFileBuffers (hFile=0x2f4) returned 1 [0220.560] FlushFileBuffers (hFile=0x2bc) returned 1 [0220.568] CloseHandle (hObject=0x2f4) returned 1 [0220.568] CloseHandle (hObject=0x2bc) returned 1 [0220.569] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02263_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02263_.wmf")) returned 1 [0220.570] SetEvent (hEvent=0x27c) returned 1 [0220.570] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02267_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0220.571] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=30944) returned 1 [0220.571] CloseHandle (hObject=0x2bc) returned 1 [0220.571] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02267_.wmf")) returned 0x220 [0220.571] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02267_.wmf")) returned 0x220 [0220.571] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02267_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02267_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.572] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02267_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0220.572] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0220.572] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0220.572] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02267_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02267_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0220.573] ReadFile (in: hFile=0x2bc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x78e0, lpOverlapped=0x0) returned 1 [0220.575] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x78f0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x78f0, lpOverlapped=0x0) returned 1 [0220.577] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0220.578] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0220.578] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0220.578] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x78e0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x78e0, lpOverlapped=0x0) returned 1 [0220.578] FlushFileBuffers (hFile=0x2bc) returned 1 [0220.581] FlushFileBuffers (hFile=0x2f4) returned 1 [0220.588] CloseHandle (hObject=0x2bc) returned 1 [0220.588] CloseHandle (hObject=0x2f4) returned 1 [0220.588] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02267_.wmf")) returned 1 [0220.590] SetEvent (hEvent=0x27c) returned 1 [0220.590] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02278_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02278_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0220.595] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=47556) returned 1 [0220.595] CloseHandle (hObject=0x2f4) returned 1 [0220.595] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02278_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02278_.wmf")) returned 0x220 [0220.595] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02278_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02278_.wmf")) returned 0x220 [0220.595] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02278_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02278_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.595] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02278_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02278_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0220.595] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0220.595] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0220.595] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02278_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02278_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2bc [0220.596] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xb9c4, lpOverlapped=0x0) returned 1 [0220.599] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xb9d0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xb9d0, lpOverlapped=0x0) returned 1 [0220.601] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0220.601] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0220.601] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0220.601] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xb9c4, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xb9c4, lpOverlapped=0x0) returned 1 [0220.602] FlushFileBuffers (hFile=0x2f4) returned 1 [0220.606] FlushFileBuffers (hFile=0x2bc) returned 1 [0220.607] CloseHandle (hObject=0x2f4) returned 1 [0220.607] CloseHandle (hObject=0x2bc) returned 1 [0220.607] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02278_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02278_.wmf")) returned 1 [0220.609] SetEvent (hEvent=0x27c) returned 1 [0220.609] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02280_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02280_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0220.610] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=26920) returned 1 [0220.610] CloseHandle (hObject=0x2bc) returned 1 [0220.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02280_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02280_.wmf")) returned 0x220 [0220.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02280_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02280_.wmf")) returned 0x220 [0220.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02280_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02280_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.610] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02280_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02280_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0220.610] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0220.610] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0220.610] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02280_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02280_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0220.611] ReadFile (in: hFile=0x2bc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x6928, lpOverlapped=0x0) returned 1 [0220.620] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x6930, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x6930, lpOverlapped=0x0) returned 1 [0220.621] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0220.622] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0220.622] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0220.622] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x6928, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x6928, lpOverlapped=0x0) returned 1 [0220.622] FlushFileBuffers (hFile=0x2bc) returned 1 [0220.625] FlushFileBuffers (hFile=0x2f4) returned 1 [0220.628] CloseHandle (hObject=0x2bc) returned 1 [0220.628] CloseHandle (hObject=0x2f4) returned 1 [0220.629] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02280_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02280_.wmf")) returned 1 [0220.630] SetEvent (hEvent=0x27c) returned 1 [0220.630] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02282_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02282_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0220.631] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=29696) returned 1 [0220.631] CloseHandle (hObject=0x2f4) returned 1 [0220.631] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02282_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02282_.wmf")) returned 0x220 [0220.631] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02282_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02282_.wmf")) returned 0x220 [0220.631] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02282_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02282_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.631] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02282_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02282_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0220.632] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0220.632] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0220.632] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02282_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02282_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2bc [0220.633] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x7400, lpOverlapped=0x0) returned 1 [0220.635] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7410, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x7410, lpOverlapped=0x0) returned 1 [0220.637] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0220.637] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0220.637] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0220.637] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7400, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x7400, lpOverlapped=0x0) returned 1 [0220.637] FlushFileBuffers (hFile=0x2f4) returned 1 [0220.639] FlushFileBuffers (hFile=0x2bc) returned 1 [0220.641] CloseHandle (hObject=0x2f4) returned 1 [0220.641] CloseHandle (hObject=0x2bc) returned 1 [0220.641] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02282_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02282_.wmf")) returned 1 [0220.643] SetEvent (hEvent=0x27c) returned 1 [0220.643] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02285_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02285_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0220.644] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=16528) returned 1 [0220.644] CloseHandle (hObject=0x2bc) returned 1 [0220.644] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02285_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02285_.wmf")) returned 0x220 [0220.644] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02285_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02285_.wmf")) returned 0x220 [0220.644] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02285_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02285_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.644] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02285_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02285_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0220.644] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0220.644] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0220.644] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02285_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02285_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0220.645] ReadFile (in: hFile=0x2bc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4090, lpOverlapped=0x0) returned 1 [0220.647] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x40a0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x40a0, lpOverlapped=0x0) returned 1 [0220.649] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0220.649] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0220.649] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0220.649] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4090, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4090, lpOverlapped=0x0) returned 1 [0220.649] FlushFileBuffers (hFile=0x2bc) returned 1 [0220.654] FlushFileBuffers (hFile=0x2f4) returned 1 [0220.656] CloseHandle (hObject=0x2bc) returned 1 [0220.656] CloseHandle (hObject=0x2f4) returned 1 [0220.656] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02285_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02285_.wmf")) returned 1 [0220.657] SetEvent (hEvent=0x27c) returned 1 [0220.657] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02287_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02287_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0220.658] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=17796) returned 1 [0220.658] CloseHandle (hObject=0x2f4) returned 1 [0220.658] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02287_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02287_.wmf")) returned 0x220 [0220.658] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02287_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02287_.wmf")) returned 0x220 [0220.659] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02287_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02287_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.659] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02287_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02287_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0220.659] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0220.659] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0220.659] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02287_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02287_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2bc [0220.661] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4584, lpOverlapped=0x0) returned 1 [0220.674] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4590, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4590, lpOverlapped=0x0) returned 1 [0220.675] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0220.676] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0220.676] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0220.676] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4584, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4584, lpOverlapped=0x0) returned 1 [0220.676] FlushFileBuffers (hFile=0x2f4) returned 1 [0220.680] FlushFileBuffers (hFile=0x2bc) returned 1 [0220.681] CloseHandle (hObject=0x2f4) returned 1 [0220.681] CloseHandle (hObject=0x2bc) returned 1 [0220.682] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02287_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02287_.wmf")) returned 1 [0220.683] SetEvent (hEvent=0x27c) returned 1 [0220.683] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02288_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02288_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0220.684] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=30432) returned 1 [0220.684] CloseHandle (hObject=0x2bc) returned 1 [0220.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02288_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02288_.wmf")) returned 0x220 [0220.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02288_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02288_.wmf")) returned 0x220 [0220.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02288_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02288_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.684] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02288_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02288_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0220.684] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0220.684] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0220.684] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02288_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02288_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0220.685] ReadFile (in: hFile=0x2bc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x76e0, lpOverlapped=0x0) returned 1 [0220.688] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x76f0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x76f0, lpOverlapped=0x0) returned 1 [0220.690] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0220.690] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0220.690] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0220.690] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x76e0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x76e0, lpOverlapped=0x0) returned 1 [0220.690] FlushFileBuffers (hFile=0x2bc) returned 1 [0220.692] FlushFileBuffers (hFile=0x2f4) returned 1 [0220.694] CloseHandle (hObject=0x2bc) returned 1 [0220.694] CloseHandle (hObject=0x2f4) returned 1 [0220.695] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02288_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02288_.wmf")) returned 1 [0220.696] SetEvent (hEvent=0x27c) returned 1 [0220.696] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02293_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02293_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0220.697] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=22608) returned 1 [0220.697] CloseHandle (hObject=0x2f4) returned 1 [0220.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02293_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02293_.wmf")) returned 0x220 [0220.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02293_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02293_.wmf")) returned 0x220 [0220.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02293_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02293_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.697] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02293_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02293_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0220.697] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0220.697] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0220.697] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02293_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02293_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2bc [0220.698] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x5850, lpOverlapped=0x0) returned 1 [0220.704] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5860, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x5860, lpOverlapped=0x0) returned 1 [0220.705] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0220.706] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0220.706] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0220.706] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5850, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x5850, lpOverlapped=0x0) returned 1 [0220.706] FlushFileBuffers (hFile=0x2f4) returned 1 [0220.716] FlushFileBuffers (hFile=0x2bc) returned 1 [0220.720] CloseHandle (hObject=0x2f4) returned 1 [0220.720] CloseHandle (hObject=0x2bc) returned 1 [0220.720] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02293_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02293_.wmf")) returned 1 [0220.721] SetEvent (hEvent=0x27c) returned 1 [0220.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02369_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0220.722] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2240) returned 1 [0220.722] CloseHandle (hObject=0x2bc) returned 1 [0220.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02369_.wmf")) returned 0x220 [0220.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02369_.wmf")) returned 0x220 [0220.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02369_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02369_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.722] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02369_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0220.722] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0220.723] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0220.723] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02369_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02369_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0220.723] ReadFile (in: hFile=0x2bc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x8c0, lpOverlapped=0x0) returned 1 [0220.750] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8d0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x8d0, lpOverlapped=0x0) returned 1 [0220.751] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0220.751] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0220.751] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0220.751] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x8c0, lpOverlapped=0x0) returned 1 [0220.751] FlushFileBuffers (hFile=0x2bc) returned 1 [0220.760] FlushFileBuffers (hFile=0x2f4) returned 1 [0220.762] CloseHandle (hObject=0x2bc) returned 1 [0220.762] CloseHandle (hObject=0x2f4) returned 1 [0220.762] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02369_.wmf")) returned 1 [0220.763] SetEvent (hEvent=0x27c) returned 1 [0220.763] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02950_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02950_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0220.764] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=7466) returned 1 [0220.764] CloseHandle (hObject=0x2f4) returned 1 [0220.764] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02950_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02950_.wmf")) returned 0x220 [0220.764] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02950_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02950_.wmf")) returned 0x220 [0220.764] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02950_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02950_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.765] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02950_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02950_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0220.765] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0220.765] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0220.765] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02950_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02950_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2bc [0220.766] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1d2a, lpOverlapped=0x0) returned 1 [0220.768] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1d30, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1d30, lpOverlapped=0x0) returned 1 [0220.769] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0220.769] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0220.769] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0220.769] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1d2a, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1d2a, lpOverlapped=0x0) returned 1 [0220.770] FlushFileBuffers (hFile=0x2f4) returned 1 [0220.772] FlushFileBuffers (hFile=0x2bc) returned 1 [0220.784] CloseHandle (hObject=0x2f4) returned 1 [0220.786] CloseHandle (hObject=0x2bc) returned 1 [0220.786] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02950_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02950_.wmf")) returned 1 [0220.787] SetEvent (hEvent=0x27c) returned 1 [0220.788] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03236_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03236_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0220.789] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1556) returned 1 [0220.789] CloseHandle (hObject=0x2bc) returned 1 [0220.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03236_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03236_.wmf")) returned 0x220 [0220.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03236_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03236_.wmf")) returned 0x220 [0220.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03236_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03236_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.789] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03236_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03236_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0220.789] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0220.789] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0220.789] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03236_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03236_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0220.790] ReadFile (in: hFile=0x2bc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x614, lpOverlapped=0x0) returned 1 [0220.792] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x620, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x620, lpOverlapped=0x0) returned 1 [0220.793] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0220.793] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0220.793] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0220.793] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x614, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x614, lpOverlapped=0x0) returned 1 [0220.794] FlushFileBuffers (hFile=0x2bc) returned 1 [0220.804] FlushFileBuffers (hFile=0x2f4) returned 1 [0220.807] CloseHandle (hObject=0x2bc) returned 1 [0220.807] CloseHandle (hObject=0x2f4) returned 1 [0220.807] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03236_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03236_.wmf")) returned 1 [0220.808] SetEvent (hEvent=0x27c) returned 1 [0220.808] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03257_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03257_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0220.810] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=13184) returned 1 [0220.810] CloseHandle (hObject=0x2f4) returned 1 [0220.810] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03257_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03257_.wmf")) returned 0x220 [0220.810] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03257_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03257_.wmf")) returned 0x220 [0220.810] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03257_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03257_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.810] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03257_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03257_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0220.810] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0220.811] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0220.811] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03257_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03257_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2bc [0220.811] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x3380, lpOverlapped=0x0) returned 1 [0220.818] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3390, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3390, lpOverlapped=0x0) returned 1 [0220.819] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0220.820] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0220.820] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0220.820] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3380, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x3380, lpOverlapped=0x0) returned 1 [0220.820] FlushFileBuffers (hFile=0x2f4) returned 1 [0220.824] FlushFileBuffers (hFile=0x2bc) returned 1 [0220.829] CloseHandle (hObject=0x2f4) returned 1 [0220.829] CloseHandle (hObject=0x2bc) returned 1 [0220.829] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03257_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03257_.wmf")) returned 1 [0220.830] SetEvent (hEvent=0x27c) returned 1 [0220.830] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03339_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03339_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0220.831] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=10284) returned 1 [0220.831] CloseHandle (hObject=0x2bc) returned 1 [0220.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03339_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03339_.wmf")) returned 0x220 [0220.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03339_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03339_.wmf")) returned 0x220 [0220.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03339_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03339_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.832] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03339_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03339_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0220.832] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0220.832] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0220.832] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03339_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03339_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0220.833] ReadFile (in: hFile=0x2bc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x282c, lpOverlapped=0x0) returned 1 [0220.835] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2830, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2830, lpOverlapped=0x0) returned 1 [0220.836] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0220.836] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0220.836] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0220.836] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x282c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x282c, lpOverlapped=0x0) returned 1 [0220.836] FlushFileBuffers (hFile=0x2bc) returned 1 [0220.845] FlushFileBuffers (hFile=0x2f4) returned 1 [0220.847] CloseHandle (hObject=0x2bc) returned 1 [0220.847] CloseHandle (hObject=0x2f4) returned 1 [0220.847] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03339_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03339_.wmf")) returned 1 [0220.848] SetEvent (hEvent=0x27c) returned 1 [0220.848] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03453_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0220.863] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=7972) returned 1 [0220.863] CloseHandle (hObject=0x2f4) returned 1 [0220.863] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03453_.wmf")) returned 0x220 [0220.863] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03453_.wmf")) returned 0x220 [0220.863] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03453_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03453_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.863] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03453_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0220.863] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0220.863] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0220.863] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03453_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03453_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2bc [0220.866] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1f24, lpOverlapped=0x0) returned 1 [0220.867] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1f30, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1f30, lpOverlapped=0x0) returned 1 [0220.868] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0220.869] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0220.869] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0220.869] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1f24, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1f24, lpOverlapped=0x0) returned 1 [0220.869] FlushFileBuffers (hFile=0x2f4) returned 1 [0220.881] FlushFileBuffers (hFile=0x2bc) returned 1 [0221.175] CloseHandle (hObject=0x2f4) returned 1 [0221.175] CloseHandle (hObject=0x2bc) returned 1 [0221.175] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03453_.wmf")) returned 1 [0221.176] SetEvent (hEvent=0x27c) returned 1 [0221.176] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE06049_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe06049_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0221.178] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=4636) returned 1 [0221.178] CloseHandle (hObject=0x2bc) returned 1 [0221.178] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE06049_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe06049_.wmf")) returned 0x220 [0221.178] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE06049_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe06049_.wmf")) returned 0x220 [0221.178] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE06049_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe06049_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.178] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE06049_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe06049_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0221.178] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.179] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.179] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE06049_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe06049_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0221.180] ReadFile (in: hFile=0x2bc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x121c, lpOverlapped=0x0) returned 1 [0221.182] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1220, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1220, lpOverlapped=0x0) returned 1 [0221.183] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0221.183] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.183] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.183] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x121c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x121c, lpOverlapped=0x0) returned 1 [0221.183] FlushFileBuffers (hFile=0x2bc) returned 1 [0221.187] FlushFileBuffers (hFile=0x2f4) returned 1 [0221.188] CloseHandle (hObject=0x2bc) returned 1 [0221.188] CloseHandle (hObject=0x2f4) returned 1 [0221.188] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE06049_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe06049_.wmf")) returned 1 [0221.189] SetEvent (hEvent=0x27c) returned 1 [0221.189] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE06450_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe06450_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0221.191] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=16456) returned 1 [0221.191] CloseHandle (hObject=0x2f4) returned 1 [0221.191] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE06450_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe06450_.wmf")) returned 0x220 [0221.191] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE06450_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe06450_.wmf")) returned 0x220 [0221.191] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE06450_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe06450_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.191] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE06450_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe06450_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0221.191] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.191] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.191] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE06450_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe06450_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2bc [0221.192] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4048, lpOverlapped=0x0) returned 1 [0221.195] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4050, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4050, lpOverlapped=0x0) returned 1 [0221.196] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0221.196] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.196] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.196] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4048, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4048, lpOverlapped=0x0) returned 1 [0221.196] FlushFileBuffers (hFile=0x2f4) returned 1 [0221.198] FlushFileBuffers (hFile=0x2bc) returned 1 [0221.200] CloseHandle (hObject=0x2f4) returned 1 [0221.200] CloseHandle (hObject=0x2bc) returned 1 [0221.200] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE06450_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe06450_.wmf")) returned 1 [0221.201] SetEvent (hEvent=0x27c) returned 1 [0221.201] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH00601G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph00601g.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0221.202] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1577) returned 1 [0221.202] CloseHandle (hObject=0x2bc) returned 1 [0221.202] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH00601G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph00601g.gif")) returned 0x220 [0221.202] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH00601G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph00601g.gif")) returned 0x220 [0221.203] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH00601G.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph00601g.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.203] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH00601G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph00601g.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0221.203] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.203] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.203] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH00601G.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph00601g.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0221.204] ReadFile (in: hFile=0x2bc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x629, lpOverlapped=0x0) returned 1 [0221.205] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x630, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x630, lpOverlapped=0x0) returned 1 [0221.206] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0221.206] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.207] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.207] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x629, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x629, lpOverlapped=0x0) returned 1 [0221.207] FlushFileBuffers (hFile=0x2bc) returned 1 [0221.208] FlushFileBuffers (hFile=0x2f4) returned 1 [0221.210] CloseHandle (hObject=0x2bc) returned 1 [0221.210] CloseHandle (hObject=0x2f4) returned 1 [0221.210] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH00601G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph00601g.gif")) returned 1 [0221.211] SetEvent (hEvent=0x27c) returned 1 [0221.211] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH00780U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph00780u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0221.213] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=34344) returned 1 [0221.213] CloseHandle (hObject=0x2f4) returned 1 [0221.213] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH00780U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph00780u.bmp")) returned 0x220 [0221.213] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH00780U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph00780u.bmp")) returned 0x220 [0221.213] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH00780U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph00780u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.213] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH00780U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph00780u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0221.213] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.213] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.213] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH00780U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph00780u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2bc [0221.214] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x8628, lpOverlapped=0x0) returned 1 [0221.217] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8630, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x8630, lpOverlapped=0x0) returned 1 [0221.218] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0221.218] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.218] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.218] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8628, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x8628, lpOverlapped=0x0) returned 1 [0221.219] FlushFileBuffers (hFile=0x2f4) returned 1 [0221.221] FlushFileBuffers (hFile=0x2bc) returned 1 [0221.223] CloseHandle (hObject=0x2f4) returned 1 [0221.223] CloseHandle (hObject=0x2bc) returned 1 [0221.223] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH00780U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph00780u.bmp")) returned 1 [0221.224] SetEvent (hEvent=0x27c) returned 1 [0221.224] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01035U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01035u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0221.225] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=32400) returned 1 [0221.225] CloseHandle (hObject=0x2bc) returned 1 [0221.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01035U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01035u.bmp")) returned 0x220 [0221.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01035U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01035u.bmp")) returned 0x220 [0221.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01035U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01035u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.226] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01035U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01035u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0221.226] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.226] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.226] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01035U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01035u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0221.227] ReadFile (in: hFile=0x2bc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x7e90, lpOverlapped=0x0) returned 1 [0221.229] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7ea0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x7ea0, lpOverlapped=0x0) returned 1 [0221.230] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0221.230] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.231] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.231] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7e90, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x7e90, lpOverlapped=0x0) returned 1 [0221.231] FlushFileBuffers (hFile=0x2bc) returned 1 [0221.233] FlushFileBuffers (hFile=0x2f4) returned 1 [0221.234] CloseHandle (hObject=0x2bc) returned 1 [0221.234] CloseHandle (hObject=0x2f4) returned 1 [0221.234] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01035U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01035u.bmp")) returned 1 [0221.235] SetEvent (hEvent=0x27c) returned 1 [0221.235] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01046J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01046j.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0221.236] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=135611) returned 1 [0221.236] CloseHandle (hObject=0x2f4) returned 1 [0221.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01046J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01046j.jpg")) returned 0x220 [0221.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01046J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01046j.jpg")) returned 0x220 [0221.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01046J.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01046j.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.236] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01046J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01046j.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0221.236] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.236] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.236] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01046J.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01046j.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2bc [0221.237] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x211bb, lpOverlapped=0x0) returned 1 [0221.242] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x211c0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x211c0, lpOverlapped=0x0) returned 1 [0221.245] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0221.246] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.246] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.246] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x211bb, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x211bb, lpOverlapped=0x0) returned 1 [0221.246] FlushFileBuffers (hFile=0x2f4) returned 1 [0221.257] FlushFileBuffers (hFile=0x2bc) returned 1 [0221.259] CloseHandle (hObject=0x2f4) returned 1 [0221.259] CloseHandle (hObject=0x2bc) returned 1 [0221.259] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01046J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01046j.jpg")) returned 1 [0221.261] SetEvent (hEvent=0x27c) returned 1 [0221.261] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01179J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01179j.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0221.263] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=41474) returned 1 [0221.263] CloseHandle (hObject=0x2bc) returned 1 [0221.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01179J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01179j.jpg")) returned 0x220 [0221.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01179J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01179j.jpg")) returned 0x220 [0221.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01179J.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01179j.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.264] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01179J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01179j.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0221.264] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.264] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.264] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01179J.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01179j.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0221.266] ReadFile (in: hFile=0x2bc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xa202, lpOverlapped=0x0) returned 1 [0221.269] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xa210, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xa210, lpOverlapped=0x0) returned 1 [0221.271] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0221.271] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.272] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.272] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xa202, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xa202, lpOverlapped=0x0) returned 1 [0221.272] FlushFileBuffers (hFile=0x2bc) returned 1 [0221.275] FlushFileBuffers (hFile=0x2f4) returned 1 [0221.276] CloseHandle (hObject=0x2bc) returned 1 [0221.276] CloseHandle (hObject=0x2f4) returned 1 [0221.276] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01179J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01179j.jpg")) returned 1 [0221.278] SetEvent (hEvent=0x27c) returned 1 [0221.278] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01213K.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01213k.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0221.282] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=6334) returned 1 [0221.283] CloseHandle (hObject=0x2f4) returned 1 [0221.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01213K.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01213k.jpg")) returned 0x220 [0221.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01213K.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01213k.jpg")) returned 0x220 [0221.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01213K.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01213k.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.283] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01213K.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01213k.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0221.283] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.283] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.283] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01213K.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01213k.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2bc [0221.284] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x18be, lpOverlapped=0x0) returned 1 [0221.286] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x18c0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x18c0, lpOverlapped=0x0) returned 1 [0221.287] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0221.287] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.287] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.287] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x18be, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x18be, lpOverlapped=0x0) returned 1 [0221.287] FlushFileBuffers (hFile=0x2f4) returned 1 [0221.290] FlushFileBuffers (hFile=0x2bc) returned 1 [0221.291] CloseHandle (hObject=0x2f4) returned 1 [0221.291] CloseHandle (hObject=0x2bc) returned 1 [0221.291] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01213K.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01213k.jpg")) returned 1 [0221.292] SetEvent (hEvent=0x27c) returned 1 [0221.292] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01221K.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01221k.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0221.294] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=7316) returned 1 [0221.294] CloseHandle (hObject=0x2bc) returned 1 [0221.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01221K.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01221k.jpg")) returned 0x220 [0221.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01221K.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01221k.jpg")) returned 0x220 [0221.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01221K.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01221k.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.294] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01221K.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01221k.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0221.294] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.294] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01221K.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01221k.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0221.295] ReadFile (in: hFile=0x2bc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1c94, lpOverlapped=0x0) returned 1 [0221.297] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1ca0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1ca0, lpOverlapped=0x0) returned 1 [0221.298] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0221.298] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.298] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.298] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1c94, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1c94, lpOverlapped=0x0) returned 1 [0221.299] FlushFileBuffers (hFile=0x2bc) returned 1 [0221.303] FlushFileBuffers (hFile=0x2f4) returned 1 [0221.304] CloseHandle (hObject=0x2bc) returned 1 [0221.304] CloseHandle (hObject=0x2f4) returned 1 [0221.305] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01221K.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01221k.jpg")) returned 1 [0221.305] SetEvent (hEvent=0x27c) returned 1 [0221.306] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01235U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01235u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0221.306] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=32184) returned 1 [0221.306] CloseHandle (hObject=0x2f4) returned 1 [0221.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01235U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01235u.bmp")) returned 0x220 [0221.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01235U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01235u.bmp")) returned 0x220 [0221.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01235U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01235u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.307] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01235U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01235u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0221.307] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.307] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.307] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01235U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01235u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2bc [0221.308] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x7db8, lpOverlapped=0x0) returned 1 [0221.310] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7dc0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x7dc0, lpOverlapped=0x0) returned 1 [0221.312] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0221.312] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.312] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.312] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7db8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x7db8, lpOverlapped=0x0) returned 1 [0221.312] FlushFileBuffers (hFile=0x2f4) returned 1 [0221.315] FlushFileBuffers (hFile=0x2bc) returned 1 [0221.316] CloseHandle (hObject=0x2f4) returned 1 [0221.317] CloseHandle (hObject=0x2bc) returned 1 [0221.317] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01235U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01235u.bmp")) returned 1 [0221.318] SetEvent (hEvent=0x27c) returned 1 [0221.318] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01236U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01236u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0221.320] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=31968) returned 1 [0221.320] CloseHandle (hObject=0x2bc) returned 1 [0221.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01236U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01236u.bmp")) returned 0x220 [0221.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01236U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01236u.bmp")) returned 0x220 [0221.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01236U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01236u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.320] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01236U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01236u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0221.320] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.320] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.320] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01236U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01236u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0221.321] ReadFile (in: hFile=0x2bc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x7ce0, lpOverlapped=0x0) returned 1 [0221.324] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7cf0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x7cf0, lpOverlapped=0x0) returned 1 [0221.325] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0221.326] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.326] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.326] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7ce0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x7ce0, lpOverlapped=0x0) returned 1 [0221.326] FlushFileBuffers (hFile=0x2bc) returned 1 [0221.328] FlushFileBuffers (hFile=0x2f4) returned 1 [0221.330] CloseHandle (hObject=0x2bc) returned 1 [0221.330] CloseHandle (hObject=0x2f4) returned 1 [0221.330] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01236U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01236u.bmp")) returned 1 [0221.331] SetEvent (hEvent=0x27c) returned 1 [0221.331] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01239K.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01239k.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0221.332] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=5988) returned 1 [0221.332] CloseHandle (hObject=0x2f4) returned 1 [0221.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01239K.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01239k.jpg")) returned 0x220 [0221.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01239K.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01239k.jpg")) returned 0x220 [0221.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01239K.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01239k.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.332] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01239K.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01239k.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0221.332] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.332] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.332] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01239K.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01239k.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2bc [0221.333] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1764, lpOverlapped=0x0) returned 1 [0221.335] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1770, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1770, lpOverlapped=0x0) returned 1 [0221.336] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0221.336] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.336] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.336] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1764, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1764, lpOverlapped=0x0) returned 1 [0221.337] FlushFileBuffers (hFile=0x2f4) returned 1 [0221.339] FlushFileBuffers (hFile=0x2bc) returned 1 [0221.340] CloseHandle (hObject=0x2f4) returned 1 [0221.340] CloseHandle (hObject=0x2bc) returned 1 [0221.340] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01239K.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01239k.jpg")) returned 1 [0221.341] SetEvent (hEvent=0x27c) returned 1 [0221.341] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01247U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01247u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0221.342] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=31752) returned 1 [0221.342] CloseHandle (hObject=0x2bc) returned 1 [0221.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01247U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01247u.bmp")) returned 0x220 [0221.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01247U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01247u.bmp")) returned 0x220 [0221.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01247U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01247u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.343] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01247U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01247u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0221.343] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.343] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.343] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01247U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01247u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0221.344] ReadFile (in: hFile=0x2bc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x7c08, lpOverlapped=0x0) returned 1 [0221.346] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7c10, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x7c10, lpOverlapped=0x0) returned 1 [0221.347] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0221.348] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.348] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.348] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7c08, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x7c08, lpOverlapped=0x0) returned 1 [0221.348] FlushFileBuffers (hFile=0x2bc) returned 1 [0221.350] FlushFileBuffers (hFile=0x2f4) returned 1 [0221.379] CloseHandle (hObject=0x2bc) returned 1 [0221.380] CloseHandle (hObject=0x2f4) returned 1 [0221.380] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01247U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01247u.bmp")) returned 1 [0221.381] SetEvent (hEvent=0x27c) returned 1 [0221.381] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01255G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01255g.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0221.382] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=7765) returned 1 [0221.382] CloseHandle (hObject=0x2f4) returned 1 [0221.382] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01255G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01255g.gif")) returned 0x220 [0221.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01255G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01255g.gif")) returned 0x220 [0221.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01255G.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01255g.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.383] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01255G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01255g.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0221.383] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.383] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.383] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01255G.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01255g.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2bc [0221.384] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1e55, lpOverlapped=0x0) returned 1 [0221.386] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1e60, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1e60, lpOverlapped=0x0) returned 1 [0221.387] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0221.388] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.388] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.388] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1e55, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1e55, lpOverlapped=0x0) returned 1 [0221.388] FlushFileBuffers (hFile=0x2f4) returned 1 [0221.390] FlushFileBuffers (hFile=0x2bc) returned 1 [0221.392] CloseHandle (hObject=0x2f4) returned 1 [0221.392] CloseHandle (hObject=0x2bc) returned 1 [0221.392] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01255G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01255g.gif")) returned 1 [0221.393] SetEvent (hEvent=0x27c) returned 1 [0221.393] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01265U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01265u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0221.395] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=31752) returned 1 [0221.395] CloseHandle (hObject=0x2bc) returned 1 [0221.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01265U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01265u.bmp")) returned 0x220 [0221.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01265U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01265u.bmp")) returned 0x220 [0221.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01265U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01265u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.395] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01265U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01265u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0221.395] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.395] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.395] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01265U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01265u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0221.396] ReadFile (in: hFile=0x2bc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x7c08, lpOverlapped=0x0) returned 1 [0221.399] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7c10, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x7c10, lpOverlapped=0x0) returned 1 [0221.401] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0221.401] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.401] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.401] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7c08, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x7c08, lpOverlapped=0x0) returned 1 [0221.401] FlushFileBuffers (hFile=0x2bc) returned 1 [0221.404] FlushFileBuffers (hFile=0x2f4) returned 1 [0221.405] CloseHandle (hObject=0x2bc) returned 1 [0221.405] CloseHandle (hObject=0x2f4) returned 1 [0221.405] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01265U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01265u.bmp")) returned 1 [0221.407] SetEvent (hEvent=0x27c) returned 1 [0221.407] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01332U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01332u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0221.408] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=32184) returned 1 [0221.409] CloseHandle (hObject=0x2f4) returned 1 [0221.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01332U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01332u.bmp")) returned 0x220 [0221.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01332U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01332u.bmp")) returned 0x220 [0221.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01332U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01332u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.409] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01332U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01332u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0221.409] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.409] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.409] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01332U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01332u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2bc [0221.410] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x7db8, lpOverlapped=0x0) returned 1 [0221.412] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7dc0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x7dc0, lpOverlapped=0x0) returned 1 [0221.414] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0221.414] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.414] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.414] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7db8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x7db8, lpOverlapped=0x0) returned 1 [0221.414] FlushFileBuffers (hFile=0x2f4) returned 1 [0221.418] FlushFileBuffers (hFile=0x2bc) returned 1 [0221.419] CloseHandle (hObject=0x2f4) returned 1 [0221.419] CloseHandle (hObject=0x2bc) returned 1 [0221.419] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01332U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01332u.bmp")) returned 1 [0221.420] SetEvent (hEvent=0x27c) returned 1 [0221.421] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01478U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01478u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0221.422] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=31968) returned 1 [0221.422] CloseHandle (hObject=0x2bc) returned 1 [0221.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01478U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01478u.bmp")) returned 0x220 [0221.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01478U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01478u.bmp")) returned 0x220 [0221.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01478U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01478u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.422] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01478U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01478u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0221.423] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.423] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.423] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01478U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01478u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0221.424] ReadFile (in: hFile=0x2bc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x7ce0, lpOverlapped=0x0) returned 1 [0221.426] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7cf0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x7cf0, lpOverlapped=0x0) returned 1 [0221.427] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0221.428] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.428] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.428] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7ce0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x7ce0, lpOverlapped=0x0) returned 1 [0221.428] FlushFileBuffers (hFile=0x2bc) returned 1 [0221.444] FlushFileBuffers (hFile=0x2f4) returned 1 [0221.446] CloseHandle (hObject=0x2bc) returned 1 [0221.446] CloseHandle (hObject=0x2f4) returned 1 [0221.446] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01478U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01478u.bmp")) returned 1 [0221.447] SetEvent (hEvent=0x27c) returned 1 [0221.447] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01562U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01562u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0221.450] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=32184) returned 1 [0221.450] CloseHandle (hObject=0x2f4) returned 1 [0221.450] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01562U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01562u.bmp")) returned 0x220 [0221.450] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01562U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01562u.bmp")) returned 0x220 [0221.450] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01562U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01562u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.450] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01562U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01562u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0221.450] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.450] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.450] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01562U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01562u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2bc [0221.452] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x7db8, lpOverlapped=0x0) returned 1 [0221.455] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7dc0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x7dc0, lpOverlapped=0x0) returned 1 [0221.457] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0221.457] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.457] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.457] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7db8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x7db8, lpOverlapped=0x0) returned 1 [0221.458] FlushFileBuffers (hFile=0x2f4) returned 1 [0221.469] FlushFileBuffers (hFile=0x2bc) returned 1 [0221.471] CloseHandle (hObject=0x2f4) returned 1 [0221.471] CloseHandle (hObject=0x2bc) returned 1 [0221.471] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01562U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01562u.bmp")) returned 1 [0221.472] SetEvent (hEvent=0x27c) returned 1 [0221.472] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01931J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01931j.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0221.473] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=39614) returned 1 [0221.473] CloseHandle (hObject=0x2bc) returned 1 [0221.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01931J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01931j.jpg")) returned 0x220 [0221.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01931J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01931j.jpg")) returned 0x220 [0221.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01931J.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01931j.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.473] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01931J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01931j.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0221.473] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.473] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.473] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01931J.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01931j.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0221.474] ReadFile (in: hFile=0x2bc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x9abe, lpOverlapped=0x0) returned 1 [0221.477] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x9ac0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x9ac0, lpOverlapped=0x0) returned 1 [0221.480] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0221.481] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.481] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.481] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x9abe, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x9abe, lpOverlapped=0x0) returned 1 [0221.481] FlushFileBuffers (hFile=0x2bc) returned 1 [0221.493] FlushFileBuffers (hFile=0x2f4) returned 1 [0221.495] CloseHandle (hObject=0x2bc) returned 1 [0221.495] CloseHandle (hObject=0x2f4) returned 1 [0221.495] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01931J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01931j.jpg")) returned 1 [0221.496] SetEvent (hEvent=0x27c) returned 1 [0221.497] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02039U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02039u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0221.498] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=31968) returned 1 [0221.498] CloseHandle (hObject=0x2f4) returned 1 [0221.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02039U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02039u.bmp")) returned 0x220 [0221.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02039U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02039u.bmp")) returned 0x220 [0221.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02039U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02039u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.498] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02039U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02039u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0221.498] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.498] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.498] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02039U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02039u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2bc [0221.499] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x7ce0, lpOverlapped=0x0) returned 1 [0221.501] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7cf0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x7cf0, lpOverlapped=0x0) returned 1 [0221.503] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0221.503] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.503] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.503] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7ce0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x7ce0, lpOverlapped=0x0) returned 1 [0221.503] FlushFileBuffers (hFile=0x2f4) returned 1 [0221.512] FlushFileBuffers (hFile=0x2bc) returned 1 [0221.517] CloseHandle (hObject=0x2f4) returned 1 [0221.523] CloseHandle (hObject=0x2bc) returned 1 [0221.523] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02039U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02039u.bmp")) returned 1 [0221.524] SetEvent (hEvent=0x27c) returned 1 [0221.524] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02053J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02053j.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0221.525] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=27388) returned 1 [0221.525] CloseHandle (hObject=0x2bc) returned 1 [0221.525] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02053J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02053j.jpg")) returned 0x220 [0221.525] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02053J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02053j.jpg")) returned 0x220 [0221.525] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02053J.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02053j.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.525] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02053J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02053j.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0221.526] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.526] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.526] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02053J.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02053j.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0221.527] ReadFile (in: hFile=0x2bc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x6afc, lpOverlapped=0x0) returned 1 [0221.530] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x6b00, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x6b00, lpOverlapped=0x0) returned 1 [0221.531] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0221.531] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.531] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.531] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x6afc, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x6afc, lpOverlapped=0x0) returned 1 [0221.531] FlushFileBuffers (hFile=0x2bc) returned 1 [0221.543] FlushFileBuffers (hFile=0x2f4) returned 1 [0221.548] CloseHandle (hObject=0x2bc) returned 1 [0221.548] CloseHandle (hObject=0x2f4) returned 1 [0221.548] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02053J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02053j.jpg")) returned 1 [0221.550] SetEvent (hEvent=0x27c) returned 1 [0221.550] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02062U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02062u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0221.551] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=31968) returned 1 [0221.551] CloseHandle (hObject=0x2f4) returned 1 [0221.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02062U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02062u.bmp")) returned 0x220 [0221.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02062U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02062u.bmp")) returned 0x220 [0221.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02062U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02062u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.551] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02062U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02062u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0221.552] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.552] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.552] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02062U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02062u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2bc [0221.553] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x7ce0, lpOverlapped=0x0) returned 1 [0221.555] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7cf0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x7cf0, lpOverlapped=0x0) returned 1 [0221.557] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0221.557] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.557] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.557] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7ce0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x7ce0, lpOverlapped=0x0) returned 1 [0221.558] FlushFileBuffers (hFile=0x2f4) returned 1 [0221.565] FlushFileBuffers (hFile=0x2bc) returned 1 [0221.570] CloseHandle (hObject=0x2f4) returned 1 [0221.570] CloseHandle (hObject=0x2bc) returned 1 [0221.570] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02062U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02062u.bmp")) returned 1 [0221.572] SetEvent (hEvent=0x27c) returned 1 [0221.572] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02071U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02071u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0221.574] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=32184) returned 1 [0221.574] CloseHandle (hObject=0x2bc) returned 1 [0221.574] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02071U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02071u.bmp")) returned 0x220 [0221.574] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02071U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02071u.bmp")) returned 0x220 [0221.574] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02071U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02071u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.574] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02071U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02071u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0221.574] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.574] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.574] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02071U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02071u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0221.575] ReadFile (in: hFile=0x2bc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x7db8, lpOverlapped=0x0) returned 1 [0221.578] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7dc0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x7dc0, lpOverlapped=0x0) returned 1 [0221.579] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0221.579] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.579] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.579] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7db8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x7db8, lpOverlapped=0x0) returned 1 [0221.580] FlushFileBuffers (hFile=0x2bc) returned 1 [0221.588] FlushFileBuffers (hFile=0x2f4) returned 1 [0221.594] CloseHandle (hObject=0x2bc) returned 1 [0221.594] CloseHandle (hObject=0x2f4) returned 1 [0221.594] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02071U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02071u.bmp")) returned 1 [0221.595] SetEvent (hEvent=0x27c) returned 1 [0221.595] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02208U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02208u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0221.596] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=31968) returned 1 [0221.596] CloseHandle (hObject=0x2f4) returned 1 [0221.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02208U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02208u.bmp")) returned 0x220 [0221.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02208U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02208u.bmp")) returned 0x220 [0221.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02208U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02208u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.596] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02208U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02208u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0221.596] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.597] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.597] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02208U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02208u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2bc [0221.597] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x7ce0, lpOverlapped=0x0) returned 1 [0221.600] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7cf0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x7cf0, lpOverlapped=0x0) returned 1 [0221.602] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0221.602] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.602] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.602] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7ce0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x7ce0, lpOverlapped=0x0) returned 1 [0221.603] FlushFileBuffers (hFile=0x2f4) returned 1 [0221.611] FlushFileBuffers (hFile=0x2bc) returned 1 [0221.619] CloseHandle (hObject=0x2f4) returned 1 [0221.619] CloseHandle (hObject=0x2bc) returned 1 [0221.619] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02208U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02208u.bmp")) returned 1 [0221.620] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02291U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02291u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0221.628] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=32184) returned 1 [0221.628] CloseHandle (hObject=0x2bc) returned 1 [0221.629] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02291U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02291u.bmp")) returned 0x220 [0221.629] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02291U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02291u.bmp")) returned 0x220 [0221.629] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02291U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02291u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.629] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02291U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02291u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0221.629] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.629] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.629] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02291U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02291u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0221.630] ReadFile (in: hFile=0x2bc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x7db8, lpOverlapped=0x0) returned 1 [0221.633] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7dc0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x7dc0, lpOverlapped=0x0) returned 1 [0221.634] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0221.634] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.634] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.634] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7db8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x7db8, lpOverlapped=0x0) returned 1 [0221.635] FlushFileBuffers (hFile=0x2bc) returned 1 [0221.646] FlushFileBuffers (hFile=0x2f4) returned 1 [0221.667] CloseHandle (hObject=0x2bc) returned 1 [0221.667] CloseHandle (hObject=0x2f4) returned 1 [0221.667] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02291U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02291u.bmp")) returned 1 [0221.668] SetEvent (hEvent=0x27c) returned 1 [0221.669] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02412K.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02412k.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0221.669] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3541) returned 1 [0221.669] CloseHandle (hObject=0x2f4) returned 1 [0221.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02412K.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02412k.jpg")) returned 0x220 [0221.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02412K.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02412k.jpg")) returned 0x220 [0221.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02412K.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02412k.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.670] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02412K.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02412k.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0221.670] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.670] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.670] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02412K.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02412k.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2bc [0221.671] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xdd5, lpOverlapped=0x0) returned 1 [0221.673] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xde0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xde0, lpOverlapped=0x0) returned 1 [0221.675] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0221.675] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.675] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.675] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xdd5, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xdd5, lpOverlapped=0x0) returned 1 [0221.675] FlushFileBuffers (hFile=0x2f4) returned 1 [0221.686] FlushFileBuffers (hFile=0x2bc) returned 1 [0221.688] CloseHandle (hObject=0x2f4) returned 1 [0221.688] CloseHandle (hObject=0x2bc) returned 1 [0221.688] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02412K.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02412k.jpg")) returned 1 [0221.689] SetEvent (hEvent=0x27c) returned 1 [0221.689] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02466U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02466u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0221.690] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=31752) returned 1 [0221.690] CloseHandle (hObject=0x2bc) returned 1 [0221.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02466U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02466u.bmp")) returned 0x220 [0221.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02466U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02466u.bmp")) returned 0x220 [0221.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02466U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02466u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.690] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02466U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02466u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0221.690] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.690] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.690] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02466U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02466u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0221.691] ReadFile (in: hFile=0x2bc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x7c08, lpOverlapped=0x0) returned 1 [0221.694] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7c10, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x7c10, lpOverlapped=0x0) returned 1 [0221.696] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0221.696] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.696] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.696] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7c08, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x7c08, lpOverlapped=0x0) returned 1 [0221.696] FlushFileBuffers (hFile=0x2bc) returned 1 [0221.698] FlushFileBuffers (hFile=0x2f4) returned 1 [0221.699] CloseHandle (hObject=0x2bc) returned 1 [0221.700] CloseHandle (hObject=0x2f4) returned 1 [0221.700] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02466U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02466u.bmp")) returned 1 [0221.701] SetEvent (hEvent=0x27c) returned 1 [0221.701] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02470U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02470u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0221.701] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=18684) returned 1 [0221.701] CloseHandle (hObject=0x2f4) returned 1 [0221.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02470U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02470u.bmp")) returned 0x220 [0221.702] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02470U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02470u.bmp")) returned 0x220 [0221.702] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02470U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02470u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.702] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02470U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02470u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0221.702] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.702] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.702] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02470U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02470u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2bc [0221.703] ReadFile (in: hFile=0x2f4, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x48fc, lpOverlapped=0x0) returned 1 [0221.705] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4900, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4900, lpOverlapped=0x0) returned 1 [0221.706] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0221.706] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.706] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.706] WriteFile (in: hFile=0x2f4, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x48fc, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x48fc, lpOverlapped=0x0) returned 1 [0221.706] FlushFileBuffers (hFile=0x2f4) returned 1 [0221.708] FlushFileBuffers (hFile=0x2bc) returned 1 [0221.709] CloseHandle (hObject=0x2f4) returned 1 [0221.709] CloseHandle (hObject=0x2bc) returned 1 [0221.710] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02470U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02470u.bmp")) returned 1 [0221.711] SetEvent (hEvent=0x27c) returned 1 [0221.711] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02503U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02503u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0221.713] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=31968) returned 1 [0221.713] CloseHandle (hObject=0x2fc) returned 1 [0221.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02503U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02503u.bmp")) returned 0x220 [0221.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02503U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02503u.bmp")) returned 0x220 [0221.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02503U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02503u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.713] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02503U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02503u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0221.714] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.714] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.714] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02503U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02503u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2bc [0221.714] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x7ce0, lpOverlapped=0x0) returned 1 [0221.717] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7cf0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x7cf0, lpOverlapped=0x0) returned 1 [0221.718] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0221.718] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.718] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.718] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7ce0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x7ce0, lpOverlapped=0x0) returned 1 [0221.718] FlushFileBuffers (hFile=0x2fc) returned 1 [0221.722] FlushFileBuffers (hFile=0x2bc) returned 1 [0221.726] CloseHandle (hObject=0x2fc) returned 1 [0221.726] CloseHandle (hObject=0x2bc) returned 1 [0221.727] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02503U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02503u.bmp")) returned 1 [0221.728] SetEvent (hEvent=0x27c) returned 1 [0221.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02567J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02567j.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0221.728] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=33945) returned 1 [0221.728] CloseHandle (hObject=0x2bc) returned 1 [0221.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02567J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02567j.jpg")) returned 0x220 [0221.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02567J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02567j.jpg")) returned 0x220 [0221.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02567J.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02567j.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.729] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02567J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02567j.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0221.729] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.729] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.729] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02567J.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02567j.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0221.730] ReadFile (in: hFile=0x2bc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x8499, lpOverlapped=0x0) returned 1 [0221.735] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x84a0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x84a0, lpOverlapped=0x0) returned 1 [0221.737] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0221.737] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.737] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.737] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8499, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x8499, lpOverlapped=0x0) returned 1 [0221.737] FlushFileBuffers (hFile=0x2bc) returned 1 [0221.743] FlushFileBuffers (hFile=0x2fc) returned 1 [0221.744] CloseHandle (hObject=0x2bc) returned 1 [0221.744] CloseHandle (hObject=0x2fc) returned 1 [0221.744] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02567J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02567j.jpg")) returned 1 [0221.745] SetEvent (hEvent=0x27c) returned 1 [0221.746] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02736G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02736g.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0221.746] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=25499) returned 1 [0221.746] CloseHandle (hObject=0x2fc) returned 1 [0221.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02736G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02736g.gif")) returned 0x220 [0221.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02736G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02736g.gif")) returned 0x220 [0221.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02736G.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02736g.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.747] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02736G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02736g.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0221.747] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.747] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.747] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02736G.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02736g.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2bc [0221.748] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x639b, lpOverlapped=0x0) returned 1 [0221.750] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x63a0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x63a0, lpOverlapped=0x0) returned 1 [0221.751] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0221.752] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.752] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.752] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x639b, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x639b, lpOverlapped=0x0) returned 1 [0221.752] FlushFileBuffers (hFile=0x2fc) returned 1 [0221.754] FlushFileBuffers (hFile=0x2bc) returned 1 [0221.755] CloseHandle (hObject=0x2fc) returned 1 [0221.755] CloseHandle (hObject=0x2bc) returned 1 [0221.755] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02736G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02736g.gif")) returned 1 [0221.756] SetEvent (hEvent=0x27c) returned 1 [0221.757] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02736U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02736u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0221.757] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=32400) returned 1 [0221.757] CloseHandle (hObject=0x2bc) returned 1 [0221.757] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02736U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02736u.bmp")) returned 0x220 [0221.758] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02736U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02736u.bmp")) returned 0x220 [0221.758] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02736U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02736u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.758] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02736U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02736u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0221.758] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.758] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.758] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02736U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02736u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0221.759] ReadFile (in: hFile=0x2bc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x7e90, lpOverlapped=0x0) returned 1 [0221.761] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7ea0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x7ea0, lpOverlapped=0x0) returned 1 [0221.762] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0221.762] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.763] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.763] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7e90, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x7e90, lpOverlapped=0x0) returned 1 [0221.763] FlushFileBuffers (hFile=0x2bc) returned 1 [0221.765] FlushFileBuffers (hFile=0x2fc) returned 1 [0221.767] CloseHandle (hObject=0x2bc) returned 1 [0221.767] CloseHandle (hObject=0x2fc) returned 1 [0221.767] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02736U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02736u.bmp")) returned 1 [0221.769] SetEvent (hEvent=0x27c) returned 1 [0221.769] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02738U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02738u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0221.769] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=33048) returned 1 [0221.769] CloseHandle (hObject=0x2fc) returned 1 [0221.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02738U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02738u.bmp")) returned 0x220 [0221.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02738U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02738u.bmp")) returned 0x220 [0221.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02738U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02738u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.770] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02738U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02738u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0221.770] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.770] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.770] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02738U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02738u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2bc [0221.770] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x8118, lpOverlapped=0x0) returned 1 [0221.773] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8120, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x8120, lpOverlapped=0x0) returned 1 [0221.775] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0221.775] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.775] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.775] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8118, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x8118, lpOverlapped=0x0) returned 1 [0221.775] FlushFileBuffers (hFile=0x2fc) returned 1 [0221.778] FlushFileBuffers (hFile=0x2bc) returned 1 [0221.780] CloseHandle (hObject=0x2fc) returned 1 [0221.780] CloseHandle (hObject=0x2bc) returned 1 [0221.780] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02738U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02738u.bmp")) returned 1 [0221.781] SetEvent (hEvent=0x27c) returned 1 [0221.781] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02740G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02740g.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0221.782] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=24363) returned 1 [0221.782] CloseHandle (hObject=0x2bc) returned 1 [0221.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02740G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02740g.gif")) returned 0x220 [0221.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02740G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02740g.gif")) returned 0x220 [0221.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02740G.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02740g.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.782] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02740G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02740g.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0221.782] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.782] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.782] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02740G.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02740g.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0221.783] ReadFile (in: hFile=0x2bc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x5f2b, lpOverlapped=0x0) returned 1 [0221.785] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5f30, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x5f30, lpOverlapped=0x0) returned 1 [0221.786] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0221.787] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.787] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.787] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5f2b, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x5f2b, lpOverlapped=0x0) returned 1 [0221.787] FlushFileBuffers (hFile=0x2bc) returned 1 [0221.798] FlushFileBuffers (hFile=0x2fc) returned 1 [0221.799] CloseHandle (hObject=0x2bc) returned 1 [0221.799] CloseHandle (hObject=0x2fc) returned 1 [0221.799] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02740G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02740g.gif")) returned 1 [0221.800] SetEvent (hEvent=0x27c) returned 1 [0221.801] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02740U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02740u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0221.802] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=32616) returned 1 [0221.802] CloseHandle (hObject=0x2fc) returned 1 [0221.802] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02740U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02740u.bmp")) returned 0x220 [0221.802] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02740U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02740u.bmp")) returned 0x220 [0221.802] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02740U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02740u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.802] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02740U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02740u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0221.802] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.802] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.802] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02740U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02740u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2bc [0221.803] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x7f68, lpOverlapped=0x0) returned 1 [0221.805] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7f70, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x7f70, lpOverlapped=0x0) returned 1 [0221.808] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0221.808] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.808] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.808] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7f68, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x7f68, lpOverlapped=0x0) returned 1 [0221.808] FlushFileBuffers (hFile=0x2fc) returned 1 [0221.810] FlushFileBuffers (hFile=0x2bc) returned 1 [0221.811] CloseHandle (hObject=0x2fc) returned 1 [0221.811] CloseHandle (hObject=0x2bc) returned 1 [0221.812] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02740U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02740u.bmp")) returned 1 [0221.813] SetEvent (hEvent=0x27c) returned 1 [0221.813] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02742G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02742g.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0221.814] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=20645) returned 1 [0221.814] CloseHandle (hObject=0x2bc) returned 1 [0221.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02742G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02742g.gif")) returned 0x220 [0221.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02742G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02742g.gif")) returned 0x220 [0221.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02742G.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02742g.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.814] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02742G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02742g.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0221.815] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.815] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.815] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02742G.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02742g.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0221.816] ReadFile (in: hFile=0x2bc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x50a5, lpOverlapped=0x0) returned 1 [0221.817] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x50b0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x50b0, lpOverlapped=0x0) returned 1 [0221.819] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0221.819] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.819] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.819] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x50a5, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x50a5, lpOverlapped=0x0) returned 1 [0221.819] FlushFileBuffers (hFile=0x2bc) returned 1 [0221.821] FlushFileBuffers (hFile=0x2fc) returned 1 [0221.822] CloseHandle (hObject=0x2bc) returned 1 [0221.822] CloseHandle (hObject=0x2fc) returned 1 [0221.822] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02742G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02742g.gif")) returned 1 [0221.823] SetEvent (hEvent=0x27c) returned 1 [0221.824] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02742U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02742u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0221.824] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=31968) returned 1 [0221.824] CloseHandle (hObject=0x2fc) returned 1 [0221.824] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02742U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02742u.bmp")) returned 0x220 [0221.824] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02742U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02742u.bmp")) returned 0x220 [0221.824] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02742U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02742u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.825] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02742U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02742u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0221.825] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.825] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.825] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02742U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02742u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2bc [0221.825] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x7ce0, lpOverlapped=0x0) returned 1 [0221.828] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7cf0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x7cf0, lpOverlapped=0x0) returned 1 [0221.832] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0221.832] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.832] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.832] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7ce0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x7ce0, lpOverlapped=0x0) returned 1 [0221.832] FlushFileBuffers (hFile=0x2fc) returned 1 [0221.836] FlushFileBuffers (hFile=0x2bc) returned 1 [0221.837] CloseHandle (hObject=0x2fc) returned 1 [0221.837] CloseHandle (hObject=0x2bc) returned 1 [0221.837] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02742U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02742u.bmp")) returned 1 [0221.838] SetEvent (hEvent=0x27c) returned 1 [0221.838] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02743G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02743g.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0221.839] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=28038) returned 1 [0221.839] CloseHandle (hObject=0x2bc) returned 1 [0221.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02743G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02743g.gif")) returned 0x220 [0221.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02743G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02743g.gif")) returned 0x220 [0221.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02743G.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02743g.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.840] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02743G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02743g.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0221.840] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.840] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.840] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02743G.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02743g.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0221.841] ReadFile (in: hFile=0x2bc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x6d86, lpOverlapped=0x0) returned 1 [0221.843] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x6d90, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x6d90, lpOverlapped=0x0) returned 1 [0221.874] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0221.874] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.874] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.874] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x6d86, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x6d86, lpOverlapped=0x0) returned 1 [0221.875] FlushFileBuffers (hFile=0x2bc) returned 1 [0221.881] FlushFileBuffers (hFile=0x2fc) returned 1 [0221.886] CloseHandle (hObject=0x2bc) returned 1 [0221.886] CloseHandle (hObject=0x2fc) returned 1 [0221.886] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02743G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02743g.gif")) returned 1 [0221.887] SetEvent (hEvent=0x27c) returned 1 [0221.887] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02746G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02746g.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0221.891] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=24187) returned 1 [0221.891] CloseHandle (hObject=0x2fc) returned 1 [0221.891] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02746G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02746g.gif")) returned 0x220 [0221.891] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02746G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02746g.gif")) returned 0x220 [0221.891] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02746G.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02746g.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.892] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02746G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02746g.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0221.892] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.892] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.892] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02746G.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02746g.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2bc [0221.893] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x5e7b, lpOverlapped=0x0) returned 1 [0221.897] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5e80, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x5e80, lpOverlapped=0x0) returned 1 [0221.898] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0221.899] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.899] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.899] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5e7b, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x5e7b, lpOverlapped=0x0) returned 1 [0221.899] FlushFileBuffers (hFile=0x2fc) returned 1 [0221.904] FlushFileBuffers (hFile=0x2bc) returned 1 [0221.906] CloseHandle (hObject=0x2fc) returned 1 [0221.906] CloseHandle (hObject=0x2bc) returned 1 [0221.906] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02746G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02746g.gif")) returned 1 [0221.907] SetEvent (hEvent=0x27c) returned 1 [0221.907] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02746U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02746u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0221.909] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=32132) returned 1 [0221.909] CloseHandle (hObject=0x2bc) returned 1 [0221.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02746U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02746u.bmp")) returned 0x220 [0221.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02746U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02746u.bmp")) returned 0x220 [0221.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02746U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02746u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.909] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02746U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02746u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0221.909] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.909] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.909] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02746U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02746u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0221.911] ReadFile (in: hFile=0x2bc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x7d84, lpOverlapped=0x0) returned 1 [0221.917] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7d90, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x7d90, lpOverlapped=0x0) returned 1 [0221.918] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0221.919] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.919] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.919] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7d84, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x7d84, lpOverlapped=0x0) returned 1 [0221.919] FlushFileBuffers (hFile=0x2bc) returned 1 [0221.921] FlushFileBuffers (hFile=0x2fc) returned 1 [0221.923] CloseHandle (hObject=0x2bc) returned 1 [0221.923] CloseHandle (hObject=0x2fc) returned 1 [0221.923] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02746U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02746u.bmp")) returned 1 [0221.924] SetEvent (hEvent=0x27c) returned 1 [0221.924] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02748G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02748g.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0221.925] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=24720) returned 1 [0221.925] CloseHandle (hObject=0x2fc) returned 1 [0221.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02748G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02748g.gif")) returned 0x220 [0221.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02748G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02748g.gif")) returned 0x220 [0221.926] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02748G.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02748g.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.926] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02748G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02748g.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0221.926] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.926] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.926] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02748G.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02748g.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2bc [0221.927] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x6090, lpOverlapped=0x0) returned 1 [0221.929] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x60a0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x60a0, lpOverlapped=0x0) returned 1 [0221.931] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0221.931] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.931] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.931] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x6090, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x6090, lpOverlapped=0x0) returned 1 [0221.931] FlushFileBuffers (hFile=0x2fc) returned 1 [0221.934] FlushFileBuffers (hFile=0x2bc) returned 1 [0221.935] CloseHandle (hObject=0x2fc) returned 1 [0221.935] CloseHandle (hObject=0x2bc) returned 1 [0221.935] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02748G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02748g.gif")) returned 1 [0221.936] SetEvent (hEvent=0x27c) returned 1 [0221.936] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02748U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02748u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0221.938] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=32400) returned 1 [0221.938] CloseHandle (hObject=0x2bc) returned 1 [0221.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02748U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02748u.bmp")) returned 0x220 [0221.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02748U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02748u.bmp")) returned 0x220 [0221.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02748U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02748u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.938] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02748U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02748u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0221.938] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.939] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.939] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02748U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02748u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0221.940] ReadFile (in: hFile=0x2bc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x7e90, lpOverlapped=0x0) returned 1 [0221.942] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7ea0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x7ea0, lpOverlapped=0x0) returned 1 [0221.944] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0221.944] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.944] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.944] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7e90, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x7e90, lpOverlapped=0x0) returned 1 [0221.944] FlushFileBuffers (hFile=0x2bc) returned 1 [0221.947] FlushFileBuffers (hFile=0x2fc) returned 1 [0221.948] CloseHandle (hObject=0x2bc) returned 1 [0221.948] CloseHandle (hObject=0x2fc) returned 1 [0221.948] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02748U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02748u.bmp")) returned 1 [0221.949] SetEvent (hEvent=0x27c) returned 1 [0221.949] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02749G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02749g.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0221.950] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=34709) returned 1 [0221.950] CloseHandle (hObject=0x2fc) returned 1 [0221.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02749G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02749g.gif")) returned 0x220 [0221.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02749G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02749g.gif")) returned 0x220 [0221.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02749G.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02749g.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.950] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02749G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02749g.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0221.951] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.951] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.951] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02749G.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02749g.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2bc [0221.951] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x8795, lpOverlapped=0x0) returned 1 [0221.954] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x87a0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x87a0, lpOverlapped=0x0) returned 1 [0221.956] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0221.956] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.956] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.956] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8795, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x8795, lpOverlapped=0x0) returned 1 [0221.956] FlushFileBuffers (hFile=0x2fc) returned 1 [0221.959] FlushFileBuffers (hFile=0x2bc) returned 1 [0221.960] CloseHandle (hObject=0x2fc) returned 1 [0221.960] CloseHandle (hObject=0x2bc) returned 1 [0221.960] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02749G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02749g.gif")) returned 1 [0221.961] SetEvent (hEvent=0x27c) returned 1 [0221.961] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02749U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02749u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0221.962] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=33048) returned 1 [0221.962] CloseHandle (hObject=0x2bc) returned 1 [0221.962] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02749U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02749u.bmp")) returned 0x220 [0221.962] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02749U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02749u.bmp")) returned 0x220 [0221.962] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02749U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02749u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.962] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02749U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02749u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0221.962] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.963] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.963] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02749U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02749u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0221.968] ReadFile (in: hFile=0x2bc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x8118, lpOverlapped=0x0) returned 1 [0221.971] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8120, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x8120, lpOverlapped=0x0) returned 1 [0221.973] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0221.973] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.973] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.973] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8118, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x8118, lpOverlapped=0x0) returned 1 [0221.973] FlushFileBuffers (hFile=0x2bc) returned 1 [0221.976] FlushFileBuffers (hFile=0x2fc) returned 1 [0221.980] CloseHandle (hObject=0x2bc) returned 1 [0221.980] CloseHandle (hObject=0x2fc) returned 1 [0221.980] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02749U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02749u.bmp")) returned 1 [0221.982] SetEvent (hEvent=0x27c) returned 1 [0221.982] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02750G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02750g.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0221.982] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=25799) returned 1 [0221.982] CloseHandle (hObject=0x2fc) returned 1 [0221.983] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02750G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02750g.gif")) returned 0x220 [0221.983] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02750G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02750g.gif")) returned 0x220 [0221.983] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02750G.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02750g.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.983] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02750G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02750g.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0221.983] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.983] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0221.983] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02750G.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02750g.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2bc [0221.984] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x64c7, lpOverlapped=0x0) returned 1 [0221.987] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x64d0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x64d0, lpOverlapped=0x0) returned 1 [0221.988] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0221.988] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.988] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0221.988] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x64c7, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x64c7, lpOverlapped=0x0) returned 1 [0221.988] FlushFileBuffers (hFile=0x2fc) returned 1 [0222.033] FlushFileBuffers (hFile=0x2bc) returned 1 [0222.048] CloseHandle (hObject=0x2fc) returned 1 [0222.048] CloseHandle (hObject=0x2bc) returned 1 [0222.048] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02750G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02750g.gif")) returned 1 [0222.049] SetEvent (hEvent=0x27c) returned 1 [0222.049] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02752G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02752g.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0222.050] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=50050) returned 1 [0222.051] CloseHandle (hObject=0x2bc) returned 1 [0222.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02752G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02752g.gif")) returned 0x220 [0222.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02752G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02752g.gif")) returned 0x220 [0222.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02752G.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02752g.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0222.051] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02752G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02752g.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0222.051] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0222.051] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0222.051] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02752G.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02752g.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0222.053] ReadFile (in: hFile=0x2bc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xc382, lpOverlapped=0x0) returned 1 [0222.056] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xc390, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xc390, lpOverlapped=0x0) returned 1 [0222.058] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0222.058] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0222.058] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0222.058] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xc382, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xc382, lpOverlapped=0x0) returned 1 [0222.058] FlushFileBuffers (hFile=0x2bc) returned 1 [0222.061] FlushFileBuffers (hFile=0x2fc) returned 1 [0222.073] CloseHandle (hObject=0x2bc) returned 1 [0222.073] CloseHandle (hObject=0x2fc) returned 1 [0222.073] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02752G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02752g.gif")) returned 1 [0222.074] SetEvent (hEvent=0x27c) returned 1 [0222.075] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02753U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02753u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0222.077] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=108216) returned 1 [0222.077] CloseHandle (hObject=0x2fc) returned 1 [0222.077] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02753U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02753u.bmp")) returned 0x220 [0222.077] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02753U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02753u.bmp")) returned 0x220 [0222.077] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02753U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02753u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0222.077] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02753U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02753u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0222.077] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0222.077] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0222.077] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02753U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02753u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2bc [0222.078] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1a6b8, lpOverlapped=0x0) returned 1 [0222.084] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1a6c0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1a6c0, lpOverlapped=0x0) returned 1 [0222.086] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0222.087] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0222.087] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0222.087] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1a6b8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1a6b8, lpOverlapped=0x0) returned 1 [0222.087] FlushFileBuffers (hFile=0x2fc) returned 1 [0222.101] FlushFileBuffers (hFile=0x2bc) returned 1 [0222.103] CloseHandle (hObject=0x2fc) returned 1 [0222.103] CloseHandle (hObject=0x2bc) returned 1 [0222.103] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02753U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02753u.bmp")) returned 1 [0222.105] SetEvent (hEvent=0x27c) returned 1 [0222.105] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02755U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02755u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0222.106] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=108504) returned 1 [0222.106] CloseHandle (hObject=0x2bc) returned 1 [0222.106] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02755U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02755u.bmp")) returned 0x220 [0222.106] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02755U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02755u.bmp")) returned 0x220 [0222.106] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02755U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02755u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0222.106] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02755U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02755u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0222.106] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0222.106] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0222.106] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02755U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02755u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0222.107] ReadFile (in: hFile=0x2bc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1a7d8, lpOverlapped=0x0) returned 1 [0222.114] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1a7e0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1a7e0, lpOverlapped=0x0) returned 1 [0222.117] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0222.117] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0222.117] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0222.117] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1a7d8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1a7d8, lpOverlapped=0x0) returned 1 [0222.117] FlushFileBuffers (hFile=0x2bc) returned 1 [0222.147] FlushFileBuffers (hFile=0x2fc) returned 1 [0222.158] CloseHandle (hObject=0x2bc) returned 1 [0222.158] CloseHandle (hObject=0x2fc) returned 1 [0222.158] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02755U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02755u.bmp")) returned 1 [0222.160] SetEvent (hEvent=0x27c) returned 1 [0222.160] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02757U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02757u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0222.161] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=197640) returned 1 [0222.162] CloseHandle (hObject=0x2fc) returned 1 [0222.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02757U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02757u.bmp")) returned 0x220 [0222.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02757U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02757u.bmp")) returned 0x220 [0222.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02757U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02757u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0222.162] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02757U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02757u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0222.162] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0222.162] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0222.162] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02757U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02757u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2bc [0222.163] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x30408, lpOverlapped=0x0) returned 1 [0222.170] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x30410, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x30410, lpOverlapped=0x0) returned 1 [0222.176] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0222.177] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0222.177] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0222.177] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x30408, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x30408, lpOverlapped=0x0) returned 1 [0222.177] FlushFileBuffers (hFile=0x2fc) returned 1 [0222.190] FlushFileBuffers (hFile=0x2bc) returned 1 [0222.201] CloseHandle (hObject=0x2fc) returned 1 [0222.201] CloseHandle (hObject=0x2bc) returned 1 [0222.201] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02757U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02757u.bmp")) returned 1 [0222.204] SetEvent (hEvent=0x27c) returned 1 [0222.204] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02759J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02759j.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0222.205] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=41170) returned 1 [0222.205] CloseHandle (hObject=0x2bc) returned 1 [0222.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02759J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02759j.jpg")) returned 0x220 [0222.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02759J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02759j.jpg")) returned 0x220 [0222.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02759J.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02759j.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0222.205] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02759J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02759j.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0222.205] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0222.206] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0222.206] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02759J.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02759j.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0222.207] ReadFile (in: hFile=0x2bc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xa0d2, lpOverlapped=0x0) returned 1 [0222.210] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xa0e0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xa0e0, lpOverlapped=0x0) returned 1 [0222.211] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0222.212] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0222.212] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0222.212] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xa0d2, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xa0d2, lpOverlapped=0x0) returned 1 [0222.212] FlushFileBuffers (hFile=0x2bc) returned 1 [0222.226] FlushFileBuffers (hFile=0x2fc) returned 1 [0222.295] CloseHandle (hObject=0x2bc) returned 1 [0222.295] CloseHandle (hObject=0x2fc) returned 1 [0222.296] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02759J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02759j.jpg")) returned 1 [0222.297] SetEvent (hEvent=0x27c) returned 1 [0222.298] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02829J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02829j.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0222.299] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=62520) returned 1 [0222.299] CloseHandle (hObject=0x2fc) returned 1 [0222.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02829J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02829j.jpg")) returned 0x220 [0222.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02829J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02829j.jpg")) returned 0x220 [0222.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02829J.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02829j.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0222.300] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02829J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02829j.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0222.300] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0222.300] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0222.300] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02829J.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02829j.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2bc [0222.301] ReadFile (in: hFile=0x2fc, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xf438, lpOverlapped=0x0) returned 1 [0222.308] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf440, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf440, lpOverlapped=0x0) returned 1 [0222.310] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0222.311] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0222.311] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0222.311] WriteFile (in: hFile=0x2fc, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf438, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xf438, lpOverlapped=0x0) returned 1 [0222.311] FlushFileBuffers (hFile=0x2fc) returned 1 [0222.483] FlushFileBuffers (hFile=0x2bc) returned 1 [0222.488] CloseHandle (hObject=0x2fc) returned 1 [0222.488] CloseHandle (hObject=0x2bc) returned 1 [0222.488] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02829J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02829j.jpg")) returned 1 [0222.490] SetEvent (hEvent=0x27c) returned 1 [0222.490] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02897J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02897j.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0222.493] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=15429) returned 1 [0222.493] CloseHandle (hObject=0x2fc) returned 1 [0222.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02897J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02897j.jpg")) returned 0x220 [0222.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02897J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02897j.jpg")) returned 0x220 [0222.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02897J.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02897j.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0222.495] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02897J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02897j.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0222.495] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0222.495] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0222.495] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02897J.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02897j.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0222.496] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x3c45, lpOverlapped=0x0) returned 1 [0222.509] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3c50, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3c50, lpOverlapped=0x0) returned 1 [0222.511] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0222.511] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0222.511] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0222.511] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3c45, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x3c45, lpOverlapped=0x0) returned 1 [0222.511] FlushFileBuffers (hFile=0x2b0) returned 1 [0222.515] FlushFileBuffers (hFile=0x21c) returned 1 [0222.523] CloseHandle (hObject=0x2b0) returned 1 [0222.523] CloseHandle (hObject=0x21c) returned 1 [0222.523] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02897J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02897j.jpg")) returned 1 [0222.524] SetEvent (hEvent=0x27c) returned 1 [0222.524] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03012U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03012u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0222.525] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=4118) returned 1 [0222.525] CloseHandle (hObject=0x21c) returned 1 [0222.525] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03012U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03012u.bmp")) returned 0x220 [0222.525] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03012U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03012u.bmp")) returned 0x220 [0222.525] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03012U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03012u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0222.525] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03012U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03012u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0222.525] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0222.525] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0222.525] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03012U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03012u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0222.526] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1016, lpOverlapped=0x0) returned 1 [0222.530] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1020, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1020, lpOverlapped=0x0) returned 1 [0222.531] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0222.533] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0222.533] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0222.533] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1016, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1016, lpOverlapped=0x0) returned 1 [0222.533] FlushFileBuffers (hFile=0x21c) returned 1 [0222.537] FlushFileBuffers (hFile=0x2b0) returned 1 [0222.546] CloseHandle (hObject=0x21c) returned 1 [0222.546] CloseHandle (hObject=0x2b0) returned 1 [0222.546] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03012U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03012u.bmp")) returned 1 [0222.547] SetEvent (hEvent=0x27c) returned 1 [0222.547] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03041I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03041i.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0222.548] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=30895) returned 1 [0222.548] CloseHandle (hObject=0x2b0) returned 1 [0222.548] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03041I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03041i.jpg")) returned 0x220 [0222.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03041I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03041i.jpg")) returned 0x220 [0222.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03041I.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03041i.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0222.549] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03041I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03041i.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0222.549] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0222.549] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0222.549] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03041I.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03041i.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0222.550] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x78af, lpOverlapped=0x0) returned 1 [0222.553] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x78b0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x78b0, lpOverlapped=0x0) returned 1 [0222.554] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0222.554] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0222.554] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0222.554] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x78af, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x78af, lpOverlapped=0x0) returned 1 [0222.555] FlushFileBuffers (hFile=0x2b0) returned 1 [0222.567] FlushFileBuffers (hFile=0x21c) returned 1 [0222.584] CloseHandle (hObject=0x2b0) returned 1 [0222.584] CloseHandle (hObject=0x21c) returned 1 [0222.584] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03041I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03041i.jpg")) returned 1 [0222.585] SetEvent (hEvent=0x27c) returned 1 [0222.586] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03205I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03205i.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0222.588] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=41795) returned 1 [0222.588] CloseHandle (hObject=0x21c) returned 1 [0222.588] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03205I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03205i.jpg")) returned 0x220 [0222.588] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03205I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03205i.jpg")) returned 0x220 [0222.588] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03205I.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03205i.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0222.588] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03205I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03205i.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0222.588] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0222.589] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0222.589] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03205I.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03205i.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0222.590] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xa343, lpOverlapped=0x0) returned 1 [0222.597] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xa350, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xa350, lpOverlapped=0x0) returned 1 [0222.599] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0222.600] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0222.600] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0222.600] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xa343, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xa343, lpOverlapped=0x0) returned 1 [0222.600] FlushFileBuffers (hFile=0x21c) returned 1 [0222.608] FlushFileBuffers (hFile=0x2b0) returned 1 [0222.614] CloseHandle (hObject=0x21c) returned 1 [0222.614] CloseHandle (hObject=0x2b0) returned 1 [0222.614] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03205I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03205i.jpg")) returned 1 [0222.616] SetEvent (hEvent=0x27c) returned 1 [0222.616] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03379I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03379i.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0222.617] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=11170) returned 1 [0222.617] CloseHandle (hObject=0x2b0) returned 1 [0222.617] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03379I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03379i.jpg")) returned 0x220 [0222.617] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03379I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03379i.jpg")) returned 0x220 [0222.617] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03379I.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03379i.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0222.617] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03379I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03379i.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0222.617] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0222.617] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0222.617] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03379I.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03379i.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0222.618] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2ba2, lpOverlapped=0x0) returned 1 [0222.621] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2bb0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2bb0, lpOverlapped=0x0) returned 1 [0222.622] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0222.622] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0222.622] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0222.622] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2ba2, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2ba2, lpOverlapped=0x0) returned 1 [0222.622] FlushFileBuffers (hFile=0x2b0) returned 1 [0222.625] FlushFileBuffers (hFile=0x21c) returned 1 [0222.632] CloseHandle (hObject=0x2b0) returned 1 [0222.633] CloseHandle (hObject=0x21c) returned 1 [0222.633] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03379I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03379i.jpg")) returned 1 [0222.634] SetEvent (hEvent=0x27c) returned 1 [0222.634] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03425I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03425i.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0222.635] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=48558) returned 1 [0222.635] CloseHandle (hObject=0x21c) returned 1 [0222.635] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03425I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03425i.jpg")) returned 0x220 [0222.635] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03425I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03425i.jpg")) returned 0x220 [0222.635] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03425I.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03425i.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0222.635] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03425I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03425i.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0222.635] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0222.635] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0222.635] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03425I.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03425i.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0222.636] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xbdae, lpOverlapped=0x0) returned 1 [0222.642] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xbdb0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xbdb0, lpOverlapped=0x0) returned 1 [0222.643] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0222.644] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0222.644] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0222.644] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xbdae, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xbdae, lpOverlapped=0x0) returned 1 [0222.644] FlushFileBuffers (hFile=0x21c) returned 1 [0222.647] FlushFileBuffers (hFile=0x2b0) returned 1 [0222.654] CloseHandle (hObject=0x21c) returned 1 [0222.654] CloseHandle (hObject=0x2b0) returned 1 [0222.654] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03425I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03425i.jpg")) returned 1 [0222.656] SetEvent (hEvent=0x27c) returned 1 [0222.656] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PRRTINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\prrtinst.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0222.657] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=31404) returned 1 [0222.657] CloseHandle (hObject=0x2b0) returned 1 [0222.657] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PRRTINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\prrtinst.wmf")) returned 0x220 [0222.657] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PRRTINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\prrtinst.wmf")) returned 0x220 [0222.657] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PRRTINST.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\prrtinst.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0222.657] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PRRTINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\prrtinst.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0222.657] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0222.657] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0222.657] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PRRTINST.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\prrtinst.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0222.658] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x7aac, lpOverlapped=0x0) returned 1 [0222.663] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7ab0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x7ab0, lpOverlapped=0x0) returned 1 [0222.664] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0222.664] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0222.664] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0222.665] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7aac, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x7aac, lpOverlapped=0x0) returned 1 [0222.665] FlushFileBuffers (hFile=0x2b0) returned 1 [0222.668] FlushFileBuffers (hFile=0x21c) returned 1 [0222.669] CloseHandle (hObject=0x2b0) returned 1 [0222.669] CloseHandle (hObject=0x21c) returned 1 [0222.669] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PRRTINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\prrtinst.wmf")) returned 1 [0222.670] SetEvent (hEvent=0x27c) returned 1 [0222.671] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSRETRO.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\psretro.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0222.672] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=982) returned 1 [0222.672] CloseHandle (hObject=0x21c) returned 1 [0222.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSRETRO.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\psretro.wmf")) returned 0x220 [0222.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSRETRO.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\psretro.wmf")) returned 0x220 [0222.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSRETRO.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\psretro.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0222.672] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSRETRO.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\psretro.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0222.672] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0222.672] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0222.672] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSRETRO.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\psretro.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0222.674] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x3d6, lpOverlapped=0x0) returned 1 [0222.675] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3e0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3e0, lpOverlapped=0x0) returned 1 [0222.680] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0222.680] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0222.680] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0222.680] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3d6, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x3d6, lpOverlapped=0x0) returned 1 [0222.680] FlushFileBuffers (hFile=0x21c) returned 1 [0222.692] FlushFileBuffers (hFile=0x2b0) returned 1 [0222.693] CloseHandle (hObject=0x21c) returned 1 [0222.693] CloseHandle (hObject=0x2b0) returned 1 [0222.693] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSRETRO.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\psretro.wmf")) returned 1 [0222.694] SetEvent (hEvent=0x27c) returned 1 [0222.694] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSSKETLG.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pssketlg.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0222.697] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3594) returned 1 [0222.697] CloseHandle (hObject=0x2b0) returned 1 [0222.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSSKETLG.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pssketlg.wmf")) returned 0x220 [0222.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSSKETLG.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pssketlg.wmf")) returned 0x220 [0222.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSSKETLG.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pssketlg.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0222.697] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSSKETLG.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pssketlg.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0222.697] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0222.697] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0222.698] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSSKETLG.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pssketlg.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0222.699] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xe0a, lpOverlapped=0x0) returned 1 [0222.700] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xe10, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xe10, lpOverlapped=0x0) returned 1 [0222.702] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0222.702] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0222.702] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0222.702] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xe0a, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xe0a, lpOverlapped=0x0) returned 1 [0222.702] FlushFileBuffers (hFile=0x2b0) returned 1 [0222.704] FlushFileBuffers (hFile=0x21c) returned 1 [0222.705] CloseHandle (hObject=0x2b0) returned 1 [0222.706] CloseHandle (hObject=0x21c) returned 1 [0222.706] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSSKETLG.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pssketlg.wmf")) returned 1 [0222.707] SetEvent (hEvent=0x27c) returned 1 [0222.707] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSSKETSM.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pssketsm.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0222.708] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1910) returned 1 [0222.708] CloseHandle (hObject=0x21c) returned 1 [0222.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSSKETSM.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pssketsm.wmf")) returned 0x220 [0222.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSSKETSM.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pssketsm.wmf")) returned 0x220 [0222.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSSKETSM.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pssketsm.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0222.708] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSSKETSM.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pssketsm.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0222.708] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0222.708] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0222.708] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSSKETSM.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pssketsm.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0222.709] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x776, lpOverlapped=0x0) returned 1 [0222.711] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x780, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x780, lpOverlapped=0x0) returned 1 [0222.712] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0222.712] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0222.712] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0222.712] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x776, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x776, lpOverlapped=0x0) returned 1 [0222.712] FlushFileBuffers (hFile=0x21c) returned 1 [0222.714] FlushFileBuffers (hFile=0x2b0) returned 1 [0222.715] CloseHandle (hObject=0x21c) returned 1 [0222.715] CloseHandle (hObject=0x2b0) returned 1 [0222.715] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSSKETSM.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pssketsm.wmf")) returned 1 [0222.716] SetEvent (hEvent=0x27c) returned 1 [0222.716] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSWAVY.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pswavy.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0222.717] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2834) returned 1 [0222.717] CloseHandle (hObject=0x2b0) returned 1 [0222.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSWAVY.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pswavy.wmf")) returned 0x220 [0222.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSWAVY.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pswavy.wmf")) returned 0x220 [0222.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSWAVY.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pswavy.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0222.722] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSWAVY.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pswavy.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0222.722] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0222.722] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0222.722] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSWAVY.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pswavy.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0222.723] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xb12, lpOverlapped=0x0) returned 1 [0222.741] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xb20, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xb20, lpOverlapped=0x0) returned 1 [0222.742] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0222.742] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0222.742] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0222.742] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xb12, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xb12, lpOverlapped=0x0) returned 1 [0222.742] FlushFileBuffers (hFile=0x2b0) returned 1 [0222.744] FlushFileBuffers (hFile=0x21c) returned 1 [0222.746] CloseHandle (hObject=0x2b0) returned 1 [0222.746] CloseHandle (hObject=0x21c) returned 1 [0222.746] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSWAVY.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pswavy.wmf")) returned 1 [0222.747] SetEvent (hEvent=0x27c) returned 1 [0222.747] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\RE00006_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\re00006_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0222.748] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1772) returned 1 [0222.748] CloseHandle (hObject=0x21c) returned 1 [0222.748] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\RE00006_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\re00006_.wmf")) returned 0x220 [0222.748] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\RE00006_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\re00006_.wmf")) returned 0x220 [0222.748] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\RE00006_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\re00006_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0222.748] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\RE00006_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\re00006_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0222.748] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0222.748] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0222.748] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\RE00006_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\re00006_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0222.749] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x6ec, lpOverlapped=0x0) returned 1 [0222.751] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x6f0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x6f0, lpOverlapped=0x0) returned 1 [0222.752] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0222.752] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0222.752] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0222.752] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x6ec, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x6ec, lpOverlapped=0x0) returned 1 [0222.752] FlushFileBuffers (hFile=0x21c) returned 1 [0222.754] FlushFileBuffers (hFile=0x2b0) returned 1 [0222.755] CloseHandle (hObject=0x21c) returned 1 [0222.755] CloseHandle (hObject=0x2b0) returned 1 [0222.755] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\RE00006_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\re00006_.wmf")) returned 1 [0222.756] SetEvent (hEvent=0x27c) returned 1 [0222.756] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\RECYCLE.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\recycle.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0222.757] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3350) returned 1 [0222.757] CloseHandle (hObject=0x2b0) returned 1 [0222.758] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\RECYCLE.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\recycle.wmf")) returned 0x220 [0222.758] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\RECYCLE.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\recycle.wmf")) returned 0x220 [0222.758] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\RECYCLE.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\recycle.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0222.758] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\RECYCLE.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\recycle.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0222.758] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0222.758] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0222.758] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\RECYCLE.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\recycle.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0222.759] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xd16, lpOverlapped=0x0) returned 1 [0222.762] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xd20, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xd20, lpOverlapped=0x0) returned 1 [0222.763] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0222.763] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0222.763] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0222.763] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xd16, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xd16, lpOverlapped=0x0) returned 1 [0222.763] FlushFileBuffers (hFile=0x2b0) returned 1 [0222.766] FlushFileBuffers (hFile=0x21c) returned 1 [0222.767] CloseHandle (hObject=0x2b0) returned 1 [0222.767] CloseHandle (hObject=0x21c) returned 1 [0222.767] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\RECYCLE.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\recycle.wmf")) returned 1 [0222.768] SetEvent (hEvent=0x27c) returned 1 [0222.768] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ROAD_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\road_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0222.770] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=5983) returned 1 [0222.770] CloseHandle (hObject=0x21c) returned 1 [0222.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ROAD_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\road_01.mid")) returned 0x220 [0222.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ROAD_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\road_01.mid")) returned 0x220 [0222.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ROAD_01.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\road_01.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0222.770] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ROAD_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\road_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0222.770] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0222.770] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0222.770] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ROAD_01.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\road_01.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0222.771] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x175f, lpOverlapped=0x0) returned 1 [0222.773] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1760, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1760, lpOverlapped=0x0) returned 1 [0222.774] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0222.774] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0222.774] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0222.774] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x175f, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x175f, lpOverlapped=0x0) returned 1 [0222.774] FlushFileBuffers (hFile=0x21c) returned 1 [0222.777] FlushFileBuffers (hFile=0x2b0) returned 1 [0222.778] CloseHandle (hObject=0x21c) returned 1 [0222.778] CloseHandle (hObject=0x2b0) returned 1 [0222.778] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ROAD_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\road_01.mid")) returned 1 [0222.779] SetEvent (hEvent=0x27c) returned 1 [0222.779] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SAFRI_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\safri_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0222.780] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=10122) returned 1 [0222.780] CloseHandle (hObject=0x2b0) returned 1 [0222.780] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SAFRI_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\safri_01.mid")) returned 0x220 [0222.780] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SAFRI_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\safri_01.mid")) returned 0x220 [0222.780] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SAFRI_01.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\safri_01.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0222.780] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SAFRI_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\safri_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0222.781] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0222.781] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0222.781] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SAFRI_01.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\safri_01.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0222.782] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x278a, lpOverlapped=0x0) returned 1 [0222.783] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2790, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2790, lpOverlapped=0x0) returned 1 [0222.784] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0222.785] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0222.785] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0222.785] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x278a, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x278a, lpOverlapped=0x0) returned 1 [0222.785] FlushFileBuffers (hFile=0x2b0) returned 1 [0222.789] FlushFileBuffers (hFile=0x21c) returned 1 [0222.790] CloseHandle (hObject=0x2b0) returned 1 [0222.790] CloseHandle (hObject=0x21c) returned 1 [0222.790] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SAFRI_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\safri_01.mid")) returned 1 [0222.791] SetEvent (hEvent=0x27c) returned 1 [0222.791] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SCHOL_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\schol_02.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0222.793] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=5058) returned 1 [0222.793] CloseHandle (hObject=0x21c) returned 1 [0222.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SCHOL_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\schol_02.mid")) returned 0x220 [0222.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SCHOL_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\schol_02.mid")) returned 0x220 [0222.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SCHOL_02.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\schol_02.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0222.793] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SCHOL_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\schol_02.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0222.793] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0222.793] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0222.794] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SCHOL_02.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\schol_02.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0222.795] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x13c2, lpOverlapped=0x0) returned 1 [0222.796] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x13d0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x13d0, lpOverlapped=0x0) returned 1 [0222.798] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0222.798] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0222.798] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0222.798] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x13c2, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x13c2, lpOverlapped=0x0) returned 1 [0222.799] FlushFileBuffers (hFile=0x21c) returned 1 [0222.801] FlushFileBuffers (hFile=0x2b0) returned 1 [0222.802] CloseHandle (hObject=0x21c) returned 1 [0222.802] CloseHandle (hObject=0x2b0) returned 1 [0222.802] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SCHOL_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\schol_02.mid")) returned 1 [0222.803] SetEvent (hEvent=0x27c) returned 1 [0222.803] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SHOW_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\show_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0222.804] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=6392) returned 1 [0222.804] CloseHandle (hObject=0x2b0) returned 1 [0222.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SHOW_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\show_01.mid")) returned 0x220 [0222.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SHOW_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\show_01.mid")) returned 0x220 [0222.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SHOW_01.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\show_01.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0222.804] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SHOW_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\show_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0222.805] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0222.805] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0222.805] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SHOW_01.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\show_01.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0222.806] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x18f8, lpOverlapped=0x0) returned 1 [0222.808] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1900, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1900, lpOverlapped=0x0) returned 1 [0222.809] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0222.809] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0222.809] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0222.809] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x18f8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x18f8, lpOverlapped=0x0) returned 1 [0222.809] FlushFileBuffers (hFile=0x2b0) returned 1 [0222.812] FlushFileBuffers (hFile=0x21c) returned 1 [0222.813] CloseHandle (hObject=0x2b0) returned 1 [0222.813] CloseHandle (hObject=0x21c) returned 1 [0222.813] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SHOW_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\show_01.mid")) returned 1 [0222.814] SetEvent (hEvent=0x27c) returned 1 [0222.814] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00256_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00256_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0222.815] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=10762) returned 1 [0222.815] CloseHandle (hObject=0x21c) returned 1 [0222.815] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00256_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00256_.wmf")) returned 0x220 [0222.815] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00256_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00256_.wmf")) returned 0x220 [0222.815] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00256_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00256_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0222.815] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00256_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00256_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0222.816] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0222.816] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0222.816] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00256_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00256_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0222.816] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2a0a, lpOverlapped=0x0) returned 1 [0222.821] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2a10, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2a10, lpOverlapped=0x0) returned 1 [0222.824] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0222.824] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0222.824] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0222.824] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2a0a, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2a0a, lpOverlapped=0x0) returned 1 [0222.824] FlushFileBuffers (hFile=0x21c) returned 1 [0222.829] FlushFileBuffers (hFile=0x2b0) returned 1 [0222.830] CloseHandle (hObject=0x21c) returned 1 [0222.830] CloseHandle (hObject=0x2b0) returned 1 [0222.830] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00256_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00256_.wmf")) returned 1 [0222.831] SetEvent (hEvent=0x27c) returned 1 [0222.831] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00260_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00260_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0222.832] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=31908) returned 1 [0222.832] CloseHandle (hObject=0x2b0) returned 1 [0222.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00260_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00260_.wmf")) returned 0x220 [0222.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00260_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00260_.wmf")) returned 0x220 [0222.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00260_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00260_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0222.833] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00260_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00260_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0222.833] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0222.833] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0222.833] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00260_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00260_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0222.834] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x7ca4, lpOverlapped=0x0) returned 1 [0222.836] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7cb0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x7cb0, lpOverlapped=0x0) returned 1 [0222.838] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0222.838] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0222.838] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0222.838] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7ca4, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x7ca4, lpOverlapped=0x0) returned 1 [0222.839] FlushFileBuffers (hFile=0x2b0) returned 1 [0222.841] FlushFileBuffers (hFile=0x21c) returned 1 [0222.842] CloseHandle (hObject=0x2b0) returned 1 [0222.842] CloseHandle (hObject=0x21c) returned 1 [0222.842] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00260_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00260_.wmf")) returned 1 [0222.843] SetEvent (hEvent=0x27c) returned 1 [0222.843] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00268_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00268_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0222.844] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=3932) returned 1 [0222.844] CloseHandle (hObject=0x21c) returned 1 [0222.845] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00268_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00268_.wmf")) returned 0x220 [0222.845] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00268_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00268_.wmf")) returned 0x220 [0222.845] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00268_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00268_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0222.845] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00268_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00268_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0222.845] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0222.845] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0222.845] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00268_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00268_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0222.846] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xf5c, lpOverlapped=0x0) returned 1 [0222.847] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf60, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf60, lpOverlapped=0x0) returned 1 [0222.848] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0222.849] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0222.849] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0222.849] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf5c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xf5c, lpOverlapped=0x0) returned 1 [0222.849] FlushFileBuffers (hFile=0x21c) returned 1 [0222.852] FlushFileBuffers (hFile=0x2b0) returned 1 [0223.070] CloseHandle (hObject=0x21c) returned 1 [0223.070] CloseHandle (hObject=0x2b0) returned 1 [0223.070] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00268_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00268_.wmf")) returned 1 [0223.071] SetEvent (hEvent=0x27c) returned 1 [0223.071] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01041_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01041_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0223.073] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1548) returned 1 [0223.073] CloseHandle (hObject=0x2b0) returned 1 [0223.073] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01041_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01041_.wmf")) returned 0x220 [0223.073] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01041_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01041_.wmf")) returned 0x220 [0223.073] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01041_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01041_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.073] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01041_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01041_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0223.073] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.074] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.074] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01041_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01041_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0223.075] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x60c, lpOverlapped=0x0) returned 1 [0223.078] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x610, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x610, lpOverlapped=0x0) returned 1 [0223.079] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0223.080] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.080] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.080] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x60c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x60c, lpOverlapped=0x0) returned 1 [0223.080] FlushFileBuffers (hFile=0x2b0) returned 1 [0223.082] FlushFileBuffers (hFile=0x21c) returned 1 [0223.086] CloseHandle (hObject=0x2b0) returned 1 [0223.086] CloseHandle (hObject=0x21c) returned 1 [0223.086] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01041_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01041_.wmf")) returned 1 [0223.087] SetEvent (hEvent=0x27c) returned 1 [0223.088] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01394_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01394_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0223.089] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=6916) returned 1 [0223.089] CloseHandle (hObject=0x21c) returned 1 [0223.089] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01394_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01394_.wmf")) returned 0x220 [0223.089] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01394_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01394_.wmf")) returned 0x220 [0223.090] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01394_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01394_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.090] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01394_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01394_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0223.090] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.090] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.090] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01394_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01394_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0223.091] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1b04, lpOverlapped=0x0) returned 1 [0223.093] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1b10, lpOverlapped=0x0) returned 1 [0223.094] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0223.094] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.094] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.094] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1b04, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1b04, lpOverlapped=0x0) returned 1 [0223.095] FlushFileBuffers (hFile=0x21c) returned 1 [0223.097] FlushFileBuffers (hFile=0x2b0) returned 1 [0223.098] CloseHandle (hObject=0x21c) returned 1 [0223.098] CloseHandle (hObject=0x2b0) returned 1 [0223.099] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01394_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01394_.wmf")) returned 1 [0223.100] SetEvent (hEvent=0x27c) returned 1 [0223.100] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01395_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01395_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0223.101] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=5004) returned 1 [0223.101] CloseHandle (hObject=0x2b0) returned 1 [0223.101] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01395_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01395_.wmf")) returned 0x220 [0223.101] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01395_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01395_.wmf")) returned 0x220 [0223.101] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01395_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01395_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.101] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01395_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01395_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0223.101] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.101] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.101] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01395_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01395_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0223.102] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x138c, lpOverlapped=0x0) returned 1 [0223.104] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1390, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1390, lpOverlapped=0x0) returned 1 [0223.105] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0223.105] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.105] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.105] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x138c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x138c, lpOverlapped=0x0) returned 1 [0223.105] FlushFileBuffers (hFile=0x2b0) returned 1 [0223.110] FlushFileBuffers (hFile=0x21c) returned 1 [0223.111] CloseHandle (hObject=0x2b0) returned 1 [0223.111] CloseHandle (hObject=0x21c) returned 1 [0223.111] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01395_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01395_.wmf")) returned 1 [0223.112] SetEvent (hEvent=0x27c) returned 1 [0223.112] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01565_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01565_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0223.113] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=27844) returned 1 [0223.113] CloseHandle (hObject=0x21c) returned 1 [0223.113] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01565_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01565_.wmf")) returned 0x220 [0223.113] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01565_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01565_.wmf")) returned 0x220 [0223.113] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01565_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01565_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.113] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01565_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01565_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0223.113] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.113] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.114] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01565_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01565_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0223.114] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x6cc4, lpOverlapped=0x0) returned 1 [0223.116] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x6cd0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x6cd0, lpOverlapped=0x0) returned 1 [0223.118] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0223.118] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.118] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.118] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x6cc4, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x6cc4, lpOverlapped=0x0) returned 1 [0223.118] FlushFileBuffers (hFile=0x21c) returned 1 [0223.120] FlushFileBuffers (hFile=0x2b0) returned 1 [0223.122] CloseHandle (hObject=0x21c) returned 1 [0223.122] CloseHandle (hObject=0x2b0) returned 1 [0223.122] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01565_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01565_.wmf")) returned 1 [0223.123] SetEvent (hEvent=0x27c) returned 1 [0223.123] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00017_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00017_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0223.124] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=13994) returned 1 [0223.124] CloseHandle (hObject=0x2b0) returned 1 [0223.124] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00017_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00017_.wmf")) returned 0x220 [0223.124] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00017_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00017_.wmf")) returned 0x220 [0223.124] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00017_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00017_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.124] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00017_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00017_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0223.125] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.125] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.125] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00017_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00017_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0223.126] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x36aa, lpOverlapped=0x0) returned 1 [0223.128] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x36b0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x36b0, lpOverlapped=0x0) returned 1 [0223.130] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0223.130] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.130] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.130] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x36aa, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x36aa, lpOverlapped=0x0) returned 1 [0223.130] FlushFileBuffers (hFile=0x2b0) returned 1 [0223.132] FlushFileBuffers (hFile=0x21c) returned 1 [0223.133] CloseHandle (hObject=0x2b0) returned 1 [0223.133] CloseHandle (hObject=0x21c) returned 1 [0223.134] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00017_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00017_.wmf")) returned 1 [0223.135] SetEvent (hEvent=0x27c) returned 1 [0223.135] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00018_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00018_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0223.136] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=13046) returned 1 [0223.136] CloseHandle (hObject=0x21c) returned 1 [0223.136] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00018_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00018_.wmf")) returned 0x220 [0223.136] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00018_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00018_.wmf")) returned 0x220 [0223.136] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00018_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00018_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.136] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00018_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00018_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0223.136] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.136] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.136] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00018_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00018_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0223.137] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x32f6, lpOverlapped=0x0) returned 1 [0223.139] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3300, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3300, lpOverlapped=0x0) returned 1 [0223.140] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0223.140] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.140] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.140] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x32f6, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x32f6, lpOverlapped=0x0) returned 1 [0223.141] FlushFileBuffers (hFile=0x21c) returned 1 [0223.143] FlushFileBuffers (hFile=0x2b0) returned 1 [0223.144] CloseHandle (hObject=0x21c) returned 1 [0223.144] CloseHandle (hObject=0x2b0) returned 1 [0223.144] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00018_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00018_.wmf")) returned 1 [0223.145] SetEvent (hEvent=0x27c) returned 1 [0223.145] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00152_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0223.146] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=31360) returned 1 [0223.146] CloseHandle (hObject=0x2b0) returned 1 [0223.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00152_.wmf")) returned 0x220 [0223.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00152_.wmf")) returned 0x220 [0223.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00152_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00152_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.147] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00152_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0223.147] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.147] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.147] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00152_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00152_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0223.148] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x7a80, lpOverlapped=0x0) returned 1 [0223.156] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7a90, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x7a90, lpOverlapped=0x0) returned 1 [0223.173] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0223.173] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.173] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.173] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7a80, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x7a80, lpOverlapped=0x0) returned 1 [0223.174] FlushFileBuffers (hFile=0x2b0) returned 1 [0223.177] FlushFileBuffers (hFile=0x21c) returned 1 [0223.178] CloseHandle (hObject=0x2b0) returned 1 [0223.178] CloseHandle (hObject=0x21c) returned 1 [0223.178] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00152_.wmf")) returned 1 [0223.179] SetEvent (hEvent=0x27c) returned 1 [0223.180] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00157_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0223.181] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=18260) returned 1 [0223.181] CloseHandle (hObject=0x21c) returned 1 [0223.181] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00157_.wmf")) returned 0x220 [0223.181] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00157_.wmf")) returned 0x220 [0223.181] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00157_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00157_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.182] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00157_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0223.182] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.182] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.182] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00157_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00157_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0223.183] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4754, lpOverlapped=0x0) returned 1 [0223.185] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4760, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4760, lpOverlapped=0x0) returned 1 [0223.186] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0223.187] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.187] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.187] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4754, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4754, lpOverlapped=0x0) returned 1 [0223.187] FlushFileBuffers (hFile=0x21c) returned 1 [0223.189] FlushFileBuffers (hFile=0x2b0) returned 1 [0223.191] CloseHandle (hObject=0x21c) returned 1 [0223.191] CloseHandle (hObject=0x2b0) returned 1 [0223.191] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00157_.wmf")) returned 1 [0223.192] SetEvent (hEvent=0x27c) returned 1 [0223.192] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00159_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00159_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0223.194] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=8230) returned 1 [0223.194] CloseHandle (hObject=0x2b0) returned 1 [0223.194] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00159_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00159_.wmf")) returned 0x220 [0223.194] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00159_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00159_.wmf")) returned 0x220 [0223.194] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00159_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00159_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.194] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00159_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00159_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0223.194] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.194] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.194] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00159_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00159_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0223.195] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2026, lpOverlapped=0x0) returned 1 [0223.197] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2030, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2030, lpOverlapped=0x0) returned 1 [0223.198] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0223.199] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.199] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.199] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2026, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2026, lpOverlapped=0x0) returned 1 [0223.199] FlushFileBuffers (hFile=0x2b0) returned 1 [0223.201] FlushFileBuffers (hFile=0x21c) returned 1 [0223.203] CloseHandle (hObject=0x2b0) returned 1 [0223.203] CloseHandle (hObject=0x21c) returned 1 [0223.203] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00159_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00159_.wmf")) returned 1 [0223.204] SetEvent (hEvent=0x27c) returned 1 [0223.204] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00166_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0223.205] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=13746) returned 1 [0223.205] CloseHandle (hObject=0x21c) returned 1 [0223.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00166_.wmf")) returned 0x220 [0223.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00166_.wmf")) returned 0x220 [0223.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00166_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00166_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.205] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00166_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0223.205] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.205] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.205] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00166_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00166_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0223.206] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x35b2, lpOverlapped=0x0) returned 1 [0223.208] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x35c0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x35c0, lpOverlapped=0x0) returned 1 [0223.209] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0223.210] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.210] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.210] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x35b2, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x35b2, lpOverlapped=0x0) returned 1 [0223.210] FlushFileBuffers (hFile=0x21c) returned 1 [0223.212] FlushFileBuffers (hFile=0x2b0) returned 1 [0223.216] CloseHandle (hObject=0x21c) returned 1 [0223.216] CloseHandle (hObject=0x2b0) returned 1 [0223.228] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00166_.wmf")) returned 1 [0223.230] SetEvent (hEvent=0x27c) returned 1 [0223.230] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00168_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00168_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0223.231] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=15150) returned 1 [0223.231] CloseHandle (hObject=0x2b0) returned 1 [0223.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00168_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00168_.wmf")) returned 0x220 [0223.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00168_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00168_.wmf")) returned 0x220 [0223.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00168_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00168_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.231] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00168_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00168_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0223.231] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.231] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.231] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00168_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00168_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0223.232] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x3b2e, lpOverlapped=0x0) returned 1 [0223.234] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3b30, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3b30, lpOverlapped=0x0) returned 1 [0223.236] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0223.236] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.236] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.236] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3b2e, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x3b2e, lpOverlapped=0x0) returned 1 [0223.236] FlushFileBuffers (hFile=0x2b0) returned 1 [0223.240] FlushFileBuffers (hFile=0x21c) returned 1 [0223.241] CloseHandle (hObject=0x2b0) returned 1 [0223.241] CloseHandle (hObject=0x21c) returned 1 [0223.241] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00168_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00168_.wmf")) returned 1 [0223.242] SetEvent (hEvent=0x27c) returned 1 [0223.242] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00170_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00170_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0223.244] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=8770) returned 1 [0223.244] CloseHandle (hObject=0x21c) returned 1 [0223.244] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00170_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00170_.wmf")) returned 0x220 [0223.244] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00170_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00170_.wmf")) returned 0x220 [0223.244] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00170_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00170_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.244] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00170_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00170_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0223.244] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.244] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.244] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00170_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00170_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0223.245] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2242, lpOverlapped=0x0) returned 1 [0223.247] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2250, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2250, lpOverlapped=0x0) returned 1 [0223.248] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0223.249] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.249] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.249] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2242, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2242, lpOverlapped=0x0) returned 1 [0223.249] FlushFileBuffers (hFile=0x21c) returned 1 [0223.252] FlushFileBuffers (hFile=0x2b0) returned 1 [0223.253] CloseHandle (hObject=0x21c) returned 1 [0223.253] CloseHandle (hObject=0x2b0) returned 1 [0223.253] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00170_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00170_.wmf")) returned 1 [0223.254] SetEvent (hEvent=0x27c) returned 1 [0223.254] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00177_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00177_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0223.255] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=36622) returned 1 [0223.255] CloseHandle (hObject=0x2b0) returned 1 [0223.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00177_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00177_.wmf")) returned 0x220 [0223.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00177_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00177_.wmf")) returned 0x220 [0223.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00177_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00177_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.256] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00177_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00177_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0223.256] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.256] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.256] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00177_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00177_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0223.257] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x8f0e, lpOverlapped=0x0) returned 1 [0223.260] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8f10, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x8f10, lpOverlapped=0x0) returned 1 [0223.261] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0223.262] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.262] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.262] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8f0e, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x8f0e, lpOverlapped=0x0) returned 1 [0223.262] FlushFileBuffers (hFile=0x2b0) returned 1 [0223.264] FlushFileBuffers (hFile=0x21c) returned 1 [0223.266] CloseHandle (hObject=0x2b0) returned 1 [0223.266] CloseHandle (hObject=0x21c) returned 1 [0223.266] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00177_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00177_.wmf")) returned 1 [0223.267] SetEvent (hEvent=0x27c) returned 1 [0223.267] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00183_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00183_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0223.269] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=10300) returned 1 [0223.269] CloseHandle (hObject=0x21c) returned 1 [0223.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00183_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00183_.wmf")) returned 0x220 [0223.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00183_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00183_.wmf")) returned 0x220 [0223.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00183_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00183_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.269] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00183_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00183_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0223.269] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.269] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.269] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00183_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00183_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0223.271] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x283c, lpOverlapped=0x0) returned 1 [0223.272] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2840, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2840, lpOverlapped=0x0) returned 1 [0223.274] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0223.274] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.274] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.274] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x283c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x283c, lpOverlapped=0x0) returned 1 [0223.274] FlushFileBuffers (hFile=0x21c) returned 1 [0223.277] FlushFileBuffers (hFile=0x2b0) returned 1 [0223.278] CloseHandle (hObject=0x21c) returned 1 [0223.278] CloseHandle (hObject=0x2b0) returned 1 [0223.278] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00183_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00183_.wmf")) returned 1 [0223.280] SetEvent (hEvent=0x27c) returned 1 [0223.280] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00190_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00190_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0223.283] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=20812) returned 1 [0223.283] CloseHandle (hObject=0x2b0) returned 1 [0223.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00190_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00190_.wmf")) returned 0x220 [0223.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00190_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00190_.wmf")) returned 0x220 [0223.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00190_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00190_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.283] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00190_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00190_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0223.283] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.283] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.283] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00190_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00190_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0223.285] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x514c, lpOverlapped=0x0) returned 1 [0223.287] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5150, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x5150, lpOverlapped=0x0) returned 1 [0223.288] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0223.289] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.289] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.289] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x514c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x514c, lpOverlapped=0x0) returned 1 [0223.289] FlushFileBuffers (hFile=0x2b0) returned 1 [0223.291] FlushFileBuffers (hFile=0x21c) returned 1 [0223.292] CloseHandle (hObject=0x2b0) returned 1 [0223.293] CloseHandle (hObject=0x21c) returned 1 [0223.293] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00190_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00190_.wmf")) returned 1 [0223.294] SetEvent (hEvent=0x27c) returned 1 [0223.294] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00191_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0223.295] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=8336) returned 1 [0223.295] CloseHandle (hObject=0x21c) returned 1 [0223.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00191_.wmf")) returned 0x220 [0223.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00191_.wmf")) returned 0x220 [0223.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00191_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00191_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00191_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0223.295] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.295] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.296] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00191_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00191_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0223.297] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2090, lpOverlapped=0x0) returned 1 [0223.468] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x20a0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x20a0, lpOverlapped=0x0) returned 1 [0223.470] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0223.470] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.470] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.470] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2090, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2090, lpOverlapped=0x0) returned 1 [0223.470] FlushFileBuffers (hFile=0x21c) returned 1 [0223.472] FlushFileBuffers (hFile=0x2b0) returned 1 [0223.474] CloseHandle (hObject=0x21c) returned 1 [0223.474] CloseHandle (hObject=0x2b0) returned 1 [0223.474] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00191_.wmf")) returned 1 [0223.475] SetEvent (hEvent=0x27c) returned 1 [0223.475] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00192_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00192_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0223.478] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=10252) returned 1 [0223.478] CloseHandle (hObject=0x2b0) returned 1 [0223.478] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00192_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00192_.wmf")) returned 0x220 [0223.478] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00192_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00192_.wmf")) returned 0x220 [0223.478] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00192_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00192_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.478] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00192_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00192_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0223.479] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.479] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.479] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00192_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00192_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0223.480] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x280c, lpOverlapped=0x0) returned 1 [0223.482] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2810, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2810, lpOverlapped=0x0) returned 1 [0223.483] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0223.483] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.483] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.483] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x280c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x280c, lpOverlapped=0x0) returned 1 [0223.484] FlushFileBuffers (hFile=0x2b0) returned 1 [0223.486] FlushFileBuffers (hFile=0x21c) returned 1 [0223.487] CloseHandle (hObject=0x2b0) returned 1 [0223.487] CloseHandle (hObject=0x21c) returned 1 [0223.488] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00192_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00192_.wmf")) returned 1 [0223.489] SetEvent (hEvent=0x27c) returned 1 [0223.489] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00194_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0223.490] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=10176) returned 1 [0223.490] CloseHandle (hObject=0x21c) returned 1 [0223.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00194_.wmf")) returned 0x220 [0223.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00194_.wmf")) returned 0x220 [0223.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00194_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00194_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.491] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00194_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0223.491] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.491] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.491] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00194_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00194_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0223.492] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x27c0, lpOverlapped=0x0) returned 1 [0223.493] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x27d0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x27d0, lpOverlapped=0x0) returned 1 [0223.494] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0223.495] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.495] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.495] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x27c0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x27c0, lpOverlapped=0x0) returned 1 [0223.495] FlushFileBuffers (hFile=0x21c) returned 1 [0223.499] FlushFileBuffers (hFile=0x2b0) returned 1 [0223.500] CloseHandle (hObject=0x21c) returned 1 [0223.500] CloseHandle (hObject=0x2b0) returned 1 [0223.501] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00194_.wmf")) returned 1 [0223.501] SetEvent (hEvent=0x27c) returned 1 [0223.502] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00197_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00197_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0223.502] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=9100) returned 1 [0223.502] CloseHandle (hObject=0x2b0) returned 1 [0223.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00197_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00197_.wmf")) returned 0x220 [0223.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00197_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00197_.wmf")) returned 0x220 [0223.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00197_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00197_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.503] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00197_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00197_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0223.503] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.503] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.503] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00197_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00197_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0223.504] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x238c, lpOverlapped=0x0) returned 1 [0223.505] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2390, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2390, lpOverlapped=0x0) returned 1 [0223.508] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0223.508] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.508] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.508] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x238c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x238c, lpOverlapped=0x0) returned 1 [0223.509] FlushFileBuffers (hFile=0x2b0) returned 1 [0223.511] FlushFileBuffers (hFile=0x21c) returned 1 [0223.512] CloseHandle (hObject=0x2b0) returned 1 [0223.512] CloseHandle (hObject=0x21c) returned 1 [0223.512] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00197_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00197_.wmf")) returned 1 [0223.513] SetEvent (hEvent=0x27c) returned 1 [0223.513] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00199_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00199_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0223.514] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=5630) returned 1 [0223.514] CloseHandle (hObject=0x21c) returned 1 [0223.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00199_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00199_.wmf")) returned 0x220 [0223.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00199_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00199_.wmf")) returned 0x220 [0223.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00199_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00199_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.515] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00199_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00199_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0223.515] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.515] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.515] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00199_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00199_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0223.516] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x15fe, lpOverlapped=0x0) returned 1 [0223.518] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1600, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1600, lpOverlapped=0x0) returned 1 [0223.527] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0223.527] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.527] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.527] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x15fe, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x15fe, lpOverlapped=0x0) returned 1 [0223.527] FlushFileBuffers (hFile=0x21c) returned 1 [0223.529] FlushFileBuffers (hFile=0x2b0) returned 1 [0223.530] CloseHandle (hObject=0x21c) returned 1 [0223.531] CloseHandle (hObject=0x2b0) returned 1 [0223.531] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00199_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00199_.wmf")) returned 1 [0223.532] SetEvent (hEvent=0x27c) returned 1 [0223.532] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00200_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0223.532] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=10534) returned 1 [0223.532] CloseHandle (hObject=0x2b0) returned 1 [0223.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00200_.wmf")) returned 0x220 [0223.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00200_.wmf")) returned 0x220 [0223.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00200_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00200_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.533] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00200_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0223.533] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.533] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.533] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00200_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00200_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0223.534] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2926, lpOverlapped=0x0) returned 1 [0223.535] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2930, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2930, lpOverlapped=0x0) returned 1 [0223.536] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0223.537] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.537] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.537] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2926, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2926, lpOverlapped=0x0) returned 1 [0223.537] FlushFileBuffers (hFile=0x2b0) returned 1 [0223.542] FlushFileBuffers (hFile=0x21c) returned 1 [0223.543] CloseHandle (hObject=0x2b0) returned 1 [0223.544] CloseHandle (hObject=0x21c) returned 1 [0223.544] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00200_.wmf")) returned 1 [0223.545] SetEvent (hEvent=0x27c) returned 1 [0223.545] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00208_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00208_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0223.546] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=11936) returned 1 [0223.546] CloseHandle (hObject=0x21c) returned 1 [0223.546] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00208_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00208_.wmf")) returned 0x220 [0223.546] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00208_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00208_.wmf")) returned 0x220 [0223.546] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00208_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00208_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.546] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00208_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00208_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0223.546] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.546] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.546] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00208_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00208_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0223.547] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x2ea0, lpOverlapped=0x0) returned 1 [0223.549] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2eb0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x2eb0, lpOverlapped=0x0) returned 1 [0223.550] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0223.550] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.550] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.550] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x2ea0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x2ea0, lpOverlapped=0x0) returned 1 [0223.551] FlushFileBuffers (hFile=0x21c) returned 1 [0223.553] FlushFileBuffers (hFile=0x2b0) returned 1 [0223.554] CloseHandle (hObject=0x21c) returned 1 [0223.554] CloseHandle (hObject=0x2b0) returned 1 [0223.554] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00208_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00208_.wmf")) returned 1 [0223.555] SetEvent (hEvent=0x27c) returned 1 [0223.555] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00212_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00212_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0223.556] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=20338) returned 1 [0223.556] CloseHandle (hObject=0x2b0) returned 1 [0223.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00212_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00212_.wmf")) returned 0x220 [0223.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00212_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00212_.wmf")) returned 0x220 [0223.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00212_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00212_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.557] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00212_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00212_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0223.557] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.557] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.557] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00212_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00212_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0223.558] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x4f72, lpOverlapped=0x0) returned 1 [0223.560] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4f80, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4f80, lpOverlapped=0x0) returned 1 [0223.561] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0223.561] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.561] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.561] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4f72, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x4f72, lpOverlapped=0x0) returned 1 [0223.562] FlushFileBuffers (hFile=0x2b0) returned 1 [0223.565] FlushFileBuffers (hFile=0x21c) returned 1 [0223.566] CloseHandle (hObject=0x2b0) returned 1 [0223.566] CloseHandle (hObject=0x21c) returned 1 [0223.566] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00212_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00212_.wmf")) returned 1 [0223.567] SetEvent (hEvent=0x27c) returned 1 [0223.567] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00221_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00221_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0223.569] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=8052) returned 1 [0223.569] CloseHandle (hObject=0x21c) returned 1 [0223.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00221_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00221_.wmf")) returned 0x220 [0223.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00221_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00221_.wmf")) returned 0x220 [0223.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00221_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00221_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.569] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00221_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00221_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0223.569] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.569] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.570] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00221_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00221_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0223.570] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1f74, lpOverlapped=0x0) returned 1 [0223.572] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1f80, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1f80, lpOverlapped=0x0) returned 1 [0223.573] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0223.573] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.573] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.573] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1f74, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1f74, lpOverlapped=0x0) returned 1 [0223.574] FlushFileBuffers (hFile=0x21c) returned 1 [0223.576] FlushFileBuffers (hFile=0x2b0) returned 1 [0223.578] CloseHandle (hObject=0x21c) returned 1 [0223.578] CloseHandle (hObject=0x2b0) returned 1 [0223.578] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00221_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00221_.wmf")) returned 1 [0223.579] SetEvent (hEvent=0x27c) returned 1 [0223.579] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00222_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00222_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0223.580] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=7772) returned 1 [0223.580] CloseHandle (hObject=0x2b0) returned 1 [0223.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00222_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00222_.wmf")) returned 0x220 [0223.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00222_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00222_.wmf")) returned 0x220 [0223.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00222_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00222_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.580] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00222_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00222_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0223.580] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.580] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.580] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00222_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00222_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0223.581] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1e5c, lpOverlapped=0x0) returned 1 [0223.583] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1e60, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1e60, lpOverlapped=0x0) returned 1 [0223.584] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0223.584] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.584] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.584] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1e5c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1e5c, lpOverlapped=0x0) returned 1 [0223.584] FlushFileBuffers (hFile=0x2b0) returned 1 [0223.587] FlushFileBuffers (hFile=0x21c) returned 1 [0223.588] CloseHandle (hObject=0x2b0) returned 1 [0223.588] CloseHandle (hObject=0x21c) returned 1 [0223.589] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00222_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00222_.wmf")) returned 1 [0223.589] SetEvent (hEvent=0x27c) returned 1 [0223.590] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00223_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00223_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0223.590] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=13890) returned 1 [0223.590] CloseHandle (hObject=0x21c) returned 1 [0223.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00223_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00223_.wmf")) returned 0x220 [0223.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00223_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00223_.wmf")) returned 0x220 [0223.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00223_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00223_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.591] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00223_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00223_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0223.591] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.591] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.591] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00223_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00223_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0223.592] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x3642, lpOverlapped=0x0) returned 1 [0223.593] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3650, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3650, lpOverlapped=0x0) returned 1 [0223.595] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0223.595] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.595] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.595] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3642, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x3642, lpOverlapped=0x0) returned 1 [0223.595] FlushFileBuffers (hFile=0x21c) returned 1 [0223.597] FlushFileBuffers (hFile=0x2b0) returned 1 [0223.599] CloseHandle (hObject=0x21c) returned 1 [0223.599] CloseHandle (hObject=0x2b0) returned 1 [0223.599] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00223_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00223_.wmf")) returned 1 [0223.600] SetEvent (hEvent=0x27c) returned 1 [0223.600] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00257_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00257_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0223.601] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=18286) returned 1 [0223.601] CloseHandle (hObject=0x2b0) returned 1 [0223.601] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00257_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00257_.wmf")) returned 0x220 [0223.601] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00257_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00257_.wmf")) returned 0x220 [0223.601] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00257_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00257_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.601] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00257_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00257_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0223.602] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.602] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.602] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00257_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00257_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0223.602] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x476e, lpOverlapped=0x0) returned 1 [0223.607] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x4770, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x4770, lpOverlapped=0x0) returned 1 [0223.608] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0223.609] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.609] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.609] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x476e, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x476e, lpOverlapped=0x0) returned 1 [0223.609] FlushFileBuffers (hFile=0x2b0) returned 1 [0223.612] FlushFileBuffers (hFile=0x21c) returned 1 [0223.613] CloseHandle (hObject=0x2b0) returned 1 [0223.613] CloseHandle (hObject=0x21c) returned 1 [0223.613] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00257_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00257_.wmf")) returned 1 [0223.614] SetEvent (hEvent=0x27c) returned 1 [0223.614] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00289_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00289_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0223.615] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=55520) returned 1 [0223.615] CloseHandle (hObject=0x21c) returned 1 [0223.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00289_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00289_.wmf")) returned 0x220 [0223.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00289_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00289_.wmf")) returned 0x220 [0223.616] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00289_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00289_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.616] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00289_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00289_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0223.616] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.616] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.616] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00289_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00289_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0223.616] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xd8e0, lpOverlapped=0x0) returned 1 [0223.619] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xd8f0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xd8f0, lpOverlapped=0x0) returned 1 [0223.622] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0223.622] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.622] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.622] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xd8e0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xd8e0, lpOverlapped=0x0) returned 1 [0223.622] FlushFileBuffers (hFile=0x21c) returned 1 [0223.625] FlushFileBuffers (hFile=0x2b0) returned 1 [0223.626] CloseHandle (hObject=0x21c) returned 1 [0223.626] CloseHandle (hObject=0x2b0) returned 1 [0223.626] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00289_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00289_.wmf")) returned 1 [0223.627] SetEvent (hEvent=0x27c) returned 1 [0223.627] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00299_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00299_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0223.628] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=68792) returned 1 [0223.628] CloseHandle (hObject=0x2b0) returned 1 [0223.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00299_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00299_.wmf")) returned 0x220 [0223.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00299_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00299_.wmf")) returned 0x220 [0223.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00299_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00299_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.628] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00299_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00299_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0223.628] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.629] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.629] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00299_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00299_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0223.629] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x10cb8, lpOverlapped=0x0) returned 1 [0223.633] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x10cc0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x10cc0, lpOverlapped=0x0) returned 1 [0223.635] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0223.635] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.635] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.635] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x10cb8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x10cb8, lpOverlapped=0x0) returned 1 [0223.636] FlushFileBuffers (hFile=0x2b0) returned 1 [0223.638] FlushFileBuffers (hFile=0x21c) returned 1 [0223.640] CloseHandle (hObject=0x2b0) returned 1 [0223.640] CloseHandle (hObject=0x21c) returned 1 [0223.640] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00299_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00299_.wmf")) returned 1 [0223.642] SetEvent (hEvent=0x27c) returned 1 [0223.642] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00305_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00305_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0223.643] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=31236) returned 1 [0223.643] CloseHandle (hObject=0x21c) returned 1 [0223.643] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00305_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00305_.wmf")) returned 0x220 [0223.643] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00305_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00305_.wmf")) returned 0x220 [0223.643] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00305_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00305_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.644] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00305_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00305_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0223.644] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.644] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.644] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00305_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00305_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0223.645] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x7a04, lpOverlapped=0x0) returned 1 [0223.647] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7a10, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x7a10, lpOverlapped=0x0) returned 1 [0223.648] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0223.649] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.649] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.649] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7a04, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x7a04, lpOverlapped=0x0) returned 1 [0223.649] FlushFileBuffers (hFile=0x21c) returned 1 [0223.652] FlushFileBuffers (hFile=0x2b0) returned 1 [0223.653] CloseHandle (hObject=0x21c) returned 1 [0223.653] CloseHandle (hObject=0x2b0) returned 1 [0223.653] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00305_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00305_.wmf")) returned 1 [0223.654] SetEvent (hEvent=0x27c) returned 1 [0223.654] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00333_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00333_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0223.655] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=61002) returned 1 [0223.655] CloseHandle (hObject=0x2b0) returned 1 [0223.655] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00333_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00333_.wmf")) returned 0x220 [0223.656] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00333_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00333_.wmf")) returned 0x220 [0223.656] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00333_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00333_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.656] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00333_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00333_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0223.656] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.656] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.656] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00333_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00333_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0223.657] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xee4a, lpOverlapped=0x0) returned 1 [0223.660] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xee50, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xee50, lpOverlapped=0x0) returned 1 [0223.662] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0223.662] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.662] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.662] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xee4a, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xee4a, lpOverlapped=0x0) returned 1 [0223.663] FlushFileBuffers (hFile=0x2b0) returned 1 [0223.665] FlushFileBuffers (hFile=0x21c) returned 1 [0223.667] CloseHandle (hObject=0x2b0) returned 1 [0223.667] CloseHandle (hObject=0x21c) returned 1 [0223.667] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00333_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00333_.wmf")) returned 1 [0223.668] SetEvent (hEvent=0x27c) returned 1 [0223.668] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00345_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00345_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0223.669] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=35734) returned 1 [0223.669] CloseHandle (hObject=0x21c) returned 1 [0223.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00345_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00345_.wmf")) returned 0x220 [0223.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00345_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00345_.wmf")) returned 0x220 [0223.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00345_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00345_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.669] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00345_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00345_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0223.669] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.670] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.670] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00345_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00345_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0223.672] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x8b96, lpOverlapped=0x0) returned 1 [0223.674] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8ba0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x8ba0, lpOverlapped=0x0) returned 1 [0223.676] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0223.676] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.676] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.676] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x8b96, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x8b96, lpOverlapped=0x0) returned 1 [0223.676] FlushFileBuffers (hFile=0x21c) returned 1 [0223.678] FlushFileBuffers (hFile=0x2b0) returned 1 [0223.679] CloseHandle (hObject=0x21c) returned 1 [0223.679] CloseHandle (hObject=0x2b0) returned 1 [0223.680] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00345_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00345_.wmf")) returned 1 [0223.681] SetEvent (hEvent=0x27c) returned 1 [0223.681] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00350_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00350_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0223.682] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=48096) returned 1 [0223.682] CloseHandle (hObject=0x2b0) returned 1 [0223.682] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00350_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00350_.wmf")) returned 0x220 [0223.682] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00350_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00350_.wmf")) returned 0x220 [0223.682] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00350_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00350_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.682] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00350_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00350_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0223.682] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.682] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.682] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00350_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00350_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0223.683] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xbbe0, lpOverlapped=0x0) returned 1 [0223.685] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xbbf0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xbbf0, lpOverlapped=0x0) returned 1 [0223.687] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0223.687] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.687] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.687] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xbbe0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xbbe0, lpOverlapped=0x0) returned 1 [0223.688] FlushFileBuffers (hFile=0x2b0) returned 1 [0223.691] FlushFileBuffers (hFile=0x21c) returned 1 [0223.693] CloseHandle (hObject=0x2b0) returned 1 [0223.693] CloseHandle (hObject=0x21c) returned 1 [0223.693] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00350_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00350_.wmf")) returned 1 [0223.694] SetEvent (hEvent=0x27c) returned 1 [0223.694] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00352_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00352_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0223.695] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=37708) returned 1 [0223.695] CloseHandle (hObject=0x21c) returned 1 [0223.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00352_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00352_.wmf")) returned 0x220 [0223.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00352_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00352_.wmf")) returned 0x220 [0223.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00352_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00352_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.695] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00352_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00352_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0223.695] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.695] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.696] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00352_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00352_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0223.696] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x934c, lpOverlapped=0x0) returned 1 [0223.699] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x9350, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x9350, lpOverlapped=0x0) returned 1 [0223.700] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0223.701] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.701] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.701] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x934c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x934c, lpOverlapped=0x0) returned 1 [0223.701] FlushFileBuffers (hFile=0x21c) returned 1 [0223.704] FlushFileBuffers (hFile=0x2b0) returned 1 [0223.706] CloseHandle (hObject=0x21c) returned 1 [0223.706] CloseHandle (hObject=0x2b0) returned 1 [0223.707] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00352_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00352_.wmf")) returned 1 [0223.708] SetEvent (hEvent=0x27c) returned 1 [0223.708] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00364_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00364_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0223.709] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=6472) returned 1 [0223.709] CloseHandle (hObject=0x2b0) returned 1 [0223.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00364_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00364_.wmf")) returned 0x220 [0223.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00364_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00364_.wmf")) returned 0x220 [0223.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00364_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00364_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.709] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00364_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00364_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0223.709] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.709] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.709] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00364_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00364_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0223.710] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1948, lpOverlapped=0x0) returned 1 [0223.712] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1950, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1950, lpOverlapped=0x0) returned 1 [0223.713] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0223.713] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.713] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.713] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1948, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1948, lpOverlapped=0x0) returned 1 [0223.713] FlushFileBuffers (hFile=0x2b0) returned 1 [0223.716] FlushFileBuffers (hFile=0x21c) returned 1 [0223.717] CloseHandle (hObject=0x2b0) returned 1 [0223.717] CloseHandle (hObject=0x21c) returned 1 [0223.718] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00364_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00364_.wmf")) returned 1 [0223.718] SetEvent (hEvent=0x27c) returned 1 [0223.719] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00367_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00367_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0223.720] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=20970) returned 1 [0223.720] CloseHandle (hObject=0x21c) returned 1 [0223.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00367_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00367_.wmf")) returned 0x220 [0223.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00367_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00367_.wmf")) returned 0x220 [0223.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00367_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00367_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00367_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00367_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0223.721] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.721] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00367_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00367_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0223.722] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x51ea, lpOverlapped=0x0) returned 1 [0223.724] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x51f0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x51f0, lpOverlapped=0x0) returned 1 [0223.726] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0223.726] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.726] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.726] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x51ea, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x51ea, lpOverlapped=0x0) returned 1 [0223.727] FlushFileBuffers (hFile=0x21c) returned 1 [0223.729] FlushFileBuffers (hFile=0x2b0) returned 1 [0223.732] CloseHandle (hObject=0x21c) returned 1 [0223.732] CloseHandle (hObject=0x2b0) returned 1 [0223.732] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00367_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00367_.wmf")) returned 1 [0223.733] SetEvent (hEvent=0x27c) returned 1 [0223.733] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00373_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00373_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0223.737] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=13064) returned 1 [0223.737] CloseHandle (hObject=0x2b0) returned 1 [0223.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00373_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00373_.wmf")) returned 0x220 [0223.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00373_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00373_.wmf")) returned 0x220 [0223.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00373_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00373_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.737] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00373_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00373_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0223.738] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.738] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.738] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00373_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00373_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0223.738] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x3308, lpOverlapped=0x0) returned 1 [0223.742] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3310, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x3310, lpOverlapped=0x0) returned 1 [0223.743] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0223.744] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.744] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.744] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x3308, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x3308, lpOverlapped=0x0) returned 1 [0223.744] FlushFileBuffers (hFile=0x2b0) returned 1 [0223.751] FlushFileBuffers (hFile=0x21c) returned 1 [0223.756] CloseHandle (hObject=0x2b0) returned 1 [0223.756] CloseHandle (hObject=0x21c) returned 1 [0223.756] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00373_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00373_.wmf")) returned 1 [0223.757] SetEvent (hEvent=0x27c) returned 1 [0223.757] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00390_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0223.758] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2940) returned 1 [0223.758] CloseHandle (hObject=0x21c) returned 1 [0223.758] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00390_.wmf")) returned 0x220 [0223.758] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00390_.wmf")) returned 0x220 [0223.758] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00390_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00390_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.758] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00390_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0223.758] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.758] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.758] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00390_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00390_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0223.759] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xb7c, lpOverlapped=0x0) returned 1 [0223.761] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xb80, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xb80, lpOverlapped=0x0) returned 1 [0223.761] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0223.762] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.762] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.762] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xb7c, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xb7c, lpOverlapped=0x0) returned 1 [0223.762] FlushFileBuffers (hFile=0x21c) returned 1 [0223.776] FlushFileBuffers (hFile=0x2b0) returned 1 [0223.780] CloseHandle (hObject=0x21c) returned 1 [0223.780] CloseHandle (hObject=0x2b0) returned 1 [0223.780] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00390_.wmf")) returned 1 [0223.781] SetEvent (hEvent=0x27c) returned 1 [0223.781] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00416_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00416_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0223.782] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=28750) returned 1 [0223.782] CloseHandle (hObject=0x2b0) returned 1 [0223.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00416_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00416_.wmf")) returned 0x220 [0223.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00416_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00416_.wmf")) returned 0x220 [0223.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00416_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00416_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.782] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00416_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00416_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0223.782] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.782] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.783] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00416_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00416_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0223.783] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x704e, lpOverlapped=0x0) returned 1 [0223.786] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x7050, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x7050, lpOverlapped=0x0) returned 1 [0223.787] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0223.788] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.788] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.788] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x704e, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x704e, lpOverlapped=0x0) returned 1 [0223.788] FlushFileBuffers (hFile=0x2b0) returned 1 [0223.791] FlushFileBuffers (hFile=0x21c) returned 1 [0223.806] CloseHandle (hObject=0x2b0) returned 1 [0223.806] CloseHandle (hObject=0x21c) returned 1 [0223.807] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00416_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00416_.wmf")) returned 1 [0223.808] SetEvent (hEvent=0x27c) returned 1 [0223.808] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00444_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0223.809] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=5444) returned 1 [0223.809] CloseHandle (hObject=0x21c) returned 1 [0223.810] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00444_.wmf")) returned 0x220 [0223.810] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00444_.wmf")) returned 0x220 [0223.810] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00444_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00444_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.810] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00444_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0223.810] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.810] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.810] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00444_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00444_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0223.811] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1544, lpOverlapped=0x0) returned 1 [0223.817] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1550, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1550, lpOverlapped=0x0) returned 1 [0223.819] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0223.819] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.819] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.819] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1544, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1544, lpOverlapped=0x0) returned 1 [0223.820] FlushFileBuffers (hFile=0x21c) returned 1 [0223.823] FlushFileBuffers (hFile=0x2b0) returned 1 [0223.834] CloseHandle (hObject=0x21c) returned 1 [0223.834] CloseHandle (hObject=0x2b0) returned 1 [0223.834] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00444_.wmf")) returned 1 [0223.835] SetEvent (hEvent=0x27c) returned 1 [0223.836] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00453_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0223.837] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=23020) returned 1 [0223.837] CloseHandle (hObject=0x2b0) returned 1 [0223.837] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00453_.wmf")) returned 0x220 [0223.837] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00453_.wmf")) returned 0x220 [0223.837] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00453_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00453_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.837] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00453_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0223.837] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.837] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.837] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00453_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00453_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0223.838] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x59ec, lpOverlapped=0x0) returned 1 [0223.841] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x59f0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x59f0, lpOverlapped=0x0) returned 1 [0223.843] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0223.843] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.843] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.843] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x59ec, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x59ec, lpOverlapped=0x0) returned 1 [0223.844] FlushFileBuffers (hFile=0x2b0) returned 1 [0223.856] FlushFileBuffers (hFile=0x21c) returned 1 [0223.885] CloseHandle (hObject=0x2b0) returned 1 [0223.885] CloseHandle (hObject=0x21c) returned 1 [0223.885] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00453_.wmf")) returned 1 [0223.886] SetEvent (hEvent=0x27c) returned 1 [0223.886] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00466_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00466_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0223.888] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=2760) returned 1 [0223.889] CloseHandle (hObject=0x21c) returned 1 [0223.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00466_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00466_.wmf")) returned 0x220 [0223.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00466_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00466_.wmf")) returned 0x220 [0223.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00466_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00466_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.889] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00466_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00466_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0223.889] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.889] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.889] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00466_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00466_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0223.891] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0xac8, lpOverlapped=0x0) returned 1 [0223.894] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xad0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xad0, lpOverlapped=0x0) returned 1 [0223.896] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0223.896] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.896] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.896] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xac8, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0xac8, lpOverlapped=0x0) returned 1 [0223.896] FlushFileBuffers (hFile=0x21c) returned 1 [0223.905] FlushFileBuffers (hFile=0x2b0) returned 1 [0223.907] CloseHandle (hObject=0x21c) returned 1 [0223.907] CloseHandle (hObject=0x2b0) returned 1 [0223.907] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00466_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00466_.wmf")) returned 1 [0223.908] SetEvent (hEvent=0x27c) returned 1 [0223.908] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00479_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00479_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0223.909] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=23304) returned 1 [0223.909] CloseHandle (hObject=0x2b0) returned 1 [0223.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00479_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00479_.wmf")) returned 0x220 [0223.910] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00479_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00479_.wmf")) returned 0x220 [0223.910] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00479_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00479_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.910] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00479_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00479_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0223.910] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.910] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.910] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00479_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00479_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0223.911] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x5b08, lpOverlapped=0x0) returned 1 [0223.914] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5b10, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x5b10, lpOverlapped=0x0) returned 1 [0223.915] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0223.915] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.915] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.915] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5b08, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x5b08, lpOverlapped=0x0) returned 1 [0223.916] FlushFileBuffers (hFile=0x2b0) returned 1 [0223.922] FlushFileBuffers (hFile=0x21c) returned 1 [0223.927] CloseHandle (hObject=0x2b0) returned 1 [0223.927] CloseHandle (hObject=0x21c) returned 1 [0223.927] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00479_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00479_.wmf")) returned 1 [0223.928] SetEvent (hEvent=0x27c) returned 1 [0223.928] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00486_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00486_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0223.929] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=7768) returned 1 [0223.929] CloseHandle (hObject=0x21c) returned 1 [0223.929] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00486_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00486_.wmf")) returned 0x220 [0223.929] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00486_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00486_.wmf")) returned 0x220 [0223.929] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00486_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00486_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.929] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00486_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00486_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0223.929] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.929] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.930] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00486_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00486_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0223.932] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1e58, lpOverlapped=0x0) returned 1 [0223.934] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1e60, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1e60, lpOverlapped=0x0) returned 1 [0223.936] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0223.936] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.936] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.936] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1e58, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1e58, lpOverlapped=0x0) returned 1 [0223.936] FlushFileBuffers (hFile=0x21c) returned 1 [0223.947] FlushFileBuffers (hFile=0x2b0) returned 1 [0223.948] CloseHandle (hObject=0x21c) returned 1 [0223.949] CloseHandle (hObject=0x2b0) returned 1 [0223.949] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00486_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00486_.wmf")) returned 1 [0223.950] SetEvent (hEvent=0x27c) returned 1 [0223.950] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00513_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0223.951] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=5924) returned 1 [0223.951] CloseHandle (hObject=0x2b0) returned 1 [0223.951] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00513_.wmf")) returned 0x220 [0223.951] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00513_.wmf")) returned 0x220 [0223.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00513_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00513_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.952] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00513_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0223.952] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.952] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.952] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00513_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00513_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0223.953] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1724, lpOverlapped=0x0) returned 1 [0223.955] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1730, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1730, lpOverlapped=0x0) returned 1 [0223.956] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0223.956] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.956] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.956] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1724, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1724, lpOverlapped=0x0) returned 1 [0223.957] FlushFileBuffers (hFile=0x2b0) returned 1 [0223.965] FlushFileBuffers (hFile=0x21c) returned 1 [0223.968] CloseHandle (hObject=0x2b0) returned 1 [0223.968] CloseHandle (hObject=0x21c) returned 1 [0223.968] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00513_.wmf")) returned 1 [0223.969] SetEvent (hEvent=0x27c) returned 1 [0223.969] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00603_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00603_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0223.970] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=25184) returned 1 [0223.970] CloseHandle (hObject=0x21c) returned 1 [0223.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00603_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00603_.wmf")) returned 0x220 [0223.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00603_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00603_.wmf")) returned 0x220 [0223.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00603_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00603_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.970] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00603_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00603_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0223.970] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.970] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0223.971] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00603_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00603_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0223.971] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x6260, lpOverlapped=0x0) returned 1 [0223.974] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x6270, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x6270, lpOverlapped=0x0) returned 1 [0223.975] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0223.975] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.976] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0223.976] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x6260, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x6260, lpOverlapped=0x0) returned 1 [0223.976] FlushFileBuffers (hFile=0x21c) returned 1 [0224.208] FlushFileBuffers (hFile=0x2b0) returned 1 [0224.210] CloseHandle (hObject=0x21c) returned 1 [0224.210] CloseHandle (hObject=0x2b0) returned 1 [0224.210] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00603_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00603_.wmf")) returned 1 [0224.211] SetEvent (hEvent=0x27c) returned 1 [0224.212] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00633_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00633_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0224.213] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=20486) returned 1 [0224.213] CloseHandle (hObject=0x2b0) returned 1 [0224.213] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00633_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00633_.wmf")) returned 0x220 [0224.213] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00633_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00633_.wmf")) returned 0x220 [0224.213] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00633_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00633_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0224.214] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00633_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00633_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0224.214] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0224.214] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0224.214] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00633_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00633_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0224.215] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x5006, lpOverlapped=0x0) returned 1 [0224.217] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5010, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x5010, lpOverlapped=0x0) returned 1 [0224.228] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0224.229] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0224.229] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0224.229] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5006, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x5006, lpOverlapped=0x0) returned 1 [0224.229] FlushFileBuffers (hFile=0x2b0) returned 1 [0224.231] FlushFileBuffers (hFile=0x21c) returned 1 [0224.232] CloseHandle (hObject=0x2b0) returned 1 [0224.233] CloseHandle (hObject=0x21c) returned 1 [0224.233] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00633_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00633_.wmf")) returned 1 [0224.234] SetEvent (hEvent=0x27c) returned 1 [0224.234] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00638_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00638_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0224.236] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=6842) returned 1 [0224.236] CloseHandle (hObject=0x21c) returned 1 [0224.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00638_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00638_.wmf")) returned 0x220 [0224.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00638_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00638_.wmf")) returned 0x220 [0224.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00638_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00638_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0224.236] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00638_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00638_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0224.236] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0224.236] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0224.236] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00638_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00638_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0224.237] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1aba, lpOverlapped=0x0) returned 1 [0224.239] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1ac0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1ac0, lpOverlapped=0x0) returned 1 [0224.240] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0224.240] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0224.240] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0224.240] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1aba, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1aba, lpOverlapped=0x0) returned 1 [0224.240] FlushFileBuffers (hFile=0x21c) returned 1 [0224.242] FlushFileBuffers (hFile=0x2b0) returned 1 [0224.243] CloseHandle (hObject=0x21c) returned 1 [0224.243] CloseHandle (hObject=0x2b0) returned 1 [0224.243] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00638_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00638_.wmf")) returned 1 [0224.245] SetEvent (hEvent=0x27c) returned 1 [0224.245] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00656_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00656_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0224.246] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1412) returned 1 [0224.246] CloseHandle (hObject=0x2b0) returned 1 [0224.246] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00656_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00656_.wmf")) returned 0x220 [0224.246] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00656_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00656_.wmf")) returned 0x220 [0224.246] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00656_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00656_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0224.246] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00656_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00656_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0224.246] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0224.246] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0224.246] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00656_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00656_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0224.247] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x584, lpOverlapped=0x0) returned 1 [0224.249] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x590, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x590, lpOverlapped=0x0) returned 1 [0224.250] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0224.250] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0224.250] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0224.250] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x584, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x584, lpOverlapped=0x0) returned 1 [0224.250] FlushFileBuffers (hFile=0x2b0) returned 1 [0224.253] FlushFileBuffers (hFile=0x21c) returned 1 [0224.254] CloseHandle (hObject=0x2b0) returned 1 [0224.254] CloseHandle (hObject=0x21c) returned 1 [0224.254] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00656_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00656_.wmf")) returned 1 [0224.255] SetEvent (hEvent=0x27c) returned 1 [0224.255] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00668_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00668_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0224.256] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=5714) returned 1 [0224.256] CloseHandle (hObject=0x21c) returned 1 [0224.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00668_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00668_.wmf")) returned 0x220 [0224.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00668_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00668_.wmf")) returned 0x220 [0224.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00668_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00668_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0224.256] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00668_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00668_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0224.257] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0224.257] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0224.257] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00668_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00668_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0224.259] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x1652, lpOverlapped=0x0) returned 1 [0224.261] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1660, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x1660, lpOverlapped=0x0) returned 1 [0224.262] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0224.262] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0224.262] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0224.262] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x1652, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x1652, lpOverlapped=0x0) returned 1 [0224.262] FlushFileBuffers (hFile=0x21c) returned 1 [0224.264] FlushFileBuffers (hFile=0x2b0) returned 1 [0224.265] CloseHandle (hObject=0x21c) returned 1 [0224.265] CloseHandle (hObject=0x2b0) returned 1 [0224.265] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00668_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00668_.wmf")) returned 1 [0224.267] SetEvent (hEvent=0x27c) returned 1 [0224.267] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00670_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00670_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0224.268] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=5824) returned 1 [0224.268] CloseHandle (hObject=0x2b0) returned 1 [0224.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00670_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00670_.wmf")) returned 0x220 [0224.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00670_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00670_.wmf")) returned 0x220 [0224.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00670_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00670_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0224.268] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00670_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00670_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0224.268] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0224.268] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0224.268] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00670_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00670_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0224.269] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x16c0, lpOverlapped=0x0) returned 1 [0224.271] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x16d0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x16d0, lpOverlapped=0x0) returned 1 [0224.272] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0224.272] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0224.272] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0224.272] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x16c0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x16c0, lpOverlapped=0x0) returned 1 [0224.272] FlushFileBuffers (hFile=0x2b0) returned 1 [0224.281] FlushFileBuffers (hFile=0x21c) returned 1 [0224.283] CloseHandle (hObject=0x2b0) returned 1 [0224.283] CloseHandle (hObject=0x21c) returned 1 [0224.283] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00670_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00670_.wmf")) returned 1 [0224.284] SetEvent (hEvent=0x27c) returned 1 [0224.284] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00671_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00671_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0224.285] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=1488) returned 1 [0224.285] CloseHandle (hObject=0x21c) returned 1 [0224.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00671_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00671_.wmf")) returned 0x220 [0224.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00671_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00671_.wmf")) returned 0x220 [0224.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00671_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00671_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0224.286] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00671_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00671_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0224.286] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0224.286] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0224.286] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00671_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00671_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0224.287] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x5d0, lpOverlapped=0x0) returned 1 [0224.292] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5e0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x5e0, lpOverlapped=0x0) returned 1 [0224.293] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0224.293] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0224.293] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0224.293] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x5d0, lpOverlapped=0x0) returned 1 [0224.294] FlushFileBuffers (hFile=0x21c) returned 1 [0224.296] FlushFileBuffers (hFile=0x2b0) returned 1 [0224.297] CloseHandle (hObject=0x21c) returned 1 [0224.297] CloseHandle (hObject=0x2b0) returned 1 [0224.302] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00671_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00671_.wmf")) returned 1 [0224.303] SetEvent (hEvent=0x27c) returned 1 [0224.303] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00683_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00683_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0224.304] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=25270) returned 1 [0224.304] CloseHandle (hObject=0x2b0) returned 1 [0224.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00683_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00683_.wmf")) returned 0x220 [0224.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00683_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00683_.wmf")) returned 0x220 [0224.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00683_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00683_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0224.305] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00683_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00683_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0224.305] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0224.305] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0224.305] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00683_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00683_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0224.306] ReadFile (in: hFile=0x2b0, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x62b6, lpOverlapped=0x0) returned 1 [0224.309] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x62c0, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x62c0, lpOverlapped=0x0) returned 1 [0224.310] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0224.310] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0224.310] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0224.310] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x62b6, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x62b6, lpOverlapped=0x0) returned 1 [0224.311] FlushFileBuffers (hFile=0x2b0) returned 1 [0224.313] FlushFileBuffers (hFile=0x21c) returned 1 [0224.314] CloseHandle (hObject=0x2b0) returned 1 [0224.314] CloseHandle (hObject=0x21c) returned 1 [0224.314] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00683_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00683_.wmf")) returned 1 [0224.315] SetEvent (hEvent=0x27c) returned 1 [0224.315] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00694_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00694_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0224.316] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x364fab0 | out: lpFileSize=0x364fab0*=25346) returned 1 [0224.316] CloseHandle (hObject=0x21c) returned 1 [0224.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00694_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00694_.wmf")) returned 0x220 [0224.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00694_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00694_.wmf")) returned 0x220 [0224.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00694_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00694_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0224.317] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00694_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00694_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0224.317] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0224.317] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fa78 | out: lpNewFilePointer=0x0) returned 1 [0224.317] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00694_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00694_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0224.318] ReadFile (in: hFile=0x21c, lpBuffer=0x3a11020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x364fa8c, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesRead=0x364fa8c*=0x6302, lpOverlapped=0x0) returned 1 [0224.320] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x6310, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0x6310, lpOverlapped=0x0) returned 1 [0224.321] WriteFile (in: hFile=0x2b0, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x364fa64, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364fa64*=0xf2, lpOverlapped=0x0) returned 1 [0224.322] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0224.322] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364f7d8 | out: lpNewFilePointer=0x0) returned 1 [0224.322] WriteFile (in: hFile=0x21c, lpBuffer=0x3a11020*, nNumberOfBytesToWrite=0x6302, lpNumberOfBytesWritten=0x364f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3a11020*, lpNumberOfBytesWritten=0x364f7e4*=0x6302, lpOverlapped=0x0) returned 1 [0224.322] FlushFileBuffers (hFile=0x21c) Thread: id = 109 os_tid = 0x5d4 [0161.327] GetProcessHeap () returned 0x12c0000 [0161.327] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x1392b48 [0161.327] GetProcessHeap () returned 0x12c0000 [0161.327] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x13a2b50 [0161.327] GetProcessHeap () returned 0x12c0000 [0161.327] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x28) returned 0x12d6c50 [0161.327] GetProcessHeap () returned 0x12c0000 [0161.327] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x110102) returned 0x3b3f020 [0161.330] GetProcessHeap () returned 0x12c0000 [0161.330] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x50) returned 0x12d1a68 [0161.330] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x74c00000 [0161.330] GetProcAddress (hModule=0x74c00000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x74c16b30 [0161.330] Wow64DisableWow64FsRedirection (in: OldValue=0x378fe28 | out: OldValue=0x378fe28*=0x0) returned 1 [0161.330] GetProcessHeap () returned 0x12c0000 [0161.330] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d1a68 | out: hHeap=0x12c0000) returned 1 [0161.330] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.560] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BCD" (normalized: "c:\\boot\\bcd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.561] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.561] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0161.562] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=0) returned 1 [0161.562] CloseHandle (hObject=0x2bc) returned 1 [0161.562] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0161.562] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=0) returned 1 [0161.562] CloseHandle (hObject=0x2bc) returned 1 [0161.563] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\bg-BG\\bootmgr.exe.mui" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0161.563] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=77664) returned 1 [0161.563] CloseHandle (hObject=0x2bc) returned 1 [0161.563] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\bg-BG\\bootmgr.exe.mui" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui")) returned 0x20 [0161.563] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\bg-BG\\bootmgr.exe.mui" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui")) returned 0x20 [0161.563] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\bg-BG\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.563] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\bg-BG\\bootmgr.exe.mui" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.563] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\bootspaces.dll" (normalized: "c:\\boot\\bootspaces.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0161.564] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=95648) returned 1 [0161.564] CloseHandle (hObject=0x2bc) returned 1 [0161.564] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\bootspaces.dll" (normalized: "c:\\boot\\bootspaces.dll")) returned 0x20 [0161.564] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\bootspaces.dll" (normalized: "c:\\boot\\bootspaces.dll")) returned 0x20 [0161.564] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\bootspaces.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\bootspaces.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.565] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\bootspaces.dll" (normalized: "c:\\boot\\bootspaces.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.565] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0161.566] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=65536) returned 1 [0161.566] CloseHandle (hObject=0x2bc) returned 1 [0161.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat")) returned 0x26 [0161.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat")) returned 0x26 [0161.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\BOOTSTAT.DAT.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\bootstat.dat.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.566] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0161.566] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0161.566] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0161.566] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BOOTSTAT.DAT.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\bootstat.dat.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x26, hTemplateFile=0x0) returned 0x2c0 [0161.567] ReadFile (in: hFile=0x2bc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x10000, lpOverlapped=0x0) returned 1 [0161.602] WriteFile (in: hFile=0x2c0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x10010, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x10010, lpOverlapped=0x0) returned 1 [0161.604] WriteFile (in: hFile=0x2c0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0161.605] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0161.605] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0161.605] WriteFile (in: hFile=0x2bc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x10000, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x10000, lpOverlapped=0x0) returned 1 [0161.605] FlushFileBuffers (hFile=0x2bc) returned 1 [0161.607] FlushFileBuffers (hFile=0x2c0) returned 1 [0161.609] CloseHandle (hObject=0x2bc) returned 1 [0161.609] CloseHandle (hObject=0x2c0) returned 1 [0161.609] DeleteFileW (lpFileName="\\\\?\\C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat")) returned 1 [0161.610] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.851] ResetEvent (hEvent=0x280) returned 1 [0161.851] SetEvent (hEvent=0x284) returned 1 [0161.852] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.852] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3695719) returned 1 [0161.852] CloseHandle (hObject=0x2c4) returned 1 [0161.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf")) returned 0x20 [0161.852] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\fonts\\chs_boot.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0 [0161.852] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\fonts\\chs_boot.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf")) returned 0 [0161.852] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.855] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.855] ResetEvent (hEvent=0x280) returned 1 [0161.855] SetEvent (hEvent=0x284) returned 1 [0161.855] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.857] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1985867) returned 1 [0161.857] CloseHandle (hObject=0x2c4) returned 1 [0161.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf")) returned 0x20 [0161.857] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0 [0161.857] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf")) returned 0 [0161.857] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.860] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.860] ResetEvent (hEvent=0x280) returned 1 [0161.860] SetEvent (hEvent=0x284) returned 1 [0161.860] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\malgunn_boot.ttf" (normalized: "c:\\boot\\fonts\\malgunn_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.861] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=174959) returned 1 [0161.861] CloseHandle (hObject=0x2c4) returned 1 [0161.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\malgunn_boot.ttf" (normalized: "c:\\boot\\fonts\\malgunn_boot.ttf")) returned 0x20 [0161.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\malgunn_boot.ttf" (normalized: "c:\\boot\\fonts\\malgunn_boot.ttf")) returned 0x20 [0161.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\malgunn_boot.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\fonts\\malgunn_boot.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.861] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\malgunn_boot.ttf" (normalized: "c:\\boot\\fonts\\malgunn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.861] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.863] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.864] ResetEvent (hEvent=0x280) returned 1 [0161.864] SetEvent (hEvent=0x284) returned 1 [0161.864] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\meiryon_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryon_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.865] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=143754) returned 1 [0161.865] CloseHandle (hObject=0x2c4) returned 1 [0161.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\meiryon_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryon_boot.ttf")) returned 0x20 [0161.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\meiryon_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryon_boot.ttf")) returned 0x20 [0161.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\meiryon_boot.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\fonts\\meiryon_boot.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.865] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\meiryon_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryon_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.865] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.867] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.868] ResetEvent (hEvent=0x280) returned 1 [0161.868] SetEvent (hEvent=0x284) returned 1 [0161.868] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msjhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msjhn_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.868] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=162331) returned 1 [0161.868] CloseHandle (hObject=0x2c4) returned 1 [0161.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msjhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msjhn_boot.ttf")) returned 0x20 [0161.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msjhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msjhn_boot.ttf")) returned 0x20 [0161.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msjhn_boot.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\fonts\\msjhn_boot.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.868] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msjhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msjhn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.868] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.870] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.870] ResetEvent (hEvent=0x280) returned 1 [0161.870] SetEvent (hEvent=0x284) returned 1 [0161.870] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msyhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.870] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=154427) returned 1 [0161.870] CloseHandle (hObject=0x2c4) returned 1 [0161.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msyhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf")) returned 0x20 [0161.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msyhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf")) returned 0x20 [0161.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msyhn_boot.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.871] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msyhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.871] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.872] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.872] ResetEvent (hEvent=0x280) returned 1 [0161.873] SetEvent (hEvent=0x284) returned 1 [0161.873] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segmono_boot.ttf" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.873] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=44859) returned 1 [0161.873] CloseHandle (hObject=0x2c4) returned 1 [0161.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segmono_boot.ttf" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf")) returned 0x20 [0161.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segmono_boot.ttf" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf")) returned 0x20 [0161.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segmono_boot.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.873] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segmono_boot.ttf" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.873] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.875] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.875] ResetEvent (hEvent=0x280) returned 1 [0161.875] SetEvent (hEvent=0x284) returned 1 [0161.875] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segoe_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoe_slboot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.875] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=86178) returned 1 [0161.875] CloseHandle (hObject=0x2c4) returned 1 [0161.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segoe_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoe_slboot.ttf")) returned 0x20 [0161.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segoe_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoe_slboot.ttf")) returned 0x20 [0161.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segoe_slboot.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\fonts\\segoe_slboot.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.876] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segoe_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoe_slboot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.876] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.877] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.878] ResetEvent (hEvent=0x280) returned 1 [0161.878] SetEvent (hEvent=0x284) returned 1 [0161.878] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fr-CA\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-ca\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.878] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=79200) returned 1 [0161.878] CloseHandle (hObject=0x2c4) returned 1 [0161.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-CA\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-ca\\bootmgr.exe.mui")) returned 0x20 [0161.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-CA\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-ca\\bootmgr.exe.mui")) returned 0x20 [0161.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-CA\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\fr-ca\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.878] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fr-CA\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-ca\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.879] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.880] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.880] ResetEvent (hEvent=0x280) returned 1 [0161.881] SetEvent (hEvent=0x284) returned 1 [0161.881] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\memtest.exe.mui" (normalized: "c:\\boot\\fr-fr\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.881] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=45984) returned 1 [0161.881] CloseHandle (hObject=0x2c4) returned 1 [0161.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\memtest.exe.mui" (normalized: "c:\\boot\\fr-fr\\memtest.exe.mui")) returned 0x20 [0161.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\memtest.exe.mui" (normalized: "c:\\boot\\fr-fr\\memtest.exe.mui")) returned 0x20 [0161.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\memtest.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\fr-fr\\memtest.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.881] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\memtest.exe.mui" (normalized: "c:\\boot\\fr-fr\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.881] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.883] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.884] ResetEvent (hEvent=0x280) returned 1 [0161.884] SetEvent (hEvent=0x284) returned 1 [0161.884] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.884] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=78688) returned 1 [0161.884] CloseHandle (hObject=0x2c4) returned 1 [0161.884] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui")) returned 0x20 [0161.884] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui")) returned 0x20 [0161.884] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.884] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.885] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.886] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.887] ResetEvent (hEvent=0x280) returned 1 [0161.887] SetEvent (hEvent=0x284) returned 1 [0161.887] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.887] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=77144) returned 1 [0161.887] CloseHandle (hObject=0x2c4) returned 1 [0161.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui")) returned 0x20 [0161.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui")) returned 0x20 [0161.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.887] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.887] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.889] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.889] ResetEvent (hEvent=0x280) returned 1 [0161.889] SetEvent (hEvent=0x284) returned 1 [0161.889] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.890] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=67424) returned 1 [0161.890] CloseHandle (hObject=0x2c4) returned 1 [0161.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui")) returned 0x20 [0161.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui")) returned 0x20 [0161.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.890] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.890] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.891] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.892] ResetEvent (hEvent=0x280) returned 1 [0161.892] SetEvent (hEvent=0x284) returned 1 [0161.892] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.892] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=66912) returned 1 [0161.892] CloseHandle (hObject=0x2c4) returned 1 [0161.892] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui")) returned 0x20 [0161.892] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui")) returned 0x20 [0161.893] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.893] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.893] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.894] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.895] ResetEvent (hEvent=0x280) returned 1 [0161.895] SetEvent (hEvent=0x284) returned 1 [0161.895] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\lt-LT\\bootmgr.exe.mui" (normalized: "c:\\boot\\lt-lt\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.895] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=75616) returned 1 [0161.895] CloseHandle (hObject=0x2c4) returned 1 [0161.895] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\lt-LT\\bootmgr.exe.mui" (normalized: "c:\\boot\\lt-lt\\bootmgr.exe.mui")) returned 0x20 [0161.895] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\lt-LT\\bootmgr.exe.mui" (normalized: "c:\\boot\\lt-lt\\bootmgr.exe.mui")) returned 0x20 [0161.895] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\lt-LT\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\lt-lt\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.895] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\lt-LT\\bootmgr.exe.mui" (normalized: "c:\\boot\\lt-lt\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.895] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.897] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.898] ResetEvent (hEvent=0x280) returned 1 [0161.898] SetEvent (hEvent=0x284) returned 1 [0161.898] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x298 [0161.898] GetFileSizeEx (in: hFile=0x298, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=811936) returned 1 [0161.898] CloseHandle (hObject=0x298) returned 1 [0161.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe")) returned 0x20 [0161.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe")) returned 0x20 [0161.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\memtest.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\memtest.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.900] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.900] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.902] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.902] ResetEvent (hEvent=0x280) returned 1 [0161.902] SetEvent (hEvent=0x284) returned 1 [0161.902] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\memtest.exe.mui" (normalized: "c:\\boot\\nb-no\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.902] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=45472) returned 1 [0161.902] CloseHandle (hObject=0x2c4) returned 1 [0161.902] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\memtest.exe.mui" (normalized: "c:\\boot\\nb-no\\memtest.exe.mui")) returned 0x20 [0161.902] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\memtest.exe.mui" (normalized: "c:\\boot\\nb-no\\memtest.exe.mui")) returned 0x20 [0161.903] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\memtest.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\nb-no\\memtest.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.903] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\memtest.exe.mui" (normalized: "c:\\boot\\nb-no\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.903] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.904] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.905] ResetEvent (hEvent=0x280) returned 1 [0161.905] SetEvent (hEvent=0x284) returned 1 [0161.905] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\memtest.exe.mui" (normalized: "c:\\boot\\nl-nl\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.905] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=45472) returned 1 [0161.905] CloseHandle (hObject=0x2c4) returned 1 [0161.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\memtest.exe.mui" (normalized: "c:\\boot\\nl-nl\\memtest.exe.mui")) returned 0x20 [0161.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\memtest.exe.mui" (normalized: "c:\\boot\\nl-nl\\memtest.exe.mui")) returned 0x20 [0161.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\memtest.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\nl-nl\\memtest.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.905] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\memtest.exe.mui" (normalized: "c:\\boot\\nl-nl\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.906] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.907] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.907] ResetEvent (hEvent=0x280) returned 1 [0161.907] SetEvent (hEvent=0x284) returned 1 [0161.908] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\memtest.exe.mui" (normalized: "c:\\boot\\pl-pl\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.908] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=45984) returned 1 [0161.908] CloseHandle (hObject=0x2c4) returned 1 [0161.908] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\memtest.exe.mui" (normalized: "c:\\boot\\pl-pl\\memtest.exe.mui")) returned 0x20 [0161.908] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\memtest.exe.mui" (normalized: "c:\\boot\\pl-pl\\memtest.exe.mui")) returned 0x20 [0161.908] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\memtest.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\pl-pl\\memtest.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.908] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\memtest.exe.mui" (normalized: "c:\\boot\\pl-pl\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.908] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.910] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.910] ResetEvent (hEvent=0x280) returned 1 [0161.910] SetEvent (hEvent=0x284) returned 1 [0161.910] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\memtest.exe.mui" (normalized: "c:\\boot\\pt-br\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.911] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=45472) returned 1 [0161.911] CloseHandle (hObject=0x2c4) returned 1 [0161.911] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\memtest.exe.mui" (normalized: "c:\\boot\\pt-br\\memtest.exe.mui")) returned 0x20 [0161.911] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\memtest.exe.mui" (normalized: "c:\\boot\\pt-br\\memtest.exe.mui")) returned 0x20 [0161.911] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\memtest.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\pt-br\\memtest.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.911] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\memtest.exe.mui" (normalized: "c:\\boot\\pt-br\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.911] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.915] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.916] ResetEvent (hEvent=0x280) returned 1 [0161.916] SetEvent (hEvent=0x284) returned 1 [0161.916] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\memtest.exe.mui" (normalized: "c:\\boot\\pt-pt\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.916] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=45984) returned 1 [0161.916] CloseHandle (hObject=0x2c4) returned 1 [0161.916] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\memtest.exe.mui" (normalized: "c:\\boot\\pt-pt\\memtest.exe.mui")) returned 0x20 [0161.916] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\memtest.exe.mui" (normalized: "c:\\boot\\pt-pt\\memtest.exe.mui")) returned 0x20 [0161.916] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\memtest.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\pt-pt\\memtest.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.916] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\memtest.exe.mui" (normalized: "c:\\boot\\pt-pt\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.916] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.918] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.918] ResetEvent (hEvent=0x280) returned 1 [0161.918] SetEvent (hEvent=0x284) returned 1 [0161.919] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\memtest.exe.mui" (normalized: "c:\\boot\\qps-ploc\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.919] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=54168) returned 1 [0161.919] CloseHandle (hObject=0x2c4) returned 1 [0161.919] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\memtest.exe.mui" (normalized: "c:\\boot\\qps-ploc\\memtest.exe.mui")) returned 0x20 [0161.919] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\memtest.exe.mui" (normalized: "c:\\boot\\qps-ploc\\memtest.exe.mui")) returned 0x20 [0161.919] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\memtest.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\qps-ploc\\memtest.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.919] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\memtest.exe.mui" (normalized: "c:\\boot\\qps-ploc\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.919] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.921] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.922] ResetEvent (hEvent=0x280) returned 1 [0161.922] SetEvent (hEvent=0x284) returned 1 [0161.922] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Resources\\en-US\\bootres.dll.mui" (normalized: "c:\\boot\\resources\\en-us\\bootres.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0161.922] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=12192) returned 1 [0161.922] CloseHandle (hObject=0x2c8) returned 1 [0161.922] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Resources\\en-US\\bootres.dll.mui" (normalized: "c:\\boot\\resources\\en-us\\bootres.dll.mui")) returned 0x20 [0161.922] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Resources\\en-US\\bootres.dll.mui" (normalized: "c:\\boot\\resources\\en-us\\bootres.dll.mui")) returned 0x20 [0161.922] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Resources\\en-US\\bootres.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\resources\\en-us\\bootres.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.922] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Resources\\en-US\\bootres.dll.mui" (normalized: "c:\\boot\\resources\\en-us\\bootres.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.922] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.925] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.926] ResetEvent (hEvent=0x280) returned 1 [0161.926] SetEvent (hEvent=0x284) returned 1 [0161.926] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0161.926] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=77152) returned 1 [0161.926] CloseHandle (hObject=0x2c4) returned 1 [0161.926] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui")) returned 0x20 [0161.927] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui")) returned 0x20 [0161.927] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0161.927] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0161.927] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0161.928] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0162.154] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\memtest.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0162.204] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=44888) returned 1 [0162.204] CloseHandle (hObject=0x2cc) returned 1 [0162.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\memtest.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\memtest.exe.mui")) returned 0x20 [0162.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\memtest.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\memtest.exe.mui")) returned 0x20 [0162.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\memtest.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\boot\\sr-latn-cs\\memtest.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0162.204] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\memtest.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0162.204] CreateFileW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0162.205] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=8192) returned 1 [0162.205] CloseHandle (hObject=0x2cc) returned 1 [0162.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak")) returned 0x27 [0162.205] SetFileAttributesW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK", dwFileAttributes=0x26) returned 1 [0162.224] GetFileAttributesW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak")) returned 0x26 [0162.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\bootsect.bak.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0162.225] CreateFileW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0162.225] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0162.225] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0162.225] CreateFileW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\bootsect.bak.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x26, hTemplateFile=0x0) returned 0x2d4 [0162.225] ReadFile (in: hFile=0x2cc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2000, lpOverlapped=0x0) returned 1 [0162.226] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2010, lpOverlapped=0x0) returned 1 [0162.227] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0162.227] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0162.227] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0162.227] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2000, lpOverlapped=0x0) returned 1 [0162.227] FlushFileBuffers (hFile=0x2cc) returned 1 [0162.644] FlushFileBuffers (hFile=0x2d4) returned 1 [0162.647] CloseHandle (hObject=0x2cc) returned 1 [0162.647] CloseHandle (hObject=0x2d4) returned 1 [0162.647] DeleteFileW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak")) returned 1 [0162.649] SetFileAttributesW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK.id[B4197730-2299].[britt.looper@aol.com].phoenix", dwFileAttributes=0x27) returned 1 [0162.649] SetEvent (hEvent=0x27c) returned 1 [0162.649] CreateFileW (lpFileName="\\\\?\\C:\\hiberfil.sys" (normalized: "c:\\hiberfil.sys"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0162.649] CreateFileW (lpFileName="\\\\?\\C:\\pagefile.sys" (normalized: "c:\\pagefile.sys"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0162.650] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0162.650] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=15984) returned 1 [0162.650] CloseHandle (hObject=0x2d4) returned 1 [0162.650] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb")) returned 0x20 [0162.650] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb")) returned 0x20 [0162.650] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0162.650] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0162.650] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0162.650] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0162.650] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2cc [0162.651] ReadFile (in: hFile=0x2d4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x3e70, lpOverlapped=0x0) returned 1 [0162.651] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3e80, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x3e80, lpOverlapped=0x0) returned 1 [0162.652] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0162.653] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0162.653] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0162.653] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3e70, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x3e70, lpOverlapped=0x0) returned 1 [0162.653] FlushFileBuffers (hFile=0x2d4) returned 1 [0162.670] FlushFileBuffers (hFile=0x2cc) returned 1 [0162.671] CloseHandle (hObject=0x2d4) returned 1 [0162.671] CloseHandle (hObject=0x2cc) returned 1 [0162.671] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb")) returned 1 [0162.672] SetEvent (hEvent=0x27c) returned 1 [0162.672] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0162.673] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=18624) returned 1 [0162.673] CloseHandle (hObject=0x2cc) returned 1 [0162.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll")) returned 0x20 [0162.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll")) returned 0x20 [0162.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0162.673] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0162.673] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0162.673] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0162.673] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d4 [0162.674] ReadFile (in: hFile=0x2cc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x48c0, lpOverlapped=0x0) returned 1 [0162.676] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x48d0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x48d0, lpOverlapped=0x0) returned 1 [0162.678] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x112, lpOverlapped=0x0) returned 1 [0162.678] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0162.678] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0162.678] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x48c0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x48c0, lpOverlapped=0x0) returned 1 [0162.678] FlushFileBuffers (hFile=0x2cc) returned 1 [0162.680] FlushFileBuffers (hFile=0x2d4) returned 1 [0162.682] CloseHandle (hObject=0x2cc) returned 1 [0162.682] CloseHandle (hObject=0x2d4) returned 1 [0162.682] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll")) returned 1 [0162.683] SetEvent (hEvent=0x27c) returned 1 [0162.683] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0162.683] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=21184) returned 1 [0162.684] CloseHandle (hObject=0x2d4) returned 1 [0162.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll")) returned 0x20 [0162.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll")) returned 0x20 [0162.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0162.684] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0162.684] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0162.684] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0162.684] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2cc [0162.684] ReadFile (in: hFile=0x2d4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x52c0, lpOverlapped=0x0) returned 1 [0162.687] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x52d0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x52d0, lpOverlapped=0x0) returned 1 [0162.688] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x122, lpOverlapped=0x0) returned 1 [0162.688] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0162.688] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0162.688] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x52c0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x52c0, lpOverlapped=0x0) returned 1 [0162.689] FlushFileBuffers (hFile=0x2d4) returned 1 [0162.690] FlushFileBuffers (hFile=0x2cc) returned 1 [0162.692] CloseHandle (hObject=0x2d4) returned 1 [0162.692] CloseHandle (hObject=0x2cc) returned 1 [0162.692] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll")) returned 1 [0162.694] SetEvent (hEvent=0x27c) returned 1 [0162.694] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0162.697] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=19136) returned 1 [0162.697] CloseHandle (hObject=0x2cc) returned 1 [0162.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll")) returned 0x20 [0162.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll")) returned 0x20 [0162.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0162.697] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0162.697] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0162.697] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0162.697] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d4 [0162.698] ReadFile (in: hFile=0x2cc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4ac0, lpOverlapped=0x0) returned 1 [0162.700] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4ad0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4ad0, lpOverlapped=0x0) returned 1 [0162.701] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x132, lpOverlapped=0x0) returned 1 [0162.702] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0162.702] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0162.702] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4ac0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4ac0, lpOverlapped=0x0) returned 1 [0162.702] FlushFileBuffers (hFile=0x2cc) returned 1 [0162.704] FlushFileBuffers (hFile=0x2d4) returned 1 [0162.705] CloseHandle (hObject=0x2cc) returned 1 [0162.705] CloseHandle (hObject=0x2d4) returned 1 [0162.705] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll")) returned 1 [0162.706] SetEvent (hEvent=0x27c) returned 1 [0162.706] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0162.707] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=19136) returned 1 [0162.707] CloseHandle (hObject=0x2d4) returned 1 [0162.707] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll")) returned 0x20 [0162.707] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll")) returned 0x20 [0162.707] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0162.707] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0162.707] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0162.707] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0162.707] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2cc [0162.708] ReadFile (in: hFile=0x2d4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4ac0, lpOverlapped=0x0) returned 1 [0162.710] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4ad0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4ad0, lpOverlapped=0x0) returned 1 [0162.711] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x122, lpOverlapped=0x0) returned 1 [0162.711] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0162.711] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0162.712] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4ac0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4ac0, lpOverlapped=0x0) returned 1 [0162.712] FlushFileBuffers (hFile=0x2d4) returned 1 [0162.928] FlushFileBuffers (hFile=0x2cc) returned 1 [0162.930] CloseHandle (hObject=0x2d4) returned 1 [0162.930] CloseHandle (hObject=0x2cc) returned 1 [0162.930] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll")) returned 1 [0162.932] SetEvent (hEvent=0x27c) returned 1 [0162.932] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0162.932] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=11616) returned 1 [0162.932] CloseHandle (hObject=0x2cc) returned 1 [0162.932] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll")) returned 0x20 [0162.932] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll")) returned 0x20 [0162.932] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0162.933] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0162.933] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0162.933] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0162.933] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d4 [0162.933] ReadFile (in: hFile=0x2cc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2d60, lpOverlapped=0x0) returned 1 [0162.935] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2d70, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2d70, lpOverlapped=0x0) returned 1 [0162.936] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x122, lpOverlapped=0x0) returned 1 [0162.937] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0162.937] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0162.937] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2d60, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2d60, lpOverlapped=0x0) returned 1 [0162.937] FlushFileBuffers (hFile=0x2cc) returned 1 [0162.939] FlushFileBuffers (hFile=0x2d4) returned 1 [0162.941] CloseHandle (hObject=0x2cc) returned 1 [0162.941] CloseHandle (hObject=0x2d4) returned 1 [0162.941] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll")) returned 1 [0162.942] SetEvent (hEvent=0x27c) returned 1 [0162.942] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0162.943] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=19648) returned 1 [0162.943] CloseHandle (hObject=0x2d4) returned 1 [0162.943] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll")) returned 0x20 [0162.943] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll")) returned 0x20 [0162.943] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0162.943] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0162.944] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0162.944] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0162.944] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2cc [0162.945] ReadFile (in: hFile=0x2d4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4cc0, lpOverlapped=0x0) returned 1 [0162.947] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4cd0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4cd0, lpOverlapped=0x0) returned 1 [0162.948] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x112, lpOverlapped=0x0) returned 1 [0162.948] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0162.948] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0162.948] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4cc0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4cc0, lpOverlapped=0x0) returned 1 [0162.949] FlushFileBuffers (hFile=0x2d4) returned 1 [0162.951] FlushFileBuffers (hFile=0x2cc) returned 1 [0162.953] CloseHandle (hObject=0x2d4) returned 1 [0162.953] CloseHandle (hObject=0x2cc) returned 1 [0162.953] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll")) returned 1 [0162.954] SetEvent (hEvent=0x27c) returned 1 [0162.955] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0162.957] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=22720) returned 1 [0162.957] CloseHandle (hObject=0x2cc) returned 1 [0162.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll")) returned 0x20 [0162.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll")) returned 0x20 [0162.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0162.958] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0162.959] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0162.959] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0162.959] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d4 [0162.959] ReadFile (in: hFile=0x2cc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x58c0, lpOverlapped=0x0) returned 1 [0162.961] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x58d0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x58d0, lpOverlapped=0x0) returned 1 [0162.963] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x122, lpOverlapped=0x0) returned 1 [0162.963] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0162.963] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0162.963] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x58c0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x58c0, lpOverlapped=0x0) returned 1 [0162.963] FlushFileBuffers (hFile=0x2cc) returned 1 [0162.966] FlushFileBuffers (hFile=0x2d4) returned 1 [0162.967] CloseHandle (hObject=0x2cc) returned 1 [0162.967] CloseHandle (hObject=0x2d4) returned 1 [0162.968] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll")) returned 1 [0162.969] SetEvent (hEvent=0x27c) returned 1 [0162.969] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0162.969] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=19136) returned 1 [0162.969] CloseHandle (hObject=0x2d4) returned 1 [0162.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll")) returned 0x20 [0162.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll")) returned 0x20 [0162.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0162.969] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0162.970] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0162.970] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0162.970] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2cc [0162.970] ReadFile (in: hFile=0x2d4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4ac0, lpOverlapped=0x0) returned 1 [0162.972] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4ad0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4ad0, lpOverlapped=0x0) returned 1 [0162.974] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x122, lpOverlapped=0x0) returned 1 [0162.974] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0162.974] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0162.974] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4ac0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4ac0, lpOverlapped=0x0) returned 1 [0162.975] FlushFileBuffers (hFile=0x2d4) returned 1 [0163.376] FlushFileBuffers (hFile=0x2cc) returned 1 [0163.377] CloseHandle (hObject=0x2d4) returned 1 [0163.377] CloseHandle (hObject=0x2cc) returned 1 [0163.377] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll")) returned 1 [0163.379] SetEvent (hEvent=0x27c) returned 1 [0163.379] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0163.379] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=19136) returned 1 [0163.379] CloseHandle (hObject=0x2cc) returned 1 [0163.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll")) returned 0x20 [0163.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll")) returned 0x20 [0163.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0163.379] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0163.380] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0163.380] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0163.380] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d4 [0163.380] ReadFile (in: hFile=0x2cc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4ac0, lpOverlapped=0x0) returned 1 [0163.383] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4ad0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4ad0, lpOverlapped=0x0) returned 1 [0163.384] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x122, lpOverlapped=0x0) returned 1 [0163.384] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0163.384] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0163.384] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4ac0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4ac0, lpOverlapped=0x0) returned 1 [0163.384] FlushFileBuffers (hFile=0x2cc) returned 1 [0163.388] FlushFileBuffers (hFile=0x2d4) returned 1 [0163.389] CloseHandle (hObject=0x2cc) returned 1 [0163.389] CloseHandle (hObject=0x2d4) returned 1 [0163.389] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll")) returned 1 [0163.391] SetEvent (hEvent=0x27c) returned 1 [0163.391] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0163.391] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=27840) returned 1 [0163.391] CloseHandle (hObject=0x2d4) returned 1 [0163.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll")) returned 0x20 [0163.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll")) returned 0x20 [0163.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0163.391] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0163.392] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0163.392] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0163.392] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2cc [0163.392] ReadFile (in: hFile=0x2d4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x6cc0, lpOverlapped=0x0) returned 1 [0163.394] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x6cd0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x6cd0, lpOverlapped=0x0) returned 1 [0163.400] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x112, lpOverlapped=0x0) returned 1 [0163.401] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0163.401] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0163.401] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x6cc0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x6cc0, lpOverlapped=0x0) returned 1 [0163.401] FlushFileBuffers (hFile=0x2d4) returned 1 [0164.233] FlushFileBuffers (hFile=0x2cc) returned 1 [0164.235] CloseHandle (hObject=0x2d4) returned 1 [0164.236] CloseHandle (hObject=0x2cc) returned 1 [0164.236] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll")) returned 1 [0164.237] SetEvent (hEvent=0x27c) returned 1 [0164.237] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0164.238] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=70848) returned 1 [0164.238] CloseHandle (hObject=0x2cc) returned 1 [0164.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll")) returned 0x20 [0164.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll")) returned 0x20 [0164.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0164.238] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0164.238] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0164.238] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0164.238] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d4 [0164.239] ReadFile (in: hFile=0x2cc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x114c0, lpOverlapped=0x0) returned 1 [0164.243] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x114d0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x114d0, lpOverlapped=0x0) returned 1 [0164.245] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x122, lpOverlapped=0x0) returned 1 [0164.245] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0164.246] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0164.246] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x114c0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x114c0, lpOverlapped=0x0) returned 1 [0164.246] FlushFileBuffers (hFile=0x2cc) returned 1 [0164.276] FlushFileBuffers (hFile=0x2d4) returned 1 [0164.278] CloseHandle (hObject=0x2cc) returned 1 [0164.278] CloseHandle (hObject=0x2d4) returned 1 [0164.278] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll")) returned 1 [0164.279] SetEvent (hEvent=0x27c) returned 1 [0164.279] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0164.280] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=23232) returned 1 [0164.280] CloseHandle (hObject=0x2d4) returned 1 [0164.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll")) returned 0x20 [0164.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll")) returned 0x20 [0164.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0164.280] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0164.280] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0164.280] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0164.280] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2cc [0164.281] ReadFile (in: hFile=0x2d4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x5ac0, lpOverlapped=0x0) returned 1 [0164.284] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5ad0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x5ad0, lpOverlapped=0x0) returned 1 [0164.286] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x122, lpOverlapped=0x0) returned 1 [0164.286] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0164.286] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0164.286] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5ac0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x5ac0, lpOverlapped=0x0) returned 1 [0164.286] FlushFileBuffers (hFile=0x2d4) returned 1 [0164.293] FlushFileBuffers (hFile=0x2cc) returned 1 [0164.303] CloseHandle (hObject=0x2d4) returned 1 [0164.303] CloseHandle (hObject=0x2cc) returned 1 [0164.303] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll")) returned 1 [0164.305] SetEvent (hEvent=0x27c) returned 1 [0164.305] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0164.305] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=24768) returned 1 [0164.305] CloseHandle (hObject=0x2cc) returned 1 [0164.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll")) returned 0x20 [0164.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll")) returned 0x20 [0164.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0164.305] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0164.306] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0164.306] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0164.306] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d4 [0164.306] ReadFile (in: hFile=0x2cc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x60c0, lpOverlapped=0x0) returned 1 [0164.309] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x60d0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x60d0, lpOverlapped=0x0) returned 1 [0164.311] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x122, lpOverlapped=0x0) returned 1 [0164.311] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0164.311] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0164.311] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x60c0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x60c0, lpOverlapped=0x0) returned 1 [0164.311] FlushFileBuffers (hFile=0x2cc) returned 1 [0164.792] FlushFileBuffers (hFile=0x2d4) returned 1 [0165.159] CloseHandle (hObject=0x2cc) returned 1 [0165.159] CloseHandle (hObject=0x2d4) returned 1 [0165.159] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll")) returned 1 [0165.160] SetEvent (hEvent=0x27c) returned 1 [0165.160] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0165.161] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=21184) returned 1 [0165.161] CloseHandle (hObject=0x2d4) returned 1 [0165.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll")) returned 0x20 [0165.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll")) returned 0x20 [0165.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0165.161] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0165.161] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0165.161] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0165.161] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2cc [0165.162] ReadFile (in: hFile=0x2d4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x52c0, lpOverlapped=0x0) returned 1 [0165.164] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x52d0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x52d0, lpOverlapped=0x0) returned 1 [0165.165] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x112, lpOverlapped=0x0) returned 1 [0165.166] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0165.166] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0165.166] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x52c0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x52c0, lpOverlapped=0x0) returned 1 [0165.166] FlushFileBuffers (hFile=0x2d4) returned 1 [0165.450] FlushFileBuffers (hFile=0x2cc) returned 1 [0165.452] CloseHandle (hObject=0x2d4) returned 1 [0165.452] CloseHandle (hObject=0x2cc) returned 1 [0165.452] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll")) returned 1 [0165.454] SetEvent (hEvent=0x27c) returned 1 [0165.454] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\apiclient.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0165.454] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=162880) returned 1 [0165.454] CloseHandle (hObject=0x2cc) returned 1 [0165.454] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\apiclient.dll")) returned 0x20 [0165.454] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\apiclient.dll")) returned 0x20 [0165.454] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\apiclient.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0165.454] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\apiclient.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0165.455] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcatalog.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0165.455] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=656088) returned 1 [0165.455] CloseHandle (hObject=0x2cc) returned 1 [0165.455] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcatalog.dll")) returned 0x20 [0165.455] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcatalog.dll")) returned 0x20 [0165.455] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcatalog.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0165.455] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcatalog.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0165.456] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0165.456] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2054872) returned 1 [0165.456] CloseHandle (hObject=0x2cc) returned 1 [0165.456] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe")) returned 0x20 [0165.456] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 1 [0165.457] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0165.457] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fc20 | out: lpNewFilePointer=0x0) returned 1 [0165.457] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fc20 | out: lpNewFilePointer=0x0) returned 1 [0165.457] ReadFile (in: hFile=0x2cc, lpBuffer=0x3b3f058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x378fc2c, lpOverlapped=0x0 | out: lpBuffer=0x3b3f058*, lpNumberOfBytesRead=0x378fc2c*=0x40000, lpOverlapped=0x0) returned 1 [0165.468] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0xa739d, lpNewFilePointer=0x0, dwMoveMethod=0x378fc20 | out: lpNewFilePointer=0x0) returned 1 [0165.468] ReadFile (in: hFile=0x2cc, lpBuffer=0x3b7f058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x378fc2c, lpOverlapped=0x0 | out: lpBuffer=0x3b7f058*, lpNumberOfBytesRead=0x378fc2c*=0x40000, lpOverlapped=0x0) returned 1 [0165.475] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x1b5ad8, lpNewFilePointer=0x0, dwMoveMethod=0x378fc20 | out: lpNewFilePointer=0x0) returned 1 [0165.475] ReadFile (in: hFile=0x2cc, lpBuffer=0x3bbf058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x378fc2c, lpOverlapped=0x0 | out: lpBuffer=0x3bbf058*, lpNumberOfBytesRead=0x378fc2c*=0x40000, lpOverlapped=0x0) returned 1 [0165.505] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd90 | out: lpNewFilePointer=0x0) returned 1 [0165.505] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xc0112, lpNumberOfBytesWritten=0x378fd88, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd88*=0xc0112, lpOverlapped=0x0) returned 1 [0165.779] SetEndOfFile (hFile=0x2cc) returned 1 [0165.779] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x1b5ad8, lpNewFilePointer=0x0, dwMoveMethod=0x378fc28 | out: lpNewFilePointer=0x0) returned 1 [0165.779] WriteFile (in: hFile=0x2cc, lpBuffer=0x3bff14a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x378fc34, lpOverlapped=0x0 | out: lpBuffer=0x3bff14a*, lpNumberOfBytesWritten=0x378fc34*=0x40000, lpOverlapped=0x0) returned 1 [0165.782] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0xa739d, lpNewFilePointer=0x0, dwMoveMethod=0x378fc28 | out: lpNewFilePointer=0x0) returned 1 [0165.782] WriteFile (in: hFile=0x2cc, lpBuffer=0x3bff14a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x378fc34, lpOverlapped=0x0 | out: lpBuffer=0x3bff14a*, lpNumberOfBytesWritten=0x378fc34*=0x40000, lpOverlapped=0x0) returned 1 [0165.793] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fc28 | out: lpNewFilePointer=0x0) returned 1 [0165.793] WriteFile (in: hFile=0x2cc, lpBuffer=0x3bff14a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x378fc34, lpOverlapped=0x0 | out: lpBuffer=0x3bff14a*, lpNumberOfBytesWritten=0x378fc34*=0x40000, lpOverlapped=0x0) returned 1 [0165.795] FlushFileBuffers (hFile=0x2cc) returned 1 [0165.880] CloseHandle (hObject=0x2cc) returned 1 [0165.880] SetEvent (hEvent=0x27c) returned 1 [0165.880] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstreamingmanager.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0165.881] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=210648) returned 1 [0165.881] CloseHandle (hObject=0x2cc) returned 1 [0165.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstreamingmanager.dll")) returned 0x20 [0165.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstreamingmanager.dll")) returned 0x20 [0165.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstreamingmanager.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0165.881] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstreamingmanager.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0165.881] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystemcontroller.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0165.881] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1402584) returned 1 [0165.881] CloseHandle (hObject=0x2cc) returned 1 [0165.882] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystemcontroller.dll")) returned 0x20 [0165.882] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystemcontroller.dll")) returned 0x20 [0165.882] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystemcontroller.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0165.882] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystemcontroller.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0165.882] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0165.882] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1761448) returned 1 [0165.882] CloseHandle (hObject=0x2cc) returned 1 [0165.882] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems32.dll")) returned 0x20 [0165.882] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems32.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems32.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 1 [0165.883] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems32.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0165.883] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fc20 | out: lpNewFilePointer=0x0) returned 1 [0165.883] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fc20 | out: lpNewFilePointer=0x0) returned 1 [0165.884] ReadFile (in: hFile=0x2cc, lpBuffer=0x3b3f058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x378fc2c, lpOverlapped=0x0 | out: lpBuffer=0x3b3f058*, lpNumberOfBytesRead=0x378fc2c*=0x40000, lpOverlapped=0x0) returned 1 [0165.896] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x8f58d, lpNewFilePointer=0x0, dwMoveMethod=0x378fc20 | out: lpNewFilePointer=0x0) returned 1 [0165.896] ReadFile (in: hFile=0x2cc, lpBuffer=0x3b7f058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x378fc2c, lpOverlapped=0x0 | out: lpBuffer=0x3b7f058*, lpNumberOfBytesRead=0x378fc2c*=0x40000, lpOverlapped=0x0) returned 1 [0165.902] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x16e0a8, lpNewFilePointer=0x0, dwMoveMethod=0x378fc20 | out: lpNewFilePointer=0x0) returned 1 [0165.902] ReadFile (in: hFile=0x2cc, lpBuffer=0x3bbf058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x378fc2c, lpOverlapped=0x0 | out: lpBuffer=0x3bbf058*, lpNumberOfBytesRead=0x378fc2c*=0x40000, lpOverlapped=0x0) returned 1 [0165.918] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd90 | out: lpNewFilePointer=0x0) returned 1 [0165.918] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xc0122, lpNumberOfBytesWritten=0x378fd88, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd88*=0xc0122, lpOverlapped=0x0) returned 1 [0166.121] SetEndOfFile (hFile=0x2cc) returned 1 [0166.121] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x16e0a8, lpNewFilePointer=0x0, dwMoveMethod=0x378fc28 | out: lpNewFilePointer=0x0) returned 1 [0166.121] WriteFile (in: hFile=0x2cc, lpBuffer=0x3bff15a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x378fc34, lpOverlapped=0x0 | out: lpBuffer=0x3bff15a*, lpNumberOfBytesWritten=0x378fc34*=0x40000, lpOverlapped=0x0) returned 1 [0166.124] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x8f58d, lpNewFilePointer=0x0, dwMoveMethod=0x378fc28 | out: lpNewFilePointer=0x0) returned 1 [0166.124] WriteFile (in: hFile=0x2cc, lpBuffer=0x3bff15a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x378fc34, lpOverlapped=0x0 | out: lpBuffer=0x3bff15a*, lpNumberOfBytesWritten=0x378fc34*=0x40000, lpOverlapped=0x0) returned 1 [0166.126] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fc28 | out: lpNewFilePointer=0x0) returned 1 [0166.126] WriteFile (in: hFile=0x2cc, lpBuffer=0x3bff15a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x378fc34, lpOverlapped=0x0 | out: lpBuffer=0x3bff15a*, lpNumberOfBytesWritten=0x378fc34*=0x40000, lpOverlapped=0x0) returned 1 [0166.128] FlushFileBuffers (hFile=0x2cc) returned 1 [0166.688] CloseHandle (hObject=0x2cc) returned 1 [0166.688] SetEvent (hEvent=0x27c) returned 1 [0166.688] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvvirtualization.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0166.689] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=567512) returned 1 [0166.689] CloseHandle (hObject=0x2cc) returned 1 [0166.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvvirtualization.dll")) returned 0x20 [0166.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvvirtualization.dll")) returned 0x20 [0166.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvvirtualization.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0166.689] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvvirtualization.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0166.690] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvmanifest.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0166.690] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1231576) returned 1 [0166.690] CloseHandle (hObject=0x2cc) returned 1 [0166.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvmanifest.dll")) returned 0x20 [0166.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvmanifest.dll")) returned 0x20 [0166.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvmanifest.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0166.690] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvmanifest.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0166.690] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvorchestration.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0166.690] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=947928) returned 1 [0166.691] CloseHandle (hObject=0x2cc) returned 1 [0166.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvorchestration.dll")) returned 0x20 [0166.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvorchestration.dll")) returned 0x20 [0166.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvorchestration.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0166.691] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvorchestration.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0166.691] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvpolicy.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0166.691] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1295576) returned 1 [0166.691] CloseHandle (hObject=0x2cc) returned 1 [0166.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvpolicy.dll")) returned 0x20 [0166.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvpolicy.dll")) returned 0x20 [0166.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvpolicy.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0166.692] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvpolicy.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0166.692] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0166.692] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=512216) returned 1 [0166.692] CloseHandle (hObject=0x2cc) returned 1 [0166.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll")) returned 0x20 [0166.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll")) returned 0x20 [0166.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0166.692] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0166.692] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0166.693] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0166.693] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e4 [0166.693] ReadFile (in: hFile=0x2cc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x7d0d8, lpOverlapped=0x0) returned 1 [0166.711] WriteFile (in: hFile=0x2e4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7d0e0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x7d0e0, lpOverlapped=0x0) returned 1 [0166.919] WriteFile (in: hFile=0x2e4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x102, lpOverlapped=0x0) returned 1 [0166.919] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0166.919] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0166.919] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7d0d8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x7d0d8, lpOverlapped=0x0) returned 1 [0166.921] FlushFileBuffers (hFile=0x2cc) returned 1 [0166.925] FlushFileBuffers (hFile=0x2e4) returned 1 [0166.930] CloseHandle (hObject=0x2cc) returned 1 [0166.930] CloseHandle (hObject=0x2e4) returned 1 [0166.930] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll")) returned 1 [0166.936] SetEvent (hEvent=0x27c) returned 1 [0166.936] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvshnotify.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0166.937] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=263896) returned 1 [0166.937] CloseHandle (hObject=0x2e4) returned 1 [0166.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvshnotify.exe")) returned 0x20 [0166.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvshnotify.exe")) returned 0x20 [0166.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvshnotify.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0166.937] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvshnotify.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0166.937] SetFilePointerEx (in: hFile=0x2e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0166.937] SetFilePointerEx (in: hFile=0x2e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0166.937] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvshnotify.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2cc [0166.938] ReadFile (in: hFile=0x2e4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x406d8, lpOverlapped=0x0) returned 1 [0166.950] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x406e0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x406e0, lpOverlapped=0x0) returned 1 [0166.957] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x102, lpOverlapped=0x0) returned 1 [0166.957] SetFilePointerEx (in: hFile=0x2e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0166.958] SetFilePointerEx (in: hFile=0x2e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0166.958] WriteFile (in: hFile=0x2e4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x406d8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x406d8, lpOverlapped=0x0) returned 1 [0166.959] FlushFileBuffers (hFile=0x2e4) returned 1 [0166.962] FlushFileBuffers (hFile=0x2cc) returned 1 [0166.964] CloseHandle (hObject=0x2e4) returned 1 [0166.964] CloseHandle (hObject=0x2cc) returned 1 [0166.964] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvshnotify.exe")) returned 1 [0166.967] SetEvent (hEvent=0x27c) returned 1 [0166.968] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0166.968] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=820416) returned 1 [0166.968] CloseHandle (hObject=0x2cc) returned 1 [0166.968] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll")) returned 0x20 [0166.968] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll")) returned 0x20 [0166.968] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0166.968] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0166.968] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0166.968] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0166.969] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e4 [0166.969] ReadFile (in: hFile=0x2cc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xc84c0, lpOverlapped=0x0) returned 1 [0166.993] WriteFile (in: hFile=0x2e4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xc84d0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xc84d0, lpOverlapped=0x0) returned 1 [0167.010] WriteFile (in: hFile=0x2e4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0167.010] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0167.010] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0167.010] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xc84c0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xc84c0, lpOverlapped=0x0) returned 1 [0167.172] FlushFileBuffers (hFile=0x2cc) returned 1 [0167.179] FlushFileBuffers (hFile=0x2e4) returned 1 [0167.182] CloseHandle (hObject=0x2cc) returned 1 [0167.182] CloseHandle (hObject=0x2e4) returned 1 [0167.182] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll")) returned 1 [0167.250] SetEvent (hEvent=0x27c) returned 1 [0167.250] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0167.250] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1208928) returned 1 [0167.250] CloseHandle (hObject=0x2e4) returned 1 [0167.250] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll")) returned 0x20 [0167.250] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll")) returned 0x20 [0167.250] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0167.250] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0167.251] SetFilePointerEx (in: hFile=0x2e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0167.251] SetFilePointerEx (in: hFile=0x2e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0167.252] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2cc [0167.252] ReadFile (in: hFile=0x2e4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x110100, lpOverlapped=0x0) returned 1 [0167.450] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x110100, lpOverlapped=0x0) returned 1 [0167.472] ReadFile (in: hFile=0x2e4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x17160, lpOverlapped=0x0) returned 1 [0167.474] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x17170, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x17170, lpOverlapped=0x0) returned 1 [0167.475] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0167.475] SetFilePointerEx (in: hFile=0x2e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0167.475] SetFilePointerEx (in: hFile=0x2e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0167.476] WriteFile (in: hFile=0x2e4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x110102, lpOverlapped=0x0) returned 1 [0167.626] WriteFile (in: hFile=0x2e4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1715e, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1715e, lpOverlapped=0x0) returned 1 [0167.627] FlushFileBuffers (hFile=0x2e4) returned 1 [0168.170] FlushFileBuffers (hFile=0x2cc) returned 1 [0168.862] CloseHandle (hObject=0x2e4) returned 1 [0168.862] CloseHandle (hObject=0x2cc) returned 1 [0168.862] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll")) returned 1 [0168.873] SetEvent (hEvent=0x27c) returned 1 [0168.874] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0168.874] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=332968) returned 1 [0168.874] CloseHandle (hObject=0x2cc) returned 1 [0168.874] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll")) returned 0x20 [0168.874] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll")) returned 0x20 [0168.874] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0168.875] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0168.875] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0168.875] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0168.875] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e4 [0168.875] ReadFile (in: hFile=0x2cc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x514a8, lpOverlapped=0x0) returned 1 [0168.896] WriteFile (in: hFile=0x2e4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x514b0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x514b0, lpOverlapped=0x0) returned 1 [0168.904] WriteFile (in: hFile=0x2e4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0168.904] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0168.904] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0168.904] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x514a8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x514a8, lpOverlapped=0x0) returned 1 [0168.906] FlushFileBuffers (hFile=0x2cc) returned 1 [0168.909] FlushFileBuffers (hFile=0x2e4) returned 1 [0168.911] CloseHandle (hObject=0x2cc) returned 1 [0168.911] CloseHandle (hObject=0x2e4) returned 1 [0168.911] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll")) returned 1 [0168.915] SetEvent (hEvent=0x27c) returned 1 [0168.915] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i640.hash"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0168.915] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=102) returned 1 [0168.915] CloseHandle (hObject=0x2e4) returned 1 [0168.915] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i640.hash")) returned 0x20 [0168.915] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i640.hash")) returned 0x20 [0168.915] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i640.hash.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0168.915] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i640.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0168.916] SetFilePointerEx (in: hFile=0x2e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0168.916] SetFilePointerEx (in: hFile=0x2e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0168.916] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i640.hash.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2cc [0168.916] ReadFile (in: hFile=0x2e4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x66, lpOverlapped=0x0) returned 1 [0168.917] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x70, lpOverlapped=0x0) returned 1 [0168.918] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0168.918] SetFilePointerEx (in: hFile=0x2e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0168.918] SetFilePointerEx (in: hFile=0x2e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0168.919] WriteFile (in: hFile=0x2e4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x66, lpOverlapped=0x0) returned 1 [0168.919] FlushFileBuffers (hFile=0x2e4) returned 1 [0168.923] FlushFileBuffers (hFile=0x2cc) returned 1 [0168.925] CloseHandle (hObject=0x2e4) returned 1 [0168.925] CloseHandle (hObject=0x2cc) returned 1 [0168.925] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i640.hash")) returned 1 [0168.927] SetEvent (hEvent=0x27c) returned 1 [0168.927] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i641033.hash"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0168.927] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=102) returned 1 [0168.927] CloseHandle (hObject=0x2cc) returned 1 [0168.927] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i641033.hash")) returned 0x20 [0168.927] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i641033.hash")) returned 0x20 [0168.927] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i641033.hash.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0168.927] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i641033.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0168.928] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0168.928] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0168.928] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i641033.hash.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e4 [0168.928] ReadFile (in: hFile=0x2cc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x66, lpOverlapped=0x0) returned 1 [0168.929] WriteFile (in: hFile=0x2e4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x70, lpOverlapped=0x0) returned 1 [0168.930] WriteFile (in: hFile=0x2e4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0168.930] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0168.930] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0168.930] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x66, lpOverlapped=0x0) returned 1 [0168.931] FlushFileBuffers (hFile=0x2cc) returned 1 [0168.933] FlushFileBuffers (hFile=0x2e4) returned 1 [0168.939] CloseHandle (hObject=0x2cc) returned 1 [0168.939] CloseHandle (hObject=0x2e4) returned 1 [0168.939] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i641033.hash")) returned 1 [0168.941] SetEvent (hEvent=0x27c) returned 1 [0168.941] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\integratedoffice.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0168.941] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1093248) returned 1 [0168.941] CloseHandle (hObject=0x2e4) returned 1 [0168.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\integratedoffice.exe")) returned 0x20 [0168.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\integratedoffice.exe")) returned 0x20 [0168.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\integratedoffice.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0168.941] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\integratedoffice.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0168.941] SetFilePointerEx (in: hFile=0x2e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0168.942] SetFilePointerEx (in: hFile=0x2e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0168.942] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\integratedoffice.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2cc [0168.942] ReadFile (in: hFile=0x2e4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x10ae80, lpOverlapped=0x0) returned 1 [0168.970] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x10ae90, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x10ae90, lpOverlapped=0x0) returned 1 [0168.995] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x102, lpOverlapped=0x0) returned 1 [0168.995] SetFilePointerEx (in: hFile=0x2e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0168.996] SetFilePointerEx (in: hFile=0x2e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0168.996] WriteFile (in: hFile=0x2e4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x10ae80, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x10ae80, lpOverlapped=0x0) returned 1 [0169.001] FlushFileBuffers (hFile=0x2e4) returned 1 [0169.395] FlushFileBuffers (hFile=0x2cc) returned 1 [0169.398] CloseHandle (hObject=0x2e4) returned 1 [0169.398] CloseHandle (hObject=0x2cc) returned 1 [0169.398] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\integratedoffice.exe")) returned 1 [0169.409] SetEvent (hEvent=0x27c) returned 1 [0169.409] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0169.409] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3144288) returned 1 [0169.409] CloseHandle (hObject=0x2cc) returned 1 [0169.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll")) returned 0x20 [0169.409] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 1 [0169.410] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0169.411] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll")) returned 1 [0169.411] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0169.411] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=4677216) returned 1 [0169.411] CloseHandle (hObject=0x2cc) returned 1 [0169.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll")) returned 0x20 [0169.412] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 1 [0169.412] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0169.413] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll")) returned 1 [0169.417] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0169.417] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3177152) returned 1 [0169.417] CloseHandle (hObject=0x2cc) returned 1 [0169.417] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll")) returned 0x20 [0169.417] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 1 [0169.418] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0169.418] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll")) returned 1 [0169.419] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0169.419] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=9330784) returned 1 [0169.419] CloseHandle (hObject=0x2cc) returned 1 [0169.419] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll")) returned 0x20 [0169.419] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 1 [0169.420] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0169.420] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll")) returned 1 [0169.421] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msointl30.en-us.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0169.421] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=61024) returned 1 [0169.421] CloseHandle (hObject=0x2cc) returned 1 [0169.421] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msointl30.en-us.dll")) returned 0x20 [0169.421] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msointl30.en-us.dll")) returned 0x20 [0169.421] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msointl30.en-us.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0169.421] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msointl30.en-us.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0169.422] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0169.422] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0169.422] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msointl30.en-us.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e4 [0169.422] ReadFile (in: hFile=0x2cc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xee60, lpOverlapped=0x0) returned 1 [0169.426] WriteFile (in: hFile=0x2e4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xee70, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xee70, lpOverlapped=0x0) returned 1 [0169.428] WriteFile (in: hFile=0x2e4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x102, lpOverlapped=0x0) returned 1 [0169.428] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0169.428] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0169.428] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xee60, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xee60, lpOverlapped=0x0) returned 1 [0169.429] FlushFileBuffers (hFile=0x2cc) returned 1 [0169.433] FlushFileBuffers (hFile=0x2e4) returned 1 [0169.434] CloseHandle (hObject=0x2cc) returned 1 [0169.434] CloseHandle (hObject=0x2e4) returned 1 [0169.434] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msointl30.en-us.dll")) returned 1 [0169.436] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp120.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0169.436] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=660136) returned 1 [0169.436] CloseHandle (hObject=0x2e4) returned 1 [0169.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp120.dll")) returned 0x20 [0169.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp120.dll")) returned 0x20 [0169.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp120.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0169.436] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp120.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0169.437] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp140.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0169.437] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=635040) returned 1 [0169.437] CloseHandle (hObject=0x2e4) returned 1 [0169.437] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp140.dll")) returned 0x20 [0169.437] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp140.dll")) returned 0x20 [0169.437] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp140.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0169.437] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0169.437] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcr120.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0169.438] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=963240) returned 1 [0169.438] CloseHandle (hObject=0x2e4) returned 1 [0169.438] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcr120.dll")) returned 0x20 [0169.438] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcr120.dll")) returned 0x20 [0169.438] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcr120.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0169.438] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcr120.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0169.438] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0169.438] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=5967976) returned 1 [0169.438] CloseHandle (hObject=0x2e4) returned 1 [0169.438] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe")) returned 0x20 [0169.439] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 1 [0169.439] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0169.439] SetFilePointerEx (in: hFile=0x2e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fc20 | out: lpNewFilePointer=0x0) returned 1 [0169.439] SetFilePointerEx (in: hFile=0x2e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fc20 | out: lpNewFilePointer=0x0) returned 1 [0169.440] ReadFile (in: hFile=0x2e4, lpBuffer=0x3b3f058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x378fc2c, lpOverlapped=0x0 | out: lpBuffer=0x3b3f058*, lpNumberOfBytesRead=0x378fc2c*=0x40000, lpOverlapped=0x0) returned 1 [0169.450] SetFilePointerEx (in: hFile=0x2e4, liDistanceToMove=0x1e5acd, lpNewFilePointer=0x0, dwMoveMethod=0x378fc20 | out: lpNewFilePointer=0x0) returned 1 [0169.450] ReadFile (in: hFile=0x2e4, lpBuffer=0x3b7f058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x378fc2c, lpOverlapped=0x0 | out: lpBuffer=0x3b7f058*, lpNumberOfBytesRead=0x378fc2c*=0x40000, lpOverlapped=0x0) returned 1 [0169.463] SetFilePointerEx (in: hFile=0x2e4, liDistanceToMove=0x571068, lpNewFilePointer=0x0, dwMoveMethod=0x378fc20 | out: lpNewFilePointer=0x0) returned 1 [0169.463] ReadFile (in: hFile=0x2e4, lpBuffer=0x3bbf058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x378fc2c, lpOverlapped=0x0 | out: lpBuffer=0x3bbf058*, lpNumberOfBytesRead=0x378fc2c*=0x40000, lpOverlapped=0x0) returned 1 [0169.478] SetFilePointerEx (in: hFile=0x2e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd90 | out: lpNewFilePointer=0x0) returned 1 [0169.478] WriteFile (in: hFile=0x2e4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xc0112, lpNumberOfBytesWritten=0x378fd88, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd88*=0xc0112, lpOverlapped=0x0) returned 1 [0169.501] SetEndOfFile (hFile=0x2e4) returned 1 [0169.502] SetFilePointerEx (in: hFile=0x2e4, liDistanceToMove=0x571068, lpNewFilePointer=0x0, dwMoveMethod=0x378fc28 | out: lpNewFilePointer=0x0) returned 1 [0169.502] WriteFile (in: hFile=0x2e4, lpBuffer=0x3bff14a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x378fc34, lpOverlapped=0x0 | out: lpBuffer=0x3bff14a*, lpNumberOfBytesWritten=0x378fc34*=0x40000, lpOverlapped=0x0) returned 1 [0169.504] SetFilePointerEx (in: hFile=0x2e4, liDistanceToMove=0x1e5acd, lpNewFilePointer=0x0, dwMoveMethod=0x378fc28 | out: lpNewFilePointer=0x0) returned 1 [0169.504] WriteFile (in: hFile=0x2e4, lpBuffer=0x3bff14a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x378fc34, lpOverlapped=0x0 | out: lpBuffer=0x3bff14a*, lpNumberOfBytesWritten=0x378fc34*=0x40000, lpOverlapped=0x0) returned 1 [0169.507] SetFilePointerEx (in: hFile=0x2e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fc28 | out: lpNewFilePointer=0x0) returned 1 [0169.507] WriteFile (in: hFile=0x2e4, lpBuffer=0x3bff14a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x378fc34, lpOverlapped=0x0 | out: lpBuffer=0x3bff14a*, lpNumberOfBytesWritten=0x378fc34*=0x40000, lpOverlapped=0x0) returned 1 [0169.509] FlushFileBuffers (hFile=0x2e4) returned 1 [0169.763] CloseHandle (hObject=0x2e4) returned 1 [0169.763] SetEvent (hEvent=0x27c) returned 1 [0169.763] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0169.769] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=4782) returned 1 [0169.769] CloseHandle (hObject=0x2c4) returned 1 [0169.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml")) returned 0x20 [0169.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml")) returned 0x20 [0169.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0169.769] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0169.769] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0169.769] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0169.770] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d0 [0169.774] ReadFile (in: hFile=0x2c4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x12ae, lpOverlapped=0x0) returned 1 [0169.778] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x12b0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x12b0, lpOverlapped=0x0) returned 1 [0169.781] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x112, lpOverlapped=0x0) returned 1 [0169.782] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0169.782] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0169.782] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x12ae, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x12ae, lpOverlapped=0x0) returned 1 [0169.782] FlushFileBuffers (hFile=0x2c4) returned 1 [0169.879] FlushFileBuffers (hFile=0x2d0) returned 1 [0169.880] CloseHandle (hObject=0x2c4) returned 1 [0169.880] CloseHandle (hObject=0x2d0) returned 1 [0169.880] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml")) returned 1 [0169.881] SetEvent (hEvent=0x27c) returned 1 [0169.882] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0169.882] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=390320) returned 1 [0169.882] CloseHandle (hObject=0x2d0) returned 1 [0169.882] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll")) returned 0x20 [0169.882] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll")) returned 0x20 [0169.882] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0169.882] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0169.882] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0169.882] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0169.882] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c4 [0169.883] ReadFile (in: hFile=0x2d0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x5f4b0, lpOverlapped=0x0) returned 1 [0169.896] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5f4c0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x5f4c0, lpOverlapped=0x0) returned 1 [0169.903] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0169.904] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0169.904] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0169.904] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5f4b0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x5f4b0, lpOverlapped=0x0) returned 1 [0169.905] FlushFileBuffers (hFile=0x2d0) returned 1 [0170.030] FlushFileBuffers (hFile=0x2c4) returned 1 [0170.032] CloseHandle (hObject=0x2d0) returned 1 [0170.033] CloseHandle (hObject=0x2c4) returned 1 [0170.033] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll")) returned 1 [0170.037] SetEvent (hEvent=0x27c) returned 1 [0170.037] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vcruntime140.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0170.038] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=88752) returned 1 [0170.038] CloseHandle (hObject=0x2c4) returned 1 [0170.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vcruntime140.dll")) returned 0x20 [0170.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vcruntime140.dll")) returned 0x20 [0170.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vcruntime140.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.038] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vcruntime140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.038] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0170.039] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=791421) returned 1 [0170.039] CloseHandle (hObject=0x2c4) returned 1 [0170.039] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml")) returned 0x20 [0170.039] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml")) returned 0x20 [0170.039] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.039] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.039] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0170.040] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=10752) returned 1 [0170.040] CloseHandle (hObject=0x2c4) returned 1 [0170.040] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui")) returned 0x20 [0170.040] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui")) returned 0x20 [0170.040] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.040] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.040] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0170.040] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=10752) returned 1 [0170.040] CloseHandle (hObject=0x2c4) returned 1 [0170.040] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui")) returned 0x20 [0170.040] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui")) returned 0x20 [0170.041] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.041] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.041] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0170.041] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=27045) returned 1 [0170.041] CloseHandle (hObject=0x2c4) returned 1 [0170.041] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml")) returned 0x20 [0170.041] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml")) returned 0x20 [0170.041] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.041] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.042] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0170.042] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=9728) returned 1 [0170.042] CloseHandle (hObject=0x2c4) returned 1 [0170.042] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui")) returned 0x20 [0170.042] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui")) returned 0x20 [0170.042] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.042] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.042] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0170.043] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=10240) returned 1 [0170.043] CloseHandle (hObject=0x2c4) returned 1 [0170.043] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui")) returned 0x20 [0170.043] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui")) returned 0x20 [0170.043] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.043] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.043] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0170.043] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=10752) returned 1 [0170.043] CloseHandle (hObject=0x2c4) returned 1 [0170.043] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui")) returned 0x20 [0170.044] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui")) returned 0x20 [0170.044] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.044] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.044] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0170.044] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=10752) returned 1 [0170.044] CloseHandle (hObject=0x2c4) returned 1 [0170.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\tipresx.dll.mui")) returned 0x20 [0170.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\tipresx.dll.mui")) returned 0x20 [0170.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.049] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.049] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-gb\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0170.049] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=9728) returned 1 [0170.049] CloseHandle (hObject=0x2c4) returned 1 [0170.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-gb\\tipresx.dll.mui")) returned 0x20 [0170.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-gb\\tipresx.dll.mui")) returned 0x20 [0170.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-gb\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.050] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-gb\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.050] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0170.051] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=111320) returned 1 [0170.051] CloseHandle (hObject=0x2c4) returned 1 [0170.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi")) returned 0x20 [0170.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi")) returned 0x20 [0170.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.051] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.052] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0170.052] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=48936) returned 1 [0170.052] CloseHandle (hObject=0x2c4) returned 1 [0170.052] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi")) returned 0x20 [0170.052] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi")) returned 0x20 [0170.052] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.052] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.052] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0170.053] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=46622) returned 1 [0170.053] CloseHandle (hObject=0x2c4) returned 1 [0170.053] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi")) returned 0x20 [0170.053] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi")) returned 0x20 [0170.053] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.053] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.053] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0170.053] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=84190) returned 1 [0170.053] CloseHandle (hObject=0x2c4) returned 1 [0170.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi")) returned 0x20 [0170.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi")) returned 0x20 [0170.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.054] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.054] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0170.054] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=180172) returned 1 [0170.054] CloseHandle (hObject=0x2c4) returned 1 [0170.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi")) returned 0x20 [0170.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi")) returned 0x20 [0170.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.055] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.055] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0170.055] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=208408) returned 1 [0170.055] CloseHandle (hObject=0x2c4) returned 1 [0170.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi")) returned 0x20 [0170.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi")) returned 0x20 [0170.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.055] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.055] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\FlickLearningWizard.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\flicklearningwizard.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0170.056] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=8704) returned 1 [0170.056] CloseHandle (hObject=0x2c4) returned 1 [0170.056] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\FlickLearningWizard.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\flicklearningwizard.exe.mui")) returned 0x20 [0170.056] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\FlickLearningWizard.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\flicklearningwizard.exe.mui")) returned 0x20 [0170.056] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\FlickLearningWizard.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\flicklearningwizard.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.056] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\FlickLearningWizard.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\flicklearningwizard.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.056] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InkObj.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0170.056] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=5120) returned 1 [0170.056] CloseHandle (hObject=0x2c4) returned 1 [0170.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InkObj.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui")) returned 0x20 [0170.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InkObj.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui")) returned 0x20 [0170.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InkObj.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.057] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InkObj.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.057] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inputpersonalization.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0170.057] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3072) returned 1 [0170.057] CloseHandle (hObject=0x2c4) returned 1 [0170.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inputpersonalization.exe.mui")) returned 0x20 [0170.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inputpersonalization.exe.mui")) returned 0x20 [0170.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inputpersonalization.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.057] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inputpersonalization.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.058] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0170.058] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=23040) returned 1 [0170.058] CloseHandle (hObject=0x2c4) returned 1 [0170.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui")) returned 0x20 [0170.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui")) returned 0x20 [0170.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.058] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.058] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipsmigrationplugin.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0170.059] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2560) returned 1 [0170.059] CloseHandle (hObject=0x2c4) returned 1 [0170.059] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipsmigrationplugin.dll.mui")) returned 0x20 [0170.059] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipsmigrationplugin.dll.mui")) returned 0x20 [0170.059] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipsmigrationplugin.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.059] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipsmigrationplugin.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.059] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0170.059] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=199994) returned 1 [0170.059] CloseHandle (hObject=0x2c4) returned 1 [0170.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi")) returned 0x20 [0170.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi")) returned 0x20 [0170.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.060] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.060] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0170.060] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=9216) returned 1 [0170.060] CloseHandle (hObject=0x2c4) returned 1 [0170.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui")) returned 0x20 [0170.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui")) returned 0x20 [0170.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.061] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.061] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mip.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0170.061] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=10752) returned 1 [0170.061] CloseHandle (hObject=0x2c4) returned 1 [0170.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mip.exe.mui")) returned 0x20 [0170.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mip.exe.mui")) returned 0x20 [0170.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mip.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mip.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.061] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mip.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.062] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0170.062] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3072) returned 1 [0170.062] CloseHandle (hObject=0x2c4) returned 1 [0170.062] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui")) returned 0x20 [0170.062] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui")) returned 0x20 [0170.062] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.062] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.062] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0170.063] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3072) returned 1 [0170.063] CloseHandle (hObject=0x2c4) returned 1 [0170.063] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui")) returned 0x20 [0170.063] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui")) returned 0x20 [0170.063] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.063] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.064] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\ShapeCollector.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\shapecollector.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0170.065] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=44032) returned 1 [0170.065] CloseHandle (hObject=0x2c4) returned 1 [0170.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\ShapeCollector.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\shapecollector.exe.mui")) returned 0x20 [0170.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\ShapeCollector.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\shapecollector.exe.mui")) returned 0x20 [0170.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\ShapeCollector.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\shapecollector.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.065] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\ShapeCollector.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\shapecollector.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.065] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0170.065] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=181964) returned 1 [0170.065] CloseHandle (hObject=0x2c4) returned 1 [0170.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi")) returned 0x20 [0170.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi")) returned 0x20 [0170.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.066] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.066] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabskb.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0170.066] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=5120) returned 1 [0170.066] CloseHandle (hObject=0x2c4) returned 1 [0170.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabskb.dll.mui")) returned 0x20 [0170.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabskb.dll.mui")) returned 0x20 [0170.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabskb.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.066] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabskb.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.067] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TabTip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabtip.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0170.067] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2560) returned 1 [0170.067] CloseHandle (hObject=0x2c4) returned 1 [0170.067] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TabTip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabtip.exe.mui")) returned 0x20 [0170.067] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TabTip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabtip.exe.mui")) returned 0x20 [0170.067] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TabTip.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabtip.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.067] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TabTip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabtip.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.067] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipRes.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0170.068] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=25088) returned 1 [0170.068] CloseHandle (hObject=0x2c4) returned 1 [0170.068] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipRes.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui")) returned 0x20 [0170.068] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipRes.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui")) returned 0x20 [0170.068] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipRes.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.068] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipRes.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.068] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0170.068] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=9728) returned 1 [0170.068] CloseHandle (hObject=0x2c4) returned 1 [0170.068] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipresx.dll.mui")) returned 0x20 [0170.068] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipresx.dll.mui")) returned 0x20 [0170.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.069] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.069] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipTsf.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0170.069] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3584) returned 1 [0170.069] CloseHandle (hObject=0x2c4) returned 1 [0170.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipTsf.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui")) returned 0x20 [0170.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipTsf.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui")) returned 0x20 [0170.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipTsf.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.069] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipTsf.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.069] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0170.070] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=10752) returned 1 [0170.070] CloseHandle (hObject=0x2c4) returned 1 [0170.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\tipresx.dll.mui")) returned 0x20 [0170.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\tipresx.dll.mui")) returned 0x20 [0170.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.070] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.070] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-mx\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0170.071] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=10752) returned 1 [0170.071] CloseHandle (hObject=0x2c4) returned 1 [0170.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-mx\\tipresx.dll.mui")) returned 0x20 [0170.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-mx\\tipresx.dll.mui")) returned 0x20 [0170.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-mx\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.071] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-mx\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.071] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0170.071] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=10752) returned 1 [0170.071] CloseHandle (hObject=0x2c4) returned 1 [0170.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\tipresx.dll.mui")) returned 0x20 [0170.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\tipresx.dll.mui")) returned 0x20 [0170.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.072] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.072] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0170.072] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=10240) returned 1 [0170.072] CloseHandle (hObject=0x2c4) returned 1 [0170.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi\\tipresx.dll.mui")) returned 0x20 [0170.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi\\tipresx.dll.mui")) returned 0x20 [0170.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.072] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.073] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0170.073] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1600388) returned 1 [0170.074] CloseHandle (hObject=0x2c4) returned 1 [0170.074] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi")) returned 0x20 [0170.074] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0 [0170.074] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi.id[b4197730-2299].[britt.looper@aol.com].phoenix"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi")) returned 0 [0170.074] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickLearningWizard.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flicklearningwizard.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0170.074] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=804864) returned 1 [0170.074] CloseHandle (hObject=0x2c4) returned 1 [0170.074] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickLearningWizard.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flicklearningwizard.exe")) returned 0x20 [0170.074] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickLearningWizard.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flicklearningwizard.exe")) returned 0x20 [0170.075] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickLearningWizard.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flicklearningwizard.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.075] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickLearningWizard.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flicklearningwizard.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.075] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-ca\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0170.075] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=11264) returned 1 [0170.075] CloseHandle (hObject=0x2c4) returned 1 [0170.075] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-ca\\tipresx.dll.mui")) returned 0x20 [0170.075] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-ca\\tipresx.dll.mui")) returned 0x20 [0170.075] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-ca\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.075] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-ca\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.076] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d8 [0170.130] GetFileSizeEx (in: hFile=0x2d8, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=11264) returned 1 [0170.130] CloseHandle (hObject=0x2d8) returned 1 [0170.130] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr\\tipresx.dll.mui")) returned 0x20 [0170.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr\\tipresx.dll.mui")) returned 0x20 [0170.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.358] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.423] SetEvent (hEvent=0x27c) returned 1 [0170.423] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0170.423] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2462) returned 1 [0170.423] CloseHandle (hObject=0x2bc) returned 1 [0170.424] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml")) returned 0x20 [0170.424] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml")) returned 0x20 [0170.424] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.424] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.424] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0170.424] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2436) returned 1 [0170.424] CloseHandle (hObject=0x2bc) returned 1 [0170.424] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml")) returned 0x20 [0170.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml")) returned 0x20 [0170.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.425] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.425] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0170.425] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2556) returned 1 [0170.425] CloseHandle (hObject=0x2bc) returned 1 [0170.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml")) returned 0x20 [0170.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml")) returned 0x20 [0170.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.426] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.426] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0170.426] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2514) returned 1 [0170.426] CloseHandle (hObject=0x2bc) returned 1 [0170.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml")) returned 0x20 [0170.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml")) returned 0x20 [0170.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.427] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.427] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0170.427] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2616) returned 1 [0170.427] CloseHandle (hObject=0x2bc) returned 1 [0170.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml")) returned 0x20 [0170.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml")) returned 0x20 [0170.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.428] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.428] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsel.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0170.428] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2618) returned 1 [0170.428] CloseHandle (hObject=0x2bc) returned 1 [0170.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsel.xml")) returned 0x20 [0170.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsel.xml")) returned 0x20 [0170.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsel.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.428] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsel.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.429] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0170.429] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2578) returned 1 [0170.429] CloseHandle (hObject=0x2bc) returned 1 [0170.429] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml")) returned 0x20 [0170.429] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml")) returned 0x20 [0170.429] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.429] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.430] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0170.430] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3024) returned 1 [0170.430] CloseHandle (hObject=0x2bc) returned 1 [0170.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml")) returned 0x20 [0170.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml")) returned 0x20 [0170.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.430] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.430] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IPSEventLogMsg.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipseventlogmsg.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0170.431] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2560) returned 1 [0170.431] CloseHandle (hObject=0x2bc) returned 1 [0170.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IPSEventLogMsg.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipseventlogmsg.dll")) returned 0x20 [0170.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IPSEventLogMsg.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipseventlogmsg.dll")) returned 0x20 [0170.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IPSEventLogMsg.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipseventlogmsg.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.431] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IPSEventLogMsg.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipseventlogmsg.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.431] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0170.432] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2658) returned 1 [0170.432] CloseHandle (hObject=0x2bc) returned 1 [0170.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml")) returned 0x20 [0170.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml")) returned 0x20 [0170.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.432] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.432] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0170.433] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2628) returned 1 [0170.433] CloseHandle (hObject=0x2bc) returned 1 [0170.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml")) returned 0x20 [0170.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml")) returned 0x20 [0170.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.433] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.433] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshe.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0170.433] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2532) returned 1 [0170.434] CloseHandle (hObject=0x2bc) returned 1 [0170.434] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshe.xml")) returned 0x20 [0170.434] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshe.xml")) returned 0x20 [0170.434] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshe.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.434] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshe.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.434] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshi.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0170.434] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2518) returned 1 [0170.434] CloseHandle (hObject=0x2bc) returned 1 [0170.434] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshi.xml")) returned 0x20 [0170.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshi.xml")) returned 0x20 [0170.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshi.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.435] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshi.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.435] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0170.437] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2652) returned 1 [0170.437] CloseHandle (hObject=0x2bc) returned 1 [0170.437] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml")) returned 0x20 [0170.437] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml")) returned 0x20 [0170.438] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.438] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.438] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsid.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0170.438] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2570) returned 1 [0170.438] CloseHandle (hObject=0x2bc) returned 1 [0170.438] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsid.xml")) returned 0x20 [0170.438] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsid.xml")) returned 0x20 [0170.439] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsid.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.439] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsid.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.439] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0170.439] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2526) returned 1 [0170.439] CloseHandle (hObject=0x2bc) returned 1 [0170.439] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml")) returned 0x20 [0170.439] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml")) returned 0x20 [0170.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.440] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.440] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0170.440] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2522) returned 1 [0170.440] CloseHandle (hObject=0x2bc) returned 1 [0170.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml")) returned 0x20 [0170.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml")) returned 0x20 [0170.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.441] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.441] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0170.441] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2568) returned 1 [0170.441] CloseHandle (hObject=0x2bc) returned 1 [0170.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml")) returned 0x20 [0170.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml")) returned 0x20 [0170.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.441] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.442] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsMigrationPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsmigrationplugin.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0170.442] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=41984) returned 1 [0170.442] CloseHandle (hObject=0x2bc) returned 1 [0170.442] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsMigrationPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsmigrationplugin.dll")) returned 0x20 [0170.442] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsMigrationPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsmigrationplugin.dll")) returned 0x20 [0170.442] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsMigrationPlugin.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsmigrationplugin.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.442] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsMigrationPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsmigrationplugin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.443] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0170.443] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2626) returned 1 [0170.443] CloseHandle (hObject=0x2bc) returned 1 [0170.443] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml")) returned 0x20 [0170.443] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml")) returned 0x20 [0170.443] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.443] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.443] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0170.444] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2580) returned 1 [0170.444] CloseHandle (hObject=0x2bc) returned 1 [0170.444] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml")) returned 0x20 [0170.444] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml")) returned 0x20 [0170.444] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.444] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.444] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0170.445] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2600) returned 1 [0170.445] CloseHandle (hObject=0x2bc) returned 1 [0170.445] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml")) returned 0x20 [0170.445] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml")) returned 0x20 [0170.445] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.445] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.445] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplugin.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0170.446] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=125952) returned 1 [0170.446] CloseHandle (hObject=0x2bc) returned 1 [0170.446] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplugin.dll")) returned 0x20 [0170.446] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplugin.dll")) returned 0x20 [0170.446] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsPlugin.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplugin.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.446] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplugin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.446] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0170.446] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2246) returned 1 [0170.446] CloseHandle (hObject=0x2bc) returned 1 [0170.447] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml")) returned 0x20 [0170.447] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml")) returned 0x20 [0170.447] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.447] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.447] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0170.447] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2240) returned 1 [0170.447] CloseHandle (hObject=0x2bc) returned 1 [0170.447] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml")) returned 0x20 [0170.448] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml")) returned 0x20 [0170.448] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.448] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.448] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0170.448] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2644) returned 1 [0170.448] CloseHandle (hObject=0x2bc) returned 1 [0170.448] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml")) returned 0x20 [0170.448] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml")) returned 0x20 [0170.449] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.449] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.449] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0170.449] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2542) returned 1 [0170.449] CloseHandle (hObject=0x2bc) returned 1 [0170.449] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml")) returned 0x20 [0170.450] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml")) returned 0x20 [0170.450] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.450] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.450] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0170.450] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2568) returned 1 [0170.450] CloseHandle (hObject=0x2bc) returned 1 [0170.450] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml")) returned 0x20 [0170.450] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml")) returned 0x20 [0170.450] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.450] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.451] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0170.452] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2596) returned 1 [0170.452] CloseHandle (hObject=0x2bc) returned 1 [0170.452] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml")) returned 0x20 [0170.452] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml")) returned 0x20 [0170.452] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.452] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.452] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0170.452] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2520) returned 1 [0170.453] CloseHandle (hObject=0x2bc) returned 1 [0170.453] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml")) returned 0x20 [0170.453] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml")) returned 0x20 [0170.453] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.453] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.453] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipstr.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0170.453] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2720) returned 1 [0170.453] CloseHandle (hObject=0x2bc) returned 1 [0170.453] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipstr.xml")) returned 0x20 [0170.453] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipstr.xml")) returned 0x20 [0170.453] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipstr.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.454] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipstr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.454] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0170.454] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=10752) returned 1 [0170.454] CloseHandle (hObject=0x2bc) returned 1 [0170.454] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it\\tipresx.dll.mui")) returned 0x20 [0170.454] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it\\tipresx.dll.mui")) returned 0x20 [0170.454] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.454] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.455] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0170.455] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=7680) returned 1 [0170.455] CloseHandle (hObject=0x2bc) returned 1 [0170.455] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp\\tipresx.dll.mui")) returned 0x20 [0170.455] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp\\tipresx.dll.mui")) returned 0x20 [0170.455] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.455] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.455] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0170.456] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=7680) returned 1 [0170.456] CloseHandle (hObject=0x2bc) returned 1 [0170.456] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr\\tipresx.dll.mui")) returned 0x20 [0170.456] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr\\tipresx.dll.mui")) returned 0x20 [0170.456] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.456] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.456] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\chstic.dgml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\languagemodel\\chstic.dgml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0170.457] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=763) returned 1 [0170.457] CloseHandle (hObject=0x2bc) returned 1 [0170.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\chstic.dgml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\languagemodel\\chstic.dgml")) returned 0x20 [0170.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\chstic.dgml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\languagemodel\\chstic.dgml")) returned 0x20 [0170.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\chstic.dgml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\languagemodel\\chstic.dgml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.457] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\chstic.dgml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\languagemodel\\chstic.dgml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.458] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0170.458] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=10240) returned 1 [0170.458] CloseHandle (hObject=0x2bc) returned 1 [0170.458] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt\\tipresx.dll.mui")) returned 0x20 [0170.458] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt\\tipresx.dll.mui")) returned 0x20 [0170.458] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.458] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.458] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0170.459] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=10240) returned 1 [0170.459] CloseHandle (hObject=0x2bc) returned 1 [0170.459] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv\\tipresx.dll.mui")) returned 0x20 [0170.459] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv\\tipresx.dll.mui")) returned 0x20 [0170.459] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.459] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.459] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0170.460] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1700352) returned 1 [0170.460] CloseHandle (hObject=0x2bc) returned 1 [0170.460] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll")) returned 0x20 [0170.460] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0 [0170.460] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll")) returned 0 [0170.461] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Microsoft.Ink.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\microsoft.ink.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0170.461] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=503808) returned 1 [0170.461] CloseHandle (hObject=0x2bc) returned 1 [0170.461] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Microsoft.Ink.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\microsoft.ink.dll")) returned 0x20 [0170.461] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Microsoft.Ink.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\microsoft.ink.dll")) returned 0x20 [0170.461] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Microsoft.Ink.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\microsoft.ink.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.461] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Microsoft.Ink.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\microsoft.ink.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.461] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mip.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0170.462] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1540608) returned 1 [0170.462] CloseHandle (hObject=0x2bc) returned 1 [0170.462] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mip.exe")) returned 0x20 [0170.462] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mip.exe")) returned 0x20 [0170.462] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mip.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mip.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.462] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mip.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.462] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0170.463] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=6368768) returned 1 [0170.463] CloseHandle (hObject=0x2bc) returned 1 [0170.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll")) returned 0x20 [0170.463] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0 [0170.463] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll")) returned 0 [0170.463] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwgst.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwgst.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0170.463] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=51200) returned 1 [0170.463] CloseHandle (hObject=0x2bc) returned 1 [0170.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwgst.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwgst.dll")) returned 0x20 [0170.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwgst.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwgst.dll")) returned 0x20 [0170.464] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwgst.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwgst.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.464] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwgst.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwgst.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.464] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwLatin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwlatin.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0170.464] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1075712) returned 1 [0170.464] CloseHandle (hObject=0x2bc) returned 1 [0170.464] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwLatin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwlatin.dll")) returned 0x20 [0170.464] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwLatin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwlatin.dll")) returned 0x20 [0170.464] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwLatin.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwlatin.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.464] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwLatin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwlatin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.465] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0170.465] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=10240) returned 1 [0170.465] CloseHandle (hObject=0x2bc) returned 1 [0170.465] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no\\tipresx.dll.mui")) returned 0x20 [0170.465] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no\\tipresx.dll.mui")) returned 0x20 [0170.465] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.465] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.465] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0170.466] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=10240) returned 1 [0170.466] CloseHandle (hObject=0x2bc) returned 1 [0170.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl\\tipresx.dll.mui")) returned 0x20 [0170.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl\\tipresx.dll.mui")) returned 0x20 [0170.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\tipresx.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl\\tipresx.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.552] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0170.552] SetEvent (hEvent=0x27c) returned 1 [0170.553] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pidgenx.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0170.554] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1475160) returned 1 [0170.554] CloseHandle (hObject=0x2c4) returned 1 [0170.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pidgenx.dll")) returned 0x20 [0170.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pidgenx.dll")) returned 0x20 [0170.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pidgenx.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0170.554] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pidgenx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0170.555] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0170.555] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0170.555] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pidgenx.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d0 [0170.555] ReadFile (in: hFile=0x2c4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x110100, lpOverlapped=0x0) returned 1 [0170.590] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x110100, lpOverlapped=0x0) returned 1 [0170.702] ReadFile (in: hFile=0x2c4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x58158, lpOverlapped=0x0) returned 1 [0170.707] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x58160, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x58160, lpOverlapped=0x0) returned 1 [0170.713] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0170.713] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0170.714] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0170.714] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x110102, lpOverlapped=0x0) returned 1 [0170.781] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x58156, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x58156, lpOverlapped=0x0) returned 1 [0170.782] FlushFileBuffers (hFile=0x2c4) returned 1 [0171.227] FlushFileBuffers (hFile=0x2d0) returned 1 [0171.385] CloseHandle (hObject=0x2c4) returned 1 [0171.385] CloseHandle (hObject=0x2d0) returned 1 [0171.385] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pidgenx.dll")) returned 1 [0171.398] SetEvent (hEvent=0x27c) returned 1 [0171.399] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0171.399] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=855376) returned 1 [0171.399] CloseHandle (hObject=0x2d0) returned 1 [0171.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll")) returned 0x20 [0171.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll")) returned 0x20 [0171.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0171.399] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0171.400] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0171.400] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0171.400] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c4 [0171.403] ReadFile (in: hFile=0x2d0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xd0d50, lpOverlapped=0x0) returned 1 [0171.595] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xd0d60, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xd0d60, lpOverlapped=0x0) returned 1 [0171.611] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0171.611] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0171.612] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0171.612] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xd0d50, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xd0d50, lpOverlapped=0x0) returned 1 [0171.614] FlushFileBuffers (hFile=0x2d0) returned 1 [0171.807] FlushFileBuffers (hFile=0x2c4) returned 1 [0171.811] CloseHandle (hObject=0x2d0) returned 1 [0171.811] CloseHandle (hObject=0x2c4) returned 1 [0171.811] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll")) returned 1 [0171.819] SetEvent (hEvent=0x27c) returned 1 [0171.819] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0171.819] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=20608) returned 1 [0171.819] CloseHandle (hObject=0x2c4) returned 1 [0171.819] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll")) returned 0x20 [0171.819] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll")) returned 0x20 [0171.819] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0171.820] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0171.820] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0171.820] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0171.820] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d0 [0171.820] ReadFile (in: hFile=0x2c4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x5080, lpOverlapped=0x0) returned 1 [0171.823] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5090, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x5090, lpOverlapped=0x0) returned 1 [0171.824] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x102, lpOverlapped=0x0) returned 1 [0171.824] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0171.824] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0171.824] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5080, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x5080, lpOverlapped=0x0) returned 1 [0171.824] FlushFileBuffers (hFile=0x2c4) returned 1 [0171.932] FlushFileBuffers (hFile=0x2d0) returned 1 [0171.933] CloseHandle (hObject=0x2c4) returned 1 [0171.933] CloseHandle (hObject=0x2d0) returned 1 [0171.934] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll")) returned 1 [0171.935] SetEvent (hEvent=0x27c) returned 1 [0171.935] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0171.935] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=367216) returned 1 [0171.935] CloseHandle (hObject=0x2d0) returned 1 [0171.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll")) returned 0x20 [0171.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll")) returned 0x20 [0171.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0171.936] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0171.936] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0171.936] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0171.936] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c4 [0171.936] ReadFile (in: hFile=0x2d0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x59a70, lpOverlapped=0x0) returned 1 [0171.949] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x59a80, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x59a80, lpOverlapped=0x0) returned 1 [0171.956] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0171.957] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0171.957] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0171.957] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x59a70, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x59a70, lpOverlapped=0x0) returned 1 [0171.958] FlushFileBuffers (hFile=0x2d0) returned 1 [0172.204] FlushFileBuffers (hFile=0x2c4) returned 1 [0172.213] CloseHandle (hObject=0x2d0) returned 1 [0172.213] CloseHandle (hObject=0x2c4) returned 1 [0172.213] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll")) returned 1 [0172.218] SetEvent (hEvent=0x27c) returned 1 [0172.218] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0172.218] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=168064) returned 1 [0172.218] CloseHandle (hObject=0x2c4) returned 1 [0172.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll")) returned 0x20 [0172.219] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll")) returned 0x20 [0172.219] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.219] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0172.219] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0172.219] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0172.219] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d0 [0172.221] ReadFile (in: hFile=0x2c4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x29080, lpOverlapped=0x0) returned 1 [0172.227] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x29090, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x29090, lpOverlapped=0x0) returned 1 [0172.231] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0172.231] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0172.231] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0172.231] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x29080, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x29080, lpOverlapped=0x0) returned 1 [0172.233] FlushFileBuffers (hFile=0x2c4) returned 1 [0172.708] FlushFileBuffers (hFile=0x2d0) returned 1 [0172.714] CloseHandle (hObject=0x2c4) returned 1 [0172.715] CloseHandle (hObject=0x2d0) returned 1 [0172.715] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll")) returned 1 [0172.717] SetEvent (hEvent=0x27c) returned 1 [0172.717] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdatl3.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdatl3.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0172.717] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=117248) returned 1 [0172.717] CloseHandle (hObject=0x2d0) returned 1 [0172.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdatl3.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdatl3.dll")) returned 0x20 [0172.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdatl3.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdatl3.dll")) returned 0x20 [0172.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdatl3.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ole db\\msdatl3.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.718] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdatl3.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdatl3.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.718] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msxactps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msxactps.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0172.718] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=16384) returned 1 [0172.718] CloseHandle (hObject=0x2d0) returned 1 [0172.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msxactps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msxactps.dll")) returned 0x20 [0172.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msxactps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msxactps.dll")) returned 0x20 [0172.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msxactps.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ole db\\msxactps.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.719] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msxactps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msxactps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.719] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0172.719] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=942080) returned 1 [0172.719] CloseHandle (hObject=0x2d0) returned 1 [0172.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32.dll")) returned 0x20 [0172.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32.dll")) returned 0x20 [0172.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.719] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.720] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32r.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32r.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0172.720] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=77824) returned 1 [0172.720] CloseHandle (hObject=0x2d0) returned 1 [0172.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32r.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32r.dll")) returned 0x20 [0172.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32r.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32r.dll")) returned 0x20 [0172.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32r.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32r.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.720] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32r.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32r.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.720] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbjvs.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0172.721] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=9804) returned 1 [0172.721] CloseHandle (hObject=0x2d0) returned 1 [0172.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbjvs.inc")) returned 0x20 [0172.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbjvs.inc")) returned 0x20 [0172.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbjvs.inc.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbjvs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbvbs.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0172.721] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=9975) returned 1 [0172.721] CloseHandle (hObject=0x2d0) returned 1 [0172.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbvbs.inc")) returned 0x20 [0172.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbvbs.inc")) returned 0x20 [0172.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbvbs.inc.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.722] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbvbs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.722] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0172.722] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=868352) returned 1 [0172.722] CloseHandle (hObject=0x2d0) returned 1 [0172.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.dll")) returned 0x20 [0172.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.dll")) returned 0x20 [0172.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.722] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.723] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.rll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0172.724] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=4608) returned 1 [0172.724] CloseHandle (hObject=0x2d0) returned 1 [0172.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.rll")) returned 0x20 [0172.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.rll")) returned 0x20 [0172.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.rll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.rll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.724] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.724] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0172.724] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=326144) returned 1 [0172.724] CloseHandle (hObject=0x2d0) returned 1 [0172.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.dll")) returned 0x20 [0172.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.dll")) returned 0x20 [0172.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.rll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0172.725] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2560) returned 1 [0172.725] CloseHandle (hObject=0x2d0) returned 1 [0172.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.rll")) returned 0x20 [0172.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.rll")) returned 0x20 [0172.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.rll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.rll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.726] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32.dll" (normalized: "c:\\program files\\common files\\system\\wab32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0172.726] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=854528) returned 1 [0172.726] CloseHandle (hObject=0x2d0) returned 1 [0172.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32.dll" (normalized: "c:\\program files\\common files\\system\\wab32.dll")) returned 0x20 [0172.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32.dll" (normalized: "c:\\program files\\common files\\system\\wab32.dll")) returned 0x20 [0172.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\wab32.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.726] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32.dll" (normalized: "c:\\program files\\common files\\system\\wab32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.727] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32res.dll" (normalized: "c:\\program files\\common files\\system\\wab32res.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0172.727] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=964096) returned 1 [0172.727] CloseHandle (hObject=0x2d0) returned 1 [0172.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32res.dll" (normalized: "c:\\program files\\common files\\system\\wab32res.dll")) returned 0x20 [0172.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32res.dll" (normalized: "c:\\program files\\common files\\system\\wab32res.dll")) returned 0x20 [0172.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32res.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\common files\\system\\wab32res.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.727] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32res.dll" (normalized: "c:\\program files\\common files\\system\\wab32res.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.727] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0172.727] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=174) returned 1 [0172.727] CloseHandle (hObject=0x2d0) returned 1 [0172.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini")) returned 0x26 [0172.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini")) returned 0x26 [0172.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\desktop.ini.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\desktop.ini.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0172.728] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0172.728] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0172.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\desktop.ini.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\desktop.ini.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x26, hTemplateFile=0x0) returned 0x2c4 [0172.729] ReadFile (in: hFile=0x2d0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xae, lpOverlapped=0x0) returned 1 [0172.729] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xb0, lpOverlapped=0x0) returned 1 [0172.730] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0172.730] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0172.730] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0172.730] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xae, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xae, lpOverlapped=0x0) returned 1 [0172.731] FlushFileBuffers (hFile=0x2d0) returned 1 [0172.745] FlushFileBuffers (hFile=0x2c4) returned 1 [0172.752] CloseHandle (hObject=0x2d0) returned 1 [0172.752] CloseHandle (hObject=0x2c4) returned 1 [0172.752] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini")) returned 1 [0172.753] SetEvent (hEvent=0x27c) returned 1 [0172.753] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\hmmapi.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0172.754] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2560) returned 1 [0172.754] CloseHandle (hObject=0x2c4) returned 1 [0172.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\hmmapi.dll.mui")) returned 0x20 [0172.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\hmmapi.dll.mui")) returned 0x20 [0172.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\internet explorer\\en-us\\hmmapi.dll.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.754] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\hmmapi.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.755] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\ieinstal.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\ieinstal.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0172.755] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2560) returned 1 [0172.755] CloseHandle (hObject=0x2c4) returned 1 [0172.755] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\ieinstal.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\ieinstal.exe.mui")) returned 0x20 [0172.755] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\ieinstal.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\ieinstal.exe.mui")) returned 0x20 [0172.755] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\ieinstal.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\internet explorer\\en-us\\ieinstal.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.755] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\ieinstal.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\ieinstal.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.755] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\iexplore.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\iexplore.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0172.756] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=5632) returned 1 [0172.756] CloseHandle (hObject=0x2c4) returned 1 [0172.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\iexplore.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\iexplore.exe.mui")) returned 0x20 [0172.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\iexplore.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\iexplore.exe.mui")) returned 0x20 [0172.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\iexplore.exe.mui.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\internet explorer\\en-us\\iexplore.exe.mui.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.756] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\iexplore.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\iexplore.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.756] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ExtExport.exe" (normalized: "c:\\program files\\internet explorer\\extexport.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0172.756] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=53248) returned 1 [0172.757] CloseHandle (hObject=0x2c4) returned 1 [0172.757] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ExtExport.exe" (normalized: "c:\\program files\\internet explorer\\extexport.exe")) returned 0x20 [0172.757] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ExtExport.exe" (normalized: "c:\\program files\\internet explorer\\extexport.exe")) returned 0x20 [0172.757] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ExtExport.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\internet explorer\\extexport.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.757] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ExtExport.exe" (normalized: "c:\\program files\\internet explorer\\extexport.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.757] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\hmmapi.dll" (normalized: "c:\\program files\\internet explorer\\hmmapi.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0172.757] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=54272) returned 1 [0172.757] CloseHandle (hObject=0x2c4) returned 1 [0172.757] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\hmmapi.dll" (normalized: "c:\\program files\\internet explorer\\hmmapi.dll")) returned 0x20 [0172.757] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\hmmapi.dll" (normalized: "c:\\program files\\internet explorer\\hmmapi.dll")) returned 0x20 [0172.757] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\hmmapi.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\internet explorer\\hmmapi.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.758] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\hmmapi.dll" (normalized: "c:\\program files\\internet explorer\\hmmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.758] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iediagcmd.exe" (normalized: "c:\\program files\\internet explorer\\iediagcmd.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0172.758] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=512000) returned 1 [0172.758] CloseHandle (hObject=0x2c4) returned 1 [0172.758] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iediagcmd.exe" (normalized: "c:\\program files\\internet explorer\\iediagcmd.exe")) returned 0x20 [0172.758] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iediagcmd.exe" (normalized: "c:\\program files\\internet explorer\\iediagcmd.exe")) returned 0x20 [0172.758] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iediagcmd.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\internet explorer\\iediagcmd.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.758] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iediagcmd.exe" (normalized: "c:\\program files\\internet explorer\\iediagcmd.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.759] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ieinstal.exe" (normalized: "c:\\program files\\internet explorer\\ieinstal.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0172.762] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=501760) returned 1 [0172.762] CloseHandle (hObject=0x2c4) returned 1 [0172.762] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ieinstal.exe" (normalized: "c:\\program files\\internet explorer\\ieinstal.exe")) returned 0x20 [0172.762] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ieinstal.exe" (normalized: "c:\\program files\\internet explorer\\ieinstal.exe")) returned 0x20 [0172.762] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ieinstal.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\internet explorer\\ieinstal.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.762] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ieinstal.exe" (normalized: "c:\\program files\\internet explorer\\ieinstal.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.762] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ielowutil.exe" (normalized: "c:\\program files\\internet explorer\\ielowutil.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0172.763] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=224256) returned 1 [0172.763] CloseHandle (hObject=0x2c4) returned 1 [0172.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ielowutil.exe" (normalized: "c:\\program files\\internet explorer\\ielowutil.exe")) returned 0x20 [0172.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ielowutil.exe" (normalized: "c:\\program files\\internet explorer\\ielowutil.exe")) returned 0x20 [0172.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ielowutil.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\internet explorer\\ielowutil.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.763] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ielowutil.exe" (normalized: "c:\\program files\\internet explorer\\ielowutil.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.763] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\IEShims.dll" (normalized: "c:\\program files\\internet explorer\\ieshims.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0172.763] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=407552) returned 1 [0172.763] CloseHandle (hObject=0x2c4) returned 1 [0172.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\IEShims.dll" (normalized: "c:\\program files\\internet explorer\\ieshims.dll")) returned 0x20 [0172.764] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\IEShims.dll" (normalized: "c:\\program files\\internet explorer\\ieshims.dll")) returned 0x20 [0172.764] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\IEShims.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\internet explorer\\ieshims.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.764] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\IEShims.dll" (normalized: "c:\\program files\\internet explorer\\ieshims.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.764] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files\\internet explorer\\iexplore.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0172.764] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=824128) returned 1 [0172.764] CloseHandle (hObject=0x2c4) returned 1 [0172.764] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files\\internet explorer\\iexplore.exe")) returned 0x20 [0172.764] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files\\internet explorer\\iexplore.exe")) returned 0x20 [0172.764] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iexplore.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\internet explorer\\iexplore.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.764] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files\\internet explorer\\iexplore.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.765] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\images\\bing.ico" (normalized: "c:\\program files\\internet explorer\\images\\bing.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0172.765] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=5430) returned 1 [0172.765] CloseHandle (hObject=0x2c4) returned 1 [0172.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\images\\bing.ico" (normalized: "c:\\program files\\internet explorer\\images\\bing.ico")) returned 0x20 [0172.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\images\\bing.ico" (normalized: "c:\\program files\\internet explorer\\images\\bing.ico")) returned 0x20 [0172.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\images\\bing.ico.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\internet explorer\\images\\bing.ico.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.765] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\images\\bing.ico" (normalized: "c:\\program files\\internet explorer\\images\\bing.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.765] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0172.766] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=452) returned 1 [0172.766] CloseHandle (hObject=0x2c4) returned 1 [0172.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins")) returned 0x20 [0172.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins")) returned 0x20 [0172.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.767] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0172.767] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0172.767] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0172.767] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d0 [0172.767] ReadFile (in: hFile=0x2c4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1c4, lpOverlapped=0x0) returned 1 [0172.770] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1d0, lpOverlapped=0x0) returned 1 [0172.771] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0172.776] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0172.776] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0172.776] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1c4, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1c4, lpOverlapped=0x0) returned 1 [0172.776] FlushFileBuffers (hFile=0x2c4) returned 1 [0172.781] FlushFileBuffers (hFile=0x2d0) returned 1 [0172.783] CloseHandle (hObject=0x2c4) returned 1 [0172.783] CloseHandle (hObject=0x2d0) returned 1 [0172.783] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins")) returned 1 [0172.784] SetEvent (hEvent=0x27c) returned 1 [0172.784] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\sqmapi.dll" (normalized: "c:\\program files\\internet explorer\\sqmapi.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0172.785] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=49688) returned 1 [0172.785] CloseHandle (hObject=0x2d0) returned 1 [0172.785] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\sqmapi.dll" (normalized: "c:\\program files\\internet explorer\\sqmapi.dll")) returned 0x20 [0172.785] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\sqmapi.dll" (normalized: "c:\\program files\\internet explorer\\sqmapi.dll")) returned 0x20 [0172.785] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\sqmapi.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\internet explorer\\sqmapi.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.785] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\sqmapi.dll" (normalized: "c:\\program files\\internet explorer\\sqmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0172.785] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\treaty.exe" (normalized: "c:\\program files\\internet explorer\\treaty.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0172.786] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=75776) returned 1 [0172.786] CloseHandle (hObject=0x2d0) returned 1 [0172.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\treaty.exe" (normalized: "c:\\program files\\internet explorer\\treaty.exe")) returned 0x20 [0172.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\treaty.exe" (normalized: "c:\\program files\\internet explorer\\treaty.exe")) returned 0x20 [0172.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\treaty.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\internet explorer\\treaty.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.786] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\treaty.exe" (normalized: "c:\\program files\\internet explorer\\treaty.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0172.786] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0172.786] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0172.786] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\treaty.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\internet explorer\\treaty.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c4 [0172.787] ReadFile (in: hFile=0x2d0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x12800, lpOverlapped=0x0) returned 1 [0172.791] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x12810, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x12810, lpOverlapped=0x0) returned 1 [0172.792] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0172.793] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0172.793] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0172.793] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x12800, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x12800, lpOverlapped=0x0) returned 1 [0172.793] FlushFileBuffers (hFile=0x2d0) returned 1 [0172.803] FlushFileBuffers (hFile=0x2c4) returned 1 [0172.805] CloseHandle (hObject=0x2d0) returned 1 [0172.805] CloseHandle (hObject=0x2c4) returned 1 [0172.805] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\treaty.exe" (normalized: "c:\\program files\\internet explorer\\treaty.exe")) returned 1 [0172.806] SetEvent (hEvent=0x27c) returned 1 [0172.807] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\awt.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0172.809] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1516608) returned 1 [0172.809] CloseHandle (hObject=0x2c4) returned 1 [0172.809] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\awt.dll")) returned 0x20 [0172.809] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\awt.dll")) returned 0x20 [0172.810] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\awt.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0172.810] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\awt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0172.810] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0172.810] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0172.810] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\awt.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d0 [0172.810] ReadFile (in: hFile=0x2c4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x110100, lpOverlapped=0x0) returned 1 [0172.846] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x110100, lpOverlapped=0x0) returned 1 [0173.231] ReadFile (in: hFile=0x2c4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x62340, lpOverlapped=0x0) returned 1 [0173.236] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x62350, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x62350, lpOverlapped=0x0) returned 1 [0173.244] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xe2, lpOverlapped=0x0) returned 1 [0173.244] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0173.244] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0173.244] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x110102, lpOverlapped=0x0) returned 1 [0173.250] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x6233e, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x6233e, lpOverlapped=0x0) returned 1 [0173.251] FlushFileBuffers (hFile=0x2c4) returned 1 [0173.846] FlushFileBuffers (hFile=0x2d0) returned 1 [0174.086] CloseHandle (hObject=0x2c4) returned 1 [0174.087] CloseHandle (hObject=0x2d0) returned 1 [0174.087] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\awt.dll")) returned 1 [0174.101] SetEvent (hEvent=0x27c) returned 1 [0174.102] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0174.102] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1026112) returned 1 [0174.102] CloseHandle (hObject=0x2d0) returned 1 [0174.102] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll")) returned 0x20 [0174.102] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll")) returned 0x20 [0174.102] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0174.102] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0174.103] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0174.103] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0174.103] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c4 [0174.105] ReadFile (in: hFile=0x2d0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xfa840, lpOverlapped=0x0) returned 1 [0174.359] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xfa850, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xfa850, lpOverlapped=0x0) returned 1 [0174.379] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0174.379] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0174.380] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0174.380] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xfa840, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xfa840, lpOverlapped=0x0) returned 1 [0174.383] FlushFileBuffers (hFile=0x2d0) returned 1 [0174.676] FlushFileBuffers (hFile=0x2c4) returned 1 [0174.678] CloseHandle (hObject=0x2d0) returned 1 [0174.678] CloseHandle (hObject=0x2c4) returned 1 [0174.678] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll")) returned 1 [0174.688] SetEvent (hEvent=0x27c) returned 1 [0174.688] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_shmem.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0174.688] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=29760) returned 1 [0174.689] CloseHandle (hObject=0x2c4) returned 1 [0174.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_shmem.dll")) returned 0x20 [0174.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_shmem.dll")) returned 0x20 [0174.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_shmem.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0174.689] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_shmem.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0174.689] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0174.690] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0174.690] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_shmem.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d0 [0174.690] ReadFile (in: hFile=0x2c4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x7440, lpOverlapped=0x0) returned 1 [0174.694] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7450, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x7450, lpOverlapped=0x0) returned 1 [0174.696] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0174.696] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0174.696] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0174.696] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7440, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x7440, lpOverlapped=0x0) returned 1 [0174.697] FlushFileBuffers (hFile=0x2c4) returned 1 [0174.872] FlushFileBuffers (hFile=0x2d0) returned 1 [0174.875] CloseHandle (hObject=0x2c4) returned 1 [0174.875] CloseHandle (hObject=0x2d0) returned 1 [0174.876] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_shmem.dll")) returned 1 [0174.877] SetEvent (hEvent=0x27c) returned 1 [0174.877] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_socket.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0174.877] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=24640) returned 1 [0174.877] CloseHandle (hObject=0x2d0) returned 1 [0174.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_socket.dll")) returned 0x20 [0174.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_socket.dll")) returned 0x20 [0174.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_socket.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0174.878] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_socket.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0174.878] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0174.878] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0174.878] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_socket.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c4 [0174.879] ReadFile (in: hFile=0x2d0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x6040, lpOverlapped=0x0) returned 1 [0174.882] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x6050, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x6050, lpOverlapped=0x0) returned 1 [0174.883] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0174.883] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0174.884] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0174.884] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x6040, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x6040, lpOverlapped=0x0) returned 1 [0174.884] FlushFileBuffers (hFile=0x2d0) returned 1 [0174.908] FlushFileBuffers (hFile=0x2c4) returned 1 [0174.909] CloseHandle (hObject=0x2d0) returned 1 [0174.909] CloseHandle (hObject=0x2c4) returned 1 [0174.909] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_socket.dll")) returned 1 [0174.911] SetEvent (hEvent=0x27c) returned 1 [0174.911] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\eula.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0174.911] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=136256) returned 1 [0174.911] CloseHandle (hObject=0x2c4) returned 1 [0174.911] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\eula.dll")) returned 0x20 [0174.911] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\eula.dll")) returned 0x20 [0174.911] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\eula.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0174.911] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\eula.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0174.911] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0174.911] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0174.912] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\eula.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d0 [0174.912] ReadFile (in: hFile=0x2c4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x21440, lpOverlapped=0x0) returned 1 [0174.917] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x21450, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x21450, lpOverlapped=0x0) returned 1 [0174.920] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0174.920] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0174.920] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0174.920] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x21440, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x21440, lpOverlapped=0x0) returned 1 [0174.921] FlushFileBuffers (hFile=0x2c4) returned 1 [0175.043] FlushFileBuffers (hFile=0x2d0) returned 1 [0175.083] CloseHandle (hObject=0x2c4) returned 1 [0175.083] CloseHandle (hObject=0x2d0) returned 1 [0175.084] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\eula.dll")) returned 1 [0175.086] SetEvent (hEvent=0x27c) returned 1 [0175.086] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fxplugins.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0175.086] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=186944) returned 1 [0175.086] CloseHandle (hObject=0x2d0) returned 1 [0175.086] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fxplugins.dll")) returned 0x20 [0175.086] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fxplugins.dll")) returned 0x20 [0175.086] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fxplugins.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0175.086] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fxplugins.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0175.086] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0175.087] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0175.087] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fxplugins.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c4 [0175.088] ReadFile (in: hFile=0x2d0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2da40, lpOverlapped=0x0) returned 1 [0175.094] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2da50, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2da50, lpOverlapped=0x0) returned 1 [0175.099] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0175.099] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0175.099] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0175.099] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2da40, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2da40, lpOverlapped=0x0) returned 1 [0175.100] FlushFileBuffers (hFile=0x2d0) returned 1 [0175.316] FlushFileBuffers (hFile=0x2c4) returned 1 [0175.318] CloseHandle (hObject=0x2d0) returned 1 [0175.318] CloseHandle (hObject=0x2c4) returned 1 [0175.318] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fxplugins.dll")) returned 1 [0175.321] SetEvent (hEvent=0x27c) returned 1 [0175.321] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glib-lite.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0175.321] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=455744) returned 1 [0175.321] CloseHandle (hObject=0x2c4) returned 1 [0175.322] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glib-lite.dll")) returned 0x20 [0175.322] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glib-lite.dll")) returned 0x20 [0175.322] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glib-lite.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0175.322] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glib-lite.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0175.322] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0175.322] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0175.322] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glib-lite.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d0 [0175.323] ReadFile (in: hFile=0x2c4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x6f440, lpOverlapped=0x0) returned 1 [0175.344] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x6f450, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x6f450, lpOverlapped=0x0) returned 1 [0175.357] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0175.358] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0175.358] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0175.358] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x6f440, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x6f440, lpOverlapped=0x0) returned 1 [0175.360] FlushFileBuffers (hFile=0x2c4) returned 1 [0175.772] FlushFileBuffers (hFile=0x2d0) returned 1 [0175.776] CloseHandle (hObject=0x2c4) returned 1 [0175.776] CloseHandle (hObject=0x2d0) returned 1 [0175.777] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glib-lite.dll")) returned 1 [0175.781] SetEvent (hEvent=0x27c) returned 1 [0175.781] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\hprof.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\hprof.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0175.781] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=158272) returned 1 [0175.781] CloseHandle (hObject=0x2d0) returned 1 [0175.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\hprof.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\hprof.dll")) returned 0x20 [0175.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\hprof.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\hprof.dll")) returned 0x20 [0175.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\hprof.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\hprof.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0175.782] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\hprof.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\hprof.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0175.782] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0175.782] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0175.782] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\hprof.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\hprof.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c4 [0175.783] ReadFile (in: hFile=0x2d0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x26a40, lpOverlapped=0x0) returned 1 [0175.792] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x26a50, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x26a50, lpOverlapped=0x0) returned 1 [0175.796] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0175.796] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0175.796] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0175.796] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x26a40, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x26a40, lpOverlapped=0x0) returned 1 [0175.797] FlushFileBuffers (hFile=0x2d0) returned 1 [0175.883] FlushFileBuffers (hFile=0x2c4) returned 1 [0175.884] CloseHandle (hObject=0x2d0) returned 1 [0175.884] CloseHandle (hObject=0x2c4) returned 1 [0175.884] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\hprof.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\hprof.dll")) returned 1 [0175.886] SetEvent (hEvent=0x27c) returned 1 [0175.887] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pcsc.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0175.887] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=19008) returned 1 [0175.887] CloseHandle (hObject=0x2c4) returned 1 [0175.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pcsc.dll")) returned 0x20 [0175.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pcsc.dll")) returned 0x20 [0175.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pcsc.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0175.887] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pcsc.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0175.887] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0175.887] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0175.888] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pcsc.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d0 [0175.888] ReadFile (in: hFile=0x2c4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4a40, lpOverlapped=0x0) returned 1 [0175.890] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4a50, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4a50, lpOverlapped=0x0) returned 1 [0175.893] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0175.893] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0175.893] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0175.893] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4a40, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4a40, lpOverlapped=0x0) returned 1 [0175.893] FlushFileBuffers (hFile=0x2c4) returned 1 [0176.046] FlushFileBuffers (hFile=0x2d0) returned 1 [0176.047] CloseHandle (hObject=0x2c4) returned 1 [0176.048] CloseHandle (hObject=0x2d0) returned 1 [0176.048] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pcsc.dll")) returned 1 [0176.049] SetEvent (hEvent=0x27c) returned 1 [0176.049] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jaas_nt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jaas_nt.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0176.049] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=21056) returned 1 [0176.050] CloseHandle (hObject=0x2d0) returned 1 [0176.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jaas_nt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jaas_nt.dll")) returned 0x20 [0176.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jaas_nt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jaas_nt.dll")) returned 0x20 [0176.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jaas_nt.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jaas_nt.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0176.050] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jaas_nt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jaas_nt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0176.050] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0176.050] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0176.050] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jaas_nt.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jaas_nt.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c4 [0176.050] ReadFile (in: hFile=0x2d0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x5240, lpOverlapped=0x0) returned 1 [0176.053] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5250, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x5250, lpOverlapped=0x0) returned 1 [0176.054] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0176.055] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0176.055] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0176.055] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5240, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x5240, lpOverlapped=0x0) returned 1 [0176.055] FlushFileBuffers (hFile=0x2d0) returned 1 [0176.101] FlushFileBuffers (hFile=0x2c4) returned 1 [0176.102] CloseHandle (hObject=0x2d0) returned 1 [0176.103] CloseHandle (hObject=0x2c4) returned 1 [0176.103] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jaas_nt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jaas_nt.dll")) returned 1 [0176.104] SetEvent (hEvent=0x27c) returned 1 [0176.104] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jabswitch.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0176.105] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=34368) returned 1 [0176.105] CloseHandle (hObject=0x2c4) returned 1 [0176.105] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jabswitch.exe")) returned 0x20 [0176.105] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jabswitch.exe")) returned 0x20 [0176.105] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jabswitch.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0176.105] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jabswitch.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0176.105] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0176.105] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0176.105] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jabswitch.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d0 [0176.106] ReadFile (in: hFile=0x2c4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x8640, lpOverlapped=0x0) returned 1 [0176.108] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x8650, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x8650, lpOverlapped=0x0) returned 1 [0176.109] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0176.110] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0176.110] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0176.110] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x8640, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x8640, lpOverlapped=0x0) returned 1 [0176.110] FlushFileBuffers (hFile=0x2c4) returned 1 [0176.186] FlushFileBuffers (hFile=0x2d0) returned 1 [0176.188] CloseHandle (hObject=0x2c4) returned 1 [0176.188] CloseHandle (hObject=0x2d0) returned 1 [0176.188] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jabswitch.exe")) returned 1 [0176.189] SetEvent (hEvent=0x27c) returned 1 [0176.190] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0176.190] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=159808) returned 1 [0176.190] CloseHandle (hObject=0x2d0) returned 1 [0176.190] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.dll")) returned 0x20 [0176.190] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.dll")) returned 0x20 [0176.190] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0176.190] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0176.190] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0176.190] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0176.190] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c4 [0176.191] ReadFile (in: hFile=0x2d0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x27040, lpOverlapped=0x0) returned 1 [0176.198] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x27050, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x27050, lpOverlapped=0x0) returned 1 [0176.201] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0176.201] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0176.201] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0176.201] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x27040, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x27040, lpOverlapped=0x0) returned 1 [0176.202] FlushFileBuffers (hFile=0x2d0) returned 1 [0176.318] FlushFileBuffers (hFile=0x2c4) returned 1 [0176.321] CloseHandle (hObject=0x2d0) returned 1 [0176.321] CloseHandle (hObject=0x2c4) returned 1 [0176.321] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.dll")) returned 1 [0176.324] SetEvent (hEvent=0x27c) returned 1 [0176.324] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JavaAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaaccessbridge-64.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0176.324] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=142400) returned 1 [0176.324] CloseHandle (hObject=0x2c4) returned 1 [0176.324] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JavaAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaaccessbridge-64.dll")) returned 0x20 [0176.324] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JavaAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaaccessbridge-64.dll")) returned 0x20 [0176.324] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JavaAccessBridge-64.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaaccessbridge-64.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0176.324] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JavaAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaaccessbridge-64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0176.325] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0176.325] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0176.325] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JavaAccessBridge-64.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaaccessbridge-64.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d0 [0176.325] ReadFile (in: hFile=0x2c4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x22c40, lpOverlapped=0x0) returned 1 [0176.332] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x22c50, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x22c50, lpOverlapped=0x0) returned 1 [0176.335] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x102, lpOverlapped=0x0) returned 1 [0176.336] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0176.336] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0176.336] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x22c40, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x22c40, lpOverlapped=0x0) returned 1 [0176.336] FlushFileBuffers (hFile=0x2c4) returned 1 [0176.372] FlushFileBuffers (hFile=0x2d0) returned 1 [0176.378] CloseHandle (hObject=0x2c4) returned 1 [0176.378] CloseHandle (hObject=0x2d0) returned 1 [0176.378] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JavaAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaaccessbridge-64.dll")) returned 1 [0176.380] SetEvent (hEvent=0x27c) returned 1 [0176.380] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0176.380] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=80448) returned 1 [0176.381] CloseHandle (hObject=0x2d0) returned 1 [0176.381] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.exe")) returned 0x20 [0176.381] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.exe")) returned 0x20 [0176.381] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0176.381] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0176.381] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0176.381] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0176.381] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c4 [0176.382] ReadFile (in: hFile=0x2d0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x13a40, lpOverlapped=0x0) returned 1 [0176.386] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x13a50, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x13a50, lpOverlapped=0x0) returned 1 [0176.388] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0176.388] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0176.388] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0176.388] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x13a40, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x13a40, lpOverlapped=0x0) returned 1 [0176.389] FlushFileBuffers (hFile=0x2d0) returned 1 [0176.589] FlushFileBuffers (hFile=0x2c4) returned 1 [0176.593] CloseHandle (hObject=0x2d0) returned 1 [0176.593] CloseHandle (hObject=0x2c4) returned 1 [0176.593] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.exe")) returned 1 [0176.596] SetEvent (hEvent=0x27c) returned 1 [0176.596] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_iio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_iio.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0176.596] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=128064) returned 1 [0176.597] CloseHandle (hObject=0x2c4) returned 1 [0176.597] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_iio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_iio.dll")) returned 0x20 [0176.597] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_iio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_iio.dll")) returned 0x20 [0176.597] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_iio.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_iio.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0176.597] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_iio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_iio.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0176.597] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0176.597] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0176.597] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_iio.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_iio.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d0 [0176.598] ReadFile (in: hFile=0x2c4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1f440, lpOverlapped=0x0) returned 1 [0176.612] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1f450, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1f450, lpOverlapped=0x0) returned 1 [0176.614] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0176.615] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0176.615] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0176.615] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1f440, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1f440, lpOverlapped=0x0) returned 1 [0176.615] FlushFileBuffers (hFile=0x2c4) returned 1 [0176.865] FlushFileBuffers (hFile=0x2d0) returned 1 [0176.867] CloseHandle (hObject=0x2c4) returned 1 [0176.867] CloseHandle (hObject=0x2d0) returned 1 [0176.867] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_iio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_iio.dll")) returned 1 [0176.869] SetEvent (hEvent=0x27c) returned 1 [0176.869] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaws.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0176.869] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=319552) returned 1 [0176.869] CloseHandle (hObject=0x2d0) returned 1 [0176.869] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaws.exe")) returned 0x20 [0176.869] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaws.exe")) returned 0x20 [0176.870] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaws.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0176.870] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaws.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0176.870] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0176.870] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0176.870] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaws.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c4 [0176.870] ReadFile (in: hFile=0x2d0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4e040, lpOverlapped=0x0) returned 1 [0176.883] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4e050, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4e050, lpOverlapped=0x0) returned 1 [0176.889] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0176.889] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0176.889] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0176.889] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4e040, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4e040, lpOverlapped=0x0) returned 1 [0176.890] FlushFileBuffers (hFile=0x2d0) returned 1 [0177.092] FlushFileBuffers (hFile=0x2c4) returned 1 [0177.408] CloseHandle (hObject=0x2d0) returned 1 [0177.408] CloseHandle (hObject=0x2c4) returned 1 [0177.408] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaws.exe")) returned 1 [0177.412] SetEvent (hEvent=0x27c) returned 1 [0177.413] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jawt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawt.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0177.413] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=14400) returned 1 [0177.413] CloseHandle (hObject=0x2c4) returned 1 [0177.413] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jawt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawt.dll")) returned 0x20 [0177.413] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jawt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawt.dll")) returned 0x20 [0177.413] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jawt.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawt.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0177.413] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jawt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0177.413] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0177.413] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0177.413] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jawt.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawt.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d0 [0177.414] ReadFile (in: hFile=0x2c4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x3840, lpOverlapped=0x0) returned 1 [0177.416] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3850, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x3850, lpOverlapped=0x0) returned 1 [0177.417] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0177.417] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0177.417] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0177.417] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3840, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x3840, lpOverlapped=0x0) returned 1 [0177.417] FlushFileBuffers (hFile=0x2c4) returned 1 [0177.419] FlushFileBuffers (hFile=0x2d0) returned 1 [0177.420] CloseHandle (hObject=0x2c4) returned 1 [0177.420] CloseHandle (hObject=0x2d0) returned 1 [0177.420] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jawt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawt.dll")) returned 1 [0177.422] SetEvent (hEvent=0x27c) returned 1 [0177.422] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JAWTAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawtaccessbridge-64.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0177.422] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=15424) returned 1 [0177.422] CloseHandle (hObject=0x2d0) returned 1 [0177.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JAWTAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawtaccessbridge-64.dll")) returned 0x20 [0177.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JAWTAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawtaccessbridge-64.dll")) returned 0x20 [0177.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JAWTAccessBridge-64.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawtaccessbridge-64.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0177.422] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JAWTAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawtaccessbridge-64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0177.423] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0177.423] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0177.423] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JAWTAccessBridge-64.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawtaccessbridge-64.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c4 [0177.423] ReadFile (in: hFile=0x2d0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x3c40, lpOverlapped=0x0) returned 1 [0177.426] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3c50, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x3c50, lpOverlapped=0x0) returned 1 [0177.427] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x102, lpOverlapped=0x0) returned 1 [0177.427] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0177.427] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0177.427] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3c40, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x3c40, lpOverlapped=0x0) returned 1 [0177.427] FlushFileBuffers (hFile=0x2d0) returned 1 [0177.553] FlushFileBuffers (hFile=0x2c4) returned 1 [0177.555] CloseHandle (hObject=0x2d0) returned 1 [0177.555] CloseHandle (hObject=0x2c4) returned 1 [0177.555] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JAWTAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawtaccessbridge-64.dll")) returned 1 [0177.556] SetEvent (hEvent=0x27c) returned 1 [0177.556] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0177.557] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=26688) returned 1 [0177.557] CloseHandle (hObject=0x2c4) returned 1 [0177.558] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfr.dll")) returned 0x20 [0177.559] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfr.dll")) returned 0x20 [0177.559] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfr.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfr.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0177.559] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0177.559] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0177.559] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0177.559] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfr.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfr.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d0 [0177.559] ReadFile (in: hFile=0x2c4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x6840, lpOverlapped=0x0) returned 1 [0177.562] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x6850, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x6850, lpOverlapped=0x0) returned 1 [0177.563] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xe2, lpOverlapped=0x0) returned 1 [0177.563] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0177.563] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0177.563] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x6840, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x6840, lpOverlapped=0x0) returned 1 [0177.564] FlushFileBuffers (hFile=0x2c4) returned 1 [0177.570] FlushFileBuffers (hFile=0x2d0) returned 1 [0177.571] CloseHandle (hObject=0x2c4) returned 1 [0177.571] CloseHandle (hObject=0x2d0) returned 1 [0177.571] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfr.dll")) returned 1 [0177.573] SetEvent (hEvent=0x27c) returned 1 [0177.573] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxmedia.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxmedia.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0177.573] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=139840) returned 1 [0177.573] CloseHandle (hObject=0x2d0) returned 1 [0177.573] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxmedia.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxmedia.dll")) returned 0x20 [0177.574] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxmedia.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxmedia.dll")) returned 0x20 [0177.574] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxmedia.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxmedia.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0177.574] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxmedia.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxmedia.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0177.574] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0177.574] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0177.574] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxmedia.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxmedia.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c4 [0177.574] ReadFile (in: hFile=0x2d0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x22240, lpOverlapped=0x0) returned 1 [0177.581] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x22250, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x22250, lpOverlapped=0x0) returned 1 [0177.584] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0177.584] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0177.584] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0177.584] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x22240, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x22240, lpOverlapped=0x0) returned 1 [0177.585] FlushFileBuffers (hFile=0x2d0) returned 1 [0177.709] FlushFileBuffers (hFile=0x2c4) returned 1 [0177.727] CloseHandle (hObject=0x2d0) returned 1 [0177.727] CloseHandle (hObject=0x2c4) returned 1 [0177.728] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxmedia.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxmedia.dll")) returned 1 [0177.730] SetEvent (hEvent=0x27c) returned 1 [0177.730] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jjs.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0177.731] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=15936) returned 1 [0177.731] CloseHandle (hObject=0x2c4) returned 1 [0177.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jjs.exe")) returned 0x20 [0177.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jjs.exe")) returned 0x20 [0177.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jjs.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0177.731] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jjs.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0177.731] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0177.732] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0177.732] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jjs.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d0 [0177.732] ReadFile (in: hFile=0x2c4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x3e40, lpOverlapped=0x0) returned 1 [0177.752] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3e50, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x3e50, lpOverlapped=0x0) returned 1 [0177.753] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xe2, lpOverlapped=0x0) returned 1 [0177.754] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0177.754] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0177.754] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3e40, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x3e40, lpOverlapped=0x0) returned 1 [0177.754] FlushFileBuffers (hFile=0x2c4) returned 1 [0177.953] FlushFileBuffers (hFile=0x2d0) returned 1 [0177.955] CloseHandle (hObject=0x2c4) returned 1 [0177.955] CloseHandle (hObject=0x2d0) returned 1 [0177.955] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jjs.exe")) returned 1 [0177.957] SetEvent (hEvent=0x27c) returned 1 [0177.957] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jli.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jli.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0177.957] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=174656) returned 1 [0177.957] CloseHandle (hObject=0x2d0) returned 1 [0177.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jli.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jli.dll")) returned 0x20 [0177.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jli.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jli.dll")) returned 0x20 [0177.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jli.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jli.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0177.958] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jli.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jli.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0177.958] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0177.958] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0177.958] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jli.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jli.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c4 [0177.958] ReadFile (in: hFile=0x2d0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2aa40, lpOverlapped=0x0) returned 1 [0177.978] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2aa50, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2aa50, lpOverlapped=0x0) returned 1 [0177.989] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xe2, lpOverlapped=0x0) returned 1 [0177.989] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0177.989] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0177.989] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2aa40, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2aa40, lpOverlapped=0x0) returned 1 [0177.990] FlushFileBuffers (hFile=0x2d0) returned 1 [0178.129] FlushFileBuffers (hFile=0x2c4) returned 1 [0178.130] CloseHandle (hObject=0x2d0) returned 1 [0178.131] CloseHandle (hObject=0x2c4) returned 1 [0178.131] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jli.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jli.dll")) returned 1 [0178.133] SetEvent (hEvent=0x27c) returned 1 [0178.133] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2iexp.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0178.133] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=296000) returned 1 [0178.133] CloseHandle (hObject=0x2c4) returned 1 [0178.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2iexp.dll")) returned 0x20 [0178.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2iexp.dll")) returned 0x20 [0178.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2iexp.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0178.134] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2iexp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0178.134] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0178.134] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0178.134] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2iexp.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d0 [0178.134] ReadFile (in: hFile=0x2c4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x48440, lpOverlapped=0x0) returned 1 [0178.147] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x48450, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x48450, lpOverlapped=0x0) returned 1 [0178.153] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0178.153] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0178.153] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0178.153] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x48440, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x48440, lpOverlapped=0x0) returned 1 [0178.154] FlushFileBuffers (hFile=0x2c4) returned 1 [0178.310] FlushFileBuffers (hFile=0x2d0) returned 1 [0178.312] CloseHandle (hObject=0x2c4) returned 1 [0178.312] CloseHandle (hObject=0x2d0) returned 1 [0178.312] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2iexp.dll")) returned 1 [0178.315] SetEvent (hEvent=0x27c) returned 1 [0178.316] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2native.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0178.316] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=20032) returned 1 [0178.316] CloseHandle (hObject=0x2d0) returned 1 [0178.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2native.dll")) returned 0x20 [0178.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2native.dll")) returned 0x20 [0178.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2native.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0178.316] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2native.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0178.316] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0178.316] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0178.316] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2native.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c4 [0178.317] ReadFile (in: hFile=0x2d0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4e40, lpOverlapped=0x0) returned 1 [0178.319] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4e50, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4e50, lpOverlapped=0x0) returned 1 [0178.320] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0178.320] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0178.321] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0178.321] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4e40, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4e40, lpOverlapped=0x0) returned 1 [0178.321] FlushFileBuffers (hFile=0x2d0) returned 1 [0178.471] FlushFileBuffers (hFile=0x2c4) returned 1 [0178.476] CloseHandle (hObject=0x2d0) returned 1 [0178.476] CloseHandle (hObject=0x2c4) returned 1 [0178.476] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2native.dll")) returned 1 [0178.478] SetEvent (hEvent=0x27c) returned 1 [0178.478] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jpeg.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jpeg.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0178.478] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=185920) returned 1 [0178.478] CloseHandle (hObject=0x2c4) returned 1 [0178.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jpeg.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jpeg.dll")) returned 0x20 [0178.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jpeg.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jpeg.dll")) returned 0x20 [0178.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jpeg.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jpeg.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0178.479] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jpeg.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jpeg.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0178.479] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0178.479] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0178.479] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jpeg.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jpeg.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d0 [0178.479] ReadFile (in: hFile=0x2c4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2d640, lpOverlapped=0x0) returned 1 [0178.486] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2d650, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2d650, lpOverlapped=0x0) returned 1 [0178.490] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0178.490] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0178.490] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0178.490] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2d640, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2d640, lpOverlapped=0x0) returned 1 [0178.491] FlushFileBuffers (hFile=0x2c4) returned 1 [0178.634] FlushFileBuffers (hFile=0x2d0) returned 1 [0178.636] CloseHandle (hObject=0x2c4) returned 1 [0178.636] CloseHandle (hObject=0x2d0) returned 1 [0178.636] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jpeg.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jpeg.dll")) returned 1 [0178.639] SetEvent (hEvent=0x27c) returned 1 [0178.639] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsoundds.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsoundds.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0178.639] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=31296) returned 1 [0178.639] CloseHandle (hObject=0x2d0) returned 1 [0178.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsoundds.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsoundds.dll")) returned 0x20 [0178.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsoundds.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsoundds.dll")) returned 0x20 [0178.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsoundds.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsoundds.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0178.639] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsoundds.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsoundds.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0178.639] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0178.640] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0178.640] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsoundds.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsoundds.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c4 [0178.640] ReadFile (in: hFile=0x2d0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x7a40, lpOverlapped=0x0) returned 1 [0178.643] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7a50, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x7a50, lpOverlapped=0x0) returned 1 [0178.644] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0178.644] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0178.644] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0178.644] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7a40, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x7a40, lpOverlapped=0x0) returned 1 [0178.645] FlushFileBuffers (hFile=0x2d0) returned 1 [0178.907] FlushFileBuffers (hFile=0x2c4) returned 1 [0178.909] CloseHandle (hObject=0x2d0) returned 1 [0178.909] CloseHandle (hObject=0x2c4) returned 1 [0178.909] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsoundds.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsoundds.dll")) returned 1 [0178.910] SetEvent (hEvent=0x27c) returned 1 [0178.911] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\keytool.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0178.911] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=16448) returned 1 [0178.911] CloseHandle (hObject=0x2c4) returned 1 [0178.911] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\keytool.exe")) returned 0x20 [0178.911] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\keytool.exe")) returned 0x20 [0178.911] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\keytool.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0178.911] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\keytool.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0178.912] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0178.912] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0178.912] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\keytool.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d0 [0178.912] ReadFile (in: hFile=0x2c4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4040, lpOverlapped=0x0) returned 1 [0178.915] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4050, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4050, lpOverlapped=0x0) returned 1 [0178.916] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0178.916] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0178.916] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0178.917] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4040, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4040, lpOverlapped=0x0) returned 1 [0178.917] FlushFileBuffers (hFile=0x2c4) returned 1 [0179.091] FlushFileBuffers (hFile=0x2d0) returned 1 [0179.092] CloseHandle (hObject=0x2c4) returned 1 [0179.092] CloseHandle (hObject=0x2d0) returned 1 [0179.092] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\keytool.exe")) returned 1 [0179.094] SetEvent (hEvent=0x27c) returned 1 [0179.094] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\klist.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0179.094] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=16448) returned 1 [0179.094] CloseHandle (hObject=0x2d0) returned 1 [0179.094] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\klist.exe")) returned 0x20 [0179.094] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\klist.exe")) returned 0x20 [0179.094] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\klist.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0179.094] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\klist.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0179.094] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0179.095] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0179.095] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\klist.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c4 [0179.095] ReadFile (in: hFile=0x2d0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4040, lpOverlapped=0x0) returned 1 [0179.097] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4050, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4050, lpOverlapped=0x0) returned 1 [0179.099] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0179.099] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0179.099] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0179.099] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4040, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4040, lpOverlapped=0x0) returned 1 [0179.099] FlushFileBuffers (hFile=0x2d0) returned 1 [0179.104] FlushFileBuffers (hFile=0x2c4) returned 1 [0179.107] CloseHandle (hObject=0x2d0) returned 1 [0179.107] CloseHandle (hObject=0x2c4) returned 1 [0179.107] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\klist.exe")) returned 1 [0179.109] SetEvent (hEvent=0x27c) returned 1 [0179.109] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ktab.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0179.109] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=16448) returned 1 [0179.109] CloseHandle (hObject=0x2c4) returned 1 [0179.109] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ktab.exe")) returned 0x20 [0179.109] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ktab.exe")) returned 0x20 [0179.109] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ktab.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0179.109] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ktab.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0179.109] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0179.109] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0179.110] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ktab.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d0 [0179.110] ReadFile (in: hFile=0x2c4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4040, lpOverlapped=0x0) returned 1 [0179.112] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4050, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4050, lpOverlapped=0x0) returned 1 [0179.113] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0179.114] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0179.114] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0179.114] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4040, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4040, lpOverlapped=0x0) returned 1 [0179.114] FlushFileBuffers (hFile=0x2c4) returned 1 [0179.116] FlushFileBuffers (hFile=0x2d0) returned 1 [0179.117] CloseHandle (hObject=0x2c4) returned 1 [0179.117] CloseHandle (hObject=0x2d0) returned 1 [0179.117] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ktab.exe")) returned 1 [0179.118] SetEvent (hEvent=0x27c) returned 1 [0179.119] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\lcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\lcms.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0179.119] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=233536) returned 1 [0179.119] CloseHandle (hObject=0x2d0) returned 1 [0179.119] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\lcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\lcms.dll")) returned 0x20 [0179.119] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\lcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\lcms.dll")) returned 0x20 [0179.119] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\lcms.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\lcms.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0179.119] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\lcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\lcms.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0179.119] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0179.119] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0179.119] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\lcms.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\lcms.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c4 [0179.120] ReadFile (in: hFile=0x2d0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x39040, lpOverlapped=0x0) returned 1 [0179.130] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x39050, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x39050, lpOverlapped=0x0) returned 1 [0179.135] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0179.135] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0179.135] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0179.135] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x39040, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x39040, lpOverlapped=0x0) returned 1 [0179.136] FlushFileBuffers (hFile=0x2d0) returned 1 [0179.221] FlushFileBuffers (hFile=0x2c4) returned 1 [0179.222] CloseHandle (hObject=0x2d0) returned 1 [0179.222] CloseHandle (hObject=0x2c4) returned 1 [0179.222] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\lcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\lcms.dll")) returned 1 [0179.225] SetEvent (hEvent=0x27c) returned 1 [0179.225] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\mlib_image.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0179.225] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=653888) returned 1 [0179.225] CloseHandle (hObject=0x2c4) returned 1 [0179.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\mlib_image.dll")) returned 0x20 [0179.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\mlib_image.dll")) returned 0x20 [0179.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\mlib_image.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0179.225] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\mlib_image.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0179.226] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0179.226] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0179.226] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\mlib_image.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d0 [0179.226] ReadFile (in: hFile=0x2c4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x9fa40, lpOverlapped=0x0) returned 1 [0179.248] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x9fa50, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x9fa50, lpOverlapped=0x0) returned 1 [0179.261] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0179.261] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0179.261] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0179.262] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x9fa40, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x9fa40, lpOverlapped=0x0) returned 1 [0179.264] FlushFileBuffers (hFile=0x2c4) returned 1 [0179.558] FlushFileBuffers (hFile=0x2d0) returned 1 [0179.561] CloseHandle (hObject=0x2c4) returned 1 [0179.562] CloseHandle (hObject=0x2d0) returned 1 [0179.562] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\mlib_image.dll")) returned 1 [0179.569] SetEvent (hEvent=0x27c) returned 1 [0179.569] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr100.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0179.570] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=829264) returned 1 [0179.570] CloseHandle (hObject=0x2d0) returned 1 [0179.570] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr100.dll")) returned 0x20 [0179.570] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr100.dll")) returned 0x20 [0179.570] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr100.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0179.570] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr100.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0179.570] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0179.570] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0179.570] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr100.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c4 [0179.571] ReadFile (in: hFile=0x2d0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xca750, lpOverlapped=0x0) returned 1 [0179.740] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xca760, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xca760, lpOverlapped=0x0) returned 1 [0179.756] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0179.756] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0179.757] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0179.757] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xca750, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xca750, lpOverlapped=0x0) returned 1 [0179.759] FlushFileBuffers (hFile=0x2d0) returned 1 [0180.014] FlushFileBuffers (hFile=0x2c4) returned 1 [0180.016] CloseHandle (hObject=0x2d0) returned 1 [0180.016] CloseHandle (hObject=0x2c4) returned 1 [0180.017] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr100.dll")) returned 1 [0180.025] SetEvent (hEvent=0x27c) returned 1 [0180.025] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\net.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\net.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0180.036] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=96832) returned 1 [0180.036] CloseHandle (hObject=0x2c4) returned 1 [0180.036] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\net.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\net.dll")) returned 0x20 [0180.036] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\net.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\net.dll")) returned 0x20 [0180.036] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\net.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\net.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0180.036] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\net.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\net.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4 [0180.036] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0180.036] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0180.036] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\net.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\net.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d0 [0180.037] ReadFile (in: hFile=0x2c4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x17a40, lpOverlapped=0x0) returned 1 [0180.041] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x17a50, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x17a50, lpOverlapped=0x0) returned 1 [0180.043] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xe2, lpOverlapped=0x0) returned 1 [0180.043] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0180.043] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0180.043] WriteFile (in: hFile=0x2c4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x17a40, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x17a40, lpOverlapped=0x0) returned 1 [0180.044] FlushFileBuffers (hFile=0x2c4) returned 1 [0180.124] FlushFileBuffers (hFile=0x2d0) returned 1 [0180.126] CloseHandle (hObject=0x2c4) returned 1 [0180.126] CloseHandle (hObject=0x2d0) returned 1 [0180.126] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\net.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\net.dll")) returned 1 [0180.128] SetEvent (hEvent=0x27c) returned 1 [0180.129] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\npt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\npt.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0 [0180.129] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=19008) returned 1 [0180.129] CloseHandle (hObject=0x2d0) returned 1 [0180.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\npt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\npt.dll")) returned 0x20 [0180.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\npt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\npt.dll")) returned 0x20 [0180.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\npt.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\npt.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0180.140] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\npt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\npt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0180.141] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0180.141] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0180.141] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\npt.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\npt.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e0 [0180.142] ReadFile (in: hFile=0x2cc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4a40, lpOverlapped=0x0) returned 1 [0180.150] WriteFile (in: hFile=0x2e0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4a50, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4a50, lpOverlapped=0x0) returned 1 [0180.152] WriteFile (in: hFile=0x2e0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xe2, lpOverlapped=0x0) returned 1 [0180.153] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0180.153] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0180.153] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4a40, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4a40, lpOverlapped=0x0) returned 1 [0180.153] FlushFileBuffers (hFile=0x2cc) returned 1 [0180.158] FlushFileBuffers (hFile=0x2e0) returned 1 [0180.168] CloseHandle (hObject=0x2cc) returned 1 [0180.169] CloseHandle (hObject=0x2e0) returned 1 [0180.169] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\npt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\npt.dll")) returned 1 [0180.170] SetEvent (hEvent=0x27c) returned 1 [0180.170] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\pack200.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0180.171] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=16448) returned 1 [0180.171] CloseHandle (hObject=0x2e0) returned 1 [0180.171] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\pack200.exe")) returned 0x20 [0180.171] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\pack200.exe")) returned 0x20 [0180.171] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\pack200.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0180.171] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\pack200.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0180.171] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0180.171] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0180.171] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\pack200.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2cc [0180.172] ReadFile (in: hFile=0x2e0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4040, lpOverlapped=0x0) returned 1 [0180.174] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4050, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4050, lpOverlapped=0x0) returned 1 [0180.175] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0180.176] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0180.176] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0180.176] WriteFile (in: hFile=0x2e0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4040, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4040, lpOverlapped=0x0) returned 1 [0180.176] FlushFileBuffers (hFile=0x2e0) returned 1 [0180.392] FlushFileBuffers (hFile=0x2cc) returned 1 [0180.394] CloseHandle (hObject=0x2e0) returned 1 [0180.394] CloseHandle (hObject=0x2cc) returned 1 [0180.394] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\pack200.exe")) returned 1 [0180.395] SetEvent (hEvent=0x27c) returned 1 [0180.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0180.396] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=234560) returned 1 [0180.396] CloseHandle (hObject=0x2cc) returned 1 [0180.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll")) returned 0x20 [0180.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll")) returned 0x20 [0180.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0180.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0180.396] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0180.396] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0180.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e0 [0180.398] ReadFile (in: hFile=0x2cc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x39440, lpOverlapped=0x0) returned 1 [0180.411] WriteFile (in: hFile=0x2e0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x39450, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x39450, lpOverlapped=0x0) returned 1 [0180.417] WriteFile (in: hFile=0x2e0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0180.417] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0180.417] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0180.417] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x39440, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x39440, lpOverlapped=0x0) returned 1 [0180.418] FlushFileBuffers (hFile=0x2cc) returned 1 [0180.470] FlushFileBuffers (hFile=0x2e0) returned 1 [0180.472] CloseHandle (hObject=0x2cc) returned 1 [0180.472] CloseHandle (hObject=0x2e0) returned 1 [0180.472] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll")) returned 1 [0180.475] SetEvent (hEvent=0x27c) returned 1 [0180.475] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_common.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_common.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0180.475] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=57408) returned 1 [0180.475] CloseHandle (hObject=0x2e0) returned 1 [0180.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_common.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_common.dll")) returned 0x20 [0180.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_common.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_common.dll")) returned 0x20 [0180.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_common.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_common.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0180.475] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_common.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_common.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0180.475] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0180.476] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0180.476] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_common.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_common.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2cc [0180.476] ReadFile (in: hFile=0x2e0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xe040, lpOverlapped=0x0) returned 1 [0180.481] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xe050, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xe050, lpOverlapped=0x0) returned 1 [0180.483] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x102, lpOverlapped=0x0) returned 1 [0180.483] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0180.483] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0180.483] WriteFile (in: hFile=0x2e0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xe040, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xe040, lpOverlapped=0x0) returned 1 [0180.483] FlushFileBuffers (hFile=0x2e0) returned 1 [0180.575] FlushFileBuffers (hFile=0x2cc) returned 1 [0180.577] CloseHandle (hObject=0x2e0) returned 1 [0180.577] CloseHandle (hObject=0x2cc) returned 1 [0180.578] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_common.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_common.dll")) returned 1 [0180.579] SetEvent (hEvent=0x27c) returned 1 [0180.579] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_sw.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_sw.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0180.580] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=97856) returned 1 [0180.580] CloseHandle (hObject=0x2cc) returned 1 [0180.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_sw.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_sw.dll")) returned 0x20 [0180.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_sw.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_sw.dll")) returned 0x20 [0180.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_sw.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_sw.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0180.580] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_sw.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_sw.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0180.580] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0180.580] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0180.580] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_sw.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_sw.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e0 [0180.581] ReadFile (in: hFile=0x2cc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x17e40, lpOverlapped=0x0) returned 1 [0180.586] WriteFile (in: hFile=0x2e0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x17e50, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x17e50, lpOverlapped=0x0) returned 1 [0180.588] WriteFile (in: hFile=0x2e0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0180.589] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0180.589] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0180.589] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x17e40, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x17e40, lpOverlapped=0x0) returned 1 [0180.589] FlushFileBuffers (hFile=0x2cc) returned 1 [0180.676] FlushFileBuffers (hFile=0x2e0) returned 1 [0180.678] CloseHandle (hObject=0x2cc) returned 1 [0180.678] CloseHandle (hObject=0x2e0) returned 1 [0180.678] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_sw.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_sw.dll")) returned 1 [0180.680] SetEvent (hEvent=0x27c) returned 1 [0180.680] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmiregistry.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0180.681] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=16448) returned 1 [0180.681] CloseHandle (hObject=0x2e0) returned 1 [0180.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmiregistry.exe")) returned 0x20 [0180.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmiregistry.exe")) returned 0x20 [0180.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmiregistry.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0180.681] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmiregistry.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0180.681] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0180.681] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0180.682] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmiregistry.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2cc [0180.682] ReadFile (in: hFile=0x2e0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4040, lpOverlapped=0x0) returned 1 [0180.684] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4050, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4050, lpOverlapped=0x0) returned 1 [0180.699] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0180.700] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0180.700] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0180.700] WriteFile (in: hFile=0x2e0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4040, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4040, lpOverlapped=0x0) returned 1 [0180.700] FlushFileBuffers (hFile=0x2e0) returned 1 [0180.859] FlushFileBuffers (hFile=0x2cc) returned 1 [0180.860] CloseHandle (hObject=0x2e0) returned 1 [0180.860] CloseHandle (hObject=0x2cc) returned 1 [0180.860] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmiregistry.exe")) returned 1 [0180.862] SetEvent (hEvent=0x27c) returned 1 [0180.862] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\jvm.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0180.862] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=8809536) returned 1 [0180.862] CloseHandle (hObject=0x2cc) returned 1 [0180.862] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\jvm.dll")) returned 0x20 [0180.863] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\jvm.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\jvm.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 1 [0180.865] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\jvm.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0180.865] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fc20 | out: lpNewFilePointer=0x0) returned 1 [0180.865] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fc20 | out: lpNewFilePointer=0x0) returned 1 [0180.865] ReadFile (in: hFile=0x2cc, lpBuffer=0x3b3f058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x378fc2c, lpOverlapped=0x0 | out: lpBuffer=0x3b3f058*, lpNumberOfBytesRead=0x378fc2c*=0x40000, lpOverlapped=0x0) returned 1 [0180.875] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x2ccec0, lpNewFilePointer=0x0, dwMoveMethod=0x378fc20 | out: lpNewFilePointer=0x0) returned 1 [0180.875] ReadFile (in: hFile=0x2cc, lpBuffer=0x3b7f058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x378fc2c, lpOverlapped=0x0 | out: lpBuffer=0x3b7f058*, lpNumberOfBytesRead=0x378fc2c*=0x40000, lpOverlapped=0x0) returned 1 [0180.891] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x826c40, lpNewFilePointer=0x0, dwMoveMethod=0x378fc20 | out: lpNewFilePointer=0x0) returned 1 [0180.891] ReadFile (in: hFile=0x2cc, lpBuffer=0x3bbf058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x378fc2c, lpOverlapped=0x0 | out: lpBuffer=0x3bbf058*, lpNumberOfBytesRead=0x378fc2c*=0x40000, lpOverlapped=0x0) returned 1 [0181.010] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd90 | out: lpNewFilePointer=0x0) returned 1 [0181.010] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x378fd88, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd88*=0xc0102, lpOverlapped=0x0) returned 1 [0181.042] SetEndOfFile (hFile=0x2cc) returned 1 [0181.043] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x826c40, lpNewFilePointer=0x0, dwMoveMethod=0x378fc28 | out: lpNewFilePointer=0x0) returned 1 [0181.043] WriteFile (in: hFile=0x2cc, lpBuffer=0x3bff13a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x378fc34, lpOverlapped=0x0 | out: lpBuffer=0x3bff13a*, lpNumberOfBytesWritten=0x378fc34*=0x40000, lpOverlapped=0x0) returned 1 [0181.175] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x2ccec0, lpNewFilePointer=0x0, dwMoveMethod=0x378fc28 | out: lpNewFilePointer=0x0) returned 1 [0181.175] WriteFile (in: hFile=0x2cc, lpBuffer=0x3bff13a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x378fc34, lpOverlapped=0x0 | out: lpBuffer=0x3bff13a*, lpNumberOfBytesWritten=0x378fc34*=0x40000, lpOverlapped=0x0) returned 1 [0181.206] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fc28 | out: lpNewFilePointer=0x0) returned 1 [0181.206] WriteFile (in: hFile=0x2cc, lpBuffer=0x3bff13a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x378fc34, lpOverlapped=0x0 | out: lpBuffer=0x3bff13a*, lpNumberOfBytesWritten=0x378fc34*=0x40000, lpOverlapped=0x0) returned 1 [0181.208] FlushFileBuffers (hFile=0x2cc) returned 1 [0181.909] CloseHandle (hObject=0x2cc) returned 1 [0181.909] SetEvent (hEvent=0x27c) returned 1 [0181.909] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunmscapi.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunmscapi.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0181.910] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=31808) returned 1 [0181.910] CloseHandle (hObject=0x2cc) returned 1 [0181.910] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunmscapi.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunmscapi.dll")) returned 0x20 [0181.910] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunmscapi.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunmscapi.dll")) returned 0x20 [0181.910] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunmscapi.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunmscapi.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0181.910] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunmscapi.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunmscapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0181.911] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0181.911] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0181.911] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunmscapi.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunmscapi.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d4 [0181.911] ReadFile (in: hFile=0x2cc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x7c40, lpOverlapped=0x0) returned 1 [0181.918] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7c50, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x7c50, lpOverlapped=0x0) returned 1 [0181.920] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0181.921] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0181.921] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0181.921] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7c40, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x7c40, lpOverlapped=0x0) returned 1 [0181.921] FlushFileBuffers (hFile=0x2cc) returned 1 [0182.376] FlushFileBuffers (hFile=0x2d4) returned 1 [0182.652] CloseHandle (hObject=0x2cc) returned 1 [0182.652] CloseHandle (hObject=0x2d4) returned 1 [0182.652] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunmscapi.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunmscapi.dll")) returned 1 [0182.655] SetEvent (hEvent=0x27c) returned 1 [0182.655] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\tnameserv.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0182.655] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=16448) returned 1 [0182.655] CloseHandle (hObject=0x2d4) returned 1 [0182.655] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\tnameserv.exe")) returned 0x20 [0182.655] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\tnameserv.exe")) returned 0x20 [0182.655] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\tnameserv.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0182.656] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\tnameserv.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0182.656] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0182.656] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0182.656] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\tnameserv.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2cc [0182.656] ReadFile (in: hFile=0x2d4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4040, lpOverlapped=0x0) returned 1 [0182.659] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4050, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4050, lpOverlapped=0x0) returned 1 [0182.660] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0182.660] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0182.660] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0182.660] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4040, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4040, lpOverlapped=0x0) returned 1 [0182.660] FlushFileBuffers (hFile=0x2d4) returned 1 [0182.662] FlushFileBuffers (hFile=0x2cc) returned 1 [0182.664] CloseHandle (hObject=0x2d4) returned 1 [0182.664] CloseHandle (hObject=0x2cc) returned 1 [0182.664] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\tnameserv.exe")) returned 1 [0182.665] SetEvent (hEvent=0x27c) returned 1 [0182.665] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0182.665] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=79936) returned 1 [0182.666] CloseHandle (hObject=0x2cc) returned 1 [0182.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack.dll")) returned 0x20 [0182.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack.dll")) returned 0x20 [0182.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0182.666] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0182.666] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0182.666] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0182.666] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d4 [0182.666] ReadFile (in: hFile=0x2cc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x13840, lpOverlapped=0x0) returned 1 [0182.679] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x13850, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x13850, lpOverlapped=0x0) returned 1 [0182.681] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0182.682] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0182.682] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0182.682] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x13840, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x13840, lpOverlapped=0x0) returned 1 [0182.682] FlushFileBuffers (hFile=0x2cc) returned 1 [0182.874] FlushFileBuffers (hFile=0x2d4) returned 1 [0182.876] CloseHandle (hObject=0x2cc) returned 1 [0182.876] CloseHandle (hObject=0x2d4) returned 1 [0182.876] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack.dll")) returned 1 [0182.878] SetEvent (hEvent=0x27c) returned 1 [0182.878] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\verify.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\verify.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0182.879] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=49216) returned 1 [0182.879] CloseHandle (hObject=0x2d4) returned 1 [0182.879] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\verify.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\verify.dll")) returned 0x20 [0182.879] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\verify.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\verify.dll")) returned 0x20 [0182.879] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\verify.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\verify.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0182.879] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\verify.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\verify.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0182.880] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0182.880] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0182.880] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\verify.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\verify.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2cc [0182.880] ReadFile (in: hFile=0x2d4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xc040, lpOverlapped=0x0) returned 1 [0182.962] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xc050, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xc050, lpOverlapped=0x0) returned 1 [0182.964] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0182.964] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0182.965] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0182.965] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xc040, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xc040, lpOverlapped=0x0) returned 1 [0182.965] FlushFileBuffers (hFile=0x2d4) returned 1 [0183.184] FlushFileBuffers (hFile=0x2cc) returned 1 [0183.186] CloseHandle (hObject=0x2d4) returned 1 [0183.186] CloseHandle (hObject=0x2cc) returned 1 [0183.186] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\verify.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\verify.dll")) returned 1 [0183.188] SetEvent (hEvent=0x27c) returned 1 [0183.188] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\WindowsAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\windowsaccessbridge-64.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0183.188] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=110144) returned 1 [0183.189] CloseHandle (hObject=0x2cc) returned 1 [0183.189] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\WindowsAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\windowsaccessbridge-64.dll")) returned 0x20 [0183.189] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\WindowsAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\windowsaccessbridge-64.dll")) returned 0x20 [0183.189] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\WindowsAccessBridge-64.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\windowsaccessbridge-64.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0183.189] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\WindowsAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\windowsaccessbridge-64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0183.189] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0183.189] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0183.189] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\WindowsAccessBridge-64.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\windowsaccessbridge-64.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d4 [0183.190] ReadFile (in: hFile=0x2cc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1ae40, lpOverlapped=0x0) returned 1 [0183.199] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1ae50, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1ae50, lpOverlapped=0x0) returned 1 [0183.202] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x112, lpOverlapped=0x0) returned 1 [0183.202] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0183.202] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0183.202] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1ae40, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1ae40, lpOverlapped=0x0) returned 1 [0183.203] FlushFileBuffers (hFile=0x2cc) returned 1 [0183.441] FlushFileBuffers (hFile=0x2d4) returned 1 [0183.443] CloseHandle (hObject=0x2cc) returned 1 [0183.443] CloseHandle (hObject=0x2d4) returned 1 [0183.443] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\WindowsAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\windowsaccessbridge-64.dll")) returned 1 [0183.446] SetEvent (hEvent=0x27c) returned 1 [0183.446] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\zip.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\zip.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0183.446] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=77888) returned 1 [0183.446] CloseHandle (hObject=0x2d4) returned 1 [0183.446] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\zip.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\zip.dll")) returned 0x20 [0183.446] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\zip.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\zip.dll")) returned 0x20 [0183.447] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\zip.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\zip.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0183.447] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\zip.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\zip.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0183.447] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0183.447] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0183.447] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\zip.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\zip.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2cc [0183.448] ReadFile (in: hFile=0x2d4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x13040, lpOverlapped=0x0) returned 1 [0183.459] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x13050, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x13050, lpOverlapped=0x0) returned 1 [0183.461] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xe2, lpOverlapped=0x0) returned 1 [0183.461] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0183.462] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0183.462] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x13040, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x13040, lpOverlapped=0x0) returned 1 [0183.462] FlushFileBuffers (hFile=0x2d4) returned 1 [0183.653] FlushFileBuffers (hFile=0x2cc) returned 1 [0183.666] CloseHandle (hObject=0x2d4) returned 1 [0183.666] CloseHandle (hObject=0x2cc) returned 1 [0183.666] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\zip.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\zip.dll")) returned 1 [0183.668] SetEvent (hEvent=0x27c) returned 1 [0183.668] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0183.668] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=149) returned 1 [0183.668] CloseHandle (hObject=0x2cc) returned 1 [0183.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties")) returned 0x20 [0183.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties")) returned 0x20 [0183.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0183.669] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0183.669] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0183.669] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0183.669] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d4 [0183.670] ReadFile (in: hFile=0x2cc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x95, lpOverlapped=0x0) returned 1 [0183.670] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xa0, lpOverlapped=0x0) returned 1 [0183.671] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x112, lpOverlapped=0x0) returned 1 [0183.671] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0183.671] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0183.671] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x95, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x95, lpOverlapped=0x0) returned 1 [0183.671] FlushFileBuffers (hFile=0x2cc) returned 1 [0183.674] FlushFileBuffers (hFile=0x2d4) returned 1 [0183.676] CloseHandle (hObject=0x2cc) returned 1 [0183.676] CloseHandle (hObject=0x2d4) returned 1 [0183.677] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties")) returned 1 [0183.678] SetEvent (hEvent=0x27c) returned 1 [0183.678] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0183.678] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=634) returned 1 [0183.678] CloseHandle (hObject=0x2d4) returned 1 [0183.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg")) returned 0x20 [0183.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg")) returned 0x20 [0183.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0183.678] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0183.679] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0183.679] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0183.679] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2cc [0183.679] ReadFile (in: hFile=0x2d4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x27a, lpOverlapped=0x0) returned 1 [0183.679] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x280, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x280, lpOverlapped=0x0) returned 1 [0183.680] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xe2, lpOverlapped=0x0) returned 1 [0183.680] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0183.681] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0183.681] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x27a, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x27a, lpOverlapped=0x0) returned 1 [0183.681] FlushFileBuffers (hFile=0x2d4) returned 1 [0183.683] FlushFileBuffers (hFile=0x2cc) returned 1 [0183.684] CloseHandle (hObject=0x2d4) returned 1 [0183.684] CloseHandle (hObject=0x2cc) returned 1 [0183.684] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg")) returned 1 [0183.686] SetEvent (hEvent=0x27c) returned 1 [0183.686] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\calendars.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0183.686] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1378) returned 1 [0183.686] CloseHandle (hObject=0x2cc) returned 1 [0183.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\calendars.properties")) returned 0x20 [0183.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\calendars.properties")) returned 0x20 [0183.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\calendars.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0183.687] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\calendars.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc [0183.687] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0183.687] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0183.687] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\calendars.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d4 [0183.687] ReadFile (in: hFile=0x2cc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x562, lpOverlapped=0x0) returned 1 [0183.687] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x570, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x570, lpOverlapped=0x0) returned 1 [0183.688] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x102, lpOverlapped=0x0) returned 1 [0183.689] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0183.689] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0183.689] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x562, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x562, lpOverlapped=0x0) returned 1 [0183.689] FlushFileBuffers (hFile=0x2cc) returned 1 [0183.692] FlushFileBuffers (hFile=0x2d4) returned 1 [0183.693] CloseHandle (hObject=0x2cc) returned 1 [0183.693] CloseHandle (hObject=0x2d4) returned 1 [0183.694] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\calendars.properties")) returned 1 [0183.695] SetEvent (hEvent=0x27c) returned 1 [0183.695] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0183.695] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3036922) returned 1 [0183.695] CloseHandle (hObject=0x2d4) returned 1 [0183.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar")) returned 0x20 [0183.695] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 1 [0183.696] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0183.696] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fc20 | out: lpNewFilePointer=0x0) returned 1 [0183.696] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fc20 | out: lpNewFilePointer=0x0) returned 1 [0183.696] ReadFile (in: hFile=0x2d4, lpBuffer=0x3b3f058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x378fc2c, lpOverlapped=0x0 | out: lpBuffer=0x3b3f058*, lpNumberOfBytesRead=0x378fc2c*=0x40000, lpOverlapped=0x0) returned 1 [0183.722] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0xf7253, lpNewFilePointer=0x0, dwMoveMethod=0x378fc20 | out: lpNewFilePointer=0x0) returned 1 [0183.722] ReadFile (in: hFile=0x2d4, lpBuffer=0x3b7f058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x378fc2c, lpOverlapped=0x0 | out: lpBuffer=0x3b7f058*, lpNumberOfBytesRead=0x378fc2c*=0x40000, lpOverlapped=0x0) returned 1 [0183.793] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x2a56fa, lpNewFilePointer=0x0, dwMoveMethod=0x378fc20 | out: lpNewFilePointer=0x0) returned 1 [0183.793] ReadFile (in: hFile=0x2d4, lpBuffer=0x3bbf058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x378fc2c, lpOverlapped=0x0 | out: lpBuffer=0x3bbf058*, lpNumberOfBytesRead=0x378fc2c*=0x40000, lpOverlapped=0x0) returned 1 [0183.831] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd90 | out: lpNewFilePointer=0x0) returned 1 [0183.831] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xc0112, lpNumberOfBytesWritten=0x378fd88, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd88*=0xc0112, lpOverlapped=0x0) returned 1 [0183.949] SetEndOfFile (hFile=0x2d4) returned 1 [0183.950] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x2a56fa, lpNewFilePointer=0x0, dwMoveMethod=0x378fc28 | out: lpNewFilePointer=0x0) returned 1 [0183.950] WriteFile (in: hFile=0x2d4, lpBuffer=0x3bff14a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x378fc34, lpOverlapped=0x0 | out: lpBuffer=0x3bff14a*, lpNumberOfBytesWritten=0x378fc34*=0x40000, lpOverlapped=0x0) returned 1 [0183.952] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0xf7253, lpNewFilePointer=0x0, dwMoveMethod=0x378fc28 | out: lpNewFilePointer=0x0) returned 1 [0183.952] WriteFile (in: hFile=0x2d4, lpBuffer=0x3bff14a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x378fc34, lpOverlapped=0x0 | out: lpBuffer=0x3bff14a*, lpNumberOfBytesWritten=0x378fc34*=0x40000, lpOverlapped=0x0) returned 1 [0183.955] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fc28 | out: lpNewFilePointer=0x0) returned 1 [0183.955] WriteFile (in: hFile=0x2d4, lpBuffer=0x3bff14a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x378fc34, lpOverlapped=0x0 | out: lpBuffer=0x3bff14a*, lpNumberOfBytesWritten=0x378fc34*=0x40000, lpOverlapped=0x0) returned 1 [0183.957] FlushFileBuffers (hFile=0x2d4) returned 1 [0184.074] CloseHandle (hObject=0x2d4) returned 1 [0184.074] SetEvent (hEvent=0x27c) returned 1 [0184.074] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0184.075] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=51236) returned 1 [0184.075] CloseHandle (hObject=0x2d4) returned 1 [0184.075] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf")) returned 0x20 [0184.075] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf")) returned 0x20 [0184.075] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0184.075] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0184.076] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0184.076] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0184.076] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x304 [0184.077] ReadFile (in: hFile=0x2d4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xc824, lpOverlapped=0x0) returned 1 [0184.078] WriteFile (in: hFile=0x304, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xc830, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xc830, lpOverlapped=0x0) returned 1 [0184.080] WriteFile (in: hFile=0x304, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0184.080] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0184.080] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0184.080] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xc824, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xc824, lpOverlapped=0x0) returned 1 [0184.081] FlushFileBuffers (hFile=0x2d4) returned 1 [0184.207] FlushFileBuffers (hFile=0x304) returned 1 [0184.215] CloseHandle (hObject=0x2d4) returned 1 [0184.216] CloseHandle (hObject=0x304) returned 1 [0184.216] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf")) returned 1 [0184.217] SetEvent (hEvent=0x27c) returned 1 [0184.217] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0184.218] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1044) returned 1 [0184.218] CloseHandle (hObject=0x304) returned 1 [0184.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf")) returned 0x20 [0184.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf")) returned 0x20 [0184.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0184.218] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0184.218] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0184.218] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0184.218] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d4 [0184.219] ReadFile (in: hFile=0x304, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x414, lpOverlapped=0x0) returned 1 [0184.219] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x420, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x420, lpOverlapped=0x0) returned 1 [0184.220] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0184.220] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0184.220] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0184.220] WriteFile (in: hFile=0x304, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x414, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x414, lpOverlapped=0x0) returned 1 [0184.220] FlushFileBuffers (hFile=0x304) returned 1 [0184.223] FlushFileBuffers (hFile=0x2d4) returned 1 [0184.247] CloseHandle (hObject=0x304) returned 1 [0184.247] CloseHandle (hObject=0x2d4) returned 1 [0184.247] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf")) returned 1 [0184.248] SetEvent (hEvent=0x27c) returned 1 [0184.248] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0184.249] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3144) returned 1 [0184.249] CloseHandle (hObject=0x2d4) returned 1 [0184.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf")) returned 0x20 [0184.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf")) returned 0x20 [0184.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0184.249] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0184.249] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0184.249] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0184.249] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x304 [0184.250] ReadFile (in: hFile=0x2d4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xc48, lpOverlapped=0x0) returned 1 [0184.250] WriteFile (in: hFile=0x304, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xc50, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xc50, lpOverlapped=0x0) returned 1 [0184.251] WriteFile (in: hFile=0x304, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xe2, lpOverlapped=0x0) returned 1 [0184.251] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0184.251] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0184.251] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xc48, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xc48, lpOverlapped=0x0) returned 1 [0184.251] FlushFileBuffers (hFile=0x2d4) returned 1 [0184.253] FlushFileBuffers (hFile=0x304) returned 1 [0184.254] CloseHandle (hObject=0x2d4) returned 1 [0184.254] CloseHandle (hObject=0x304) returned 1 [0184.255] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf")) returned 1 [0184.256] SetEvent (hEvent=0x27c) returned 1 [0184.256] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\content-types.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0184.256] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=5548) returned 1 [0184.256] CloseHandle (hObject=0x304) returned 1 [0184.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\content-types.properties")) returned 0x20 [0184.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\content-types.properties")) returned 0x20 [0184.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\content-types.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0184.256] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\content-types.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0184.256] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0184.256] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0184.256] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\content-types.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d4 [0184.257] ReadFile (in: hFile=0x304, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x15ac, lpOverlapped=0x0) returned 1 [0184.257] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x15b0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x15b0, lpOverlapped=0x0) returned 1 [0184.258] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x112, lpOverlapped=0x0) returned 1 [0184.258] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0184.258] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0184.258] WriteFile (in: hFile=0x304, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x15ac, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x15ac, lpOverlapped=0x0) returned 1 [0184.259] FlushFileBuffers (hFile=0x304) returned 1 [0184.261] FlushFileBuffers (hFile=0x2d4) returned 1 [0184.262] CloseHandle (hObject=0x304) returned 1 [0184.262] CloseHandle (hObject=0x2d4) returned 1 [0184.263] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\content-types.properties")) returned 1 [0184.264] SetEvent (hEvent=0x27c) returned 1 [0184.264] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0184.264] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=4122) returned 1 [0184.264] CloseHandle (hObject=0x2d4) returned 1 [0184.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data")) returned 0x20 [0184.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data")) returned 0x20 [0184.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0184.264] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0184.265] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0184.265] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0184.265] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x304 [0184.265] ReadFile (in: hFile=0x2d4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x101a, lpOverlapped=0x0) returned 1 [0184.265] WriteFile (in: hFile=0x304, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1020, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1020, lpOverlapped=0x0) returned 1 [0184.266] WriteFile (in: hFile=0x304, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0184.267] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0184.267] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0184.267] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x101a, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x101a, lpOverlapped=0x0) returned 1 [0184.267] FlushFileBuffers (hFile=0x2d4) returned 1 [0184.271] FlushFileBuffers (hFile=0x304) returned 1 [0184.272] CloseHandle (hObject=0x2d4) returned 1 [0184.272] CloseHandle (hObject=0x304) returned 1 [0184.273] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data")) returned 1 [0184.274] SetEvent (hEvent=0x27c) returned 1 [0184.274] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0184.274] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=14156) returned 1 [0184.274] CloseHandle (hObject=0x304) returned 1 [0184.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip")) returned 0x20 [0184.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip")) returned 0x20 [0184.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0184.274] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0184.275] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0184.275] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0184.275] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d4 [0184.276] ReadFile (in: hFile=0x304, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x374c, lpOverlapped=0x0) returned 1 [0184.276] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3750, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x3750, lpOverlapped=0x0) returned 1 [0184.277] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0184.277] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0184.278] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0184.278] WriteFile (in: hFile=0x304, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x374c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x374c, lpOverlapped=0x0) returned 1 [0184.278] FlushFileBuffers (hFile=0x304) returned 1 [0184.381] FlushFileBuffers (hFile=0x2d4) returned 1 [0184.391] CloseHandle (hObject=0x304) returned 1 [0184.391] CloseHandle (hObject=0x2d4) returned 1 [0184.391] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip")) returned 1 [0184.392] SetEvent (hEvent=0x27c) returned 1 [0184.392] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0184.392] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3306) returned 1 [0184.392] CloseHandle (hObject=0x2d4) returned 1 [0184.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties")) returned 0x20 [0184.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties")) returned 0x20 [0184.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0184.393] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0184.393] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0184.393] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0184.393] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x304 [0184.393] ReadFile (in: hFile=0x2d4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xcea, lpOverlapped=0x0) returned 1 [0184.394] WriteFile (in: hFile=0x304, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xcf0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xcf0, lpOverlapped=0x0) returned 1 [0184.395] WriteFile (in: hFile=0x304, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x102, lpOverlapped=0x0) returned 1 [0184.395] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0184.395] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0184.395] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xcea, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xcea, lpOverlapped=0x0) returned 1 [0184.395] FlushFileBuffers (hFile=0x2d4) returned 1 [0184.398] FlushFileBuffers (hFile=0x304) returned 1 [0184.406] CloseHandle (hObject=0x2d4) returned 1 [0184.406] CloseHandle (hObject=0x304) returned 1 [0184.406] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties")) returned 1 [0184.407] SetEvent (hEvent=0x27c) returned 1 [0184.407] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0184.407] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3409) returned 1 [0184.407] CloseHandle (hObject=0x304) returned 1 [0184.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties")) returned 0x20 [0184.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties")) returned 0x20 [0184.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0184.408] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0184.408] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0184.408] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0184.408] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d4 [0184.408] ReadFile (in: hFile=0x304, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xd51, lpOverlapped=0x0) returned 1 [0184.408] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xd60, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xd60, lpOverlapped=0x0) returned 1 [0184.409] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x102, lpOverlapped=0x0) returned 1 [0184.410] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0184.410] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0184.410] WriteFile (in: hFile=0x304, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xd51, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xd51, lpOverlapped=0x0) returned 1 [0184.410] FlushFileBuffers (hFile=0x304) returned 1 [0184.420] FlushFileBuffers (hFile=0x2d4) returned 1 [0184.443] CloseHandle (hObject=0x304) returned 1 [0184.443] CloseHandle (hObject=0x2d4) returned 1 [0184.443] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties")) returned 1 [0184.444] SetEvent (hEvent=0x27c) returned 1 [0184.444] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0184.445] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=6349) returned 1 [0184.445] CloseHandle (hObject=0x2d4) returned 1 [0184.445] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties")) returned 0x20 [0184.445] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties")) returned 0x20 [0184.445] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0184.445] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0184.445] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0184.445] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0184.445] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x304 [0184.446] ReadFile (in: hFile=0x2d4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x18cd, lpOverlapped=0x0) returned 1 [0184.446] WriteFile (in: hFile=0x304, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x18d0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x18d0, lpOverlapped=0x0) returned 1 [0184.447] WriteFile (in: hFile=0x304, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x102, lpOverlapped=0x0) returned 1 [0184.447] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0184.447] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0184.448] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x18cd, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x18cd, lpOverlapped=0x0) returned 1 [0184.448] FlushFileBuffers (hFile=0x2d4) returned 1 [0184.456] FlushFileBuffers (hFile=0x304) returned 1 [0184.468] CloseHandle (hObject=0x2d4) returned 1 [0184.469] CloseHandle (hObject=0x304) returned 1 [0184.469] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties")) returned 1 [0184.470] SetEvent (hEvent=0x27c) returned 1 [0184.470] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_pt_br.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0184.470] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3285) returned 1 [0184.470] CloseHandle (hObject=0x304) returned 1 [0184.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_pt_br.properties")) returned 0x20 [0184.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_pt_br.properties")) returned 0x20 [0184.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_pt_br.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0184.470] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_pt_br.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0184.471] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0184.471] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0184.471] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_pt_br.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d4 [0184.471] ReadFile (in: hFile=0x304, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xcd5, lpOverlapped=0x0) returned 1 [0184.471] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xce0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xce0, lpOverlapped=0x0) returned 1 [0184.472] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x112, lpOverlapped=0x0) returned 1 [0184.473] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0184.473] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0184.473] WriteFile (in: hFile=0x304, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xcd5, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xcd5, lpOverlapped=0x0) returned 1 [0184.473] FlushFileBuffers (hFile=0x304) returned 1 [0184.480] FlushFileBuffers (hFile=0x2d4) returned 1 [0184.491] CloseHandle (hObject=0x304) returned 1 [0184.491] CloseHandle (hObject=0x2d4) returned 1 [0184.491] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_pt_br.properties")) returned 1 [0184.492] SetEvent (hEvent=0x27c) returned 1 [0184.492] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_cn.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0184.492] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=4072) returned 1 [0184.492] CloseHandle (hObject=0x2d4) returned 1 [0184.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_cn.properties")) returned 0x20 [0184.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_cn.properties")) returned 0x20 [0184.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_cn.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0184.493] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_cn.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0184.493] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0184.493] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0184.493] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_cn.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x304 [0184.493] ReadFile (in: hFile=0x2d4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xfe8, lpOverlapped=0x0) returned 1 [0184.494] WriteFile (in: hFile=0x304, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xff0, lpOverlapped=0x0) returned 1 [0184.495] WriteFile (in: hFile=0x304, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x112, lpOverlapped=0x0) returned 1 [0184.495] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0184.495] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0184.495] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xfe8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xfe8, lpOverlapped=0x0) returned 1 [0184.495] FlushFileBuffers (hFile=0x2d4) returned 1 [0184.498] FlushFileBuffers (hFile=0x304) returned 1 [0184.511] CloseHandle (hObject=0x2d4) returned 1 [0184.511] CloseHandle (hObject=0x304) returned 1 [0184.511] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_cn.properties")) returned 1 [0184.512] SetEvent (hEvent=0x27c) returned 1 [0184.513] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_tw.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0184.513] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3752) returned 1 [0184.513] CloseHandle (hObject=0x304) returned 1 [0184.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_tw.properties")) returned 0x20 [0184.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_tw.properties")) returned 0x20 [0184.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_tw.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0184.513] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_tw.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0184.514] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0184.514] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0184.514] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_tw.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d4 [0184.514] ReadFile (in: hFile=0x304, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xea8, lpOverlapped=0x0) returned 1 [0184.514] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xeb0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xeb0, lpOverlapped=0x0) returned 1 [0184.515] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x112, lpOverlapped=0x0) returned 1 [0184.516] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0184.516] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0184.516] WriteFile (in: hFile=0x304, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xea8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xea8, lpOverlapped=0x0) returned 1 [0184.516] FlushFileBuffers (hFile=0x304) returned 1 [0184.519] FlushFileBuffers (hFile=0x2d4) returned 1 [0184.528] CloseHandle (hObject=0x304) returned 1 [0184.528] CloseHandle (hObject=0x2d4) returned 1 [0184.528] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_tw.properties")) returned 1 [0184.530] SetEvent (hEvent=0x27c) returned 1 [0184.530] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0184.530] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=15276) returned 1 [0184.530] CloseHandle (hObject=0x2d4) returned 1 [0184.530] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif")) returned 0x20 [0184.530] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif")) returned 0x20 [0184.530] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0184.530] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0184.530] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0184.530] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0184.530] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x304 [0184.531] ReadFile (in: hFile=0x2d4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x3bac, lpOverlapped=0x0) returned 1 [0184.531] WriteFile (in: hFile=0x304, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3bb0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x3bb0, lpOverlapped=0x0) returned 1 [0184.532] WriteFile (in: hFile=0x304, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0184.533] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0184.533] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0184.533] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3bac, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x3bac, lpOverlapped=0x0) returned 1 [0184.533] FlushFileBuffers (hFile=0x2d4) returned 1 [0184.537] FlushFileBuffers (hFile=0x304) returned 1 [0184.545] CloseHandle (hObject=0x2d4) returned 1 [0184.545] CloseHandle (hObject=0x304) returned 1 [0184.545] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif")) returned 1 [0184.547] SetEvent (hEvent=0x27c) returned 1 [0184.547] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0184.547] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=12250) returned 1 [0184.547] CloseHandle (hObject=0x304) returned 1 [0184.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif")) returned 0x20 [0184.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif")) returned 0x20 [0184.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0184.547] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0184.548] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0184.548] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0184.548] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d4 [0184.548] ReadFile (in: hFile=0x304, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2fda, lpOverlapped=0x0) returned 1 [0184.549] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2fe0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2fe0, lpOverlapped=0x0) returned 1 [0184.550] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x102, lpOverlapped=0x0) returned 1 [0184.550] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0184.550] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0184.550] WriteFile (in: hFile=0x304, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2fda, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2fda, lpOverlapped=0x0) returned 1 [0184.551] FlushFileBuffers (hFile=0x304) returned 1 [0184.554] FlushFileBuffers (hFile=0x2d4) returned 1 [0184.580] CloseHandle (hObject=0x304) returned 1 [0184.580] CloseHandle (hObject=0x2d4) returned 1 [0184.581] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif")) returned 1 [0184.582] SetEvent (hEvent=0x27c) returned 1 [0184.582] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0184.583] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=188024) returned 1 [0184.583] CloseHandle (hObject=0x2d4) returned 1 [0184.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar")) returned 0x20 [0184.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar")) returned 0x20 [0184.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0184.583] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0184.583] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0184.583] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0184.583] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x304 [0184.584] ReadFile (in: hFile=0x2d4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2de78, lpOverlapped=0x0) returned 1 [0184.586] WriteFile (in: hFile=0x304, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2de80, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2de80, lpOverlapped=0x0) returned 1 [0184.590] WriteFile (in: hFile=0x304, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x102, lpOverlapped=0x0) returned 1 [0184.591] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0184.591] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0184.591] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2de78, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2de78, lpOverlapped=0x0) returned 1 [0184.591] FlushFileBuffers (hFile=0x2d4) returned 1 [0184.624] FlushFileBuffers (hFile=0x304) returned 1 [0184.626] CloseHandle (hObject=0x2d4) returned 1 [0184.626] CloseHandle (hObject=0x304) returned 1 [0184.629] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar")) returned 1 [0184.632] SetEvent (hEvent=0x27c) returned 1 [0184.633] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0184.633] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3860502) returned 1 [0184.633] CloseHandle (hObject=0x304) returned 1 [0184.636] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar")) returned 0x20 [0184.636] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 1 [0184.637] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0184.638] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fc20 | out: lpNewFilePointer=0x0) returned 1 [0184.638] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fc20 | out: lpNewFilePointer=0x0) returned 1 [0184.638] ReadFile (in: hFile=0x304, lpBuffer=0x3b3f058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x378fc2c, lpOverlapped=0x0 | out: lpBuffer=0x3b3f058*, lpNumberOfBytesRead=0x378fc2c*=0x40000, lpOverlapped=0x0) returned 1 [0184.652] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x13a2b2, lpNewFilePointer=0x0, dwMoveMethod=0x378fc20 | out: lpNewFilePointer=0x0) returned 1 [0184.652] ReadFile (in: hFile=0x304, lpBuffer=0x3b7f058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x378fc2c, lpOverlapped=0x0 | out: lpBuffer=0x3b7f058*, lpNumberOfBytesRead=0x378fc2c*=0x40000, lpOverlapped=0x0) returned 1 [0184.666] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x36e816, lpNewFilePointer=0x0, dwMoveMethod=0x378fc20 | out: lpNewFilePointer=0x0) returned 1 [0184.666] ReadFile (in: hFile=0x304, lpBuffer=0x3bbf058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x378fc2c, lpOverlapped=0x0 | out: lpBuffer=0x3bbf058*, lpNumberOfBytesRead=0x378fc2c*=0x40000, lpOverlapped=0x0) returned 1 [0184.682] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd90 | out: lpNewFilePointer=0x0) returned 1 [0184.683] WriteFile (in: hFile=0x304, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xc0112, lpNumberOfBytesWritten=0x378fd88, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd88*=0xc0112, lpOverlapped=0x0) returned 1 [0184.919] SetEndOfFile (hFile=0x304) returned 1 [0184.924] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x36e816, lpNewFilePointer=0x0, dwMoveMethod=0x378fc28 | out: lpNewFilePointer=0x0) returned 1 [0184.924] WriteFile (in: hFile=0x304, lpBuffer=0x3bff14a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x378fc34, lpOverlapped=0x0 | out: lpBuffer=0x3bff14a*, lpNumberOfBytesWritten=0x378fc34*=0x40000, lpOverlapped=0x0) returned 1 [0184.926] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x13a2b2, lpNewFilePointer=0x0, dwMoveMethod=0x378fc28 | out: lpNewFilePointer=0x0) returned 1 [0184.926] WriteFile (in: hFile=0x304, lpBuffer=0x3bff14a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x378fc34, lpOverlapped=0x0 | out: lpBuffer=0x3bff14a*, lpNumberOfBytesWritten=0x378fc34*=0x40000, lpOverlapped=0x0) returned 1 [0184.928] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fc28 | out: lpNewFilePointer=0x0) returned 1 [0184.928] WriteFile (in: hFile=0x304, lpBuffer=0x3bff14a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x378fc34, lpOverlapped=0x0 | out: lpBuffer=0x3bff14a*, lpNumberOfBytesWritten=0x378fc34*=0x40000, lpOverlapped=0x0) returned 1 [0184.930] FlushFileBuffers (hFile=0x304) returned 1 [0185.149] CloseHandle (hObject=0x304) returned 1 [0185.149] SetEvent (hEvent=0x27c) returned 1 [0185.149] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0185.150] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=8286) returned 1 [0185.150] CloseHandle (hObject=0x304) returned 1 [0185.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar")) returned 0x20 [0185.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar")) returned 0x20 [0185.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0185.150] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0185.150] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0185.150] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0185.150] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2fc [0185.151] ReadFile (in: hFile=0x304, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x205e, lpOverlapped=0x0) returned 1 [0185.151] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2060, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2060, lpOverlapped=0x0) returned 1 [0185.153] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0185.154] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0185.154] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0185.154] WriteFile (in: hFile=0x304, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x205e, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x205e, lpOverlapped=0x0) returned 1 [0185.154] FlushFileBuffers (hFile=0x304) returned 1 [0185.167] FlushFileBuffers (hFile=0x2fc) returned 1 [0185.168] CloseHandle (hObject=0x304) returned 1 [0185.169] CloseHandle (hObject=0x2fc) returned 1 [0185.169] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar")) returned 1 [0185.170] SetEvent (hEvent=0x27c) returned 1 [0185.170] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0185.170] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=18246297) returned 1 [0185.171] CloseHandle (hObject=0x2fc) returned 1 [0185.171] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar")) returned 0x20 [0185.171] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 1 [0185.172] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0185.172] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fc20 | out: lpNewFilePointer=0x0) returned 1 [0185.172] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fc20 | out: lpNewFilePointer=0x0) returned 1 [0185.172] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x378fc2c, lpOverlapped=0x0 | out: lpBuffer=0x3b3f058*, lpNumberOfBytesRead=0x378fc2c*=0x40000, lpOverlapped=0x0) returned 1 [0185.187] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x5cce33, lpNewFilePointer=0x0, dwMoveMethod=0x378fc20 | out: lpNewFilePointer=0x0) returned 1 [0185.187] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b7f058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x378fc2c, lpOverlapped=0x0 | out: lpBuffer=0x3b7f058*, lpNumberOfBytesRead=0x378fc2c*=0x40000, lpOverlapped=0x0) returned 1 [0185.206] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x1126a99, lpNewFilePointer=0x0, dwMoveMethod=0x378fc20 | out: lpNewFilePointer=0x0) returned 1 [0185.206] ReadFile (in: hFile=0x2fc, lpBuffer=0x3bbf058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x378fc2c, lpOverlapped=0x0 | out: lpBuffer=0x3bbf058*, lpNumberOfBytesRead=0x378fc2c*=0x40000, lpOverlapped=0x0) returned 1 [0185.374] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd90 | out: lpNewFilePointer=0x0) returned 1 [0185.375] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x378fd88, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd88*=0xc0102, lpOverlapped=0x0) returned 1 [0185.642] SetEndOfFile (hFile=0x2fc) returned 1 [0185.642] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x1126a99, lpNewFilePointer=0x0, dwMoveMethod=0x378fc28 | out: lpNewFilePointer=0x0) returned 1 [0185.642] WriteFile (in: hFile=0x2fc, lpBuffer=0x3bff13a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x378fc34, lpOverlapped=0x0 | out: lpBuffer=0x3bff13a*, lpNumberOfBytesWritten=0x378fc34*=0x40000, lpOverlapped=0x0) returned 1 [0185.644] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x5cce33, lpNewFilePointer=0x0, dwMoveMethod=0x378fc28 | out: lpNewFilePointer=0x0) returned 1 [0185.644] WriteFile (in: hFile=0x2fc, lpBuffer=0x3bff13a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x378fc34, lpOverlapped=0x0 | out: lpBuffer=0x3bff13a*, lpNumberOfBytesWritten=0x378fc34*=0x40000, lpOverlapped=0x0) returned 1 [0185.648] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fc28 | out: lpNewFilePointer=0x0) returned 1 [0185.648] WriteFile (in: hFile=0x2fc, lpBuffer=0x3bff13a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x378fc34, lpOverlapped=0x0 | out: lpBuffer=0x3bff13a*, lpNumberOfBytesWritten=0x378fc34*=0x40000, lpOverlapped=0x0) returned 1 [0185.649] FlushFileBuffers (hFile=0x2fc) returned 1 [0185.856] CloseHandle (hObject=0x2fc) returned 1 [0185.856] SetEvent (hEvent=0x27c) returned 1 [0185.856] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0185.857] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1461) returned 1 [0185.857] CloseHandle (hObject=0x2fc) returned 1 [0185.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index")) returned 0x20 [0185.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index")) returned 0x20 [0185.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0185.857] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0185.858] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0185.858] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0185.858] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2f0 [0185.858] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x5b5, lpOverlapped=0x0) returned 1 [0185.859] WriteFile (in: hFile=0x2f0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5c0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x5c0, lpOverlapped=0x0) returned 1 [0185.860] WriteFile (in: hFile=0x2f0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0185.860] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0185.860] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0185.860] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5b5, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x5b5, lpOverlapped=0x0) returned 1 [0185.860] FlushFileBuffers (hFile=0x2fc) returned 1 [0185.863] FlushFileBuffers (hFile=0x2f0) returned 1 [0185.865] CloseHandle (hObject=0x2fc) returned 1 [0185.865] CloseHandle (hObject=0x2f0) returned 1 [0185.865] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index")) returned 1 [0185.866] SetEvent (hEvent=0x27c) returned 1 [0185.866] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0185.867] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2022734) returned 1 [0185.867] CloseHandle (hObject=0x2f0) returned 1 [0185.867] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar")) returned 0x20 [0185.867] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 1 [0185.868] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0185.868] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fc20 | out: lpNewFilePointer=0x0) returned 1 [0185.868] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fc20 | out: lpNewFilePointer=0x0) returned 1 [0185.868] ReadFile (in: hFile=0x2f0, lpBuffer=0x3b3f058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x378fc2c, lpOverlapped=0x0 | out: lpBuffer=0x3b3f058*, lpNumberOfBytesRead=0x378fc2c*=0x40000, lpOverlapped=0x0) returned 1 [0185.879] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0xa49c4, lpNewFilePointer=0x0, dwMoveMethod=0x378fc20 | out: lpNewFilePointer=0x0) returned 1 [0185.879] ReadFile (in: hFile=0x2f0, lpBuffer=0x3b7f058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x378fc2c, lpOverlapped=0x0 | out: lpBuffer=0x3b7f058*, lpNumberOfBytesRead=0x378fc2c*=0x40000, lpOverlapped=0x0) returned 1 [0185.887] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x1add4e, lpNewFilePointer=0x0, dwMoveMethod=0x378fc20 | out: lpNewFilePointer=0x0) returned 1 [0185.887] ReadFile (in: hFile=0x2f0, lpBuffer=0x3bbf058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x378fc2c, lpOverlapped=0x0 | out: lpBuffer=0x3bbf058*, lpNumberOfBytesRead=0x378fc2c*=0x40000, lpOverlapped=0x0) returned 1 [0185.904] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd90 | out: lpNewFilePointer=0x0) returned 1 [0185.904] WriteFile (in: hFile=0x2f0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x378fd88, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd88*=0xc0102, lpOverlapped=0x0) returned 1 [0186.083] SetEndOfFile (hFile=0x2f0) returned 1 [0186.084] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x1add4e, lpNewFilePointer=0x0, dwMoveMethod=0x378fc28 | out: lpNewFilePointer=0x0) returned 1 [0186.084] WriteFile (in: hFile=0x2f0, lpBuffer=0x3bff13a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x378fc34, lpOverlapped=0x0 | out: lpBuffer=0x3bff13a*, lpNumberOfBytesWritten=0x378fc34*=0x40000, lpOverlapped=0x0) returned 1 [0186.086] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0xa49c4, lpNewFilePointer=0x0, dwMoveMethod=0x378fc28 | out: lpNewFilePointer=0x0) returned 1 [0186.086] WriteFile (in: hFile=0x2f0, lpBuffer=0x3bff13a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x378fc34, lpOverlapped=0x0 | out: lpBuffer=0x3bff13a*, lpNumberOfBytesWritten=0x378fc34*=0x40000, lpOverlapped=0x0) returned 1 [0186.089] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fc28 | out: lpNewFilePointer=0x0) returned 1 [0186.089] WriteFile (in: hFile=0x2f0, lpBuffer=0x3bff13a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x378fc34, lpOverlapped=0x0 | out: lpBuffer=0x3bff13a*, lpNumberOfBytesWritten=0x378fc34*=0x40000, lpOverlapped=0x0) returned 1 [0186.090] FlushFileBuffers (hFile=0x2f0) returned 1 [0186.099] CloseHandle (hObject=0x2f0) returned 1 [0186.099] SetEvent (hEvent=0x27c) returned 1 [0186.099] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0186.100] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=280161) returned 1 [0186.100] CloseHandle (hObject=0x2f0) returned 1 [0186.100] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar")) returned 0x20 [0186.100] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar")) returned 0x20 [0186.100] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0186.100] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0186.100] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0186.100] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0186.100] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e8 [0186.103] ReadFile (in: hFile=0x2f0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x44661, lpOverlapped=0x0) returned 1 [0186.107] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x44670, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x44670, lpOverlapped=0x0) returned 1 [0186.113] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x102, lpOverlapped=0x0) returned 1 [0186.114] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0186.114] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0186.114] WriteFile (in: hFile=0x2f0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x44661, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x44661, lpOverlapped=0x0) returned 1 [0186.115] FlushFileBuffers (hFile=0x2f0) returned 1 [0186.332] FlushFileBuffers (hFile=0x2e8) returned 1 [0186.333] CloseHandle (hObject=0x2f0) returned 1 [0186.333] CloseHandle (hObject=0x2e8) returned 1 [0186.333] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar")) returned 1 [0186.338] SetEvent (hEvent=0x27c) returned 1 [0186.339] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0186.339] GetFileSizeEx (in: hFile=0x2e8, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=251327) returned 1 [0186.339] CloseHandle (hObject=0x2e8) returned 1 [0186.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar")) returned 0x20 [0186.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar")) returned 0x20 [0186.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0186.339] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0186.339] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0186.339] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0186.339] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2f0 [0186.340] ReadFile (in: hFile=0x2e8, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x3d5bf, lpOverlapped=0x0) returned 1 [0186.344] WriteFile (in: hFile=0x2f0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3d5c0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x3d5c0, lpOverlapped=0x0) returned 1 [0186.350] WriteFile (in: hFile=0x2f0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0186.350] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0186.350] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0186.350] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3d5bf, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x3d5bf, lpOverlapped=0x0) returned 1 [0186.351] FlushFileBuffers (hFile=0x2e8) returned 1 [0186.644] FlushFileBuffers (hFile=0x2f0) returned 1 [0186.646] CloseHandle (hObject=0x2e8) returned 1 [0186.646] CloseHandle (hObject=0x2f0) returned 1 [0186.646] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar")) returned 1 [0186.649] SetEvent (hEvent=0x27c) returned 1 [0186.649] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0186.649] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3928) returned 1 [0186.649] CloseHandle (hObject=0x2f0) returned 1 [0186.649] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties")) returned 0x20 [0186.650] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties")) returned 0x20 [0186.650] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0186.650] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0186.650] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0186.650] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0186.650] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e8 [0186.651] ReadFile (in: hFile=0x2f0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xf58, lpOverlapped=0x0) returned 1 [0186.651] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf60, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf60, lpOverlapped=0x0) returned 1 [0186.652] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x102, lpOverlapped=0x0) returned 1 [0186.652] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0186.653] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0186.653] WriteFile (in: hFile=0x2f0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf58, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xf58, lpOverlapped=0x0) returned 1 [0186.653] FlushFileBuffers (hFile=0x2f0) returned 1 [0186.655] FlushFileBuffers (hFile=0x2e8) returned 1 [0186.656] CloseHandle (hObject=0x2f0) returned 1 [0186.656] CloseHandle (hObject=0x2e8) returned 1 [0186.656] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties")) returned 1 [0186.657] SetEvent (hEvent=0x27c) returned 1 [0186.657] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0186.658] GetFileSizeEx (in: hFile=0x2e8, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3770) returned 1 [0186.658] CloseHandle (hObject=0x2e8) returned 1 [0186.658] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc")) returned 0x20 [0186.658] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc")) returned 0x20 [0186.658] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0186.658] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0186.658] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0186.658] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0186.658] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2f0 [0186.659] ReadFile (in: hFile=0x2e8, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xeba, lpOverlapped=0x0) returned 1 [0186.659] WriteFile (in: hFile=0x2f0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xec0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xec0, lpOverlapped=0x0) returned 1 [0186.660] WriteFile (in: hFile=0x2f0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0186.660] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0186.660] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0186.660] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xeba, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xeba, lpOverlapped=0x0) returned 1 [0186.660] FlushFileBuffers (hFile=0x2e8) returned 1 [0186.662] FlushFileBuffers (hFile=0x2f0) returned 1 [0186.664] CloseHandle (hObject=0x2e8) returned 1 [0186.664] CloseHandle (hObject=0x2f0) returned 1 [0186.664] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc")) returned 1 [0186.665] SetEvent (hEvent=0x27c) returned 1 [0186.665] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0186.665] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=10568) returned 1 [0186.665] CloseHandle (hObject=0x2f0) returned 1 [0186.665] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src")) returned 0x20 [0186.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src")) returned 0x20 [0186.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0186.666] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0186.666] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0186.666] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0186.666] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e8 [0186.667] ReadFile (in: hFile=0x2f0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2948, lpOverlapped=0x0) returned 1 [0186.667] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2950, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2950, lpOverlapped=0x0) returned 1 [0186.668] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x112, lpOverlapped=0x0) returned 1 [0186.668] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0186.669] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0186.669] WriteFile (in: hFile=0x2f0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2948, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2948, lpOverlapped=0x0) returned 1 [0186.669] FlushFileBuffers (hFile=0x2f0) returned 1 [0186.672] FlushFileBuffers (hFile=0x2e8) returned 1 [0186.673] CloseHandle (hObject=0x2f0) returned 1 [0186.673] CloseHandle (hObject=0x2e8) returned 1 [0186.673] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src")) returned 1 [0186.674] SetEvent (hEvent=0x27c) returned 1 [0186.674] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0186.675] GetFileSizeEx (in: hFile=0x2e8, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=75144) returned 1 [0186.675] CloseHandle (hObject=0x2e8) returned 1 [0186.675] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf")) returned 0x20 [0186.675] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf")) returned 0x20 [0186.675] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0186.675] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0186.675] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0186.675] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0186.675] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2f0 [0186.676] ReadFile (in: hFile=0x2e8, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x12588, lpOverlapped=0x0) returned 1 [0186.677] WriteFile (in: hFile=0x2f0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x12590, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x12590, lpOverlapped=0x0) returned 1 [0186.679] WriteFile (in: hFile=0x2f0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x112, lpOverlapped=0x0) returned 1 [0186.679] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0186.679] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0186.679] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x12588, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x12588, lpOverlapped=0x0) returned 1 [0186.679] FlushFileBuffers (hFile=0x2e8) returned 1 [0188.055] FlushFileBuffers (hFile=0x2f0) returned 1 [0188.056] CloseHandle (hObject=0x2e8) returned 1 [0188.056] CloseHandle (hObject=0x2f0) returned 1 [0188.056] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf")) returned 1 [0188.058] SetEvent (hEvent=0x27c) returned 1 [0188.058] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0188.058] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=80856) returned 1 [0188.058] CloseHandle (hObject=0x2f0) returned 1 [0188.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf")) returned 0x20 [0188.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf")) returned 0x20 [0188.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0188.058] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0188.058] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0188.059] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0188.059] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e8 [0188.059] ReadFile (in: hFile=0x2f0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x13bd8, lpOverlapped=0x0) returned 1 [0188.061] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x13be0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x13be0, lpOverlapped=0x0) returned 1 [0188.063] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x102, lpOverlapped=0x0) returned 1 [0188.063] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0188.063] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0188.063] WriteFile (in: hFile=0x2f0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x13bd8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x13bd8, lpOverlapped=0x0) returned 1 [0188.064] FlushFileBuffers (hFile=0x2f0) returned 1 [0188.198] FlushFileBuffers (hFile=0x2e8) returned 1 [0188.201] CloseHandle (hObject=0x2f0) returned 1 [0188.201] CloseHandle (hObject=0x2e8) returned 1 [0188.201] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf")) returned 1 [0188.203] SetEvent (hEvent=0x27c) returned 1 [0188.203] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0188.203] GetFileSizeEx (in: hFile=0x2e8, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=317896) returned 1 [0188.203] CloseHandle (hObject=0x2e8) returned 1 [0188.203] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf")) returned 0x20 [0188.203] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf")) returned 0x20 [0188.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0188.204] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0188.204] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0188.204] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0188.204] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2f0 [0188.204] ReadFile (in: hFile=0x2e8, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4d9c8, lpOverlapped=0x0) returned 1 [0188.210] WriteFile (in: hFile=0x2f0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4d9d0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4d9d0, lpOverlapped=0x0) returned 1 [0188.217] WriteFile (in: hFile=0x2f0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x102, lpOverlapped=0x0) returned 1 [0188.217] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0188.217] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0188.217] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4d9c8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4d9c8, lpOverlapped=0x0) returned 1 [0188.218] FlushFileBuffers (hFile=0x2e8) returned 1 [0188.715] FlushFileBuffers (hFile=0x2f0) returned 1 [0188.719] CloseHandle (hObject=0x2e8) returned 1 [0188.719] CloseHandle (hObject=0x2f0) returned 1 [0188.719] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf")) returned 1 [0188.724] SetEvent (hEvent=0x27c) returned 1 [0188.724] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0188.724] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=234068) returned 1 [0188.724] CloseHandle (hObject=0x2f0) returned 1 [0188.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf")) returned 0x20 [0188.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf")) returned 0x20 [0188.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0188.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0188.725] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0188.725] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0188.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e8 [0188.725] ReadFile (in: hFile=0x2f0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x39254, lpOverlapped=0x0) returned 1 [0188.740] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x39260, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x39260, lpOverlapped=0x0) returned 1 [0188.746] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x112, lpOverlapped=0x0) returned 1 [0188.746] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0188.746] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0188.746] WriteFile (in: hFile=0x2f0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x39254, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x39254, lpOverlapped=0x0) returned 1 [0188.747] FlushFileBuffers (hFile=0x2f0) returned 1 [0188.929] FlushFileBuffers (hFile=0x2e8) returned 1 [0188.932] CloseHandle (hObject=0x2f0) returned 1 [0188.932] CloseHandle (hObject=0x2e8) returned 1 [0188.932] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf")) returned 1 [0188.935] SetEvent (hEvent=0x27c) returned 1 [0188.935] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0188.935] GetFileSizeEx (in: hFile=0x2e8, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=13962) returned 1 [0188.935] CloseHandle (hObject=0x2e8) returned 1 [0188.935] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties")) returned 0x20 [0188.935] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties")) returned 0x20 [0188.935] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0188.935] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0188.936] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0188.936] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0188.936] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2f0 [0188.936] ReadFile (in: hFile=0x2e8, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x368a, lpOverlapped=0x0) returned 1 [0188.937] WriteFile (in: hFile=0x2f0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3690, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x3690, lpOverlapped=0x0) returned 1 [0188.938] WriteFile (in: hFile=0x2f0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x122, lpOverlapped=0x0) returned 1 [0188.938] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0188.938] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0188.939] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x368a, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x368a, lpOverlapped=0x0) returned 1 [0188.939] FlushFileBuffers (hFile=0x2e8) returned 1 [0189.029] FlushFileBuffers (hFile=0x2f0) returned 1 [0189.032] CloseHandle (hObject=0x2e8) returned 1 [0189.032] CloseHandle (hObject=0x2f0) returned 1 [0189.032] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties")) returned 1 [0189.033] SetEvent (hEvent=0x27c) returned 1 [0189.034] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0189.034] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1280) returned 1 [0189.034] CloseHandle (hObject=0x2f0) returned 1 [0189.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties")) returned 0x20 [0189.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties")) returned 0x20 [0189.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0189.034] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0189.034] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0189.034] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0189.034] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e8 [0189.035] ReadFile (in: hFile=0x2f0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x500, lpOverlapped=0x0) returned 1 [0189.035] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x510, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x510, lpOverlapped=0x0) returned 1 [0189.036] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x102, lpOverlapped=0x0) returned 1 [0189.037] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0189.037] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0189.037] WriteFile (in: hFile=0x2f0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x500, lpOverlapped=0x0) returned 1 [0189.037] FlushFileBuffers (hFile=0x2f0) returned 1 [0189.042] FlushFileBuffers (hFile=0x2e8) returned 1 [0189.044] CloseHandle (hObject=0x2f0) returned 1 [0189.044] CloseHandle (hObject=0x2e8) returned 1 [0189.044] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties")) returned 1 [0189.045] SetEvent (hEvent=0x27c) returned 1 [0189.045] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0189.045] GetFileSizeEx (in: hFile=0x2e8, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=153) returned 1 [0189.045] CloseHandle (hObject=0x2e8) returned 1 [0189.046] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif")) returned 0x20 [0189.046] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif")) returned 0x20 [0189.046] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0189.046] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0189.046] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0189.046] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0189.046] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2f0 [0189.046] ReadFile (in: hFile=0x2e8, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x99, lpOverlapped=0x0) returned 1 [0189.047] WriteFile (in: hFile=0x2f0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xa0, lpOverlapped=0x0) returned 1 [0189.048] WriteFile (in: hFile=0x2f0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x102, lpOverlapped=0x0) returned 1 [0189.048] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0189.048] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0189.048] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x99, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x99, lpOverlapped=0x0) returned 1 [0189.048] FlushFileBuffers (hFile=0x2e8) returned 1 [0189.053] FlushFileBuffers (hFile=0x2f0) returned 1 [0189.057] CloseHandle (hObject=0x2e8) returned 1 [0189.057] CloseHandle (hObject=0x2f0) returned 1 [0189.057] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif")) returned 1 [0189.058] SetEvent (hEvent=0x27c) returned 1 [0189.058] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0189.059] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=165) returned 1 [0189.059] CloseHandle (hObject=0x2f0) returned 1 [0189.059] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif")) returned 0x20 [0189.059] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif")) returned 0x20 [0189.059] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0189.059] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0189.059] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0189.059] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0189.059] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e8 [0189.059] ReadFile (in: hFile=0x2f0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xa5, lpOverlapped=0x0) returned 1 [0189.060] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xb0, lpOverlapped=0x0) returned 1 [0189.061] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x102, lpOverlapped=0x0) returned 1 [0189.061] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0189.061] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0189.061] WriteFile (in: hFile=0x2f0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xa5, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xa5, lpOverlapped=0x0) returned 1 [0189.062] FlushFileBuffers (hFile=0x2f0) returned 1 [0189.066] FlushFileBuffers (hFile=0x2e8) returned 1 [0189.069] CloseHandle (hObject=0x2f0) returned 1 [0189.069] CloseHandle (hObject=0x2e8) returned 1 [0189.070] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif")) returned 1 [0189.071] SetEvent (hEvent=0x27c) returned 1 [0189.071] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0189.071] GetFileSizeEx (in: hFile=0x2e8, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=153) returned 1 [0189.071] CloseHandle (hObject=0x2e8) returned 1 [0189.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif")) returned 0x20 [0189.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif")) returned 0x20 [0189.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0189.071] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0189.071] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0189.071] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0189.071] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2f0 [0189.072] ReadFile (in: hFile=0x2e8, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x99, lpOverlapped=0x0) returned 1 [0189.073] WriteFile (in: hFile=0x2f0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xa0, lpOverlapped=0x0) returned 1 [0189.074] WriteFile (in: hFile=0x2f0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x112, lpOverlapped=0x0) returned 1 [0189.074] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0189.074] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0189.074] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x99, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x99, lpOverlapped=0x0) returned 1 [0189.074] FlushFileBuffers (hFile=0x2e8) returned 1 [0189.079] FlushFileBuffers (hFile=0x2f0) returned 1 [0189.082] CloseHandle (hObject=0x2e8) returned 1 [0189.083] CloseHandle (hObject=0x2f0) returned 1 [0189.083] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif")) returned 1 [0189.084] SetEvent (hEvent=0x27c) returned 1 [0189.084] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0189.084] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=168) returned 1 [0189.084] CloseHandle (hObject=0x2f0) returned 1 [0189.084] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif")) returned 0x20 [0189.084] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif")) returned 0x20 [0189.084] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0189.084] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0189.084] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0189.084] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0189.084] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e8 [0189.085] ReadFile (in: hFile=0x2f0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xa8, lpOverlapped=0x0) returned 1 [0189.086] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xb0, lpOverlapped=0x0) returned 1 [0189.086] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x102, lpOverlapped=0x0) returned 1 [0189.087] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0189.087] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0189.087] WriteFile (in: hFile=0x2f0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xa8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xa8, lpOverlapped=0x0) returned 1 [0189.087] FlushFileBuffers (hFile=0x2f0) returned 1 [0189.091] FlushFileBuffers (hFile=0x2e8) returned 1 [0189.095] CloseHandle (hObject=0x2f0) returned 1 [0189.095] CloseHandle (hObject=0x2e8) returned 1 [0189.095] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif")) returned 1 [0189.096] SetEvent (hEvent=0x27c) returned 1 [0189.096] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0189.096] GetFileSizeEx (in: hFile=0x2e8, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=153) returned 1 [0189.096] CloseHandle (hObject=0x2e8) returned 1 [0189.096] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif")) returned 0x20 [0189.096] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif")) returned 0x20 [0189.096] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0189.096] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0189.097] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0189.097] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0189.097] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2f0 [0189.097] ReadFile (in: hFile=0x2e8, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x99, lpOverlapped=0x0) returned 1 [0189.098] WriteFile (in: hFile=0x2f0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xa0, lpOverlapped=0x0) returned 1 [0189.099] WriteFile (in: hFile=0x2f0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x112, lpOverlapped=0x0) returned 1 [0189.099] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0189.099] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0189.099] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x99, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x99, lpOverlapped=0x0) returned 1 [0189.099] FlushFileBuffers (hFile=0x2e8) returned 1 [0189.105] FlushFileBuffers (hFile=0x2f0) returned 1 [0189.109] CloseHandle (hObject=0x2e8) returned 1 [0189.113] CloseHandle (hObject=0x2f0) returned 1 [0189.113] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif")) returned 1 [0189.114] SetEvent (hEvent=0x27c) returned 1 [0189.114] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0189.114] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=147) returned 1 [0189.114] CloseHandle (hObject=0x2f0) returned 1 [0189.114] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif")) returned 0x20 [0189.114] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif")) returned 0x20 [0189.114] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0189.114] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0189.115] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0189.115] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0189.115] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e8 [0189.115] ReadFile (in: hFile=0x2f0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x93, lpOverlapped=0x0) returned 1 [0189.116] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xa0, lpOverlapped=0x0) returned 1 [0189.117] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x102, lpOverlapped=0x0) returned 1 [0189.117] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0189.117] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0189.117] WriteFile (in: hFile=0x2f0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x93, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x93, lpOverlapped=0x0) returned 1 [0189.117] FlushFileBuffers (hFile=0x2f0) returned 1 [0189.121] FlushFileBuffers (hFile=0x2e8) returned 1 [0189.130] CloseHandle (hObject=0x2f0) returned 1 [0189.130] CloseHandle (hObject=0x2e8) returned 1 [0189.130] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif")) returned 1 [0189.132] SetEvent (hEvent=0x27c) returned 1 [0189.132] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0189.132] GetFileSizeEx (in: hFile=0x2e8, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=153) returned 1 [0189.132] CloseHandle (hObject=0x2e8) returned 1 [0189.132] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif")) returned 0x20 [0189.132] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif")) returned 0x20 [0189.132] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0189.132] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0189.133] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0189.133] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0189.133] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2f0 [0189.133] ReadFile (in: hFile=0x2e8, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x99, lpOverlapped=0x0) returned 1 [0189.134] WriteFile (in: hFile=0x2f0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xa0, lpOverlapped=0x0) returned 1 [0189.135] WriteFile (in: hFile=0x2f0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x112, lpOverlapped=0x0) returned 1 [0189.136] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0189.136] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0189.136] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x99, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x99, lpOverlapped=0x0) returned 1 [0189.136] FlushFileBuffers (hFile=0x2e8) returned 1 [0189.138] FlushFileBuffers (hFile=0x2f0) returned 1 [0189.140] CloseHandle (hObject=0x2e8) returned 1 [0189.140] CloseHandle (hObject=0x2f0) returned 1 [0189.140] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif")) returned 1 [0189.141] SetEvent (hEvent=0x27c) returned 1 [0189.141] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0189.142] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=56) returned 1 [0189.142] CloseHandle (hObject=0x2f0) returned 1 [0189.142] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties")) returned 0x20 [0189.142] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties")) returned 0x20 [0189.142] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0189.142] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0189.142] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0189.142] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0189.142] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e8 [0189.143] ReadFile (in: hFile=0x2f0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x38, lpOverlapped=0x0) returned 1 [0189.143] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x40, lpOverlapped=0x0) returned 1 [0189.144] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x102, lpOverlapped=0x0) returned 1 [0189.145] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0189.145] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0189.145] WriteFile (in: hFile=0x2f0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x38, lpOverlapped=0x0) returned 1 [0189.145] FlushFileBuffers (hFile=0x2f0) returned 1 [0189.147] FlushFileBuffers (hFile=0x2e8) returned 1 [0189.149] CloseHandle (hObject=0x2f0) returned 1 [0189.149] CloseHandle (hObject=0x2e8) returned 1 [0189.149] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties")) returned 1 [0189.150] SetEvent (hEvent=0x27c) returned 1 [0189.150] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0189.150] GetFileSizeEx (in: hFile=0x2e8, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=944167) returned 1 [0189.150] CloseHandle (hObject=0x2e8) returned 1 [0189.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar")) returned 0x20 [0189.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar")) returned 0x20 [0189.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0189.151] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0189.151] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0189.151] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0189.151] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2f0 [0189.151] ReadFile (in: hFile=0x2e8, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xe6827, lpOverlapped=0x0) returned 1 [0189.169] WriteFile (in: hFile=0x2f0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xe6830, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xe6830, lpOverlapped=0x0) returned 1 [0189.317] WriteFile (in: hFile=0x2f0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0189.317] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0189.317] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0189.317] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xe6827, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xe6827, lpOverlapped=0x0) returned 1 [0189.320] FlushFileBuffers (hFile=0x2e8) returned 1 [0189.681] FlushFileBuffers (hFile=0x2f0) returned 1 [0189.694] CloseHandle (hObject=0x2e8) returned 1 [0189.694] CloseHandle (hObject=0x2f0) returned 1 [0189.694] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar")) returned 1 [0189.703] SetEvent (hEvent=0x27c) returned 1 [0189.703] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0189.703] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=20065) returned 1 [0189.703] CloseHandle (hObject=0x2f0) returned 1 [0189.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc")) returned 0x20 [0189.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc")) returned 0x20 [0189.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0189.703] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0189.703] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0189.703] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0189.703] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e8 [0189.705] ReadFile (in: hFile=0x2f0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4e61, lpOverlapped=0x0) returned 1 [0189.706] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4e70, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4e70, lpOverlapped=0x0) returned 1 [0189.708] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0189.708] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0189.708] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0189.708] WriteFile (in: hFile=0x2f0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4e61, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4e61, lpOverlapped=0x0) returned 1 [0189.708] FlushFileBuffers (hFile=0x2f0) returned 1 [0189.765] FlushFileBuffers (hFile=0x2e8) returned 1 [0189.766] CloseHandle (hObject=0x2f0) returned 1 [0189.766] CloseHandle (hObject=0x2e8) returned 1 [0189.766] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc")) returned 1 [0189.768] SetEvent (hEvent=0x27c) returned 1 [0189.768] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0189.768] GetFileSizeEx (in: hFile=0x2e8, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=33932) returned 1 [0189.768] CloseHandle (hObject=0x2e8) returned 1 [0189.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar")) returned 0x20 [0189.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar")) returned 0x20 [0189.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0189.768] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0189.768] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0189.768] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0189.768] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2f0 [0189.769] ReadFile (in: hFile=0x2e8, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x848c, lpOverlapped=0x0) returned 1 [0189.770] WriteFile (in: hFile=0x2f0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x8490, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x8490, lpOverlapped=0x0) returned 1 [0189.772] WriteFile (in: hFile=0x2f0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0189.772] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0189.772] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0189.772] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x848c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x848c, lpOverlapped=0x0) returned 1 [0189.772] FlushFileBuffers (hFile=0x2e8) returned 1 [0189.774] FlushFileBuffers (hFile=0x2f0) returned 1 [0189.776] CloseHandle (hObject=0x2e8) returned 1 [0189.776] CloseHandle (hObject=0x2f0) returned 1 [0189.776] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar")) returned 1 [0189.777] SetEvent (hEvent=0x27c) returned 1 [0189.777] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0189.777] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=584576) returned 1 [0189.777] CloseHandle (hObject=0x2f0) returned 1 [0189.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar")) returned 0x20 [0189.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar")) returned 0x20 [0189.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0189.778] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0189.778] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0189.778] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0189.778] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e8 [0189.778] ReadFile (in: hFile=0x2f0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x8eb80, lpOverlapped=0x0) returned 1 [0189.789] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x8eb90, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x8eb90, lpOverlapped=0x0) returned 1 [0189.800] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0189.800] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0189.800] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0189.801] WriteFile (in: hFile=0x2f0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x8eb80, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x8eb80, lpOverlapped=0x0) returned 1 [0189.802] FlushFileBuffers (hFile=0x2f0) returned 1 [0190.079] FlushFileBuffers (hFile=0x2e8) returned 1 [0190.081] CloseHandle (hObject=0x2f0) returned 1 [0190.081] CloseHandle (hObject=0x2e8) returned 1 [0190.081] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar")) returned 1 [0190.088] SetEvent (hEvent=0x27c) returned 1 [0190.088] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0190.088] GetFileSizeEx (in: hFile=0x2e8, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=4226) returned 1 [0190.088] CloseHandle (hObject=0x2e8) returned 1 [0190.088] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt")) returned 0x20 [0190.088] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt")) returned 0x20 [0190.089] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0190.089] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0190.089] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0190.089] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0190.089] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2f0 [0190.090] ReadFile (in: hFile=0x2e8, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1082, lpOverlapped=0x0) returned 1 [0190.091] WriteFile (in: hFile=0x2f0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1090, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1090, lpOverlapped=0x0) returned 1 [0190.092] WriteFile (in: hFile=0x2f0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0190.092] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0190.092] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0190.092] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1082, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1082, lpOverlapped=0x0) returned 1 [0190.093] FlushFileBuffers (hFile=0x2e8) returned 1 [0190.095] FlushFileBuffers (hFile=0x2f0) returned 1 [0190.096] CloseHandle (hObject=0x2e8) returned 1 [0190.096] CloseHandle (hObject=0x2f0) returned 1 [0190.096] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt")) returned 1 [0190.097] SetEvent (hEvent=0x27c) returned 1 [0190.097] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0190.097] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2455) returned 1 [0190.097] CloseHandle (hObject=0x2f0) returned 1 [0190.097] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties")) returned 0x20 [0190.098] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties")) returned 0x20 [0190.098] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0190.098] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0190.098] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0190.098] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0190.098] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e8 [0190.098] ReadFile (in: hFile=0x2f0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x997, lpOverlapped=0x0) returned 1 [0190.099] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x9a0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x9a0, lpOverlapped=0x0) returned 1 [0190.100] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x102, lpOverlapped=0x0) returned 1 [0190.100] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0190.100] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0190.100] WriteFile (in: hFile=0x2f0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x997, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x997, lpOverlapped=0x0) returned 1 [0190.101] FlushFileBuffers (hFile=0x2f0) returned 1 [0190.102] FlushFileBuffers (hFile=0x2e8) returned 1 [0190.104] CloseHandle (hObject=0x2f0) returned 1 [0190.104] CloseHandle (hObject=0x2e8) returned 1 [0190.104] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties")) returned 1 [0190.105] SetEvent (hEvent=0x27c) returned 1 [0190.105] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0190.105] GetFileSizeEx (in: hFile=0x2e8, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3998) returned 1 [0190.105] CloseHandle (hObject=0x2e8) returned 1 [0190.105] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access")) returned 0x20 [0190.105] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access")) returned 0x20 [0190.105] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0190.106] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0190.106] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0190.106] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0190.106] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2f0 [0190.106] ReadFile (in: hFile=0x2e8, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xf9e, lpOverlapped=0x0) returned 1 [0190.107] WriteFile (in: hFile=0x2f0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xfa0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xfa0, lpOverlapped=0x0) returned 1 [0190.108] WriteFile (in: hFile=0x2f0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x102, lpOverlapped=0x0) returned 1 [0190.108] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0190.108] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0190.108] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf9e, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xf9e, lpOverlapped=0x0) returned 1 [0190.109] FlushFileBuffers (hFile=0x2e8) returned 1 [0190.121] FlushFileBuffers (hFile=0x2f0) returned 1 [0190.191] CloseHandle (hObject=0x2e8) returned 1 [0190.191] CloseHandle (hObject=0x2f0) returned 1 [0190.191] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access")) returned 1 [0190.192] SetEvent (hEvent=0x27c) returned 1 [0190.193] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0190.193] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=14630) returned 1 [0190.193] CloseHandle (hObject=0x2f0) returned 1 [0190.193] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties")) returned 0x20 [0190.193] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties")) returned 0x20 [0190.194] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0190.194] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0190.194] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0190.194] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0190.194] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e8 [0190.194] ReadFile (in: hFile=0x2f0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x3926, lpOverlapped=0x0) returned 1 [0190.195] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3930, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x3930, lpOverlapped=0x0) returned 1 [0190.196] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x102, lpOverlapped=0x0) returned 1 [0190.197] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0190.197] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0190.197] WriteFile (in: hFile=0x2f0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3926, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x3926, lpOverlapped=0x0) returned 1 [0190.197] FlushFileBuffers (hFile=0x2f0) returned 1 [0190.529] FlushFileBuffers (hFile=0x2e8) returned 1 [0190.530] CloseHandle (hObject=0x2f0) returned 1 [0190.530] CloseHandle (hObject=0x2e8) returned 1 [0190.530] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties")) returned 1 [0190.531] SetEvent (hEvent=0x27c) returned 1 [0190.531] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0190.532] GetFileSizeEx (in: hFile=0x2e8, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2796) returned 1 [0190.532] CloseHandle (hObject=0x2e8) returned 1 [0190.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja")) returned 0x20 [0190.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja")) returned 0x20 [0190.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0190.533] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0190.533] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0190.533] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0190.533] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2f0 [0190.533] ReadFile (in: hFile=0x2e8, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xaec, lpOverlapped=0x0) returned 1 [0190.534] WriteFile (in: hFile=0x2f0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xaf0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xaf0, lpOverlapped=0x0) returned 1 [0190.535] WriteFile (in: hFile=0x2f0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x102, lpOverlapped=0x0) returned 1 [0190.535] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0190.535] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0190.536] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xaec, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xaec, lpOverlapped=0x0) returned 1 [0190.536] FlushFileBuffers (hFile=0x2e8) returned 1 [0190.544] FlushFileBuffers (hFile=0x2f0) returned 1 [0190.545] CloseHandle (hObject=0x2e8) returned 1 [0190.545] CloseHandle (hObject=0x2f0) returned 1 [0190.545] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja")) returned 1 [0190.546] SetEvent (hEvent=0x27c) returned 1 [0190.546] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfontj2d.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0190.547] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=10393) returned 1 [0190.547] CloseHandle (hObject=0x2f0) returned 1 [0190.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfontj2d.properties")) returned 0x20 [0190.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfontj2d.properties")) returned 0x20 [0190.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfontj2d.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0190.547] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfontj2d.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0190.547] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0190.547] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0190.547] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfontj2d.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e8 [0190.548] ReadFile (in: hFile=0x2f0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2899, lpOverlapped=0x0) returned 1 [0190.548] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x28a0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x28a0, lpOverlapped=0x0) returned 1 [0190.550] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x102, lpOverlapped=0x0) returned 1 [0190.550] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0190.550] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0190.550] WriteFile (in: hFile=0x2f0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2899, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2899, lpOverlapped=0x0) returned 1 [0190.550] FlushFileBuffers (hFile=0x2f0) returned 1 [0190.552] FlushFileBuffers (hFile=0x2e8) returned 1 [0190.553] CloseHandle (hObject=0x2f0) returned 1 [0190.554] CloseHandle (hObject=0x2e8) returned 1 [0190.554] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfontj2d.properties")) returned 1 [0190.555] SetEvent (hEvent=0x27c) returned 1 [0190.555] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0190.555] GetFileSizeEx (in: hFile=0x2e8, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3492573) returned 1 [0190.555] CloseHandle (hObject=0x2e8) returned 1 [0190.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar")) returned 0x20 [0190.555] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 1 [0190.556] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0190.556] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fc20 | out: lpNewFilePointer=0x0) returned 1 [0190.556] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fc20 | out: lpNewFilePointer=0x0) returned 1 [0190.556] ReadFile (in: hFile=0x2e8, lpBuffer=0x3b3f058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x378fc2c, lpOverlapped=0x0 | out: lpBuffer=0x3b3f058*, lpNumberOfBytesRead=0x378fc2c*=0x40000, lpOverlapped=0x0) returned 1 [0190.566] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x11c39f, lpNewFilePointer=0x0, dwMoveMethod=0x378fc20 | out: lpNewFilePointer=0x0) returned 1 [0190.566] ReadFile (in: hFile=0x2e8, lpBuffer=0x3b7f058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x378fc2c, lpOverlapped=0x0 | out: lpBuffer=0x3b7f058*, lpNumberOfBytesRead=0x378fc2c*=0x40000, lpOverlapped=0x0) returned 1 [0190.579] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x314add, lpNewFilePointer=0x0, dwMoveMethod=0x378fc20 | out: lpNewFilePointer=0x0) returned 1 [0190.579] ReadFile (in: hFile=0x2e8, lpBuffer=0x3bbf058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x378fc2c, lpOverlapped=0x0 | out: lpBuffer=0x3bbf058*, lpNumberOfBytesRead=0x378fc2c*=0x40000, lpOverlapped=0x0) returned 1 [0190.600] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd90 | out: lpNewFilePointer=0x0) returned 1 [0190.600] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xc0112, lpNumberOfBytesWritten=0x378fd88, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd88*=0xc0112, lpOverlapped=0x0) returned 1 [0190.856] SetEndOfFile (hFile=0x2e8) returned 1 [0190.856] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x314add, lpNewFilePointer=0x0, dwMoveMethod=0x378fc28 | out: lpNewFilePointer=0x0) returned 1 [0190.856] WriteFile (in: hFile=0x2e8, lpBuffer=0x3bff14a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x378fc34, lpOverlapped=0x0 | out: lpBuffer=0x3bff14a*, lpNumberOfBytesWritten=0x378fc34*=0x40000, lpOverlapped=0x0) returned 1 [0190.858] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x11c39f, lpNewFilePointer=0x0, dwMoveMethod=0x378fc28 | out: lpNewFilePointer=0x0) returned 1 [0190.858] WriteFile (in: hFile=0x2e8, lpBuffer=0x3bff14a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x378fc34, lpOverlapped=0x0 | out: lpBuffer=0x3bff14a*, lpNumberOfBytesWritten=0x378fc34*=0x40000, lpOverlapped=0x0) returned 1 [0190.860] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fc28 | out: lpNewFilePointer=0x0) returned 1 [0190.860] WriteFile (in: hFile=0x2e8, lpBuffer=0x3bff14a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x378fc34, lpOverlapped=0x0 | out: lpBuffer=0x3bff14a*, lpNumberOfBytesWritten=0x378fc34*=0x40000, lpOverlapped=0x0) returned 1 [0190.862] FlushFileBuffers (hFile=0x2e8) returned 1 [0191.127] CloseHandle (hObject=0x2e8) returned 1 [0191.128] SetEvent (hEvent=0x27c) returned 1 [0191.128] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0191.128] GetFileSizeEx (in: hFile=0x2e8, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=4054) returned 1 [0191.128] CloseHandle (hObject=0x2e8) returned 1 [0191.128] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist")) returned 0x20 [0191.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist")) returned 0x20 [0191.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0191.129] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0191.129] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0191.129] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0191.130] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d4 [0191.130] ReadFile (in: hFile=0x2e8, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xfd6, lpOverlapped=0x0) returned 1 [0191.131] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xfe0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xfe0, lpOverlapped=0x0) returned 1 [0191.132] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0191.132] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0191.133] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0191.133] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xfd6, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xfd6, lpOverlapped=0x0) returned 1 [0191.133] FlushFileBuffers (hFile=0x2e8) returned 1 [0191.136] FlushFileBuffers (hFile=0x2d4) returned 1 [0191.138] CloseHandle (hObject=0x2e8) returned 1 [0191.138] CloseHandle (hObject=0x2d4) returned 1 [0191.138] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist")) returned 1 [0191.139] SetEvent (hEvent=0x27c) returned 1 [0191.140] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklisted.certs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0191.140] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1253) returned 1 [0191.140] CloseHandle (hObject=0x2d4) returned 1 [0191.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklisted.certs")) returned 0x20 [0191.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklisted.certs")) returned 0x20 [0191.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklisted.certs.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0191.140] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklisted.certs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0191.140] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0191.140] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0191.141] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklisted.certs.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e8 [0191.141] ReadFile (in: hFile=0x2d4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4e5, lpOverlapped=0x0) returned 1 [0191.142] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4f0, lpOverlapped=0x0) returned 1 [0191.143] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x102, lpOverlapped=0x0) returned 1 [0191.143] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0191.144] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0191.144] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4e5, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4e5, lpOverlapped=0x0) returned 1 [0191.144] FlushFileBuffers (hFile=0x2d4) returned 1 [0191.195] FlushFileBuffers (hFile=0x2e8) returned 1 [0191.197] CloseHandle (hObject=0x2d4) returned 1 [0191.197] CloseHandle (hObject=0x2e8) returned 1 [0191.197] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklisted.certs")) returned 1 [0191.199] SetEvent (hEvent=0x27c) returned 1 [0191.199] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0191.199] GetFileSizeEx (in: hFile=0x2e8, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=114923) returned 1 [0191.199] CloseHandle (hObject=0x2e8) returned 1 [0191.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts")) returned 0x20 [0191.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts")) returned 0x20 [0191.200] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0191.200] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0191.200] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0191.200] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0191.200] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d4 [0191.200] ReadFile (in: hFile=0x2e8, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1c0eb, lpOverlapped=0x0) returned 1 [0191.203] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1c0f0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1c0f0, lpOverlapped=0x0) returned 1 [0191.208] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xe2, lpOverlapped=0x0) returned 1 [0191.209] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0191.209] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0191.209] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1c0eb, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1c0eb, lpOverlapped=0x0) returned 1 [0191.209] FlushFileBuffers (hFile=0x2e8) returned 1 [0191.216] FlushFileBuffers (hFile=0x2d4) returned 1 [0191.220] CloseHandle (hObject=0x2e8) returned 1 [0191.220] CloseHandle (hObject=0x2d4) returned 1 [0191.225] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts")) returned 1 [0191.226] SetEvent (hEvent=0x27c) returned 1 [0191.226] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.policy"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0191.227] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2466) returned 1 [0191.227] CloseHandle (hObject=0x2d4) returned 1 [0191.227] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.policy")) returned 0x20 [0191.227] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.policy")) returned 0x20 [0191.227] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.policy.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0191.227] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.policy"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0191.227] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0191.227] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0191.227] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.policy.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e8 [0191.228] ReadFile (in: hFile=0x2d4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x9a2, lpOverlapped=0x0) returned 1 [0191.229] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x9b0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x9b0, lpOverlapped=0x0) returned 1 [0191.230] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0191.230] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0191.230] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0191.230] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x9a2, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x9a2, lpOverlapped=0x0) returned 1 [0191.230] FlushFileBuffers (hFile=0x2d4) returned 1 [0191.240] FlushFileBuffers (hFile=0x2e8) returned 1 [0191.241] CloseHandle (hObject=0x2d4) returned 1 [0191.241] CloseHandle (hObject=0x2e8) returned 1 [0191.241] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.policy")) returned 1 [0191.242] SetEvent (hEvent=0x27c) returned 1 [0191.242] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\javaws.policy"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0191.243] GetFileSizeEx (in: hFile=0x2e8, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=98) returned 1 [0191.243] CloseHandle (hObject=0x2e8) returned 1 [0191.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\javaws.policy")) returned 0x20 [0191.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\javaws.policy")) returned 0x20 [0191.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\javaws.policy.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0191.243] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\javaws.policy"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0191.243] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0191.243] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0191.243] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\javaws.policy.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d4 [0191.243] ReadFile (in: hFile=0x2e8, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x62, lpOverlapped=0x0) returned 1 [0191.244] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x70, lpOverlapped=0x0) returned 1 [0191.245] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0191.246] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0191.246] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0191.246] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x62, lpOverlapped=0x0) returned 1 [0191.246] FlushFileBuffers (hFile=0x2e8) returned 1 [0191.248] FlushFileBuffers (hFile=0x2d4) returned 1 [0191.250] CloseHandle (hObject=0x2e8) returned 1 [0191.250] CloseHandle (hObject=0x2d4) returned 1 [0191.250] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\javaws.policy")) returned 1 [0191.251] SetEvent (hEvent=0x27c) returned 1 [0191.251] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0191.251] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3527) returned 1 [0191.251] CloseHandle (hObject=0x2d4) returned 1 [0191.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar")) returned 0x20 [0191.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar")) returned 0x20 [0191.252] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0191.252] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0191.252] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0191.252] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0191.252] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e8 [0191.252] ReadFile (in: hFile=0x2d4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xdc7, lpOverlapped=0x0) returned 1 [0191.253] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xdd0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xdd0, lpOverlapped=0x0) returned 1 [0191.254] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x102, lpOverlapped=0x0) returned 1 [0191.254] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0191.254] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0191.254] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xdc7, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xdc7, lpOverlapped=0x0) returned 1 [0191.254] FlushFileBuffers (hFile=0x2d4) returned 1 [0191.259] FlushFileBuffers (hFile=0x2e8) returned 1 [0191.261] CloseHandle (hObject=0x2d4) returned 1 [0191.261] CloseHandle (hObject=0x2e8) returned 1 [0191.261] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar")) returned 1 [0191.262] SetEvent (hEvent=0x27c) returned 1 [0191.262] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\trusted.libraries" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\trusted.libraries"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0191.262] GetFileSizeEx (in: hFile=0x2e8, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=0) returned 1 [0191.263] CloseHandle (hObject=0x2e8) returned 1 [0191.263] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0191.263] GetFileSizeEx (in: hFile=0x2e8, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3026) returned 1 [0191.263] CloseHandle (hObject=0x2e8) returned 1 [0191.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar")) returned 0x20 [0191.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar")) returned 0x20 [0191.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0191.263] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0191.263] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0191.263] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0191.263] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d4 [0191.264] ReadFile (in: hFile=0x2e8, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xbd2, lpOverlapped=0x0) returned 1 [0191.265] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xbe0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xbe0, lpOverlapped=0x0) returned 1 [0191.266] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x102, lpOverlapped=0x0) returned 1 [0191.266] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0191.266] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0191.266] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xbd2, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xbd2, lpOverlapped=0x0) returned 1 [0191.266] FlushFileBuffers (hFile=0x2e8) returned 1 [0191.269] FlushFileBuffers (hFile=0x2d4) returned 1 [0191.271] CloseHandle (hObject=0x2e8) returned 1 [0191.271] CloseHandle (hObject=0x2d4) returned 1 [0191.271] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar")) returned 1 [0191.272] SetEvent (hEvent=0x27c) returned 1 [0191.272] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\sound.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0191.272] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1210) returned 1 [0191.272] CloseHandle (hObject=0x2d4) returned 1 [0191.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\sound.properties")) returned 0x20 [0191.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\sound.properties")) returned 0x20 [0191.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\sound.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0191.272] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\sound.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0191.273] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0191.273] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0191.273] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\sound.properties.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e8 [0191.273] ReadFile (in: hFile=0x2d4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4ba, lpOverlapped=0x0) returned 1 [0191.274] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4c0, lpOverlapped=0x0) returned 1 [0191.275] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x102, lpOverlapped=0x0) returned 1 [0191.275] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0191.275] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0191.275] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4ba, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4ba, lpOverlapped=0x0) returned 1 [0191.276] FlushFileBuffers (hFile=0x2d4) returned 1 [0191.280] FlushFileBuffers (hFile=0x2e8) returned 1 [0191.281] CloseHandle (hObject=0x2d4) returned 1 [0191.282] CloseHandle (hObject=0x2e8) returned 1 [0191.282] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\sound.properties")) returned 1 [0191.283] SetEvent (hEvent=0x27c) returned 1 [0191.283] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0191.283] GetFileSizeEx (in: hFile=0x2e8, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=105500) returned 1 [0191.283] CloseHandle (hObject=0x2e8) returned 1 [0191.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat")) returned 0x20 [0191.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat")) returned 0x20 [0191.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0191.283] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0191.283] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0191.283] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0191.284] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d4 [0191.284] ReadFile (in: hFile=0x2e8, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x19c1c, lpOverlapped=0x0) returned 1 [0191.286] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x19c20, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x19c20, lpOverlapped=0x0) returned 1 [0191.289] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0191.289] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0191.289] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0191.289] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x19c1c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x19c1c, lpOverlapped=0x0) returned 1 [0191.290] FlushFileBuffers (hFile=0x2e8) returned 1 [0191.474] FlushFileBuffers (hFile=0x2d4) returned 1 [0191.491] CloseHandle (hObject=0x2e8) returned 1 [0191.491] CloseHandle (hObject=0x2d4) returned 1 [0191.491] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat")) returned 1 [0191.493] SetEvent (hEvent=0x27c) returned 1 [0191.493] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0191.493] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=8400) returned 1 [0191.493] CloseHandle (hObject=0x2d4) returned 1 [0191.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings")) returned 0x20 [0191.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings")) returned 0x20 [0191.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0191.494] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0191.494] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0191.494] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0191.494] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e8 [0191.494] ReadFile (in: hFile=0x2d4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x20d0, lpOverlapped=0x0) returned 1 [0191.496] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x20e0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x20e0, lpOverlapped=0x0) returned 1 [0191.497] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0191.497] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0191.497] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0191.497] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x20d0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x20d0, lpOverlapped=0x0) returned 1 [0191.497] FlushFileBuffers (hFile=0x2d4) returned 1 [0191.513] FlushFileBuffers (hFile=0x2e8) returned 1 [0191.520] CloseHandle (hObject=0x2d4) returned 1 [0191.520] CloseHandle (hObject=0x2e8) returned 1 [0191.520] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings")) returned 1 [0191.521] SetEvent (hEvent=0x27c) returned 1 [0191.521] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0191.521] GetFileSizeEx (in: hFile=0x2e8, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=46) returned 1 [0191.521] CloseHandle (hObject=0x2e8) returned 1 [0191.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt")) returned 0x20 [0191.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt")) returned 0x20 [0191.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\README.txt.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0191.522] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0191.522] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0191.522] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0191.522] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\README.txt.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d4 [0191.522] ReadFile (in: hFile=0x2e8, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2e, lpOverlapped=0x0) returned 1 [0191.523] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x30, lpOverlapped=0x0) returned 1 [0191.524] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0191.524] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0191.524] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0191.524] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2e, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2e, lpOverlapped=0x0) returned 1 [0191.524] FlushFileBuffers (hFile=0x2e8) returned 1 [0191.535] FlushFileBuffers (hFile=0x2d4) returned 1 [0191.556] CloseHandle (hObject=0x2e8) returned 1 [0191.556] CloseHandle (hObject=0x2d4) returned 1 [0191.556] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt")) returned 1 [0191.557] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0191.557] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=145180) returned 1 [0191.557] CloseHandle (hObject=0x2d4) returned 1 [0191.557] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt")) returned 0x20 [0191.557] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt")) returned 0x20 [0191.557] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0191.558] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0191.558] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0191.558] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0191.558] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e8 [0191.558] ReadFile (in: hFile=0x2d4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2371c, lpOverlapped=0x0) returned 1 [0191.561] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x23720, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x23720, lpOverlapped=0x0) returned 1 [0191.564] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x112, lpOverlapped=0x0) returned 1 [0191.564] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0191.564] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0191.565] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2371c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2371c, lpOverlapped=0x0) returned 1 [0191.565] FlushFileBuffers (hFile=0x2d4) returned 1 [0191.739] FlushFileBuffers (hFile=0x2e8) returned 1 [0191.741] CloseHandle (hObject=0x2d4) returned 1 [0191.741] CloseHandle (hObject=0x2e8) returned 1 [0191.742] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt")) returned 1 [0191.744] SetEvent (hEvent=0x27c) returned 1 [0191.744] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0191.744] GetFileSizeEx (in: hFile=0x2e8, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=955) returned 1 [0191.744] CloseHandle (hObject=0x2e8) returned 1 [0191.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html")) returned 0x20 [0191.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html")) returned 0x20 [0191.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0191.745] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0191.745] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0191.745] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0191.745] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d4 [0191.746] ReadFile (in: hFile=0x2e8, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x3bb, lpOverlapped=0x0) returned 1 [0191.746] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x3c0, lpOverlapped=0x0) returned 1 [0191.747] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0191.748] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0191.748] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0191.748] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3bb, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x3bb, lpOverlapped=0x0) returned 1 [0191.748] FlushFileBuffers (hFile=0x2e8) returned 1 [0191.809] FlushFileBuffers (hFile=0x2d4) returned 1 [0191.817] CloseHandle (hObject=0x2e8) returned 1 [0191.818] CloseHandle (hObject=0x2d4) returned 1 [0191.818] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html")) returned 1 [0191.820] SetEvent (hEvent=0x27c) returned 1 [0191.820] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0191.820] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=281) returned 1 [0191.820] CloseHandle (hObject=0x2d4) returned 1 [0191.820] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml")) returned 0x220 [0191.820] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml")) returned 0x220 [0191.821] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0191.821] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0191.821] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0191.821] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0191.821] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2e8 [0191.822] ReadFile (in: hFile=0x2d4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x119, lpOverlapped=0x0) returned 1 [0191.823] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x120, lpOverlapped=0x0) returned 1 [0191.833] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x102, lpOverlapped=0x0) returned 1 [0191.834] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0191.834] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0191.834] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x119, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x119, lpOverlapped=0x0) returned 1 [0191.834] FlushFileBuffers (hFile=0x2d4) returned 1 [0191.839] FlushFileBuffers (hFile=0x2e8) returned 1 [0191.841] CloseHandle (hObject=0x2d4) returned 1 [0191.841] CloseHandle (hObject=0x2e8) returned 1 [0191.841] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml")) returned 1 [0191.842] SetEvent (hEvent=0x27c) returned 1 [0191.842] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0191.842] GetFileSizeEx (in: hFile=0x2e8, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=174528) returned 1 [0191.842] CloseHandle (hObject=0x2e8) returned 1 [0191.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm")) returned 0x20 [0191.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm")) returned 0x20 [0191.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0191.843] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0191.843] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0191.843] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0191.843] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d4 [0191.845] ReadFile (in: hFile=0x2e8, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2a9c0, lpOverlapped=0x0) returned 1 [0191.848] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2a9d0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2a9d0, lpOverlapped=0x0) returned 1 [0191.852] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0191.852] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0191.852] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0191.852] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2a9c0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2a9c0, lpOverlapped=0x0) returned 1 [0191.853] FlushFileBuffers (hFile=0x2e8) returned 1 [0192.394] FlushFileBuffers (hFile=0x2d4) returned 1 [0192.410] CloseHandle (hObject=0x2e8) returned 1 [0192.410] CloseHandle (hObject=0x2d4) returned 1 [0192.410] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm")) returned 1 [0192.412] SetEvent (hEvent=0x27c) returned 1 [0192.412] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE" (normalized: "c:\\program files\\microsoft office\\office16\\ospprearm.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0192.413] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=27200) returned 1 [0192.413] CloseHandle (hObject=0x2d4) returned 1 [0192.413] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE" (normalized: "c:\\program files\\microsoft office\\office16\\ospprearm.exe")) returned 0x20 [0192.413] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE" (normalized: "c:\\program files\\microsoft office\\office16\\ospprearm.exe")) returned 0x20 [0192.413] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\office16\\ospprearm.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0192.413] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE" (normalized: "c:\\program files\\microsoft office\\office16\\ospprearm.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0192.413] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0192.413] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0192.413] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\office16\\ospprearm.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e8 [0192.414] ReadFile (in: hFile=0x2d4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x6a40, lpOverlapped=0x0) returned 1 [0192.417] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x6a50, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x6a50, lpOverlapped=0x0) returned 1 [0192.419] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0192.419] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0192.419] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0192.419] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x6a40, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x6a40, lpOverlapped=0x0) returned 1 [0192.419] FlushFileBuffers (hFile=0x2d4) returned 1 [0192.435] FlushFileBuffers (hFile=0x2e8) returned 1 [0192.440] CloseHandle (hObject=0x2d4) returned 1 [0192.440] CloseHandle (hObject=0x2e8) returned 1 [0192.441] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE" (normalized: "c:\\program files\\microsoft office\\office16\\ospprearm.exe")) returned 1 [0192.442] SetEvent (hEvent=0x27c) returned 1 [0192.442] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0192.442] GetFileSizeEx (in: hFile=0x2e8, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=36336) returned 1 [0192.442] CloseHandle (hObject=0x2e8) returned 1 [0192.442] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml")) returned 0x20 [0192.442] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml")) returned 0x20 [0192.442] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0192.442] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0192.442] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0192.443] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0192.443] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d4 [0192.443] ReadFile (in: hFile=0x2e8, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x8df0, lpOverlapped=0x0) returned 1 [0192.444] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x8e00, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x8e00, lpOverlapped=0x0) returned 1 [0192.446] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0192.446] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0192.446] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0192.446] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x8df0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x8df0, lpOverlapped=0x0) returned 1 [0192.446] FlushFileBuffers (hFile=0x2e8) returned 1 [0192.458] FlushFileBuffers (hFile=0x2d4) returned 1 [0192.462] CloseHandle (hObject=0x2e8) returned 1 [0192.462] CloseHandle (hObject=0x2d4) returned 1 [0192.463] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml")) returned 1 [0192.464] SetEvent (hEvent=0x27c) returned 1 [0192.464] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0192.464] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=387356) returned 1 [0192.464] CloseHandle (hObject=0x2d4) returned 1 [0192.464] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml")) returned 0x220 [0192.464] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml")) returned 0x220 [0192.464] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0192.465] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0192.465] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0192.465] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0192.465] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2e8 [0192.465] ReadFile (in: hFile=0x2d4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x5e91c, lpOverlapped=0x0) returned 1 [0192.472] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5e920, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x5e920, lpOverlapped=0x0) returned 1 [0192.479] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x142, lpOverlapped=0x0) returned 1 [0192.479] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0192.479] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0192.479] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5e91c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x5e91c, lpOverlapped=0x0) returned 1 [0192.480] FlushFileBuffers (hFile=0x2d4) returned 1 [0192.775] FlushFileBuffers (hFile=0x2e8) returned 1 [0192.777] CloseHandle (hObject=0x2d4) returned 1 [0192.777] CloseHandle (hObject=0x2e8) returned 1 [0192.777] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml")) returned 1 [0192.781] SetEvent (hEvent=0x27c) returned 1 [0192.781] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0192.782] GetFileSizeEx (in: hFile=0x2e8, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1261) returned 1 [0192.782] CloseHandle (hObject=0x2e8) returned 1 [0192.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml")) returned 0x220 [0192.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml")) returned 0x220 [0192.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0192.782] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0192.782] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0192.782] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0192.782] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2d4 [0192.783] ReadFile (in: hFile=0x2e8, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4ed, lpOverlapped=0x0) returned 1 [0192.784] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4f0, lpOverlapped=0x0) returned 1 [0192.784] WriteFile (in: hFile=0x2d4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x142, lpOverlapped=0x0) returned 1 [0192.785] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0192.785] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0192.785] WriteFile (in: hFile=0x2e8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4ed, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4ed, lpOverlapped=0x0) returned 1 [0192.785] FlushFileBuffers (hFile=0x2e8) returned 1 [0192.790] FlushFileBuffers (hFile=0x2d4) returned 1 [0192.792] CloseHandle (hObject=0x2e8) returned 1 [0192.793] CloseHandle (hObject=0x2d4) returned 1 [0192.793] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml")) returned 1 [0192.794] SetEvent (hEvent=0x27c) returned 1 [0192.795] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0192.795] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=496513) returned 1 [0192.795] CloseHandle (hObject=0x2f8) returned 1 [0192.795] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml")) returned 0x220 [0192.795] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml")) returned 0x220 [0192.795] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0192.795] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0192.795] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0192.795] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0192.795] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0192.800] ReadFile (in: hFile=0x2f8, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x79381, lpOverlapped=0x0) returned 1 [0192.809] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x79390, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x79390, lpOverlapped=0x0) returned 1 [0192.817] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x142, lpOverlapped=0x0) returned 1 [0192.817] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0192.817] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0192.818] WriteFile (in: hFile=0x2f8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x79381, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x79381, lpOverlapped=0x0) returned 1 [0192.819] FlushFileBuffers (hFile=0x2f8) returned 1 [0193.144] FlushFileBuffers (hFile=0x2f4) returned 1 [0193.162] CloseHandle (hObject=0x2f8) returned 1 [0193.163] CloseHandle (hObject=0x2f4) returned 1 [0193.164] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml")) returned 1 [0193.169] SetEvent (hEvent=0x27c) returned 1 [0193.169] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0193.169] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1261) returned 1 [0193.169] CloseHandle (hObject=0x2f4) returned 1 [0193.169] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml")) returned 0x220 [0193.169] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml")) returned 0x220 [0193.169] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0193.170] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0193.170] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0193.170] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0193.170] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f8 [0193.171] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4ed, lpOverlapped=0x0) returned 1 [0193.175] WriteFile (in: hFile=0x2f8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4f0, lpOverlapped=0x0) returned 1 [0193.176] WriteFile (in: hFile=0x2f8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x142, lpOverlapped=0x0) returned 1 [0193.176] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0193.176] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0193.176] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4ed, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4ed, lpOverlapped=0x0) returned 1 [0193.176] FlushFileBuffers (hFile=0x2f4) returned 1 [0193.180] FlushFileBuffers (hFile=0x2f8) returned 1 [0193.182] CloseHandle (hObject=0x2f4) returned 1 [0193.182] CloseHandle (hObject=0x2f8) returned 1 [0193.183] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml")) returned 1 [0193.187] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0193.187] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=19451) returned 1 [0193.187] CloseHandle (hObject=0x2f8) returned 1 [0193.187] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml")) returned 0x220 [0193.187] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml")) returned 0x220 [0193.187] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0193.187] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0193.188] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0193.188] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0193.188] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0193.190] ReadFile (in: hFile=0x2f8, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4bfb, lpOverlapped=0x0) returned 1 [0193.191] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4c00, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4c00, lpOverlapped=0x0) returned 1 [0193.192] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x142, lpOverlapped=0x0) returned 1 [0193.192] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0193.192] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0193.192] WriteFile (in: hFile=0x2f8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4bfb, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4bfb, lpOverlapped=0x0) returned 1 [0193.193] FlushFileBuffers (hFile=0x2f8) returned 1 [0193.231] FlushFileBuffers (hFile=0x2f4) returned 1 [0193.232] CloseHandle (hObject=0x2f8) returned 1 [0193.232] CloseHandle (hObject=0x2f4) returned 1 [0193.232] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml")) returned 1 [0193.234] SetEvent (hEvent=0x27c) returned 1 [0193.234] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0193.234] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=763363) returned 1 [0193.234] CloseHandle (hObject=0x2f4) returned 1 [0193.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml")) returned 0x220 [0193.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml")) returned 0x220 [0193.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0193.234] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0193.234] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0193.235] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0193.235] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f8 [0193.235] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xba5e3, lpOverlapped=0x0) returned 1 [0193.248] WriteFile (in: hFile=0x2f8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xba5f0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xba5f0, lpOverlapped=0x0) returned 1 [0193.262] WriteFile (in: hFile=0x2f8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x142, lpOverlapped=0x0) returned 1 [0193.262] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0193.262] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0193.262] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xba5e3, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xba5e3, lpOverlapped=0x0) returned 1 [0193.264] FlushFileBuffers (hFile=0x2f4) returned 1 [0193.601] FlushFileBuffers (hFile=0x2f8) returned 1 [0193.604] CloseHandle (hObject=0x2f4) returned 1 [0193.604] CloseHandle (hObject=0x2f8) returned 1 [0193.604] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml")) returned 1 [0193.611] SetEvent (hEvent=0x27c) returned 1 [0193.611] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0193.611] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1261) returned 1 [0193.611] CloseHandle (hObject=0x2f8) returned 1 [0193.611] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml")) returned 0x220 [0193.611] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml")) returned 0x220 [0193.611] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0193.612] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0193.612] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0193.612] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0193.612] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0193.612] ReadFile (in: hFile=0x2f8, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4ed, lpOverlapped=0x0) returned 1 [0193.613] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4f0, lpOverlapped=0x0) returned 1 [0193.614] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x142, lpOverlapped=0x0) returned 1 [0193.614] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0193.615] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0193.615] WriteFile (in: hFile=0x2f8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4ed, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4ed, lpOverlapped=0x0) returned 1 [0193.615] FlushFileBuffers (hFile=0x2f8) returned 1 [0193.619] FlushFileBuffers (hFile=0x2f4) returned 1 [0193.620] CloseHandle (hObject=0x2f8) returned 1 [0193.620] CloseHandle (hObject=0x2f4) returned 1 [0193.620] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml")) returned 1 [0193.621] SetEvent (hEvent=0x27c) returned 1 [0193.621] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0193.622] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1261) returned 1 [0193.622] CloseHandle (hObject=0x2f4) returned 1 [0193.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml")) returned 0x220 [0193.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml")) returned 0x220 [0193.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0193.622] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0193.622] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0193.622] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0193.622] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f8 [0193.632] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4ed, lpOverlapped=0x0) returned 1 [0193.633] WriteFile (in: hFile=0x2f8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4f0, lpOverlapped=0x0) returned 1 [0193.634] WriteFile (in: hFile=0x2f8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x142, lpOverlapped=0x0) returned 1 [0193.634] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0193.634] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0193.634] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4ed, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4ed, lpOverlapped=0x0) returned 1 [0193.634] FlushFileBuffers (hFile=0x2f4) returned 1 [0193.637] FlushFileBuffers (hFile=0x2f8) returned 1 [0193.638] CloseHandle (hObject=0x2f4) returned 1 [0193.639] CloseHandle (hObject=0x2f8) returned 1 [0193.639] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml")) returned 1 [0193.640] SetEvent (hEvent=0x27c) returned 1 [0193.640] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0193.640] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2147) returned 1 [0193.640] CloseHandle (hObject=0x2f8) returned 1 [0193.640] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml")) returned 0x220 [0193.640] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml")) returned 0x220 [0193.640] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0193.640] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0193.641] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0193.641] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0193.641] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0193.641] ReadFile (in: hFile=0x2f8, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x863, lpOverlapped=0x0) returned 1 [0193.642] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x870, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x870, lpOverlapped=0x0) returned 1 [0193.643] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x142, lpOverlapped=0x0) returned 1 [0193.643] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0193.643] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0193.643] WriteFile (in: hFile=0x2f8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x863, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x863, lpOverlapped=0x0) returned 1 [0193.644] FlushFileBuffers (hFile=0x2f8) returned 1 [0193.645] FlushFileBuffers (hFile=0x2f4) returned 1 [0193.647] CloseHandle (hObject=0x2f8) returned 1 [0193.647] CloseHandle (hObject=0x2f4) returned 1 [0193.647] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml")) returned 1 [0193.648] SetEvent (hEvent=0x27c) returned 1 [0193.648] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0193.648] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2147) returned 1 [0193.648] CloseHandle (hObject=0x2f4) returned 1 [0193.648] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml")) returned 0x220 [0193.648] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml")) returned 0x220 [0193.648] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0193.648] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0193.649] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0193.649] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0193.649] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f8 [0193.912] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x863, lpOverlapped=0x0) returned 1 [0193.912] WriteFile (in: hFile=0x2f8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x870, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x870, lpOverlapped=0x0) returned 1 [0193.913] WriteFile (in: hFile=0x2f8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x142, lpOverlapped=0x0) returned 1 [0193.914] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0193.914] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0193.914] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x863, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x863, lpOverlapped=0x0) returned 1 [0193.914] FlushFileBuffers (hFile=0x2f4) returned 1 [0193.918] FlushFileBuffers (hFile=0x2f8) returned 1 [0193.946] CloseHandle (hObject=0x2f4) returned 1 [0193.947] CloseHandle (hObject=0x2f8) returned 1 [0193.947] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml")) returned 1 [0193.948] SetEvent (hEvent=0x27c) returned 1 [0193.948] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0193.949] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1261) returned 1 [0193.949] CloseHandle (hObject=0x2f8) returned 1 [0193.949] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml")) returned 0x220 [0193.949] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml")) returned 0x220 [0193.949] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0193.949] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0193.950] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0193.950] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0193.950] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0193.951] ReadFile (in: hFile=0x2f8, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4ed, lpOverlapped=0x0) returned 1 [0193.952] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4f0, lpOverlapped=0x0) returned 1 [0193.953] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x142, lpOverlapped=0x0) returned 1 [0193.954] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0193.954] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0193.954] WriteFile (in: hFile=0x2f8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4ed, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4ed, lpOverlapped=0x0) returned 1 [0193.954] FlushFileBuffers (hFile=0x2f8) returned 1 [0193.958] FlushFileBuffers (hFile=0x2f4) returned 1 [0193.971] CloseHandle (hObject=0x2f8) returned 1 [0193.971] CloseHandle (hObject=0x2f4) returned 1 [0193.971] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml")) returned 1 [0193.972] SetEvent (hEvent=0x27c) returned 1 [0193.972] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0193.973] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=343329) returned 1 [0193.973] CloseHandle (hObject=0x2f4) returned 1 [0193.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml")) returned 0x220 [0193.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml")) returned 0x220 [0193.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0193.973] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0193.973] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0193.974] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0193.974] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f8 [0193.974] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x53d21, lpOverlapped=0x0) returned 1 [0193.992] WriteFile (in: hFile=0x2f8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x53d30, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x53d30, lpOverlapped=0x0) returned 1 [0194.000] WriteFile (in: hFile=0x2f8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x142, lpOverlapped=0x0) returned 1 [0194.000] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0194.000] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0194.000] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x53d21, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x53d21, lpOverlapped=0x0) returned 1 [0194.002] FlushFileBuffers (hFile=0x2f4) returned 1 [0194.010] FlushFileBuffers (hFile=0x2f8) returned 1 [0194.024] CloseHandle (hObject=0x2f4) returned 1 [0194.024] CloseHandle (hObject=0x2f8) returned 1 [0194.024] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml")) returned 1 [0194.029] SetEvent (hEvent=0x27c) returned 1 [0194.029] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0194.029] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=357349) returned 1 [0194.029] CloseHandle (hObject=0x2f8) returned 1 [0194.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml")) returned 0x220 [0194.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml")) returned 0x220 [0194.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0194.030] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0194.030] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0194.030] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0194.030] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0194.031] ReadFile (in: hFile=0x2f8, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x573e5, lpOverlapped=0x0) returned 1 [0194.039] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x573f0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x573f0, lpOverlapped=0x0) returned 1 [0194.046] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x142, lpOverlapped=0x0) returned 1 [0194.047] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0194.047] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0194.047] WriteFile (in: hFile=0x2f8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x573e5, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x573e5, lpOverlapped=0x0) returned 1 [0194.048] FlushFileBuffers (hFile=0x2f8) returned 1 [0194.424] FlushFileBuffers (hFile=0x2f4) returned 1 [0194.437] CloseHandle (hObject=0x2f8) returned 1 [0194.437] CloseHandle (hObject=0x2f4) returned 1 [0194.437] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml")) returned 1 [0194.442] SetEvent (hEvent=0x27c) returned 1 [0194.442] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0194.442] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1261) returned 1 [0194.442] CloseHandle (hObject=0x2f4) returned 1 [0194.442] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml")) returned 0x220 [0194.442] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml")) returned 0x220 [0194.442] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0194.443] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0194.443] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0194.443] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0194.443] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f8 [0194.444] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4ed, lpOverlapped=0x0) returned 1 [0194.445] WriteFile (in: hFile=0x2f8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4f0, lpOverlapped=0x0) returned 1 [0194.446] WriteFile (in: hFile=0x2f8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x142, lpOverlapped=0x0) returned 1 [0194.446] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0194.446] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0194.446] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4ed, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4ed, lpOverlapped=0x0) returned 1 [0194.446] FlushFileBuffers (hFile=0x2f4) returned 1 [0194.502] FlushFileBuffers (hFile=0x2f8) returned 1 [0194.529] CloseHandle (hObject=0x2f4) returned 1 [0194.529] CloseHandle (hObject=0x2f8) returned 1 [0194.541] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml")) returned 1 [0194.560] SetEvent (hEvent=0x27c) returned 1 [0194.560] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0194.560] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1261) returned 1 [0194.560] CloseHandle (hObject=0x2f8) returned 1 [0194.560] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml")) returned 0x220 [0194.560] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml")) returned 0x220 [0194.560] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0194.560] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0194.561] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0194.561] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0194.561] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0194.561] ReadFile (in: hFile=0x2f8, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4ed, lpOverlapped=0x0) returned 1 [0194.562] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4f0, lpOverlapped=0x0) returned 1 [0194.563] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x142, lpOverlapped=0x0) returned 1 [0194.563] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0194.563] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0194.563] WriteFile (in: hFile=0x2f8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4ed, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4ed, lpOverlapped=0x0) returned 1 [0194.564] FlushFileBuffers (hFile=0x2f8) returned 1 [0194.925] FlushFileBuffers (hFile=0x2f4) returned 1 [0194.927] CloseHandle (hObject=0x2f8) returned 1 [0194.927] CloseHandle (hObject=0x2f4) returned 1 [0194.928] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml")) returned 1 [0194.929] SetEvent (hEvent=0x27c) returned 1 [0194.929] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0194.930] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=9216) returned 1 [0194.930] CloseHandle (hObject=0x2f4) returned 1 [0194.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml")) returned 0x220 [0194.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml")) returned 0x220 [0194.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0194.930] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0194.930] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0194.930] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0194.930] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f8 [0194.931] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2400, lpOverlapped=0x0) returned 1 [0194.932] WriteFile (in: hFile=0x2f8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2410, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2410, lpOverlapped=0x0) returned 1 [0194.933] WriteFile (in: hFile=0x2f8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x142, lpOverlapped=0x0) returned 1 [0194.933] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0194.933] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0194.933] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2400, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2400, lpOverlapped=0x0) returned 1 [0194.934] FlushFileBuffers (hFile=0x2f4) returned 1 [0194.936] FlushFileBuffers (hFile=0x2f8) returned 1 [0194.937] CloseHandle (hObject=0x2f4) returned 1 [0194.937] CloseHandle (hObject=0x2f8) returned 1 [0194.938] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml")) returned 1 [0194.939] SetEvent (hEvent=0x27c) returned 1 [0194.939] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0194.939] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1261) returned 1 [0194.939] CloseHandle (hObject=0x2f8) returned 1 [0194.939] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml")) returned 0x220 [0194.939] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml")) returned 0x220 [0194.939] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0194.939] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0194.939] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0194.940] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0194.940] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0194.941] ReadFile (in: hFile=0x2f8, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4ed, lpOverlapped=0x0) returned 1 [0194.942] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4f0, lpOverlapped=0x0) returned 1 [0194.943] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x142, lpOverlapped=0x0) returned 1 [0194.943] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0194.944] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0194.944] WriteFile (in: hFile=0x2f8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4ed, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4ed, lpOverlapped=0x0) returned 1 [0194.944] FlushFileBuffers (hFile=0x2f8) returned 1 [0194.946] FlushFileBuffers (hFile=0x2f4) returned 1 [0194.948] CloseHandle (hObject=0x2f8) returned 1 [0194.948] CloseHandle (hObject=0x2f4) returned 1 [0194.948] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml")) returned 1 [0194.949] SetEvent (hEvent=0x27c) returned 1 [0194.949] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0194.950] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=399528) returned 1 [0194.950] CloseHandle (hObject=0x2f4) returned 1 [0194.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml")) returned 0x220 [0194.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml")) returned 0x220 [0194.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0194.950] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0194.950] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0194.950] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0194.950] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f8 [0194.951] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x618a8, lpOverlapped=0x0) returned 1 [0194.958] WriteFile (in: hFile=0x2f8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x618b0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x618b0, lpOverlapped=0x0) returned 1 [0194.966] WriteFile (in: hFile=0x2f8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x142, lpOverlapped=0x0) returned 1 [0194.966] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0194.966] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0194.966] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x618a8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x618a8, lpOverlapped=0x0) returned 1 [0194.967] FlushFileBuffers (hFile=0x2f4) returned 1 [0194.971] FlushFileBuffers (hFile=0x2f8) returned 1 [0194.973] CloseHandle (hObject=0x2f4) returned 1 [0194.973] CloseHandle (hObject=0x2f8) returned 1 [0194.973] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml")) returned 1 [0194.977] SetEvent (hEvent=0x27c) returned 1 [0194.977] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0194.978] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1450) returned 1 [0194.978] CloseHandle (hObject=0x2f8) returned 1 [0194.978] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml")) returned 0x220 [0194.978] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml")) returned 0x220 [0194.978] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0194.978] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0194.978] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0194.978] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0194.978] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0194.979] ReadFile (in: hFile=0x2f8, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x5aa, lpOverlapped=0x0) returned 1 [0194.980] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x5b0, lpOverlapped=0x0) returned 1 [0194.981] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x142, lpOverlapped=0x0) returned 1 [0194.981] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0194.981] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0194.981] WriteFile (in: hFile=0x2f8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5aa, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x5aa, lpOverlapped=0x0) returned 1 [0194.981] FlushFileBuffers (hFile=0x2f8) returned 1 [0194.984] FlushFileBuffers (hFile=0x2f4) returned 1 [0194.985] CloseHandle (hObject=0x2f8) returned 1 [0194.985] CloseHandle (hObject=0x2f4) returned 1 [0194.985] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml")) returned 1 [0194.986] SetEvent (hEvent=0x27c) returned 1 [0194.986] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0194.986] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1261) returned 1 [0194.986] CloseHandle (hObject=0x2f4) returned 1 [0194.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml")) returned 0x220 [0194.987] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml")) returned 0x220 [0194.987] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0194.987] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0194.987] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0194.987] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0194.987] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f8 [0194.988] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4ed, lpOverlapped=0x0) returned 1 [0194.988] WriteFile (in: hFile=0x2f8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4f0, lpOverlapped=0x0) returned 1 [0194.989] WriteFile (in: hFile=0x2f8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x142, lpOverlapped=0x0) returned 1 [0194.990] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0194.990] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0194.990] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4ed, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4ed, lpOverlapped=0x0) returned 1 [0194.990] FlushFileBuffers (hFile=0x2f4) returned 1 [0194.994] FlushFileBuffers (hFile=0x2f8) returned 1 [0194.995] CloseHandle (hObject=0x2f4) returned 1 [0194.995] CloseHandle (hObject=0x2f8) returned 1 [0194.995] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml")) returned 1 [0194.996] SetEvent (hEvent=0x27c) returned 1 [0194.996] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0194.997] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3754) returned 1 [0194.997] CloseHandle (hObject=0x2f8) returned 1 [0194.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml")) returned 0x220 [0194.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml")) returned 0x220 [0194.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0194.997] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0194.997] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0194.997] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0194.997] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0194.998] ReadFile (in: hFile=0x2f8, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xeaa, lpOverlapped=0x0) returned 1 [0194.998] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xeb0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xeb0, lpOverlapped=0x0) returned 1 [0194.999] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x142, lpOverlapped=0x0) returned 1 [0195.000] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0195.000] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0195.000] WriteFile (in: hFile=0x2f8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xeaa, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xeaa, lpOverlapped=0x0) returned 1 [0195.000] FlushFileBuffers (hFile=0x2f8) returned 1 [0195.002] FlushFileBuffers (hFile=0x2f4) returned 1 [0195.003] CloseHandle (hObject=0x2f8) returned 1 [0195.003] CloseHandle (hObject=0x2f4) returned 1 [0195.003] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml")) returned 1 [0195.004] SetEvent (hEvent=0x27c) returned 1 [0195.005] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0195.005] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1261) returned 1 [0195.005] CloseHandle (hObject=0x2f4) returned 1 [0195.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml")) returned 0x220 [0195.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml")) returned 0x220 [0195.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0195.005] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0195.005] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0195.005] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0195.005] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f8 [0195.006] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4ed, lpOverlapped=0x0) returned 1 [0195.007] WriteFile (in: hFile=0x2f8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4f0, lpOverlapped=0x0) returned 1 [0195.008] WriteFile (in: hFile=0x2f8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x142, lpOverlapped=0x0) returned 1 [0195.008] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0195.008] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0195.008] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4ed, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4ed, lpOverlapped=0x0) returned 1 [0195.008] FlushFileBuffers (hFile=0x2f4) returned 1 [0195.011] FlushFileBuffers (hFile=0x2f8) returned 1 [0195.012] CloseHandle (hObject=0x2f4) returned 1 [0195.012] CloseHandle (hObject=0x2f8) returned 1 [0195.012] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml")) returned 1 [0195.013] SetEvent (hEvent=0x27c) returned 1 [0195.014] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0195.014] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1261) returned 1 [0195.014] CloseHandle (hObject=0x2f8) returned 1 [0195.014] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml")) returned 0x220 [0195.014] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml")) returned 0x220 [0195.014] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0195.014] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0195.014] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0195.014] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0195.014] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0195.015] ReadFile (in: hFile=0x2f8, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4ed, lpOverlapped=0x0) returned 1 [0195.016] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4f0, lpOverlapped=0x0) returned 1 [0195.017] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x142, lpOverlapped=0x0) returned 1 [0195.017] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0195.017] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0195.017] WriteFile (in: hFile=0x2f8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4ed, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4ed, lpOverlapped=0x0) returned 1 [0195.017] FlushFileBuffers (hFile=0x2f8) returned 1 [0195.020] FlushFileBuffers (hFile=0x2f4) returned 1 [0195.021] CloseHandle (hObject=0x2f8) returned 1 [0195.021] CloseHandle (hObject=0x2f4) returned 1 [0195.021] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml")) returned 1 [0195.022] SetEvent (hEvent=0x27c) returned 1 [0195.022] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0195.022] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1261) returned 1 [0195.022] CloseHandle (hObject=0x2f4) returned 1 [0195.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml")) returned 0x220 [0195.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml")) returned 0x220 [0195.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0195.023] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0195.023] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0195.023] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0195.023] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f8 [0195.023] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4ed, lpOverlapped=0x0) returned 1 [0195.024] WriteFile (in: hFile=0x2f8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4f0, lpOverlapped=0x0) returned 1 [0195.025] WriteFile (in: hFile=0x2f8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x142, lpOverlapped=0x0) returned 1 [0195.025] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0195.026] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0195.026] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4ed, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4ed, lpOverlapped=0x0) returned 1 [0195.026] FlushFileBuffers (hFile=0x2f4) returned 1 [0195.028] FlushFileBuffers (hFile=0x2f8) returned 1 [0195.029] CloseHandle (hObject=0x2f4) returned 1 [0195.029] CloseHandle (hObject=0x2f8) returned 1 [0195.029] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml")) returned 1 [0195.030] SetEvent (hEvent=0x27c) returned 1 [0195.031] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0195.031] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=527958) returned 1 [0195.031] CloseHandle (hObject=0x2f8) returned 1 [0195.031] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml")) returned 0x220 [0195.031] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml")) returned 0x220 [0195.031] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0195.031] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0195.031] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0195.031] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0195.031] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0195.032] ReadFile (in: hFile=0x2f8, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x80e56, lpOverlapped=0x0) returned 1 [0195.042] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x80e60, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x80e60, lpOverlapped=0x0) returned 1 [0195.051] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x142, lpOverlapped=0x0) returned 1 [0195.051] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0195.052] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0195.052] WriteFile (in: hFile=0x2f8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x80e56, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x80e56, lpOverlapped=0x0) returned 1 [0195.053] FlushFileBuffers (hFile=0x2f8) returned 1 [0195.653] FlushFileBuffers (hFile=0x2f4) returned 1 [0195.655] CloseHandle (hObject=0x2f8) returned 1 [0195.655] CloseHandle (hObject=0x2f4) returned 1 [0195.655] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml")) returned 1 [0195.663] SetEvent (hEvent=0x27c) returned 1 [0195.663] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0195.663] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=9831) returned 1 [0195.663] CloseHandle (hObject=0x2f4) returned 1 [0195.663] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml")) returned 0x220 [0195.663] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml")) returned 0x220 [0195.663] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0195.664] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0195.664] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0195.664] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0195.664] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f8 [0195.665] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2667, lpOverlapped=0x0) returned 1 [0195.666] WriteFile (in: hFile=0x2f8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2670, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2670, lpOverlapped=0x0) returned 1 [0195.667] WriteFile (in: hFile=0x2f8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x112, lpOverlapped=0x0) returned 1 [0195.668] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0195.668] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0195.668] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2667, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2667, lpOverlapped=0x0) returned 1 [0195.668] FlushFileBuffers (hFile=0x2f4) returned 1 [0195.672] FlushFileBuffers (hFile=0x2f8) returned 1 [0195.674] CloseHandle (hObject=0x2f4) returned 1 [0195.674] CloseHandle (hObject=0x2f8) returned 1 [0195.674] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml")) returned 1 [0195.676] SetEvent (hEvent=0x27c) returned 1 [0195.676] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0195.676] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=373) returned 1 [0195.676] CloseHandle (hObject=0x2f8) returned 1 [0195.676] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml")) returned 0x220 [0195.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml")) returned 0x220 [0195.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0195.677] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0195.677] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0195.677] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0195.677] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0195.678] ReadFile (in: hFile=0x2f8, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x175, lpOverlapped=0x0) returned 1 [0195.679] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x180, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x180, lpOverlapped=0x0) returned 1 [0195.680] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x102, lpOverlapped=0x0) returned 1 [0195.681] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0195.681] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0195.681] WriteFile (in: hFile=0x2f8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x175, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x175, lpOverlapped=0x0) returned 1 [0195.681] FlushFileBuffers (hFile=0x2f8) returned 1 [0195.684] FlushFileBuffers (hFile=0x2f4) returned 1 [0195.685] CloseHandle (hObject=0x2f8) returned 1 [0195.685] CloseHandle (hObject=0x2f4) returned 1 [0195.686] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml")) returned 1 [0195.687] SetEvent (hEvent=0x27c) returned 1 [0195.687] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l1-2-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0195.688] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=18624) returned 1 [0195.688] CloseHandle (hObject=0x2f4) returned 1 [0195.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l1-2-0.dll")) returned 0x220 [0195.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l1-2-0.dll")) returned 0x220 [0195.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l1-2-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0195.689] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0195.689] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0195.689] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0195.689] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l1-2-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f8 [0195.690] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x48c0, lpOverlapped=0x0) returned 1 [0195.692] WriteFile (in: hFile=0x2f8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x48d0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x48d0, lpOverlapped=0x0) returned 1 [0195.694] WriteFile (in: hFile=0x2f8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x112, lpOverlapped=0x0) returned 1 [0195.694] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0195.694] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0195.694] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x48c0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x48c0, lpOverlapped=0x0) returned 1 [0195.694] FlushFileBuffers (hFile=0x2f4) returned 1 [0195.944] FlushFileBuffers (hFile=0x2f8) returned 1 [0195.946] CloseHandle (hObject=0x2f4) returned 1 [0195.947] CloseHandle (hObject=0x2f8) returned 1 [0195.947] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l1-2-0.dll")) returned 1 [0195.948] SetEvent (hEvent=0x27c) returned 1 [0195.948] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0195.948] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=21184) returned 1 [0195.948] CloseHandle (hObject=0x2f8) returned 1 [0195.949] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll")) returned 0x220 [0195.949] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll")) returned 0x220 [0195.949] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0195.950] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0195.950] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0195.950] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0195.950] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0195.950] ReadFile (in: hFile=0x2f8, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x52c0, lpOverlapped=0x0) returned 1 [0195.953] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x52d0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x52d0, lpOverlapped=0x0) returned 1 [0195.954] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x122, lpOverlapped=0x0) returned 1 [0195.954] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0195.954] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0195.954] WriteFile (in: hFile=0x2f8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x52c0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x52c0, lpOverlapped=0x0) returned 1 [0195.955] FlushFileBuffers (hFile=0x2f8) returned 1 [0195.977] FlushFileBuffers (hFile=0x2f4) returned 1 [0195.979] CloseHandle (hObject=0x2f8) returned 1 [0195.979] CloseHandle (hObject=0x2f4) returned 1 [0195.979] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll")) returned 1 [0195.981] SetEvent (hEvent=0x27c) returned 1 [0195.981] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0195.981] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=19136) returned 1 [0195.981] CloseHandle (hObject=0x2f4) returned 1 [0195.981] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll")) returned 0x220 [0195.982] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll")) returned 0x220 [0195.982] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0195.982] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0195.982] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0195.982] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0195.982] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f8 [0195.983] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4ac0, lpOverlapped=0x0) returned 1 [0195.986] WriteFile (in: hFile=0x2f8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4ad0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4ad0, lpOverlapped=0x0) returned 1 [0195.987] WriteFile (in: hFile=0x2f8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x122, lpOverlapped=0x0) returned 1 [0195.987] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0195.987] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0195.987] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4ac0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4ac0, lpOverlapped=0x0) returned 1 [0195.989] FlushFileBuffers (hFile=0x2f4) returned 1 [0196.270] FlushFileBuffers (hFile=0x2f8) returned 1 [0196.272] CloseHandle (hObject=0x2f4) returned 1 [0196.272] CloseHandle (hObject=0x2f8) returned 1 [0196.272] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll")) returned 1 [0196.273] SetEvent (hEvent=0x27c) returned 1 [0196.274] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0196.274] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=19136) returned 1 [0196.274] CloseHandle (hObject=0x2f8) returned 1 [0196.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll")) returned 0x220 [0196.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll")) returned 0x220 [0196.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0196.274] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0196.274] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0196.275] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0196.275] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0196.275] ReadFile (in: hFile=0x2f8, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4ac0, lpOverlapped=0x0) returned 1 [0196.278] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4ad0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4ad0, lpOverlapped=0x0) returned 1 [0196.279] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x122, lpOverlapped=0x0) returned 1 [0196.279] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0196.279] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0196.279] WriteFile (in: hFile=0x2f8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4ac0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4ac0, lpOverlapped=0x0) returned 1 [0196.279] FlushFileBuffers (hFile=0x2f8) returned 1 [0196.608] FlushFileBuffers (hFile=0x2f4) returned 1 [0196.609] CloseHandle (hObject=0x2f8) returned 1 [0196.609] CloseHandle (hObject=0x2f4) returned 1 [0196.609] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll")) returned 1 [0196.611] SetEvent (hEvent=0x27c) returned 1 [0196.611] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0196.611] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=19648) returned 1 [0196.611] CloseHandle (hObject=0x2f4) returned 1 [0196.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll")) returned 0x220 [0196.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll")) returned 0x220 [0196.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0196.612] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0196.612] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0196.612] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0196.612] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f8 [0196.613] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4cc0, lpOverlapped=0x0) returned 1 [0196.615] WriteFile (in: hFile=0x2f8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4cd0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4cd0, lpOverlapped=0x0) returned 1 [0196.616] WriteFile (in: hFile=0x2f8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x112, lpOverlapped=0x0) returned 1 [0196.616] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0196.616] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0196.616] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4cc0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4cc0, lpOverlapped=0x0) returned 1 [0196.617] FlushFileBuffers (hFile=0x2f4) returned 1 [0196.776] FlushFileBuffers (hFile=0x2f8) returned 1 [0196.778] CloseHandle (hObject=0x2f4) returned 1 [0196.778] CloseHandle (hObject=0x2f8) returned 1 [0196.778] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll")) returned 1 [0196.780] SetEvent (hEvent=0x27c) returned 1 [0196.781] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0196.781] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=27840) returned 1 [0196.781] CloseHandle (hObject=0x2f8) returned 1 [0196.781] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll")) returned 0x220 [0196.781] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll")) returned 0x220 [0196.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0196.782] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0196.782] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0196.782] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0196.782] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0196.783] ReadFile (in: hFile=0x2f8, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x6cc0, lpOverlapped=0x0) returned 1 [0196.785] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x6cd0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x6cd0, lpOverlapped=0x0) returned 1 [0196.787] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x112, lpOverlapped=0x0) returned 1 [0196.787] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0196.787] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0196.787] WriteFile (in: hFile=0x2f8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x6cc0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x6cc0, lpOverlapped=0x0) returned 1 [0196.787] FlushFileBuffers (hFile=0x2f8) returned 1 [0196.893] FlushFileBuffers (hFile=0x2f4) returned 1 [0196.904] CloseHandle (hObject=0x2f8) returned 1 [0196.904] CloseHandle (hObject=0x2f4) returned 1 [0196.904] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll")) returned 1 [0196.905] SetEvent (hEvent=0x27c) returned 1 [0196.905] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0196.906] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=70848) returned 1 [0196.906] CloseHandle (hObject=0x2f4) returned 1 [0196.906] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll")) returned 0x220 [0196.906] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll")) returned 0x220 [0196.906] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0196.906] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0196.906] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0196.906] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0196.906] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f8 [0196.907] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x114c0, lpOverlapped=0x0) returned 1 [0196.910] WriteFile (in: hFile=0x2f8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x114d0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x114d0, lpOverlapped=0x0) returned 1 [0196.912] WriteFile (in: hFile=0x2f8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x122, lpOverlapped=0x0) returned 1 [0196.913] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0196.913] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0196.913] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x114c0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x114c0, lpOverlapped=0x0) returned 1 [0196.913] FlushFileBuffers (hFile=0x2f4) returned 1 [0196.933] FlushFileBuffers (hFile=0x2f8) returned 1 [0196.934] CloseHandle (hObject=0x2f4) returned 1 [0196.935] CloseHandle (hObject=0x2f8) returned 1 [0196.935] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll")) returned 1 [0196.936] SetEvent (hEvent=0x27c) returned 1 [0196.936] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0196.937] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=23232) returned 1 [0196.937] CloseHandle (hObject=0x2f8) returned 1 [0196.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll")) returned 0x220 [0196.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll")) returned 0x220 [0196.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0196.937] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0196.937] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0196.937] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0196.937] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0196.938] ReadFile (in: hFile=0x2f8, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x5ac0, lpOverlapped=0x0) returned 1 [0196.952] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5ad0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x5ad0, lpOverlapped=0x0) returned 1 [0196.954] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x122, lpOverlapped=0x0) returned 1 [0196.954] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0196.954] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0196.954] WriteFile (in: hFile=0x2f8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5ac0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x5ac0, lpOverlapped=0x0) returned 1 [0196.954] FlushFileBuffers (hFile=0x2f8) returned 1 [0197.146] FlushFileBuffers (hFile=0x2f4) returned 1 [0197.148] CloseHandle (hObject=0x2f8) returned 1 [0197.148] CloseHandle (hObject=0x2f4) returned 1 [0197.148] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll")) returned 1 [0197.149] SetEvent (hEvent=0x27c) returned 1 [0197.149] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0197.150] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=24768) returned 1 [0197.150] CloseHandle (hObject=0x2f4) returned 1 [0197.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll")) returned 0x220 [0197.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll")) returned 0x220 [0197.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0197.150] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0197.150] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0197.150] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0197.150] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f8 [0197.156] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x60c0, lpOverlapped=0x0) returned 1 [0197.160] WriteFile (in: hFile=0x2f8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x60d0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x60d0, lpOverlapped=0x0) returned 1 [0197.161] WriteFile (in: hFile=0x2f8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x122, lpOverlapped=0x0) returned 1 [0197.162] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0197.162] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0197.162] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x60c0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x60c0, lpOverlapped=0x0) returned 1 [0197.162] FlushFileBuffers (hFile=0x2f4) returned 1 [0197.305] FlushFileBuffers (hFile=0x2f8) returned 1 [0197.307] CloseHandle (hObject=0x2f4) returned 1 [0197.307] CloseHandle (hObject=0x2f8) returned 1 [0197.307] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll")) returned 1 [0197.309] SetEvent (hEvent=0x27c) returned 1 [0197.309] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0197.309] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=19136) returned 1 [0197.309] CloseHandle (hObject=0x2f8) returned 1 [0197.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll")) returned 0x220 [0197.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll")) returned 0x220 [0197.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0197.310] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0197.310] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0197.310] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0197.310] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0197.311] ReadFile (in: hFile=0x2f8, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4ac0, lpOverlapped=0x0) returned 1 [0197.313] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4ad0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4ad0, lpOverlapped=0x0) returned 1 [0197.314] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x122, lpOverlapped=0x0) returned 1 [0197.315] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0197.315] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0197.315] WriteFile (in: hFile=0x2f8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4ac0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4ac0, lpOverlapped=0x0) returned 1 [0197.315] FlushFileBuffers (hFile=0x2f8) returned 1 [0197.456] FlushFileBuffers (hFile=0x2f4) returned 1 [0197.459] CloseHandle (hObject=0x2f8) returned 1 [0197.459] CloseHandle (hObject=0x2f4) returned 1 [0197.459] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll")) returned 1 [0197.461] SetEvent (hEvent=0x27c) returned 1 [0197.461] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate32.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0197.461] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=215768) returned 1 [0197.461] CloseHandle (hObject=0x2f4) returned 1 [0197.461] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate32.exe")) returned 0x220 [0197.461] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate32.exe")) returned 0x220 [0197.461] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate32.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0197.461] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0197.462] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0197.462] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0197.462] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate32.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f8 [0197.462] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x34ad8, lpOverlapped=0x0) returned 1 [0197.472] WriteFile (in: hFile=0x2f8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x34ae0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x34ae0, lpOverlapped=0x0) returned 1 [0197.478] WriteFile (in: hFile=0x2f8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x102, lpOverlapped=0x0) returned 1 [0197.478] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0197.478] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0197.479] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x34ad8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x34ad8, lpOverlapped=0x0) returned 1 [0197.480] FlushFileBuffers (hFile=0x2f4) returned 1 [0197.684] FlushFileBuffers (hFile=0x2f8) returned 1 [0197.687] CloseHandle (hObject=0x2f4) returned 1 [0197.687] CloseHandle (hObject=0x2f8) returned 1 [0197.687] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate32.exe")) returned 1 [0197.689] SetEvent (hEvent=0x27c) returned 1 [0197.690] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvStream32.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvstream32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0197.690] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvStream64.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvstream64.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0197.691] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems32.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvsubsystems32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0197.691] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvsubsystems64.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0197.691] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvlp.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0197.691] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=431664) returned 1 [0197.691] CloseHandle (hObject=0x2f8) returned 1 [0197.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvlp.exe")) returned 0x220 [0197.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvlp.exe")) returned 0x220 [0197.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvlp.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0197.692] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvlp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0197.692] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0197.692] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0197.692] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvlp.exe.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0197.692] ReadFile (in: hFile=0x2f8, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x69630, lpOverlapped=0x0) returned 1 [0197.705] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x69640, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x69640, lpOverlapped=0x0) returned 1 [0197.714] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0197.714] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0197.714] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0197.715] WriteFile (in: hFile=0x2f8, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x69630, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x69630, lpOverlapped=0x0) returned 1 [0197.716] FlushFileBuffers (hFile=0x2f8) returned 1 [0198.084] FlushFileBuffers (hFile=0x2f4) returned 1 [0198.086] CloseHandle (hObject=0x2f8) returned 1 [0198.086] CloseHandle (hObject=0x2f4) returned 1 [0198.086] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvlp.exe")) returned 1 [0198.091] SetEvent (hEvent=0x27c) returned 1 [0198.091] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\mfc140u.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\mfc140u.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0198.091] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=5653664) returned 1 [0198.091] CloseHandle (hObject=0x2f4) returned 1 [0198.091] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\mfc140u.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\mfc140u.dll")) returned 0x220 [0198.092] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\mfc140u.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\mfc140u.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\mfc140u.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\mfc140u.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 1 [0198.093] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\mfc140u.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\mfc140u.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0198.093] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fc20 | out: lpNewFilePointer=0x0) returned 1 [0198.093] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fc20 | out: lpNewFilePointer=0x0) returned 1 [0198.093] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x378fc2c, lpOverlapped=0x0 | out: lpBuffer=0x3b3f058*, lpNumberOfBytesRead=0x378fc2c*=0x40000, lpOverlapped=0x0) returned 1 [0198.104] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x1cc18a, lpNewFilePointer=0x0, dwMoveMethod=0x378fc20 | out: lpNewFilePointer=0x0) returned 1 [0198.104] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b7f058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x378fc2c, lpOverlapped=0x0 | out: lpBuffer=0x3b7f058*, lpNumberOfBytesRead=0x378fc2c*=0x40000, lpOverlapped=0x0) returned 1 [0198.116] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x5244a0, lpNewFilePointer=0x0, dwMoveMethod=0x378fc20 | out: lpNewFilePointer=0x0) returned 1 [0198.116] ReadFile (in: hFile=0x2f4, lpBuffer=0x3bbf058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x378fc2c, lpOverlapped=0x0 | out: lpBuffer=0x3bbf058*, lpNumberOfBytesRead=0x378fc2c*=0x40000, lpOverlapped=0x0) returned 1 [0198.335] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd90 | out: lpNewFilePointer=0x0) returned 1 [0198.335] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x378fd88, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd88*=0xc0102, lpOverlapped=0x0) returned 1 [0198.354] SetEndOfFile (hFile=0x2f4) returned 1 [0198.354] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x5244a0, lpNewFilePointer=0x0, dwMoveMethod=0x378fc28 | out: lpNewFilePointer=0x0) returned 1 [0198.354] WriteFile (in: hFile=0x2f4, lpBuffer=0x3bff13a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x378fc34, lpOverlapped=0x0 | out: lpBuffer=0x3bff13a*, lpNumberOfBytesWritten=0x378fc34*=0x40000, lpOverlapped=0x0) returned 1 [0198.357] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x1cc18a, lpNewFilePointer=0x0, dwMoveMethod=0x378fc28 | out: lpNewFilePointer=0x0) returned 1 [0198.357] WriteFile (in: hFile=0x2f4, lpBuffer=0x3bff13a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x378fc34, lpOverlapped=0x0 | out: lpBuffer=0x3bff13a*, lpNumberOfBytesWritten=0x378fc34*=0x40000, lpOverlapped=0x0) returned 1 [0198.361] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fc28 | out: lpNewFilePointer=0x0) returned 1 [0198.361] WriteFile (in: hFile=0x2f4, lpBuffer=0x3bff13a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x378fc34, lpOverlapped=0x0 | out: lpBuffer=0x3bff13a*, lpNumberOfBytesWritten=0x378fc34*=0x40000, lpOverlapped=0x0) returned 1 [0198.612] FlushFileBuffers (hFile=0x2f4) returned 1 [0199.103] CloseHandle (hObject=0x2f4) returned 1 [0199.103] SetEvent (hEvent=0x27c) returned 1 [0199.103] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\ucrtbase.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0199.104] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=982720) returned 1 [0199.104] CloseHandle (hObject=0x2f4) returned 1 [0199.104] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\ucrtbase.dll")) returned 0x220 [0199.104] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\ucrtbase.dll")) returned 0x220 [0199.105] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\ucrtbase.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0199.105] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\ucrtbase.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0199.105] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0199.105] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0199.105] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\ucrtbase.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0199.106] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xefec0, lpOverlapped=0x0) returned 1 [0199.136] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xefed0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xefed0, lpOverlapped=0x0) returned 1 [0199.253] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0199.253] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0199.253] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0199.253] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xefec0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xefec0, lpOverlapped=0x0) returned 1 [0199.256] FlushFileBuffers (hFile=0x2f4) returned 1 [0199.592] FlushFileBuffers (hFile=0x2b0) returned 1 [0199.595] CloseHandle (hObject=0x2f4) returned 1 [0199.595] CloseHandle (hObject=0x2b0) returned 1 [0199.595] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\ucrtbase.dll")) returned 1 [0199.604] SetEvent (hEvent=0x27c) returned 1 [0199.604] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\vcruntime140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vcruntime140.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0199.604] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=88752) returned 1 [0199.604] CloseHandle (hObject=0x2b0) returned 1 [0199.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\vcruntime140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vcruntime140.dll")) returned 0x220 [0199.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\vcruntime140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vcruntime140.dll")) returned 0x220 [0199.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\vcruntime140.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\vcruntime140.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0199.604] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\vcruntime140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vcruntime140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0199.604] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0199.605] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0199.605] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\vcruntime140.dll.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\client\\vcruntime140.dll.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0199.605] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x15ab0, lpOverlapped=0x0) returned 1 [0199.609] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x15ac0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x15ac0, lpOverlapped=0x0) returned 1 [0199.612] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x102, lpOverlapped=0x0) returned 1 [0199.612] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0199.612] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0199.612] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x15ab0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x15ab0, lpOverlapped=0x0) returned 1 [0199.613] FlushFileBuffers (hFile=0x2b0) returned 1 [0199.794] FlushFileBuffers (hFile=0x2f4) returned 1 [0199.804] CloseHandle (hObject=0x2b0) returned 1 [0199.804] CloseHandle (hObject=0x2f4) returned 1 [0199.804] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\vcruntime140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vcruntime140.dll")) returned 1 [0199.806] SetEvent (hEvent=0x27c) returned 1 [0199.806] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0199.806] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=7686) returned 1 [0199.806] CloseHandle (hObject=0x2f4) returned 1 [0199.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif")) returned 0x220 [0199.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif")) returned 0x220 [0199.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0199.807] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0199.807] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0199.807] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0199.807] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0199.807] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1e06, lpOverlapped=0x0) returned 1 [0199.808] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1e10, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1e10, lpOverlapped=0x0) returned 1 [0199.809] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0199.810] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0199.810] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0199.810] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1e06, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1e06, lpOverlapped=0x0) returned 1 [0199.810] FlushFileBuffers (hFile=0x2f4) returned 1 [0199.820] FlushFileBuffers (hFile=0x2b0) returned 1 [0199.822] CloseHandle (hObject=0x2f4) returned 1 [0199.823] CloseHandle (hObject=0x2b0) returned 1 [0199.823] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif")) returned 1 [0199.824] SetEvent (hEvent=0x27c) returned 1 [0199.824] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0199.824] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=517) returned 1 [0199.824] CloseHandle (hObject=0x2b0) returned 1 [0199.824] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif")) returned 0x220 [0199.824] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif")) returned 0x220 [0199.824] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0199.824] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0199.825] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0199.825] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0199.825] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0199.825] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x205, lpOverlapped=0x0) returned 1 [0199.826] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x210, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x210, lpOverlapped=0x0) returned 1 [0199.827] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0199.827] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0199.827] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0199.827] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x205, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x205, lpOverlapped=0x0) returned 1 [0199.827] FlushFileBuffers (hFile=0x2b0) returned 1 [0199.849] FlushFileBuffers (hFile=0x2f4) returned 1 [0199.852] CloseHandle (hObject=0x2b0) returned 1 [0199.852] CloseHandle (hObject=0x2f4) returned 1 [0199.852] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif")) returned 1 [0199.854] SetEvent (hEvent=0x27c) returned 1 [0199.854] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0199.854] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=12702) returned 1 [0199.854] CloseHandle (hObject=0x2f4) returned 1 [0199.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif")) returned 0x220 [0199.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif")) returned 0x220 [0199.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0199.854] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0199.854] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0199.854] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0199.854] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0199.855] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x319e, lpOverlapped=0x0) returned 1 [0199.856] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x31a0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x31a0, lpOverlapped=0x0) returned 1 [0199.857] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0199.857] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0199.857] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0199.858] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x319e, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x319e, lpOverlapped=0x0) returned 1 [0199.858] FlushFileBuffers (hFile=0x2f4) returned 1 [0199.869] FlushFileBuffers (hFile=0x2b0) returned 1 [0199.871] CloseHandle (hObject=0x2f4) returned 1 [0199.871] CloseHandle (hObject=0x2b0) returned 1 [0199.871] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif")) returned 1 [0199.872] SetEvent (hEvent=0x27c) returned 1 [0199.872] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0199.873] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3140) returned 1 [0199.873] CloseHandle (hObject=0x2b0) returned 1 [0199.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif")) returned 0x220 [0199.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif")) returned 0x220 [0199.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0199.873] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0199.873] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0199.873] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0199.873] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0199.874] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xc44, lpOverlapped=0x0) returned 1 [0199.875] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xc50, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xc50, lpOverlapped=0x0) returned 1 [0199.876] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0199.876] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0199.876] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0199.876] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xc44, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xc44, lpOverlapped=0x0) returned 1 [0199.876] FlushFileBuffers (hFile=0x2b0) returned 1 [0199.879] FlushFileBuffers (hFile=0x2f4) returned 1 [0199.887] CloseHandle (hObject=0x2b0) returned 1 [0199.888] CloseHandle (hObject=0x2f4) returned 1 [0199.888] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif")) returned 1 [0199.889] SetEvent (hEvent=0x27c) returned 1 [0199.889] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0199.889] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=5253) returned 1 [0199.889] CloseHandle (hObject=0x2f4) returned 1 [0199.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif")) returned 0x220 [0199.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif")) returned 0x220 [0199.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0199.889] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0199.889] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0199.889] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0199.889] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0199.890] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1485, lpOverlapped=0x0) returned 1 [0199.891] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1490, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1490, lpOverlapped=0x0) returned 1 [0199.892] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0199.892] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0199.892] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0199.892] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1485, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1485, lpOverlapped=0x0) returned 1 [0199.892] FlushFileBuffers (hFile=0x2f4) returned 1 [0199.896] FlushFileBuffers (hFile=0x2b0) returned 1 [0199.904] CloseHandle (hObject=0x2f4) returned 1 [0199.904] CloseHandle (hObject=0x2b0) returned 1 [0199.904] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif")) returned 1 [0199.905] SetEvent (hEvent=0x27c) returned 1 [0199.905] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0199.905] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=10607) returned 1 [0199.905] CloseHandle (hObject=0x2b0) returned 1 [0199.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif")) returned 0x220 [0199.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif")) returned 0x220 [0199.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0199.905] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0199.905] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0199.906] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0199.906] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0199.906] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x296f, lpOverlapped=0x0) returned 1 [0199.907] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2970, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2970, lpOverlapped=0x0) returned 1 [0199.908] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0199.908] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0199.908] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0199.908] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x296f, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x296f, lpOverlapped=0x0) returned 1 [0199.909] FlushFileBuffers (hFile=0x2b0) returned 1 [0199.912] FlushFileBuffers (hFile=0x2f4) returned 1 [0199.920] CloseHandle (hObject=0x2b0) returned 1 [0199.921] CloseHandle (hObject=0x2f4) returned 1 [0199.921] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif")) returned 1 [0199.922] SetEvent (hEvent=0x27c) returned 1 [0199.922] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0199.922] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=5315) returned 1 [0199.922] CloseHandle (hObject=0x2f4) returned 1 [0199.922] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif")) returned 0x220 [0199.922] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif")) returned 0x220 [0199.922] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0199.922] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0199.922] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0199.922] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0199.923] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0199.923] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x14c3, lpOverlapped=0x0) returned 1 [0199.924] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x14d0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x14d0, lpOverlapped=0x0) returned 1 [0199.925] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0199.925] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0199.925] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0199.925] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x14c3, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x14c3, lpOverlapped=0x0) returned 1 [0199.925] FlushFileBuffers (hFile=0x2f4) returned 1 [0199.931] FlushFileBuffers (hFile=0x2b0) returned 1 [0199.940] CloseHandle (hObject=0x2f4) returned 1 [0199.940] CloseHandle (hObject=0x2b0) returned 1 [0199.940] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif")) returned 1 [0199.941] SetEvent (hEvent=0x27c) returned 1 [0199.941] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0199.942] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=5030) returned 1 [0199.942] CloseHandle (hObject=0x2b0) returned 1 [0199.942] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif")) returned 0x220 [0199.942] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif")) returned 0x220 [0199.942] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0199.942] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0199.942] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0199.942] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0199.942] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0199.943] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x13a6, lpOverlapped=0x0) returned 1 [0199.943] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x13b0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x13b0, lpOverlapped=0x0) returned 1 [0199.944] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0199.945] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0199.945] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0199.945] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x13a6, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x13a6, lpOverlapped=0x0) returned 1 [0199.945] FlushFileBuffers (hFile=0x2b0) returned 1 [0199.948] FlushFileBuffers (hFile=0x2f4) returned 1 [0199.957] CloseHandle (hObject=0x2b0) returned 1 [0199.957] CloseHandle (hObject=0x2f4) returned 1 [0199.957] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif")) returned 1 [0199.958] SetEvent (hEvent=0x27c) returned 1 [0199.958] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0199.958] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=7583) returned 1 [0199.959] CloseHandle (hObject=0x2f4) returned 1 [0199.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif")) returned 0x220 [0199.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif")) returned 0x220 [0199.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0199.959] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0199.959] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0199.959] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0199.959] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0199.960] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1d9f, lpOverlapped=0x0) returned 1 [0199.960] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1da0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1da0, lpOverlapped=0x0) returned 1 [0199.962] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0199.962] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0199.962] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0199.962] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1d9f, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1d9f, lpOverlapped=0x0) returned 1 [0199.962] FlushFileBuffers (hFile=0x2f4) returned 1 [0199.966] FlushFileBuffers (hFile=0x2b0) returned 1 [0199.974] CloseHandle (hObject=0x2f4) returned 1 [0199.975] CloseHandle (hObject=0x2b0) returned 1 [0199.975] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif")) returned 1 [0199.976] SetEvent (hEvent=0x27c) returned 1 [0199.976] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0199.976] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=13254) returned 1 [0199.976] CloseHandle (hObject=0x2b0) returned 1 [0199.976] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif")) returned 0x220 [0199.976] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif")) returned 0x220 [0199.976] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0199.976] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0199.976] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0199.977] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0199.977] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0199.977] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x33c6, lpOverlapped=0x0) returned 1 [0199.978] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x33d0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x33d0, lpOverlapped=0x0) returned 1 [0199.979] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0199.980] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0199.980] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0199.980] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x33c6, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x33c6, lpOverlapped=0x0) returned 1 [0199.980] FlushFileBuffers (hFile=0x2b0) returned 1 [0199.983] FlushFileBuffers (hFile=0x2f4) returned 1 [0200.009] CloseHandle (hObject=0x2b0) returned 1 [0200.009] CloseHandle (hObject=0x2f4) returned 1 [0200.009] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif")) returned 1 [0200.010] SetEvent (hEvent=0x27c) returned 1 [0200.010] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0200.010] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=4894) returned 1 [0200.010] CloseHandle (hObject=0x2f4) returned 1 [0200.010] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif")) returned 0x220 [0200.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif")) returned 0x220 [0200.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.011] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0200.011] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.011] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.011] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0200.011] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x131e, lpOverlapped=0x0) returned 1 [0200.012] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1320, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1320, lpOverlapped=0x0) returned 1 [0200.013] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0200.014] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.014] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.014] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x131e, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x131e, lpOverlapped=0x0) returned 1 [0200.014] FlushFileBuffers (hFile=0x2f4) returned 1 [0200.018] FlushFileBuffers (hFile=0x2b0) returned 1 [0200.028] CloseHandle (hObject=0x2f4) returned 1 [0200.028] CloseHandle (hObject=0x2b0) returned 1 [0200.028] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif")) returned 1 [0200.029] SetEvent (hEvent=0x27c) returned 1 [0200.029] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0200.029] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=9248) returned 1 [0200.029] CloseHandle (hObject=0x2b0) returned 1 [0200.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif")) returned 0x220 [0200.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif")) returned 0x220 [0200.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.030] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0200.030] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.030] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.030] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0200.030] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2420, lpOverlapped=0x0) returned 1 [0200.031] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2430, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2430, lpOverlapped=0x0) returned 1 [0200.033] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0200.033] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.033] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.033] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2420, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2420, lpOverlapped=0x0) returned 1 [0200.033] FlushFileBuffers (hFile=0x2b0) returned 1 [0200.037] FlushFileBuffers (hFile=0x2f4) returned 1 [0200.045] CloseHandle (hObject=0x2b0) returned 1 [0200.045] CloseHandle (hObject=0x2f4) returned 1 [0200.045] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif")) returned 1 [0200.046] SetEvent (hEvent=0x27c) returned 1 [0200.046] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0200.047] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=4390) returned 1 [0200.047] CloseHandle (hObject=0x2f4) returned 1 [0200.047] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif")) returned 0x220 [0200.047] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif")) returned 0x220 [0200.047] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.047] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0200.047] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.047] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.047] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0200.052] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1126, lpOverlapped=0x0) returned 1 [0200.053] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1130, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1130, lpOverlapped=0x0) returned 1 [0200.054] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0200.054] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.054] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.054] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1126, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1126, lpOverlapped=0x0) returned 1 [0200.054] FlushFileBuffers (hFile=0x2f4) returned 1 [0200.064] FlushFileBuffers (hFile=0x2b0) returned 1 [0200.067] CloseHandle (hObject=0x2f4) returned 1 [0200.067] CloseHandle (hObject=0x2b0) returned 1 [0200.067] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif")) returned 1 [0200.068] SetEvent (hEvent=0x27c) returned 1 [0200.068] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0200.068] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3378) returned 1 [0200.069] CloseHandle (hObject=0x2b0) returned 1 [0200.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif")) returned 0x220 [0200.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif")) returned 0x220 [0200.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.069] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0200.069] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.069] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.069] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0200.070] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xd32, lpOverlapped=0x0) returned 1 [0200.070] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xd40, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xd40, lpOverlapped=0x0) returned 1 [0200.072] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0200.072] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.072] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.072] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xd32, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xd32, lpOverlapped=0x0) returned 1 [0200.072] FlushFileBuffers (hFile=0x2b0) returned 1 [0200.094] FlushFileBuffers (hFile=0x2f4) returned 1 [0200.095] CloseHandle (hObject=0x2b0) returned 1 [0200.095] CloseHandle (hObject=0x2f4) returned 1 [0200.095] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif")) returned 1 [0200.096] SetEvent (hEvent=0x27c) returned 1 [0200.097] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0200.097] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3026) returned 1 [0200.097] CloseHandle (hObject=0x2f4) returned 1 [0200.097] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf")) returned 0x220 [0200.097] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf")) returned 0x220 [0200.097] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.097] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0200.097] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.097] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.097] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0200.098] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xbd2, lpOverlapped=0x0) returned 1 [0200.099] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xbe0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xbe0, lpOverlapped=0x0) returned 1 [0200.100] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0200.100] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.100] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.100] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xbd2, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xbd2, lpOverlapped=0x0) returned 1 [0200.100] FlushFileBuffers (hFile=0x2f4) returned 1 [0200.103] FlushFileBuffers (hFile=0x2b0) returned 1 [0200.111] CloseHandle (hObject=0x2f4) returned 1 [0200.111] CloseHandle (hObject=0x2b0) returned 1 [0200.111] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf")) returned 1 [0200.112] SetEvent (hEvent=0x27c) returned 1 [0200.112] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0200.113] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=5684) returned 1 [0200.113] CloseHandle (hObject=0x2b0) returned 1 [0200.113] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf")) returned 0x220 [0200.113] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf")) returned 0x220 [0200.113] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.113] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0200.113] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.113] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.113] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0200.114] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1634, lpOverlapped=0x0) returned 1 [0200.114] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1640, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1640, lpOverlapped=0x0) returned 1 [0200.116] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0200.116] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.116] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.116] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1634, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1634, lpOverlapped=0x0) returned 1 [0200.116] FlushFileBuffers (hFile=0x2b0) returned 1 [0200.119] FlushFileBuffers (hFile=0x2f4) returned 1 [0200.129] CloseHandle (hObject=0x2b0) returned 1 [0200.129] CloseHandle (hObject=0x2f4) returned 1 [0200.129] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf")) returned 1 [0200.130] SetEvent (hEvent=0x27c) returned 1 [0200.130] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0200.131] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=10832) returned 1 [0200.131] CloseHandle (hObject=0x2f4) returned 1 [0200.131] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf")) returned 0x220 [0200.131] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf")) returned 0x220 [0200.131] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.131] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0200.131] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.131] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.131] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0200.132] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2a50, lpOverlapped=0x0) returned 1 [0200.133] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2a60, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2a60, lpOverlapped=0x0) returned 1 [0200.134] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0200.134] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.134] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.134] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2a50, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2a50, lpOverlapped=0x0) returned 1 [0200.134] FlushFileBuffers (hFile=0x2f4) returned 1 [0200.137] FlushFileBuffers (hFile=0x2b0) returned 1 [0200.146] CloseHandle (hObject=0x2f4) returned 1 [0200.146] CloseHandle (hObject=0x2b0) returned 1 [0200.147] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf")) returned 1 [0200.148] SetEvent (hEvent=0x27c) returned 1 [0200.148] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0200.148] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=7072) returned 1 [0200.148] CloseHandle (hObject=0x2b0) returned 1 [0200.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf")) returned 0x220 [0200.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf")) returned 0x220 [0200.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.148] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0200.148] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.148] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.148] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0200.149] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1ba0, lpOverlapped=0x0) returned 1 [0200.150] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1bb0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1bb0, lpOverlapped=0x0) returned 1 [0200.151] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0200.151] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.151] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.151] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1ba0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1ba0, lpOverlapped=0x0) returned 1 [0200.151] FlushFileBuffers (hFile=0x2b0) returned 1 [0200.157] FlushFileBuffers (hFile=0x2f4) returned 1 [0200.166] CloseHandle (hObject=0x2b0) returned 1 [0200.167] CloseHandle (hObject=0x2f4) returned 1 [0200.167] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf")) returned 1 [0200.168] SetEvent (hEvent=0x27c) returned 1 [0200.168] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0200.168] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1596) returned 1 [0200.168] CloseHandle (hObject=0x2f4) returned 1 [0200.168] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf")) returned 0x220 [0200.168] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf")) returned 0x220 [0200.168] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.168] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0200.168] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.169] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.169] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0200.169] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x63c, lpOverlapped=0x0) returned 1 [0200.170] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x640, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x640, lpOverlapped=0x0) returned 1 [0200.171] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0200.171] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.171] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.171] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x63c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x63c, lpOverlapped=0x0) returned 1 [0200.171] FlushFileBuffers (hFile=0x2f4) returned 1 [0200.175] FlushFileBuffers (hFile=0x2b0) returned 1 [0200.183] CloseHandle (hObject=0x2f4) returned 1 [0200.183] CloseHandle (hObject=0x2b0) returned 1 [0200.183] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf")) returned 1 [0200.184] SetEvent (hEvent=0x27c) returned 1 [0200.184] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0200.184] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1832) returned 1 [0200.184] CloseHandle (hObject=0x2b0) returned 1 [0200.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf")) returned 0x220 [0200.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf")) returned 0x220 [0200.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.185] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0200.185] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.185] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.185] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0200.185] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x728, lpOverlapped=0x0) returned 1 [0200.186] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x730, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x730, lpOverlapped=0x0) returned 1 [0200.187] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0200.187] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.188] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.188] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x728, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x728, lpOverlapped=0x0) returned 1 [0200.188] FlushFileBuffers (hFile=0x2b0) returned 1 [0200.191] FlushFileBuffers (hFile=0x2f4) returned 1 [0200.200] CloseHandle (hObject=0x2b0) returned 1 [0200.200] CloseHandle (hObject=0x2f4) returned 1 [0200.200] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf")) returned 1 [0200.201] SetEvent (hEvent=0x27c) returned 1 [0200.201] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0200.201] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=27858) returned 1 [0200.201] CloseHandle (hObject=0x2f4) returned 1 [0200.201] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf")) returned 0x220 [0200.201] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf")) returned 0x220 [0200.201] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.201] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0200.202] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.202] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.202] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0200.202] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x6cd2, lpOverlapped=0x0) returned 1 [0200.203] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x6ce0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x6ce0, lpOverlapped=0x0) returned 1 [0200.205] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0200.205] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.205] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.205] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x6cd2, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x6cd2, lpOverlapped=0x0) returned 1 [0200.205] FlushFileBuffers (hFile=0x2f4) returned 1 [0200.208] FlushFileBuffers (hFile=0x2b0) returned 1 [0200.218] CloseHandle (hObject=0x2f4) returned 1 [0200.218] CloseHandle (hObject=0x2b0) returned 1 [0200.218] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf")) returned 1 [0200.219] SetEvent (hEvent=0x27c) returned 1 [0200.219] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0200.219] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=5836) returned 1 [0200.219] CloseHandle (hObject=0x2b0) returned 1 [0200.220] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf")) returned 0x220 [0200.220] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf")) returned 0x220 [0200.220] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.220] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0200.220] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.220] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.220] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0200.220] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x16cc, lpOverlapped=0x0) returned 1 [0200.221] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x16d0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x16d0, lpOverlapped=0x0) returned 1 [0200.222] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0200.223] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.223] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.223] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x16cc, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x16cc, lpOverlapped=0x0) returned 1 [0200.223] FlushFileBuffers (hFile=0x2b0) returned 1 [0200.233] FlushFileBuffers (hFile=0x2f4) returned 1 [0200.236] CloseHandle (hObject=0x2b0) returned 1 [0200.236] CloseHandle (hObject=0x2f4) returned 1 [0200.236] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf")) returned 1 [0200.237] SetEvent (hEvent=0x27c) returned 1 [0200.237] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0200.237] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2756) returned 1 [0200.237] CloseHandle (hObject=0x2f4) returned 1 [0200.237] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf")) returned 0x220 [0200.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf")) returned 0x220 [0200.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.238] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0200.238] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.238] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.238] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0200.238] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xac4, lpOverlapped=0x0) returned 1 [0200.239] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xad0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xad0, lpOverlapped=0x0) returned 1 [0200.240] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0200.240] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.240] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.241] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xac4, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xac4, lpOverlapped=0x0) returned 1 [0200.241] FlushFileBuffers (hFile=0x2f4) returned 1 [0200.250] FlushFileBuffers (hFile=0x2b0) returned 1 [0200.252] CloseHandle (hObject=0x2f4) returned 1 [0200.252] CloseHandle (hObject=0x2b0) returned 1 [0200.252] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf")) returned 1 [0200.253] SetEvent (hEvent=0x27c) returned 1 [0200.253] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0200.254] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=7540) returned 1 [0200.254] CloseHandle (hObject=0x2b0) returned 1 [0200.254] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf")) returned 0x220 [0200.254] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf")) returned 0x220 [0200.254] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.254] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0200.255] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.255] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.255] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0200.255] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1d74, lpOverlapped=0x0) returned 1 [0200.256] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1d80, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1d80, lpOverlapped=0x0) returned 1 [0200.257] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0200.257] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.257] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.257] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1d74, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1d74, lpOverlapped=0x0) returned 1 [0200.258] FlushFileBuffers (hFile=0x2b0) returned 1 [0200.270] FlushFileBuffers (hFile=0x2f4) returned 1 [0200.272] CloseHandle (hObject=0x2b0) returned 1 [0200.272] CloseHandle (hObject=0x2f4) returned 1 [0200.273] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf")) returned 1 [0200.274] SetEvent (hEvent=0x27c) returned 1 [0200.274] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0200.274] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2108) returned 1 [0200.274] CloseHandle (hObject=0x2f4) returned 1 [0200.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf")) returned 0x220 [0200.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf")) returned 0x220 [0200.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.275] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0200.275] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.275] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.275] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0200.276] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x83c, lpOverlapped=0x0) returned 1 [0200.276] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x840, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x840, lpOverlapped=0x0) returned 1 [0200.277] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0200.278] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.278] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.278] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x83c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x83c, lpOverlapped=0x0) returned 1 [0200.278] FlushFileBuffers (hFile=0x2f4) returned 1 [0200.305] FlushFileBuffers (hFile=0x2b0) returned 1 [0200.415] CloseHandle (hObject=0x2f4) returned 1 [0200.416] CloseHandle (hObject=0x2b0) returned 1 [0200.416] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf")) returned 1 [0200.417] SetEvent (hEvent=0x27c) returned 1 [0200.417] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0200.417] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3416) returned 1 [0200.417] CloseHandle (hObject=0x2b0) returned 1 [0200.417] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf")) returned 0x220 [0200.417] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf")) returned 0x220 [0200.417] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.417] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0200.418] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.418] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.418] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0200.418] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xd58, lpOverlapped=0x0) returned 1 [0200.422] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xd60, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xd60, lpOverlapped=0x0) returned 1 [0200.423] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0200.423] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.423] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.423] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xd58, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xd58, lpOverlapped=0x0) returned 1 [0200.424] FlushFileBuffers (hFile=0x2b0) returned 1 [0200.434] FlushFileBuffers (hFile=0x2f4) returned 1 [0200.436] CloseHandle (hObject=0x2b0) returned 1 [0200.436] CloseHandle (hObject=0x2f4) returned 1 [0200.436] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf")) returned 1 [0200.437] SetEvent (hEvent=0x27c) returned 1 [0200.437] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0200.438] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=6636) returned 1 [0200.438] CloseHandle (hObject=0x2f4) returned 1 [0200.438] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf")) returned 0x220 [0200.438] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf")) returned 0x220 [0200.438] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.438] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0200.438] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.438] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.438] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0200.439] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x19ec, lpOverlapped=0x0) returned 1 [0200.440] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x19f0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x19f0, lpOverlapped=0x0) returned 1 [0200.441] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0200.441] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.441] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.441] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x19ec, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x19ec, lpOverlapped=0x0) returned 1 [0200.442] FlushFileBuffers (hFile=0x2f4) returned 1 [0200.451] FlushFileBuffers (hFile=0x2b0) returned 1 [0200.453] CloseHandle (hObject=0x2f4) returned 1 [0200.453] CloseHandle (hObject=0x2b0) returned 1 [0200.453] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf")) returned 1 [0200.454] SetEvent (hEvent=0x27c) returned 1 [0200.454] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0200.455] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3144) returned 1 [0200.455] CloseHandle (hObject=0x2b0) returned 1 [0200.455] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf")) returned 0x220 [0200.455] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf")) returned 0x220 [0200.455] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.455] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0200.455] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.455] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.455] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0200.456] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xc48, lpOverlapped=0x0) returned 1 [0200.457] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xc50, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xc50, lpOverlapped=0x0) returned 1 [0200.458] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0200.458] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.458] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.458] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xc48, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xc48, lpOverlapped=0x0) returned 1 [0200.459] FlushFileBuffers (hFile=0x2b0) returned 1 [0200.474] FlushFileBuffers (hFile=0x2f4) returned 1 [0200.478] CloseHandle (hObject=0x2b0) returned 1 [0200.478] CloseHandle (hObject=0x2f4) returned 1 [0200.478] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf")) returned 1 [0200.479] SetEvent (hEvent=0x27c) returned 1 [0200.479] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0200.479] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=8492) returned 1 [0200.479] CloseHandle (hObject=0x2f4) returned 1 [0200.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf")) returned 0x220 [0200.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf")) returned 0x220 [0200.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.480] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0200.480] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.480] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.480] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0200.481] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x212c, lpOverlapped=0x0) returned 1 [0200.482] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2130, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2130, lpOverlapped=0x0) returned 1 [0200.483] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0200.483] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.483] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.483] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x212c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x212c, lpOverlapped=0x0) returned 1 [0200.483] FlushFileBuffers (hFile=0x2f4) returned 1 [0200.492] FlushFileBuffers (hFile=0x2b0) returned 1 [0200.495] CloseHandle (hObject=0x2f4) returned 1 [0200.495] CloseHandle (hObject=0x2b0) returned 1 [0200.495] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf")) returned 1 [0200.496] SetEvent (hEvent=0x27c) returned 1 [0200.496] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0200.496] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=7804) returned 1 [0200.496] CloseHandle (hObject=0x2b0) returned 1 [0200.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf")) returned 0x220 [0200.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf")) returned 0x220 [0200.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.497] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0200.497] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.497] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.497] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0200.498] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1e7c, lpOverlapped=0x0) returned 1 [0200.499] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1e80, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1e80, lpOverlapped=0x0) returned 1 [0200.500] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0200.500] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.500] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.500] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1e7c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1e7c, lpOverlapped=0x0) returned 1 [0200.500] FlushFileBuffers (hFile=0x2b0) returned 1 [0200.509] FlushFileBuffers (hFile=0x2f4) returned 1 [0200.514] CloseHandle (hObject=0x2b0) returned 1 [0200.514] CloseHandle (hObject=0x2f4) returned 1 [0200.514] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf")) returned 1 [0200.515] SetEvent (hEvent=0x27c) returned 1 [0200.515] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0200.515] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2492) returned 1 [0200.515] CloseHandle (hObject=0x2f4) returned 1 [0200.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf")) returned 0x220 [0200.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf")) returned 0x220 [0200.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.516] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0200.516] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.516] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.516] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0200.516] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x9bc, lpOverlapped=0x0) returned 1 [0200.517] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x9c0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x9c0, lpOverlapped=0x0) returned 1 [0200.518] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0200.518] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.518] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.518] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x9bc, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x9bc, lpOverlapped=0x0) returned 1 [0200.519] FlushFileBuffers (hFile=0x2f4) returned 1 [0200.527] FlushFileBuffers (hFile=0x2b0) returned 1 [0200.529] CloseHandle (hObject=0x2f4) returned 1 [0200.529] CloseHandle (hObject=0x2b0) returned 1 [0200.529] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf")) returned 1 [0200.531] SetEvent (hEvent=0x27c) returned 1 [0200.531] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0200.531] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=4296) returned 1 [0200.531] CloseHandle (hObject=0x2b0) returned 1 [0200.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf")) returned 0x220 [0200.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf")) returned 0x220 [0200.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.531] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0200.531] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.531] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.532] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0200.532] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x10c8, lpOverlapped=0x0) returned 1 [0200.533] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x10d0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x10d0, lpOverlapped=0x0) returned 1 [0200.534] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0200.534] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.534] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.534] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x10c8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x10c8, lpOverlapped=0x0) returned 1 [0200.535] FlushFileBuffers (hFile=0x2b0) returned 1 [0200.547] FlushFileBuffers (hFile=0x2f4) returned 1 [0200.550] CloseHandle (hObject=0x2b0) returned 1 [0200.550] CloseHandle (hObject=0x2f4) returned 1 [0200.550] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf")) returned 1 [0200.551] SetEvent (hEvent=0x27c) returned 1 [0200.552] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0200.552] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=4808) returned 1 [0200.552] CloseHandle (hObject=0x2f4) returned 1 [0200.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf")) returned 0x220 [0200.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf")) returned 0x220 [0200.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.553] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0200.553] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.553] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.553] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0200.553] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x12c8, lpOverlapped=0x0) returned 1 [0200.554] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x12d0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x12d0, lpOverlapped=0x0) returned 1 [0200.556] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0200.556] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.556] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.556] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x12c8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x12c8, lpOverlapped=0x0) returned 1 [0200.557] FlushFileBuffers (hFile=0x2f4) returned 1 [0200.567] FlushFileBuffers (hFile=0x2b0) returned 1 [0200.570] CloseHandle (hObject=0x2f4) returned 1 [0200.570] CloseHandle (hObject=0x2b0) returned 1 [0200.570] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf")) returned 1 [0200.571] SetEvent (hEvent=0x27c) returned 1 [0200.572] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0200.572] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=5004) returned 1 [0200.572] CloseHandle (hObject=0x2b0) returned 1 [0200.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf")) returned 0x220 [0200.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf")) returned 0x220 [0200.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.572] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0200.572] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.573] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.573] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0200.573] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x138c, lpOverlapped=0x0) returned 1 [0200.574] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1390, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1390, lpOverlapped=0x0) returned 1 [0200.575] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0200.575] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.575] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.576] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x138c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x138c, lpOverlapped=0x0) returned 1 [0200.576] FlushFileBuffers (hFile=0x2b0) returned 1 [0200.587] FlushFileBuffers (hFile=0x2f4) returned 1 [0200.592] CloseHandle (hObject=0x2b0) returned 1 [0200.592] CloseHandle (hObject=0x2f4) returned 1 [0200.592] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf")) returned 1 [0200.593] SetEvent (hEvent=0x27c) returned 1 [0200.593] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0200.593] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=4870) returned 1 [0200.593] CloseHandle (hObject=0x2f4) returned 1 [0200.593] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf")) returned 0x220 [0200.593] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf")) returned 0x220 [0200.593] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.593] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0200.594] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.594] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.594] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0200.594] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1306, lpOverlapped=0x0) returned 1 [0200.595] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1310, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1310, lpOverlapped=0x0) returned 1 [0200.596] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0200.596] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.597] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.597] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1306, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1306, lpOverlapped=0x0) returned 1 [0200.597] FlushFileBuffers (hFile=0x2f4) returned 1 [0200.608] FlushFileBuffers (hFile=0x2b0) returned 1 [0200.612] CloseHandle (hObject=0x2f4) returned 1 [0200.612] CloseHandle (hObject=0x2b0) returned 1 [0200.612] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf")) returned 1 [0200.613] SetEvent (hEvent=0x27c) returned 1 [0200.613] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0200.614] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=28948) returned 1 [0200.614] CloseHandle (hObject=0x2b0) returned 1 [0200.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf")) returned 0x220 [0200.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf")) returned 0x220 [0200.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.614] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0200.614] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.614] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.614] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0200.615] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x7114, lpOverlapped=0x0) returned 1 [0200.616] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7120, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x7120, lpOverlapped=0x0) returned 1 [0200.617] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0200.618] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.618] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.618] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7114, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x7114, lpOverlapped=0x0) returned 1 [0200.618] FlushFileBuffers (hFile=0x2b0) returned 1 [0200.628] FlushFileBuffers (hFile=0x2f4) returned 1 [0200.632] CloseHandle (hObject=0x2b0) returned 1 [0200.633] CloseHandle (hObject=0x2f4) returned 1 [0200.633] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf")) returned 1 [0200.634] SetEvent (hEvent=0x27c) returned 1 [0200.634] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0200.634] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=22516) returned 1 [0200.634] CloseHandle (hObject=0x2f4) returned 1 [0200.634] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf")) returned 0x220 [0200.634] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf")) returned 0x220 [0200.634] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.635] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0200.635] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.635] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.635] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0200.635] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x57f4, lpOverlapped=0x0) returned 1 [0200.636] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5800, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x5800, lpOverlapped=0x0) returned 1 [0200.638] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0200.638] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.638] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.638] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x57f4, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x57f4, lpOverlapped=0x0) returned 1 [0200.638] FlushFileBuffers (hFile=0x2f4) returned 1 [0200.648] FlushFileBuffers (hFile=0x2b0) returned 1 [0200.652] CloseHandle (hObject=0x2f4) returned 1 [0200.652] CloseHandle (hObject=0x2b0) returned 1 [0200.652] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf")) returned 1 [0200.653] SetEvent (hEvent=0x27c) returned 1 [0200.653] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0200.653] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=17236) returned 1 [0200.654] CloseHandle (hObject=0x2b0) returned 1 [0200.654] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf")) returned 0x220 [0200.654] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf")) returned 0x220 [0200.654] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.654] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0200.654] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.654] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.654] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0200.655] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4354, lpOverlapped=0x0) returned 1 [0200.656] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4360, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4360, lpOverlapped=0x0) returned 1 [0200.657] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0200.657] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.657] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.657] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4354, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4354, lpOverlapped=0x0) returned 1 [0200.658] FlushFileBuffers (hFile=0x2b0) returned 1 [0200.668] FlushFileBuffers (hFile=0x2f4) returned 1 [0200.670] CloseHandle (hObject=0x2b0) returned 1 [0200.670] CloseHandle (hObject=0x2f4) returned 1 [0200.670] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf")) returned 1 [0200.671] SetEvent (hEvent=0x27c) returned 1 [0200.671] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0200.671] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=16676) returned 1 [0200.671] CloseHandle (hObject=0x2f4) returned 1 [0200.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf")) returned 0x220 [0200.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf")) returned 0x220 [0200.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.672] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0200.672] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.672] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.672] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0200.673] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4124, lpOverlapped=0x0) returned 1 [0200.674] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4130, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4130, lpOverlapped=0x0) returned 1 [0200.675] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0200.675] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.676] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.676] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4124, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4124, lpOverlapped=0x0) returned 1 [0200.676] FlushFileBuffers (hFile=0x2f4) returned 1 [0200.688] FlushFileBuffers (hFile=0x2b0) returned 1 [0200.690] CloseHandle (hObject=0x2f4) returned 1 [0200.690] CloseHandle (hObject=0x2b0) returned 1 [0200.690] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf")) returned 1 [0200.691] SetEvent (hEvent=0x27c) returned 1 [0200.691] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0200.691] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=4924) returned 1 [0200.691] CloseHandle (hObject=0x2b0) returned 1 [0200.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf")) returned 0x220 [0200.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf")) returned 0x220 [0200.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.692] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0200.692] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.692] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.692] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0200.692] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x133c, lpOverlapped=0x0) returned 1 [0200.693] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1340, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1340, lpOverlapped=0x0) returned 1 [0200.694] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0200.695] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.695] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.695] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x133c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x133c, lpOverlapped=0x0) returned 1 [0200.695] FlushFileBuffers (hFile=0x2b0) returned 1 [0200.698] FlushFileBuffers (hFile=0x2f4) returned 1 [0200.708] CloseHandle (hObject=0x2b0) returned 1 [0200.708] CloseHandle (hObject=0x2f4) returned 1 [0200.708] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf")) returned 1 [0200.709] SetEvent (hEvent=0x27c) returned 1 [0200.709] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0200.710] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=24320) returned 1 [0200.710] CloseHandle (hObject=0x2f4) returned 1 [0200.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf")) returned 0x220 [0200.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf")) returned 0x220 [0200.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.710] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0200.710] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.710] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.710] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0200.711] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x5f00, lpOverlapped=0x0) returned 1 [0200.712] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5f10, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x5f10, lpOverlapped=0x0) returned 1 [0200.713] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0200.714] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.714] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.714] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5f00, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x5f00, lpOverlapped=0x0) returned 1 [0200.714] FlushFileBuffers (hFile=0x2f4) returned 1 [0200.717] FlushFileBuffers (hFile=0x2b0) returned 1 [0200.943] CloseHandle (hObject=0x2f4) returned 1 [0200.943] CloseHandle (hObject=0x2b0) returned 1 [0200.943] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf")) returned 1 [0200.945] SetEvent (hEvent=0x27c) returned 1 [0200.945] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0200.945] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=15733) returned 1 [0200.945] CloseHandle (hObject=0x2b0) returned 1 [0200.945] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif")) returned 0x220 [0200.945] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif")) returned 0x220 [0200.945] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.946] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0200.946] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.946] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.946] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0200.946] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x3d75, lpOverlapped=0x0) returned 1 [0200.947] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3d80, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x3d80, lpOverlapped=0x0) returned 1 [0200.949] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0200.949] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.949] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.949] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3d75, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x3d75, lpOverlapped=0x0) returned 1 [0200.949] FlushFileBuffers (hFile=0x2b0) returned 1 [0200.955] FlushFileBuffers (hFile=0x2f4) returned 1 [0200.956] CloseHandle (hObject=0x2b0) returned 1 [0200.956] CloseHandle (hObject=0x2f4) returned 1 [0200.956] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif")) returned 1 [0200.958] SetEvent (hEvent=0x27c) returned 1 [0200.958] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0200.958] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=12982) returned 1 [0200.958] CloseHandle (hObject=0x2f4) returned 1 [0200.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf")) returned 0x220 [0200.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf")) returned 0x220 [0200.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.958] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0200.959] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.959] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.959] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0200.959] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x32b6, lpOverlapped=0x0) returned 1 [0200.960] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x32c0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x32c0, lpOverlapped=0x0) returned 1 [0200.961] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0200.962] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.962] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.962] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x32b6, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x32b6, lpOverlapped=0x0) returned 1 [0200.962] FlushFileBuffers (hFile=0x2f4) returned 1 [0200.965] FlushFileBuffers (hFile=0x2b0) returned 1 [0200.967] CloseHandle (hObject=0x2f4) returned 1 [0200.967] CloseHandle (hObject=0x2b0) returned 1 [0200.967] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf")) returned 1 [0200.968] SetEvent (hEvent=0x27c) returned 1 [0200.968] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0200.968] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=9710) returned 1 [0200.968] CloseHandle (hObject=0x2b0) returned 1 [0200.968] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf")) returned 0x220 [0200.968] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf")) returned 0x220 [0200.968] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0200.968] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0200.969] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.969] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0200.969] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0200.969] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x25ee, lpOverlapped=0x0) returned 1 [0200.971] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x25f0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x25f0, lpOverlapped=0x0) returned 1 [0200.973] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0200.973] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.973] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0200.973] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x25ee, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x25ee, lpOverlapped=0x0) returned 1 [0200.973] FlushFileBuffers (hFile=0x2b0) returned 1 [0200.976] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.011] CloseHandle (hObject=0x2b0) returned 1 [0201.011] CloseHandle (hObject=0x2f4) returned 1 [0201.011] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf")) returned 1 [0201.012] SetEvent (hEvent=0x27c) returned 1 [0201.013] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.013] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=8772) returned 1 [0201.013] CloseHandle (hObject=0x2f4) returned 1 [0201.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf")) returned 0x220 [0201.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf")) returned 0x220 [0201.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.013] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.013] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.013] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.013] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0201.014] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2244, lpOverlapped=0x0) returned 1 [0201.015] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2250, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2250, lpOverlapped=0x0) returned 1 [0201.016] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.016] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.016] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.016] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2244, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2244, lpOverlapped=0x0) returned 1 [0201.017] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.020] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.022] CloseHandle (hObject=0x2f4) returned 1 [0201.022] CloseHandle (hObject=0x2b0) returned 1 [0201.022] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf")) returned 1 [0201.023] SetEvent (hEvent=0x27c) returned 1 [0201.023] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.023] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=14486) returned 1 [0201.023] CloseHandle (hObject=0x2b0) returned 1 [0201.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf")) returned 0x220 [0201.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf")) returned 0x220 [0201.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.024] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.024] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.024] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.024] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0201.024] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x3896, lpOverlapped=0x0) returned 1 [0201.025] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x38a0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x38a0, lpOverlapped=0x0) returned 1 [0201.026] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.027] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.027] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.027] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3896, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x3896, lpOverlapped=0x0) returned 1 [0201.027] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.029] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.031] CloseHandle (hObject=0x2b0) returned 1 [0201.031] CloseHandle (hObject=0x2f4) returned 1 [0201.031] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf")) returned 1 [0201.032] SetEvent (hEvent=0x27c) returned 1 [0201.032] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.032] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=18304) returned 1 [0201.032] CloseHandle (hObject=0x2f4) returned 1 [0201.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf")) returned 0x220 [0201.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf")) returned 0x220 [0201.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.032] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.032] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.033] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.033] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0201.033] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4780, lpOverlapped=0x0) returned 1 [0201.034] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4790, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4790, lpOverlapped=0x0) returned 1 [0201.036] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.036] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.036] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.036] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4780, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4780, lpOverlapped=0x0) returned 1 [0201.036] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.047] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.048] CloseHandle (hObject=0x2f4) returned 1 [0201.049] CloseHandle (hObject=0x2b0) returned 1 [0201.049] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf")) returned 1 [0201.051] SetEvent (hEvent=0x27c) returned 1 [0201.051] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.051] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=11058) returned 1 [0201.051] CloseHandle (hObject=0x2b0) returned 1 [0201.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf")) returned 0x220 [0201.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf")) returned 0x220 [0201.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.052] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.052] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.052] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.052] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0201.052] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2b32, lpOverlapped=0x0) returned 1 [0201.053] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2b40, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2b40, lpOverlapped=0x0) returned 1 [0201.055] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.055] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.055] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.055] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2b32, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2b32, lpOverlapped=0x0) returned 1 [0201.055] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.058] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.060] CloseHandle (hObject=0x2b0) returned 1 [0201.060] CloseHandle (hObject=0x2f4) returned 1 [0201.060] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf")) returned 1 [0201.061] SetEvent (hEvent=0x27c) returned 1 [0201.061] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.061] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=12520) returned 1 [0201.061] CloseHandle (hObject=0x2f4) returned 1 [0201.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf")) returned 0x220 [0201.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf")) returned 0x220 [0201.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.061] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.062] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.062] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.062] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0201.062] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x30e8, lpOverlapped=0x0) returned 1 [0201.063] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x30f0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x30f0, lpOverlapped=0x0) returned 1 [0201.064] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.064] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.064] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.064] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x30e8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x30e8, lpOverlapped=0x0) returned 1 [0201.065] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.067] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.068] CloseHandle (hObject=0x2f4) returned 1 [0201.068] CloseHandle (hObject=0x2b0) returned 1 [0201.068] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf")) returned 1 [0201.070] SetEvent (hEvent=0x27c) returned 1 [0201.070] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.070] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=9818) returned 1 [0201.070] CloseHandle (hObject=0x2b0) returned 1 [0201.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf")) returned 0x220 [0201.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf")) returned 0x220 [0201.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.070] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.070] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.070] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.071] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0201.072] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x265a, lpOverlapped=0x0) returned 1 [0201.074] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2660, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2660, lpOverlapped=0x0) returned 1 [0201.075] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.076] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.076] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.076] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x265a, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x265a, lpOverlapped=0x0) returned 1 [0201.076] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.079] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.081] CloseHandle (hObject=0x2b0) returned 1 [0201.081] CloseHandle (hObject=0x2f4) returned 1 [0201.081] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf")) returned 1 [0201.082] SetEvent (hEvent=0x27c) returned 1 [0201.082] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.083] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=7862) returned 1 [0201.083] CloseHandle (hObject=0x2f4) returned 1 [0201.083] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf")) returned 0x220 [0201.083] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf")) returned 0x220 [0201.083] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.083] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.083] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.083] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.083] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0201.084] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1eb6, lpOverlapped=0x0) returned 1 [0201.085] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1ec0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1ec0, lpOverlapped=0x0) returned 1 [0201.086] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.086] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.086] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.086] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1eb6, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1eb6, lpOverlapped=0x0) returned 1 [0201.086] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.088] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.091] CloseHandle (hObject=0x2f4) returned 1 [0201.091] CloseHandle (hObject=0x2b0) returned 1 [0201.091] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf")) returned 1 [0201.092] SetEvent (hEvent=0x27c) returned 1 [0201.092] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.093] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1012) returned 1 [0201.093] CloseHandle (hObject=0x2b0) returned 1 [0201.093] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf")) returned 0x220 [0201.093] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf")) returned 0x220 [0201.093] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.093] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.093] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.093] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.093] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0201.094] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x3f4, lpOverlapped=0x0) returned 1 [0201.094] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x400, lpOverlapped=0x0) returned 1 [0201.095] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.096] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.096] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.096] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3f4, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x3f4, lpOverlapped=0x0) returned 1 [0201.096] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.099] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.100] CloseHandle (hObject=0x2b0) returned 1 [0201.100] CloseHandle (hObject=0x2f4) returned 1 [0201.100] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf")) returned 1 [0201.101] SetEvent (hEvent=0x27c) returned 1 [0201.101] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.101] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=880) returned 1 [0201.101] CloseHandle (hObject=0x2f4) returned 1 [0201.102] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf")) returned 0x220 [0201.102] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf")) returned 0x220 [0201.102] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.102] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.102] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.102] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.102] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0201.102] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x370, lpOverlapped=0x0) returned 1 [0201.103] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x380, lpOverlapped=0x0) returned 1 [0201.104] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.104] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.105] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.105] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x370, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x370, lpOverlapped=0x0) returned 1 [0201.105] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.107] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.108] CloseHandle (hObject=0x2f4) returned 1 [0201.108] CloseHandle (hObject=0x2b0) returned 1 [0201.108] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf")) returned 1 [0201.109] SetEvent (hEvent=0x27c) returned 1 [0201.109] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.109] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=10146) returned 1 [0201.109] CloseHandle (hObject=0x2b0) returned 1 [0201.110] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf")) returned 0x220 [0201.110] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf")) returned 0x220 [0201.110] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.110] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.110] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.110] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.110] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0201.110] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x27a2, lpOverlapped=0x0) returned 1 [0201.111] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x27b0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x27b0, lpOverlapped=0x0) returned 1 [0201.112] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.113] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.113] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.113] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x27a2, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x27a2, lpOverlapped=0x0) returned 1 [0201.113] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.115] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.118] CloseHandle (hObject=0x2b0) returned 1 [0201.118] CloseHandle (hObject=0x2f4) returned 1 [0201.118] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf")) returned 1 [0201.119] SetEvent (hEvent=0x27c) returned 1 [0201.119] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.119] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1464) returned 1 [0201.119] CloseHandle (hObject=0x2f4) returned 1 [0201.119] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf")) returned 0x220 [0201.119] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf")) returned 0x220 [0201.119] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.120] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.120] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.120] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.120] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0201.120] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x5b8, lpOverlapped=0x0) returned 1 [0201.121] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5c0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x5c0, lpOverlapped=0x0) returned 1 [0201.122] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.122] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.123] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.123] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5b8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x5b8, lpOverlapped=0x0) returned 1 [0201.123] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.125] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.127] CloseHandle (hObject=0x2f4) returned 1 [0201.127] CloseHandle (hObject=0x2b0) returned 1 [0201.127] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf")) returned 1 [0201.128] SetEvent (hEvent=0x27c) returned 1 [0201.128] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.128] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1696) returned 1 [0201.128] CloseHandle (hObject=0x2b0) returned 1 [0201.128] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf")) returned 0x220 [0201.128] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf")) returned 0x220 [0201.128] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.128] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.222] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.223] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.223] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0201.224] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x6a0, lpOverlapped=0x0) returned 1 [0201.225] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x6b0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x6b0, lpOverlapped=0x0) returned 1 [0201.226] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.226] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.226] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.226] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x6a0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x6a0, lpOverlapped=0x0) returned 1 [0201.226] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.245] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.246] CloseHandle (hObject=0x2b0) returned 1 [0201.246] CloseHandle (hObject=0x2f4) returned 1 [0201.246] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf")) returned 1 [0201.248] SetEvent (hEvent=0x27c) returned 1 [0201.248] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.248] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1516) returned 1 [0201.248] CloseHandle (hObject=0x2f4) returned 1 [0201.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf")) returned 0x220 [0201.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf")) returned 0x220 [0201.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.249] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.249] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.249] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.249] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0201.249] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x5ec, lpOverlapped=0x0) returned 1 [0201.250] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5f0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x5f0, lpOverlapped=0x0) returned 1 [0201.251] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.251] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.252] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.252] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5ec, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x5ec, lpOverlapped=0x0) returned 1 [0201.252] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.257] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.258] CloseHandle (hObject=0x2f4) returned 1 [0201.258] CloseHandle (hObject=0x2b0) returned 1 [0201.258] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf")) returned 1 [0201.259] SetEvent (hEvent=0x27c) returned 1 [0201.260] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.260] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3986) returned 1 [0201.260] CloseHandle (hObject=0x2b0) returned 1 [0201.260] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf")) returned 0x220 [0201.260] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf")) returned 0x220 [0201.260] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.260] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.260] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.260] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.260] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0201.261] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xf92, lpOverlapped=0x0) returned 1 [0201.262] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xfa0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xfa0, lpOverlapped=0x0) returned 1 [0201.263] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.263] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.263] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.263] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf92, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xf92, lpOverlapped=0x0) returned 1 [0201.263] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.266] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.268] CloseHandle (hObject=0x2b0) returned 1 [0201.268] CloseHandle (hObject=0x2f4) returned 1 [0201.268] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf")) returned 1 [0201.270] SetEvent (hEvent=0x27c) returned 1 [0201.270] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.270] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=8070) returned 1 [0201.270] CloseHandle (hObject=0x2f4) returned 1 [0201.270] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf")) returned 0x220 [0201.270] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf")) returned 0x220 [0201.270] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.271] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.271] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.271] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.271] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0201.271] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1f86, lpOverlapped=0x0) returned 1 [0201.272] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1f90, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1f90, lpOverlapped=0x0) returned 1 [0201.273] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.274] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.274] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.274] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1f86, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1f86, lpOverlapped=0x0) returned 1 [0201.274] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.276] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.278] CloseHandle (hObject=0x2f4) returned 1 [0201.279] CloseHandle (hObject=0x2b0) returned 1 [0201.279] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf")) returned 1 [0201.280] SetEvent (hEvent=0x27c) returned 1 [0201.280] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.280] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=9304) returned 1 [0201.280] CloseHandle (hObject=0x2b0) returned 1 [0201.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf")) returned 0x220 [0201.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf")) returned 0x220 [0201.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.280] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.280] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.280] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.281] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0201.281] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2458, lpOverlapped=0x0) returned 1 [0201.282] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2460, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2460, lpOverlapped=0x0) returned 1 [0201.283] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.283] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.283] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.284] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2458, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2458, lpOverlapped=0x0) returned 1 [0201.284] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.287] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.289] CloseHandle (hObject=0x2b0) returned 1 [0201.289] CloseHandle (hObject=0x2f4) returned 1 [0201.289] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf")) returned 1 [0201.290] SetEvent (hEvent=0x27c) returned 1 [0201.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.291] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=4024) returned 1 [0201.291] CloseHandle (hObject=0x2f4) returned 1 [0201.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf")) returned 0x220 [0201.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf")) returned 0x220 [0201.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.291] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.291] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0201.292] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xfb8, lpOverlapped=0x0) returned 1 [0201.293] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xfc0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xfc0, lpOverlapped=0x0) returned 1 [0201.294] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.294] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.294] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.294] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xfb8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xfb8, lpOverlapped=0x0) returned 1 [0201.295] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.297] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.299] CloseHandle (hObject=0x2f4) returned 1 [0201.299] CloseHandle (hObject=0x2b0) returned 1 [0201.299] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf")) returned 1 [0201.300] SetEvent (hEvent=0x27c) returned 1 [0201.300] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.301] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=14444) returned 1 [0201.301] CloseHandle (hObject=0x2b0) returned 1 [0201.301] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf")) returned 0x220 [0201.301] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf")) returned 0x220 [0201.301] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.301] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.301] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.301] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.301] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0201.302] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x386c, lpOverlapped=0x0) returned 1 [0201.303] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3870, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x3870, lpOverlapped=0x0) returned 1 [0201.304] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.304] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.304] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.305] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x386c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x386c, lpOverlapped=0x0) returned 1 [0201.305] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.307] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.308] CloseHandle (hObject=0x2b0) returned 1 [0201.308] CloseHandle (hObject=0x2f4) returned 1 [0201.308] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf")) returned 1 [0201.310] SetEvent (hEvent=0x27c) returned 1 [0201.310] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.310] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1536) returned 1 [0201.310] CloseHandle (hObject=0x2f4) returned 1 [0201.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf")) returned 0x220 [0201.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf")) returned 0x220 [0201.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.310] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.310] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.310] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.310] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0201.311] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x600, lpOverlapped=0x0) returned 1 [0201.312] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x610, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x610, lpOverlapped=0x0) returned 1 [0201.313] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.313] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.313] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.313] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x600, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x600, lpOverlapped=0x0) returned 1 [0201.313] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.316] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.317] CloseHandle (hObject=0x2f4) returned 1 [0201.317] CloseHandle (hObject=0x2b0) returned 1 [0201.317] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf")) returned 1 [0201.318] SetEvent (hEvent=0x27c) returned 1 [0201.318] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.318] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=4708) returned 1 [0201.318] CloseHandle (hObject=0x2b0) returned 1 [0201.319] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf")) returned 0x220 [0201.319] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf")) returned 0x220 [0201.319] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.319] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.319] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.319] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.319] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0201.320] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1264, lpOverlapped=0x0) returned 1 [0201.320] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1270, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1270, lpOverlapped=0x0) returned 1 [0201.321] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.322] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.322] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.322] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1264, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1264, lpOverlapped=0x0) returned 1 [0201.322] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.324] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.330] CloseHandle (hObject=0x2b0) returned 1 [0201.330] CloseHandle (hObject=0x2f4) returned 1 [0201.331] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf")) returned 1 [0201.332] SetEvent (hEvent=0x27c) returned 1 [0201.332] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.332] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1736) returned 1 [0201.332] CloseHandle (hObject=0x2f4) returned 1 [0201.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf")) returned 0x220 [0201.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf")) returned 0x220 [0201.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.333] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.333] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.333] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.333] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0201.333] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x6c8, lpOverlapped=0x0) returned 1 [0201.334] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x6d0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x6d0, lpOverlapped=0x0) returned 1 [0201.335] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.335] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.336] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.336] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x6c8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x6c8, lpOverlapped=0x0) returned 1 [0201.336] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.338] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.339] CloseHandle (hObject=0x2f4) returned 1 [0201.340] CloseHandle (hObject=0x2b0) returned 1 [0201.340] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf")) returned 1 [0201.341] SetEvent (hEvent=0x27c) returned 1 [0201.341] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.341] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=12482) returned 1 [0201.341] CloseHandle (hObject=0x2b0) returned 1 [0201.341] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf")) returned 0x220 [0201.341] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf")) returned 0x220 [0201.341] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.341] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.341] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.342] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.342] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0201.342] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x30c2, lpOverlapped=0x0) returned 1 [0201.343] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x30d0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x30d0, lpOverlapped=0x0) returned 1 [0201.344] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.345] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.345] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.345] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x30c2, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x30c2, lpOverlapped=0x0) returned 1 [0201.345] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.347] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.348] CloseHandle (hObject=0x2b0) returned 1 [0201.348] CloseHandle (hObject=0x2f4) returned 1 [0201.348] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf")) returned 1 [0201.350] SetEvent (hEvent=0x27c) returned 1 [0201.350] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.350] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2556) returned 1 [0201.350] CloseHandle (hObject=0x2f4) returned 1 [0201.350] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf")) returned 0x220 [0201.350] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf")) returned 0x220 [0201.350] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.350] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.350] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.350] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.350] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0201.351] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x9fc, lpOverlapped=0x0) returned 1 [0201.352] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xa00, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xa00, lpOverlapped=0x0) returned 1 [0201.353] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.353] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.353] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.353] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x9fc, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x9fc, lpOverlapped=0x0) returned 1 [0201.353] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.355] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.357] CloseHandle (hObject=0x2f4) returned 1 [0201.357] CloseHandle (hObject=0x2b0) returned 1 [0201.357] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf")) returned 1 [0201.358] SetEvent (hEvent=0x27c) returned 1 [0201.358] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.358] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=5752) returned 1 [0201.358] CloseHandle (hObject=0x2b0) returned 1 [0201.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf")) returned 0x220 [0201.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf")) returned 0x220 [0201.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.358] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.359] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.359] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.359] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0201.359] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1678, lpOverlapped=0x0) returned 1 [0201.360] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1680, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1680, lpOverlapped=0x0) returned 1 [0201.361] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.361] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.361] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.361] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1678, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1678, lpOverlapped=0x0) returned 1 [0201.362] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.364] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.368] CloseHandle (hObject=0x2b0) returned 1 [0201.368] CloseHandle (hObject=0x2f4) returned 1 [0201.368] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf")) returned 1 [0201.369] SetEvent (hEvent=0x27c) returned 1 [0201.369] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.369] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2644) returned 1 [0201.369] CloseHandle (hObject=0x2f4) returned 1 [0201.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf")) returned 0x220 [0201.370] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf")) returned 0x220 [0201.370] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.370] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.370] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.370] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.370] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0201.371] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xa54, lpOverlapped=0x0) returned 1 [0201.371] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xa60, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xa60, lpOverlapped=0x0) returned 1 [0201.372] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.372] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.373] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.373] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xa54, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xa54, lpOverlapped=0x0) returned 1 [0201.373] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.375] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.376] CloseHandle (hObject=0x2f4) returned 1 [0201.376] CloseHandle (hObject=0x2b0) returned 1 [0201.376] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf")) returned 1 [0201.377] SetEvent (hEvent=0x27c) returned 1 [0201.377] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.378] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=5272) returned 1 [0201.378] CloseHandle (hObject=0x2b0) returned 1 [0201.378] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf")) returned 0x220 [0201.378] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf")) returned 0x220 [0201.378] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.378] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.378] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.378] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.378] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0201.379] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1498, lpOverlapped=0x0) returned 1 [0201.380] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x14a0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x14a0, lpOverlapped=0x0) returned 1 [0201.381] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.381] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.381] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.382] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1498, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1498, lpOverlapped=0x0) returned 1 [0201.382] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.384] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.386] CloseHandle (hObject=0x2b0) returned 1 [0201.386] CloseHandle (hObject=0x2f4) returned 1 [0201.386] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf")) returned 1 [0201.387] SetEvent (hEvent=0x27c) returned 1 [0201.388] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00270_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.388] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3016) returned 1 [0201.388] CloseHandle (hObject=0x2f4) returned 1 [0201.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00270_.wmf")) returned 0x220 [0201.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00270_.wmf")) returned 0x220 [0201.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00270_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.388] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00270_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.388] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.389] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.389] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00270_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0201.389] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xbc8, lpOverlapped=0x0) returned 1 [0201.391] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xbd0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xbd0, lpOverlapped=0x0) returned 1 [0201.392] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.392] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.392] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.392] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xbc8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xbc8, lpOverlapped=0x0) returned 1 [0201.392] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.395] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.396] CloseHandle (hObject=0x2f4) returned 1 [0201.397] CloseHandle (hObject=0x2b0) returned 1 [0201.397] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00270_.wmf")) returned 1 [0201.398] SetEvent (hEvent=0x27c) returned 1 [0201.398] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00273_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.398] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3780) returned 1 [0201.398] CloseHandle (hObject=0x2b0) returned 1 [0201.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00273_.wmf")) returned 0x220 [0201.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00273_.wmf")) returned 0x220 [0201.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00273_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.398] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00273_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.399] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.399] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.399] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00273_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0201.399] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xec4, lpOverlapped=0x0) returned 1 [0201.401] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xed0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xed0, lpOverlapped=0x0) returned 1 [0201.402] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.402] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.402] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.402] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xec4, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xec4, lpOverlapped=0x0) returned 1 [0201.402] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.404] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.406] CloseHandle (hObject=0x2b0) returned 1 [0201.406] CloseHandle (hObject=0x2f4) returned 1 [0201.406] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00273_.wmf")) returned 1 [0201.407] SetEvent (hEvent=0x27c) returned 1 [0201.407] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.407] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=4164) returned 1 [0201.408] CloseHandle (hObject=0x2f4) returned 1 [0201.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf")) returned 0x220 [0201.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf")) returned 0x220 [0201.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.408] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.408] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.408] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.408] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0201.409] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1044, lpOverlapped=0x0) returned 1 [0201.410] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1050, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1050, lpOverlapped=0x0) returned 1 [0201.411] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.412] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.412] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.412] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1044, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1044, lpOverlapped=0x0) returned 1 [0201.412] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.414] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.416] CloseHandle (hObject=0x2f4) returned 1 [0201.416] CloseHandle (hObject=0x2b0) returned 1 [0201.416] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf")) returned 1 [0201.417] SetEvent (hEvent=0x27c) returned 1 [0201.417] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00296_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.417] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=812) returned 1 [0201.418] CloseHandle (hObject=0x2b0) returned 1 [0201.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00296_.wmf")) returned 0x220 [0201.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00296_.wmf")) returned 0x220 [0201.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00296_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.418] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00296_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.418] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.418] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.418] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00296_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0201.419] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x32c, lpOverlapped=0x0) returned 1 [0201.420] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x330, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x330, lpOverlapped=0x0) returned 1 [0201.421] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.421] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.421] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.421] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x32c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x32c, lpOverlapped=0x0) returned 1 [0201.421] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.426] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.427] CloseHandle (hObject=0x2b0) returned 1 [0201.427] CloseHandle (hObject=0x2f4) returned 1 [0201.427] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00296_.wmf")) returned 1 [0201.428] SetEvent (hEvent=0x27c) returned 1 [0201.428] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.429] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=13102) returned 1 [0201.429] CloseHandle (hObject=0x2f4) returned 1 [0201.429] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf")) returned 0x220 [0201.429] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf")) returned 0x220 [0201.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.430] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.430] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.430] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.430] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0201.430] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x332e, lpOverlapped=0x0) returned 1 [0201.432] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3330, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x3330, lpOverlapped=0x0) returned 1 [0201.434] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.434] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.434] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.434] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x332e, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x332e, lpOverlapped=0x0) returned 1 [0201.434] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.437] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.438] CloseHandle (hObject=0x2f4) returned 1 [0201.438] CloseHandle (hObject=0x2b0) returned 1 [0201.438] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf")) returned 1 [0201.439] SetEvent (hEvent=0x27c) returned 1 [0201.439] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.440] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=27050) returned 1 [0201.440] CloseHandle (hObject=0x2b0) returned 1 [0201.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf")) returned 0x220 [0201.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf")) returned 0x220 [0201.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.441] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.441] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.441] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.441] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0201.441] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x69aa, lpOverlapped=0x0) returned 1 [0201.444] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x69b0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x69b0, lpOverlapped=0x0) returned 1 [0201.445] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.445] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.445] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.446] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x69aa, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x69aa, lpOverlapped=0x0) returned 1 [0201.446] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.448] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.449] CloseHandle (hObject=0x2b0) returned 1 [0201.449] CloseHandle (hObject=0x2f4) returned 1 [0201.449] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf")) returned 1 [0201.450] SetEvent (hEvent=0x27c) returned 1 [0201.451] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.451] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=6996) returned 1 [0201.451] CloseHandle (hObject=0x2f4) returned 1 [0201.451] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf")) returned 0x220 [0201.451] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf")) returned 0x220 [0201.451] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.451] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.452] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.452] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.452] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0201.452] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1b54, lpOverlapped=0x0) returned 1 [0201.454] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1b60, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1b60, lpOverlapped=0x0) returned 1 [0201.455] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.455] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.455] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.455] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1b54, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1b54, lpOverlapped=0x0) returned 1 [0201.455] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.458] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.459] CloseHandle (hObject=0x2f4) returned 1 [0201.460] CloseHandle (hObject=0x2b0) returned 1 [0201.460] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf")) returned 1 [0201.461] SetEvent (hEvent=0x27c) returned 1 [0201.461] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.461] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=9590) returned 1 [0201.461] CloseHandle (hObject=0x2b0) returned 1 [0201.461] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf")) returned 0x220 [0201.461] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf")) returned 0x220 [0201.461] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.461] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.462] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.462] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.462] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0201.462] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2576, lpOverlapped=0x0) returned 1 [0201.464] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2580, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2580, lpOverlapped=0x0) returned 1 [0201.465] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.465] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.466] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.466] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2576, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2576, lpOverlapped=0x0) returned 1 [0201.466] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.468] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.470] CloseHandle (hObject=0x2b0) returned 1 [0201.470] CloseHandle (hObject=0x2f4) returned 1 [0201.470] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf")) returned 1 [0201.471] SetEvent (hEvent=0x27c) returned 1 [0201.471] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.472] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=27552) returned 1 [0201.472] CloseHandle (hObject=0x2f4) returned 1 [0201.472] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf")) returned 0x220 [0201.472] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf")) returned 0x220 [0201.472] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.472] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.472] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.472] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.473] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0201.473] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x6ba0, lpOverlapped=0x0) returned 1 [0201.475] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x6bb0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x6bb0, lpOverlapped=0x0) returned 1 [0201.477] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.477] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.477] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.477] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x6ba0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x6ba0, lpOverlapped=0x0) returned 1 [0201.477] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.484] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.485] CloseHandle (hObject=0x2f4) returned 1 [0201.485] CloseHandle (hObject=0x2b0) returned 1 [0201.486] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf")) returned 1 [0201.487] SetEvent (hEvent=0x27c) returned 1 [0201.487] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.487] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=11500) returned 1 [0201.487] CloseHandle (hObject=0x2b0) returned 1 [0201.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf")) returned 0x220 [0201.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf")) returned 0x220 [0201.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.488] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.488] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.488] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.488] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0201.488] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2cec, lpOverlapped=0x0) returned 1 [0201.490] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2cf0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2cf0, lpOverlapped=0x0) returned 1 [0201.492] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.492] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.492] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.492] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2cec, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2cec, lpOverlapped=0x0) returned 1 [0201.492] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.494] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.496] CloseHandle (hObject=0x2b0) returned 1 [0201.496] CloseHandle (hObject=0x2f4) returned 1 [0201.496] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf")) returned 1 [0201.497] SetEvent (hEvent=0x27c) returned 1 [0201.497] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.498] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=4408) returned 1 [0201.498] CloseHandle (hObject=0x2f4) returned 1 [0201.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf")) returned 0x220 [0201.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf")) returned 0x220 [0201.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.498] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.498] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.498] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.498] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0201.499] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1138, lpOverlapped=0x0) returned 1 [0201.500] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1140, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1140, lpOverlapped=0x0) returned 1 [0201.501] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.502] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.502] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.502] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1138, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1138, lpOverlapped=0x0) returned 1 [0201.502] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.504] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.505] CloseHandle (hObject=0x2f4) returned 1 [0201.505] CloseHandle (hObject=0x2b0) returned 1 [0201.505] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf")) returned 1 [0201.506] SetEvent (hEvent=0x27c) returned 1 [0201.507] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.507] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=6256) returned 1 [0201.507] CloseHandle (hObject=0x2b0) returned 1 [0201.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf")) returned 0x220 [0201.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf")) returned 0x220 [0201.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.508] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.508] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.508] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.508] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0201.508] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1870, lpOverlapped=0x0) returned 1 [0201.510] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1880, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1880, lpOverlapped=0x0) returned 1 [0201.511] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.511] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.512] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.512] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1870, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1870, lpOverlapped=0x0) returned 1 [0201.512] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.514] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.516] CloseHandle (hObject=0x2b0) returned 1 [0201.516] CloseHandle (hObject=0x2f4) returned 1 [0201.516] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf")) returned 1 [0201.517] SetEvent (hEvent=0x27c) returned 1 [0201.517] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.517] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=19476) returned 1 [0201.518] CloseHandle (hObject=0x2f4) returned 1 [0201.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf")) returned 0x220 [0201.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf")) returned 0x220 [0201.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.518] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.518] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.518] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.518] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0201.519] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4c14, lpOverlapped=0x0) returned 1 [0201.521] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4c20, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4c20, lpOverlapped=0x0) returned 1 [0201.522] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.522] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.522] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.522] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4c14, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4c14, lpOverlapped=0x0) returned 1 [0201.522] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.525] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.526] CloseHandle (hObject=0x2f4) returned 1 [0201.526] CloseHandle (hObject=0x2b0) returned 1 [0201.526] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf")) returned 1 [0201.527] SetEvent (hEvent=0x27c) returned 1 [0201.528] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00985_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.528] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3768) returned 1 [0201.528] CloseHandle (hObject=0x2b0) returned 1 [0201.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00985_.wmf")) returned 0x220 [0201.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00985_.wmf")) returned 0x220 [0201.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00985_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.529] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00985_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.529] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.529] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.529] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00985_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0201.529] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xeb8, lpOverlapped=0x0) returned 1 [0201.531] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xec0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xec0, lpOverlapped=0x0) returned 1 [0201.532] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.532] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.532] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.532] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xeb8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xeb8, lpOverlapped=0x0) returned 1 [0201.532] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.534] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.536] CloseHandle (hObject=0x2b0) returned 1 [0201.536] CloseHandle (hObject=0x2f4) returned 1 [0201.536] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00985_.wmf")) returned 1 [0201.537] SetEvent (hEvent=0x27c) returned 1 [0201.537] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boat.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.538] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3350) returned 1 [0201.538] CloseHandle (hObject=0x2f4) returned 1 [0201.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boat.wmf")) returned 0x220 [0201.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boat.wmf")) returned 0x220 [0201.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boat.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.539] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boat.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.539] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.539] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.539] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boat.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0201.542] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xd16, lpOverlapped=0x0) returned 1 [0201.543] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xd20, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xd20, lpOverlapped=0x0) returned 1 [0201.545] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.545] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.545] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.545] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xd16, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xd16, lpOverlapped=0x0) returned 1 [0201.545] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.547] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.549] CloseHandle (hObject=0x2f4) returned 1 [0201.549] CloseHandle (hObject=0x2b0) returned 1 [0201.549] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boat.wmf")) returned 1 [0201.550] SetEvent (hEvent=0x27c) returned 1 [0201.550] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.550] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=29004) returned 1 [0201.551] CloseHandle (hObject=0x2b0) returned 1 [0201.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf")) returned 0x220 [0201.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf")) returned 0x220 [0201.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.551] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.551] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.551] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.551] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0201.552] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x714c, lpOverlapped=0x0) returned 1 [0201.554] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7150, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x7150, lpOverlapped=0x0) returned 1 [0201.556] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.556] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.556] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.556] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x714c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x714c, lpOverlapped=0x0) returned 1 [0201.556] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.560] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.562] CloseHandle (hObject=0x2b0) returned 1 [0201.562] CloseHandle (hObject=0x2f4) returned 1 [0201.562] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf")) returned 1 [0201.563] SetEvent (hEvent=0x27c) returned 1 [0201.563] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00076_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.564] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1330) returned 1 [0201.564] CloseHandle (hObject=0x2f4) returned 1 [0201.564] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00076_.wmf")) returned 0x220 [0201.564] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00076_.wmf")) returned 0x220 [0201.564] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00076_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.564] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00076_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.564] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.564] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.564] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00076_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0201.565] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x532, lpOverlapped=0x0) returned 1 [0201.566] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x540, lpOverlapped=0x0) returned 1 [0201.567] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.567] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.567] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.568] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x532, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x532, lpOverlapped=0x0) returned 1 [0201.568] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.570] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.571] CloseHandle (hObject=0x2f4) returned 1 [0201.571] CloseHandle (hObject=0x2b0) returned 1 [0201.571] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00076_.wmf")) returned 1 [0201.572] SetEvent (hEvent=0x27c) returned 1 [0201.573] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00078_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.573] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1444) returned 1 [0201.573] CloseHandle (hObject=0x2b0) returned 1 [0201.574] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00078_.wmf")) returned 0x220 [0201.574] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00078_.wmf")) returned 0x220 [0201.574] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00078_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.574] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00078_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.574] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.574] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.574] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00078_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0201.575] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x5a4, lpOverlapped=0x0) returned 1 [0201.576] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x5b0, lpOverlapped=0x0) returned 1 [0201.577] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.577] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.577] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.577] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5a4, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x5a4, lpOverlapped=0x0) returned 1 [0201.578] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.580] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.581] CloseHandle (hObject=0x2b0) returned 1 [0201.581] CloseHandle (hObject=0x2f4) returned 1 [0201.581] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00078_.wmf")) returned 1 [0201.582] SetEvent (hEvent=0x27c) returned 1 [0201.582] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.583] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=7974) returned 1 [0201.583] CloseHandle (hObject=0x2f4) returned 1 [0201.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf")) returned 0x220 [0201.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf")) returned 0x220 [0201.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.583] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.583] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.583] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.583] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0201.584] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1f26, lpOverlapped=0x0) returned 1 [0201.586] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1f30, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1f30, lpOverlapped=0x0) returned 1 [0201.587] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.587] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.587] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.587] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1f26, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1f26, lpOverlapped=0x0) returned 1 [0201.587] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.589] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.591] CloseHandle (hObject=0x2f4) returned 1 [0201.591] CloseHandle (hObject=0x2b0) returned 1 [0201.591] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf")) returned 1 [0201.592] SetEvent (hEvent=0x27c) returned 1 [0201.592] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00100_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.592] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2378) returned 1 [0201.593] CloseHandle (hObject=0x2b0) returned 1 [0201.593] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00100_.wmf")) returned 0x220 [0201.593] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00100_.wmf")) returned 0x220 [0201.593] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00100_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.593] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00100_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.593] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.593] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.593] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00100_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0201.593] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x94a, lpOverlapped=0x0) returned 1 [0201.595] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x950, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x950, lpOverlapped=0x0) returned 1 [0201.596] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.596] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.596] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.596] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x94a, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x94a, lpOverlapped=0x0) returned 1 [0201.597] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.602] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.603] CloseHandle (hObject=0x2b0) returned 1 [0201.603] CloseHandle (hObject=0x2f4) returned 1 [0201.603] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00100_.wmf")) returned 1 [0201.604] SetEvent (hEvent=0x27c) returned 1 [0201.604] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00135_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.605] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1044) returned 1 [0201.605] CloseHandle (hObject=0x2f4) returned 1 [0201.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00135_.wmf")) returned 0x220 [0201.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00135_.wmf")) returned 0x220 [0201.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00135_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.605] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00135_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.605] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.605] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.605] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00135_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0201.606] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x414, lpOverlapped=0x0) returned 1 [0201.607] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x420, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x420, lpOverlapped=0x0) returned 1 [0201.608] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.609] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.609] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.609] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x414, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x414, lpOverlapped=0x0) returned 1 [0201.609] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.611] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.613] CloseHandle (hObject=0x2f4) returned 1 [0201.613] CloseHandle (hObject=0x2b0) returned 1 [0201.614] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00135_.wmf")) returned 1 [0201.614] SetEvent (hEvent=0x27c) returned 1 [0201.615] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00136_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.615] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2166) returned 1 [0201.615] CloseHandle (hObject=0x2b0) returned 1 [0201.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00136_.wmf")) returned 0x220 [0201.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00136_.wmf")) returned 0x220 [0201.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00136_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.615] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00136_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.615] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.616] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.616] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00136_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0201.616] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x876, lpOverlapped=0x0) returned 1 [0201.618] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x880, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x880, lpOverlapped=0x0) returned 1 [0201.619] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.619] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.619] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.619] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x876, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x876, lpOverlapped=0x0) returned 1 [0201.619] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.623] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.625] CloseHandle (hObject=0x2b0) returned 1 [0201.625] CloseHandle (hObject=0x2f4) returned 1 [0201.625] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00136_.wmf")) returned 1 [0201.626] SetEvent (hEvent=0x27c) returned 1 [0201.626] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00145_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.626] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1712) returned 1 [0201.627] CloseHandle (hObject=0x2f4) returned 1 [0201.627] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00145_.wmf")) returned 0x220 [0201.627] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00145_.wmf")) returned 0x220 [0201.627] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00145_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.627] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00145_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.627] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.627] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.627] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00145_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0201.627] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x6b0, lpOverlapped=0x0) returned 1 [0201.630] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x6c0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x6c0, lpOverlapped=0x0) returned 1 [0201.631] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.631] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.631] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.631] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x6b0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x6b0, lpOverlapped=0x0) returned 1 [0201.631] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.645] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.685] CloseHandle (hObject=0x2f4) returned 1 [0201.685] CloseHandle (hObject=0x2b0) returned 1 [0201.685] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00145_.wmf")) returned 1 [0201.687] SetEvent (hEvent=0x27c) returned 1 [0201.687] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.687] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=8366) returned 1 [0201.687] CloseHandle (hObject=0x2b0) returned 1 [0201.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf")) returned 0x220 [0201.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf")) returned 0x220 [0201.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.688] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.688] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.688] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.688] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0201.688] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x20ae, lpOverlapped=0x0) returned 1 [0201.691] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x20b0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x20b0, lpOverlapped=0x0) returned 1 [0201.692] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.692] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.692] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.692] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x20ae, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x20ae, lpOverlapped=0x0) returned 1 [0201.693] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.702] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.707] CloseHandle (hObject=0x2b0) returned 1 [0201.707] CloseHandle (hObject=0x2f4) returned 1 [0201.707] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf")) returned 1 [0201.708] SetEvent (hEvent=0x27c) returned 1 [0201.708] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.709] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=12788) returned 1 [0201.709] CloseHandle (hObject=0x2f4) returned 1 [0201.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf")) returned 0x220 [0201.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf")) returned 0x220 [0201.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.709] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.709] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.709] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.709] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0201.710] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x31f4, lpOverlapped=0x0) returned 1 [0201.714] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3200, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x3200, lpOverlapped=0x0) returned 1 [0201.715] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.715] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.715] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.715] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x31f4, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x31f4, lpOverlapped=0x0) returned 1 [0201.715] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.725] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.729] CloseHandle (hObject=0x2f4) returned 1 [0201.729] CloseHandle (hObject=0x2b0) returned 1 [0201.729] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf")) returned 1 [0201.730] SetEvent (hEvent=0x27c) returned 1 [0201.730] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00224_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.731] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1588) returned 1 [0201.731] CloseHandle (hObject=0x2b0) returned 1 [0201.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00224_.wmf")) returned 0x220 [0201.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00224_.wmf")) returned 0x220 [0201.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00224_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.731] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00224_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.731] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.731] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.732] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00224_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0201.732] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x634, lpOverlapped=0x0) returned 1 [0201.734] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x640, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x640, lpOverlapped=0x0) returned 1 [0201.735] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.735] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.735] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.735] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x634, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x634, lpOverlapped=0x0) returned 1 [0201.735] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.738] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.744] CloseHandle (hObject=0x2b0) returned 1 [0201.744] CloseHandle (hObject=0x2f4) returned 1 [0201.744] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00224_.wmf")) returned 1 [0201.745] SetEvent (hEvent=0x27c) returned 1 [0201.745] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00439_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.746] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2052) returned 1 [0201.746] CloseHandle (hObject=0x2f4) returned 1 [0201.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00439_.wmf")) returned 0x220 [0201.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00439_.wmf")) returned 0x220 [0201.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00439_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.746] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00439_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.746] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.746] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.746] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00439_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0201.747] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x804, lpOverlapped=0x0) returned 1 [0201.751] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x810, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x810, lpOverlapped=0x0) returned 1 [0201.752] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.752] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.752] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.752] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x804, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x804, lpOverlapped=0x0) returned 1 [0201.752] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.758] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.767] CloseHandle (hObject=0x2f4) returned 1 [0201.767] CloseHandle (hObject=0x2b0) returned 1 [0201.767] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00439_.wmf")) returned 1 [0201.768] SetEvent (hEvent=0x27c) returned 1 [0201.768] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00441_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.768] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3524) returned 1 [0201.768] CloseHandle (hObject=0x2b0) returned 1 [0201.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00441_.wmf")) returned 0x220 [0201.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00441_.wmf")) returned 0x220 [0201.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00441_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.769] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00441_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.769] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.769] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.769] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00441_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0201.769] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xdc4, lpOverlapped=0x0) returned 1 [0201.771] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xdd0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xdd0, lpOverlapped=0x0) returned 1 [0201.772] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.773] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.773] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.773] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xdc4, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xdc4, lpOverlapped=0x0) returned 1 [0201.773] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.782] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.789] CloseHandle (hObject=0x2b0) returned 1 [0201.790] CloseHandle (hObject=0x2f4) returned 1 [0201.790] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00441_.wmf")) returned 1 [0201.791] SetEvent (hEvent=0x27c) returned 1 [0201.791] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00443_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.791] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1676) returned 1 [0201.791] CloseHandle (hObject=0x2f4) returned 1 [0201.791] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00443_.wmf")) returned 0x220 [0201.792] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00443_.wmf")) returned 0x220 [0201.792] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00443_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.792] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00443_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.792] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.792] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.792] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00443_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0201.793] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x68c, lpOverlapped=0x0) returned 1 [0201.794] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x690, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x690, lpOverlapped=0x0) returned 1 [0201.795] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.795] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.795] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.795] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x68c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x68c, lpOverlapped=0x0) returned 1 [0201.796] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.802] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.807] CloseHandle (hObject=0x2f4) returned 1 [0201.807] CloseHandle (hObject=0x2b0) returned 1 [0201.807] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00443_.wmf")) returned 1 [0201.808] SetEvent (hEvent=0x27c) returned 1 [0201.808] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00445_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.809] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3796) returned 1 [0201.809] CloseHandle (hObject=0x2b0) returned 1 [0201.809] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00445_.wmf")) returned 0x220 [0201.809] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00445_.wmf")) returned 0x220 [0201.809] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00445_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.809] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00445_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.809] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.810] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.810] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00445_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0201.810] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xed4, lpOverlapped=0x0) returned 1 [0201.812] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xee0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xee0, lpOverlapped=0x0) returned 1 [0201.813] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.814] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.814] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.814] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xed4, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xed4, lpOverlapped=0x0) returned 1 [0201.814] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.823] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.825] CloseHandle (hObject=0x2b0) returned 1 [0201.826] CloseHandle (hObject=0x2f4) returned 1 [0201.826] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00445_.wmf")) returned 1 [0201.827] SetEvent (hEvent=0x27c) returned 1 [0201.828] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01080_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.828] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2732) returned 1 [0201.828] CloseHandle (hObject=0x2f4) returned 1 [0201.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01080_.wmf")) returned 0x220 [0201.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01080_.wmf")) returned 0x220 [0201.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01080_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.828] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01080_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.828] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.828] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.829] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01080_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0201.829] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xaac, lpOverlapped=0x0) returned 1 [0201.831] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xab0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xab0, lpOverlapped=0x0) returned 1 [0201.844] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.844] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.844] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.845] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xaac, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xaac, lpOverlapped=0x0) returned 1 [0201.845] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.855] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.860] CloseHandle (hObject=0x2f4) returned 1 [0201.860] CloseHandle (hObject=0x2b0) returned 1 [0201.860] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01080_.wmf")) returned 1 [0201.861] SetEvent (hEvent=0x27c) returned 1 [0201.862] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01634_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.862] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3494) returned 1 [0201.862] CloseHandle (hObject=0x2b0) returned 1 [0201.869] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01634_.wmf")) returned 0x220 [0201.869] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01634_.wmf")) returned 0x220 [0201.869] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01634_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.870] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01634_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.870] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.870] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.870] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01634_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0201.871] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xda6, lpOverlapped=0x0) returned 1 [0201.873] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xdb0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xdb0, lpOverlapped=0x0) returned 1 [0201.874] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.875] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.875] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.875] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xda6, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xda6, lpOverlapped=0x0) returned 1 [0201.875] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.877] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.884] CloseHandle (hObject=0x2b0) returned 1 [0201.884] CloseHandle (hObject=0x2f4) returned 1 [0201.884] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01634_.wmf")) returned 1 [0201.885] SetEvent (hEvent=0x27c) returned 1 [0201.885] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01636_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.889] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1874) returned 1 [0201.889] CloseHandle (hObject=0x2f4) returned 1 [0201.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01636_.wmf")) returned 0x220 [0201.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01636_.wmf")) returned 0x220 [0201.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01636_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.890] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01636_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.890] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.890] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.890] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01636_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0201.891] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x752, lpOverlapped=0x0) returned 1 [0201.893] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x760, lpOverlapped=0x0) returned 1 [0201.894] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.894] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.894] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.894] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x752, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x752, lpOverlapped=0x0) returned 1 [0201.894] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.903] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.907] CloseHandle (hObject=0x2f4) returned 1 [0201.907] CloseHandle (hObject=0x2b0) returned 1 [0201.907] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01636_.wmf")) returned 1 [0201.908] SetEvent (hEvent=0x27c) returned 1 [0201.909] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.910] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=10538) returned 1 [0201.911] CloseHandle (hObject=0x2b0) returned 1 [0201.911] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf")) returned 0x220 [0201.911] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf")) returned 0x220 [0201.911] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.911] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.911] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.911] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.911] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0201.912] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x292a, lpOverlapped=0x0) returned 1 [0201.919] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2930, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2930, lpOverlapped=0x0) returned 1 [0201.920] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.920] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.920] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.920] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x292a, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x292a, lpOverlapped=0x0) returned 1 [0201.921] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.930] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.934] CloseHandle (hObject=0x2b0) returned 1 [0201.935] CloseHandle (hObject=0x2f4) returned 1 [0201.935] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf")) returned 1 [0201.936] SetEvent (hEvent=0x27c) returned 1 [0201.936] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.937] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=9322) returned 1 [0201.937] CloseHandle (hObject=0x2f4) returned 1 [0201.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid")) returned 0x220 [0201.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid")) returned 0x220 [0201.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.938] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.938] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.938] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.938] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0201.938] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x246a, lpOverlapped=0x0) returned 1 [0201.941] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2470, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2470, lpOverlapped=0x0) returned 1 [0201.942] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.943] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.943] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.943] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x246a, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x246a, lpOverlapped=0x0) returned 1 [0201.943] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.953] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.955] CloseHandle (hObject=0x2f4) returned 1 [0201.955] CloseHandle (hObject=0x2b0) returned 1 [0201.955] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid")) returned 1 [0201.956] SetEvent (hEvent=0x27c) returned 1 [0201.956] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic1.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.957] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2422) returned 1 [0201.957] CloseHandle (hObject=0x2b0) returned 1 [0201.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic1.wmf")) returned 0x220 [0201.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic1.wmf")) returned 0x220 [0201.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic1.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.957] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic1.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.958] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.958] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.958] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic1.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0201.958] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x976, lpOverlapped=0x0) returned 1 [0201.960] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x980, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x980, lpOverlapped=0x0) returned 1 [0201.961] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.962] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.962] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.962] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x976, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x976, lpOverlapped=0x0) returned 1 [0201.962] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.964] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.971] CloseHandle (hObject=0x2b0) returned 1 [0201.971] CloseHandle (hObject=0x2f4) returned 1 [0201.971] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic1.wmf")) returned 1 [0201.973] SetEvent (hEvent=0x27c) returned 1 [0201.973] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\clip.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.973] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2262) returned 1 [0201.973] CloseHandle (hObject=0x2f4) returned 1 [0201.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\clip.wmf")) returned 0x220 [0201.974] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\clip.wmf")) returned 0x220 [0201.974] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\clip.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.974] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\clip.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0201.974] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.974] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0201.974] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\clip.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0201.974] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x8d6, lpOverlapped=0x0) returned 1 [0201.979] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x8e0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x8e0, lpOverlapped=0x0) returned 1 [0201.980] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0201.980] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.980] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0201.980] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x8d6, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x8d6, lpOverlapped=0x0) returned 1 [0201.980] FlushFileBuffers (hFile=0x2f4) returned 1 [0201.985] FlushFileBuffers (hFile=0x2b0) returned 1 [0201.997] CloseHandle (hObject=0x2f4) returned 1 [0201.997] CloseHandle (hObject=0x2b0) returned 1 [0201.998] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\clip.wmf")) returned 1 [0201.999] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0201.999] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=5270) returned 1 [0201.999] CloseHandle (hObject=0x2b0) returned 1 [0201.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf")) returned 0x220 [0201.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf")) returned 0x220 [0201.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.999] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0202.000] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.000] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.000] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0202.000] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1496, lpOverlapped=0x0) returned 1 [0202.005] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x14a0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x14a0, lpOverlapped=0x0) returned 1 [0202.006] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0202.006] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.006] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.006] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1496, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1496, lpOverlapped=0x0) returned 1 [0202.007] FlushFileBuffers (hFile=0x2b0) returned 1 [0202.014] FlushFileBuffers (hFile=0x2f4) returned 1 [0202.025] CloseHandle (hObject=0x2b0) returned 1 [0202.026] CloseHandle (hObject=0x2f4) returned 1 [0202.026] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf")) returned 1 [0202.027] SetEvent (hEvent=0x27c) returned 1 [0202.027] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cup.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0202.028] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2966) returned 1 [0202.028] CloseHandle (hObject=0x2f4) returned 1 [0202.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cup.wmf")) returned 0x220 [0202.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cup.wmf")) returned 0x220 [0202.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cup.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.028] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cup.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0202.028] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.028] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.028] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cup.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0202.029] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xb96, lpOverlapped=0x0) returned 1 [0202.031] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xba0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xba0, lpOverlapped=0x0) returned 1 [0202.032] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xe2, lpOverlapped=0x0) returned 1 [0202.032] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.032] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.032] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xb96, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xb96, lpOverlapped=0x0) returned 1 [0202.032] FlushFileBuffers (hFile=0x2f4) returned 1 [0202.035] FlushFileBuffers (hFile=0x2b0) returned 1 [0202.044] CloseHandle (hObject=0x2f4) returned 1 [0202.044] CloseHandle (hObject=0x2b0) returned 1 [0202.044] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cup.wmf")) returned 1 [0202.045] SetEvent (hEvent=0x27c) returned 1 [0202.045] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00117_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0202.047] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=31122) returned 1 [0202.047] CloseHandle (hObject=0x2b0) returned 1 [0202.047] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00117_.wmf")) returned 0x220 [0202.047] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00117_.wmf")) returned 0x220 [0202.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00117_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.048] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00117_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0202.048] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.048] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.048] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00117_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0202.048] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x7992, lpOverlapped=0x0) returned 1 [0202.051] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x79a0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x79a0, lpOverlapped=0x0) returned 1 [0202.053] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0202.053] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.053] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.053] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7992, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x7992, lpOverlapped=0x0) returned 1 [0202.053] FlushFileBuffers (hFile=0x2b0) returned 1 [0202.061] FlushFileBuffers (hFile=0x2f4) returned 1 [0202.067] CloseHandle (hObject=0x2b0) returned 1 [0202.067] CloseHandle (hObject=0x2f4) returned 1 [0202.067] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00117_.wmf")) returned 1 [0202.068] SetEvent (hEvent=0x27c) returned 1 [0202.068] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00234_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0202.070] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=29628) returned 1 [0202.070] CloseHandle (hObject=0x2f4) returned 1 [0202.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00234_.wmf")) returned 0x220 [0202.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00234_.wmf")) returned 0x220 [0202.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00234_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.070] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00234_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0202.070] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.070] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.070] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00234_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0202.071] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x73bc, lpOverlapped=0x0) returned 1 [0202.074] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x73c0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x73c0, lpOverlapped=0x0) returned 1 [0202.075] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0202.075] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.076] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.076] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x73bc, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x73bc, lpOverlapped=0x0) returned 1 [0202.076] FlushFileBuffers (hFile=0x2f4) returned 1 [0202.082] FlushFileBuffers (hFile=0x2b0) returned 1 [0202.086] CloseHandle (hObject=0x2f4) returned 1 [0202.086] CloseHandle (hObject=0x2b0) returned 1 [0202.086] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00234_.wmf")) returned 1 [0202.088] SetEvent (hEvent=0x27c) returned 1 [0202.088] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00256_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0202.088] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2832) returned 1 [0202.088] CloseHandle (hObject=0x2b0) returned 1 [0202.088] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00256_.wmf")) returned 0x220 [0202.088] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00256_.wmf")) returned 0x220 [0202.088] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00256_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.089] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00256_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0202.089] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.089] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.089] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00256_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0202.089] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xb10, lpOverlapped=0x0) returned 1 [0202.091] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xb20, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xb20, lpOverlapped=0x0) returned 1 [0202.092] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0202.092] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.092] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.092] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xb10, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xb10, lpOverlapped=0x0) returned 1 [0202.092] FlushFileBuffers (hFile=0x2b0) returned 1 [0202.106] FlushFileBuffers (hFile=0x2f4) returned 1 [0202.108] CloseHandle (hObject=0x2b0) returned 1 [0202.108] CloseHandle (hObject=0x2f4) returned 1 [0202.108] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00256_.wmf")) returned 1 [0202.109] SetEvent (hEvent=0x27c) returned 1 [0202.109] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00297_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0202.113] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=40030) returned 1 [0202.113] CloseHandle (hObject=0x2f4) returned 1 [0202.113] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00297_.wmf")) returned 0x220 [0202.113] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00297_.wmf")) returned 0x220 [0202.113] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00297_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.113] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00297_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0202.113] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.114] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.114] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00297_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0202.114] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x9c5e, lpOverlapped=0x0) returned 1 [0202.117] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x9c60, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x9c60, lpOverlapped=0x0) returned 1 [0202.119] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0202.119] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.119] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.119] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x9c5e, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x9c5e, lpOverlapped=0x0) returned 1 [0202.119] FlushFileBuffers (hFile=0x2f4) returned 1 [0202.126] FlushFileBuffers (hFile=0x2b0) returned 1 [0202.131] CloseHandle (hObject=0x2f4) returned 1 [0202.131] CloseHandle (hObject=0x2b0) returned 1 [0202.131] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00297_.wmf")) returned 1 [0202.132] SetEvent (hEvent=0x27c) returned 1 [0202.132] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00405_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0202.133] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=17584) returned 1 [0202.133] CloseHandle (hObject=0x2b0) returned 1 [0202.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00405_.wmf")) returned 0x220 [0202.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00405_.wmf")) returned 0x220 [0202.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00405_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.133] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00405_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0202.133] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.133] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.133] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00405_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0202.134] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x44b0, lpOverlapped=0x0) returned 1 [0202.136] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x44c0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x44c0, lpOverlapped=0x0) returned 1 [0202.137] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0202.137] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.137] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.137] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x44b0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x44b0, lpOverlapped=0x0) returned 1 [0202.138] FlushFileBuffers (hFile=0x2b0) returned 1 [0202.145] FlushFileBuffers (hFile=0x2f4) returned 1 [0202.150] CloseHandle (hObject=0x2b0) returned 1 [0202.150] CloseHandle (hObject=0x2f4) returned 1 [0202.150] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00405_.wmf")) returned 1 [0202.151] SetEvent (hEvent=0x27c) returned 1 [0202.151] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00413_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0202.152] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=42992) returned 1 [0202.152] CloseHandle (hObject=0x2f4) returned 1 [0202.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00413_.wmf")) returned 0x220 [0202.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00413_.wmf")) returned 0x220 [0202.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00413_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.152] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00413_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0202.152] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.152] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.152] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00413_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0202.153] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xa7f0, lpOverlapped=0x0) returned 1 [0202.156] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xa800, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xa800, lpOverlapped=0x0) returned 1 [0202.158] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0202.159] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.159] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.159] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xa7f0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xa7f0, lpOverlapped=0x0) returned 1 [0202.159] FlushFileBuffers (hFile=0x2f4) returned 1 [0202.172] FlushFileBuffers (hFile=0x2b0) returned 1 [0202.174] CloseHandle (hObject=0x2f4) returned 1 [0202.174] CloseHandle (hObject=0x2b0) returned 1 [0202.174] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00413_.wmf")) returned 1 [0202.176] SetEvent (hEvent=0x27c) returned 1 [0202.176] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00419_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0202.179] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=712) returned 1 [0202.179] CloseHandle (hObject=0x2b0) returned 1 [0202.179] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00419_.wmf")) returned 0x220 [0202.179] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00419_.wmf")) returned 0x220 [0202.179] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00419_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.179] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00419_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0202.179] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.180] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.180] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00419_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0202.180] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2c8, lpOverlapped=0x0) returned 1 [0202.181] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2d0, lpOverlapped=0x0) returned 1 [0202.182] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0202.182] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.183] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.183] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2c8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2c8, lpOverlapped=0x0) returned 1 [0202.183] FlushFileBuffers (hFile=0x2b0) returned 1 [0202.195] FlushFileBuffers (hFile=0x2f4) returned 1 [0202.196] CloseHandle (hObject=0x2b0) returned 1 [0202.197] CloseHandle (hObject=0x2f4) returned 1 [0202.197] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00419_.wmf")) returned 1 [0202.198] SetEvent (hEvent=0x27c) returned 1 [0202.198] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00448_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0202.198] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2952) returned 1 [0202.198] CloseHandle (hObject=0x2f4) returned 1 [0202.198] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00448_.wmf")) returned 0x220 [0202.198] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00448_.wmf")) returned 0x220 [0202.198] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00448_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.199] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00448_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0202.199] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.199] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.199] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00448_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0202.199] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xb88, lpOverlapped=0x0) returned 1 [0202.201] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xb90, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xb90, lpOverlapped=0x0) returned 1 [0202.202] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0202.202] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.202] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.202] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xb88, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xb88, lpOverlapped=0x0) returned 1 [0202.202] FlushFileBuffers (hFile=0x2f4) returned 1 [0202.212] FlushFileBuffers (hFile=0x2b0) returned 1 [0202.214] CloseHandle (hObject=0x2f4) returned 1 [0202.214] CloseHandle (hObject=0x2b0) returned 1 [0202.214] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00448_.wmf")) returned 1 [0202.215] SetEvent (hEvent=0x27c) returned 1 [0202.215] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00687_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0202.215] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=20784) returned 1 [0202.215] CloseHandle (hObject=0x2b0) returned 1 [0202.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00687_.wmf")) returned 0x220 [0202.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00687_.wmf")) returned 0x220 [0202.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00687_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.216] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00687_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0202.216] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.216] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.216] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00687_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0202.217] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x5130, lpOverlapped=0x0) returned 1 [0202.219] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5140, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x5140, lpOverlapped=0x0) returned 1 [0202.220] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0202.220] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.220] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.220] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5130, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x5130, lpOverlapped=0x0) returned 1 [0202.221] FlushFileBuffers (hFile=0x2b0) returned 1 [0202.232] FlushFileBuffers (hFile=0x2f4) returned 1 [0202.234] CloseHandle (hObject=0x2b0) returned 1 [0202.234] CloseHandle (hObject=0x2f4) returned 1 [0202.234] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00687_.wmf")) returned 1 [0202.235] SetEvent (hEvent=0x27c) returned 1 [0202.235] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01015_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0202.236] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2226) returned 1 [0202.236] CloseHandle (hObject=0x2f4) returned 1 [0202.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01015_.wmf")) returned 0x220 [0202.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01015_.wmf")) returned 0x220 [0202.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01015_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.236] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01015_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0202.236] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.237] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.237] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01015_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0202.237] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x8b2, lpOverlapped=0x0) returned 1 [0202.239] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x8c0, lpOverlapped=0x0) returned 1 [0202.240] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0202.241] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.241] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.241] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x8b2, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x8b2, lpOverlapped=0x0) returned 1 [0202.241] FlushFileBuffers (hFile=0x2f4) returned 1 [0202.254] FlushFileBuffers (hFile=0x2b0) returned 1 [0202.257] CloseHandle (hObject=0x2f4) returned 1 [0202.257] CloseHandle (hObject=0x2b0) returned 1 [0202.257] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01015_.wmf")) returned 1 [0202.258] SetEvent (hEvent=0x27c) returned 1 [0202.258] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01138_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0202.259] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3692) returned 1 [0202.259] CloseHandle (hObject=0x2b0) returned 1 [0202.259] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01138_.wmf")) returned 0x220 [0202.259] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01138_.wmf")) returned 0x220 [0202.259] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01138_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.259] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01138_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0202.259] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.259] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.259] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01138_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0202.260] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xe6c, lpOverlapped=0x0) returned 1 [0202.262] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xe70, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xe70, lpOverlapped=0x0) returned 1 [0202.263] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0202.263] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.263] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.263] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xe6c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xe6c, lpOverlapped=0x0) returned 1 [0202.263] FlushFileBuffers (hFile=0x2b0) returned 1 [0202.272] FlushFileBuffers (hFile=0x2f4) returned 1 [0202.275] CloseHandle (hObject=0x2b0) returned 1 [0202.275] CloseHandle (hObject=0x2f4) returned 1 [0202.275] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01138_.wmf")) returned 1 [0202.276] SetEvent (hEvent=0x27c) returned 1 [0202.276] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01140_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0202.276] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3616) returned 1 [0202.276] CloseHandle (hObject=0x2f4) returned 1 [0202.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01140_.wmf")) returned 0x220 [0202.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01140_.wmf")) returned 0x220 [0202.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01140_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.277] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01140_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0202.277] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.277] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.277] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01140_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0202.277] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xe20, lpOverlapped=0x0) returned 1 [0202.279] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xe30, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xe30, lpOverlapped=0x0) returned 1 [0202.280] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0202.280] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.280] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.280] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xe20, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xe20, lpOverlapped=0x0) returned 1 [0202.281] FlushFileBuffers (hFile=0x2f4) returned 1 [0202.289] FlushFileBuffers (hFile=0x2b0) returned 1 [0202.291] CloseHandle (hObject=0x2f4) returned 1 [0202.291] CloseHandle (hObject=0x2b0) returned 1 [0202.291] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01140_.wmf")) returned 1 [0202.292] SetEvent (hEvent=0x27c) returned 1 [0202.292] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01145_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0202.293] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2780) returned 1 [0202.293] CloseHandle (hObject=0x2b0) returned 1 [0202.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01145_.wmf")) returned 0x220 [0202.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01145_.wmf")) returned 0x220 [0202.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01145_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.294] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01145_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0202.294] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.294] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.294] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01145_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0202.294] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xadc, lpOverlapped=0x0) returned 1 [0202.296] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xae0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xae0, lpOverlapped=0x0) returned 1 [0202.297] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0202.297] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.298] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.298] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xadc, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xadc, lpOverlapped=0x0) returned 1 [0202.298] FlushFileBuffers (hFile=0x2b0) returned 1 [0202.308] FlushFileBuffers (hFile=0x2f4) returned 1 [0202.310] CloseHandle (hObject=0x2b0) returned 1 [0202.310] CloseHandle (hObject=0x2f4) returned 1 [0202.310] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01145_.wmf")) returned 1 [0202.311] SetEvent (hEvent=0x27c) returned 1 [0202.311] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01151_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0202.311] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2960) returned 1 [0202.311] CloseHandle (hObject=0x2f4) returned 1 [0202.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01151_.wmf")) returned 0x220 [0202.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01151_.wmf")) returned 0x220 [0202.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01151_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.312] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01151_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0202.312] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.312] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.312] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01151_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0202.313] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xb90, lpOverlapped=0x0) returned 1 [0202.314] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xba0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xba0, lpOverlapped=0x0) returned 1 [0202.315] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0202.315] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.316] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.316] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xb90, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xb90, lpOverlapped=0x0) returned 1 [0202.316] FlushFileBuffers (hFile=0x2f4) returned 1 [0202.329] FlushFileBuffers (hFile=0x2b0) returned 1 [0202.333] CloseHandle (hObject=0x2f4) returned 1 [0202.333] CloseHandle (hObject=0x2b0) returned 1 [0202.333] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01151_.wmf")) returned 1 [0202.334] SetEvent (hEvent=0x27c) returned 1 [0202.334] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01157_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0202.334] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3588) returned 1 [0202.334] CloseHandle (hObject=0x2b0) returned 1 [0202.334] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01157_.wmf")) returned 0x220 [0202.334] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01157_.wmf")) returned 0x220 [0202.334] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01157_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.335] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01157_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0202.335] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.335] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.335] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01157_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0202.335] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xe04, lpOverlapped=0x0) returned 1 [0202.337] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xe10, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xe10, lpOverlapped=0x0) returned 1 [0202.338] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0202.338] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.338] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.338] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xe04, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xe04, lpOverlapped=0x0) returned 1 [0202.338] FlushFileBuffers (hFile=0x2b0) returned 1 [0202.341] FlushFileBuffers (hFile=0x2f4) returned 1 [0202.347] CloseHandle (hObject=0x2b0) returned 1 [0202.347] CloseHandle (hObject=0x2f4) returned 1 [0202.347] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01157_.wmf")) returned 1 [0202.348] SetEvent (hEvent=0x27c) returned 1 [0202.348] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01162_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0202.349] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2300) returned 1 [0202.349] CloseHandle (hObject=0x2f4) returned 1 [0202.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01162_.wmf")) returned 0x220 [0202.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01162_.wmf")) returned 0x220 [0202.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01162_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.349] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01162_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0202.349] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.349] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.349] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01162_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0202.350] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x8fc, lpOverlapped=0x0) returned 1 [0202.354] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x900, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x900, lpOverlapped=0x0) returned 1 [0202.355] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0202.355] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.355] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.355] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x8fc, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x8fc, lpOverlapped=0x0) returned 1 [0202.355] FlushFileBuffers (hFile=0x2f4) returned 1 [0202.359] FlushFileBuffers (hFile=0x2b0) returned 1 [0202.367] CloseHandle (hObject=0x2f4) returned 1 [0202.367] CloseHandle (hObject=0x2b0) returned 1 [0202.367] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01162_.wmf")) returned 1 [0202.368] SetEvent (hEvent=0x27c) returned 1 [0202.368] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01166_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0202.368] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2080) returned 1 [0202.369] CloseHandle (hObject=0x2b0) returned 1 [0202.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01166_.wmf")) returned 0x220 [0202.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01166_.wmf")) returned 0x220 [0202.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01166_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.369] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01166_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0202.369] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.369] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.369] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01166_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0202.370] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x820, lpOverlapped=0x0) returned 1 [0202.373] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x830, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x830, lpOverlapped=0x0) returned 1 [0202.374] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0202.375] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.375] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.375] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x820, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x820, lpOverlapped=0x0) returned 1 [0202.375] FlushFileBuffers (hFile=0x2b0) returned 1 [0202.384] FlushFileBuffers (hFile=0x2f4) returned 1 [0202.388] CloseHandle (hObject=0x2b0) returned 1 [0202.388] CloseHandle (hObject=0x2f4) returned 1 [0202.388] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01166_.wmf")) returned 1 [0202.389] SetEvent (hEvent=0x27c) returned 1 [0202.389] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01168_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0202.390] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2004) returned 1 [0202.390] CloseHandle (hObject=0x2f4) returned 1 [0202.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01168_.wmf")) returned 0x220 [0202.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01168_.wmf")) returned 0x220 [0202.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01168_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.390] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01168_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0202.391] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.391] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.391] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01168_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0202.391] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x7d4, lpOverlapped=0x0) returned 1 [0202.397] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7e0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x7e0, lpOverlapped=0x0) returned 1 [0202.398] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0202.398] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.398] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.398] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7d4, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x7d4, lpOverlapped=0x0) returned 1 [0202.398] FlushFileBuffers (hFile=0x2f4) returned 1 [0202.412] FlushFileBuffers (hFile=0x2b0) returned 1 [0202.415] CloseHandle (hObject=0x2f4) returned 1 [0202.415] CloseHandle (hObject=0x2b0) returned 1 [0202.415] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01168_.wmf")) returned 1 [0202.416] SetEvent (hEvent=0x27c) returned 1 [0202.416] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01170_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0202.417] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2404) returned 1 [0202.417] CloseHandle (hObject=0x2b0) returned 1 [0202.417] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01170_.wmf")) returned 0x220 [0202.417] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01170_.wmf")) returned 0x220 [0202.417] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01170_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.417] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01170_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0202.418] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.418] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.418] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01170_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0202.418] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x964, lpOverlapped=0x0) returned 1 [0202.421] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x970, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x970, lpOverlapped=0x0) returned 1 [0202.422] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0202.422] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.422] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.422] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x964, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x964, lpOverlapped=0x0) returned 1 [0202.422] FlushFileBuffers (hFile=0x2b0) returned 1 [0202.440] FlushFileBuffers (hFile=0x2f4) returned 1 [0202.442] CloseHandle (hObject=0x2b0) returned 1 [0202.443] CloseHandle (hObject=0x2f4) returned 1 [0202.443] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01170_.wmf")) returned 1 [0202.444] SetEvent (hEvent=0x27c) returned 1 [0202.444] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01172_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0202.444] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2232) returned 1 [0202.444] CloseHandle (hObject=0x2f4) returned 1 [0202.444] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01172_.wmf")) returned 0x220 [0202.444] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01172_.wmf")) returned 0x220 [0202.444] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01172_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.445] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01172_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0202.445] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.445] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.445] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01172_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0202.445] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x8b8, lpOverlapped=0x0) returned 1 [0202.447] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x8c0, lpOverlapped=0x0) returned 1 [0202.448] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0202.448] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.448] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.448] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x8b8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x8b8, lpOverlapped=0x0) returned 1 [0202.448] FlushFileBuffers (hFile=0x2f4) returned 1 [0202.451] FlushFileBuffers (hFile=0x2b0) returned 1 [0202.458] CloseHandle (hObject=0x2f4) returned 1 [0202.458] CloseHandle (hObject=0x2b0) returned 1 [0202.458] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01172_.wmf")) returned 1 [0202.459] SetEvent (hEvent=0x27c) returned 1 [0202.459] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01176_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0202.460] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1888) returned 1 [0202.460] CloseHandle (hObject=0x2b0) returned 1 [0202.460] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01176_.wmf")) returned 0x220 [0202.460] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01176_.wmf")) returned 0x220 [0202.460] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01176_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.460] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01176_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0202.460] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.460] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.460] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01176_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0202.461] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x760, lpOverlapped=0x0) returned 1 [0202.465] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x770, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x770, lpOverlapped=0x0) returned 1 [0202.466] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0202.466] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.466] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.466] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x760, lpOverlapped=0x0) returned 1 [0202.467] FlushFileBuffers (hFile=0x2b0) returned 1 [0202.470] FlushFileBuffers (hFile=0x2f4) returned 1 [0202.475] CloseHandle (hObject=0x2b0) returned 1 [0202.475] CloseHandle (hObject=0x2f4) returned 1 [0202.475] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01176_.wmf")) returned 1 [0202.476] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01179_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0202.476] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2024) returned 1 [0202.476] CloseHandle (hObject=0x2f4) returned 1 [0202.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01179_.wmf")) returned 0x220 [0202.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01179_.wmf")) returned 0x220 [0202.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01179_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.477] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01179_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0202.477] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.477] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.477] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01179_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0202.477] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x7e8, lpOverlapped=0x0) returned 1 [0202.482] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7f0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x7f0, lpOverlapped=0x0) returned 1 [0202.483] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0202.483] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.483] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.483] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7e8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x7e8, lpOverlapped=0x0) returned 1 [0202.483] FlushFileBuffers (hFile=0x2f4) returned 1 [0202.490] FlushFileBuffers (hFile=0x2b0) returned 1 [0202.494] CloseHandle (hObject=0x2f4) returned 1 [0202.494] CloseHandle (hObject=0x2b0) returned 1 [0202.494] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01179_.wmf")) returned 1 [0202.496] SetEvent (hEvent=0x27c) returned 1 [0202.496] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01181_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0202.498] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1448) returned 1 [0202.498] CloseHandle (hObject=0x2f4) returned 1 [0202.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01181_.wmf")) returned 0x220 [0202.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01181_.wmf")) returned 0x220 [0202.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01181_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.500] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01181_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0202.500] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.500] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.500] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01181_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0202.503] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x5a8, lpOverlapped=0x0) returned 1 [0202.507] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x5b0, lpOverlapped=0x0) returned 1 [0202.508] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0202.508] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.508] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.508] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5a8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x5a8, lpOverlapped=0x0) returned 1 [0202.508] FlushFileBuffers (hFile=0x21c) returned 1 [0202.511] FlushFileBuffers (hFile=0x2fc) returned 1 [0202.517] CloseHandle (hObject=0x21c) returned 1 [0202.517] CloseHandle (hObject=0x2fc) returned 1 [0202.517] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01181_.wmf")) returned 1 [0202.518] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01183_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0202.519] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2296) returned 1 [0202.519] CloseHandle (hObject=0x2fc) returned 1 [0202.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01183_.wmf")) returned 0x220 [0202.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01183_.wmf")) returned 0x220 [0202.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01183_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.519] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01183_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0202.519] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.519] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.519] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01183_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0202.520] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x8f8, lpOverlapped=0x0) returned 1 [0202.524] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x900, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x900, lpOverlapped=0x0) returned 1 [0202.525] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0202.525] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.525] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.525] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x8f8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x8f8, lpOverlapped=0x0) returned 1 [0202.525] FlushFileBuffers (hFile=0x2fc) returned 1 [0202.529] FlushFileBuffers (hFile=0x21c) returned 1 [0202.535] CloseHandle (hObject=0x2fc) returned 1 [0202.535] CloseHandle (hObject=0x21c) returned 1 [0202.535] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01183_.wmf")) returned 1 [0202.536] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01366_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0202.537] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1768) returned 1 [0202.537] CloseHandle (hObject=0x21c) returned 1 [0202.537] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01366_.wmf")) returned 0x220 [0202.537] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01366_.wmf")) returned 0x220 [0202.537] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01366_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.537] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01366_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0202.537] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.537] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.537] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01366_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0202.537] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x6e8, lpOverlapped=0x0) returned 1 [0202.542] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x6f0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x6f0, lpOverlapped=0x0) returned 1 [0202.543] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0202.543] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.543] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.543] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x6e8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x6e8, lpOverlapped=0x0) returned 1 [0202.544] FlushFileBuffers (hFile=0x21c) returned 1 [0202.547] FlushFileBuffers (hFile=0x2fc) returned 1 [0202.553] CloseHandle (hObject=0x21c) returned 1 [0202.553] CloseHandle (hObject=0x2fc) returned 1 [0202.553] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01366_.wmf")) returned 1 [0202.554] SetEvent (hEvent=0x27c) returned 1 [0202.554] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01585_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0202.555] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2524) returned 1 [0202.555] CloseHandle (hObject=0x2fc) returned 1 [0202.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01585_.wmf")) returned 0x220 [0202.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01585_.wmf")) returned 0x220 [0202.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01585_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.555] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01585_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0202.555] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.555] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.555] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01585_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0202.556] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x9dc, lpOverlapped=0x0) returned 1 [0202.560] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x9e0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x9e0, lpOverlapped=0x0) returned 1 [0202.563] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0202.563] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.563] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.563] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x9dc, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x9dc, lpOverlapped=0x0) returned 1 [0202.563] FlushFileBuffers (hFile=0x2fc) returned 1 [0202.569] FlushFileBuffers (hFile=0x21c) returned 1 [0202.577] CloseHandle (hObject=0x2fc) returned 1 [0202.577] CloseHandle (hObject=0x21c) returned 1 [0202.577] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01585_.wmf")) returned 1 [0202.578] SetEvent (hEvent=0x27c) returned 1 [0202.578] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01628_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0202.580] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=19068) returned 1 [0202.580] CloseHandle (hObject=0x21c) returned 1 [0202.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01628_.wmf")) returned 0x220 [0202.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01628_.wmf")) returned 0x220 [0202.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01628_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.580] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01628_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0202.580] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.581] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.581] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01628_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0202.581] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4a7c, lpOverlapped=0x0) returned 1 [0202.584] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4a80, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4a80, lpOverlapped=0x0) returned 1 [0202.586] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0202.586] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.586] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.586] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4a7c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4a7c, lpOverlapped=0x0) returned 1 [0202.586] FlushFileBuffers (hFile=0x21c) returned 1 [0202.595] FlushFileBuffers (hFile=0x2fc) returned 1 [0202.598] CloseHandle (hObject=0x21c) returned 1 [0202.598] CloseHandle (hObject=0x2fc) returned 1 [0202.598] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01628_.wmf")) returned 1 [0202.599] SetEvent (hEvent=0x27c) returned 1 [0202.599] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01630_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0202.600] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=296) returned 1 [0202.600] CloseHandle (hObject=0x2fc) returned 1 [0202.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01630_.wmf")) returned 0x220 [0202.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01630_.wmf")) returned 0x220 [0202.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01630_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.600] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01630_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0202.600] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.601] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.601] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01630_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0202.601] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x128, lpOverlapped=0x0) returned 1 [0202.602] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x130, lpOverlapped=0x0) returned 1 [0202.603] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0202.604] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.604] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.604] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x128, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x128, lpOverlapped=0x0) returned 1 [0202.605] FlushFileBuffers (hFile=0x2fc) returned 1 [0202.616] FlushFileBuffers (hFile=0x21c) returned 1 [0202.624] CloseHandle (hObject=0x2fc) returned 1 [0202.624] CloseHandle (hObject=0x21c) returned 1 [0202.624] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01630_.wmf")) returned 1 [0202.630] SetEvent (hEvent=0x27c) returned 1 [0202.630] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01772_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0202.635] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2300) returned 1 [0202.635] CloseHandle (hObject=0x21c) returned 1 [0202.635] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01772_.wmf")) returned 0x220 [0202.635] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01772_.wmf")) returned 0x220 [0202.635] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01772_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.636] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01772_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0202.636] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.636] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.636] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01772_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0202.636] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x8fc, lpOverlapped=0x0) returned 1 [0202.638] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x900, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x900, lpOverlapped=0x0) returned 1 [0202.639] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0202.640] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.640] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.640] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x8fc, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x8fc, lpOverlapped=0x0) returned 1 [0202.640] FlushFileBuffers (hFile=0x21c) returned 1 [0202.650] FlushFileBuffers (hFile=0x2fc) returned 1 [0202.652] CloseHandle (hObject=0x21c) returned 1 [0202.652] CloseHandle (hObject=0x2fc) returned 1 [0202.652] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01772_.wmf")) returned 1 [0202.653] SetEvent (hEvent=0x27c) returned 1 [0202.653] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\east_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0202.655] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=6165) returned 1 [0202.655] CloseHandle (hObject=0x2fc) returned 1 [0202.655] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\east_01.mid")) returned 0x220 [0202.655] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\east_01.mid")) returned 0x220 [0202.655] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\east_01.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.655] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\east_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0202.655] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.655] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.655] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\east_01.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0202.655] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1815, lpOverlapped=0x0) returned 1 [0202.657] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1820, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1820, lpOverlapped=0x0) returned 1 [0202.658] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0202.659] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.659] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.659] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1815, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1815, lpOverlapped=0x0) returned 1 [0202.659] FlushFileBuffers (hFile=0x2fc) returned 1 [0202.666] FlushFileBuffers (hFile=0x21c) returned 1 [0202.670] CloseHandle (hObject=0x2fc) returned 1 [0202.670] CloseHandle (hObject=0x21c) returned 1 [0202.670] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\east_01.mid")) returned 1 [0202.671] SetEvent (hEvent=0x27c) returned 1 [0202.671] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00019_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0202.672] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=13042) returned 1 [0202.672] CloseHandle (hObject=0x21c) returned 1 [0202.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00019_.wmf")) returned 0x220 [0202.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00019_.wmf")) returned 0x220 [0202.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00019_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.672] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00019_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0202.672] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.672] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.672] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00019_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0202.673] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x32f2, lpOverlapped=0x0) returned 1 [0202.675] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3300, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x3300, lpOverlapped=0x0) returned 1 [0202.676] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0202.676] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.677] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.677] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x32f2, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x32f2, lpOverlapped=0x0) returned 1 [0202.677] FlushFileBuffers (hFile=0x21c) returned 1 [0202.679] FlushFileBuffers (hFile=0x2fc) returned 1 [0202.688] CloseHandle (hObject=0x21c) returned 1 [0202.688] CloseHandle (hObject=0x2fc) returned 1 [0202.688] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00019_.wmf")) returned 1 [0202.689] SetEvent (hEvent=0x27c) returned 1 [0202.689] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00184_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0202.689] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=6958) returned 1 [0202.689] CloseHandle (hObject=0x2fc) returned 1 [0202.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00184_.wmf")) returned 0x220 [0202.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00184_.wmf")) returned 0x220 [0202.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00184_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.690] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00184_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0202.690] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.690] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.690] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00184_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0202.690] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1b2e, lpOverlapped=0x0) returned 1 [0202.693] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1b30, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1b30, lpOverlapped=0x0) returned 1 [0202.694] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0202.694] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.694] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.694] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1b2e, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1b2e, lpOverlapped=0x0) returned 1 [0202.694] FlushFileBuffers (hFile=0x2fc) returned 1 [0202.701] FlushFileBuffers (hFile=0x21c) returned 1 [0202.707] CloseHandle (hObject=0x2fc) returned 1 [0202.707] CloseHandle (hObject=0x21c) returned 1 [0202.707] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00184_.wmf")) returned 1 [0202.708] SetEvent (hEvent=0x27c) returned 1 [0202.708] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00202_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0202.708] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=6938) returned 1 [0202.708] CloseHandle (hObject=0x21c) returned 1 [0202.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00202_.wmf")) returned 0x220 [0202.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00202_.wmf")) returned 0x220 [0202.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00202_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.709] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00202_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0202.709] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.709] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.709] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00202_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0202.709] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1b1a, lpOverlapped=0x0) returned 1 [0202.714] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1b20, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1b20, lpOverlapped=0x0) returned 1 [0202.715] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0202.715] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.715] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.715] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1b1a, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1b1a, lpOverlapped=0x0) returned 1 [0202.715] FlushFileBuffers (hFile=0x21c) returned 1 [0202.719] FlushFileBuffers (hFile=0x2fc) returned 1 [0202.727] CloseHandle (hObject=0x21c) returned 1 [0202.727] CloseHandle (hObject=0x2fc) returned 1 [0202.727] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00202_.wmf")) returned 1 [0202.728] SetEvent (hEvent=0x27c) returned 1 [0202.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00242_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0202.728] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=6780) returned 1 [0202.728] CloseHandle (hObject=0x2fc) returned 1 [0202.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00242_.wmf")) returned 0x220 [0202.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00242_.wmf")) returned 0x220 [0202.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00242_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.729] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00242_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0202.729] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.729] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.729] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00242_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0202.729] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1a7c, lpOverlapped=0x0) returned 1 [0202.732] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1a80, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1a80, lpOverlapped=0x0) returned 1 [0202.733] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0202.733] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.733] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.733] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1a7c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1a7c, lpOverlapped=0x0) returned 1 [0202.733] FlushFileBuffers (hFile=0x2fc) returned 1 [0202.742] FlushFileBuffers (hFile=0x21c) returned 1 [0202.745] CloseHandle (hObject=0x2fc) returned 1 [0202.745] CloseHandle (hObject=0x21c) returned 1 [0202.745] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00242_.wmf")) returned 1 [0202.746] SetEvent (hEvent=0x27c) returned 1 [0202.746] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00320_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0202.749] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=736) returned 1 [0202.749] CloseHandle (hObject=0x2b0) returned 1 [0202.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00320_.wmf")) returned 0x220 [0202.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00320_.wmf")) returned 0x220 [0202.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00320_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.749] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00320_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0202.749] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.749] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.749] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00320_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0202.750] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2e0, lpOverlapped=0x0) returned 1 [0202.754] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2f0, lpOverlapped=0x0) returned 1 [0202.755] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0202.755] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.755] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.755] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2e0, lpOverlapped=0x0) returned 1 [0202.755] FlushFileBuffers (hFile=0x2b0) returned 1 [0202.763] FlushFileBuffers (hFile=0x2f4) returned 1 [0202.765] CloseHandle (hObject=0x2b0) returned 1 [0202.765] CloseHandle (hObject=0x2f4) returned 1 [0202.766] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00320_.wmf")) returned 1 [0202.766] SetEvent (hEvent=0x27c) returned 1 [0202.767] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00902_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0202.768] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=7944) returned 1 [0202.768] CloseHandle (hObject=0x2f4) returned 1 [0202.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00902_.wmf")) returned 0x220 [0202.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00902_.wmf")) returned 0x220 [0202.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00902_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.768] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00902_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0202.768] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.768] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.768] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00902_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0202.769] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1f08, lpOverlapped=0x0) returned 1 [0202.774] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1f10, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1f10, lpOverlapped=0x0) returned 1 [0202.775] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0202.776] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.776] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.776] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1f08, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1f08, lpOverlapped=0x0) returned 1 [0202.776] FlushFileBuffers (hFile=0x2f4) returned 1 [0202.783] FlushFileBuffers (hFile=0x2b0) returned 1 [0202.786] CloseHandle (hObject=0x2f4) returned 1 [0202.786] CloseHandle (hObject=0x2b0) returned 1 [0202.786] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00902_.wmf")) returned 1 [0202.787] SetEvent (hEvent=0x27c) returned 1 [0202.787] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fall_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0202.787] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=4846) returned 1 [0202.787] CloseHandle (hObject=0x2b0) returned 1 [0202.788] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fall_01.mid")) returned 0x220 [0202.788] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fall_01.mid")) returned 0x220 [0202.788] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fall_01.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.788] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fall_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0202.788] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.788] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.788] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fall_01.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0202.788] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x12ee, lpOverlapped=0x0) returned 1 [0202.791] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x12f0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x12f0, lpOverlapped=0x0) returned 1 [0202.792] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0202.792] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.792] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.792] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x12ee, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x12ee, lpOverlapped=0x0) returned 1 [0202.792] FlushFileBuffers (hFile=0x2b0) returned 1 [0202.798] FlushFileBuffers (hFile=0x2f4) returned 1 [0202.803] CloseHandle (hObject=0x2b0) returned 1 [0202.803] CloseHandle (hObject=0x2f4) returned 1 [0202.803] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fall_01.mid")) returned 1 [0202.804] SetEvent (hEvent=0x27c) returned 1 [0202.804] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00076_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0202.805] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=11994) returned 1 [0202.805] CloseHandle (hObject=0x2f4) returned 1 [0202.805] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00076_.wmf")) returned 0x220 [0202.805] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00076_.wmf")) returned 0x220 [0202.805] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00076_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.805] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00076_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0202.805] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.805] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.805] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00076_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0202.806] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2eda, lpOverlapped=0x0) returned 1 [0202.808] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2ee0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2ee0, lpOverlapped=0x0) returned 1 [0202.809] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0202.809] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.809] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.809] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2eda, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2eda, lpOverlapped=0x0) returned 1 [0202.809] FlushFileBuffers (hFile=0x2f4) returned 1 [0202.820] FlushFileBuffers (hFile=0x2b0) returned 1 [0202.823] CloseHandle (hObject=0x2f4) returned 1 [0202.823] CloseHandle (hObject=0x2b0) returned 1 [0202.823] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00076_.wmf")) returned 1 [0202.824] SetEvent (hEvent=0x27c) returned 1 [0202.824] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00086_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0202.825] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=29212) returned 1 [0202.825] CloseHandle (hObject=0x2b0) returned 1 [0202.825] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00086_.wmf")) returned 0x220 [0202.825] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00086_.wmf")) returned 0x220 [0202.825] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00086_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.825] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00086_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0202.825] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.825] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.825] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00086_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0202.828] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x721c, lpOverlapped=0x0) returned 1 [0202.830] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7220, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x7220, lpOverlapped=0x0) returned 1 [0202.841] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0202.841] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.841] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.841] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x721c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x721c, lpOverlapped=0x0) returned 1 [0202.841] FlushFileBuffers (hFile=0x2b0) returned 1 [0202.852] FlushFileBuffers (hFile=0x2f4) returned 1 [0202.854] CloseHandle (hObject=0x2b0) returned 1 [0202.854] CloseHandle (hObject=0x2f4) returned 1 [0202.855] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00086_.wmf")) returned 1 [0202.856] SetEvent (hEvent=0x27c) returned 1 [0202.856] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00096_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0202.857] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=37390) returned 1 [0202.857] CloseHandle (hObject=0x2f4) returned 1 [0202.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00096_.wmf")) returned 0x220 [0202.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00096_.wmf")) returned 0x220 [0202.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00096_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.857] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00096_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0202.857] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.858] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.858] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00096_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0202.858] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x920e, lpOverlapped=0x0) returned 1 [0202.865] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x9210, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x9210, lpOverlapped=0x0) returned 1 [0202.866] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0202.866] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.866] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.866] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x920e, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x920e, lpOverlapped=0x0) returned 1 [0202.867] FlushFileBuffers (hFile=0x2f4) returned 1 [0202.875] FlushFileBuffers (hFile=0x2b0) returned 1 [0202.877] CloseHandle (hObject=0x2f4) returned 1 [0202.877] CloseHandle (hObject=0x2b0) returned 1 [0202.877] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00096_.wmf")) returned 1 [0202.879] SetEvent (hEvent=0x27c) returned 1 [0202.879] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00297_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0202.880] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=18194) returned 1 [0202.880] CloseHandle (hObject=0x2b0) returned 1 [0202.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00297_.wmf")) returned 0x220 [0202.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00297_.wmf")) returned 0x220 [0202.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00297_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.880] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00297_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0202.880] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.880] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.880] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00297_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0202.881] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4712, lpOverlapped=0x0) returned 1 [0202.883] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4720, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4720, lpOverlapped=0x0) returned 1 [0202.884] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0202.885] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.885] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.885] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4712, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4712, lpOverlapped=0x0) returned 1 [0202.885] FlushFileBuffers (hFile=0x2b0) returned 1 [0202.901] FlushFileBuffers (hFile=0x2f4) returned 1 [0202.904] CloseHandle (hObject=0x2b0) returned 1 [0202.904] CloseHandle (hObject=0x2f4) returned 1 [0202.904] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00297_.wmf")) returned 1 [0202.906] SetEvent (hEvent=0x27c) returned 1 [0202.906] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00336_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0202.907] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=6068) returned 1 [0202.908] CloseHandle (hObject=0x2f4) returned 1 [0202.908] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00336_.wmf")) returned 0x220 [0202.908] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00336_.wmf")) returned 0x220 [0202.908] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00336_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.908] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00336_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0202.908] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.908] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.908] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00336_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0202.909] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x17b4, lpOverlapped=0x0) returned 1 [0202.916] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x17c0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x17c0, lpOverlapped=0x0) returned 1 [0202.917] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0202.917] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.918] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.918] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x17b4, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x17b4, lpOverlapped=0x0) returned 1 [0202.918] FlushFileBuffers (hFile=0x2f4) returned 1 [0202.923] FlushFileBuffers (hFile=0x2b0) returned 1 [0202.925] CloseHandle (hObject=0x2f4) returned 1 [0202.925] CloseHandle (hObject=0x2b0) returned 1 [0202.925] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00336_.wmf")) returned 1 [0202.927] SetEvent (hEvent=0x27c) returned 1 [0202.927] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00369_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0202.927] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=8552) returned 1 [0202.927] CloseHandle (hObject=0x2b0) returned 1 [0202.927] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00369_.wmf")) returned 0x220 [0202.927] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00369_.wmf")) returned 0x220 [0202.927] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00369_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.927] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00369_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0202.928] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.928] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.928] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00369_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0202.928] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2168, lpOverlapped=0x0) returned 1 [0202.930] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2170, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2170, lpOverlapped=0x0) returned 1 [0202.931] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0202.931] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.931] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.931] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2168, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2168, lpOverlapped=0x0) returned 1 [0202.931] FlushFileBuffers (hFile=0x2b0) returned 1 [0202.943] FlushFileBuffers (hFile=0x2f4) returned 1 [0202.955] CloseHandle (hObject=0x2b0) returned 1 [0202.956] CloseHandle (hObject=0x2f4) returned 1 [0202.956] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00369_.wmf")) returned 1 [0202.957] SetEvent (hEvent=0x27c) returned 1 [0202.957] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00382_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0202.958] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=8424) returned 1 [0202.958] CloseHandle (hObject=0x2f4) returned 1 [0202.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00382_.wmf")) returned 0x220 [0202.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00382_.wmf")) returned 0x220 [0202.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00382_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.958] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00382_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0202.958] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.958] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.959] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00382_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0202.971] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x20e8, lpOverlapped=0x0) returned 1 [0202.973] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x20f0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x20f0, lpOverlapped=0x0) returned 1 [0202.974] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0202.975] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.975] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0202.975] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x20e8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x20e8, lpOverlapped=0x0) returned 1 [0202.975] FlushFileBuffers (hFile=0x2f4) returned 1 [0202.980] FlushFileBuffers (hFile=0x2b0) returned 1 [0202.997] CloseHandle (hObject=0x2f4) returned 1 [0202.997] CloseHandle (hObject=0x2b0) returned 1 [0202.997] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00382_.wmf")) returned 1 [0202.998] SetEvent (hEvent=0x27c) returned 1 [0202.998] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00397_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0202.999] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=10816) returned 1 [0202.999] CloseHandle (hObject=0x2b0) returned 1 [0202.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00397_.wmf")) returned 0x220 [0202.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00397_.wmf")) returned 0x220 [0202.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00397_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0202.999] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00397_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0202.999] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.999] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0202.999] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00397_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0203.000] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2a40, lpOverlapped=0x0) returned 1 [0203.003] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2a50, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2a50, lpOverlapped=0x0) returned 1 [0203.004] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0203.004] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.004] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.004] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2a40, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2a40, lpOverlapped=0x0) returned 1 [0203.005] FlushFileBuffers (hFile=0x2b0) returned 1 [0203.009] FlushFileBuffers (hFile=0x2f4) returned 1 [0203.011] CloseHandle (hObject=0x2b0) returned 1 [0203.012] CloseHandle (hObject=0x2f4) returned 1 [0203.012] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00397_.wmf")) returned 1 [0203.013] SetEvent (hEvent=0x27c) returned 1 [0203.013] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00403_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0203.013] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=7878) returned 1 [0203.013] CloseHandle (hObject=0x2f4) returned 1 [0203.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00403_.wmf")) returned 0x220 [0203.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00403_.wmf")) returned 0x220 [0203.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00403_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0203.014] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00403_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0203.014] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0203.014] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0203.014] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00403_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0203.014] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1ec6, lpOverlapped=0x0) returned 1 [0203.016] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1ed0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1ed0, lpOverlapped=0x0) returned 1 [0203.017] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0203.017] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.017] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.017] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1ec6, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1ec6, lpOverlapped=0x0) returned 1 [0203.018] FlushFileBuffers (hFile=0x2f4) returned 1 [0203.022] FlushFileBuffers (hFile=0x2b0) returned 1 [0203.027] CloseHandle (hObject=0x2f4) returned 1 [0203.027] CloseHandle (hObject=0x2b0) returned 1 [0203.027] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00403_.wmf")) returned 1 [0203.028] SetEvent (hEvent=0x27c) returned 1 [0203.028] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00414_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0203.030] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=11002) returned 1 [0203.030] CloseHandle (hObject=0x2b0) returned 1 [0203.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00414_.wmf")) returned 0x220 [0203.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00414_.wmf")) returned 0x220 [0203.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00414_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0203.030] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00414_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0203.030] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0203.031] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0203.031] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00414_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0203.031] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2afa, lpOverlapped=0x0) returned 1 [0203.043] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2b00, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2b00, lpOverlapped=0x0) returned 1 [0203.044] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0203.044] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.044] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.045] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2afa, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2afa, lpOverlapped=0x0) returned 1 [0203.045] FlushFileBuffers (hFile=0x2b0) returned 1 [0203.056] FlushFileBuffers (hFile=0x2f4) returned 1 [0203.070] CloseHandle (hObject=0x2b0) returned 1 [0203.070] CloseHandle (hObject=0x2f4) returned 1 [0203.070] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00414_.wmf")) returned 1 [0203.071] SetEvent (hEvent=0x27c) returned 1 [0203.072] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00419_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0203.072] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=16396) returned 1 [0203.073] CloseHandle (hObject=0x2f4) returned 1 [0203.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00419_.wmf")) returned 0x220 [0203.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00419_.wmf")) returned 0x220 [0203.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00419_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0203.078] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00419_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0203.078] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0203.079] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0203.079] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00419_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0203.079] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x400c, lpOverlapped=0x0) returned 1 [0203.082] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4010, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4010, lpOverlapped=0x0) returned 1 [0203.083] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0203.083] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.084] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.084] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x400c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x400c, lpOverlapped=0x0) returned 1 [0203.084] FlushFileBuffers (hFile=0x2f4) returned 1 [0203.087] FlushFileBuffers (hFile=0x2b0) returned 1 [0203.313] CloseHandle (hObject=0x2f4) returned 1 [0203.313] CloseHandle (hObject=0x2b0) returned 1 [0203.313] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00419_.wmf")) returned 1 [0203.314] SetEvent (hEvent=0x27c) returned 1 [0203.314] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00428_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0203.315] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=4796) returned 1 [0203.315] CloseHandle (hObject=0x2b0) returned 1 [0203.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00428_.wmf")) returned 0x220 [0203.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00428_.wmf")) returned 0x220 [0203.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00428_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0203.316] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00428_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0203.316] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0203.316] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0203.316] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00428_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0203.317] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x12bc, lpOverlapped=0x0) returned 1 [0203.318] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x12c0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x12c0, lpOverlapped=0x0) returned 1 [0203.319] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0203.320] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.320] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.320] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x12bc, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x12bc, lpOverlapped=0x0) returned 1 [0203.320] FlushFileBuffers (hFile=0x2b0) returned 1 [0203.322] FlushFileBuffers (hFile=0x2f4) returned 1 [0203.323] CloseHandle (hObject=0x2b0) returned 1 [0203.323] CloseHandle (hObject=0x2f4) returned 1 [0203.323] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00428_.wmf")) returned 1 [0203.324] SetEvent (hEvent=0x27c) returned 1 [0203.324] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00435_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0203.325] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2108) returned 1 [0203.325] CloseHandle (hObject=0x2f4) returned 1 [0203.325] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00435_.wmf")) returned 0x220 [0203.325] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00435_.wmf")) returned 0x220 [0203.325] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00435_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0203.325] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00435_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0203.325] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0203.325] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0203.325] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00435_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0203.326] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x83c, lpOverlapped=0x0) returned 1 [0203.327] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x840, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x840, lpOverlapped=0x0) returned 1 [0203.328] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0203.328] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.329] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.329] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x83c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x83c, lpOverlapped=0x0) returned 1 [0203.329] FlushFileBuffers (hFile=0x2f4) returned 1 [0203.331] FlushFileBuffers (hFile=0x2b0) returned 1 [0203.332] CloseHandle (hObject=0x2f4) returned 1 [0203.332] CloseHandle (hObject=0x2b0) returned 1 [0203.332] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00435_.wmf")) returned 1 [0203.333] SetEvent (hEvent=0x27c) returned 1 [0203.334] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00438_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0203.334] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=5098) returned 1 [0203.334] CloseHandle (hObject=0x2b0) returned 1 [0203.334] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00438_.wmf")) returned 0x220 [0203.334] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00438_.wmf")) returned 0x220 [0203.334] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00438_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0203.334] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00438_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0203.334] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0203.334] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0203.334] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00438_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0203.335] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x13ea, lpOverlapped=0x0) returned 1 [0203.337] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x13f0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x13f0, lpOverlapped=0x0) returned 1 [0203.337] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0203.338] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.338] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.338] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x13ea, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x13ea, lpOverlapped=0x0) returned 1 [0203.338] FlushFileBuffers (hFile=0x2b0) returned 1 [0203.342] FlushFileBuffers (hFile=0x2f4) returned 1 [0203.343] CloseHandle (hObject=0x2b0) returned 1 [0203.344] CloseHandle (hObject=0x2f4) returned 1 [0203.344] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00438_.wmf")) returned 1 [0203.345] SetEvent (hEvent=0x27c) returned 1 [0203.345] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00455_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0203.346] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=8926) returned 1 [0203.346] CloseHandle (hObject=0x2f4) returned 1 [0203.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00455_.wmf")) returned 0x220 [0203.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00455_.wmf")) returned 0x220 [0203.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00455_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0203.346] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00455_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0203.346] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0203.346] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0203.346] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00455_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0203.347] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x22de, lpOverlapped=0x0) returned 1 [0203.351] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x22e0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x22e0, lpOverlapped=0x0) returned 1 [0203.352] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0203.353] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.353] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.353] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x22de, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x22de, lpOverlapped=0x0) returned 1 [0203.353] FlushFileBuffers (hFile=0x2f4) returned 1 [0203.355] FlushFileBuffers (hFile=0x2b0) returned 1 [0203.356] CloseHandle (hObject=0x2f4) returned 1 [0203.356] CloseHandle (hObject=0x2b0) returned 1 [0203.356] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00455_.wmf")) returned 1 [0203.357] SetEvent (hEvent=0x27c) returned 1 [0203.357] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00459_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0203.358] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=17406) returned 1 [0203.358] CloseHandle (hObject=0x2b0) returned 1 [0203.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00459_.wmf")) returned 0x220 [0203.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00459_.wmf")) returned 0x220 [0203.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00459_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0203.358] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00459_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0203.358] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0203.358] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0203.358] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00459_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0203.359] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x43fe, lpOverlapped=0x0) returned 1 [0203.361] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4400, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4400, lpOverlapped=0x0) returned 1 [0203.362] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0203.362] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.362] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.362] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x43fe, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x43fe, lpOverlapped=0x0) returned 1 [0203.362] FlushFileBuffers (hFile=0x2b0) returned 1 [0203.365] FlushFileBuffers (hFile=0x2f4) returned 1 [0203.366] CloseHandle (hObject=0x2b0) returned 1 [0203.366] CloseHandle (hObject=0x2f4) returned 1 [0203.367] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00459_.wmf")) returned 1 [0203.368] SetEvent (hEvent=0x27c) returned 1 [0203.368] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00543_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0203.368] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1472) returned 1 [0203.368] CloseHandle (hObject=0x2f4) returned 1 [0203.368] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00543_.wmf")) returned 0x220 [0203.368] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00543_.wmf")) returned 0x220 [0203.368] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00543_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0203.369] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00543_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0203.369] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0203.369] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0203.369] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00543_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0203.369] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x5c0, lpOverlapped=0x0) returned 1 [0203.371] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x5d0, lpOverlapped=0x0) returned 1 [0203.372] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0203.372] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.372] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.372] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5c0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x5c0, lpOverlapped=0x0) returned 1 [0203.372] FlushFileBuffers (hFile=0x2f4) returned 1 [0203.374] FlushFileBuffers (hFile=0x2b0) returned 1 [0203.375] CloseHandle (hObject=0x2f4) returned 1 [0203.375] CloseHandle (hObject=0x2b0) returned 1 [0203.375] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00543_.wmf")) returned 1 [0203.376] SetEvent (hEvent=0x27c) returned 1 [0203.377] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00544_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0203.377] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=5260) returned 1 [0203.377] CloseHandle (hObject=0x2b0) returned 1 [0203.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00544_.wmf")) returned 0x220 [0203.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00544_.wmf")) returned 0x220 [0203.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00544_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0203.377] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00544_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0203.377] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0203.377] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0203.377] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00544_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0203.378] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x148c, lpOverlapped=0x0) returned 1 [0203.380] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1490, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1490, lpOverlapped=0x0) returned 1 [0203.381] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0203.381] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.381] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.381] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x148c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x148c, lpOverlapped=0x0) returned 1 [0203.381] FlushFileBuffers (hFile=0x2b0) returned 1 [0203.383] FlushFileBuffers (hFile=0x2f4) returned 1 [0203.385] CloseHandle (hObject=0x2b0) returned 1 [0203.385] CloseHandle (hObject=0x2f4) returned 1 [0203.385] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00544_.wmf")) returned 1 [0203.386] SetEvent (hEvent=0x27c) returned 1 [0203.386] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00564_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0203.386] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=896) returned 1 [0203.386] CloseHandle (hObject=0x2f4) returned 1 [0203.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00564_.wmf")) returned 0x220 [0203.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00564_.wmf")) returned 0x220 [0203.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00564_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0203.387] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00564_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0203.387] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0203.387] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0203.387] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00564_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0203.387] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x380, lpOverlapped=0x0) returned 1 [0203.389] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x390, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x390, lpOverlapped=0x0) returned 1 [0203.389] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0203.390] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.390] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.390] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x380, lpOverlapped=0x0) returned 1 [0203.390] FlushFileBuffers (hFile=0x2f4) returned 1 [0203.392] FlushFileBuffers (hFile=0x2b0) returned 1 [0203.393] CloseHandle (hObject=0x2f4) returned 1 [0203.393] CloseHandle (hObject=0x2b0) returned 1 [0203.393] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00564_.wmf")) returned 1 [0203.394] SetEvent (hEvent=0x27c) returned 1 [0203.394] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00586_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0203.397] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=752) returned 1 [0203.397] CloseHandle (hObject=0x2b0) returned 1 [0203.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00586_.wmf")) returned 0x220 [0203.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00586_.wmf")) returned 0x220 [0203.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00586_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0203.397] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00586_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0203.397] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0203.397] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0203.397] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00586_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0203.398] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2f0, lpOverlapped=0x0) returned 1 [0203.399] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x300, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x300, lpOverlapped=0x0) returned 1 [0203.400] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0203.401] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.401] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.401] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2f0, lpOverlapped=0x0) returned 1 [0203.401] FlushFileBuffers (hFile=0x2b0) returned 1 [0203.403] FlushFileBuffers (hFile=0x2f4) returned 1 [0203.404] CloseHandle (hObject=0x2b0) returned 1 [0203.404] CloseHandle (hObject=0x2f4) returned 1 [0203.404] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00586_.wmf")) returned 1 [0203.405] SetEvent (hEvent=0x27c) returned 1 [0203.406] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00775_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0203.406] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=11152) returned 1 [0203.406] CloseHandle (hObject=0x2f4) returned 1 [0203.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00775_.wmf")) returned 0x220 [0203.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00775_.wmf")) returned 0x220 [0203.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00775_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0203.406] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00775_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0203.406] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0203.407] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0203.407] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00775_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0203.407] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2b90, lpOverlapped=0x0) returned 1 [0203.409] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2ba0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2ba0, lpOverlapped=0x0) returned 1 [0203.410] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0203.410] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.410] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.410] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2b90, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2b90, lpOverlapped=0x0) returned 1 [0203.410] FlushFileBuffers (hFile=0x2f4) returned 1 [0203.412] FlushFileBuffers (hFile=0x2b0) returned 1 [0203.416] CloseHandle (hObject=0x2f4) returned 1 [0203.416] CloseHandle (hObject=0x2b0) returned 1 [0203.416] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00775_.wmf")) returned 1 [0203.426] SetEvent (hEvent=0x27c) returned 1 [0203.426] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00779_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0203.427] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=9010) returned 1 [0203.427] CloseHandle (hObject=0x2b0) returned 1 [0203.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00779_.wmf")) returned 0x220 [0203.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00779_.wmf")) returned 0x220 [0203.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00779_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0203.427] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00779_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0203.427] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0203.427] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0203.427] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00779_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0203.428] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2332, lpOverlapped=0x0) returned 1 [0203.429] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2340, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2340, lpOverlapped=0x0) returned 1 [0203.430] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0203.431] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.431] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.431] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2332, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2332, lpOverlapped=0x0) returned 1 [0203.431] FlushFileBuffers (hFile=0x2b0) returned 1 [0203.434] FlushFileBuffers (hFile=0x2f4) returned 1 [0203.435] CloseHandle (hObject=0x2b0) returned 1 [0203.435] CloseHandle (hObject=0x2f4) returned 1 [0203.435] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00779_.wmf")) returned 1 [0203.436] SetEvent (hEvent=0x27c) returned 1 [0203.437] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00799_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0203.437] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=13968) returned 1 [0203.437] CloseHandle (hObject=0x2f4) returned 1 [0203.437] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00799_.wmf")) returned 0x220 [0203.437] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00799_.wmf")) returned 0x220 [0203.437] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00799_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0203.437] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00799_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0203.438] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0203.438] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0203.438] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00799_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0203.438] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x3690, lpOverlapped=0x0) returned 1 [0203.440] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x36a0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x36a0, lpOverlapped=0x0) returned 1 [0203.441] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0203.442] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.442] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.442] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3690, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x3690, lpOverlapped=0x0) returned 1 [0203.442] FlushFileBuffers (hFile=0x2f4) returned 1 [0203.444] FlushFileBuffers (hFile=0x2b0) returned 1 [0203.445] CloseHandle (hObject=0x2f4) returned 1 [0203.445] CloseHandle (hObject=0x2b0) returned 1 [0203.445] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00799_.wmf")) returned 1 [0203.447] SetEvent (hEvent=0x27c) returned 1 [0203.447] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00814_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0203.448] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=42704) returned 1 [0203.448] CloseHandle (hObject=0x2b0) returned 1 [0203.448] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00814_.wmf")) returned 0x220 [0203.448] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00814_.wmf")) returned 0x220 [0203.448] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00814_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0203.448] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00814_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0203.448] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0203.448] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0203.448] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00814_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0203.449] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xa6d0, lpOverlapped=0x0) returned 1 [0203.451] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xa6e0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xa6e0, lpOverlapped=0x0) returned 1 [0203.453] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0203.453] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.453] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.453] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xa6d0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xa6d0, lpOverlapped=0x0) returned 1 [0203.453] FlushFileBuffers (hFile=0x2b0) returned 1 [0203.456] FlushFileBuffers (hFile=0x2f4) returned 1 [0203.457] CloseHandle (hObject=0x2b0) returned 1 [0203.457] CloseHandle (hObject=0x2f4) returned 1 [0203.457] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00814_.wmf")) returned 1 [0203.458] SetEvent (hEvent=0x27c) returned 1 [0203.459] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00965_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0203.459] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=15164) returned 1 [0203.459] CloseHandle (hObject=0x2f4) returned 1 [0203.459] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00965_.wmf")) returned 0x220 [0203.459] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00965_.wmf")) returned 0x220 [0203.459] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00965_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0203.459] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00965_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0203.459] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0203.460] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0203.460] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00965_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0203.460] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x3b3c, lpOverlapped=0x0) returned 1 [0203.462] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3b40, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x3b40, lpOverlapped=0x0) returned 1 [0203.463] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0203.463] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.463] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.463] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3b3c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x3b3c, lpOverlapped=0x0) returned 1 [0203.464] FlushFileBuffers (hFile=0x2f4) returned 1 [0203.466] FlushFileBuffers (hFile=0x2b0) returned 1 [0203.467] CloseHandle (hObject=0x2f4) returned 1 [0203.467] CloseHandle (hObject=0x2b0) returned 1 [0203.467] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00965_.wmf")) returned 1 [0203.468] SetEvent (hEvent=0x27c) returned 1 [0203.469] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01074_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0203.469] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=4634) returned 1 [0203.469] CloseHandle (hObject=0x2b0) returned 1 [0203.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01074_.wmf")) returned 0x220 [0203.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01074_.wmf")) returned 0x220 [0203.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01074_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0203.470] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01074_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0203.470] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0203.470] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0203.470] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01074_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0203.470] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x121a, lpOverlapped=0x0) returned 1 [0203.472] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1220, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1220, lpOverlapped=0x0) returned 1 [0203.473] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0203.473] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.474] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.474] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x121a, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x121a, lpOverlapped=0x0) returned 1 [0203.474] FlushFileBuffers (hFile=0x2b0) returned 1 [0203.476] FlushFileBuffers (hFile=0x2f4) returned 1 [0203.477] CloseHandle (hObject=0x2b0) returned 1 [0203.477] CloseHandle (hObject=0x2f4) returned 1 [0203.478] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01074_.wmf")) returned 1 [0203.479] SetEvent (hEvent=0x27c) returned 1 [0203.479] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01084_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0203.481] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2412) returned 1 [0203.481] CloseHandle (hObject=0x2f4) returned 1 [0203.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01084_.wmf")) returned 0x220 [0203.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01084_.wmf")) returned 0x220 [0203.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01084_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0203.481] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01084_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0203.481] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0203.481] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0203.481] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01084_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0203.482] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x96c, lpOverlapped=0x0) returned 1 [0203.483] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x970, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x970, lpOverlapped=0x0) returned 1 [0203.484] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0203.485] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.485] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.485] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x96c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x96c, lpOverlapped=0x0) returned 1 [0203.485] FlushFileBuffers (hFile=0x2f4) returned 1 [0203.487] FlushFileBuffers (hFile=0x2b0) returned 1 [0203.488] CloseHandle (hObject=0x2f4) returned 1 [0203.489] CloseHandle (hObject=0x2b0) returned 1 [0203.489] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01084_.wmf")) returned 1 [0203.490] SetEvent (hEvent=0x27c) returned 1 [0203.490] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01176_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0203.490] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=4984) returned 1 [0203.490] CloseHandle (hObject=0x2b0) returned 1 [0203.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01176_.wmf")) returned 0x220 [0203.491] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01176_.wmf")) returned 0x220 [0203.491] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01176_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0203.491] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01176_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0203.491] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0203.491] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0203.491] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01176_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0203.492] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1378, lpOverlapped=0x0) returned 1 [0203.493] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1380, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1380, lpOverlapped=0x0) returned 1 [0203.494] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0203.494] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.495] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.495] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1378, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1378, lpOverlapped=0x0) returned 1 [0203.495] FlushFileBuffers (hFile=0x2b0) returned 1 [0203.497] FlushFileBuffers (hFile=0x2f4) returned 1 [0203.498] CloseHandle (hObject=0x2b0) returned 1 [0203.499] CloseHandle (hObject=0x2f4) returned 1 [0203.499] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01176_.wmf")) returned 1 [0203.500] SetEvent (hEvent=0x27c) returned 1 [0203.500] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01191_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0203.500] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3964) returned 1 [0203.500] CloseHandle (hObject=0x2f4) returned 1 [0203.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01191_.wmf")) returned 0x220 [0203.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01191_.wmf")) returned 0x220 [0203.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01191_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0203.501] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01191_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0203.501] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0203.501] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0203.501] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01191_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0203.502] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xf7c, lpOverlapped=0x0) returned 1 [0203.503] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf80, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf80, lpOverlapped=0x0) returned 1 [0203.505] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0203.505] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.505] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.505] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf7c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xf7c, lpOverlapped=0x0) returned 1 [0203.505] FlushFileBuffers (hFile=0x2f4) returned 1 [0203.507] FlushFileBuffers (hFile=0x2b0) returned 1 [0203.638] CloseHandle (hObject=0x2f4) returned 1 [0203.639] CloseHandle (hObject=0x2b0) returned 1 [0203.639] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01191_.wmf")) returned 1 [0203.640] SetEvent (hEvent=0x27c) returned 1 [0203.640] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01196_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0203.641] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2332) returned 1 [0203.641] CloseHandle (hObject=0x2b0) returned 1 [0203.641] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01196_.wmf")) returned 0x220 [0203.641] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01196_.wmf")) returned 0x220 [0203.641] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01196_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0203.642] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01196_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0203.642] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0203.642] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0203.642] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01196_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0203.643] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x91c, lpOverlapped=0x0) returned 1 [0203.646] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x920, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x920, lpOverlapped=0x0) returned 1 [0203.647] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0203.647] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.647] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.648] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x91c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x91c, lpOverlapped=0x0) returned 1 [0203.648] FlushFileBuffers (hFile=0x2b0) returned 1 [0203.657] FlushFileBuffers (hFile=0x2f4) returned 1 [0203.663] CloseHandle (hObject=0x2b0) returned 1 [0203.663] CloseHandle (hObject=0x2f4) returned 1 [0203.663] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01196_.wmf")) returned 1 [0203.664] SetEvent (hEvent=0x27c) returned 1 [0203.664] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01657_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0203.665] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=30414) returned 1 [0203.665] CloseHandle (hObject=0x2f4) returned 1 [0203.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01657_.wmf")) returned 0x220 [0203.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01657_.wmf")) returned 0x220 [0203.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01657_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0203.666] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01657_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0203.666] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0203.666] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0203.666] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01657_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0203.667] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x76ce, lpOverlapped=0x0) returned 1 [0203.670] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x76d0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x76d0, lpOverlapped=0x0) returned 1 [0203.672] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0203.672] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.672] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.672] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x76ce, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x76ce, lpOverlapped=0x0) returned 1 [0203.672] FlushFileBuffers (hFile=0x2f4) returned 1 [0203.679] FlushFileBuffers (hFile=0x2b0) returned 1 [0203.690] CloseHandle (hObject=0x2f4) returned 1 [0203.691] CloseHandle (hObject=0x2b0) returned 1 [0203.691] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01657_.wmf")) returned 1 [0203.692] SetEvent (hEvent=0x27c) returned 1 [0203.693] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01659_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0203.695] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=31180) returned 1 [0203.695] CloseHandle (hObject=0x2b0) returned 1 [0203.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01659_.wmf")) returned 0x220 [0203.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01659_.wmf")) returned 0x220 [0203.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01659_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0203.695] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01659_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0203.695] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0203.696] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0203.696] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01659_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0203.696] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x79cc, lpOverlapped=0x0) returned 1 [0203.700] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x79d0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x79d0, lpOverlapped=0x0) returned 1 [0203.702] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0203.702] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.702] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.702] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x79cc, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x79cc, lpOverlapped=0x0) returned 1 [0203.702] FlushFileBuffers (hFile=0x2b0) returned 1 [0203.715] FlushFileBuffers (hFile=0x2f4) returned 1 [0203.719] CloseHandle (hObject=0x2b0) returned 1 [0203.724] CloseHandle (hObject=0x2f4) returned 1 [0203.725] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01659_.wmf")) returned 1 [0203.726] SetEvent (hEvent=0x27c) returned 1 [0203.726] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02068_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0203.727] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2488) returned 1 [0203.727] CloseHandle (hObject=0x2f4) returned 1 [0203.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02068_.wmf")) returned 0x220 [0203.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02068_.wmf")) returned 0x220 [0203.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02068_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0203.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02068_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0203.728] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0203.728] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0203.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02068_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0203.729] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x9b8, lpOverlapped=0x0) returned 1 [0203.731] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x9c0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x9c0, lpOverlapped=0x0) returned 1 [0203.732] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0203.732] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.732] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.732] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x9b8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x9b8, lpOverlapped=0x0) returned 1 [0203.733] FlushFileBuffers (hFile=0x2f4) returned 1 [0203.746] FlushFileBuffers (hFile=0x2b0) returned 1 [0203.748] CloseHandle (hObject=0x2f4) returned 1 [0203.748] CloseHandle (hObject=0x2b0) returned 1 [0203.748] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02068_.wmf")) returned 1 [0203.749] SetEvent (hEvent=0x27c) returned 1 [0203.749] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02075_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0203.750] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=4396) returned 1 [0203.750] CloseHandle (hObject=0x2b0) returned 1 [0203.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02075_.wmf")) returned 0x220 [0203.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02075_.wmf")) returned 0x220 [0203.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02075_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0203.750] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02075_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0203.750] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0203.751] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0203.751] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02075_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0203.751] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x112c, lpOverlapped=0x0) returned 1 [0203.753] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1130, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1130, lpOverlapped=0x0) returned 1 [0203.754] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0203.755] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.755] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.755] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x112c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x112c, lpOverlapped=0x0) returned 1 [0203.755] FlushFileBuffers (hFile=0x2b0) returned 1 [0203.763] FlushFileBuffers (hFile=0x2f4) returned 1 [0203.767] CloseHandle (hObject=0x2b0) returned 1 [0203.767] CloseHandle (hObject=0x2f4) returned 1 [0203.767] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02075_.wmf")) returned 1 [0203.768] SetEvent (hEvent=0x27c) returned 1 [0203.768] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02097_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0203.769] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1564) returned 1 [0203.769] CloseHandle (hObject=0x2f4) returned 1 [0203.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02097_.wmf")) returned 0x220 [0203.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02097_.wmf")) returned 0x220 [0203.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02097_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0203.770] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02097_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0203.770] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0203.770] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0203.770] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02097_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0203.770] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x61c, lpOverlapped=0x0) returned 1 [0203.772] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x620, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x620, lpOverlapped=0x0) returned 1 [0203.773] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0203.773] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.773] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.773] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x61c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x61c, lpOverlapped=0x0) returned 1 [0203.774] FlushFileBuffers (hFile=0x2f4) returned 1 [0203.783] FlushFileBuffers (hFile=0x2b0) returned 1 [0203.785] CloseHandle (hObject=0x2f4) returned 1 [0203.786] CloseHandle (hObject=0x2b0) returned 1 [0203.786] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02097_.wmf")) returned 1 [0203.787] SetEvent (hEvent=0x27c) returned 1 [0203.787] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02116_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0203.787] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3988) returned 1 [0203.787] CloseHandle (hObject=0x2b0) returned 1 [0203.787] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02116_.wmf")) returned 0x220 [0203.787] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02116_.wmf")) returned 0x220 [0203.787] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02116_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0203.788] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02116_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0203.788] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0203.788] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0203.788] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02116_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0203.788] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xf94, lpOverlapped=0x0) returned 1 [0203.790] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xfa0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xfa0, lpOverlapped=0x0) returned 1 [0203.791] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0203.791] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.791] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0203.791] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf94, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xf94, lpOverlapped=0x0) returned 1 [0203.792] FlushFileBuffers (hFile=0x2b0) returned 1 [0203.799] FlushFileBuffers (hFile=0x2f4) returned 1 [0204.626] CloseHandle (hObject=0x2b0) returned 1 [0204.626] CloseHandle (hObject=0x2f4) returned 1 [0204.626] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02116_.wmf")) returned 1 [0204.627] SetEvent (hEvent=0x27c) returned 1 [0204.628] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00334_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0204.639] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1528) returned 1 [0204.639] CloseHandle (hObject=0x2f4) returned 1 [0204.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00334_.wmf")) returned 0x220 [0204.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00334_.wmf")) returned 0x220 [0204.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00334_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0204.640] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00334_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0204.640] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0204.640] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0204.640] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00334_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0204.641] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x5f8, lpOverlapped=0x0) returned 1 [0204.642] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x600, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x600, lpOverlapped=0x0) returned 1 [0204.643] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0204.643] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0204.643] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0204.644] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5f8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x5f8, lpOverlapped=0x0) returned 1 [0204.644] FlushFileBuffers (hFile=0x2f4) returned 1 [0204.726] FlushFileBuffers (hFile=0x2b0) returned 1 [0204.743] CloseHandle (hObject=0x2f4) returned 1 [0204.744] CloseHandle (hObject=0x2b0) returned 1 [0204.749] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00334_.wmf")) returned 1 [0204.750] SetEvent (hEvent=0x27c) returned 1 [0204.750] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00443_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0204.793] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3298) returned 1 [0204.793] CloseHandle (hObject=0x2b0) returned 1 [0204.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00443_.wmf")) returned 0x220 [0204.794] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00443_.wmf")) returned 0x220 [0204.794] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00443_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0204.794] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00443_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0204.794] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0204.794] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0204.794] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00443_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0204.795] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xce2, lpOverlapped=0x0) returned 1 [0204.797] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xcf0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xcf0, lpOverlapped=0x0) returned 1 [0204.798] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0204.798] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0204.798] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0204.798] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xce2, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xce2, lpOverlapped=0x0) returned 1 [0204.798] FlushFileBuffers (hFile=0x2b0) returned 1 [0204.817] FlushFileBuffers (hFile=0x2f4) returned 1 [0204.829] CloseHandle (hObject=0x2b0) returned 1 [0204.829] CloseHandle (hObject=0x2f4) returned 1 [0204.829] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00443_.wmf")) returned 1 [0204.830] SetEvent (hEvent=0x27c) returned 1 [0204.830] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00524_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0204.831] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=14688) returned 1 [0204.831] CloseHandle (hObject=0x2f4) returned 1 [0204.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00524_.wmf")) returned 0x220 [0204.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00524_.wmf")) returned 0x220 [0204.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00524_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0204.831] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00524_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0204.831] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0204.831] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0204.831] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00524_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0204.845] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x3960, lpOverlapped=0x0) returned 1 [0204.848] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3970, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x3970, lpOverlapped=0x0) returned 1 [0204.849] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0204.849] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0204.849] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0204.849] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3960, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x3960, lpOverlapped=0x0) returned 1 [0204.849] FlushFileBuffers (hFile=0x2f4) returned 1 [0204.852] FlushFileBuffers (hFile=0x2b0) returned 1 [0204.859] CloseHandle (hObject=0x2f4) returned 1 [0204.859] CloseHandle (hObject=0x2b0) returned 1 [0204.859] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00524_.wmf")) returned 1 [0204.860] SetEvent (hEvent=0x27c) returned 1 [0204.860] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00527_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0204.861] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=5798) returned 1 [0204.861] CloseHandle (hObject=0x2b0) returned 1 [0204.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00527_.wmf")) returned 0x220 [0204.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00527_.wmf")) returned 0x220 [0204.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00527_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0204.861] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00527_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0204.861] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0204.862] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0204.862] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00527_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0204.862] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x16a6, lpOverlapped=0x0) returned 1 [0204.866] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x16b0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x16b0, lpOverlapped=0x0) returned 1 [0204.868] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0204.868] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0204.868] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0204.868] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x16a6, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x16a6, lpOverlapped=0x0) returned 1 [0204.868] FlushFileBuffers (hFile=0x2b0) returned 1 [0204.871] FlushFileBuffers (hFile=0x2f4) returned 1 [0204.889] CloseHandle (hObject=0x2b0) returned 1 [0204.889] CloseHandle (hObject=0x2f4) returned 1 [0204.889] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00527_.wmf")) returned 1 [0204.890] SetEvent (hEvent=0x27c) returned 1 [0204.891] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00601_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0204.891] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1468) returned 1 [0204.891] CloseHandle (hObject=0x2f4) returned 1 [0204.891] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00601_.wmf")) returned 0x220 [0204.891] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00601_.wmf")) returned 0x220 [0204.891] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00601_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0204.891] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00601_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0204.892] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0204.892] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0204.892] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00601_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0204.892] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x5bc, lpOverlapped=0x0) returned 1 [0204.903] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5c0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x5c0, lpOverlapped=0x0) returned 1 [0204.904] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0204.904] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0204.904] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0204.904] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5bc, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x5bc, lpOverlapped=0x0) returned 1 [0204.905] FlushFileBuffers (hFile=0x2f4) returned 1 [0204.914] FlushFileBuffers (hFile=0x2b0) returned 1 [0204.917] CloseHandle (hObject=0x2f4) returned 1 [0204.917] CloseHandle (hObject=0x2b0) returned 1 [0204.917] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00601_.wmf")) returned 1 [0204.918] SetEvent (hEvent=0x27c) returned 1 [0204.918] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00612_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0204.919] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=12632) returned 1 [0204.919] CloseHandle (hObject=0x2b0) returned 1 [0204.920] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00612_.wmf")) returned 0x220 [0204.920] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00612_.wmf")) returned 0x220 [0204.920] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00612_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0204.920] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00612_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0204.920] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0204.920] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0204.920] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00612_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0204.921] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x3158, lpOverlapped=0x0) returned 1 [0204.926] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3160, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x3160, lpOverlapped=0x0) returned 1 [0204.927] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0204.928] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0204.928] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0204.928] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3158, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x3158, lpOverlapped=0x0) returned 1 [0204.928] FlushFileBuffers (hFile=0x2b0) returned 1 [0204.933] FlushFileBuffers (hFile=0x2f4) returned 1 [0204.936] CloseHandle (hObject=0x2b0) returned 1 [0204.936] CloseHandle (hObject=0x2f4) returned 1 [0204.936] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00612_.wmf")) returned 1 [0204.937] SetEvent (hEvent=0x27c) returned 1 [0204.937] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00625_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0204.937] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2116) returned 1 [0204.937] CloseHandle (hObject=0x2f4) returned 1 [0204.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00625_.wmf")) returned 0x220 [0204.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00625_.wmf")) returned 0x220 [0204.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00625_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0204.938] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00625_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0204.938] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0204.938] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0204.938] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00625_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0204.938] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x844, lpOverlapped=0x0) returned 1 [0204.940] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x850, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x850, lpOverlapped=0x0) returned 1 [0204.941] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0204.941] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0204.941] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0204.941] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x844, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x844, lpOverlapped=0x0) returned 1 [0204.941] FlushFileBuffers (hFile=0x2f4) returned 1 [0204.950] FlushFileBuffers (hFile=0x2b0) returned 1 [0204.953] CloseHandle (hObject=0x2f4) returned 1 [0204.953] CloseHandle (hObject=0x2b0) returned 1 [0204.953] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00625_.wmf")) returned 1 [0204.954] SetEvent (hEvent=0x27c) returned 1 [0204.954] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00669_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0204.956] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=11490) returned 1 [0204.956] CloseHandle (hObject=0x21c) returned 1 [0204.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00669_.wmf")) returned 0x220 [0204.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00669_.wmf")) returned 0x220 [0204.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00669_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0204.957] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00669_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0204.957] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0204.957] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0204.957] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00669_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0204.958] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2ce2, lpOverlapped=0x0) returned 1 [0204.961] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2cf0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2cf0, lpOverlapped=0x0) returned 1 [0204.962] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0204.963] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0204.963] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0204.963] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2ce2, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2ce2, lpOverlapped=0x0) returned 1 [0204.963] FlushFileBuffers (hFile=0x21c) returned 1 [0204.969] FlushFileBuffers (hFile=0x2fc) returned 1 [0204.971] CloseHandle (hObject=0x21c) returned 1 [0204.971] CloseHandle (hObject=0x2fc) returned 1 [0204.971] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00669_.wmf")) returned 1 [0204.972] SetEvent (hEvent=0x27c) returned 1 [0204.973] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00685_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0204.973] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=4032) returned 1 [0204.973] CloseHandle (hObject=0x2fc) returned 1 [0204.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00685_.wmf")) returned 0x220 [0204.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00685_.wmf")) returned 0x220 [0204.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00685_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0204.974] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00685_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0204.974] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0204.974] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0204.974] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00685_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0204.974] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xfc0, lpOverlapped=0x0) returned 1 [0204.976] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xfd0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xfd0, lpOverlapped=0x0) returned 1 [0204.977] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0204.977] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0204.977] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0204.977] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xfc0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xfc0, lpOverlapped=0x0) returned 1 [0204.978] FlushFileBuffers (hFile=0x2fc) returned 1 [0204.989] FlushFileBuffers (hFile=0x21c) returned 1 [0205.664] CloseHandle (hObject=0x2fc) returned 1 [0205.664] CloseHandle (hObject=0x21c) returned 1 [0205.664] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00685_.wmf")) returned 1 [0205.665] SetEvent (hEvent=0x27c) returned 1 [0205.666] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090089.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0205.666] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=15760) returned 1 [0205.666] CloseHandle (hObject=0x21c) returned 1 [0205.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090089.wmf")) returned 0x220 [0205.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090089.wmf")) returned 0x220 [0205.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090089.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.666] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090089.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0205.666] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0205.666] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0205.666] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090089.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0205.667] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x3d90, lpOverlapped=0x0) returned 1 [0205.673] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3da0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x3da0, lpOverlapped=0x0) returned 1 [0205.674] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0205.675] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0205.675] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0205.675] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3d90, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x3d90, lpOverlapped=0x0) returned 1 [0205.675] FlushFileBuffers (hFile=0x21c) returned 1 [0205.678] FlushFileBuffers (hFile=0x2fc) returned 1 [0205.688] CloseHandle (hObject=0x21c) returned 1 [0205.688] CloseHandle (hObject=0x2fc) returned 1 [0205.688] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090089.wmf")) returned 1 [0205.689] SetEvent (hEvent=0x27c) returned 1 [0205.689] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090390.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0205.690] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=17638) returned 1 [0205.690] CloseHandle (hObject=0x2fc) returned 1 [0205.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090390.wmf")) returned 0x220 [0205.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090390.wmf")) returned 0x220 [0205.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090390.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.690] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090390.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0205.690] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0205.691] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0205.691] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090390.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0205.691] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x44e6, lpOverlapped=0x0) returned 1 [0205.694] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x44f0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x44f0, lpOverlapped=0x0) returned 1 [0205.696] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0205.696] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0205.696] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0205.696] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x44e6, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x44e6, lpOverlapped=0x0) returned 1 [0205.696] FlushFileBuffers (hFile=0x2fc) returned 1 [0205.704] FlushFileBuffers (hFile=0x21c) returned 1 [0205.711] CloseHandle (hObject=0x2fc) returned 1 [0205.711] CloseHandle (hObject=0x21c) returned 1 [0205.711] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090390.wmf")) returned 1 [0205.712] SetEvent (hEvent=0x27c) returned 1 [0205.712] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090779.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0205.712] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1456) returned 1 [0205.713] CloseHandle (hObject=0x21c) returned 1 [0205.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090779.wmf")) returned 0x220 [0205.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090779.wmf")) returned 0x220 [0205.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090779.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.713] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090779.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0205.713] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0205.713] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0205.713] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090779.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0205.714] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x5b0, lpOverlapped=0x0) returned 1 [0205.715] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5c0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x5c0, lpOverlapped=0x0) returned 1 [0205.716] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0205.717] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0205.717] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0205.717] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x5b0, lpOverlapped=0x0) returned 1 [0205.717] FlushFileBuffers (hFile=0x21c) returned 1 [0205.726] FlushFileBuffers (hFile=0x2fc) returned 1 [0205.728] CloseHandle (hObject=0x21c) returned 1 [0205.728] CloseHandle (hObject=0x2fc) returned 1 [0205.728] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090779.wmf")) returned 1 [0205.738] SetEvent (hEvent=0x27c) returned 1 [0205.739] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090783.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0205.739] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=6934) returned 1 [0205.739] CloseHandle (hObject=0x2fc) returned 1 [0205.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090783.wmf")) returned 0x220 [0205.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090783.wmf")) returned 0x220 [0205.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090783.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.739] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090783.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0205.740] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0205.740] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0205.740] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090783.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0205.740] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1b16, lpOverlapped=0x0) returned 1 [0205.742] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1b20, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1b20, lpOverlapped=0x0) returned 1 [0205.743] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0205.743] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0205.743] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0205.743] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1b16, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1b16, lpOverlapped=0x0) returned 1 [0205.744] FlushFileBuffers (hFile=0x2fc) returned 1 [0205.746] FlushFileBuffers (hFile=0x21c) returned 1 [0205.756] CloseHandle (hObject=0x2fc) returned 1 [0205.756] CloseHandle (hObject=0x21c) returned 1 [0205.756] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090783.wmf")) returned 1 [0205.758] SetEvent (hEvent=0x27c) returned 1 [0205.758] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0098497.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0205.758] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=4970) returned 1 [0205.758] CloseHandle (hObject=0x21c) returned 1 [0205.758] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0098497.wmf")) returned 0x220 [0205.758] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0098497.wmf")) returned 0x220 [0205.758] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0098497.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.758] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0098497.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0205.758] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0205.758] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0205.759] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0098497.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0205.759] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x136a, lpOverlapped=0x0) returned 1 [0205.761] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1370, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1370, lpOverlapped=0x0) returned 1 [0205.762] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0205.762] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0205.762] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0205.762] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x136a, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x136a, lpOverlapped=0x0) returned 1 [0205.763] FlushFileBuffers (hFile=0x21c) returned 1 [0205.765] FlushFileBuffers (hFile=0x2fc) returned 1 [0205.771] CloseHandle (hObject=0x21c) returned 1 [0205.771] CloseHandle (hObject=0x2fc) returned 1 [0205.771] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0098497.wmf")) returned 1 [0205.772] SetEvent (hEvent=0x27c) returned 1 [0205.773] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099146.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0205.773] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=16596) returned 1 [0205.773] CloseHandle (hObject=0x2fc) returned 1 [0205.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099146.wmf")) returned 0x220 [0205.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099146.wmf")) returned 0x220 [0205.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099146.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.773] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099146.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0205.773] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0205.773] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0205.773] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099146.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0205.774] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x40d4, lpOverlapped=0x0) returned 1 [0205.779] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x40e0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x40e0, lpOverlapped=0x0) returned 1 [0205.781] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0205.781] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0205.781] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0205.781] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x40d4, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x40d4, lpOverlapped=0x0) returned 1 [0205.781] FlushFileBuffers (hFile=0x2fc) returned 1 [0205.786] FlushFileBuffers (hFile=0x21c) returned 1 [0205.792] CloseHandle (hObject=0x2fc) returned 1 [0205.792] CloseHandle (hObject=0x21c) returned 1 [0205.793] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099146.wmf")) returned 1 [0205.794] SetEvent (hEvent=0x27c) returned 1 [0205.794] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099148.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0205.794] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=18258) returned 1 [0205.794] CloseHandle (hObject=0x21c) returned 1 [0205.794] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099148.jpg")) returned 0x220 [0205.794] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099148.jpg")) returned 0x220 [0205.795] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099148.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.795] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099148.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0205.795] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0205.795] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0205.795] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099148.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0205.795] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4752, lpOverlapped=0x0) returned 1 [0205.801] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4760, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4760, lpOverlapped=0x0) returned 1 [0205.802] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0205.803] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0205.803] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0205.803] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4752, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4752, lpOverlapped=0x0) returned 1 [0205.803] FlushFileBuffers (hFile=0x21c) returned 1 [0205.806] FlushFileBuffers (hFile=0x2fc) returned 1 [0205.820] CloseHandle (hObject=0x21c) returned 1 [0205.820] CloseHandle (hObject=0x2fc) returned 1 [0205.820] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099148.jpg")) returned 1 [0205.822] SetEvent (hEvent=0x27c) returned 1 [0205.822] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0205.823] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=21914) returned 1 [0205.823] CloseHandle (hObject=0x2fc) returned 1 [0205.823] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg")) returned 0x220 [0205.823] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg")) returned 0x220 [0205.823] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.823] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0205.823] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0205.823] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0205.823] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0205.824] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x559a, lpOverlapped=0x0) returned 1 [0205.826] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x55a0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x55a0, lpOverlapped=0x0) returned 1 [0205.827] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0205.827] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0205.828] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0205.828] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x559a, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x559a, lpOverlapped=0x0) returned 1 [0205.828] FlushFileBuffers (hFile=0x2fc) returned 1 [0205.830] FlushFileBuffers (hFile=0x21c) returned 1 [0205.831] CloseHandle (hObject=0x2fc) returned 1 [0205.831] CloseHandle (hObject=0x21c) returned 1 [0205.831] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg")) returned 1 [0205.832] SetEvent (hEvent=0x27c) returned 1 [0205.833] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0205.843] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=26086) returned 1 [0205.843] CloseHandle (hObject=0x21c) returned 1 [0205.843] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf")) returned 0x220 [0205.843] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf")) returned 0x220 [0205.843] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.844] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0205.844] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0205.844] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0205.844] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0205.845] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x65e6, lpOverlapped=0x0) returned 1 [0205.847] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x65f0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x65f0, lpOverlapped=0x0) returned 1 [0205.848] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0205.849] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0205.849] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0205.849] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x65e6, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x65e6, lpOverlapped=0x0) returned 1 [0205.849] FlushFileBuffers (hFile=0x21c) returned 1 [0205.851] FlushFileBuffers (hFile=0x2fc) returned 1 [0205.854] CloseHandle (hObject=0x21c) returned 1 [0205.854] CloseHandle (hObject=0x2fc) returned 1 [0205.854] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf")) returned 1 [0205.855] SetEvent (hEvent=0x27c) returned 1 [0205.855] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0205.856] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=11694) returned 1 [0205.856] CloseHandle (hObject=0x2fc) returned 1 [0205.856] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg")) returned 0x220 [0205.856] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg")) returned 0x220 [0205.856] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.856] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0205.856] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0205.856] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0205.857] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0205.857] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2dae, lpOverlapped=0x0) returned 1 [0205.860] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2db0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2db0, lpOverlapped=0x0) returned 1 [0205.861] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0205.861] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0205.861] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0205.861] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2dae, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2dae, lpOverlapped=0x0) returned 1 [0205.861] FlushFileBuffers (hFile=0x2fc) returned 1 [0205.864] FlushFileBuffers (hFile=0x21c) returned 1 [0205.866] CloseHandle (hObject=0x2fc) returned 1 [0205.866] CloseHandle (hObject=0x21c) returned 1 [0205.866] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg")) returned 1 [0205.867] SetEvent (hEvent=0x27c) returned 1 [0205.868] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0205.868] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=13874) returned 1 [0205.868] CloseHandle (hObject=0x21c) returned 1 [0205.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf")) returned 0x220 [0205.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf")) returned 0x220 [0205.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.868] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0205.869] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0205.869] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0205.869] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0205.869] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x3632, lpOverlapped=0x0) returned 1 [0205.871] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3640, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x3640, lpOverlapped=0x0) returned 1 [0205.873] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0205.873] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0205.873] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0205.873] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3632, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x3632, lpOverlapped=0x0) returned 1 [0205.873] FlushFileBuffers (hFile=0x21c) returned 1 [0205.884] FlushFileBuffers (hFile=0x2fc) returned 1 [0205.885] CloseHandle (hObject=0x21c) returned 1 [0205.885] CloseHandle (hObject=0x2fc) returned 1 [0205.885] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf")) returned 1 [0205.886] SetEvent (hEvent=0x27c) returned 1 [0205.887] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0205.887] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=6929) returned 1 [0205.887] CloseHandle (hObject=0x2fc) returned 1 [0205.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg")) returned 0x220 [0205.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg")) returned 0x220 [0205.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.888] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0205.888] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0205.888] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0205.888] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0205.889] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1b11, lpOverlapped=0x0) returned 1 [0205.890] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1b20, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1b20, lpOverlapped=0x0) returned 1 [0205.894] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0205.895] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0205.895] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0205.895] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1b11, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1b11, lpOverlapped=0x0) returned 1 [0205.895] FlushFileBuffers (hFile=0x2fc) returned 1 [0205.899] FlushFileBuffers (hFile=0x21c) returned 1 [0205.901] CloseHandle (hObject=0x2fc) returned 1 [0205.901] CloseHandle (hObject=0x21c) returned 1 [0205.901] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg")) returned 1 [0205.902] SetEvent (hEvent=0x27c) returned 1 [0205.902] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0205.903] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=8826) returned 1 [0205.903] CloseHandle (hObject=0x21c) returned 1 [0205.904] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg")) returned 0x220 [0205.904] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg")) returned 0x220 [0205.904] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.904] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0205.904] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0205.904] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0205.904] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0205.905] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x227a, lpOverlapped=0x0) returned 1 [0205.912] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2280, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2280, lpOverlapped=0x0) returned 1 [0205.913] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0205.914] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0205.914] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0205.914] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x227a, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x227a, lpOverlapped=0x0) returned 1 [0205.914] FlushFileBuffers (hFile=0x21c) returned 1 [0205.922] FlushFileBuffers (hFile=0x2fc) returned 1 [0205.924] CloseHandle (hObject=0x21c) returned 1 [0205.924] CloseHandle (hObject=0x2fc) returned 1 [0205.925] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg")) returned 1 [0205.926] SetEvent (hEvent=0x27c) returned 1 [0205.926] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0205.927] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=13954) returned 1 [0205.927] CloseHandle (hObject=0x2fc) returned 1 [0205.927] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg")) returned 0x220 [0205.927] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg")) returned 0x220 [0205.927] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.927] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0205.927] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0205.927] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0205.927] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0205.928] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x3682, lpOverlapped=0x0) returned 1 [0205.931] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3690, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x3690, lpOverlapped=0x0) returned 1 [0205.932] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0205.932] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0205.932] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0205.932] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3682, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x3682, lpOverlapped=0x0) returned 1 [0205.932] FlushFileBuffers (hFile=0x2fc) returned 1 [0205.943] FlushFileBuffers (hFile=0x21c) returned 1 [0205.946] CloseHandle (hObject=0x2fc) returned 1 [0205.946] CloseHandle (hObject=0x21c) returned 1 [0205.946] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg")) returned 1 [0205.947] SetEvent (hEvent=0x27c) returned 1 [0205.947] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0205.948] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=26160) returned 1 [0205.948] CloseHandle (hObject=0x21c) returned 1 [0205.948] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf")) returned 0x220 [0205.948] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf")) returned 0x220 [0205.948] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.948] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0205.948] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0205.948] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0205.948] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0205.949] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x6630, lpOverlapped=0x0) returned 1 [0205.951] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x6640, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x6640, lpOverlapped=0x0) returned 1 [0205.953] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0205.954] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0205.954] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0205.954] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x6630, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x6630, lpOverlapped=0x0) returned 1 [0205.954] FlushFileBuffers (hFile=0x21c) returned 1 [0205.962] FlushFileBuffers (hFile=0x2fc) returned 1 [0205.966] CloseHandle (hObject=0x21c) returned 1 [0205.967] CloseHandle (hObject=0x2fc) returned 1 [0205.967] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf")) returned 1 [0205.968] SetEvent (hEvent=0x27c) returned 1 [0205.968] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0205.969] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=15145) returned 1 [0205.969] CloseHandle (hObject=0x2fc) returned 1 [0205.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg")) returned 0x220 [0205.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg")) returned 0x220 [0205.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.969] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0205.969] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0205.969] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0205.969] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0205.970] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x3b29, lpOverlapped=0x0) returned 1 [0205.972] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3b30, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x3b30, lpOverlapped=0x0) returned 1 [0205.973] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0205.973] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0205.973] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0205.973] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3b29, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x3b29, lpOverlapped=0x0) returned 1 [0205.973] FlushFileBuffers (hFile=0x2fc) returned 1 [0205.983] FlushFileBuffers (hFile=0x21c) returned 1 [0205.985] CloseHandle (hObject=0x2fc) returned 1 [0205.985] CloseHandle (hObject=0x21c) returned 1 [0205.985] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg")) returned 1 [0205.986] SetEvent (hEvent=0x27c) returned 1 [0205.986] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0205.987] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=19656) returned 1 [0205.987] CloseHandle (hObject=0x21c) returned 1 [0205.987] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg")) returned 0x220 [0205.987] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg")) returned 0x220 [0205.987] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.987] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0205.987] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0205.987] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0205.987] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0205.988] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4cc8, lpOverlapped=0x0) returned 1 [0205.990] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4cd0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4cd0, lpOverlapped=0x0) returned 1 [0205.991] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0205.991] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0205.992] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0205.992] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4cc8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4cc8, lpOverlapped=0x0) returned 1 [0205.992] FlushFileBuffers (hFile=0x21c) returned 1 [0206.008] FlushFileBuffers (hFile=0x2fc) returned 1 [0206.011] CloseHandle (hObject=0x21c) returned 1 [0206.012] CloseHandle (hObject=0x2fc) returned 1 [0206.012] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg")) returned 1 [0206.013] SetEvent (hEvent=0x27c) returned 1 [0206.013] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0206.014] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=21946) returned 1 [0206.014] CloseHandle (hObject=0x2fc) returned 1 [0206.014] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf")) returned 0x220 [0206.014] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf")) returned 0x220 [0206.014] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.014] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0206.014] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.014] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.014] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0206.015] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x55ba, lpOverlapped=0x0) returned 1 [0206.017] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x55c0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x55c0, lpOverlapped=0x0) returned 1 [0206.018] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0206.018] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.018] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.019] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x55ba, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x55ba, lpOverlapped=0x0) returned 1 [0206.019] FlushFileBuffers (hFile=0x2fc) returned 1 [0206.026] FlushFileBuffers (hFile=0x21c) returned 1 [0206.032] CloseHandle (hObject=0x2fc) returned 1 [0206.032] CloseHandle (hObject=0x21c) returned 1 [0206.032] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf")) returned 1 [0206.033] SetEvent (hEvent=0x27c) returned 1 [0206.034] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0206.034] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=64767) returned 1 [0206.034] CloseHandle (hObject=0x21c) returned 1 [0206.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg")) returned 0x220 [0206.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg")) returned 0x220 [0206.035] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.035] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0206.035] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.035] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.035] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0206.036] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xfcff, lpOverlapped=0x0) returned 1 [0206.039] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xfd00, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xfd00, lpOverlapped=0x0) returned 1 [0206.041] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0206.041] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.041] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.041] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xfcff, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xfcff, lpOverlapped=0x0) returned 1 [0206.042] FlushFileBuffers (hFile=0x21c) returned 1 [0206.052] FlushFileBuffers (hFile=0x2fc) returned 1 [0206.057] CloseHandle (hObject=0x21c) returned 1 [0206.057] CloseHandle (hObject=0x2fc) returned 1 [0206.057] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg")) returned 1 [0206.059] SetEvent (hEvent=0x27c) returned 1 [0206.059] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0206.060] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=20179) returned 1 [0206.060] CloseHandle (hObject=0x2fc) returned 1 [0206.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg")) returned 0x220 [0206.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg")) returned 0x220 [0206.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.060] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0206.060] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.060] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.060] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0206.061] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4ed3, lpOverlapped=0x0) returned 1 [0206.063] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4ee0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4ee0, lpOverlapped=0x0) returned 1 [0206.065] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0206.065] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.065] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.065] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4ed3, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4ed3, lpOverlapped=0x0) returned 1 [0206.065] FlushFileBuffers (hFile=0x2fc) returned 1 [0206.076] FlushFileBuffers (hFile=0x21c) returned 1 [0206.078] CloseHandle (hObject=0x2fc) returned 1 [0206.078] CloseHandle (hObject=0x21c) returned 1 [0206.078] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg")) returned 1 [0206.079] SetEvent (hEvent=0x27c) returned 1 [0206.079] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0206.080] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=24292) returned 1 [0206.080] CloseHandle (hObject=0x21c) returned 1 [0206.081] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf")) returned 0x220 [0206.081] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf")) returned 0x220 [0206.081] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.081] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0206.081] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.081] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.081] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0206.082] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x5ee4, lpOverlapped=0x0) returned 1 [0206.085] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5ef0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x5ef0, lpOverlapped=0x0) returned 1 [0206.087] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0206.087] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.087] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.087] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5ee4, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x5ee4, lpOverlapped=0x0) returned 1 [0206.087] FlushFileBuffers (hFile=0x21c) returned 1 [0206.096] FlushFileBuffers (hFile=0x2fc) returned 1 [0206.098] CloseHandle (hObject=0x21c) returned 1 [0206.098] CloseHandle (hObject=0x2fc) returned 1 [0206.098] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf")) returned 1 [0206.099] SetEvent (hEvent=0x27c) returned 1 [0206.100] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099172.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0206.100] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=58258) returned 1 [0206.100] CloseHandle (hObject=0x2fc) returned 1 [0206.100] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099172.wmf")) returned 0x220 [0206.100] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099172.wmf")) returned 0x220 [0206.100] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099172.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.100] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099172.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0206.101] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.101] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.101] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099172.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0206.101] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xe392, lpOverlapped=0x0) returned 1 [0206.105] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xe3a0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xe3a0, lpOverlapped=0x0) returned 1 [0206.107] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0206.107] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.107] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.107] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xe392, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xe392, lpOverlapped=0x0) returned 1 [0206.107] FlushFileBuffers (hFile=0x2fc) returned 1 [0206.119] FlushFileBuffers (hFile=0x21c) returned 1 [0206.121] CloseHandle (hObject=0x2fc) returned 1 [0206.121] CloseHandle (hObject=0x21c) returned 1 [0206.121] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099172.wmf")) returned 1 [0206.123] SetEvent (hEvent=0x27c) returned 1 [0206.123] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099174.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0206.124] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=6214) returned 1 [0206.124] CloseHandle (hObject=0x21c) returned 1 [0206.124] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099174.wmf")) returned 0x220 [0206.124] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099174.wmf")) returned 0x220 [0206.124] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099174.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.124] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099174.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0206.124] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.124] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.124] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099174.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0206.125] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1846, lpOverlapped=0x0) returned 1 [0206.127] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1850, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1850, lpOverlapped=0x0) returned 1 [0206.128] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0206.128] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.128] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.129] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1846, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1846, lpOverlapped=0x0) returned 1 [0206.129] FlushFileBuffers (hFile=0x21c) returned 1 [0206.136] FlushFileBuffers (hFile=0x2fc) returned 1 [0206.150] CloseHandle (hObject=0x21c) returned 1 [0206.150] CloseHandle (hObject=0x2fc) returned 1 [0206.150] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099174.wmf")) returned 1 [0206.151] SetEvent (hEvent=0x27c) returned 1 [0206.152] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099176.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0206.152] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2488) returned 1 [0206.152] CloseHandle (hObject=0x2fc) returned 1 [0206.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099176.wmf")) returned 0x220 [0206.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099176.wmf")) returned 0x220 [0206.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099176.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.153] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099176.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0206.153] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.153] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.153] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099176.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0206.154] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x9b8, lpOverlapped=0x0) returned 1 [0206.157] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x9c0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x9c0, lpOverlapped=0x0) returned 1 [0206.158] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0206.159] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.159] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.159] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x9b8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x9b8, lpOverlapped=0x0) returned 1 [0206.159] FlushFileBuffers (hFile=0x2fc) returned 1 [0206.161] FlushFileBuffers (hFile=0x21c) returned 1 [0206.173] CloseHandle (hObject=0x2fc) returned 1 [0206.173] CloseHandle (hObject=0x21c) returned 1 [0206.173] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099176.wmf")) returned 1 [0206.175] SetEvent (hEvent=0x27c) returned 1 [0206.175] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099178.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0206.175] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3606) returned 1 [0206.175] CloseHandle (hObject=0x21c) returned 1 [0206.175] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099178.wmf")) returned 0x220 [0206.176] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099178.wmf")) returned 0x220 [0206.176] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099178.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.176] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099178.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0206.176] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.176] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.176] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099178.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0206.177] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xe16, lpOverlapped=0x0) returned 1 [0206.178] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xe20, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xe20, lpOverlapped=0x0) returned 1 [0206.179] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0206.180] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.180] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.180] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xe16, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xe16, lpOverlapped=0x0) returned 1 [0206.180] FlushFileBuffers (hFile=0x21c) returned 1 [0206.182] FlushFileBuffers (hFile=0x2fc) returned 1 [0206.189] CloseHandle (hObject=0x21c) returned 1 [0206.189] CloseHandle (hObject=0x2fc) returned 1 [0206.189] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099178.wmf")) returned 1 [0206.190] SetEvent (hEvent=0x27c) returned 1 [0206.190] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099180.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0206.191] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3394) returned 1 [0206.191] CloseHandle (hObject=0x2fc) returned 1 [0206.191] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099180.wmf")) returned 0x220 [0206.191] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099180.wmf")) returned 0x220 [0206.191] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099180.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.191] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099180.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0206.191] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.191] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.191] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099180.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0206.192] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xd42, lpOverlapped=0x0) returned 1 [0206.196] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xd50, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xd50, lpOverlapped=0x0) returned 1 [0206.197] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0206.198] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.198] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.198] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xd42, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xd42, lpOverlapped=0x0) returned 1 [0206.198] FlushFileBuffers (hFile=0x2fc) returned 1 [0206.201] FlushFileBuffers (hFile=0x21c) returned 1 [0206.210] CloseHandle (hObject=0x2fc) returned 1 [0206.210] CloseHandle (hObject=0x21c) returned 1 [0206.210] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099180.wmf")) returned 1 [0206.211] SetEvent (hEvent=0x27c) returned 1 [0206.211] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099182.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0206.212] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3840) returned 1 [0206.212] CloseHandle (hObject=0x21c) returned 1 [0206.212] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099182.wmf")) returned 0x220 [0206.212] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099182.wmf")) returned 0x220 [0206.212] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099182.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.212] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099182.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0206.212] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.212] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.213] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099182.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0206.213] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xf00, lpOverlapped=0x0) returned 1 [0206.215] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf10, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf10, lpOverlapped=0x0) returned 1 [0206.217] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0206.218] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.218] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.218] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf00, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xf00, lpOverlapped=0x0) returned 1 [0206.218] FlushFileBuffers (hFile=0x21c) returned 1 [0206.228] FlushFileBuffers (hFile=0x2fc) returned 1 [0206.376] CloseHandle (hObject=0x21c) returned 1 [0206.376] CloseHandle (hObject=0x2fc) returned 1 [0206.376] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099182.wmf")) returned 1 [0206.377] SetEvent (hEvent=0x27c) returned 1 [0206.378] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099192.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0206.378] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=17964) returned 1 [0206.378] CloseHandle (hObject=0x2fc) returned 1 [0206.378] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099192.gif")) returned 0x220 [0206.378] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099192.gif")) returned 0x220 [0206.378] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099192.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.378] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099192.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0206.379] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.379] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.379] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099192.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0206.379] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x462c, lpOverlapped=0x0) returned 1 [0206.381] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4630, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4630, lpOverlapped=0x0) returned 1 [0206.383] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0206.383] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.383] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.383] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x462c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x462c, lpOverlapped=0x0) returned 1 [0206.383] FlushFileBuffers (hFile=0x2fc) returned 1 [0206.396] FlushFileBuffers (hFile=0x21c) returned 1 [0206.399] CloseHandle (hObject=0x2fc) returned 1 [0206.399] CloseHandle (hObject=0x21c) returned 1 [0206.399] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099192.gif")) returned 1 [0206.400] SetEvent (hEvent=0x27c) returned 1 [0206.401] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099194.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0206.401] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=25265) returned 1 [0206.401] CloseHandle (hObject=0x21c) returned 1 [0206.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099194.gif")) returned 0x220 [0206.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099194.gif")) returned 0x220 [0206.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099194.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.401] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099194.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0206.402] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.402] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.402] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099194.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0206.402] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x62b1, lpOverlapped=0x0) returned 1 [0206.404] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x62c0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x62c0, lpOverlapped=0x0) returned 1 [0206.406] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0206.406] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.406] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.406] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x62b1, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x62b1, lpOverlapped=0x0) returned 1 [0206.406] FlushFileBuffers (hFile=0x21c) returned 1 [0206.413] FlushFileBuffers (hFile=0x2fc) returned 1 [0206.418] CloseHandle (hObject=0x21c) returned 1 [0206.418] CloseHandle (hObject=0x2fc) returned 1 [0206.419] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099194.gif")) returned 1 [0206.420] SetEvent (hEvent=0x27c) returned 1 [0206.420] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099196.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0206.420] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=14337) returned 1 [0206.420] CloseHandle (hObject=0x2fc) returned 1 [0206.420] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099196.gif")) returned 0x220 [0206.421] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099196.gif")) returned 0x220 [0206.421] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099196.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.421] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099196.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0206.421] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.421] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.421] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099196.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0206.422] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x3801, lpOverlapped=0x0) returned 1 [0206.436] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3810, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x3810, lpOverlapped=0x0) returned 1 [0206.437] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0206.437] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.437] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.437] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3801, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x3801, lpOverlapped=0x0) returned 1 [0206.438] FlushFileBuffers (hFile=0x2fc) returned 1 [0206.440] FlushFileBuffers (hFile=0x21c) returned 1 [0206.451] CloseHandle (hObject=0x2fc) returned 1 [0206.451] CloseHandle (hObject=0x21c) returned 1 [0206.452] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099196.gif")) returned 1 [0206.453] SetEvent (hEvent=0x27c) returned 1 [0206.453] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099198.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0206.453] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=5259) returned 1 [0206.454] CloseHandle (hObject=0x21c) returned 1 [0206.454] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099198.gif")) returned 0x220 [0206.454] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099198.gif")) returned 0x220 [0206.454] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099198.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.454] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099198.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0206.454] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.454] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.454] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099198.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0206.455] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x148b, lpOverlapped=0x0) returned 1 [0206.457] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1490, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1490, lpOverlapped=0x0) returned 1 [0206.458] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0206.458] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.458] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.458] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x148b, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x148b, lpOverlapped=0x0) returned 1 [0206.458] FlushFileBuffers (hFile=0x21c) returned 1 [0206.467] FlushFileBuffers (hFile=0x2fc) returned 1 [0206.472] CloseHandle (hObject=0x21c) returned 1 [0206.472] CloseHandle (hObject=0x2fc) returned 1 [0206.472] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099198.gif")) returned 1 [0206.473] SetEvent (hEvent=0x27c) returned 1 [0206.473] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099200.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0206.474] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=16543) returned 1 [0206.474] CloseHandle (hObject=0x2fc) returned 1 [0206.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099200.gif")) returned 0x220 [0206.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099200.gif")) returned 0x220 [0206.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099200.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.474] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099200.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0206.474] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.475] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.475] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099200.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0206.475] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x409f, lpOverlapped=0x0) returned 1 [0206.479] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x40a0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x40a0, lpOverlapped=0x0) returned 1 [0206.480] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0206.481] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.481] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.481] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x409f, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x409f, lpOverlapped=0x0) returned 1 [0206.481] FlushFileBuffers (hFile=0x2fc) returned 1 [0206.494] FlushFileBuffers (hFile=0x21c) returned 1 [0206.497] CloseHandle (hObject=0x2fc) returned 1 [0206.497] CloseHandle (hObject=0x21c) returned 1 [0206.497] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099200.gif")) returned 1 [0206.498] SetEvent (hEvent=0x27c) returned 1 [0206.498] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099202.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0206.499] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=4967) returned 1 [0206.499] CloseHandle (hObject=0x21c) returned 1 [0206.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099202.gif")) returned 0x220 [0206.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099202.gif")) returned 0x220 [0206.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099202.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.499] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099202.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0206.499] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.499] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.499] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099202.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0206.500] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1367, lpOverlapped=0x0) returned 1 [0206.501] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1370, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1370, lpOverlapped=0x0) returned 1 [0206.502] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0206.503] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.503] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.503] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1367, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1367, lpOverlapped=0x0) returned 1 [0206.503] FlushFileBuffers (hFile=0x21c) returned 1 [0206.511] FlushFileBuffers (hFile=0x2fc) returned 1 [0206.514] CloseHandle (hObject=0x21c) returned 1 [0206.514] CloseHandle (hObject=0x2fc) returned 1 [0206.514] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099202.gif")) returned 1 [0206.515] SetEvent (hEvent=0x27c) returned 1 [0206.516] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099204.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0206.516] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=17854) returned 1 [0206.516] CloseHandle (hObject=0x2fc) returned 1 [0206.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099204.wmf")) returned 0x220 [0206.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099204.wmf")) returned 0x220 [0206.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099204.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.516] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099204.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0206.517] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.517] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.517] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099204.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0206.517] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x45be, lpOverlapped=0x0) returned 1 [0206.519] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x45c0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x45c0, lpOverlapped=0x0) returned 1 [0206.520] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0206.520] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.521] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.521] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x45be, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x45be, lpOverlapped=0x0) returned 1 [0206.521] FlushFileBuffers (hFile=0x2fc) returned 1 [0206.523] FlushFileBuffers (hFile=0x21c) returned 1 [0206.528] CloseHandle (hObject=0x2fc) returned 1 [0206.528] CloseHandle (hObject=0x21c) returned 1 [0206.528] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099204.wmf")) returned 1 [0206.529] SetEvent (hEvent=0x27c) returned 1 [0206.529] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099205.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0206.530] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=17854) returned 1 [0206.530] CloseHandle (hObject=0x21c) returned 1 [0206.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099205.wmf")) returned 0x220 [0206.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099205.wmf")) returned 0x220 [0206.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099205.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.531] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099205.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0206.531] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.531] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.531] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099205.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0206.536] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x45be, lpOverlapped=0x0) returned 1 [0206.539] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x45c0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x45c0, lpOverlapped=0x0) returned 1 [0206.540] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0206.541] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.541] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.541] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x45be, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x45be, lpOverlapped=0x0) returned 1 [0206.541] FlushFileBuffers (hFile=0x21c) returned 1 [0206.547] FlushFileBuffers (hFile=0x2fc) returned 1 [0206.553] CloseHandle (hObject=0x21c) returned 1 [0206.553] CloseHandle (hObject=0x2fc) returned 1 [0206.553] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099205.wmf")) returned 1 [0206.554] SetEvent (hEvent=0x27c) returned 1 [0206.554] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101856.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0206.555] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=78840) returned 1 [0206.555] CloseHandle (hObject=0x2fc) returned 1 [0206.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101856.bmp")) returned 0x220 [0206.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101856.bmp")) returned 0x220 [0206.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101856.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.555] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101856.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0206.555] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.555] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.555] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101856.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0206.556] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x133f8, lpOverlapped=0x0) returned 1 [0206.562] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x13400, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x13400, lpOverlapped=0x0) returned 1 [0206.564] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0206.564] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.565] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.565] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x133f8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x133f8, lpOverlapped=0x0) returned 1 [0206.565] FlushFileBuffers (hFile=0x2fc) returned 1 [0206.571] FlushFileBuffers (hFile=0x21c) returned 1 [0206.577] CloseHandle (hObject=0x2fc) returned 1 [0206.577] CloseHandle (hObject=0x21c) returned 1 [0206.577] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101856.bmp")) returned 1 [0206.578] SetEvent (hEvent=0x27c) returned 1 [0206.578] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101857.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0206.580] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=32184) returned 1 [0206.580] CloseHandle (hObject=0x21c) returned 1 [0206.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101857.bmp")) returned 0x220 [0206.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101857.bmp")) returned 0x220 [0206.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101857.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.580] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101857.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0206.580] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.580] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.580] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101857.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0206.581] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x7db8, lpOverlapped=0x0) returned 1 [0206.584] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7dc0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x7dc0, lpOverlapped=0x0) returned 1 [0206.585] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0206.586] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.586] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.586] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7db8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x7db8, lpOverlapped=0x0) returned 1 [0206.586] FlushFileBuffers (hFile=0x21c) returned 1 [0206.588] FlushFileBuffers (hFile=0x2fc) returned 1 [0206.590] CloseHandle (hObject=0x21c) returned 1 [0206.590] CloseHandle (hObject=0x2fc) returned 1 [0206.590] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101857.bmp")) returned 1 [0206.591] SetEvent (hEvent=0x27c) returned 1 [0206.591] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101858.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0206.592] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=32184) returned 1 [0206.592] CloseHandle (hObject=0x2fc) returned 1 [0206.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101858.bmp")) returned 0x220 [0206.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101858.bmp")) returned 0x220 [0206.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101858.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.592] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101858.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0206.593] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.593] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.593] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101858.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0206.593] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x7db8, lpOverlapped=0x0) returned 1 [0206.596] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7dc0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x7dc0, lpOverlapped=0x0) returned 1 [0206.598] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0206.598] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.598] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.598] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7db8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x7db8, lpOverlapped=0x0) returned 1 [0206.599] FlushFileBuffers (hFile=0x2fc) returned 1 [0206.601] FlushFileBuffers (hFile=0x21c) returned 1 [0206.603] CloseHandle (hObject=0x2fc) returned 1 [0206.603] CloseHandle (hObject=0x21c) returned 1 [0206.603] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101858.bmp")) returned 1 [0206.604] SetEvent (hEvent=0x27c) returned 1 [0206.604] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101859.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0206.605] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=31968) returned 1 [0206.605] CloseHandle (hObject=0x21c) returned 1 [0206.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101859.bmp")) returned 0x220 [0206.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101859.bmp")) returned 0x220 [0206.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101859.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.605] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101859.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0206.605] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.605] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.605] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101859.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0206.606] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x7ce0, lpOverlapped=0x0) returned 1 [0206.609] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7cf0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x7cf0, lpOverlapped=0x0) returned 1 [0206.610] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0206.610] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.610] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.610] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7ce0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x7ce0, lpOverlapped=0x0) returned 1 [0206.610] FlushFileBuffers (hFile=0x21c) returned 1 [0206.666] FlushFileBuffers (hFile=0x2fc) returned 1 [0206.667] CloseHandle (hObject=0x21c) returned 1 [0206.667] CloseHandle (hObject=0x2fc) returned 1 [0206.668] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101859.bmp")) returned 1 [0206.672] SetEvent (hEvent=0x27c) returned 1 [0206.672] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101862.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0206.672] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=32184) returned 1 [0206.673] CloseHandle (hObject=0x2fc) returned 1 [0206.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101862.bmp")) returned 0x220 [0206.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101862.bmp")) returned 0x220 [0206.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101862.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.673] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101862.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0206.673] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.673] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.673] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101862.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0206.674] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x7db8, lpOverlapped=0x0) returned 1 [0206.676] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7dc0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x7dc0, lpOverlapped=0x0) returned 1 [0206.678] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0206.678] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.678] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.678] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7db8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x7db8, lpOverlapped=0x0) returned 1 [0206.679] FlushFileBuffers (hFile=0x2fc) returned 1 [0206.681] FlushFileBuffers (hFile=0x21c) returned 1 [0206.689] CloseHandle (hObject=0x2fc) returned 1 [0206.689] CloseHandle (hObject=0x21c) returned 1 [0206.689] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101862.bmp")) returned 1 [0206.690] SetEvent (hEvent=0x27c) returned 1 [0206.690] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101863.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0206.691] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=32184) returned 1 [0206.691] CloseHandle (hObject=0x21c) returned 1 [0206.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101863.bmp")) returned 0x220 [0206.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101863.bmp")) returned 0x220 [0206.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101863.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.691] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101863.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0206.692] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.692] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.692] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101863.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0206.693] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x7db8, lpOverlapped=0x0) returned 1 [0206.695] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7dc0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x7dc0, lpOverlapped=0x0) returned 1 [0206.697] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0206.697] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.697] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.697] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7db8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x7db8, lpOverlapped=0x0) returned 1 [0206.697] FlushFileBuffers (hFile=0x21c) returned 1 [0206.699] FlushFileBuffers (hFile=0x2fc) returned 1 [0206.701] CloseHandle (hObject=0x21c) returned 1 [0206.701] CloseHandle (hObject=0x2fc) returned 1 [0206.701] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101863.bmp")) returned 1 [0206.702] SetEvent (hEvent=0x27c) returned 1 [0206.702] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101864.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0206.703] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=31968) returned 1 [0206.703] CloseHandle (hObject=0x2fc) returned 1 [0206.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101864.bmp")) returned 0x220 [0206.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101864.bmp")) returned 0x220 [0206.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101864.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.703] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101864.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0206.703] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.703] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.703] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101864.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0206.704] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x7ce0, lpOverlapped=0x0) returned 1 [0206.707] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7cf0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x7cf0, lpOverlapped=0x0) returned 1 [0206.708] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0206.708] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.708] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.708] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7ce0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x7ce0, lpOverlapped=0x0) returned 1 [0206.708] FlushFileBuffers (hFile=0x2fc) returned 1 [0206.711] FlushFileBuffers (hFile=0x21c) returned 1 [0206.713] CloseHandle (hObject=0x2fc) returned 1 [0206.713] CloseHandle (hObject=0x21c) returned 1 [0206.713] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101864.bmp")) returned 1 [0206.714] SetEvent (hEvent=0x27c) returned 1 [0206.714] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101865.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0206.716] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=32184) returned 1 [0206.716] CloseHandle (hObject=0x21c) returned 1 [0206.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101865.bmp")) returned 0x220 [0206.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101865.bmp")) returned 0x220 [0206.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101865.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.716] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101865.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0206.716] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.716] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.716] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101865.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0206.717] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x7db8, lpOverlapped=0x0) returned 1 [0206.720] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7dc0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x7dc0, lpOverlapped=0x0) returned 1 [0206.721] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0206.721] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.721] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.721] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7db8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x7db8, lpOverlapped=0x0) returned 1 [0206.721] FlushFileBuffers (hFile=0x21c) returned 1 [0206.724] FlushFileBuffers (hFile=0x2fc) returned 1 [0206.725] CloseHandle (hObject=0x21c) returned 1 [0206.725] CloseHandle (hObject=0x2fc) returned 1 [0206.725] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101865.bmp")) returned 1 [0206.727] SetEvent (hEvent=0x27c) returned 1 [0206.727] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101866.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0206.728] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=32184) returned 1 [0206.728] CloseHandle (hObject=0x2fc) returned 1 [0206.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101866.bmp")) returned 0x220 [0206.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101866.bmp")) returned 0x220 [0206.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101866.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101866.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0206.728] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.728] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101866.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0206.729] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x7db8, lpOverlapped=0x0) returned 1 [0206.732] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7dc0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x7dc0, lpOverlapped=0x0) returned 1 [0206.733] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0206.733] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.733] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.733] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7db8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x7db8, lpOverlapped=0x0) returned 1 [0206.734] FlushFileBuffers (hFile=0x2fc) returned 1 [0206.736] FlushFileBuffers (hFile=0x21c) returned 1 [0206.738] CloseHandle (hObject=0x2fc) returned 1 [0206.738] CloseHandle (hObject=0x21c) returned 1 [0206.738] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101866.bmp")) returned 1 [0206.739] SetEvent (hEvent=0x27c) returned 1 [0206.740] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101867.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0206.740] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=32616) returned 1 [0206.740] CloseHandle (hObject=0x21c) returned 1 [0206.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101867.bmp")) returned 0x220 [0206.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101867.bmp")) returned 0x220 [0206.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101867.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101867.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0206.741] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.741] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101867.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0206.742] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x7f68, lpOverlapped=0x0) returned 1 [0206.745] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7f70, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x7f70, lpOverlapped=0x0) returned 1 [0206.747] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0206.747] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.747] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.747] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7f68, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x7f68, lpOverlapped=0x0) returned 1 [0206.747] FlushFileBuffers (hFile=0x21c) returned 1 [0206.751] FlushFileBuffers (hFile=0x2fc) returned 1 [0206.792] CloseHandle (hObject=0x21c) returned 1 [0206.793] CloseHandle (hObject=0x2fc) returned 1 [0206.793] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101867.bmp")) returned 1 [0206.794] SetEvent (hEvent=0x27c) returned 1 [0206.794] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102762.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0206.795] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=11216) returned 1 [0206.795] CloseHandle (hObject=0x2fc) returned 1 [0206.795] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102762.wmf")) returned 0x220 [0206.795] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102762.wmf")) returned 0x220 [0206.795] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102762.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.795] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102762.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0206.795] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.795] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.795] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102762.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0206.796] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2bd0, lpOverlapped=0x0) returned 1 [0206.798] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2be0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2be0, lpOverlapped=0x0) returned 1 [0206.799] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0206.800] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.800] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.800] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2bd0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2bd0, lpOverlapped=0x0) returned 1 [0206.800] FlushFileBuffers (hFile=0x2fc) returned 1 [0206.805] FlushFileBuffers (hFile=0x21c) returned 1 [0206.806] CloseHandle (hObject=0x2fc) returned 1 [0206.807] CloseHandle (hObject=0x21c) returned 1 [0206.807] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102762.wmf")) returned 1 [0206.808] SetEvent (hEvent=0x27c) returned 1 [0206.808] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102984.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0206.808] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=17040) returned 1 [0206.808] CloseHandle (hObject=0x21c) returned 1 [0206.809] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102984.wmf")) returned 0x220 [0206.809] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102984.wmf")) returned 0x220 [0206.809] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102984.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.809] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102984.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0206.809] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.809] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.809] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102984.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0206.810] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4290, lpOverlapped=0x0) returned 1 [0206.812] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x42a0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x42a0, lpOverlapped=0x0) returned 1 [0206.813] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0206.813] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.813] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.813] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4290, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4290, lpOverlapped=0x0) returned 1 [0206.813] FlushFileBuffers (hFile=0x21c) returned 1 [0206.901] FlushFileBuffers (hFile=0x2fc) returned 1 [0206.905] CloseHandle (hObject=0x21c) returned 1 [0206.905] CloseHandle (hObject=0x2fc) returned 1 [0206.905] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102984.wmf")) returned 1 [0206.906] SetEvent (hEvent=0x27c) returned 1 [0206.906] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103402.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0206.908] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=44948) returned 1 [0206.908] CloseHandle (hObject=0x2fc) returned 1 [0206.908] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103402.wmf")) returned 0x220 [0206.908] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103402.wmf")) returned 0x220 [0206.908] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103402.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.909] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103402.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0206.909] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.909] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.909] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103402.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0206.910] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xaf94, lpOverlapped=0x0) returned 1 [0206.916] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xafa0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xafa0, lpOverlapped=0x0) returned 1 [0206.919] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0206.919] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.919] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.919] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xaf94, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xaf94, lpOverlapped=0x0) returned 1 [0206.920] FlushFileBuffers (hFile=0x2fc) returned 1 [0206.925] FlushFileBuffers (hFile=0x21c) returned 1 [0206.927] CloseHandle (hObject=0x2fc) returned 1 [0206.927] CloseHandle (hObject=0x21c) returned 1 [0206.927] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103402.wmf")) returned 1 [0206.928] SetEvent (hEvent=0x27c) returned 1 [0206.928] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103850.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0206.930] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=23596) returned 1 [0206.930] CloseHandle (hObject=0x21c) returned 1 [0206.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103850.wmf")) returned 0x220 [0206.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103850.wmf")) returned 0x220 [0206.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103850.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0206.930] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103850.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0206.930] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.930] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0206.930] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103850.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0206.931] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x5c2c, lpOverlapped=0x0) returned 1 [0206.937] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5c30, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x5c30, lpOverlapped=0x0) returned 1 [0206.938] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0206.939] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.939] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0206.939] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5c2c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x5c2c, lpOverlapped=0x0) returned 1 [0206.939] FlushFileBuffers (hFile=0x21c) returned 1 [0207.019] FlushFileBuffers (hFile=0x2fc) returned 1 [0207.021] CloseHandle (hObject=0x21c) returned 1 [0207.021] CloseHandle (hObject=0x2fc) returned 1 [0207.021] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103850.wmf")) returned 1 [0207.022] SetEvent (hEvent=0x27c) returned 1 [0207.022] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105250.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0207.024] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=4628) returned 1 [0207.024] CloseHandle (hObject=0x2fc) returned 1 [0207.024] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105250.wmf")) returned 0x220 [0207.024] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105250.wmf")) returned 0x220 [0207.024] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105250.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.024] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105250.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0207.024] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.024] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.024] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105250.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0207.025] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1214, lpOverlapped=0x0) returned 1 [0207.028] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1220, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1220, lpOverlapped=0x0) returned 1 [0207.029] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0207.030] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.030] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.030] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1214, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1214, lpOverlapped=0x0) returned 1 [0207.030] FlushFileBuffers (hFile=0x2fc) returned 1 [0207.037] FlushFileBuffers (hFile=0x21c) returned 1 [0207.039] CloseHandle (hObject=0x2fc) returned 1 [0207.039] CloseHandle (hObject=0x21c) returned 1 [0207.040] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105250.wmf")) returned 1 [0207.040] SetEvent (hEvent=0x27c) returned 1 [0207.041] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105272.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0207.041] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=17728) returned 1 [0207.041] CloseHandle (hObject=0x21c) returned 1 [0207.041] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105272.wmf")) returned 0x220 [0207.041] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105272.wmf")) returned 0x220 [0207.041] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105272.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.041] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105272.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0207.042] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.042] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.042] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105272.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0207.042] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4540, lpOverlapped=0x0) returned 1 [0207.045] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4550, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4550, lpOverlapped=0x0) returned 1 [0207.046] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0207.046] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.046] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.046] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4540, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4540, lpOverlapped=0x0) returned 1 [0207.047] FlushFileBuffers (hFile=0x21c) returned 1 [0207.057] FlushFileBuffers (hFile=0x2fc) returned 1 [0207.058] CloseHandle (hObject=0x21c) returned 1 [0207.058] CloseHandle (hObject=0x2fc) returned 1 [0207.058] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105272.wmf")) returned 1 [0207.059] SetEvent (hEvent=0x27c) returned 1 [0207.060] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105280.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0207.061] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=11540) returned 1 [0207.061] CloseHandle (hObject=0x2fc) returned 1 [0207.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105280.wmf")) returned 0x220 [0207.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105280.wmf")) returned 0x220 [0207.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105280.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.061] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105280.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0207.061] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.061] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.061] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105280.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0207.062] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2d14, lpOverlapped=0x0) returned 1 [0207.065] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2d20, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2d20, lpOverlapped=0x0) returned 1 [0207.066] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0207.067] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.067] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.067] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2d14, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2d14, lpOverlapped=0x0) returned 1 [0207.067] FlushFileBuffers (hFile=0x2fc) returned 1 [0207.075] FlushFileBuffers (hFile=0x21c) returned 1 [0207.078] CloseHandle (hObject=0x2fc) returned 1 [0207.078] CloseHandle (hObject=0x21c) returned 1 [0207.078] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105280.wmf")) returned 1 [0207.079] SetEvent (hEvent=0x27c) returned 1 [0207.079] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105286.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0207.080] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=6568) returned 1 [0207.080] CloseHandle (hObject=0x21c) returned 1 [0207.080] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105286.wmf")) returned 0x220 [0207.080] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105286.wmf")) returned 0x220 [0207.080] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105286.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.080] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105286.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0207.080] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.080] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.080] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105286.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0207.081] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x19a8, lpOverlapped=0x0) returned 1 [0207.083] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x19b0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x19b0, lpOverlapped=0x0) returned 1 [0207.084] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0207.084] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.084] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.084] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x19a8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x19a8, lpOverlapped=0x0) returned 1 [0207.084] FlushFileBuffers (hFile=0x21c) returned 1 [0207.106] FlushFileBuffers (hFile=0x2fc) returned 1 [0207.108] CloseHandle (hObject=0x21c) returned 1 [0207.108] CloseHandle (hObject=0x2fc) returned 1 [0207.108] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105286.wmf")) returned 1 [0207.109] SetEvent (hEvent=0x27c) returned 1 [0207.109] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105292.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0207.110] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=14868) returned 1 [0207.110] CloseHandle (hObject=0x2fc) returned 1 [0207.110] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105292.wmf")) returned 0x220 [0207.110] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105292.wmf")) returned 0x220 [0207.110] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105292.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.110] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105292.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0207.110] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.111] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.111] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105292.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0207.111] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x3a14, lpOverlapped=0x0) returned 1 [0207.113] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3a20, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x3a20, lpOverlapped=0x0) returned 1 [0207.114] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0207.115] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.115] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.115] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3a14, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x3a14, lpOverlapped=0x0) returned 1 [0207.115] FlushFileBuffers (hFile=0x2fc) returned 1 [0207.123] FlushFileBuffers (hFile=0x21c) returned 1 [0207.127] CloseHandle (hObject=0x2fc) returned 1 [0207.127] CloseHandle (hObject=0x21c) returned 1 [0207.127] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105292.wmf")) returned 1 [0207.128] SetEvent (hEvent=0x27c) returned 1 [0207.128] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105298.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0207.130] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=6320) returned 1 [0207.130] CloseHandle (hObject=0x21c) returned 1 [0207.130] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105298.wmf")) returned 0x220 [0207.130] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105298.wmf")) returned 0x220 [0207.130] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105298.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.130] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105298.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0207.130] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.130] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.130] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105298.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0207.131] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x18b0, lpOverlapped=0x0) returned 1 [0207.133] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x18c0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x18c0, lpOverlapped=0x0) returned 1 [0207.134] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0207.134] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.134] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.134] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x18b0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x18b0, lpOverlapped=0x0) returned 1 [0207.135] FlushFileBuffers (hFile=0x21c) returned 1 [0207.144] FlushFileBuffers (hFile=0x2fc) returned 1 [0207.148] CloseHandle (hObject=0x21c) returned 1 [0207.148] CloseHandle (hObject=0x2fc) returned 1 [0207.148] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105298.wmf")) returned 1 [0207.149] SetEvent (hEvent=0x27c) returned 1 [0207.149] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105306.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0207.150] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=4320) returned 1 [0207.150] CloseHandle (hObject=0x2fc) returned 1 [0207.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105306.wmf")) returned 0x220 [0207.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105306.wmf")) returned 0x220 [0207.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105306.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.150] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105306.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0207.150] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.150] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.150] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105306.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0207.151] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x10e0, lpOverlapped=0x0) returned 1 [0207.153] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x10f0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x10f0, lpOverlapped=0x0) returned 1 [0207.154] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0207.154] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.154] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.154] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x10e0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x10e0, lpOverlapped=0x0) returned 1 [0207.154] FlushFileBuffers (hFile=0x2fc) returned 1 [0207.173] FlushFileBuffers (hFile=0x21c) returned 1 [0207.174] CloseHandle (hObject=0x2fc) returned 1 [0207.174] CloseHandle (hObject=0x21c) returned 1 [0207.174] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105306.wmf")) returned 1 [0207.175] SetEvent (hEvent=0x27c) returned 1 [0207.175] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105320.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0207.176] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2020) returned 1 [0207.176] CloseHandle (hObject=0x21c) returned 1 [0207.176] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105320.wmf")) returned 0x220 [0207.176] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105320.wmf")) returned 0x220 [0207.176] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105320.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.177] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105320.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0207.177] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.177] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.177] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105320.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0207.177] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x7e4, lpOverlapped=0x0) returned 1 [0207.179] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7f0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x7f0, lpOverlapped=0x0) returned 1 [0207.181] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0207.181] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.181] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.181] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7e4, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x7e4, lpOverlapped=0x0) returned 1 [0207.181] FlushFileBuffers (hFile=0x21c) returned 1 [0207.184] FlushFileBuffers (hFile=0x2fc) returned 1 [0207.185] CloseHandle (hObject=0x21c) returned 1 [0207.185] CloseHandle (hObject=0x2fc) returned 1 [0207.186] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105320.wmf")) returned 1 [0207.186] SetEvent (hEvent=0x27c) returned 1 [0207.187] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105328.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0207.187] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=7992) returned 1 [0207.187] CloseHandle (hObject=0x2fc) returned 1 [0207.187] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105328.wmf")) returned 0x220 [0207.187] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105328.wmf")) returned 0x220 [0207.188] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105328.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.188] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105328.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0207.188] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.188] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.188] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105328.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0207.189] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1f38, lpOverlapped=0x0) returned 1 [0207.190] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1f40, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1f40, lpOverlapped=0x0) returned 1 [0207.191] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0207.192] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.192] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.192] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1f38, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1f38, lpOverlapped=0x0) returned 1 [0207.192] FlushFileBuffers (hFile=0x2fc) returned 1 [0207.200] FlushFileBuffers (hFile=0x21c) returned 1 [0207.202] CloseHandle (hObject=0x2fc) returned 1 [0207.202] CloseHandle (hObject=0x21c) returned 1 [0207.202] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105328.wmf")) returned 1 [0207.203] SetEvent (hEvent=0x27c) returned 1 [0207.203] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105332.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0207.204] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=10508) returned 1 [0207.204] CloseHandle (hObject=0x21c) returned 1 [0207.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105332.wmf")) returned 0x220 [0207.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105332.wmf")) returned 0x220 [0207.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105332.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.205] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105332.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0207.205] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.205] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.205] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105332.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0207.205] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x290c, lpOverlapped=0x0) returned 1 [0207.207] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2910, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2910, lpOverlapped=0x0) returned 1 [0207.208] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0207.208] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.208] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.208] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x290c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x290c, lpOverlapped=0x0) returned 1 [0207.209] FlushFileBuffers (hFile=0x21c) returned 1 [0207.213] FlushFileBuffers (hFile=0x2fc) returned 1 [0207.223] CloseHandle (hObject=0x21c) returned 1 [0207.223] CloseHandle (hObject=0x2fc) returned 1 [0207.223] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105332.wmf")) returned 1 [0207.224] SetEvent (hEvent=0x27c) returned 1 [0207.224] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105338.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0207.224] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=11584) returned 1 [0207.224] CloseHandle (hObject=0x2fc) returned 1 [0207.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105338.wmf")) returned 0x220 [0207.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105338.wmf")) returned 0x220 [0207.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105338.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.225] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105338.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0207.225] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.225] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.225] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105338.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0207.226] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2d40, lpOverlapped=0x0) returned 1 [0207.228] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2d50, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2d50, lpOverlapped=0x0) returned 1 [0207.229] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0207.229] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.229] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.229] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2d40, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2d40, lpOverlapped=0x0) returned 1 [0207.229] FlushFileBuffers (hFile=0x2fc) returned 1 [0207.248] FlushFileBuffers (hFile=0x21c) returned 1 [0207.250] CloseHandle (hObject=0x2fc) returned 1 [0207.250] CloseHandle (hObject=0x21c) returned 1 [0207.250] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105338.wmf")) returned 1 [0207.251] SetEvent (hEvent=0x27c) returned 1 [0207.251] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105360.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0207.252] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=8860) returned 1 [0207.252] CloseHandle (hObject=0x21c) returned 1 [0207.252] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105360.wmf")) returned 0x220 [0207.252] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105360.wmf")) returned 0x220 [0207.252] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105360.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.253] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105360.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0207.253] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.253] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.253] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105360.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0207.254] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x229c, lpOverlapped=0x0) returned 1 [0207.256] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x22a0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x22a0, lpOverlapped=0x0) returned 1 [0207.259] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0207.259] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.259] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.259] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x229c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x229c, lpOverlapped=0x0) returned 1 [0207.259] FlushFileBuffers (hFile=0x21c) returned 1 [0207.262] FlushFileBuffers (hFile=0x2fc) returned 1 [0207.271] CloseHandle (hObject=0x21c) returned 1 [0207.271] CloseHandle (hObject=0x2fc) returned 1 [0207.271] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105360.wmf")) returned 1 [0207.272] SetEvent (hEvent=0x27c) returned 1 [0207.272] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105376.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0207.274] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=4964) returned 1 [0207.274] CloseHandle (hObject=0x2fc) returned 1 [0207.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105376.wmf")) returned 0x220 [0207.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105376.wmf")) returned 0x220 [0207.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105376.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.274] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105376.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0207.275] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.275] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.275] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105376.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0207.275] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1364, lpOverlapped=0x0) returned 1 [0207.278] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1370, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1370, lpOverlapped=0x0) returned 1 [0207.279] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0207.279] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.279] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.279] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1364, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1364, lpOverlapped=0x0) returned 1 [0207.279] FlushFileBuffers (hFile=0x2fc) returned 1 [0207.288] FlushFileBuffers (hFile=0x21c) returned 1 [0207.291] CloseHandle (hObject=0x2fc) returned 1 [0207.292] CloseHandle (hObject=0x21c) returned 1 [0207.293] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105376.wmf")) returned 1 [0207.294] SetEvent (hEvent=0x27c) returned 1 [0207.294] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105380.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0207.297] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=4624) returned 1 [0207.297] CloseHandle (hObject=0x2b0) returned 1 [0207.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105380.wmf")) returned 0x220 [0207.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105380.wmf")) returned 0x220 [0207.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105380.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.297] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105380.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0207.298] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.298] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.298] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105380.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0207.299] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1210, lpOverlapped=0x0) returned 1 [0207.301] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1220, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1220, lpOverlapped=0x0) returned 1 [0207.302] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0207.303] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.303] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.303] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1210, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1210, lpOverlapped=0x0) returned 1 [0207.303] FlushFileBuffers (hFile=0x2b0) returned 1 [0207.308] FlushFileBuffers (hFile=0x21c) returned 1 [0207.310] CloseHandle (hObject=0x2b0) returned 1 [0207.310] CloseHandle (hObject=0x21c) returned 1 [0207.310] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105380.wmf")) returned 1 [0207.311] SetEvent (hEvent=0x27c) returned 1 [0207.311] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105386.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0207.312] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=5980) returned 1 [0207.312] CloseHandle (hObject=0x21c) returned 1 [0207.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105386.wmf")) returned 0x220 [0207.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105386.wmf")) returned 0x220 [0207.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105386.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.312] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105386.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0207.312] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.312] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.312] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105386.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0207.313] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x175c, lpOverlapped=0x0) returned 1 [0207.315] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1760, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1760, lpOverlapped=0x0) returned 1 [0207.316] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0207.316] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.316] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.316] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x175c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x175c, lpOverlapped=0x0) returned 1 [0207.316] FlushFileBuffers (hFile=0x21c) returned 1 [0207.322] FlushFileBuffers (hFile=0x2b0) returned 1 [0207.327] CloseHandle (hObject=0x21c) returned 1 [0207.327] CloseHandle (hObject=0x2b0) returned 1 [0207.327] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105386.wmf")) returned 1 [0207.328] SetEvent (hEvent=0x27c) returned 1 [0207.328] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105390.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0207.329] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=4944) returned 1 [0207.329] CloseHandle (hObject=0x2b0) returned 1 [0207.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105390.wmf")) returned 0x220 [0207.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105390.wmf")) returned 0x220 [0207.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105390.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.329] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105390.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0207.329] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.329] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.329] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105390.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0207.330] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1350, lpOverlapped=0x0) returned 1 [0207.332] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1360, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1360, lpOverlapped=0x0) returned 1 [0207.333] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0207.333] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.333] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.333] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1350, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1350, lpOverlapped=0x0) returned 1 [0207.334] FlushFileBuffers (hFile=0x2b0) returned 1 [0207.336] FlushFileBuffers (hFile=0x21c) returned 1 [0207.344] CloseHandle (hObject=0x2b0) returned 1 [0207.344] CloseHandle (hObject=0x21c) returned 1 [0207.344] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105390.wmf")) returned 1 [0207.345] SetEvent (hEvent=0x27c) returned 1 [0207.345] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105398.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0207.346] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3328) returned 1 [0207.346] CloseHandle (hObject=0x21c) returned 1 [0207.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105398.wmf")) returned 0x220 [0207.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105398.wmf")) returned 0x220 [0207.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105398.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.346] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105398.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0207.346] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.346] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.346] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105398.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0207.347] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xd00, lpOverlapped=0x0) returned 1 [0207.349] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xd10, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xd10, lpOverlapped=0x0) returned 1 [0207.350] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0207.350] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.350] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.350] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xd00, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xd00, lpOverlapped=0x0) returned 1 [0207.350] FlushFileBuffers (hFile=0x21c) returned 1 [0207.362] FlushFileBuffers (hFile=0x2b0) returned 1 [0207.372] CloseHandle (hObject=0x21c) returned 1 [0207.372] CloseHandle (hObject=0x2b0) returned 1 [0207.372] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105398.wmf")) returned 1 [0207.374] SetEvent (hEvent=0x27c) returned 1 [0207.374] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105412.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0207.375] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=9400) returned 1 [0207.375] CloseHandle (hObject=0x2b0) returned 1 [0207.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105412.wmf")) returned 0x220 [0207.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105412.wmf")) returned 0x220 [0207.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105412.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.375] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105412.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0207.375] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.375] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.375] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105412.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0207.376] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x24b8, lpOverlapped=0x0) returned 1 [0207.378] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x24c0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x24c0, lpOverlapped=0x0) returned 1 [0207.379] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0207.379] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.379] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.379] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x24b8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x24b8, lpOverlapped=0x0) returned 1 [0207.379] FlushFileBuffers (hFile=0x2b0) returned 1 [0207.382] FlushFileBuffers (hFile=0x21c) returned 1 [0207.383] CloseHandle (hObject=0x2b0) returned 1 [0207.383] CloseHandle (hObject=0x21c) returned 1 [0207.383] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105412.wmf")) returned 1 [0207.384] SetEvent (hEvent=0x27c) returned 1 [0207.385] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105414.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0207.385] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=6244) returned 1 [0207.385] CloseHandle (hObject=0x21c) returned 1 [0207.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105414.wmf")) returned 0x220 [0207.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105414.wmf")) returned 0x220 [0207.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105414.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.385] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105414.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0207.385] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.385] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.386] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105414.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0207.386] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1864, lpOverlapped=0x0) returned 1 [0207.394] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1870, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1870, lpOverlapped=0x0) returned 1 [0207.395] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0207.395] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.395] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.395] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1864, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1864, lpOverlapped=0x0) returned 1 [0207.395] FlushFileBuffers (hFile=0x21c) returned 1 [0207.397] FlushFileBuffers (hFile=0x2b0) returned 1 [0207.399] CloseHandle (hObject=0x21c) returned 1 [0207.399] CloseHandle (hObject=0x2b0) returned 1 [0207.400] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105414.wmf")) returned 1 [0207.401] SetEvent (hEvent=0x27c) returned 1 [0207.401] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105490.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0207.402] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=18728) returned 1 [0207.402] CloseHandle (hObject=0x2b0) returned 1 [0207.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105490.wmf")) returned 0x220 [0207.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105490.wmf")) returned 0x220 [0207.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105490.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.402] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105490.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0207.402] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.402] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.402] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105490.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0207.403] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4928, lpOverlapped=0x0) returned 1 [0207.421] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4930, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4930, lpOverlapped=0x0) returned 1 [0207.422] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0207.422] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.422] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.422] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4928, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4928, lpOverlapped=0x0) returned 1 [0207.423] FlushFileBuffers (hFile=0x2b0) returned 1 [0207.432] FlushFileBuffers (hFile=0x21c) returned 1 [0207.434] CloseHandle (hObject=0x2b0) returned 1 [0207.434] CloseHandle (hObject=0x21c) returned 1 [0207.434] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105490.wmf")) returned 1 [0207.435] SetEvent (hEvent=0x27c) returned 1 [0207.435] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105502.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0207.436] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=5472) returned 1 [0207.436] CloseHandle (hObject=0x21c) returned 1 [0207.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105502.wmf")) returned 0x220 [0207.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105502.wmf")) returned 0x220 [0207.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105502.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.436] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105502.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0207.436] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.436] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.436] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105502.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0207.437] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1560, lpOverlapped=0x0) returned 1 [0207.439] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1570, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1570, lpOverlapped=0x0) returned 1 [0207.440] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0207.440] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.440] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.440] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1560, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1560, lpOverlapped=0x0) returned 1 [0207.440] FlushFileBuffers (hFile=0x21c) returned 1 [0207.451] FlushFileBuffers (hFile=0x2b0) returned 1 [0207.456] CloseHandle (hObject=0x21c) returned 1 [0207.460] CloseHandle (hObject=0x2b0) returned 1 [0207.461] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105502.wmf")) returned 1 [0207.462] SetEvent (hEvent=0x27c) returned 1 [0207.462] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105506.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0207.462] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2912) returned 1 [0207.462] CloseHandle (hObject=0x2b0) returned 1 [0207.462] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105506.wmf")) returned 0x220 [0207.462] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105506.wmf")) returned 0x220 [0207.462] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105506.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.463] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105506.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0207.463] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.463] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.463] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105506.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0207.463] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xb60, lpOverlapped=0x0) returned 1 [0207.465] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xb70, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xb70, lpOverlapped=0x0) returned 1 [0207.466] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0207.467] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.467] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.467] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xb60, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xb60, lpOverlapped=0x0) returned 1 [0207.467] FlushFileBuffers (hFile=0x2b0) returned 1 [0207.473] FlushFileBuffers (hFile=0x21c) returned 1 [0207.477] CloseHandle (hObject=0x2b0) returned 1 [0207.477] CloseHandle (hObject=0x21c) returned 1 [0207.477] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105506.wmf")) returned 1 [0207.479] SetEvent (hEvent=0x27c) returned 1 [0207.479] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105526.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0207.479] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=17332) returned 1 [0207.479] CloseHandle (hObject=0x21c) returned 1 [0207.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105526.wmf")) returned 0x220 [0207.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105526.wmf")) returned 0x220 [0207.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105526.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.480] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105526.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0207.480] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.480] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.480] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105526.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0207.480] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x43b4, lpOverlapped=0x0) returned 1 [0207.483] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x43c0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x43c0, lpOverlapped=0x0) returned 1 [0207.484] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0207.485] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.485] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.485] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x43b4, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x43b4, lpOverlapped=0x0) returned 1 [0207.485] FlushFileBuffers (hFile=0x21c) returned 1 [0207.487] FlushFileBuffers (hFile=0x2b0) returned 1 [0207.496] CloseHandle (hObject=0x21c) returned 1 [0207.496] CloseHandle (hObject=0x2b0) returned 1 [0207.496] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105526.wmf")) returned 1 [0207.497] SetEvent (hEvent=0x27c) returned 1 [0207.497] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105588.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0207.499] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=21548) returned 1 [0207.499] CloseHandle (hObject=0x2b0) returned 1 [0207.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105588.wmf")) returned 0x220 [0207.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105588.wmf")) returned 0x220 [0207.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105588.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.499] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105588.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0207.499] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.499] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.499] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105588.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0207.500] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x542c, lpOverlapped=0x0) returned 1 [0207.503] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5430, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x5430, lpOverlapped=0x0) returned 1 [0207.504] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0207.504] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.504] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.504] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x542c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x542c, lpOverlapped=0x0) returned 1 [0207.505] FlushFileBuffers (hFile=0x2b0) returned 1 [0207.513] FlushFileBuffers (hFile=0x21c) returned 1 [0207.516] CloseHandle (hObject=0x2b0) returned 1 [0207.516] CloseHandle (hObject=0x21c) returned 1 [0207.516] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105588.wmf")) returned 1 [0207.517] SetEvent (hEvent=0x27c) returned 1 [0207.517] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105638.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0207.518] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=10364) returned 1 [0207.518] CloseHandle (hObject=0x21c) returned 1 [0207.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105638.wmf")) returned 0x220 [0207.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105638.wmf")) returned 0x220 [0207.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105638.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.518] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105638.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0207.518] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.518] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.518] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105638.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0207.519] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x287c, lpOverlapped=0x0) returned 1 [0207.521] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2880, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2880, lpOverlapped=0x0) returned 1 [0207.522] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0207.523] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.523] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.523] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x287c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x287c, lpOverlapped=0x0) returned 1 [0207.523] FlushFileBuffers (hFile=0x21c) returned 1 [0207.533] FlushFileBuffers (hFile=0x2b0) returned 1 [0207.536] CloseHandle (hObject=0x21c) returned 1 [0207.536] CloseHandle (hObject=0x2b0) returned 1 [0207.536] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105638.wmf")) returned 1 [0207.537] SetEvent (hEvent=0x27c) returned 1 [0207.537] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105846.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0207.539] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=8240) returned 1 [0207.539] CloseHandle (hObject=0x2b0) returned 1 [0207.539] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105846.wmf")) returned 0x220 [0207.539] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105846.wmf")) returned 0x220 [0207.539] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105846.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.539] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105846.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0207.539] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.539] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.539] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105846.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0207.540] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2030, lpOverlapped=0x0) returned 1 [0207.542] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2040, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2040, lpOverlapped=0x0) returned 1 [0207.543] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0207.543] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.543] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.543] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2030, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2030, lpOverlapped=0x0) returned 1 [0207.544] FlushFileBuffers (hFile=0x2b0) returned 1 [0207.571] FlushFileBuffers (hFile=0x21c) returned 1 [0207.573] CloseHandle (hObject=0x2b0) returned 1 [0207.573] CloseHandle (hObject=0x21c) returned 1 [0207.573] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105846.wmf")) returned 1 [0207.574] SetEvent (hEvent=0x27c) returned 1 [0207.574] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105974.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0207.575] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=4612) returned 1 [0207.575] CloseHandle (hObject=0x21c) returned 1 [0207.575] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105974.wmf")) returned 0x220 [0207.575] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105974.wmf")) returned 0x220 [0207.575] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105974.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.575] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105974.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0207.575] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.575] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.575] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105974.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0207.576] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1204, lpOverlapped=0x0) returned 1 [0207.578] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1210, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1210, lpOverlapped=0x0) returned 1 [0207.579] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0207.579] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.579] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.579] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1204, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1204, lpOverlapped=0x0) returned 1 [0207.579] FlushFileBuffers (hFile=0x21c) returned 1 [0207.589] FlushFileBuffers (hFile=0x2b0) returned 1 [0207.590] CloseHandle (hObject=0x21c) returned 1 [0207.591] CloseHandle (hObject=0x2b0) returned 1 [0207.591] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105974.wmf")) returned 1 [0207.592] SetEvent (hEvent=0x27c) returned 1 [0207.592] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106124.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0207.592] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=5812) returned 1 [0207.592] CloseHandle (hObject=0x2b0) returned 1 [0207.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106124.wmf")) returned 0x220 [0207.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106124.wmf")) returned 0x220 [0207.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106124.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.592] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106124.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0207.593] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.593] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.593] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106124.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0207.593] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x16b4, lpOverlapped=0x0) returned 1 [0207.595] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x16c0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x16c0, lpOverlapped=0x0) returned 1 [0207.596] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0207.596] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.596] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.596] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x16b4, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x16b4, lpOverlapped=0x0) returned 1 [0207.596] FlushFileBuffers (hFile=0x2b0) returned 1 [0207.607] FlushFileBuffers (hFile=0x21c) returned 1 [0207.609] CloseHandle (hObject=0x2b0) returned 1 [0207.609] CloseHandle (hObject=0x21c) returned 1 [0207.609] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106124.wmf")) returned 1 [0207.610] SetEvent (hEvent=0x27c) returned 1 [0207.611] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106208.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0207.612] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=11900) returned 1 [0207.612] CloseHandle (hObject=0x21c) returned 1 [0207.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106208.wmf")) returned 0x220 [0207.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106208.wmf")) returned 0x220 [0207.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106208.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.612] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106208.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0207.612] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.612] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.612] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106208.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0207.613] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2e7c, lpOverlapped=0x0) returned 1 [0207.619] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2e80, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2e80, lpOverlapped=0x0) returned 1 [0207.620] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0207.620] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.620] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.620] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2e7c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2e7c, lpOverlapped=0x0) returned 1 [0207.620] FlushFileBuffers (hFile=0x21c) returned 1 [0207.628] FlushFileBuffers (hFile=0x2b0) returned 1 [0207.630] CloseHandle (hObject=0x21c) returned 1 [0207.630] CloseHandle (hObject=0x2b0) returned 1 [0207.630] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106208.wmf")) returned 1 [0207.631] SetEvent (hEvent=0x27c) returned 1 [0207.631] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106572.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0207.632] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2148) returned 1 [0207.633] CloseHandle (hObject=0x2b0) returned 1 [0207.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106572.wmf")) returned 0x220 [0207.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106572.wmf")) returned 0x220 [0207.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106572.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.633] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106572.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0207.633] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.633] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.633] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106572.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0207.634] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x864, lpOverlapped=0x0) returned 1 [0207.639] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x870, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x870, lpOverlapped=0x0) returned 1 [0207.640] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0207.640] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.640] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.640] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x864, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x864, lpOverlapped=0x0) returned 1 [0207.641] FlushFileBuffers (hFile=0x2b0) returned 1 [0207.645] FlushFileBuffers (hFile=0x21c) returned 1 [0207.648] CloseHandle (hObject=0x2b0) returned 1 [0207.648] CloseHandle (hObject=0x21c) returned 1 [0207.648] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106572.wmf")) returned 1 [0207.649] SetEvent (hEvent=0x27c) returned 1 [0207.649] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106958.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0207.650] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=13784) returned 1 [0207.650] CloseHandle (hObject=0x21c) returned 1 [0207.650] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106958.wmf")) returned 0x220 [0207.650] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106958.wmf")) returned 0x220 [0207.650] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106958.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.650] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106958.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0207.650] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.650] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.650] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106958.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0207.651] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x35d8, lpOverlapped=0x0) returned 1 [0207.653] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x35e0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x35e0, lpOverlapped=0x0) returned 1 [0207.654] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0207.655] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.655] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.655] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x35d8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x35d8, lpOverlapped=0x0) returned 1 [0207.655] FlushFileBuffers (hFile=0x21c) returned 1 [0207.661] FlushFileBuffers (hFile=0x2b0) returned 1 [0207.666] CloseHandle (hObject=0x21c) returned 1 [0207.666] CloseHandle (hObject=0x2b0) returned 1 [0207.666] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106958.wmf")) returned 1 [0207.667] SetEvent (hEvent=0x27c) returned 1 [0207.667] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107026.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0207.668] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=7632) returned 1 [0207.668] CloseHandle (hObject=0x2b0) returned 1 [0207.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107026.wmf")) returned 0x220 [0207.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107026.wmf")) returned 0x220 [0207.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107026.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.668] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107026.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0207.668] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.668] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.668] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107026.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0207.669] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1dd0, lpOverlapped=0x0) returned 1 [0207.671] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1de0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1de0, lpOverlapped=0x0) returned 1 [0207.672] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0207.672] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.672] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.672] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1dd0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1dd0, lpOverlapped=0x0) returned 1 [0207.672] FlushFileBuffers (hFile=0x2b0) returned 1 [0207.675] FlushFileBuffers (hFile=0x21c) returned 1 [0207.683] CloseHandle (hObject=0x2b0) returned 1 [0207.683] CloseHandle (hObject=0x21c) returned 1 [0207.683] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107026.wmf")) returned 1 [0207.685] SetEvent (hEvent=0x27c) returned 1 [0207.685] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107090.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0207.686] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=14132) returned 1 [0207.686] CloseHandle (hObject=0x21c) returned 1 [0207.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107090.wmf")) returned 0x220 [0207.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107090.wmf")) returned 0x220 [0207.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107090.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.686] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107090.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0207.686] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.686] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.686] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107090.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0207.687] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x3734, lpOverlapped=0x0) returned 1 [0207.689] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3740, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x3740, lpOverlapped=0x0) returned 1 [0207.690] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0207.691] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.691] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.691] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3734, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x3734, lpOverlapped=0x0) returned 1 [0207.691] FlushFileBuffers (hFile=0x21c) returned 1 [0207.704] FlushFileBuffers (hFile=0x2b0) returned 1 [0207.706] CloseHandle (hObject=0x21c) returned 1 [0207.706] CloseHandle (hObject=0x2b0) returned 1 [0207.706] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107090.wmf")) returned 1 [0207.707] SetEvent (hEvent=0x27c) returned 1 [0207.707] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107132.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0207.709] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=48380) returned 1 [0207.709] CloseHandle (hObject=0x2b0) returned 1 [0207.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107132.wmf")) returned 0x220 [0207.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107132.wmf")) returned 0x220 [0207.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107132.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.709] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107132.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0207.709] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.709] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.709] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107132.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0207.710] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xbcfc, lpOverlapped=0x0) returned 1 [0207.713] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xbd00, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xbd00, lpOverlapped=0x0) returned 1 [0207.715] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0207.716] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.716] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.716] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xbcfc, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xbcfc, lpOverlapped=0x0) returned 1 [0207.716] FlushFileBuffers (hFile=0x2b0) returned 1 [0207.727] FlushFileBuffers (hFile=0x21c) returned 1 [0207.730] CloseHandle (hObject=0x2b0) returned 1 [0207.730] CloseHandle (hObject=0x21c) returned 1 [0207.730] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107132.wmf")) returned 1 [0207.731] SetEvent (hEvent=0x27c) returned 1 [0207.731] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107138.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0207.732] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=17200) returned 1 [0207.732] CloseHandle (hObject=0x21c) returned 1 [0207.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107138.wmf")) returned 0x220 [0207.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107138.wmf")) returned 0x220 [0207.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107138.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.733] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107138.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0207.733] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.733] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.733] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107138.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0207.734] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4330, lpOverlapped=0x0) returned 1 [0207.736] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4340, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4340, lpOverlapped=0x0) returned 1 [0207.737] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0207.737] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.737] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.737] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4330, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4330, lpOverlapped=0x0) returned 1 [0207.738] FlushFileBuffers (hFile=0x21c) returned 1 [0207.750] FlushFileBuffers (hFile=0x2b0) returned 1 [0207.752] CloseHandle (hObject=0x21c) returned 1 [0207.753] CloseHandle (hObject=0x2b0) returned 1 [0207.753] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107138.wmf")) returned 1 [0207.754] SetEvent (hEvent=0x27c) returned 1 [0207.754] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107148.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0207.755] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=20136) returned 1 [0207.756] CloseHandle (hObject=0x2b0) returned 1 [0207.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107148.wmf")) returned 0x220 [0207.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107148.wmf")) returned 0x220 [0207.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107148.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.756] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107148.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0207.756] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.756] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.756] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107148.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0207.757] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4ea8, lpOverlapped=0x0) returned 1 [0207.763] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4eb0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4eb0, lpOverlapped=0x0) returned 1 [0207.765] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0207.765] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.765] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.765] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4ea8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4ea8, lpOverlapped=0x0) returned 1 [0207.765] FlushFileBuffers (hFile=0x2b0) returned 1 [0207.770] FlushFileBuffers (hFile=0x21c) returned 1 [0207.773] CloseHandle (hObject=0x2b0) returned 1 [0207.773] CloseHandle (hObject=0x21c) returned 1 [0207.773] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107148.wmf")) returned 1 [0207.774] SetEvent (hEvent=0x27c) returned 1 [0207.774] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107152.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0207.775] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=22532) returned 1 [0207.775] CloseHandle (hObject=0x21c) returned 1 [0207.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107152.wmf")) returned 0x220 [0207.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107152.wmf")) returned 0x220 [0207.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107152.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.775] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107152.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0207.775] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.775] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.775] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107152.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0207.780] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x5804, lpOverlapped=0x0) returned 1 [0207.783] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5810, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x5810, lpOverlapped=0x0) returned 1 [0207.784] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0207.785] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.785] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.785] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5804, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x5804, lpOverlapped=0x0) returned 1 [0207.785] FlushFileBuffers (hFile=0x21c) returned 1 [0207.797] FlushFileBuffers (hFile=0x2b0) returned 1 [0207.800] CloseHandle (hObject=0x21c) returned 1 [0207.800] CloseHandle (hObject=0x2b0) returned 1 [0207.800] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107152.wmf")) returned 1 [0207.801] SetEvent (hEvent=0x27c) returned 1 [0207.801] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107158.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0207.802] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=24908) returned 1 [0207.802] CloseHandle (hObject=0x2b0) returned 1 [0207.802] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107158.wmf")) returned 0x220 [0207.802] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107158.wmf")) returned 0x220 [0207.802] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107158.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.803] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107158.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0207.803] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.803] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.803] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107158.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0207.804] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x614c, lpOverlapped=0x0) returned 1 [0207.806] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x6150, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x6150, lpOverlapped=0x0) returned 1 [0207.807] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0207.807] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.808] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.808] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x614c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x614c, lpOverlapped=0x0) returned 1 [0207.808] FlushFileBuffers (hFile=0x2b0) returned 1 [0207.817] FlushFileBuffers (hFile=0x21c) returned 1 [0207.820] CloseHandle (hObject=0x2b0) returned 1 [0207.820] CloseHandle (hObject=0x21c) returned 1 [0207.820] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107158.wmf")) returned 1 [0207.821] SetEvent (hEvent=0x27c) returned 1 [0207.821] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107188.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0207.823] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=4536) returned 1 [0207.823] CloseHandle (hObject=0x21c) returned 1 [0207.823] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107188.wmf")) returned 0x220 [0207.823] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107188.wmf")) returned 0x220 [0207.823] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107188.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.823] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107188.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0207.823] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.823] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.823] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107188.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0207.824] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x11b8, lpOverlapped=0x0) returned 1 [0207.829] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x11c0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x11c0, lpOverlapped=0x0) returned 1 [0207.831] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0207.831] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.831] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.831] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x11b8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x11b8, lpOverlapped=0x0) returned 1 [0207.831] FlushFileBuffers (hFile=0x21c) returned 1 [0207.889] FlushFileBuffers (hFile=0x2b0) returned 1 [0207.892] CloseHandle (hObject=0x21c) returned 1 [0207.892] CloseHandle (hObject=0x2b0) returned 1 [0207.892] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107188.wmf")) returned 1 [0207.893] SetEvent (hEvent=0x27c) returned 1 [0207.893] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107254.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0207.895] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=20212) returned 1 [0207.895] CloseHandle (hObject=0x2b0) returned 1 [0207.895] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107254.wmf")) returned 0x220 [0207.895] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107254.wmf")) returned 0x220 [0207.895] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107254.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.895] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107254.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0207.896] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.896] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.896] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107254.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0207.897] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4ef4, lpOverlapped=0x0) returned 1 [0207.904] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4f00, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4f00, lpOverlapped=0x0) returned 1 [0207.906] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0207.906] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.906] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.906] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4ef4, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4ef4, lpOverlapped=0x0) returned 1 [0207.906] FlushFileBuffers (hFile=0x2b0) returned 1 [0207.911] FlushFileBuffers (hFile=0x21c) returned 1 [0207.915] CloseHandle (hObject=0x2b0) returned 1 [0207.915] CloseHandle (hObject=0x21c) returned 1 [0207.915] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107254.wmf")) returned 1 [0207.916] SetEvent (hEvent=0x27c) returned 1 [0207.916] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107262.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0207.917] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=7996) returned 1 [0207.918] CloseHandle (hObject=0x21c) returned 1 [0207.918] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107262.wmf")) returned 0x220 [0207.918] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107262.wmf")) returned 0x220 [0207.918] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107262.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.918] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107262.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0207.918] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.918] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.918] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107262.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0207.919] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1f3c, lpOverlapped=0x0) returned 1 [0207.928] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1f40, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1f40, lpOverlapped=0x0) returned 1 [0207.930] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0207.930] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.930] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.930] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1f3c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1f3c, lpOverlapped=0x0) returned 1 [0207.931] FlushFileBuffers (hFile=0x21c) returned 1 [0207.938] FlushFileBuffers (hFile=0x2b0) returned 1 [0207.942] CloseHandle (hObject=0x21c) returned 1 [0207.942] CloseHandle (hObject=0x2b0) returned 1 [0207.942] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107262.wmf")) returned 1 [0207.943] SetEvent (hEvent=0x27c) returned 1 [0207.944] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107266.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0207.944] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=5868) returned 1 [0207.944] CloseHandle (hObject=0x2b0) returned 1 [0207.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107266.wmf")) returned 0x220 [0207.945] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107266.wmf")) returned 0x220 [0207.945] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107266.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.945] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107266.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0207.945] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.945] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.945] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107266.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0207.946] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x16ec, lpOverlapped=0x0) returned 1 [0207.947] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x16f0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x16f0, lpOverlapped=0x0) returned 1 [0207.948] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0207.949] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.949] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.949] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x16ec, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x16ec, lpOverlapped=0x0) returned 1 [0207.949] FlushFileBuffers (hFile=0x2b0) returned 1 [0207.952] FlushFileBuffers (hFile=0x21c) returned 1 [0207.957] CloseHandle (hObject=0x2b0) returned 1 [0207.958] CloseHandle (hObject=0x21c) returned 1 [0207.958] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107266.wmf")) returned 1 [0207.959] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107282.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0207.959] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=14132) returned 1 [0207.959] CloseHandle (hObject=0x21c) returned 1 [0207.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107282.wmf")) returned 0x220 [0207.960] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107282.wmf")) returned 0x220 [0207.960] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107282.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.960] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107282.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0207.960] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.960] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.960] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107282.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0207.960] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x3734, lpOverlapped=0x0) returned 1 [0207.965] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3740, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x3740, lpOverlapped=0x0) returned 1 [0207.971] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0207.971] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.971] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.971] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3734, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x3734, lpOverlapped=0x0) returned 1 [0207.972] FlushFileBuffers (hFile=0x21c) returned 1 [0207.975] FlushFileBuffers (hFile=0x2b0) returned 1 [0207.985] CloseHandle (hObject=0x21c) returned 1 [0207.985] CloseHandle (hObject=0x2b0) returned 1 [0207.985] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107282.wmf")) returned 1 [0207.986] SetEvent (hEvent=0x27c) returned 1 [0207.986] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107290.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0207.989] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=12308) returned 1 [0207.989] CloseHandle (hObject=0x2b0) returned 1 [0207.989] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107290.wmf")) returned 0x220 [0207.989] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107290.wmf")) returned 0x220 [0207.989] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107290.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0207.989] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107290.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0207.989] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.989] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0207.989] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107290.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0207.990] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x3014, lpOverlapped=0x0) returned 1 [0207.992] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3020, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x3020, lpOverlapped=0x0) returned 1 [0207.993] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0207.994] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.994] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0207.994] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3014, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x3014, lpOverlapped=0x0) returned 1 [0207.994] FlushFileBuffers (hFile=0x2b0) returned 1 [0208.002] FlushFileBuffers (hFile=0x21c) returned 1 [0208.007] CloseHandle (hObject=0x2b0) returned 1 [0208.007] CloseHandle (hObject=0x21c) returned 1 [0208.007] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107290.wmf")) returned 1 [0208.008] SetEvent (hEvent=0x27c) returned 1 [0208.008] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107302.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0208.009] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=4136) returned 1 [0208.009] CloseHandle (hObject=0x21c) returned 1 [0208.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107302.wmf")) returned 0x220 [0208.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107302.wmf")) returned 0x220 [0208.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107302.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.009] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107302.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0208.009] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.009] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.009] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107302.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0208.010] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1028, lpOverlapped=0x0) returned 1 [0208.012] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1030, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1030, lpOverlapped=0x0) returned 1 [0208.014] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0208.014] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.014] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.014] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1028, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1028, lpOverlapped=0x0) returned 1 [0208.014] FlushFileBuffers (hFile=0x21c) returned 1 [0208.025] FlushFileBuffers (hFile=0x2b0) returned 1 [0208.027] CloseHandle (hObject=0x21c) returned 1 [0208.027] CloseHandle (hObject=0x2b0) returned 1 [0208.027] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107302.wmf")) returned 1 [0208.032] SetEvent (hEvent=0x27c) returned 1 [0208.032] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107314.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0208.034] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=10852) returned 1 [0208.034] CloseHandle (hObject=0x2b0) returned 1 [0208.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107314.wmf")) returned 0x220 [0208.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107314.wmf")) returned 0x220 [0208.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107314.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.034] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107314.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0208.034] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.034] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.034] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107314.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0208.035] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2a64, lpOverlapped=0x0) returned 1 [0208.038] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2a70, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2a70, lpOverlapped=0x0) returned 1 [0208.039] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0208.040] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.040] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.040] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2a64, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2a64, lpOverlapped=0x0) returned 1 [0208.040] FlushFileBuffers (hFile=0x2b0) returned 1 [0208.050] FlushFileBuffers (hFile=0x21c) returned 1 [0208.052] CloseHandle (hObject=0x2b0) returned 1 [0208.052] CloseHandle (hObject=0x21c) returned 1 [0208.052] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107314.wmf")) returned 1 [0208.053] SetEvent (hEvent=0x27c) returned 1 [0208.053] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107328.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0208.054] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=6532) returned 1 [0208.054] CloseHandle (hObject=0x21c) returned 1 [0208.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107328.wmf")) returned 0x220 [0208.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107328.wmf")) returned 0x220 [0208.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107328.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.055] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107328.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0208.055] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.055] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.055] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107328.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0208.056] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1984, lpOverlapped=0x0) returned 1 [0208.066] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1990, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1990, lpOverlapped=0x0) returned 1 [0208.067] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0208.067] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.067] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.067] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1984, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1984, lpOverlapped=0x0) returned 1 [0208.067] FlushFileBuffers (hFile=0x21c) returned 1 [0208.079] FlushFileBuffers (hFile=0x2b0) returned 1 [0208.081] CloseHandle (hObject=0x21c) returned 1 [0208.081] CloseHandle (hObject=0x2b0) returned 1 [0208.081] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107328.wmf")) returned 1 [0208.082] SetEvent (hEvent=0x27c) returned 1 [0208.082] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107344.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0208.083] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=5076) returned 1 [0208.083] CloseHandle (hObject=0x2b0) returned 1 [0208.083] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107344.wmf")) returned 0x220 [0208.084] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107344.wmf")) returned 0x220 [0208.084] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107344.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.084] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107344.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0208.084] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.084] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.084] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107344.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0208.085] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x13d4, lpOverlapped=0x0) returned 1 [0208.087] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x13e0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x13e0, lpOverlapped=0x0) returned 1 [0208.088] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0208.088] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.088] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.088] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x13d4, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x13d4, lpOverlapped=0x0) returned 1 [0208.088] FlushFileBuffers (hFile=0x2b0) returned 1 [0208.100] FlushFileBuffers (hFile=0x21c) returned 1 [0208.102] CloseHandle (hObject=0x2b0) returned 1 [0208.102] CloseHandle (hObject=0x21c) returned 1 [0208.102] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107344.wmf")) returned 1 [0208.103] SetEvent (hEvent=0x27c) returned 1 [0208.103] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107358.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0208.104] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=7964) returned 1 [0208.104] CloseHandle (hObject=0x21c) returned 1 [0208.104] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107358.wmf")) returned 0x220 [0208.105] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107358.wmf")) returned 0x220 [0208.105] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107358.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.105] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107358.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0208.105] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.105] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.105] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107358.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0208.106] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1f1c, lpOverlapped=0x0) returned 1 [0208.108] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1f20, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1f20, lpOverlapped=0x0) returned 1 [0208.109] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0208.110] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.110] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.110] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1f1c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1f1c, lpOverlapped=0x0) returned 1 [0208.110] FlushFileBuffers (hFile=0x21c) returned 1 [0208.113] FlushFileBuffers (hFile=0x2b0) returned 1 [0208.114] CloseHandle (hObject=0x21c) returned 1 [0208.114] CloseHandle (hObject=0x2b0) returned 1 [0208.114] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107358.wmf")) returned 1 [0208.115] SetEvent (hEvent=0x27c) returned 1 [0208.115] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107364.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0208.116] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=16588) returned 1 [0208.116] CloseHandle (hObject=0x2b0) returned 1 [0208.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107364.wmf")) returned 0x220 [0208.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107364.wmf")) returned 0x220 [0208.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107364.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.116] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107364.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0208.116] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.117] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.117] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107364.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0208.118] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x40cc, lpOverlapped=0x0) returned 1 [0208.120] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x40d0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x40d0, lpOverlapped=0x0) returned 1 [0208.121] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0208.121] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.121] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.121] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x40cc, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x40cc, lpOverlapped=0x0) returned 1 [0208.122] FlushFileBuffers (hFile=0x2b0) returned 1 [0208.124] FlushFileBuffers (hFile=0x21c) returned 1 [0208.126] CloseHandle (hObject=0x2b0) returned 1 [0208.126] CloseHandle (hObject=0x21c) returned 1 [0208.126] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107364.wmf")) returned 1 [0208.127] SetEvent (hEvent=0x27c) returned 1 [0208.127] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107426.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0208.129] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=11492) returned 1 [0208.129] CloseHandle (hObject=0x21c) returned 1 [0208.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107426.wmf")) returned 0x220 [0208.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107426.wmf")) returned 0x220 [0208.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107426.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.129] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107426.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0208.129] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.129] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.129] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107426.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0208.130] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2ce4, lpOverlapped=0x0) returned 1 [0208.132] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2cf0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2cf0, lpOverlapped=0x0) returned 1 [0208.133] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0208.133] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.134] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.134] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2ce4, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2ce4, lpOverlapped=0x0) returned 1 [0208.134] FlushFileBuffers (hFile=0x21c) returned 1 [0208.136] FlushFileBuffers (hFile=0x2b0) returned 1 [0208.137] CloseHandle (hObject=0x21c) returned 1 [0208.137] CloseHandle (hObject=0x2b0) returned 1 [0208.137] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107426.wmf")) returned 1 [0208.139] SetEvent (hEvent=0x27c) returned 1 [0208.139] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107446.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0208.140] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=30336) returned 1 [0208.140] CloseHandle (hObject=0x2b0) returned 1 [0208.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107446.wmf")) returned 0x220 [0208.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107446.wmf")) returned 0x220 [0208.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107446.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.140] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107446.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0208.140] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.140] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.140] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107446.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0208.141] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x7680, lpOverlapped=0x0) returned 1 [0208.144] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7690, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x7690, lpOverlapped=0x0) returned 1 [0208.145] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0208.145] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.145] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.145] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7680, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x7680, lpOverlapped=0x0) returned 1 [0208.146] FlushFileBuffers (hFile=0x2b0) returned 1 [0208.148] FlushFileBuffers (hFile=0x21c) returned 1 [0208.149] CloseHandle (hObject=0x2b0) returned 1 [0208.150] CloseHandle (hObject=0x21c) returned 1 [0208.150] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107446.wmf")) returned 1 [0208.151] SetEvent (hEvent=0x27c) returned 1 [0208.151] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107450.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0208.152] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=4920) returned 1 [0208.152] CloseHandle (hObject=0x21c) returned 1 [0208.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107450.wmf")) returned 0x220 [0208.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107450.wmf")) returned 0x220 [0208.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107450.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.152] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107450.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0208.152] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.152] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.152] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107450.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0208.153] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1338, lpOverlapped=0x0) returned 1 [0208.155] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1340, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1340, lpOverlapped=0x0) returned 1 [0208.158] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0208.158] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.158] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.158] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1338, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1338, lpOverlapped=0x0) returned 1 [0208.158] FlushFileBuffers (hFile=0x21c) returned 1 [0208.161] FlushFileBuffers (hFile=0x2b0) returned 1 [0208.163] CloseHandle (hObject=0x21c) returned 1 [0208.163] CloseHandle (hObject=0x2b0) returned 1 [0208.163] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107450.wmf")) returned 1 [0208.164] SetEvent (hEvent=0x27c) returned 1 [0208.164] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107452.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0208.166] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=21216) returned 1 [0208.166] CloseHandle (hObject=0x2b0) returned 1 [0208.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107452.wmf")) returned 0x220 [0208.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107452.wmf")) returned 0x220 [0208.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107452.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.166] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107452.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0208.166] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.166] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.166] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107452.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0208.167] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x52e0, lpOverlapped=0x0) returned 1 [0208.169] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x52f0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x52f0, lpOverlapped=0x0) returned 1 [0208.171] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0208.171] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.171] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.171] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x52e0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x52e0, lpOverlapped=0x0) returned 1 [0208.171] FlushFileBuffers (hFile=0x2b0) returned 1 [0208.173] FlushFileBuffers (hFile=0x21c) returned 1 [0208.175] CloseHandle (hObject=0x2b0) returned 1 [0208.179] CloseHandle (hObject=0x21c) returned 1 [0208.179] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107452.wmf")) returned 1 [0208.181] SetEvent (hEvent=0x27c) returned 1 [0208.181] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107456.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0208.182] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3724) returned 1 [0208.182] CloseHandle (hObject=0x21c) returned 1 [0208.182] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107456.wmf")) returned 0x220 [0208.182] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107456.wmf")) returned 0x220 [0208.182] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107456.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.182] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107456.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0208.182] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.182] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.182] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107456.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0208.183] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xe8c, lpOverlapped=0x0) returned 1 [0208.185] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xe90, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xe90, lpOverlapped=0x0) returned 1 [0208.186] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0208.187] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.187] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.187] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xe8c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xe8c, lpOverlapped=0x0) returned 1 [0208.187] FlushFileBuffers (hFile=0x21c) returned 1 [0208.190] FlushFileBuffers (hFile=0x2b0) returned 1 [0208.191] CloseHandle (hObject=0x21c) returned 1 [0208.192] CloseHandle (hObject=0x2b0) returned 1 [0208.192] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107456.wmf")) returned 1 [0208.193] SetEvent (hEvent=0x27c) returned 1 [0208.193] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107458.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0208.194] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3568) returned 1 [0208.194] CloseHandle (hObject=0x2b0) returned 1 [0208.194] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107458.wmf")) returned 0x220 [0208.194] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107458.wmf")) returned 0x220 [0208.194] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107458.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.194] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107458.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0208.194] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.194] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.194] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107458.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0208.195] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xdf0, lpOverlapped=0x0) returned 1 [0208.197] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xe00, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xe00, lpOverlapped=0x0) returned 1 [0208.199] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0208.199] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.199] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.199] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xdf0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xdf0, lpOverlapped=0x0) returned 1 [0208.199] FlushFileBuffers (hFile=0x2b0) returned 1 [0208.201] FlushFileBuffers (hFile=0x21c) returned 1 [0208.202] CloseHandle (hObject=0x2b0) returned 1 [0208.203] CloseHandle (hObject=0x21c) returned 1 [0208.203] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107458.wmf")) returned 1 [0208.204] SetEvent (hEvent=0x27c) returned 1 [0208.204] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107468.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0208.205] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=9612) returned 1 [0208.205] CloseHandle (hObject=0x21c) returned 1 [0208.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107468.wmf")) returned 0x220 [0208.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107468.wmf")) returned 0x220 [0208.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107468.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.205] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107468.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0208.205] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.205] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.205] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107468.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0208.206] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x258c, lpOverlapped=0x0) returned 1 [0208.208] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2590, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2590, lpOverlapped=0x0) returned 1 [0208.209] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0208.209] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.209] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.209] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x258c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x258c, lpOverlapped=0x0) returned 1 [0208.209] FlushFileBuffers (hFile=0x21c) returned 1 [0208.212] FlushFileBuffers (hFile=0x2b0) returned 1 [0208.213] CloseHandle (hObject=0x21c) returned 1 [0208.213] CloseHandle (hObject=0x2b0) returned 1 [0208.213] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107468.wmf")) returned 1 [0208.214] SetEvent (hEvent=0x27c) returned 1 [0208.214] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107480.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0208.215] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=6024) returned 1 [0208.215] CloseHandle (hObject=0x2b0) returned 1 [0208.215] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107480.wmf")) returned 0x220 [0208.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107480.wmf")) returned 0x220 [0208.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107480.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.216] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107480.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0208.216] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.216] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.216] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107480.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0208.217] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1788, lpOverlapped=0x0) returned 1 [0208.218] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1790, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1790, lpOverlapped=0x0) returned 1 [0208.220] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0208.220] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.220] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.220] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1788, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1788, lpOverlapped=0x0) returned 1 [0208.220] FlushFileBuffers (hFile=0x2b0) returned 1 [0208.222] FlushFileBuffers (hFile=0x21c) returned 1 [0208.223] CloseHandle (hObject=0x2b0) returned 1 [0208.223] CloseHandle (hObject=0x21c) returned 1 [0208.223] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107480.wmf")) returned 1 [0208.224] SetEvent (hEvent=0x27c) returned 1 [0208.225] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107482.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0208.226] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=4980) returned 1 [0208.226] CloseHandle (hObject=0x21c) returned 1 [0208.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107482.wmf")) returned 0x220 [0208.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107482.wmf")) returned 0x220 [0208.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107482.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.226] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107482.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0208.226] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.226] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.226] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107482.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0208.227] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1374, lpOverlapped=0x0) returned 1 [0208.229] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1380, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1380, lpOverlapped=0x0) returned 1 [0208.230] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0208.230] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.230] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.230] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1374, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1374, lpOverlapped=0x0) returned 1 [0208.230] FlushFileBuffers (hFile=0x21c) returned 1 [0208.233] FlushFileBuffers (hFile=0x2b0) returned 1 [0208.234] CloseHandle (hObject=0x21c) returned 1 [0208.234] CloseHandle (hObject=0x2b0) returned 1 [0208.234] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107482.wmf")) returned 1 [0208.235] SetEvent (hEvent=0x27c) returned 1 [0208.235] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107484.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0208.236] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3040) returned 1 [0208.236] CloseHandle (hObject=0x2b0) returned 1 [0208.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107484.wmf")) returned 0x220 [0208.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107484.wmf")) returned 0x220 [0208.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107484.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.236] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107484.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0208.237] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.237] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.237] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107484.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0208.238] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xbe0, lpOverlapped=0x0) returned 1 [0208.239] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xbf0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xbf0, lpOverlapped=0x0) returned 1 [0208.241] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0208.241] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.241] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.241] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xbe0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xbe0, lpOverlapped=0x0) returned 1 [0208.241] FlushFileBuffers (hFile=0x2b0) returned 1 [0208.244] FlushFileBuffers (hFile=0x21c) returned 1 [0208.245] CloseHandle (hObject=0x2b0) returned 1 [0208.245] CloseHandle (hObject=0x21c) returned 1 [0208.246] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107484.wmf")) returned 1 [0208.247] SetEvent (hEvent=0x27c) returned 1 [0208.247] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107488.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0208.248] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=8000) returned 1 [0208.248] CloseHandle (hObject=0x21c) returned 1 [0208.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107488.wmf")) returned 0x220 [0208.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107488.wmf")) returned 0x220 [0208.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107488.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.248] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107488.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0208.248] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.249] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.249] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107488.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0208.250] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1f40, lpOverlapped=0x0) returned 1 [0208.251] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1f50, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1f50, lpOverlapped=0x0) returned 1 [0208.252] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0208.253] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.253] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.253] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1f40, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1f40, lpOverlapped=0x0) returned 1 [0208.253] FlushFileBuffers (hFile=0x21c) returned 1 [0208.256] FlushFileBuffers (hFile=0x2b0) returned 1 [0208.374] CloseHandle (hObject=0x21c) returned 1 [0208.374] CloseHandle (hObject=0x2b0) returned 1 [0208.375] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107488.wmf")) returned 1 [0208.376] SetEvent (hEvent=0x27c) returned 1 [0208.376] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107492.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0208.378] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=6860) returned 1 [0208.378] CloseHandle (hObject=0x2b0) returned 1 [0208.378] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107492.wmf")) returned 0x220 [0208.378] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107492.wmf")) returned 0x220 [0208.378] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107492.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.378] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107492.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0208.378] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.378] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.378] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107492.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0208.379] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1acc, lpOverlapped=0x0) returned 1 [0208.382] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1ad0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1ad0, lpOverlapped=0x0) returned 1 [0208.383] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0208.383] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.383] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.383] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1acc, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1acc, lpOverlapped=0x0) returned 1 [0208.383] FlushFileBuffers (hFile=0x2b0) returned 1 [0208.392] FlushFileBuffers (hFile=0x21c) returned 1 [0208.394] CloseHandle (hObject=0x2b0) returned 1 [0208.394] CloseHandle (hObject=0x21c) returned 1 [0208.394] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107492.wmf")) returned 1 [0208.395] SetEvent (hEvent=0x27c) returned 1 [0208.395] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107496.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0208.396] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=8864) returned 1 [0208.396] CloseHandle (hObject=0x21c) returned 1 [0208.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107496.wmf")) returned 0x220 [0208.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107496.wmf")) returned 0x220 [0208.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107496.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107496.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0208.396] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.396] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107496.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0208.397] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x22a0, lpOverlapped=0x0) returned 1 [0208.399] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x22b0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x22b0, lpOverlapped=0x0) returned 1 [0208.400] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0208.400] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.400] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.400] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x22a0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x22a0, lpOverlapped=0x0) returned 1 [0208.400] FlushFileBuffers (hFile=0x21c) returned 1 [0208.410] FlushFileBuffers (hFile=0x2b0) returned 1 [0208.411] CloseHandle (hObject=0x21c) returned 1 [0208.412] CloseHandle (hObject=0x2b0) returned 1 [0208.412] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107496.wmf")) returned 1 [0208.413] SetEvent (hEvent=0x27c) returned 1 [0208.413] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107502.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0208.413] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=10836) returned 1 [0208.413] CloseHandle (hObject=0x2b0) returned 1 [0208.413] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107502.wmf")) returned 0x220 [0208.413] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107502.wmf")) returned 0x220 [0208.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107502.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.414] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107502.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0208.414] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.414] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.414] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107502.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0208.414] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2a54, lpOverlapped=0x0) returned 1 [0208.416] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2a60, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2a60, lpOverlapped=0x0) returned 1 [0208.417] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0208.418] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.418] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.418] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2a54, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2a54, lpOverlapped=0x0) returned 1 [0208.418] FlushFileBuffers (hFile=0x2b0) returned 1 [0208.421] FlushFileBuffers (hFile=0x21c) returned 1 [0208.429] CloseHandle (hObject=0x2b0) returned 1 [0208.440] CloseHandle (hObject=0x21c) returned 1 [0208.440] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107502.wmf")) returned 1 [0208.441] SetEvent (hEvent=0x27c) returned 1 [0208.441] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107514.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0208.443] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=12204) returned 1 [0208.444] CloseHandle (hObject=0x21c) returned 1 [0208.444] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107514.wmf")) returned 0x220 [0208.444] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107514.wmf")) returned 0x220 [0208.444] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107514.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.444] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107514.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0208.444] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.444] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.444] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107514.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0208.445] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2fac, lpOverlapped=0x0) returned 1 [0208.447] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2fb0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2fb0, lpOverlapped=0x0) returned 1 [0208.448] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0208.449] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.449] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.449] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2fac, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2fac, lpOverlapped=0x0) returned 1 [0208.449] FlushFileBuffers (hFile=0x21c) returned 1 [0208.466] FlushFileBuffers (hFile=0x2b0) returned 1 [0208.476] CloseHandle (hObject=0x21c) returned 1 [0208.476] CloseHandle (hObject=0x2b0) returned 1 [0208.477] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107514.wmf")) returned 1 [0208.480] SetEvent (hEvent=0x27c) returned 1 [0208.480] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107526.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0208.482] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=7948) returned 1 [0208.482] CloseHandle (hObject=0x2b0) returned 1 [0208.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107526.wmf")) returned 0x220 [0208.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107526.wmf")) returned 0x220 [0208.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107526.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.482] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107526.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0208.483] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.483] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.483] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107526.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0208.484] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1f0c, lpOverlapped=0x0) returned 1 [0208.489] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1f10, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1f10, lpOverlapped=0x0) returned 1 [0208.491] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0208.491] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.491] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.491] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1f0c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1f0c, lpOverlapped=0x0) returned 1 [0208.491] FlushFileBuffers (hFile=0x2b0) returned 1 [0208.502] FlushFileBuffers (hFile=0x21c) returned 1 [0208.822] CloseHandle (hObject=0x2b0) returned 1 [0208.823] CloseHandle (hObject=0x21c) returned 1 [0208.823] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107526.wmf")) returned 1 [0208.824] SetEvent (hEvent=0x27c) returned 1 [0208.824] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145879.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0208.825] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=35419) returned 1 [0208.825] CloseHandle (hObject=0x21c) returned 1 [0208.825] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145879.jpg")) returned 0x220 [0208.825] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145879.jpg")) returned 0x220 [0208.825] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145879.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.825] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145879.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0208.826] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.826] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.826] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145879.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0208.827] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x8a5b, lpOverlapped=0x0) returned 1 [0208.829] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x8a60, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x8a60, lpOverlapped=0x0) returned 1 [0208.831] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0208.831] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.832] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.832] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x8a5b, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x8a5b, lpOverlapped=0x0) returned 1 [0208.832] FlushFileBuffers (hFile=0x21c) returned 1 [0208.862] FlushFileBuffers (hFile=0x2b0) returned 1 [0208.864] CloseHandle (hObject=0x21c) returned 1 [0208.864] CloseHandle (hObject=0x2b0) returned 1 [0208.864] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145879.jpg")) returned 1 [0208.866] SetEvent (hEvent=0x27c) returned 1 [0208.866] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145904.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0208.867] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=39542) returned 1 [0208.867] CloseHandle (hObject=0x2b0) returned 1 [0208.867] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145904.jpg")) returned 0x220 [0208.867] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145904.jpg")) returned 0x220 [0208.867] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145904.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.868] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145904.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0208.868] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.868] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.868] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145904.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0208.869] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x9a76, lpOverlapped=0x0) returned 1 [0208.872] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x9a80, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x9a80, lpOverlapped=0x0) returned 1 [0208.873] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0208.874] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.874] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.874] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x9a76, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x9a76, lpOverlapped=0x0) returned 1 [0208.874] FlushFileBuffers (hFile=0x2b0) returned 1 [0208.885] FlushFileBuffers (hFile=0x21c) returned 1 [0208.892] CloseHandle (hObject=0x2b0) returned 1 [0208.892] CloseHandle (hObject=0x21c) returned 1 [0208.892] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145904.jpg")) returned 1 [0208.894] SetEvent (hEvent=0x27c) returned 1 [0208.894] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148309.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0208.896] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=43674) returned 1 [0208.896] CloseHandle (hObject=0x21c) returned 1 [0208.896] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148309.jpg")) returned 0x220 [0208.896] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148309.jpg")) returned 0x220 [0208.896] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148309.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.897] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148309.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0208.897] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.897] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.897] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148309.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0208.898] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xaa9a, lpOverlapped=0x0) returned 1 [0208.901] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xaaa0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xaaa0, lpOverlapped=0x0) returned 1 [0208.903] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0208.903] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.904] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.904] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xaa9a, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xaa9a, lpOverlapped=0x0) returned 1 [0208.904] FlushFileBuffers (hFile=0x21c) returned 1 [0208.917] FlushFileBuffers (hFile=0x2b0) returned 1 [0208.920] CloseHandle (hObject=0x21c) returned 1 [0208.920] CloseHandle (hObject=0x2b0) returned 1 [0208.920] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148309.jpg")) returned 1 [0208.921] SetEvent (hEvent=0x27c) returned 1 [0208.921] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148798.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0208.922] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=38237) returned 1 [0208.922] CloseHandle (hObject=0x2b0) returned 1 [0208.922] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148798.jpg")) returned 0x220 [0208.923] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148798.jpg")) returned 0x220 [0208.923] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148798.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.923] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148798.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0208.923] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.923] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.923] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148798.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0208.924] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x955d, lpOverlapped=0x0) returned 1 [0208.926] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x9560, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x9560, lpOverlapped=0x0) returned 1 [0208.928] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0208.928] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.928] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.928] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x955d, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x955d, lpOverlapped=0x0) returned 1 [0208.929] FlushFileBuffers (hFile=0x2b0) returned 1 [0208.931] FlushFileBuffers (hFile=0x21c) returned 1 [0208.941] CloseHandle (hObject=0x2b0) returned 1 [0208.942] CloseHandle (hObject=0x21c) returned 1 [0208.942] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148798.jpg")) returned 1 [0208.943] SetEvent (hEvent=0x27c) returned 1 [0208.943] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149118.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0208.944] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=64802) returned 1 [0208.944] CloseHandle (hObject=0x21c) returned 1 [0208.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149118.jpg")) returned 0x220 [0208.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149118.jpg")) returned 0x220 [0208.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149118.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.944] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149118.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0208.944] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.944] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.944] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149118.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0208.945] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xfd22, lpOverlapped=0x0) returned 1 [0208.949] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xfd30, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xfd30, lpOverlapped=0x0) returned 1 [0208.951] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0208.951] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.951] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.951] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xfd22, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xfd22, lpOverlapped=0x0) returned 1 [0208.952] FlushFileBuffers (hFile=0x21c) returned 1 [0208.966] FlushFileBuffers (hFile=0x2b0) returned 1 [0208.967] CloseHandle (hObject=0x21c) returned 1 [0208.968] CloseHandle (hObject=0x2b0) returned 1 [0208.968] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149118.jpg")) returned 1 [0208.969] SetEvent (hEvent=0x27c) returned 1 [0208.969] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150861.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0208.970] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=8494) returned 1 [0208.970] CloseHandle (hObject=0x2b0) returned 1 [0208.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150861.wmf")) returned 0x220 [0208.971] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150861.wmf")) returned 0x220 [0208.971] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150861.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.971] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150861.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0208.971] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.971] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.971] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150861.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0208.972] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x212e, lpOverlapped=0x0) returned 1 [0208.974] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2130, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2130, lpOverlapped=0x0) returned 1 [0208.976] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0208.976] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.976] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.976] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x212e, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x212e, lpOverlapped=0x0) returned 1 [0208.976] FlushFileBuffers (hFile=0x2b0) returned 1 [0208.985] FlushFileBuffers (hFile=0x21c) returned 1 [0208.988] CloseHandle (hObject=0x2b0) returned 1 [0208.988] CloseHandle (hObject=0x21c) returned 1 [0208.989] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150861.wmf")) returned 1 [0208.990] SetEvent (hEvent=0x27c) returned 1 [0208.990] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151045.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0208.991] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=15464) returned 1 [0208.991] CloseHandle (hObject=0x21c) returned 1 [0208.991] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151045.wmf")) returned 0x220 [0208.991] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151045.wmf")) returned 0x220 [0208.991] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151045.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0208.991] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151045.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0208.991] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.991] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0208.991] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151045.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0208.992] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x3c68, lpOverlapped=0x0) returned 1 [0208.995] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3c70, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x3c70, lpOverlapped=0x0) returned 1 [0208.996] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0208.996] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.996] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0208.996] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3c68, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x3c68, lpOverlapped=0x0) returned 1 [0208.997] FlushFileBuffers (hFile=0x21c) returned 1 [0209.008] FlushFileBuffers (hFile=0x2b0) returned 1 [0209.010] CloseHandle (hObject=0x21c) returned 1 [0209.010] CloseHandle (hObject=0x2b0) returned 1 [0209.010] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151045.wmf")) returned 1 [0209.011] SetEvent (hEvent=0x27c) returned 1 [0209.011] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151055.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0209.012] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=14632) returned 1 [0209.012] CloseHandle (hObject=0x2b0) returned 1 [0209.012] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151055.wmf")) returned 0x220 [0209.012] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151055.wmf")) returned 0x220 [0209.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151055.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0209.013] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151055.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0209.013] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0209.013] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0209.013] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151055.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0209.014] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x3928, lpOverlapped=0x0) returned 1 [0209.016] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3930, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x3930, lpOverlapped=0x0) returned 1 [0209.017] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0209.018] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0209.018] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0209.018] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3928, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x3928, lpOverlapped=0x0) returned 1 [0209.018] FlushFileBuffers (hFile=0x2b0) returned 1 [0209.021] FlushFileBuffers (hFile=0x21c) returned 1 [0209.028] CloseHandle (hObject=0x2b0) returned 1 [0209.028] CloseHandle (hObject=0x21c) returned 1 [0209.028] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151055.wmf")) returned 1 [0209.029] SetEvent (hEvent=0x27c) returned 1 [0209.029] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151063.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0209.030] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=10632) returned 1 [0209.030] CloseHandle (hObject=0x21c) returned 1 [0209.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151063.wmf")) returned 0x220 [0209.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151063.wmf")) returned 0x220 [0209.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151063.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0209.030] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151063.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0209.031] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0209.031] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0209.031] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151063.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0209.035] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2988, lpOverlapped=0x0) returned 1 [0209.041] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2990, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2990, lpOverlapped=0x0) returned 1 [0209.042] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0209.042] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0209.042] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0209.042] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2988, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2988, lpOverlapped=0x0) returned 1 [0209.043] FlushFileBuffers (hFile=0x21c) returned 1 [0209.094] FlushFileBuffers (hFile=0x2b0) returned 1 [0209.105] CloseHandle (hObject=0x21c) returned 1 [0209.105] CloseHandle (hObject=0x2b0) returned 1 [0209.105] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151063.wmf")) returned 1 [0209.106] SetEvent (hEvent=0x27c) returned 1 [0209.107] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151073.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0209.107] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=13336) returned 1 [0209.107] CloseHandle (hObject=0x2b0) returned 1 [0209.107] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151073.wmf")) returned 0x220 [0209.108] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151073.wmf")) returned 0x220 [0209.108] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151073.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0209.108] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151073.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0209.108] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0209.108] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0209.108] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151073.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0209.109] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x3418, lpOverlapped=0x0) returned 1 [0209.111] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3420, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x3420, lpOverlapped=0x0) returned 1 [0209.112] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0209.112] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0209.112] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0209.113] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3418, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x3418, lpOverlapped=0x0) returned 1 [0209.113] FlushFileBuffers (hFile=0x2b0) returned 1 [0209.123] FlushFileBuffers (hFile=0x21c) returned 1 [0209.125] CloseHandle (hObject=0x2b0) returned 1 [0209.125] CloseHandle (hObject=0x21c) returned 1 [0209.125] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151073.wmf")) returned 1 [0209.127] SetEvent (hEvent=0x27c) returned 1 [0209.127] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152414.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0209.127] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=24844) returned 1 [0209.128] CloseHandle (hObject=0x21c) returned 1 [0209.128] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152414.wmf")) returned 0x220 [0209.128] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152414.wmf")) returned 0x220 [0209.128] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152414.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0209.128] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152414.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0209.128] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0209.128] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0209.128] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152414.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0209.129] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x610c, lpOverlapped=0x0) returned 1 [0209.132] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x6110, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x6110, lpOverlapped=0x0) returned 1 [0209.133] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0209.133] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0209.133] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0209.133] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x610c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x610c, lpOverlapped=0x0) returned 1 [0209.133] FlushFileBuffers (hFile=0x21c) returned 1 [0209.553] FlushFileBuffers (hFile=0x2b0) returned 1 [0209.665] CloseHandle (hObject=0x21c) returned 1 [0209.740] CloseHandle (hObject=0x2b0) returned 1 [0209.740] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152414.wmf")) returned 1 [0209.741] SetEvent (hEvent=0x27c) returned 1 [0209.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152876.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0209.743] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=7876) returned 1 [0209.743] CloseHandle (hObject=0x2b0) returned 1 [0209.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152876.wmf")) returned 0x220 [0209.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152876.wmf")) returned 0x220 [0209.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152876.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0209.743] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152876.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0209.743] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0209.743] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0209.743] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152876.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0209.744] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1ec4, lpOverlapped=0x0) returned 1 [0209.746] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1ed0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1ed0, lpOverlapped=0x0) returned 1 [0209.747] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0209.747] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0209.747] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0209.749] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1ec4, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1ec4, lpOverlapped=0x0) returned 1 [0209.749] FlushFileBuffers (hFile=0x2b0) returned 1 [0209.755] FlushFileBuffers (hFile=0x21c) returned 1 [0209.757] CloseHandle (hObject=0x2b0) returned 1 [0209.757] CloseHandle (hObject=0x21c) returned 1 [0209.757] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152876.wmf")) returned 1 [0209.759] SetEvent (hEvent=0x27c) returned 1 [0209.760] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152878.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0209.761] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=14888) returned 1 [0209.762] CloseHandle (hObject=0x21c) returned 1 [0209.762] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152878.wmf")) returned 0x220 [0209.762] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152878.wmf")) returned 0x220 [0209.762] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152878.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0209.763] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152878.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0209.763] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0209.763] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0209.763] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152878.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0209.764] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x3a28, lpOverlapped=0x0) returned 1 [0209.777] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3a30, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x3a30, lpOverlapped=0x0) returned 1 [0209.778] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0209.778] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0209.778] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0209.778] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3a28, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x3a28, lpOverlapped=0x0) returned 1 [0209.778] FlushFileBuffers (hFile=0x21c) returned 1 [0209.793] FlushFileBuffers (hFile=0x2b0) returned 1 [0209.822] CloseHandle (hObject=0x21c) returned 1 [0209.823] CloseHandle (hObject=0x2b0) returned 1 [0209.823] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152878.wmf")) returned 1 [0209.824] SetEvent (hEvent=0x27c) returned 1 [0209.824] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152884.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0209.826] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=6956) returned 1 [0209.826] CloseHandle (hObject=0x2b0) returned 1 [0209.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152884.wmf")) returned 0x220 [0209.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152884.wmf")) returned 0x220 [0209.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152884.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0209.826] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152884.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0209.826] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0209.826] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0209.826] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152884.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0209.827] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1b2c, lpOverlapped=0x0) returned 1 [0209.848] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1b30, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1b30, lpOverlapped=0x0) returned 1 [0209.849] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0209.850] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0209.850] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0209.850] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1b2c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1b2c, lpOverlapped=0x0) returned 1 [0209.850] FlushFileBuffers (hFile=0x2b0) returned 1 [0209.869] FlushFileBuffers (hFile=0x21c) returned 1 [0209.886] CloseHandle (hObject=0x2b0) returned 1 [0209.886] CloseHandle (hObject=0x21c) returned 1 [0209.887] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152884.wmf")) returned 1 [0209.888] SetEvent (hEvent=0x27c) returned 1 [0209.888] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152890.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0209.889] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1940) returned 1 [0209.889] CloseHandle (hObject=0x21c) returned 1 [0209.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152890.wmf")) returned 0x220 [0209.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152890.wmf")) returned 0x220 [0209.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152890.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0209.889] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152890.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0209.889] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0209.889] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0209.889] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152890.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0209.891] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x794, lpOverlapped=0x0) returned 1 [0209.893] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7a0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x7a0, lpOverlapped=0x0) returned 1 [0209.894] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0209.894] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0209.894] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0209.894] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x794, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x794, lpOverlapped=0x0) returned 1 [0209.894] FlushFileBuffers (hFile=0x21c) returned 1 [0209.984] FlushFileBuffers (hFile=0x2b0) returned 1 [0210.188] CloseHandle (hObject=0x21c) returned 1 [0210.188] CloseHandle (hObject=0x2b0) returned 1 [0210.188] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152890.wmf")) returned 1 [0210.189] SetEvent (hEvent=0x27c) returned 1 [0210.190] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152898.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0210.191] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=4496) returned 1 [0210.191] CloseHandle (hObject=0x2b0) returned 1 [0210.191] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152898.wmf")) returned 0x220 [0210.191] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152898.wmf")) returned 0x220 [0210.191] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152898.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0210.192] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152898.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0210.192] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0210.192] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0210.192] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152898.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0210.193] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1190, lpOverlapped=0x0) returned 1 [0210.206] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x11a0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x11a0, lpOverlapped=0x0) returned 1 [0210.207] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0210.207] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0210.207] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0210.207] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1190, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1190, lpOverlapped=0x0) returned 1 [0210.208] FlushFileBuffers (hFile=0x2b0) returned 1 [0210.261] FlushFileBuffers (hFile=0x21c) returned 1 [0210.262] CloseHandle (hObject=0x2b0) returned 1 [0210.262] CloseHandle (hObject=0x21c) returned 1 [0210.262] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152898.wmf")) returned 1 [0210.263] SetEvent (hEvent=0x27c) returned 1 [0210.264] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153047.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0210.265] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=33068) returned 1 [0210.265] CloseHandle (hObject=0x21c) returned 1 [0210.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153047.wmf")) returned 0x220 [0210.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153047.wmf")) returned 0x220 [0210.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153047.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0210.265] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153047.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0210.265] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0210.265] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0210.265] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153047.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0210.266] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x812c, lpOverlapped=0x0) returned 1 [0210.273] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x8130, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x8130, lpOverlapped=0x0) returned 1 [0210.275] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0210.275] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0210.275] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0210.275] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x812c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x812c, lpOverlapped=0x0) returned 1 [0210.276] FlushFileBuffers (hFile=0x21c) returned 1 [0210.286] FlushFileBuffers (hFile=0x2b0) returned 1 [0210.290] CloseHandle (hObject=0x21c) returned 1 [0210.291] CloseHandle (hObject=0x2b0) returned 1 [0210.291] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153047.wmf")) returned 1 [0210.302] SetEvent (hEvent=0x27c) returned 1 [0210.302] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153089.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0210.303] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=7848) returned 1 [0210.303] CloseHandle (hObject=0x2b0) returned 1 [0210.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153089.wmf")) returned 0x220 [0210.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153089.wmf")) returned 0x220 [0210.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153089.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0210.304] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153089.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0210.304] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0210.304] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0210.304] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153089.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0210.305] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1ea8, lpOverlapped=0x0) returned 1 [0210.316] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1eb0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1eb0, lpOverlapped=0x0) returned 1 [0210.317] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0210.318] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0210.318] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0210.318] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1ea8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1ea8, lpOverlapped=0x0) returned 1 [0210.318] FlushFileBuffers (hFile=0x2b0) returned 1 [0210.328] FlushFileBuffers (hFile=0x21c) returned 1 [0210.332] CloseHandle (hObject=0x2b0) returned 1 [0210.332] CloseHandle (hObject=0x21c) returned 1 [0210.333] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153089.wmf")) returned 1 [0210.334] SetEvent (hEvent=0x27c) returned 1 [0210.334] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153093.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0210.335] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=8880) returned 1 [0210.335] CloseHandle (hObject=0x21c) returned 1 [0210.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153093.wmf")) returned 0x220 [0210.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153093.wmf")) returned 0x220 [0210.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153093.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0210.335] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153093.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0210.335] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0210.335] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0210.335] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153093.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0210.336] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x22b0, lpOverlapped=0x0) returned 1 [0210.340] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x22c0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x22c0, lpOverlapped=0x0) returned 1 [0210.341] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0210.342] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0210.342] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0210.342] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x22b0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x22b0, lpOverlapped=0x0) returned 1 [0210.342] FlushFileBuffers (hFile=0x21c) returned 1 [0210.360] FlushFileBuffers (hFile=0x2b0) returned 1 [0210.363] CloseHandle (hObject=0x21c) returned 1 [0210.363] CloseHandle (hObject=0x2b0) returned 1 [0210.363] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153093.wmf")) returned 1 [0210.364] SetEvent (hEvent=0x27c) returned 1 [0210.364] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153265.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0210.366] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3008) returned 1 [0210.366] CloseHandle (hObject=0x2b0) returned 1 [0210.366] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153265.wmf")) returned 0x220 [0210.366] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153265.wmf")) returned 0x220 [0210.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153265.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0210.367] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153265.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0210.367] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0210.367] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0210.367] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153265.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0210.368] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xbc0, lpOverlapped=0x0) returned 1 [0210.371] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xbd0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xbd0, lpOverlapped=0x0) returned 1 [0210.372] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0210.372] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0210.372] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0210.372] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xbc0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xbc0, lpOverlapped=0x0) returned 1 [0210.373] FlushFileBuffers (hFile=0x2b0) returned 1 [0210.381] FlushFileBuffers (hFile=0x21c) returned 1 [0210.383] CloseHandle (hObject=0x2b0) returned 1 [0210.383] CloseHandle (hObject=0x21c) returned 1 [0210.383] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153265.wmf")) returned 1 [0210.384] SetEvent (hEvent=0x27c) returned 1 [0210.384] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153299.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0210.385] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=36620) returned 1 [0210.385] CloseHandle (hObject=0x21c) returned 1 [0210.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153299.wmf")) returned 0x220 [0210.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153299.wmf")) returned 0x220 [0210.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153299.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0210.386] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153299.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0210.386] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0210.386] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0210.387] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153299.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0210.387] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x8f0c, lpOverlapped=0x0) returned 1 [0210.401] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x8f10, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x8f10, lpOverlapped=0x0) returned 1 [0210.403] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0210.404] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0210.404] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0210.404] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x8f0c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x8f0c, lpOverlapped=0x0) returned 1 [0210.404] FlushFileBuffers (hFile=0x21c) returned 1 [0210.438] FlushFileBuffers (hFile=0x2b0) returned 1 [0210.451] CloseHandle (hObject=0x21c) returned 1 [0210.451] CloseHandle (hObject=0x2b0) returned 1 [0210.451] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153299.wmf")) returned 1 [0210.456] SetEvent (hEvent=0x27c) returned 1 [0210.456] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153307.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0210.457] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=15448) returned 1 [0210.457] CloseHandle (hObject=0x2b0) returned 1 [0210.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153307.wmf")) returned 0x220 [0210.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153307.wmf")) returned 0x220 [0210.458] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153307.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0210.458] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153307.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0210.458] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0210.458] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0210.458] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153307.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0210.459] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x3c58, lpOverlapped=0x0) returned 1 [0210.464] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3c60, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x3c60, lpOverlapped=0x0) returned 1 [0210.465] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0210.466] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0210.466] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0210.466] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3c58, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x3c58, lpOverlapped=0x0) returned 1 [0210.466] FlushFileBuffers (hFile=0x2b0) returned 1 [0210.468] FlushFileBuffers (hFile=0x21c) returned 1 [0210.473] CloseHandle (hObject=0x2b0) returned 1 [0210.473] CloseHandle (hObject=0x21c) returned 1 [0210.473] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153307.wmf")) returned 1 [0210.474] SetEvent (hEvent=0x27c) returned 1 [0210.475] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153398.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0210.477] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=17508) returned 1 [0210.477] CloseHandle (hObject=0x2b0) returned 1 [0210.478] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153398.wmf")) returned 0x220 [0210.478] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153398.wmf")) returned 0x220 [0210.478] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153398.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0210.480] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153398.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0210.480] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0210.480] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0210.480] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153398.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0210.481] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4464, lpOverlapped=0x0) returned 1 [0210.485] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4470, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4470, lpOverlapped=0x0) returned 1 [0210.487] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0210.487] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0210.487] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0210.487] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4464, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4464, lpOverlapped=0x0) returned 1 [0210.487] FlushFileBuffers (hFile=0x2fc) returned 1 [0210.490] FlushFileBuffers (hFile=0x2f4) returned 1 [0210.497] CloseHandle (hObject=0x2fc) returned 1 [0210.497] CloseHandle (hObject=0x2f4) returned 1 [0210.497] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153398.wmf")) returned 1 [0210.498] SetEvent (hEvent=0x27c) returned 1 [0210.499] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153514.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0210.499] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=12752) returned 1 [0210.499] CloseHandle (hObject=0x2f4) returned 1 [0210.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153514.wmf")) returned 0x220 [0210.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153514.wmf")) returned 0x220 [0210.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153514.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0210.499] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153514.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0210.500] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0210.500] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0210.500] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153514.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0210.500] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x31d0, lpOverlapped=0x0) returned 1 [0210.504] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x31e0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x31e0, lpOverlapped=0x0) returned 1 [0210.505] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0210.505] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0210.505] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0210.505] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x31d0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x31d0, lpOverlapped=0x0) returned 1 [0210.505] FlushFileBuffers (hFile=0x2f4) returned 1 [0210.513] FlushFileBuffers (hFile=0x2fc) returned 1 [0210.515] CloseHandle (hObject=0x2f4) returned 1 [0210.515] CloseHandle (hObject=0x2fc) returned 1 [0210.515] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153514.wmf")) returned 1 [0210.516] SetEvent (hEvent=0x27c) returned 1 [0210.516] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153516.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0210.518] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=7432) returned 1 [0210.518] CloseHandle (hObject=0x2fc) returned 1 [0210.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153516.wmf")) returned 0x220 [0210.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153516.wmf")) returned 0x220 [0210.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153516.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0210.519] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153516.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0210.519] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0210.519] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0210.519] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153516.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0210.520] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1d08, lpOverlapped=0x0) returned 1 [0210.526] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1d10, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1d10, lpOverlapped=0x0) returned 1 [0210.527] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0210.528] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0210.528] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0210.528] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1d08, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1d08, lpOverlapped=0x0) returned 1 [0210.528] FlushFileBuffers (hFile=0x2fc) returned 1 [0210.534] FlushFileBuffers (hFile=0x2f4) returned 1 [0210.536] CloseHandle (hObject=0x2fc) returned 1 [0210.536] CloseHandle (hObject=0x2f4) returned 1 [0210.537] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153516.wmf")) returned 1 [0210.538] SetEvent (hEvent=0x27c) returned 1 [0210.538] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0156537.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0210.540] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1376) returned 1 [0210.540] CloseHandle (hObject=0x2f4) returned 1 [0210.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0156537.wmf")) returned 0x220 [0210.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0156537.wmf")) returned 0x220 [0210.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0156537.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0210.540] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0156537.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0210.540] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0210.540] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0210.540] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0156537.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0210.556] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x560, lpOverlapped=0x0) returned 1 [0210.569] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x570, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x570, lpOverlapped=0x0) returned 1 [0210.571] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0210.571] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0210.571] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0210.571] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x560, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x560, lpOverlapped=0x0) returned 1 [0210.571] FlushFileBuffers (hFile=0x2f4) returned 1 [0210.596] FlushFileBuffers (hFile=0x2fc) returned 1 [0210.598] CloseHandle (hObject=0x2f4) returned 1 [0210.599] CloseHandle (hObject=0x2fc) returned 1 [0210.599] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0156537.wmf")) returned 1 [0210.600] SetEvent (hEvent=0x27c) returned 1 [0210.600] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157177.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0210.601] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=21716) returned 1 [0210.601] CloseHandle (hObject=0x2fc) returned 1 [0210.601] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157177.wmf")) returned 0x220 [0210.601] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157177.wmf")) returned 0x220 [0210.601] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157177.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0210.601] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157177.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0210.601] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0210.601] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0210.602] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157177.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0210.603] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x54d4, lpOverlapped=0x0) returned 1 [0210.606] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x54e0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x54e0, lpOverlapped=0x0) returned 1 [0210.607] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0210.607] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0210.607] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0210.607] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x54d4, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x54d4, lpOverlapped=0x0) returned 1 [0210.608] FlushFileBuffers (hFile=0x2fc) returned 1 [0210.637] FlushFileBuffers (hFile=0x2f4) returned 1 [0210.644] CloseHandle (hObject=0x2fc) returned 1 [0210.644] CloseHandle (hObject=0x2f4) returned 1 [0210.644] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157177.wmf")) returned 1 [0210.645] SetEvent (hEvent=0x27c) returned 1 [0210.645] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158071.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158071.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0210.646] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=18652) returned 1 [0210.646] CloseHandle (hObject=0x2f4) returned 1 [0210.646] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158071.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158071.wmf")) returned 0x220 [0210.646] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158071.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158071.wmf")) returned 0x220 [0210.646] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158071.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158071.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0210.646] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158071.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158071.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0210.646] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0210.646] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0210.646] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158071.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158071.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0210.647] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x48dc, lpOverlapped=0x0) returned 1 [0210.652] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x48e0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x48e0, lpOverlapped=0x0) returned 1 [0210.653] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0210.653] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0210.653] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0210.653] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x48dc, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x48dc, lpOverlapped=0x0) returned 1 [0210.654] FlushFileBuffers (hFile=0x2f4) returned 1 [0210.656] FlushFileBuffers (hFile=0x2fc) returned 1 [0210.663] CloseHandle (hObject=0x2f4) returned 1 [0210.663] CloseHandle (hObject=0x2fc) returned 1 [0210.663] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158071.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158071.wmf")) returned 1 [0210.664] SetEvent (hEvent=0x27c) returned 1 [0210.664] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0160590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0160590.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0210.666] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=29406) returned 1 [0210.666] CloseHandle (hObject=0x2fc) returned 1 [0210.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0160590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0160590.wmf")) returned 0x220 [0210.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0160590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0160590.wmf")) returned 0x220 [0210.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0160590.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0160590.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0210.666] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0160590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0160590.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0210.667] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0210.667] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0210.667] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0160590.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0160590.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0210.667] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x72de, lpOverlapped=0x0) returned 1 [0210.679] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x72e0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x72e0, lpOverlapped=0x0) returned 1 [0210.680] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0210.680] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0210.680] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0210.680] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x72de, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x72de, lpOverlapped=0x0) returned 1 [0210.681] FlushFileBuffers (hFile=0x2fc) returned 1 [0210.684] FlushFileBuffers (hFile=0x2f4) returned 1 [0210.693] CloseHandle (hObject=0x2fc) returned 1 [0210.693] CloseHandle (hObject=0x2f4) returned 1 [0210.693] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0160590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0160590.wmf")) returned 1 [0210.694] SetEvent (hEvent=0x27c) returned 1 [0210.695] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0168644.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0168644.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0210.696] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=20906) returned 1 [0210.696] CloseHandle (hObject=0x2f4) returned 1 [0210.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0168644.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0168644.wmf")) returned 0x220 [0210.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0168644.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0168644.wmf")) returned 0x220 [0210.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0168644.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0168644.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0210.696] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0168644.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0168644.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0210.696] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0210.696] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0210.696] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0168644.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0168644.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0210.697] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x51aa, lpOverlapped=0x0) returned 1 [0210.701] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x51b0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x51b0, lpOverlapped=0x0) returned 1 [0210.711] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0210.711] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0210.711] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0210.711] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x51aa, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x51aa, lpOverlapped=0x0) returned 1 [0210.714] FlushFileBuffers (hFile=0x2f4) returned 1 [0210.766] FlushFileBuffers (hFile=0x2fc) returned 1 [0210.770] CloseHandle (hObject=0x2f4) returned 1 [0210.770] CloseHandle (hObject=0x2fc) returned 1 [0210.770] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0168644.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0168644.wmf")) returned 1 [0210.771] SetEvent (hEvent=0x27c) returned 1 [0210.771] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171685.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171685.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0210.773] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=14472) returned 1 [0210.773] CloseHandle (hObject=0x2fc) returned 1 [0210.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171685.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171685.wmf")) returned 0x220 [0210.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171685.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171685.wmf")) returned 0x220 [0210.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171685.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171685.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0210.773] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171685.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171685.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0210.773] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0210.773] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0210.773] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171685.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171685.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0210.774] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x3888, lpOverlapped=0x0) returned 1 [0210.779] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3890, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x3890, lpOverlapped=0x0) returned 1 [0210.780] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0210.781] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0210.781] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0210.781] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3888, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x3888, lpOverlapped=0x0) returned 1 [0210.781] FlushFileBuffers (hFile=0x2fc) returned 1 [0210.806] FlushFileBuffers (hFile=0x2f4) returned 1 [0210.808] CloseHandle (hObject=0x2fc) returned 1 [0210.809] CloseHandle (hObject=0x2f4) returned 1 [0210.809] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171685.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171685.wmf")) returned 1 [0210.810] SetEvent (hEvent=0x27c) returned 1 [0210.811] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172035.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172035.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0210.812] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=7448) returned 1 [0210.812] CloseHandle (hObject=0x2f4) returned 1 [0210.812] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172035.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172035.wmf")) returned 0x220 [0210.812] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172035.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172035.wmf")) returned 0x220 [0210.812] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172035.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172035.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0210.812] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172035.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172035.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0210.812] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0210.812] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0210.812] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172035.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172035.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0210.814] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1d18, lpOverlapped=0x0) returned 1 [0210.815] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1d20, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1d20, lpOverlapped=0x0) returned 1 [0210.817] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0210.817] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0210.817] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0210.817] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1d18, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1d18, lpOverlapped=0x0) returned 1 [0210.817] FlushFileBuffers (hFile=0x2f4) returned 1 [0210.824] FlushFileBuffers (hFile=0x2fc) returned 1 [0210.828] CloseHandle (hObject=0x2f4) returned 1 [0210.829] CloseHandle (hObject=0x2fc) returned 1 [0210.829] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172035.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172035.wmf")) returned 1 [0210.830] SetEvent (hEvent=0x27c) returned 1 [0210.830] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172193.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172193.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0210.831] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=12696) returned 1 [0210.831] CloseHandle (hObject=0x2fc) returned 1 [0210.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172193.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172193.wmf")) returned 0x220 [0210.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172193.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172193.wmf")) returned 0x220 [0210.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172193.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172193.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0210.832] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172193.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172193.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0210.832] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0210.832] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0210.832] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172193.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172193.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0210.833] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x3198, lpOverlapped=0x0) returned 1 [0210.861] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x31a0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x31a0, lpOverlapped=0x0) returned 1 [0210.862] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0210.863] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0210.863] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0210.863] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3198, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x3198, lpOverlapped=0x0) returned 1 [0210.863] FlushFileBuffers (hFile=0x2fc) returned 1 [0210.871] FlushFileBuffers (hFile=0x2f4) returned 1 [0210.890] CloseHandle (hObject=0x2fc) returned 1 [0210.890] CloseHandle (hObject=0x2f4) returned 1 [0210.890] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172193.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172193.wmf")) returned 1 [0210.892] SetEvent (hEvent=0x27c) returned 1 [0210.892] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174635.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174635.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0210.893] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=9736) returned 1 [0210.893] CloseHandle (hObject=0x2f4) returned 1 [0210.894] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174635.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174635.wmf")) returned 0x220 [0210.894] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174635.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174635.wmf")) returned 0x220 [0210.894] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174635.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174635.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0210.894] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174635.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174635.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0210.894] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0210.894] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0210.894] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174635.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174635.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0210.895] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2608, lpOverlapped=0x0) returned 1 [0210.897] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2610, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2610, lpOverlapped=0x0) returned 1 [0210.898] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0210.898] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0210.898] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0210.898] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2608, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2608, lpOverlapped=0x0) returned 1 [0210.898] FlushFileBuffers (hFile=0x2f4) returned 1 [0210.957] FlushFileBuffers (hFile=0x2fc) returned 1 [0210.958] CloseHandle (hObject=0x2f4) returned 1 [0210.958] CloseHandle (hObject=0x2fc) returned 1 [0210.958] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174635.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174635.wmf")) returned 1 [0210.959] SetEvent (hEvent=0x27c) returned 1 [0210.960] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174639.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174639.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0210.961] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=5100) returned 1 [0210.961] CloseHandle (hObject=0x2fc) returned 1 [0210.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174639.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174639.wmf")) returned 0x220 [0210.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174639.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174639.wmf")) returned 0x220 [0210.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174639.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174639.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0210.961] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174639.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174639.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0210.961] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0210.961] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0210.961] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174639.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174639.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0210.962] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x13ec, lpOverlapped=0x0) returned 1 [0210.976] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x13f0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x13f0, lpOverlapped=0x0) returned 1 [0210.977] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0210.977] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0210.977] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0210.977] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x13ec, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x13ec, lpOverlapped=0x0) returned 1 [0210.978] FlushFileBuffers (hFile=0x2fc) returned 1 [0211.060] FlushFileBuffers (hFile=0x2f4) returned 1 [0211.150] CloseHandle (hObject=0x2fc) returned 1 [0211.150] CloseHandle (hObject=0x2f4) returned 1 [0211.150] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174639.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174639.wmf")) returned 1 [0211.152] SetEvent (hEvent=0x27c) returned 1 [0211.152] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175361.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0211.154] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=46461) returned 1 [0211.154] CloseHandle (hObject=0x2f4) returned 1 [0211.154] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175361.jpg")) returned 0x220 [0211.154] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175361.jpg")) returned 0x220 [0211.154] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175361.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0211.155] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175361.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0211.155] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0211.155] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0211.155] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175361.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0211.157] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xb57d, lpOverlapped=0x0) returned 1 [0211.163] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xb580, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xb580, lpOverlapped=0x0) returned 1 [0211.164] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0211.165] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0211.165] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0211.165] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xb57d, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xb57d, lpOverlapped=0x0) returned 1 [0211.165] FlushFileBuffers (hFile=0x2f4) returned 1 [0211.188] FlushFileBuffers (hFile=0x2fc) returned 1 [0211.211] CloseHandle (hObject=0x2f4) returned 1 [0211.211] CloseHandle (hObject=0x2fc) returned 1 [0211.211] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175361.jpg")) returned 1 [0211.213] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177806.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0211.213] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=55554) returned 1 [0211.213] CloseHandle (hObject=0x2fc) returned 1 [0211.213] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177806.jpg")) returned 0x220 [0211.214] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177806.jpg")) returned 0x220 [0211.214] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177806.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0211.214] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177806.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0211.214] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0211.214] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0211.214] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177806.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0211.215] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xd902, lpOverlapped=0x0) returned 1 [0211.224] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xd910, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xd910, lpOverlapped=0x0) returned 1 [0211.225] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0211.226] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0211.226] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0211.226] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xd902, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xd902, lpOverlapped=0x0) returned 1 [0211.226] FlushFileBuffers (hFile=0x2fc) returned 1 [0211.258] FlushFileBuffers (hFile=0x2f4) returned 1 [0211.273] CloseHandle (hObject=0x2fc) returned 1 [0211.273] CloseHandle (hObject=0x2f4) returned 1 [0211.273] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177806.jpg")) returned 1 [0211.275] SetEvent (hEvent=0x27c) returned 1 [0211.275] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178459.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0211.277] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=29204) returned 1 [0211.277] CloseHandle (hObject=0x2f4) returned 1 [0211.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178459.jpg")) returned 0x220 [0211.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178459.jpg")) returned 0x220 [0211.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178459.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0211.277] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178459.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0211.277] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0211.277] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0211.277] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178459.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0211.278] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x7214, lpOverlapped=0x0) returned 1 [0211.281] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7220, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x7220, lpOverlapped=0x0) returned 1 [0211.282] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0211.283] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0211.283] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0211.283] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7214, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x7214, lpOverlapped=0x0) returned 1 [0211.283] FlushFileBuffers (hFile=0x2f4) returned 1 [0211.308] FlushFileBuffers (hFile=0x2fc) returned 1 [0211.311] CloseHandle (hObject=0x2f4) returned 1 [0211.311] CloseHandle (hObject=0x2fc) returned 1 [0211.311] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178459.jpg")) returned 1 [0211.312] SetEvent (hEvent=0x27c) returned 1 [0211.312] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178523.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0211.314] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=24034) returned 1 [0211.314] CloseHandle (hObject=0x2fc) returned 1 [0211.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178523.jpg")) returned 0x220 [0211.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178523.jpg")) returned 0x220 [0211.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178523.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0211.315] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178523.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0211.315] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0211.315] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0211.315] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178523.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0211.316] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x5de2, lpOverlapped=0x0) returned 1 [0211.343] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5df0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x5df0, lpOverlapped=0x0) returned 1 [0211.345] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0211.345] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0211.345] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0211.345] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5de2, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x5de2, lpOverlapped=0x0) returned 1 [0211.346] FlushFileBuffers (hFile=0x2fc) returned 1 [0211.357] FlushFileBuffers (hFile=0x2f4) returned 1 [0211.363] CloseHandle (hObject=0x2fc) returned 1 [0211.363] CloseHandle (hObject=0x2f4) returned 1 [0211.363] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178523.jpg")) returned 1 [0211.365] SetEvent (hEvent=0x27c) returned 1 [0211.365] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178639.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0211.366] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=32038) returned 1 [0211.366] CloseHandle (hObject=0x2f4) returned 1 [0211.366] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178639.jpg")) returned 0x220 [0211.366] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178639.jpg")) returned 0x220 [0211.366] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178639.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0211.366] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178639.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0211.366] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0211.366] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0211.366] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178639.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0211.367] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x7d26, lpOverlapped=0x0) returned 1 [0211.384] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7d30, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x7d30, lpOverlapped=0x0) returned 1 [0211.385] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0211.386] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0211.386] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0211.386] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7d26, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x7d26, lpOverlapped=0x0) returned 1 [0211.386] FlushFileBuffers (hFile=0x2f4) returned 1 [0211.399] FlushFileBuffers (hFile=0x2fc) returned 1 [0211.427] CloseHandle (hObject=0x2f4) returned 1 [0211.427] CloseHandle (hObject=0x2fc) returned 1 [0211.427] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178639.jpg")) returned 1 [0211.428] SetEvent (hEvent=0x27c) returned 1 [0211.428] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0179963.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0211.431] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=32110) returned 1 [0211.431] CloseHandle (hObject=0x2fc) returned 1 [0211.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0179963.jpg")) returned 0x220 [0211.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0179963.jpg")) returned 0x220 [0211.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0179963.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0211.431] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0179963.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0211.431] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0211.431] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0211.431] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0179963.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0211.432] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x7d6e, lpOverlapped=0x0) returned 1 [0211.486] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7d70, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x7d70, lpOverlapped=0x0) returned 1 [0211.487] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0211.488] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0211.488] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0211.488] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7d6e, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x7d6e, lpOverlapped=0x0) returned 1 [0211.488] FlushFileBuffers (hFile=0x2fc) returned 1 [0211.540] FlushFileBuffers (hFile=0x2f4) returned 1 [0211.547] CloseHandle (hObject=0x2fc) returned 1 [0211.547] CloseHandle (hObject=0x2f4) returned 1 [0211.547] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0179963.jpg")) returned 1 [0211.549] SetEvent (hEvent=0x27c) returned 1 [0211.549] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182689.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0211.554] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=16615) returned 1 [0211.554] CloseHandle (hObject=0x2f4) returned 1 [0211.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182689.jpg")) returned 0x220 [0211.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182689.jpg")) returned 0x220 [0211.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182689.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0211.554] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182689.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0211.554] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0211.555] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0211.555] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182689.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0211.556] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x40e7, lpOverlapped=0x0) returned 1 [0211.563] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x40f0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x40f0, lpOverlapped=0x0) returned 1 [0211.565] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0211.565] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0211.565] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0211.565] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x40e7, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x40e7, lpOverlapped=0x0) returned 1 [0211.565] FlushFileBuffers (hFile=0x2f4) returned 1 [0211.586] FlushFileBuffers (hFile=0x2fc) returned 1 [0211.588] CloseHandle (hObject=0x2f4) returned 1 [0211.588] CloseHandle (hObject=0x2fc) returned 1 [0211.588] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182689.jpg")) returned 1 [0211.589] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182898.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0211.591] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=15150) returned 1 [0211.591] CloseHandle (hObject=0x2fc) returned 1 [0211.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182898.wmf")) returned 0x220 [0211.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182898.wmf")) returned 0x220 [0211.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182898.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182898.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0211.591] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182898.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0211.591] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0211.591] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0211.591] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182898.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182898.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0211.592] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x3b2e, lpOverlapped=0x0) returned 1 [0211.594] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3b30, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x3b30, lpOverlapped=0x0) returned 1 [0211.596] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0211.596] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0211.596] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0211.597] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3b2e, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x3b2e, lpOverlapped=0x0) returned 1 [0211.597] FlushFileBuffers (hFile=0x2fc) returned 1 [0211.599] FlushFileBuffers (hFile=0x2f4) returned 1 [0211.600] CloseHandle (hObject=0x2fc) returned 1 [0211.600] CloseHandle (hObject=0x2f4) returned 1 [0211.600] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182898.wmf")) returned 1 [0211.601] SetEvent (hEvent=0x27c) returned 1 [0211.601] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182902.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182902.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0211.603] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=7822) returned 1 [0211.603] CloseHandle (hObject=0x2f4) returned 1 [0211.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182902.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182902.wmf")) returned 0x220 [0211.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182902.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182902.wmf")) returned 0x220 [0211.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182902.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182902.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0211.603] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182902.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182902.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0211.603] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0211.603] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0211.603] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182902.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182902.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0211.604] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1e8e, lpOverlapped=0x0) returned 1 [0211.606] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1e90, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1e90, lpOverlapped=0x0) returned 1 [0211.613] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0211.613] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0211.613] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0211.613] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1e8e, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1e8e, lpOverlapped=0x0) returned 1 [0211.614] FlushFileBuffers (hFile=0x2f4) returned 1 [0211.615] FlushFileBuffers (hFile=0x2fc) returned 1 [0211.617] CloseHandle (hObject=0x2f4) returned 1 [0211.617] CloseHandle (hObject=0x2fc) returned 1 [0211.617] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182902.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182902.wmf")) returned 1 [0211.618] SetEvent (hEvent=0x27c) returned 1 [0211.618] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182946.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182946.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0211.619] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=16082) returned 1 [0211.619] CloseHandle (hObject=0x2fc) returned 1 [0211.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182946.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182946.wmf")) returned 0x220 [0211.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182946.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182946.wmf")) returned 0x220 [0211.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182946.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182946.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0211.619] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182946.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182946.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0211.620] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0211.620] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0211.620] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182946.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182946.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0211.620] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x3ed2, lpOverlapped=0x0) returned 1 [0211.625] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3ee0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x3ee0, lpOverlapped=0x0) returned 1 [0211.626] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0211.626] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0211.626] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0211.626] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3ed2, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x3ed2, lpOverlapped=0x0) returned 1 [0211.626] FlushFileBuffers (hFile=0x2fc) returned 1 [0211.653] FlushFileBuffers (hFile=0x2f4) returned 1 [0211.671] CloseHandle (hObject=0x2fc) returned 1 [0211.671] CloseHandle (hObject=0x2f4) returned 1 [0211.672] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182946.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182946.wmf")) returned 1 [0211.673] SetEvent (hEvent=0x27c) returned 1 [0211.673] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183172.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0211.677] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=29788) returned 1 [0211.677] CloseHandle (hObject=0x2f4) returned 1 [0211.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183172.wmf")) returned 0x220 [0211.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183172.wmf")) returned 0x220 [0211.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183172.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183172.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0211.677] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183172.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0211.677] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0211.677] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0211.677] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183172.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183172.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0211.678] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x745c, lpOverlapped=0x0) returned 1 [0211.688] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7460, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x7460, lpOverlapped=0x0) returned 1 [0211.689] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0211.689] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0211.689] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0211.689] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x745c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x745c, lpOverlapped=0x0) returned 1 [0211.690] FlushFileBuffers (hFile=0x2f4) returned 1 [0211.726] FlushFileBuffers (hFile=0x2fc) returned 1 [0211.730] CloseHandle (hObject=0x2f4) returned 1 [0211.730] CloseHandle (hObject=0x2fc) returned 1 [0211.730] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183172.wmf")) returned 1 [0211.732] SetEvent (hEvent=0x27c) returned 1 [0211.732] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183174.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0211.734] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=28626) returned 1 [0211.734] CloseHandle (hObject=0x2fc) returned 1 [0211.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183174.wmf")) returned 0x220 [0211.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183174.wmf")) returned 0x220 [0211.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183174.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183174.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0211.735] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183174.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0211.735] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0211.735] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0211.735] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183174.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183174.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0211.736] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x6fd2, lpOverlapped=0x0) returned 1 [0211.740] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x6fe0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x6fe0, lpOverlapped=0x0) returned 1 [0211.742] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0211.743] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0211.743] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0211.743] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x6fd2, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x6fd2, lpOverlapped=0x0) returned 1 [0211.743] FlushFileBuffers (hFile=0x2fc) returned 1 [0211.755] FlushFileBuffers (hFile=0x2f4) returned 1 [0211.758] CloseHandle (hObject=0x2fc) returned 1 [0211.758] CloseHandle (hObject=0x2f4) returned 1 [0211.758] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183174.wmf")) returned 1 [0211.760] SetEvent (hEvent=0x27c) returned 1 [0211.760] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183198.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183198.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0211.762] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=24430) returned 1 [0211.762] CloseHandle (hObject=0x2f4) returned 1 [0211.762] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183198.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183198.wmf")) returned 0x220 [0211.762] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183198.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183198.wmf")) returned 0x220 [0211.762] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183198.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183198.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0211.762] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183198.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183198.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0211.762] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0211.762] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0211.762] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183198.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183198.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0211.764] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x5f6e, lpOverlapped=0x0) returned 1 [0211.784] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5f70, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x5f70, lpOverlapped=0x0) returned 1 [0211.787] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0211.787] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0211.788] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0211.788] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5f6e, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x5f6e, lpOverlapped=0x0) returned 1 [0211.791] FlushFileBuffers (hFile=0x2f4) returned 1 [0211.815] FlushFileBuffers (hFile=0x2fc) returned 1 [0211.817] CloseHandle (hObject=0x2f4) returned 1 [0211.817] CloseHandle (hObject=0x2fc) returned 1 [0211.817] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183198.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183198.wmf")) returned 1 [0211.819] SetEvent (hEvent=0x27c) returned 1 [0211.819] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185670.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185670.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0211.820] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=7304) returned 1 [0211.820] CloseHandle (hObject=0x2fc) returned 1 [0211.821] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185670.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185670.wmf")) returned 0x220 [0211.821] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185670.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185670.wmf")) returned 0x220 [0211.821] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185670.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185670.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0211.821] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185670.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185670.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0211.821] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0211.821] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0211.821] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185670.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185670.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0211.822] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1c88, lpOverlapped=0x0) returned 1 [0211.828] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1c90, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1c90, lpOverlapped=0x0) returned 1 [0211.829] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0211.830] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0211.830] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0211.830] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1c88, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1c88, lpOverlapped=0x0) returned 1 [0211.830] FlushFileBuffers (hFile=0x2fc) returned 1 [0211.870] FlushFileBuffers (hFile=0x2f4) returned 1 [0211.887] CloseHandle (hObject=0x2fc) returned 1 [0211.887] CloseHandle (hObject=0x2f4) returned 1 [0211.887] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185670.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185670.wmf")) returned 1 [0211.888] SetEvent (hEvent=0x27c) returned 1 [0211.888] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185778.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185778.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0211.889] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=25312) returned 1 [0211.889] CloseHandle (hObject=0x2f4) returned 1 [0211.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185778.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185778.wmf")) returned 0x220 [0211.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185778.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185778.wmf")) returned 0x220 [0211.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185778.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185778.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0211.890] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185778.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185778.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0211.890] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0211.890] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0211.890] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185778.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185778.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0211.891] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x62e0, lpOverlapped=0x0) returned 1 [0211.905] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x62f0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x62f0, lpOverlapped=0x0) returned 1 [0211.907] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0211.907] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0211.907] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0211.907] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x62e0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x62e0, lpOverlapped=0x0) returned 1 [0211.908] FlushFileBuffers (hFile=0x2f4) returned 1 [0211.945] FlushFileBuffers (hFile=0x2fc) returned 1 [0211.953] CloseHandle (hObject=0x2f4) returned 1 [0211.953] CloseHandle (hObject=0x2fc) returned 1 [0211.953] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185778.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185778.wmf")) returned 1 [0211.954] SetEvent (hEvent=0x27c) returned 1 [0211.954] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185786.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185786.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0211.955] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=39330) returned 1 [0211.955] CloseHandle (hObject=0x2fc) returned 1 [0211.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185786.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185786.wmf")) returned 0x220 [0211.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185786.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185786.wmf")) returned 0x220 [0211.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185786.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185786.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0211.955] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185786.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185786.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0211.956] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0211.956] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0211.956] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185786.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185786.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0211.959] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x99a2, lpOverlapped=0x0) returned 1 [0211.969] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x99b0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x99b0, lpOverlapped=0x0) returned 1 [0211.971] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0211.971] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0211.971] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0211.971] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x99a2, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x99a2, lpOverlapped=0x0) returned 1 [0211.971] FlushFileBuffers (hFile=0x2fc) returned 1 [0211.978] FlushFileBuffers (hFile=0x2f4) returned 1 [0211.998] CloseHandle (hObject=0x2fc) returned 1 [0211.998] CloseHandle (hObject=0x2f4) returned 1 [0211.998] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185786.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185786.wmf")) returned 1 [0211.999] SetEvent (hEvent=0x27c) returned 1 [0211.999] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185790.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185790.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0212.001] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=20662) returned 1 [0212.001] CloseHandle (hObject=0x2f4) returned 1 [0212.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185790.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185790.wmf")) returned 0x220 [0212.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185790.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185790.wmf")) returned 0x220 [0212.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185790.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185790.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.002] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185790.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185790.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0212.002] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.002] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.002] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185790.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185790.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0212.003] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x50b6, lpOverlapped=0x0) returned 1 [0212.026] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x50c0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x50c0, lpOverlapped=0x0) returned 1 [0212.032] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0212.032] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.032] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.032] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x50b6, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x50b6, lpOverlapped=0x0) returned 1 [0212.032] FlushFileBuffers (hFile=0x2f4) returned 1 [0212.047] FlushFileBuffers (hFile=0x2fc) returned 1 [0212.056] CloseHandle (hObject=0x2f4) returned 1 [0212.056] CloseHandle (hObject=0x2fc) returned 1 [0212.056] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185790.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185790.wmf")) returned 1 [0212.057] SetEvent (hEvent=0x27c) returned 1 [0212.057] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185800.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185800.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0212.058] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=24238) returned 1 [0212.058] CloseHandle (hObject=0x2fc) returned 1 [0212.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185800.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185800.wmf")) returned 0x220 [0212.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185800.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185800.wmf")) returned 0x220 [0212.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185800.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185800.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.058] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185800.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185800.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0212.059] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.059] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.059] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185800.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185800.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0212.060] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x5eae, lpOverlapped=0x0) returned 1 [0212.067] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5eb0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x5eb0, lpOverlapped=0x0) returned 1 [0212.068] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0212.068] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.068] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.068] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5eae, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x5eae, lpOverlapped=0x0) returned 1 [0212.069] FlushFileBuffers (hFile=0x2fc) returned 1 [0212.085] FlushFileBuffers (hFile=0x2f4) returned 1 [0212.093] CloseHandle (hObject=0x2fc) returned 1 [0212.093] CloseHandle (hObject=0x2f4) returned 1 [0212.093] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185800.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185800.wmf")) returned 1 [0212.094] SetEvent (hEvent=0x27c) returned 1 [0212.094] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185818.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185818.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0212.096] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=35726) returned 1 [0212.097] CloseHandle (hObject=0x2f4) returned 1 [0212.097] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185818.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185818.wmf")) returned 0x220 [0212.097] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185818.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185818.wmf")) returned 0x220 [0212.097] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185818.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185818.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.097] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185818.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185818.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0212.097] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.097] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.097] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185818.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185818.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0212.098] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x8b8e, lpOverlapped=0x0) returned 1 [0212.104] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x8b90, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x8b90, lpOverlapped=0x0) returned 1 [0212.106] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0212.106] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.106] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.106] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x8b8e, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x8b8e, lpOverlapped=0x0) returned 1 [0212.107] FlushFileBuffers (hFile=0x2f4) returned 1 [0212.110] FlushFileBuffers (hFile=0x2fc) returned 1 [0212.118] CloseHandle (hObject=0x2f4) returned 1 [0212.118] CloseHandle (hObject=0x2fc) returned 1 [0212.118] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185818.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185818.wmf")) returned 1 [0212.119] SetEvent (hEvent=0x27c) returned 1 [0212.119] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185834.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185834.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0212.123] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=8578) returned 1 [0212.124] CloseHandle (hObject=0x2fc) returned 1 [0212.124] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185834.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185834.wmf")) returned 0x220 [0212.124] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185834.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185834.wmf")) returned 0x220 [0212.124] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185834.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185834.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.124] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185834.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185834.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0212.124] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.124] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.124] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185834.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185834.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0212.125] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2182, lpOverlapped=0x0) returned 1 [0212.127] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2190, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2190, lpOverlapped=0x0) returned 1 [0212.128] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0212.128] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.128] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.128] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2182, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2182, lpOverlapped=0x0) returned 1 [0212.128] FlushFileBuffers (hFile=0x2fc) returned 1 [0212.136] FlushFileBuffers (hFile=0x2f4) returned 1 [0212.140] CloseHandle (hObject=0x2fc) returned 1 [0212.140] CloseHandle (hObject=0x2f4) returned 1 [0212.140] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185834.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185834.wmf")) returned 1 [0212.142] SetEvent (hEvent=0x27c) returned 1 [0212.142] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186346.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186346.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0212.142] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=8666) returned 1 [0212.142] CloseHandle (hObject=0x2f4) returned 1 [0212.142] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186346.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186346.wmf")) returned 0x220 [0212.142] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186346.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186346.wmf")) returned 0x220 [0212.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186346.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186346.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.143] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186346.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186346.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0212.143] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.143] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.143] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186346.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186346.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0212.143] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x21da, lpOverlapped=0x0) returned 1 [0212.145] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x21e0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x21e0, lpOverlapped=0x0) returned 1 [0212.147] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0212.147] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.147] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.147] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x21da, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x21da, lpOverlapped=0x0) returned 1 [0212.147] FlushFileBuffers (hFile=0x2f4) returned 1 [0212.150] FlushFileBuffers (hFile=0x2fc) returned 1 [0212.158] CloseHandle (hObject=0x2f4) returned 1 [0212.158] CloseHandle (hObject=0x2fc) returned 1 [0212.158] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186346.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186346.wmf")) returned 1 [0212.159] SetEvent (hEvent=0x27c) returned 1 [0212.159] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186362.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186362.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0212.166] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=17662) returned 1 [0212.166] CloseHandle (hObject=0x2fc) returned 1 [0212.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186362.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186362.wmf")) returned 0x220 [0212.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186362.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186362.wmf")) returned 0x220 [0212.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186362.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186362.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.167] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186362.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186362.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0212.167] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.167] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.167] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186362.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186362.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0212.167] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x44fe, lpOverlapped=0x0) returned 1 [0212.170] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4500, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4500, lpOverlapped=0x0) returned 1 [0212.171] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0212.171] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.171] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.171] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x44fe, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x44fe, lpOverlapped=0x0) returned 1 [0212.171] FlushFileBuffers (hFile=0x2fc) returned 1 [0212.182] FlushFileBuffers (hFile=0x2f4) returned 1 [0212.184] CloseHandle (hObject=0x2fc) returned 1 [0212.184] CloseHandle (hObject=0x2f4) returned 1 [0212.184] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186362.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186362.wmf")) returned 1 [0212.185] SetEvent (hEvent=0x27c) returned 1 [0212.185] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187647.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187647.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0212.186] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=6596) returned 1 [0212.186] CloseHandle (hObject=0x2f4) returned 1 [0212.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187647.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187647.wmf")) returned 0x220 [0212.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187647.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187647.wmf")) returned 0x220 [0212.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187647.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187647.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.186] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187647.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187647.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0212.187] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.187] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.187] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187647.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187647.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0212.187] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x19c4, lpOverlapped=0x0) returned 1 [0212.189] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x19d0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x19d0, lpOverlapped=0x0) returned 1 [0212.190] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0212.190] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.190] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.190] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x19c4, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x19c4, lpOverlapped=0x0) returned 1 [0212.191] FlushFileBuffers (hFile=0x2f4) returned 1 [0212.198] FlushFileBuffers (hFile=0x2fc) returned 1 [0212.233] CloseHandle (hObject=0x2f4) returned 1 [0212.239] CloseHandle (hObject=0x2fc) returned 1 [0212.246] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187647.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187647.wmf")) returned 1 [0212.247] SetEvent (hEvent=0x27c) returned 1 [0212.247] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187817.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187817.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0212.248] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=11644) returned 1 [0212.248] CloseHandle (hObject=0x2fc) returned 1 [0212.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187817.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187817.wmf")) returned 0x220 [0212.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187817.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187817.wmf")) returned 0x220 [0212.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187817.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187817.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.249] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187817.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187817.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0212.249] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.249] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.249] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187817.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187817.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0212.250] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2d7c, lpOverlapped=0x0) returned 1 [0212.255] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2d80, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2d80, lpOverlapped=0x0) returned 1 [0212.256] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0212.256] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.256] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.256] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2d7c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2d7c, lpOverlapped=0x0) returned 1 [0212.256] FlushFileBuffers (hFile=0x2fc) returned 1 [0212.263] FlushFileBuffers (hFile=0x2f4) returned 1 [0212.278] CloseHandle (hObject=0x2fc) returned 1 [0212.278] CloseHandle (hObject=0x2f4) returned 1 [0212.279] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187817.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187817.wmf")) returned 1 [0212.280] SetEvent (hEvent=0x27c) returned 1 [0212.280] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187825.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187825.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0212.280] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=7500) returned 1 [0212.281] CloseHandle (hObject=0x2f4) returned 1 [0212.281] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187825.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187825.wmf")) returned 0x220 [0212.281] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187825.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187825.wmf")) returned 0x220 [0212.281] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187825.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187825.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.281] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187825.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187825.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0212.281] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.281] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.281] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187825.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187825.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0212.282] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1d4c, lpOverlapped=0x0) returned 1 [0212.284] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1d50, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1d50, lpOverlapped=0x0) returned 1 [0212.285] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0212.285] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.285] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.286] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1d4c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1d4c, lpOverlapped=0x0) returned 1 [0212.286] FlushFileBuffers (hFile=0x2f4) returned 1 [0212.302] FlushFileBuffers (hFile=0x2fc) returned 1 [0212.307] CloseHandle (hObject=0x2f4) returned 1 [0212.307] CloseHandle (hObject=0x2fc) returned 1 [0212.307] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187825.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187825.wmf")) returned 1 [0212.308] SetEvent (hEvent=0x27c) returned 1 [0212.308] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187835.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187835.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0212.309] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=9344) returned 1 [0212.309] CloseHandle (hObject=0x2fc) returned 1 [0212.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187835.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187835.wmf")) returned 0x220 [0212.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187835.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187835.wmf")) returned 0x220 [0212.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187835.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187835.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.310] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187835.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187835.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0212.310] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.310] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.310] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187835.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187835.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0212.311] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2480, lpOverlapped=0x0) returned 1 [0212.313] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2490, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2490, lpOverlapped=0x0) returned 1 [0212.315] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0212.315] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.315] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.315] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2480, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2480, lpOverlapped=0x0) returned 1 [0212.315] FlushFileBuffers (hFile=0x2fc) returned 1 [0212.324] FlushFileBuffers (hFile=0x2f4) returned 1 [0212.328] CloseHandle (hObject=0x2fc) returned 1 [0212.328] CloseHandle (hObject=0x2f4) returned 1 [0212.328] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187835.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187835.wmf")) returned 1 [0212.329] SetEvent (hEvent=0x27c) returned 1 [0212.329] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187839.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187839.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0212.330] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=5372) returned 1 [0212.330] CloseHandle (hObject=0x2f4) returned 1 [0212.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187839.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187839.wmf")) returned 0x220 [0212.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187839.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187839.wmf")) returned 0x220 [0212.331] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187839.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187839.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.331] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187839.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187839.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0212.331] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.331] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.331] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187839.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187839.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0212.332] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x14fc, lpOverlapped=0x0) returned 1 [0212.334] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1500, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1500, lpOverlapped=0x0) returned 1 [0212.335] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0212.335] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.335] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.335] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x14fc, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x14fc, lpOverlapped=0x0) returned 1 [0212.335] FlushFileBuffers (hFile=0x2f4) returned 1 [0212.338] FlushFileBuffers (hFile=0x2fc) returned 1 [0212.342] CloseHandle (hObject=0x2f4) returned 1 [0212.342] CloseHandle (hObject=0x2fc) returned 1 [0212.342] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187839.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187839.wmf")) returned 1 [0212.343] SetEvent (hEvent=0x27c) returned 1 [0212.343] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187847.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187847.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0212.344] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=7116) returned 1 [0212.344] CloseHandle (hObject=0x2fc) returned 1 [0212.344] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187847.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187847.wmf")) returned 0x220 [0212.344] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187847.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187847.wmf")) returned 0x220 [0212.345] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187847.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187847.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.345] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187847.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187847.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0212.345] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.345] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.345] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187847.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187847.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0212.346] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1bcc, lpOverlapped=0x0) returned 1 [0212.347] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1bd0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1bd0, lpOverlapped=0x0) returned 1 [0212.348] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0212.349] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.349] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.349] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1bcc, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1bcc, lpOverlapped=0x0) returned 1 [0212.349] FlushFileBuffers (hFile=0x2fc) returned 1 [0212.351] FlushFileBuffers (hFile=0x2f4) returned 1 [0212.352] CloseHandle (hObject=0x2fc) returned 1 [0212.352] CloseHandle (hObject=0x2f4) returned 1 [0212.352] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187847.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187847.wmf")) returned 1 [0212.386] SetEvent (hEvent=0x27c) returned 1 [0212.386] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187849.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187849.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0212.387] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=7572) returned 1 [0212.387] CloseHandle (hObject=0x2f4) returned 1 [0212.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187849.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187849.wmf")) returned 0x220 [0212.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187849.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187849.wmf")) returned 0x220 [0212.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187849.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187849.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.388] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187849.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187849.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0212.388] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.388] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.388] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187849.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187849.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0212.389] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1d94, lpOverlapped=0x0) returned 1 [0212.391] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1da0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1da0, lpOverlapped=0x0) returned 1 [0212.392] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0212.392] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.392] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.392] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1d94, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1d94, lpOverlapped=0x0) returned 1 [0212.392] FlushFileBuffers (hFile=0x2f4) returned 1 [0212.540] FlushFileBuffers (hFile=0x2fc) returned 1 [0212.541] CloseHandle (hObject=0x2f4) returned 1 [0212.541] CloseHandle (hObject=0x2fc) returned 1 [0212.541] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187849.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187849.wmf")) returned 1 [0212.542] SetEvent (hEvent=0x27c) returned 1 [0212.543] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187851.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187851.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0212.544] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=8732) returned 1 [0212.544] CloseHandle (hObject=0x2fc) returned 1 [0212.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187851.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187851.wmf")) returned 0x220 [0212.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187851.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187851.wmf")) returned 0x220 [0212.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187851.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187851.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.544] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187851.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187851.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0212.544] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.544] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.544] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187851.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187851.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0212.546] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x221c, lpOverlapped=0x0) returned 1 [0212.549] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2220, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2220, lpOverlapped=0x0) returned 1 [0212.550] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0212.550] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.550] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.550] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x221c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x221c, lpOverlapped=0x0) returned 1 [0212.550] FlushFileBuffers (hFile=0x2fc) returned 1 [0212.562] FlushFileBuffers (hFile=0x2f4) returned 1 [0212.565] CloseHandle (hObject=0x2fc) returned 1 [0212.565] CloseHandle (hObject=0x2f4) returned 1 [0212.565] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187851.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187851.wmf")) returned 1 [0212.566] SetEvent (hEvent=0x27c) returned 1 [0212.566] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187861.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0212.567] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=9108) returned 1 [0212.567] CloseHandle (hObject=0x2f4) returned 1 [0212.567] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187861.wmf")) returned 0x220 [0212.567] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187861.wmf")) returned 0x220 [0212.567] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187861.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187861.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.567] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187861.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0212.567] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.567] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.568] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187861.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187861.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0212.568] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2394, lpOverlapped=0x0) returned 1 [0212.570] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x23a0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x23a0, lpOverlapped=0x0) returned 1 [0212.571] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0212.572] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.572] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.572] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2394, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2394, lpOverlapped=0x0) returned 1 [0212.572] FlushFileBuffers (hFile=0x2f4) returned 1 [0212.582] FlushFileBuffers (hFile=0x2fc) returned 1 [0212.584] CloseHandle (hObject=0x2f4) returned 1 [0212.584] CloseHandle (hObject=0x2fc) returned 1 [0212.584] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187861.wmf")) returned 1 [0212.585] SetEvent (hEvent=0x27c) returned 1 [0212.585] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187881.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187881.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0212.586] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=4696) returned 1 [0212.586] CloseHandle (hObject=0x2fc) returned 1 [0212.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187881.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187881.wmf")) returned 0x220 [0212.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187881.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187881.wmf")) returned 0x220 [0212.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187881.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187881.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.586] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187881.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187881.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0212.586] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.586] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.586] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187881.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187881.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0212.587] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1258, lpOverlapped=0x0) returned 1 [0212.589] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1260, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1260, lpOverlapped=0x0) returned 1 [0212.592] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0212.592] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.592] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.592] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1258, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1258, lpOverlapped=0x0) returned 1 [0212.593] FlushFileBuffers (hFile=0x2fc) returned 1 [0212.595] FlushFileBuffers (hFile=0x2f4) returned 1 [0212.607] CloseHandle (hObject=0x2fc) returned 1 [0212.607] CloseHandle (hObject=0x2f4) returned 1 [0212.607] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187881.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187881.wmf")) returned 1 [0212.608] SetEvent (hEvent=0x27c) returned 1 [0212.608] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187893.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187893.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0212.610] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=5620) returned 1 [0212.610] CloseHandle (hObject=0x2f4) returned 1 [0212.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187893.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187893.wmf")) returned 0x220 [0212.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187893.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187893.wmf")) returned 0x220 [0212.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187893.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187893.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.610] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187893.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187893.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0212.611] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.611] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.611] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187893.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187893.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0212.611] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x15f4, lpOverlapped=0x0) returned 1 [0212.613] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1600, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1600, lpOverlapped=0x0) returned 1 [0212.615] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0212.615] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.615] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.616] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x15f4, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x15f4, lpOverlapped=0x0) returned 1 [0212.616] FlushFileBuffers (hFile=0x2f4) returned 1 [0212.627] FlushFileBuffers (hFile=0x2fc) returned 1 [0212.628] CloseHandle (hObject=0x2f4) returned 1 [0212.628] CloseHandle (hObject=0x2fc) returned 1 [0212.629] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187893.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187893.wmf")) returned 1 [0212.629] SetEvent (hEvent=0x27c) returned 1 [0212.630] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187921.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187921.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0212.631] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=5000) returned 1 [0212.631] CloseHandle (hObject=0x2fc) returned 1 [0212.631] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187921.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187921.wmf")) returned 0x220 [0212.631] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187921.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187921.wmf")) returned 0x220 [0212.631] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187921.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187921.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.631] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187921.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187921.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0212.631] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.632] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.632] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187921.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187921.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0212.632] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1388, lpOverlapped=0x0) returned 1 [0212.634] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1390, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1390, lpOverlapped=0x0) returned 1 [0212.635] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0212.636] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.636] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.636] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1388, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1388, lpOverlapped=0x0) returned 1 [0212.636] FlushFileBuffers (hFile=0x2fc) returned 1 [0212.650] FlushFileBuffers (hFile=0x2f4) returned 1 [0212.653] CloseHandle (hObject=0x2fc) returned 1 [0212.653] CloseHandle (hObject=0x2f4) returned 1 [0212.653] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187921.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187921.wmf")) returned 1 [0212.654] SetEvent (hEvent=0x27c) returned 1 [0212.655] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188513.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188513.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0212.655] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=12292) returned 1 [0212.655] CloseHandle (hObject=0x2f4) returned 1 [0212.655] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188513.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188513.wmf")) returned 0x220 [0212.655] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188513.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188513.wmf")) returned 0x220 [0212.656] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188513.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188513.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.656] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188513.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188513.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0212.656] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.656] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.656] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188513.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188513.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0212.657] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x3004, lpOverlapped=0x0) returned 1 [0212.659] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3010, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x3010, lpOverlapped=0x0) returned 1 [0212.660] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0212.660] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.660] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.660] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3004, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x3004, lpOverlapped=0x0) returned 1 [0212.661] FlushFileBuffers (hFile=0x2f4) returned 1 [0212.669] FlushFileBuffers (hFile=0x2fc) returned 1 [0212.673] CloseHandle (hObject=0x2f4) returned 1 [0212.673] CloseHandle (hObject=0x2fc) returned 1 [0212.673] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188513.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188513.wmf")) returned 1 [0212.674] SetEvent (hEvent=0x27c) returned 1 [0212.674] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188587.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188587.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0212.675] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=15196) returned 1 [0212.675] CloseHandle (hObject=0x2fc) returned 1 [0212.675] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188587.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188587.wmf")) returned 0x220 [0212.675] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188587.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188587.wmf")) returned 0x220 [0212.675] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188587.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188587.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.676] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188587.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188587.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0212.676] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.676] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.676] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188587.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188587.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0212.676] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x3b5c, lpOverlapped=0x0) returned 1 [0212.679] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3b60, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x3b60, lpOverlapped=0x0) returned 1 [0212.680] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0212.680] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.680] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.680] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3b5c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x3b5c, lpOverlapped=0x0) returned 1 [0212.680] FlushFileBuffers (hFile=0x2fc) returned 1 [0212.685] FlushFileBuffers (hFile=0x2f4) returned 1 [0212.695] CloseHandle (hObject=0x2fc) returned 1 [0212.695] CloseHandle (hObject=0x2f4) returned 1 [0212.695] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188587.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188587.wmf")) returned 1 [0212.697] SetEvent (hEvent=0x27c) returned 1 [0212.697] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188669.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188669.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0212.697] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=29602) returned 1 [0212.697] CloseHandle (hObject=0x2f4) returned 1 [0212.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188669.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188669.wmf")) returned 0x220 [0212.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188669.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188669.wmf")) returned 0x220 [0212.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188669.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188669.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.698] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188669.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188669.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0212.698] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.698] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.698] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188669.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188669.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0212.699] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x73a2, lpOverlapped=0x0) returned 1 [0212.702] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x73b0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x73b0, lpOverlapped=0x0) returned 1 [0212.703] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0212.703] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.703] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.703] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x73a2, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x73a2, lpOverlapped=0x0) returned 1 [0212.704] FlushFileBuffers (hFile=0x2f4) returned 1 [0212.715] FlushFileBuffers (hFile=0x2fc) returned 1 [0212.721] CloseHandle (hObject=0x2f4) returned 1 [0212.721] CloseHandle (hObject=0x2fc) returned 1 [0212.722] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188669.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188669.wmf")) returned 1 [0212.723] SetEvent (hEvent=0x27c) returned 1 [0212.723] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195248.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195248.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0212.724] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=7332) returned 1 [0212.724] CloseHandle (hObject=0x2fc) returned 1 [0212.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195248.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195248.wmf")) returned 0x220 [0212.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195248.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195248.wmf")) returned 0x220 [0212.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195248.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195248.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195248.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195248.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0212.725] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.725] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195248.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195248.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0212.725] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1ca4, lpOverlapped=0x0) returned 1 [0212.732] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1cb0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1cb0, lpOverlapped=0x0) returned 1 [0212.733] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0212.734] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.734] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.734] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1ca4, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1ca4, lpOverlapped=0x0) returned 1 [0212.734] FlushFileBuffers (hFile=0x2fc) returned 1 [0212.741] FlushFileBuffers (hFile=0x2f4) returned 1 [0212.743] CloseHandle (hObject=0x2fc) returned 1 [0212.743] CloseHandle (hObject=0x2f4) returned 1 [0212.743] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195248.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195248.wmf")) returned 1 [0212.744] SetEvent (hEvent=0x27c) returned 1 [0212.745] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195260.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195260.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0212.749] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=8314) returned 1 [0212.749] CloseHandle (hObject=0x2f4) returned 1 [0212.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195260.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195260.wmf")) returned 0x220 [0212.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195260.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195260.wmf")) returned 0x220 [0212.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195260.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195260.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.749] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195260.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195260.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0212.749] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.749] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.749] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195260.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195260.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0212.750] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x207a, lpOverlapped=0x0) returned 1 [0212.756] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2080, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2080, lpOverlapped=0x0) returned 1 [0212.757] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0212.757] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.757] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.757] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x207a, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x207a, lpOverlapped=0x0) returned 1 [0212.758] FlushFileBuffers (hFile=0x2f4) returned 1 [0212.764] FlushFileBuffers (hFile=0x2fc) returned 1 [0212.767] CloseHandle (hObject=0x2f4) returned 1 [0212.767] CloseHandle (hObject=0x2fc) returned 1 [0212.767] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195260.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195260.wmf")) returned 1 [0212.768] SetEvent (hEvent=0x27c) returned 1 [0212.768] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195342.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195342.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0212.769] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=21328) returned 1 [0212.769] CloseHandle (hObject=0x2fc) returned 1 [0212.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195342.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195342.wmf")) returned 0x220 [0212.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195342.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195342.wmf")) returned 0x220 [0212.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195342.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195342.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.770] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195342.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195342.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0212.770] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.770] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.770] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195342.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195342.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0212.771] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x5350, lpOverlapped=0x0) returned 1 [0212.775] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5360, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x5360, lpOverlapped=0x0) returned 1 [0212.776] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0212.776] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.776] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.776] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5350, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x5350, lpOverlapped=0x0) returned 1 [0212.777] FlushFileBuffers (hFile=0x2fc) returned 1 [0212.785] FlushFileBuffers (hFile=0x2f4) returned 1 [0212.789] CloseHandle (hObject=0x2fc) returned 1 [0212.789] CloseHandle (hObject=0x2f4) returned 1 [0212.789] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195342.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195342.wmf")) returned 1 [0212.790] SetEvent (hEvent=0x27c) returned 1 [0212.790] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195772.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195772.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0212.792] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3680) returned 1 [0212.792] CloseHandle (hObject=0x2f4) returned 1 [0212.792] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195772.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195772.wmf")) returned 0x220 [0212.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195772.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195772.wmf")) returned 0x220 [0212.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195772.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195772.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.793] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195772.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195772.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0212.793] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.793] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.793] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195772.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195772.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0212.794] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xe60, lpOverlapped=0x0) returned 1 [0212.795] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xe70, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xe70, lpOverlapped=0x0) returned 1 [0212.796] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0212.796] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.797] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.797] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xe60, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xe60, lpOverlapped=0x0) returned 1 [0212.797] FlushFileBuffers (hFile=0x2f4) returned 1 [0212.807] FlushFileBuffers (hFile=0x2fc) returned 1 [0212.810] CloseHandle (hObject=0x2f4) returned 1 [0212.810] CloseHandle (hObject=0x2fc) returned 1 [0212.810] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195772.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195772.wmf")) returned 1 [0212.811] SetEvent (hEvent=0x27c) returned 1 [0212.811] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196060.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196060.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0212.813] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=4750) returned 1 [0212.813] CloseHandle (hObject=0x2fc) returned 1 [0212.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196060.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196060.wmf")) returned 0x220 [0212.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196060.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196060.wmf")) returned 0x220 [0212.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196060.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196060.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.813] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196060.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196060.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0212.813] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.813] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.813] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196060.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196060.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0212.814] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x128e, lpOverlapped=0x0) returned 1 [0212.816] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1290, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1290, lpOverlapped=0x0) returned 1 [0212.817] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0212.817] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.817] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.817] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x128e, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x128e, lpOverlapped=0x0) returned 1 [0212.817] FlushFileBuffers (hFile=0x2fc) returned 1 [0212.828] FlushFileBuffers (hFile=0x2f4) returned 1 [0212.830] CloseHandle (hObject=0x2fc) returned 1 [0212.830] CloseHandle (hObject=0x2f4) returned 1 [0212.830] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196060.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196060.wmf")) returned 1 [0212.831] SetEvent (hEvent=0x27c) returned 1 [0212.831] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196142.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196142.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0212.832] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3826) returned 1 [0212.832] CloseHandle (hObject=0x2f4) returned 1 [0212.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196142.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196142.wmf")) returned 0x220 [0212.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196142.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196142.wmf")) returned 0x220 [0212.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196142.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196142.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.833] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196142.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196142.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0212.833] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.833] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.833] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196142.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196142.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0212.833] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xef2, lpOverlapped=0x0) returned 1 [0212.848] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf00, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf00, lpOverlapped=0x0) returned 1 [0212.849] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0212.850] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.850] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.850] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xef2, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xef2, lpOverlapped=0x0) returned 1 [0212.850] FlushFileBuffers (hFile=0x2f4) returned 1 [0212.858] FlushFileBuffers (hFile=0x2fc) returned 1 [0212.863] CloseHandle (hObject=0x2f4) returned 1 [0212.863] CloseHandle (hObject=0x2fc) returned 1 [0212.863] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196142.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196142.wmf")) returned 1 [0212.864] SetEvent (hEvent=0x27c) returned 1 [0212.864] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196358.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196358.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0212.865] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=6912) returned 1 [0212.865] CloseHandle (hObject=0x2fc) returned 1 [0212.866] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196358.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196358.wmf")) returned 0x220 [0212.866] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196358.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196358.wmf")) returned 0x220 [0212.866] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196358.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196358.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.866] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196358.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196358.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0212.866] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.866] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.866] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196358.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196358.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0212.867] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1b00, lpOverlapped=0x0) returned 1 [0212.868] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1b10, lpOverlapped=0x0) returned 1 [0212.870] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0212.870] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.870] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.870] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1b00, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1b00, lpOverlapped=0x0) returned 1 [0212.870] FlushFileBuffers (hFile=0x2fc) returned 1 [0212.882] FlushFileBuffers (hFile=0x2f4) returned 1 [0212.884] CloseHandle (hObject=0x2fc) returned 1 [0212.884] CloseHandle (hObject=0x2f4) returned 1 [0212.884] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196358.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196358.wmf")) returned 1 [0212.886] SetEvent (hEvent=0x27c) returned 1 [0212.886] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197979.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0197979.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0212.886] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=40230) returned 1 [0212.887] CloseHandle (hObject=0x2f4) returned 1 [0212.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197979.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0197979.wmf")) returned 0x220 [0212.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197979.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0197979.wmf")) returned 0x220 [0212.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197979.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0197979.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.887] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197979.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0197979.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0212.887] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.887] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.887] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197979.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0197979.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0212.888] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x9d26, lpOverlapped=0x0) returned 1 [0212.891] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x9d30, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x9d30, lpOverlapped=0x0) returned 1 [0212.892] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0212.892] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.892] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.892] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x9d26, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x9d26, lpOverlapped=0x0) returned 1 [0212.893] FlushFileBuffers (hFile=0x2f4) returned 1 [0212.901] FlushFileBuffers (hFile=0x2fc) returned 1 [0212.907] CloseHandle (hObject=0x2f4) returned 1 [0212.908] CloseHandle (hObject=0x2fc) returned 1 [0212.908] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197979.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0197979.wmf")) returned 1 [0212.909] SetEvent (hEvent=0x27c) returned 1 [0212.909] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198016.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198016.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0212.910] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=33948) returned 1 [0212.910] CloseHandle (hObject=0x2fc) returned 1 [0212.911] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198016.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198016.wmf")) returned 0x220 [0212.911] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198016.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198016.wmf")) returned 0x220 [0212.911] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198016.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198016.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.911] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198016.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198016.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0212.911] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.911] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.911] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198016.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198016.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0212.912] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x849c, lpOverlapped=0x0) returned 1 [0212.915] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x84a0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x84a0, lpOverlapped=0x0) returned 1 [0212.916] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0212.917] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.917] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.917] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x849c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x849c, lpOverlapped=0x0) returned 1 [0212.917] FlushFileBuffers (hFile=0x2fc) returned 1 [0212.928] FlushFileBuffers (hFile=0x2f4) returned 1 [0212.930] CloseHandle (hObject=0x2fc) returned 1 [0212.930] CloseHandle (hObject=0x2f4) returned 1 [0212.931] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198016.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198016.wmf")) returned 1 [0212.932] SetEvent (hEvent=0x27c) returned 1 [0212.932] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198021.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198021.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0212.933] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=34912) returned 1 [0212.933] CloseHandle (hObject=0x2f4) returned 1 [0212.933] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198021.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198021.wmf")) returned 0x220 [0212.933] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198021.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198021.wmf")) returned 0x220 [0212.933] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198021.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198021.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.933] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198021.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198021.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0212.933] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.933] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.933] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198021.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198021.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0212.934] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x8860, lpOverlapped=0x0) returned 1 [0212.937] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x8870, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x8870, lpOverlapped=0x0) returned 1 [0212.938] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0212.938] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.938] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.938] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x8860, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x8860, lpOverlapped=0x0) returned 1 [0212.939] FlushFileBuffers (hFile=0x2f4) returned 1 [0212.950] FlushFileBuffers (hFile=0x2fc) returned 1 [0212.953] CloseHandle (hObject=0x2f4) returned 1 [0212.953] CloseHandle (hObject=0x2fc) returned 1 [0212.953] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198021.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198021.wmf")) returned 1 [0212.954] SetEvent (hEvent=0x27c) returned 1 [0212.954] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198025.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198025.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0212.956] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=15566) returned 1 [0212.956] CloseHandle (hObject=0x2fc) returned 1 [0212.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198025.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198025.wmf")) returned 0x220 [0212.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198025.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198025.wmf")) returned 0x220 [0212.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198025.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198025.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.956] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198025.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198025.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0212.956] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.956] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.956] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198025.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198025.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0212.957] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x3cce, lpOverlapped=0x0) returned 1 [0212.961] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3cd0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x3cd0, lpOverlapped=0x0) returned 1 [0212.962] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0212.962] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.962] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.962] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3cce, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x3cce, lpOverlapped=0x0) returned 1 [0212.962] FlushFileBuffers (hFile=0x2fc) returned 1 [0212.973] FlushFileBuffers (hFile=0x2f4) returned 1 [0212.975] CloseHandle (hObject=0x2fc) returned 1 [0212.975] CloseHandle (hObject=0x2f4) returned 1 [0212.975] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198025.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198025.wmf")) returned 1 [0212.976] SetEvent (hEvent=0x27c) returned 1 [0212.976] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198113.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198113.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0212.977] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=42272) returned 1 [0212.977] CloseHandle (hObject=0x2f4) returned 1 [0212.977] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198113.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198113.wmf")) returned 0x220 [0212.977] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198113.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198113.wmf")) returned 0x220 [0212.977] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198113.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198113.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0212.978] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198113.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198113.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0212.978] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.978] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0212.978] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198113.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198113.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0212.978] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xa520, lpOverlapped=0x0) returned 1 [0212.982] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xa530, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xa530, lpOverlapped=0x0) returned 1 [0212.984] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0212.984] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.984] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0212.984] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xa520, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xa520, lpOverlapped=0x0) returned 1 [0212.984] FlushFileBuffers (hFile=0x2f4) returned 1 [0213.000] FlushFileBuffers (hFile=0x2fc) returned 1 [0213.003] CloseHandle (hObject=0x2f4) returned 1 [0213.004] CloseHandle (hObject=0x2fc) returned 1 [0213.004] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198113.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198113.wmf")) returned 1 [0213.005] SetEvent (hEvent=0x27c) returned 1 [0213.005] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198234.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198234.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0213.008] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=42654) returned 1 [0213.008] CloseHandle (hObject=0x2fc) returned 1 [0213.008] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198234.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198234.wmf")) returned 0x220 [0213.008] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198234.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198234.wmf")) returned 0x220 [0213.008] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198234.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198234.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0213.008] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198234.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198234.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0213.008] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0213.008] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0213.008] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198234.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198234.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0213.009] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xa69e, lpOverlapped=0x0) returned 1 [0213.013] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xa6a0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xa6a0, lpOverlapped=0x0) returned 1 [0213.014] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0213.015] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0213.015] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0213.015] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xa69e, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xa69e, lpOverlapped=0x0) returned 1 [0213.015] FlushFileBuffers (hFile=0x2fc) returned 1 [0213.022] FlushFileBuffers (hFile=0x2f4) returned 1 [0213.028] CloseHandle (hObject=0x2fc) returned 1 [0213.028] CloseHandle (hObject=0x2f4) returned 1 [0213.028] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198234.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198234.wmf")) returned 1 [0213.029] SetEvent (hEvent=0x27c) returned 1 [0213.029] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198377.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198377.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0213.030] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=40300) returned 1 [0213.031] CloseHandle (hObject=0x2f4) returned 1 [0213.031] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198377.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198377.wmf")) returned 0x220 [0213.031] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198377.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198377.wmf")) returned 0x220 [0213.031] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198377.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198377.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0213.031] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198377.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198377.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0213.031] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0213.031] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0213.031] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198377.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198377.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0213.032] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x9d6c, lpOverlapped=0x0) returned 1 [0213.035] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x9d70, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x9d70, lpOverlapped=0x0) returned 1 [0213.037] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0213.038] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0213.038] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0213.038] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x9d6c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x9d6c, lpOverlapped=0x0) returned 1 [0213.038] FlushFileBuffers (hFile=0x2f4) returned 1 [0213.049] FlushFileBuffers (hFile=0x2fc) returned 1 [0213.052] CloseHandle (hObject=0x2f4) returned 1 [0213.052] CloseHandle (hObject=0x2fc) returned 1 [0213.052] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198377.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198377.wmf")) returned 1 [0213.054] SetEvent (hEvent=0x27c) returned 1 [0213.054] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198494.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198494.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0213.054] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=44552) returned 1 [0213.054] CloseHandle (hObject=0x2fc) returned 1 [0213.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198494.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198494.wmf")) returned 0x220 [0213.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198494.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198494.wmf")) returned 0x220 [0213.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198494.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198494.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0213.055] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198494.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198494.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0213.055] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0213.055] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0213.055] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198494.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198494.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0213.056] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xae08, lpOverlapped=0x0) returned 1 [0213.059] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xae10, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xae10, lpOverlapped=0x0) returned 1 [0213.061] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0213.061] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0213.061] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0213.061] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xae08, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xae08, lpOverlapped=0x0) returned 1 [0213.061] FlushFileBuffers (hFile=0x2fc) returned 1 [0213.073] FlushFileBuffers (hFile=0x2f4) returned 1 [0213.076] CloseHandle (hObject=0x2fc) returned 1 [0213.076] CloseHandle (hObject=0x2f4) returned 1 [0213.076] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198494.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198494.wmf")) returned 1 [0213.077] SetEvent (hEvent=0x27c) returned 1 [0213.077] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199279.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0213.079] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=29006) returned 1 [0213.079] CloseHandle (hObject=0x2f4) returned 1 [0213.079] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199279.wmf")) returned 0x220 [0213.079] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199279.wmf")) returned 0x220 [0213.079] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199279.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199279.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0213.079] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199279.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0213.079] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0213.079] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0213.079] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199279.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199279.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0213.080] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x714e, lpOverlapped=0x0) returned 1 [0213.084] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7150, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x7150, lpOverlapped=0x0) returned 1 [0213.085] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0213.086] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0213.086] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0213.086] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x714e, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x714e, lpOverlapped=0x0) returned 1 [0213.086] FlushFileBuffers (hFile=0x2f4) returned 1 [0213.101] FlushFileBuffers (hFile=0x2fc) returned 1 [0213.103] CloseHandle (hObject=0x2f4) returned 1 [0213.103] CloseHandle (hObject=0x2fc) returned 1 [0213.103] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199279.wmf")) returned 1 [0213.104] SetEvent (hEvent=0x27c) returned 1 [0213.104] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199307.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199307.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0213.106] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=50046) returned 1 [0213.106] CloseHandle (hObject=0x2fc) returned 1 [0213.106] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199307.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199307.wmf")) returned 0x220 [0213.106] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199307.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199307.wmf")) returned 0x220 [0213.106] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199307.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199307.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0213.106] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199307.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199307.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0213.106] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0213.107] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0213.107] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199307.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199307.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0213.107] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xc37e, lpOverlapped=0x0) returned 1 [0213.111] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xc380, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xc380, lpOverlapped=0x0) returned 1 [0213.113] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0213.113] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0213.113] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0213.113] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xc37e, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xc37e, lpOverlapped=0x0) returned 1 [0213.114] FlushFileBuffers (hFile=0x2fc) returned 1 [0213.339] FlushFileBuffers (hFile=0x2f4) returned 1 [0213.340] CloseHandle (hObject=0x2fc) returned 1 [0213.340] CloseHandle (hObject=0x2f4) returned 1 [0213.340] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199307.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199307.wmf")) returned 1 [0213.341] SetEvent (hEvent=0x27c) returned 1 [0213.341] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200273.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200273.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0213.345] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=31302) returned 1 [0213.345] CloseHandle (hObject=0x2f4) returned 1 [0213.345] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200273.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200273.wmf")) returned 0x220 [0213.345] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200273.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200273.wmf")) returned 0x220 [0213.345] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200273.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200273.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0213.345] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200273.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200273.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0213.345] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0213.346] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0213.346] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200273.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200273.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0213.347] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x7a46, lpOverlapped=0x0) returned 1 [0213.350] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7a50, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x7a50, lpOverlapped=0x0) returned 1 [0213.353] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0213.353] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0213.353] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0213.353] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7a46, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x7a46, lpOverlapped=0x0) returned 1 [0213.353] FlushFileBuffers (hFile=0x2f4) returned 1 [0213.358] FlushFileBuffers (hFile=0x2fc) returned 1 [0213.360] CloseHandle (hObject=0x2f4) returned 1 [0213.360] CloseHandle (hObject=0x2fc) returned 1 [0213.360] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200273.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200273.wmf")) returned 1 [0213.362] SetEvent (hEvent=0x27c) returned 1 [0213.362] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200279.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0213.364] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=19466) returned 1 [0213.364] CloseHandle (hObject=0x2fc) returned 1 [0213.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200279.wmf")) returned 0x220 [0213.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200279.wmf")) returned 0x220 [0213.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200279.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200279.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0213.364] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200279.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0213.364] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0213.364] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0213.364] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200279.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200279.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0213.366] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4c0a, lpOverlapped=0x0) returned 1 [0213.368] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4c10, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4c10, lpOverlapped=0x0) returned 1 [0213.370] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0213.370] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0213.370] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0213.370] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4c0a, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4c0a, lpOverlapped=0x0) returned 1 [0213.370] FlushFileBuffers (hFile=0x2fc) returned 1 [0213.373] FlushFileBuffers (hFile=0x2f4) returned 1 [0213.375] CloseHandle (hObject=0x2fc) returned 1 [0213.375] CloseHandle (hObject=0x2f4) returned 1 [0213.375] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200279.wmf")) returned 1 [0213.376] SetEvent (hEvent=0x27c) returned 1 [0213.377] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200289.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200289.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0213.378] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=41136) returned 1 [0213.378] CloseHandle (hObject=0x2f4) returned 1 [0213.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200289.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200289.wmf")) returned 0x220 [0213.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200289.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200289.wmf")) returned 0x220 [0213.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200289.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200289.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0213.380] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200289.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200289.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0213.381] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0213.381] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0213.381] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200289.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200289.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0213.382] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xa0b0, lpOverlapped=0x0) returned 1 [0213.386] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xa0c0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xa0c0, lpOverlapped=0x0) returned 1 [0213.388] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0213.388] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0213.388] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0213.389] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xa0b0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xa0b0, lpOverlapped=0x0) returned 1 [0213.389] FlushFileBuffers (hFile=0x2f4) returned 1 [0213.392] FlushFileBuffers (hFile=0x2fc) returned 1 [0213.394] CloseHandle (hObject=0x2f4) returned 1 [0213.394] CloseHandle (hObject=0x2fc) returned 1 [0213.394] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200289.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200289.wmf")) returned 1 [0213.396] SetEvent (hEvent=0x27c) returned 1 [0213.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200377.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200377.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0213.397] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=20232) returned 1 [0213.397] CloseHandle (hObject=0x2fc) returned 1 [0213.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200377.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200377.wmf")) returned 0x220 [0213.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200377.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200377.wmf")) returned 0x220 [0213.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200377.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200377.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0213.398] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200377.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200377.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0213.398] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0213.398] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0213.398] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200377.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200377.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0213.403] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4f08, lpOverlapped=0x0) returned 1 [0213.406] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4f10, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4f10, lpOverlapped=0x0) returned 1 [0213.407] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0213.408] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0213.408] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0213.408] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4f08, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4f08, lpOverlapped=0x0) returned 1 [0213.408] FlushFileBuffers (hFile=0x2fc) returned 1 [0213.411] FlushFileBuffers (hFile=0x2f4) returned 1 [0213.412] CloseHandle (hObject=0x2fc) returned 1 [0213.412] CloseHandle (hObject=0x2f4) returned 1 [0213.412] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200377.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200377.wmf")) returned 1 [0213.414] SetEvent (hEvent=0x27c) returned 1 [0213.414] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200383.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200383.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0213.415] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=21400) returned 1 [0213.415] CloseHandle (hObject=0x2f4) returned 1 [0213.415] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200383.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200383.wmf")) returned 0x220 [0213.416] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200383.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200383.wmf")) returned 0x220 [0213.416] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200383.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200383.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0213.416] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200383.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200383.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0213.416] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0213.416] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0213.416] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200383.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200383.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0213.418] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x5398, lpOverlapped=0x0) returned 1 [0213.420] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x53a0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x53a0, lpOverlapped=0x0) returned 1 [0213.422] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0213.422] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0213.422] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0213.422] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5398, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x5398, lpOverlapped=0x0) returned 1 [0213.422] FlushFileBuffers (hFile=0x2f4) returned 1 [0213.425] FlushFileBuffers (hFile=0x2fc) returned 1 [0213.427] CloseHandle (hObject=0x2f4) returned 1 [0213.427] CloseHandle (hObject=0x2fc) returned 1 [0213.427] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200383.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200383.wmf")) returned 1 [0213.428] SetEvent (hEvent=0x27c) returned 1 [0213.428] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200467.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200467.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0213.430] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=13934) returned 1 [0213.430] CloseHandle (hObject=0x2fc) returned 1 [0213.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200467.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200467.wmf")) returned 0x220 [0213.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200467.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200467.wmf")) returned 0x220 [0213.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200467.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200467.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0213.430] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200467.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200467.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0213.431] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0213.431] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0213.431] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200467.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200467.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0213.432] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x366e, lpOverlapped=0x0) returned 1 [0213.434] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3670, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x3670, lpOverlapped=0x0) returned 1 [0213.436] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0213.436] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0213.436] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0213.436] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x366e, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x366e, lpOverlapped=0x0) returned 1 [0213.436] FlushFileBuffers (hFile=0x2fc) returned 1 [0213.438] FlushFileBuffers (hFile=0x2f4) returned 1 [0213.439] CloseHandle (hObject=0x2fc) returned 1 [0213.439] CloseHandle (hObject=0x2f4) returned 1 [0213.440] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200467.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200467.wmf")) returned 1 [0213.441] SetEvent (hEvent=0x27c) returned 1 [0213.441] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200521.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200521.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0213.442] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=10046) returned 1 [0213.442] CloseHandle (hObject=0x2f4) returned 1 [0213.442] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200521.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200521.wmf")) returned 0x220 [0213.442] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200521.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200521.wmf")) returned 0x220 [0213.442] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200521.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200521.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0213.442] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200521.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200521.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0213.442] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0213.442] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0213.442] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200521.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200521.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0213.456] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x273e, lpOverlapped=0x0) returned 1 [0213.458] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2740, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2740, lpOverlapped=0x0) returned 1 [0213.459] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0213.460] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0213.460] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0213.460] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x273e, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x273e, lpOverlapped=0x0) returned 1 [0213.460] FlushFileBuffers (hFile=0x2f4) returned 1 [0213.466] FlushFileBuffers (hFile=0x2fc) returned 1 [0213.467] CloseHandle (hObject=0x2f4) returned 1 [0213.467] CloseHandle (hObject=0x2fc) returned 1 [0213.467] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200521.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200521.wmf")) returned 1 [0213.468] SetEvent (hEvent=0x27c) returned 1 [0213.468] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200611.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200611.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0213.470] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3894) returned 1 [0213.470] CloseHandle (hObject=0x2fc) returned 1 [0213.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200611.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200611.wmf")) returned 0x220 [0213.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200611.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200611.wmf")) returned 0x220 [0213.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200611.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200611.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0213.470] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200611.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200611.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0213.470] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0213.470] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0213.470] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200611.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200611.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0213.471] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xf36, lpOverlapped=0x0) returned 1 [0213.473] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf40, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf40, lpOverlapped=0x0) returned 1 [0213.474] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0213.474] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0213.474] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0213.474] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf36, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xf36, lpOverlapped=0x0) returned 1 [0213.474] FlushFileBuffers (hFile=0x2fc) returned 1 [0213.477] FlushFileBuffers (hFile=0x2f4) returned 1 [0213.549] CloseHandle (hObject=0x2fc) returned 1 [0213.549] CloseHandle (hObject=0x2f4) returned 1 [0213.549] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200611.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200611.wmf")) returned 1 [0213.550] SetEvent (hEvent=0x27c) returned 1 [0213.550] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0211981.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0211981.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0213.551] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=28276) returned 1 [0213.551] CloseHandle (hObject=0x2f4) returned 1 [0213.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0211981.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0211981.wmf")) returned 0x220 [0213.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0211981.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0211981.wmf")) returned 0x220 [0213.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0211981.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0211981.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0213.552] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0211981.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0211981.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0213.552] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0213.552] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0213.552] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0211981.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0211981.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0213.553] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x6e74, lpOverlapped=0x0) returned 1 [0213.555] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x6e80, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x6e80, lpOverlapped=0x0) returned 1 [0213.556] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0213.556] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0213.556] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0213.556] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x6e74, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x6e74, lpOverlapped=0x0) returned 1 [0213.557] FlushFileBuffers (hFile=0x2f4) returned 1 [0213.559] FlushFileBuffers (hFile=0x2fc) returned 1 [0213.561] CloseHandle (hObject=0x2f4) returned 1 [0213.561] CloseHandle (hObject=0x2fc) returned 1 [0213.561] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0211981.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0211981.wmf")) returned 1 [0213.562] SetEvent (hEvent=0x27c) returned 1 [0213.562] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212299.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212299.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0213.564] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=6158) returned 1 [0213.564] CloseHandle (hObject=0x2fc) returned 1 [0213.564] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212299.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212299.wmf")) returned 0x220 [0213.564] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212299.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212299.wmf")) returned 0x220 [0213.564] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212299.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212299.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0213.564] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212299.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212299.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0213.564] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0213.564] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0213.564] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212299.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212299.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0213.565] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x180e, lpOverlapped=0x0) returned 1 [0213.567] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1810, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1810, lpOverlapped=0x0) returned 1 [0213.568] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0213.568] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0213.568] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0213.568] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x180e, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x180e, lpOverlapped=0x0) returned 1 [0213.568] FlushFileBuffers (hFile=0x2fc) returned 1 [0213.570] FlushFileBuffers (hFile=0x2f4) returned 1 [0213.572] CloseHandle (hObject=0x2fc) returned 1 [0213.572] CloseHandle (hObject=0x2f4) returned 1 [0213.572] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212299.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212299.wmf")) returned 1 [0213.573] SetEvent (hEvent=0x27c) returned 1 [0213.573] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212601.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212601.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0213.574] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=9676) returned 1 [0213.574] CloseHandle (hObject=0x2f4) returned 1 [0213.574] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212601.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212601.wmf")) returned 0x220 [0213.574] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212601.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212601.wmf")) returned 0x220 [0213.574] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212601.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212601.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0213.574] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212601.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212601.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0213.574] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0213.574] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0213.574] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212601.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212601.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0213.575] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x25cc, lpOverlapped=0x0) returned 1 [0213.576] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x25d0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x25d0, lpOverlapped=0x0) returned 1 [0213.577] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0213.578] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0213.578] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0213.578] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x25cc, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x25cc, lpOverlapped=0x0) returned 1 [0213.578] FlushFileBuffers (hFile=0x2f4) returned 1 [0213.580] FlushFileBuffers (hFile=0x2fc) returned 1 [0213.581] CloseHandle (hObject=0x2f4) returned 1 [0213.581] CloseHandle (hObject=0x2fc) returned 1 [0213.581] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212601.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212601.wmf")) returned 1 [0213.582] SetEvent (hEvent=0x27c) returned 1 [0213.582] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212685.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212685.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0213.583] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=6554) returned 1 [0213.583] CloseHandle (hObject=0x2fc) returned 1 [0213.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212685.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212685.wmf")) returned 0x220 [0213.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212685.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212685.wmf")) returned 0x220 [0213.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212685.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212685.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0213.583] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212685.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212685.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0213.584] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0213.584] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0213.584] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212685.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212685.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0213.584] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x199a, lpOverlapped=0x0) returned 1 [0213.586] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x19a0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x19a0, lpOverlapped=0x0) returned 1 [0213.587] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0213.587] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0213.587] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0213.588] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x199a, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x199a, lpOverlapped=0x0) returned 1 [0213.588] FlushFileBuffers (hFile=0x2fc) returned 1 [0213.590] FlushFileBuffers (hFile=0x2f4) returned 1 [0213.591] CloseHandle (hObject=0x2fc) returned 1 [0213.591] CloseHandle (hObject=0x2f4) returned 1 [0213.591] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212685.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212685.wmf")) returned 1 [0213.592] SetEvent (hEvent=0x27c) returned 1 [0213.593] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212751.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212751.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0213.595] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2060) returned 1 [0213.595] CloseHandle (hObject=0x2f4) returned 1 [0213.595] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212751.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212751.wmf")) returned 0x220 [0213.595] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212751.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212751.wmf")) returned 0x220 [0213.595] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212751.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212751.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0213.595] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212751.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212751.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0213.595] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0213.595] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0213.595] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212751.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212751.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0213.596] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x80c, lpOverlapped=0x0) returned 1 [0213.597] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x810, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x810, lpOverlapped=0x0) returned 1 [0213.598] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0213.599] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0213.599] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0213.599] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x80c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x80c, lpOverlapped=0x0) returned 1 [0213.599] FlushFileBuffers (hFile=0x2f4) returned 1 [0213.601] FlushFileBuffers (hFile=0x2fc) returned 1 [0213.602] CloseHandle (hObject=0x2f4) returned 1 [0213.602] CloseHandle (hObject=0x2fc) returned 1 [0213.602] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212751.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212751.wmf")) returned 1 [0213.603] SetEvent (hEvent=0x27c) returned 1 [0213.605] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212953.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212953.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0213.605] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=7498) returned 1 [0213.606] CloseHandle (hObject=0x2fc) returned 1 [0213.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212953.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212953.wmf")) returned 0x220 [0213.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212953.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212953.wmf")) returned 0x220 [0213.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212953.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212953.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0213.606] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212953.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212953.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0213.606] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0213.606] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0213.606] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212953.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212953.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0213.607] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1d4a, lpOverlapped=0x0) returned 1 [0213.608] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1d50, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1d50, lpOverlapped=0x0) returned 1 [0213.610] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0213.610] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0213.610] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0213.610] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1d4a, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1d4a, lpOverlapped=0x0) returned 1 [0213.610] FlushFileBuffers (hFile=0x2fc) returned 1 [0213.615] FlushFileBuffers (hFile=0x2f4) returned 1 [0213.616] CloseHandle (hObject=0x2fc) returned 1 [0213.616] CloseHandle (hObject=0x2f4) returned 1 [0213.616] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212953.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212953.wmf")) returned 1 [0213.617] SetEvent (hEvent=0x27c) returned 1 [0213.618] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213243.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0213243.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0213.619] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2652) returned 1 [0213.619] CloseHandle (hObject=0x2f4) returned 1 [0213.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213243.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0213243.wmf")) returned 0x220 [0213.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213243.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0213243.wmf")) returned 0x220 [0213.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213243.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0213243.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0213.619] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213243.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0213243.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0213.619] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0213.619] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0213.619] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213243.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0213243.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0213.620] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xa5c, lpOverlapped=0x0) returned 1 [0213.622] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xa60, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xa60, lpOverlapped=0x0) returned 1 [0213.623] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0213.624] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0213.624] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0213.624] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xa5c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xa5c, lpOverlapped=0x0) returned 1 [0213.624] FlushFileBuffers (hFile=0x2f4) returned 1 [0213.626] FlushFileBuffers (hFile=0x2fc) returned 1 [0213.627] CloseHandle (hObject=0x2f4) returned 1 [0213.627] CloseHandle (hObject=0x2fc) returned 1 [0213.627] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213243.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0213243.wmf")) returned 1 [0213.628] SetEvent (hEvent=0x27c) returned 1 [0213.628] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213449.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0213449.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0213.630] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3840) returned 1 [0213.630] CloseHandle (hObject=0x2fc) returned 1 [0213.630] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213449.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0213449.wmf")) returned 0x220 [0213.630] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213449.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0213449.wmf")) returned 0x220 [0213.630] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213449.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0213449.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0213.631] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213449.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0213449.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0213.631] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0213.631] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0213.631] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213449.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0213449.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0213.632] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xf00, lpOverlapped=0x0) returned 1 [0213.633] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf10, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf10, lpOverlapped=0x0) returned 1 [0213.634] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0213.634] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0213.634] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0213.635] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf00, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xf00, lpOverlapped=0x0) returned 1 [0213.635] FlushFileBuffers (hFile=0x2fc) returned 1 [0213.636] FlushFileBuffers (hFile=0x2f4) returned 1 [0213.950] CloseHandle (hObject=0x2fc) returned 1 [0213.950] CloseHandle (hObject=0x2f4) returned 1 [0213.950] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213449.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0213449.wmf")) returned 1 [0213.951] SetEvent (hEvent=0x27c) returned 1 [0213.951] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216612.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216612.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0213.952] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=9442) returned 1 [0213.952] CloseHandle (hObject=0x2f4) returned 1 [0213.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216612.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216612.wmf")) returned 0x220 [0213.953] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216612.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216612.wmf")) returned 0x220 [0213.953] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216612.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216612.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0213.953] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216612.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216612.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0213.953] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0213.953] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0213.953] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216612.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216612.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0213.954] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x24e2, lpOverlapped=0x0) returned 1 [0213.955] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x24f0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x24f0, lpOverlapped=0x0) returned 1 [0213.958] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0213.958] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0213.958] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0213.958] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x24e2, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x24e2, lpOverlapped=0x0) returned 1 [0213.959] FlushFileBuffers (hFile=0x2f4) returned 1 [0213.961] FlushFileBuffers (hFile=0x2fc) returned 1 [0213.969] CloseHandle (hObject=0x2f4) returned 1 [0213.969] CloseHandle (hObject=0x2fc) returned 1 [0213.969] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216612.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216612.wmf")) returned 1 [0213.970] SetEvent (hEvent=0x27c) returned 1 [0213.970] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217262.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0213.971] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=5252) returned 1 [0213.971] CloseHandle (hObject=0x2fc) returned 1 [0213.971] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217262.wmf")) returned 0x220 [0213.971] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217262.wmf")) returned 0x220 [0213.971] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217262.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217262.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0213.971] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217262.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0213.971] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0213.971] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0213.971] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217262.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217262.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0213.972] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1484, lpOverlapped=0x0) returned 1 [0213.978] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1490, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1490, lpOverlapped=0x0) returned 1 [0213.980] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0213.980] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0213.980] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0213.980] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1484, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1484, lpOverlapped=0x0) returned 1 [0213.980] FlushFileBuffers (hFile=0x2fc) returned 1 [0213.986] FlushFileBuffers (hFile=0x2f4) returned 1 [0213.995] CloseHandle (hObject=0x2fc) returned 1 [0213.995] CloseHandle (hObject=0x2f4) returned 1 [0213.995] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217262.wmf")) returned 1 [0213.996] SetEvent (hEvent=0x27c) returned 1 [0213.996] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217872.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217872.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0213.998] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=7336) returned 1 [0213.998] CloseHandle (hObject=0x2f4) returned 1 [0213.998] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217872.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217872.wmf")) returned 0x220 [0213.998] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217872.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217872.wmf")) returned 0x220 [0213.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217872.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217872.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0213.999] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217872.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217872.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0213.999] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0213.999] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0213.999] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217872.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217872.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0213.999] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1ca8, lpOverlapped=0x0) returned 1 [0214.001] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1cb0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1cb0, lpOverlapped=0x0) returned 1 [0214.002] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0214.003] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.003] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.003] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1ca8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1ca8, lpOverlapped=0x0) returned 1 [0214.003] FlushFileBuffers (hFile=0x2f4) returned 1 [0214.014] FlushFileBuffers (hFile=0x2fc) returned 1 [0214.021] CloseHandle (hObject=0x2f4) returned 1 [0214.021] CloseHandle (hObject=0x2fc) returned 1 [0214.021] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217872.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217872.wmf")) returned 1 [0214.022] SetEvent (hEvent=0x27c) returned 1 [0214.022] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227558.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227558.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0214.023] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=58089) returned 1 [0214.023] CloseHandle (hObject=0x2fc) returned 1 [0214.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227558.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227558.jpg")) returned 0x220 [0214.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227558.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227558.jpg")) returned 0x220 [0214.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227558.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227558.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.023] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227558.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227558.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0214.024] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.024] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.024] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227558.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227558.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0214.025] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xe2e9, lpOverlapped=0x0) returned 1 [0214.028] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xe2f0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xe2f0, lpOverlapped=0x0) returned 1 [0214.030] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0214.030] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.031] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.031] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xe2e9, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xe2e9, lpOverlapped=0x0) returned 1 [0214.031] FlushFileBuffers (hFile=0x2fc) returned 1 [0214.033] FlushFileBuffers (hFile=0x2f4) returned 1 [0214.043] CloseHandle (hObject=0x2fc) returned 1 [0214.043] CloseHandle (hObject=0x2f4) returned 1 [0214.043] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227558.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227558.jpg")) returned 1 [0214.045] SetEvent (hEvent=0x27c) returned 1 [0214.045] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228959.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0228959.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0214.051] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=37260) returned 1 [0214.051] CloseHandle (hObject=0x2f4) returned 1 [0214.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228959.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0228959.wmf")) returned 0x220 [0214.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228959.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0228959.wmf")) returned 0x220 [0214.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228959.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0228959.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.051] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228959.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0228959.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0214.052] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.052] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.052] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228959.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0228959.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0214.052] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x918c, lpOverlapped=0x0) returned 1 [0214.055] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x9190, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x9190, lpOverlapped=0x0) returned 1 [0214.057] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0214.058] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.058] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.058] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x918c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x918c, lpOverlapped=0x0) returned 1 [0214.058] FlushFileBuffers (hFile=0x2f4) returned 1 [0214.069] FlushFileBuffers (hFile=0x2fc) returned 1 [0214.072] CloseHandle (hObject=0x2f4) returned 1 [0214.072] CloseHandle (hObject=0x2fc) returned 1 [0214.072] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228959.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0228959.wmf")) returned 1 [0214.073] SetEvent (hEvent=0x27c) returned 1 [0214.073] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230558.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0230558.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0214.075] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=4198) returned 1 [0214.075] CloseHandle (hObject=0x2fc) returned 1 [0214.075] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230558.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0230558.wmf")) returned 0x220 [0214.075] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230558.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0230558.wmf")) returned 0x220 [0214.075] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230558.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0230558.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.075] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230558.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0230558.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0214.075] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.076] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.076] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230558.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0230558.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0214.076] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1066, lpOverlapped=0x0) returned 1 [0214.082] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1070, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1070, lpOverlapped=0x0) returned 1 [0214.083] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0214.083] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.083] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.083] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1066, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1066, lpOverlapped=0x0) returned 1 [0214.084] FlushFileBuffers (hFile=0x2fc) returned 1 [0214.094] FlushFileBuffers (hFile=0x2f4) returned 1 [0214.097] CloseHandle (hObject=0x2fc) returned 1 [0214.097] CloseHandle (hObject=0x2f4) returned 1 [0214.097] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230558.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0230558.wmf")) returned 1 [0214.098] SetEvent (hEvent=0x27c) returned 1 [0214.098] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232393.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232393.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0214.099] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=27586) returned 1 [0214.099] CloseHandle (hObject=0x2f4) returned 1 [0214.099] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232393.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232393.wmf")) returned 0x220 [0214.099] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232393.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232393.wmf")) returned 0x220 [0214.100] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232393.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232393.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.100] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232393.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232393.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0214.100] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.100] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.100] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232393.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232393.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0214.101] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x6bc2, lpOverlapped=0x0) returned 1 [0214.103] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x6bd0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x6bd0, lpOverlapped=0x0) returned 1 [0214.105] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0214.105] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.105] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.105] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x6bc2, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x6bc2, lpOverlapped=0x0) returned 1 [0214.105] FlushFileBuffers (hFile=0x2f4) returned 1 [0214.117] FlushFileBuffers (hFile=0x2fc) returned 1 [0214.123] CloseHandle (hObject=0x2f4) returned 1 [0214.123] CloseHandle (hObject=0x2fc) returned 1 [0214.123] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232393.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232393.wmf")) returned 1 [0214.124] SetEvent (hEvent=0x27c) returned 1 [0214.124] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232795.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232795.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0214.125] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=14346) returned 1 [0214.125] CloseHandle (hObject=0x2fc) returned 1 [0214.125] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232795.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232795.wmf")) returned 0x220 [0214.125] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232795.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232795.wmf")) returned 0x220 [0214.125] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232795.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232795.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.125] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232795.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232795.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0214.125] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.126] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.126] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232795.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232795.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0214.127] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x380a, lpOverlapped=0x0) returned 1 [0214.128] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3810, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x3810, lpOverlapped=0x0) returned 1 [0214.130] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0214.130] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.130] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.130] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x380a, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x380a, lpOverlapped=0x0) returned 1 [0214.130] FlushFileBuffers (hFile=0x2fc) returned 1 [0214.133] FlushFileBuffers (hFile=0x2f4) returned 1 [0214.145] CloseHandle (hObject=0x2fc) returned 1 [0214.145] CloseHandle (hObject=0x2f4) returned 1 [0214.145] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232795.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232795.wmf")) returned 1 [0214.146] SetEvent (hEvent=0x27c) returned 1 [0214.146] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232803.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232803.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0214.148] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=19942) returned 1 [0214.148] CloseHandle (hObject=0x2f4) returned 1 [0214.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232803.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232803.wmf")) returned 0x220 [0214.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232803.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232803.wmf")) returned 0x220 [0214.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232803.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232803.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.149] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232803.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232803.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0214.149] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.149] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.149] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232803.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232803.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0214.149] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4de6, lpOverlapped=0x0) returned 1 [0214.152] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4df0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4df0, lpOverlapped=0x0) returned 1 [0214.154] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0214.154] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.154] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.154] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4de6, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4de6, lpOverlapped=0x0) returned 1 [0214.155] FlushFileBuffers (hFile=0x2f4) returned 1 [0214.162] FlushFileBuffers (hFile=0x2fc) returned 1 [0214.166] CloseHandle (hObject=0x2f4) returned 1 [0214.166] CloseHandle (hObject=0x2fc) returned 1 [0214.166] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232803.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232803.wmf")) returned 1 [0214.168] SetEvent (hEvent=0x27c) returned 1 [0214.168] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233665.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233665.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0214.168] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=12588) returned 1 [0214.168] CloseHandle (hObject=0x2fc) returned 1 [0214.169] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233665.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233665.wmf")) returned 0x220 [0214.169] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233665.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233665.wmf")) returned 0x220 [0214.169] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233665.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233665.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.169] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233665.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233665.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0214.169] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.169] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.169] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233665.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233665.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0214.170] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x312c, lpOverlapped=0x0) returned 1 [0214.172] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3130, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x3130, lpOverlapped=0x0) returned 1 [0214.174] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0214.174] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.174] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.174] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x312c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x312c, lpOverlapped=0x0) returned 1 [0214.174] FlushFileBuffers (hFile=0x2fc) returned 1 [0214.185] FlushFileBuffers (hFile=0x2f4) returned 1 [0214.190] CloseHandle (hObject=0x2fc) returned 1 [0214.190] CloseHandle (hObject=0x2f4) returned 1 [0214.190] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233665.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233665.wmf")) returned 1 [0214.191] SetEvent (hEvent=0x27c) returned 1 [0214.191] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234000.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234000.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0214.193] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=52934) returned 1 [0214.193] CloseHandle (hObject=0x2f4) returned 1 [0214.193] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234000.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234000.wmf")) returned 0x220 [0214.193] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234000.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234000.wmf")) returned 0x220 [0214.193] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234000.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234000.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.193] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234000.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234000.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0214.193] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.194] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.194] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234000.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234000.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0214.194] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xcec6, lpOverlapped=0x0) returned 1 [0214.198] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xced0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xced0, lpOverlapped=0x0) returned 1 [0214.200] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0214.200] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.200] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.200] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xcec6, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xcec6, lpOverlapped=0x0) returned 1 [0214.201] FlushFileBuffers (hFile=0x2f4) returned 1 [0214.270] FlushFileBuffers (hFile=0x2fc) returned 1 [0214.275] CloseHandle (hObject=0x2f4) returned 1 [0214.275] CloseHandle (hObject=0x2fc) returned 1 [0214.275] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234000.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234000.wmf")) returned 1 [0214.276] SetEvent (hEvent=0x27c) returned 1 [0214.276] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234376.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234376.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0214.277] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=32980) returned 1 [0214.277] CloseHandle (hObject=0x2fc) returned 1 [0214.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234376.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234376.wmf")) returned 0x220 [0214.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234376.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234376.wmf")) returned 0x220 [0214.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234376.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234376.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.277] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234376.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234376.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0214.278] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.278] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.278] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234376.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234376.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0214.286] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x80d4, lpOverlapped=0x0) returned 1 [0214.290] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x80e0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x80e0, lpOverlapped=0x0) returned 1 [0214.294] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0214.294] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.294] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.294] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x80d4, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x80d4, lpOverlapped=0x0) returned 1 [0214.294] FlushFileBuffers (hFile=0x2fc) returned 1 [0214.297] FlushFileBuffers (hFile=0x2f4) returned 1 [0214.314] CloseHandle (hObject=0x2fc) returned 1 [0214.314] CloseHandle (hObject=0x2f4) returned 1 [0214.314] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234376.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234376.wmf")) returned 1 [0214.315] SetEvent (hEvent=0x27c) returned 1 [0214.315] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237228.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237228.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0214.316] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=22272) returned 1 [0214.316] CloseHandle (hObject=0x2f4) returned 1 [0214.317] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237228.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237228.wmf")) returned 0x220 [0214.317] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237228.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237228.wmf")) returned 0x220 [0214.317] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237228.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237228.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.317] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237228.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237228.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0214.317] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.317] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.317] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237228.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237228.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0214.318] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x5700, lpOverlapped=0x0) returned 1 [0214.321] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5710, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x5710, lpOverlapped=0x0) returned 1 [0214.322] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0214.323] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.323] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.323] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5700, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x5700, lpOverlapped=0x0) returned 1 [0214.323] FlushFileBuffers (hFile=0x2f4) returned 1 [0214.326] FlushFileBuffers (hFile=0x2fc) returned 1 [0214.333] CloseHandle (hObject=0x2f4) returned 1 [0214.333] CloseHandle (hObject=0x2fc) returned 1 [0214.333] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237228.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237228.wmf")) returned 1 [0214.335] SetEvent (hEvent=0x27c) returned 1 [0214.335] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237759.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237759.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0214.340] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=20926) returned 1 [0214.340] CloseHandle (hObject=0x2fc) returned 1 [0214.340] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237759.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237759.wmf")) returned 0x220 [0214.340] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237759.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237759.wmf")) returned 0x220 [0214.340] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237759.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237759.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.340] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237759.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237759.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0214.340] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.340] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.340] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237759.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237759.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0214.341] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x51be, lpOverlapped=0x0) returned 1 [0214.344] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x51c0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x51c0, lpOverlapped=0x0) returned 1 [0214.345] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0214.345] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.345] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.345] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x51be, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x51be, lpOverlapped=0x0) returned 1 [0214.346] FlushFileBuffers (hFile=0x2fc) returned 1 [0214.361] FlushFileBuffers (hFile=0x2f4) returned 1 [0214.363] CloseHandle (hObject=0x2fc) returned 1 [0214.363] CloseHandle (hObject=0x2f4) returned 1 [0214.364] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237759.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237759.wmf")) returned 1 [0214.365] SetEvent (hEvent=0x27c) returned 1 [0214.365] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238927.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238927.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0214.367] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=4916) returned 1 [0214.367] CloseHandle (hObject=0x2f4) returned 1 [0214.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238927.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238927.wmf")) returned 0x220 [0214.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238927.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238927.wmf")) returned 0x220 [0214.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238927.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238927.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.367] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238927.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238927.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0214.367] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.367] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.367] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238927.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238927.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0214.369] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1334, lpOverlapped=0x0) returned 1 [0214.372] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1340, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1340, lpOverlapped=0x0) returned 1 [0214.373] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0214.373] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.373] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.373] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1334, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1334, lpOverlapped=0x0) returned 1 [0214.373] FlushFileBuffers (hFile=0x2f4) returned 1 [0214.383] FlushFileBuffers (hFile=0x2fc) returned 1 [0214.387] CloseHandle (hObject=0x2f4) returned 1 [0214.388] CloseHandle (hObject=0x2fc) returned 1 [0214.388] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238927.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238927.wmf")) returned 1 [0214.389] SetEvent (hEvent=0x27c) returned 1 [0214.389] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238983.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238983.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0214.390] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=5048) returned 1 [0214.390] CloseHandle (hObject=0x2fc) returned 1 [0214.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238983.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238983.wmf")) returned 0x220 [0214.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238983.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238983.wmf")) returned 0x220 [0214.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238983.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238983.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.390] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238983.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238983.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0214.390] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.390] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.390] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238983.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238983.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0214.391] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x13b8, lpOverlapped=0x0) returned 1 [0214.393] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x13c0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x13c0, lpOverlapped=0x0) returned 1 [0214.394] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0214.394] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.394] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.395] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x13b8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x13b8, lpOverlapped=0x0) returned 1 [0214.395] FlushFileBuffers (hFile=0x2fc) returned 1 [0214.397] FlushFileBuffers (hFile=0x2f4) returned 1 [0214.406] CloseHandle (hObject=0x2fc) returned 1 [0214.406] CloseHandle (hObject=0x2f4) returned 1 [0214.406] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238983.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238983.wmf")) returned 1 [0214.407] SetEvent (hEvent=0x27c) returned 1 [0214.408] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239063.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239063.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0214.408] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=5884) returned 1 [0214.408] CloseHandle (hObject=0x2f4) returned 1 [0214.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239063.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239063.wmf")) returned 0x220 [0214.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239063.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239063.wmf")) returned 0x220 [0214.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239063.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239063.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.409] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239063.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239063.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0214.409] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.409] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.409] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239063.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239063.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0214.410] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x16fc, lpOverlapped=0x0) returned 1 [0214.413] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1700, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1700, lpOverlapped=0x0) returned 1 [0214.414] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0214.414] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.414] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.414] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x16fc, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x16fc, lpOverlapped=0x0) returned 1 [0214.414] FlushFileBuffers (hFile=0x2f4) returned 1 [0214.418] FlushFileBuffers (hFile=0x2fc) returned 1 [0214.425] CloseHandle (hObject=0x2f4) returned 1 [0214.425] CloseHandle (hObject=0x2fc) returned 1 [0214.425] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239063.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239063.wmf")) returned 1 [0214.426] SetEvent (hEvent=0x27c) returned 1 [0214.426] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239191.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239191.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0214.427] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=5220) returned 1 [0214.427] CloseHandle (hObject=0x2fc) returned 1 [0214.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239191.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239191.wmf")) returned 0x220 [0214.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239191.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239191.wmf")) returned 0x220 [0214.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239191.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239191.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.427] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239191.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239191.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0214.427] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.427] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.427] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239191.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239191.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0214.428] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1464, lpOverlapped=0x0) returned 1 [0214.433] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1470, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1470, lpOverlapped=0x0) returned 1 [0214.438] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0214.438] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.438] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.438] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1464, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1464, lpOverlapped=0x0) returned 1 [0214.439] FlushFileBuffers (hFile=0x2fc) returned 1 [0214.444] FlushFileBuffers (hFile=0x2f4) returned 1 [0214.452] CloseHandle (hObject=0x2fc) returned 1 [0214.452] CloseHandle (hObject=0x2f4) returned 1 [0214.452] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239191.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239191.wmf")) returned 1 [0214.453] SetEvent (hEvent=0x27c) returned 1 [0214.453] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239935.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239935.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0214.458] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=4884) returned 1 [0214.458] CloseHandle (hObject=0x2f4) returned 1 [0214.458] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239935.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239935.wmf")) returned 0x220 [0214.458] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239935.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239935.wmf")) returned 0x220 [0214.458] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239935.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239935.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.458] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239935.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239935.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0214.458] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.458] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.458] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239935.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239935.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0214.459] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1314, lpOverlapped=0x0) returned 1 [0214.462] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1320, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1320, lpOverlapped=0x0) returned 1 [0214.463] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0214.463] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.463] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.463] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1314, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1314, lpOverlapped=0x0) returned 1 [0214.463] FlushFileBuffers (hFile=0x2f4) returned 1 [0214.474] FlushFileBuffers (hFile=0x2fc) returned 1 [0214.477] CloseHandle (hObject=0x2f4) returned 1 [0214.477] CloseHandle (hObject=0x2fc) returned 1 [0214.477] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239935.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239935.wmf")) returned 1 [0214.478] SetEvent (hEvent=0x27c) returned 1 [0214.478] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239943.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239943.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0214.480] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=6552) returned 1 [0214.480] CloseHandle (hObject=0x2fc) returned 1 [0214.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239943.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239943.wmf")) returned 0x220 [0214.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239943.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239943.wmf")) returned 0x220 [0214.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239943.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239943.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.480] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239943.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239943.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0214.480] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.480] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.480] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239943.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239943.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0214.481] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1998, lpOverlapped=0x0) returned 1 [0214.485] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x19a0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x19a0, lpOverlapped=0x0) returned 1 [0214.488] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0214.488] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.488] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.488] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1998, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1998, lpOverlapped=0x0) returned 1 [0214.488] FlushFileBuffers (hFile=0x2fc) returned 1 [0214.496] FlushFileBuffers (hFile=0x2f4) returned 1 [0214.498] CloseHandle (hObject=0x2fc) returned 1 [0214.498] CloseHandle (hObject=0x2f4) returned 1 [0214.498] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239943.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239943.wmf")) returned 1 [0214.499] SetEvent (hEvent=0x27c) returned 1 [0214.500] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239953.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239953.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0214.500] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=7112) returned 1 [0214.500] CloseHandle (hObject=0x2f4) returned 1 [0214.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239953.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239953.wmf")) returned 0x220 [0214.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239953.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239953.wmf")) returned 0x220 [0214.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239953.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239953.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.501] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239953.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239953.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0214.501] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.501] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.501] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239953.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239953.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0214.502] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1bc8, lpOverlapped=0x0) returned 1 [0214.506] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1bd0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1bd0, lpOverlapped=0x0) returned 1 [0214.507] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0214.507] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.507] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.507] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1bc8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1bc8, lpOverlapped=0x0) returned 1 [0214.507] FlushFileBuffers (hFile=0x2f4) returned 1 [0214.516] FlushFileBuffers (hFile=0x2fc) returned 1 [0214.519] CloseHandle (hObject=0x2f4) returned 1 [0214.519] CloseHandle (hObject=0x2fc) returned 1 [0214.519] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239953.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239953.wmf")) returned 1 [0214.521] SetEvent (hEvent=0x27c) returned 1 [0214.521] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239965.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239965.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0214.522] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=5920) returned 1 [0214.522] CloseHandle (hObject=0x2fc) returned 1 [0214.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239965.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239965.wmf")) returned 0x220 [0214.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239965.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239965.wmf")) returned 0x220 [0214.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239965.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239965.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.522] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239965.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239965.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0214.522] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.522] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.522] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239965.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239965.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0214.523] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1720, lpOverlapped=0x0) returned 1 [0214.525] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1730, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1730, lpOverlapped=0x0) returned 1 [0214.526] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0214.527] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.527] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.527] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1720, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1720, lpOverlapped=0x0) returned 1 [0214.527] FlushFileBuffers (hFile=0x2fc) returned 1 [0214.537] FlushFileBuffers (hFile=0x2f4) returned 1 [0214.541] CloseHandle (hObject=0x2fc) returned 1 [0214.542] CloseHandle (hObject=0x2f4) returned 1 [0214.542] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239965.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239965.wmf")) returned 1 [0214.543] SetEvent (hEvent=0x27c) returned 1 [0214.543] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239973.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239973.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0214.543] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=5096) returned 1 [0214.544] CloseHandle (hObject=0x2f4) returned 1 [0214.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239973.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239973.wmf")) returned 0x220 [0214.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239973.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239973.wmf")) returned 0x220 [0214.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239973.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239973.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.544] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239973.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239973.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0214.544] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.544] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.544] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239973.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239973.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0214.545] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x13e8, lpOverlapped=0x0) returned 1 [0214.546] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x13f0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x13f0, lpOverlapped=0x0) returned 1 [0214.548] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0214.548] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.548] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.548] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x13e8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x13e8, lpOverlapped=0x0) returned 1 [0214.548] FlushFileBuffers (hFile=0x2f4) returned 1 [0214.551] FlushFileBuffers (hFile=0x2fc) returned 1 [0214.557] CloseHandle (hObject=0x2f4) returned 1 [0214.557] CloseHandle (hObject=0x2fc) returned 1 [0214.557] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239973.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239973.wmf")) returned 1 [0214.558] SetEvent (hEvent=0x27c) returned 1 [0214.558] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239997.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239997.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0214.562] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3288) returned 1 [0214.562] CloseHandle (hObject=0x2fc) returned 1 [0214.562] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239997.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239997.wmf")) returned 0x220 [0214.563] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239997.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239997.wmf")) returned 0x220 [0214.563] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239997.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239997.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.563] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239997.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239997.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0214.563] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.563] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.563] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239997.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239997.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0214.564] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xcd8, lpOverlapped=0x0) returned 1 [0214.567] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xce0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xce0, lpOverlapped=0x0) returned 1 [0214.568] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0214.568] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.568] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.568] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xcd8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xcd8, lpOverlapped=0x0) returned 1 [0214.568] FlushFileBuffers (hFile=0x2fc) returned 1 [0214.580] FlushFileBuffers (hFile=0x2f4) returned 1 [0214.583] CloseHandle (hObject=0x2fc) returned 1 [0214.583] CloseHandle (hObject=0x2f4) returned 1 [0214.583] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239997.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239997.wmf")) returned 1 [0214.584] SetEvent (hEvent=0x27c) returned 1 [0214.584] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240175.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0214.586] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=42000) returned 1 [0214.586] CloseHandle (hObject=0x2f4) returned 1 [0214.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240175.wmf")) returned 0x220 [0214.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240175.wmf")) returned 0x220 [0214.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240175.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240175.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.587] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240175.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0214.587] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.587] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.587] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240175.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240175.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0214.588] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xa410, lpOverlapped=0x0) returned 1 [0214.591] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xa420, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xa420, lpOverlapped=0x0) returned 1 [0214.593] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0214.593] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.593] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.593] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xa410, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xa410, lpOverlapped=0x0) returned 1 [0214.593] FlushFileBuffers (hFile=0x2f4) returned 1 [0214.601] FlushFileBuffers (hFile=0x2fc) returned 1 [0214.607] CloseHandle (hObject=0x2f4) returned 1 [0214.607] CloseHandle (hObject=0x2fc) returned 1 [0214.607] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240175.wmf")) returned 1 [0214.608] SetEvent (hEvent=0x27c) returned 1 [0214.609] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240291.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240291.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0214.609] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=5238) returned 1 [0214.610] CloseHandle (hObject=0x2fc) returned 1 [0214.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240291.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240291.wmf")) returned 0x220 [0214.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240291.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240291.wmf")) returned 0x220 [0214.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240291.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240291.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.610] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240291.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240291.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0214.610] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.610] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.610] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240291.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240291.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0214.611] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1476, lpOverlapped=0x0) returned 1 [0214.613] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1480, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1480, lpOverlapped=0x0) returned 1 [0214.614] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0214.614] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.614] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.614] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1476, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1476, lpOverlapped=0x0) returned 1 [0214.614] FlushFileBuffers (hFile=0x2fc) returned 1 [0214.627] FlushFileBuffers (hFile=0x2f4) returned 1 [0214.630] CloseHandle (hObject=0x2fc) returned 1 [0214.630] CloseHandle (hObject=0x2f4) returned 1 [0214.630] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240291.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240291.wmf")) returned 1 [0214.631] SetEvent (hEvent=0x27c) returned 1 [0214.632] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241037.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241037.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0214.632] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2638) returned 1 [0214.632] CloseHandle (hObject=0x2f4) returned 1 [0214.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241037.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241037.wmf")) returned 0x220 [0214.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241037.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241037.wmf")) returned 0x220 [0214.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241037.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241037.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.633] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241037.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241037.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0214.633] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.633] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.633] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241037.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241037.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0214.636] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xa4e, lpOverlapped=0x0) returned 1 [0214.637] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xa50, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xa50, lpOverlapped=0x0) returned 1 [0214.638] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0214.639] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.639] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.639] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xa4e, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xa4e, lpOverlapped=0x0) returned 1 [0214.639] FlushFileBuffers (hFile=0x2f4) returned 1 [0214.647] FlushFileBuffers (hFile=0x2fc) returned 1 [0214.652] CloseHandle (hObject=0x2f4) returned 1 [0214.652] CloseHandle (hObject=0x2fc) returned 1 [0214.653] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241037.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241037.wmf")) returned 1 [0214.654] SetEvent (hEvent=0x27c) returned 1 [0214.654] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241043.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241043.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0214.655] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2738) returned 1 [0214.655] CloseHandle (hObject=0x2fc) returned 1 [0214.655] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241043.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241043.wmf")) returned 0x220 [0214.655] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241043.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241043.wmf")) returned 0x220 [0214.655] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241043.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241043.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.655] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241043.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241043.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0214.655] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.656] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.656] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241043.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241043.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0214.657] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xab2, lpOverlapped=0x0) returned 1 [0214.659] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xac0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xac0, lpOverlapped=0x0) returned 1 [0214.660] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0214.661] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.661] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.661] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xab2, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xab2, lpOverlapped=0x0) returned 1 [0214.661] FlushFileBuffers (hFile=0x2fc) returned 1 [0214.667] FlushFileBuffers (hFile=0x2f4) returned 1 [0214.676] CloseHandle (hObject=0x2fc) returned 1 [0214.676] CloseHandle (hObject=0x2f4) returned 1 [0214.676] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241043.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241043.wmf")) returned 1 [0214.677] SetEvent (hEvent=0x27c) returned 1 [0214.677] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241773.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241773.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0214.680] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3262) returned 1 [0214.680] CloseHandle (hObject=0x2f4) returned 1 [0214.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241773.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241773.wmf")) returned 0x220 [0214.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241773.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241773.wmf")) returned 0x220 [0214.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241773.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241773.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.680] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241773.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241773.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0214.681] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.681] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.681] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241773.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241773.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0214.682] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xcbe, lpOverlapped=0x0) returned 1 [0214.684] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xcc0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xcc0, lpOverlapped=0x0) returned 1 [0214.686] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0214.686] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.686] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.686] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xcbe, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xcbe, lpOverlapped=0x0) returned 1 [0214.686] FlushFileBuffers (hFile=0x2f4) returned 1 [0214.700] FlushFileBuffers (hFile=0x2fc) returned 1 [0214.708] CloseHandle (hObject=0x2f4) returned 1 [0214.708] CloseHandle (hObject=0x2fc) returned 1 [0214.708] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241773.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241773.wmf")) returned 1 [0214.710] SetEvent (hEvent=0x27c) returned 1 [0214.710] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250504.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0250504.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0214.712] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=31032) returned 1 [0214.712] CloseHandle (hObject=0x2fc) returned 1 [0214.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250504.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0250504.wmf")) returned 0x220 [0214.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250504.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0250504.wmf")) returned 0x220 [0214.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250504.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0250504.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.712] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250504.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0250504.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0214.712] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.713] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.713] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250504.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0250504.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0214.714] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x7938, lpOverlapped=0x0) returned 1 [0214.719] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7940, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x7940, lpOverlapped=0x0) returned 1 [0214.721] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0214.721] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.721] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.721] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7938, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x7938, lpOverlapped=0x0) returned 1 [0214.722] FlushFileBuffers (hFile=0x2fc) returned 1 [0214.735] FlushFileBuffers (hFile=0x2f4) returned 1 [0214.737] CloseHandle (hObject=0x2fc) returned 1 [0214.737] CloseHandle (hObject=0x2f4) returned 1 [0214.737] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250504.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0250504.wmf")) returned 1 [0214.739] SetEvent (hEvent=0x27c) returned 1 [0214.739] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0251007.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0251007.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0214.740] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=69644) returned 1 [0214.740] CloseHandle (hObject=0x2f4) returned 1 [0214.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0251007.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0251007.wmf")) returned 0x220 [0214.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0251007.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0251007.wmf")) returned 0x220 [0214.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0251007.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0251007.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0251007.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0251007.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0214.741] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.741] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0251007.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0251007.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0214.743] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1100c, lpOverlapped=0x0) returned 1 [0214.747] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x11010, lpOverlapped=0x0) returned 1 [0214.750] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0214.750] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.750] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.750] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1100c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1100c, lpOverlapped=0x0) returned 1 [0214.751] FlushFileBuffers (hFile=0x2f4) returned 1 [0214.755] FlushFileBuffers (hFile=0x2fc) returned 1 [0214.773] CloseHandle (hObject=0x2f4) returned 1 [0214.773] CloseHandle (hObject=0x2fc) returned 1 [0214.773] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0251007.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0251007.wmf")) returned 1 [0214.775] SetEvent (hEvent=0x27c) returned 1 [0214.775] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252669.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0252669.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0214.777] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3926) returned 1 [0214.777] CloseHandle (hObject=0x2fc) returned 1 [0214.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252669.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0252669.wmf")) returned 0x220 [0214.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252669.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0252669.wmf")) returned 0x220 [0214.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252669.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0252669.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.777] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252669.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0252669.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0214.777] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.778] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.778] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252669.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0252669.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0214.779] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xf56, lpOverlapped=0x0) returned 1 [0214.781] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf60, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf60, lpOverlapped=0x0) returned 1 [0214.783] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0214.784] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.784] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.784] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf56, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xf56, lpOverlapped=0x0) returned 1 [0214.784] FlushFileBuffers (hFile=0x2fc) returned 1 [0214.788] FlushFileBuffers (hFile=0x2f4) returned 1 [0214.870] CloseHandle (hObject=0x2fc) returned 1 [0214.870] CloseHandle (hObject=0x2f4) returned 1 [0214.873] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252669.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0252669.wmf")) returned 1 [0214.874] SetEvent (hEvent=0x27c) returned 1 [0214.875] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0279644.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0279644.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0214.876] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=17200) returned 1 [0214.876] CloseHandle (hObject=0x2f4) returned 1 [0214.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0279644.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0279644.wmf")) returned 0x220 [0214.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0279644.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0279644.wmf")) returned 0x220 [0214.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0279644.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0279644.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.876] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0279644.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0279644.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0214.876] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.876] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.876] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0279644.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0279644.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0214.878] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4330, lpOverlapped=0x0) returned 1 [0214.882] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4340, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4340, lpOverlapped=0x0) returned 1 [0214.883] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0214.884] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.884] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.884] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4330, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4330, lpOverlapped=0x0) returned 1 [0214.884] FlushFileBuffers (hFile=0x2f4) returned 1 [0214.891] FlushFileBuffers (hFile=0x2fc) returned 1 [0214.898] CloseHandle (hObject=0x2f4) returned 1 [0214.898] CloseHandle (hObject=0x2fc) returned 1 [0214.898] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0279644.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0279644.wmf")) returned 1 [0214.899] SetEvent (hEvent=0x27c) returned 1 [0214.900] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281008.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281008.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0214.901] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=38084) returned 1 [0214.901] CloseHandle (hObject=0x2fc) returned 1 [0214.901] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281008.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281008.wmf")) returned 0x220 [0214.901] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281008.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281008.wmf")) returned 0x220 [0214.901] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281008.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281008.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.901] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281008.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281008.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0214.901] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.902] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.902] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281008.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281008.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0214.902] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x94c4, lpOverlapped=0x0) returned 1 [0214.905] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x94d0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x94d0, lpOverlapped=0x0) returned 1 [0214.907] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0214.907] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.907] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.907] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x94c4, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x94c4, lpOverlapped=0x0) returned 1 [0214.907] FlushFileBuffers (hFile=0x2fc) returned 1 [0214.921] FlushFileBuffers (hFile=0x2f4) returned 1 [0214.922] CloseHandle (hObject=0x2fc) returned 1 [0214.922] CloseHandle (hObject=0x2f4) returned 1 [0214.922] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281008.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281008.wmf")) returned 1 [0214.924] SetEvent (hEvent=0x27c) returned 1 [0214.924] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281630.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281630.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0214.926] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=12764) returned 1 [0214.926] CloseHandle (hObject=0x2f4) returned 1 [0214.926] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281630.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281630.wmf")) returned 0x220 [0214.926] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281630.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281630.wmf")) returned 0x220 [0214.926] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281630.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281630.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.926] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281630.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281630.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0214.926] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.926] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.926] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281630.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281630.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0214.927] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x31dc, lpOverlapped=0x0) returned 1 [0214.930] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x31e0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x31e0, lpOverlapped=0x0) returned 1 [0214.931] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0214.931] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.931] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.931] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x31dc, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x31dc, lpOverlapped=0x0) returned 1 [0214.931] FlushFileBuffers (hFile=0x2f4) returned 1 [0214.938] FlushFileBuffers (hFile=0x2fc) returned 1 [0214.944] CloseHandle (hObject=0x2f4) returned 1 [0214.944] CloseHandle (hObject=0x2fc) returned 1 [0214.944] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281630.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281630.wmf")) returned 1 [0214.945] SetEvent (hEvent=0x27c) returned 1 [0214.945] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281638.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281638.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0214.946] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=11912) returned 1 [0214.946] CloseHandle (hObject=0x2fc) returned 1 [0214.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281638.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281638.wmf")) returned 0x220 [0214.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281638.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281638.wmf")) returned 0x220 [0214.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281638.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281638.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.946] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281638.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281638.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0214.946] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.946] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.946] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281638.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281638.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0214.947] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2e88, lpOverlapped=0x0) returned 1 [0214.949] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2e90, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2e90, lpOverlapped=0x0) returned 1 [0214.951] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0214.951] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.951] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.951] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2e88, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2e88, lpOverlapped=0x0) returned 1 [0214.951] FlushFileBuffers (hFile=0x2fc) returned 1 [0214.961] FlushFileBuffers (hFile=0x2f4) returned 1 [0214.965] CloseHandle (hObject=0x2fc) returned 1 [0214.966] CloseHandle (hObject=0x2f4) returned 1 [0214.966] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281638.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281638.wmf")) returned 1 [0214.967] SetEvent (hEvent=0x27c) returned 1 [0214.967] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282126.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282126.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0214.968] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=15518) returned 1 [0214.968] CloseHandle (hObject=0x2f4) returned 1 [0214.968] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282126.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282126.wmf")) returned 0x220 [0214.968] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282126.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282126.wmf")) returned 0x220 [0214.968] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282126.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282126.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.968] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282126.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282126.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0214.968] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.969] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.969] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282126.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282126.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0214.970] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x3c9e, lpOverlapped=0x0) returned 1 [0214.972] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3ca0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x3ca0, lpOverlapped=0x0) returned 1 [0214.973] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0214.974] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.974] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.974] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3c9e, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x3c9e, lpOverlapped=0x0) returned 1 [0214.974] FlushFileBuffers (hFile=0x2f4) returned 1 [0214.981] FlushFileBuffers (hFile=0x2fc) returned 1 [0214.986] CloseHandle (hObject=0x2f4) returned 1 [0214.986] CloseHandle (hObject=0x2fc) returned 1 [0214.986] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282126.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282126.wmf")) returned 1 [0214.987] SetEvent (hEvent=0x27c) returned 1 [0214.987] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282932.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282932.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0214.988] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=14080) returned 1 [0214.988] CloseHandle (hObject=0x2fc) returned 1 [0214.988] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282932.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282932.wmf")) returned 0x220 [0214.988] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282932.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282932.wmf")) returned 0x220 [0214.988] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282932.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282932.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0214.988] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282932.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282932.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0214.988] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.989] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0214.989] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282932.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282932.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0214.989] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x3700, lpOverlapped=0x0) returned 1 [0214.992] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3710, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x3710, lpOverlapped=0x0) returned 1 [0214.993] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0214.993] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.993] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0214.993] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3700, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x3700, lpOverlapped=0x0) returned 1 [0214.993] FlushFileBuffers (hFile=0x2fc) returned 1 [0215.005] FlushFileBuffers (hFile=0x2f4) returned 1 [0215.006] CloseHandle (hObject=0x2fc) returned 1 [0215.006] CloseHandle (hObject=0x2f4) returned 1 [0215.007] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282932.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282932.wmf")) returned 1 [0215.008] SetEvent (hEvent=0x27c) returned 1 [0215.008] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285484.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285484.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0215.009] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=9280) returned 1 [0215.009] CloseHandle (hObject=0x2f4) returned 1 [0215.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285484.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285484.wmf")) returned 0x220 [0215.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285484.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285484.wmf")) returned 0x220 [0215.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285484.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285484.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.009] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285484.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285484.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0215.010] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.010] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.010] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285484.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285484.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0215.010] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2440, lpOverlapped=0x0) returned 1 [0215.013] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2450, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2450, lpOverlapped=0x0) returned 1 [0215.014] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0215.014] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.014] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.014] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2440, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2440, lpOverlapped=0x0) returned 1 [0215.014] FlushFileBuffers (hFile=0x2f4) returned 1 [0215.024] FlushFileBuffers (hFile=0x2fc) returned 1 [0215.026] CloseHandle (hObject=0x2f4) returned 1 [0215.026] CloseHandle (hObject=0x2fc) returned 1 [0215.026] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285484.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285484.wmf")) returned 1 [0215.027] SetEvent (hEvent=0x27c) returned 1 [0215.027] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285782.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285782.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0215.029] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=21054) returned 1 [0215.029] CloseHandle (hObject=0x2fc) returned 1 [0215.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285782.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285782.wmf")) returned 0x220 [0215.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285782.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285782.wmf")) returned 0x220 [0215.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285782.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285782.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.029] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285782.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285782.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0215.029] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.029] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.029] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285782.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285782.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0215.030] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x523e, lpOverlapped=0x0) returned 1 [0215.033] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5240, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x5240, lpOverlapped=0x0) returned 1 [0215.034] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0215.035] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.035] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.035] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x523e, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x523e, lpOverlapped=0x0) returned 1 [0215.035] FlushFileBuffers (hFile=0x2fc) returned 1 [0215.043] FlushFileBuffers (hFile=0x2f4) returned 1 [0215.048] CloseHandle (hObject=0x2fc) returned 1 [0215.048] CloseHandle (hObject=0x2f4) returned 1 [0215.048] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285782.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285782.wmf")) returned 1 [0215.049] SetEvent (hEvent=0x27c) returned 1 [0215.049] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285796.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285796.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0215.050] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=13648) returned 1 [0215.050] CloseHandle (hObject=0x2f4) returned 1 [0215.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285796.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285796.wmf")) returned 0x220 [0215.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285796.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285796.wmf")) returned 0x220 [0215.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285796.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285796.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.050] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285796.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285796.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0215.050] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.050] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.050] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285796.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285796.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0215.051] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x3550, lpOverlapped=0x0) returned 1 [0215.053] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3560, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x3560, lpOverlapped=0x0) returned 1 [0215.054] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0215.054] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.054] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.054] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3550, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x3550, lpOverlapped=0x0) returned 1 [0215.054] FlushFileBuffers (hFile=0x2f4) returned 1 [0215.057] FlushFileBuffers (hFile=0x2fc) returned 1 [0215.066] CloseHandle (hObject=0x2f4) returned 1 [0215.066] CloseHandle (hObject=0x2fc) returned 1 [0215.066] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285796.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285796.wmf")) returned 1 [0215.067] SetEvent (hEvent=0x27c) returned 1 [0215.067] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285820.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285820.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0215.068] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=8720) returned 1 [0215.068] CloseHandle (hObject=0x2fc) returned 1 [0215.068] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285820.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285820.wmf")) returned 0x220 [0215.068] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285820.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285820.wmf")) returned 0x220 [0215.068] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285820.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285820.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.068] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285820.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285820.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0215.068] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.068] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.068] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285820.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285820.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0215.069] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2210, lpOverlapped=0x0) returned 1 [0215.072] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2220, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2220, lpOverlapped=0x0) returned 1 [0215.073] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0215.073] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.073] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.073] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2210, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2210, lpOverlapped=0x0) returned 1 [0215.073] FlushFileBuffers (hFile=0x2fc) returned 1 [0215.088] FlushFileBuffers (hFile=0x2f4) returned 1 [0215.093] CloseHandle (hObject=0x2fc) returned 1 [0215.093] CloseHandle (hObject=0x2f4) returned 1 [0215.094] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285820.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285820.wmf")) returned 1 [0215.095] SetEvent (hEvent=0x27c) returned 1 [0215.095] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287018.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287018.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0215.096] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=30872) returned 1 [0215.096] CloseHandle (hObject=0x2f4) returned 1 [0215.096] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287018.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287018.wmf")) returned 0x220 [0215.096] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287018.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287018.wmf")) returned 0x220 [0215.096] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287018.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287018.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.096] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287018.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287018.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0215.097] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.097] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.097] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287018.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287018.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0215.098] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x7898, lpOverlapped=0x0) returned 1 [0215.101] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x78a0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x78a0, lpOverlapped=0x0) returned 1 [0215.102] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0215.102] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.102] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.103] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7898, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x7898, lpOverlapped=0x0) returned 1 [0215.103] FlushFileBuffers (hFile=0x2f4) returned 1 [0215.107] FlushFileBuffers (hFile=0x2fc) returned 1 [0215.108] CloseHandle (hObject=0x2f4) returned 1 [0215.108] CloseHandle (hObject=0x2fc) returned 1 [0215.108] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287018.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287018.wmf")) returned 1 [0215.110] SetEvent (hEvent=0x27c) returned 1 [0215.110] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287019.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287019.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0215.111] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=37658) returned 1 [0215.111] CloseHandle (hObject=0x2fc) returned 1 [0215.111] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287019.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287019.wmf")) returned 0x220 [0215.112] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287019.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287019.wmf")) returned 0x220 [0215.112] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287019.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287019.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.112] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287019.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287019.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0215.112] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.112] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.112] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287019.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287019.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0215.113] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x931a, lpOverlapped=0x0) returned 1 [0215.119] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x9320, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x9320, lpOverlapped=0x0) returned 1 [0215.120] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0215.121] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.121] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.121] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x931a, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x931a, lpOverlapped=0x0) returned 1 [0215.121] FlushFileBuffers (hFile=0x2fc) returned 1 [0215.125] FlushFileBuffers (hFile=0x2f4) returned 1 [0215.126] CloseHandle (hObject=0x2fc) returned 1 [0215.126] CloseHandle (hObject=0x2f4) returned 1 [0215.126] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287019.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287019.wmf")) returned 1 [0215.128] SetEvent (hEvent=0x27c) returned 1 [0215.128] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287020.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0215.129] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=32984) returned 1 [0215.129] CloseHandle (hObject=0x2f4) returned 1 [0215.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287020.wmf")) returned 0x220 [0215.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287020.wmf")) returned 0x220 [0215.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287020.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287020.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.129] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287020.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0215.129] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.129] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.129] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287020.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287020.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0215.130] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x80d8, lpOverlapped=0x0) returned 1 [0215.133] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x80e0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x80e0, lpOverlapped=0x0) returned 1 [0215.135] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0215.135] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.135] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.135] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x80d8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x80d8, lpOverlapped=0x0) returned 1 [0215.135] FlushFileBuffers (hFile=0x2f4) returned 1 [0215.140] FlushFileBuffers (hFile=0x2fc) returned 1 [0215.141] CloseHandle (hObject=0x2f4) returned 1 [0215.141] CloseHandle (hObject=0x2fc) returned 1 [0215.141] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287020.wmf")) returned 1 [0215.143] SetEvent (hEvent=0x27c) returned 1 [0215.143] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287024.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287024.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0215.144] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=50898) returned 1 [0215.144] CloseHandle (hObject=0x2fc) returned 1 [0215.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287024.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287024.wmf")) returned 0x220 [0215.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287024.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287024.wmf")) returned 0x220 [0215.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287024.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287024.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.145] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287024.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287024.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0215.145] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.145] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.145] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287024.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287024.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0215.146] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xc6d2, lpOverlapped=0x0) returned 1 [0215.149] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xc6e0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xc6e0, lpOverlapped=0x0) returned 1 [0215.151] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0215.151] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.151] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.151] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xc6d2, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xc6d2, lpOverlapped=0x0) returned 1 [0215.151] FlushFileBuffers (hFile=0x2fc) returned 1 [0215.154] FlushFileBuffers (hFile=0x2f4) returned 1 [0215.157] CloseHandle (hObject=0x2fc) returned 1 [0215.157] CloseHandle (hObject=0x2f4) returned 1 [0215.157] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287024.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287024.wmf")) returned 1 [0215.159] SetEvent (hEvent=0x27c) returned 1 [0215.159] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287408.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287408.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0215.160] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=52496) returned 1 [0215.160] CloseHandle (hObject=0x2f4) returned 1 [0215.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287408.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287408.wmf")) returned 0x220 [0215.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287408.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287408.wmf")) returned 0x220 [0215.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287408.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287408.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.161] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287408.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287408.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0215.161] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.161] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.161] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287408.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287408.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0215.162] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xcd10, lpOverlapped=0x0) returned 1 [0215.165] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xcd20, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xcd20, lpOverlapped=0x0) returned 1 [0215.167] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0215.167] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.167] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.167] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xcd10, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xcd10, lpOverlapped=0x0) returned 1 [0215.167] FlushFileBuffers (hFile=0x2f4) returned 1 [0215.170] FlushFileBuffers (hFile=0x2fc) returned 1 [0215.172] CloseHandle (hObject=0x2f4) returned 1 [0215.172] CloseHandle (hObject=0x2fc) returned 1 [0215.172] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287408.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287408.wmf")) returned 1 [0215.173] SetEvent (hEvent=0x27c) returned 1 [0215.173] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287415.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287415.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0215.175] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=43020) returned 1 [0215.175] CloseHandle (hObject=0x2fc) returned 1 [0215.175] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287415.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287415.wmf")) returned 0x220 [0215.175] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287415.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287415.wmf")) returned 0x220 [0215.175] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287415.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287415.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.175] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287415.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287415.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0215.175] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.175] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.175] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287415.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287415.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0215.176] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xa80c, lpOverlapped=0x0) returned 1 [0215.179] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xa810, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xa810, lpOverlapped=0x0) returned 1 [0215.181] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0215.181] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.181] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.181] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xa80c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xa80c, lpOverlapped=0x0) returned 1 [0215.182] FlushFileBuffers (hFile=0x2fc) returned 1 [0215.184] FlushFileBuffers (hFile=0x2f4) returned 1 [0215.185] CloseHandle (hObject=0x2fc) returned 1 [0215.185] CloseHandle (hObject=0x2f4) returned 1 [0215.186] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287415.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287415.wmf")) returned 1 [0215.187] SetEvent (hEvent=0x27c) returned 1 [0215.187] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287417.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287417.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0215.188] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=54972) returned 1 [0215.188] CloseHandle (hObject=0x2f4) returned 1 [0215.188] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287417.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287417.wmf")) returned 0x220 [0215.188] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287417.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287417.wmf")) returned 0x220 [0215.188] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287417.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287417.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.188] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287417.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287417.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0215.188] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.188] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.188] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287417.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287417.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0215.189] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xd6bc, lpOverlapped=0x0) returned 1 [0215.192] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xd6c0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xd6c0, lpOverlapped=0x0) returned 1 [0215.194] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0215.194] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.194] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.194] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xd6bc, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xd6bc, lpOverlapped=0x0) returned 1 [0215.195] FlushFileBuffers (hFile=0x2f4) returned 1 [0215.197] FlushFileBuffers (hFile=0x2fc) returned 1 [0215.201] CloseHandle (hObject=0x2f4) returned 1 [0215.201] CloseHandle (hObject=0x2fc) returned 1 [0215.201] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287417.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287417.wmf")) returned 1 [0215.202] SetEvent (hEvent=0x27c) returned 1 [0215.202] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287641.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287641.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0215.204] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=35236) returned 1 [0215.204] CloseHandle (hObject=0x2fc) returned 1 [0215.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287641.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287641.jpg")) returned 0x220 [0215.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287641.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287641.jpg")) returned 0x220 [0215.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287641.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287641.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.204] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287641.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287641.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0215.204] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.204] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.204] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287641.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287641.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0215.205] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x89a4, lpOverlapped=0x0) returned 1 [0215.208] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x89b0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x89b0, lpOverlapped=0x0) returned 1 [0215.210] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0215.210] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.210] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.210] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x89a4, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x89a4, lpOverlapped=0x0) returned 1 [0215.210] FlushFileBuffers (hFile=0x2fc) returned 1 [0215.212] FlushFileBuffers (hFile=0x2f4) returned 1 [0215.214] CloseHandle (hObject=0x2fc) returned 1 [0215.214] CloseHandle (hObject=0x2f4) returned 1 [0215.214] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287641.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287641.jpg")) returned 1 [0215.215] SetEvent (hEvent=0x27c) returned 1 [0215.215] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287642.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287642.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0215.217] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=17105) returned 1 [0215.217] CloseHandle (hObject=0x2f4) returned 1 [0215.217] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287642.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287642.jpg")) returned 0x220 [0215.217] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287642.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287642.jpg")) returned 0x220 [0215.217] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287642.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287642.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.217] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287642.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287642.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0215.217] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.217] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.217] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287642.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287642.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0215.218] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x42d1, lpOverlapped=0x0) returned 1 [0215.220] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x42e0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x42e0, lpOverlapped=0x0) returned 1 [0215.222] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0215.222] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.222] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.222] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x42d1, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x42d1, lpOverlapped=0x0) returned 1 [0215.222] FlushFileBuffers (hFile=0x2f4) returned 1 [0215.226] FlushFileBuffers (hFile=0x2fc) returned 1 [0215.227] CloseHandle (hObject=0x2f4) returned 1 [0215.227] CloseHandle (hObject=0x2fc) returned 1 [0215.227] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287642.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287642.jpg")) returned 1 [0215.228] SetEvent (hEvent=0x27c) returned 1 [0215.228] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287643.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287643.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0215.230] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=16017) returned 1 [0215.230] CloseHandle (hObject=0x2fc) returned 1 [0215.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287643.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287643.jpg")) returned 0x220 [0215.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287643.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287643.jpg")) returned 0x220 [0215.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287643.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287643.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.230] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287643.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287643.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0215.230] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.230] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.230] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287643.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287643.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0215.231] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x3e91, lpOverlapped=0x0) returned 1 [0215.233] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3ea0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x3ea0, lpOverlapped=0x0) returned 1 [0215.234] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0215.234] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.234] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.234] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3e91, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x3e91, lpOverlapped=0x0) returned 1 [0215.234] FlushFileBuffers (hFile=0x2fc) returned 1 [0215.240] FlushFileBuffers (hFile=0x2f4) returned 1 [0215.241] CloseHandle (hObject=0x2fc) returned 1 [0215.241] CloseHandle (hObject=0x2f4) returned 1 [0215.241] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287643.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287643.jpg")) returned 1 [0215.255] SetEvent (hEvent=0x27c) returned 1 [0215.255] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287644.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287644.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0215.257] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=17349) returned 1 [0215.257] CloseHandle (hObject=0x2f4) returned 1 [0215.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287644.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287644.jpg")) returned 0x220 [0215.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287644.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287644.jpg")) returned 0x220 [0215.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287644.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287644.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.257] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287644.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287644.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0215.257] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.257] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.257] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287644.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287644.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0215.259] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x43c5, lpOverlapped=0x0) returned 1 [0215.261] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x43d0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x43d0, lpOverlapped=0x0) returned 1 [0215.262] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0215.262] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.262] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.262] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x43c5, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x43c5, lpOverlapped=0x0) returned 1 [0215.262] FlushFileBuffers (hFile=0x2f4) returned 1 [0215.269] FlushFileBuffers (hFile=0x2fc) returned 1 [0215.271] CloseHandle (hObject=0x2f4) returned 1 [0215.271] CloseHandle (hObject=0x2fc) returned 1 [0215.271] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287644.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287644.jpg")) returned 1 [0215.272] SetEvent (hEvent=0x27c) returned 1 [0215.272] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287645.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287645.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0215.275] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=36230) returned 1 [0215.275] CloseHandle (hObject=0x2fc) returned 1 [0215.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287645.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287645.jpg")) returned 0x220 [0215.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287645.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287645.jpg")) returned 0x220 [0215.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287645.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287645.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.275] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287645.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287645.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0215.275] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.275] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.276] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287645.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287645.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0215.277] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x8d86, lpOverlapped=0x0) returned 1 [0215.281] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x8d90, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x8d90, lpOverlapped=0x0) returned 1 [0215.283] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0215.283] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.283] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.283] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x8d86, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x8d86, lpOverlapped=0x0) returned 1 [0215.284] FlushFileBuffers (hFile=0x2fc) returned 1 [0215.298] FlushFileBuffers (hFile=0x2f4) returned 1 [0215.302] CloseHandle (hObject=0x2fc) returned 1 [0215.302] CloseHandle (hObject=0x2f4) returned 1 [0215.303] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287645.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287645.jpg")) returned 1 [0215.306] SetEvent (hEvent=0x27c) returned 1 [0215.306] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0289430.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0289430.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0215.308] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=11553) returned 1 [0215.308] CloseHandle (hObject=0x2f4) returned 1 [0215.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0289430.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0289430.jpg")) returned 0x220 [0215.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0289430.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0289430.jpg")) returned 0x220 [0215.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0289430.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0289430.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.308] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0289430.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0289430.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0215.308] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.308] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.308] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0289430.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0289430.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0215.310] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2d21, lpOverlapped=0x0) returned 1 [0215.312] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2d30, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2d30, lpOverlapped=0x0) returned 1 [0215.313] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0215.313] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.313] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.314] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2d21, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2d21, lpOverlapped=0x0) returned 1 [0215.314] FlushFileBuffers (hFile=0x2f4) returned 1 [0215.426] FlushFileBuffers (hFile=0x2fc) returned 1 [0215.429] CloseHandle (hObject=0x2f4) returned 1 [0215.429] CloseHandle (hObject=0x2fc) returned 1 [0215.429] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0289430.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0289430.jpg")) returned 1 [0215.430] SetEvent (hEvent=0x27c) returned 1 [0215.430] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0290548.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0290548.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0215.432] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=40586) returned 1 [0215.432] CloseHandle (hObject=0x2fc) returned 1 [0215.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0290548.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0290548.wmf")) returned 0x220 [0215.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0290548.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0290548.wmf")) returned 0x220 [0215.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0290548.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0290548.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.433] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0290548.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0290548.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0215.433] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.433] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.433] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0290548.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0290548.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0215.434] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x9e8a, lpOverlapped=0x0) returned 1 [0215.437] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x9e90, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x9e90, lpOverlapped=0x0) returned 1 [0215.438] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0215.438] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.439] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.439] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x9e8a, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x9e8a, lpOverlapped=0x0) returned 1 [0215.439] FlushFileBuffers (hFile=0x2fc) returned 1 [0215.443] FlushFileBuffers (hFile=0x2f4) returned 1 [0215.451] CloseHandle (hObject=0x2fc) returned 1 [0215.451] CloseHandle (hObject=0x2f4) returned 1 [0215.451] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0290548.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0290548.wmf")) returned 1 [0215.452] SetEvent (hEvent=0x27c) returned 1 [0215.452] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292248.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292248.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0215.457] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=8420) returned 1 [0215.457] CloseHandle (hObject=0x2f4) returned 1 [0215.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292248.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292248.wmf")) returned 0x220 [0215.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292248.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292248.wmf")) returned 0x220 [0215.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292248.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292248.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.457] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292248.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292248.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0215.457] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.457] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.457] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292248.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292248.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0215.458] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x20e4, lpOverlapped=0x0) returned 1 [0215.461] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x20f0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x20f0, lpOverlapped=0x0) returned 1 [0215.462] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0215.462] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.462] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.462] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x20e4, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x20e4, lpOverlapped=0x0) returned 1 [0215.463] FlushFileBuffers (hFile=0x2f4) returned 1 [0215.473] FlushFileBuffers (hFile=0x2fc) returned 1 [0215.479] CloseHandle (hObject=0x2f4) returned 1 [0215.479] CloseHandle (hObject=0x2fc) returned 1 [0215.479] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292248.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292248.wmf")) returned 1 [0215.480] SetEvent (hEvent=0x27c) returned 1 [0215.480] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292272.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292272.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0215.481] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=7012) returned 1 [0215.481] CloseHandle (hObject=0x2fc) returned 1 [0215.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292272.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292272.wmf")) returned 0x220 [0215.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292272.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292272.wmf")) returned 0x220 [0215.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292272.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292272.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.482] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292272.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292272.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0215.482] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.482] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.482] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292272.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292272.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0215.483] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1b64, lpOverlapped=0x0) returned 1 [0215.485] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1b70, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1b70, lpOverlapped=0x0) returned 1 [0215.486] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0215.486] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.486] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.486] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1b64, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1b64, lpOverlapped=0x0) returned 1 [0215.487] FlushFileBuffers (hFile=0x2fc) returned 1 [0215.501] FlushFileBuffers (hFile=0x2f4) returned 1 [0215.504] CloseHandle (hObject=0x2fc) returned 1 [0215.504] CloseHandle (hObject=0x2f4) returned 1 [0215.504] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292272.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292272.wmf")) returned 1 [0215.505] SetEvent (hEvent=0x27c) returned 1 [0215.505] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292286.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292286.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0215.507] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=19286) returned 1 [0215.507] CloseHandle (hObject=0x2f4) returned 1 [0215.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292286.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292286.wmf")) returned 0x220 [0215.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292286.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292286.wmf")) returned 0x220 [0215.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292286.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292286.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.507] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292286.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292286.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0215.507] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.507] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.507] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292286.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292286.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0215.508] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4b56, lpOverlapped=0x0) returned 1 [0215.511] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4b60, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4b60, lpOverlapped=0x0) returned 1 [0215.513] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0215.513] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.513] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.513] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4b56, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4b56, lpOverlapped=0x0) returned 1 [0215.513] FlushFileBuffers (hFile=0x2f4) returned 1 [0215.609] FlushFileBuffers (hFile=0x2fc) returned 1 [0215.619] CloseHandle (hObject=0x2f4) returned 1 [0215.619] CloseHandle (hObject=0x2fc) returned 1 [0215.619] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292286.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292286.wmf")) returned 1 [0215.620] SetEvent (hEvent=0x27c) returned 1 [0215.621] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296279.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0215.621] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=67726) returned 1 [0215.621] CloseHandle (hObject=0x2fc) returned 1 [0215.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296279.wmf")) returned 0x220 [0215.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296279.wmf")) returned 0x220 [0215.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296279.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296279.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.622] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296279.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0215.622] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.622] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.622] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296279.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296279.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0215.625] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1088e, lpOverlapped=0x0) returned 1 [0215.636] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x10890, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x10890, lpOverlapped=0x0) returned 1 [0215.638] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0215.638] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.638] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.638] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1088e, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1088e, lpOverlapped=0x0) returned 1 [0215.638] FlushFileBuffers (hFile=0x2fc) returned 1 [0215.642] FlushFileBuffers (hFile=0x2f4) returned 1 [0215.655] CloseHandle (hObject=0x2fc) returned 1 [0215.655] CloseHandle (hObject=0x2f4) returned 1 [0215.655] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296279.wmf")) returned 1 [0215.658] SetEvent (hEvent=0x27c) returned 1 [0215.658] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297229.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297229.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0215.661] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=22990) returned 1 [0215.661] CloseHandle (hObject=0x2f4) returned 1 [0215.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297229.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297229.wmf")) returned 0x220 [0215.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297229.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297229.wmf")) returned 0x220 [0215.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297229.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297229.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.661] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297229.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297229.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0215.661] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.662] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.662] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297229.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297229.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0215.663] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x59ce, lpOverlapped=0x0) returned 1 [0215.668] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x59d0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x59d0, lpOverlapped=0x0) returned 1 [0215.669] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0215.670] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.670] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.670] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x59ce, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x59ce, lpOverlapped=0x0) returned 1 [0215.670] FlushFileBuffers (hFile=0x2f4) returned 1 [0215.678] FlushFileBuffers (hFile=0x2fc) returned 1 [0215.682] CloseHandle (hObject=0x2f4) returned 1 [0215.682] CloseHandle (hObject=0x2fc) returned 1 [0215.683] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297229.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297229.wmf")) returned 1 [0215.684] SetEvent (hEvent=0x27c) returned 1 [0215.684] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297725.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297725.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0215.685] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=16950) returned 1 [0215.685] CloseHandle (hObject=0x2fc) returned 1 [0215.685] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297725.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297725.wmf")) returned 0x220 [0215.685] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297725.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297725.wmf")) returned 0x220 [0215.685] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297725.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297725.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.685] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297725.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297725.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0215.685] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.685] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.685] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297725.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297725.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0215.686] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4236, lpOverlapped=0x0) returned 1 [0215.689] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4240, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4240, lpOverlapped=0x0) returned 1 [0215.690] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0215.690] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.690] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.691] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4236, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4236, lpOverlapped=0x0) returned 1 [0215.691] FlushFileBuffers (hFile=0x2fc) returned 1 [0215.693] FlushFileBuffers (hFile=0x2f4) returned 1 [0215.700] CloseHandle (hObject=0x2fc) returned 1 [0215.700] CloseHandle (hObject=0x2f4) returned 1 [0215.700] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297725.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297725.wmf")) returned 1 [0215.701] SetEvent (hEvent=0x27c) returned 1 [0215.702] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297757.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297757.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0215.707] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=18750) returned 1 [0215.707] CloseHandle (hObject=0x2f4) returned 1 [0215.707] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297757.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297757.wmf")) returned 0x220 [0215.707] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297757.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297757.wmf")) returned 0x220 [0215.707] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297757.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297757.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.707] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297757.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297757.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0215.707] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.707] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.707] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297757.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297757.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0215.710] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x493e, lpOverlapped=0x0) returned 1 [0215.712] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4940, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4940, lpOverlapped=0x0) returned 1 [0215.713] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0215.714] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.714] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.714] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x493e, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x493e, lpOverlapped=0x0) returned 1 [0215.714] FlushFileBuffers (hFile=0x2f4) returned 1 [0215.725] FlushFileBuffers (hFile=0x2fc) returned 1 [0215.728] CloseHandle (hObject=0x2f4) returned 1 [0215.728] CloseHandle (hObject=0x2fc) returned 1 [0215.728] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297757.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297757.wmf")) returned 1 [0215.729] SetEvent (hEvent=0x27c) returned 1 [0215.729] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0300862.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0300862.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0215.731] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=17796) returned 1 [0215.731] CloseHandle (hObject=0x2fc) returned 1 [0215.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0300862.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0300862.wmf")) returned 0x220 [0215.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0300862.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0300862.wmf")) returned 0x220 [0215.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0300862.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0300862.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.731] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0300862.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0300862.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0215.731] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.731] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.731] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0300862.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0300862.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0215.732] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4584, lpOverlapped=0x0) returned 1 [0215.735] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4590, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4590, lpOverlapped=0x0) returned 1 [0215.736] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0215.736] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.736] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.736] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4584, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4584, lpOverlapped=0x0) returned 1 [0215.737] FlushFileBuffers (hFile=0x2fc) returned 1 [0215.743] FlushFileBuffers (hFile=0x2f4) returned 1 [0215.748] CloseHandle (hObject=0x2fc) returned 1 [0215.748] CloseHandle (hObject=0x2f4) returned 1 [0215.748] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0300862.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0300862.wmf")) returned 1 [0215.749] SetEvent (hEvent=0x27c) returned 1 [0215.749] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301052.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301052.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0215.750] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=10984) returned 1 [0215.750] CloseHandle (hObject=0x2f4) returned 1 [0215.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301052.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301052.wmf")) returned 0x220 [0215.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301052.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301052.wmf")) returned 0x220 [0215.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301052.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301052.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.750] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301052.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301052.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0215.750] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.750] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.751] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301052.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301052.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0215.751] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2ae8, lpOverlapped=0x0) returned 1 [0215.755] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2af0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2af0, lpOverlapped=0x0) returned 1 [0215.757] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0215.757] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.757] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.757] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2ae8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2ae8, lpOverlapped=0x0) returned 1 [0215.757] FlushFileBuffers (hFile=0x2f4) returned 1 [0215.766] FlushFileBuffers (hFile=0x2fc) returned 1 [0215.768] CloseHandle (hObject=0x2f4) returned 1 [0215.768] CloseHandle (hObject=0x2fc) returned 1 [0215.768] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301052.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301052.wmf")) returned 1 [0215.771] SetEvent (hEvent=0x27c) returned 1 [0215.772] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301432.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0215.774] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=19962) returned 1 [0215.774] CloseHandle (hObject=0x2fc) returned 1 [0215.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301432.wmf")) returned 0x220 [0215.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301432.wmf")) returned 0x220 [0215.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301432.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301432.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.774] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301432.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0215.774] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.774] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.774] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301432.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301432.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0215.775] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4dfa, lpOverlapped=0x0) returned 1 [0215.778] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4e00, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4e00, lpOverlapped=0x0) returned 1 [0215.780] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0215.780] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.780] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.780] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4dfa, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4dfa, lpOverlapped=0x0) returned 1 [0215.780] FlushFileBuffers (hFile=0x2fc) returned 1 [0215.794] FlushFileBuffers (hFile=0x2f4) returned 1 [0215.797] CloseHandle (hObject=0x2fc) returned 1 [0215.802] CloseHandle (hObject=0x2f4) returned 1 [0215.803] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301432.wmf")) returned 1 [0215.804] SetEvent (hEvent=0x27c) returned 1 [0215.804] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304405.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304405.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0215.806] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=4158) returned 1 [0215.806] CloseHandle (hObject=0x2f4) returned 1 [0215.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304405.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304405.wmf")) returned 0x220 [0215.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304405.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304405.wmf")) returned 0x220 [0215.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304405.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304405.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.806] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304405.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304405.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0215.806] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.806] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.806] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304405.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304405.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0215.807] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x103e, lpOverlapped=0x0) returned 1 [0215.809] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1040, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1040, lpOverlapped=0x0) returned 1 [0215.811] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0215.811] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.811] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.811] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x103e, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x103e, lpOverlapped=0x0) returned 1 [0215.811] FlushFileBuffers (hFile=0x2f4) returned 1 [0215.823] FlushFileBuffers (hFile=0x2fc) returned 1 [0215.825] CloseHandle (hObject=0x2f4) returned 1 [0215.825] CloseHandle (hObject=0x2fc) returned 1 [0215.825] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304405.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304405.wmf")) returned 1 [0215.826] SetEvent (hEvent=0x27c) returned 1 [0215.826] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304861.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0215.828] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=11512) returned 1 [0215.828] CloseHandle (hObject=0x2fc) returned 1 [0215.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304861.wmf")) returned 0x220 [0215.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304861.wmf")) returned 0x220 [0215.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304861.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304861.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.828] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304861.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0215.828] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.829] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.829] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304861.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304861.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0215.830] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2cf8, lpOverlapped=0x0) returned 1 [0215.832] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2d00, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2d00, lpOverlapped=0x0) returned 1 [0215.833] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0215.833] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.833] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.833] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2cf8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2cf8, lpOverlapped=0x0) returned 1 [0215.833] FlushFileBuffers (hFile=0x2fc) returned 1 [0215.841] FlushFileBuffers (hFile=0x2f4) returned 1 [0215.862] CloseHandle (hObject=0x2fc) returned 1 [0215.862] CloseHandle (hObject=0x2f4) returned 1 [0215.862] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304861.wmf")) returned 1 [0215.863] SetEvent (hEvent=0x27c) returned 1 [0215.863] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309480.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309480.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0215.866] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=10692) returned 1 [0215.866] CloseHandle (hObject=0x2f4) returned 1 [0215.866] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309480.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309480.jpg")) returned 0x220 [0215.866] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309480.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309480.jpg")) returned 0x220 [0215.866] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309480.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309480.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.866] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309480.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309480.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0215.866] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.866] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.867] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309480.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309480.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0215.868] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x29c4, lpOverlapped=0x0) returned 1 [0215.870] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x29d0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x29d0, lpOverlapped=0x0) returned 1 [0215.871] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0215.872] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.872] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.872] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x29c4, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x29c4, lpOverlapped=0x0) returned 1 [0215.872] FlushFileBuffers (hFile=0x2f4) returned 1 [0215.879] FlushFileBuffers (hFile=0x2fc) returned 1 [0215.884] CloseHandle (hObject=0x2f4) returned 1 [0215.884] CloseHandle (hObject=0x2fc) returned 1 [0215.884] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309480.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309480.jpg")) returned 1 [0215.885] SetEvent (hEvent=0x27c) returned 1 [0215.885] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309585.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309585.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0215.887] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=39563) returned 1 [0215.887] CloseHandle (hObject=0x2fc) returned 1 [0215.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309585.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309585.jpg")) returned 0x220 [0215.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309585.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309585.jpg")) returned 0x220 [0215.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309585.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309585.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.888] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309585.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309585.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0215.888] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.888] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.888] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309585.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309585.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0215.889] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x9a8b, lpOverlapped=0x0) returned 1 [0215.892] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x9a90, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x9a90, lpOverlapped=0x0) returned 1 [0215.894] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0215.894] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.894] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.894] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x9a8b, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x9a8b, lpOverlapped=0x0) returned 1 [0215.894] FlushFileBuffers (hFile=0x2fc) returned 1 [0215.905] FlushFileBuffers (hFile=0x2f4) returned 1 [0215.908] CloseHandle (hObject=0x2fc) returned 1 [0215.908] CloseHandle (hObject=0x2f4) returned 1 [0215.908] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309585.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309585.jpg")) returned 1 [0215.910] SetEvent (hEvent=0x27c) returned 1 [0215.910] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309664.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309664.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0215.911] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=43707) returned 1 [0215.911] CloseHandle (hObject=0x2f4) returned 1 [0215.911] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309664.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309664.jpg")) returned 0x220 [0215.911] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309664.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309664.jpg")) returned 0x220 [0215.912] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309664.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309664.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.912] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309664.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309664.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0215.912] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.912] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.912] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309664.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309664.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0215.913] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xaabb, lpOverlapped=0x0) returned 1 [0215.917] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xaac0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xaac0, lpOverlapped=0x0) returned 1 [0215.918] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0215.919] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.919] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.919] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xaabb, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xaabb, lpOverlapped=0x0) returned 1 [0215.919] FlushFileBuffers (hFile=0x2f4) returned 1 [0215.928] FlushFileBuffers (hFile=0x2fc) returned 1 [0215.930] CloseHandle (hObject=0x2f4) returned 1 [0215.931] CloseHandle (hObject=0x2fc) returned 1 [0215.931] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309664.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309664.jpg")) returned 1 [0215.932] SetEvent (hEvent=0x27c) returned 1 [0215.932] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309902.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309902.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0215.933] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=6656) returned 1 [0215.933] CloseHandle (hObject=0x2fc) returned 1 [0215.933] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309902.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309902.wmf")) returned 0x220 [0215.933] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309902.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309902.wmf")) returned 0x220 [0215.933] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309902.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309902.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.933] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309902.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309902.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0215.933] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.933] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.934] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309902.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309902.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0215.934] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1a00, lpOverlapped=0x0) returned 1 [0215.936] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1a10, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1a10, lpOverlapped=0x0) returned 1 [0215.937] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0215.938] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.938] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.938] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1a00, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1a00, lpOverlapped=0x0) returned 1 [0215.938] FlushFileBuffers (hFile=0x2fc) returned 1 [0215.948] FlushFileBuffers (hFile=0x2f4) returned 1 [0215.950] CloseHandle (hObject=0x2fc) returned 1 [0215.950] CloseHandle (hObject=0x2f4) returned 1 [0215.950] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309902.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309902.wmf")) returned 1 [0215.951] SetEvent (hEvent=0x27c) returned 1 [0215.951] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309920.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309920.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0215.952] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=11064) returned 1 [0215.952] CloseHandle (hObject=0x2f4) returned 1 [0215.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309920.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309920.wmf")) returned 0x220 [0215.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309920.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309920.wmf")) returned 0x220 [0215.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309920.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309920.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0215.952] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309920.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309920.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0215.952] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.952] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0215.952] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309920.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309920.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0215.953] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2b38, lpOverlapped=0x0) returned 1 [0215.956] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2b40, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2b40, lpOverlapped=0x0) returned 1 [0215.958] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0215.958] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.958] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0215.958] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2b38, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2b38, lpOverlapped=0x0) returned 1 [0215.958] FlushFileBuffers (hFile=0x2f4) returned 1 [0216.014] FlushFileBuffers (hFile=0x2fc) returned 1 [0216.024] CloseHandle (hObject=0x2f4) returned 1 [0216.024] CloseHandle (hObject=0x2fc) returned 1 [0216.025] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309920.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309920.wmf")) returned 1 [0216.026] SetEvent (hEvent=0x27c) returned 1 [0216.026] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313965.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313965.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0216.028] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=42842) returned 1 [0216.028] CloseHandle (hObject=0x2fc) returned 1 [0216.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313965.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313965.jpg")) returned 0x220 [0216.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313965.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313965.jpg")) returned 0x220 [0216.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313965.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313965.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.028] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313965.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313965.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0216.029] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0216.029] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0216.029] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313965.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313965.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0216.030] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xa75a, lpOverlapped=0x0) returned 1 [0216.034] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xa760, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xa760, lpOverlapped=0x0) returned 1 [0216.036] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0216.036] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0216.036] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0216.036] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xa75a, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xa75a, lpOverlapped=0x0) returned 1 [0216.037] FlushFileBuffers (hFile=0x2fc) returned 1 [0216.044] FlushFileBuffers (hFile=0x2f4) returned 1 [0216.052] CloseHandle (hObject=0x2fc) returned 1 [0216.052] CloseHandle (hObject=0x2f4) returned 1 [0216.052] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313965.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313965.jpg")) returned 1 [0216.054] SetEvent (hEvent=0x27c) returned 1 [0216.054] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313974.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313974.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0216.056] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=47569) returned 1 [0216.056] CloseHandle (hObject=0x2f4) returned 1 [0216.056] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313974.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313974.jpg")) returned 0x220 [0216.056] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313974.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313974.jpg")) returned 0x220 [0216.056] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313974.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313974.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.056] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313974.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313974.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0216.056] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0216.056] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0216.056] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313974.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313974.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0216.057] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xb9d1, lpOverlapped=0x0) returned 1 [0216.061] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xb9e0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xb9e0, lpOverlapped=0x0) returned 1 [0216.063] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0216.064] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0216.064] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0216.064] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xb9d1, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xb9d1, lpOverlapped=0x0) returned 1 [0216.064] FlushFileBuffers (hFile=0x2f4) returned 1 [0216.372] FlushFileBuffers (hFile=0x2fc) returned 1 [0216.385] CloseHandle (hObject=0x2f4) returned 1 [0216.385] CloseHandle (hObject=0x2fc) returned 1 [0216.385] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313974.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313974.jpg")) returned 1 [0216.386] SetEvent (hEvent=0x27c) returned 1 [0216.386] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341557.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341557.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0216.387] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=27304) returned 1 [0216.387] CloseHandle (hObject=0x2fc) returned 1 [0216.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341557.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341557.jpg")) returned 0x220 [0216.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341557.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341557.jpg")) returned 0x220 [0216.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341557.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341557.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.387] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341557.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341557.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0216.387] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0216.387] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0216.388] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341557.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341557.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0216.388] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x6aa8, lpOverlapped=0x0) returned 1 [0216.391] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x6ab0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x6ab0, lpOverlapped=0x0) returned 1 [0216.393] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0216.393] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0216.393] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0216.393] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x6aa8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x6aa8, lpOverlapped=0x0) returned 1 [0216.393] FlushFileBuffers (hFile=0x2fc) returned 1 [0216.396] FlushFileBuffers (hFile=0x2f4) returned 1 [0216.406] CloseHandle (hObject=0x2fc) returned 1 [0216.406] CloseHandle (hObject=0x2f4) returned 1 [0216.406] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341557.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341557.jpg")) returned 1 [0216.407] SetEvent (hEvent=0x27c) returned 1 [0216.407] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341561.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341561.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0216.408] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=42135) returned 1 [0216.408] CloseHandle (hObject=0x2f4) returned 1 [0216.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341561.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341561.jpg")) returned 0x220 [0216.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341561.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341561.jpg")) returned 0x220 [0216.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341561.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341561.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.408] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341561.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341561.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0216.408] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0216.408] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0216.409] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341561.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341561.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0216.409] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xa497, lpOverlapped=0x0) returned 1 [0216.412] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xa4a0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xa4a0, lpOverlapped=0x0) returned 1 [0216.414] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0216.414] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0216.414] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0216.414] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xa497, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xa497, lpOverlapped=0x0) returned 1 [0216.415] FlushFileBuffers (hFile=0x2f4) returned 1 [0216.417] FlushFileBuffers (hFile=0x2fc) returned 1 [0216.424] CloseHandle (hObject=0x2f4) returned 1 [0216.424] CloseHandle (hObject=0x2fc) returned 1 [0216.424] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341561.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341561.jpg")) returned 1 [0216.426] SetEvent (hEvent=0x27c) returned 1 [0216.426] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341636.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341636.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0216.430] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=13845) returned 1 [0216.430] CloseHandle (hObject=0x2fc) returned 1 [0216.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341636.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341636.jpg")) returned 0x220 [0216.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341636.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341636.jpg")) returned 0x220 [0216.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341636.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341636.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.430] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341636.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341636.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0216.430] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0216.430] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0216.430] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341636.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341636.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0216.434] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x3615, lpOverlapped=0x0) returned 1 [0216.436] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3620, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x3620, lpOverlapped=0x0) returned 1 [0216.438] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0216.438] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0216.438] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0216.438] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3615, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x3615, lpOverlapped=0x0) returned 1 [0216.438] FlushFileBuffers (hFile=0x2fc) returned 1 [0216.441] FlushFileBuffers (hFile=0x2f4) returned 1 [0216.447] CloseHandle (hObject=0x2fc) returned 1 [0216.447] CloseHandle (hObject=0x2f4) returned 1 [0216.447] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341636.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341636.jpg")) returned 1 [0216.448] SetEvent (hEvent=0x27c) returned 1 [0216.448] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341653.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341653.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0216.453] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=15863) returned 1 [0216.453] CloseHandle (hObject=0x2f4) returned 1 [0216.453] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341653.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341653.jpg")) returned 0x220 [0216.453] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341653.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341653.jpg")) returned 0x220 [0216.453] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341653.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341653.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.453] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341653.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341653.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0216.453] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0216.453] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0216.453] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341653.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341653.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0216.454] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x3df7, lpOverlapped=0x0) returned 1 [0216.456] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3e00, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x3e00, lpOverlapped=0x0) returned 1 [0216.457] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0216.458] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0216.458] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0216.458] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3df7, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x3df7, lpOverlapped=0x0) returned 1 [0216.458] FlushFileBuffers (hFile=0x2f4) returned 1 [0216.466] FlushFileBuffers (hFile=0x2fc) returned 1 [0216.470] CloseHandle (hObject=0x2f4) returned 1 [0216.470] CloseHandle (hObject=0x2fc) returned 1 [0216.470] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341653.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341653.jpg")) returned 1 [0216.471] SetEvent (hEvent=0x27c) returned 1 [0216.472] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341738.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341738.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0216.472] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=20166) returned 1 [0216.472] CloseHandle (hObject=0x2fc) returned 1 [0216.472] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341738.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341738.jpg")) returned 0x220 [0216.472] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341738.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341738.jpg")) returned 0x220 [0216.472] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341738.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341738.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.473] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341738.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341738.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0216.473] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0216.473] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0216.473] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341738.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341738.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0216.473] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4ec6, lpOverlapped=0x0) returned 1 [0216.475] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4ed0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4ed0, lpOverlapped=0x0) returned 1 [0216.476] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0216.477] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0216.477] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0216.477] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4ec6, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4ec6, lpOverlapped=0x0) returned 1 [0216.477] FlushFileBuffers (hFile=0x2fc) returned 1 [0216.479] FlushFileBuffers (hFile=0x2f4) returned 1 [0216.481] CloseHandle (hObject=0x2fc) returned 1 [0216.481] CloseHandle (hObject=0x2f4) returned 1 [0216.481] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341738.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341738.jpg")) returned 1 [0216.482] SetEvent (hEvent=0x27c) returned 1 [0216.482] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341742.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341742.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0216.483] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=18874) returned 1 [0216.483] CloseHandle (hObject=0x2f4) returned 1 [0216.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341742.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341742.jpg")) returned 0x220 [0216.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341742.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341742.jpg")) returned 0x220 [0216.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341742.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341742.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.484] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341742.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341742.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0216.484] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0216.484] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0216.484] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341742.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341742.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0216.485] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x49ba, lpOverlapped=0x0) returned 1 [0216.487] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x49c0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x49c0, lpOverlapped=0x0) returned 1 [0216.488] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0216.488] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0216.488] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0216.488] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x49ba, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x49ba, lpOverlapped=0x0) returned 1 [0216.489] FlushFileBuffers (hFile=0x2f4) returned 1 [0216.490] FlushFileBuffers (hFile=0x2fc) returned 1 [0216.492] CloseHandle (hObject=0x2f4) returned 1 [0216.492] CloseHandle (hObject=0x2fc) returned 1 [0216.492] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341742.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341742.jpg")) returned 1 [0216.493] SetEvent (hEvent=0x27c) returned 1 [0216.493] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382836.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382836.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0216.494] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=68572) returned 1 [0216.494] CloseHandle (hObject=0x2fc) returned 1 [0216.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382836.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382836.jpg")) returned 0x220 [0216.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382836.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382836.jpg")) returned 0x220 [0216.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382836.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382836.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.494] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382836.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382836.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0216.494] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0216.494] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0216.494] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382836.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382836.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0216.495] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x10bdc, lpOverlapped=0x0) returned 1 [0216.499] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x10be0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x10be0, lpOverlapped=0x0) returned 1 [0216.501] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0216.501] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0216.501] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0216.502] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x10bdc, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x10bdc, lpOverlapped=0x0) returned 1 [0216.502] FlushFileBuffers (hFile=0x2fc) returned 1 [0216.505] FlushFileBuffers (hFile=0x2f4) returned 1 [0216.506] CloseHandle (hObject=0x2fc) returned 1 [0216.506] CloseHandle (hObject=0x2f4) returned 1 [0216.506] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382836.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382836.jpg")) returned 1 [0216.508] SetEvent (hEvent=0x27c) returned 1 [0216.508] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382925.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382925.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0216.509] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=118362) returned 1 [0216.509] CloseHandle (hObject=0x2f4) returned 1 [0216.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382925.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382925.jpg")) returned 0x220 [0216.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382925.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382925.jpg")) returned 0x220 [0216.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382925.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382925.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.509] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382925.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382925.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0216.509] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0216.509] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0216.509] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382925.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382925.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0216.510] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1ce5a, lpOverlapped=0x0) returned 1 [0216.515] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1ce60, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1ce60, lpOverlapped=0x0) returned 1 [0216.519] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0216.519] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0216.519] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0216.519] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1ce5a, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1ce5a, lpOverlapped=0x0) returned 1 [0216.520] FlushFileBuffers (hFile=0x2f4) returned 1 [0216.523] FlushFileBuffers (hFile=0x2fc) returned 1 [0216.525] CloseHandle (hObject=0x2f4) returned 1 [0216.525] CloseHandle (hObject=0x2fc) returned 1 [0216.525] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382925.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382925.jpg")) returned 1 [0216.526] SetEvent (hEvent=0x27c) returned 1 [0216.527] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382926.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382926.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0216.528] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=91948) returned 1 [0216.528] CloseHandle (hObject=0x2fc) returned 1 [0216.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382926.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382926.jpg")) returned 0x220 [0216.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382926.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382926.jpg")) returned 0x220 [0216.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382926.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382926.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.528] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382926.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382926.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0216.528] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0216.528] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0216.528] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382926.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382926.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0216.530] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1672c, lpOverlapped=0x0) returned 1 [0216.534] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x16730, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x16730, lpOverlapped=0x0) returned 1 [0216.536] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0216.536] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0216.537] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0216.537] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1672c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1672c, lpOverlapped=0x0) returned 1 [0216.537] FlushFileBuffers (hFile=0x2fc) returned 1 [0216.540] FlushFileBuffers (hFile=0x2f4) returned 1 [0216.541] CloseHandle (hObject=0x2fc) returned 1 [0216.541] CloseHandle (hObject=0x2f4) returned 1 [0216.541] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382926.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382926.jpg")) returned 1 [0216.543] SetEvent (hEvent=0x27c) returned 1 [0216.543] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382927.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382927.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0216.544] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=129132) returned 1 [0216.545] CloseHandle (hObject=0x2f4) returned 1 [0216.545] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382927.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382927.jpg")) returned 0x220 [0216.545] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382927.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382927.jpg")) returned 0x220 [0216.545] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382927.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382927.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.545] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382927.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382927.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0216.545] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0216.545] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0216.545] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382927.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382927.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0216.546] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1f86c, lpOverlapped=0x0) returned 1 [0216.552] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1f870, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1f870, lpOverlapped=0x0) returned 1 [0216.555] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0216.556] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0216.556] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0216.556] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1f86c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1f86c, lpOverlapped=0x0) returned 1 [0216.556] FlushFileBuffers (hFile=0x2f4) returned 1 [0216.561] FlushFileBuffers (hFile=0x2fc) returned 1 [0216.562] CloseHandle (hObject=0x2f4) returned 1 [0216.562] CloseHandle (hObject=0x2fc) returned 1 [0216.562] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382927.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382927.jpg")) returned 1 [0216.564] SetEvent (hEvent=0x27c) returned 1 [0216.564] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382930.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382930.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0216.566] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=112698) returned 1 [0216.566] CloseHandle (hObject=0x2fc) returned 1 [0216.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382930.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382930.jpg")) returned 0x220 [0216.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382930.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382930.jpg")) returned 0x220 [0216.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382930.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382930.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.566] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382930.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382930.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0216.566] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0216.566] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0216.566] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382930.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382930.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0216.567] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1b83a, lpOverlapped=0x0) returned 1 [0216.572] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1b840, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1b840, lpOverlapped=0x0) returned 1 [0216.575] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0216.575] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0216.575] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0216.575] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1b83a, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1b83a, lpOverlapped=0x0) returned 1 [0216.576] FlushFileBuffers (hFile=0x2fc) returned 1 [0216.579] FlushFileBuffers (hFile=0x2f4) returned 1 [0216.585] CloseHandle (hObject=0x2fc) returned 1 [0216.585] CloseHandle (hObject=0x2f4) returned 1 [0216.585] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382930.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382930.jpg")) returned 1 [0216.587] SetEvent (hEvent=0x27c) returned 1 [0216.587] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382931.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382931.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0216.589] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=122691) returned 1 [0216.589] CloseHandle (hObject=0x2f4) returned 1 [0216.589] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382931.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382931.jpg")) returned 0x220 [0216.589] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382931.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382931.jpg")) returned 0x220 [0216.589] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382931.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382931.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.589] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382931.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382931.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0216.589] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0216.590] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0216.590] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382931.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382931.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0216.591] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1df43, lpOverlapped=0x0) returned 1 [0216.596] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1df50, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1df50, lpOverlapped=0x0) returned 1 [0216.599] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0216.599] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0216.599] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0216.599] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1df43, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1df43, lpOverlapped=0x0) returned 1 [0216.599] FlushFileBuffers (hFile=0x2f4) returned 1 [0216.602] FlushFileBuffers (hFile=0x2fc) returned 1 [0216.603] CloseHandle (hObject=0x2f4) returned 1 [0216.603] CloseHandle (hObject=0x2fc) returned 1 [0216.603] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382931.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382931.jpg")) returned 1 [0216.605] SetEvent (hEvent=0x27c) returned 1 [0216.605] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382938.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382938.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0216.615] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=99539) returned 1 [0216.615] CloseHandle (hObject=0x2fc) returned 1 [0216.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382938.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382938.jpg")) returned 0x220 [0216.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382938.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382938.jpg")) returned 0x220 [0216.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382938.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382938.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.615] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382938.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382938.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0216.615] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0216.615] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0216.615] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382938.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382938.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0216.617] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x184d3, lpOverlapped=0x0) returned 1 [0216.627] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x184e0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x184e0, lpOverlapped=0x0) returned 1 [0216.629] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0216.629] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0216.629] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0216.629] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x184d3, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x184d3, lpOverlapped=0x0) returned 1 [0216.630] FlushFileBuffers (hFile=0x2fc) returned 1 [0216.633] FlushFileBuffers (hFile=0x2f4) returned 1 [0216.635] CloseHandle (hObject=0x2fc) returned 1 [0216.635] CloseHandle (hObject=0x2f4) returned 1 [0216.635] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382938.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382938.jpg")) returned 1 [0216.637] SetEvent (hEvent=0x27c) returned 1 [0216.637] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382939.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382939.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0216.638] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=109477) returned 1 [0216.638] CloseHandle (hObject=0x2f4) returned 1 [0216.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382939.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382939.jpg")) returned 0x220 [0216.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382939.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382939.jpg")) returned 0x220 [0216.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382939.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382939.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.639] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382939.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382939.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0216.639] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0216.639] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0216.639] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382939.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382939.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0216.640] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1aba5, lpOverlapped=0x0) returned 1 [0216.645] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1abb0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1abb0, lpOverlapped=0x0) returned 1 [0216.647] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0216.648] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0216.648] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0216.648] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1aba5, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1aba5, lpOverlapped=0x0) returned 1 [0216.648] FlushFileBuffers (hFile=0x2f4) returned 1 [0216.791] FlushFileBuffers (hFile=0x2fc) returned 1 [0216.793] CloseHandle (hObject=0x2f4) returned 1 [0216.793] CloseHandle (hObject=0x2fc) returned 1 [0216.793] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382939.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382939.jpg")) returned 1 [0216.795] SetEvent (hEvent=0x27c) returned 1 [0216.795] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382954.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382954.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0216.798] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=88703) returned 1 [0216.798] CloseHandle (hObject=0x2fc) returned 1 [0216.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382954.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382954.jpg")) returned 0x220 [0216.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382954.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382954.jpg")) returned 0x220 [0216.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382954.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382954.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.799] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382954.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382954.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0216.799] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0216.799] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0216.799] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382954.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382954.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0216.800] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x15a7f, lpOverlapped=0x0) returned 1 [0216.805] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x15a80, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x15a80, lpOverlapped=0x0) returned 1 [0216.807] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0216.808] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0216.808] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0216.808] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x15a7f, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x15a7f, lpOverlapped=0x0) returned 1 [0216.808] FlushFileBuffers (hFile=0x2fc) returned 1 [0216.819] FlushFileBuffers (hFile=0x2f4) returned 1 [0216.827] CloseHandle (hObject=0x2fc) returned 1 [0216.828] CloseHandle (hObject=0x2f4) returned 1 [0216.828] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382954.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382954.jpg")) returned 1 [0216.829] SetEvent (hEvent=0x27c) returned 1 [0216.829] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382957.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382957.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0216.831] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=109037) returned 1 [0216.831] CloseHandle (hObject=0x2f4) returned 1 [0216.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382957.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382957.jpg")) returned 0x220 [0216.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382957.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382957.jpg")) returned 0x220 [0216.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382957.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382957.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.832] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382957.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382957.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0216.832] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0216.832] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0216.832] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382957.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382957.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0216.833] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1a9ed, lpOverlapped=0x0) returned 1 [0216.838] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1a9f0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1a9f0, lpOverlapped=0x0) returned 1 [0216.841] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0216.841] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0216.841] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0216.841] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1a9ed, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1a9ed, lpOverlapped=0x0) returned 1 [0216.842] FlushFileBuffers (hFile=0x2f4) returned 1 [0216.873] FlushFileBuffers (hFile=0x2fc) returned 1 [0216.877] CloseHandle (hObject=0x2f4) returned 1 [0216.877] CloseHandle (hObject=0x2fc) returned 1 [0216.877] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382957.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382957.jpg")) returned 1 [0216.879] SetEvent (hEvent=0x27c) returned 1 [0216.879] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382959.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382959.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0216.880] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=85898) returned 1 [0216.880] CloseHandle (hObject=0x2fc) returned 1 [0216.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382959.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382959.jpg")) returned 0x220 [0216.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382959.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382959.jpg")) returned 0x220 [0216.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382959.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382959.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.881] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382959.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382959.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0216.881] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0216.881] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0216.881] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382959.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382959.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0216.882] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x14f8a, lpOverlapped=0x0) returned 1 [0216.885] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x14f90, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x14f90, lpOverlapped=0x0) returned 1 [0216.888] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0216.888] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0216.888] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0216.888] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x14f8a, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x14f8a, lpOverlapped=0x0) returned 1 [0216.888] FlushFileBuffers (hFile=0x2fc) returned 1 [0216.898] FlushFileBuffers (hFile=0x2f4) returned 1 [0216.906] CloseHandle (hObject=0x2fc) returned 1 [0216.906] CloseHandle (hObject=0x2f4) returned 1 [0216.906] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382959.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382959.jpg")) returned 1 [0216.908] SetEvent (hEvent=0x27c) returned 1 [0216.908] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382961.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382961.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0216.909] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=101060) returned 1 [0216.909] CloseHandle (hObject=0x2f4) returned 1 [0216.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382961.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382961.jpg")) returned 0x220 [0216.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382961.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382961.jpg")) returned 0x220 [0216.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382961.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382961.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.909] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382961.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382961.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0216.909] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0216.909] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0216.909] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382961.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382961.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0216.911] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x18ac4, lpOverlapped=0x0) returned 1 [0216.918] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x18ad0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x18ad0, lpOverlapped=0x0) returned 1 [0216.921] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0216.921] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0216.921] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0216.921] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x18ac4, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x18ac4, lpOverlapped=0x0) returned 1 [0216.922] FlushFileBuffers (hFile=0x2f4) returned 1 [0216.941] FlushFileBuffers (hFile=0x2fc) returned 1 [0216.943] CloseHandle (hObject=0x2f4) returned 1 [0216.943] CloseHandle (hObject=0x2fc) returned 1 [0216.943] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382961.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382961.jpg")) returned 1 [0216.945] SetEvent (hEvent=0x27c) returned 1 [0216.945] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382963.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382963.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0216.946] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=97774) returned 1 [0216.946] CloseHandle (hObject=0x2fc) returned 1 [0216.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382963.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382963.jpg")) returned 0x220 [0216.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382963.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382963.jpg")) returned 0x220 [0216.947] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382963.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382963.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.947] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382963.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382963.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0216.947] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0216.947] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0216.947] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382963.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382963.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0216.948] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x17dee, lpOverlapped=0x0) returned 1 [0216.957] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x17df0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x17df0, lpOverlapped=0x0) returned 1 [0216.959] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0216.959] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0216.959] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0216.960] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x17dee, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x17dee, lpOverlapped=0x0) returned 1 [0216.960] FlushFileBuffers (hFile=0x2fc) returned 1 [0216.964] FlushFileBuffers (hFile=0x2f4) returned 1 [0216.982] CloseHandle (hObject=0x2fc) returned 1 [0216.982] CloseHandle (hObject=0x2f4) returned 1 [0216.982] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382963.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382963.jpg")) returned 1 [0216.984] SetEvent (hEvent=0x27c) returned 1 [0216.984] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382966.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382966.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0216.985] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=100488) returned 1 [0216.985] CloseHandle (hObject=0x2f4) returned 1 [0216.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382966.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382966.jpg")) returned 0x220 [0216.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382966.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382966.jpg")) returned 0x220 [0216.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382966.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382966.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0216.986] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382966.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382966.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0216.986] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0216.986] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0216.986] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382966.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382966.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0216.988] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x18888, lpOverlapped=0x0) returned 1 [0216.994] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x18890, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x18890, lpOverlapped=0x0) returned 1 [0216.997] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0216.997] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0216.997] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0216.997] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x18888, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x18888, lpOverlapped=0x0) returned 1 [0216.998] FlushFileBuffers (hFile=0x2f4) returned 1 [0217.009] FlushFileBuffers (hFile=0x2fc) returned 1 [0217.015] CloseHandle (hObject=0x2f4) returned 1 [0217.015] CloseHandle (hObject=0x2fc) returned 1 [0217.016] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382966.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382966.jpg")) returned 1 [0217.017] SetEvent (hEvent=0x27c) returned 1 [0217.017] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382968.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382968.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0217.018] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=112479) returned 1 [0217.018] CloseHandle (hObject=0x2fc) returned 1 [0217.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382968.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382968.jpg")) returned 0x220 [0217.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382968.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382968.jpg")) returned 0x220 [0217.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382968.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382968.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.019] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382968.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382968.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0217.019] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.019] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.019] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382968.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382968.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0217.020] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1b75f, lpOverlapped=0x0) returned 1 [0217.024] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1b760, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1b760, lpOverlapped=0x0) returned 1 [0217.027] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0217.027] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.027] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.028] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1b75f, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1b75f, lpOverlapped=0x0) returned 1 [0217.028] FlushFileBuffers (hFile=0x2fc) returned 1 [0217.046] FlushFileBuffers (hFile=0x2f4) returned 1 [0217.057] CloseHandle (hObject=0x2fc) returned 1 [0217.057] CloseHandle (hObject=0x2f4) returned 1 [0217.057] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382968.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382968.jpg")) returned 1 [0217.059] SetEvent (hEvent=0x27c) returned 1 [0217.059] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382970.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382970.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0217.062] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=88980) returned 1 [0217.062] CloseHandle (hObject=0x2f4) returned 1 [0217.062] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382970.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382970.jpg")) returned 0x220 [0217.062] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382970.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382970.jpg")) returned 0x220 [0217.062] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382970.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382970.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.062] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382970.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382970.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0217.062] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.062] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.062] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382970.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382970.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0217.064] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x15b94, lpOverlapped=0x0) returned 1 [0217.077] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x15ba0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x15ba0, lpOverlapped=0x0) returned 1 [0217.079] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0217.080] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.080] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.080] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x15b94, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x15b94, lpOverlapped=0x0) returned 1 [0217.080] FlushFileBuffers (hFile=0x2f4) returned 1 [0217.089] FlushFileBuffers (hFile=0x2fc) returned 1 [0217.091] CloseHandle (hObject=0x2f4) returned 1 [0217.092] CloseHandle (hObject=0x2fc) returned 1 [0217.092] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382970.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382970.jpg")) returned 1 [0217.093] SetEvent (hEvent=0x27c) returned 1 [0217.103] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384885.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384885.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0217.104] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=97145) returned 1 [0217.104] CloseHandle (hObject=0x2fc) returned 1 [0217.104] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384885.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384885.jpg")) returned 0x220 [0217.104] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384885.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384885.jpg")) returned 0x220 [0217.104] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384885.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384885.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.105] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384885.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384885.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0217.105] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.105] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.105] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384885.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384885.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0217.106] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x17b79, lpOverlapped=0x0) returned 1 [0217.110] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x17b80, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x17b80, lpOverlapped=0x0) returned 1 [0217.113] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0217.113] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.113] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.113] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x17b79, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x17b79, lpOverlapped=0x0) returned 1 [0217.113] FlushFileBuffers (hFile=0x2fc) returned 1 [0217.127] FlushFileBuffers (hFile=0x2f4) returned 1 [0217.129] CloseHandle (hObject=0x2fc) returned 1 [0217.129] CloseHandle (hObject=0x2f4) returned 1 [0217.129] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384885.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384885.jpg")) returned 1 [0217.131] SetEvent (hEvent=0x27c) returned 1 [0217.131] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384895.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0217.132] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=55542) returned 1 [0217.132] CloseHandle (hObject=0x2f4) returned 1 [0217.132] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384895.jpg")) returned 0x220 [0217.132] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384895.jpg")) returned 0x220 [0217.132] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384895.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384895.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.132] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384895.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0217.132] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.132] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.132] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384895.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384895.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0217.133] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xd8f6, lpOverlapped=0x0) returned 1 [0217.178] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xd900, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xd900, lpOverlapped=0x0) returned 1 [0217.182] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0217.182] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.182] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.182] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xd8f6, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xd8f6, lpOverlapped=0x0) returned 1 [0217.182] FlushFileBuffers (hFile=0x2f4) returned 1 [0217.532] FlushFileBuffers (hFile=0x2fc) returned 1 [0217.534] CloseHandle (hObject=0x2f4) returned 1 [0217.534] CloseHandle (hObject=0x2fc) returned 1 [0217.534] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384895.jpg")) returned 1 [0217.535] SetEvent (hEvent=0x27c) returned 1 [0217.536] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400003.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400003.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0217.537] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=124982) returned 1 [0217.537] CloseHandle (hObject=0x2fc) returned 1 [0217.537] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400003.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400003.png")) returned 0x220 [0217.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400003.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400003.png")) returned 0x220 [0217.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400003.PNG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400003.png.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.538] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400003.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400003.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0217.538] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.538] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.538] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400003.PNG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400003.png.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0217.539] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1e836, lpOverlapped=0x0) returned 1 [0217.545] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1e840, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1e840, lpOverlapped=0x0) returned 1 [0217.547] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0217.548] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.548] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.548] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1e836, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1e836, lpOverlapped=0x0) returned 1 [0217.548] FlushFileBuffers (hFile=0x2fc) returned 1 [0217.551] FlushFileBuffers (hFile=0x2f4) returned 1 [0217.553] CloseHandle (hObject=0x2fc) returned 1 [0217.553] CloseHandle (hObject=0x2f4) returned 1 [0217.553] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400003.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400003.png")) returned 1 [0217.555] SetEvent (hEvent=0x27c) returned 1 [0217.555] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400004.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400004.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0217.556] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=105053) returned 1 [0217.556] CloseHandle (hObject=0x2f4) returned 1 [0217.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400004.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400004.png")) returned 0x220 [0217.557] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400004.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400004.png")) returned 0x220 [0217.557] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400004.PNG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400004.png.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.557] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400004.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400004.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0217.557] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.557] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.557] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400004.PNG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400004.png.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0217.558] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x19a5d, lpOverlapped=0x0) returned 1 [0217.564] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x19a60, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x19a60, lpOverlapped=0x0) returned 1 [0217.566] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0217.566] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.566] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.566] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x19a5d, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x19a5d, lpOverlapped=0x0) returned 1 [0217.567] FlushFileBuffers (hFile=0x2f4) returned 1 [0217.569] FlushFileBuffers (hFile=0x2fc) returned 1 [0217.571] CloseHandle (hObject=0x2f4) returned 1 [0217.571] CloseHandle (hObject=0x2fc) returned 1 [0217.571] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400004.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400004.png")) returned 1 [0217.572] SetEvent (hEvent=0x27c) returned 1 [0217.572] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400005.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400005.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0217.574] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=96066) returned 1 [0217.574] CloseHandle (hObject=0x2fc) returned 1 [0217.574] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400005.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400005.png")) returned 0x220 [0217.574] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400005.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400005.png")) returned 0x220 [0217.574] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400005.PNG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400005.png.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.574] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400005.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400005.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0217.574] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.574] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.574] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400005.PNG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400005.png.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0217.575] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x17742, lpOverlapped=0x0) returned 1 [0217.580] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x17750, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x17750, lpOverlapped=0x0) returned 1 [0217.583] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0217.583] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.583] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.583] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x17742, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x17742, lpOverlapped=0x0) returned 1 [0217.584] FlushFileBuffers (hFile=0x2fc) returned 1 [0217.586] FlushFileBuffers (hFile=0x2f4) returned 1 [0217.588] CloseHandle (hObject=0x2fc) returned 1 [0217.588] CloseHandle (hObject=0x2f4) returned 1 [0217.588] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400005.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400005.png")) returned 1 [0217.589] SetEvent (hEvent=0x27c) returned 1 [0217.589] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\java_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0217.591] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=9797) returned 1 [0217.591] CloseHandle (hObject=0x2f4) returned 1 [0217.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\java_01.mid")) returned 0x220 [0217.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\java_01.mid")) returned 0x220 [0217.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\java_01.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.591] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\java_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0217.591] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.591] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.591] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\java_01.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0217.592] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2645, lpOverlapped=0x0) returned 1 [0217.594] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2650, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2650, lpOverlapped=0x0) returned 1 [0217.596] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0217.596] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.596] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.596] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2645, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2645, lpOverlapped=0x0) returned 1 [0217.596] FlushFileBuffers (hFile=0x2f4) returned 1 [0217.599] FlushFileBuffers (hFile=0x2fc) returned 1 [0217.601] CloseHandle (hObject=0x2f4) returned 1 [0217.601] CloseHandle (hObject=0x2fc) returned 1 [0217.601] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\java_01.mid")) returned 1 [0217.602] SetEvent (hEvent=0x27c) returned 1 [0217.602] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\jngle_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0217.603] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=5843) returned 1 [0217.603] CloseHandle (hObject=0x2fc) returned 1 [0217.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\jngle_01.mid")) returned 0x220 [0217.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\jngle_01.mid")) returned 0x220 [0217.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\jngle_01.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.603] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\jngle_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0217.604] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.604] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.604] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\jngle_01.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0217.605] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x16d3, lpOverlapped=0x0) returned 1 [0217.606] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x16e0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x16e0, lpOverlapped=0x0) returned 1 [0217.607] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0217.608] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.608] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.608] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x16d3, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x16d3, lpOverlapped=0x0) returned 1 [0217.608] FlushFileBuffers (hFile=0x2fc) returned 1 [0217.610] FlushFileBuffers (hFile=0x2f4) returned 1 [0217.611] CloseHandle (hObject=0x2fc) returned 1 [0217.612] CloseHandle (hObject=0x2f4) returned 1 [0217.612] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\jngle_01.mid")) returned 1 [0217.613] SetEvent (hEvent=0x27c) returned 1 [0217.613] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00021_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00021_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0217.614] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=5622) returned 1 [0217.614] CloseHandle (hObject=0x2f4) returned 1 [0217.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00021_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00021_.wmf")) returned 0x220 [0217.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00021_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00021_.wmf")) returned 0x220 [0217.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00021_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00021_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.615] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00021_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00021_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0217.615] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.615] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.615] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00021_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00021_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0217.616] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x15f6, lpOverlapped=0x0) returned 1 [0217.617] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1600, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1600, lpOverlapped=0x0) returned 1 [0217.618] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0217.619] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.619] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.619] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x15f6, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x15f6, lpOverlapped=0x0) returned 1 [0217.619] FlushFileBuffers (hFile=0x2f4) returned 1 [0217.622] FlushFileBuffers (hFile=0x2fc) returned 1 [0217.623] CloseHandle (hObject=0x2f4) returned 1 [0217.623] CloseHandle (hObject=0x2fc) returned 1 [0217.623] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00021_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00021_.wmf")) returned 1 [0217.624] SetEvent (hEvent=0x27c) returned 1 [0217.624] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00132_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00132_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0217.626] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=4240) returned 1 [0217.626] CloseHandle (hObject=0x2fc) returned 1 [0217.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00132_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00132_.wmf")) returned 0x220 [0217.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00132_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00132_.wmf")) returned 0x220 [0217.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00132_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00132_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.626] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00132_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00132_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0217.626] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.626] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.626] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00132_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00132_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0217.627] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1090, lpOverlapped=0x0) returned 1 [0217.629] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x10a0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x10a0, lpOverlapped=0x0) returned 1 [0217.630] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0217.630] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.630] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.630] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1090, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1090, lpOverlapped=0x0) returned 1 [0217.631] FlushFileBuffers (hFile=0x2fc) returned 1 [0217.635] FlushFileBuffers (hFile=0x2f4) returned 1 [0217.636] CloseHandle (hObject=0x2fc) returned 1 [0217.636] CloseHandle (hObject=0x2f4) returned 1 [0217.637] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00132_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00132_.wmf")) returned 1 [0217.637] SetEvent (hEvent=0x27c) returned 1 [0217.638] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00646_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00646_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0217.638] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=12770) returned 1 [0217.638] CloseHandle (hObject=0x2f4) returned 1 [0217.638] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00646_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00646_.wmf")) returned 0x220 [0217.638] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00646_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00646_.wmf")) returned 0x220 [0217.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00646_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00646_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.639] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00646_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00646_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0217.639] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.639] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.639] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00646_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00646_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0217.640] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x31e2, lpOverlapped=0x0) returned 1 [0217.642] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x31f0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x31f0, lpOverlapped=0x0) returned 1 [0217.643] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0217.643] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.643] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.643] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x31e2, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x31e2, lpOverlapped=0x0) returned 1 [0217.643] FlushFileBuffers (hFile=0x2f4) returned 1 [0217.665] FlushFileBuffers (hFile=0x2fc) returned 1 [0217.666] CloseHandle (hObject=0x2f4) returned 1 [0217.666] CloseHandle (hObject=0x2fc) returned 1 [0217.667] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00646_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00646_.wmf")) returned 1 [0217.668] SetEvent (hEvent=0x27c) returned 1 [0217.668] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\music_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0217.669] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=6880) returned 1 [0217.669] CloseHandle (hObject=0x2fc) returned 1 [0217.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\music_01.mid")) returned 0x220 [0217.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\music_01.mid")) returned 0x220 [0217.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\music_01.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.669] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\music_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0217.669] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.669] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.670] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\music_01.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0217.671] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1ae0, lpOverlapped=0x0) returned 1 [0217.672] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1af0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1af0, lpOverlapped=0x0) returned 1 [0217.673] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0217.674] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.674] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.674] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1ae0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1ae0, lpOverlapped=0x0) returned 1 [0217.674] FlushFileBuffers (hFile=0x2fc) returned 1 [0217.676] FlushFileBuffers (hFile=0x2f4) returned 1 [0217.677] CloseHandle (hObject=0x2fc) returned 1 [0217.677] CloseHandle (hObject=0x2f4) returned 1 [0217.677] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\music_01.mid")) returned 1 [0217.678] SetEvent (hEvent=0x27c) returned 1 [0217.678] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00042_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00042_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0217.680] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=20548) returned 1 [0217.680] CloseHandle (hObject=0x2f4) returned 1 [0217.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00042_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00042_.wmf")) returned 0x220 [0217.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00042_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00042_.wmf")) returned 0x220 [0217.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00042_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00042_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.680] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00042_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00042_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0217.680] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.681] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.681] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00042_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00042_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0217.682] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x5044, lpOverlapped=0x0) returned 1 [0217.684] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5050, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x5050, lpOverlapped=0x0) returned 1 [0217.685] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0217.686] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.686] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.686] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5044, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x5044, lpOverlapped=0x0) returned 1 [0217.686] FlushFileBuffers (hFile=0x2f4) returned 1 [0217.688] FlushFileBuffers (hFile=0x2fc) returned 1 [0217.689] CloseHandle (hObject=0x2f4) returned 1 [0217.689] CloseHandle (hObject=0x2fc) returned 1 [0217.689] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00042_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00042_.wmf")) returned 1 [0217.691] SetEvent (hEvent=0x27c) returned 1 [0217.691] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00057_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00057_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0217.692] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=10818) returned 1 [0217.692] CloseHandle (hObject=0x2fc) returned 1 [0217.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00057_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00057_.wmf")) returned 0x220 [0217.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00057_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00057_.wmf")) returned 0x220 [0217.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00057_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00057_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.693] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00057_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00057_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0217.693] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.693] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.693] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00057_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00057_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0217.695] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2a42, lpOverlapped=0x0) returned 1 [0217.696] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2a50, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2a50, lpOverlapped=0x0) returned 1 [0217.698] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0217.698] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.698] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.698] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2a42, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2a42, lpOverlapped=0x0) returned 1 [0217.698] FlushFileBuffers (hFile=0x2fc) returned 1 [0217.701] FlushFileBuffers (hFile=0x2f4) returned 1 [0217.702] CloseHandle (hObject=0x2fc) returned 1 [0217.702] CloseHandle (hObject=0x2f4) returned 1 [0217.702] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00057_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00057_.wmf")) returned 1 [0217.703] SetEvent (hEvent=0x27c) returned 1 [0217.703] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00058_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00058_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0217.704] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3754) returned 1 [0217.704] CloseHandle (hObject=0x2f4) returned 1 [0217.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00058_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00058_.wmf")) returned 0x220 [0217.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00058_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00058_.wmf")) returned 0x220 [0217.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00058_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00058_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.705] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00058_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00058_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0217.705] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.705] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.705] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00058_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00058_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0217.706] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xeaa, lpOverlapped=0x0) returned 1 [0217.708] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xeb0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xeb0, lpOverlapped=0x0) returned 1 [0217.709] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0217.709] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.709] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.709] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xeaa, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xeaa, lpOverlapped=0x0) returned 1 [0217.709] FlushFileBuffers (hFile=0x2f4) returned 1 [0217.712] FlushFileBuffers (hFile=0x2fc) returned 1 [0217.713] CloseHandle (hObject=0x2f4) returned 1 [0217.713] CloseHandle (hObject=0x2fc) returned 1 [0217.713] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00058_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00058_.wmf")) returned 1 [0217.714] SetEvent (hEvent=0x27c) returned 1 [0217.714] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00068_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00068_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0217.715] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=4900) returned 1 [0217.715] CloseHandle (hObject=0x2fc) returned 1 [0217.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00068_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00068_.wmf")) returned 0x220 [0217.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00068_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00068_.wmf")) returned 0x220 [0217.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00068_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00068_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.715] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00068_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00068_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0217.715] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.716] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.716] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00068_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00068_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0217.716] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1324, lpOverlapped=0x0) returned 1 [0217.718] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1330, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1330, lpOverlapped=0x0) returned 1 [0217.719] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0217.720] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.720] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.720] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1324, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1324, lpOverlapped=0x0) returned 1 [0217.720] FlushFileBuffers (hFile=0x2fc) returned 1 [0217.722] FlushFileBuffers (hFile=0x2f4) returned 1 [0217.723] CloseHandle (hObject=0x2fc) returned 1 [0217.723] CloseHandle (hObject=0x2f4) returned 1 [0217.723] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00068_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00068_.wmf")) returned 1 [0217.724] SetEvent (hEvent=0x27c) returned 1 [0217.724] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00238_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00238_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0217.725] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=4996) returned 1 [0217.725] CloseHandle (hObject=0x2f4) returned 1 [0217.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00238_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00238_.wmf")) returned 0x220 [0217.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00238_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00238_.wmf")) returned 0x220 [0217.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00238_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00238_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00238_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00238_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0217.725] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.726] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.726] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00238_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00238_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0217.726] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1384, lpOverlapped=0x0) returned 1 [0217.728] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1390, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1390, lpOverlapped=0x0) returned 1 [0217.729] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0217.729] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.729] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.729] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1384, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1384, lpOverlapped=0x0) returned 1 [0217.729] FlushFileBuffers (hFile=0x2f4) returned 1 [0217.731] FlushFileBuffers (hFile=0x2fc) returned 1 [0217.738] CloseHandle (hObject=0x2f4) returned 1 [0217.738] CloseHandle (hObject=0x2fc) returned 1 [0217.738] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00238_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00238_.wmf")) returned 1 [0217.739] SetEvent (hEvent=0x27c) returned 1 [0217.739] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00330_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00330_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0217.740] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2148) returned 1 [0217.740] CloseHandle (hObject=0x2fc) returned 1 [0217.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00330_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00330_.wmf")) returned 0x220 [0217.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00330_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00330_.wmf")) returned 0x220 [0217.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00330_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00330_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00330_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00330_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0217.741] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.741] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00330_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00330_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0217.742] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x864, lpOverlapped=0x0) returned 1 [0217.743] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x870, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x870, lpOverlapped=0x0) returned 1 [0217.744] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0217.744] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.744] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.744] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x864, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x864, lpOverlapped=0x0) returned 1 [0217.744] FlushFileBuffers (hFile=0x2fc) returned 1 [0217.746] FlushFileBuffers (hFile=0x2f4) returned 1 [0217.747] CloseHandle (hObject=0x2fc) returned 1 [0217.747] CloseHandle (hObject=0x2f4) returned 1 [0217.747] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00330_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00330_.wmf")) returned 1 [0217.749] SetEvent (hEvent=0x27c) returned 1 [0217.749] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00388_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00388_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0217.751] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=4466) returned 1 [0217.751] CloseHandle (hObject=0x2f4) returned 1 [0217.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00388_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00388_.wmf")) returned 0x220 [0217.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00388_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00388_.wmf")) returned 0x220 [0217.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00388_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00388_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.751] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00388_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00388_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0217.751] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.751] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.751] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00388_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00388_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0217.752] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1172, lpOverlapped=0x0) returned 1 [0217.754] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1180, lpOverlapped=0x0) returned 1 [0217.755] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0217.755] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.755] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.755] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1172, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1172, lpOverlapped=0x0) returned 1 [0217.755] FlushFileBuffers (hFile=0x2f4) returned 1 [0217.757] FlushFileBuffers (hFile=0x2fc) returned 1 [0217.758] CloseHandle (hObject=0x2f4) returned 1 [0217.758] CloseHandle (hObject=0x2fc) returned 1 [0217.758] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00388_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00388_.wmf")) returned 1 [0217.759] SetEvent (hEvent=0x27c) returned 1 [0217.760] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00389_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00389_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0217.761] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=8394) returned 1 [0217.761] CloseHandle (hObject=0x2fc) returned 1 [0217.761] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00389_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00389_.wmf")) returned 0x220 [0217.761] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00389_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00389_.wmf")) returned 0x220 [0217.761] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00389_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00389_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.761] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00389_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00389_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0217.761] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.761] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.761] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00389_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00389_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0217.762] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x20ca, lpOverlapped=0x0) returned 1 [0217.764] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x20d0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x20d0, lpOverlapped=0x0) returned 1 [0217.765] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0217.765] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.766] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.766] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x20ca, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x20ca, lpOverlapped=0x0) returned 1 [0217.766] FlushFileBuffers (hFile=0x2fc) returned 1 [0217.768] FlushFileBuffers (hFile=0x2f4) returned 1 [0217.769] CloseHandle (hObject=0x2fc) returned 1 [0217.769] CloseHandle (hObject=0x2f4) returned 1 [0217.769] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00389_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00389_.wmf")) returned 1 [0217.770] SetEvent (hEvent=0x27c) returned 1 [0217.770] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00390_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0217.772] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=8642) returned 1 [0217.772] CloseHandle (hObject=0x2f4) returned 1 [0217.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00390_.wmf")) returned 0x220 [0217.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00390_.wmf")) returned 0x220 [0217.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00390_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00390_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.772] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00390_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0217.772] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.772] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.772] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00390_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00390_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0217.773] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x21c2, lpOverlapped=0x0) returned 1 [0217.775] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x21d0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x21d0, lpOverlapped=0x0) returned 1 [0217.777] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0217.777] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.777] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.777] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x21c2, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x21c2, lpOverlapped=0x0) returned 1 [0217.777] FlushFileBuffers (hFile=0x2f4) returned 1 [0217.779] FlushFileBuffers (hFile=0x2fc) returned 1 [0217.781] CloseHandle (hObject=0x2f4) returned 1 [0217.781] CloseHandle (hObject=0x2fc) returned 1 [0217.781] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00390_.wmf")) returned 1 [0217.782] SetEvent (hEvent=0x27c) returned 1 [0217.782] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00391_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00391_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0217.784] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=8684) returned 1 [0217.784] CloseHandle (hObject=0x2fc) returned 1 [0217.784] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00391_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00391_.wmf")) returned 0x220 [0217.784] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00391_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00391_.wmf")) returned 0x220 [0217.784] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00391_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00391_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.784] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00391_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00391_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0217.785] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.785] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.785] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00391_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00391_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0217.786] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x21ec, lpOverlapped=0x0) returned 1 [0217.787] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x21f0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x21f0, lpOverlapped=0x0) returned 1 [0217.788] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0217.789] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.789] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.789] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x21ec, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x21ec, lpOverlapped=0x0) returned 1 [0217.789] FlushFileBuffers (hFile=0x2fc) returned 1 [0217.791] FlushFileBuffers (hFile=0x2f4) returned 1 [0217.792] CloseHandle (hObject=0x2fc) returned 1 [0217.792] CloseHandle (hObject=0x2f4) returned 1 [0217.792] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00391_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00391_.wmf")) returned 1 [0217.793] SetEvent (hEvent=0x27c) returned 1 [0217.793] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00394_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00394_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0217.794] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=10964) returned 1 [0217.794] CloseHandle (hObject=0x2f4) returned 1 [0217.794] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00394_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00394_.wmf")) returned 0x220 [0217.794] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00394_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00394_.wmf")) returned 0x220 [0217.794] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00394_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00394_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.794] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00394_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00394_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0217.795] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.795] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.795] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00394_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00394_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0217.795] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2ad4, lpOverlapped=0x0) returned 1 [0217.797] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2ae0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2ae0, lpOverlapped=0x0) returned 1 [0217.798] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0217.798] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.798] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.798] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2ad4, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2ad4, lpOverlapped=0x0) returned 1 [0217.799] FlushFileBuffers (hFile=0x2f4) returned 1 [0217.801] FlushFileBuffers (hFile=0x2fc) returned 1 [0217.802] CloseHandle (hObject=0x2f4) returned 1 [0217.802] CloseHandle (hObject=0x2fc) returned 1 [0217.802] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00394_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00394_.wmf")) returned 1 [0217.803] SetEvent (hEvent=0x27c) returned 1 [0217.803] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00395_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00395_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0217.804] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=6474) returned 1 [0217.804] CloseHandle (hObject=0x2fc) returned 1 [0217.805] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00395_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00395_.wmf")) returned 0x220 [0217.805] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00395_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00395_.wmf")) returned 0x220 [0217.805] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00395_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00395_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.805] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00395_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00395_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0217.805] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.805] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.805] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00395_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00395_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0217.806] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x194a, lpOverlapped=0x0) returned 1 [0217.807] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1950, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1950, lpOverlapped=0x0) returned 1 [0217.808] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0217.808] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.808] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.809] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x194a, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x194a, lpOverlapped=0x0) returned 1 [0217.809] FlushFileBuffers (hFile=0x2fc) returned 1 [0217.811] FlushFileBuffers (hFile=0x2f4) returned 1 [0217.812] CloseHandle (hObject=0x2fc) returned 1 [0217.812] CloseHandle (hObject=0x2f4) returned 1 [0217.812] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00395_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00395_.wmf")) returned 1 [0217.813] SetEvent (hEvent=0x27c) returned 1 [0217.813] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00396_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00396_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0217.814] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=14534) returned 1 [0217.814] CloseHandle (hObject=0x2f4) returned 1 [0217.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00396_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00396_.wmf")) returned 0x220 [0217.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00396_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00396_.wmf")) returned 0x220 [0217.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00396_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00396_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.815] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00396_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00396_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0217.815] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.815] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.815] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00396_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00396_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0217.815] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x38c6, lpOverlapped=0x0) returned 1 [0217.817] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x38d0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x38d0, lpOverlapped=0x0) returned 1 [0217.819] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0217.819] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.819] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.819] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x38c6, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x38c6, lpOverlapped=0x0) returned 1 [0217.819] FlushFileBuffers (hFile=0x2f4) returned 1 [0217.824] FlushFileBuffers (hFile=0x2fc) returned 1 [0217.834] CloseHandle (hObject=0x2f4) returned 1 [0217.834] CloseHandle (hObject=0x2fc) returned 1 [0217.834] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00396_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00396_.wmf")) returned 1 [0217.835] SetEvent (hEvent=0x27c) returned 1 [0217.835] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00433_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00433_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0217.836] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=18070) returned 1 [0217.836] CloseHandle (hObject=0x2fc) returned 1 [0217.836] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00433_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00433_.wmf")) returned 0x220 [0217.836] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00433_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00433_.wmf")) returned 0x220 [0217.836] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00433_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00433_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.836] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00433_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00433_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0217.836] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.836] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.836] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00433_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00433_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0217.837] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4696, lpOverlapped=0x0) returned 1 [0217.839] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x46a0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x46a0, lpOverlapped=0x0) returned 1 [0217.841] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0217.841] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.841] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.841] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4696, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4696, lpOverlapped=0x0) returned 1 [0217.841] FlushFileBuffers (hFile=0x2fc) returned 1 [0217.844] FlushFileBuffers (hFile=0x2f4) returned 1 [0217.867] CloseHandle (hObject=0x2fc) returned 1 [0217.867] CloseHandle (hObject=0x2f4) returned 1 [0217.867] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00433_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00433_.wmf")) returned 1 [0217.869] SetEvent (hEvent=0x27c) returned 1 [0217.869] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00452_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00452_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0217.871] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=5308) returned 1 [0217.871] CloseHandle (hObject=0x2f4) returned 1 [0217.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00452_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00452_.wmf")) returned 0x220 [0217.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00452_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00452_.wmf")) returned 0x220 [0217.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00452_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00452_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.871] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00452_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00452_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0217.871] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.871] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.871] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00452_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00452_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0217.872] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x14bc, lpOverlapped=0x0) returned 1 [0217.874] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x14c0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x14c0, lpOverlapped=0x0) returned 1 [0217.876] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0217.876] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.876] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.876] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x14bc, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x14bc, lpOverlapped=0x0) returned 1 [0217.876] FlushFileBuffers (hFile=0x2f4) returned 1 [0217.883] FlushFileBuffers (hFile=0x2fc) returned 1 [0217.888] CloseHandle (hObject=0x2f4) returned 1 [0217.888] CloseHandle (hObject=0x2fc) returned 1 [0217.888] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00452_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00452_.wmf")) returned 1 [0217.889] SetEvent (hEvent=0x27c) returned 1 [0217.889] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00458_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00458_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0217.890] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=10148) returned 1 [0217.890] CloseHandle (hObject=0x2fc) returned 1 [0217.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00458_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00458_.wmf")) returned 0x220 [0217.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00458_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00458_.wmf")) returned 0x220 [0217.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00458_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00458_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.891] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00458_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00458_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0217.891] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.891] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.891] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00458_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00458_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0217.891] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x27a4, lpOverlapped=0x0) returned 1 [0217.893] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x27b0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x27b0, lpOverlapped=0x0) returned 1 [0217.894] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0217.895] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.895] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.895] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x27a4, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x27a4, lpOverlapped=0x0) returned 1 [0217.895] FlushFileBuffers (hFile=0x2fc) returned 1 [0217.905] FlushFileBuffers (hFile=0x2f4) returned 1 [0217.907] CloseHandle (hObject=0x2fc) returned 1 [0217.907] CloseHandle (hObject=0x2f4) returned 1 [0217.907] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00458_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00458_.wmf")) returned 1 [0217.908] SetEvent (hEvent=0x27c) returned 1 [0217.908] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00487_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00487_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0217.909] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3088) returned 1 [0217.909] CloseHandle (hObject=0x2f4) returned 1 [0217.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00487_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00487_.wmf")) returned 0x220 [0217.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00487_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00487_.wmf")) returned 0x220 [0217.910] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00487_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00487_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.910] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00487_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00487_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0217.910] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.910] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.910] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00487_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00487_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0217.910] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xc10, lpOverlapped=0x0) returned 1 [0217.912] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xc20, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xc20, lpOverlapped=0x0) returned 1 [0217.914] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0217.914] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.914] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.914] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xc10, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xc10, lpOverlapped=0x0) returned 1 [0217.914] FlushFileBuffers (hFile=0x2f4) returned 1 [0217.924] FlushFileBuffers (hFile=0x2fc) returned 1 [0217.928] CloseHandle (hObject=0x2f4) returned 1 [0217.928] CloseHandle (hObject=0x2fc) returned 1 [0217.929] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00487_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00487_.wmf")) returned 1 [0217.929] SetEvent (hEvent=0x27c) returned 1 [0217.930] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00512_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00512_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0217.930] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2912) returned 1 [0217.930] CloseHandle (hObject=0x2fc) returned 1 [0217.931] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00512_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00512_.wmf")) returned 0x220 [0217.931] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00512_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00512_.wmf")) returned 0x220 [0217.931] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00512_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00512_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.931] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00512_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00512_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0217.931] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.931] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.931] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00512_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00512_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0217.932] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xb60, lpOverlapped=0x0) returned 1 [0217.933] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xb70, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xb70, lpOverlapped=0x0) returned 1 [0217.935] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0217.935] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.935] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.935] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xb60, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xb60, lpOverlapped=0x0) returned 1 [0217.935] FlushFileBuffers (hFile=0x2fc) returned 1 [0217.943] FlushFileBuffers (hFile=0x2f4) returned 1 [0217.949] CloseHandle (hObject=0x2fc) returned 1 [0217.950] CloseHandle (hObject=0x2f4) returned 1 [0217.950] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00512_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00512_.wmf")) returned 1 [0217.951] SetEvent (hEvent=0x27c) returned 1 [0217.951] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00525_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0217.952] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=22656) returned 1 [0217.952] CloseHandle (hObject=0x2f4) returned 1 [0217.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00525_.wmf")) returned 0x220 [0217.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00525_.wmf")) returned 0x220 [0217.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00525_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00525_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.952] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00525_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0217.952] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.952] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.952] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00525_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00525_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0217.953] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x5880, lpOverlapped=0x0) returned 1 [0217.959] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5890, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x5890, lpOverlapped=0x0) returned 1 [0217.961] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0217.961] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.961] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.961] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5880, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x5880, lpOverlapped=0x0) returned 1 [0217.961] FlushFileBuffers (hFile=0x2f4) returned 1 [0217.964] FlushFileBuffers (hFile=0x2fc) returned 1 [0217.974] CloseHandle (hObject=0x2f4) returned 1 [0217.974] CloseHandle (hObject=0x2fc) returned 1 [0217.974] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00525_.wmf")) returned 1 [0217.975] SetEvent (hEvent=0x27c) returned 1 [0217.976] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00532_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00532_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0217.976] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1328) returned 1 [0217.977] CloseHandle (hObject=0x2fc) returned 1 [0217.977] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00532_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00532_.wmf")) returned 0x220 [0217.977] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00532_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00532_.wmf")) returned 0x220 [0217.977] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00532_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00532_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.977] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00532_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00532_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0217.977] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.977] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0217.977] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00532_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00532_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0217.978] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x530, lpOverlapped=0x0) returned 1 [0217.980] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x540, lpOverlapped=0x0) returned 1 [0217.981] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0217.981] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.981] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0217.981] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x530, lpOverlapped=0x0) returned 1 [0217.981] FlushFileBuffers (hFile=0x2fc) returned 1 [0217.990] FlushFileBuffers (hFile=0x2f4) returned 1 [0217.996] CloseHandle (hObject=0x2fc) returned 1 [0217.996] CloseHandle (hObject=0x2f4) returned 1 [0217.996] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00532_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00532_.wmf")) returned 1 [0217.997] SetEvent (hEvent=0x27c) returned 1 [0217.998] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00641_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00641_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0217.999] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1612) returned 1 [0217.999] CloseHandle (hObject=0x2f4) returned 1 [0217.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00641_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00641_.wmf")) returned 0x220 [0217.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00641_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00641_.wmf")) returned 0x220 [0217.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00641_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00641_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0217.999] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00641_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00641_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0217.999] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.000] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.000] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00641_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00641_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0218.000] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x64c, lpOverlapped=0x0) returned 1 [0218.002] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x650, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x650, lpOverlapped=0x0) returned 1 [0218.003] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0218.004] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.004] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.004] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x64c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x64c, lpOverlapped=0x0) returned 1 [0218.004] FlushFileBuffers (hFile=0x2f4) returned 1 [0218.011] FlushFileBuffers (hFile=0x2fc) returned 1 [0218.017] CloseHandle (hObject=0x2f4) returned 1 [0218.017] CloseHandle (hObject=0x2fc) returned 1 [0218.017] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00641_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00641_.wmf")) returned 1 [0218.018] SetEvent (hEvent=0x27c) returned 1 [0218.018] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00798_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00798_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0218.018] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=9208) returned 1 [0218.018] CloseHandle (hObject=0x2fc) returned 1 [0218.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00798_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00798_.wmf")) returned 0x220 [0218.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00798_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00798_.wmf")) returned 0x220 [0218.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00798_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00798_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.019] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00798_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00798_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0218.019] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.019] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.019] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00798_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00798_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0218.020] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x23f8, lpOverlapped=0x0) returned 1 [0218.021] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2400, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2400, lpOverlapped=0x0) returned 1 [0218.022] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0218.023] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.023] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.023] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x23f8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x23f8, lpOverlapped=0x0) returned 1 [0218.023] FlushFileBuffers (hFile=0x2fc) returned 1 [0218.026] FlushFileBuffers (hFile=0x2f4) returned 1 [0218.032] CloseHandle (hObject=0x2fc) returned 1 [0218.032] CloseHandle (hObject=0x2f4) returned 1 [0218.032] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00798_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00798_.wmf")) returned 1 [0218.033] SetEvent (hEvent=0x27c) returned 1 [0218.033] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00807_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00807_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0218.034] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2980) returned 1 [0218.034] CloseHandle (hObject=0x2f4) returned 1 [0218.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00807_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00807_.wmf")) returned 0x220 [0218.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00807_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00807_.wmf")) returned 0x220 [0218.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00807_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00807_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.034] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00807_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00807_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0218.034] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.034] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.034] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00807_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00807_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0218.035] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xba4, lpOverlapped=0x0) returned 1 [0218.039] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xbb0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xbb0, lpOverlapped=0x0) returned 1 [0218.040] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0218.040] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.040] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.040] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xba4, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xba4, lpOverlapped=0x0) returned 1 [0218.041] FlushFileBuffers (hFile=0x2f4) returned 1 [0218.057] FlushFileBuffers (hFile=0x2fc) returned 1 [0218.084] CloseHandle (hObject=0x2f4) returned 1 [0218.084] CloseHandle (hObject=0x2fc) returned 1 [0218.084] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00807_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00807_.wmf")) returned 1 [0218.085] SetEvent (hEvent=0x27c) returned 1 [0218.085] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00809_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00809_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0218.086] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1544) returned 1 [0218.086] CloseHandle (hObject=0x2fc) returned 1 [0218.086] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00809_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00809_.wmf")) returned 0x220 [0218.086] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00809_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00809_.wmf")) returned 0x220 [0218.086] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00809_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00809_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.086] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00809_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00809_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0218.086] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.086] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.086] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00809_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00809_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0218.087] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x608, lpOverlapped=0x0) returned 1 [0218.091] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x610, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x610, lpOverlapped=0x0) returned 1 [0218.092] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0218.092] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.092] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.092] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x608, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x608, lpOverlapped=0x0) returned 1 [0218.092] FlushFileBuffers (hFile=0x2fc) returned 1 [0218.111] FlushFileBuffers (hFile=0x2f4) returned 1 [0218.125] CloseHandle (hObject=0x2fc) returned 1 [0218.125] CloseHandle (hObject=0x2f4) returned 1 [0218.125] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00809_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00809_.wmf")) returned 1 [0218.126] SetEvent (hEvent=0x27c) returned 1 [0218.127] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00932_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0218.129] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=12816) returned 1 [0218.129] CloseHandle (hObject=0x2f4) returned 1 [0218.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00932_.wmf")) returned 0x220 [0218.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00932_.wmf")) returned 0x220 [0218.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00932_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00932_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.129] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00932_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0218.129] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.129] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.129] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00932_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00932_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0218.130] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x3210, lpOverlapped=0x0) returned 1 [0218.133] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3220, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x3220, lpOverlapped=0x0) returned 1 [0218.134] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0218.135] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.135] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.135] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3210, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x3210, lpOverlapped=0x0) returned 1 [0218.135] FlushFileBuffers (hFile=0x2f4) returned 1 [0218.145] FlushFileBuffers (hFile=0x2fc) returned 1 [0218.146] CloseHandle (hObject=0x2f4) returned 1 [0218.147] CloseHandle (hObject=0x2fc) returned 1 [0218.147] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00932_.wmf")) returned 1 [0218.148] SetEvent (hEvent=0x27c) returned 1 [0218.148] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01066_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01066_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0218.149] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=21672) returned 1 [0218.149] CloseHandle (hObject=0x2fc) returned 1 [0218.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01066_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01066_.wmf")) returned 0x220 [0218.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01066_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01066_.wmf")) returned 0x220 [0218.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01066_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01066_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.149] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01066_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01066_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0218.150] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.150] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.150] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01066_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01066_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0218.150] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x54a8, lpOverlapped=0x0) returned 1 [0218.153] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x54b0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x54b0, lpOverlapped=0x0) returned 1 [0218.156] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0218.157] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.158] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.158] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x54a8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x54a8, lpOverlapped=0x0) returned 1 [0218.158] FlushFileBuffers (hFile=0x2fc) returned 1 [0218.164] FlushFileBuffers (hFile=0x2f4) returned 1 [0218.169] CloseHandle (hObject=0x2fc) returned 1 [0218.169] CloseHandle (hObject=0x2f4) returned 1 [0218.169] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01066_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01066_.wmf")) returned 1 [0218.170] SetEvent (hEvent=0x27c) returned 1 [0218.170] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01123_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01123_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0218.171] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=7680) returned 1 [0218.171] CloseHandle (hObject=0x2f4) returned 1 [0218.171] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01123_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01123_.wmf")) returned 0x220 [0218.171] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01123_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01123_.wmf")) returned 0x220 [0218.171] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01123_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01123_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.171] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01123_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01123_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0218.171] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.171] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.171] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01123_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01123_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0218.172] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1e00, lpOverlapped=0x0) returned 1 [0218.174] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1e10, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1e10, lpOverlapped=0x0) returned 1 [0218.174] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0218.175] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.175] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.175] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1e00, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1e00, lpOverlapped=0x0) returned 1 [0218.175] FlushFileBuffers (hFile=0x2f4) returned 1 [0218.177] FlushFileBuffers (hFile=0x2fc) returned 1 [0218.186] CloseHandle (hObject=0x2f4) returned 1 [0218.186] CloseHandle (hObject=0x2fc) returned 1 [0218.186] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01123_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01123_.wmf")) returned 1 [0218.187] SetEvent (hEvent=0x27c) returned 1 [0218.187] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01130_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0218.187] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=5792) returned 1 [0218.187] CloseHandle (hObject=0x2fc) returned 1 [0218.188] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01130_.wmf")) returned 0x220 [0218.188] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01130_.wmf")) returned 0x220 [0218.188] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01130_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01130_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.188] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01130_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0218.188] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.188] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.188] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01130_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01130_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0218.189] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x16a0, lpOverlapped=0x0) returned 1 [0218.192] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x16b0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x16b0, lpOverlapped=0x0) returned 1 [0218.193] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0218.193] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.193] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.193] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x16a0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x16a0, lpOverlapped=0x0) returned 1 [0218.193] FlushFileBuffers (hFile=0x2fc) returned 1 [0218.196] FlushFileBuffers (hFile=0x2f4) returned 1 [0218.202] CloseHandle (hObject=0x2fc) returned 1 [0218.202] CloseHandle (hObject=0x2f4) returned 1 [0218.202] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01130_.wmf")) returned 1 [0218.203] SetEvent (hEvent=0x27c) returned 1 [0218.203] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01148_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0218.203] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=7992) returned 1 [0218.203] CloseHandle (hObject=0x2f4) returned 1 [0218.203] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01148_.wmf")) returned 0x220 [0218.203] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01148_.wmf")) returned 0x220 [0218.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01148_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01148_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.204] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01148_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0218.204] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.204] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.204] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01148_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01148_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0218.204] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1f38, lpOverlapped=0x0) returned 1 [0218.209] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1f40, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1f40, lpOverlapped=0x0) returned 1 [0218.210] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0218.210] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.210] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.210] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1f38, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1f38, lpOverlapped=0x0) returned 1 [0218.210] FlushFileBuffers (hFile=0x2f4) returned 1 [0218.213] FlushFileBuffers (hFile=0x2fc) returned 1 [0218.223] CloseHandle (hObject=0x2f4) returned 1 [0218.223] CloseHandle (hObject=0x2fc) returned 1 [0218.223] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01148_.wmf")) returned 1 [0218.224] SetEvent (hEvent=0x27c) returned 1 [0218.224] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01152_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0218.225] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=8752) returned 1 [0218.225] CloseHandle (hObject=0x2fc) returned 1 [0218.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01152_.wmf")) returned 0x220 [0218.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01152_.wmf")) returned 0x220 [0218.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01152_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01152_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.225] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01152_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0218.225] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.225] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.225] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01152_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01152_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0218.226] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2230, lpOverlapped=0x0) returned 1 [0218.228] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2240, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2240, lpOverlapped=0x0) returned 1 [0218.230] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0218.230] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.230] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.230] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2230, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2230, lpOverlapped=0x0) returned 1 [0218.230] FlushFileBuffers (hFile=0x2fc) returned 1 [0218.233] FlushFileBuffers (hFile=0x2f4) returned 1 [0218.241] CloseHandle (hObject=0x2fc) returned 1 [0218.241] CloseHandle (hObject=0x2f4) returned 1 [0218.242] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01152_.wmf")) returned 1 [0218.242] SetEvent (hEvent=0x27c) returned 1 [0218.243] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01157_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0218.243] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=6232) returned 1 [0218.243] CloseHandle (hObject=0x2f4) returned 1 [0218.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01157_.wmf")) returned 0x220 [0218.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01157_.wmf")) returned 0x220 [0218.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01157_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01157_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.243] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01157_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0218.244] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.244] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.244] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01157_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01157_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0218.244] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1858, lpOverlapped=0x0) returned 1 [0218.246] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1860, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1860, lpOverlapped=0x0) returned 1 [0218.247] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0218.247] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.247] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.247] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1858, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1858, lpOverlapped=0x0) returned 1 [0218.247] FlushFileBuffers (hFile=0x2f4) returned 1 [0218.267] FlushFileBuffers (hFile=0x2fc) returned 1 [0218.275] CloseHandle (hObject=0x2f4) returned 1 [0218.278] CloseHandle (hObject=0x2fc) returned 1 [0218.282] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01157_.wmf")) returned 1 [0218.284] SetEvent (hEvent=0x27c) returned 1 [0218.284] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01158_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01158_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0218.288] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=7284) returned 1 [0218.288] CloseHandle (hObject=0x2b0) returned 1 [0218.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01158_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01158_.wmf")) returned 0x220 [0218.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01158_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01158_.wmf")) returned 0x220 [0218.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01158_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01158_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01158_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01158_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0218.288] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.288] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01158_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01158_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0218.303] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1c74, lpOverlapped=0x0) returned 1 [0218.308] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1c80, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1c80, lpOverlapped=0x0) returned 1 [0218.309] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0218.309] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.309] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.309] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1c74, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1c74, lpOverlapped=0x0) returned 1 [0218.309] FlushFileBuffers (hFile=0x2b0) returned 1 [0218.314] FlushFileBuffers (hFile=0x21c) returned 1 [0218.317] CloseHandle (hObject=0x2b0) returned 1 [0218.317] CloseHandle (hObject=0x21c) returned 1 [0218.317] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01158_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01158_.wmf")) returned 1 [0218.318] SetEvent (hEvent=0x27c) returned 1 [0218.318] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01164_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01164_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0218.322] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2564) returned 1 [0218.322] CloseHandle (hObject=0x2f4) returned 1 [0218.322] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01164_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01164_.wmf")) returned 0x220 [0218.322] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01164_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01164_.wmf")) returned 0x220 [0218.322] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01164_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01164_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.322] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01164_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01164_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0218.322] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.322] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.323] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01164_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01164_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0218.325] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xa04, lpOverlapped=0x0) returned 1 [0218.330] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xa10, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xa10, lpOverlapped=0x0) returned 1 [0218.331] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0218.331] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.331] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.331] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xa04, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xa04, lpOverlapped=0x0) returned 1 [0218.332] FlushFileBuffers (hFile=0x2f4) returned 1 [0218.337] FlushFileBuffers (hFile=0x2fc) returned 1 [0218.339] CloseHandle (hObject=0x2f4) returned 1 [0218.339] CloseHandle (hObject=0x2fc) returned 1 [0218.339] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01164_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01164_.wmf")) returned 1 [0218.340] SetEvent (hEvent=0x27c) returned 1 [0218.341] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01354_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01354_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0218.341] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=5806) returned 1 [0218.341] CloseHandle (hObject=0x2fc) returned 1 [0218.341] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01354_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01354_.wmf")) returned 0x220 [0218.341] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01354_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01354_.wmf")) returned 0x220 [0218.341] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01354_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01354_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.341] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01354_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01354_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0218.342] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.342] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.342] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01354_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01354_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0218.342] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x16ae, lpOverlapped=0x0) returned 1 [0218.345] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x16b0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x16b0, lpOverlapped=0x0) returned 1 [0218.346] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0218.346] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.346] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.346] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x16ae, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x16ae, lpOverlapped=0x0) returned 1 [0218.347] FlushFileBuffers (hFile=0x2fc) returned 1 [0218.355] FlushFileBuffers (hFile=0x2f4) returned 1 [0218.359] CloseHandle (hObject=0x2fc) returned 1 [0218.359] CloseHandle (hObject=0x2f4) returned 1 [0218.360] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01354_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01354_.wmf")) returned 1 [0218.360] SetEvent (hEvent=0x27c) returned 1 [0218.361] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01357_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01357_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0218.361] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=27638) returned 1 [0218.361] CloseHandle (hObject=0x2f4) returned 1 [0218.361] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01357_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01357_.wmf")) returned 0x220 [0218.361] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01357_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01357_.wmf")) returned 0x220 [0218.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01357_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01357_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.362] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01357_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01357_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0218.362] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.362] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.362] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01357_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01357_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0218.362] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x6bf6, lpOverlapped=0x0) returned 1 [0218.365] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x6c00, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x6c00, lpOverlapped=0x0) returned 1 [0218.366] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0218.367] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.367] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.367] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x6bf6, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x6bf6, lpOverlapped=0x0) returned 1 [0218.367] FlushFileBuffers (hFile=0x2f4) returned 1 [0218.369] FlushFileBuffers (hFile=0x2fc) returned 1 [0218.372] CloseHandle (hObject=0x2f4) returned 1 [0218.372] CloseHandle (hObject=0x2fc) returned 1 [0218.373] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01357_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01357_.wmf")) returned 1 [0218.374] SetEvent (hEvent=0x27c) returned 1 [0218.374] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01361_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0218.377] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=7028) returned 1 [0218.377] CloseHandle (hObject=0x2f4) returned 1 [0218.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01361_.wmf")) returned 0x220 [0218.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01361_.wmf")) returned 0x220 [0218.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01361_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01361_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.379] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01361_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0218.379] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.379] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.379] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01361_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01361_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0218.380] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1b74, lpOverlapped=0x0) returned 1 [0218.386] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1b80, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1b80, lpOverlapped=0x0) returned 1 [0218.387] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0218.388] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.388] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.388] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1b74, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1b74, lpOverlapped=0x0) returned 1 [0218.388] FlushFileBuffers (hFile=0x21c) returned 1 [0218.391] FlushFileBuffers (hFile=0x2b0) returned 1 [0218.414] CloseHandle (hObject=0x21c) returned 1 [0218.414] CloseHandle (hObject=0x2b0) returned 1 [0218.414] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01361_.wmf")) returned 1 [0218.415] SetEvent (hEvent=0x27c) returned 1 [0218.415] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01421_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01421_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0218.418] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=176494) returned 1 [0218.418] CloseHandle (hObject=0x2b0) returned 1 [0218.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01421_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01421_.wmf")) returned 0x220 [0218.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01421_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01421_.wmf")) returned 0x220 [0218.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01421_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01421_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.418] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01421_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01421_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0218.418] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.418] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.418] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01421_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01421_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0218.419] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2b16e, lpOverlapped=0x0) returned 1 [0218.427] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2b170, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2b170, lpOverlapped=0x0) returned 1 [0218.431] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0218.431] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.431] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.431] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2b16e, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2b16e, lpOverlapped=0x0) returned 1 [0218.432] FlushFileBuffers (hFile=0x2b0) returned 1 [0218.443] FlushFileBuffers (hFile=0x21c) returned 1 [0218.448] CloseHandle (hObject=0x2b0) returned 1 [0218.448] CloseHandle (hObject=0x21c) returned 1 [0218.448] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01421_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01421_.wmf")) returned 1 [0218.450] SetEvent (hEvent=0x27c) returned 1 [0218.450] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01470_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01470_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0218.451] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=19162) returned 1 [0218.451] CloseHandle (hObject=0x21c) returned 1 [0218.451] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01470_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01470_.wmf")) returned 0x220 [0218.451] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01470_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01470_.wmf")) returned 0x220 [0218.451] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01470_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01470_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.451] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01470_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01470_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0218.451] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.452] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.452] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01470_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01470_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0218.452] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4ada, lpOverlapped=0x0) returned 1 [0218.455] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4ae0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4ae0, lpOverlapped=0x0) returned 1 [0218.457] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0218.457] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.457] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.457] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4ada, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4ada, lpOverlapped=0x0) returned 1 [0218.457] FlushFileBuffers (hFile=0x21c) returned 1 [0218.519] FlushFileBuffers (hFile=0x2b0) returned 1 [0218.526] CloseHandle (hObject=0x21c) returned 1 [0218.526] CloseHandle (hObject=0x2b0) returned 1 [0218.526] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01470_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01470_.wmf")) returned 1 [0218.527] SetEvent (hEvent=0x27c) returned 1 [0218.527] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01627_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01627_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0218.529] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3296) returned 1 [0218.529] CloseHandle (hObject=0x2b0) returned 1 [0218.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01627_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01627_.wmf")) returned 0x220 [0218.530] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01627_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01627_.wmf")) returned 0x220 [0218.530] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01627_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01627_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.530] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01627_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01627_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0218.530] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.530] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.530] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01627_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01627_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0218.531] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xce0, lpOverlapped=0x0) returned 1 [0218.533] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xcf0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xcf0, lpOverlapped=0x0) returned 1 [0218.534] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0218.534] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.534] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.534] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xce0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xce0, lpOverlapped=0x0) returned 1 [0218.534] FlushFileBuffers (hFile=0x2b0) returned 1 [0218.537] FlushFileBuffers (hFile=0x21c) returned 1 [0218.540] CloseHandle (hObject=0x2b0) returned 1 [0218.540] CloseHandle (hObject=0x21c) returned 1 [0218.540] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01627_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01627_.wmf")) returned 1 [0218.541] SetEvent (hEvent=0x27c) returned 1 [0218.541] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01680_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01680_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0218.544] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2974) returned 1 [0218.544] CloseHandle (hObject=0x2fc) returned 1 [0218.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01680_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01680_.wmf")) returned 0x220 [0218.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01680_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01680_.wmf")) returned 0x220 [0218.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01680_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01680_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.544] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01680_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01680_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0218.545] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.545] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.545] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01680_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01680_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0218.624] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xb9e, lpOverlapped=0x0) returned 1 [0218.650] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xba0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xba0, lpOverlapped=0x0) returned 1 [0218.651] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0218.652] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.652] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.652] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xb9e, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xb9e, lpOverlapped=0x0) returned 1 [0218.652] FlushFileBuffers (hFile=0x2fc) returned 1 [0218.657] FlushFileBuffers (hFile=0x2f4) returned 1 [0218.659] CloseHandle (hObject=0x2fc) returned 1 [0218.659] CloseHandle (hObject=0x2f4) returned 1 [0218.659] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01680_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01680_.wmf")) returned 1 [0218.660] SetEvent (hEvent=0x27c) returned 1 [0218.660] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01701_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01701_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0218.661] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=5316) returned 1 [0218.661] CloseHandle (hObject=0x2f4) returned 1 [0218.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01701_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01701_.wmf")) returned 0x220 [0218.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01701_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01701_.wmf")) returned 0x220 [0218.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01701_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01701_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.662] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01701_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01701_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0218.662] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.662] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.662] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01701_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01701_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0218.663] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x14c4, lpOverlapped=0x0) returned 1 [0218.665] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x14d0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x14d0, lpOverlapped=0x0) returned 1 [0218.666] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0218.666] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.666] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.667] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x14c4, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x14c4, lpOverlapped=0x0) returned 1 [0218.667] FlushFileBuffers (hFile=0x2f4) returned 1 [0218.674] FlushFileBuffers (hFile=0x2fc) returned 1 [0218.681] CloseHandle (hObject=0x2f4) returned 1 [0218.682] CloseHandle (hObject=0x2fc) returned 1 [0218.682] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01701_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01701_.wmf")) returned 1 [0218.683] SetEvent (hEvent=0x27c) returned 1 [0218.683] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01849_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01849_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0218.684] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=624) returned 1 [0218.684] CloseHandle (hObject=0x2fc) returned 1 [0218.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01849_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01849_.wmf")) returned 0x220 [0218.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01849_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01849_.wmf")) returned 0x220 [0218.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01849_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01849_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.684] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01849_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01849_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0218.684] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.684] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.684] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01849_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01849_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0218.685] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x270, lpOverlapped=0x0) returned 1 [0218.686] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x280, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x280, lpOverlapped=0x0) returned 1 [0218.687] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0218.687] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.687] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.687] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x270, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x270, lpOverlapped=0x0) returned 1 [0218.687] FlushFileBuffers (hFile=0x2fc) returned 1 [0218.690] FlushFileBuffers (hFile=0x2f4) returned 1 [0218.702] CloseHandle (hObject=0x2fc) returned 1 [0218.702] CloseHandle (hObject=0x2f4) returned 1 [0218.702] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01849_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01849_.wmf")) returned 1 [0218.703] SetEvent (hEvent=0x27c) returned 1 [0218.703] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01858_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01858_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0218.704] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=4296) returned 1 [0218.704] CloseHandle (hObject=0x2f4) returned 1 [0218.704] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01858_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01858_.wmf")) returned 0x220 [0218.704] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01858_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01858_.wmf")) returned 0x220 [0218.704] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01858_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01858_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.704] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01858_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01858_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0218.704] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.704] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.704] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01858_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01858_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0218.705] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x10c8, lpOverlapped=0x0) returned 1 [0218.707] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x10d0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x10d0, lpOverlapped=0x0) returned 1 [0218.708] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0218.708] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.709] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.709] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x10c8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x10c8, lpOverlapped=0x0) returned 1 [0218.709] FlushFileBuffers (hFile=0x2f4) returned 1 [0218.718] FlushFileBuffers (hFile=0x2fc) returned 1 [0218.721] CloseHandle (hObject=0x2f4) returned 1 [0218.721] CloseHandle (hObject=0x2fc) returned 1 [0218.721] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01858_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01858_.wmf")) returned 1 [0218.722] SetEvent (hEvent=0x27c) returned 1 [0218.723] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02009_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02009_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0218.723] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=10208) returned 1 [0218.723] CloseHandle (hObject=0x2fc) returned 1 [0218.723] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02009_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02009_.wmf")) returned 0x220 [0218.723] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02009_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02009_.wmf")) returned 0x220 [0218.723] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02009_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02009_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.723] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02009_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02009_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0218.724] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.724] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.724] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02009_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02009_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0218.724] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x27e0, lpOverlapped=0x0) returned 1 [0218.726] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x27f0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x27f0, lpOverlapped=0x0) returned 1 [0218.727] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0218.728] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.728] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.728] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x27e0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x27e0, lpOverlapped=0x0) returned 1 [0218.728] FlushFileBuffers (hFile=0x2fc) returned 1 [0218.735] FlushFileBuffers (hFile=0x2f4) returned 1 [0218.739] CloseHandle (hObject=0x2fc) returned 1 [0218.739] CloseHandle (hObject=0x2f4) returned 1 [0218.739] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02009_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02009_.wmf")) returned 1 [0218.740] SetEvent (hEvent=0x27c) returned 1 [0218.740] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02066_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02066_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0218.742] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1084) returned 1 [0218.742] CloseHandle (hObject=0x2f4) returned 1 [0218.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02066_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02066_.wmf")) returned 0x220 [0218.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02066_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02066_.wmf")) returned 0x220 [0218.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02066_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02066_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.742] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02066_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02066_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0218.742] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.742] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.742] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02066_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02066_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0218.743] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x43c, lpOverlapped=0x0) returned 1 [0218.745] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x440, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x440, lpOverlapped=0x0) returned 1 [0218.746] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0218.746] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.746] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.746] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x43c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x43c, lpOverlapped=0x0) returned 1 [0218.746] FlushFileBuffers (hFile=0x2f4) returned 1 [0218.753] FlushFileBuffers (hFile=0x2fc) returned 1 [0218.757] CloseHandle (hObject=0x2f4) returned 1 [0218.757] CloseHandle (hObject=0x2fc) returned 1 [0218.757] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02066_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02066_.wmf")) returned 1 [0218.758] SetEvent (hEvent=0x27c) returned 1 [0218.758] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02092_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0218.759] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1644) returned 1 [0218.759] CloseHandle (hObject=0x2fc) returned 1 [0218.759] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02092_.wmf")) returned 0x220 [0218.759] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02092_.wmf")) returned 0x220 [0218.759] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02092_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02092_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.759] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02092_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0218.759] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.759] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.759] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02092_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02092_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0218.760] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x66c, lpOverlapped=0x0) returned 1 [0218.762] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x670, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x670, lpOverlapped=0x0) returned 1 [0218.763] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0218.763] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.763] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.763] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x66c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x66c, lpOverlapped=0x0) returned 1 [0218.764] FlushFileBuffers (hFile=0x2fc) returned 1 [0218.777] FlushFileBuffers (hFile=0x2f4) returned 1 [0218.779] CloseHandle (hObject=0x2fc) returned 1 [0218.779] CloseHandle (hObject=0x2f4) returned 1 [0218.779] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02092_.wmf")) returned 1 [0218.780] SetEvent (hEvent=0x27c) returned 1 [0218.780] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02124_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02124_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0218.781] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=8168) returned 1 [0218.781] CloseHandle (hObject=0x2f4) returned 1 [0218.781] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02124_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02124_.wmf")) returned 0x220 [0218.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02124_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02124_.wmf")) returned 0x220 [0218.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02124_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02124_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.782] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02124_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02124_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0218.782] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.782] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.782] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02124_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02124_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0218.783] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1fe8, lpOverlapped=0x0) returned 1 [0218.785] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1ff0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1ff0, lpOverlapped=0x0) returned 1 [0218.786] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0218.786] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.786] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.786] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1fe8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1fe8, lpOverlapped=0x0) returned 1 [0218.786] FlushFileBuffers (hFile=0x2f4) returned 1 [0218.796] FlushFileBuffers (hFile=0x2fc) returned 1 [0218.798] CloseHandle (hObject=0x2f4) returned 1 [0218.798] CloseHandle (hObject=0x2fc) returned 1 [0218.798] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02124_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02124_.wmf")) returned 1 [0218.799] SetEvent (hEvent=0x27c) returned 1 [0218.799] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02126_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02126_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0218.801] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=31824) returned 1 [0218.801] CloseHandle (hObject=0x2fc) returned 1 [0218.801] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02126_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02126_.wmf")) returned 0x220 [0218.801] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02126_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02126_.wmf")) returned 0x220 [0218.801] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02126_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02126_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.801] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02126_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02126_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0218.801] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.801] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.801] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02126_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02126_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0218.802] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x7c50, lpOverlapped=0x0) returned 1 [0218.805] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7c60, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x7c60, lpOverlapped=0x0) returned 1 [0218.806] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0218.806] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.807] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.807] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7c50, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x7c50, lpOverlapped=0x0) returned 1 [0218.807] FlushFileBuffers (hFile=0x2fc) returned 1 [0218.817] FlushFileBuffers (hFile=0x2f4) returned 1 [0218.819] CloseHandle (hObject=0x2fc) returned 1 [0218.819] CloseHandle (hObject=0x2f4) returned 1 [0218.819] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02126_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02126_.wmf")) returned 1 [0218.820] SetEvent (hEvent=0x27c) returned 1 [0218.820] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02262_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0218.821] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3328) returned 1 [0218.821] CloseHandle (hObject=0x2f4) returned 1 [0218.821] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02262_.wmf")) returned 0x220 [0218.821] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02262_.wmf")) returned 0x220 [0218.821] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02262_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02262_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.821] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02262_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0218.821] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.821] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.821] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02262_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02262_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0218.822] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xd00, lpOverlapped=0x0) returned 1 [0218.824] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xd10, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xd10, lpOverlapped=0x0) returned 1 [0218.825] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0218.825] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.825] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.825] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xd00, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xd00, lpOverlapped=0x0) returned 1 [0218.825] FlushFileBuffers (hFile=0x2f4) returned 1 [0218.828] FlushFileBuffers (hFile=0x2fc) returned 1 [0218.829] CloseHandle (hObject=0x2f4) returned 1 [0218.829] CloseHandle (hObject=0x2fc) returned 1 [0218.829] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02262_.wmf")) returned 1 [0218.830] SetEvent (hEvent=0x27c) returned 1 [0218.831] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02264_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02264_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0218.832] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2272) returned 1 [0218.832] CloseHandle (hObject=0x2fc) returned 1 [0218.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02264_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02264_.wmf")) returned 0x220 [0218.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02264_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02264_.wmf")) returned 0x220 [0218.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02264_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02264_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.832] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02264_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02264_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0218.832] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.832] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.832] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02264_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02264_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0218.833] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x8e0, lpOverlapped=0x0) returned 1 [0218.835] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x8f0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x8f0, lpOverlapped=0x0) returned 1 [0218.836] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0218.836] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.836] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.836] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x8e0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x8e0, lpOverlapped=0x0) returned 1 [0218.836] FlushFileBuffers (hFile=0x2fc) returned 1 [0218.841] FlushFileBuffers (hFile=0x2f4) returned 1 [0218.842] CloseHandle (hObject=0x2fc) returned 1 [0218.842] CloseHandle (hObject=0x2f4) returned 1 [0218.842] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02264_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02264_.wmf")) returned 1 [0218.843] SetEvent (hEvent=0x27c) returned 1 [0218.843] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02356_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02356_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0218.844] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3604) returned 1 [0218.845] CloseHandle (hObject=0x2f4) returned 1 [0218.845] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02356_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02356_.wmf")) returned 0x220 [0218.845] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02356_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02356_.wmf")) returned 0x220 [0218.845] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02356_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02356_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.845] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02356_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02356_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0218.845] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.845] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.845] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02356_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02356_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0218.846] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xe14, lpOverlapped=0x0) returned 1 [0218.864] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xe20, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xe20, lpOverlapped=0x0) returned 1 [0218.866] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0218.866] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.866] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.866] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xe14, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xe14, lpOverlapped=0x0) returned 1 [0218.866] FlushFileBuffers (hFile=0x2f4) returned 1 [0218.869] FlushFileBuffers (hFile=0x2fc) returned 1 [0218.870] CloseHandle (hObject=0x2f4) returned 1 [0218.870] CloseHandle (hObject=0x2fc) returned 1 [0218.870] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02356_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02356_.wmf")) returned 1 [0218.871] SetEvent (hEvent=0x27c) returned 1 [0218.871] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02361_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0218.873] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=6084) returned 1 [0218.873] CloseHandle (hObject=0x2fc) returned 1 [0218.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02361_.wmf")) returned 0x220 [0218.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02361_.wmf")) returned 0x220 [0218.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02361_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02361_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.873] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02361_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0218.873] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.873] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.873] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02361_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02361_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0218.875] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x17c4, lpOverlapped=0x0) returned 1 [0218.876] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x17d0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x17d0, lpOverlapped=0x0) returned 1 [0218.878] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0218.878] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.878] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.878] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x17c4, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x17c4, lpOverlapped=0x0) returned 1 [0218.878] FlushFileBuffers (hFile=0x2fc) returned 1 [0218.883] FlushFileBuffers (hFile=0x2f4) returned 1 [0218.889] CloseHandle (hObject=0x2fc) returned 1 [0218.889] CloseHandle (hObject=0x2f4) returned 1 [0218.889] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02361_.wmf")) returned 1 [0218.891] SetEvent (hEvent=0x27c) returned 1 [0218.891] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02368_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02368_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0218.892] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3368) returned 1 [0218.892] CloseHandle (hObject=0x2f4) returned 1 [0218.892] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02368_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02368_.wmf")) returned 0x220 [0218.892] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02368_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02368_.wmf")) returned 0x220 [0218.892] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02368_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02368_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.892] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02368_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02368_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0218.892] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.892] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.892] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02368_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02368_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0218.894] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xd28, lpOverlapped=0x0) returned 1 [0218.897] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xd30, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xd30, lpOverlapped=0x0) returned 1 [0218.898] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0218.898] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.898] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.898] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xd28, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xd28, lpOverlapped=0x0) returned 1 [0218.898] FlushFileBuffers (hFile=0x2f4) returned 1 [0218.903] FlushFileBuffers (hFile=0x2fc) returned 1 [0218.906] CloseHandle (hObject=0x2f4) returned 1 [0218.907] CloseHandle (hObject=0x2fc) returned 1 [0218.907] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02368_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02368_.wmf")) returned 1 [0218.908] SetEvent (hEvent=0x27c) returned 1 [0218.908] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02371_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02371_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0218.910] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3188) returned 1 [0218.910] CloseHandle (hObject=0x2fc) returned 1 [0218.910] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02371_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02371_.wmf")) returned 0x220 [0218.910] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02371_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02371_.wmf")) returned 0x220 [0218.910] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02371_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02371_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.910] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02371_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02371_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0218.910] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.910] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.910] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02371_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02371_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0218.911] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xc74, lpOverlapped=0x0) returned 1 [0218.913] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xc80, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xc80, lpOverlapped=0x0) returned 1 [0218.914] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0218.914] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.914] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.914] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xc74, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xc74, lpOverlapped=0x0) returned 1 [0218.914] FlushFileBuffers (hFile=0x2fc) returned 1 [0218.917] FlushFileBuffers (hFile=0x2f4) returned 1 [0218.918] CloseHandle (hObject=0x2fc) returned 1 [0218.918] CloseHandle (hObject=0x2f4) returned 1 [0218.918] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02371_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02371_.wmf")) returned 1 [0218.919] SetEvent (hEvent=0x27c) returned 1 [0218.919] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02373_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02373_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0218.921] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3308) returned 1 [0218.921] CloseHandle (hObject=0x2f4) returned 1 [0218.921] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02373_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02373_.wmf")) returned 0x220 [0218.921] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02373_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02373_.wmf")) returned 0x220 [0218.921] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02373_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02373_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.921] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02373_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02373_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0218.921] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.921] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.921] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02373_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02373_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0218.922] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xcec, lpOverlapped=0x0) returned 1 [0218.924] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xcf0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xcf0, lpOverlapped=0x0) returned 1 [0218.925] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0218.925] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.925] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.925] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xcec, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xcec, lpOverlapped=0x0) returned 1 [0218.925] FlushFileBuffers (hFile=0x2f4) returned 1 [0218.928] FlushFileBuffers (hFile=0x2fc) returned 1 [0218.929] CloseHandle (hObject=0x2f4) returned 1 [0218.929] CloseHandle (hObject=0x2fc) returned 1 [0218.929] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02373_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02373_.wmf")) returned 1 [0218.930] SetEvent (hEvent=0x27c) returned 1 [0218.930] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02384_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0218.931] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3032) returned 1 [0218.931] CloseHandle (hObject=0x2fc) returned 1 [0218.931] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02384_.wmf")) returned 0x220 [0218.931] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02384_.wmf")) returned 0x220 [0218.931] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02384_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02384_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.931] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02384_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0218.932] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.932] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.932] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02384_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02384_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0218.932] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xbd8, lpOverlapped=0x0) returned 1 [0218.934] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xbe0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xbe0, lpOverlapped=0x0) returned 1 [0218.935] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0218.935] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.935] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.935] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xbd8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xbd8, lpOverlapped=0x0) returned 1 [0218.936] FlushFileBuffers (hFile=0x2fc) returned 1 [0218.938] FlushFileBuffers (hFile=0x2f4) returned 1 [0218.939] CloseHandle (hObject=0x2fc) returned 1 [0218.939] CloseHandle (hObject=0x2f4) returned 1 [0218.939] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02384_.wmf")) returned 1 [0218.950] SetEvent (hEvent=0x27c) returned 1 [0218.950] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02386_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02386_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0218.952] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2376) returned 1 [0218.952] CloseHandle (hObject=0x2f4) returned 1 [0218.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02386_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02386_.wmf")) returned 0x220 [0218.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02386_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02386_.wmf")) returned 0x220 [0218.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02386_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02386_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.952] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02386_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02386_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0218.952] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.952] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.952] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02386_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02386_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0218.953] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x948, lpOverlapped=0x0) returned 1 [0218.955] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x950, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x950, lpOverlapped=0x0) returned 1 [0218.956] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0218.956] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.956] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.956] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x948, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x948, lpOverlapped=0x0) returned 1 [0218.957] FlushFileBuffers (hFile=0x2f4) returned 1 [0218.960] FlushFileBuffers (hFile=0x2fc) returned 1 [0218.961] CloseHandle (hObject=0x2f4) returned 1 [0218.961] CloseHandle (hObject=0x2fc) returned 1 [0218.962] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02386_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02386_.wmf")) returned 1 [0218.963] SetEvent (hEvent=0x27c) returned 1 [0218.963] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02388_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02388_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0218.964] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3204) returned 1 [0218.964] CloseHandle (hObject=0x2fc) returned 1 [0218.964] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02388_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02388_.wmf")) returned 0x220 [0218.964] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02388_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02388_.wmf")) returned 0x220 [0218.964] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02388_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02388_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.964] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02388_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02388_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0218.964] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.964] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.964] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02388_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02388_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0218.965] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xc84, lpOverlapped=0x0) returned 1 [0218.967] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xc90, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xc90, lpOverlapped=0x0) returned 1 [0218.968] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0218.968] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.968] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.968] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xc84, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xc84, lpOverlapped=0x0) returned 1 [0218.968] FlushFileBuffers (hFile=0x2fc) returned 1 [0218.970] FlushFileBuffers (hFile=0x2f4) returned 1 [0218.971] CloseHandle (hObject=0x2fc) returned 1 [0218.971] CloseHandle (hObject=0x2f4) returned 1 [0218.971] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02388_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02388_.wmf")) returned 1 [0218.972] SetEvent (hEvent=0x27c) returned 1 [0218.972] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02389_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02389_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0218.973] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2860) returned 1 [0218.973] CloseHandle (hObject=0x2f4) returned 1 [0218.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02389_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02389_.wmf")) returned 0x220 [0218.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02389_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02389_.wmf")) returned 0x220 [0218.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02389_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02389_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.973] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02389_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02389_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0218.974] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.974] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.974] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02389_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02389_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0218.974] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xb2c, lpOverlapped=0x0) returned 1 [0218.976] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xb30, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xb30, lpOverlapped=0x0) returned 1 [0218.977] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0218.977] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.977] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.977] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xb2c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xb2c, lpOverlapped=0x0) returned 1 [0218.978] FlushFileBuffers (hFile=0x2f4) returned 1 [0218.980] FlushFileBuffers (hFile=0x2fc) returned 1 [0218.981] CloseHandle (hObject=0x2f4) returned 1 [0218.981] CloseHandle (hObject=0x2fc) returned 1 [0218.981] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02389_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02389_.wmf")) returned 1 [0218.982] SetEvent (hEvent=0x27c) returned 1 [0218.983] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02390_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0218.984] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3684) returned 1 [0218.984] CloseHandle (hObject=0x2fc) returned 1 [0218.984] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02390_.wmf")) returned 0x220 [0218.984] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02390_.wmf")) returned 0x220 [0218.984] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02390_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02390_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.985] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02390_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0218.985] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.985] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.985] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02390_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02390_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0218.986] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xe64, lpOverlapped=0x0) returned 1 [0218.987] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xe70, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xe70, lpOverlapped=0x0) returned 1 [0218.988] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0218.989] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.989] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.989] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xe64, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xe64, lpOverlapped=0x0) returned 1 [0218.989] FlushFileBuffers (hFile=0x2fc) returned 1 [0218.991] FlushFileBuffers (hFile=0x2f4) returned 1 [0218.993] CloseHandle (hObject=0x2fc) returned 1 [0218.993] CloseHandle (hObject=0x2f4) returned 1 [0218.993] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02390_.wmf")) returned 1 [0218.994] SetEvent (hEvent=0x27c) returned 1 [0218.994] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02398_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02398_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0218.995] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=7832) returned 1 [0218.995] CloseHandle (hObject=0x2f4) returned 1 [0218.995] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02398_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02398_.wmf")) returned 0x220 [0218.995] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02398_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02398_.wmf")) returned 0x220 [0218.995] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02398_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02398_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0218.995] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02398_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02398_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0218.995] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.996] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0218.996] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02398_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02398_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0218.996] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1e98, lpOverlapped=0x0) returned 1 [0218.998] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1ea0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1ea0, lpOverlapped=0x0) returned 1 [0218.999] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0218.999] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0218.999] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.000] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1e98, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1e98, lpOverlapped=0x0) returned 1 [0219.000] FlushFileBuffers (hFile=0x2f4) returned 1 [0219.002] FlushFileBuffers (hFile=0x2fc) returned 1 [0219.004] CloseHandle (hObject=0x2f4) returned 1 [0219.004] CloseHandle (hObject=0x2fc) returned 1 [0219.004] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02398_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02398_.wmf")) returned 1 [0219.005] SetEvent (hEvent=0x27c) returned 1 [0219.005] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02400_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02400_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0219.006] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3364) returned 1 [0219.006] CloseHandle (hObject=0x2fc) returned 1 [0219.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02400_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02400_.wmf")) returned 0x220 [0219.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02400_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02400_.wmf")) returned 0x220 [0219.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02400_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02400_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0219.006] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02400_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02400_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0219.006] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.006] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.006] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02400_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02400_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0219.007] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xd24, lpOverlapped=0x0) returned 1 [0219.009] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xd30, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xd30, lpOverlapped=0x0) returned 1 [0219.010] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0219.010] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.011] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.011] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xd24, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xd24, lpOverlapped=0x0) returned 1 [0219.011] FlushFileBuffers (hFile=0x2fc) returned 1 [0219.013] FlushFileBuffers (hFile=0x2f4) returned 1 [0219.014] CloseHandle (hObject=0x2fc) returned 1 [0219.014] CloseHandle (hObject=0x2f4) returned 1 [0219.015] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02400_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02400_.wmf")) returned 1 [0219.040] SetEvent (hEvent=0x27c) returned 1 [0219.040] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02404_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02404_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0219.042] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=8480) returned 1 [0219.042] CloseHandle (hObject=0x2f4) returned 1 [0219.042] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02404_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02404_.wmf")) returned 0x220 [0219.042] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02404_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02404_.wmf")) returned 0x220 [0219.042] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02404_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02404_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0219.043] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02404_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02404_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0219.043] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.043] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.043] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02404_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02404_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0219.044] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2120, lpOverlapped=0x0) returned 1 [0219.046] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2130, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2130, lpOverlapped=0x0) returned 1 [0219.047] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0219.048] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.048] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.048] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2120, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2120, lpOverlapped=0x0) returned 1 [0219.048] FlushFileBuffers (hFile=0x2f4) returned 1 [0219.050] FlushFileBuffers (hFile=0x2fc) returned 1 [0219.052] CloseHandle (hObject=0x2f4) returned 1 [0219.052] CloseHandle (hObject=0x2fc) returned 1 [0219.052] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02404_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02404_.wmf")) returned 1 [0219.053] SetEvent (hEvent=0x27c) returned 1 [0219.053] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02405_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02405_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0219.054] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=20608) returned 1 [0219.054] CloseHandle (hObject=0x2fc) returned 1 [0219.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02405_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02405_.wmf")) returned 0x220 [0219.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02405_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02405_.wmf")) returned 0x220 [0219.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02405_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02405_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0219.054] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02405_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02405_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0219.054] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.054] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.055] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02405_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02405_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0219.055] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x5080, lpOverlapped=0x0) returned 1 [0219.058] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5090, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x5090, lpOverlapped=0x0) returned 1 [0219.059] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0219.059] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.059] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.059] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5080, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x5080, lpOverlapped=0x0) returned 1 [0219.059] FlushFileBuffers (hFile=0x2fc) returned 1 [0219.221] FlushFileBuffers (hFile=0x2f4) returned 1 [0219.223] CloseHandle (hObject=0x2fc) returned 1 [0219.223] CloseHandle (hObject=0x2f4) returned 1 [0219.223] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02405_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02405_.wmf")) returned 1 [0219.224] SetEvent (hEvent=0x27c) returned 1 [0219.224] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02407_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02407_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0219.226] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=8136) returned 1 [0219.226] CloseHandle (hObject=0x2f4) returned 1 [0219.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02407_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02407_.wmf")) returned 0x220 [0219.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02407_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02407_.wmf")) returned 0x220 [0219.227] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02407_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02407_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0219.227] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02407_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02407_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0219.227] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.227] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.227] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02407_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02407_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0219.228] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1fc8, lpOverlapped=0x0) returned 1 [0219.230] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1fd0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1fd0, lpOverlapped=0x0) returned 1 [0219.231] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0219.231] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.231] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.231] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1fc8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1fc8, lpOverlapped=0x0) returned 1 [0219.231] FlushFileBuffers (hFile=0x2f4) returned 1 [0219.234] FlushFileBuffers (hFile=0x2fc) returned 1 [0219.235] CloseHandle (hObject=0x2f4) returned 1 [0219.235] CloseHandle (hObject=0x2fc) returned 1 [0219.235] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02407_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02407_.wmf")) returned 1 [0219.236] SetEvent (hEvent=0x27c) returned 1 [0219.236] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02413_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0219.237] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=10476) returned 1 [0219.237] CloseHandle (hObject=0x2fc) returned 1 [0219.237] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02413_.wmf")) returned 0x220 [0219.237] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02413_.wmf")) returned 0x220 [0219.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02413_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02413_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0219.238] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02413_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0219.238] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.238] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.238] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02413_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02413_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0219.239] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x28ec, lpOverlapped=0x0) returned 1 [0219.241] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x28f0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x28f0, lpOverlapped=0x0) returned 1 [0219.242] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0219.242] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.242] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.242] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x28ec, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x28ec, lpOverlapped=0x0) returned 1 [0219.242] FlushFileBuffers (hFile=0x2fc) returned 1 [0219.245] FlushFileBuffers (hFile=0x2f4) returned 1 [0219.246] CloseHandle (hObject=0x2fc) returned 1 [0219.246] CloseHandle (hObject=0x2f4) returned 1 [0219.246] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02413_.wmf")) returned 1 [0219.247] SetEvent (hEvent=0x27c) returned 1 [0219.247] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02417_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02417_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0219.248] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2852) returned 1 [0219.248] CloseHandle (hObject=0x2f4) returned 1 [0219.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02417_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02417_.wmf")) returned 0x220 [0219.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02417_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02417_.wmf")) returned 0x220 [0219.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02417_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02417_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0219.248] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02417_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02417_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0219.248] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.248] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.248] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02417_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02417_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0219.249] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xb24, lpOverlapped=0x0) returned 1 [0219.478] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xb30, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xb30, lpOverlapped=0x0) returned 1 [0219.479] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0219.480] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.480] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.480] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xb24, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xb24, lpOverlapped=0x0) returned 1 [0219.480] FlushFileBuffers (hFile=0x2f4) returned 1 [0219.499] FlushFileBuffers (hFile=0x2fc) returned 1 [0219.500] CloseHandle (hObject=0x2f4) returned 1 [0219.500] CloseHandle (hObject=0x2fc) returned 1 [0219.500] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02417_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02417_.wmf")) returned 1 [0219.501] SetEvent (hEvent=0x27c) returned 1 [0219.502] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02423_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02423_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0219.504] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=12216) returned 1 [0219.504] CloseHandle (hObject=0x2fc) returned 1 [0219.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02423_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02423_.wmf")) returned 0x220 [0219.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02423_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02423_.wmf")) returned 0x220 [0219.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02423_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02423_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0219.504] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02423_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02423_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0219.504] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.504] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.504] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02423_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02423_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0219.505] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2fb8, lpOverlapped=0x0) returned 1 [0219.507] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2fc0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2fc0, lpOverlapped=0x0) returned 1 [0219.509] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0219.509] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.509] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.509] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2fb8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2fb8, lpOverlapped=0x0) returned 1 [0219.509] FlushFileBuffers (hFile=0x2fc) returned 1 [0219.511] FlushFileBuffers (hFile=0x2f4) returned 1 [0219.513] CloseHandle (hObject=0x2fc) returned 1 [0219.513] CloseHandle (hObject=0x2f4) returned 1 [0219.513] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02423_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02423_.wmf")) returned 1 [0219.514] SetEvent (hEvent=0x27c) returned 1 [0219.514] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02424_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02424_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0219.515] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1340) returned 1 [0219.515] CloseHandle (hObject=0x2f4) returned 1 [0219.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02424_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02424_.wmf")) returned 0x220 [0219.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02424_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02424_.wmf")) returned 0x220 [0219.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02424_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02424_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0219.519] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02424_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02424_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0219.519] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.519] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.519] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02424_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02424_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0219.520] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x53c, lpOverlapped=0x0) returned 1 [0219.521] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x540, lpOverlapped=0x0) returned 1 [0219.527] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0219.527] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.527] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.527] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x53c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x53c, lpOverlapped=0x0) returned 1 [0219.527] FlushFileBuffers (hFile=0x2f4) returned 1 [0219.529] FlushFileBuffers (hFile=0x2fc) returned 1 [0219.530] CloseHandle (hObject=0x2f4) returned 1 [0219.530] CloseHandle (hObject=0x2fc) returned 1 [0219.531] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02424_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02424_.wmf")) returned 1 [0219.533] SetEvent (hEvent=0x27c) returned 1 [0219.533] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02426_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02426_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0219.535] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=6472) returned 1 [0219.535] CloseHandle (hObject=0x2fc) returned 1 [0219.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02426_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02426_.wmf")) returned 0x220 [0219.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02426_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02426_.wmf")) returned 0x220 [0219.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02426_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02426_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0219.535] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02426_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02426_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0219.535] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.535] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.536] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02426_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02426_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0219.537] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1948, lpOverlapped=0x0) returned 1 [0219.538] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1950, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1950, lpOverlapped=0x0) returned 1 [0219.539] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0219.539] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.539] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.539] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1948, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1948, lpOverlapped=0x0) returned 1 [0219.540] FlushFileBuffers (hFile=0x2fc) returned 1 [0219.541] FlushFileBuffers (hFile=0x2f4) returned 1 [0219.543] CloseHandle (hObject=0x2fc) returned 1 [0219.543] CloseHandle (hObject=0x2f4) returned 1 [0219.543] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02426_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02426_.wmf")) returned 1 [0219.544] SetEvent (hEvent=0x27c) returned 1 [0219.544] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02431_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02431_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0219.545] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=7212) returned 1 [0219.545] CloseHandle (hObject=0x2f4) returned 1 [0219.545] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02431_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02431_.wmf")) returned 0x220 [0219.545] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02431_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02431_.wmf")) returned 0x220 [0219.545] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02431_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02431_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0219.545] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02431_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02431_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0219.545] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.545] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.545] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02431_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02431_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0219.546] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1c2c, lpOverlapped=0x0) returned 1 [0219.548] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1c30, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1c30, lpOverlapped=0x0) returned 1 [0219.549] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0219.549] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.549] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.549] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1c2c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1c2c, lpOverlapped=0x0) returned 1 [0219.549] FlushFileBuffers (hFile=0x2f4) returned 1 [0219.552] FlushFileBuffers (hFile=0x2fc) returned 1 [0219.553] CloseHandle (hObject=0x2f4) returned 1 [0219.553] CloseHandle (hObject=0x2fc) returned 1 [0219.553] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02431_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02431_.wmf")) returned 1 [0219.554] SetEvent (hEvent=0x27c) returned 1 [0219.554] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02435_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02435_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0219.556] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=4088) returned 1 [0219.556] CloseHandle (hObject=0x2fc) returned 1 [0219.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02435_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02435_.wmf")) returned 0x220 [0219.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02435_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02435_.wmf")) returned 0x220 [0219.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02435_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02435_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0219.556] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02435_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02435_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0219.556] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.556] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.556] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02435_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02435_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f4 [0219.557] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xff8, lpOverlapped=0x0) returned 1 [0219.559] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1000, lpOverlapped=0x0) returned 1 [0219.560] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0219.560] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.560] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.560] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xff8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xff8, lpOverlapped=0x0) returned 1 [0219.560] FlushFileBuffers (hFile=0x2fc) returned 1 [0219.562] FlushFileBuffers (hFile=0x2f4) returned 1 [0219.577] CloseHandle (hObject=0x2fc) returned 1 [0219.577] CloseHandle (hObject=0x2f4) returned 1 [0219.577] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02435_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02435_.wmf")) returned 1 [0219.579] SetEvent (hEvent=0x27c) returned 1 [0219.579] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02439_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0219.580] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=5172) returned 1 [0219.580] CloseHandle (hObject=0x2f4) returned 1 [0219.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02439_.wmf")) returned 0x220 [0219.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02439_.wmf")) returned 0x220 [0219.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02439_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02439_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0219.580] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02439_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0219.580] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.580] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.580] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02439_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02439_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0219.581] ReadFile (in: hFile=0x2f4, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1434, lpOverlapped=0x0) returned 1 [0219.584] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1440, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1440, lpOverlapped=0x0) returned 1 [0219.586] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0219.587] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.587] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.587] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1434, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1434, lpOverlapped=0x0) returned 1 [0219.587] FlushFileBuffers (hFile=0x2f4) returned 1 [0219.594] FlushFileBuffers (hFile=0x2fc) returned 1 [0219.599] CloseHandle (hObject=0x2f4) returned 1 [0219.599] CloseHandle (hObject=0x2fc) returned 1 [0219.599] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02439_.wmf")) returned 1 [0219.600] SetEvent (hEvent=0x27c) returned 1 [0219.604] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02443_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0219.605] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1372) returned 1 [0219.605] CloseHandle (hObject=0x21c) returned 1 [0219.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02443_.wmf")) returned 0x220 [0219.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02443_.wmf")) returned 0x220 [0219.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02443_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02443_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0219.605] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02443_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0219.606] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.606] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.606] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02443_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02443_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0219.606] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x55c, lpOverlapped=0x0) returned 1 [0219.610] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x560, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x560, lpOverlapped=0x0) returned 1 [0219.612] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0219.612] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.612] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.612] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x55c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x55c, lpOverlapped=0x0) returned 1 [0219.612] FlushFileBuffers (hFile=0x21c) returned 1 [0219.617] FlushFileBuffers (hFile=0x2b0) returned 1 [0219.619] CloseHandle (hObject=0x21c) returned 1 [0219.619] CloseHandle (hObject=0x2b0) returned 1 [0219.619] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02443_.wmf")) returned 1 [0219.620] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02446_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02446_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0219.621] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2612) returned 1 [0219.621] CloseHandle (hObject=0x2b0) returned 1 [0219.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02446_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02446_.wmf")) returned 0x220 [0219.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02446_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02446_.wmf")) returned 0x220 [0219.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02446_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02446_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0219.622] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02446_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02446_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0219.622] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.622] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.622] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02446_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02446_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0219.622] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xa34, lpOverlapped=0x0) returned 1 [0219.629] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xa40, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xa40, lpOverlapped=0x0) returned 1 [0219.630] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0219.630] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.630] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.630] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xa34, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xa34, lpOverlapped=0x0) returned 1 [0219.630] FlushFileBuffers (hFile=0x2b0) returned 1 [0219.635] FlushFileBuffers (hFile=0x21c) returned 1 [0219.637] CloseHandle (hObject=0x2b0) returned 1 [0219.637] CloseHandle (hObject=0x21c) returned 1 [0219.637] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02446_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02446_.wmf")) returned 1 [0219.638] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02450_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02450_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0219.639] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3112) returned 1 [0219.639] CloseHandle (hObject=0x21c) returned 1 [0219.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02450_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02450_.wmf")) returned 0x220 [0219.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02450_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02450_.wmf")) returned 0x220 [0219.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02450_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02450_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0219.639] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02450_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02450_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0219.639] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.639] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.639] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02450_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02450_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0219.641] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xc28, lpOverlapped=0x0) returned 1 [0219.642] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xc30, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xc30, lpOverlapped=0x0) returned 1 [0219.643] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0219.643] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.643] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.643] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xc28, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xc28, lpOverlapped=0x0) returned 1 [0219.644] FlushFileBuffers (hFile=0x21c) returned 1 [0219.653] FlushFileBuffers (hFile=0x2b0) returned 1 [0219.658] CloseHandle (hObject=0x21c) returned 1 [0219.658] CloseHandle (hObject=0x2b0) returned 1 [0219.658] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02450_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02450_.wmf")) returned 1 [0219.659] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02453_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0219.661] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3388) returned 1 [0219.661] CloseHandle (hObject=0x2b0) returned 1 [0219.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02453_.wmf")) returned 0x220 [0219.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02453_.wmf")) returned 0x220 [0219.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02453_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02453_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0219.662] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02453_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0219.662] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.662] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.662] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02453_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02453_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0219.663] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xd3c, lpOverlapped=0x0) returned 1 [0219.664] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xd40, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xd40, lpOverlapped=0x0) returned 1 [0219.665] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0219.666] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.666] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.666] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xd3c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xd3c, lpOverlapped=0x0) returned 1 [0219.666] FlushFileBuffers (hFile=0x2b0) returned 1 [0219.673] FlushFileBuffers (hFile=0x21c) returned 1 [0219.678] CloseHandle (hObject=0x2b0) returned 1 [0219.678] CloseHandle (hObject=0x21c) returned 1 [0219.678] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02453_.wmf")) returned 1 [0219.679] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ocean_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0219.680] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=5440) returned 1 [0219.680] CloseHandle (hObject=0x21c) returned 1 [0219.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ocean_01.mid")) returned 0x220 [0219.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ocean_01.mid")) returned 0x220 [0219.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ocean_01.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0219.680] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ocean_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0219.680] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.680] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.680] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ocean_01.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0219.681] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1540, lpOverlapped=0x0) returned 1 [0219.683] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1550, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1550, lpOverlapped=0x0) returned 1 [0219.684] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0219.684] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.684] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.684] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1540, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1540, lpOverlapped=0x0) returned 1 [0219.684] FlushFileBuffers (hFile=0x21c) returned 1 [0219.695] FlushFileBuffers (hFile=0x2b0) returned 1 [0219.696] CloseHandle (hObject=0x21c) returned 1 [0219.696] CloseHandle (hObject=0x2b0) returned 1 [0219.696] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ocean_01.mid")) returned 1 [0219.697] SetEvent (hEvent=0x27c) returned 1 [0219.698] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\paper_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0219.699] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=6763) returned 1 [0219.699] CloseHandle (hObject=0x2b0) returned 1 [0219.699] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\paper_01.mid")) returned 0x220 [0219.699] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\paper_01.mid")) returned 0x220 [0219.699] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\paper_01.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0219.699] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\paper_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0219.699] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.699] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.699] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\paper_01.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0219.700] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1a6b, lpOverlapped=0x0) returned 1 [0219.702] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1a70, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1a70, lpOverlapped=0x0) returned 1 [0219.703] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0219.703] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.703] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.703] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1a6b, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1a6b, lpOverlapped=0x0) returned 1 [0219.703] FlushFileBuffers (hFile=0x2b0) returned 1 [0219.713] FlushFileBuffers (hFile=0x21c) returned 1 [0219.714] CloseHandle (hObject=0x2b0) returned 1 [0219.714] CloseHandle (hObject=0x21c) returned 1 [0219.715] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\paper_01.mid")) returned 1 [0219.715] SetEvent (hEvent=0x27c) returned 1 [0219.716] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_02.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0219.717] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=5714) returned 1 [0219.717] CloseHandle (hObject=0x21c) returned 1 [0219.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_02.mid")) returned 0x220 [0219.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_02.mid")) returned 0x220 [0219.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_02.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0219.717] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_02.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0219.717] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.717] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.718] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_02.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0219.718] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1652, lpOverlapped=0x0) returned 1 [0219.720] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1660, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1660, lpOverlapped=0x0) returned 1 [0219.722] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0219.722] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.722] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.722] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1652, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1652, lpOverlapped=0x0) returned 1 [0219.722] FlushFileBuffers (hFile=0x21c) returned 1 [0219.742] FlushFileBuffers (hFile=0x2b0) returned 1 [0219.743] CloseHandle (hObject=0x21c) returned 1 [0219.743] CloseHandle (hObject=0x2b0) returned 1 [0219.744] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_02.mid")) returned 1 [0219.745] SetEvent (hEvent=0x27c) returned 1 [0219.745] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_04.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0219.746] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=6070) returned 1 [0219.746] CloseHandle (hObject=0x2b0) returned 1 [0219.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_04.mid")) returned 0x220 [0219.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_04.mid")) returned 0x220 [0219.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_04.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0219.746] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_04.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0219.746] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.746] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.746] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_04.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0219.747] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x17b6, lpOverlapped=0x0) returned 1 [0219.749] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x17c0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x17c0, lpOverlapped=0x0) returned 1 [0219.750] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0219.750] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.750] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.751] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x17b6, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x17b6, lpOverlapped=0x0) returned 1 [0219.751] FlushFileBuffers (hFile=0x2b0) returned 1 [0219.758] FlushFileBuffers (hFile=0x21c) returned 1 [0219.763] CloseHandle (hObject=0x2b0) returned 1 [0219.763] CloseHandle (hObject=0x21c) returned 1 [0219.763] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_04.mid")) returned 1 [0219.764] SetEvent (hEvent=0x27c) returned 1 [0219.764] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_06.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0219.767] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=7768) returned 1 [0219.767] CloseHandle (hObject=0x21c) returned 1 [0219.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_06.mid")) returned 0x220 [0219.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_06.mid")) returned 0x220 [0219.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_06.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0219.767] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_06.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0219.767] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.767] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.767] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_06.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0219.768] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1e58, lpOverlapped=0x0) returned 1 [0219.770] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1e60, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1e60, lpOverlapped=0x0) returned 1 [0219.771] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0219.771] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.771] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.771] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1e58, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1e58, lpOverlapped=0x0) returned 1 [0219.771] FlushFileBuffers (hFile=0x21c) returned 1 [0219.781] FlushFileBuffers (hFile=0x2b0) returned 1 [0219.784] CloseHandle (hObject=0x21c) returned 1 [0219.784] CloseHandle (hObject=0x2b0) returned 1 [0219.784] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_06.mid")) returned 1 [0219.785] SetEvent (hEvent=0x27c) returned 1 [0219.785] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_08.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0219.786] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=7347) returned 1 [0219.786] CloseHandle (hObject=0x2b0) returned 1 [0219.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_08.mid")) returned 0x220 [0219.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_08.mid")) returned 0x220 [0219.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_08.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0219.786] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_08.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0219.786] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.786] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.786] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_08.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0219.787] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1cb3, lpOverlapped=0x0) returned 1 [0219.789] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1cc0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1cc0, lpOverlapped=0x0) returned 1 [0219.790] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0219.790] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.790] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.790] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1cb3, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1cb3, lpOverlapped=0x0) returned 1 [0219.790] FlushFileBuffers (hFile=0x2b0) returned 1 [0219.799] FlushFileBuffers (hFile=0x21c) returned 1 [0219.801] CloseHandle (hObject=0x2b0) returned 1 [0219.802] CloseHandle (hObject=0x21c) returned 1 [0219.802] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_08.mid")) returned 1 [0219.803] SetEvent (hEvent=0x27c) returned 1 [0219.803] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_10.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0219.803] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=5393) returned 1 [0219.803] CloseHandle (hObject=0x21c) returned 1 [0219.803] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_10.mid")) returned 0x220 [0219.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_10.mid")) returned 0x220 [0219.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_10.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0219.804] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_10.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0219.804] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.804] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.804] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_10.mid.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0219.805] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1511, lpOverlapped=0x0) returned 1 [0219.808] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1520, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1520, lpOverlapped=0x0) returned 1 [0219.809] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0219.809] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.809] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.809] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1511, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1511, lpOverlapped=0x0) returned 1 [0219.810] FlushFileBuffers (hFile=0x21c) returned 1 [0219.821] FlushFileBuffers (hFile=0x2b0) returned 1 [0219.824] CloseHandle (hObject=0x21c) returned 1 [0219.824] CloseHandle (hObject=0x2b0) returned 1 [0219.825] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_10.mid")) returned 1 [0219.826] SetEvent (hEvent=0x27c) returned 1 [0219.826] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00014_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00014_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0219.828] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=16666) returned 1 [0219.829] CloseHandle (hObject=0x2b0) returned 1 [0219.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00014_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00014_.wmf")) returned 0x220 [0219.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00014_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00014_.wmf")) returned 0x220 [0219.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00014_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00014_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0219.829] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00014_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00014_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0219.829] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.829] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.829] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00014_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00014_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0219.830] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x411a, lpOverlapped=0x0) returned 1 [0219.842] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4120, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4120, lpOverlapped=0x0) returned 1 [0219.843] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0219.844] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.844] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.844] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x411a, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x411a, lpOverlapped=0x0) returned 1 [0219.844] FlushFileBuffers (hFile=0x2b0) returned 1 [0219.863] FlushFileBuffers (hFile=0x21c) returned 1 [0219.865] CloseHandle (hObject=0x2b0) returned 1 [0219.865] CloseHandle (hObject=0x21c) returned 1 [0219.865] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00014_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00014_.wmf")) returned 1 [0219.866] SetEvent (hEvent=0x27c) returned 1 [0219.866] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00049_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00049_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0219.868] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=16448) returned 1 [0219.868] CloseHandle (hObject=0x21c) returned 1 [0219.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00049_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00049_.wmf")) returned 0x220 [0219.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00049_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00049_.wmf")) returned 0x220 [0219.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00049_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00049_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0219.868] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00049_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00049_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0219.868] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.868] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.868] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00049_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00049_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0219.870] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4040, lpOverlapped=0x0) returned 1 [0219.872] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4050, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4050, lpOverlapped=0x0) returned 1 [0219.873] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0219.873] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.874] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.874] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4040, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4040, lpOverlapped=0x0) returned 1 [0219.874] FlushFileBuffers (hFile=0x21c) returned 1 [0219.882] FlushFileBuffers (hFile=0x2b0) returned 1 [0219.886] CloseHandle (hObject=0x21c) returned 1 [0219.886] CloseHandle (hObject=0x2b0) returned 1 [0219.886] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00049_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00049_.wmf")) returned 1 [0219.887] SetEvent (hEvent=0x27c) returned 1 [0219.888] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00052_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00052_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0219.888] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=18412) returned 1 [0219.888] CloseHandle (hObject=0x2b0) returned 1 [0219.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00052_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00052_.wmf")) returned 0x220 [0219.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00052_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00052_.wmf")) returned 0x220 [0219.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00052_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00052_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0219.888] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00052_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00052_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0219.889] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.889] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.889] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00052_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00052_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0219.889] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x47ec, lpOverlapped=0x0) returned 1 [0219.892] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x47f0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x47f0, lpOverlapped=0x0) returned 1 [0219.893] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0219.893] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.893] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.893] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x47ec, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x47ec, lpOverlapped=0x0) returned 1 [0219.893] FlushFileBuffers (hFile=0x2b0) returned 1 [0219.903] FlushFileBuffers (hFile=0x21c) returned 1 [0219.910] CloseHandle (hObject=0x2b0) returned 1 [0219.911] CloseHandle (hObject=0x21c) returned 1 [0219.911] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00052_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00052_.wmf")) returned 1 [0219.912] SetEvent (hEvent=0x27c) returned 1 [0219.912] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00272_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00272_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0219.918] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2804) returned 1 [0219.918] CloseHandle (hObject=0x21c) returned 1 [0219.918] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00272_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00272_.wmf")) returned 0x220 [0219.919] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00272_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00272_.wmf")) returned 0x220 [0219.919] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00272_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00272_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0219.919] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00272_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00272_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0219.919] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.919] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.919] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00272_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00272_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0219.920] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xaf4, lpOverlapped=0x0) returned 1 [0219.922] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xb00, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xb00, lpOverlapped=0x0) returned 1 [0219.924] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0219.925] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.925] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.925] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xaf4, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xaf4, lpOverlapped=0x0) returned 1 [0219.925] FlushFileBuffers (hFile=0x21c) returned 1 [0219.939] FlushFileBuffers (hFile=0x2b0) returned 1 [0219.940] CloseHandle (hObject=0x21c) returned 1 [0219.941] CloseHandle (hObject=0x2b0) returned 1 [0219.941] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00272_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00272_.wmf")) returned 1 [0219.942] SetEvent (hEvent=0x27c) returned 1 [0219.942] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00478_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00478_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0219.943] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=7416) returned 1 [0219.943] CloseHandle (hObject=0x2b0) returned 1 [0219.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00478_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00478_.wmf")) returned 0x220 [0219.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00478_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00478_.wmf")) returned 0x220 [0219.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00478_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00478_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0219.944] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00478_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00478_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0219.944] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.944] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.944] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00478_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00478_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0219.953] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1cf8, lpOverlapped=0x0) returned 1 [0219.955] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1d00, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1d00, lpOverlapped=0x0) returned 1 [0219.957] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0219.957] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.957] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.957] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1cf8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1cf8, lpOverlapped=0x0) returned 1 [0219.957] FlushFileBuffers (hFile=0x2b0) returned 1 [0219.967] FlushFileBuffers (hFile=0x21c) returned 1 [0219.968] CloseHandle (hObject=0x2b0) returned 1 [0219.968] CloseHandle (hObject=0x21c) returned 1 [0219.968] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00478_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00478_.wmf")) returned 1 [0219.969] SetEvent (hEvent=0x27c) returned 1 [0219.970] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00489_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00489_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0219.970] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=81964) returned 1 [0219.970] CloseHandle (hObject=0x21c) returned 1 [0219.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00489_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00489_.wmf")) returned 0x220 [0219.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00489_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00489_.wmf")) returned 0x220 [0219.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00489_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00489_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0219.971] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00489_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00489_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0219.971] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.971] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.971] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00489_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00489_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0219.971] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1402c, lpOverlapped=0x0) returned 1 [0219.977] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x14030, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x14030, lpOverlapped=0x0) returned 1 [0219.979] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0219.980] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.980] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0219.980] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1402c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1402c, lpOverlapped=0x0) returned 1 [0219.980] FlushFileBuffers (hFile=0x21c) returned 1 [0219.985] FlushFileBuffers (hFile=0x2b0) returned 1 [0219.994] CloseHandle (hObject=0x21c) returned 1 [0219.994] CloseHandle (hObject=0x2b0) returned 1 [0219.994] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00489_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00489_.wmf")) returned 1 [0219.996] SetEvent (hEvent=0x27c) returned 1 [0219.996] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00542_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00542_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0219.997] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=36264) returned 1 [0219.998] CloseHandle (hObject=0x2b0) returned 1 [0219.998] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00542_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00542_.wmf")) returned 0x220 [0219.998] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00542_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00542_.wmf")) returned 0x220 [0219.998] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00542_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00542_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0219.998] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00542_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00542_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0219.998] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.998] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0219.998] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00542_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00542_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0219.999] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x8da8, lpOverlapped=0x0) returned 1 [0220.002] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x8db0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x8db0, lpOverlapped=0x0) returned 1 [0220.008] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0220.008] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.008] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.008] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x8da8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x8da8, lpOverlapped=0x0) returned 1 [0220.008] FlushFileBuffers (hFile=0x2b0) returned 1 [0220.017] FlushFileBuffers (hFile=0x21c) returned 1 [0220.024] CloseHandle (hObject=0x2b0) returned 1 [0220.024] CloseHandle (hObject=0x21c) returned 1 [0220.024] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00542_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00542_.wmf")) returned 1 [0220.025] SetEvent (hEvent=0x27c) returned 1 [0220.025] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00559_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0220.027] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=9904) returned 1 [0220.027] CloseHandle (hObject=0x21c) returned 1 [0220.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00559_.wmf")) returned 0x220 [0220.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00559_.wmf")) returned 0x220 [0220.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00559_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00559_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.028] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00559_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0220.028] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.028] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.028] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00559_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00559_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0220.028] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x26b0, lpOverlapped=0x0) returned 1 [0220.030] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x26c0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x26c0, lpOverlapped=0x0) returned 1 [0220.032] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0220.032] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.032] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.032] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x26b0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x26b0, lpOverlapped=0x0) returned 1 [0220.033] FlushFileBuffers (hFile=0x21c) returned 1 [0220.040] FlushFileBuffers (hFile=0x2b0) returned 1 [0220.045] CloseHandle (hObject=0x21c) returned 1 [0220.045] CloseHandle (hObject=0x2b0) returned 1 [0220.045] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00559_.wmf")) returned 1 [0220.046] SetEvent (hEvent=0x27c) returned 1 [0220.046] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00578_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00578_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0220.047] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=6886) returned 1 [0220.047] CloseHandle (hObject=0x2b0) returned 1 [0220.047] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00578_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00578_.wmf")) returned 0x220 [0220.047] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00578_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00578_.wmf")) returned 0x220 [0220.047] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00578_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00578_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.047] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00578_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00578_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0220.047] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.047] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.047] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00578_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00578_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0220.048] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1ae6, lpOverlapped=0x0) returned 1 [0220.050] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1af0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1af0, lpOverlapped=0x0) returned 1 [0220.051] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0220.051] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.051] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.051] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1ae6, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1ae6, lpOverlapped=0x0) returned 1 [0220.051] FlushFileBuffers (hFile=0x2b0) returned 1 [0220.054] FlushFileBuffers (hFile=0x21c) returned 1 [0220.060] CloseHandle (hObject=0x2b0) returned 1 [0220.060] CloseHandle (hObject=0x21c) returned 1 [0220.060] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00578_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00578_.wmf")) returned 1 [0220.061] SetEvent (hEvent=0x27c) returned 1 [0220.061] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00633_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00633_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0220.062] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=19690) returned 1 [0220.062] CloseHandle (hObject=0x21c) returned 1 [0220.062] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00633_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00633_.wmf")) returned 0x220 [0220.062] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00633_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00633_.wmf")) returned 0x220 [0220.062] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00633_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00633_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.062] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00633_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00633_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0220.062] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.062] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.062] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00633_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00633_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0220.063] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x4cea, lpOverlapped=0x0) returned 1 [0220.068] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4cf0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4cf0, lpOverlapped=0x0) returned 1 [0220.069] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0220.069] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.069] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.069] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4cea, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x4cea, lpOverlapped=0x0) returned 1 [0220.070] FlushFileBuffers (hFile=0x21c) returned 1 [0220.075] FlushFileBuffers (hFile=0x2b0) returned 1 [0220.085] CloseHandle (hObject=0x21c) returned 1 [0220.085] CloseHandle (hObject=0x2b0) returned 1 [0220.085] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00633_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00633_.wmf")) returned 1 [0220.087] SetEvent (hEvent=0x27c) returned 1 [0220.087] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00668_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00668_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0220.087] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=24616) returned 1 [0220.087] CloseHandle (hObject=0x2b0) returned 1 [0220.087] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00668_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00668_.wmf")) returned 0x220 [0220.087] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00668_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00668_.wmf")) returned 0x220 [0220.088] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00668_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00668_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.088] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00668_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00668_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0220.088] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.088] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.088] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00668_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00668_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0220.088] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x6028, lpOverlapped=0x0) returned 1 [0220.094] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x6030, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x6030, lpOverlapped=0x0) returned 1 [0220.095] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0220.095] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.095] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.095] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x6028, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x6028, lpOverlapped=0x0) returned 1 [0220.096] FlushFileBuffers (hFile=0x2b0) returned 1 [0220.098] FlushFileBuffers (hFile=0x21c) returned 1 [0220.108] CloseHandle (hObject=0x2b0) returned 1 [0220.108] CloseHandle (hObject=0x21c) returned 1 [0220.108] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00668_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00668_.wmf")) returned 1 [0220.125] SetEvent (hEvent=0x27c) returned 1 [0220.128] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00686_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00686_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0220.149] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=4398) returned 1 [0220.149] CloseHandle (hObject=0x21c) returned 1 [0220.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00686_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00686_.wmf")) returned 0x220 [0220.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00686_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00686_.wmf")) returned 0x220 [0220.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00686_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00686_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.151] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00686_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00686_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0220.152] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.152] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.152] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00686_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00686_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0220.153] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x112e, lpOverlapped=0x0) returned 1 [0220.156] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1130, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1130, lpOverlapped=0x0) returned 1 [0220.158] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0220.158] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.158] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.158] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x112e, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x112e, lpOverlapped=0x0) returned 1 [0220.159] FlushFileBuffers (hFile=0x21c) returned 1 [0220.174] FlushFileBuffers (hFile=0x2b0) returned 1 [0220.183] CloseHandle (hObject=0x21c) returned 1 [0220.183] CloseHandle (hObject=0x2b0) returned 1 [0220.183] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00686_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00686_.wmf")) returned 1 [0220.184] SetEvent (hEvent=0x27c) returned 1 [0220.185] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00720_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00720_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0220.185] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=14630) returned 1 [0220.186] CloseHandle (hObject=0x2b0) returned 1 [0220.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00720_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00720_.wmf")) returned 0x220 [0220.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00720_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00720_.wmf")) returned 0x220 [0220.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00720_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00720_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.186] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00720_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00720_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0220.186] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.186] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.186] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00720_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00720_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0220.187] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x3926, lpOverlapped=0x0) returned 1 [0220.190] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3930, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x3930, lpOverlapped=0x0) returned 1 [0220.191] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0220.191] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.191] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.191] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3926, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x3926, lpOverlapped=0x0) returned 1 [0220.191] FlushFileBuffers (hFile=0x2b0) returned 1 [0220.199] FlushFileBuffers (hFile=0x21c) returned 1 [0220.203] CloseHandle (hObject=0x2b0) returned 1 [0220.203] CloseHandle (hObject=0x21c) returned 1 [0220.203] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00720_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00720_.wmf")) returned 1 [0220.207] SetEvent (hEvent=0x27c) returned 1 [0220.207] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00726_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00726_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0220.208] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=45476) returned 1 [0220.208] CloseHandle (hObject=0x21c) returned 1 [0220.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00726_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00726_.wmf")) returned 0x220 [0220.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00726_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00726_.wmf")) returned 0x220 [0220.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00726_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00726_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.208] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00726_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00726_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0220.208] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.208] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.208] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00726_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00726_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0220.209] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xb1a4, lpOverlapped=0x0) returned 1 [0220.212] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xb1b0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xb1b0, lpOverlapped=0x0) returned 1 [0220.214] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0220.214] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.214] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.214] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xb1a4, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xb1a4, lpOverlapped=0x0) returned 1 [0220.215] FlushFileBuffers (hFile=0x21c) returned 1 [0220.219] FlushFileBuffers (hFile=0x2b0) returned 1 [0220.229] CloseHandle (hObject=0x21c) returned 1 [0220.229] CloseHandle (hObject=0x2b0) returned 1 [0220.229] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00726_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00726_.wmf")) returned 1 [0220.230] SetEvent (hEvent=0x27c) returned 1 [0220.230] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00833_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00833_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0220.231] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=7328) returned 1 [0220.231] CloseHandle (hObject=0x2b0) returned 1 [0220.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00833_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00833_.wmf")) returned 0x220 [0220.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00833_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00833_.wmf")) returned 0x220 [0220.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00833_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00833_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.231] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00833_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00833_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0220.232] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.232] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.232] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00833_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00833_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0220.232] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1ca0, lpOverlapped=0x0) returned 1 [0220.249] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1cb0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1cb0, lpOverlapped=0x0) returned 1 [0220.251] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0220.251] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.251] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.251] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1ca0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1ca0, lpOverlapped=0x0) returned 1 [0220.251] FlushFileBuffers (hFile=0x2b0) returned 1 [0220.263] FlushFileBuffers (hFile=0x21c) returned 1 [0220.265] CloseHandle (hObject=0x2b0) returned 1 [0220.265] CloseHandle (hObject=0x21c) returned 1 [0220.265] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00833_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00833_.wmf")) returned 1 [0220.266] SetEvent (hEvent=0x27c) returned 1 [0220.266] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00934_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00934_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0220.268] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=12544) returned 1 [0220.268] CloseHandle (hObject=0x21c) returned 1 [0220.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00934_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00934_.wmf")) returned 0x220 [0220.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00934_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00934_.wmf")) returned 0x220 [0220.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00934_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00934_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.268] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00934_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00934_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0220.268] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.268] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.268] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00934_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00934_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0220.269] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x3100, lpOverlapped=0x0) returned 1 [0220.271] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3110, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x3110, lpOverlapped=0x0) returned 1 [0220.273] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0220.273] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.273] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.273] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3100, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x3100, lpOverlapped=0x0) returned 1 [0220.273] FlushFileBuffers (hFile=0x21c) returned 1 [0220.289] FlushFileBuffers (hFile=0x2b0) returned 1 [0220.292] CloseHandle (hObject=0x21c) returned 1 [0220.292] CloseHandle (hObject=0x2b0) returned 1 [0220.292] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00934_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00934_.wmf")) returned 1 [0220.293] SetEvent (hEvent=0x27c) returned 1 [0220.293] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01160_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0220.294] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2436) returned 1 [0220.294] CloseHandle (hObject=0x2b0) returned 1 [0220.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01160_.wmf")) returned 0x220 [0220.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01160_.wmf")) returned 0x220 [0220.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01160_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01160_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01160_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0220.295] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.295] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01160_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01160_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0220.295] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x984, lpOverlapped=0x0) returned 1 [0220.298] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x990, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x990, lpOverlapped=0x0) returned 1 [0220.299] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0220.299] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.299] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.299] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x984, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x984, lpOverlapped=0x0) returned 1 [0220.299] FlushFileBuffers (hFile=0x2b0) returned 1 [0220.306] FlushFileBuffers (hFile=0x21c) returned 1 [0220.367] CloseHandle (hObject=0x2b0) returned 1 [0220.367] CloseHandle (hObject=0x21c) returned 1 [0220.367] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01160_.wmf")) returned 1 [0220.369] SetEvent (hEvent=0x27c) returned 1 [0220.370] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01191_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0220.371] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=16284) returned 1 [0220.371] CloseHandle (hObject=0x21c) returned 1 [0220.371] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01191_.wmf")) returned 0x220 [0220.371] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01191_.wmf")) returned 0x220 [0220.371] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01191_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01191_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.371] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01191_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0220.372] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.372] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.372] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01191_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01191_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0220.372] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x3f9c, lpOverlapped=0x0) returned 1 [0220.375] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3fa0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x3fa0, lpOverlapped=0x0) returned 1 [0220.376] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0220.377] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.377] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.377] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3f9c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x3f9c, lpOverlapped=0x0) returned 1 [0220.377] FlushFileBuffers (hFile=0x21c) returned 1 [0220.474] FlushFileBuffers (hFile=0x2b0) returned 1 [0220.477] CloseHandle (hObject=0x21c) returned 1 [0220.477] CloseHandle (hObject=0x2b0) returned 1 [0220.477] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01191_.wmf")) returned 1 [0220.478] SetEvent (hEvent=0x27c) returned 1 [0220.478] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01661_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01661_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0220.480] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=5144) returned 1 [0220.480] CloseHandle (hObject=0x2b0) returned 1 [0220.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01661_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01661_.wmf")) returned 0x220 [0220.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01661_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01661_.wmf")) returned 0x220 [0220.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01661_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01661_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.480] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01661_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01661_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0220.481] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.481] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.481] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01661_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01661_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0220.482] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1418, lpOverlapped=0x0) returned 1 [0220.485] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1420, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1420, lpOverlapped=0x0) returned 1 [0220.486] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0220.486] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.486] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.486] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1418, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1418, lpOverlapped=0x0) returned 1 [0220.486] FlushFileBuffers (hFile=0x2b0) returned 1 [0220.496] FlushFileBuffers (hFile=0x21c) returned 1 [0220.498] CloseHandle (hObject=0x2b0) returned 1 [0220.498] CloseHandle (hObject=0x21c) returned 1 [0220.498] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01661_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01661_.wmf")) returned 1 [0220.499] SetEvent (hEvent=0x27c) returned 1 [0220.499] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02120_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02120_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0220.501] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=9172) returned 1 [0220.501] CloseHandle (hObject=0x21c) returned 1 [0220.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02120_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02120_.wmf")) returned 0x220 [0220.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02120_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02120_.wmf")) returned 0x220 [0220.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02120_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02120_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.501] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02120_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02120_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0220.501] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.501] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.502] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02120_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02120_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0220.502] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x23d4, lpOverlapped=0x0) returned 1 [0220.505] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x23e0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x23e0, lpOverlapped=0x0) returned 1 [0220.506] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0220.506] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.506] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.506] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x23d4, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x23d4, lpOverlapped=0x0) returned 1 [0220.506] FlushFileBuffers (hFile=0x21c) returned 1 [0220.515] FlushFileBuffers (hFile=0x2b0) returned 1 [0220.518] CloseHandle (hObject=0x21c) returned 1 [0220.519] CloseHandle (hObject=0x2b0) returned 1 [0220.519] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02120_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02120_.wmf")) returned 1 [0220.520] SetEvent (hEvent=0x27c) returned 1 [0220.520] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02262_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0220.521] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=30178) returned 1 [0220.521] CloseHandle (hObject=0x2b0) returned 1 [0220.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02262_.wmf")) returned 0x220 [0220.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02262_.wmf")) returned 0x220 [0220.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02262_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02262_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.521] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02262_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0220.521] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.521] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.521] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02262_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02262_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0220.522] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x75e2, lpOverlapped=0x0) returned 1 [0220.528] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x75f0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x75f0, lpOverlapped=0x0) returned 1 [0220.530] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0220.530] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.530] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.530] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x75e2, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x75e2, lpOverlapped=0x0) returned 1 [0220.530] FlushFileBuffers (hFile=0x2b0) returned 1 [0220.540] FlushFileBuffers (hFile=0x21c) returned 1 [0220.542] CloseHandle (hObject=0x2b0) returned 1 [0220.542] CloseHandle (hObject=0x21c) returned 1 [0220.542] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02262_.wmf")) returned 1 [0220.543] SetEvent (hEvent=0x27c) returned 1 [0220.543] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02265_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0220.544] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=25266) returned 1 [0220.544] CloseHandle (hObject=0x21c) returned 1 [0220.545] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02265_.wmf")) returned 0x220 [0220.545] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02265_.wmf")) returned 0x220 [0220.545] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02265_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02265_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.545] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02265_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0220.545] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.545] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.545] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02265_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02265_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0220.550] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x62b2, lpOverlapped=0x0) returned 1 [0220.553] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x62c0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x62c0, lpOverlapped=0x0) returned 1 [0220.558] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0220.559] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.559] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.559] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x62b2, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x62b2, lpOverlapped=0x0) returned 1 [0220.559] FlushFileBuffers (hFile=0x21c) returned 1 [0220.579] FlushFileBuffers (hFile=0x2b0) returned 1 [0220.582] CloseHandle (hObject=0x21c) returned 1 [0220.582] CloseHandle (hObject=0x2b0) returned 1 [0220.582] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02265_.wmf")) returned 1 [0220.583] SetEvent (hEvent=0x27c) returned 1 [0220.583] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02270_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0220.585] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=28454) returned 1 [0220.585] CloseHandle (hObject=0x2b0) returned 1 [0220.585] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02270_.wmf")) returned 0x220 [0220.585] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02270_.wmf")) returned 0x220 [0220.585] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02270_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02270_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.585] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02270_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0220.586] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.586] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.586] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02270_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02270_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0220.587] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x6f26, lpOverlapped=0x0) returned 1 [0220.591] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x6f30, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x6f30, lpOverlapped=0x0) returned 1 [0220.592] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0220.592] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.593] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.593] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x6f26, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x6f26, lpOverlapped=0x0) returned 1 [0220.593] FlushFileBuffers (hFile=0x2b0) returned 1 [0220.602] FlushFileBuffers (hFile=0x21c) returned 1 [0220.707] CloseHandle (hObject=0x2b0) returned 1 [0220.707] CloseHandle (hObject=0x21c) returned 1 [0220.707] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02270_.wmf")) returned 1 [0220.708] SetEvent (hEvent=0x27c) returned 1 [0220.709] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02296_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0220.710] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=21288) returned 1 [0220.710] CloseHandle (hObject=0x21c) returned 1 [0220.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02296_.wmf")) returned 0x220 [0220.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02296_.wmf")) returned 0x220 [0220.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02296_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02296_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.710] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02296_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0220.710] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.710] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.710] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02296_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02296_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0220.711] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x5328, lpOverlapped=0x0) returned 1 [0220.714] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5330, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x5330, lpOverlapped=0x0) returned 1 [0220.715] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0220.715] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.715] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.715] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x5328, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x5328, lpOverlapped=0x0) returned 1 [0220.716] FlushFileBuffers (hFile=0x21c) returned 1 [0220.718] FlushFileBuffers (hFile=0x2b0) returned 1 [0220.725] CloseHandle (hObject=0x21c) returned 1 [0220.725] CloseHandle (hObject=0x2b0) returned 1 [0220.725] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02296_.wmf")) returned 1 [0220.749] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02522_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02522_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0220.754] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=14840) returned 1 [0220.754] CloseHandle (hObject=0x2b0) returned 1 [0220.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02522_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02522_.wmf")) returned 0x220 [0220.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02522_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02522_.wmf")) returned 0x220 [0220.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02522_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02522_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.754] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02522_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02522_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0220.754] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.754] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.754] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02522_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02522_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0220.755] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x39f8, lpOverlapped=0x0) returned 1 [0220.758] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3a00, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x3a00, lpOverlapped=0x0) returned 1 [0220.759] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0220.759] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.759] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.759] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x39f8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x39f8, lpOverlapped=0x0) returned 1 [0220.759] FlushFileBuffers (hFile=0x2b0) returned 1 [0220.771] FlushFileBuffers (hFile=0x21c) returned 1 [0220.773] CloseHandle (hObject=0x2b0) returned 1 [0220.773] CloseHandle (hObject=0x21c) returned 1 [0220.773] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02522_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02522_.wmf")) returned 1 [0220.774] SetEvent (hEvent=0x27c) returned 1 [0220.775] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02957_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02957_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0220.776] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3184) returned 1 [0220.776] CloseHandle (hObject=0x21c) returned 1 [0220.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02957_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02957_.wmf")) returned 0x220 [0220.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02957_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02957_.wmf")) returned 0x220 [0220.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02957_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02957_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.777] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02957_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02957_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0220.778] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.778] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.778] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02957_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02957_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0220.779] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xc70, lpOverlapped=0x0) returned 1 [0220.780] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xc80, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xc80, lpOverlapped=0x0) returned 1 [0220.781] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0220.782] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.782] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.782] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xc70, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xc70, lpOverlapped=0x0) returned 1 [0220.782] FlushFileBuffers (hFile=0x21c) returned 1 [0220.794] FlushFileBuffers (hFile=0x2b0) returned 1 [0220.796] CloseHandle (hObject=0x21c) returned 1 [0220.796] CloseHandle (hObject=0x2b0) returned 1 [0220.796] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02957_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02957_.wmf")) returned 1 [0220.797] SetEvent (hEvent=0x27c) returned 1 [0220.798] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03241_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03241_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0220.799] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2228) returned 1 [0220.799] CloseHandle (hObject=0x2b0) returned 1 [0220.799] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03241_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03241_.wmf")) returned 0x220 [0220.799] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03241_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03241_.wmf")) returned 0x220 [0220.799] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03241_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03241_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.799] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03241_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03241_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0220.799] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.799] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.799] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03241_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03241_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0220.800] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x8b4, lpOverlapped=0x0) returned 1 [0220.802] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x8c0, lpOverlapped=0x0) returned 1 [0220.803] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0220.803] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.803] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.803] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x8b4, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x8b4, lpOverlapped=0x0) returned 1 [0220.803] FlushFileBuffers (hFile=0x2b0) returned 1 [0220.806] FlushFileBuffers (hFile=0x21c) returned 1 [0220.813] CloseHandle (hObject=0x2b0) returned 1 [0220.813] CloseHandle (hObject=0x21c) returned 1 [0220.813] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03241_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03241_.wmf")) returned 1 [0220.814] SetEvent (hEvent=0x27c) returned 1 [0220.814] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03331_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03331_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0220.815] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1682) returned 1 [0220.815] CloseHandle (hObject=0x21c) returned 1 [0220.815] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03331_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03331_.wmf")) returned 0x220 [0220.815] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03331_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03331_.wmf")) returned 0x220 [0220.815] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03331_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03331_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.815] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03331_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03331_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0220.815] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.815] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.815] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03331_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03331_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0220.816] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x692, lpOverlapped=0x0) returned 1 [0220.821] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x6a0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x6a0, lpOverlapped=0x0) returned 1 [0220.822] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0220.822] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.822] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.822] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x692, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x692, lpOverlapped=0x0) returned 1 [0220.822] FlushFileBuffers (hFile=0x21c) returned 1 [0220.828] FlushFileBuffers (hFile=0x2b0) returned 1 [0220.837] CloseHandle (hObject=0x21c) returned 1 [0220.837] CloseHandle (hObject=0x2b0) returned 1 [0220.837] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03331_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03331_.wmf")) returned 1 [0220.838] SetEvent (hEvent=0x27c) returned 1 [0220.839] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03451_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03451_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0220.839] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=8456) returned 1 [0220.839] CloseHandle (hObject=0x2b0) returned 1 [0220.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03451_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03451_.wmf")) returned 0x220 [0220.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03451_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03451_.wmf")) returned 0x220 [0220.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03451_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03451_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.840] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03451_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03451_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0220.840] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.840] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.840] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03451_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03451_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0220.841] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2108, lpOverlapped=0x0) returned 1 [0220.843] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2110, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2110, lpOverlapped=0x0) returned 1 [0220.844] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0220.844] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.844] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.844] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2108, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2108, lpOverlapped=0x0) returned 1 [0220.844] FlushFileBuffers (hFile=0x2b0) returned 1 [0220.871] FlushFileBuffers (hFile=0x21c) returned 1 [0220.874] CloseHandle (hObject=0x2b0) returned 1 [0220.875] CloseHandle (hObject=0x21c) returned 1 [0220.875] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03451_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03451_.wmf")) returned 1 [0220.876] SetEvent (hEvent=0x27c) returned 1 [0220.876] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03459_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03459_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0220.878] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=8568) returned 1 [0220.878] CloseHandle (hObject=0x21c) returned 1 [0220.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03459_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03459_.wmf")) returned 0x220 [0220.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03459_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03459_.wmf")) returned 0x220 [0220.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03459_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03459_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.878] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03459_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03459_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0220.878] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.878] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.878] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03459_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03459_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0220.880] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2178, lpOverlapped=0x0) returned 1 [0220.882] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2180, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2180, lpOverlapped=0x0) returned 1 [0220.883] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0220.883] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.883] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.883] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2178, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2178, lpOverlapped=0x0) returned 1 [0220.883] FlushFileBuffers (hFile=0x21c) returned 1 [0220.886] FlushFileBuffers (hFile=0x2b0) returned 1 [0220.887] CloseHandle (hObject=0x21c) returned 1 [0220.887] CloseHandle (hObject=0x2b0) returned 1 [0220.888] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03459_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03459_.wmf")) returned 1 [0220.889] SetEvent (hEvent=0x27c) returned 1 [0220.889] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03464_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03464_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0220.890] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=5732) returned 1 [0220.890] CloseHandle (hObject=0x2b0) returned 1 [0220.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03464_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03464_.wmf")) returned 0x220 [0220.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03464_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03464_.wmf")) returned 0x220 [0220.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03464_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03464_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.890] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03464_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03464_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0220.890] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.890] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.890] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03464_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03464_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0220.891] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1664, lpOverlapped=0x0) returned 1 [0220.893] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1670, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1670, lpOverlapped=0x0) returned 1 [0220.894] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0220.894] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.895] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.895] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1664, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1664, lpOverlapped=0x0) returned 1 [0220.895] FlushFileBuffers (hFile=0x2b0) returned 1 [0220.898] FlushFileBuffers (hFile=0x21c) returned 1 [0220.899] CloseHandle (hObject=0x2b0) returned 1 [0220.899] CloseHandle (hObject=0x21c) returned 1 [0220.899] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03464_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03464_.wmf")) returned 1 [0220.901] SetEvent (hEvent=0x27c) returned 1 [0220.901] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03466_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03466_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0220.902] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=16800) returned 1 [0220.902] CloseHandle (hObject=0x21c) returned 1 [0220.902] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03466_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03466_.wmf")) returned 0x220 [0220.902] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03466_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03466_.wmf")) returned 0x220 [0220.902] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03466_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03466_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.902] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03466_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03466_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0220.902] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.902] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.902] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03466_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03466_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0220.903] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x41a0, lpOverlapped=0x0) returned 1 [0220.906] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x41b0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x41b0, lpOverlapped=0x0) returned 1 [0220.918] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0220.918] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.919] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.919] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x41a0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x41a0, lpOverlapped=0x0) returned 1 [0220.919] FlushFileBuffers (hFile=0x21c) returned 1 [0220.921] FlushFileBuffers (hFile=0x2b0) returned 1 [0220.943] CloseHandle (hObject=0x21c) returned 1 [0220.943] CloseHandle (hObject=0x2b0) returned 1 [0220.943] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03466_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03466_.wmf")) returned 1 [0220.944] SetEvent (hEvent=0x27c) returned 1 [0220.944] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03470_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03470_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0220.946] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=14744) returned 1 [0220.946] CloseHandle (hObject=0x2b0) returned 1 [0220.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03470_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03470_.wmf")) returned 0x220 [0220.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03470_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03470_.wmf")) returned 0x220 [0220.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03470_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03470_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.946] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03470_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03470_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0220.946] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.946] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.946] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03470_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03470_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0220.948] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x3998, lpOverlapped=0x0) returned 1 [0220.952] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x39a0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x39a0, lpOverlapped=0x0) returned 1 [0220.954] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0220.954] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.954] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.954] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3998, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x3998, lpOverlapped=0x0) returned 1 [0220.955] FlushFileBuffers (hFile=0x2b0) returned 1 [0220.957] FlushFileBuffers (hFile=0x21c) returned 1 [0220.958] CloseHandle (hObject=0x2b0) returned 1 [0220.959] CloseHandle (hObject=0x21c) returned 1 [0220.959] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03470_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03470_.wmf")) returned 1 [0220.960] SetEvent (hEvent=0x27c) returned 1 [0220.960] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03513_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0220.965] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3780) returned 1 [0220.965] CloseHandle (hObject=0x21c) returned 1 [0220.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03513_.wmf")) returned 0x220 [0220.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03513_.wmf")) returned 0x220 [0220.966] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03513_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03513_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.966] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03513_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0220.966] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.966] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.966] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03513_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03513_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0220.967] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xec4, lpOverlapped=0x0) returned 1 [0220.969] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xed0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xed0, lpOverlapped=0x0) returned 1 [0220.970] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0220.970] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.970] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.970] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xec4, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xec4, lpOverlapped=0x0) returned 1 [0220.970] FlushFileBuffers (hFile=0x21c) returned 1 [0220.973] FlushFileBuffers (hFile=0x2b0) returned 1 [0220.974] CloseHandle (hObject=0x21c) returned 1 [0220.974] CloseHandle (hObject=0x2b0) returned 1 [0220.974] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03513_.wmf")) returned 1 [0220.975] SetEvent (hEvent=0x27c) returned 1 [0220.975] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03668_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03668_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0220.977] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=6248) returned 1 [0220.977] CloseHandle (hObject=0x2b0) returned 1 [0220.977] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03668_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03668_.wmf")) returned 0x220 [0220.977] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03668_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03668_.wmf")) returned 0x220 [0220.977] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03668_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03668_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.977] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03668_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03668_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0220.977] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.977] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.977] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03668_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03668_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0220.978] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1868, lpOverlapped=0x0) returned 1 [0220.980] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1870, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1870, lpOverlapped=0x0) returned 1 [0220.981] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0220.981] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.981] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.981] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1868, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1868, lpOverlapped=0x0) returned 1 [0220.981] FlushFileBuffers (hFile=0x2b0) returned 1 [0220.983] FlushFileBuffers (hFile=0x21c) returned 1 [0220.985] CloseHandle (hObject=0x2b0) returned 1 [0220.985] CloseHandle (hObject=0x21c) returned 1 [0220.985] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03668_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03668_.wmf")) returned 1 [0220.986] SetEvent (hEvent=0x27c) returned 1 [0220.986] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03731_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03731_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0220.987] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2556) returned 1 [0220.987] CloseHandle (hObject=0x21c) returned 1 [0220.987] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03731_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03731_.wmf")) returned 0x220 [0220.987] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03731_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03731_.wmf")) returned 0x220 [0220.987] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03731_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03731_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0220.987] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03731_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03731_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0220.988] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.988] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0220.988] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03731_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03731_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0220.989] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x9fc, lpOverlapped=0x0) returned 1 [0220.992] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xa00, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xa00, lpOverlapped=0x0) returned 1 [0220.993] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0220.993] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.993] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0220.993] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x9fc, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x9fc, lpOverlapped=0x0) returned 1 [0220.993] FlushFileBuffers (hFile=0x21c) returned 1 [0220.996] FlushFileBuffers (hFile=0x2b0) returned 1 [0220.997] CloseHandle (hObject=0x21c) returned 1 [0220.997] CloseHandle (hObject=0x2b0) returned 1 [0220.997] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03731_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03731_.wmf")) returned 1 [0220.998] SetEvent (hEvent=0x27c) returned 1 [0220.998] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03795_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03795_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0220.999] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1930) returned 1 [0220.999] CloseHandle (hObject=0x2b0) returned 1 [0220.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03795_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03795_.wmf")) returned 0x220 [0220.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03795_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03795_.wmf")) returned 0x220 [0220.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03795_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03795_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.000] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03795_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03795_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0221.000] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0221.000] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0221.000] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03795_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03795_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0221.001] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x78a, lpOverlapped=0x0) returned 1 [0221.003] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x790, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x790, lpOverlapped=0x0) returned 1 [0221.015] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0221.015] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0221.015] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0221.015] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x78a, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x78a, lpOverlapped=0x0) returned 1 [0221.015] FlushFileBuffers (hFile=0x2b0) returned 1 [0221.020] FlushFileBuffers (hFile=0x21c) returned 1 [0221.021] CloseHandle (hObject=0x2b0) returned 1 [0221.021] CloseHandle (hObject=0x21c) returned 1 [0221.022] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03795_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03795_.wmf")) returned 1 [0221.023] SetEvent (hEvent=0x27c) returned 1 [0221.023] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE04050_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe04050_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0221.024] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=4128) returned 1 [0221.024] CloseHandle (hObject=0x21c) returned 1 [0221.024] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE04050_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe04050_.wmf")) returned 0x220 [0221.024] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE04050_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe04050_.wmf")) returned 0x220 [0221.024] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE04050_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe04050_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.024] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE04050_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe04050_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0221.025] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0221.025] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0221.025] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE04050_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe04050_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0221.026] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1020, lpOverlapped=0x0) returned 1 [0221.027] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1030, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1030, lpOverlapped=0x0) returned 1 [0221.028] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0221.029] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0221.029] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0221.029] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1020, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1020, lpOverlapped=0x0) returned 1 [0221.029] FlushFileBuffers (hFile=0x21c) returned 1 [0221.074] FlushFileBuffers (hFile=0x2b0) returned 1 [0221.076] CloseHandle (hObject=0x21c) returned 1 [0221.076] CloseHandle (hObject=0x2b0) returned 1 [0221.076] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE04050_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe04050_.wmf")) returned 1 [0221.077] SetEvent (hEvent=0x27c) returned 1 [0221.077] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05665_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05665_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0221.079] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=14328) returned 1 [0221.079] CloseHandle (hObject=0x2b0) returned 1 [0221.079] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05665_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05665_.wmf")) returned 0x220 [0221.079] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05665_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05665_.wmf")) returned 0x220 [0221.079] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05665_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05665_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.079] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05665_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05665_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0221.079] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0221.079] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0221.079] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05665_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05665_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0221.080] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x37f8, lpOverlapped=0x0) returned 1 [0221.083] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3800, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x3800, lpOverlapped=0x0) returned 1 [0221.084] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0221.084] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0221.084] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0221.084] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x37f8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x37f8, lpOverlapped=0x0) returned 1 [0221.084] FlushFileBuffers (hFile=0x2b0) returned 1 [0221.087] FlushFileBuffers (hFile=0x21c) returned 1 [0221.088] CloseHandle (hObject=0x2b0) returned 1 [0221.088] CloseHandle (hObject=0x21c) returned 1 [0221.088] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05665_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05665_.wmf")) returned 1 [0221.089] SetEvent (hEvent=0x27c) returned 1 [0221.089] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05710_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05710_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0221.091] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=5756) returned 1 [0221.091] CloseHandle (hObject=0x21c) returned 1 [0221.091] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05710_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05710_.wmf")) returned 0x220 [0221.091] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05710_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05710_.wmf")) returned 0x220 [0221.091] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05710_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05710_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.091] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05710_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05710_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0221.091] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0221.091] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0221.091] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05710_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05710_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0221.092] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x167c, lpOverlapped=0x0) returned 1 [0221.094] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1680, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1680, lpOverlapped=0x0) returned 1 [0221.096] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0221.096] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0221.096] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0221.096] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x167c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x167c, lpOverlapped=0x0) returned 1 [0221.096] FlushFileBuffers (hFile=0x21c) returned 1 [0221.099] FlushFileBuffers (hFile=0x2b0) returned 1 [0221.100] CloseHandle (hObject=0x21c) returned 1 [0221.100] CloseHandle (hObject=0x2b0) returned 1 [0221.100] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05710_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05710_.wmf")) returned 1 [0221.101] SetEvent (hEvent=0x27c) returned 1 [0221.101] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05869_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05869_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0221.103] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1544) returned 1 [0221.103] CloseHandle (hObject=0x2b0) returned 1 [0221.103] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05869_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05869_.wmf")) returned 0x220 [0221.103] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05869_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05869_.wmf")) returned 0x220 [0221.103] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05869_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05869_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.103] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05869_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05869_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0221.103] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0221.103] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0221.103] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05869_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05869_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0221.104] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x608, lpOverlapped=0x0) returned 1 [0221.108] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x610, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x610, lpOverlapped=0x0) returned 1 [0221.109] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0221.109] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0221.123] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0221.123] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x608, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x608, lpOverlapped=0x0) returned 1 [0221.123] FlushFileBuffers (hFile=0x2b0) returned 1 [0221.125] FlushFileBuffers (hFile=0x21c) returned 1 [0221.127] CloseHandle (hObject=0x2b0) returned 1 [0221.127] CloseHandle (hObject=0x21c) returned 1 [0221.127] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05869_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05869_.wmf")) returned 1 [0221.128] SetEvent (hEvent=0x27c) returned 1 [0221.128] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05870_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05870_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0221.129] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1588) returned 1 [0221.129] CloseHandle (hObject=0x21c) returned 1 [0221.130] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05870_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05870_.wmf")) returned 0x220 [0221.130] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05870_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05870_.wmf")) returned 0x220 [0221.130] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05870_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05870_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.130] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05870_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05870_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0221.130] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0221.130] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0221.130] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05870_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05870_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0221.131] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x634, lpOverlapped=0x0) returned 1 [0221.133] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x640, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x640, lpOverlapped=0x0) returned 1 [0221.134] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0221.134] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0221.134] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0221.134] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x634, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x634, lpOverlapped=0x0) returned 1 [0221.135] FlushFileBuffers (hFile=0x21c) returned 1 [0221.137] FlushFileBuffers (hFile=0x2b0) returned 1 [0221.138] CloseHandle (hObject=0x21c) returned 1 [0221.138] CloseHandle (hObject=0x2b0) returned 1 [0221.138] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05870_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05870_.wmf")) returned 1 [0221.139] SetEvent (hEvent=0x27c) returned 1 [0221.139] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05930_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05930_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0221.141] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=32718) returned 1 [0221.141] CloseHandle (hObject=0x2b0) returned 1 [0221.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05930_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05930_.wmf")) returned 0x220 [0221.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05930_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05930_.wmf")) returned 0x220 [0221.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05930_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05930_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.141] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05930_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05930_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0221.141] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0221.141] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0221.142] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05930_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05930_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0221.143] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x7fce, lpOverlapped=0x0) returned 1 [0221.145] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7fd0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x7fd0, lpOverlapped=0x0) returned 1 [0221.147] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0221.147] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0221.147] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0221.147] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7fce, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x7fce, lpOverlapped=0x0) returned 1 [0221.147] FlushFileBuffers (hFile=0x2b0) returned 1 [0221.149] FlushFileBuffers (hFile=0x21c) returned 1 [0221.458] CloseHandle (hObject=0x2b0) returned 1 [0221.459] CloseHandle (hObject=0x21c) returned 1 [0221.459] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05930_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05930_.wmf")) returned 1 [0221.460] SetEvent (hEvent=0x27c) returned 1 [0221.460] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01607U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01607u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0221.461] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=31968) returned 1 [0221.462] CloseHandle (hObject=0x21c) returned 1 [0221.462] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01607U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01607u.bmp")) returned 0x220 [0221.462] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01607U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01607u.bmp")) returned 0x220 [0221.462] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01607U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01607u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.462] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01607U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01607u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0221.462] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0221.462] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0221.462] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01607U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01607u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0221.463] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x7ce0, lpOverlapped=0x0) returned 1 [0221.466] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7cf0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x7cf0, lpOverlapped=0x0) returned 1 [0221.467] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0221.468] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0221.468] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0221.468] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7ce0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x7ce0, lpOverlapped=0x0) returned 1 [0221.468] FlushFileBuffers (hFile=0x21c) returned 1 [0221.482] FlushFileBuffers (hFile=0x2b0) returned 1 [0221.483] CloseHandle (hObject=0x21c) returned 1 [0221.484] CloseHandle (hObject=0x2b0) returned 1 [0221.484] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01607U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01607u.bmp")) returned 1 [0221.485] SetEvent (hEvent=0x27c) returned 1 [0221.485] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02028K.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02028k.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0221.486] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=17694) returned 1 [0221.486] CloseHandle (hObject=0x2b0) returned 1 [0221.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02028K.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02028k.jpg")) returned 0x220 [0221.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02028K.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02028k.jpg")) returned 0x220 [0221.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02028K.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02028k.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.486] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02028K.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02028k.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0221.486] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0221.486] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0221.486] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02028K.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02028k.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0221.488] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x451e, lpOverlapped=0x0) returned 1 [0221.490] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x4520, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x4520, lpOverlapped=0x0) returned 1 [0221.492] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0221.492] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0221.492] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0221.492] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x451e, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x451e, lpOverlapped=0x0) returned 1 [0221.492] FlushFileBuffers (hFile=0x2b0) returned 1 [0221.504] FlushFileBuffers (hFile=0x21c) returned 1 [0221.506] CloseHandle (hObject=0x2b0) returned 1 [0221.506] CloseHandle (hObject=0x21c) returned 1 [0221.506] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02028K.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02028k.jpg")) returned 1 [0221.507] SetEvent (hEvent=0x27c) returned 1 [0221.508] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02040U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02040u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0221.509] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=32184) returned 1 [0221.509] CloseHandle (hObject=0x21c) returned 1 [0221.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02040U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02040u.bmp")) returned 0x220 [0221.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02040U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02040u.bmp")) returned 0x220 [0221.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02040U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02040u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.509] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02040U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02040u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0221.509] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0221.509] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0221.509] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02040U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02040u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0221.510] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x7db8, lpOverlapped=0x0) returned 1 [0221.513] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7dc0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x7dc0, lpOverlapped=0x0) returned 1 [0221.515] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0221.515] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0221.515] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0221.515] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7db8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x7db8, lpOverlapped=0x0) returned 1 [0221.515] FlushFileBuffers (hFile=0x21c) returned 1 [0221.528] FlushFileBuffers (hFile=0x2b0) returned 1 [0221.532] CloseHandle (hObject=0x21c) returned 1 [0221.533] CloseHandle (hObject=0x2b0) returned 1 [0221.533] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02040U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02040u.bmp")) returned 1 [0221.534] SetEvent (hEvent=0x27c) returned 1 [0221.534] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02058U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02058u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0221.535] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=31968) returned 1 [0221.535] CloseHandle (hObject=0x2b0) returned 1 [0221.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02058U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02058u.bmp")) returned 0x220 [0221.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02058U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02058u.bmp")) returned 0x220 [0221.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02058U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02058u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.535] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02058U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02058u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0221.535] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0221.535] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0221.535] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02058U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02058u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0221.536] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x7ce0, lpOverlapped=0x0) returned 1 [0221.539] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7cf0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x7cf0, lpOverlapped=0x0) returned 1 [0221.540] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0221.542] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0221.542] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0221.542] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7ce0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x7ce0, lpOverlapped=0x0) returned 1 [0221.542] FlushFileBuffers (hFile=0x2b0) returned 1 [0221.547] FlushFileBuffers (hFile=0x21c) returned 1 [0221.559] CloseHandle (hObject=0x2b0) returned 1 [0221.559] CloseHandle (hObject=0x21c) returned 1 [0221.559] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02058U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02058u.bmp")) returned 1 [0221.560] SetEvent (hEvent=0x27c) returned 1 [0221.560] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02069J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02069j.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0221.562] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=29335) returned 1 [0221.562] CloseHandle (hObject=0x21c) returned 1 [0221.562] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02069J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02069j.jpg")) returned 0x220 [0221.563] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02069J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02069j.jpg")) returned 0x220 [0221.563] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02069J.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02069j.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.563] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02069J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02069j.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0221.563] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0221.563] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0221.563] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02069J.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02069j.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0221.564] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x7297, lpOverlapped=0x0) returned 1 [0221.567] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x72a0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x72a0, lpOverlapped=0x0) returned 1 [0221.569] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0221.569] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0221.569] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0221.569] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7297, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x7297, lpOverlapped=0x0) returned 1 [0221.569] FlushFileBuffers (hFile=0x21c) returned 1 [0221.576] FlushFileBuffers (hFile=0x2b0) returned 1 [0221.582] CloseHandle (hObject=0x21c) returned 1 [0221.582] CloseHandle (hObject=0x2b0) returned 1 [0221.583] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02069J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02069j.jpg")) returned 1 [0221.584] SetEvent (hEvent=0x27c) returned 1 [0221.584] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02074U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02074u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0221.585] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=31968) returned 1 [0221.585] CloseHandle (hObject=0x2b0) returned 1 [0221.585] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02074U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02074u.bmp")) returned 0x220 [0221.585] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02074U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02074u.bmp")) returned 0x220 [0221.585] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02074U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02074u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.585] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02074U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02074u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0221.586] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0221.586] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0221.586] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02074U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02074u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0221.586] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x7ce0, lpOverlapped=0x0) returned 1 [0221.589] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7cf0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x7cf0, lpOverlapped=0x0) returned 1 [0221.590] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0221.591] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0221.591] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0221.591] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7ce0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x7ce0, lpOverlapped=0x0) returned 1 [0221.591] FlushFileBuffers (hFile=0x2b0) returned 1 [0221.605] FlushFileBuffers (hFile=0x21c) returned 1 [0221.614] CloseHandle (hObject=0x2b0) returned 1 [0221.614] CloseHandle (hObject=0x21c) returned 1 [0221.614] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02074U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02074u.bmp")) returned 1 [0221.615] SetEvent (hEvent=0x27c) returned 1 [0221.615] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02223U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02223u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0221.616] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=32184) returned 1 [0221.616] CloseHandle (hObject=0x21c) returned 1 [0221.616] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02223U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02223u.bmp")) returned 0x220 [0221.616] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02223U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02223u.bmp")) returned 0x220 [0221.616] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02223U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02223u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.616] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02223U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02223u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0221.616] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0221.616] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0221.616] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02223U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02223u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0221.617] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x7db8, lpOverlapped=0x0) returned 1 [0221.621] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7dc0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x7dc0, lpOverlapped=0x0) returned 1 [0221.623] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0221.623] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0221.623] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0221.623] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7db8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x7db8, lpOverlapped=0x0) returned 1 [0221.623] FlushFileBuffers (hFile=0x21c) returned 1 [0221.635] FlushFileBuffers (hFile=0x2b0) returned 1 [0221.637] CloseHandle (hObject=0x21c) returned 1 [0221.637] CloseHandle (hObject=0x2b0) returned 1 [0221.637] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02223U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02223u.bmp")) returned 1 [0221.638] SetEvent (hEvent=0x27c) returned 1 [0221.638] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02398U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02398u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0221.639] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=31968) returned 1 [0221.639] CloseHandle (hObject=0x2b0) returned 1 [0221.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02398U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02398u.bmp")) returned 0x220 [0221.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02398U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02398u.bmp")) returned 0x220 [0221.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02398U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02398u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.639] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02398U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02398u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0221.639] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0221.639] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0221.640] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02398U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02398u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0221.640] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x7ce0, lpOverlapped=0x0) returned 1 [0221.643] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7cf0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x7cf0, lpOverlapped=0x0) returned 1 [0221.645] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0221.645] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0221.645] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0221.645] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7ce0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x7ce0, lpOverlapped=0x0) returned 1 [0221.645] FlushFileBuffers (hFile=0x2b0) returned 1 [0221.661] FlushFileBuffers (hFile=0x21c) returned 1 [0221.676] CloseHandle (hObject=0x2b0) returned 1 [0221.676] CloseHandle (hObject=0x21c) returned 1 [0221.676] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02398U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02398u.bmp")) returned 1 [0221.678] SetEvent (hEvent=0x27c) returned 1 [0221.678] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02417U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02417u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0221.678] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=31968) returned 1 [0221.678] CloseHandle (hObject=0x21c) returned 1 [0221.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02417U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02417u.bmp")) returned 0x220 [0221.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02417U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02417u.bmp")) returned 0x220 [0221.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02417U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02417u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0221.679] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02417U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02417u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0221.679] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0221.679] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0221.679] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02417U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02417u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0221.680] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x7ce0, lpOverlapped=0x0) returned 1 [0221.683] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7cf0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x7cf0, lpOverlapped=0x0) returned 1 [0221.684] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0221.684] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0221.684] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0221.684] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7ce0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x7ce0, lpOverlapped=0x0) returned 1 [0221.685] FlushFileBuffers (hFile=0x21c) returned 1 [0222.032] FlushFileBuffers (hFile=0x2b0) returned 1 [0222.035] CloseHandle (hObject=0x21c) returned 1 [0222.035] CloseHandle (hObject=0x2b0) returned 1 [0222.035] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02417U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02417u.bmp")) returned 1 [0222.036] SetEvent (hEvent=0x27c) returned 1 [0222.036] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02750U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02750u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0222.038] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=94016) returned 1 [0222.038] CloseHandle (hObject=0x2b0) returned 1 [0222.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02750U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02750u.bmp")) returned 0x220 [0222.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02750U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02750u.bmp")) returned 0x220 [0222.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02750U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02750u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0222.038] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02750U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02750u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0222.038] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0222.038] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0222.038] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02750U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02750u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0222.039] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x16f40, lpOverlapped=0x0) returned 1 [0222.044] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x16f50, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x16f50, lpOverlapped=0x0) returned 1 [0222.046] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0222.046] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0222.046] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0222.046] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x16f40, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x16f40, lpOverlapped=0x0) returned 1 [0222.047] FlushFileBuffers (hFile=0x2b0) returned 1 [0222.059] FlushFileBuffers (hFile=0x21c) returned 1 [0222.062] CloseHandle (hObject=0x2b0) returned 1 [0222.062] CloseHandle (hObject=0x21c) returned 1 [0222.062] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02750U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02750u.bmp")) returned 1 [0222.064] SetEvent (hEvent=0x27c) returned 1 [0222.064] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02752U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02752u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0222.066] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=31752) returned 1 [0222.066] CloseHandle (hObject=0x21c) returned 1 [0222.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02752U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02752u.bmp")) returned 0x220 [0222.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02752U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02752u.bmp")) returned 0x220 [0222.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02752U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02752u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0222.066] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02752U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02752u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0222.067] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0222.067] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0222.067] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02752U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02752u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0222.068] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x7c08, lpOverlapped=0x0) returned 1 [0222.070] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7c10, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x7c10, lpOverlapped=0x0) returned 1 [0222.072] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0222.072] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0222.072] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0222.072] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7c08, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x7c08, lpOverlapped=0x0) returned 1 [0222.072] FlushFileBuffers (hFile=0x21c) returned 1 [0222.080] FlushFileBuffers (hFile=0x2b0) returned 1 [0222.088] CloseHandle (hObject=0x21c) returned 1 [0222.088] CloseHandle (hObject=0x2b0) returned 1 [0222.088] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02752U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02752u.bmp")) returned 1 [0222.090] SetEvent (hEvent=0x27c) returned 1 [0222.090] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02754U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02754u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0222.091] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=108504) returned 1 [0222.091] CloseHandle (hObject=0x2b0) returned 1 [0222.091] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02754U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02754u.bmp")) returned 0x220 [0222.091] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02754U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02754u.bmp")) returned 0x220 [0222.091] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02754U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02754u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0222.091] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02754U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02754u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0222.091] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0222.091] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0222.091] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02754U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02754u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0222.092] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1a7d8, lpOverlapped=0x0) returned 1 [0222.097] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1a7e0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1a7e0, lpOverlapped=0x0) returned 1 [0222.100] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0222.100] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0222.100] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0222.100] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1a7d8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1a7d8, lpOverlapped=0x0) returned 1 [0222.100] FlushFileBuffers (hFile=0x2b0) returned 1 [0222.118] FlushFileBuffers (hFile=0x21c) returned 1 [0222.122] CloseHandle (hObject=0x2b0) returned 1 [0222.122] CloseHandle (hObject=0x21c) returned 1 [0222.122] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02754U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02754u.bmp")) returned 1 [0222.123] SetEvent (hEvent=0x27c) returned 1 [0222.124] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02756U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02756u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0222.141] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=197640) returned 1 [0222.141] CloseHandle (hObject=0x21c) returned 1 [0222.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02756U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02756u.bmp")) returned 0x220 [0222.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02756U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02756u.bmp")) returned 0x220 [0222.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02756U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02756u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0222.142] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02756U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02756u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0222.142] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0222.142] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0222.142] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02756U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02756u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0222.143] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x30408, lpOverlapped=0x0) returned 1 [0222.151] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x30410, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x30410, lpOverlapped=0x0) returned 1 [0222.155] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0222.155] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0222.155] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0222.155] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x30408, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x30408, lpOverlapped=0x0) returned 1 [0222.156] FlushFileBuffers (hFile=0x21c) returned 1 [0222.179] FlushFileBuffers (hFile=0x2b0) returned 1 [0222.181] CloseHandle (hObject=0x21c) returned 1 [0222.181] CloseHandle (hObject=0x2b0) returned 1 [0222.181] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02756U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02756u.bmp")) returned 1 [0222.183] SetEvent (hEvent=0x27c) returned 1 [0222.183] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02758U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02758u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0222.185] GetFileSizeEx (in: hFile=0x2b0, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=198648) returned 1 [0222.185] CloseHandle (hObject=0x2b0) returned 1 [0222.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02758U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02758u.bmp")) returned 0x220 [0222.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02758U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02758u.bmp")) returned 0x220 [0222.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02758U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02758u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0222.186] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02758U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02758u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b0 [0222.186] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0222.186] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0222.186] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02758U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02758u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x21c [0222.187] ReadFile (in: hFile=0x2b0, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x307f8, lpOverlapped=0x0) returned 1 [0222.195] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x30800, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x30800, lpOverlapped=0x0) returned 1 [0222.199] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0222.199] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0222.199] SetFilePointerEx (in: hFile=0x2b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0222.199] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x307f8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x307f8, lpOverlapped=0x0) returned 1 [0222.200] FlushFileBuffers (hFile=0x2b0) returned 1 [0222.213] FlushFileBuffers (hFile=0x21c) returned 1 [0222.215] CloseHandle (hObject=0x2b0) returned 1 [0222.215] CloseHandle (hObject=0x21c) returned 1 [0222.215] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02758U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02758u.bmp")) returned 1 [0222.217] SetEvent (hEvent=0x27c) returned 1 [0222.217] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02810J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02810j.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0222.218] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=50647) returned 1 [0222.218] CloseHandle (hObject=0x21c) returned 1 [0222.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02810J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02810j.jpg")) returned 0x220 [0222.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02810J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02810j.jpg")) returned 0x220 [0222.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02810J.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02810j.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0222.218] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02810J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02810j.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c [0222.218] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0222.218] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0222.218] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02810J.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02810j.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2b0 [0222.219] ReadFile (in: hFile=0x21c, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xc5d7, lpOverlapped=0x0) returned 1 [0222.223] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xc5e0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xc5e0, lpOverlapped=0x0) returned 1 [0222.225] WriteFile (in: hFile=0x2b0, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0222.225] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0222.225] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0222.225] WriteFile (in: hFile=0x21c, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xc5d7, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xc5d7, lpOverlapped=0x0) returned 1 [0222.225] FlushFileBuffers (hFile=0x21c) returned 1 [0222.483] FlushFileBuffers (hFile=0x2b0) returned 1 [0222.486] CloseHandle (hObject=0x21c) returned 1 [0222.486] CloseHandle (hObject=0x2b0) returned 1 [0222.486] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02810J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02810j.jpg")) returned 1 [0222.487] SetEvent (hEvent=0x27c) returned 1 [0222.487] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02845G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02845g.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0222.491] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=12530) returned 1 [0222.491] CloseHandle (hObject=0x2bc) returned 1 [0222.491] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02845G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02845g.gif")) returned 0x220 [0222.491] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02845G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02845g.gif")) returned 0x220 [0222.491] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02845G.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02845g.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0222.491] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02845G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02845g.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0222.492] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0222.492] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0222.492] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02845G.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02845g.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0222.494] ReadFile (in: hFile=0x2bc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x30f2, lpOverlapped=0x0) returned 1 [0222.498] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3100, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x3100, lpOverlapped=0x0) returned 1 [0222.499] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0222.500] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0222.500] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0222.500] WriteFile (in: hFile=0x2bc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x30f2, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x30f2, lpOverlapped=0x0) returned 1 [0222.500] FlushFileBuffers (hFile=0x2bc) returned 1 [0222.513] FlushFileBuffers (hFile=0x2fc) returned 1 [0222.516] CloseHandle (hObject=0x2bc) returned 1 [0222.516] CloseHandle (hObject=0x2fc) returned 1 [0222.516] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02845G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02845g.gif")) returned 1 [0222.518] SetEvent (hEvent=0x27c) returned 1 [0222.518] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03011U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03011u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0222.520] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=15478) returned 1 [0222.520] CloseHandle (hObject=0x2fc) returned 1 [0222.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03011U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03011u.bmp")) returned 0x220 [0222.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03011U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03011u.bmp")) returned 0x220 [0222.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03011U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03011u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0222.520] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03011U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03011u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0222.520] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0222.520] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0222.520] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03011U.BMP.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03011u.bmp.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2bc [0222.522] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x3c76, lpOverlapped=0x0) returned 1 [0222.527] WriteFile (in: hFile=0x2bc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3c80, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x3c80, lpOverlapped=0x0) returned 1 [0222.529] WriteFile (in: hFile=0x2bc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0222.529] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0222.529] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0222.529] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3c76, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x3c76, lpOverlapped=0x0) returned 1 [0222.529] FlushFileBuffers (hFile=0x2fc) returned 1 [0222.535] FlushFileBuffers (hFile=0x2bc) returned 1 [0222.538] CloseHandle (hObject=0x2fc) returned 1 [0222.538] CloseHandle (hObject=0x2bc) returned 1 [0222.538] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03011U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03011u.bmp")) returned 1 [0222.539] SetEvent (hEvent=0x27c) returned 1 [0222.539] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03014_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03014_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0222.540] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=18898) returned 1 [0222.540] CloseHandle (hObject=0x2bc) returned 1 [0222.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03014_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03014_.gif")) returned 0x220 [0222.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03014_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03014_.gif")) returned 0x220 [0222.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03014_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03014_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0222.540] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03014_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03014_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0222.540] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0222.540] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0222.541] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03014_.GIF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03014_.gif.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0222.541] ReadFile (in: hFile=0x2bc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x49d2, lpOverlapped=0x0) returned 1 [0222.544] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x49e0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x49e0, lpOverlapped=0x0) returned 1 [0222.545] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0222.545] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0222.545] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0222.545] WriteFile (in: hFile=0x2bc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x49d2, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x49d2, lpOverlapped=0x0) returned 1 [0222.545] FlushFileBuffers (hFile=0x2bc) returned 1 [0222.556] FlushFileBuffers (hFile=0x2fc) returned 1 [0222.568] CloseHandle (hObject=0x2bc) returned 1 [0222.568] CloseHandle (hObject=0x2fc) returned 1 [0222.568] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03014_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03014_.gif")) returned 1 [0222.571] SetEvent (hEvent=0x27c) returned 1 [0222.572] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03143I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03143i.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0222.573] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=29776) returned 1 [0222.573] CloseHandle (hObject=0x2fc) returned 1 [0222.573] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03143I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03143i.jpg")) returned 0x220 [0222.573] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03143I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03143i.jpg")) returned 0x220 [0222.573] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03143I.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03143i.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0222.574] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03143I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03143i.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0222.574] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0222.574] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0222.574] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03143I.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03143i.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2bc [0222.575] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x7450, lpOverlapped=0x0) returned 1 [0222.581] WriteFile (in: hFile=0x2bc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7460, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x7460, lpOverlapped=0x0) returned 1 [0222.582] WriteFile (in: hFile=0x2bc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0222.583] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0222.583] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0222.583] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x7450, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x7450, lpOverlapped=0x0) returned 1 [0222.583] FlushFileBuffers (hFile=0x2fc) returned 1 [0222.595] FlushFileBuffers (hFile=0x2bc) returned 1 [0222.601] CloseHandle (hObject=0x2fc) returned 1 [0222.601] CloseHandle (hObject=0x2bc) returned 1 [0222.601] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03143I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03143i.jpg")) returned 1 [0222.602] SetEvent (hEvent=0x27c) returned 1 [0222.602] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03224I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03224i.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0222.605] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=42053) returned 1 [0222.605] CloseHandle (hObject=0x2bc) returned 1 [0222.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03224I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03224i.jpg")) returned 0x220 [0222.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03224I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03224i.jpg")) returned 0x220 [0222.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03224I.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03224i.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0222.605] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03224I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03224i.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0222.605] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0222.605] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0222.605] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03224I.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03224i.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0222.606] ReadFile (in: hFile=0x2bc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xa445, lpOverlapped=0x0) returned 1 [0222.611] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xa450, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xa450, lpOverlapped=0x0) returned 1 [0222.613] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0222.613] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0222.613] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0222.613] WriteFile (in: hFile=0x2bc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xa445, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xa445, lpOverlapped=0x0) returned 1 [0222.613] FlushFileBuffers (hFile=0x2bc) returned 1 [0222.623] FlushFileBuffers (hFile=0x2fc) returned 1 [0222.626] CloseHandle (hObject=0x2bc) returned 1 [0222.626] CloseHandle (hObject=0x2fc) returned 1 [0222.626] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03224I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03224i.jpg")) returned 1 [0222.627] SetEvent (hEvent=0x27c) returned 1 [0222.627] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03380I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03380i.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0222.629] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=12831) returned 1 [0222.629] CloseHandle (hObject=0x2fc) returned 1 [0222.629] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03380I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03380i.jpg")) returned 0x220 [0222.629] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03380I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03380i.jpg")) returned 0x220 [0222.629] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03380I.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03380i.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0222.629] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03380I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03380i.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0222.629] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0222.629] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0222.629] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03380I.JPG.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03380i.jpg.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2bc [0222.631] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x321f, lpOverlapped=0x0) returned 1 [0222.638] WriteFile (in: hFile=0x2bc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x3220, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x3220, lpOverlapped=0x0) returned 1 [0222.639] WriteFile (in: hFile=0x2bc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0222.639] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0222.640] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0222.640] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x321f, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x321f, lpOverlapped=0x0) returned 1 [0222.640] FlushFileBuffers (hFile=0x2fc) returned 1 [0222.646] FlushFileBuffers (hFile=0x2bc) returned 1 [0222.648] CloseHandle (hObject=0x2fc) returned 1 [0222.648] CloseHandle (hObject=0x2bc) returned 1 [0222.648] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03380I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03380i.jpg")) returned 1 [0222.649] SetEvent (hEvent=0x27c) returned 1 [0222.649] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PRRT.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\prrt.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0222.651] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3830) returned 1 [0222.651] CloseHandle (hObject=0x2bc) returned 1 [0222.652] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PRRT.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\prrt.wmf")) returned 0x220 [0222.652] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PRRT.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\prrt.wmf")) returned 0x220 [0222.652] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PRRT.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\prrt.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0222.652] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PRRT.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\prrt.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0222.652] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0222.652] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0222.652] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PRRT.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\prrt.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0222.653] ReadFile (in: hFile=0x2bc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xef6, lpOverlapped=0x0) returned 1 [0222.659] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf00, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf00, lpOverlapped=0x0) returned 1 [0222.660] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0222.661] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0222.661] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0222.661] WriteFile (in: hFile=0x2bc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xef6, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xef6, lpOverlapped=0x0) returned 1 [0222.661] FlushFileBuffers (hFile=0x2bc) returned 1 [0222.935] FlushFileBuffers (hFile=0x2fc) returned 1 [0222.937] CloseHandle (hObject=0x2bc) returned 1 [0222.937] CloseHandle (hObject=0x2fc) returned 1 [0222.937] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PRRT.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\prrt.wmf")) returned 1 [0222.938] SetEvent (hEvent=0x27c) returned 1 [0222.938] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00286_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00286_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0222.940] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=7596) returned 1 [0222.940] CloseHandle (hObject=0x2fc) returned 1 [0222.940] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00286_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00286_.wmf")) returned 0x220 [0222.940] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00286_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00286_.wmf")) returned 0x220 [0222.940] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00286_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00286_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0222.940] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00286_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00286_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0222.940] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0222.940] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0222.940] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00286_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00286_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2bc [0222.942] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1dac, lpOverlapped=0x0) returned 1 [0222.946] WriteFile (in: hFile=0x2bc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1db0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1db0, lpOverlapped=0x0) returned 1 [0222.947] WriteFile (in: hFile=0x2bc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0222.947] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0222.947] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0222.947] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1dac, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1dac, lpOverlapped=0x0) returned 1 [0222.947] FlushFileBuffers (hFile=0x2fc) returned 1 [0222.953] FlushFileBuffers (hFile=0x2bc) returned 1 [0222.957] CloseHandle (hObject=0x2fc) returned 1 [0222.957] CloseHandle (hObject=0x2bc) returned 1 [0222.957] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00286_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00286_.wmf")) returned 1 [0222.958] SetEvent (hEvent=0x27c) returned 1 [0222.958] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00298_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00298_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0222.960] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=4712) returned 1 [0222.960] CloseHandle (hObject=0x2bc) returned 1 [0222.960] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00298_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00298_.wmf")) returned 0x220 [0222.960] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00298_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00298_.wmf")) returned 0x220 [0222.960] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00298_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00298_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0222.960] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00298_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00298_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0222.960] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0222.960] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0222.960] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00298_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00298_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0222.962] ReadFile (in: hFile=0x2bc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1268, lpOverlapped=0x0) returned 1 [0222.963] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1270, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1270, lpOverlapped=0x0) returned 1 [0222.964] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0222.964] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0222.964] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0222.964] WriteFile (in: hFile=0x2bc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1268, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1268, lpOverlapped=0x0) returned 1 [0222.965] FlushFileBuffers (hFile=0x2bc) returned 1 [0222.966] FlushFileBuffers (hFile=0x2fc) returned 1 [0222.969] CloseHandle (hObject=0x2bc) returned 1 [0222.969] CloseHandle (hObject=0x2fc) returned 1 [0222.969] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00298_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00298_.wmf")) returned 1 [0222.970] SetEvent (hEvent=0x27c) returned 1 [0222.971] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00308_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00308_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0222.972] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=8416) returned 1 [0222.972] CloseHandle (hObject=0x2fc) returned 1 [0222.972] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00308_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00308_.wmf")) returned 0x220 [0222.972] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00308_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00308_.wmf")) returned 0x220 [0222.972] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00308_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00308_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0222.972] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00308_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00308_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0222.972] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0222.972] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0222.972] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00308_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00308_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2bc [0222.973] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x20e0, lpOverlapped=0x0) returned 1 [0222.978] WriteFile (in: hFile=0x2bc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x20f0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x20f0, lpOverlapped=0x0) returned 1 [0222.979] WriteFile (in: hFile=0x2bc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0222.979] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0222.979] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0222.979] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x20e0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x20e0, lpOverlapped=0x0) returned 1 [0222.979] FlushFileBuffers (hFile=0x2fc) returned 1 [0222.981] FlushFileBuffers (hFile=0x2bc) returned 1 [0222.983] CloseHandle (hObject=0x2fc) returned 1 [0222.983] CloseHandle (hObject=0x2bc) returned 1 [0222.983] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00308_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00308_.wmf")) returned 1 [0222.984] SetEvent (hEvent=0x27c) returned 1 [0222.984] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00345_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00345_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0222.985] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2788) returned 1 [0222.986] CloseHandle (hObject=0x2bc) returned 1 [0222.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00345_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00345_.wmf")) returned 0x220 [0222.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00345_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00345_.wmf")) returned 0x220 [0222.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00345_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00345_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0222.986] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00345_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00345_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0222.986] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0222.986] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0222.986] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00345_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00345_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0222.987] ReadFile (in: hFile=0x2bc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xae4, lpOverlapped=0x0) returned 1 [0222.988] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xaf0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xaf0, lpOverlapped=0x0) returned 1 [0222.989] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0222.990] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0222.990] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0222.990] WriteFile (in: hFile=0x2bc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xae4, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xae4, lpOverlapped=0x0) returned 1 [0222.990] FlushFileBuffers (hFile=0x2bc) returned 1 [0222.992] FlushFileBuffers (hFile=0x2fc) returned 1 [0222.993] CloseHandle (hObject=0x2bc) returned 1 [0222.993] CloseHandle (hObject=0x2fc) returned 1 [0222.994] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00345_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00345_.wmf")) returned 1 [0222.994] SetEvent (hEvent=0x27c) returned 1 [0222.995] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00452_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00452_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0222.995] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=1344) returned 1 [0222.995] CloseHandle (hObject=0x2fc) returned 1 [0222.996] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00452_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00452_.wmf")) returned 0x220 [0222.996] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00452_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00452_.wmf")) returned 0x220 [0222.996] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00452_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00452_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0222.996] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00452_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00452_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0222.996] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0222.996] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0222.996] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00452_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00452_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2bc [0222.997] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x540, lpOverlapped=0x0) returned 1 [0222.998] WriteFile (in: hFile=0x2bc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x550, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x550, lpOverlapped=0x0) returned 1 [0222.999] WriteFile (in: hFile=0x2bc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0223.000] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0223.000] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0223.000] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x540, lpOverlapped=0x0) returned 1 [0223.000] FlushFileBuffers (hFile=0x2fc) returned 1 [0223.002] FlushFileBuffers (hFile=0x2bc) returned 1 [0223.003] CloseHandle (hObject=0x2fc) returned 1 [0223.004] CloseHandle (hObject=0x2bc) returned 1 [0223.004] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00452_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00452_.wmf")) returned 1 [0223.005] SetEvent (hEvent=0x27c) returned 1 [0223.005] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00712_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00712_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0223.006] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=7608) returned 1 [0223.006] CloseHandle (hObject=0x2bc) returned 1 [0223.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00712_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00712_.wmf")) returned 0x220 [0223.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00712_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00712_.wmf")) returned 0x220 [0223.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00712_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00712_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.006] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00712_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00712_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0223.006] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0223.006] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0223.006] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00712_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00712_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0223.007] ReadFile (in: hFile=0x2bc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x1db8, lpOverlapped=0x0) returned 1 [0223.009] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1dc0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1dc0, lpOverlapped=0x0) returned 1 [0223.010] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0223.010] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0223.010] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0223.010] WriteFile (in: hFile=0x2bc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1db8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x1db8, lpOverlapped=0x0) returned 1 [0223.010] FlushFileBuffers (hFile=0x2bc) returned 1 [0223.012] FlushFileBuffers (hFile=0x2fc) returned 1 [0223.014] CloseHandle (hObject=0x2bc) returned 1 [0223.014] CloseHandle (hObject=0x2fc) returned 1 [0223.014] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00712_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00712_.wmf")) returned 1 [0223.015] SetEvent (hEvent=0x27c) returned 1 [0223.015] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01040_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01040_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0223.016] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=3292) returned 1 [0223.016] CloseHandle (hObject=0x2fc) returned 1 [0223.016] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01040_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01040_.wmf")) returned 0x220 [0223.016] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01040_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01040_.wmf")) returned 0x220 [0223.016] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01040_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01040_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.016] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01040_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01040_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0223.017] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0223.017] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0223.017] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01040_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01040_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2bc [0223.017] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xcdc, lpOverlapped=0x0) returned 1 [0223.022] WriteFile (in: hFile=0x2bc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xce0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xce0, lpOverlapped=0x0) returned 1 [0223.023] WriteFile (in: hFile=0x2bc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0223.023] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0223.023] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0223.023] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xcdc, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xcdc, lpOverlapped=0x0) returned 1 [0223.023] FlushFileBuffers (hFile=0x2fc) returned 1 [0223.740] FlushFileBuffers (hFile=0x2bc) returned 1 [0223.745] CloseHandle (hObject=0x2fc) returned 1 [0223.745] CloseHandle (hObject=0x2bc) returned 1 [0223.745] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01040_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01040_.wmf")) returned 1 [0223.746] SetEvent (hEvent=0x27c) returned 1 [0223.746] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00382_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00382_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0223.748] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=10228) returned 1 [0223.748] CloseHandle (hObject=0x2bc) returned 1 [0223.748] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00382_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00382_.wmf")) returned 0x220 [0223.748] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00382_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00382_.wmf")) returned 0x220 [0223.748] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00382_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00382_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.748] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00382_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00382_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0223.749] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0223.749] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0223.749] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00382_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00382_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0223.750] ReadFile (in: hFile=0x2bc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x27f4, lpOverlapped=0x0) returned 1 [0223.751] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2800, lpOverlapped=0x0) returned 1 [0223.753] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0223.753] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0223.753] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0223.753] WriteFile (in: hFile=0x2bc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x27f4, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x27f4, lpOverlapped=0x0) returned 1 [0223.753] FlushFileBuffers (hFile=0x2bc) returned 1 [0223.763] FlushFileBuffers (hFile=0x2fc) returned 1 [0223.765] CloseHandle (hObject=0x2bc) returned 1 [0223.765] CloseHandle (hObject=0x2fc) returned 1 [0223.765] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00382_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00382_.wmf")) returned 1 [0223.766] SetEvent (hEvent=0x27c) returned 1 [0223.766] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00391_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00391_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0223.767] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2088) returned 1 [0223.767] CloseHandle (hObject=0x2fc) returned 1 [0223.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00391_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00391_.wmf")) returned 0x220 [0223.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00391_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00391_.wmf")) returned 0x220 [0223.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00391_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00391_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.767] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00391_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00391_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0223.767] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0223.767] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0223.767] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00391_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00391_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2bc [0223.768] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x828, lpOverlapped=0x0) returned 1 [0223.770] WriteFile (in: hFile=0x2bc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x830, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x830, lpOverlapped=0x0) returned 1 [0223.775] WriteFile (in: hFile=0x2bc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0223.776] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0223.776] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0223.776] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x828, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x828, lpOverlapped=0x0) returned 1 [0223.776] FlushFileBuffers (hFile=0x2fc) returned 1 [0223.789] FlushFileBuffers (hFile=0x2bc) returned 1 [0223.792] CloseHandle (hObject=0x2fc) returned 1 [0223.792] CloseHandle (hObject=0x2bc) returned 1 [0223.792] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00391_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00391_.wmf")) returned 1 [0223.793] SetEvent (hEvent=0x27c) returned 1 [0223.793] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00423_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00423_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0223.795] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=5180) returned 1 [0223.795] CloseHandle (hObject=0x2bc) returned 1 [0223.795] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00423_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00423_.wmf")) returned 0x220 [0223.795] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00423_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00423_.wmf")) returned 0x220 [0223.795] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00423_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00423_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.795] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00423_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00423_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0223.795] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0223.795] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0223.795] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00423_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00423_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0223.796] ReadFile (in: hFile=0x2bc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x143c, lpOverlapped=0x0) returned 1 [0223.813] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x1440, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x1440, lpOverlapped=0x0) returned 1 [0223.815] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0223.815] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0223.815] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0223.815] WriteFile (in: hFile=0x2bc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x143c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x143c, lpOverlapped=0x0) returned 1 [0223.815] FlushFileBuffers (hFile=0x2bc) returned 1 [0223.822] FlushFileBuffers (hFile=0x2fc) returned 1 [0223.825] CloseHandle (hObject=0x2bc) returned 1 [0223.825] CloseHandle (hObject=0x2fc) returned 1 [0223.825] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00423_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00423_.wmf")) returned 1 [0223.826] SetEvent (hEvent=0x27c) returned 1 [0223.826] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00452_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00452_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0223.827] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2168) returned 1 [0223.828] CloseHandle (hObject=0x2fc) returned 1 [0223.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00452_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00452_.wmf")) returned 0x220 [0223.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00452_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00452_.wmf")) returned 0x220 [0223.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00452_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00452_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.828] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00452_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00452_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0223.828] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0223.828] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0223.828] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00452_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00452_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2bc [0223.829] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x878, lpOverlapped=0x0) returned 1 [0223.831] WriteFile (in: hFile=0x2bc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x880, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x880, lpOverlapped=0x0) returned 1 [0223.832] WriteFile (in: hFile=0x2bc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0223.833] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0223.833] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0223.833] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x878, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x878, lpOverlapped=0x0) returned 1 [0223.833] FlushFileBuffers (hFile=0x2fc) returned 1 [0223.845] FlushFileBuffers (hFile=0x2bc) returned 1 [0223.847] CloseHandle (hObject=0x2fc) returned 1 [0223.847] CloseHandle (hObject=0x2bc) returned 1 [0223.847] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00452_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00452_.wmf")) returned 1 [0223.848] SetEvent (hEvent=0x27c) returned 1 [0223.848] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00454_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00454_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0223.849] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2924) returned 1 [0223.849] CloseHandle (hObject=0x2bc) returned 1 [0223.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00454_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00454_.wmf")) returned 0x220 [0223.850] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00454_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00454_.wmf")) returned 0x220 [0223.850] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00454_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00454_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.850] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00454_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00454_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0223.850] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0223.850] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0223.850] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00454_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00454_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0223.851] ReadFile (in: hFile=0x2bc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xb6c, lpOverlapped=0x0) returned 1 [0223.853] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xb70, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xb70, lpOverlapped=0x0) returned 1 [0223.854] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0223.854] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0223.854] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0223.854] WriteFile (in: hFile=0x2bc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xb6c, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xb6c, lpOverlapped=0x0) returned 1 [0223.855] FlushFileBuffers (hFile=0x2bc) returned 1 [0223.878] FlushFileBuffers (hFile=0x2fc) returned 1 [0223.892] CloseHandle (hObject=0x2bc) returned 1 [0223.892] CloseHandle (hObject=0x2fc) returned 1 [0223.892] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00454_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00454_.wmf")) returned 1 [0223.893] SetEvent (hEvent=0x27c) returned 1 [0223.893] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00476_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00476_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0223.899] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=4032) returned 1 [0223.899] CloseHandle (hObject=0x2fc) returned 1 [0223.899] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00476_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00476_.wmf")) returned 0x220 [0223.899] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00476_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00476_.wmf")) returned 0x220 [0223.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00476_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00476_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.900] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00476_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00476_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0223.900] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0223.900] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0223.900] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00476_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00476_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2bc [0223.901] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xfc0, lpOverlapped=0x0) returned 1 [0223.903] WriteFile (in: hFile=0x2bc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xfd0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xfd0, lpOverlapped=0x0) returned 1 [0223.904] WriteFile (in: hFile=0x2bc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0223.904] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0223.904] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0223.904] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xfc0, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xfc0, lpOverlapped=0x0) returned 1 [0223.904] FlushFileBuffers (hFile=0x2fc) returned 1 [0223.912] FlushFileBuffers (hFile=0x2bc) returned 1 [0223.916] CloseHandle (hObject=0x2fc) returned 1 [0223.916] CloseHandle (hObject=0x2bc) returned 1 [0223.916] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00476_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00476_.wmf")) returned 1 [0223.918] SetEvent (hEvent=0x27c) returned 1 [0223.918] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00483_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00483_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0223.920] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=11192) returned 1 [0223.920] CloseHandle (hObject=0x2bc) returned 1 [0223.920] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00483_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00483_.wmf")) returned 0x220 [0223.920] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00483_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00483_.wmf")) returned 0x220 [0223.920] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00483_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00483_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.920] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00483_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00483_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0223.920] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0223.920] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0223.920] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00483_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00483_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0223.921] ReadFile (in: hFile=0x2bc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2bb8, lpOverlapped=0x0) returned 1 [0223.923] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2bc0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2bc0, lpOverlapped=0x0) returned 1 [0223.924] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0223.924] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0223.924] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0223.924] WriteFile (in: hFile=0x2bc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2bb8, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2bb8, lpOverlapped=0x0) returned 1 [0223.925] FlushFileBuffers (hFile=0x2bc) returned 1 [0223.937] FlushFileBuffers (hFile=0x2fc) returned 1 [0223.939] CloseHandle (hObject=0x2bc) returned 1 [0223.939] CloseHandle (hObject=0x2fc) returned 1 [0223.939] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00483_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00483_.wmf")) returned 1 [0223.940] SetEvent (hEvent=0x27c) returned 1 [0223.940] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00505_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00505_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0223.941] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=2724) returned 1 [0223.941] CloseHandle (hObject=0x2fc) returned 1 [0223.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00505_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00505_.wmf")) returned 0x220 [0223.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00505_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00505_.wmf")) returned 0x220 [0223.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00505_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00505_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.942] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00505_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00505_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0223.942] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0223.942] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0223.942] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00505_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00505_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2bc [0223.943] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xaa4, lpOverlapped=0x0) returned 1 [0223.944] WriteFile (in: hFile=0x2bc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xab0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xab0, lpOverlapped=0x0) returned 1 [0223.945] WriteFile (in: hFile=0x2bc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0223.946] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0223.946] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0223.946] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xaa4, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xaa4, lpOverlapped=0x0) returned 1 [0223.946] FlushFileBuffers (hFile=0x2fc) returned 1 [0223.954] FlushFileBuffers (hFile=0x2bc) returned 1 [0223.957] CloseHandle (hObject=0x2fc) returned 1 [0223.958] CloseHandle (hObject=0x2bc) returned 1 [0223.958] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00505_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00505_.wmf")) returned 1 [0223.959] SetEvent (hEvent=0x27c) returned 1 [0223.959] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00555_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00555_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0223.959] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=9730) returned 1 [0223.959] CloseHandle (hObject=0x2bc) returned 1 [0223.960] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00555_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00555_.wmf")) returned 0x220 [0223.960] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00555_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00555_.wmf")) returned 0x220 [0223.960] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00555_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00555_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.960] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00555_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00555_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0223.960] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0223.960] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0223.960] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00555_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00555_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0223.961] ReadFile (in: hFile=0x2bc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x2602, lpOverlapped=0x0) returned 1 [0223.963] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2610, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x2610, lpOverlapped=0x0) returned 1 [0223.964] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0223.964] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0223.964] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0223.964] WriteFile (in: hFile=0x2bc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x2602, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x2602, lpOverlapped=0x0) returned 1 [0223.964] FlushFileBuffers (hFile=0x2bc) returned 1 [0223.967] FlushFileBuffers (hFile=0x2fc) returned 1 [0223.976] CloseHandle (hObject=0x2bc) returned 1 [0223.979] CloseHandle (hObject=0x2fc) returned 1 [0223.979] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00555_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00555_.wmf")) returned 1 [0223.980] SetEvent (hEvent=0x27c) returned 1 [0223.980] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00610_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00610_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0223.981] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=40064) returned 1 [0223.981] CloseHandle (hObject=0x2fc) returned 1 [0223.981] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00610_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00610_.wmf")) returned 0x220 [0223.981] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00610_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00610_.wmf")) returned 0x220 [0223.981] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00610_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00610_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.982] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00610_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00610_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0223.982] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0223.982] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0223.982] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00610_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00610_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2bc [0223.982] ReadFile (in: hFile=0x2fc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0x9c80, lpOverlapped=0x0) returned 1 [0223.985] WriteFile (in: hFile=0x2bc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x9c90, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0x9c90, lpOverlapped=0x0) returned 1 [0223.987] WriteFile (in: hFile=0x2bc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0223.987] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0223.987] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0223.987] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0x9c80, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0x9c80, lpOverlapped=0x0) returned 1 [0223.987] FlushFileBuffers (hFile=0x2fc) returned 1 [0223.990] FlushFileBuffers (hFile=0x2bc) returned 1 [0223.991] CloseHandle (hObject=0x2fc) returned 1 [0223.991] CloseHandle (hObject=0x2bc) returned 1 [0223.991] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00610_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00610_.wmf")) returned 1 [0223.992] SetEvent (hEvent=0x27c) returned 1 [0223.992] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00629_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00629_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0223.994] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x378fdd0 | out: lpFileSize=0x378fdd0*=4070) returned 1 [0223.994] CloseHandle (hObject=0x2bc) returned 1 [0223.994] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00629_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00629_.wmf")) returned 0x220 [0223.994] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00629_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00629_.wmf")) returned 0x220 [0223.994] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00629_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00629_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0223.994] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00629_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00629_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0223.994] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0223.995] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fd98 | out: lpNewFilePointer=0x0) returned 1 [0223.995] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00629_.WMF.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00629_.wmf.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2fc [0223.997] ReadFile (in: hFile=0x2bc, lpBuffer=0x3b3f020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x378fdac, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesRead=0x378fdac*=0xfe6, lpOverlapped=0x0) returned 1 [0223.999] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xff0, lpOverlapped=0x0) returned 1 [0224.000] WriteFile (in: hFile=0x2fc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fd84, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fd84*=0xf2, lpOverlapped=0x0) returned 1 [0224.001] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0224.001] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378faf8 | out: lpNewFilePointer=0x0) returned 1 [0224.001] WriteFile (in: hFile=0x2bc, lpBuffer=0x3b3f020*, nNumberOfBytesToWrite=0xfe6, lpNumberOfBytesWritten=0x378fb04, lpOverlapped=0x0 | out: lpBuffer=0x3b3f020*, lpNumberOfBytesWritten=0x378fb04*=0xfe6, lpOverlapped=0x0) returned 1 [0224.001] FlushFileBuffers (hFile=0x2bc) returned 1 [0224.003] FlushFileBuffers (hFile=0x2fc) Thread: id = 110 os_tid = 0x5d8 [0161.403] GetProcessHeap () returned 0x12c0000 [0161.403] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3c60048 [0161.404] GetProcessHeap () returned 0x12c0000 [0161.404] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3c70050 [0161.404] GetProcessHeap () returned 0x12c0000 [0161.404] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x28) returned 0x12eb878 [0161.405] GetProcessHeap () returned 0x12c0000 [0161.405] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x110102) returned 0x3d62020 [0161.407] GetProcessHeap () returned 0x12c0000 [0161.407] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x50) returned 0x12d1a68 [0161.407] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x74c00000 [0161.407] GetProcAddress (hModule=0x74c00000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x74c16b30 [0161.408] Wow64DisableWow64FsRedirection (in: OldValue=0x38cfcd0 | out: OldValue=0x38cfcd0*=0x0) returned 1 [0161.408] GetProcessHeap () returned 0x12c0000 [0161.408] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d1a68 | out: hHeap=0x12c0000) returned 1 [0161.408] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.408] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.408] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.408] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.408] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.408] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.408] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.408] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.408] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.408] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.408] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.409] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.409] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.409] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.409] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.409] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.409] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.409] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.409] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.409] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.409] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.409] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.409] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.409] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.410] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.410] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.410] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.410] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.410] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.410] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.410] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.410] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.410] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.410] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.410] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.410] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.410] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.411] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.411] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.411] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.411] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.411] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.411] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.411] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.411] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.411] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.411] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.411] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.411] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.412] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.412] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.412] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.412] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.412] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.412] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.412] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.412] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.412] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.412] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.412] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.412] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.412] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.413] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.413] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.413] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.413] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.413] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.413] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.413] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.413] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.414] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.414] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.414] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.414] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.414] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.414] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.414] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.414] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.414] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.414] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.414] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.414] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.414] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.415] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.415] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.415] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.415] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.415] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.415] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.415] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.415] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.415] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.415] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.415] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.415] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.415] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.416] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.416] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.416] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.416] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.416] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.416] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.416] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.416] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.416] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.416] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.416] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.416] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.417] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.417] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.417] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.417] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.417] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.417] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.417] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.417] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.417] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.417] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.417] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.417] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.417] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.418] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.418] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.418] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.418] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.418] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.418] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.418] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.418] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.418] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.418] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.418] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.418] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.418] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.419] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.419] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.419] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.419] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.419] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.419] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.419] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.419] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.419] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.419] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.419] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.419] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.420] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.420] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.420] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.420] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.420] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.420] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.420] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.420] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.420] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.420] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.420] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.420] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.420] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.421] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.421] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.421] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.421] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.421] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.421] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.421] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.421] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.421] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.421] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.421] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.421] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.422] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.422] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.422] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.422] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.422] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.422] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.422] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.422] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.422] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.422] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.422] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.422] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.422] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.423] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.423] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.423] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.423] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.423] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.423] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.423] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.423] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.423] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.423] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.423] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.423] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.423] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.424] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.424] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.424] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.424] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.424] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.424] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.424] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.424] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.424] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.424] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.424] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.424] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.424] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.425] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.425] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.425] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.425] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.425] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.425] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.425] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.425] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.425] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.425] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.425] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.425] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.426] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.426] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.426] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.426] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.426] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.426] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.426] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.426] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.426] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.426] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.426] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.426] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.426] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.427] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.427] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.427] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.427] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.427] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.427] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.427] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.427] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.427] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.427] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.427] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.427] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.427] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.428] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0184.799] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0184.799] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0184.799] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x300 [0184.803] ReadFile (in: hFile=0x2cc, lpBuffer=0x3d62020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x38cfc54, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesRead=0x38cfc54*=0x4000, lpOverlapped=0x0) returned 1 [0184.832] WriteFile (in: hFile=0x300, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x4010, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x4010, lpOverlapped=0x0) returned 1 [0184.834] WriteFile (in: hFile=0x300, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x102, lpOverlapped=0x0) returned 1 [0184.834] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0184.834] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0184.834] WriteFile (in: hFile=0x2cc, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x4000, lpNumberOfBytesWritten=0x38cf9ac, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cf9ac*=0x4000, lpOverlapped=0x0) returned 1 [0184.835] FlushFileBuffers (hFile=0x2cc) returned 1 [0184.980] FlushFileBuffers (hFile=0x300) returned 1 [0184.982] CloseHandle (hObject=0x2cc) returned 1 [0184.982] CloseHandle (hObject=0x300) returned 1 [0184.982] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db")) returned 1 [0184.983] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0184.984] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x38cfc78 | out: lpFileSize=0x38cfc78*=0) returned 1 [0184.984] CloseHandle (hObject=0x300) returned 1 [0184.984] ResetEvent (hEvent=0x2a0) returned 1 [0184.984] SetEvent (hEvent=0x2a4) returned 1 [0184.984] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\iconcache.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0184.984] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x38cfc78 | out: lpFileSize=0x38cfc78*=69904) returned 1 [0184.984] CloseHandle (hObject=0x300) returned 1 [0184.984] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\iconcache.db")) returned 0x22 [0184.985] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\iconcache.db")) returned 0x22 [0184.985] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\IconCache.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\iconcache.db.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0184.985] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\iconcache.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0184.985] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0184.985] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0184.985] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\IconCache.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\iconcache.db.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x22, hTemplateFile=0x0) returned 0x2cc [0184.985] ReadFile (in: hFile=0x300, lpBuffer=0x3d62020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x38cfc54, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesRead=0x38cfc54*=0x11110, lpOverlapped=0x0) returned 1 [0184.987] WriteFile (in: hFile=0x2cc, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x11120, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x11120, lpOverlapped=0x0) returned 1 [0184.990] WriteFile (in: hFile=0x2cc, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0xf2, lpOverlapped=0x0) returned 1 [0184.990] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0184.990] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0184.990] WriteFile (in: hFile=0x300, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x11110, lpNumberOfBytesWritten=0x38cf9ac, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cf9ac*=0x11110, lpOverlapped=0x0) returned 1 [0184.990] FlushFileBuffers (hFile=0x300) returned 1 [0184.992] FlushFileBuffers (hFile=0x2cc) returned 1 [0184.994] CloseHandle (hObject=0x300) returned 1 [0184.994] CloseHandle (hObject=0x2cc) returned 1 [0184.994] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\iconcache.db")) returned 1 [0184.995] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0185.016] ResetEvent (hEvent=0x2a0) returned 1 [0185.016] SetEvent (hEvent=0x2a4) returned 1 [0185.016] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Indexed DB\\AppQuota.edb" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\internet explorer\\indexed db\\appquota.edb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0185.022] GetFileSizeEx (in: hFile=0x2e8, lpFileSize=0x38cfc78 | out: lpFileSize=0x38cfc78*=1572864) returned 1 [0185.022] CloseHandle (hObject=0x2e8) returned 1 [0185.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Indexed DB\\AppQuota.edb" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\internet explorer\\indexed db\\appquota.edb")) returned 0x220 [0185.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Indexed DB\\AppQuota.edb" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\internet explorer\\indexed db\\appquota.edb")) returned 0x220 [0185.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Indexed DB\\AppQuota.edb.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\internet explorer\\indexed db\\appquota.edb.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0185.023] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Indexed DB\\AppQuota.edb" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\internet explorer\\indexed db\\appquota.edb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0185.023] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0185.023] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0185.023] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Indexed DB\\AppQuota.edb.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\internet explorer\\indexed db\\appquota.edb.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2f0 [0185.023] ReadFile (in: hFile=0x2e8, lpBuffer=0x3d62020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x38cfc54, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesRead=0x38cfc54*=0x110100, lpOverlapped=0x0) returned 1 [0185.218] WriteFile (in: hFile=0x2f0, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x110100, lpOverlapped=0x0) returned 1 [0185.248] ReadFile (in: hFile=0x2e8, lpBuffer=0x3d62020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x38cfc54, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesRead=0x38cfc54*=0x6ff00, lpOverlapped=0x0) returned 1 [0185.396] WriteFile (in: hFile=0x2f0, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x6ff10, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x6ff10, lpOverlapped=0x0) returned 1 [0185.408] WriteFile (in: hFile=0x2f0, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0xf2, lpOverlapped=0x0) returned 1 [0185.408] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0185.408] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0185.408] WriteFile (in: hFile=0x2e8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x38cf9ac, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cf9ac*=0x110102, lpOverlapped=0x0) returned 1 [0185.416] WriteFile (in: hFile=0x2e8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x6fefe, lpNumberOfBytesWritten=0x38cf9ac, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cf9ac*=0x6fefe, lpOverlapped=0x0) returned 1 [0185.417] FlushFileBuffers (hFile=0x2e8) returned 1 [0185.620] FlushFileBuffers (hFile=0x2f0) returned 1 [0185.623] CloseHandle (hObject=0x2e8) returned 1 [0185.624] CloseHandle (hObject=0x2f0) returned 1 [0185.624] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Indexed DB\\AppQuota.edb" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\internet explorer\\indexed db\\appquota.edb")) returned 1 [0185.640] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0186.403] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0186.403] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x38cfc78 | out: lpFileSize=0x38cfc78*=16384) returned 1 [0186.403] CloseHandle (hObject=0x2f4) returned 1 [0186.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db")) returned 0x20 [0186.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db")) returned 0x20 [0186.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0186.404] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0186.404] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0186.404] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0186.404] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2f8 [0186.404] ReadFile (in: hFile=0x2f4, lpBuffer=0x3d62020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x38cfc54, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesRead=0x38cfc54*=0x4000, lpOverlapped=0x0) returned 1 [0186.406] WriteFile (in: hFile=0x2f8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x4010, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x4010, lpOverlapped=0x0) returned 1 [0186.407] WriteFile (in: hFile=0x2f8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0xf2, lpOverlapped=0x0) returned 1 [0186.407] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0186.407] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0186.407] WriteFile (in: hFile=0x2f4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x4000, lpNumberOfBytesWritten=0x38cf9ac, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cf9ac*=0x4000, lpOverlapped=0x0) returned 1 [0186.408] FlushFileBuffers (hFile=0x2f4) returned 1 [0186.412] FlushFileBuffers (hFile=0x2f8) returned 1 [0186.416] CloseHandle (hObject=0x2f4) returned 1 [0186.416] CloseHandle (hObject=0x2f8) returned 1 [0186.416] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db")) returned 1 [0186.418] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.3.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\caches\\cversions.3.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0186.418] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x38cfc78 | out: lpFileSize=0x38cfc78*=16384) returned 1 [0186.418] CloseHandle (hObject=0x2f8) returned 1 [0186.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.3.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\caches\\cversions.3.db")) returned 0x20 [0186.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.3.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\caches\\cversions.3.db")) returned 0x20 [0186.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.3.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\caches\\cversions.3.db.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0186.418] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.3.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\caches\\cversions.3.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0186.418] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0186.419] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0186.419] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.3.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\caches\\cversions.3.db.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2f4 [0186.419] ReadFile (in: hFile=0x2f8, lpBuffer=0x3d62020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x38cfc54, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesRead=0x38cfc54*=0x4000, lpOverlapped=0x0) returned 1 [0186.421] WriteFile (in: hFile=0x2f4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x4010, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x4010, lpOverlapped=0x0) returned 1 [0186.422] WriteFile (in: hFile=0x2f4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0xf2, lpOverlapped=0x0) returned 1 [0186.422] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0186.423] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0186.423] WriteFile (in: hFile=0x2f8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x4000, lpNumberOfBytesWritten=0x38cf9ac, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cf9ac*=0x4000, lpOverlapped=0x0) returned 1 [0186.423] FlushFileBuffers (hFile=0x2f8) returned 1 [0186.430] FlushFileBuffers (hFile=0x2f4) returned 1 [0186.439] CloseHandle (hObject=0x2f8) returned 1 [0186.439] CloseHandle (hObject=0x2f4) returned 1 [0186.439] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.3.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\caches\\cversions.3.db")) returned 0 [0186.439] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Caches\\{2B16BD47-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\caches\\{2b16bd47-b905-4d30-88c9-b63c603da134}.3.ver0x0000000000000001.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0186.440] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x38cfc78 | out: lpFileSize=0x38cfc78*=413432) returned 1 [0186.440] CloseHandle (hObject=0x2f4) returned 1 [0186.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Caches\\{2B16BD47-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\caches\\{2b16bd47-b905-4d30-88c9-b63c603da134}.3.ver0x0000000000000001.db")) returned 0x20 [0186.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Caches\\{2B16BD47-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\caches\\{2b16bd47-b905-4d30-88c9-b63c603da134}.3.ver0x0000000000000001.db")) returned 0x20 [0186.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Caches\\{2B16BD47-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\caches\\{2b16bd47-b905-4d30-88c9-b63c603da134}.3.ver0x0000000000000001.db.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0186.440] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Caches\\{2B16BD47-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\caches\\{2b16bd47-b905-4d30-88c9-b63c603da134}.3.ver0x0000000000000001.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0186.440] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0186.440] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0186.440] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Caches\\{2B16BD47-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\caches\\{2b16bd47-b905-4d30-88c9-b63c603da134}.3.ver0x0000000000000001.db.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2f8 [0186.442] ReadFile (in: hFile=0x2f4, lpBuffer=0x3d62020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x38cfc54, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesRead=0x38cfc54*=0x64ef8, lpOverlapped=0x0) returned 1 [0186.457] WriteFile (in: hFile=0x2f8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x64f00, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x64f00, lpOverlapped=0x0) returned 1 [0186.466] WriteFile (in: hFile=0x2f8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x162, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x162, lpOverlapped=0x0) returned 1 [0186.466] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0186.466] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0186.466] WriteFile (in: hFile=0x2f4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x64ef8, lpNumberOfBytesWritten=0x38cf9ac, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cf9ac*=0x64ef8, lpOverlapped=0x0) returned 1 [0186.467] FlushFileBuffers (hFile=0x2f4) returned 1 [0186.471] FlushFileBuffers (hFile=0x2f8) returned 1 [0186.477] CloseHandle (hObject=0x2f4) returned 1 [0186.477] CloseHandle (hObject=0x2f8) returned 1 [0186.477] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Caches\\{2B16BD47-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\caches\\{2b16bd47-b905-4d30-88c9-b63c603da134}.3.ver0x0000000000000001.db")) returned 1 [0186.482] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x0000000000000032.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.3.ver0x0000000000000032.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0186.482] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x38cfc78 | out: lpFileSize=0x38cfc78*=99952) returned 1 [0186.482] CloseHandle (hObject=0x2f8) returned 1 [0186.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x0000000000000032.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.3.ver0x0000000000000032.db")) returned 0x20 [0186.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x0000000000000032.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.3.ver0x0000000000000032.db")) returned 0x20 [0186.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x0000000000000032.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.3.ver0x0000000000000032.db.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0186.483] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x0000000000000032.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.3.ver0x0000000000000032.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0186.483] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0186.483] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0186.483] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x0000000000000032.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.3.ver0x0000000000000032.db.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2f4 [0186.484] ReadFile (in: hFile=0x2f8, lpBuffer=0x3d62020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x38cfc54, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesRead=0x38cfc54*=0x18670, lpOverlapped=0x0) returned 1 [0186.486] WriteFile (in: hFile=0x2f4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x18680, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x18680, lpOverlapped=0x0) returned 1 [0186.489] WriteFile (in: hFile=0x2f4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x162, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x162, lpOverlapped=0x0) returned 1 [0186.489] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0186.489] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0186.489] WriteFile (in: hFile=0x2f8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x18670, lpNumberOfBytesWritten=0x38cf9ac, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cf9ac*=0x18670, lpOverlapped=0x0) returned 1 [0186.490] FlushFileBuffers (hFile=0x2f8) returned 1 [0186.493] FlushFileBuffers (hFile=0x2f4) returned 1 [0186.494] CloseHandle (hObject=0x2f8) returned 1 [0186.494] CloseHandle (hObject=0x2f4) returned 1 [0186.495] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x0000000000000032.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.3.ver0x0000000000000032.db")) returned 0 [0186.495] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001b.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001b.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0186.496] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x38cfc78 | out: lpFileSize=0x38cfc78*=130512) returned 1 [0186.496] CloseHandle (hObject=0x2f4) returned 1 [0186.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001b.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001b.db")) returned 0x20 [0186.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001b.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001b.db")) returned 0x20 [0186.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001b.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001b.db.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0186.497] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001b.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001b.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0186.497] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0186.497] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0186.497] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001b.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001b.db.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2f8 [0186.498] ReadFile (in: hFile=0x2f4, lpBuffer=0x3d62020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x38cfc54, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesRead=0x38cfc54*=0x1fdd0, lpOverlapped=0x0) returned 1 [0186.503] WriteFile (in: hFile=0x2f8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x1fde0, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x1fde0, lpOverlapped=0x0) returned 1 [0186.506] WriteFile (in: hFile=0x2f8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x162, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x162, lpOverlapped=0x0) returned 1 [0186.506] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0186.506] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0186.506] WriteFile (in: hFile=0x2f4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x1fdd0, lpNumberOfBytesWritten=0x38cf9ac, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cf9ac*=0x1fdd0, lpOverlapped=0x0) returned 1 [0186.507] FlushFileBuffers (hFile=0x2f4) returned 1 [0186.509] FlushFileBuffers (hFile=0x2f8) returned 1 [0186.511] CloseHandle (hObject=0x2f4) returned 1 [0186.511] CloseHandle (hObject=0x2f8) returned 1 [0186.511] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001b.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001b.db")) returned 1 [0186.513] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001c.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001c.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0186.513] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x38cfc78 | out: lpFileSize=0x38cfc78*=118080) returned 1 [0186.513] CloseHandle (hObject=0x2f8) returned 1 [0186.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001c.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001c.db")) returned 0x20 [0186.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001c.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001c.db")) returned 0x20 [0186.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001c.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001c.db.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0186.514] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001c.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001c.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0186.514] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0186.514] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0186.514] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001c.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001c.db.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2f4 [0186.516] ReadFile (in: hFile=0x2f8, lpBuffer=0x3d62020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x38cfc54, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesRead=0x38cfc54*=0x1cd40, lpOverlapped=0x0) returned 1 [0186.520] WriteFile (in: hFile=0x2f4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x1cd50, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x1cd50, lpOverlapped=0x0) returned 1 [0186.523] WriteFile (in: hFile=0x2f4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x162, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x162, lpOverlapped=0x0) returned 1 [0186.524] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0186.524] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0186.524] WriteFile (in: hFile=0x2f8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x1cd40, lpNumberOfBytesWritten=0x38cf9ac, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cf9ac*=0x1cd40, lpOverlapped=0x0) returned 1 [0186.524] FlushFileBuffers (hFile=0x2f8) returned 1 [0186.528] FlushFileBuffers (hFile=0x2f4) returned 1 [0186.530] CloseHandle (hObject=0x2f8) returned 1 [0186.530] CloseHandle (hObject=0x2f4) returned 1 [0186.530] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001c.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001c.db")) returned 0 [0186.530] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1280.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_1280.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0186.531] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x38cfc78 | out: lpFileSize=0x38cfc78*=24) returned 1 [0186.531] CloseHandle (hObject=0x2f4) returned 1 [0186.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1280.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_1280.db")) returned 0x2020 [0186.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1280.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_1280.db")) returned 0x2020 [0186.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1280.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_1280.db.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0186.531] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1280.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_1280.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0186.532] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0186.532] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0186.532] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1280.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_1280.db.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x2f8 [0186.535] ReadFile (in: hFile=0x2f4, lpBuffer=0x3d62020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x38cfc54, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesRead=0x38cfc54*=0x18, lpOverlapped=0x0) returned 1 [0186.537] WriteFile (in: hFile=0x2f8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x20, lpOverlapped=0x0) returned 1 [0186.538] WriteFile (in: hFile=0x2f8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x102, lpOverlapped=0x0) returned 1 [0186.538] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0186.538] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0186.538] WriteFile (in: hFile=0x2f4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x38cf9ac, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cf9ac*=0x18, lpOverlapped=0x0) returned 1 [0186.552] FlushFileBuffers (hFile=0x2f4) returned 1 [0186.556] FlushFileBuffers (hFile=0x2f8) returned 1 [0186.559] CloseHandle (hObject=0x2f4) returned 1 [0186.559] CloseHandle (hObject=0x2f8) returned 1 [0186.559] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1280.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_1280.db")) returned 1 [0186.560] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_16.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_16.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0186.561] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x38cfc78 | out: lpFileSize=0x38cfc78*=1048576) returned 1 [0186.561] CloseHandle (hObject=0x2f8) returned 1 [0186.561] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_16.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_16.db")) returned 0x2020 [0186.561] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_16.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_16.db")) returned 0x2020 [0186.561] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_16.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_16.db.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0186.561] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_16.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_16.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0186.561] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0186.561] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0186.561] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_16.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_16.db.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x2f4 [0186.562] ReadFile (in: hFile=0x2f8, lpBuffer=0x3d62020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x38cfc54, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesRead=0x38cfc54*=0x100000, lpOverlapped=0x0) returned 1 [0186.768] WriteFile (in: hFile=0x2f4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x100010, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x100010, lpOverlapped=0x0) returned 1 [0187.969] WriteFile (in: hFile=0x2f4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0xf2, lpOverlapped=0x0) returned 1 [0187.969] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0187.969] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0187.969] WriteFile (in: hFile=0x2f8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x38cf9ac, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cf9ac*=0x100000, lpOverlapped=0x0) returned 1 [0187.972] FlushFileBuffers (hFile=0x2f8) returned 1 [0188.086] FlushFileBuffers (hFile=0x2f4) returned 1 [0188.112] CloseHandle (hObject=0x2f8) returned 1 [0188.112] CloseHandle (hObject=0x2f4) returned 1 [0188.112] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_16.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_16.db")) returned 1 [0188.121] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1920.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_1920.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0188.122] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x38cfc78 | out: lpFileSize=0x38cfc78*=24) returned 1 [0188.122] CloseHandle (hObject=0x2f4) returned 1 [0188.123] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1920.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_1920.db")) returned 0x2020 [0188.123] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1920.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_1920.db")) returned 0x2020 [0188.123] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1920.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_1920.db.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0188.123] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1920.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_1920.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0188.123] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0188.123] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0188.123] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1920.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_1920.db.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x2f8 [0188.123] ReadFile (in: hFile=0x2f4, lpBuffer=0x3d62020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x38cfc54, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesRead=0x38cfc54*=0x18, lpOverlapped=0x0) returned 1 [0188.124] WriteFile (in: hFile=0x2f8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x20, lpOverlapped=0x0) returned 1 [0188.125] WriteFile (in: hFile=0x2f8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x102, lpOverlapped=0x0) returned 1 [0188.126] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0188.126] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0188.126] WriteFile (in: hFile=0x2f4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x38cf9ac, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cf9ac*=0x18, lpOverlapped=0x0) returned 1 [0188.126] FlushFileBuffers (hFile=0x2f4) returned 1 [0188.128] FlushFileBuffers (hFile=0x2f8) returned 1 [0188.130] CloseHandle (hObject=0x2f4) returned 1 [0188.130] CloseHandle (hObject=0x2f8) returned 1 [0188.131] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1920.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_1920.db")) returned 1 [0188.132] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_256.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_256.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0188.132] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x38cfc78 | out: lpFileSize=0x38cfc78*=1048576) returned 1 [0188.132] CloseHandle (hObject=0x2f8) returned 1 [0188.132] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_256.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_256.db")) returned 0x2020 [0188.132] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_256.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_256.db")) returned 0x2020 [0188.132] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_256.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_256.db.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0188.132] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_256.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_256.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0188.132] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0188.132] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0188.132] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_256.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_256.db.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x2f4 [0188.133] ReadFile (in: hFile=0x2f8, lpBuffer=0x3d62020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x38cfc54, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesRead=0x38cfc54*=0x100000, lpOverlapped=0x0) returned 1 [0188.192] WriteFile (in: hFile=0x2f4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x100010, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x100010, lpOverlapped=0x0) returned 1 [0188.539] WriteFile (in: hFile=0x2f4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x102, lpOverlapped=0x0) returned 1 [0188.539] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0188.539] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0188.539] WriteFile (in: hFile=0x2f8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x38cf9ac, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cf9ac*=0x100000, lpOverlapped=0x0) returned 1 [0188.542] FlushFileBuffers (hFile=0x2f8) returned 1 [0188.917] FlushFileBuffers (hFile=0x2f4) returned 1 [0188.923] CloseHandle (hObject=0x2f8) returned 1 [0188.923] CloseHandle (hObject=0x2f4) returned 1 [0188.923] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_256.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_256.db")) returned 1 [0188.924] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_2560.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_2560.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0188.924] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x38cfc78 | out: lpFileSize=0x38cfc78*=24) returned 1 [0188.924] CloseHandle (hObject=0x2f4) returned 1 [0188.924] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_2560.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_2560.db")) returned 0x2020 [0188.924] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_2560.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_2560.db")) returned 0x2020 [0188.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_2560.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_2560.db.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0188.925] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_2560.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_2560.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0188.925] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0188.925] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0188.925] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_2560.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_2560.db.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x2f8 [0188.925] ReadFile (in: hFile=0x2f4, lpBuffer=0x3d62020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x38cfc54, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesRead=0x38cfc54*=0x18, lpOverlapped=0x0) returned 1 [0188.926] WriteFile (in: hFile=0x2f8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x20, lpOverlapped=0x0) returned 1 [0188.927] WriteFile (in: hFile=0x2f8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x102, lpOverlapped=0x0) returned 1 [0188.927] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0188.928] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0188.928] WriteFile (in: hFile=0x2f4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x38cf9ac, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cf9ac*=0x18, lpOverlapped=0x0) returned 1 [0188.928] FlushFileBuffers (hFile=0x2f4) returned 1 [0188.931] FlushFileBuffers (hFile=0x2f8) returned 1 [0188.941] CloseHandle (hObject=0x2f4) returned 1 [0188.941] CloseHandle (hObject=0x2f8) returned 1 [0188.941] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_2560.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_2560.db")) returned 1 [0188.942] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_32.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_32.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0188.942] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x38cfc78 | out: lpFileSize=0x38cfc78*=3145728) returned 1 [0188.942] CloseHandle (hObject=0x2f8) returned 1 [0188.942] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_32.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_32.db")) returned 0x2020 [0188.942] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_32.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_32.db")) returned 0x2020 [0188.943] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_32.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_32.db.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0188.943] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_32.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_32.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0188.943] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0188.943] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0188.943] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_32.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_32.db.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x2f4 [0188.943] ReadFile (in: hFile=0x2f8, lpBuffer=0x3d62020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x38cfc54, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesRead=0x38cfc54*=0x110100, lpOverlapped=0x0) returned 1 [0189.019] WriteFile (in: hFile=0x2f4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x110100, lpOverlapped=0x0) returned 1 [0189.288] ReadFile (in: hFile=0x2f8, lpBuffer=0x3d62020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x38cfc54, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesRead=0x38cfc54*=0x110100, lpOverlapped=0x0) returned 1 [0189.393] WriteFile (in: hFile=0x2f4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x110100, lpOverlapped=0x0) returned 1 [0189.417] ReadFile (in: hFile=0x2f8, lpBuffer=0x3d62020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x38cfc54, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesRead=0x38cfc54*=0xdfe00, lpOverlapped=0x0) returned 1 [0189.427] WriteFile (in: hFile=0x2f4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0xdfe10, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0xdfe10, lpOverlapped=0x0) returned 1 [0189.553] WriteFile (in: hFile=0x2f4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0xf2, lpOverlapped=0x0) returned 1 [0189.554] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0189.554] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0189.554] WriteFile (in: hFile=0x2f8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x38cf9ac, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cf9ac*=0x110102, lpOverlapped=0x0) returned 1 [0189.569] WriteFile (in: hFile=0x2f8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x38cf9ac, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cf9ac*=0x110102, lpOverlapped=0x0) returned 1 [0189.833] WriteFile (in: hFile=0x2f8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0xdfdfc, lpNumberOfBytesWritten=0x38cf9ac, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cf9ac*=0xdfdfc, lpOverlapped=0x0) returned 1 [0189.835] FlushFileBuffers (hFile=0x2f8) returned 1 [0189.849] FlushFileBuffers (hFile=0x2f4) returned 1 [0189.857] CloseHandle (hObject=0x2f8) returned 1 [0189.857] CloseHandle (hObject=0x2f4) returned 1 [0189.857] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_32.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_32.db")) returned 1 [0189.858] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_48.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_48.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0189.859] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x38cfc78 | out: lpFileSize=0x38cfc78*=3145728) returned 1 [0189.859] CloseHandle (hObject=0x2f4) returned 1 [0189.859] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_48.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_48.db")) returned 0x2020 [0189.859] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_48.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_48.db")) returned 0x2020 [0189.859] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_48.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_48.db.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0189.859] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_48.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_48.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0189.859] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0189.859] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0189.859] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_48.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_48.db.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x2f8 [0189.860] ReadFile (in: hFile=0x2f4, lpBuffer=0x3d62020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x38cfc54, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesRead=0x38cfc54*=0x110100, lpOverlapped=0x0) returned 1 [0190.311] WriteFile (in: hFile=0x2f8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x110100, lpOverlapped=0x0) returned 1 [0190.335] ReadFile (in: hFile=0x2f4, lpBuffer=0x3d62020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x38cfc54, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesRead=0x38cfc54*=0x110100, lpOverlapped=0x0) returned 1 [0190.459] WriteFile (in: hFile=0x2f8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x110100, lpOverlapped=0x0) returned 1 [0190.608] ReadFile (in: hFile=0x2f4, lpBuffer=0x3d62020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x38cfc54, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesRead=0x38cfc54*=0xdfe00, lpOverlapped=0x0) returned 1 [0190.618] WriteFile (in: hFile=0x2f8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0xdfe10, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0xdfe10, lpOverlapped=0x0) returned 1 [0190.639] WriteFile (in: hFile=0x2f8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0xf2, lpOverlapped=0x0) returned 1 [0190.639] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0190.640] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0190.640] WriteFile (in: hFile=0x2f4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x38cf9ac, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cf9ac*=0x110102, lpOverlapped=0x0) returned 1 [0190.871] WriteFile (in: hFile=0x2f4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x38cf9ac, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cf9ac*=0x110102, lpOverlapped=0x0) returned 1 [0190.884] WriteFile (in: hFile=0x2f4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0xdfdfc, lpNumberOfBytesWritten=0x38cf9ac, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cf9ac*=0xdfdfc, lpOverlapped=0x0) returned 1 [0190.887] FlushFileBuffers (hFile=0x2f4) returned 1 [0191.327] FlushFileBuffers (hFile=0x2f8) returned 1 [0191.507] CloseHandle (hObject=0x2f4) returned 1 [0191.507] CloseHandle (hObject=0x2f8) returned 1 [0191.507] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_48.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_48.db")) returned 1 [0191.507] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_768.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_768.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0191.508] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x38cfc78 | out: lpFileSize=0x38cfc78*=24) returned 1 [0191.508] CloseHandle (hObject=0x2f8) returned 1 [0191.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_768.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_768.db")) returned 0x2020 [0191.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_768.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_768.db")) returned 0x2020 [0191.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_768.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_768.db.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0191.508] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_768.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_768.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0191.508] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0191.509] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0191.509] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_768.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_768.db.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x2f4 [0191.509] ReadFile (in: hFile=0x2f8, lpBuffer=0x3d62020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x38cfc54, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesRead=0x38cfc54*=0x18, lpOverlapped=0x0) returned 1 [0191.510] WriteFile (in: hFile=0x2f4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x20, lpOverlapped=0x0) returned 1 [0191.511] WriteFile (in: hFile=0x2f4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x102, lpOverlapped=0x0) returned 1 [0191.511] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0191.511] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0191.511] WriteFile (in: hFile=0x2f8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x38cf9ac, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cf9ac*=0x18, lpOverlapped=0x0) returned 1 [0191.512] FlushFileBuffers (hFile=0x2f8) returned 1 [0191.526] FlushFileBuffers (hFile=0x2f4) returned 1 [0191.535] CloseHandle (hObject=0x2f8) returned 1 [0191.535] CloseHandle (hObject=0x2f4) returned 1 [0191.535] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_768.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_768.db")) returned 1 [0191.536] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_96.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_96.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0191.536] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x38cfc78 | out: lpFileSize=0x38cfc78*=24) returned 1 [0191.536] CloseHandle (hObject=0x2f4) returned 1 [0191.537] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_96.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_96.db")) returned 0x2020 [0191.537] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_96.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_96.db")) returned 0x2020 [0191.537] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_96.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_96.db.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0191.537] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_96.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_96.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0191.538] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0191.538] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0191.538] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_96.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_96.db.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x2f8 [0191.538] ReadFile (in: hFile=0x2f4, lpBuffer=0x3d62020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x38cfc54, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesRead=0x38cfc54*=0x18, lpOverlapped=0x0) returned 1 [0191.539] WriteFile (in: hFile=0x2f8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x20, lpOverlapped=0x0) returned 1 [0191.541] WriteFile (in: hFile=0x2f8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0xf2, lpOverlapped=0x0) returned 1 [0191.541] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0191.541] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0191.541] WriteFile (in: hFile=0x2f4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x38cf9ac, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cf9ac*=0x18, lpOverlapped=0x0) returned 1 [0191.541] FlushFileBuffers (hFile=0x2f4) returned 1 [0191.546] FlushFileBuffers (hFile=0x2f8) returned 1 [0191.568] CloseHandle (hObject=0x2f4) returned 1 [0191.568] CloseHandle (hObject=0x2f8) returned 1 [0191.568] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_96.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_96.db")) returned 1 [0191.569] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_custom_stream.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_custom_stream.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0191.570] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x38cfc78 | out: lpFileSize=0x38cfc78*=24) returned 1 [0191.570] CloseHandle (hObject=0x2f8) returned 1 [0191.570] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_custom_stream.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_custom_stream.db")) returned 0x2020 [0191.570] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_custom_stream.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_custom_stream.db")) returned 0x2020 [0191.570] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_custom_stream.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_custom_stream.db.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0191.570] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_custom_stream.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_custom_stream.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0191.570] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0191.570] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0191.570] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_custom_stream.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_custom_stream.db.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x2f4 [0191.571] ReadFile (in: hFile=0x2f8, lpBuffer=0x3d62020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x38cfc54, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesRead=0x38cfc54*=0x18, lpOverlapped=0x0) returned 1 [0191.572] WriteFile (in: hFile=0x2f4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x20, lpOverlapped=0x0) returned 1 [0191.573] WriteFile (in: hFile=0x2f4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x112, lpOverlapped=0x0) returned 1 [0191.573] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0191.573] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0191.573] WriteFile (in: hFile=0x2f8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x38cf9ac, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cf9ac*=0x18, lpOverlapped=0x0) returned 1 [0191.573] FlushFileBuffers (hFile=0x2f8) returned 1 [0191.575] FlushFileBuffers (hFile=0x2f4) returned 1 [0191.580] CloseHandle (hObject=0x2f8) returned 1 [0191.580] CloseHandle (hObject=0x2f4) returned 1 [0191.580] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_custom_stream.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_custom_stream.db")) returned 1 [0191.581] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_exif.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_exif.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0191.581] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x38cfc78 | out: lpFileSize=0x38cfc78*=24) returned 1 [0191.581] CloseHandle (hObject=0x2f4) returned 1 [0191.581] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_exif.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_exif.db")) returned 0x2020 [0191.581] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_exif.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_exif.db")) returned 0x2020 [0191.581] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_exif.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_exif.db.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0191.582] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_exif.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_exif.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0191.582] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0191.582] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0191.582] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_exif.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_exif.db.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x2f8 [0191.582] ReadFile (in: hFile=0x2f4, lpBuffer=0x3d62020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x38cfc54, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesRead=0x38cfc54*=0x18, lpOverlapped=0x0) returned 1 [0191.583] WriteFile (in: hFile=0x2f8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x20, lpOverlapped=0x0) returned 1 [0191.584] WriteFile (in: hFile=0x2f8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x102, lpOverlapped=0x0) returned 1 [0191.584] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0191.584] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0191.584] WriteFile (in: hFile=0x2f4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x38cf9ac, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cf9ac*=0x18, lpOverlapped=0x0) returned 1 [0191.584] FlushFileBuffers (hFile=0x2f4) returned 1 [0191.592] FlushFileBuffers (hFile=0x2f8) returned 1 [0191.594] CloseHandle (hObject=0x2f4) returned 1 [0191.594] CloseHandle (hObject=0x2f8) returned 1 [0191.594] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_exif.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_exif.db")) returned 1 [0191.595] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_idx.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_idx.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0191.596] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x38cfc78 | out: lpFileSize=0x38cfc78*=116496) returned 1 [0191.596] CloseHandle (hObject=0x2f8) returned 1 [0191.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_idx.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_idx.db")) returned 0x2020 [0191.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_idx.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_idx.db")) returned 0x2020 [0191.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_idx.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_idx.db.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0191.596] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_idx.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_idx.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0191.596] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0191.596] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0191.596] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_idx.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_idx.db.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x2f4 [0191.597] ReadFile (in: hFile=0x2f8, lpBuffer=0x3d62020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x38cfc54, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesRead=0x38cfc54*=0x1c710, lpOverlapped=0x0) returned 1 [0191.599] WriteFile (in: hFile=0x2f4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x1c720, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x1c720, lpOverlapped=0x0) returned 1 [0191.602] WriteFile (in: hFile=0x2f4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x102, lpOverlapped=0x0) returned 1 [0191.603] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0191.603] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0191.603] WriteFile (in: hFile=0x2f8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x1c710, lpNumberOfBytesWritten=0x38cf9ac, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cf9ac*=0x1c710, lpOverlapped=0x0) returned 1 [0191.603] FlushFileBuffers (hFile=0x2f8) returned 1 [0191.606] FlushFileBuffers (hFile=0x2f4) returned 1 [0191.608] CloseHandle (hObject=0x2f8) returned 1 [0191.608] CloseHandle (hObject=0x2f4) returned 1 [0191.608] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_idx.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_idx.db")) returned 1 [0191.609] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_sr.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_sr.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0191.609] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x38cfc78 | out: lpFileSize=0x38cfc78*=24) returned 1 [0191.609] CloseHandle (hObject=0x2f4) returned 1 [0191.609] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_sr.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_sr.db")) returned 0x2020 [0191.609] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_sr.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_sr.db")) returned 0x2020 [0191.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_sr.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_sr.db.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0191.610] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_sr.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_sr.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0191.610] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0191.610] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0191.610] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_sr.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_sr.db.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x2f8 [0191.610] ReadFile (in: hFile=0x2f4, lpBuffer=0x3d62020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x38cfc54, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesRead=0x38cfc54*=0x18, lpOverlapped=0x0) returned 1 [0191.611] WriteFile (in: hFile=0x2f8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x20, lpOverlapped=0x0) returned 1 [0191.612] WriteFile (in: hFile=0x2f8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0xf2, lpOverlapped=0x0) returned 1 [0191.612] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0191.612] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0191.613] WriteFile (in: hFile=0x2f4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x38cf9ac, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cf9ac*=0x18, lpOverlapped=0x0) returned 1 [0191.613] FlushFileBuffers (hFile=0x2f4) returned 1 [0191.615] FlushFileBuffers (hFile=0x2f8) returned 1 [0191.617] CloseHandle (hObject=0x2f4) returned 1 [0191.617] CloseHandle (hObject=0x2f8) returned 1 [0191.617] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_sr.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_sr.db")) returned 1 [0191.618] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_wide.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0191.618] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x38cfc78 | out: lpFileSize=0x38cfc78*=24) returned 1 [0191.618] CloseHandle (hObject=0x2f8) returned 1 [0191.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_wide.db")) returned 0x2020 [0191.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_wide.db")) returned 0x2020 [0191.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_wide.db.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0191.619] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_wide.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0191.619] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0191.619] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0191.619] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_wide.db.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x2f4 [0191.619] ReadFile (in: hFile=0x2f8, lpBuffer=0x3d62020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x38cfc54, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesRead=0x38cfc54*=0x18, lpOverlapped=0x0) returned 1 [0191.621] WriteFile (in: hFile=0x2f4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x20, lpOverlapped=0x0) returned 1 [0191.622] WriteFile (in: hFile=0x2f4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x102, lpOverlapped=0x0) returned 1 [0191.622] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0191.622] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0191.622] WriteFile (in: hFile=0x2f8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x38cf9ac, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cf9ac*=0x18, lpOverlapped=0x0) returned 1 [0191.622] FlushFileBuffers (hFile=0x2f8) returned 1 [0191.624] FlushFileBuffers (hFile=0x2f4) returned 1 [0191.626] CloseHandle (hObject=0x2f8) returned 1 [0191.627] CloseHandle (hObject=0x2f4) returned 1 [0191.627] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_wide.db")) returned 1 [0191.628] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide_alternate.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_wide_alternate.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0191.628] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x38cfc78 | out: lpFileSize=0x38cfc78*=24) returned 1 [0191.628] CloseHandle (hObject=0x2f4) returned 1 [0191.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide_alternate.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_wide_alternate.db")) returned 0x2020 [0191.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide_alternate.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_wide_alternate.db")) returned 0x2020 [0191.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide_alternate.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_wide_alternate.db.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0191.628] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide_alternate.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_wide_alternate.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0191.628] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0191.628] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0191.629] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide_alternate.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_wide_alternate.db.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x2f8 [0191.629] ReadFile (in: hFile=0x2f4, lpBuffer=0x3d62020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x38cfc54, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesRead=0x38cfc54*=0x18, lpOverlapped=0x0) returned 1 [0191.630] WriteFile (in: hFile=0x2f8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x20, lpOverlapped=0x0) returned 1 [0191.631] WriteFile (in: hFile=0x2f8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x112, lpOverlapped=0x0) returned 1 [0191.631] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0191.631] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0191.631] WriteFile (in: hFile=0x2f4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x38cf9ac, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cf9ac*=0x18, lpOverlapped=0x0) returned 1 [0191.631] FlushFileBuffers (hFile=0x2f4) returned 1 [0191.634] FlushFileBuffers (hFile=0x2f8) returned 1 [0191.636] CloseHandle (hObject=0x2f4) returned 1 [0191.636] CloseHandle (hObject=0x2f8) returned 1 [0191.636] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide_alternate.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_wide_alternate.db")) returned 1 [0191.637] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1280.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1280.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0191.637] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x38cfc78 | out: lpFileSize=0x38cfc78*=24) returned 1 [0191.637] CloseHandle (hObject=0x2f8) returned 1 [0191.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1280.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1280.db")) returned 0x2020 [0191.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1280.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1280.db")) returned 0x2020 [0191.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1280.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1280.db.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0191.637] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1280.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1280.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0191.637] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0191.638] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0191.638] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1280.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1280.db.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x2f4 [0191.638] ReadFile (in: hFile=0x2f8, lpBuffer=0x3d62020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x38cfc54, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesRead=0x38cfc54*=0x18, lpOverlapped=0x0) returned 1 [0191.639] WriteFile (in: hFile=0x2f4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x20, lpOverlapped=0x0) returned 1 [0191.640] WriteFile (in: hFile=0x2f4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x102, lpOverlapped=0x0) returned 1 [0191.640] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0191.640] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0191.640] WriteFile (in: hFile=0x2f8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x38cf9ac, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cf9ac*=0x18, lpOverlapped=0x0) returned 1 [0191.640] FlushFileBuffers (hFile=0x2f8) returned 1 [0191.645] FlushFileBuffers (hFile=0x2f4) returned 1 [0191.648] CloseHandle (hObject=0x2f8) returned 1 [0191.648] CloseHandle (hObject=0x2f4) returned 1 [0191.648] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1280.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1280.db")) returned 1 [0191.649] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_16.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_16.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0191.650] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x38cfc78 | out: lpFileSize=0x38cfc78*=1048576) returned 1 [0191.650] CloseHandle (hObject=0x2f4) returned 1 [0191.650] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_16.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_16.db")) returned 0x2020 [0191.650] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_16.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_16.db")) returned 0x2020 [0191.650] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_16.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_16.db.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0191.650] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_16.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_16.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0191.650] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0191.650] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0191.650] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_16.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_16.db.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x2f8 [0191.651] ReadFile (in: hFile=0x2f4, lpBuffer=0x3d62020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x38cfc54, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesRead=0x38cfc54*=0x100000, lpOverlapped=0x0) returned 1 [0191.680] WriteFile (in: hFile=0x2f8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x100010, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x100010, lpOverlapped=0x0) returned 1 [0191.929] WriteFile (in: hFile=0x2f8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x102, lpOverlapped=0x0) returned 1 [0191.930] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0191.930] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0191.930] WriteFile (in: hFile=0x2f4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x38cf9ac, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cf9ac*=0x100000, lpOverlapped=0x0) returned 1 [0191.932] FlushFileBuffers (hFile=0x2f4) returned 1 [0191.946] FlushFileBuffers (hFile=0x2f8) returned 1 [0191.948] CloseHandle (hObject=0x2f4) returned 1 [0191.948] CloseHandle (hObject=0x2f8) returned 1 [0191.949] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_16.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_16.db")) returned 1 [0191.949] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1920.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1920.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0191.950] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x38cfc78 | out: lpFileSize=0x38cfc78*=24) returned 1 [0191.950] CloseHandle (hObject=0x2f8) returned 1 [0191.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1920.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1920.db")) returned 0x2020 [0191.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1920.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1920.db")) returned 0x2020 [0191.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1920.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1920.db.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0191.951] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1920.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1920.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0191.951] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0191.951] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0191.951] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1920.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1920.db.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x2f4 [0191.951] ReadFile (in: hFile=0x2f8, lpBuffer=0x3d62020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x38cfc54, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesRead=0x38cfc54*=0x18, lpOverlapped=0x0) returned 1 [0191.952] WriteFile (in: hFile=0x2f4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x20, lpOverlapped=0x0) returned 1 [0191.953] WriteFile (in: hFile=0x2f4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x102, lpOverlapped=0x0) returned 1 [0191.954] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0191.954] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0191.954] WriteFile (in: hFile=0x2f8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x38cf9ac, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cf9ac*=0x18, lpOverlapped=0x0) returned 1 [0191.954] FlushFileBuffers (hFile=0x2f8) returned 1 [0191.956] FlushFileBuffers (hFile=0x2f4) returned 1 [0191.958] CloseHandle (hObject=0x2f8) returned 1 [0191.958] CloseHandle (hObject=0x2f4) returned 1 [0191.958] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1920.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1920.db")) returned 1 [0191.959] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0191.959] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x38cfc78 | out: lpFileSize=0x38cfc78*=1048576) returned 1 [0191.959] CloseHandle (hObject=0x2f4) returned 1 [0191.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db")) returned 0x2020 [0191.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db")) returned 0x2020 [0191.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0191.960] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0191.960] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0191.960] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0191.960] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x2f8 [0191.960] ReadFile (in: hFile=0x2f4, lpBuffer=0x3d62020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x38cfc54, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesRead=0x38cfc54*=0x100000, lpOverlapped=0x0) returned 1 [0191.988] WriteFile (in: hFile=0x2f8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x100010, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x100010, lpOverlapped=0x0) returned 1 [0192.131] WriteFile (in: hFile=0x2f8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x102, lpOverlapped=0x0) returned 1 [0192.131] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0192.131] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0192.131] WriteFile (in: hFile=0x2f4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x38cf9ac, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cf9ac*=0x100000, lpOverlapped=0x0) returned 1 [0192.134] FlushFileBuffers (hFile=0x2f4) returned 1 [0192.149] FlushFileBuffers (hFile=0x2f8) returned 1 [0192.151] CloseHandle (hObject=0x2f4) returned 1 [0192.151] CloseHandle (hObject=0x2f8) returned 1 [0192.151] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db")) returned 1 [0192.152] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_2560.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_2560.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0192.153] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x38cfc78 | out: lpFileSize=0x38cfc78*=24) returned 1 [0192.153] CloseHandle (hObject=0x2f8) returned 1 [0192.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_2560.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_2560.db")) returned 0x2020 [0192.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_2560.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_2560.db")) returned 0x2020 [0192.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_2560.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_2560.db.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0192.153] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_2560.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_2560.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0192.153] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0192.153] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0192.154] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_2560.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_2560.db.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x2f4 [0192.154] ReadFile (in: hFile=0x2f8, lpBuffer=0x3d62020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x38cfc54, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesRead=0x38cfc54*=0x18, lpOverlapped=0x0) returned 1 [0192.155] WriteFile (in: hFile=0x2f4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x20, lpOverlapped=0x0) returned 1 [0192.156] WriteFile (in: hFile=0x2f4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x102, lpOverlapped=0x0) returned 1 [0192.157] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0192.157] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0192.157] WriteFile (in: hFile=0x2f8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x38cf9ac, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cf9ac*=0x18, lpOverlapped=0x0) returned 1 [0192.157] FlushFileBuffers (hFile=0x2f8) returned 1 [0192.159] FlushFileBuffers (hFile=0x2f4) returned 1 [0192.164] CloseHandle (hObject=0x2f8) returned 1 [0192.165] CloseHandle (hObject=0x2f4) returned 1 [0192.165] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_2560.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_2560.db")) returned 1 [0192.166] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_32.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0192.166] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x38cfc78 | out: lpFileSize=0x38cfc78*=1048576) returned 1 [0192.166] CloseHandle (hObject=0x2f4) returned 1 [0192.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_32.db")) returned 0x2020 [0192.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_32.db")) returned 0x2020 [0192.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_32.db.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0192.166] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_32.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0192.166] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0192.166] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0192.167] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_32.db.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x2f8 [0192.167] ReadFile (in: hFile=0x2f4, lpBuffer=0x3d62020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x38cfc54, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesRead=0x38cfc54*=0x100000, lpOverlapped=0x0) returned 1 [0192.193] WriteFile (in: hFile=0x2f8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x100010, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x100010, lpOverlapped=0x0) returned 1 [0192.278] WriteFile (in: hFile=0x2f8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x102, lpOverlapped=0x0) returned 1 [0192.279] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0192.279] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0192.279] WriteFile (in: hFile=0x2f4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x38cf9ac, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cf9ac*=0x100000, lpOverlapped=0x0) returned 1 [0192.281] FlushFileBuffers (hFile=0x2f4) returned 1 [0192.298] FlushFileBuffers (hFile=0x2f8) returned 1 [0192.301] CloseHandle (hObject=0x2f4) returned 1 [0192.301] CloseHandle (hObject=0x2f8) returned 1 [0192.301] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_32.db")) returned 1 [0192.302] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_48.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_48.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0192.302] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x38cfc78 | out: lpFileSize=0x38cfc78*=1048576) returned 1 [0192.302] CloseHandle (hObject=0x2f8) returned 1 [0192.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_48.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_48.db")) returned 0x2020 [0192.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_48.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_48.db")) returned 0x2020 [0192.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_48.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_48.db.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0192.303] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_48.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_48.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0192.303] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0192.303] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0192.303] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_48.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_48.db.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x2f4 [0192.303] ReadFile (in: hFile=0x2f8, lpBuffer=0x3d62020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x38cfc54, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesRead=0x38cfc54*=0x100000, lpOverlapped=0x0) returned 1 [0192.335] WriteFile (in: hFile=0x2f4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x100010, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x100010, lpOverlapped=0x0) returned 1 [0192.600] WriteFile (in: hFile=0x2f4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x102, lpOverlapped=0x0) returned 1 [0192.601] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0192.601] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0192.601] WriteFile (in: hFile=0x2f8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x38cf9ac, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cf9ac*=0x100000, lpOverlapped=0x0) returned 1 [0192.606] FlushFileBuffers (hFile=0x2f8) returned 1 [0192.621] FlushFileBuffers (hFile=0x2f4) returned 1 [0192.624] CloseHandle (hObject=0x2f8) returned 1 [0192.624] CloseHandle (hObject=0x2f4) returned 1 [0192.624] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_48.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_48.db")) returned 1 [0192.626] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\OfflineCache\\index.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\offlinecache\\index.sqlite"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0192.627] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x38cfc78 | out: lpFileSize=0x38cfc78*=262144) returned 1 [0192.627] CloseHandle (hObject=0x2f4) returned 1 [0192.627] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\OfflineCache\\index.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\offlinecache\\index.sqlite")) returned 0x20 [0192.627] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\OfflineCache\\index.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\offlinecache\\index.sqlite")) returned 0x20 [0192.627] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\OfflineCache\\index.sqlite.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\offlinecache\\index.sqlite.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0192.627] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\OfflineCache\\index.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\offlinecache\\index.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0192.627] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0192.627] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0192.627] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\OfflineCache\\index.sqlite.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\offlinecache\\index.sqlite.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2f8 [0192.628] ReadFile (in: hFile=0x2f4, lpBuffer=0x3d62020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x38cfc54, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesRead=0x38cfc54*=0x40000, lpOverlapped=0x0) returned 1 [0192.636] WriteFile (in: hFile=0x2f8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x40010, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x40010, lpOverlapped=0x0) returned 1 [0192.642] WriteFile (in: hFile=0x2f8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0xf2, lpOverlapped=0x0) returned 1 [0192.642] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0192.642] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0192.642] WriteFile (in: hFile=0x2f4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x38cf9ac, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cf9ac*=0x40000, lpOverlapped=0x0) returned 1 [0192.643] FlushFileBuffers (hFile=0x2f4) returned 1 [0192.791] FlushFileBuffers (hFile=0x2f8) returned 1 [0192.793] CloseHandle (hObject=0x2f4) returned 1 [0192.793] CloseHandle (hObject=0x2f8) returned 1 [0192.793] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\OfflineCache\\index.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\offlinecache\\index.sqlite")) returned 1 [0192.798] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\spartan.edb" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\spartan.edb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0192.799] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x38cfc78 | out: lpFileSize=0x38cfc78*=2097152) returned 1 [0192.799] CloseHandle (hObject=0x2d4) returned 1 [0192.799] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\spartan.edb" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\spartan.edb")) returned 0x2020 [0192.799] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\spartan.edb" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\spartan.edb")) returned 0x2020 [0192.799] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\spartan.edb.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\spartan.edb.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0192.799] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\spartan.edb" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\spartan.edb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0192.799] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0192.799] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0192.799] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\spartan.edb.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\spartan.edb.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x2e8 [0192.840] ReadFile (in: hFile=0x2d4, lpBuffer=0x3d62020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x38cfc54, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesRead=0x38cfc54*=0x110100, lpOverlapped=0x0) returned 1 [0192.891] WriteFile (in: hFile=0x2e8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x110100, lpOverlapped=0x0) returned 1 [0193.293] ReadFile (in: hFile=0x2d4, lpBuffer=0x3d62020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x38cfc54, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesRead=0x38cfc54*=0xeff00, lpOverlapped=0x0) returned 1 [0193.305] WriteFile (in: hFile=0x2e8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0xeff10, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0xeff10, lpOverlapped=0x0) returned 1 [0193.616] WriteFile (in: hFile=0x2e8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0xf2, lpOverlapped=0x0) returned 1 [0193.617] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0193.617] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0193.617] WriteFile (in: hFile=0x2d4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x38cf9ac, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cf9ac*=0x110102, lpOverlapped=0x0) returned 1 [0193.655] WriteFile (in: hFile=0x2d4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0xefefe, lpNumberOfBytesWritten=0x38cf9ac, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cf9ac*=0xefefe, lpOverlapped=0x0) returned 1 [0193.658] FlushFileBuffers (hFile=0x2d4) returned 1 [0193.674] FlushFileBuffers (hFile=0x2e8) returned 1 [0194.475] CloseHandle (hObject=0x2d4) returned 1 [0194.475] CloseHandle (hObject=0x2e8) returned 1 [0194.475] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\spartan.edb" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\spartan.edb")) returned 1 [0194.494] ResetEvent (hEvent=0x2a0) returned 1 [0194.494] SetEvent (hEvent=0x2a4) returned 1 [0194.495] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\IndexedDB.edb" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\indexeddb.edb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0194.498] GetFileSizeEx (in: hFile=0x2e8, lpFileSize=0x38cfc78 | out: lpFileSize=0x38cfc78*=6291456) returned 1 [0194.498] CloseHandle (hObject=0x2e8) returned 1 [0194.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\IndexedDB.edb" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\indexeddb.edb")) returned 0x220 [0194.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\IndexedDB.edb" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\indexeddb.edb")) returned 0x220 [0194.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\IndexedDB.edb.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\indexeddb.edb.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0194.499] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\IndexedDB.edb" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\indexeddb.edb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0194.499] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0194.499] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0194.499] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\IndexedDB.edb.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\indexeddb.edb.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2d4 [0194.499] ReadFile (in: hFile=0x2e8, lpBuffer=0x3d62020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x38cfc54, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesRead=0x38cfc54*=0x110100, lpOverlapped=0x0) returned 1 [0194.715] WriteFile (in: hFile=0x2d4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x110100, lpOverlapped=0x0) returned 1 [0194.861] ReadFile (in: hFile=0x2e8, lpBuffer=0x3d62020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x38cfc54, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesRead=0x38cfc54*=0x110100, lpOverlapped=0x0) returned 1 [0194.905] WriteFile (in: hFile=0x2d4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x110100, lpOverlapped=0x0) returned 1 [0195.250] ReadFile (in: hFile=0x2e8, lpBuffer=0x3d62020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x38cfc54, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesRead=0x38cfc54*=0x110100, lpOverlapped=0x0) returned 1 [0195.284] WriteFile (in: hFile=0x2d4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x110100, lpOverlapped=0x0) returned 1 [0195.618] ReadFile (in: hFile=0x2e8, lpBuffer=0x3d62020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x38cfc54, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesRead=0x38cfc54*=0x110100, lpOverlapped=0x0) returned 1 [0195.893] WriteFile (in: hFile=0x2d4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x110100, lpOverlapped=0x0) returned 1 [0195.915] ReadFile (in: hFile=0x2e8, lpBuffer=0x3d62020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x38cfc54, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesRead=0x38cfc54*=0x110100, lpOverlapped=0x0) returned 1 [0196.097] WriteFile (in: hFile=0x2d4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x110100, lpOverlapped=0x0) returned 1 [0196.120] ReadFile (in: hFile=0x2e8, lpBuffer=0x3d62020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x38cfc54, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesRead=0x38cfc54*=0xafb00, lpOverlapped=0x0) returned 1 [0196.224] WriteFile (in: hFile=0x2d4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0xafb10, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0xafb10, lpOverlapped=0x0) returned 1 [0196.240] WriteFile (in: hFile=0x2d4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0xf2, lpOverlapped=0x0) returned 1 [0196.241] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0196.241] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0196.241] WriteFile (in: hFile=0x2e8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x38cf9ac, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cf9ac*=0x110102, lpOverlapped=0x0) returned 1 [0196.255] WriteFile (in: hFile=0x2e8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x38cf9ac, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cf9ac*=0x110102, lpOverlapped=0x0) returned 1 [0196.388] WriteFile (in: hFile=0x2e8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x38cf9ac, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cf9ac*=0x110102, lpOverlapped=0x0) returned 1 [0196.402] WriteFile (in: hFile=0x2e8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x38cf9ac, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cf9ac*=0x110102, lpOverlapped=0x0) returned 1 [0196.416] WriteFile (in: hFile=0x2e8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x38cf9ac, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cf9ac*=0x110102, lpOverlapped=0x0) returned 1 [0196.561] WriteFile (in: hFile=0x2e8, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0xafaf6, lpNumberOfBytesWritten=0x38cf9ac, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cf9ac*=0xafaf6, lpOverlapped=0x0) returned 1 [0196.563] FlushFileBuffers (hFile=0x2e8) returned 1 [0196.577] FlushFileBuffers (hFile=0x2d4) returned 1 [0196.597] CloseHandle (hObject=0x2e8) returned 1 [0196.597] CloseHandle (hObject=0x2d4) returned 1 [0196.597] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\IndexedDB.edb" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\indexeddb.edb")) returned 1 [0196.607] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0197.000] ResetEvent (hEvent=0x2a0) returned 1 [0197.000] SetEvent (hEvent=0x2a4) returned 1 [0197.000] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0197.001] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0197.189] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0197.542] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\content-prefs.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\content-prefs.sqlite"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0197.546] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x38cfc78 | out: lpFileSize=0x38cfc78*=229376) returned 1 [0197.546] CloseHandle (hObject=0x2d4) returned 1 [0197.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\content-prefs.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\content-prefs.sqlite")) returned 0x20 [0197.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\content-prefs.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\content-prefs.sqlite")) returned 0x20 [0197.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\content-prefs.sqlite.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\content-prefs.sqlite.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0197.552] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\content-prefs.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\content-prefs.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0197.552] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0197.552] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0197.552] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\content-prefs.sqlite.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\content-prefs.sqlite.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x218 [0197.556] ReadFile (in: hFile=0x2d4, lpBuffer=0x3d62020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x38cfc54, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesRead=0x38cfc54*=0x38000, lpOverlapped=0x0) returned 1 [0197.572] WriteFile (in: hFile=0x218, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x38010, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x38010, lpOverlapped=0x0) returned 1 [0197.578] WriteFile (in: hFile=0x218, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x102, lpOverlapped=0x0) returned 1 [0197.578] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0197.578] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0197.578] WriteFile (in: hFile=0x2d4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x38000, lpNumberOfBytesWritten=0x38cf9ac, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cf9ac*=0x38000, lpOverlapped=0x0) returned 1 [0197.579] FlushFileBuffers (hFile=0x2d4) returned 1 [0197.685] FlushFileBuffers (hFile=0x218) returned 1 [0197.727] CloseHandle (hObject=0x2d4) returned 1 [0197.727] CloseHandle (hObject=0x218) returned 1 [0197.728] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\content-prefs.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\content-prefs.sqlite")) returned 1 [0197.730] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cookies.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cookies.sqlite"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218 [0197.730] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x38cfc78 | out: lpFileSize=0x38cfc78*=524288) returned 1 [0197.731] CloseHandle (hObject=0x218) returned 1 [0197.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cookies.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cookies.sqlite")) returned 0x20 [0197.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cookies.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cookies.sqlite")) returned 0x20 [0197.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cookies.sqlite.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cookies.sqlite.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0197.731] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cookies.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cookies.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218 [0197.731] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0197.731] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0197.731] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cookies.sqlite.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cookies.sqlite.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d4 [0197.732] ReadFile (in: hFile=0x218, lpBuffer=0x3d62020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x38cfc54, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesRead=0x38cfc54*=0x80000, lpOverlapped=0x0) returned 1 [0197.750] WriteFile (in: hFile=0x2d4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x80010, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x80010, lpOverlapped=0x0) returned 1 [0197.761] WriteFile (in: hFile=0x2d4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0xf2, lpOverlapped=0x0) returned 1 [0197.762] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0197.762] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0197.762] WriteFile (in: hFile=0x218, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x38cf9ac, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cf9ac*=0x80000, lpOverlapped=0x0) returned 1 [0197.763] FlushFileBuffers (hFile=0x218) returned 1 [0198.254] FlushFileBuffers (hFile=0x2d4) returned 1 [0198.256] CloseHandle (hObject=0x218) returned 1 [0198.256] CloseHandle (hObject=0x2d4) returned 1 [0198.256] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cookies.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cookies.sqlite")) returned 1 [0198.261] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key3.db" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\key3.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0198.261] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x38cfc78 | out: lpFileSize=0x38cfc78*=16384) returned 1 [0198.261] CloseHandle (hObject=0x2d4) returned 1 [0198.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key3.db" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\key3.db")) returned 0x20 [0198.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key3.db" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\key3.db")) returned 0x20 [0198.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key3.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\key3.db.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0198.262] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key3.db" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\key3.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0198.262] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0198.262] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0198.262] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key3.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\key3.db.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x218 [0198.263] ReadFile (in: hFile=0x2d4, lpBuffer=0x3d62020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x38cfc54, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesRead=0x38cfc54*=0x4000, lpOverlapped=0x0) returned 1 [0198.264] WriteFile (in: hFile=0x218, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x4010, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x4010, lpOverlapped=0x0) returned 1 [0198.266] WriteFile (in: hFile=0x218, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0xe2, lpOverlapped=0x0) returned 1 [0198.266] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0198.266] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0198.266] WriteFile (in: hFile=0x2d4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x4000, lpNumberOfBytesWritten=0x38cf9ac, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cf9ac*=0x4000, lpOverlapped=0x0) returned 1 [0198.266] FlushFileBuffers (hFile=0x2d4) returned 1 [0198.274] FlushFileBuffers (hFile=0x218) returned 1 [0198.314] CloseHandle (hObject=0x2d4) returned 1 [0198.314] CloseHandle (hObject=0x218) returned 1 [0198.314] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key3.db" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\key3.db")) returned 1 [0198.316] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\permissions.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\permissions.sqlite"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218 [0198.317] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x38cfc78 | out: lpFileSize=0x38cfc78*=98304) returned 1 [0198.317] CloseHandle (hObject=0x218) returned 1 [0198.317] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\permissions.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\permissions.sqlite")) returned 0x20 [0198.317] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\permissions.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\permissions.sqlite")) returned 0x20 [0198.317] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\permissions.sqlite.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\permissions.sqlite.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0198.317] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\permissions.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\permissions.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218 [0198.318] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0198.318] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0198.318] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\permissions.sqlite.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\permissions.sqlite.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d4 [0198.318] ReadFile (in: hFile=0x218, lpBuffer=0x3d62020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x38cfc54, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesRead=0x38cfc54*=0x18000, lpOverlapped=0x0) returned 1 [0198.322] WriteFile (in: hFile=0x2d4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x18010, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x18010, lpOverlapped=0x0) returned 1 [0198.325] WriteFile (in: hFile=0x2d4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x102, lpOverlapped=0x0) returned 1 [0198.325] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0198.325] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0198.326] WriteFile (in: hFile=0x218, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x18000, lpNumberOfBytesWritten=0x38cf9ac, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cf9ac*=0x18000, lpOverlapped=0x0) returned 1 [0198.326] FlushFileBuffers (hFile=0x218) returned 1 [0198.476] FlushFileBuffers (hFile=0x2d4) returned 1 [0198.480] CloseHandle (hObject=0x218) returned 1 [0198.480] CloseHandle (hObject=0x2d4) returned 1 [0198.480] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\permissions.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\permissions.sqlite")) returned 1 [0198.482] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\places.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\places.sqlite"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0198.483] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x38cfc78 | out: lpFileSize=0x38cfc78*=5242880) returned 1 [0198.483] CloseHandle (hObject=0x2d4) returned 1 [0198.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\places.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\places.sqlite")) returned 0x20 [0198.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\places.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\places.sqlite")) returned 0x20 [0198.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\places.sqlite.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\places.sqlite.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0198.483] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\places.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\places.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4 [0198.483] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0198.483] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc40 | out: lpNewFilePointer=0x0) returned 1 [0198.483] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\places.sqlite.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\places.sqlite.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x218 [0198.484] ReadFile (in: hFile=0x2d4, lpBuffer=0x3d62020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x38cfc54, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesRead=0x38cfc54*=0x110100, lpOverlapped=0x0) returned 1 [0198.690] WriteFile (in: hFile=0x218, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x110100, lpOverlapped=0x0) returned 1 [0198.714] ReadFile (in: hFile=0x2d4, lpBuffer=0x3d62020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x38cfc54, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesRead=0x38cfc54*=0x110100, lpOverlapped=0x0) returned 1 [0198.950] WriteFile (in: hFile=0x218, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x110100, lpOverlapped=0x0) returned 1 [0199.181] ReadFile (in: hFile=0x2d4, lpBuffer=0x3d62020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x38cfc54, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesRead=0x38cfc54*=0x110100, lpOverlapped=0x0) returned 1 [0199.217] WriteFile (in: hFile=0x218, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x110100, lpOverlapped=0x0) returned 1 [0199.353] ReadFile (in: hFile=0x2d4, lpBuffer=0x3d62020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x38cfc54, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesRead=0x38cfc54*=0x110100, lpOverlapped=0x0) returned 1 [0199.373] WriteFile (in: hFile=0x218, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0x110100, lpOverlapped=0x0) returned 1 [0199.492] ReadFile (in: hFile=0x2d4, lpBuffer=0x3d62020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x38cfc54, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesRead=0x38cfc54*=0xbfc00, lpOverlapped=0x0) returned 1 [0199.500] WriteFile (in: hFile=0x218, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0xbfc10, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0xbfc10, lpOverlapped=0x0) returned 1 [0199.517] WriteFile (in: hFile=0x218, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x38cfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cfc2c*=0xf2, lpOverlapped=0x0) returned 1 [0199.517] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0199.517] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cf9a0 | out: lpNewFilePointer=0x0) returned 1 [0199.517] WriteFile (in: hFile=0x2d4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x38cf9ac, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cf9ac*=0x110102, lpOverlapped=0x0) returned 1 [0199.532] WriteFile (in: hFile=0x2d4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x38cf9ac, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cf9ac*=0x110102, lpOverlapped=0x0) returned 1 [0199.655] WriteFile (in: hFile=0x2d4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x38cf9ac, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cf9ac*=0x110102, lpOverlapped=0x0) returned 1 [0199.669] WriteFile (in: hFile=0x2d4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x38cf9ac, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cf9ac*=0x110102, lpOverlapped=0x0) returned 1 [0200.182] WriteFile (in: hFile=0x2d4, lpBuffer=0x3d62020*, nNumberOfBytesToWrite=0xbfbf8, lpNumberOfBytesWritten=0x38cf9ac, lpOverlapped=0x0 | out: lpBuffer=0x3d62020*, lpNumberOfBytesWritten=0x38cf9ac*=0xbfbf8, lpOverlapped=0x0) returned 1 [0200.267] FlushFileBuffers (hFile=0x2d4) returned 1 [0204.727] FlushFileBuffers (hFile=0x218) returned 1 [0206.342] CloseHandle (hObject=0x2d4) returned 1 [0206.342] CloseHandle (hObject=0x218) returned 1 [0206.342] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\places.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\places.sqlite")) returned 1 [0206.353] GetProcessHeap () returned 0x12c0000 [0206.353] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x50) returned 0x4059840 [0206.353] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x74c00000 [0206.353] GetProcAddress (hModule=0x74c00000, lpProcName="Wow64RevertWow64FsRedirection") returned 0x74c16b50 [0206.353] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0206.353] GetProcessHeap () returned 0x12c0000 [0206.353] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x4059840 | out: hHeap=0x12c0000) returned 1 [0206.353] SetEvent (hEvent=0x2a0) returned 1 [0206.353] SetEvent (hEvent=0x29c) returned 1 [0206.353] SetEvent (hEvent=0x2a4) returned 1 [0206.353] GetProcessHeap () returned 0x12c0000 [0206.353] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3d62020 | out: hHeap=0x12c0000) returned 1 [0206.359] GetProcessHeap () returned 0x12c0000 [0206.359] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12eb878 | out: hHeap=0x12c0000) returned 1 [0206.359] GetProcessHeap () returned 0x12c0000 [0206.359] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3c60048 | out: hHeap=0x12c0000) returned 1 [0206.359] GetProcessHeap () returned 0x12c0000 [0206.359] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3c70050 | out: hHeap=0x12c0000) returned 1 Thread: id = 111 os_tid = 0x370 [0161.445] GetProcessHeap () returned 0x12c0000 [0161.445] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3c80058 [0161.446] GetProcessHeap () returned 0x12c0000 [0161.446] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x10000) returned 0x3c90060 [0161.446] GetProcessHeap () returned 0x12c0000 [0161.446] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x28) returned 0x12eb9c8 [0161.446] GetProcessHeap () returned 0x12c0000 [0161.446] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x110102) returned 0x3e86020 [0161.449] GetProcessHeap () returned 0x12c0000 [0161.449] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x50) returned 0x12d1a68 [0161.449] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x74c00000 [0161.450] GetProcAddress (hModule=0x74c00000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x74c16b30 [0161.450] Wow64DisableWow64FsRedirection (in: OldValue=0x3a0fec0 | out: OldValue=0x3a0fec0*=0x0) returned 1 [0161.450] GetProcessHeap () returned 0x12c0000 [0161.450] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12d1a68 | out: hHeap=0x12c0000) returned 1 [0161.450] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.450] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.450] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.450] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.450] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.450] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.450] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.450] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.450] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.450] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.450] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.451] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.451] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.451] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.451] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.451] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.451] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.451] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.451] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.451] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.451] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.451] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.451] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.451] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.452] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.452] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.452] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.452] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.452] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.452] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.452] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.452] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.452] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.452] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.452] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.452] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.452] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.453] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.453] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.453] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.453] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.453] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.453] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.453] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.453] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.453] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.453] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.453] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.453] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.454] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.454] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.454] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.454] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.454] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.454] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.454] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.454] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.454] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.454] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.454] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.454] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.454] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.455] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.455] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.455] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.455] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.455] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.455] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.455] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.455] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.455] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.455] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.455] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.455] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.455] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.456] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.456] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.456] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.456] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.456] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.456] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.456] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.456] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.456] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.456] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.456] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.456] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.457] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.457] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.457] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.457] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.457] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.457] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.457] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.457] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.457] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.457] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.457] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.457] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.458] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.458] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.458] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.458] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.458] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.458] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.458] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.458] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.458] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.458] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.458] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.458] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.458] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.459] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.459] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.459] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.459] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.459] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.459] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.459] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.459] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.459] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.459] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.459] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.459] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.459] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.460] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.460] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.460] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.460] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.460] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.460] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.461] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.461] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.461] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.461] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.461] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.461] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.461] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.461] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.461] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.461] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.461] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.461] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.461] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.462] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.462] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.462] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.462] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.462] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.462] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.462] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.462] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.462] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.462] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.462] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.462] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.462] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.463] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.463] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.463] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.463] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.463] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.463] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.463] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.463] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.463] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.463] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.463] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.463] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.464] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.464] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.464] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.464] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.464] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.464] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.464] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.464] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.464] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.464] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.464] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.464] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.464] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.465] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.465] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.465] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.465] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.465] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.465] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.465] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.465] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.465] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.465] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.465] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.465] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.466] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.466] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.466] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.466] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.466] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.466] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.466] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.466] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.466] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.466] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.466] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.466] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.466] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.467] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.467] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.467] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.467] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.467] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.467] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.467] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.467] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.467] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.467] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.467] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.467] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.467] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.468] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.468] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.468] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.468] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.468] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.468] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.468] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.468] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.468] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.468] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.468] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.468] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.469] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.469] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.469] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.469] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.469] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.469] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.469] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.469] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.469] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.469] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.470] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.470] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.470] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.470] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.470] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.470] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0161.470] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0180.748] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fe30 | out: lpNewFilePointer=0x0) returned 1 [0180.748] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fe30 | out: lpNewFilePointer=0x0) returned 1 [0180.748] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Network\\Downloader\\qmgr.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\qmgr.db.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2d8 [0180.751] ReadFile (in: hFile=0x2c8, lpBuffer=0x3e86020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x3a0fe44, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesRead=0x3a0fe44*=0x110100, lpOverlapped=0x0) returned 1 [0180.912] WriteFile (in: hFile=0x2d8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x110100, lpOverlapped=0x0) returned 1 [0181.047] ReadFile (in: hFile=0x2c8, lpBuffer=0x3e86020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x3a0fe44, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesRead=0x3a0fe44*=0x2ff00, lpOverlapped=0x0) returned 1 [0181.051] WriteFile (in: hFile=0x2d8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x2ff10, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x2ff10, lpOverlapped=0x0) returned 1 [0181.055] WriteFile (in: hFile=0x2d8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0xe2, lpOverlapped=0x0) returned 1 [0181.055] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fb90 | out: lpNewFilePointer=0x0) returned 1 [0181.055] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fb90 | out: lpNewFilePointer=0x0) returned 1 [0181.055] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x3a0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fb9c*=0x110102, lpOverlapped=0x0) returned 1 [0181.062] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x2fefe, lpNumberOfBytesWritten=0x3a0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fb9c*=0x2fefe, lpOverlapped=0x0) returned 1 [0181.063] FlushFileBuffers (hFile=0x2c8) returned 1 [0181.072] FlushFileBuffers (hFile=0x2d8) returned 1 [0181.283] CloseHandle (hObject=0x2c8) returned 1 [0181.283] CloseHandle (hObject=0x2d8) returned 1 [0181.283] DeleteFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Network\\Downloader\\qmgr.db" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\qmgr.db")) returned 1 [0181.295] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0181.446] ResetEvent (hEvent=0x2a0) returned 1 [0181.446] SetEvent (hEvent=0x2a4) returned 1 [0181.446] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Windows.edb" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\windows.edb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0181.447] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x3a0fe68 | out: lpFileSize=0x3a0fe68*=25100288) returned 1 [0181.447] CloseHandle (hObject=0x2c8) returned 1 [0181.447] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Windows.edb" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\windows.edb")) returned 0x2220 [0181.447] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Windows.edb" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\windows.edb")) returned 0x2220 [0181.447] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Windows.edb.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\windows.edb.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0181.447] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Windows.edb" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\windows.edb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0181.447] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fe30 | out: lpNewFilePointer=0x0) returned 1 [0181.447] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fe30 | out: lpNewFilePointer=0x0) returned 1 [0181.448] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Windows.edb.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\windows.edb.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2220, hTemplateFile=0x0) returned 0x2ec [0181.452] ReadFile (in: hFile=0x2c8, lpBuffer=0x3e86020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x3a0fe44, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesRead=0x3a0fe44*=0x110100, lpOverlapped=0x0) returned 1 [0181.612] WriteFile (in: hFile=0x2ec, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x110100, lpOverlapped=0x0) returned 1 [0181.634] ReadFile (in: hFile=0x2c8, lpBuffer=0x3e86020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x3a0fe44, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesRead=0x3a0fe44*=0x110100, lpOverlapped=0x0) returned 1 [0181.837] WriteFile (in: hFile=0x2ec, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x110100, lpOverlapped=0x0) returned 1 [0182.000] ReadFile (in: hFile=0x2c8, lpBuffer=0x3e86020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x3a0fe44, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesRead=0x3a0fe44*=0x110100, lpOverlapped=0x0) returned 1 [0182.058] WriteFile (in: hFile=0x2ec, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x110100, lpOverlapped=0x0) returned 1 [0182.210] ReadFile (in: hFile=0x2c8, lpBuffer=0x3e86020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x3a0fe44, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesRead=0x3a0fe44*=0x110100, lpOverlapped=0x0) returned 1 [0182.234] WriteFile (in: hFile=0x2ec, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x110100, lpOverlapped=0x0) returned 1 [0182.286] ReadFile (in: hFile=0x2c8, lpBuffer=0x3e86020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x3a0fe44, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesRead=0x3a0fe44*=0x110100, lpOverlapped=0x0) returned 1 [0182.431] WriteFile (in: hFile=0x2ec, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x110100, lpOverlapped=0x0) returned 1 [0182.457] ReadFile (in: hFile=0x2c8, lpBuffer=0x3e86020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x3a0fe44, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesRead=0x3a0fe44*=0x110100, lpOverlapped=0x0) returned 1 [0182.612] WriteFile (in: hFile=0x2ec, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x110100, lpOverlapped=0x0) returned 1 [0182.636] ReadFile (in: hFile=0x2c8, lpBuffer=0x3e86020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x3a0fe44, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesRead=0x3a0fe44*=0x110100, lpOverlapped=0x0) returned 1 [0182.804] WriteFile (in: hFile=0x2ec, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x110100, lpOverlapped=0x0) returned 1 [0182.898] ReadFile (in: hFile=0x2c8, lpBuffer=0x3e86020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x3a0fe44, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesRead=0x3a0fe44*=0x110100, lpOverlapped=0x0) returned 1 [0183.020] WriteFile (in: hFile=0x2ec, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x110100, lpOverlapped=0x0) returned 1 [0183.045] ReadFile (in: hFile=0x2c8, lpBuffer=0x3e86020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x3a0fe44, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesRead=0x3a0fe44*=0x110100, lpOverlapped=0x0) returned 1 [0183.144] WriteFile (in: hFile=0x2ec, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x110100, lpOverlapped=0x0) returned 1 [0183.246] ReadFile (in: hFile=0x2c8, lpBuffer=0x3e86020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x3a0fe44, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesRead=0x3a0fe44*=0x110100, lpOverlapped=0x0) returned 1 [0183.291] WriteFile (in: hFile=0x2ec, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x110100, lpOverlapped=0x0) returned 1 [0183.402] ReadFile (in: hFile=0x2c8, lpBuffer=0x3e86020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x3a0fe44, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesRead=0x3a0fe44*=0x110100, lpOverlapped=0x0) returned 1 [0183.427] WriteFile (in: hFile=0x2ec, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x110100, lpOverlapped=0x0) returned 1 [0183.596] ReadFile (in: hFile=0x2c8, lpBuffer=0x3e86020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x3a0fe44, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesRead=0x3a0fe44*=0x110100, lpOverlapped=0x0) returned 1 [0183.809] WriteFile (in: hFile=0x2ec, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x110100, lpOverlapped=0x0) returned 1 [0183.869] ReadFile (in: hFile=0x2c8, lpBuffer=0x3e86020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x3a0fe44, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesRead=0x3a0fe44*=0x110100, lpOverlapped=0x0) returned 1 [0183.970] WriteFile (in: hFile=0x2ec, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x110100, lpOverlapped=0x0) returned 1 [0184.014] ReadFile (in: hFile=0x2c8, lpBuffer=0x3e86020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x3a0fe44, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesRead=0x3a0fe44*=0x110100, lpOverlapped=0x0) returned 1 [0184.177] WriteFile (in: hFile=0x2ec, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x110100, lpOverlapped=0x0) returned 1 [0184.329] ReadFile (in: hFile=0x2c8, lpBuffer=0x3e86020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x3a0fe44, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesRead=0x3a0fe44*=0x110100, lpOverlapped=0x0) returned 1 [0184.352] WriteFile (in: hFile=0x2ec, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x110100, lpOverlapped=0x0) returned 1 [0184.694] ReadFile (in: hFile=0x2c8, lpBuffer=0x3e86020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x3a0fe44, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesRead=0x3a0fe44*=0x110100, lpOverlapped=0x0) returned 1 [0184.941] WriteFile (in: hFile=0x2ec, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x110100, lpOverlapped=0x0) returned 1 [0184.969] ReadFile (in: hFile=0x2c8, lpBuffer=0x3e86020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x3a0fe44, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesRead=0x3a0fe44*=0x110100, lpOverlapped=0x0) returned 1 [0185.108] WriteFile (in: hFile=0x2ec, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x110100, lpOverlapped=0x0) returned 1 [0185.298] ReadFile (in: hFile=0x2c8, lpBuffer=0x3e86020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x3a0fe44, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesRead=0x3a0fe44*=0x110100, lpOverlapped=0x0) returned 1 [0185.345] WriteFile (in: hFile=0x2ec, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x110100, lpOverlapped=0x0) returned 1 [0185.530] ReadFile (in: hFile=0x2c8, lpBuffer=0x3e86020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x3a0fe44, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesRead=0x3a0fe44*=0x110100, lpOverlapped=0x0) returned 1 [0185.768] WriteFile (in: hFile=0x2ec, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x110100, lpOverlapped=0x0) returned 1 [0185.789] ReadFile (in: hFile=0x2c8, lpBuffer=0x3e86020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x3a0fe44, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesRead=0x3a0fe44*=0x110100, lpOverlapped=0x0) returned 1 [0186.004] WriteFile (in: hFile=0x2ec, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x110100, lpOverlapped=0x0) returned 1 [0186.033] ReadFile (in: hFile=0x2c8, lpBuffer=0x3e86020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x3a0fe44, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesRead=0x3a0fe44*=0x110100, lpOverlapped=0x0) returned 1 [0186.190] WriteFile (in: hFile=0x2ec, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x110100, lpOverlapped=0x0) returned 1 [0186.307] ReadFile (in: hFile=0x2c8, lpBuffer=0x3e86020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x3a0fe44, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesRead=0x3a0fe44*=0x110100, lpOverlapped=0x0) returned 1 [0186.602] WriteFile (in: hFile=0x2ec, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x110100, lpOverlapped=0x0) returned 1 [0186.625] ReadFile (in: hFile=0x2c8, lpBuffer=0x3e86020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x3a0fe44, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesRead=0x3a0fe44*=0x8ea00, lpOverlapped=0x0) returned 1 [0186.632] WriteFile (in: hFile=0x2ec, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x8ea10, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x8ea10, lpOverlapped=0x0) returned 1 [0187.997] WriteFile (in: hFile=0x2ec, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0xf2, lpOverlapped=0x0) returned 1 [0187.998] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fb90 | out: lpNewFilePointer=0x0) returned 1 [0187.998] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fb90 | out: lpNewFilePointer=0x0) returned 1 [0187.998] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x3a0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fb9c*=0x110102, lpOverlapped=0x0) returned 1 [0188.014] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x3a0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fb9c*=0x110102, lpOverlapped=0x0) returned 1 [0188.353] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x3a0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fb9c*=0x110102, lpOverlapped=0x0) returned 1 [0188.367] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x3a0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fb9c*=0x110102, lpOverlapped=0x0) returned 1 [0188.382] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x3a0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fb9c*=0x110102, lpOverlapped=0x0) returned 1 [0188.670] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x3a0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fb9c*=0x110102, lpOverlapped=0x0) returned 1 [0188.684] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x3a0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fb9c*=0x110102, lpOverlapped=0x0) returned 1 [0188.799] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x3a0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fb9c*=0x110102, lpOverlapped=0x0) returned 1 [0188.814] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x3a0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fb9c*=0x110102, lpOverlapped=0x0) returned 1 [0188.839] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x3a0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fb9c*=0x110102, lpOverlapped=0x0) returned 1 [0188.853] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x3a0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fb9c*=0x110102, lpOverlapped=0x0) returned 1 [0189.216] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x3a0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fb9c*=0x110102, lpOverlapped=0x0) returned 1 [0189.230] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x3a0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fb9c*=0x110102, lpOverlapped=0x0) returned 1 [0189.244] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x3a0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fb9c*=0x110102, lpOverlapped=0x0) returned 1 [0189.359] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x3a0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fb9c*=0x110102, lpOverlapped=0x0) returned 1 [0189.372] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x3a0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fb9c*=0x110102, lpOverlapped=0x0) returned 1 [0189.489] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x3a0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fb9c*=0x110102, lpOverlapped=0x0) returned 1 [0189.503] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x3a0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fb9c*=0x110102, lpOverlapped=0x0) returned 1 [0189.517] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x3a0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fb9c*=0x110102, lpOverlapped=0x0) returned 1 [0189.624] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x3a0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fb9c*=0x110102, lpOverlapped=0x0) returned 1 [0189.643] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x3a0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fb9c*=0x110102, lpOverlapped=0x0) returned 1 [0189.660] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x3a0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fb9c*=0x110102, lpOverlapped=0x0) returned 1 [0189.982] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x8e9d4, lpNumberOfBytesWritten=0x3a0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fb9c*=0x8e9d4, lpOverlapped=0x0) returned 1 [0189.983] FlushFileBuffers (hFile=0x2c8) returned 1 [0190.023] FlushFileBuffers (hFile=0x2ec) returned 1 [0192.351] CloseHandle (hObject=0x2c8) returned 1 [0192.351] CloseHandle (hObject=0x2ec) returned 1 [0192.351] DeleteFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Windows.edb" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\windows.edb")) returned 1 [0192.362] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_768.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_768.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec [0192.363] GetFileSizeEx (in: hFile=0x2ec, lpFileSize=0x3a0fe68 | out: lpFileSize=0x3a0fe68*=24) returned 1 [0192.363] CloseHandle (hObject=0x2ec) returned 1 [0192.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_768.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_768.db")) returned 0x2020 [0192.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_768.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_768.db")) returned 0x2020 [0192.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_768.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_768.db.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0192.363] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_768.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_768.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec [0192.363] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fe30 | out: lpNewFilePointer=0x0) returned 1 [0192.363] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fe30 | out: lpNewFilePointer=0x0) returned 1 [0192.363] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_768.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_768.db.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x2c8 [0192.364] ReadFile (in: hFile=0x2ec, lpBuffer=0x3e86020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x3a0fe44, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesRead=0x3a0fe44*=0x18, lpOverlapped=0x0) returned 1 [0192.366] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x20, lpOverlapped=0x0) returned 1 [0192.367] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x102, lpOverlapped=0x0) returned 1 [0192.367] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fb90 | out: lpNewFilePointer=0x0) returned 1 [0192.367] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fb90 | out: lpNewFilePointer=0x0) returned 1 [0192.367] WriteFile (in: hFile=0x2ec, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x3a0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fb9c*=0x18, lpOverlapped=0x0) returned 1 [0192.367] FlushFileBuffers (hFile=0x2ec) returned 1 [0192.399] FlushFileBuffers (hFile=0x2c8) returned 1 [0192.424] CloseHandle (hObject=0x2ec) returned 1 [0192.424] CloseHandle (hObject=0x2c8) returned 1 [0192.425] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_768.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_768.db")) returned 1 [0192.426] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_96.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0192.426] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x3a0fe68 | out: lpFileSize=0x3a0fe68*=24) returned 1 [0192.426] CloseHandle (hObject=0x2c8) returned 1 [0192.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_96.db")) returned 0x2020 [0192.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_96.db")) returned 0x2020 [0192.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_96.db.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0192.426] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_96.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0192.426] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fe30 | out: lpNewFilePointer=0x0) returned 1 [0192.427] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fe30 | out: lpNewFilePointer=0x0) returned 1 [0192.427] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_96.db.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x2ec [0192.427] ReadFile (in: hFile=0x2c8, lpBuffer=0x3e86020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x3a0fe44, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesRead=0x3a0fe44*=0x18, lpOverlapped=0x0) returned 1 [0192.428] WriteFile (in: hFile=0x2ec, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x20, lpOverlapped=0x0) returned 1 [0192.429] WriteFile (in: hFile=0x2ec, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x102, lpOverlapped=0x0) returned 1 [0192.429] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fb90 | out: lpNewFilePointer=0x0) returned 1 [0192.429] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fb90 | out: lpNewFilePointer=0x0) returned 1 [0192.429] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x3a0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fb9c*=0x18, lpOverlapped=0x0) returned 1 [0192.430] FlushFileBuffers (hFile=0x2c8) returned 1 [0192.437] FlushFileBuffers (hFile=0x2ec) returned 1 [0192.451] CloseHandle (hObject=0x2c8) returned 1 [0192.451] CloseHandle (hObject=0x2ec) returned 1 [0192.451] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_96.db")) returned 1 [0192.452] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_custom_stream.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_custom_stream.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec [0192.452] GetFileSizeEx (in: hFile=0x2ec, lpFileSize=0x3a0fe68 | out: lpFileSize=0x3a0fe68*=24) returned 1 [0192.452] CloseHandle (hObject=0x2ec) returned 1 [0192.452] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_custom_stream.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_custom_stream.db")) returned 0x2020 [0192.452] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_custom_stream.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_custom_stream.db")) returned 0x2020 [0192.453] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_custom_stream.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_custom_stream.db.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0192.453] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_custom_stream.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_custom_stream.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec [0192.453] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fe30 | out: lpNewFilePointer=0x0) returned 1 [0192.453] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fe30 | out: lpNewFilePointer=0x0) returned 1 [0192.453] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_custom_stream.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_custom_stream.db.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x2c8 [0192.453] ReadFile (in: hFile=0x2ec, lpBuffer=0x3e86020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x3a0fe44, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesRead=0x3a0fe44*=0x18, lpOverlapped=0x0) returned 1 [0192.454] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x20, lpOverlapped=0x0) returned 1 [0192.455] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x112, lpOverlapped=0x0) returned 1 [0192.455] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fb90 | out: lpNewFilePointer=0x0) returned 1 [0192.456] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fb90 | out: lpNewFilePointer=0x0) returned 1 [0192.456] WriteFile (in: hFile=0x2ec, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x3a0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fb9c*=0x18, lpOverlapped=0x0) returned 1 [0192.456] FlushFileBuffers (hFile=0x2ec) returned 1 [0192.460] FlushFileBuffers (hFile=0x2c8) returned 1 [0192.491] CloseHandle (hObject=0x2ec) returned 1 [0192.491] CloseHandle (hObject=0x2c8) returned 1 [0192.491] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_custom_stream.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_custom_stream.db")) returned 1 [0192.492] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_exif.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_exif.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0192.492] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x3a0fe68 | out: lpFileSize=0x3a0fe68*=24) returned 1 [0192.492] CloseHandle (hObject=0x2c8) returned 1 [0192.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_exif.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_exif.db")) returned 0x2020 [0192.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_exif.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_exif.db")) returned 0x2020 [0192.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_exif.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_exif.db.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0192.493] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_exif.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_exif.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0192.493] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fe30 | out: lpNewFilePointer=0x0) returned 1 [0192.493] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fe30 | out: lpNewFilePointer=0x0) returned 1 [0192.493] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_exif.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_exif.db.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x2ec [0192.493] ReadFile (in: hFile=0x2c8, lpBuffer=0x3e86020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x3a0fe44, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesRead=0x3a0fe44*=0x18, lpOverlapped=0x0) returned 1 [0192.494] WriteFile (in: hFile=0x2ec, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x20, lpOverlapped=0x0) returned 1 [0192.495] WriteFile (in: hFile=0x2ec, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x102, lpOverlapped=0x0) returned 1 [0192.496] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fb90 | out: lpNewFilePointer=0x0) returned 1 [0192.496] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fb90 | out: lpNewFilePointer=0x0) returned 1 [0192.496] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x3a0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fb9c*=0x18, lpOverlapped=0x0) returned 1 [0192.496] FlushFileBuffers (hFile=0x2c8) returned 1 [0192.499] FlushFileBuffers (hFile=0x2ec) returned 1 [0192.502] CloseHandle (hObject=0x2c8) returned 1 [0192.502] CloseHandle (hObject=0x2ec) returned 1 [0192.502] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_exif.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_exif.db")) returned 1 [0192.503] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec [0192.503] GetFileSizeEx (in: hFile=0x2ec, lpFileSize=0x3a0fe68 | out: lpFileSize=0x3a0fe68*=7416) returned 1 [0192.503] CloseHandle (hObject=0x2ec) returned 1 [0192.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db")) returned 0x2020 [0192.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db")) returned 0x2020 [0192.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0192.503] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec [0192.503] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fe30 | out: lpNewFilePointer=0x0) returned 1 [0192.503] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fe30 | out: lpNewFilePointer=0x0) returned 1 [0192.504] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x2c8 [0192.504] ReadFile (in: hFile=0x2ec, lpBuffer=0x3e86020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x3a0fe44, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesRead=0x3a0fe44*=0x1cf8, lpOverlapped=0x0) returned 1 [0192.505] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x1d00, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x1d00, lpOverlapped=0x0) returned 1 [0192.506] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x102, lpOverlapped=0x0) returned 1 [0192.506] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fb90 | out: lpNewFilePointer=0x0) returned 1 [0192.506] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fb90 | out: lpNewFilePointer=0x0) returned 1 [0192.506] WriteFile (in: hFile=0x2ec, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x1cf8, lpNumberOfBytesWritten=0x3a0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fb9c*=0x1cf8, lpOverlapped=0x0) returned 1 [0192.506] FlushFileBuffers (hFile=0x2ec) returned 1 [0192.509] FlushFileBuffers (hFile=0x2c8) returned 1 [0192.511] CloseHandle (hObject=0x2ec) returned 1 [0192.511] CloseHandle (hObject=0x2c8) returned 1 [0192.511] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db")) returned 1 [0192.512] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_sr.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0192.512] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x3a0fe68 | out: lpFileSize=0x3a0fe68*=24) returned 1 [0192.512] CloseHandle (hObject=0x2c8) returned 1 [0192.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_sr.db")) returned 0x2020 [0192.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_sr.db")) returned 0x2020 [0192.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_sr.db.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0192.512] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_sr.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0192.512] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fe30 | out: lpNewFilePointer=0x0) returned 1 [0192.513] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fe30 | out: lpNewFilePointer=0x0) returned 1 [0192.513] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_sr.db.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x2ec [0192.513] ReadFile (in: hFile=0x2c8, lpBuffer=0x3e86020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x3a0fe44, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesRead=0x3a0fe44*=0x18, lpOverlapped=0x0) returned 1 [0192.514] WriteFile (in: hFile=0x2ec, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x20, lpOverlapped=0x0) returned 1 [0192.515] WriteFile (in: hFile=0x2ec, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x102, lpOverlapped=0x0) returned 1 [0192.515] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fb90 | out: lpNewFilePointer=0x0) returned 1 [0192.515] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fb90 | out: lpNewFilePointer=0x0) returned 1 [0192.515] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x3a0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fb9c*=0x18, lpOverlapped=0x0) returned 1 [0192.515] FlushFileBuffers (hFile=0x2c8) returned 1 [0192.526] FlushFileBuffers (hFile=0x2ec) returned 1 [0192.529] CloseHandle (hObject=0x2c8) returned 1 [0192.529] CloseHandle (hObject=0x2ec) returned 1 [0192.529] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_sr.db")) returned 1 [0192.530] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_wide.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec [0192.530] GetFileSizeEx (in: hFile=0x2ec, lpFileSize=0x3a0fe68 | out: lpFileSize=0x3a0fe68*=24) returned 1 [0192.530] CloseHandle (hObject=0x2ec) returned 1 [0192.530] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_wide.db")) returned 0x2020 [0192.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_wide.db")) returned 0x2020 [0192.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_wide.db.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0192.531] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_wide.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec [0192.531] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fe30 | out: lpNewFilePointer=0x0) returned 1 [0192.531] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fe30 | out: lpNewFilePointer=0x0) returned 1 [0192.531] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_wide.db.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x2c8 [0192.531] ReadFile (in: hFile=0x2ec, lpBuffer=0x3e86020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x3a0fe44, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesRead=0x3a0fe44*=0x18, lpOverlapped=0x0) returned 1 [0192.532] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x20, lpOverlapped=0x0) returned 1 [0192.533] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x102, lpOverlapped=0x0) returned 1 [0192.534] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fb90 | out: lpNewFilePointer=0x0) returned 1 [0192.534] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fb90 | out: lpNewFilePointer=0x0) returned 1 [0192.534] WriteFile (in: hFile=0x2ec, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x3a0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fb9c*=0x18, lpOverlapped=0x0) returned 1 [0192.534] FlushFileBuffers (hFile=0x2ec) returned 1 [0192.536] FlushFileBuffers (hFile=0x2c8) returned 1 [0192.538] CloseHandle (hObject=0x2ec) returned 1 [0192.538] CloseHandle (hObject=0x2c8) returned 1 [0192.538] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_wide.db")) returned 1 [0192.540] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide_alternate.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_wide_alternate.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0192.540] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x3a0fe68 | out: lpFileSize=0x3a0fe68*=24) returned 1 [0192.540] CloseHandle (hObject=0x2c8) returned 1 [0192.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide_alternate.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_wide_alternate.db")) returned 0x2020 [0192.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide_alternate.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_wide_alternate.db")) returned 0x2020 [0192.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide_alternate.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_wide_alternate.db.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0192.540] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide_alternate.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_wide_alternate.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0192.540] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fe30 | out: lpNewFilePointer=0x0) returned 1 [0192.541] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fe30 | out: lpNewFilePointer=0x0) returned 1 [0192.541] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide_alternate.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_wide_alternate.db.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x2ec [0192.541] ReadFile (in: hFile=0x2c8, lpBuffer=0x3e86020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x3a0fe44, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesRead=0x3a0fe44*=0x18, lpOverlapped=0x0) returned 1 [0192.542] WriteFile (in: hFile=0x2ec, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x20, lpOverlapped=0x0) returned 1 [0192.543] WriteFile (in: hFile=0x2ec, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x112, lpOverlapped=0x0) returned 1 [0192.544] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fb90 | out: lpNewFilePointer=0x0) returned 1 [0192.544] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fb90 | out: lpNewFilePointer=0x0) returned 1 [0192.544] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x3a0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fb9c*=0x18, lpOverlapped=0x0) returned 1 [0192.544] FlushFileBuffers (hFile=0x2c8) returned 1 [0192.546] FlushFileBuffers (hFile=0x2ec) returned 1 [0192.548] CloseHandle (hObject=0x2c8) returned 1 [0192.548] CloseHandle (hObject=0x2ec) returned 1 [0192.548] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide_alternate.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_wide_alternate.db")) returned 1 [0192.550] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpndatabase.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\notifications\\wpndatabase.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec [0192.550] GetFileSizeEx (in: hFile=0x2ec, lpFileSize=0x3a0fe68 | out: lpFileSize=0x3a0fe68*=1048576) returned 1 [0192.550] CloseHandle (hObject=0x2ec) returned 1 [0192.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpndatabase.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\notifications\\wpndatabase.db")) returned 0x20 [0192.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpndatabase.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\notifications\\wpndatabase.db")) returned 0x20 [0192.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpndatabase.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\notifications\\wpndatabase.db.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0192.550] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpndatabase.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\notifications\\wpndatabase.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0192.551] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpndatabase.db-shm" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\notifications\\wpndatabase.db-shm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec [0192.551] GetFileSizeEx (in: hFile=0x2ec, lpFileSize=0x3a0fe68 | out: lpFileSize=0x3a0fe68*=32768) returned 1 [0192.551] CloseHandle (hObject=0x2ec) returned 1 [0192.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpndatabase.db-shm" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\notifications\\wpndatabase.db-shm")) returned 0x20 [0192.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpndatabase.db-shm" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\notifications\\wpndatabase.db-shm")) returned 0x20 [0192.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpndatabase.db-shm.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\notifications\\wpndatabase.db-shm.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0192.551] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpndatabase.db-shm" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\notifications\\wpndatabase.db-shm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0192.552] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpndatabase.db-wal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\notifications\\wpndatabase.db-wal"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec [0192.552] GetFileSizeEx (in: hFile=0x2ec, lpFileSize=0x3a0fe68 | out: lpFileSize=0x3a0fe68*=98912) returned 1 [0192.552] CloseHandle (hObject=0x2ec) returned 1 [0192.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpndatabase.db-wal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\notifications\\wpndatabase.db-wal")) returned 0x20 [0192.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpndatabase.db-wal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\notifications\\wpndatabase.db-wal")) returned 0x20 [0192.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpndatabase.db-wal.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\notifications\\wpndatabase.db-wal.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0192.552] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpndatabase.db-wal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\notifications\\wpndatabase.db-wal"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0192.553] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\SettingSync\\metastore\\meta.edb" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\settingsync\\metastore\\meta.edb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec [0192.555] GetFileSizeEx (in: hFile=0x2ec, lpFileSize=0x3a0fe68 | out: lpFileSize=0x3a0fe68*=1441792) returned 1 [0192.555] CloseHandle (hObject=0x2ec) returned 1 [0192.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\SettingSync\\metastore\\meta.edb" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\settingsync\\metastore\\meta.edb")) returned 0x20 [0192.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\SettingSync\\metastore\\meta.edb" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\settingsync\\metastore\\meta.edb")) returned 0x20 [0192.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\SettingSync\\metastore\\meta.edb.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\settingsync\\metastore\\meta.edb.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0192.555] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\SettingSync\\metastore\\meta.edb" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\settingsync\\metastore\\meta.edb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec [0192.555] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fe30 | out: lpNewFilePointer=0x0) returned 1 [0192.555] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fe30 | out: lpNewFilePointer=0x0) returned 1 [0192.555] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\SettingSync\\metastore\\meta.edb.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\settingsync\\metastore\\meta.edb.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c8 [0192.556] ReadFile (in: hFile=0x2ec, lpBuffer=0x3e86020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x3a0fe44, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesRead=0x3a0fe44*=0x110100, lpOverlapped=0x0) returned 1 [0192.965] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x110100, lpOverlapped=0x0) returned 1 [0193.378] ReadFile (in: hFile=0x2ec, lpBuffer=0x3e86020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x3a0fe44, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesRead=0x3a0fe44*=0x4ff00, lpOverlapped=0x0) returned 1 [0193.384] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x4ff10, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x4ff10, lpOverlapped=0x0) returned 1 [0193.390] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0xf2, lpOverlapped=0x0) returned 1 [0193.390] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fb90 | out: lpNewFilePointer=0x0) returned 1 [0193.391] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fb90 | out: lpNewFilePointer=0x0) returned 1 [0193.391] WriteFile (in: hFile=0x2ec, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x3a0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fb9c*=0x110102, lpOverlapped=0x0) returned 1 [0193.397] WriteFile (in: hFile=0x2ec, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x4fefe, lpNumberOfBytesWritten=0x3a0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fb9c*=0x4fefe, lpOverlapped=0x0) returned 1 [0193.398] FlushFileBuffers (hFile=0x2ec) returned 1 [0193.750] FlushFileBuffers (hFile=0x2c8) returned 1 [0194.181] CloseHandle (hObject=0x2ec) returned 1 [0194.181] CloseHandle (hObject=0x2c8) returned 1 [0194.181] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\SettingSync\\metastore\\meta.edb" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\settingsync\\metastore\\meta.edb")) returned 1 [0194.193] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\IndexedDB.edb" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\indexeddb.edb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0194.196] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x3a0fe68 | out: lpFileSize=0x3a0fe68*=2621440) returned 1 [0194.196] CloseHandle (hObject=0x2c8) returned 1 [0194.196] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\IndexedDB.edb" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\indexeddb.edb")) returned 0x220 [0194.196] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\IndexedDB.edb" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\indexeddb.edb")) returned 0x220 [0194.196] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\IndexedDB.edb.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\indexeddb.edb.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0194.196] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\IndexedDB.edb" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\indexeddb.edb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0194.196] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fe30 | out: lpNewFilePointer=0x0) returned 1 [0194.196] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fe30 | out: lpNewFilePointer=0x0) returned 1 [0194.196] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\IndexedDB.edb.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\indexeddb.edb.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x2ec [0194.199] ReadFile (in: hFile=0x2c8, lpBuffer=0x3e86020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x3a0fe44, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesRead=0x3a0fe44*=0x110100, lpOverlapped=0x0) returned 1 [0194.463] WriteFile (in: hFile=0x2ec, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x110100, lpOverlapped=0x0) returned 1 [0194.583] ReadFile (in: hFile=0x2c8, lpBuffer=0x3e86020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x3a0fe44, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesRead=0x3a0fe44*=0x110100, lpOverlapped=0x0) returned 1 [0194.771] WriteFile (in: hFile=0x2ec, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x110100, lpOverlapped=0x0) returned 1 [0195.151] ReadFile (in: hFile=0x2c8, lpBuffer=0x3e86020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x3a0fe44, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesRead=0x3a0fe44*=0x5fe00, lpOverlapped=0x0) returned 1 [0195.155] WriteFile (in: hFile=0x2ec, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x5fe10, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x5fe10, lpOverlapped=0x0) returned 1 [0195.164] WriteFile (in: hFile=0x2ec, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0xf2, lpOverlapped=0x0) returned 1 [0195.164] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fb90 | out: lpNewFilePointer=0x0) returned 1 [0195.164] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fb90 | out: lpNewFilePointer=0x0) returned 1 [0195.164] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x3a0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fb9c*=0x110102, lpOverlapped=0x0) returned 1 [0195.351] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x3a0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fb9c*=0x110102, lpOverlapped=0x0) returned 1 [0195.364] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x5fdfc, lpNumberOfBytesWritten=0x3a0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fb9c*=0x5fdfc, lpOverlapped=0x0) returned 1 [0195.365] FlushFileBuffers (hFile=0x2c8) returned 1 [0195.373] FlushFileBuffers (hFile=0x2ec) returned 1 [0195.763] CloseHandle (hObject=0x2c8) returned 1 [0195.763] CloseHandle (hObject=0x2ec) returned 1 [0195.764] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\IndexedDB.edb" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\indexeddb.edb")) returned 1 [0195.770] ResetEvent (hEvent=0x2a0) returned 1 [0195.770] SetEvent (hEvent=0x2a4) returned 1 [0195.770] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\mediadb.v1.sqlite"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec [0195.776] GetFileSizeEx (in: hFile=0x2ec, lpFileSize=0x3a0fe68 | out: lpFileSize=0x3a0fe68*=4096) returned 1 [0195.776] CloseHandle (hObject=0x2ec) returned 1 [0195.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\mediadb.v1.sqlite")) returned 0x20 [0195.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\mediadb.v1.sqlite")) returned 0x20 [0195.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\mediadb.v1.sqlite.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0195.776] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\mediadb.v1.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec [0195.776] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fe30 | out: lpNewFilePointer=0x0) returned 1 [0195.776] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fe30 | out: lpNewFilePointer=0x0) returned 1 [0195.776] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\mediadb.v1.sqlite.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c8 [0195.778] ReadFile (in: hFile=0x2ec, lpBuffer=0x3e86020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x3a0fe44, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesRead=0x3a0fe44*=0x1000, lpOverlapped=0x0) returned 1 [0195.779] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x1010, lpOverlapped=0x0) returned 1 [0195.780] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x102, lpOverlapped=0x0) returned 1 [0195.781] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fb90 | out: lpNewFilePointer=0x0) returned 1 [0195.781] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fb90 | out: lpNewFilePointer=0x0) returned 1 [0195.781] WriteFile (in: hFile=0x2ec, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x3a0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fb9c*=0x1000, lpOverlapped=0x0) returned 1 [0195.781] FlushFileBuffers (hFile=0x2ec) returned 1 [0195.970] FlushFileBuffers (hFile=0x2c8) returned 1 [0195.971] CloseHandle (hObject=0x2ec) returned 1 [0195.971] CloseHandle (hObject=0x2c8) returned 1 [0195.971] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\mediadb.v1.sqlite")) returned 1 [0195.974] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0197.001] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0197.188] ResetEvent (hEvent=0x2a0) returned 1 [0197.188] SetEvent (hEvent=0x2a4) returned 1 [0197.189] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\access\\accesscache.accdb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0197.190] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x3a0fe68 | out: lpFileSize=0x3a0fe68*=200704) returned 1 [0197.190] CloseHandle (hObject=0x2c8) returned 1 [0197.191] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\access\\accesscache.accdb")) returned 0x20 [0197.191] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\access\\accesscache.accdb")) returned 0x20 [0197.191] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\access\\accesscache.accdb.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0197.191] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\access\\accesscache.accdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0197.191] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fe30 | out: lpNewFilePointer=0x0) returned 1 [0197.191] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fe30 | out: lpNewFilePointer=0x0) returned 1 [0197.191] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\access\\accesscache.accdb.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x224 [0197.194] ReadFile (in: hFile=0x2c8, lpBuffer=0x3e86020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x3a0fe44, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesRead=0x3a0fe44*=0x31000, lpOverlapped=0x0) returned 1 [0197.204] WriteFile (in: hFile=0x224, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x31010, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x31010, lpOverlapped=0x0) returned 1 [0197.210] WriteFile (in: hFile=0x224, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x102, lpOverlapped=0x0) returned 1 [0197.210] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fb90 | out: lpNewFilePointer=0x0) returned 1 [0197.210] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fb90 | out: lpNewFilePointer=0x0) returned 1 [0197.210] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x31000, lpNumberOfBytesWritten=0x3a0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fb9c*=0x31000, lpOverlapped=0x0) returned 1 [0197.211] FlushFileBuffers (hFile=0x2c8) returned 1 [0197.323] FlushFileBuffers (hFile=0x224) returned 1 [0197.324] CloseHandle (hObject=0x2c8) returned 1 [0197.325] CloseHandle (hObject=0x224) returned 1 [0197.325] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\access\\accesscache.accdb")) returned 1 [0197.327] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0197.542] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cert8.db" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cert8.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0197.543] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x3a0fe68 | out: lpFileSize=0x3a0fe68*=65536) returned 1 [0197.543] CloseHandle (hObject=0x2c8) returned 1 [0197.543] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cert8.db" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cert8.db")) returned 0x20 [0197.543] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cert8.db" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cert8.db")) returned 0x20 [0197.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cert8.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cert8.db.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0197.544] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cert8.db" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cert8.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0197.544] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fe30 | out: lpNewFilePointer=0x0) returned 1 [0197.544] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fe30 | out: lpNewFilePointer=0x0) returned 1 [0197.544] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cert8.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cert8.db.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e8 [0197.553] ReadFile (in: hFile=0x2c8, lpBuffer=0x3e86020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x3a0fe44, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesRead=0x3a0fe44*=0x10000, lpOverlapped=0x0) returned 1 [0197.562] WriteFile (in: hFile=0x2e8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x10010, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x10010, lpOverlapped=0x0) returned 1 [0197.564] WriteFile (in: hFile=0x2e8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0xf2, lpOverlapped=0x0) returned 1 [0197.564] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fb90 | out: lpNewFilePointer=0x0) returned 1 [0197.565] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fb90 | out: lpNewFilePointer=0x0) returned 1 [0197.565] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x10000, lpNumberOfBytesWritten=0x3a0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fb9c*=0x10000, lpOverlapped=0x0) returned 1 [0197.565] FlushFileBuffers (hFile=0x2c8) returned 1 [0197.843] FlushFileBuffers (hFile=0x2e8) returned 1 [0197.849] CloseHandle (hObject=0x2c8) returned 1 [0197.850] CloseHandle (hObject=0x2e8) returned 1 [0197.850] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cert8.db" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cert8.db")) returned 1 [0197.851] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\favicons.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\favicons.sqlite"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0197.852] GetFileSizeEx (in: hFile=0x2e8, lpFileSize=0x3a0fe68 | out: lpFileSize=0x3a0fe68*=5242880) returned 1 [0197.852] CloseHandle (hObject=0x2e8) returned 1 [0197.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\favicons.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\favicons.sqlite")) returned 0x20 [0197.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\favicons.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\favicons.sqlite")) returned 0x20 [0197.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\favicons.sqlite.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\favicons.sqlite.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0197.852] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\favicons.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\favicons.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0197.852] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fe30 | out: lpNewFilePointer=0x0) returned 1 [0197.852] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fe30 | out: lpNewFilePointer=0x0) returned 1 [0197.852] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\favicons.sqlite.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\favicons.sqlite.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c8 [0197.853] ReadFile (in: hFile=0x2e8, lpBuffer=0x3e86020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x3a0fe44, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesRead=0x3a0fe44*=0x110100, lpOverlapped=0x0) returned 1 [0198.137] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x110100, lpOverlapped=0x0) returned 1 [0198.366] ReadFile (in: hFile=0x2e8, lpBuffer=0x3e86020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x3a0fe44, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesRead=0x3a0fe44*=0x110100, lpOverlapped=0x0) returned 1 [0198.406] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x110100, lpOverlapped=0x0) returned 1 [0198.628] ReadFile (in: hFile=0x2e8, lpBuffer=0x3e86020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x3a0fe44, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesRead=0x3a0fe44*=0x110100, lpOverlapped=0x0) returned 1 [0198.658] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x110100, lpOverlapped=0x0) returned 1 [0198.883] ReadFile (in: hFile=0x2e8, lpBuffer=0x3e86020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x3a0fe44, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesRead=0x3a0fe44*=0x110100, lpOverlapped=0x0) returned 1 [0198.904] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x110100, lpOverlapped=0x0) returned 1 [0199.164] ReadFile (in: hFile=0x2e8, lpBuffer=0x3e86020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x3a0fe44, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesRead=0x3a0fe44*=0xbfc00, lpOverlapped=0x0) returned 1 [0199.172] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0xbfc10, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0xbfc10, lpOverlapped=0x0) returned 1 [0199.315] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0xf2, lpOverlapped=0x0) returned 1 [0199.316] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fb90 | out: lpNewFilePointer=0x0) returned 1 [0199.316] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fb90 | out: lpNewFilePointer=0x0) returned 1 [0199.316] WriteFile (in: hFile=0x2e8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x3a0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fb9c*=0x110102, lpOverlapped=0x0) returned 1 [0199.331] WriteFile (in: hFile=0x2e8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x3a0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fb9c*=0x110102, lpOverlapped=0x0) returned 1 [0199.345] WriteFile (in: hFile=0x2e8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x3a0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fb9c*=0x110102, lpOverlapped=0x0) returned 1 [0199.459] WriteFile (in: hFile=0x2e8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x3a0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fb9c*=0x110102, lpOverlapped=0x0) returned 1 [0199.472] WriteFile (in: hFile=0x2e8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0xbfbf8, lpNumberOfBytesWritten=0x3a0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fb9c*=0xbfbf8, lpOverlapped=0x0) returned 1 [0199.474] FlushFileBuffers (hFile=0x2e8) returned 1 [0200.350] FlushFileBuffers (hFile=0x2c8) returned 1 [0201.646] CloseHandle (hObject=0x2e8) returned 1 [0201.646] CloseHandle (hObject=0x2c8) returned 1 [0201.646] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\favicons.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\favicons.sqlite")) returned 1 [0201.667] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\secmod.db" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\secmod.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0201.674] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x3a0fe68 | out: lpFileSize=0x3a0fe68*=16384) returned 1 [0201.674] CloseHandle (hObject=0x2c8) returned 1 [0201.675] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\secmod.db" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\secmod.db")) returned 0x20 [0201.675] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\secmod.db" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\secmod.db")) returned 0x20 [0201.675] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\secmod.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\secmod.db.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0201.675] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\secmod.db" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\secmod.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0201.675] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fe30 | out: lpNewFilePointer=0x0) returned 1 [0201.675] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fe30 | out: lpNewFilePointer=0x0) returned 1 [0201.675] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\secmod.db.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\secmod.db.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e8 [0201.677] ReadFile (in: hFile=0x2c8, lpBuffer=0x3e86020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x3a0fe44, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesRead=0x3a0fe44*=0x4000, lpOverlapped=0x0) returned 1 [0203.508] WriteFile (in: hFile=0x2e8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x4010, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x4010, lpOverlapped=0x0) returned 1 [0203.509] WriteFile (in: hFile=0x2e8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0xf2, lpOverlapped=0x0) returned 1 [0203.510] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fb90 | out: lpNewFilePointer=0x0) returned 1 [0203.510] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fb90 | out: lpNewFilePointer=0x0) returned 1 [0203.510] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x4000, lpNumberOfBytesWritten=0x3a0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fb9c*=0x4000, lpOverlapped=0x0) returned 1 [0203.510] FlushFileBuffers (hFile=0x2c8) returned 1 [0203.810] FlushFileBuffers (hFile=0x2e8) returned 1 [0203.814] CloseHandle (hObject=0x2c8) returned 1 [0203.814] CloseHandle (hObject=0x2e8) returned 1 [0203.814] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\secmod.db" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\secmod.db")) returned 1 [0203.815] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0203.816] GetFileSizeEx (in: hFile=0x2e8, lpFileSize=0x3a0fe68 | out: lpFileSize=0x3a0fe68*=49152) returned 1 [0203.817] CloseHandle (hObject=0x2e8) returned 1 [0203.817] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite")) returned 0x20 [0203.817] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite")) returned 0x20 [0203.817] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0203.817] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0203.817] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fe30 | out: lpNewFilePointer=0x0) returned 1 [0203.817] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fe30 | out: lpNewFilePointer=0x0) returned 1 [0203.817] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c8 [0203.818] ReadFile (in: hFile=0x2e8, lpBuffer=0x3e86020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x3a0fe44, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesRead=0x3a0fe44*=0xc000, lpOverlapped=0x0) returned 1 [0203.822] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0xc010, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0xc010, lpOverlapped=0x0) returned 1 [0203.823] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x112, lpOverlapped=0x0) returned 1 [0203.824] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fb90 | out: lpNewFilePointer=0x0) returned 1 [0203.824] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fb90 | out: lpNewFilePointer=0x0) returned 1 [0203.824] WriteFile (in: hFile=0x2e8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0xc000, lpNumberOfBytesWritten=0x3a0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fb9c*=0xc000, lpOverlapped=0x0) returned 1 [0203.824] FlushFileBuffers (hFile=0x2e8) returned 1 [0203.846] FlushFileBuffers (hFile=0x2c8) returned 1 [0203.848] CloseHandle (hObject=0x2e8) returned 1 [0203.848] CloseHandle (hObject=0x2c8) returned 1 [0203.848] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite")) returned 1 [0203.850] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0203.851] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x3a0fe68 | out: lpFileSize=0x3a0fe68*=122880) returned 1 [0203.851] CloseHandle (hObject=0x2c8) returned 1 [0203.851] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite")) returned 0x20 [0203.851] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite")) returned 0x20 [0203.851] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0203.851] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0203.851] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fe30 | out: lpNewFilePointer=0x0) returned 1 [0203.851] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fe30 | out: lpNewFilePointer=0x0) returned 1 [0203.852] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e8 [0203.852] ReadFile (in: hFile=0x2c8, lpBuffer=0x3e86020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x3a0fe44, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesRead=0x3a0fe44*=0x1e000, lpOverlapped=0x0) returned 1 [0203.859] WriteFile (in: hFile=0x2e8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x1e010, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x1e010, lpOverlapped=0x0) returned 1 [0203.862] WriteFile (in: hFile=0x2e8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x112, lpOverlapped=0x0) returned 1 [0203.862] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fb90 | out: lpNewFilePointer=0x0) returned 1 [0203.862] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fb90 | out: lpNewFilePointer=0x0) returned 1 [0203.862] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x1e000, lpNumberOfBytesWritten=0x3a0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fb9c*=0x1e000, lpOverlapped=0x0) returned 1 [0203.863] FlushFileBuffers (hFile=0x2c8) returned 1 [0204.725] FlushFileBuffers (hFile=0x2e8) returned 1 [0204.734] CloseHandle (hObject=0x2c8) returned 1 [0204.734] CloseHandle (hObject=0x2e8) returned 1 [0204.735] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite")) returned 1 [0204.737] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\storage.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\storage.sqlite"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0204.738] GetFileSizeEx (in: hFile=0x2e8, lpFileSize=0x3a0fe68 | out: lpFileSize=0x3a0fe68*=512) returned 1 [0204.738] CloseHandle (hObject=0x2e8) returned 1 [0204.738] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\storage.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\storage.sqlite")) returned 0x20 [0204.738] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\storage.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\storage.sqlite")) returned 0x20 [0204.738] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\storage.sqlite.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\storage.sqlite.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0204.738] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\storage.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\storage.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0204.738] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fe30 | out: lpNewFilePointer=0x0) returned 1 [0204.738] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fe30 | out: lpNewFilePointer=0x0) returned 1 [0204.739] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\storage.sqlite.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\storage.sqlite.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c8 [0204.739] ReadFile (in: hFile=0x2e8, lpBuffer=0x3e86020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x3a0fe44, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesRead=0x3a0fe44*=0x200, lpOverlapped=0x0) returned 1 [0204.740] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x210, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x210, lpOverlapped=0x0) returned 1 [0204.741] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0xf2, lpOverlapped=0x0) returned 1 [0204.742] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fb90 | out: lpNewFilePointer=0x0) returned 1 [0204.742] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fb90 | out: lpNewFilePointer=0x0) returned 1 [0204.742] WriteFile (in: hFile=0x2e8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x3a0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fb9c*=0x200, lpOverlapped=0x0) returned 1 [0204.742] FlushFileBuffers (hFile=0x2e8) returned 1 [0204.796] FlushFileBuffers (hFile=0x2c8) returned 1 [0204.801] CloseHandle (hObject=0x2e8) returned 1 [0204.801] CloseHandle (hObject=0x2c8) returned 1 [0204.801] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\storage.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\storage.sqlite")) returned 1 [0204.802] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\webappsstore.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\webappsstore.sqlite"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0204.802] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x3a0fe68 | out: lpFileSize=0x3a0fe68*=98304) returned 1 [0204.802] CloseHandle (hObject=0x2c8) returned 1 [0204.802] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\webappsstore.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\webappsstore.sqlite")) returned 0x20 [0204.802] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\webappsstore.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\webappsstore.sqlite")) returned 0x20 [0204.802] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\webappsstore.sqlite.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\webappsstore.sqlite.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0204.803] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\webappsstore.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\webappsstore.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8 [0204.803] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fe30 | out: lpNewFilePointer=0x0) returned 1 [0204.803] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fe30 | out: lpNewFilePointer=0x0) returned 1 [0204.803] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\webappsstore.sqlite.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\webappsstore.sqlite.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e8 [0204.803] ReadFile (in: hFile=0x2c8, lpBuffer=0x3e86020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x3a0fe44, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesRead=0x3a0fe44*=0x18000, lpOverlapped=0x0) returned 1 [0204.812] WriteFile (in: hFile=0x2e8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x18010, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x18010, lpOverlapped=0x0) returned 1 [0204.814] WriteFile (in: hFile=0x2e8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x102, lpOverlapped=0x0) returned 1 [0204.815] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fb90 | out: lpNewFilePointer=0x0) returned 1 [0204.815] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fb90 | out: lpNewFilePointer=0x0) returned 1 [0204.815] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x18000, lpNumberOfBytesWritten=0x3a0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fb9c*=0x18000, lpOverlapped=0x0) returned 1 [0204.815] FlushFileBuffers (hFile=0x2c8) returned 1 [0205.459] FlushFileBuffers (hFile=0x2e8) returned 1 [0205.460] CloseHandle (hObject=0x2c8) returned 1 [0205.460] CloseHandle (hObject=0x2e8) returned 1 [0205.461] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\webappsstore.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\webappsstore.sqlite")) returned 1 [0205.462] ResetEvent (hEvent=0x2a0) returned 1 [0205.462] SetEvent (hEvent=0x2a4) returned 1 [0205.462] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\Documents\\Database1.accdb" (normalized: "c:\\users\\fd1hvy\\documents\\database1.accdb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0205.463] GetFileSizeEx (in: hFile=0x2e8, lpFileSize=0x3a0fe68 | out: lpFileSize=0x3a0fe68*=348160) returned 1 [0205.463] CloseHandle (hObject=0x2e8) returned 1 [0205.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\Documents\\Database1.accdb" (normalized: "c:\\users\\fd1hvy\\documents\\database1.accdb")) returned 0x20 [0205.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\Documents\\Database1.accdb" (normalized: "c:\\users\\fd1hvy\\documents\\database1.accdb")) returned 0x20 [0205.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\Documents\\Database1.accdb.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\documents\\database1.accdb.id[b4197730-2299].[britt.looper@aol.com].phoenix")) returned 0xffffffff [0205.463] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\Documents\\Database1.accdb" (normalized: "c:\\users\\fd1hvy\\documents\\database1.accdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8 [0205.463] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fe30 | out: lpNewFilePointer=0x0) returned 1 [0205.464] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fe30 | out: lpNewFilePointer=0x0) returned 1 [0205.464] CreateFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\Documents\\Database1.accdb.id[B4197730-2299].[britt.looper@aol.com].phoenix" (normalized: "c:\\users\\fd1hvy\\documents\\database1.accdb.id[b4197730-2299].[britt.looper@aol.com].phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2c8 [0205.464] ReadFile (in: hFile=0x2e8, lpBuffer=0x3e86020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x3a0fe44, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesRead=0x3a0fe44*=0x55000, lpOverlapped=0x0) returned 1 [0205.477] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x55010, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0x55010, lpOverlapped=0x0) returned 1 [0205.484] WriteFile (in: hFile=0x2c8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x3a0fe1c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fe1c*=0xf2, lpOverlapped=0x0) returned 1 [0205.484] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fb90 | out: lpNewFilePointer=0x0) returned 1 [0205.484] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x3a0fb90 | out: lpNewFilePointer=0x0) returned 1 [0205.484] WriteFile (in: hFile=0x2e8, lpBuffer=0x3e86020*, nNumberOfBytesToWrite=0x55000, lpNumberOfBytesWritten=0x3a0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3e86020*, lpNumberOfBytesWritten=0x3a0fb9c*=0x55000, lpOverlapped=0x0) returned 1 [0205.486] FlushFileBuffers (hFile=0x2e8) returned 1 [0205.489] FlushFileBuffers (hFile=0x2c8) returned 1 [0205.499] CloseHandle (hObject=0x2e8) returned 1 [0205.499] CloseHandle (hObject=0x2c8) returned 1 [0205.499] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\FD1HVy\\Documents\\Database1.accdb" (normalized: "c:\\users\\fd1hvy\\documents\\database1.accdb")) returned 1 [0205.504] GetProcessHeap () returned 0x12c0000 [0205.504] RtlAllocateHeap (HeapHandle=0x12c0000, Flags=0x0, Size=0x50) returned 0x4059210 [0205.504] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x74c00000 [0205.505] GetProcAddress (hModule=0x74c00000, lpProcName="Wow64RevertWow64FsRedirection") returned 0x74c16b50 [0205.505] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0205.505] GetProcessHeap () returned 0x12c0000 [0205.505] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x4059210 | out: hHeap=0x12c0000) returned 1 [0205.505] SetEvent (hEvent=0x2a0) returned 1 [0205.505] SetEvent (hEvent=0x29c) returned 1 [0205.505] SetEvent (hEvent=0x2a4) returned 1 [0205.506] GetProcessHeap () returned 0x12c0000 [0205.506] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3e86020 | out: hHeap=0x12c0000) returned 1 [0205.511] GetProcessHeap () returned 0x12c0000 [0205.511] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x12eb9c8 | out: hHeap=0x12c0000) returned 1 [0205.511] GetProcessHeap () returned 0x12c0000 [0205.511] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3c80058 | out: hHeap=0x12c0000) returned 1 [0205.512] GetProcessHeap () returned 0x12c0000 [0205.512] HeapFree (in: hHeap=0x12c0000, dwFlags=0x0, lpMem=0x3c90060 | out: hHeap=0x12c0000) returned 1 Thread: id = 118 os_tid = 0xd20 Process: id = "11" image_name = "cmd.exe" filename = "c:\\windows\\system32\\cmd.exe" page_root = "0x25393000" os_pid = "0xfa8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "10" os_parent_pid = "0xf90" cmd_line = "\"C:\\WINDOWS\\system32\\cmd.exe\"" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NQDPDE\\FD1HVy" bitness = "64" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00012070" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 84 os_tid = 0xfac [0157.484] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff757a20000 [0157.484] __set_app_type (_Type=0x1) [0157.484] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x7ff757a36d00) returned 0x0 [0157.484] __getmainargs (in: _Argc=0x7ff757a59200, _Argv=0x7ff757a59208, _Env=0x7ff757a59210, _DoWildCard=0, _StartInfo=0x7ff757a5921c | out: _Argc=0x7ff757a59200, _Argv=0x7ff757a59208, _Env=0x7ff757a59210) returned 0 [0157.484] _onexit (_Func=0x7ff757a37fd0) returned 0x7ff757a37fd0 [0157.485] _onexit (_Func=0x7ff757a37fe0) returned 0x7ff757a37fe0 [0157.485] _onexit (_Func=0x7ff757a37ff0) returned 0x7ff757a37ff0 [0157.485] _onexit (_Func=0x7ff757a38000) returned 0x7ff757a38000 [0157.485] _onexit (_Func=0x7ff757a38010) returned 0x7ff757a38010 [0157.486] _onexit (_Func=0x7ff757a38020) returned 0x7ff757a38020 [0157.486] GetCurrentThreadId () returned 0xfac [0157.486] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0xfac) returned 0x70 [0157.486] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x7ffc90920000 [0157.486] GetProcAddress (hModule=0x7ffc90920000, lpProcName="SetThreadUILanguage") returned 0x7ffc9093a990 [0157.487] SetThreadUILanguage (LangId=0x0) returned 0x409 [0157.492] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0157.492] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0xb2d23df708 | out: phkResult=0xb2d23df708*=0x0) returned 0x2 [0157.492] VirtualQuery (in: lpAddress=0xb2d23df6f4, lpBuffer=0xb2d23df670, dwLength=0x30 | out: lpBuffer=0xb2d23df670*(BaseAddress=0xb2d23df000, AllocationBase=0xb2d22e0000, AllocationProtect=0x4, __alignment1=0xffffcf06, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0157.492] VirtualQuery (in: lpAddress=0xb2d22e0000, lpBuffer=0xb2d23df670, dwLength=0x30 | out: lpBuffer=0xb2d23df670*(BaseAddress=0xb2d22e0000, AllocationBase=0xb2d22e0000, AllocationProtect=0x4, __alignment1=0xffffcf06, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0157.492] VirtualQuery (in: lpAddress=0xb2d22e1000, lpBuffer=0xb2d23df670, dwLength=0x30 | out: lpBuffer=0xb2d23df670*(BaseAddress=0xb2d22e1000, AllocationBase=0xb2d22e0000, AllocationProtect=0x4, __alignment1=0xffffcf06, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30 [0157.492] VirtualQuery (in: lpAddress=0xb2d22e4000, lpBuffer=0xb2d23df670, dwLength=0x30 | out: lpBuffer=0xb2d23df670*(BaseAddress=0xb2d22e4000, AllocationBase=0xb2d22e0000, AllocationProtect=0x4, __alignment1=0xffffcf06, RegionSize=0xfc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0157.492] VirtualQuery (in: lpAddress=0xb2d23e0000, lpBuffer=0xb2d23df670, dwLength=0x30 | out: lpBuffer=0xb2d23df670*(BaseAddress=0xb2d23e0000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0xffffcf06, RegionSize=0x20000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0157.492] GetConsoleOutputCP () returned 0x1b5 [0157.493] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff757a5fbb0 | out: lpCPInfo=0x7ff757a5fbb0) returned 1 [0157.493] SetConsoleCtrlHandler (HandlerRoutine=0x7ff757a48150, Add=1) returned 1 [0157.493] _get_osfhandle (_FileHandle=1) returned 0x224 [0157.493] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x7ff757a5fc04 | out: lpMode=0x7ff757a5fc04) returned 0 [0157.493] _get_osfhandle (_FileHandle=0) returned 0x218 [0157.493] GetConsoleMode (in: hConsoleHandle=0x218, lpMode=0x7ff757a5fc00 | out: lpMode=0x7ff757a5fc00) returned 0 [0157.493] _get_osfhandle (_FileHandle=1) returned 0x224 [0157.493] SetConsoleMode (hConsoleHandle=0x224, dwMode=0x0) returned 0 [0157.493] _get_osfhandle (_FileHandle=1) returned 0x224 [0157.493] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x7ff757a5fc08 | out: lpMode=0x7ff757a5fc08) returned 0 [0157.493] _get_osfhandle (_FileHandle=0) returned 0x218 [0157.493] GetConsoleMode (in: hConsoleHandle=0x218, lpMode=0x7ff757a5fc0c | out: lpMode=0x7ff757a5fc0c) returned 0 [0157.493] GetEnvironmentStringsW () returned 0x1c6d8495a10* [0157.494] GetProcessHeap () returned 0x1c6d8490000 [0157.494] RtlAllocateHeap (HeapHandle=0x1c6d8490000, Flags=0x8, Size=0xa7c) returned 0x1c6d84964a0 [0157.494] FreeEnvironmentStringsA (penv="A") returned 1 [0157.494] GetProcessHeap () returned 0x1c6d8490000 [0157.494] RtlAllocateHeap (HeapHandle=0x1c6d8490000, Flags=0x8, Size=0x8) returned 0x1c6d8496f30 [0157.494] GetEnvironmentStringsW () returned 0x1c6d8495a10* [0157.494] GetProcessHeap () returned 0x1c6d8490000 [0157.494] RtlAllocateHeap (HeapHandle=0x1c6d8490000, Flags=0x8, Size=0xa7c) returned 0x1c6d8496f50 [0157.494] FreeEnvironmentStringsA (penv="A") returned 1 [0157.494] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0xb2d23de5b8 | out: phkResult=0xb2d23de5b8*=0x7c) returned 0x0 [0157.494] RegQueryValueExW (in: hKey=0x7c, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0xb2d23de5b0, lpData=0xb2d23de5d0, lpcbData=0xb2d23de5b4*=0x1000 | out: lpType=0xb2d23de5b0*=0x0, lpData=0xb2d23de5d0*=0x4, lpcbData=0xb2d23de5b4*=0x1000) returned 0x2 [0157.494] RegQueryValueExW (in: hKey=0x7c, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0xb2d23de5b0, lpData=0xb2d23de5d0, lpcbData=0xb2d23de5b4*=0x1000 | out: lpType=0xb2d23de5b0*=0x4, lpData=0xb2d23de5d0*=0x1, lpcbData=0xb2d23de5b4*=0x4) returned 0x0 [0157.494] RegQueryValueExW (in: hKey=0x7c, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0xb2d23de5b0, lpData=0xb2d23de5d0, lpcbData=0xb2d23de5b4*=0x1000 | out: lpType=0xb2d23de5b0*=0x0, lpData=0xb2d23de5d0*=0x1, lpcbData=0xb2d23de5b4*=0x1000) returned 0x2 [0157.494] RegQueryValueExW (in: hKey=0x7c, lpValueName="DefaultColor", lpReserved=0x0, lpType=0xb2d23de5b0, lpData=0xb2d23de5d0, lpcbData=0xb2d23de5b4*=0x1000 | out: lpType=0xb2d23de5b0*=0x4, lpData=0xb2d23de5d0*=0x0, lpcbData=0xb2d23de5b4*=0x4) returned 0x0 [0157.494] RegQueryValueExW (in: hKey=0x7c, lpValueName="CompletionChar", lpReserved=0x0, lpType=0xb2d23de5b0, lpData=0xb2d23de5d0, lpcbData=0xb2d23de5b4*=0x1000 | out: lpType=0xb2d23de5b0*=0x4, lpData=0xb2d23de5d0*=0x40, lpcbData=0xb2d23de5b4*=0x4) returned 0x0 [0157.494] RegQueryValueExW (in: hKey=0x7c, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0xb2d23de5b0, lpData=0xb2d23de5d0, lpcbData=0xb2d23de5b4*=0x1000 | out: lpType=0xb2d23de5b0*=0x4, lpData=0xb2d23de5d0*=0x40, lpcbData=0xb2d23de5b4*=0x4) returned 0x0 [0157.495] RegQueryValueExW (in: hKey=0x7c, lpValueName="AutoRun", lpReserved=0x0, lpType=0xb2d23de5b0, lpData=0xb2d23de5d0, lpcbData=0xb2d23de5b4*=0x1000 | out: lpType=0xb2d23de5b0*=0x0, lpData=0xb2d23de5d0*=0x40, lpcbData=0xb2d23de5b4*=0x1000) returned 0x2 [0157.495] RegCloseKey (hKey=0x7c) returned 0x0 [0157.495] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0xb2d23de5b8 | out: phkResult=0xb2d23de5b8*=0x7c) returned 0x0 [0157.495] RegQueryValueExW (in: hKey=0x7c, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0xb2d23de5b0, lpData=0xb2d23de5d0, lpcbData=0xb2d23de5b4*=0x1000 | out: lpType=0xb2d23de5b0*=0x0, lpData=0xb2d23de5d0*=0x40, lpcbData=0xb2d23de5b4*=0x1000) returned 0x2 [0157.495] RegQueryValueExW (in: hKey=0x7c, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0xb2d23de5b0, lpData=0xb2d23de5d0, lpcbData=0xb2d23de5b4*=0x1000 | out: lpType=0xb2d23de5b0*=0x4, lpData=0xb2d23de5d0*=0x1, lpcbData=0xb2d23de5b4*=0x4) returned 0x0 [0157.495] RegQueryValueExW (in: hKey=0x7c, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0xb2d23de5b0, lpData=0xb2d23de5d0, lpcbData=0xb2d23de5b4*=0x1000 | out: lpType=0xb2d23de5b0*=0x0, lpData=0xb2d23de5d0*=0x1, lpcbData=0xb2d23de5b4*=0x1000) returned 0x2 [0157.495] RegQueryValueExW (in: hKey=0x7c, lpValueName="DefaultColor", lpReserved=0x0, lpType=0xb2d23de5b0, lpData=0xb2d23de5d0, lpcbData=0xb2d23de5b4*=0x1000 | out: lpType=0xb2d23de5b0*=0x4, lpData=0xb2d23de5d0*=0x0, lpcbData=0xb2d23de5b4*=0x4) returned 0x0 [0157.495] RegQueryValueExW (in: hKey=0x7c, lpValueName="CompletionChar", lpReserved=0x0, lpType=0xb2d23de5b0, lpData=0xb2d23de5d0, lpcbData=0xb2d23de5b4*=0x1000 | out: lpType=0xb2d23de5b0*=0x4, lpData=0xb2d23de5d0*=0x9, lpcbData=0xb2d23de5b4*=0x4) returned 0x0 [0157.495] RegQueryValueExW (in: hKey=0x7c, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0xb2d23de5b0, lpData=0xb2d23de5d0, lpcbData=0xb2d23de5b4*=0x1000 | out: lpType=0xb2d23de5b0*=0x4, lpData=0xb2d23de5d0*=0x9, lpcbData=0xb2d23de5b4*=0x4) returned 0x0 [0157.495] RegQueryValueExW (in: hKey=0x7c, lpValueName="AutoRun", lpReserved=0x0, lpType=0xb2d23de5b0, lpData=0xb2d23de5d0, lpcbData=0xb2d23de5b4*=0x1000 | out: lpType=0xb2d23de5b0*=0x0, lpData=0xb2d23de5d0*=0x9, lpcbData=0xb2d23de5b4*=0x1000) returned 0x2 [0157.495] RegCloseKey (hKey=0x7c) returned 0x0 [0157.495] time (in: timer=0x0 | out: timer=0x0) returned 0x5d7aec86 [0157.495] srand (_Seed=0x5d7aec86) [0157.495] GetCommandLineW () returned="\"C:\\WINDOWS\\system32\\cmd.exe\"" [0157.495] malloc (_Size=0x4000) returned 0x1c6d87854f0 [0157.496] GetCommandLineW () returned="\"C:\\WINDOWS\\system32\\cmd.exe\"" [0157.496] malloc (_Size=0xffce) returned 0x1c6d8590080 [0157.496] ??_V@YAXPEAX@Z () returned 0x1c6d8590080 [0157.497] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x1c6d8590080 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13 [0157.497] malloc (_Size=0xffce) returned 0x1c6d85a0060 [0157.497] ??_V@YAXPEAX@Z () returned 0x1c6d85a0060 [0157.498] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1c6d85a0060, nSize=0x7fe7 | out: lpFilename="C:\\WINDOWS\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe")) returned 0x1b [0157.498] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x7ff757a5bb90, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0157.498] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff757a5bb90, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0157.498] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x7ff757a5bb90, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0157.498] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0157.498] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0157.498] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0157.498] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0157.499] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0157.499] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0157.499] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0157.499] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0157.499] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0157.499] GetProcessHeap () returned 0x1c6d8490000 [0157.499] RtlFreeHeap (HeapHandle=0x1c6d8490000, Flags=0x0, BaseAddress=0x1c6d84964a0) returned 1 [0157.499] GetEnvironmentStringsW () returned 0x1c6d8495a10* [0157.499] GetProcessHeap () returned 0x1c6d8490000 [0157.499] RtlAllocateHeap (HeapHandle=0x1c6d8490000, Flags=0x8, Size=0xa94) returned 0x1c6d8497a10 [0157.499] FreeEnvironmentStringsA (penv="A") returned 1 [0157.499] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x7ff757a5bb90, nSize=0x2000 | out: lpBuffer="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1b [0157.499] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x7ff757a5bb90, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0157.499] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0157.499] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0157.499] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0157.499] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0157.499] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0157.499] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0157.499] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0157.499] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0157.500] malloc (_Size=0xffce) returned 0x1c6d85b0040 [0157.500] ??_V@YAXPEAX@Z () returned 0x1c6d85b0040 [0157.501] GetProcessHeap () returned 0x1c6d8490000 [0157.501] RtlAllocateHeap (HeapHandle=0x1c6d8490000, Flags=0x8, Size=0x38) returned 0x1c6d84984b0 [0157.501] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x1c6d85b0040 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13 [0157.502] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32", nBufferLength=0x7fe7, lpBuffer=0x1c6d85b0040, lpFilePart=0xb2d23df130 | out: lpBuffer="C:\\WINDOWS\\system32", lpFilePart=0xb2d23df130*="system32") returned 0x13 [0157.502] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32" (normalized: "c:\\windows\\system32")) returned 0x10 [0157.503] FindFirstFileW (in: lpFileName="C:\\WINDOWS", lpFindFileData=0xb2d23dee60 | out: lpFindFileData=0xb2d23dee60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0xc838b81d, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0xc838b81d, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x1c6d84984f0 [0157.503] FindClose (in: hFindFile=0x1c6d84984f0 | out: hFindFile=0x1c6d84984f0) returned 1 [0157.503] FindFirstFileW (in: lpFileName="C:\\Windows\\system32", lpFindFileData=0xb2d23dee60 | out: lpFindFileData=0xb2d23dee60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x8187ef5e, ftLastAccessTime.dwHighDateTime=0x1d4d5d3, ftLastWriteTime.dwLowDateTime=0x8187ef5e, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System32", cAlternateFileName="")) returned 0x1c6d84984f0 [0157.503] FindClose (in: hFindFile=0x1c6d84984f0 | out: hFindFile=0x1c6d84984f0) returned 1 [0157.503] GetFileAttributesW (lpFileName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 0x10 [0157.503] SetCurrentDirectoryW (lpPathName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 1 [0157.503] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Windows\\System32") returned 1 [0157.503] GetProcessHeap () returned 0x1c6d8490000 [0157.503] RtlFreeHeap (HeapHandle=0x1c6d8490000, Flags=0x0, BaseAddress=0x1c6d8497a10) returned 1 [0157.503] GetEnvironmentStringsW () returned 0x1c6d84984f0* [0157.503] GetProcessHeap () returned 0x1c6d8490000 [0157.503] RtlAllocateHeap (HeapHandle=0x1c6d8490000, Flags=0x8, Size=0xac4) returned 0x1c6d8495a10 [0157.503] FreeEnvironmentStringsA (penv="=") returned 1 [0157.503] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x1c6d8590080 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13 [0157.503] GetProcessHeap () returned 0x1c6d8490000 [0157.503] RtlFreeHeap (HeapHandle=0x1c6d8490000, Flags=0x0, BaseAddress=0x1c6d84984b0) returned 1 [0157.504] ??_V@YAXPEAX@Z () returned 0x1 [0157.504] ??_V@YAXPEAX@Z () returned 0x1 [0157.504] GetProcessHeap () returned 0x1c6d8490000 [0157.504] RtlAllocateHeap (HeapHandle=0x1c6d8490000, Flags=0x8, Size=0x4016) returned 0x1c6d8497a10 [0157.504] GetProcessHeap () returned 0x1c6d8490000 [0157.504] RtlFreeHeap (HeapHandle=0x1c6d8490000, Flags=0x0, BaseAddress=0x1c6d8497a10) returned 1 [0157.504] GetConsoleOutputCP () returned 0x1b5 [0157.504] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff757a5fbb0 | out: lpCPInfo=0x7ff757a5fbb0) returned 1 [0157.504] GetUserDefaultLCID () returned 0x409 [0157.505] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x7ff757a5bb78, cchData=8 | out: lpLCData=":") returned 2 [0157.505] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0xb2d23df4f0, cchData=128 | out: lpLCData="0") returned 2 [0157.505] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0xb2d23df4f0, cchData=128 | out: lpLCData="0") returned 2 [0157.505] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0xb2d23df4f0, cchData=128 | out: lpLCData="1") returned 2 [0157.505] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x7ff757a5bb68, cchData=8 | out: lpLCData="/") returned 2 [0157.505] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x7ff757a5bb00, cchData=32 | out: lpLCData="Mon") returned 4 [0157.505] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x7ff757a5bac0, cchData=32 | out: lpLCData="Tue") returned 4 [0157.505] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x7ff757a5ba80, cchData=32 | out: lpLCData="Wed") returned 4 [0157.505] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x7ff757a5ba40, cchData=32 | out: lpLCData="Thu") returned 4 [0157.505] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x7ff757a5ba00, cchData=32 | out: lpLCData="Fri") returned 4 [0157.505] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x7ff757a5b9c0, cchData=32 | out: lpLCData="Sat") returned 4 [0157.505] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x7ff757a5b980, cchData=32 | out: lpLCData="Sun") returned 4 [0157.505] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x7ff757a5bb58, cchData=8 | out: lpLCData=".") returned 2 [0157.505] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x7ff757a5bb40, cchData=8 | out: lpLCData=",") returned 2 [0157.505] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0157.507] GetProcessHeap () returned 0x1c6d8490000 [0157.507] RtlAllocateHeap (HeapHandle=0x1c6d8490000, Flags=0x0, Size=0x20c) returned 0x1c6d8496550 [0157.507] GetConsoleTitleW (in: lpConsoleTitle=0x1c6d8496550, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0157.508] _get_osfhandle (_FileHandle=1) returned 0x224 [0157.508] GetFileType (hFile=0x224) returned 0x3 [0157.509] ApiSetQueryApiSetPresence () returned 0x0 [0157.509] ResolveDelayLoadedAPI () returned 0x7ffc8515d990 [0157.527] BrandingFormatString () returned 0x1c6d8496c20 [0157.539] GetVersion () returned 0x3ad7000a [0157.539] _vsnwprintf (in: _Buffer=0xb2d23df650, _BufferCount=0x1f, _Format="%d.%d.%04d", _ArgList=0xb2d23df5e8 | out: _Buffer="10.0.15063") returned 10 [0157.539] _get_osfhandle (_FileHandle=1) returned 0x224 [0157.539] GetFileType (hFile=0x224) returned 0x3 [0157.539] FormatMessageW (in: dwFlags=0x1a00, lpSource=0x0, dwMessageId=0x2350, dwLanguageId=0x0, lpBuffer=0x7ff757a67f60, nSize=0x2000, Arguments=0x0 | out: lpBuffer="Microsoft Windows [Version %1]") returned 0x1e [0157.540] FormatMessageW (in: dwFlags=0x1800, lpSource=0x0, dwMessageId=0x2350, dwLanguageId=0x0, lpBuffer=0x7ff757a67f60, nSize=0x2000, Arguments=0xb2d23df5f0 | out: lpBuffer="Microsoft Windows [Version 10.0.15063]") returned 0x26 [0157.540] _get_osfhandle (_FileHandle=1) returned 0x224 [0157.540] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Windows [Version 10.0.15063]", cchWideChar=-1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Windows [Version 10.0.15063]", lpUsedDefaultChar=0x0) returned 39 [0157.540] WriteFile (in: hFile=0x224, lpBuffer=0x7ff757a59970*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0xb2d23df548, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesWritten=0xb2d23df548*=0x26, lpOverlapped=0x0) returned 1 [0157.540] _vsnwprintf (in: _Buffer=0x7ff757a67f60, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0xb2d23df618 | out: _Buffer="\r\n") returned 2 [0157.540] _get_osfhandle (_FileHandle=1) returned 0x224 [0157.540] GetFileType (hFile=0x224) returned 0x3 [0157.540] _get_osfhandle (_FileHandle=1) returned 0x224 [0157.540] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3 [0157.540] WriteFile (in: hFile=0x224, lpBuffer=0x7ff757a59970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0xb2d23df5e8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesWritten=0xb2d23df5e8*=0x2, lpOverlapped=0x0) returned 1 [0157.540] _vsnwprintf (in: _Buffer=0x7ff757a67f60, _BufferCount=0x1fff, _Format="%s", _ArgList=0xb2d23df618 | out: _Buffer="(c) 2017 Microsoft Corporation. All rights reserved.") returned 52 [0157.540] _get_osfhandle (_FileHandle=1) returned 0x224 [0157.540] GetFileType (hFile=0x224) returned 0x3 [0157.540] _get_osfhandle (_FileHandle=1) returned 0x224 [0157.540] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="(c) 2017 Microsoft Corporation. All rights reserved.", cchWideChar=-1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="(c) 2017 Microsoft Corporation. All rights reserved.", lpUsedDefaultChar=0x0) returned 53 [0157.541] WriteFile (in: hFile=0x224, lpBuffer=0x7ff757a59970*, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0xb2d23df5e8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesWritten=0xb2d23df5e8*=0x34, lpOverlapped=0x0) returned 1 [0157.541] _vsnwprintf (in: _Buffer=0x7ff757a67f60, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0xb2d23df618 | out: _Buffer="\r\n") returned 2 [0157.541] _get_osfhandle (_FileHandle=1) returned 0x224 [0157.541] GetFileType (hFile=0x224) returned 0x3 [0157.541] _get_osfhandle (_FileHandle=1) returned 0x224 [0157.541] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3 [0157.541] WriteFile (in: hFile=0x224, lpBuffer=0x7ff757a59970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0xb2d23df5e8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesWritten=0xb2d23df5e8*=0x2, lpOverlapped=0x0) returned 1 [0157.541] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x7ffc90920000 [0157.542] GetProcAddress (hModule=0x7ffc90920000, lpProcName="CopyFileExW") returned 0x7ffc9093e830 [0157.542] GetProcAddress (hModule=0x7ffc90920000, lpProcName="IsDebuggerPresent") returned 0x7ffc9093e300 [0157.542] GetProcAddress (hModule=0x7ffc90920000, lpProcName="SetConsoleInputExeNameW") returned 0x7ffc8f860a40 [0157.542] ??_V@YAXPEAX@Z () returned 0x1 [0157.543] _get_osfhandle (_FileHandle=0) returned 0x218 [0157.543] GetFileType (hFile=0x218) returned 0x3 [0157.543] _setmode (_FileHandle=0, _Mode=32768) returned 16384 [0157.543] NtOpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x8, OpenAsSelf=0, TokenHandle=0xb2d23df458 | out: TokenHandle=0xb2d23df458*=0x0) returned 0xc000007c [0157.543] NtOpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x8, TokenHandle=0xb2d23df458 | out: TokenHandle=0xb2d23df458*=0x94) returned 0x0 [0157.543] NtQueryInformationToken (in: TokenHandle=0x94, TokenInformationClass=0x12, TokenInformation=0xb2d23df408, TokenInformationLength=0x4, ReturnLength=0xb2d23df410 | out: TokenInformation=0xb2d23df408, ReturnLength=0xb2d23df410) returned 0x0 [0157.543] NtQueryInformationToken (in: TokenHandle=0x94, TokenInformationClass=0x1a, TokenInformation=0xb2d23df410, TokenInformationLength=0x4, ReturnLength=0xb2d23df408 | out: TokenInformation=0xb2d23df410, ReturnLength=0xb2d23df408) returned 0x0 [0157.543] NtClose (Handle=0x94) returned 0x0 [0157.543] FormatMessageW (in: dwFlags=0x1900, lpSource=0x0, dwMessageId=0x40002748, dwLanguageId=0x0, lpBuffer=0xb2d23df420, nSize=0x0, Arguments=0xb2d23df428 | out: lpBuffer="渰?dž") returned 0xf [0157.543] GetProcessHeap () returned 0x1c6d8490000 [0157.543] RtlAllocateHeap (HeapHandle=0x1c6d8490000, Flags=0x8, Size=0x218) returned 0x1c6d8498bb0 [0157.544] GetConsoleTitleW (in: lpConsoleTitle=0xb2d23df470, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0157.547] wcsstr (_Str="C:\\WINDOWS\\system32\\cmd.exe", _SubStr="Administrator: ") returned 0x0 [0157.547] SetConsoleTitleW (lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe") returned 1 [0157.556] GetProcessHeap () returned 0x1c6d8490000 [0157.556] RtlFreeHeap (HeapHandle=0x1c6d8490000, Flags=0x0, BaseAddress=0x1c6d8498bb0) returned 1 [0157.556] LocalFree (hMem=0x1c6d8496e30) returned 0x0 [0157.558] _vsnwprintf (in: _Buffer=0x7ff757a67f60, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0xb2d23df298 | out: _Buffer="\r\n") returned 2 [0157.558] _get_osfhandle (_FileHandle=1) returned 0x224 [0157.558] GetFileType (hFile=0x224) returned 0x3 [0157.558] _get_osfhandle (_FileHandle=1) returned 0x224 [0157.558] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3 [0157.558] WriteFile (in: hFile=0x224, lpBuffer=0x7ff757a59970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0xb2d23df268, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesWritten=0xb2d23df268*=0x2, lpOverlapped=0x0) returned 1 [0157.558] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x7ff757a5bb90, nSize=0x2000 | out: lpBuffer="$P$G") returned 0x4 [0157.558] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x1c6d8590080 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13 [0157.558] malloc (_Size=0x107ce) returned 0x1c6d85a0060 [0157.559] _vsnwprintf (in: _Buffer=0x1c6d85a0060, _BufferCount=0x83e5, _Format="%s", _ArgList=0xb2d23df2a8 | out: _Buffer="C:\\WINDOWS\\system32") returned 19 [0157.559] _vsnwprintf (in: _Buffer=0x1c6d85a0086, _BufferCount=0x83d2, _Format="%c", _ArgList=0xb2d23df2a8 | out: _Buffer=">") returned 1 [0157.559] _get_osfhandle (_FileHandle=1) returned 0x224 [0157.559] GetFileType (hFile=0x224) returned 0x3 [0157.559] _get_osfhandle (_FileHandle=1) returned 0x224 [0157.559] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\WINDOWS\\system32>", cchWideChar=-1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\WINDOWS\\system32>", lpUsedDefaultChar=0x0) returned 21 [0157.559] WriteFile (in: hFile=0x224, lpBuffer=0x7ff757a59970*, nNumberOfBytesToWrite=0x14, lpNumberOfBytesWritten=0xb2d23df298, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesWritten=0xb2d23df298*=0x14, lpOverlapped=0x0) returned 1 [0157.559] _get_osfhandle (_FileHandle=0) returned 0x218 [0157.559] GetFileType (hFile=0x218) returned 0x3 [0157.559] _get_osfhandle (_FileHandle=0) returned 0x218 [0157.559] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0157.559] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0157.559] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c30, cchWideChar=1 | out: lpWideCharStr="n") returned 1 [0157.559] _get_osfhandle (_FileHandle=0) returned 0x218 [0157.559] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0157.559] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0157.560] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c32, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0157.560] _get_osfhandle (_FileHandle=0) returned 0x218 [0157.560] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0157.560] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0157.560] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c34, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0157.560] _get_osfhandle (_FileHandle=0) returned 0x218 [0157.560] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0157.560] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0157.560] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c36, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0157.560] _get_osfhandle (_FileHandle=0) returned 0x218 [0157.560] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0157.560] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0157.560] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c38, cchWideChar=1 | out: lpWideCharStr="h") returned 1 [0157.560] _get_osfhandle (_FileHandle=0) returned 0x218 [0157.560] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0157.560] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0157.560] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c3a, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0157.560] _get_osfhandle (_FileHandle=0) returned 0x218 [0157.560] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0157.560] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0157.560] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c3c, cchWideChar=1 | out: lpWideCharStr="a") returned 1 [0157.560] _get_osfhandle (_FileHandle=0) returned 0x218 [0157.560] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0157.560] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0157.561] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c3e, cchWideChar=1 | out: lpWideCharStr="d") returned 1 [0157.561] _get_osfhandle (_FileHandle=0) returned 0x218 [0157.561] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0157.561] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0157.561] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c40, cchWideChar=1 | out: lpWideCharStr="v") returned 1 [0157.561] _get_osfhandle (_FileHandle=0) returned 0x218 [0157.561] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0157.561] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0157.561] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c42, cchWideChar=1 | out: lpWideCharStr="f") returned 1 [0157.561] _get_osfhandle (_FileHandle=0) returned 0x218 [0157.561] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0157.561] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0157.561] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c44, cchWideChar=1 | out: lpWideCharStr="i") returned 1 [0157.561] _get_osfhandle (_FileHandle=0) returned 0x218 [0157.561] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0157.562] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0157.562] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c46, cchWideChar=1 | out: lpWideCharStr="r") returned 1 [0157.562] _get_osfhandle (_FileHandle=0) returned 0x218 [0157.562] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0157.562] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0157.562] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c48, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0157.562] _get_osfhandle (_FileHandle=0) returned 0x218 [0157.562] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0157.562] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0157.562] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c4a, cchWideChar=1 | out: lpWideCharStr="w") returned 1 [0157.562] _get_osfhandle (_FileHandle=0) returned 0x218 [0157.562] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0157.562] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0157.562] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c4c, cchWideChar=1 | out: lpWideCharStr="a") returned 1 [0157.562] _get_osfhandle (_FileHandle=0) returned 0x218 [0157.562] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0157.562] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0157.562] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c4e, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0157.562] _get_osfhandle (_FileHandle=0) returned 0x218 [0157.562] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0157.562] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0157.562] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c50, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0157.562] _get_osfhandle (_FileHandle=0) returned 0x218 [0157.562] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0157.563] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0157.563] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c52, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0157.563] _get_osfhandle (_FileHandle=0) returned 0x218 [0157.563] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0157.563] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0157.563] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c54, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0157.563] _get_osfhandle (_FileHandle=0) returned 0x218 [0157.563] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0157.563] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0157.563] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c56, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0157.563] _get_osfhandle (_FileHandle=0) returned 0x218 [0157.563] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0157.563] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0157.564] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c58, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0157.564] _get_osfhandle (_FileHandle=0) returned 0x218 [0157.564] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0157.564] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0157.564] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c5a, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0157.564] _get_osfhandle (_FileHandle=0) returned 0x218 [0157.564] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0157.564] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0157.564] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c5c, cchWideChar=1 | out: lpWideCharStr="c") returned 1 [0157.564] _get_osfhandle (_FileHandle=0) returned 0x218 [0157.564] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0157.564] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0157.564] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c5e, cchWideChar=1 | out: lpWideCharStr="u") returned 1 [0157.564] _get_osfhandle (_FileHandle=0) returned 0x218 [0157.564] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0157.564] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0157.565] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c60, cchWideChar=1 | out: lpWideCharStr="r") returned 1 [0157.565] _get_osfhandle (_FileHandle=0) returned 0x218 [0157.565] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0157.565] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0157.565] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c62, cchWideChar=1 | out: lpWideCharStr="r") returned 1 [0157.565] _get_osfhandle (_FileHandle=0) returned 0x218 [0157.565] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0157.565] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0157.565] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c64, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0157.565] _get_osfhandle (_FileHandle=0) returned 0x218 [0157.565] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0157.565] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0157.565] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c66, cchWideChar=1 | out: lpWideCharStr="n") returned 1 [0157.565] _get_osfhandle (_FileHandle=0) returned 0x218 [0157.565] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0157.565] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0157.565] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c68, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0157.565] _get_osfhandle (_FileHandle=0) returned 0x218 [0157.565] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0157.565] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0157.565] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c6a, cchWideChar=1 | out: lpWideCharStr="p") returned 1 [0157.565] _get_osfhandle (_FileHandle=0) returned 0x218 [0157.565] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0157.565] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0157.566] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c6c, cchWideChar=1 | out: lpWideCharStr="r") returned 1 [0157.566] _get_osfhandle (_FileHandle=0) returned 0x218 [0157.566] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0157.566] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0157.566] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c6e, cchWideChar=1 | out: lpWideCharStr="o") returned 1 [0157.566] _get_osfhandle (_FileHandle=0) returned 0x218 [0157.566] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0157.566] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0157.566] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c70, cchWideChar=1 | out: lpWideCharStr="f") returned 1 [0157.566] _get_osfhandle (_FileHandle=0) returned 0x218 [0157.566] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0157.566] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0157.566] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c72, cchWideChar=1 | out: lpWideCharStr="i") returned 1 [0157.566] _get_osfhandle (_FileHandle=0) returned 0x218 [0157.566] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0157.566] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0157.566] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c74, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0157.566] _get_osfhandle (_FileHandle=0) returned 0x218 [0157.566] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0157.566] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0157.566] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c76, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0157.566] _get_osfhandle (_FileHandle=0) returned 0x218 [0157.566] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0157.566] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0157.566] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c78, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0157.566] _get_osfhandle (_FileHandle=0) returned 0x218 [0157.567] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0157.567] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0157.567] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c7a, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0157.567] _get_osfhandle (_FileHandle=0) returned 0x218 [0157.567] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0157.567] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0157.567] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c7c, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0157.567] _get_osfhandle (_FileHandle=0) returned 0x218 [0157.567] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0157.567] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0157.567] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c7e, cchWideChar=1 | out: lpWideCharStr="a") returned 1 [0157.567] _get_osfhandle (_FileHandle=0) returned 0x218 [0157.567] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0157.567] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0157.567] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c80, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0157.567] _get_osfhandle (_FileHandle=0) returned 0x218 [0157.567] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0157.567] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0157.567] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c82, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0157.567] _get_osfhandle (_FileHandle=0) returned 0x218 [0157.567] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0157.567] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0157.567] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c84, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0157.568] _get_osfhandle (_FileHandle=0) returned 0x218 [0157.568] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0157.568] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0157.568] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c86, cchWideChar=1 | out: lpWideCharStr="o") returned 1 [0157.568] _get_osfhandle (_FileHandle=0) returned 0x218 [0157.568] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0157.568] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0157.568] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c88, cchWideChar=1 | out: lpWideCharStr="f") returned 1 [0157.568] _get_osfhandle (_FileHandle=0) returned 0x218 [0157.568] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0157.568] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0157.568] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c8a, cchWideChar=1 | out: lpWideCharStr="f") returned 1 [0157.568] _get_osfhandle (_FileHandle=0) returned 0x218 [0157.568] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0157.568] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0157.568] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c8c, cchWideChar=1 | out: lpWideCharStr="\n") returned 1 [0157.569] _get_osfhandle (_FileHandle=0) returned 0x218 [0157.569] GetFileType (hFile=0x218) returned 0x3 [0157.569] _get_osfhandle (_FileHandle=0) returned 0x218 [0157.569] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0157.569] _get_osfhandle (_FileHandle=1) returned 0x224 [0157.569] GetFileType (hFile=0x224) returned 0x3 [0157.569] _get_osfhandle (_FileHandle=1) returned 0x224 [0157.569] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="netsh advfirewall set currentprofile state off\n", cchWideChar=-1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netsh advfirewall set currentprofile state off\n", lpUsedDefaultChar=0x0) returned 48 [0157.569] WriteFile (in: hFile=0x224, lpBuffer=0x7ff757a59970*, nNumberOfBytesToWrite=0x2f, lpNumberOfBytesWritten=0xb2d23df598, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesWritten=0xb2d23df598*=0x2f, lpOverlapped=0x0) returned 1 [0157.570] GetProcessHeap () returned 0x1c6d8490000 [0157.570] RtlAllocateHeap (HeapHandle=0x1c6d8490000, Flags=0x8, Size=0x4012) returned 0x1c6d8498bb0 [0157.570] GetProcessHeap () returned 0x1c6d8490000 [0157.570] RtlFreeHeap (HeapHandle=0x1c6d8490000, Flags=0x0, BaseAddress=0x1c6d8498bb0) returned 1 [0157.570] _wcsicmp (_String1="netsh", _String2=")") returned 69 [0157.570] _wcsicmp (_String1="FOR", _String2="netsh") returned -8 [0157.571] _wcsicmp (_String1="FOR/?", _String2="netsh") returned -8 [0157.571] _wcsicmp (_String1="IF", _String2="netsh") returned -5 [0157.571] _wcsicmp (_String1="IF/?", _String2="netsh") returned -5 [0157.571] _wcsicmp (_String1="REM", _String2="netsh") returned 4 [0157.571] _wcsicmp (_String1="REM/?", _String2="netsh") returned 4 [0157.571] GetProcessHeap () returned 0x1c6d8490000 [0157.571] RtlAllocateHeap (HeapHandle=0x1c6d8490000, Flags=0x8, Size=0xb0) returned 0x1c6d8496e30 [0157.571] GetProcessHeap () returned 0x1c6d8490000 [0157.571] RtlAllocateHeap (HeapHandle=0x1c6d8490000, Flags=0x8, Size=0x1c) returned 0x1c6d8496c60 [0157.572] GetProcessHeap () returned 0x1c6d8490000 [0157.572] RtlAllocateHeap (HeapHandle=0x1c6d8490000, Flags=0x8, Size=0x64) returned 0x1c6d8498bb0 [0157.573] GetConsoleOutputCP () returned 0x1b5 [0157.576] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff757a5fbb0 | out: lpCPInfo=0x7ff757a5fbb0) returned 1 [0157.576] SetThreadUILanguage (LangId=0x0) returned 0x409 [0157.577] GetConsoleTitleW (in: lpConsoleTitle=0xb2d23df3e0, nSize=0x104 | out: lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe") returned 0x2b [0157.577] malloc (_Size=0xffce) returned 0x1c6d85b0840 [0157.577] ??_V@YAXPEAX@Z () returned 0x1c6d85b0840 [0157.578] malloc (_Size=0xffce) returned 0x1c6d85c0820 [0157.578] ??_V@YAXPEAX@Z () returned 0x1c6d85c0820 [0157.579] _wcsicmp (_String1="netsh", _String2="DIR") returned 10 [0157.579] _wcsicmp (_String1="netsh", _String2="ERASE") returned 9 [0157.579] _wcsicmp (_String1="netsh", _String2="DEL") returned 10 [0157.579] _wcsicmp (_String1="netsh", _String2="TYPE") returned -6 [0157.579] _wcsicmp (_String1="netsh", _String2="COPY") returned 11 [0157.579] _wcsicmp (_String1="netsh", _String2="CD") returned 11 [0157.579] _wcsicmp (_String1="netsh", _String2="CHDIR") returned 11 [0157.579] _wcsicmp (_String1="netsh", _String2="RENAME") returned -4 [0157.579] _wcsicmp (_String1="netsh", _String2="REN") returned -4 [0157.579] _wcsicmp (_String1="netsh", _String2="ECHO") returned 9 [0157.579] _wcsicmp (_String1="netsh", _String2="SET") returned -5 [0157.579] _wcsicmp (_String1="netsh", _String2="PAUSE") returned -2 [0157.579] _wcsicmp (_String1="netsh", _String2="DATE") returned 10 [0157.579] _wcsicmp (_String1="netsh", _String2="TIME") returned -6 [0157.579] _wcsicmp (_String1="netsh", _String2="PROMPT") returned -2 [0157.579] _wcsicmp (_String1="netsh", _String2="MD") returned 1 [0157.579] _wcsicmp (_String1="netsh", _String2="MKDIR") returned 1 [0157.579] _wcsicmp (_String1="netsh", _String2="RD") returned -4 [0157.579] _wcsicmp (_String1="netsh", _String2="RMDIR") returned -4 [0157.579] _wcsicmp (_String1="netsh", _String2="PATH") returned -2 [0157.579] _wcsicmp (_String1="netsh", _String2="GOTO") returned 7 [0157.579] _wcsicmp (_String1="netsh", _String2="SHIFT") returned -5 [0157.579] _wcsicmp (_String1="netsh", _String2="CLS") returned 11 [0157.579] _wcsicmp (_String1="netsh", _String2="CALL") returned 11 [0157.579] _wcsicmp (_String1="netsh", _String2="VERIFY") returned -8 [0157.580] _wcsicmp (_String1="netsh", _String2="VER") returned -8 [0157.580] _wcsicmp (_String1="netsh", _String2="VOL") returned -8 [0157.580] _wcsicmp (_String1="netsh", _String2="EXIT") returned 9 [0157.580] _wcsicmp (_String1="netsh", _String2="SETLOCAL") returned -5 [0157.580] _wcsicmp (_String1="netsh", _String2="ENDLOCAL") returned 9 [0157.580] _wcsicmp (_String1="netsh", _String2="TITLE") returned -6 [0157.580] _wcsicmp (_String1="netsh", _String2="START") returned -5 [0157.580] _wcsicmp (_String1="netsh", _String2="DPATH") returned 10 [0157.580] _wcsicmp (_String1="netsh", _String2="KEYS") returned 3 [0157.580] _wcsicmp (_String1="netsh", _String2="MOVE") returned 1 [0157.580] _wcsicmp (_String1="netsh", _String2="PUSHD") returned -2 [0157.580] _wcsicmp (_String1="netsh", _String2="POPD") returned -2 [0157.580] _wcsicmp (_String1="netsh", _String2="ASSOC") returned 13 [0157.580] _wcsicmp (_String1="netsh", _String2="FTYPE") returned 8 [0157.580] _wcsicmp (_String1="netsh", _String2="BREAK") returned 12 [0157.580] _wcsicmp (_String1="netsh", _String2="COLOR") returned 11 [0157.580] _wcsicmp (_String1="netsh", _String2="MKLINK") returned 1 [0157.580] _wcsicmp (_String1="netsh", _String2="DIR") returned 10 [0157.580] _wcsicmp (_String1="netsh", _String2="ERASE") returned 9 [0157.580] _wcsicmp (_String1="netsh", _String2="DEL") returned 10 [0157.580] _wcsicmp (_String1="netsh", _String2="TYPE") returned -6 [0157.580] _wcsicmp (_String1="netsh", _String2="COPY") returned 11 [0157.580] _wcsicmp (_String1="netsh", _String2="CD") returned 11 [0157.580] _wcsicmp (_String1="netsh", _String2="CHDIR") returned 11 [0157.580] _wcsicmp (_String1="netsh", _String2="RENAME") returned -4 [0157.580] _wcsicmp (_String1="netsh", _String2="REN") returned -4 [0157.580] _wcsicmp (_String1="netsh", _String2="ECHO") returned 9 [0157.580] _wcsicmp (_String1="netsh", _String2="SET") returned -5 [0157.580] _wcsicmp (_String1="netsh", _String2="PAUSE") returned -2 [0157.580] _wcsicmp (_String1="netsh", _String2="DATE") returned 10 [0157.580] _wcsicmp (_String1="netsh", _String2="TIME") returned -6 [0157.580] _wcsicmp (_String1="netsh", _String2="PROMPT") returned -2 [0157.580] _wcsicmp (_String1="netsh", _String2="MD") returned 1 [0157.580] _wcsicmp (_String1="netsh", _String2="MKDIR") returned 1 [0157.581] _wcsicmp (_String1="netsh", _String2="RD") returned -4 [0157.581] _wcsicmp (_String1="netsh", _String2="RMDIR") returned -4 [0157.581] _wcsicmp (_String1="netsh", _String2="PATH") returned -2 [0157.581] _wcsicmp (_String1="netsh", _String2="GOTO") returned 7 [0157.581] _wcsicmp (_String1="netsh", _String2="SHIFT") returned -5 [0157.581] _wcsicmp (_String1="netsh", _String2="CLS") returned 11 [0157.581] _wcsicmp (_String1="netsh", _String2="CALL") returned 11 [0157.581] _wcsicmp (_String1="netsh", _String2="VERIFY") returned -8 [0157.581] _wcsicmp (_String1="netsh", _String2="VER") returned -8 [0157.581] _wcsicmp (_String1="netsh", _String2="VOL") returned -8 [0157.581] _wcsicmp (_String1="netsh", _String2="EXIT") returned 9 [0157.581] _wcsicmp (_String1="netsh", _String2="SETLOCAL") returned -5 [0157.581] _wcsicmp (_String1="netsh", _String2="ENDLOCAL") returned 9 [0157.582] _wcsicmp (_String1="netsh", _String2="TITLE") returned -6 [0157.582] _wcsicmp (_String1="netsh", _String2="START") returned -5 [0157.582] _wcsicmp (_String1="netsh", _String2="DPATH") returned 10 [0157.582] _wcsicmp (_String1="netsh", _String2="KEYS") returned 3 [0157.582] _wcsicmp (_String1="netsh", _String2="MOVE") returned 1 [0157.582] _wcsicmp (_String1="netsh", _String2="PUSHD") returned -2 [0157.582] _wcsicmp (_String1="netsh", _String2="POPD") returned -2 [0157.582] _wcsicmp (_String1="netsh", _String2="ASSOC") returned 13 [0157.582] _wcsicmp (_String1="netsh", _String2="FTYPE") returned 8 [0157.582] _wcsicmp (_String1="netsh", _String2="BREAK") returned 12 [0157.582] _wcsicmp (_String1="netsh", _String2="COLOR") returned 11 [0157.582] _wcsicmp (_String1="netsh", _String2="MKLINK") returned 1 [0157.582] _wcsicmp (_String1="netsh", _String2="FOR") returned 8 [0157.582] _wcsicmp (_String1="netsh", _String2="IF") returned 5 [0157.582] _wcsicmp (_String1="netsh", _String2="REM") returned -4 [0157.582] ??_V@YAXPEAX@Z () returned 0x1 [0157.582] GetProcessHeap () returned 0x1c6d8490000 [0157.582] RtlAllocateHeap (HeapHandle=0x1c6d8490000, Flags=0x8, Size=0xffde) returned 0x1c6d8498c20 [0157.583] GetProcessHeap () returned 0x1c6d8490000 [0157.583] RtlAllocateHeap (HeapHandle=0x1c6d8490000, Flags=0x8, Size=0x70) returned 0x1c6d84a8c10 [0157.583] _wcsnicmp (_String1="nets", _String2="cmd ", _MaxCount=0x4) returned 11 [0157.584] malloc (_Size=0xffce) returned 0x1c6d85c0820 [0157.584] ??_V@YAXPEAX@Z () returned 0x1c6d85c0820 [0157.584] GetProcessHeap () returned 0x1c6d8490000 [0157.584] RtlAllocateHeap (HeapHandle=0x1c6d8490000, Flags=0x8, Size=0x1ffac) returned 0x1c6d84a8c90 [0157.586] SetErrorMode (uMode=0x0) returned 0x0 [0157.586] SetErrorMode (uMode=0x1) returned 0x0 [0157.586] GetFullPathNameW (in: lpFileName=".", nBufferLength=0xffce, lpBuffer=0x1c6d84a8ca0, lpFilePart=0xb2d23dec60 | out: lpBuffer="C:\\WINDOWS\\system32", lpFilePart=0xb2d23dec60*="system32") returned 0x13 [0157.586] SetErrorMode (uMode=0x0) returned 0x1 [0157.586] GetProcessHeap () returned 0x1c6d8490000 [0157.586] RtlReAllocateHeap (Heap=0x1c6d8490000, Flags=0x0, Ptr=0x1c6d84a8c90, Size=0x44) returned 0x1c6d84a8c90 [0157.587] GetProcessHeap () returned 0x1c6d8490000 [0157.587] RtlSizeHeap (HeapHandle=0x1c6d8490000, Flags=0x0, MemoryPointer=0x1c6d84a8c90) returned 0x44 [0157.587] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x7ff757a5bb90, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0157.587] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0157.587] GetProcessHeap () returned 0x1c6d8490000 [0157.587] RtlAllocateHeap (HeapHandle=0x1c6d8490000, Flags=0x8, Size=0x1b4) returned 0x1c6d84a8cf0 [0157.587] GetProcessHeap () returned 0x1c6d8490000 [0157.587] RtlAllocateHeap (HeapHandle=0x1c6d8490000, Flags=0x8, Size=0x358) returned 0x1c6d84a8eb0 [0157.596] GetProcessHeap () returned 0x1c6d8490000 [0157.596] RtlReAllocateHeap (Heap=0x1c6d8490000, Flags=0x0, Ptr=0x1c6d84a8eb0, Size=0x1b6) returned 0x1c6d84a8eb0 [0157.596] GetProcessHeap () returned 0x1c6d8490000 [0157.596] RtlSizeHeap (HeapHandle=0x1c6d8490000, Flags=0x0, MemoryPointer=0x1c6d84a8eb0) returned 0x1b6 [0157.596] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff757a5bb90, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0157.596] GetProcessHeap () returned 0x1c6d8490000 [0157.596] RtlAllocateHeap (HeapHandle=0x1c6d8490000, Flags=0x8, Size=0xe8) returned 0x1c6d84a9080 [0157.607] GetProcessHeap () returned 0x1c6d8490000 [0157.607] RtlReAllocateHeap (Heap=0x1c6d8490000, Flags=0x0, Ptr=0x1c6d84a9080, Size=0x7e) returned 0x1c6d84a9080 [0157.607] GetProcessHeap () returned 0x1c6d8490000 [0157.607] RtlSizeHeap (HeapHandle=0x1c6d8490000, Flags=0x0, MemoryPointer=0x1c6d84a9080) returned 0x7e [0157.608] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0157.608] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\netsh.*", fInfoLevelId=0x1, lpFindFileData=0xb2d23de9d0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xb2d23de9d0) returned 0x1c6d84a9110 [0157.608] GetProcessHeap () returned 0x1c6d8490000 [0157.608] RtlAllocateHeap (HeapHandle=0x1c6d8490000, Flags=0x0, Size=0x28) returned 0x1c6d8496a70 [0157.608] FindClose (in: hFindFile=0x1c6d84a9110 | out: hFindFile=0x1c6d84a9110) returned 1 [0157.608] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\netsh.COM", fInfoLevelId=0x1, lpFindFileData=0xb2d23de9d0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xb2d23de9d0) returned 0xffffffffffffffff [0157.608] GetLastError () returned 0x2 [0157.608] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\netsh.EXE", fInfoLevelId=0x1, lpFindFileData=0xb2d23de9d0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xb2d23de9d0) returned 0x1c6d84a9110 [0157.608] GetProcessHeap () returned 0x1c6d8490000 [0157.608] RtlReAllocateHeap (Heap=0x1c6d8490000, Flags=0x0, Ptr=0x1c6d8496a70, Size=0x8) returned 0x1c6d8496a70 [0157.608] FindClose (in: hFindFile=0x1c6d84a9110 | out: hFindFile=0x1c6d84a9110) returned 1 [0157.609] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3 [0157.609] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2 [0157.609] ??_V@YAXPEAX@Z () returned 0x1 [0157.609] GetConsoleTitleW (in: lpConsoleTitle=0xb2d23def50, nSize=0x104 | out: lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe") returned 0x2b [0157.614] GetProcessHeap () returned 0x1c6d8490000 [0157.614] RtlAllocateHeap (HeapHandle=0x1c6d8490000, Flags=0x8, Size=0x21c) returned 0x1c6d84a9110 [0157.614] GetConsoleTitleW (in: lpConsoleTitle=0x1c6d84a9120, nSize=0x104 | out: lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe") returned 0x2b [0157.666] GetProcessHeap () returned 0x1c6d8490000 [0157.666] RtlReAllocateHeap (Heap=0x1c6d8490000, Flags=0x0, Ptr=0x1c6d84a9110, Size=0xd8) returned 0x1c6d84a9110 [0157.666] GetProcessHeap () returned 0x1c6d8490000 [0157.666] RtlSizeHeap (HeapHandle=0x1c6d8490000, Flags=0x0, MemoryPointer=0x1c6d84a9110) returned 0xd8 [0157.666] SetConsoleTitleW (lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe - netsh advfirewall set currentprofile state off") returned 1 [0157.688] GetProcessHeap () returned 0x1c6d8490000 [0157.688] RtlFreeHeap (HeapHandle=0x1c6d8490000, Flags=0x0, BaseAddress=0x1c6d84a9110) returned 1 [0157.688] InitializeProcThreadAttributeList (in: lpAttributeList=0xb2d23dee70, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0xb2d23ded60 | out: lpAttributeList=0xb2d23dee70, lpSize=0xb2d23ded60) returned 1 [0157.688] UpdateProcThreadAttribute (in: lpAttributeList=0xb2d23dee70, dwFlags=0x0, Attribute=0x60001, lpValue=0xb2d23ded4c, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0xb2d23dee70, lpPreviousValue=0x0) returned 1 [0157.689] GetStartupInfoW (in: lpStartupInfo=0xb2d23dee00 | out: lpStartupInfo=0xb2d23dee00*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\WINDOWS\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x218, hStdOutput=0x224, hStdError=0x224)) [0157.695] GetProcessHeap () returned 0x1c6d8490000 [0157.695] RtlAllocateHeap (HeapHandle=0x1c6d8490000, Flags=0x8, Size=0x20) returned 0x1c6d8496ef0 [0157.695] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0157.695] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0157.695] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0157.695] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0157.695] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0157.695] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0157.696] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0157.696] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0157.696] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0157.696] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0157.696] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0157.696] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0157.696] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0157.696] _wcsnicmp (_String1="COPYCMD", _String2="OneDriv", _MaxCount=0x7) returned -12 [0157.696] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0157.696] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0157.696] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0157.696] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0157.696] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0157.696] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0157.696] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0157.696] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0157.696] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0157.696] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0157.696] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0157.696] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0157.696] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0157.696] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0157.696] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0157.696] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0157.696] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0157.696] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0157.696] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0157.696] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0157.696] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0157.696] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0157.696] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0157.697] GetProcessHeap () returned 0x1c6d8490000 [0157.697] RtlFreeHeap (HeapHandle=0x1c6d8490000, Flags=0x0, BaseAddress=0x1c6d8496ef0) returned 1 [0157.697] GetProcessHeap () returned 0x1c6d8490000 [0157.697] RtlAllocateHeap (HeapHandle=0x1c6d8490000, Flags=0x8, Size=0x12) returned 0x1c6d8496ef0 [0157.697] _get_osfhandle (_FileHandle=1) returned 0x224 [0157.697] SetConsoleMode (hConsoleHandle=0x224, dwMode=0x0) returned 0 [0157.697] _get_osfhandle (_FileHandle=0) returned 0x218 [0157.697] SetConsoleMode (hConsoleHandle=0x218, dwMode=0x0) returned 0 [0157.697] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\netsh.exe", lpCommandLine="netsh advfirewall set currentprofile state off", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\WINDOWS\\system32", lpStartupInfo=0xb2d23ded90*(cb=0x70, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="netsh advfirewall set currentprofile state off", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0xb2d23ded68 | out: lpCommandLine="netsh advfirewall set currentprofile state off", lpProcessInformation=0xb2d23ded68*(hProcess=0x98, hThread=0x94, dwProcessId=0xfdc, dwThreadId=0xfe0)) returned 1 [0157.720] CloseHandle (hObject=0x94) returned 1 [0157.720] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0157.720] GetProcessHeap () returned 0x1c6d8490000 [0157.720] RtlFreeHeap (HeapHandle=0x1c6d8490000, Flags=0x0, BaseAddress=0x1c6d8495a10) returned 1 [0157.720] GetEnvironmentStringsW () returned 0x1c6d8495a10* [0157.720] GetProcessHeap () returned 0x1c6d8490000 [0157.720] RtlAllocateHeap (HeapHandle=0x1c6d8490000, Flags=0x8, Size=0xac4) returned 0x1c6d84a9510 [0157.720] FreeEnvironmentStringsA (penv="=") returned 1 [0157.720] LoadLibraryExW (lpLibFileName="NTDLL.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffc924f0000 [0157.721] GetProcAddress (hModule=0x7ffc924f0000, lpProcName="NtQueryInformationProcess") returned 0x7ffc925956b0 [0157.721] NtQueryInformationProcess (in: ProcessHandle=0x98, ProcessInformationClass=0x0, ProcessInformation=0xb2d23de268, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0xb2d23de268, ReturnLength=0x0) returned 0x0 [0157.721] ReadProcessMemory (in: hProcess=0x98, lpBaseAddress=0xfef281f000, lpBuffer=0xb2d23de2a0, nSize=0x7a0, lpNumberOfBytesRead=0xb2d23de260 | out: lpBuffer=0xb2d23de2a0*, lpNumberOfBytesRead=0xb2d23de260*=0x7a0) returned 1 [0157.723] WaitForSingleObject (hHandle=0x98, dwMilliseconds=0xffffffff) returned 0x0 [0167.920] GetExitCodeProcess (in: hProcess=0x98, lpExitCode=0xb2d23dece8 | out: lpExitCode=0xb2d23dece8*=0x0) returned 1 [0167.920] CloseHandle (hObject=0x98) returned 1 [0167.921] _vsnwprintf (in: _Buffer=0xb2d23deeb8, _BufferCount=0x13, _Format="%08X", _ArgList=0xb2d23decf8 | out: _Buffer="00000000") returned 8 [0167.921] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000000") returned 1 [0167.921] GetProcessHeap () returned 0x1c6d8490000 [0167.921] RtlFreeHeap (HeapHandle=0x1c6d8490000, Flags=0x0, BaseAddress=0x1c6d84a9510) returned 1 [0167.921] GetEnvironmentStringsW () returned 0x1c6d84aaae0* [0167.921] GetProcessHeap () returned 0x1c6d8490000 [0167.921] RtlAllocateHeap (HeapHandle=0x1c6d8490000, Flags=0x8, Size=0xaea) returned 0x1c6d84ab5e0 [0167.921] FreeEnvironmentStringsA (penv="=") returned 1 [0167.921] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1 [0167.921] GetProcessHeap () returned 0x1c6d8490000 [0167.921] RtlFreeHeap (HeapHandle=0x1c6d8490000, Flags=0x0, BaseAddress=0x1c6d84ab5e0) returned 1 [0167.921] GetEnvironmentStringsW () returned 0x1c6d84aaae0* [0167.922] GetProcessHeap () returned 0x1c6d8490000 [0167.922] RtlAllocateHeap (HeapHandle=0x1c6d8490000, Flags=0x8, Size=0xaea) returned 0x1c6d84ab5e0 [0167.922] FreeEnvironmentStringsA (penv="=") returned 1 [0167.922] GetProcessHeap () returned 0x1c6d8490000 [0167.922] RtlFreeHeap (HeapHandle=0x1c6d8490000, Flags=0x0, BaseAddress=0x1c6d8496ef0) returned 1 [0167.922] DeleteProcThreadAttributeList (in: lpAttributeList=0xb2d23dee70 | out: lpAttributeList=0xb2d23dee70) [0167.922] SetConsoleTitleW (lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe") returned 1 [0168.222] ??_V@YAXPEAX@Z () returned 0x1 [0168.222] _get_osfhandle (_FileHandle=1) returned 0x224 [0168.222] SetConsoleMode (hConsoleHandle=0x224, dwMode=0x0) returned 0 [0168.222] _get_osfhandle (_FileHandle=1) returned 0x224 [0168.222] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x7ff757a5fc08 | out: lpMode=0x7ff757a5fc08) returned 0 [0168.222] _get_osfhandle (_FileHandle=0) returned 0x218 [0168.222] GetConsoleMode (in: hConsoleHandle=0x218, lpMode=0x7ff757a5fc0c | out: lpMode=0x7ff757a5fc0c) returned 0 [0168.222] GetConsoleOutputCP () returned 0x1b5 [0168.544] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff757a5fbb0 | out: lpCPInfo=0x7ff757a5fbb0) returned 1 [0168.544] SetThreadUILanguage (LangId=0x0) returned 0x409 [0169.124] GetProcessHeap () returned 0x1c6d8490000 [0169.124] RtlFreeHeap (HeapHandle=0x1c6d8490000, Flags=0x0, BaseAddress=0x1c6d84a9080) returned 1 [0169.124] GetProcessHeap () returned 0x1c6d8490000 [0169.124] RtlFreeHeap (HeapHandle=0x1c6d8490000, Flags=0x0, BaseAddress=0x1c6d84a8eb0) returned 1 [0169.124] GetProcessHeap () returned 0x1c6d8490000 [0169.124] RtlFreeHeap (HeapHandle=0x1c6d8490000, Flags=0x0, BaseAddress=0x1c6d84a8cf0) returned 1 [0169.124] GetProcessHeap () returned 0x1c6d8490000 [0169.124] RtlFreeHeap (HeapHandle=0x1c6d8490000, Flags=0x0, BaseAddress=0x1c6d84a8c90) returned 1 [0169.124] GetProcessHeap () returned 0x1c6d8490000 [0169.124] RtlFreeHeap (HeapHandle=0x1c6d8490000, Flags=0x0, BaseAddress=0x1c6d84a8c10) returned 1 [0169.124] GetProcessHeap () returned 0x1c6d8490000 [0169.124] RtlFreeHeap (HeapHandle=0x1c6d8490000, Flags=0x0, BaseAddress=0x1c6d8498c20) returned 1 [0169.124] GetProcessHeap () returned 0x1c6d8490000 [0169.124] RtlFreeHeap (HeapHandle=0x1c6d8490000, Flags=0x0, BaseAddress=0x1c6d8498bb0) returned 1 [0169.124] GetProcessHeap () returned 0x1c6d8490000 [0169.124] RtlFreeHeap (HeapHandle=0x1c6d8490000, Flags=0x0, BaseAddress=0x1c6d8496c60) returned 1 [0169.124] GetProcessHeap () returned 0x1c6d8490000 [0169.124] RtlFreeHeap (HeapHandle=0x1c6d8490000, Flags=0x0, BaseAddress=0x1c6d8496e30) returned 1 [0169.124] _vsnwprintf (in: _Buffer=0x7ff757a67f60, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0xb2d23df298 | out: _Buffer="\r\n") returned 2 [0169.124] _get_osfhandle (_FileHandle=1) returned 0x224 [0169.124] GetFileType (hFile=0x224) returned 0x3 [0169.124] _get_osfhandle (_FileHandle=1) returned 0x224 [0169.124] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3 [0169.125] WriteFile (in: hFile=0x224, lpBuffer=0x7ff757a59970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0xb2d23df268, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesWritten=0xb2d23df268*=0x2, lpOverlapped=0x0) returned 1 [0169.125] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x7ff757a5bb90, nSize=0x2000 | out: lpBuffer="$P$G") returned 0x4 [0169.125] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x1c6d8590080 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13 [0169.125] _vsnwprintf (in: _Buffer=0x1c6d85a0060, _BufferCount=0x83e5, _Format="%s", _ArgList=0xb2d23df2a8 | out: _Buffer="C:\\WINDOWS\\system32") returned 19 [0169.125] _vsnwprintf (in: _Buffer=0x1c6d85a0086, _BufferCount=0x83d2, _Format="%c", _ArgList=0xb2d23df2a8 | out: _Buffer=">") returned 1 [0169.125] _get_osfhandle (_FileHandle=1) returned 0x224 [0169.125] GetFileType (hFile=0x224) returned 0x3 [0169.125] _get_osfhandle (_FileHandle=1) returned 0x224 [0169.125] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\WINDOWS\\system32>", cchWideChar=-1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\WINDOWS\\system32>", lpUsedDefaultChar=0x0) returned 21 [0169.125] WriteFile (in: hFile=0x224, lpBuffer=0x7ff757a59970*, nNumberOfBytesToWrite=0x14, lpNumberOfBytesWritten=0xb2d23df298, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesWritten=0xb2d23df298*=0x14, lpOverlapped=0x0) returned 1 [0169.125] _get_osfhandle (_FileHandle=0) returned 0x218 [0169.125] GetFileType (hFile=0x218) returned 0x3 [0169.125] _get_osfhandle (_FileHandle=0) returned 0x218 [0169.125] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0169.125] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0169.125] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c30, cchWideChar=1 | out: lpWideCharStr="netsh advfirewall set currentprofile state off\n") returned 1 [0169.125] _get_osfhandle (_FileHandle=0) returned 0x218 [0169.125] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0169.125] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0169.126] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c32, cchWideChar=1 | out: lpWideCharStr="etsh advfirewall set currentprofile state off\n") returned 1 [0169.126] _get_osfhandle (_FileHandle=0) returned 0x218 [0169.126] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0169.126] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0169.126] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c34, cchWideChar=1 | out: lpWideCharStr="tsh advfirewall set currentprofile state off\n") returned 1 [0169.126] _get_osfhandle (_FileHandle=0) returned 0x218 [0169.126] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0169.126] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0169.126] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c36, cchWideChar=1 | out: lpWideCharStr="sh advfirewall set currentprofile state off\n") returned 1 [0169.126] _get_osfhandle (_FileHandle=0) returned 0x218 [0169.126] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0169.126] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0169.126] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c38, cchWideChar=1 | out: lpWideCharStr="h advfirewall set currentprofile state off\n") returned 1 [0169.126] _get_osfhandle (_FileHandle=0) returned 0x218 [0169.126] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0169.126] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0169.126] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c3a, cchWideChar=1 | out: lpWideCharStr=" advfirewall set currentprofile state off\n") returned 1 [0169.126] _get_osfhandle (_FileHandle=0) returned 0x218 [0169.126] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0169.126] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0169.126] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c3c, cchWideChar=1 | out: lpWideCharStr="fdvfirewall set currentprofile state off\n") returned 1 [0169.126] _get_osfhandle (_FileHandle=0) returned 0x218 [0169.126] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0169.126] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0169.126] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c3e, cchWideChar=1 | out: lpWideCharStr="ivfirewall set currentprofile state off\n") returned 1 [0169.126] _get_osfhandle (_FileHandle=0) returned 0x218 [0169.126] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0169.127] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0169.127] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c40, cchWideChar=1 | out: lpWideCharStr="rfirewall set currentprofile state off\n") returned 1 [0169.127] _get_osfhandle (_FileHandle=0) returned 0x218 [0169.127] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0169.127] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0169.127] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c42, cchWideChar=1 | out: lpWideCharStr="eirewall set currentprofile state off\n") returned 1 [0169.127] _get_osfhandle (_FileHandle=0) returned 0x218 [0169.127] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0169.127] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0169.127] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c44, cchWideChar=1 | out: lpWideCharStr="wrewall set currentprofile state off\n") returned 1 [0169.127] _get_osfhandle (_FileHandle=0) returned 0x218 [0169.127] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0169.127] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0169.127] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c46, cchWideChar=1 | out: lpWideCharStr="aewall set currentprofile state off\n") returned 1 [0169.127] _get_osfhandle (_FileHandle=0) returned 0x218 [0169.127] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0169.127] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0169.127] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c48, cchWideChar=1 | out: lpWideCharStr="lwall set currentprofile state off\n") returned 1 [0169.127] _get_osfhandle (_FileHandle=0) returned 0x218 [0169.127] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0169.127] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0169.127] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c4a, cchWideChar=1 | out: lpWideCharStr="lall set currentprofile state off\n") returned 1 [0169.127] _get_osfhandle (_FileHandle=0) returned 0x218 [0169.127] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0169.127] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0169.128] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c4c, cchWideChar=1 | out: lpWideCharStr=" ll set currentprofile state off\n") returned 1 [0169.128] _get_osfhandle (_FileHandle=0) returned 0x218 [0169.128] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0169.128] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0169.128] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c4e, cchWideChar=1 | out: lpWideCharStr="sl set currentprofile state off\n") returned 1 [0169.128] _get_osfhandle (_FileHandle=0) returned 0x218 [0169.128] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0169.128] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0169.128] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c50, cchWideChar=1 | out: lpWideCharStr="e set currentprofile state off\n") returned 1 [0169.128] _get_osfhandle (_FileHandle=0) returned 0x218 [0169.128] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0169.128] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0169.128] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c52, cchWideChar=1 | out: lpWideCharStr="tset currentprofile state off\n") returned 1 [0169.128] _get_osfhandle (_FileHandle=0) returned 0x218 [0169.128] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0169.128] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0169.128] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c54, cchWideChar=1 | out: lpWideCharStr=" et currentprofile state off\n") returned 1 [0169.128] _get_osfhandle (_FileHandle=0) returned 0x218 [0169.128] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0169.128] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0169.128] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c56, cchWideChar=1 | out: lpWideCharStr="ot currentprofile state off\n") returned 1 [0169.128] _get_osfhandle (_FileHandle=0) returned 0x218 [0169.128] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0169.128] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0169.128] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c58, cchWideChar=1 | out: lpWideCharStr="p currentprofile state off\n") returned 1 [0169.128] _get_osfhandle (_FileHandle=0) returned 0x218 [0169.128] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0169.129] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0169.129] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c5a, cchWideChar=1 | out: lpWideCharStr="mcurrentprofile state off\n") returned 1 [0169.129] _get_osfhandle (_FileHandle=0) returned 0x218 [0169.129] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0169.129] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0169.129] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c5c, cchWideChar=1 | out: lpWideCharStr="ourrentprofile state off\n") returned 1 [0169.129] _get_osfhandle (_FileHandle=0) returned 0x218 [0169.129] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0169.129] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0169.129] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c5e, cchWideChar=1 | out: lpWideCharStr="drrentprofile state off\n") returned 1 [0169.129] _get_osfhandle (_FileHandle=0) returned 0x218 [0169.129] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0169.129] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0169.129] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c60, cchWideChar=1 | out: lpWideCharStr="erentprofile state off\n") returned 1 [0169.129] _get_osfhandle (_FileHandle=0) returned 0x218 [0169.129] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0169.129] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0169.129] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c62, cchWideChar=1 | out: lpWideCharStr=" entprofile state off\n") returned 1 [0169.129] _get_osfhandle (_FileHandle=0) returned 0x218 [0169.129] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0169.129] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0169.129] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c64, cchWideChar=1 | out: lpWideCharStr="mntprofile state off\n") returned 1 [0169.129] _get_osfhandle (_FileHandle=0) returned 0x218 [0169.129] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0169.129] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0169.129] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c66, cchWideChar=1 | out: lpWideCharStr="otprofile state off\n") returned 1 [0169.130] _get_osfhandle (_FileHandle=0) returned 0x218 [0169.130] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0169.130] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0169.130] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c68, cchWideChar=1 | out: lpWideCharStr="dprofile state off\n") returned 1 [0169.130] _get_osfhandle (_FileHandle=0) returned 0x218 [0169.130] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0169.130] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0169.130] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c6a, cchWideChar=1 | out: lpWideCharStr="erofile state off\n") returned 1 [0169.130] _get_osfhandle (_FileHandle=0) returned 0x218 [0169.130] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0169.130] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0169.130] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c6c, cchWideChar=1 | out: lpWideCharStr="=ofile state off\n") returned 1 [0169.130] _get_osfhandle (_FileHandle=0) returned 0x218 [0169.130] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0169.130] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0169.130] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c6e, cchWideChar=1 | out: lpWideCharStr="dfile state off\n") returned 1 [0169.130] _get_osfhandle (_FileHandle=0) returned 0x218 [0169.130] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0169.130] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0169.130] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c70, cchWideChar=1 | out: lpWideCharStr="iile state off\n") returned 1 [0169.130] _get_osfhandle (_FileHandle=0) returned 0x218 [0169.130] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0169.130] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0169.130] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c72, cchWideChar=1 | out: lpWideCharStr="sle state off\n") returned 1 [0169.130] _get_osfhandle (_FileHandle=0) returned 0x218 [0169.130] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0169.130] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0169.131] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c74, cchWideChar=1 | out: lpWideCharStr="ae state off\n") returned 1 [0169.131] _get_osfhandle (_FileHandle=0) returned 0x218 [0169.131] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0169.131] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0169.131] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c76, cchWideChar=1 | out: lpWideCharStr="b state off\n") returned 1 [0169.131] _get_osfhandle (_FileHandle=0) returned 0x218 [0169.131] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0169.131] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0169.131] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c78, cchWideChar=1 | out: lpWideCharStr="lstate off\n") returned 1 [0169.131] _get_osfhandle (_FileHandle=0) returned 0x218 [0169.131] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0169.131] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0169.131] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c7a, cchWideChar=1 | out: lpWideCharStr="etate off\n") returned 1 [0169.131] _get_osfhandle (_FileHandle=0) returned 0x218 [0169.131] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0169.131] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0169.131] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c7c, cchWideChar=1 | out: lpWideCharStr="\nate off\n") returned 1 [0169.131] _get_osfhandle (_FileHandle=0) returned 0x218 [0169.131] GetFileType (hFile=0x218) returned 0x3 [0169.131] _get_osfhandle (_FileHandle=0) returned 0x218 [0169.131] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0169.131] _get_osfhandle (_FileHandle=1) returned 0x224 [0169.131] GetFileType (hFile=0x224) returned 0x3 [0169.131] _get_osfhandle (_FileHandle=1) returned 0x224 [0169.131] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="netsh firewall set opmode mode=disable\n", cchWideChar=-1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netsh firewall set opmode mode=disable\n", lpUsedDefaultChar=0x0) returned 40 [0169.132] WriteFile (in: hFile=0x224, lpBuffer=0x7ff757a59970*, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0xb2d23df598, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesWritten=0xb2d23df598*=0x27, lpOverlapped=0x0) returned 1 [0169.132] GetProcessHeap () returned 0x1c6d8490000 [0169.132] RtlAllocateHeap (HeapHandle=0x1c6d8490000, Flags=0x8, Size=0x4012) returned 0x1c6d8498bb0 [0169.132] GetProcessHeap () returned 0x1c6d8490000 [0169.132] RtlFreeHeap (HeapHandle=0x1c6d8490000, Flags=0x0, BaseAddress=0x1c6d8498bb0) returned 1 [0169.132] _wcsicmp (_String1="netsh", _String2=")") returned 69 [0169.132] _wcsicmp (_String1="FOR", _String2="netsh") returned -8 [0169.132] _wcsicmp (_String1="FOR/?", _String2="netsh") returned -8 [0169.133] _wcsicmp (_String1="IF", _String2="netsh") returned -5 [0169.133] _wcsicmp (_String1="IF/?", _String2="netsh") returned -5 [0169.133] _wcsicmp (_String1="REM", _String2="netsh") returned 4 [0169.133] _wcsicmp (_String1="REM/?", _String2="netsh") returned 4 [0169.133] GetProcessHeap () returned 0x1c6d8490000 [0169.133] RtlAllocateHeap (HeapHandle=0x1c6d8490000, Flags=0x8, Size=0xb0) returned 0x1c6d8496e30 [0169.133] GetProcessHeap () returned 0x1c6d8490000 [0169.133] RtlAllocateHeap (HeapHandle=0x1c6d8490000, Flags=0x8, Size=0x1c) returned 0x1c6d8496c60 [0169.133] GetProcessHeap () returned 0x1c6d8490000 [0169.133] RtlAllocateHeap (HeapHandle=0x1c6d8490000, Flags=0x8, Size=0x54) returned 0x1c6d84a91f0 [0169.134] GetConsoleOutputCP () returned 0x1b5 [0169.662] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff757a5fbb0 | out: lpCPInfo=0x7ff757a5fbb0) returned 1 [0169.662] SetThreadUILanguage (LangId=0x0) returned 0x409 [0169.844] GetConsoleTitleW (in: lpConsoleTitle=0xb2d23df3e0, nSize=0x104 | out: lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe") returned 0x2b [0170.079] malloc (_Size=0xffce) returned 0x1c6d85b0840 [0170.079] ??_V@YAXPEAX@Z () returned 0x1c6d85b0840 [0170.079] malloc (_Size=0xffce) returned 0x1c6d85c0820 [0170.079] ??_V@YAXPEAX@Z () returned 0x1c6d85c0820 [0170.079] _wcsicmp (_String1="netsh", _String2="DIR") returned 10 [0170.079] _wcsicmp (_String1="netsh", _String2="ERASE") returned 9 [0170.079] _wcsicmp (_String1="netsh", _String2="DEL") returned 10 [0170.079] _wcsicmp (_String1="netsh", _String2="TYPE") returned -6 [0170.079] _wcsicmp (_String1="netsh", _String2="COPY") returned 11 [0170.079] _wcsicmp (_String1="netsh", _String2="CD") returned 11 [0170.079] _wcsicmp (_String1="netsh", _String2="CHDIR") returned 11 [0170.079] _wcsicmp (_String1="netsh", _String2="RENAME") returned -4 [0170.079] _wcsicmp (_String1="netsh", _String2="REN") returned -4 [0170.079] _wcsicmp (_String1="netsh", _String2="ECHO") returned 9 [0170.080] _wcsicmp (_String1="netsh", _String2="SET") returned -5 [0170.080] _wcsicmp (_String1="netsh", _String2="PAUSE") returned -2 [0170.080] _wcsicmp (_String1="netsh", _String2="DATE") returned 10 [0170.080] _wcsicmp (_String1="netsh", _String2="TIME") returned -6 [0170.080] _wcsicmp (_String1="netsh", _String2="PROMPT") returned -2 [0170.080] _wcsicmp (_String1="netsh", _String2="MD") returned 1 [0170.080] _wcsicmp (_String1="netsh", _String2="MKDIR") returned 1 [0170.080] _wcsicmp (_String1="netsh", _String2="RD") returned -4 [0170.080] _wcsicmp (_String1="netsh", _String2="RMDIR") returned -4 [0170.080] _wcsicmp (_String1="netsh", _String2="PATH") returned -2 [0170.080] _wcsicmp (_String1="netsh", _String2="GOTO") returned 7 [0170.080] _wcsicmp (_String1="netsh", _String2="SHIFT") returned -5 [0170.080] _wcsicmp (_String1="netsh", _String2="CLS") returned 11 [0170.080] _wcsicmp (_String1="netsh", _String2="CALL") returned 11 [0170.080] _wcsicmp (_String1="netsh", _String2="VERIFY") returned -8 [0170.080] _wcsicmp (_String1="netsh", _String2="VER") returned -8 [0170.080] _wcsicmp (_String1="netsh", _String2="VOL") returned -8 [0170.080] _wcsicmp (_String1="netsh", _String2="EXIT") returned 9 [0170.080] _wcsicmp (_String1="netsh", _String2="SETLOCAL") returned -5 [0170.080] _wcsicmp (_String1="netsh", _String2="ENDLOCAL") returned 9 [0170.080] _wcsicmp (_String1="netsh", _String2="TITLE") returned -6 [0170.080] _wcsicmp (_String1="netsh", _String2="START") returned -5 [0170.080] _wcsicmp (_String1="netsh", _String2="DPATH") returned 10 [0170.080] _wcsicmp (_String1="netsh", _String2="KEYS") returned 3 [0170.080] _wcsicmp (_String1="netsh", _String2="MOVE") returned 1 [0170.080] _wcsicmp (_String1="netsh", _String2="PUSHD") returned -2 [0170.080] _wcsicmp (_String1="netsh", _String2="POPD") returned -2 [0170.080] _wcsicmp (_String1="netsh", _String2="ASSOC") returned 13 [0170.080] _wcsicmp (_String1="netsh", _String2="FTYPE") returned 8 [0170.080] _wcsicmp (_String1="netsh", _String2="BREAK") returned 12 [0170.080] _wcsicmp (_String1="netsh", _String2="COLOR") returned 11 [0170.080] _wcsicmp (_String1="netsh", _String2="MKLINK") returned 1 [0170.080] _wcsicmp (_String1="netsh", _String2="DIR") returned 10 [0170.080] _wcsicmp (_String1="netsh", _String2="ERASE") returned 9 [0170.080] _wcsicmp (_String1="netsh", _String2="DEL") returned 10 [0170.080] _wcsicmp (_String1="netsh", _String2="TYPE") returned -6 [0170.080] _wcsicmp (_String1="netsh", _String2="COPY") returned 11 [0170.081] _wcsicmp (_String1="netsh", _String2="CD") returned 11 [0170.081] _wcsicmp (_String1="netsh", _String2="CHDIR") returned 11 [0170.081] _wcsicmp (_String1="netsh", _String2="RENAME") returned -4 [0170.081] _wcsicmp (_String1="netsh", _String2="REN") returned -4 [0170.081] _wcsicmp (_String1="netsh", _String2="ECHO") returned 9 [0170.081] _wcsicmp (_String1="netsh", _String2="SET") returned -5 [0170.081] _wcsicmp (_String1="netsh", _String2="PAUSE") returned -2 [0170.081] _wcsicmp (_String1="netsh", _String2="DATE") returned 10 [0170.081] _wcsicmp (_String1="netsh", _String2="TIME") returned -6 [0170.081] _wcsicmp (_String1="netsh", _String2="PROMPT") returned -2 [0170.081] _wcsicmp (_String1="netsh", _String2="MD") returned 1 [0170.081] _wcsicmp (_String1="netsh", _String2="MKDIR") returned 1 [0170.081] _wcsicmp (_String1="netsh", _String2="RD") returned -4 [0170.081] _wcsicmp (_String1="netsh", _String2="RMDIR") returned -4 [0170.081] _wcsicmp (_String1="netsh", _String2="PATH") returned -2 [0170.081] _wcsicmp (_String1="netsh", _String2="GOTO") returned 7 [0170.081] _wcsicmp (_String1="netsh", _String2="SHIFT") returned -5 [0170.081] _wcsicmp (_String1="netsh", _String2="CLS") returned 11 [0170.081] _wcsicmp (_String1="netsh", _String2="CALL") returned 11 [0170.081] _wcsicmp (_String1="netsh", _String2="VERIFY") returned -8 [0170.081] _wcsicmp (_String1="netsh", _String2="VER") returned -8 [0170.081] _wcsicmp (_String1="netsh", _String2="VOL") returned -8 [0170.081] _wcsicmp (_String1="netsh", _String2="EXIT") returned 9 [0170.081] _wcsicmp (_String1="netsh", _String2="SETLOCAL") returned -5 [0170.081] _wcsicmp (_String1="netsh", _String2="ENDLOCAL") returned 9 [0170.081] _wcsicmp (_String1="netsh", _String2="TITLE") returned -6 [0170.081] _wcsicmp (_String1="netsh", _String2="START") returned -5 [0170.081] _wcsicmp (_String1="netsh", _String2="DPATH") returned 10 [0170.081] _wcsicmp (_String1="netsh", _String2="KEYS") returned 3 [0170.081] _wcsicmp (_String1="netsh", _String2="MOVE") returned 1 [0170.081] _wcsicmp (_String1="netsh", _String2="PUSHD") returned -2 [0170.081] _wcsicmp (_String1="netsh", _String2="POPD") returned -2 [0170.081] _wcsicmp (_String1="netsh", _String2="ASSOC") returned 13 [0170.081] _wcsicmp (_String1="netsh", _String2="FTYPE") returned 8 [0170.081] _wcsicmp (_String1="netsh", _String2="BREAK") returned 12 [0170.081] _wcsicmp (_String1="netsh", _String2="COLOR") returned 11 [0170.081] _wcsicmp (_String1="netsh", _String2="MKLINK") returned 1 [0170.082] _wcsicmp (_String1="netsh", _String2="FOR") returned 8 [0170.082] _wcsicmp (_String1="netsh", _String2="IF") returned 5 [0170.082] _wcsicmp (_String1="netsh", _String2="REM") returned -4 [0170.082] ??_V@YAXPEAX@Z () returned 0x1 [0170.082] GetProcessHeap () returned 0x1c6d8490000 [0170.082] RtlAllocateHeap (HeapHandle=0x1c6d8490000, Flags=0x8, Size=0xffde) returned 0x1c6d8498bb0 [0170.083] GetProcessHeap () returned 0x1c6d8490000 [0170.083] RtlAllocateHeap (HeapHandle=0x1c6d8490000, Flags=0x8, Size=0x60) returned 0x1c6d84a8ba0 [0170.083] _wcsnicmp (_String1="nets", _String2="cmd ", _MaxCount=0x4) returned 11 [0170.083] malloc (_Size=0xffce) returned 0x1c6d85c0820 [0170.083] ??_V@YAXPEAX@Z () returned 0x1c6d85c0820 [0170.083] GetProcessHeap () returned 0x1c6d8490000 [0170.083] RtlAllocateHeap (HeapHandle=0x1c6d8490000, Flags=0x8, Size=0x1ffac) returned 0x1c6d84ac0e0 [0170.085] SetErrorMode (uMode=0x0) returned 0x0 [0170.085] SetErrorMode (uMode=0x1) returned 0x0 [0170.085] GetFullPathNameW (in: lpFileName=".", nBufferLength=0xffce, lpBuffer=0x1c6d84ac0f0, lpFilePart=0xb2d23dec60 | out: lpBuffer="C:\\WINDOWS\\system32", lpFilePart=0xb2d23dec60*="system32") returned 0x13 [0170.085] SetErrorMode (uMode=0x0) returned 0x1 [0170.085] GetProcessHeap () returned 0x1c6d8490000 [0170.085] RtlReAllocateHeap (Heap=0x1c6d8490000, Flags=0x0, Ptr=0x1c6d84ac0e0, Size=0x44) returned 0x1c6d84ac0e0 [0170.085] GetProcessHeap () returned 0x1c6d8490000 [0170.085] RtlSizeHeap (HeapHandle=0x1c6d8490000, Flags=0x0, MemoryPointer=0x1c6d84ac0e0) returned 0x44 [0170.085] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x7ff757a5bb90, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0170.086] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0170.086] GetProcessHeap () returned 0x1c6d8490000 [0170.086] RtlAllocateHeap (HeapHandle=0x1c6d8490000, Flags=0x8, Size=0x1b4) returned 0x1c6d84a8c10 [0170.086] GetProcessHeap () returned 0x1c6d8490000 [0170.086] RtlAllocateHeap (HeapHandle=0x1c6d8490000, Flags=0x8, Size=0x358) returned 0x1c6d84a8dd0 [0170.086] GetProcessHeap () returned 0x1c6d8490000 [0170.086] RtlReAllocateHeap (Heap=0x1c6d8490000, Flags=0x0, Ptr=0x1c6d84a8dd0, Size=0x1b6) returned 0x1c6d84a8dd0 [0170.086] GetProcessHeap () returned 0x1c6d8490000 [0170.086] RtlSizeHeap (HeapHandle=0x1c6d8490000, Flags=0x0, MemoryPointer=0x1c6d84a8dd0) returned 0x1b6 [0170.086] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff757a5bb90, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0170.086] GetProcessHeap () returned 0x1c6d8490000 [0170.086] RtlAllocateHeap (HeapHandle=0x1c6d8490000, Flags=0x8, Size=0xe8) returned 0x1c6d84a8fa0 [0170.086] GetProcessHeap () returned 0x1c6d8490000 [0170.086] RtlReAllocateHeap (Heap=0x1c6d8490000, Flags=0x0, Ptr=0x1c6d84a8fa0, Size=0x7e) returned 0x1c6d84a8fa0 [0170.086] GetProcessHeap () returned 0x1c6d8490000 [0170.086] RtlSizeHeap (HeapHandle=0x1c6d8490000, Flags=0x0, MemoryPointer=0x1c6d84a8fa0) returned 0x7e [0170.086] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0170.086] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\netsh.*", fInfoLevelId=0x1, lpFindFileData=0xb2d23de9d0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xb2d23de9d0) returned 0x1c6d84a9030 [0170.086] FindClose (in: hFindFile=0x1c6d84a9030 | out: hFindFile=0x1c6d84a9030) returned 1 [0170.087] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\netsh.COM", fInfoLevelId=0x1, lpFindFileData=0xb2d23de9d0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xb2d23de9d0) returned 0xffffffffffffffff [0170.087] GetLastError () returned 0x2 [0170.087] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\netsh.EXE", fInfoLevelId=0x1, lpFindFileData=0xb2d23de9d0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xb2d23de9d0) returned 0x1c6d84a9030 [0170.087] FindClose (in: hFindFile=0x1c6d84a9030 | out: hFindFile=0x1c6d84a9030) returned 1 [0170.087] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3 [0170.087] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2 [0170.087] ??_V@YAXPEAX@Z () returned 0x1 [0170.087] GetConsoleTitleW (in: lpConsoleTitle=0xb2d23def50, nSize=0x104 | out: lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe") returned 0x2b [0170.372] GetProcessHeap () returned 0x1c6d8490000 [0170.372] RtlAllocateHeap (HeapHandle=0x1c6d8490000, Flags=0x8, Size=0x21c) returned 0x1c6d84a9510 [0170.372] GetConsoleTitleW (in: lpConsoleTitle=0x1c6d84a9520, nSize=0x104 | out: lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe") returned 0x2b [0170.634] GetProcessHeap () returned 0x1c6d8490000 [0170.634] RtlReAllocateHeap (Heap=0x1c6d8490000, Flags=0x0, Ptr=0x1c6d84a9510, Size=0xc8) returned 0x1c6d84a9510 [0170.634] GetProcessHeap () returned 0x1c6d8490000 [0170.634] RtlSizeHeap (HeapHandle=0x1c6d8490000, Flags=0x0, MemoryPointer=0x1c6d84a9510) returned 0xc8 [0170.634] SetConsoleTitleW (lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe - netsh firewall set opmode mode=disable") returned 1 [0170.834] GetProcessHeap () returned 0x1c6d8490000 [0170.834] RtlFreeHeap (HeapHandle=0x1c6d8490000, Flags=0x0, BaseAddress=0x1c6d84a9510) returned 1 [0170.834] InitializeProcThreadAttributeList (in: lpAttributeList=0xb2d23dee70, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0xb2d23ded60 | out: lpAttributeList=0xb2d23dee70, lpSize=0xb2d23ded60) returned 1 [0170.834] UpdateProcThreadAttribute (in: lpAttributeList=0xb2d23dee70, dwFlags=0x0, Attribute=0x60001, lpValue=0xb2d23ded4c, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0xb2d23dee70, lpPreviousValue=0x0) returned 1 [0170.834] GetStartupInfoW (in: lpStartupInfo=0xb2d23dee00 | out: lpStartupInfo=0xb2d23dee00*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\WINDOWS\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x218, hStdOutput=0x224, hStdError=0x224)) [0170.835] GetProcessHeap () returned 0x1c6d8490000 [0170.835] RtlAllocateHeap (HeapHandle=0x1c6d8490000, Flags=0x8, Size=0x20) returned 0x1c6d84a9330 [0170.835] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0170.835] _wcsnicmp (_String1="COPYCMD", _String2="=ExitCo", _MaxCount=0x7) returned 38 [0170.835] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0170.835] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0170.835] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0170.835] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0170.835] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0170.835] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0170.835] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0170.835] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0170.835] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0170.835] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0170.835] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0170.835] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0170.835] _wcsnicmp (_String1="COPYCMD", _String2="OneDriv", _MaxCount=0x7) returned -12 [0170.835] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0170.835] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0170.835] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0170.835] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0170.835] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0170.835] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0170.835] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0170.835] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0170.835] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0170.835] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0170.835] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0170.835] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0170.835] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0170.835] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0170.835] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0170.843] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0170.880] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0170.880] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0170.880] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0170.880] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0170.880] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0170.880] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0170.881] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0170.881] GetProcessHeap () returned 0x1c6d8490000 [0170.881] RtlFreeHeap (HeapHandle=0x1c6d8490000, Flags=0x0, BaseAddress=0x1c6d84a9330) returned 1 [0170.881] GetProcessHeap () returned 0x1c6d8490000 [0170.881] RtlAllocateHeap (HeapHandle=0x1c6d8490000, Flags=0x8, Size=0x12) returned 0x1c6d84a9330 [0170.881] _get_osfhandle (_FileHandle=1) returned 0x224 [0170.881] SetConsoleMode (hConsoleHandle=0x224, dwMode=0x0) returned 0 [0170.881] _get_osfhandle (_FileHandle=0) returned 0x218 [0170.881] SetConsoleMode (hConsoleHandle=0x218, dwMode=0x0) returned 0 [0170.881] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\netsh.exe", lpCommandLine="netsh firewall set opmode mode=disable", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\WINDOWS\\system32", lpStartupInfo=0xb2d23ded90*(cb=0x70, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="netsh firewall set opmode mode=disable", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0xb2d23ded68 | out: lpCommandLine="netsh firewall set opmode mode=disable", lpProcessInformation=0xb2d23ded68*(hProcess=0x94, hThread=0x98, dwProcessId=0xc18, dwThreadId=0x884)) returned 1 [0170.893] CloseHandle (hObject=0x98) returned 1 [0170.893] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0170.893] GetProcessHeap () returned 0x1c6d8490000 [0170.893] RtlFreeHeap (HeapHandle=0x1c6d8490000, Flags=0x0, BaseAddress=0x1c6d84ab5e0) returned 1 [0170.895] GetEnvironmentStringsW () returned 0x1c6d8495930* [0170.895] GetProcessHeap () returned 0x1c6d8490000 [0170.895] RtlAllocateHeap (HeapHandle=0x1c6d8490000, Flags=0x8, Size=0xaea) returned 0x1c6d84aaae0 [0170.895] FreeEnvironmentStringsA (penv="=") returned 1 [0170.895] NtQueryInformationProcess (in: ProcessHandle=0x94, ProcessInformationClass=0x0, ProcessInformation=0xb2d23de268, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0xb2d23de268, ReturnLength=0x0) returned 0x0 [0170.895] ReadProcessMemory (in: hProcess=0x94, lpBaseAddress=0x9f530ce000, lpBuffer=0xb2d23de2a0, nSize=0x7a0, lpNumberOfBytesRead=0xb2d23de260 | out: lpBuffer=0xb2d23de2a0*, lpNumberOfBytesRead=0xb2d23de260*=0x7a0) returned 1 [0170.895] WaitForSingleObject (hHandle=0x94, dwMilliseconds=0xffffffff) returned 0x0 [0183.133] GetExitCodeProcess (in: hProcess=0x94, lpExitCode=0xb2d23dece8 | out: lpExitCode=0xb2d23dece8*=0x0) returned 1 [0183.133] CloseHandle (hObject=0x94) returned 1 [0183.133] _vsnwprintf (in: _Buffer=0xb2d23deeb8, _BufferCount=0x13, _Format="%08X", _ArgList=0xb2d23decf8 | out: _Buffer="00000000") returned 8 [0183.134] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000000") returned 1 [0183.134] GetProcessHeap () returned 0x1c6d8490000 [0183.134] RtlFreeHeap (HeapHandle=0x1c6d8490000, Flags=0x0, BaseAddress=0x1c6d84aaae0) returned 1 [0183.134] GetEnvironmentStringsW () returned 0x1c6d8495930* [0183.134] GetProcessHeap () returned 0x1c6d8490000 [0183.134] RtlAllocateHeap (HeapHandle=0x1c6d8490000, Flags=0x8, Size=0xaea) returned 0x1c6d84aaae0 [0183.134] FreeEnvironmentStringsA (penv="=") returned 1 [0183.134] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1 [0183.134] GetProcessHeap () returned 0x1c6d8490000 [0183.134] RtlFreeHeap (HeapHandle=0x1c6d8490000, Flags=0x0, BaseAddress=0x1c6d84aaae0) returned 1 [0183.134] GetEnvironmentStringsW () returned 0x1c6d8495930* [0183.135] GetProcessHeap () returned 0x1c6d8490000 [0183.135] RtlAllocateHeap (HeapHandle=0x1c6d8490000, Flags=0x8, Size=0xaea) returned 0x1c6d84aaae0 [0183.135] FreeEnvironmentStringsA (penv="=") returned 1 [0183.135] GetProcessHeap () returned 0x1c6d8490000 [0183.135] RtlFreeHeap (HeapHandle=0x1c6d8490000, Flags=0x0, BaseAddress=0x1c6d84a9330) returned 1 [0183.135] DeleteProcThreadAttributeList (in: lpAttributeList=0xb2d23dee70 | out: lpAttributeList=0xb2d23dee70) [0183.135] SetConsoleTitleW (lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe") returned 1 [0183.393] ??_V@YAXPEAX@Z () returned 0x1 [0183.393] _get_osfhandle (_FileHandle=1) returned 0x224 [0183.393] SetConsoleMode (hConsoleHandle=0x224, dwMode=0x0) returned 0 [0183.393] _get_osfhandle (_FileHandle=1) returned 0x224 [0183.393] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x7ff757a5fc08 | out: lpMode=0x7ff757a5fc08) returned 0 [0183.393] _get_osfhandle (_FileHandle=0) returned 0x218 [0183.393] GetConsoleMode (in: hConsoleHandle=0x218, lpMode=0x7ff757a5fc0c | out: lpMode=0x7ff757a5fc0c) returned 0 [0183.393] GetConsoleOutputCP () returned 0x1b5 [0183.808] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff757a5fbb0 | out: lpCPInfo=0x7ff757a5fbb0) returned 1 [0183.808] SetThreadUILanguage (LangId=0x0) returned 0x409 [0184.083] GetProcessHeap () returned 0x1c6d8490000 [0184.083] RtlFreeHeap (HeapHandle=0x1c6d8490000, Flags=0x0, BaseAddress=0x1c6d84a8fa0) returned 1 [0184.083] GetProcessHeap () returned 0x1c6d8490000 [0184.083] RtlFreeHeap (HeapHandle=0x1c6d8490000, Flags=0x0, BaseAddress=0x1c6d84a8dd0) returned 1 [0184.083] GetProcessHeap () returned 0x1c6d8490000 [0184.083] RtlFreeHeap (HeapHandle=0x1c6d8490000, Flags=0x0, BaseAddress=0x1c6d84a8c10) returned 1 [0184.083] GetProcessHeap () returned 0x1c6d8490000 [0184.083] RtlFreeHeap (HeapHandle=0x1c6d8490000, Flags=0x0, BaseAddress=0x1c6d84ac0e0) returned 1 [0184.084] GetProcessHeap () returned 0x1c6d8490000 [0184.084] RtlFreeHeap (HeapHandle=0x1c6d8490000, Flags=0x0, BaseAddress=0x1c6d84a8ba0) returned 1 [0184.084] GetProcessHeap () returned 0x1c6d8490000 [0184.084] RtlFreeHeap (HeapHandle=0x1c6d8490000, Flags=0x0, BaseAddress=0x1c6d8498bb0) returned 1 [0184.084] GetProcessHeap () returned 0x1c6d8490000 [0184.084] RtlFreeHeap (HeapHandle=0x1c6d8490000, Flags=0x0, BaseAddress=0x1c6d84a91f0) returned 1 [0184.084] GetProcessHeap () returned 0x1c6d8490000 [0184.084] RtlFreeHeap (HeapHandle=0x1c6d8490000, Flags=0x0, BaseAddress=0x1c6d8496c60) returned 1 [0184.084] GetProcessHeap () returned 0x1c6d8490000 [0184.084] RtlFreeHeap (HeapHandle=0x1c6d8490000, Flags=0x0, BaseAddress=0x1c6d8496e30) returned 1 [0184.084] _vsnwprintf (in: _Buffer=0x7ff757a67f60, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0xb2d23df298 | out: _Buffer="\r\n") returned 2 [0184.084] _get_osfhandle (_FileHandle=1) returned 0x224 [0184.084] GetFileType (hFile=0x224) returned 0x3 [0184.084] _get_osfhandle (_FileHandle=1) returned 0x224 [0184.084] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3 [0184.084] WriteFile (in: hFile=0x224, lpBuffer=0x7ff757a59970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0xb2d23df268, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesWritten=0xb2d23df268*=0x2, lpOverlapped=0x0) returned 1 [0184.084] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x7ff757a5bb90, nSize=0x2000 | out: lpBuffer="$P$G") returned 0x4 [0184.085] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x1c6d8590080 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13 [0184.085] _vsnwprintf (in: _Buffer=0x1c6d85a0060, _BufferCount=0x83e5, _Format="%s", _ArgList=0xb2d23df2a8 | out: _Buffer="C:\\WINDOWS\\system32") returned 19 [0184.085] _vsnwprintf (in: _Buffer=0x1c6d85a0086, _BufferCount=0x83d2, _Format="%c", _ArgList=0xb2d23df2a8 | out: _Buffer=">") returned 1 [0184.085] _get_osfhandle (_FileHandle=1) returned 0x224 [0184.085] GetFileType (hFile=0x224) returned 0x3 [0184.085] _get_osfhandle (_FileHandle=1) returned 0x224 [0184.085] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\WINDOWS\\system32>", cchWideChar=-1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\WINDOWS\\system32>", lpUsedDefaultChar=0x0) returned 21 [0184.085] WriteFile (in: hFile=0x224, lpBuffer=0x7ff757a59970*, nNumberOfBytesToWrite=0x14, lpNumberOfBytesWritten=0xb2d23df298, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesWritten=0xb2d23df298*=0x14, lpOverlapped=0x0) returned 1 [0184.085] _get_osfhandle (_FileHandle=0) returned 0x218 [0184.085] GetFileType (hFile=0x218) returned 0x3 [0184.085] _get_osfhandle (_FileHandle=0) returned 0x218 [0184.085] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0184.085] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0184.085] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c30, cchWideChar=1 | out: lpWideCharStr="eetsh firewall set opmode mode=disable\nate off\n") returned 1 [0184.085] _get_osfhandle (_FileHandle=0) returned 0x218 [0184.085] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0184.085] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0184.085] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c32, cchWideChar=1 | out: lpWideCharStr="xtsh firewall set opmode mode=disable\nate off\n") returned 1 [0184.085] _get_osfhandle (_FileHandle=0) returned 0x218 [0184.086] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0184.086] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0184.086] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c34, cchWideChar=1 | out: lpWideCharStr="ish firewall set opmode mode=disable\nate off\n") returned 1 [0184.086] _get_osfhandle (_FileHandle=0) returned 0x218 [0184.086] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0184.086] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0184.086] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c36, cchWideChar=1 | out: lpWideCharStr="th firewall set opmode mode=disable\nate off\n") returned 1 [0184.086] _get_osfhandle (_FileHandle=0) returned 0x218 [0184.086] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0184.086] ReadFile (in: hFile=0x218, lpBuffer=0x7ff757a59970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xb2d23df5f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesRead=0xb2d23df5f8*=0x1, lpOverlapped=0x0) returned 1 [0184.086] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=1, lpWideCharStr=0x7ff757a63c38, cchWideChar=1 | out: lpWideCharStr="\n firewall set opmode mode=disable\nate off\n") returned 1 [0184.086] _get_osfhandle (_FileHandle=0) returned 0x218 [0184.086] GetFileType (hFile=0x218) returned 0x3 [0184.086] _get_osfhandle (_FileHandle=0) returned 0x218 [0184.086] SetFilePointer (in: hFile=0x218, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0184.086] _get_osfhandle (_FileHandle=1) returned 0x224 [0184.086] GetFileType (hFile=0x224) returned 0x3 [0184.086] _get_osfhandle (_FileHandle=1) returned 0x224 [0184.086] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="exit\n", cchWideChar=-1, lpMultiByteStr=0x7ff757a59970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="exit\n", lpUsedDefaultChar=0x0) returned 6 [0184.086] WriteFile (in: hFile=0x224, lpBuffer=0x7ff757a59970*, nNumberOfBytesToWrite=0x5, lpNumberOfBytesWritten=0xb2d23df598, lpOverlapped=0x0 | out: lpBuffer=0x7ff757a59970*, lpNumberOfBytesWritten=0xb2d23df598*=0x5, lpOverlapped=0x0) returned 1 [0184.087] GetProcessHeap () returned 0x1c6d8490000 [0184.087] RtlAllocateHeap (HeapHandle=0x1c6d8490000, Flags=0x8, Size=0x4012) returned 0x1c6d8498bb0 [0184.087] GetProcessHeap () returned 0x1c6d8490000 [0184.087] RtlFreeHeap (HeapHandle=0x1c6d8490000, Flags=0x0, BaseAddress=0x1c6d8498bb0) returned 1 [0184.088] _wcsicmp (_String1="exit", _String2=")") returned 60 [0184.088] _wcsicmp (_String1="FOR", _String2="exit") returned 1 [0184.088] _wcsicmp (_String1="FOR/?", _String2="exit") returned 1 [0184.088] _wcsicmp (_String1="IF", _String2="exit") returned 4 [0184.088] _wcsicmp (_String1="IF/?", _String2="exit") returned 4 [0184.088] _wcsicmp (_String1="REM", _String2="exit") returned 13 [0184.088] _wcsicmp (_String1="REM/?", _String2="exit") returned 13 [0184.088] GetProcessHeap () returned 0x1c6d8490000 [0184.088] RtlAllocateHeap (HeapHandle=0x1c6d8490000, Flags=0x8, Size=0xb0) returned 0x1c6d8496e30 [0184.088] GetProcessHeap () returned 0x1c6d8490000 [0184.088] RtlAllocateHeap (HeapHandle=0x1c6d8490000, Flags=0x8, Size=0x1a) returned 0x1c6d8496c60 [0184.088] GetConsoleOutputCP () returned 0x1b5 [0184.390] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff757a5fbb0 | out: lpCPInfo=0x7ff757a5fbb0) returned 1 [0184.390] SetThreadUILanguage (LangId=0x0) returned 0x409 [0184.976] GetConsoleTitleW (in: lpConsoleTitle=0xb2d23df3e0, nSize=0x104 | out: lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe") returned 0x2b [0185.349] malloc (_Size=0xffce) returned 0x1c6d85b0840 [0185.349] ??_V@YAXPEAX@Z () returned 0x1c6d85b0840 [0185.350] malloc (_Size=0xffce) returned 0x1c6d85c0820 [0185.350] ??_V@YAXPEAX@Z () returned 0x1c6d85c0820 [0185.350] _wcsicmp (_String1="exit", _String2="DIR") returned 1 [0185.350] _wcsicmp (_String1="exit", _String2="ERASE") returned 6 [0185.350] _wcsicmp (_String1="exit", _String2="DEL") returned 1 [0185.350] _wcsicmp (_String1="exit", _String2="TYPE") returned -15 [0185.350] _wcsicmp (_String1="exit", _String2="COPY") returned 2 [0185.350] _wcsicmp (_String1="exit", _String2="CD") returned 2 [0185.350] _wcsicmp (_String1="exit", _String2="CHDIR") returned 2 [0185.350] _wcsicmp (_String1="exit", _String2="RENAME") returned -13 [0185.350] _wcsicmp (_String1="exit", _String2="REN") returned -13 [0185.350] _wcsicmp (_String1="exit", _String2="ECHO") returned 21 [0185.350] _wcsicmp (_String1="exit", _String2="SET") returned -14 [0185.351] _wcsicmp (_String1="exit", _String2="PAUSE") returned -11 [0185.351] _wcsicmp (_String1="exit", _String2="DATE") returned 1 [0185.351] _wcsicmp (_String1="exit", _String2="TIME") returned -15 [0185.351] _wcsicmp (_String1="exit", _String2="PROMPT") returned -11 [0185.351] _wcsicmp (_String1="exit", _String2="MD") returned -8 [0185.351] _wcsicmp (_String1="exit", _String2="MKDIR") returned -8 [0185.351] _wcsicmp (_String1="exit", _String2="RD") returned -13 [0185.351] _wcsicmp (_String1="exit", _String2="RMDIR") returned -13 [0185.351] _wcsicmp (_String1="exit", _String2="PATH") returned -11 [0185.351] _wcsicmp (_String1="exit", _String2="GOTO") returned -2 [0185.351] _wcsicmp (_String1="exit", _String2="SHIFT") returned -14 [0185.351] _wcsicmp (_String1="exit", _String2="CLS") returned 2 [0185.351] _wcsicmp (_String1="exit", _String2="CALL") returned 2 [0185.351] _wcsicmp (_String1="exit", _String2="VERIFY") returned -17 [0185.351] _wcsicmp (_String1="exit", _String2="VER") returned -17 [0185.351] _wcsicmp (_String1="exit", _String2="VOL") returned -17 [0185.351] _wcsicmp (_String1="exit", _String2="EXIT") returned 0 [0185.351] ??_V@YAXPEAX@Z () returned 0x1 [0185.351] GetProcessHeap () returned 0x1c6d8490000 [0185.351] RtlAllocateHeap (HeapHandle=0x1c6d8490000, Flags=0x8, Size=0x14) returned 0x1c6d8496ef0 [0185.351] GetProcessHeap () returned 0x1c6d8490000 [0185.351] RtlAllocateHeap (HeapHandle=0x1c6d8490000, Flags=0x8, Size=0x1a) returned 0x1c6d84a95f0 [0185.351] GetProcessHeap () returned 0x1c6d8490000 [0185.351] RtlAllocateHeap (HeapHandle=0x1c6d8490000, Flags=0x8, Size=0x21c) returned 0x1c6d84a9620 [0185.351] GetConsoleTitleW (in: lpConsoleTitle=0x1c6d84a9630, nSize=0x104 | out: lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe") returned 0x2b [0185.808] GetProcessHeap () returned 0x1c6d8490000 [0185.808] RtlReAllocateHeap (Heap=0x1c6d8490000, Flags=0x0, Ptr=0x1c6d84a9620, Size=0x82) returned 0x1c6d84a9620 [0185.808] GetProcessHeap () returned 0x1c6d8490000 [0185.808] RtlSizeHeap (HeapHandle=0x1c6d8490000, Flags=0x0, MemoryPointer=0x1c6d84a9620) returned 0x82 [0185.808] SetConsoleTitleW (lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe - exit") returned 1 [0186.198] GetProcessHeap () returned 0x1c6d8490000 [0186.198] RtlFreeHeap (HeapHandle=0x1c6d8490000, Flags=0x0, BaseAddress=0x1c6d84a9620) returned 1 [0186.199] SetConsoleTitleW (lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 1 [0186.636] exit (_Code=0) Thread: id = 90 os_tid = 0xfd8 Process: id = "12" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x250f3000" os_pid = "0xfb0" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "11" os_parent_pid = "0xfa8" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "64" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00012070" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 85 os_tid = 0xfb4 Thread: id = 86 os_tid = 0xfb8 Thread: id = 87 os_tid = 0xfbc Thread: id = 88 os_tid = 0xfcc Thread: id = 89 os_tid = 0xfd4 Process: id = "13" image_name = "netsh.exe" filename = "c:\\windows\\system32\\netsh.exe" page_root = "0x4a074000" os_pid = "0xfdc" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "11" os_parent_pid = "0xfa8" cmd_line = "netsh advfirewall set currentprofile state off" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NQDPDE\\FD1HVy" bitness = "64" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00012070" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 91 os_tid = 0xfe0 [0157.795] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff64cda0000 [0157.795] __set_app_type (_Type=0x1) [0157.795] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x7ff64cdaa1c0) returned 0x0 [0157.795] __wgetmainargs (in: _Argc=0x7ff64cdb7668, _Argv=0x7ff64cdb7670, _Env=0x7ff64cdb7678, _DoWildCard=0, _StartInfo=0x7ff64cdb7684 | out: _Argc=0x7ff64cdb7668, _Argv=0x7ff64cdb7670, _Env=0x7ff64cdb7678) returned 0 [0157.796] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0157.796] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff64cda0000 [0157.796] _vsnwprintf (in: _Buffer=0x7ff64cdb9b00, _BufferCount=0x1fff, _Format="%s>", _ArgList=0xfef2767448 | out: _Buffer="netsh>") returned 6 [0157.798] GetProcessHeap () returned 0x297c7850000 [0157.798] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785ede0 [0157.798] GetProcessHeap () returned 0x297c7850000 [0157.798] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785ee60 [0157.798] GetProcessHeap () returned 0x297c7850000 [0157.798] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785ee80 [0157.798] GetProcessHeap () returned 0x297c7850000 [0157.798] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785ec80 [0157.798] GetProcessHeap () returned 0x297c7850000 [0157.798] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785efe0 [0157.798] GetProcessHeap () returned 0x297c7850000 [0157.798] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785e8c0 [0157.798] GetProcessHeap () returned 0x297c7850000 [0157.798] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785ece0 [0157.798] GetProcessHeap () returned 0x297c7850000 [0157.798] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785ef80 [0157.798] GetProcessHeap () returned 0x297c7850000 [0157.798] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785ef60 [0157.798] GetProcessHeap () returned 0x297c7850000 [0157.798] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785e9e0 [0157.798] GetProcessHeap () returned 0x297c7850000 [0157.798] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785e920 [0157.798] GetProcessHeap () returned 0x297c7850000 [0157.798] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785ef40 [0157.798] GetProcessHeap () returned 0x297c7850000 [0157.798] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785ec40 [0157.799] GetProcessHeap () returned 0x297c7850000 [0157.799] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785ec00 [0157.799] GetProcessHeap () returned 0x297c7850000 [0157.799] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785ef00 [0157.799] GetProcessHeap () returned 0x297c7850000 [0157.799] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785efa0 [0157.799] GetProcessHeap () returned 0x297c7850000 [0157.799] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785ed40 [0157.799] GetProcessHeap () returned 0x297c7850000 [0157.799] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785ecc0 [0157.799] GetProcessHeap () returned 0x297c7850000 [0157.799] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785ee40 [0157.799] GetProcessHeap () returned 0x297c7850000 [0157.799] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785eca0 [0157.799] GetProcessHeap () returned 0x297c7850000 [0157.799] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785efc0 [0157.799] GetProcessHeap () returned 0x297c7850000 [0157.799] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785f000 [0157.799] GetProcessHeap () returned 0x297c7850000 [0157.799] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785ec60 [0157.799] GetProcessHeap () returned 0x297c7850000 [0157.799] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785ee00 [0157.799] GetProcessHeap () returned 0x297c7850000 [0157.799] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785eee0 [0157.799] GetProcessHeap () returned 0x297c7850000 [0157.799] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785f020 [0157.799] GetProcessHeap () returned 0x297c7850000 [0157.799] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785e940 [0157.799] GetProcessHeap () returned 0x297c7850000 [0157.799] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785eea0 [0157.799] GetProcessHeap () returned 0x297c7850000 [0157.799] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785e8a0 [0157.799] GetProcessHeap () returned 0x297c7850000 [0157.799] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785ea40 [0157.799] GetProcessHeap () returned 0x297c7850000 [0157.799] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785ed00 [0157.800] GetProcessHeap () returned 0x297c7850000 [0157.800] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785ee20 [0157.800] GetProcessHeap () returned 0x297c7850000 [0157.800] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785eec0 [0157.800] GetProcessHeap () returned 0x297c7850000 [0157.800] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785ebe0 [0157.800] GetProcessHeap () returned 0x297c7850000 [0157.800] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785e960 [0157.800] GetProcessHeap () returned 0x297c7850000 [0157.800] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785e900 [0157.800] GetProcessHeap () returned 0x297c7850000 [0157.800] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785ec20 [0157.800] GetProcessHeap () returned 0x297c7850000 [0157.800] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785eb00 [0157.800] GetProcessHeap () returned 0x297c7850000 [0157.800] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785ea20 [0157.800] GetProcessHeap () returned 0x297c7850000 [0157.800] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785ed20 [0157.800] GetProcessHeap () returned 0x297c7850000 [0157.800] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785ef20 [0157.800] GetProcessHeap () returned 0x297c7850000 [0157.800] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785ea60 [0157.800] GetProcessHeap () returned 0x297c7850000 [0157.800] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785ed60 [0157.800] GetProcessHeap () returned 0x297c7850000 [0157.800] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785e8e0 [0157.800] GetProcessHeap () returned 0x297c7850000 [0157.800] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785e980 [0157.800] GetProcessHeap () returned 0x297c7850000 [0157.800] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785e9a0 [0157.800] GetProcessHeap () returned 0x297c7850000 [0157.800] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785e9c0 [0157.800] GetProcessHeap () returned 0x297c7850000 [0157.800] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785ed80 [0157.800] GetProcessHeap () returned 0x297c7850000 [0157.801] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785ebc0 [0157.801] GetProcessHeap () returned 0x297c7850000 [0157.801] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785ea00 [0157.801] GetProcessHeap () returned 0x297c7850000 [0157.801] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785eda0 [0157.801] GetProcessHeap () returned 0x297c7850000 [0157.801] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785ea80 [0157.801] GetProcessHeap () returned 0x297c7850000 [0157.801] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785eba0 [0157.801] GetProcessHeap () returned 0x297c7850000 [0157.801] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785eaa0 [0157.801] GetProcessHeap () returned 0x297c7850000 [0157.801] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785eb20 [0157.801] GetProcessHeap () returned 0x297c7850000 [0157.801] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785eac0 [0157.801] GetProcessHeap () returned 0x297c7850000 [0157.801] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785edc0 [0157.801] GetProcessHeap () returned 0x297c7850000 [0157.801] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785eae0 [0157.801] GetProcessHeap () returned 0x297c7850000 [0157.801] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785eb40 [0157.801] GetProcessHeap () returned 0x297c7850000 [0157.801] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785eb60 [0157.801] GetProcessHeap () returned 0x297c7850000 [0157.801] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785eb80 [0157.801] GetProcessHeap () returned 0x297c7850000 [0157.801] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c78602e0 [0157.801] GetProcessHeap () returned 0x297c7850000 [0157.801] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860360 [0157.801] GetProcessHeap () returned 0x297c7850000 [0157.801] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c78600c0 [0157.801] GetProcessHeap () returned 0x297c7850000 [0157.801] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860300 [0157.801] GetProcessHeap () returned 0x297c7850000 [0157.801] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785fe20 [0157.801] GetProcessHeap () returned 0x297c7850000 [0157.801] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860000 [0157.801] GetProcessHeap () returned 0x297c7850000 [0157.802] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c78600e0 [0157.802] GetProcessHeap () returned 0x297c7850000 [0157.802] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785fd20 [0157.802] GetProcessHeap () returned 0x297c7850000 [0157.802] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860420 [0157.802] GetProcessHeap () returned 0x297c7850000 [0157.802] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785ff40 [0157.802] GetProcessHeap () returned 0x297c7850000 [0157.802] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785ffc0 [0157.802] GetProcessHeap () returned 0x297c7850000 [0157.802] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785fd40 [0157.802] GetProcessHeap () returned 0x297c7850000 [0157.802] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785ff20 [0157.802] GetProcessHeap () returned 0x297c7850000 [0157.803] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c78602a0 [0157.803] GetProcessHeap () returned 0x297c7850000 [0157.803] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785ffe0 [0157.803] GetProcessHeap () returned 0x297c7850000 [0157.803] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860400 [0157.803] GetProcessHeap () returned 0x297c7850000 [0157.803] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860260 [0157.803] GetProcessHeap () returned 0x297c7850000 [0157.803] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860380 [0157.803] GetProcessHeap () returned 0x297c7850000 [0157.803] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860220 [0157.803] GetProcessHeap () returned 0x297c7850000 [0157.803] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785fd60 [0157.803] GetProcessHeap () returned 0x297c7850000 [0157.803] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c78602c0 [0157.803] GetProcessHeap () returned 0x297c7850000 [0157.803] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c78603a0 [0157.803] GetProcessHeap () returned 0x297c7850000 [0157.803] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860320 [0157.803] GetProcessHeap () returned 0x297c7850000 [0157.803] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785ff00 [0157.803] GetProcessHeap () returned 0x297c7850000 [0157.803] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860020 [0157.803] GetProcessHeap () returned 0x297c7850000 [0157.803] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c78603c0 [0157.803] GetProcessHeap () returned 0x297c7850000 [0157.803] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785fe60 [0157.803] GetProcessHeap () returned 0x297c7850000 [0157.803] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860140 [0157.803] GetProcessHeap () returned 0x297c7850000 [0157.803] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860280 [0157.803] GetProcessHeap () returned 0x297c7850000 [0157.803] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c78604a0 [0157.803] GetProcessHeap () returned 0x297c7850000 [0157.803] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c78603e0 [0157.803] GetProcessHeap () returned 0x297c7850000 [0157.803] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785fd80 [0157.803] GetProcessHeap () returned 0x297c7850000 [0157.803] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860040 [0157.803] GetProcessHeap () returned 0x297c7850000 [0157.804] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860100 [0157.804] GetProcessHeap () returned 0x297c7850000 [0157.804] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c78601a0 [0157.804] GetProcessHeap () returned 0x297c7850000 [0157.804] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860440 [0157.804] GetProcessHeap () returned 0x297c7850000 [0157.804] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860240 [0157.804] GetProcessHeap () returned 0x297c7850000 [0157.804] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860460 [0157.804] GetProcessHeap () returned 0x297c7850000 [0157.804] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860480 [0157.804] GetProcessHeap () returned 0x297c7850000 [0157.804] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860340 [0157.804] GetProcessHeap () returned 0x297c7850000 [0157.804] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785fec0 [0157.804] GetProcessHeap () returned 0x297c7850000 [0157.804] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785fda0 [0157.804] GetProcessHeap () returned 0x297c7850000 [0157.804] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785fe40 [0157.804] GetProcessHeap () returned 0x297c7850000 [0157.804] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c78600a0 [0157.804] GetProcessHeap () returned 0x297c7850000 [0157.804] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860120 [0157.804] GetProcessHeap () returned 0x297c7850000 [0157.804] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860160 [0157.804] GetProcessHeap () returned 0x297c7850000 [0157.804] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860060 [0157.804] GetProcessHeap () returned 0x297c7850000 [0157.804] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860200 [0157.804] GetProcessHeap () returned 0x297c7850000 [0157.804] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785fdc0 [0157.804] GetProcessHeap () returned 0x297c7850000 [0157.804] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860080 [0157.804] GetProcessHeap () returned 0x297c7850000 [0157.804] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785fde0 [0157.804] GetProcessHeap () returned 0x297c7850000 [0157.804] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785fe80 [0157.804] GetProcessHeap () returned 0x297c7850000 [0157.804] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785fe00 [0157.805] GetProcessHeap () returned 0x297c7850000 [0157.805] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785ff60 [0157.805] GetProcessHeap () returned 0x297c7850000 [0157.805] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860180 [0157.805] GetProcessHeap () returned 0x297c7850000 [0157.805] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c78601c0 [0157.805] GetProcessHeap () returned 0x297c7850000 [0157.805] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785fea0 [0157.805] GetProcessHeap () returned 0x297c7850000 [0157.805] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785fee0 [0157.805] GetProcessHeap () returned 0x297c7850000 [0157.805] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785ff80 [0157.805] GetProcessHeap () returned 0x297c7850000 [0157.805] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c785ffa0 [0157.805] GetProcessHeap () returned 0x297c7850000 [0157.805] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c78601e0 [0157.805] GetProcessHeap () returned 0x297c7850000 [0157.805] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860790 [0157.805] GetProcessHeap () returned 0x297c7850000 [0157.805] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860b70 [0157.805] GetProcessHeap () returned 0x297c7850000 [0157.805] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860c90 [0157.805] GetProcessHeap () returned 0x297c7850000 [0157.805] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860870 [0157.805] GetProcessHeap () returned 0x297c7850000 [0157.805] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c78609f0 [0157.805] GetProcessHeap () returned 0x297c7850000 [0157.805] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860850 [0157.805] GetProcessHeap () returned 0x297c7850000 [0157.805] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860a90 [0157.805] GetProcessHeap () returned 0x297c7850000 [0157.805] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860690 [0157.805] GetProcessHeap () returned 0x297c7850000 [0157.805] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860a50 [0157.805] GetProcessHeap () returned 0x297c7850000 [0157.805] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860bd0 [0157.805] GetProcessHeap () returned 0x297c7850000 [0157.805] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860810 [0157.805] GetProcessHeap () returned 0x297c7850000 [0157.806] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860670 [0157.806] GetProcessHeap () returned 0x297c7850000 [0157.806] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860b50 [0157.806] GetProcessHeap () returned 0x297c7850000 [0157.806] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c78608f0 [0157.806] GetProcessHeap () returned 0x297c7850000 [0157.806] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860ab0 [0157.806] GetProcessHeap () returned 0x297c7850000 [0157.806] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c78606d0 [0157.806] GetProcessHeap () returned 0x297c7850000 [0157.806] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860c50 [0157.806] GetProcessHeap () returned 0x297c7850000 [0157.806] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860890 [0157.806] GetProcessHeap () returned 0x297c7850000 [0157.806] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c78606b0 [0157.806] GetProcessHeap () returned 0x297c7850000 [0157.806] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860cb0 [0157.806] GetProcessHeap () returned 0x297c7850000 [0157.806] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c78606f0 [0157.806] GetProcessHeap () returned 0x297c7850000 [0157.806] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860b90 [0157.806] GetProcessHeap () returned 0x297c7850000 [0157.806] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860bf0 [0157.806] GetProcessHeap () returned 0x297c7850000 [0157.806] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860bb0 [0157.806] GetProcessHeap () returned 0x297c7850000 [0157.806] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c78608b0 [0157.806] GetProcessHeap () returned 0x297c7850000 [0157.806] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860910 [0157.806] GetProcessHeap () returned 0x297c7850000 [0157.806] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c78607b0 [0157.806] GetProcessHeap () returned 0x297c7850000 [0157.806] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860550 [0157.806] GetProcessHeap () returned 0x297c7850000 [0157.806] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860af0 [0157.806] GetProcessHeap () returned 0x297c7850000 [0157.806] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c78609b0 [0157.806] GetProcessHeap () returned 0x297c7850000 [0157.807] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c78605b0 [0157.807] GetProcessHeap () returned 0x297c7850000 [0157.807] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860c30 [0157.807] GetProcessHeap () returned 0x297c7850000 [0157.807] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860c10 [0157.807] GetProcessHeap () returned 0x297c7850000 [0157.807] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860a10 [0157.807] GetProcessHeap () returned 0x297c7850000 [0157.807] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860a70 [0157.807] GetProcessHeap () returned 0x297c7850000 [0157.807] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c78607f0 [0157.807] GetProcessHeap () returned 0x297c7850000 [0157.807] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c78608d0 [0157.807] GetProcessHeap () returned 0x297c7850000 [0157.807] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860b10 [0157.807] GetProcessHeap () returned 0x297c7850000 [0157.807] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860570 [0157.807] GetProcessHeap () returned 0x297c7850000 [0157.807] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c78605d0 [0157.807] GetProcessHeap () returned 0x297c7850000 [0157.807] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860ad0 [0157.807] GetProcessHeap () returned 0x297c7850000 [0157.807] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860a30 [0157.807] GetProcessHeap () returned 0x297c7850000 [0157.807] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860b30 [0157.807] GetProcessHeap () returned 0x297c7850000 [0157.807] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860c70 [0157.807] GetProcessHeap () returned 0x297c7850000 [0157.808] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860930 [0157.808] GetProcessHeap () returned 0x297c7850000 [0157.808] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860530 [0157.808] GetProcessHeap () returned 0x297c7850000 [0157.808] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860950 [0157.808] GetProcessHeap () returned 0x297c7850000 [0157.808] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860590 [0157.808] GetProcessHeap () returned 0x297c7850000 [0157.808] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860970 [0157.808] GetProcessHeap () returned 0x297c7850000 [0157.808] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c78605f0 [0157.808] GetProcessHeap () returned 0x297c7850000 [0157.808] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860770 [0157.808] GetProcessHeap () returned 0x297c7850000 [0157.808] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860710 [0157.808] GetProcessHeap () returned 0x297c7850000 [0157.808] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860610 [0157.808] GetProcessHeap () returned 0x297c7850000 [0157.808] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860990 [0157.808] GetProcessHeap () returned 0x297c7850000 [0157.808] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c78607d0 [0157.808] GetProcessHeap () returned 0x297c7850000 [0157.808] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860630 [0157.808] GetProcessHeap () returned 0x297c7850000 [0157.808] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860830 [0157.808] GetProcessHeap () returned 0x297c7850000 [0157.808] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860650 [0157.808] GetProcessHeap () returned 0x297c7850000 [0157.808] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860730 [0157.808] GetProcessHeap () returned 0x297c7850000 [0157.808] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c78609d0 [0157.808] GetProcessHeap () returned 0x297c7850000 [0157.808] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860750 [0157.809] GetProcessHeap () returned 0x297c7850000 [0157.809] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7861160 [0157.809] GetProcessHeap () returned 0x297c7850000 [0157.809] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7861200 [0157.809] GetProcessHeap () returned 0x297c7850000 [0157.809] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c78610e0 [0157.809] GetProcessHeap () returned 0x297c7850000 [0157.809] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7861300 [0157.809] GetProcessHeap () returned 0x297c7850000 [0157.809] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7861220 [0157.809] GetProcessHeap () returned 0x297c7850000 [0157.809] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7861240 [0157.809] GetProcessHeap () returned 0x297c7850000 [0157.809] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7861120 [0157.809] GetProcessHeap () returned 0x297c7850000 [0157.809] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860da0 [0157.809] GetProcessHeap () returned 0x297c7850000 [0157.809] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c78613a0 [0157.809] GetProcessHeap () returned 0x297c7850000 [0157.809] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860e40 [0157.809] GetProcessHeap () returned 0x297c7850000 [0157.809] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860f20 [0157.809] GetProcessHeap () returned 0x297c7850000 [0157.809] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860fe0 [0157.809] GetProcessHeap () returned 0x297c7850000 [0157.809] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7861080 [0157.809] GetProcessHeap () returned 0x297c7850000 [0157.809] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860dc0 [0157.810] GetProcessHeap () returned 0x297c7850000 [0157.810] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860e80 [0157.810] GetProcessHeap () returned 0x297c7850000 [0157.810] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860e20 [0157.810] GetProcessHeap () returned 0x297c7850000 [0157.810] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860ea0 [0157.810] GetProcessHeap () returned 0x297c7850000 [0157.810] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860e60 [0157.810] GetProcessHeap () returned 0x297c7850000 [0157.810] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7861380 [0157.810] GetProcessHeap () returned 0x297c7850000 [0157.810] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7861460 [0157.810] GetProcessHeap () returned 0x297c7850000 [0157.810] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860d80 [0157.810] GetProcessHeap () returned 0x297c7850000 [0157.810] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7860ec0 [0157.810] GetProcessHeap () returned 0x297c7850000 [0157.810] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7861000 [0157.810] GetProcessHeap () returned 0x297c7850000 [0157.810] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7861140 [0157.810] GetProcessHeap () returned 0x297c7850000 [0157.810] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c78612c0 [0157.810] GetProcessHeap () returned 0x297c7850000 [0157.810] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7861100 [0157.810] GetProcessHeap () returned 0x297c7850000 [0157.810] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c78613c0 [0157.810] GetProcessHeap () returned 0x297c7850000 [0157.810] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c78610a0 [0157.810] _wcsicmp (_String1="netsh.exe", _String2="ipxmontr.dll") returned 5 [0157.811] _wcsicmp (_String1="netsh.exe", _String2="ipxpromn.dll") returned 5 [0157.811] GetProcessHeap () returned 0x297c7850000 [0157.811] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x28) returned 0x297c785b8e0 [0157.811] GetProcessHeap () returned 0x297c7850000 [0157.811] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x2) returned 0x297c785de60 [0157.811] GetProcessHeap () returned 0x297c7850000 [0157.811] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x14) returned 0x297c7860ee0 [0157.811] _wcsupr (in: _String="netsh.exe" | out: _String="NETSH.EXE") returned="NETSH.EXE" [0157.811] GetProcessHeap () returned 0x297c7850000 [0157.811] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x0) returned 1 [0157.811] GetProcessHeap () returned 0x297c7850000 [0157.811] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x58) returned 0x297c78556b0 [0157.811] GetProcessHeap () returned 0x297c7850000 [0157.811] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x0) returned 1 [0157.811] GetProcessHeap () returned 0x297c7850000 [0157.811] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0xb0) returned 0x297c7855030 [0157.811] GetProcessHeap () returned 0x297c7850000 [0157.811] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78556b0) returned 1 [0157.811] LoadLibraryExW (lpLibFileName="api-ms-win-appmodel-runtime-l1-1-0.dll", hFile=0x0, dwFlags=0x8) returned 0x7ffc8e9f0000 [0157.815] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\NetSh", ulOptions=0x0, samDesired=0x20019, phkResult=0xfef27673f8 | out: phkResult=0xfef27673f8*=0xb4) returned 0x0 [0157.815] RegQueryInfoKeyW (in: hKey=0xb4, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0xfef2767430, lpcbMaxValueNameLen=0xfef2767440, lpcbMaxValueLen=0xfef2767438, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0xfef2767430*=0x14, lpcbMaxValueNameLen=0xfef2767440, lpcbMaxValueLen=0xfef2767438, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0157.815] GetProcessHeap () returned 0x297c7850000 [0157.815] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x8, Size=0x16) returned 0x297c7860e00 [0157.815] GetProcessHeap () returned 0x297c7850000 [0157.815] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x8, Size=0x23) returned 0x297c785bac0 [0157.815] RegEnumValueW (in: hKey=0xb4, dwIndex=0x0, lpValueName=0x297c7860e00, lpcchValueName=0xfef27673f0, lpReserved=0x0, lpType=0x0, lpData=0x297c785bac0, lpcbData=0xfef2767448 | out: lpValueName="2", lpcchValueName=0xfef27673f0, lpType=0x0, lpData=0x297c785bac0, lpcbData=0xfef2767448) returned 0x0 [0157.815] _wcsicmp (_String1="ifmon.dll", _String2="ipxmontr.dll") returned -10 [0157.815] _wcsicmp (_String1="ifmon.dll", _String2="ipxpromn.dll") returned -10 [0157.815] GetProcessHeap () returned 0x297c7850000 [0157.816] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x50) returned 0x297c7861970 [0157.816] GetProcessHeap () returned 0x297c7850000 [0157.816] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x4) returned 0x297c785df90 [0157.816] GetProcessHeap () returned 0x297c7850000 [0157.816] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x14) returned 0x297c7861260 [0157.816] _wcsupr (in: _String="ifmon.dll" | out: _String="IFMON.DLL") returned="IFMON.DLL" [0157.816] GetProcessHeap () returned 0x297c7850000 [0157.816] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785b8e0) returned 1 [0157.816] LoadLibraryExW (lpLibFileName="IFMON.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffc8a6d0000 [0157.851] GetProcAddress (hModule=0x7ffc8a6d0000, lpProcName="InitHelperDll") returned 0x7ffc8a6d1310 [0157.851] InitHelperDll () returned 0x0 [0157.855] RegisterHelper () returned 0x0 [0157.855] GetProcessHeap () returned 0x297c7850000 [0157.855] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x108) returned 0x297c78542e0 [0157.855] GetProcessHeap () returned 0x297c7850000 [0157.855] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7855030) returned 1 [0157.882] RegEnumValueW (in: hKey=0xb4, dwIndex=0x1, lpValueName=0x297c7860e00, lpcchValueName=0xfef27673f0, lpReserved=0x0, lpType=0x0, lpData=0x297c785bac0, lpcbData=0xfef2767448 | out: lpValueName="4", lpcchValueName=0xfef27673f0, lpType=0x0, lpData=0x297c785bac0, lpcbData=0xfef2767448) returned 0x0 [0157.882] _wcsicmp (_String1="rasmontr.dll", _String2="ipxmontr.dll") returned 9 [0157.882] _wcsicmp (_String1="rasmontr.dll", _String2="ipxpromn.dll") returned 9 [0157.882] GetProcessHeap () returned 0x297c7850000 [0157.882] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x78) returned 0x297c7855030 [0157.882] GetProcessHeap () returned 0x297c7850000 [0157.882] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x4) returned 0x297c785df80 [0157.882] GetProcessHeap () returned 0x297c7850000 [0157.882] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x1a) returned 0x297c785ba30 [0157.882] _wcsupr (in: _String="rasmontr.dll" | out: _String="RASMONTR.DLL") returned="RASMONTR.DLL" [0157.882] GetProcessHeap () returned 0x297c7850000 [0157.882] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7861970) returned 1 [0157.882] LoadLibraryExW (lpLibFileName="RASMONTR.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffc84b80000 [0158.123] LoadLibraryExA (lpLibFileName="MSVCRT.DLL", hFile=0x0, dwFlags=0x800) returned 0x7ffc909d0000 [0158.124] GetVersion () returned 0x3ad7000a [0158.124] SetErrorMode (uMode=0x0) returned 0x0 [0158.124] SetErrorMode (uMode=0x8001) returned 0x0 [0158.125] LocalAlloc (uFlags=0x0, uBytes=0x2000) returned 0x297c7872c20 [0158.125] LocalFree (hMem=0x297c7872c20) returned 0x0 [0158.125] GetVersion () returned 0x3ad7000a [0158.127] GlobalLock (hMem=0x297c92a0008) returned 0x297c7872c20 [0158.127] LocalAlloc (uFlags=0x40, uBytes=0x340) returned 0x297c7872e40 [0158.127] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x297c7869420 [0158.127] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x297c7860f40 [0158.128] malloc (_Size=0x100) returned 0x297c7af6de0 [0158.129] __dllonexit () returned 0x7ffc7a5f1200 [0158.129] __dllonexit () returned 0x7ffc7a5f11f0 [0158.129] __dllonexit () returned 0x7ffc7a5f1240 [0158.129] __dllonexit () returned 0x7ffc7a5f12a0 [0158.129] __dllonexit () returned 0x7ffc7a5f1390 [0158.130] __dllonexit () returned 0x7ffc7a5f13a0 [0158.130] __dllonexit () returned 0x7ffc7a5f1420 [0158.130] __dllonexit () returned 0x7ffc7a5f14c0 [0158.130] __dllonexit () returned 0x7ffc7a5f12c0 [0158.130] __dllonexit () returned 0x7ffc7a6159c0 [0158.130] __dllonexit () returned 0x7ffc7a5f12e0 [0158.130] __dllonexit () returned 0x7ffc7a5f1470 [0158.130] __dllonexit () returned 0x7ffc7a5f1490 [0158.130] __dllonexit () returned 0x7ffc7a5f14e0 [0158.130] __dllonexit () returned 0x7ffc7a5f1500 [0158.131] __dllonexit () returned 0x7ffc7a5f1520 [0158.131] __dllonexit () returned 0x7ffc7a5f1550 [0158.131] __dllonexit () returned 0x7ffc7a5f1610 [0158.131] __dllonexit () returned 0x7ffc7a5f1050 [0158.131] __dllonexit () returned 0x7ffc7a5f1070 [0158.131] __dllonexit () returned 0x7ffc7a5f1030 [0158.134] RegisterClipboardFormatW (lpszFormat="commctrl_DragListMsg") returned 0xc157 [0158.135] __dllonexit () returned 0x7ffc7a6159a0 [0158.136] __dllonexit () returned 0x7ffc7a615980 [0158.136] __dllonexit () returned 0x7ffc7a6159b0 [0158.136] __dllonexit () returned 0x7ffc7a615990 [0158.136] GetVersion () returned 0x3ad7000a [0158.136] GetVersion () returned 0x3ad7000a [0158.136] GetVersion () returned 0x3ad7000a [0158.136] __dllonexit () returned 0x7ffc7a6028e0 [0158.136] __dllonexit () returned 0x7ffc7a602910 [0158.136] __dllonexit () returned 0x7ffc7a5f1300 [0158.137] __dllonexit () returned 0x7ffc7a5f13b0 [0158.137] __dllonexit () returned 0x7ffc7a5f13d0 [0158.137] __dllonexit () returned 0x7ffc7a6026e0 [0158.137] GetVersion () returned 0x3ad7000a [0158.137] GetProcessVersion (ProcessId=0x0) returned 0xa0000 [0158.137] GetSystemMetrics (nIndex=11) returned 32 [0158.137] GetSystemMetrics (nIndex=12) returned 32 [0158.137] GetSystemMetrics (nIndex=2) returned 17 [0158.138] GetSystemMetrics (nIndex=3) returned 17 [0158.138] GetDC (hWnd=0x0) returned 0x201051a [0158.138] GetDeviceCaps (hdc=0x201051a, index=88) returned 96 [0158.138] GetDeviceCaps (hdc=0x201051a, index=90) returned 96 [0158.138] ReleaseDC (hWnd=0x0, hDC=0x201051a) returned 1 [0158.138] GetSysColor (nIndex=15) returned 0xf0f0f0 [0158.138] GetSysColor (nIndex=16) returned 0xa0a0a0 [0158.138] GetSysColor (nIndex=20) returned 0xffffff [0158.138] GetSysColor (nIndex=18) returned 0x0 [0158.138] GetSysColor (nIndex=6) returned 0x646464 [0158.138] GetSysColorBrush (nIndex=15) returned 0x100072 [0158.138] GetSysColorBrush (nIndex=6) returned 0x10007a [0158.138] LoadCursorW (hInstance=0x0, lpCursorName=0x7f02) returned 0x10007 [0158.138] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0158.138] __dllonexit () returned 0x7ffc7a5f1450 [0158.138] RegisterClipboardFormatW (lpszFormat="commdlg_FindReplace") returned 0xc158 [0158.139] __dllonexit () returned 0x7ffc7a6026c0 [0158.139] RegisterClipboardFormatW (lpszFormat="Native") returned 0xc004 [0158.139] RegisterClipboardFormatW (lpszFormat="OwnerLink") returned 0xc003 [0158.139] RegisterClipboardFormatW (lpszFormat="ObjectLink") returned 0xc002 [0158.139] RegisterClipboardFormatW (lpszFormat="Embedded Object") returned 0xc00a [0158.139] RegisterClipboardFormatW (lpszFormat="Embed Source") returned 0xc00b [0158.139] RegisterClipboardFormatW (lpszFormat="Link Source") returned 0xc00d [0158.139] RegisterClipboardFormatW (lpszFormat="Object Descriptor") returned 0xc00e [0158.139] RegisterClipboardFormatW (lpszFormat="Link Source Descriptor") returned 0xc00f [0158.139] RegisterClipboardFormatW (lpszFormat="FileName") returned 0xc006 [0158.139] RegisterClipboardFormatW (lpszFormat="FileNameW") returned 0xc007 [0158.139] RegisterClipboardFormatW (lpszFormat="Rich Text Format") returned 0xc07a [0158.139] RegisterClipboardFormatW (lpszFormat="RichEdit Text and Objects") returned 0xc083 [0158.139] RegisterClipboardFormatW (lpszFormat="commdlg_FindReplace") returned 0xc158 [0158.140] __dllonexit () returned 0x7ffc7a6159d0 [0158.140] __dllonexit () returned 0x7ffc7a6159f0 [0158.140] __dllonexit () returned 0x7ffc7a615a00 [0158.140] __dllonexit () returned 0x7ffc7a615a10 [0158.141] __dllonexit () returned 0x7ffc7a615a20 [0158.141] GetCursorPos (in: lpPoint=0x7ffc7a735ae8 | out: lpPoint=0x7ffc7a735ae8*(x=0, y=0)) returned 0 [0158.141] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x297c7871a70 [0158.141] LocalReAlloc (hMem=0x297c7860f40, uBytes=0x18, uFlags=0x2) returned 0x297c7855390 [0158.141] GetCurrentThread () returned 0xfffffffffffffffe [0158.141] GetCurrentThreadId () returned 0xfe0 [0158.141] __dllonexit () returned 0x7ffc7a5f1620 [0158.141] SetErrorMode (uMode=0x0) returned 0x8001 [0158.141] SetErrorMode (uMode=0x8001) returned 0x0 [0158.142] GetModuleFileNameW (in: hModule=0x7ffc7a5f0000, lpFilename=0xfef27663d0, nSize=0x104 | out: lpFilename="C:\\WINDOWS\\system32\\MFC42u.dll" (normalized: "c:\\windows\\system32\\mfc42u.dll")) returned 0x1e [0158.142] wcscpy_s (in: _Destination=0xfef27665e0, _SizeInWords=0x104, _Source="MFC42u" | out: _Destination="MFC42u") returned 0x0 [0158.150] FindResourceW (hModule=0x7ffc7a5f0000, lpName=0xe01, lpType=0x6) returned 0x297c7a40bb0 [0158.155] LoadStringW (in: hInstance=0x7ffc7a5f0000, uID=0xe000, lpBuffer=0xfef27667f0, cchBufferMax=256 | out: lpBuffer="") returned 0x0 [0158.155] wcscpy_s (in: _Destination=0xfef2766404, _SizeInWords=0x5, _Source=".HLP" | out: _Destination=".HLP") returned 0x0 [0158.155] wcscat_s (in: _Destination="MFC42u", _SizeInWords=0x104, _Source=".INI" | out: _Destination="MFC42u.INI") returned 0x0 [0158.158] malloc (_Size=0x80) returned 0x297c7af6e00 [0158.158] LocalAlloc (uFlags=0x40, uBytes=0x2100) returned 0x297c78735c0 [0158.159] GetSystemDirectoryA (in: lpBuffer=0xfef2766a70, uSize=0x112 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13 [0158.159] strcat_s (in: _Destination="C:\\WINDOWS\\system32", _SizeInBytes=0x112, _Source="\\MFC42" | out: _Destination="C:\\WINDOWS\\system32\\MFC42") returned 0x0 [0158.159] strcat_s (in: _Destination="C:\\WINDOWS\\system32\\MFC42", _SizeInBytes=0x112, _Source="LOC" | out: _Destination="C:\\WINDOWS\\system32\\MFC42LOC") returned 0x0 [0158.159] strcat_s (in: _Destination="C:\\WINDOWS\\system32\\MFC42LOC", _SizeInBytes=0x112, _Source=".DLL" | out: _Destination="C:\\WINDOWS\\system32\\MFC42LOC.DLL") returned 0x0 [0158.159] LoadLibraryExA (lpLibFileName="C:\\WINDOWS\\system32\\MFC42LOC.DLL", hFile=0x0, dwFlags=0x2) returned 0x0 [0158.164] GetProcAddress (hModule=0x7ffc84b80000, lpProcName="InitHelperDll") returned 0x7ffc84b95850 [0158.164] InitHelperDll () returned 0x0 [0158.165] RegisterHelper () returned 0x0 [0158.165] GetProcessHeap () returned 0x297c7850000 [0158.165] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x160) returned 0x297c786d0b0 [0158.165] GetProcessHeap () returned 0x297c7850000 [0158.165] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78542e0) returned 1 [0158.165] RegisterHelper () returned 0x0 [0158.165] GetProcessHeap () returned 0x297c7850000 [0158.165] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x1b8) returned 0x297c786ac80 [0158.165] GetProcessHeap () returned 0x297c7850000 [0158.165] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c786d0b0) returned 1 [0158.167] RegisterHelper () returned 0x0 [0158.167] GetProcessHeap () returned 0x297c7850000 [0158.167] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x210) returned 0x297c786ae40 [0158.167] GetProcessHeap () returned 0x297c7850000 [0158.167] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c786ac80) returned 1 [0158.167] RegisterHelper () returned 0x0 [0158.167] GetProcessHeap () returned 0x297c7850000 [0158.167] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x268) returned 0x297c786d0b0 [0158.167] GetProcessHeap () returned 0x297c7850000 [0158.167] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c786ae40) returned 1 [0158.167] RegisterHelper () returned 0x0 [0158.167] GetProcessHeap () returned 0x297c7850000 [0158.167] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x2c0) returned 0x297c786ac80 [0158.167] GetProcessHeap () returned 0x297c7850000 [0158.167] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c786d0b0) returned 1 [0158.167] RegEnumValueW (in: hKey=0xb4, dwIndex=0x2, lpValueName=0x297c7860e00, lpcchValueName=0xfef27673f0, lpReserved=0x0, lpType=0x0, lpData=0x297c785bac0, lpcbData=0xfef2767448 | out: lpValueName="authfwcfg", lpcchValueName=0xfef27673f0, lpType=0x0, lpData=0x297c785bac0, lpcbData=0xfef2767448) returned 0x0 [0158.167] _wcsicmp (_String1="authfwcfg.dll", _String2="ipxmontr.dll") returned -8 [0158.168] _wcsicmp (_String1="authfwcfg.dll", _String2="ipxpromn.dll") returned -8 [0158.168] GetProcessHeap () returned 0x297c7850000 [0158.168] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0xa0) returned 0x297c78552d0 [0158.168] GetProcessHeap () returned 0x297c7850000 [0158.168] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x14) returned 0x297c7861180 [0158.168] GetProcessHeap () returned 0x297c7850000 [0158.168] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x1c) returned 0x297c78695a0 [0158.168] _wcsupr (in: _String="authfwcfg.dll" | out: _String="AUTHFWCFG.DLL") returned="AUTHFWCFG.DLL" [0158.168] GetProcessHeap () returned 0x297c7850000 [0158.168] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7855030) returned 1 [0158.168] LoadLibraryExW (lpLibFileName="AUTHFWCFG.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffc7a570000 [0158.226] GetProcAddress (hModule=0x7ffc7a570000, lpProcName="InitHelperDll") returned 0x7ffc7a571430 [0158.226] InitHelperDll () returned 0x0 [0158.230] RegisterHelper () returned 0x0 [0158.230] GetProcessHeap () returned 0x297c7850000 [0158.230] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x318) returned 0x297c7875ee0 [0158.230] GetProcessHeap () returned 0x297c7850000 [0158.230] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c786ac80) returned 1 [0158.230] RegisterHelper () returned 0x0 [0158.230] GetProcessHeap () returned 0x297c7850000 [0158.230] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x370) returned 0x297c786ac80 [0158.230] GetProcessHeap () returned 0x297c7850000 [0158.230] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7875ee0) returned 1 [0158.230] RegisterHelper () returned 0x0 [0158.230] GetProcessHeap () returned 0x297c7850000 [0158.230] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x3c8) returned 0x297c7875ee0 [0158.231] GetProcessHeap () returned 0x297c7850000 [0158.231] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c786ac80) returned 1 [0158.231] RegisterHelper () returned 0x0 [0158.231] GetProcessHeap () returned 0x297c7850000 [0158.231] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x420) returned 0x297c78762b0 [0158.231] GetProcessHeap () returned 0x297c7850000 [0158.231] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7875ee0) returned 1 [0158.231] RegisterHelper () returned 0x0 [0158.231] GetProcessHeap () returned 0x297c7850000 [0158.231] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x478) returned 0x297c78766e0 [0158.231] GetProcessHeap () returned 0x297c7850000 [0158.231] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78762b0) returned 1 [0158.231] RegEnumValueW (in: hKey=0xb4, dwIndex=0x3, lpValueName=0x297c7860e00, lpcchValueName=0xfef27673f0, lpReserved=0x0, lpType=0x0, lpData=0x297c785bac0, lpcbData=0xfef2767448 | out: lpValueName="dhcpclient", lpcchValueName=0xfef27673f0, lpType=0x0, lpData=0x297c785bac0, lpcbData=0xfef2767448) returned 0x0 [0158.231] _wcsicmp (_String1="dhcpcmonitor.dll", _String2="ipxmontr.dll") returned -5 [0158.231] _wcsicmp (_String1="dhcpcmonitor.dll", _String2="ipxpromn.dll") returned -5 [0158.231] GetProcessHeap () returned 0x297c7850000 [0158.231] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0xc8) returned 0x297c7868fb0 [0158.231] GetProcessHeap () returned 0x297c7850000 [0158.231] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x16) returned 0x297c7875a60 [0158.231] GetProcessHeap () returned 0x297c7850000 [0158.231] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x22) returned 0x297c7869930 [0158.231] _wcsupr (in: _String="dhcpcmonitor.dll" | out: _String="DHCPCMONITOR.DLL") returned="DHCPCMONITOR.DLL" [0158.231] GetProcessHeap () returned 0x297c7850000 [0158.231] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78552d0) returned 1 [0158.231] LoadLibraryExW (lpLibFileName="DHCPCMONITOR.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffc85260000 [0158.251] GetProcAddress (hModule=0x7ffc85260000, lpProcName="InitHelperDll") returned 0x7ffc85261610 [0158.251] InitHelperDll () returned 0x0 [0158.251] RegisterHelper () returned 0x0 [0158.251] GetProcessHeap () returned 0x297c7850000 [0158.252] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x4d0) returned 0x297c7875ee0 [0158.252] GetProcessHeap () returned 0x297c7850000 [0158.252] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78766e0) returned 1 [0158.252] RegEnumValueW (in: hKey=0xb4, dwIndex=0x4, lpValueName=0x297c7860e00, lpcchValueName=0xfef27673f0, lpReserved=0x0, lpType=0x0, lpData=0x297c785bac0, lpcbData=0xfef2767448 | out: lpValueName="dot3cfg", lpcchValueName=0xfef27673f0, lpType=0x0, lpData=0x297c785bac0, lpcbData=0xfef2767448) returned 0x0 [0158.252] _wcsicmp (_String1="dot3cfg.dll", _String2="ipxmontr.dll") returned -5 [0158.252] _wcsicmp (_String1="dot3cfg.dll", _String2="ipxpromn.dll") returned -5 [0158.252] GetProcessHeap () returned 0x297c7850000 [0158.252] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0xf0) returned 0x297c78542e0 [0158.252] GetProcessHeap () returned 0x297c7850000 [0158.252] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7875e00 [0158.252] GetProcessHeap () returned 0x297c7850000 [0158.252] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x18) returned 0x297c7875da0 [0158.252] _wcsupr (in: _String="dot3cfg.dll" | out: _String="DOT3CFG.DLL") returned="DOT3CFG.DLL" [0158.252] GetProcessHeap () returned 0x297c7850000 [0158.252] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7868fb0) returned 1 [0158.252] LoadLibraryExW (lpLibFileName="DOT3CFG.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffc84f00000 [0158.376] GetProcAddress (hModule=0x7ffc84f00000, lpProcName="InitHelperDll") returned 0x7ffc84f01100 [0158.376] InitHelperDll () returned 0x0 [0158.376] RegisterHelper () returned 0x0 [0158.376] GetProcessHeap () returned 0x297c7850000 [0158.376] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x528) returned 0x297c78763c0 [0158.376] GetProcessHeap () returned 0x297c7850000 [0158.376] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7875ee0) returned 1 [0158.376] RegEnumValueW (in: hKey=0xb4, dwIndex=0x5, lpValueName=0x297c7860e00, lpcchValueName=0xfef27673f0, lpReserved=0x0, lpType=0x0, lpData=0x297c785bac0, lpcbData=0xfef2767448 | out: lpValueName="fwcfg", lpcchValueName=0xfef27673f0, lpType=0x0, lpData=0x297c785bac0, lpcbData=0xfef2767448) returned 0x0 [0158.376] _wcsicmp (_String1="fwcfg.dll", _String2="ipxmontr.dll") returned -3 [0158.376] _wcsicmp (_String1="fwcfg.dll", _String2="ipxpromn.dll") returned -3 [0158.376] GetProcessHeap () returned 0x297c7850000 [0158.376] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x118) returned 0x297c7869b50 [0158.376] GetProcessHeap () returned 0x297c7850000 [0158.376] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0xc) returned 0x297c7875c60 [0158.376] GetProcessHeap () returned 0x297c7850000 [0158.376] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x14) returned 0x297c7875ce0 [0158.376] _wcsupr (in: _String="fwcfg.dll" | out: _String="FWCFG.DLL") returned="FWCFG.DLL" [0158.377] GetProcessHeap () returned 0x297c7850000 [0158.377] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78542e0) returned 1 [0158.377] LoadLibraryExW (lpLibFileName="FWCFG.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffc7d440000 [0158.394] GetProcAddress (hModule=0x7ffc7d440000, lpProcName="InitHelperDll") returned 0x7ffc7d4411f0 [0158.394] InitHelperDll () returned 0x0 [0158.394] RegisterHelper () returned 0x0 [0158.394] GetProcessHeap () returned 0x297c7850000 [0158.394] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x580) returned 0x297c7877b80 [0158.395] GetProcessHeap () returned 0x297c7850000 [0158.395] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78763c0) returned 1 [0158.395] RegEnumValueW (in: hKey=0xb4, dwIndex=0x6, lpValueName=0x297c7860e00, lpcchValueName=0xfef27673f0, lpReserved=0x0, lpType=0x0, lpData=0x297c785bac0, lpcbData=0xfef2767448 | out: lpValueName="hnetmon", lpcchValueName=0xfef27673f0, lpType=0x0, lpData=0x297c785bac0, lpcbData=0xfef2767448) returned 0x0 [0158.395] _wcsicmp (_String1="hnetmon.dll", _String2="ipxmontr.dll") returned -1 [0158.395] _wcsicmp (_String1="hnetmon.dll", _String2="ipxpromn.dll") returned -1 [0158.395] GetProcessHeap () returned 0x297c7850000 [0158.395] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x140) returned 0x297c786d0b0 [0158.395] GetProcessHeap () returned 0x297c7850000 [0158.395] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7875ac0 [0158.395] GetProcessHeap () returned 0x297c7850000 [0158.395] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x18) returned 0x297c7875a80 [0158.395] _wcsupr (in: _String="hnetmon.dll" | out: _String="HNETMON.DLL") returned="HNETMON.DLL" [0158.395] GetProcessHeap () returned 0x297c7850000 [0158.395] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7869b50) returned 1 [0158.395] LoadLibraryExW (lpLibFileName="HNETMON.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffc84ed0000 [0158.506] GetProcAddress (hModule=0x7ffc84ed0000, lpProcName="InitHelperDll") returned 0x7ffc84ed2060 [0158.506] InitHelperDll () returned 0x0 [0158.506] RegisterHelper () returned 0x0 [0158.506] GetProcessHeap () returned 0x297c7850000 [0158.506] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x5d8) returned 0x297c7875ee0 [0158.506] GetProcessHeap () returned 0x297c7850000 [0158.506] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7877b80) returned 1 [0158.506] RegEnumValueW (in: hKey=0xb4, dwIndex=0x7, lpValueName=0x297c7860e00, lpcchValueName=0xfef27673f0, lpReserved=0x0, lpType=0x0, lpData=0x297c785bac0, lpcbData=0xfef2767448 | out: lpValueName="netiohlp", lpcchValueName=0xfef27673f0, lpType=0x0, lpData=0x297c785bac0, lpcbData=0xfef2767448) returned 0x0 [0158.506] _wcsicmp (_String1="netiohlp.dll", _String2="ipxmontr.dll") returned 5 [0158.506] _wcsicmp (_String1="netiohlp.dll", _String2="ipxpromn.dll") returned 5 [0158.506] GetProcessHeap () returned 0x297c7850000 [0158.506] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x168) returned 0x297c78764c0 [0158.506] GetProcessHeap () returned 0x297c7850000 [0158.506] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x12) returned 0x297c7875ae0 [0158.506] GetProcessHeap () returned 0x297c7850000 [0158.506] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x1a) returned 0x297c7876f10 [0158.507] _wcsupr (in: _String="netiohlp.dll" | out: _String="NETIOHLP.DLL") returned="NETIOHLP.DLL" [0158.507] GetProcessHeap () returned 0x297c7850000 [0158.507] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c786d0b0) returned 1 [0158.507] LoadLibraryExW (lpLibFileName="NETIOHLP.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffc7a3e0000 [0158.536] GetProcAddress (hModule=0x7ffc7a3e0000, lpProcName="InitHelperDll") returned 0x7ffc7a3f5f80 [0158.536] InitHelperDll () returned 0x0 [0158.536] RegisterHelper () returned 0x0 [0158.536] GetProcessHeap () returned 0x297c7850000 [0158.536] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x630) returned 0x297c7880470 [0158.537] GetProcessHeap () returned 0x297c7850000 [0158.537] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7875ee0) returned 1 [0158.537] RegisterHelper () returned 0x0 [0158.537] GetProcessHeap () returned 0x297c7850000 [0158.537] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x688) returned 0x297c7880ab0 [0158.537] GetProcessHeap () returned 0x297c7850000 [0158.537] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7880470) returned 1 [0158.537] RegisterHelper () returned 0x0 [0158.537] GetProcessHeap () returned 0x297c7850000 [0158.537] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x6e0) returned 0x297c7881140 [0158.537] GetProcessHeap () returned 0x297c7850000 [0158.537] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7880ab0) returned 1 [0158.537] RegisterHelper () returned 0x0 [0158.537] GetProcessHeap () returned 0x297c7850000 [0158.537] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x738) returned 0x297c7881830 [0158.537] GetProcessHeap () returned 0x297c7850000 [0158.537] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7881140) returned 1 [0158.537] RegisterHelper () returned 0x0 [0158.537] GetProcessHeap () returned 0x297c7850000 [0158.537] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x790) returned 0x297c7880470 [0158.537] GetProcessHeap () returned 0x297c7850000 [0158.537] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7881830) returned 1 [0158.537] RegisterHelper () returned 0x0 [0158.537] GetProcessHeap () returned 0x297c7850000 [0158.537] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x7e8) returned 0x297c7880c10 [0158.537] GetProcessHeap () returned 0x297c7850000 [0158.537] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7880470) returned 1 [0158.538] RegisterHelper () returned 0x0 [0158.538] GetProcessHeap () returned 0x297c7850000 [0158.538] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x840) returned 0x297c7881400 [0158.538] GetProcessHeap () returned 0x297c7850000 [0158.538] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7880c10) returned 1 [0158.538] RegisterHelper () returned 0x0 [0158.538] GetProcessHeap () returned 0x297c7850000 [0158.538] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x898) returned 0x297c7880470 [0158.538] GetProcessHeap () returned 0x297c7850000 [0158.538] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7881400) returned 1 [0158.538] RegisterHelper () returned 0x0 [0158.538] GetProcessHeap () returned 0x297c7850000 [0158.538] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x8f0) returned 0x297c7880d10 [0158.538] GetProcessHeap () returned 0x297c7850000 [0158.538] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7880470) returned 1 [0158.538] RegEnumValueW (in: hKey=0xb4, dwIndex=0x8, lpValueName=0x297c7860e00, lpcchValueName=0xfef27673f0, lpReserved=0x0, lpType=0x0, lpData=0x297c785bac0, lpcbData=0xfef2767448 | out: lpValueName="nettrace", lpcchValueName=0xfef27673f0, lpType=0x0, lpData=0x297c785bac0, lpcbData=0xfef2767448) returned 0x0 [0158.538] _wcsicmp (_String1="nettrace.dll", _String2="ipxmontr.dll") returned 5 [0158.538] _wcsicmp (_String1="nettrace.dll", _String2="ipxpromn.dll") returned 5 [0158.538] GetProcessHeap () returned 0x297c7850000 [0158.538] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x190) returned 0x297c786d0b0 [0158.538] GetProcessHeap () returned 0x297c7850000 [0158.538] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x12) returned 0x297c7875840 [0158.538] GetProcessHeap () returned 0x297c7850000 [0158.538] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x1a) returned 0x297c78802e0 [0158.538] _wcsupr (in: _String="nettrace.dll" | out: _String="NETTRACE.DLL") returned="NETTRACE.DLL" [0158.538] GetProcessHeap () returned 0x297c7850000 [0158.539] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78764c0) returned 1 [0158.539] LoadLibraryExW (lpLibFileName="NETTRACE.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffc7a2b0000 [0158.660] GetProcAddress (hModule=0x7ffc7a2b0000, lpProcName="InitHelperDll") returned 0x7ffc7a2b15d0 [0158.660] InitHelperDll () returned 0x0 [0158.660] RegisterHelper () returned 0x0 [0158.660] GetProcessHeap () returned 0x297c7850000 [0158.660] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x948) returned 0x297c7899ea0 [0158.660] GetProcessHeap () returned 0x297c7850000 [0158.660] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7880d10) returned 1 [0158.660] RegEnumValueW (in: hKey=0xb4, dwIndex=0x9, lpValueName=0x297c7860e00, lpcchValueName=0xfef27673f0, lpReserved=0x0, lpType=0x0, lpData=0x297c785bac0, lpcbData=0xfef2767448 | out: lpValueName="nshhttp", lpcchValueName=0xfef27673f0, lpType=0x0, lpData=0x297c785bac0, lpcbData=0xfef2767448) returned 0x0 [0158.660] _wcsicmp (_String1="nshhttp.dll", _String2="ipxmontr.dll") returned 5 [0158.660] _wcsicmp (_String1="nshhttp.dll", _String2="ipxpromn.dll") returned 5 [0158.660] GetProcessHeap () returned 0x297c7850000 [0158.660] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x1b8) returned 0x297c7877da0 [0158.660] GetProcessHeap () returned 0x297c7850000 [0158.660] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7880580 [0158.660] GetProcessHeap () returned 0x297c7850000 [0158.660] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x18) returned 0x297c7880980 [0158.660] _wcsupr (in: _String="nshhttp.dll" | out: _String="NSHHTTP.DLL") returned="NSHHTTP.DLL" [0158.660] GetProcessHeap () returned 0x297c7850000 [0158.660] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c786d0b0) returned 1 [0158.661] LoadLibraryExW (lpLibFileName="NSHHTTP.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffc841d0000 [0158.680] GetProcAddress (hModule=0x7ffc841d0000, lpProcName="InitHelperDll") returned 0x7ffc841d10e0 [0158.680] InitHelperDll () returned 0x0 [0158.680] RegisterHelper () returned 0x0 [0158.680] GetProcessHeap () returned 0x297c7850000 [0158.680] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x9a0) returned 0x297c789a7f0 [0158.681] GetProcessHeap () returned 0x297c7850000 [0158.681] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7899ea0) returned 1 [0158.681] RegEnumValueW (in: hKey=0xb4, dwIndex=0xa, lpValueName=0x297c7860e00, lpcchValueName=0xfef27673f0, lpReserved=0x0, lpType=0x0, lpData=0x297c785bac0, lpcbData=0xfef2767448 | out: lpValueName="nshipsec", lpcchValueName=0xfef27673f0, lpType=0x0, lpData=0x297c785bac0, lpcbData=0xfef2767448) returned 0x0 [0158.681] _wcsicmp (_String1="nshipsec.dll", _String2="ipxmontr.dll") returned 5 [0158.681] _wcsicmp (_String1="nshipsec.dll", _String2="ipxpromn.dll") returned 5 [0158.681] GetProcessHeap () returned 0x297c7850000 [0158.681] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x1e0) returned 0x297c786d0b0 [0158.681] GetProcessHeap () returned 0x297c7850000 [0158.681] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x12) returned 0x297c7880a40 [0158.681] GetProcessHeap () returned 0x297c7850000 [0158.681] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x1a) returned 0x297c78889c0 [0158.681] _wcsupr (in: _String="nshipsec.dll" | out: _String="NSHIPSEC.DLL") returned="NSHIPSEC.DLL" [0158.681] GetProcessHeap () returned 0x297c7850000 [0158.681] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7877da0) returned 1 [0158.681] LoadLibraryExW (lpLibFileName="NSHIPSEC.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffc76920000 [0158.779] GetProcAddress (hModule=0x7ffc76920000, lpProcName="InitHelperDll") returned 0x7ffc76921250 [0158.779] InitHelperDll () returned 0x0 [0158.779] RegisterHelper () returned 0x0 [0158.779] GetProcessHeap () returned 0x297c7850000 [0158.779] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x9f8) returned 0x297c789b1a0 [0158.779] GetProcessHeap () returned 0x297c7850000 [0158.779] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c789a7f0) returned 1 [0158.779] RegisterHelper () returned 0x0 [0158.779] GetProcessHeap () returned 0x297c7850000 [0158.779] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0xa50) returned 0x297c7899ea0 [0158.779] GetProcessHeap () returned 0x297c7850000 [0158.779] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c789b1a0) returned 1 [0158.779] RegisterHelper () returned 0x0 [0158.779] GetProcessHeap () returned 0x297c7850000 [0158.779] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0xaa8) returned 0x297c789a900 [0158.779] GetProcessHeap () returned 0x297c7850000 [0158.779] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7899ea0) returned 1 [0158.791] RegEnumValueW (in: hKey=0xb4, dwIndex=0xb, lpValueName=0x297c7860e00, lpcchValueName=0xfef27673f0, lpReserved=0x0, lpType=0x0, lpData=0x297c785bac0, lpcbData=0xfef2767448 | out: lpValueName="nshwfp", lpcchValueName=0xfef27673f0, lpType=0x0, lpData=0x297c785bac0, lpcbData=0xfef2767448) returned 0x0 [0158.791] _wcsicmp (_String1="nshwfp.dll", _String2="ipxmontr.dll") returned 5 [0158.791] _wcsicmp (_String1="nshwfp.dll", _String2="ipxpromn.dll") returned 5 [0158.791] GetProcessHeap () returned 0x297c7850000 [0158.791] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x208) returned 0x297c7899ea0 [0158.791] GetProcessHeap () returned 0x297c7850000 [0158.791] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0xe) returned 0x297c7880a80 [0158.791] GetProcessHeap () returned 0x297c7850000 [0158.791] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x16) returned 0x297c78805e0 [0158.791] _wcsupr (in: _String="nshwfp.dll" | out: _String="NSHWFP.DLL") returned="NSHWFP.DLL" [0158.791] GetProcessHeap () returned 0x297c7850000 [0158.791] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c786d0b0) returned 1 [0158.791] LoadLibraryExW (lpLibFileName="NSHWFP.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffc74040000 [0158.980] GetProcAddress (hModule=0x7ffc74040000, lpProcName="InitHelperDll") returned 0x7ffc740410d0 [0158.980] InitHelperDll () returned 0x0 [0158.980] RegisterHelper () returned 0x0 [0158.980] GetProcessHeap () returned 0x297c7850000 [0158.980] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0xb00) returned 0x297c789dc30 [0158.981] GetProcessHeap () returned 0x297c7850000 [0158.981] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c789a900) returned 1 [0158.981] RegEnumValueW (in: hKey=0xb4, dwIndex=0xc, lpValueName=0x297c7860e00, lpcchValueName=0xfef27673f0, lpReserved=0x0, lpType=0x0, lpData=0x297c785bac0, lpcbData=0xfef2767448 | out: lpValueName="p2pnetsh", lpcchValueName=0xfef27673f0, lpType=0x0, lpData=0x297c785bac0, lpcbData=0xfef2767448) returned 0x0 [0158.981] _wcsicmp (_String1="p2pnetsh.dll", _String2="ipxmontr.dll") returned 7 [0158.981] _wcsicmp (_String1="p2pnetsh.dll", _String2="ipxpromn.dll") returned 7 [0158.981] GetProcessHeap () returned 0x297c7850000 [0158.981] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x230) returned 0x297c78810c0 [0158.981] GetProcessHeap () returned 0x297c7850000 [0158.981] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x12) returned 0x297c7880920 [0158.981] GetProcessHeap () returned 0x297c7850000 [0158.981] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x1a) returned 0x297c789d560 [0158.981] _wcsupr (in: _String="p2pnetsh.dll" | out: _String="P2PNETSH.DLL") returned="P2PNETSH.DLL" [0158.981] GetProcessHeap () returned 0x297c7850000 [0158.981] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7899ea0) returned 1 [0158.981] LoadLibraryExW (lpLibFileName="P2PNETSH.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffc74000000 [0159.112] GetProcAddress (hModule=0x7ffc74000000, lpProcName="InitHelperDll") returned 0x7ffc740011e0 [0159.112] InitHelperDll () returned 0x0 [0159.112] RegisterHelper () returned 0x0 [0159.112] GetProcessHeap () returned 0x297c7850000 [0159.112] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0xb58) returned 0x297c789a460 [0159.112] GetProcessHeap () returned 0x297c7850000 [0159.112] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c789dc30) returned 1 [0159.112] RegisterHelper () returned 0x0 [0159.112] GetProcessHeap () returned 0x297c7850000 [0159.112] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0xbb0) returned 0x297c78a1760 [0159.112] GetProcessHeap () returned 0x297c7850000 [0159.112] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c789a460) returned 1 [0159.113] RegisterHelper () returned 0x0 [0159.113] GetProcessHeap () returned 0x297c7850000 [0159.113] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0xc08) returned 0x297c78a2320 [0159.113] GetProcessHeap () returned 0x297c7850000 [0159.113] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a1760) returned 1 [0159.113] RegisterHelper () returned 0x0 [0159.113] GetProcessHeap () returned 0x297c7850000 [0159.113] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0xc60) returned 0x297c789a460 [0159.113] GetProcessHeap () returned 0x297c7850000 [0159.113] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a2320) returned 1 [0159.119] RegisterHelper () returned 0x0 [0159.119] GetProcessHeap () returned 0x297c7850000 [0159.119] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0xcb8) returned 0x297c78a1760 [0159.120] GetProcessHeap () returned 0x297c7850000 [0159.120] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c789a460) returned 1 [0159.120] RegisterHelper () returned 0x0 [0159.120] GetProcessHeap () returned 0x297c7850000 [0159.120] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0xd10) returned 0x297c789a460 [0159.120] GetProcessHeap () returned 0x297c7850000 [0159.120] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a1760) returned 1 [0159.120] RegisterHelper () returned 0x0 [0159.120] GetProcessHeap () returned 0x297c7850000 [0159.120] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0xd68) returned 0x297c78a1760 [0159.120] GetProcessHeap () returned 0x297c7850000 [0159.120] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c789a460) returned 1 [0159.122] RegisterHelper () returned 0x0 [0159.122] GetProcessHeap () returned 0x297c7850000 [0159.122] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0xdc0) returned 0x297c789a460 [0159.122] GetProcessHeap () returned 0x297c7850000 [0159.122] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a1760) returned 1 [0159.122] RegEnumValueW (in: hKey=0xb4, dwIndex=0xd, lpValueName=0x297c7860e00, lpcchValueName=0xfef27673f0, lpReserved=0x0, lpType=0x0, lpData=0x297c785bac0, lpcbData=0xfef2767448 | out: lpValueName="rpc", lpcchValueName=0xfef27673f0, lpType=0x0, lpData=0x297c785bac0, lpcbData=0xfef2767448) returned 0x0 [0159.123] _wcsicmp (_String1="rpcnsh.dll", _String2="ipxmontr.dll") returned 9 [0159.123] _wcsicmp (_String1="rpcnsh.dll", _String2="ipxpromn.dll") returned 9 [0159.123] GetProcessHeap () returned 0x297c7850000 [0159.123] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x258) returned 0x297c789dc30 [0159.123] GetProcessHeap () returned 0x297c7850000 [0159.123] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x8) returned 0x297c785df30 [0159.123] GetProcessHeap () returned 0x297c7850000 [0159.123] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x16) returned 0x297c78806a0 [0159.123] _wcsupr (in: _String="rpcnsh.dll" | out: _String="RPCNSH.DLL") returned="RPCNSH.DLL" [0159.123] GetProcessHeap () returned 0x297c7850000 [0159.123] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78810c0) returned 1 [0159.123] LoadLibraryExW (lpLibFileName="RPCNSH.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffc896e0000 [0159.149] GetProcAddress (hModule=0x7ffc896e0000, lpProcName="InitHelperDll") returned 0x7ffc896e1010 [0159.149] InitHelperDll () returned 0x0 [0159.149] RegisterHelper () returned 0x0 [0159.149] GetProcessHeap () returned 0x297c7850000 [0159.149] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0xe18) returned 0x297c78a1760 [0159.149] GetProcessHeap () returned 0x297c7850000 [0159.150] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c789a460) returned 1 [0159.150] RegisterHelper () returned 0x0 [0159.150] GetProcessHeap () returned 0x297c7850000 [0159.150] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0xe70) returned 0x297c789a460 [0159.150] GetProcessHeap () returned 0x297c7850000 [0159.150] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a1760) returned 1 [0159.150] RegEnumValueW (in: hKey=0xb4, dwIndex=0xe, lpValueName=0x297c7860e00, lpcchValueName=0xfef27673f0, lpReserved=0x0, lpType=0x0, lpData=0x297c785bac0, lpcbData=0xfef2767448 | out: lpValueName="WcnNetsh", lpcchValueName=0xfef27673f0, lpType=0x0, lpData=0x297c785bac0, lpcbData=0xfef2767448) returned 0x0 [0159.150] _wcsicmp (_String1="WcnNetsh.dll", _String2="ipxmontr.dll") returned 14 [0159.150] _wcsicmp (_String1="WcnNetsh.dll", _String2="ipxpromn.dll") returned 14 [0159.150] GetProcessHeap () returned 0x297c7850000 [0159.150] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x280) returned 0x297c78810c0 [0159.150] GetProcessHeap () returned 0x297c7850000 [0159.150] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x12) returned 0x297c7880aa0 [0159.150] GetProcessHeap () returned 0x297c7850000 [0159.150] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x1a) returned 0x297c789d8c0 [0159.150] _wcsupr (in: _String="WcnNetsh.dll" | out: _String="WCNNETSH.DLL") returned="WCNNETSH.DLL" [0159.150] GetProcessHeap () returned 0x297c7850000 [0159.150] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c789dc30) returned 1 [0159.150] LoadLibraryExW (lpLibFileName="WCNNETSH.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffc895f0000 [0159.166] GetProcAddress (hModule=0x7ffc895f0000, lpProcName="InitHelperDll") returned 0x7ffc895f1680 [0159.166] InitHelperDll () returned 0x0 [0159.166] RegisterHelper () returned 0x0 [0159.166] GetProcessHeap () returned 0x297c7850000 [0159.166] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0xec8) returned 0x297c78a1760 [0159.166] GetProcessHeap () returned 0x297c7850000 [0159.166] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c789a460) returned 1 [0159.166] RegEnumValueW (in: hKey=0xb4, dwIndex=0xf, lpValueName=0x297c7860e00, lpcchValueName=0xfef27673f0, lpReserved=0x0, lpType=0x0, lpData=0x297c785bac0, lpcbData=0xfef2767448 | out: lpValueName="whhelper", lpcchValueName=0xfef27673f0, lpType=0x0, lpData=0x297c785bac0, lpcbData=0xfef2767448) returned 0x0 [0159.166] _wcsicmp (_String1="whhelper.dll", _String2="ipxmontr.dll") returned 14 [0159.166] _wcsicmp (_String1="whhelper.dll", _String2="ipxpromn.dll") returned 14 [0159.166] GetProcessHeap () returned 0x297c7850000 [0159.166] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x2a8) returned 0x297c789e040 [0159.166] GetProcessHeap () returned 0x297c7850000 [0159.166] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x12) returned 0x297c7880680 [0159.167] GetProcessHeap () returned 0x297c7850000 [0159.167] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x1a) returned 0x297c789d8f0 [0159.167] _wcsupr (in: _String="whhelper.dll" | out: _String="WHHELPER.DLL") returned="WHHELPER.DLL" [0159.167] GetProcessHeap () returned 0x297c7850000 [0159.167] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78810c0) returned 1 [0159.167] LoadLibraryExW (lpLibFileName="WHHELPER.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffc895e0000 [0159.178] GetProcAddress (hModule=0x7ffc895e0000, lpProcName="InitHelperDll") returned 0x7ffc895e14d0 [0159.178] InitHelperDll () returned 0x0 [0159.178] RegisterHelper () returned 0x0 [0159.178] GetProcessHeap () returned 0x297c7850000 [0159.178] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0xf20) returned 0x297c789a460 [0159.178] GetProcessHeap () returned 0x297c7850000 [0159.178] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a1760) returned 1 [0159.179] RegEnumValueW (in: hKey=0xb4, dwIndex=0x10, lpValueName=0x297c7860e00, lpcchValueName=0xfef27673f0, lpReserved=0x0, lpType=0x0, lpData=0x297c785bac0, lpcbData=0xfef2767448 | out: lpValueName="wlancfg", lpcchValueName=0xfef27673f0, lpType=0x0, lpData=0x297c785bac0, lpcbData=0xfef2767448) returned 0x0 [0159.179] _wcsicmp (_String1="wlancfg.dll", _String2="ipxmontr.dll") returned 14 [0159.179] _wcsicmp (_String1="wlancfg.dll", _String2="ipxpromn.dll") returned 14 [0159.179] GetProcessHeap () returned 0x297c7850000 [0159.179] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x2d0) returned 0x297c78810c0 [0159.179] GetProcessHeap () returned 0x297c7850000 [0159.179] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7880500 [0159.179] GetProcessHeap () returned 0x297c7850000 [0159.179] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x18) returned 0x297c78806e0 [0159.179] _wcsupr (in: _String="wlancfg.dll" | out: _String="WLANCFG.DLL") returned="WLANCFG.DLL" [0159.179] GetProcessHeap () returned 0x297c7850000 [0159.179] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c789e040) returned 1 [0159.179] LoadLibraryExW (lpLibFileName="WLANCFG.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffc85170000 [0159.372] GetProcAddress (hModule=0x7ffc85170000, lpProcName="InitHelperDll") returned 0x7ffc85171320 [0159.372] InitHelperDll () returned 0x0 [0159.372] RegisterHelper () returned 0x0 [0159.372] GetProcessHeap () returned 0x297c7850000 [0159.372] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0xf78) returned 0x297c78a3f80 [0159.372] GetProcessHeap () returned 0x297c7850000 [0159.372] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c789a460) returned 1 [0159.372] RegEnumValueW (in: hKey=0xb4, dwIndex=0x11, lpValueName=0x297c7860e00, lpcchValueName=0xfef27673f0, lpReserved=0x0, lpType=0x0, lpData=0x297c785bac0, lpcbData=0xfef2767448 | out: lpValueName="wshelper", lpcchValueName=0xfef27673f0, lpType=0x0, lpData=0x297c785bac0, lpcbData=0xfef2767448) returned 0x0 [0159.372] _wcsicmp (_String1="wshelper.dll", _String2="ipxmontr.dll") returned 14 [0159.372] _wcsicmp (_String1="wshelper.dll", _String2="ipxpromn.dll") returned 14 [0159.372] GetProcessHeap () returned 0x297c7850000 [0159.372] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x2f8) returned 0x297c789e040 [0159.372] GetProcessHeap () returned 0x297c7850000 [0159.372] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x12) returned 0x297c7880700 [0159.372] GetProcessHeap () returned 0x297c7850000 [0159.372] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x1a) returned 0x297c78a18d0 [0159.372] _wcsupr (in: _String="wshelper.dll" | out: _String="WSHELPER.DLL") returned="WSHELPER.DLL" [0159.372] GetProcessHeap () returned 0x297c7850000 [0159.372] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78810c0) returned 1 [0159.372] LoadLibraryExW (lpLibFileName="WSHELPER.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffc86380000 [0159.381] GetProcAddress (hModule=0x7ffc86380000, lpProcName="InitHelperDll") returned 0x7ffc86381030 [0159.381] InitHelperDll () returned 0x0 [0159.381] RegisterHelper () returned 0x0 [0159.381] GetProcessHeap () returned 0x297c7850000 [0159.381] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0xfd0) returned 0x297c78a4f00 [0159.381] GetProcessHeap () returned 0x297c7850000 [0159.381] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a3f80) returned 1 [0159.381] RegEnumValueW (in: hKey=0xb4, dwIndex=0x12, lpValueName=0x297c7860e00, lpcchValueName=0xfef27673f0, lpReserved=0x0, lpType=0x0, lpData=0x297c785bac0, lpcbData=0xfef2767448 | out: lpValueName="wwancfg", lpcchValueName=0xfef27673f0, lpType=0x0, lpData=0x297c785bac0, lpcbData=0xfef2767448) returned 0x0 [0159.381] _wcsicmp (_String1="wwancfg.dll", _String2="ipxmontr.dll") returned 14 [0159.381] _wcsicmp (_String1="wwancfg.dll", _String2="ipxpromn.dll") returned 14 [0159.523] GetProcessHeap () returned 0x297c7850000 [0159.523] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x320) returned 0x297c78810c0 [0159.523] GetProcessHeap () returned 0x297c7850000 [0159.523] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10) returned 0x297c7880740 [0159.523] GetProcessHeap () returned 0x297c7850000 [0159.523] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x18) returned 0x297c7880960 [0159.523] _wcsupr (in: _String="wwancfg.dll" | out: _String="WWANCFG.DLL") returned="WWANCFG.DLL" [0159.523] GetProcessHeap () returned 0x297c7850000 [0159.523] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c789e040) returned 1 [0159.523] LoadLibraryExW (lpLibFileName="WWANCFG.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffc85500000 [0159.641] GetProcAddress (hModule=0x7ffc85500000, lpProcName="InitHelperDll") returned 0x7ffc855011d0 [0159.641] InitHelperDll () returned 0x0 [0159.641] RegisterHelper () returned 0x0 [0159.641] GetProcessHeap () returned 0x297c7850000 [0159.641] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x1028) returned 0x297c78a6ef0 [0159.642] GetProcessHeap () returned 0x297c7850000 [0159.642] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a4f00) returned 1 [0159.642] RegEnumValueW (in: hKey=0xb4, dwIndex=0x13, lpValueName=0x297c7860e00, lpcchValueName=0xfef27673f0, lpReserved=0x0, lpType=0x0, lpData=0x297c785bac0, lpcbData=0xfef2767448 | out: lpValueName="peerdistsh", lpcchValueName=0xfef27673f0, lpType=0x0, lpData=0x297c785bac0, lpcbData=0xfef2767448) returned 0x0 [0159.642] _wcsicmp (_String1="peerdistsh.dll", _String2="ipxmontr.dll") returned 7 [0159.642] _wcsicmp (_String1="peerdistsh.dll", _String2="ipxpromn.dll") returned 7 [0159.642] GetProcessHeap () returned 0x297c7850000 [0159.642] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x348) returned 0x297c789a870 [0159.642] GetProcessHeap () returned 0x297c7850000 [0159.642] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x16) returned 0x297c78a4150 [0159.642] GetProcessHeap () returned 0x297c7850000 [0159.642] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x1e) returned 0x297c78a1a50 [0159.642] _wcsupr (in: _String="peerdistsh.dll" | out: _String="PEERDISTSH.DLL") returned="PEERDISTSH.DLL" [0159.642] GetProcessHeap () returned 0x297c7850000 [0159.642] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78810c0) returned 1 [0159.642] LoadLibraryExW (lpLibFileName="PEERDISTSH.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffc84d20000 [0159.691] GetProcAddress (hModule=0x7ffc84d20000, lpProcName="InitHelperDll") returned 0x7ffc84d21220 [0159.691] InitHelperDll () returned 0x0 [0159.692] RegisterHelper () returned 0x0 [0159.692] GetProcessHeap () returned 0x297c7850000 [0159.692] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x1080) returned 0x297c78a4790 [0159.692] GetProcessHeap () returned 0x297c7850000 [0159.692] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a6ef0) returned 1 [0159.692] RegisterHelper () returned 0x0 [0159.692] GetProcessHeap () returned 0x297c7850000 [0159.692] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x10d8) returned 0x297c78a6ef0 [0159.692] GetProcessHeap () returned 0x297c7850000 [0159.692] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a4790) returned 1 [0159.692] RegCloseKey (hKey=0xb4) returned 0x0 [0159.692] GetProcessHeap () returned 0x297c7850000 [0159.692] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860e00) returned 1 [0159.692] GetProcessHeap () returned 0x297c7850000 [0159.692] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785bac0) returned 1 [0159.694] GetProcessHeap () returned 0x297c7850000 [0159.694] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x70) returned 0x297c7852830 [0159.694] GetProcessHeap () returned 0x297c7850000 [0159.694] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x0) returned 1 [0159.694] RegisterContext () returned 0x0 [0159.694] GetProcessHeap () returned 0x297c7850000 [0159.694] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x70) returned 0x297c78547e0 [0159.694] GetProcessHeap () returned 0x297c7850000 [0159.694] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x0) returned 1 [0159.694] RegisterContext () returned 0x0 [0159.697] _wcsicmp (_String1="ras", _String2="interface") returned 9 [0159.697] _wcsicmp (_String1="ras", _String2="interface") returned 9 [0159.697] GetProcessHeap () returned 0x297c7850000 [0159.697] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0xe0) returned 0x297c789b4f0 [0159.697] GetProcessHeap () returned 0x297c7850000 [0159.697] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78547e0) returned 1 [0159.731] RegisterContext () returned 0x0 [0159.732] GetProcessHeap () returned 0x297c7850000 [0159.732] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x70) returned 0x297c789e680 [0159.732] GetProcessHeap () returned 0x297c7850000 [0159.732] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x0) returned 1 [0159.732] RegisterContext () returned 0x0 [0159.733] _wcsicmp (_String1="ipv6", _String2="ip") returned 118 [0159.733] _wcsicmp (_String1="ipv6", _String2="ip") returned 118 [0159.733] GetProcessHeap () returned 0x297c7850000 [0159.733] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0xe0) returned 0x297c789be50 [0159.733] GetProcessHeap () returned 0x297c7850000 [0159.733] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c789e680) returned 1 [0159.734] RegisterContext () returned 0x0 [0159.735] _wcsicmp (_String1="aaaa", _String2="ip") returned -8 [0159.735] _wcsicmp (_String1="aaaa", _String2="ipv6") returned -8 [0159.735] _wcsicmp (_String1="aaaa", _String2="ip") returned -8 [0159.735] GetProcessHeap () returned 0x297c7850000 [0159.735] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x150) returned 0x297c78ade40 [0159.735] GetProcessHeap () returned 0x297c7850000 [0159.735] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c789be50) returned 1 [0159.735] RegisterContext () returned 0x0 [0159.736] _wcsicmp (_String1="diagnostics", _String2="aaaa") returned 3 [0159.736] _wcsicmp (_String1="diagnostics", _String2="ip") returned -5 [0159.736] _wcsicmp (_String1="diagnostics", _String2="ipv6") returned -5 [0159.736] _wcsicmp (_String1="diagnostics", _String2="aaaa") returned 3 [0159.736] _wcsicmp (_String1="diagnostics", _String2="ip") returned -5 [0159.736] GetProcessHeap () returned 0x297c7850000 [0159.736] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x1c0) returned 0x297c789ae50 [0159.736] GetProcessHeap () returned 0x297c7850000 [0159.736] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78ade40) returned 1 [0159.736] RegisterContext () returned 0x0 [0159.736] _wcsicmp (_String1="advfirewall", _String2="interface") returned -8 [0159.736] _wcsicmp (_String1="advfirewall", _String2="ras") returned -17 [0159.736] _wcsicmp (_String1="advfirewall", _String2="interface") returned -8 [0159.736] GetProcessHeap () returned 0x297c7850000 [0159.736] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x150) returned 0x297c78ade40 [0159.736] GetProcessHeap () returned 0x297c7850000 [0159.736] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c789b4f0) returned 1 [0159.736] RegisterContext () returned 0x0 [0159.736] GetProcessHeap () returned 0x297c7850000 [0159.736] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x70) returned 0x297c789e680 [0159.736] GetProcessHeap () returned 0x297c7850000 [0159.736] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x0) returned 1 [0159.736] RegisterContext () returned 0x0 [0159.737] _wcsicmp (_String1="firewall", _String2="consec") returned 3 [0159.737] _wcsicmp (_String1="firewall", _String2="consec") returned 3 [0159.737] GetProcessHeap () returned 0x297c7850000 [0159.737] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0xe0) returned 0x297c789bf40 [0159.737] GetProcessHeap () returned 0x297c7850000 [0159.737] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c789e680) returned 1 [0159.737] RegisterContext () returned 0x0 [0159.737] _wcsicmp (_String1="monitor", _String2="consec") returned 10 [0159.737] _wcsicmp (_String1="monitor", _String2="firewall") returned 7 [0159.737] _wcsicmp (_String1="monitor", _String2="consec") returned 10 [0159.737] _wcsicmp (_String1="monitor", _String2="firewall") returned 7 [0159.737] GetProcessHeap () returned 0x297c7850000 [0159.737] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x150) returned 0x297c789b020 [0159.737] GetProcessHeap () returned 0x297c7850000 [0159.737] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c789bf40) returned 1 [0159.737] RegisterContext () returned 0x0 [0159.737] _wcsicmp (_String1="mainmode", _String2="consec") returned 10 [0159.737] _wcsicmp (_String1="mainmode", _String2="firewall") returned 7 [0159.737] _wcsicmp (_String1="mainmode", _String2="monitor") returned -14 [0159.737] _wcsicmp (_String1="mainmode", _String2="consec") returned 10 [0159.737] _wcsicmp (_String1="mainmode", _String2="firewall") returned 7 [0159.737] _wcsicmp (_String1="mainmode", _String2="monitor") returned -14 [0159.737] GetProcessHeap () returned 0x297c7850000 [0159.737] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x1c0) returned 0x297c789b180 [0159.737] GetProcessHeap () returned 0x297c7850000 [0159.737] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c789b020) returned 1 [0159.737] RegisterContext () returned 0x0 [0159.738] _wcsicmp (_String1="dhcpclient", _String2="advfirewall") returned 3 [0159.738] _wcsicmp (_String1="dhcpclient", _String2="interface") returned -5 [0159.738] _wcsicmp (_String1="dhcpclient", _String2="ras") returned -14 [0159.738] _wcsicmp (_String1="dhcpclient", _String2="advfirewall") returned 3 [0159.738] _wcsicmp (_String1="dhcpclient", _String2="interface") returned -5 [0159.738] GetProcessHeap () returned 0x297c7850000 [0159.738] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x1c0) returned 0x297c78a4790 [0159.738] GetProcessHeap () returned 0x297c7850000 [0159.738] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78ade40) returned 1 [0159.738] RegisterContext () returned 0x0 [0159.738] _wcsicmp (_String1="lan", _String2="advfirewall") returned 11 [0159.738] _wcsicmp (_String1="lan", _String2="dhcpclient") returned 8 [0159.738] _wcsicmp (_String1="lan", _String2="interface") returned 3 [0159.738] _wcsicmp (_String1="lan", _String2="ras") returned -6 [0159.738] _wcsicmp (_String1="lan", _String2="advfirewall") returned 11 [0159.738] _wcsicmp (_String1="lan", _String2="dhcpclient") returned 8 [0159.738] _wcsicmp (_String1="lan", _String2="interface") returned 3 [0159.738] _wcsicmp (_String1="lan", _String2="ras") returned -6 [0159.738] GetProcessHeap () returned 0x297c7850000 [0159.738] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x230) returned 0x297c78a4960 [0159.738] GetProcessHeap () returned 0x297c7850000 [0159.738] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a4790) returned 1 [0159.742] RegisterContext () returned 0x0 [0159.742] _wcsicmp (_String1="firewall", _String2="advfirewall") returned 5 [0159.742] _wcsicmp (_String1="firewall", _String2="dhcpclient") returned 2 [0159.742] _wcsicmp (_String1="firewall", _String2="interface") returned -3 [0159.742] _wcsicmp (_String1="firewall", _String2="lan") returned -6 [0159.742] _wcsicmp (_String1="firewall", _String2="ras") returned -12 [0159.742] _wcsicmp (_String1="firewall", _String2="advfirewall") returned 5 [0159.742] _wcsicmp (_String1="firewall", _String2="dhcpclient") returned 2 [0159.742] _wcsicmp (_String1="firewall", _String2="interface") returned -3 [0159.742] GetProcessHeap () returned 0x297c7850000 [0159.743] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x2a0) returned 0x297c78a55c0 [0159.743] GetProcessHeap () returned 0x297c7850000 [0159.743] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a4960) returned 1 [0159.743] RegisterContext () returned 0x0 [0159.743] _wcsicmp (_String1="bridge", _String2="advfirewall") returned 1 [0159.743] _wcsicmp (_String1="bridge", _String2="dhcpclient") returned -2 [0159.743] _wcsicmp (_String1="bridge", _String2="firewall") returned -4 [0159.743] _wcsicmp (_String1="bridge", _String2="interface") returned -7 [0159.743] _wcsicmp (_String1="bridge", _String2="lan") returned -10 [0159.743] _wcsicmp (_String1="bridge", _String2="ras") returned -16 [0159.743] _wcsicmp (_String1="bridge", _String2="advfirewall") returned 1 [0159.743] _wcsicmp (_String1="bridge", _String2="dhcpclient") returned -2 [0159.743] GetProcessHeap () returned 0x297c7850000 [0159.743] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x310) returned 0x297c78a4790 [0159.743] GetProcessHeap () returned 0x297c7850000 [0159.743] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a55c0) returned 1 [0159.743] RegisterContext () returned 0x0 [0159.743] _wcsicmp (_String1="netio", _String2="advfirewall") returned 13 [0159.743] _wcsicmp (_String1="netio", _String2="bridge") returned 12 [0159.743] _wcsicmp (_String1="netio", _String2="dhcpclient") returned 10 [0159.743] _wcsicmp (_String1="netio", _String2="firewall") returned 8 [0159.743] _wcsicmp (_String1="netio", _String2="interface") returned 5 [0159.743] _wcsicmp (_String1="netio", _String2="lan") returned 2 [0159.743] _wcsicmp (_String1="netio", _String2="ras") returned -4 [0159.743] _wcsicmp (_String1="netio", _String2="advfirewall") returned 13 [0159.743] _wcsicmp (_String1="netio", _String2="bridge") returned 12 [0159.744] _wcsicmp (_String1="netio", _String2="dhcpclient") returned 10 [0159.744] _wcsicmp (_String1="netio", _String2="firewall") returned 8 [0159.744] _wcsicmp (_String1="netio", _String2="interface") returned 5 [0159.744] _wcsicmp (_String1="netio", _String2="lan") returned 2 [0159.744] _wcsicmp (_String1="netio", _String2="ras") returned -4 [0159.744] GetProcessHeap () returned 0x297c7850000 [0159.744] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x380) returned 0x297c78a55c0 [0159.744] GetProcessHeap () returned 0x297c7850000 [0159.744] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a4790) returned 1 [0159.744] RegisterContext () returned 0x0 [0159.744] _wcsicmp (_String1="dnsclient", _String2="advfirewall") returned 3 [0159.744] _wcsicmp (_String1="dnsclient", _String2="bridge") returned 2 [0159.744] _wcsicmp (_String1="dnsclient", _String2="dhcpclient") returned 6 [0159.744] _wcsicmp (_String1="dnsclient", _String2="firewall") returned -2 [0159.744] _wcsicmp (_String1="dnsclient", _String2="interface") returned -5 [0159.744] _wcsicmp (_String1="dnsclient", _String2="lan") returned -8 [0159.744] _wcsicmp (_String1="dnsclient", _String2="netio") returned -10 [0159.744] _wcsicmp (_String1="dnsclient", _String2="ras") returned -14 [0159.744] _wcsicmp (_String1="dnsclient", _String2="advfirewall") returned 3 [0159.744] _wcsicmp (_String1="dnsclient", _String2="bridge") returned 2 [0159.744] _wcsicmp (_String1="dnsclient", _String2="dhcpclient") returned 6 [0159.744] _wcsicmp (_String1="dnsclient", _String2="firewall") returned -2 [0159.744] GetProcessHeap () returned 0x297c7850000 [0159.744] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x3f0) returned 0x297c78a5950 [0159.744] GetProcessHeap () returned 0x297c7850000 [0159.744] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a55c0) returned 1 [0159.744] RegisterContext () returned 0x0 [0159.744] _wcsicmp (_String1="namespace", _String2="advfirewall") returned 13 [0159.745] _wcsicmp (_String1="namespace", _String2="bridge") returned 12 [0159.745] _wcsicmp (_String1="namespace", _String2="dhcpclient") returned 10 [0159.745] _wcsicmp (_String1="namespace", _String2="dnsclient") returned 10 [0159.745] _wcsicmp (_String1="namespace", _String2="firewall") returned 8 [0159.745] _wcsicmp (_String1="namespace", _String2="interface") returned 5 [0159.745] _wcsicmp (_String1="namespace", _String2="lan") returned 2 [0159.745] _wcsicmp (_String1="namespace", _String2="netio") returned -4 [0159.745] _wcsicmp (_String1="namespace", _String2="ras") returned -4 [0159.745] _wcsicmp (_String1="namespace", _String2="advfirewall") returned 13 [0159.745] _wcsicmp (_String1="namespace", _String2="bridge") returned 12 [0159.745] _wcsicmp (_String1="namespace", _String2="dhcpclient") returned 10 [0159.745] _wcsicmp (_String1="namespace", _String2="dnsclient") returned 10 [0159.745] _wcsicmp (_String1="namespace", _String2="firewall") returned 8 [0159.745] _wcsicmp (_String1="namespace", _String2="interface") returned 5 [0159.745] _wcsicmp (_String1="namespace", _String2="lan") returned 2 [0159.745] _wcsicmp (_String1="namespace", _String2="netio") returned -4 [0159.745] GetProcessHeap () returned 0x297c7850000 [0159.745] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x460) returned 0x297c78a4790 [0159.745] GetProcessHeap () returned 0x297c7850000 [0159.745] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a5950) returned 1 [0159.745] RegisterContext () returned 0x0 [0159.745] GetProcessHeap () returned 0x297c7850000 [0159.745] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x70) returned 0x297c789e680 [0159.745] GetProcessHeap () returned 0x297c7850000 [0159.745] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x0) returned 1 [0159.745] RegisterContext () returned 0x0 [0159.745] _wcsicmp (_String1="ipv6", _String2="ipv4") returned 2 [0159.745] _wcsicmp (_String1="ipv6", _String2="ipv4") returned 2 [0159.745] GetProcessHeap () returned 0x297c7850000 [0159.745] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0xe0) returned 0x297c789b7c0 [0159.746] GetProcessHeap () returned 0x297c7850000 [0159.746] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c789e680) returned 1 [0159.747] RegisterContext () returned 0x0 [0159.747] _wcsicmp (_String1="6to4", _String2="ipv4") returned -51 [0159.747] _wcsicmp (_String1="6to4", _String2="ipv6") returned -51 [0159.747] _wcsicmp (_String1="6to4", _String2="ipv4") returned -51 [0159.747] GetProcessHeap () returned 0x297c7850000 [0159.747] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x150) returned 0x297c789b020 [0159.747] GetProcessHeap () returned 0x297c7850000 [0159.747] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c789b7c0) returned 1 [0159.748] RegisterContext () returned 0x0 [0159.748] _wcsicmp (_String1="isatap", _String2="6to4") returned 51 [0159.748] _wcsicmp (_String1="isatap", _String2="ipv4") returned 3 [0159.748] _wcsicmp (_String1="isatap", _String2="ipv6") returned 3 [0159.748] _wcsicmp (_String1="isatap", _String2="6to4") returned 51 [0159.748] _wcsicmp (_String1="isatap", _String2="ipv4") returned 3 [0159.748] _wcsicmp (_String1="isatap", _String2="ipv6") returned 3 [0159.748] GetProcessHeap () returned 0x297c7850000 [0159.748] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x1c0) returned 0x297c78a55c0 [0159.748] GetProcessHeap () returned 0x297c7850000 [0159.748] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c789b020) returned 1 [0159.749] RegisterContext () returned 0x0 [0159.749] _wcsicmp (_String1="teredo", _String2="6to4") returned 62 [0159.749] _wcsicmp (_String1="teredo", _String2="ipv4") returned 11 [0159.749] _wcsicmp (_String1="teredo", _String2="ipv6") returned 11 [0159.749] _wcsicmp (_String1="teredo", _String2="isatap") returned 11 [0159.749] _wcsicmp (_String1="teredo", _String2="6to4") returned 62 [0159.749] _wcsicmp (_String1="teredo", _String2="ipv4") returned 11 [0159.749] _wcsicmp (_String1="teredo", _String2="ipv6") returned 11 [0159.749] _wcsicmp (_String1="teredo", _String2="isatap") returned 11 [0159.749] GetProcessHeap () returned 0x297c7850000 [0159.749] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x230) returned 0x297c78a5790 [0159.749] GetProcessHeap () returned 0x297c7850000 [0159.749] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a55c0) returned 1 [0159.749] RegisterContext () returned 0x0 [0159.749] _wcsicmp (_String1="portproxy", _String2="6to4") returned 58 [0159.749] _wcsicmp (_String1="portproxy", _String2="ipv4") returned 7 [0159.749] _wcsicmp (_String1="portproxy", _String2="ipv6") returned 7 [0159.749] _wcsicmp (_String1="portproxy", _String2="isatap") returned 7 [0159.749] _wcsicmp (_String1="portproxy", _String2="teredo") returned -4 [0159.749] _wcsicmp (_String1="portproxy", _String2="6to4") returned 58 [0159.749] _wcsicmp (_String1="portproxy", _String2="ipv4") returned 7 [0159.749] _wcsicmp (_String1="portproxy", _String2="ipv6") returned 7 [0159.749] _wcsicmp (_String1="portproxy", _String2="isatap") returned 7 [0159.749] _wcsicmp (_String1="portproxy", _String2="teredo") returned -4 [0159.750] GetProcessHeap () returned 0x297c7850000 [0159.750] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x2a0) returned 0x297c78a59d0 [0159.750] GetProcessHeap () returned 0x297c7850000 [0159.750] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a5790) returned 1 [0159.750] RegisterContext () returned 0x0 [0159.750] GetProcessHeap () returned 0x297c7850000 [0159.750] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x70) returned 0x297c789e680 [0159.750] GetProcessHeap () returned 0x297c7850000 [0159.750] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x0) returned 1 [0159.750] RegisterContext () returned 0x0 [0159.750] _wcsicmp (_String1="isatap", _String2="6to4") returned 51 [0159.750] _wcsicmp (_String1="isatap", _String2="6to4") returned 51 [0159.750] GetProcessHeap () returned 0x297c7850000 [0159.750] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0xe0) returned 0x297c789b400 [0159.750] GetProcessHeap () returned 0x297c7850000 [0159.750] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c789e680) returned 1 [0159.750] RegisterContext () returned 0x0 [0159.750] _wcsicmp (_String1="portproxy", _String2="6to4") returned 58 [0159.750] _wcsicmp (_String1="portproxy", _String2="ipv4") returned 7 [0159.750] _wcsicmp (_String1="portproxy", _String2="ipv6") returned 7 [0159.750] _wcsicmp (_String1="portproxy", _String2="isatap") returned 7 [0159.750] _wcsicmp (_String1="portproxy", _String2="portproxy") returned 0 [0159.750] RegisterContext () returned 0x0 [0159.750] _wcsicmp (_String1="httpstunnel", _String2="6to4") returned 50 [0159.750] _wcsicmp (_String1="httpstunnel", _String2="ipv4") returned -1 [0159.750] _wcsicmp (_String1="httpstunnel", _String2="ipv6") returned -1 [0159.750] _wcsicmp (_String1="httpstunnel", _String2="isatap") returned -1 [0159.750] _wcsicmp (_String1="httpstunnel", _String2="portproxy") returned -8 [0159.751] _wcsicmp (_String1="httpstunnel", _String2="teredo") returned -12 [0159.751] _wcsicmp (_String1="httpstunnel", _String2="6to4") returned 50 [0159.751] _wcsicmp (_String1="httpstunnel", _String2="ipv4") returned -1 [0159.751] GetProcessHeap () returned 0x297c7850000 [0159.751] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x310) returned 0x297c78a55c0 [0159.751] GetProcessHeap () returned 0x297c7850000 [0159.751] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a59d0) returned 1 [0159.751] RegisterContext () returned 0x0 [0159.751] _wcsicmp (_String1="tcp", _String2="6to4") returned 62 [0159.751] _wcsicmp (_String1="tcp", _String2="httpstunnel") returned 12 [0159.751] _wcsicmp (_String1="tcp", _String2="ipv4") returned 11 [0159.751] _wcsicmp (_String1="tcp", _String2="ipv6") returned 11 [0159.751] _wcsicmp (_String1="tcp", _String2="isatap") returned 11 [0159.751] _wcsicmp (_String1="tcp", _String2="portproxy") returned 4 [0159.751] _wcsicmp (_String1="tcp", _String2="teredo") returned -2 [0159.751] _wcsicmp (_String1="tcp", _String2="6to4") returned 62 [0159.751] _wcsicmp (_String1="tcp", _String2="httpstunnel") returned 12 [0159.751] _wcsicmp (_String1="tcp", _String2="ipv4") returned 11 [0159.751] _wcsicmp (_String1="tcp", _String2="ipv6") returned 11 [0159.751] _wcsicmp (_String1="tcp", _String2="isatap") returned 11 [0159.751] _wcsicmp (_String1="tcp", _String2="portproxy") returned 4 [0159.751] _wcsicmp (_String1="tcp", _String2="teredo") returned -2 [0159.751] GetProcessHeap () returned 0x297c7850000 [0159.751] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x380) returned 0x297c78a58e0 [0159.751] GetProcessHeap () returned 0x297c7850000 [0159.751] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a55c0) returned 1 [0159.751] RegisterContext () returned 0x0 [0159.753] _wcsicmp (_String1="trace", _String2="advfirewall") returned 19 [0159.753] _wcsicmp (_String1="trace", _String2="bridge") returned 18 [0159.753] _wcsicmp (_String1="trace", _String2="dhcpclient") returned 16 [0159.753] _wcsicmp (_String1="trace", _String2="dnsclient") returned 16 [0159.753] _wcsicmp (_String1="trace", _String2="firewall") returned 14 [0159.753] _wcsicmp (_String1="trace", _String2="interface") returned 11 [0159.753] _wcsicmp (_String1="trace", _String2="lan") returned 8 [0159.753] _wcsicmp (_String1="trace", _String2="namespace") returned 6 [0159.753] _wcsicmp (_String1="trace", _String2="netio") returned 6 [0159.753] _wcsicmp (_String1="trace", _String2="ras") returned 2 [0159.753] _wcsicmp (_String1="trace", _String2="advfirewall") returned 19 [0159.753] _wcsicmp (_String1="trace", _String2="bridge") returned 18 [0159.753] _wcsicmp (_String1="trace", _String2="dhcpclient") returned 16 [0159.753] _wcsicmp (_String1="trace", _String2="dnsclient") returned 16 [0159.753] _wcsicmp (_String1="trace", _String2="firewall") returned 14 [0159.753] _wcsicmp (_String1="trace", _String2="interface") returned 11 [0159.753] _wcsicmp (_String1="trace", _String2="lan") returned 8 [0159.753] _wcsicmp (_String1="trace", _String2="namespace") returned 6 [0159.753] _wcsicmp (_String1="trace", _String2="netio") returned 6 [0159.753] _wcsicmp (_String1="trace", _String2="ras") returned 2 [0159.753] GetProcessHeap () returned 0x297c7850000 [0159.753] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x4d0) returned 0x297c78ade40 [0159.754] GetProcessHeap () returned 0x297c7850000 [0159.754] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a4790) returned 1 [0159.756] RegisterContext () returned 0x0 [0159.757] _wcsicmp (_String1="http", _String2="advfirewall") returned 7 [0159.757] _wcsicmp (_String1="http", _String2="bridge") returned 6 [0159.757] _wcsicmp (_String1="http", _String2="dhcpclient") returned 4 [0159.757] _wcsicmp (_String1="http", _String2="dnsclient") returned 4 [0159.757] _wcsicmp (_String1="http", _String2="firewall") returned 2 [0159.757] _wcsicmp (_String1="http", _String2="interface") returned -1 [0159.757] _wcsicmp (_String1="http", _String2="lan") returned -4 [0159.757] _wcsicmp (_String1="http", _String2="namespace") returned -6 [0159.757] _wcsicmp (_String1="http", _String2="netio") returned -6 [0159.757] _wcsicmp (_String1="http", _String2="ras") returned -10 [0159.757] _wcsicmp (_String1="http", _String2="trace") returned -12 [0159.757] _wcsicmp (_String1="http", _String2="advfirewall") returned 7 [0159.757] _wcsicmp (_String1="http", _String2="bridge") returned 6 [0159.757] _wcsicmp (_String1="http", _String2="dhcpclient") returned 4 [0159.757] _wcsicmp (_String1="http", _String2="dnsclient") returned 4 [0159.757] _wcsicmp (_String1="http", _String2="firewall") returned 2 [0159.757] _wcsicmp (_String1="http", _String2="interface") returned -1 [0159.758] GetProcessHeap () returned 0x297c7850000 [0159.758] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x540) returned 0x297c78a4790 [0159.758] GetProcessHeap () returned 0x297c7850000 [0159.758] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78ade40) returned 1 [0159.758] RegisterContext () returned 0x0 [0159.758] _wcsicmp (_String1="ipsec", _String2="advfirewall") returned 8 [0159.758] _wcsicmp (_String1="ipsec", _String2="bridge") returned 7 [0159.758] _wcsicmp (_String1="ipsec", _String2="dhcpclient") returned 5 [0159.758] _wcsicmp (_String1="ipsec", _String2="dnsclient") returned 5 [0159.758] _wcsicmp (_String1="ipsec", _String2="firewall") returned 3 [0159.758] _wcsicmp (_String1="ipsec", _String2="http") returned 1 [0159.758] _wcsicmp (_String1="ipsec", _String2="interface") returned 2 [0159.759] _wcsicmp (_String1="ipsec", _String2="lan") returned -3 [0159.759] _wcsicmp (_String1="ipsec", _String2="namespace") returned -5 [0159.759] _wcsicmp (_String1="ipsec", _String2="netio") returned -5 [0159.759] _wcsicmp (_String1="ipsec", _String2="ras") returned -9 [0159.759] _wcsicmp (_String1="ipsec", _String2="trace") returned -11 [0159.759] _wcsicmp (_String1="ipsec", _String2="advfirewall") returned 8 [0159.759] _wcsicmp (_String1="ipsec", _String2="bridge") returned 7 [0159.759] _wcsicmp (_String1="ipsec", _String2="dhcpclient") returned 5 [0159.759] _wcsicmp (_String1="ipsec", _String2="dnsclient") returned 5 [0159.759] _wcsicmp (_String1="ipsec", _String2="firewall") returned 3 [0159.759] _wcsicmp (_String1="ipsec", _String2="http") returned 1 [0159.759] _wcsicmp (_String1="ipsec", _String2="interface") returned 2 [0159.759] _wcsicmp (_String1="ipsec", _String2="lan") returned -3 [0159.759] GetProcessHeap () returned 0x297c7850000 [0159.759] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x5b0) returned 0x297c78af330 [0159.759] GetProcessHeap () returned 0x297c7850000 [0159.759] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a4790) returned 1 [0159.759] RegisterContext () returned 0x0 [0159.759] GetProcessHeap () returned 0x297c7850000 [0159.759] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x70) returned 0x297c789e680 [0159.759] GetProcessHeap () returned 0x297c7850000 [0159.759] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x0) returned 1 [0159.759] RegisterContext () returned 0x0 [0159.759] _wcsicmp (_String1="dynamic", _String2="static") returned -15 [0159.759] _wcsicmp (_String1="dynamic", _String2="static") returned -15 [0159.759] GetProcessHeap () returned 0x297c7850000 [0159.759] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0xe0) returned 0x297c789b5e0 [0159.759] GetProcessHeap () returned 0x297c7850000 [0159.759] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c789e680) returned 1 [0159.760] RegisterContext () returned 0x0 [0159.760] _wcsicmp (_String1="static", _String2="dynamic") returned 15 [0159.760] _wcsicmp (_String1="static", _String2="static") returned 0 [0159.760] RegisterContext () returned 0x0 [0159.760] _wcsicmp (_String1="dynamic", _String2="dynamic") returned 0 [0159.760] RegisterContext () returned 0x0 [0159.777] _wcsicmp (_String1="wfp", _String2="advfirewall") returned 22 [0159.777] _wcsicmp (_String1="wfp", _String2="bridge") returned 21 [0159.777] _wcsicmp (_String1="wfp", _String2="dhcpclient") returned 19 [0159.777] _wcsicmp (_String1="wfp", _String2="dnsclient") returned 19 [0159.777] _wcsicmp (_String1="wfp", _String2="firewall") returned 17 [0159.778] _wcsicmp (_String1="wfp", _String2="http") returned 15 [0159.778] _wcsicmp (_String1="wfp", _String2="interface") returned 14 [0159.778] _wcsicmp (_String1="wfp", _String2="ipsec") returned 14 [0159.778] _wcsicmp (_String1="wfp", _String2="lan") returned 11 [0159.778] _wcsicmp (_String1="wfp", _String2="namespace") returned 9 [0159.778] _wcsicmp (_String1="wfp", _String2="netio") returned 9 [0159.778] _wcsicmp (_String1="wfp", _String2="ras") returned 5 [0159.778] _wcsicmp (_String1="wfp", _String2="trace") returned 3 [0159.778] _wcsicmp (_String1="wfp", _String2="advfirewall") returned 22 [0159.778] _wcsicmp (_String1="wfp", _String2="bridge") returned 21 [0159.778] _wcsicmp (_String1="wfp", _String2="dhcpclient") returned 19 [0159.778] _wcsicmp (_String1="wfp", _String2="dnsclient") returned 19 [0159.778] _wcsicmp (_String1="wfp", _String2="firewall") returned 17 [0159.778] _wcsicmp (_String1="wfp", _String2="http") returned 15 [0159.778] _wcsicmp (_String1="wfp", _String2="interface") returned 14 [0159.778] _wcsicmp (_String1="wfp", _String2="ipsec") returned 14 [0159.778] _wcsicmp (_String1="wfp", _String2="lan") returned 11 [0159.778] _wcsicmp (_String1="wfp", _String2="namespace") returned 9 [0159.778] _wcsicmp (_String1="wfp", _String2="netio") returned 9 [0159.778] _wcsicmp (_String1="wfp", _String2="ras") returned 5 [0159.778] _wcsicmp (_String1="wfp", _String2="trace") returned 3 [0159.778] GetProcessHeap () returned 0x297c7850000 [0159.778] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x620) returned 0x297c78af8f0 [0159.778] GetProcessHeap () returned 0x297c7850000 [0159.778] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78af330) returned 1 [0159.781] RegisterContext () returned 0x0 [0159.781] _wcsicmp (_String1="p2p", _String2="advfirewall") returned 15 [0159.781] _wcsicmp (_String1="p2p", _String2="bridge") returned 14 [0159.781] _wcsicmp (_String1="p2p", _String2="dhcpclient") returned 12 [0159.781] _wcsicmp (_String1="p2p", _String2="dnsclient") returned 12 [0159.781] _wcsicmp (_String1="p2p", _String2="firewall") returned 10 [0159.781] _wcsicmp (_String1="p2p", _String2="http") returned 8 [0159.781] _wcsicmp (_String1="p2p", _String2="interface") returned 7 [0159.781] _wcsicmp (_String1="p2p", _String2="ipsec") returned 7 [0159.781] _wcsicmp (_String1="p2p", _String2="lan") returned 4 [0159.781] _wcsicmp (_String1="p2p", _String2="namespace") returned 2 [0159.781] _wcsicmp (_String1="p2p", _String2="netio") returned 2 [0159.781] _wcsicmp (_String1="p2p", _String2="ras") returned -2 [0159.781] _wcsicmp (_String1="p2p", _String2="trace") returned -4 [0159.781] _wcsicmp (_String1="p2p", _String2="wfp") returned -7 [0159.781] _wcsicmp (_String1="p2p", _String2="advfirewall") returned 15 [0159.781] _wcsicmp (_String1="p2p", _String2="bridge") returned 14 [0159.781] _wcsicmp (_String1="p2p", _String2="dhcpclient") returned 12 [0159.781] _wcsicmp (_String1="p2p", _String2="dnsclient") returned 12 [0159.781] _wcsicmp (_String1="p2p", _String2="firewall") returned 10 [0159.781] _wcsicmp (_String1="p2p", _String2="http") returned 8 [0159.781] _wcsicmp (_String1="p2p", _String2="interface") returned 7 [0159.781] _wcsicmp (_String1="p2p", _String2="ipsec") returned 7 [0159.781] _wcsicmp (_String1="p2p", _String2="lan") returned 4 [0159.781] _wcsicmp (_String1="p2p", _String2="namespace") returned 2 [0159.781] _wcsicmp (_String1="p2p", _String2="netio") returned 2 [0159.781] _wcsicmp (_String1="p2p", _String2="ras") returned -2 [0159.781] GetProcessHeap () returned 0x297c7850000 [0159.781] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x690) returned 0x297c78b2f40 [0159.782] GetProcessHeap () returned 0x297c7850000 [0159.782] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78af8f0) returned 1 [0159.782] RegisterContext () returned 0x0 [0159.782] GetProcessHeap () returned 0x297c7850000 [0159.782] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x70) returned 0x297c78a5840 [0159.782] GetProcessHeap () returned 0x297c7850000 [0159.782] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x0) returned 1 [0159.785] RegisterContext () returned 0x0 [0159.785] _wcsicmp (_String1="group", _String2="pnrp") returned -9 [0159.785] _wcsicmp (_String1="group", _String2="pnrp") returned -9 [0159.785] GetProcessHeap () returned 0x297c7850000 [0159.785] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0xe0) returned 0x297c789b6d0 [0159.785] GetProcessHeap () returned 0x297c7850000 [0159.785] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a5840) returned 1 [0159.786] RegisterContext () returned 0x0 [0159.786] _wcsicmp (_String1="idmgr", _String2="group") returned 2 [0159.786] _wcsicmp (_String1="idmgr", _String2="pnrp") returned -7 [0159.786] _wcsicmp (_String1="idmgr", _String2="group") returned 2 [0159.786] _wcsicmp (_String1="idmgr", _String2="pnrp") returned -7 [0159.786] GetProcessHeap () returned 0x297c7850000 [0159.786] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x150) returned 0x297c789b020 [0159.786] GetProcessHeap () returned 0x297c7850000 [0159.786] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c789b6d0) returned 1 [0159.787] RegisterContext () returned 0x0 [0159.787] GetProcessHeap () returned 0x297c7850000 [0159.787] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x70) returned 0x297c78a5840 [0159.787] GetProcessHeap () returned 0x297c7850000 [0159.787] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x0) returned 1 [0159.787] RegisterContext () returned 0x0 [0159.787] _wcsicmp (_String1="diagnostics", _String2="cloud") returned 1 [0159.787] _wcsicmp (_String1="diagnostics", _String2="cloud") returned 1 [0159.787] GetProcessHeap () returned 0x297c7850000 [0159.787] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0xe0) returned 0x297c789be50 [0159.787] GetProcessHeap () returned 0x297c7850000 [0159.787] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a5840) returned 1 [0159.787] RegisterContext () returned 0x0 [0159.787] _wcsicmp (_String1="peer", _String2="cloud") returned 13 [0159.787] _wcsicmp (_String1="peer", _String2="diagnostics") returned 12 [0159.787] _wcsicmp (_String1="peer", _String2="cloud") returned 13 [0159.787] _wcsicmp (_String1="peer", _String2="diagnostics") returned 12 [0159.787] GetProcessHeap () returned 0x297c7850000 [0159.787] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x150) returned 0x297c78a5c70 [0159.787] GetProcessHeap () returned 0x297c7850000 [0159.787] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c789be50) returned 1 [0159.787] RegisterContext () returned 0x0 [0159.787] GetProcessHeap () returned 0x297c7850000 [0159.787] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x70) returned 0x297c78a5840 [0159.787] GetProcessHeap () returned 0x297c7850000 [0159.787] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x0) returned 1 [0159.788] RegisterContext () returned 0x0 [0159.788] _wcsicmp (_String1="rpc", _String2="advfirewall") returned 17 [0159.788] _wcsicmp (_String1="rpc", _String2="bridge") returned 16 [0159.788] _wcsicmp (_String1="rpc", _String2="dhcpclient") returned 14 [0159.788] _wcsicmp (_String1="rpc", _String2="dnsclient") returned 14 [0159.788] _wcsicmp (_String1="rpc", _String2="firewall") returned 12 [0159.788] _wcsicmp (_String1="rpc", _String2="http") returned 10 [0159.788] _wcsicmp (_String1="rpc", _String2="interface") returned 9 [0159.788] _wcsicmp (_String1="rpc", _String2="ipsec") returned 9 [0159.788] _wcsicmp (_String1="rpc", _String2="lan") returned 6 [0159.788] _wcsicmp (_String1="rpc", _String2="namespace") returned 4 [0159.788] _wcsicmp (_String1="rpc", _String2="netio") returned 4 [0159.788] _wcsicmp (_String1="rpc", _String2="p2p") returned 2 [0159.788] _wcsicmp (_String1="rpc", _String2="ras") returned 15 [0159.788] _wcsicmp (_String1="rpc", _String2="trace") returned -2 [0159.788] _wcsicmp (_String1="rpc", _String2="wfp") returned -5 [0159.788] _wcsicmp (_String1="rpc", _String2="advfirewall") returned 17 [0159.788] _wcsicmp (_String1="rpc", _String2="bridge") returned 16 [0159.788] _wcsicmp (_String1="rpc", _String2="dhcpclient") returned 14 [0159.788] _wcsicmp (_String1="rpc", _String2="dnsclient") returned 14 [0159.788] _wcsicmp (_String1="rpc", _String2="firewall") returned 12 [0159.788] _wcsicmp (_String1="rpc", _String2="http") returned 10 [0159.788] _wcsicmp (_String1="rpc", _String2="interface") returned 9 [0159.788] _wcsicmp (_String1="rpc", _String2="ipsec") returned 9 [0159.788] _wcsicmp (_String1="rpc", _String2="lan") returned 6 [0159.788] _wcsicmp (_String1="rpc", _String2="namespace") returned 4 [0159.788] _wcsicmp (_String1="rpc", _String2="netio") returned 4 [0159.788] _wcsicmp (_String1="rpc", _String2="p2p") returned 2 [0159.788] _wcsicmp (_String1="rpc", _String2="ras") returned 15 [0159.788] _wcsicmp (_String1="rpc", _String2="trace") returned -2 [0159.788] GetProcessHeap () returned 0x297c7850000 [0159.788] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x700) returned 0x297c78b35e0 [0159.789] GetProcessHeap () returned 0x297c7850000 [0159.789] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78b2f40) returned 1 [0159.789] RegisterContext () returned 0x0 [0159.789] GetProcessHeap () returned 0x297c7850000 [0159.789] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x70) returned 0x297c789e680 [0159.789] GetProcessHeap () returned 0x297c7850000 [0159.789] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x0) returned 1 [0159.789] RegisterContext () returned 0x0 [0159.789] _wcsicmp (_String1="wcn", _String2="advfirewall") returned 22 [0159.789] _wcsicmp (_String1="wcn", _String2="bridge") returned 21 [0159.789] _wcsicmp (_String1="wcn", _String2="dhcpclient") returned 19 [0159.789] _wcsicmp (_String1="wcn", _String2="dnsclient") returned 19 [0159.789] _wcsicmp (_String1="wcn", _String2="firewall") returned 17 [0159.789] _wcsicmp (_String1="wcn", _String2="http") returned 15 [0159.789] _wcsicmp (_String1="wcn", _String2="interface") returned 14 [0159.789] _wcsicmp (_String1="wcn", _String2="ipsec") returned 14 [0159.789] _wcsicmp (_String1="wcn", _String2="lan") returned 11 [0159.789] _wcsicmp (_String1="wcn", _String2="namespace") returned 9 [0159.789] _wcsicmp (_String1="wcn", _String2="netio") returned 9 [0159.789] _wcsicmp (_String1="wcn", _String2="p2p") returned 7 [0159.789] _wcsicmp (_String1="wcn", _String2="ras") returned 5 [0159.789] _wcsicmp (_String1="wcn", _String2="rpc") returned 5 [0159.789] _wcsicmp (_String1="wcn", _String2="trace") returned 3 [0159.789] _wcsicmp (_String1="wcn", _String2="wfp") returned -3 [0159.789] _wcsicmp (_String1="wcn", _String2="advfirewall") returned 22 [0159.789] _wcsicmp (_String1="wcn", _String2="bridge") returned 21 [0159.789] _wcsicmp (_String1="wcn", _String2="dhcpclient") returned 19 [0159.789] _wcsicmp (_String1="wcn", _String2="dnsclient") returned 19 [0159.789] _wcsicmp (_String1="wcn", _String2="firewall") returned 17 [0159.789] _wcsicmp (_String1="wcn", _String2="http") returned 15 [0159.789] _wcsicmp (_String1="wcn", _String2="interface") returned 14 [0159.789] _wcsicmp (_String1="wcn", _String2="ipsec") returned 14 [0159.790] _wcsicmp (_String1="wcn", _String2="lan") returned 11 [0159.790] _wcsicmp (_String1="wcn", _String2="namespace") returned 9 [0159.790] _wcsicmp (_String1="wcn", _String2="netio") returned 9 [0159.790] _wcsicmp (_String1="wcn", _String2="p2p") returned 7 [0159.790] _wcsicmp (_String1="wcn", _String2="ras") returned 5 [0159.790] _wcsicmp (_String1="wcn", _String2="rpc") returned 5 [0159.790] _wcsicmp (_String1="wcn", _String2="trace") returned 3 [0159.790] _wcsicmp (_String1="wcn", _String2="wfp") returned -3 [0159.790] GetProcessHeap () returned 0x297c7850000 [0159.790] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x770) returned 0x297c78af330 [0159.790] GetProcessHeap () returned 0x297c7850000 [0159.790] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78b35e0) returned 1 [0159.790] RegisterContext () returned 0x0 [0159.790] _wcsicmp (_String1="winhttp", _String2="advfirewall") returned 22 [0159.790] _wcsicmp (_String1="winhttp", _String2="bridge") returned 21 [0159.790] _wcsicmp (_String1="winhttp", _String2="dhcpclient") returned 19 [0159.790] _wcsicmp (_String1="winhttp", _String2="dnsclient") returned 19 [0159.790] _wcsicmp (_String1="winhttp", _String2="firewall") returned 17 [0159.790] _wcsicmp (_String1="winhttp", _String2="http") returned 15 [0159.790] _wcsicmp (_String1="winhttp", _String2="interface") returned 14 [0159.790] _wcsicmp (_String1="winhttp", _String2="ipsec") returned 14 [0159.790] _wcsicmp (_String1="winhttp", _String2="lan") returned 11 [0159.790] _wcsicmp (_String1="winhttp", _String2="namespace") returned 9 [0159.790] _wcsicmp (_String1="winhttp", _String2="netio") returned 9 [0159.790] _wcsicmp (_String1="winhttp", _String2="p2p") returned 7 [0159.790] _wcsicmp (_String1="winhttp", _String2="ras") returned 5 [0159.790] _wcsicmp (_String1="winhttp", _String2="rpc") returned 5 [0159.790] _wcsicmp (_String1="winhttp", _String2="trace") returned 3 [0159.790] _wcsicmp (_String1="winhttp", _String2="wcn") returned 6 [0159.790] _wcsicmp (_String1="winhttp", _String2="wfp") returned 3 [0159.790] _wcsicmp (_String1="winhttp", _String2="advfirewall") returned 22 [0159.790] _wcsicmp (_String1="winhttp", _String2="bridge") returned 21 [0159.790] _wcsicmp (_String1="winhttp", _String2="dhcpclient") returned 19 [0159.791] _wcsicmp (_String1="winhttp", _String2="dnsclient") returned 19 [0159.791] _wcsicmp (_String1="winhttp", _String2="firewall") returned 17 [0159.791] _wcsicmp (_String1="winhttp", _String2="http") returned 15 [0159.791] _wcsicmp (_String1="winhttp", _String2="interface") returned 14 [0159.791] _wcsicmp (_String1="winhttp", _String2="ipsec") returned 14 [0159.791] _wcsicmp (_String1="winhttp", _String2="lan") returned 11 [0159.791] _wcsicmp (_String1="winhttp", _String2="namespace") returned 9 [0159.791] _wcsicmp (_String1="winhttp", _String2="netio") returned 9 [0159.791] _wcsicmp (_String1="winhttp", _String2="p2p") returned 7 [0159.791] _wcsicmp (_String1="winhttp", _String2="ras") returned 5 [0159.791] _wcsicmp (_String1="winhttp", _String2="rpc") returned 5 [0159.791] _wcsicmp (_String1="winhttp", _String2="trace") returned 3 [0159.791] _wcsicmp (_String1="winhttp", _String2="wcn") returned 6 [0159.791] _wcsicmp (_String1="winhttp", _String2="wfp") returned 3 [0159.791] GetProcessHeap () returned 0x297c7850000 [0159.791] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x7e0) returned 0x297c78b2f40 [0159.791] GetProcessHeap () returned 0x297c7850000 [0159.791] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78af330) returned 1 [0159.791] RegisterContext () returned 0x0 [0159.791] _wcsicmp (_String1="wlan", _String2="advfirewall") returned 22 [0159.791] _wcsicmp (_String1="wlan", _String2="bridge") returned 21 [0159.791] _wcsicmp (_String1="wlan", _String2="dhcpclient") returned 19 [0159.791] _wcsicmp (_String1="wlan", _String2="dnsclient") returned 19 [0159.791] _wcsicmp (_String1="wlan", _String2="firewall") returned 17 [0159.791] _wcsicmp (_String1="wlan", _String2="http") returned 15 [0159.791] _wcsicmp (_String1="wlan", _String2="interface") returned 14 [0159.791] _wcsicmp (_String1="wlan", _String2="ipsec") returned 14 [0159.791] _wcsicmp (_String1="wlan", _String2="lan") returned 11 [0159.791] _wcsicmp (_String1="wlan", _String2="namespace") returned 9 [0159.791] _wcsicmp (_String1="wlan", _String2="netio") returned 9 [0159.791] _wcsicmp (_String1="wlan", _String2="p2p") returned 7 [0159.791] _wcsicmp (_String1="wlan", _String2="ras") returned 5 [0159.792] _wcsicmp (_String1="wlan", _String2="rpc") returned 5 [0159.792] _wcsicmp (_String1="wlan", _String2="trace") returned 3 [0159.792] _wcsicmp (_String1="wlan", _String2="wcn") returned 9 [0159.792] _wcsicmp (_String1="wlan", _String2="wfp") returned 6 [0159.792] _wcsicmp (_String1="wlan", _String2="winhttp") returned 3 [0159.792] _wcsicmp (_String1="wlan", _String2="advfirewall") returned 22 [0159.792] _wcsicmp (_String1="wlan", _String2="bridge") returned 21 [0159.792] _wcsicmp (_String1="wlan", _String2="dhcpclient") returned 19 [0159.792] _wcsicmp (_String1="wlan", _String2="dnsclient") returned 19 [0159.792] _wcsicmp (_String1="wlan", _String2="firewall") returned 17 [0159.792] _wcsicmp (_String1="wlan", _String2="http") returned 15 [0159.792] _wcsicmp (_String1="wlan", _String2="interface") returned 14 [0159.792] _wcsicmp (_String1="wlan", _String2="ipsec") returned 14 [0159.792] _wcsicmp (_String1="wlan", _String2="lan") returned 11 [0159.792] _wcsicmp (_String1="wlan", _String2="namespace") returned 9 [0159.792] _wcsicmp (_String1="wlan", _String2="netio") returned 9 [0159.792] _wcsicmp (_String1="wlan", _String2="p2p") returned 7 [0159.792] _wcsicmp (_String1="wlan", _String2="ras") returned 5 [0159.792] _wcsicmp (_String1="wlan", _String2="rpc") returned 5 [0159.792] _wcsicmp (_String1="wlan", _String2="trace") returned 3 [0159.792] _wcsicmp (_String1="wlan", _String2="wcn") returned 9 [0159.792] _wcsicmp (_String1="wlan", _String2="wfp") returned 6 [0159.792] _wcsicmp (_String1="wlan", _String2="winhttp") returned 3 [0159.792] GetProcessHeap () returned 0x297c7850000 [0159.792] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x850) returned 0x297c78b3730 [0159.792] GetProcessHeap () returned 0x297c7850000 [0159.792] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78b2f40) returned 1 [0159.792] RegisterContext () returned 0x0 [0159.792] _wcsicmp (_String1="winsock", _String2="advfirewall") returned 22 [0159.792] _wcsicmp (_String1="winsock", _String2="bridge") returned 21 [0159.792] _wcsicmp (_String1="winsock", _String2="dhcpclient") returned 19 [0159.792] _wcsicmp (_String1="winsock", _String2="dnsclient") returned 19 [0159.792] _wcsicmp (_String1="winsock", _String2="firewall") returned 17 [0159.792] _wcsicmp (_String1="winsock", _String2="http") returned 15 [0159.793] _wcsicmp (_String1="winsock", _String2="interface") returned 14 [0159.793] _wcsicmp (_String1="winsock", _String2="ipsec") returned 14 [0159.793] _wcsicmp (_String1="winsock", _String2="lan") returned 11 [0159.793] _wcsicmp (_String1="winsock", _String2="namespace") returned 9 [0159.793] _wcsicmp (_String1="winsock", _String2="netio") returned 9 [0159.793] _wcsicmp (_String1="winsock", _String2="p2p") returned 7 [0159.793] _wcsicmp (_String1="winsock", _String2="ras") returned 5 [0159.793] _wcsicmp (_String1="winsock", _String2="rpc") returned 5 [0159.793] _wcsicmp (_String1="winsock", _String2="trace") returned 3 [0159.793] _wcsicmp (_String1="winsock", _String2="wcn") returned 6 [0159.793] _wcsicmp (_String1="winsock", _String2="wfp") returned 3 [0159.793] _wcsicmp (_String1="winsock", _String2="winhttp") returned 11 [0159.793] _wcsicmp (_String1="winsock", _String2="wlan") returned -3 [0159.793] _wcsicmp (_String1="winsock", _String2="advfirewall") returned 22 [0159.793] _wcsicmp (_String1="winsock", _String2="bridge") returned 21 [0159.793] _wcsicmp (_String1="winsock", _String2="dhcpclient") returned 19 [0159.793] _wcsicmp (_String1="winsock", _String2="dnsclient") returned 19 [0159.793] _wcsicmp (_String1="winsock", _String2="firewall") returned 17 [0159.793] _wcsicmp (_String1="winsock", _String2="http") returned 15 [0159.793] _wcsicmp (_String1="winsock", _String2="interface") returned 14 [0159.793] _wcsicmp (_String1="winsock", _String2="ipsec") returned 14 [0159.793] _wcsicmp (_String1="winsock", _String2="lan") returned 11 [0159.793] _wcsicmp (_String1="winsock", _String2="namespace") returned 9 [0159.793] _wcsicmp (_String1="winsock", _String2="netio") returned 9 [0159.793] _wcsicmp (_String1="winsock", _String2="p2p") returned 7 [0159.793] _wcsicmp (_String1="winsock", _String2="ras") returned 5 [0159.793] _wcsicmp (_String1="winsock", _String2="rpc") returned 5 [0159.793] _wcsicmp (_String1="winsock", _String2="trace") returned 3 [0159.793] _wcsicmp (_String1="winsock", _String2="wcn") returned 6 [0159.793] _wcsicmp (_String1="winsock", _String2="wfp") returned 3 [0159.793] _wcsicmp (_String1="winsock", _String2="winhttp") returned 11 [0159.793] _wcsicmp (_String1="winsock", _String2="wlan") returned -3 [0159.793] GetProcessHeap () returned 0x297c7850000 [0159.793] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x8c0) returned 0x297c78af330 [0159.794] GetProcessHeap () returned 0x297c7850000 [0159.794] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78b3730) returned 1 [0159.794] RegisterContext () returned 0x0 [0159.794] _wcsicmp (_String1="mbn", _String2="advfirewall") returned 12 [0159.794] _wcsicmp (_String1="mbn", _String2="bridge") returned 11 [0159.794] _wcsicmp (_String1="mbn", _String2="dhcpclient") returned 9 [0159.794] _wcsicmp (_String1="mbn", _String2="dnsclient") returned 9 [0159.794] _wcsicmp (_String1="mbn", _String2="firewall") returned 7 [0159.794] _wcsicmp (_String1="mbn", _String2="http") returned 5 [0159.794] _wcsicmp (_String1="mbn", _String2="interface") returned 4 [0159.794] _wcsicmp (_String1="mbn", _String2="ipsec") returned 4 [0159.794] _wcsicmp (_String1="mbn", _String2="lan") returned 1 [0159.794] _wcsicmp (_String1="mbn", _String2="namespace") returned -1 [0159.794] _wcsicmp (_String1="mbn", _String2="netio") returned -1 [0159.794] _wcsicmp (_String1="mbn", _String2="p2p") returned -3 [0159.794] _wcsicmp (_String1="mbn", _String2="ras") returned -5 [0159.794] _wcsicmp (_String1="mbn", _String2="rpc") returned -5 [0159.794] _wcsicmp (_String1="mbn", _String2="trace") returned -7 [0159.794] _wcsicmp (_String1="mbn", _String2="wcn") returned -10 [0159.794] _wcsicmp (_String1="mbn", _String2="wfp") returned -10 [0159.794] _wcsicmp (_String1="mbn", _String2="winhttp") returned -10 [0159.794] _wcsicmp (_String1="mbn", _String2="winsock") returned -10 [0159.794] _wcsicmp (_String1="mbn", _String2="wlan") returned -10 [0159.794] _wcsicmp (_String1="mbn", _String2="advfirewall") returned 12 [0159.794] _wcsicmp (_String1="mbn", _String2="bridge") returned 11 [0159.794] _wcsicmp (_String1="mbn", _String2="dhcpclient") returned 9 [0159.794] _wcsicmp (_String1="mbn", _String2="dnsclient") returned 9 [0159.794] _wcsicmp (_String1="mbn", _String2="firewall") returned 7 [0159.794] _wcsicmp (_String1="mbn", _String2="http") returned 5 [0159.794] _wcsicmp (_String1="mbn", _String2="interface") returned 4 [0159.794] _wcsicmp (_String1="mbn", _String2="ipsec") returned 4 [0159.794] _wcsicmp (_String1="mbn", _String2="lan") returned 1 [0159.794] _wcsicmp (_String1="mbn", _String2="namespace") returned -1 [0159.794] GetProcessHeap () returned 0x297c7850000 [0159.794] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x930) returned 0x297c78b2f40 [0159.795] GetProcessHeap () returned 0x297c7850000 [0159.795] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78af330) returned 1 [0159.899] RegisterContext () returned 0x0 [0159.899] _wcsicmp (_String1="branchcache", _String2="advfirewall") returned 1 [0159.899] _wcsicmp (_String1="branchcache", _String2="bridge") returned -8 [0159.899] _wcsicmp (_String1="branchcache", _String2="dhcpclient") returned -2 [0159.899] _wcsicmp (_String1="branchcache", _String2="dnsclient") returned -2 [0159.899] _wcsicmp (_String1="branchcache", _String2="firewall") returned -4 [0159.899] _wcsicmp (_String1="branchcache", _String2="http") returned -6 [0159.899] _wcsicmp (_String1="branchcache", _String2="interface") returned -7 [0159.899] _wcsicmp (_String1="branchcache", _String2="ipsec") returned -7 [0159.899] _wcsicmp (_String1="branchcache", _String2="lan") returned -10 [0159.899] _wcsicmp (_String1="branchcache", _String2="mbn") returned -11 [0159.899] _wcsicmp (_String1="branchcache", _String2="namespace") returned -12 [0159.899] _wcsicmp (_String1="branchcache", _String2="netio") returned -12 [0159.899] _wcsicmp (_String1="branchcache", _String2="p2p") returned -14 [0159.899] _wcsicmp (_String1="branchcache", _String2="ras") returned -16 [0159.899] _wcsicmp (_String1="branchcache", _String2="rpc") returned -16 [0159.899] _wcsicmp (_String1="branchcache", _String2="trace") returned -18 [0159.899] _wcsicmp (_String1="branchcache", _String2="wcn") returned -21 [0159.899] _wcsicmp (_String1="branchcache", _String2="wfp") returned -21 [0159.899] _wcsicmp (_String1="branchcache", _String2="winhttp") returned -21 [0159.899] _wcsicmp (_String1="branchcache", _String2="winsock") returned -21 [0159.899] _wcsicmp (_String1="branchcache", _String2="wlan") returned -21 [0159.899] _wcsicmp (_String1="branchcache", _String2="advfirewall") returned 1 [0159.899] _wcsicmp (_String1="branchcache", _String2="bridge") returned -8 [0159.899] GetProcessHeap () returned 0x297c7850000 [0159.899] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x9a0) returned 0x297c78b79a0 [0159.900] GetProcessHeap () returned 0x297c7850000 [0159.900] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78b2f40) returned 1 [0159.900] RegisterContext () returned 0x0 [0159.900] GetProcessHeap () returned 0x297c7850000 [0159.900] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x70) returned 0x297c78547e0 [0159.900] GetProcessHeap () returned 0x297c7850000 [0159.900] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x0) returned 1 [0159.900] LoadLibraryExW (lpLibFileName="mprmsg.dll", hFile=0x0, dwFlags=0x800) returned 0x7ffc84cf0000 [0159.956] GetProcAddress (hModule=0x7ffc84cf0000, lpProcName="MprmsgGetErrorString") returned 0x7ffc84cf1040 [0159.956] SetConsoleCtrlHandler (HandlerRoutine=0x7ff64cda8410, Add=1) returned 1 [0159.956] SetThreadUILanguage (LangId=0x0) returned 0x409 [0159.974] _wcsicmp (_String1="advfirewall", _String2="-?") returned 52 [0159.974] _wcsicmp (_String1="advfirewall", _String2="-h") returned 52 [0159.974] _wcsicmp (_String1="advfirewall", _String2="?") returned 34 [0159.974] _wcsicmp (_String1="advfirewall", _String2="/?") returned 50 [0159.974] _wcsicmp (_String1="advfirewall", _String2="-v") returned 52 [0159.974] _wcsicmp (_String1="advfirewall", _String2="-a") returned 52 [0159.974] _wcsicmp (_String1="advfirewall", _String2="-c") returned 52 [0159.974] _wcsicmp (_String1="advfirewall", _String2="-f") returned 52 [0159.974] _wcsicmp (_String1="advfirewall", _String2="-r") returned 52 [0159.975] _wcsicmp (_String1="advfirewall", _String2="-u") returned 52 [0159.975] _wcsicmp (_String1="advfirewall", _String2="-p") returned 52 [0159.975] GetVersionExW (in: lpVersionInformation=0xfef2767480*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0xfef2767480*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x3ad7, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0159.975] _vsnwprintf (in: _Buffer=0x7ff64cdb7ca0, _BufferCount=0x103, _Format="%d.%d.%d", _ArgList=0xfef2767448 | out: _Buffer="10.0.15063") returned 10 [0159.975] _vsnwprintf (in: _Buffer=0x7ff64cdb7eb0, _BufferCount=0x103, _Format="%d", _ArgList=0xfef2767448 | out: _Buffer="15063") returned 5 [0159.975] _vsnwprintf (in: _Buffer=0x7ff64cdb80c0, _BufferCount=0x103, _Format="%d", _ArgList=0xfef2767448 | out: _Buffer="0") returned 1 [0159.975] _vsnwprintf (in: _Buffer=0x7ff64cdb82d0, _BufferCount=0x103, _Format="%d", _ArgList=0xfef2767448 | out: _Buffer="0") returned 1 [0159.975] GetProcessHeap () returned 0x297c7850000 [0159.975] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x18) returned 0x297c78a4410 [0159.975] GetProcessHeap () returned 0x297c7850000 [0159.975] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x18) returned 0x297c78a46f0 [0159.975] GetProcessHeap () returned 0x297c7850000 [0159.975] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0xc) returned 0x297c78a4530 [0159.975] GetProcessHeap () returned 0x297c7850000 [0159.975] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x18) returned 0x297c78a4050 [0159.975] GetProcessHeap () returned 0x297c7850000 [0159.975] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0xc) returned 0x297c78a4550 [0159.975] wcscpy_s (in: _Destination=0x297c78a4550, _SizeInWords=0x6, _Source="netsh" | out: _Destination="netsh") returned 0x0 [0159.976] GetProcessHeap () returned 0x297c7850000 [0159.976] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a4530) returned 1 [0159.976] GetProcessHeap () returned 0x297c7850000 [0159.976] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a46f0) returned 1 [0159.976] GetProcessHeap () returned 0x297c7850000 [0159.976] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x18) returned 0x297c78a4110 [0159.976] GetProcessHeap () returned 0x297c7850000 [0159.976] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x18) returned 0x297c78a4530 [0159.976] GetProcessHeap () returned 0x297c7850000 [0159.976] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x52) returned 0x297c78a6d10 [0159.976] GetProcessHeap () returned 0x297c7850000 [0159.976] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x18) returned 0x297c78a4650 [0159.976] GetProcessHeap () returned 0x297c7850000 [0159.976] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x18) returned 0x297c78a46f0 [0159.976] wcscpy_s (in: _Destination=0x297c78a46f0, _SizeInWords=0xc, _Source="advfirewall" | out: _Destination="advfirewall") returned 0x0 [0159.976] GetProcessHeap () returned 0x297c7850000 [0159.976] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x18) returned 0x297c78a4130 [0159.976] GetProcessHeap () returned 0x297c7850000 [0159.976] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x8) returned 0x297c78a5120 [0159.976] wcscpy_s (in: _Destination=0x297c78a5120, _SizeInWords=0x4, _Source="set" | out: _Destination="set") returned 0x0 [0159.976] GetProcessHeap () returned 0x297c7850000 [0159.976] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x18) returned 0x297c78a4010 [0159.976] GetProcessHeap () returned 0x297c7850000 [0159.976] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x1e) returned 0x297c78afa70 [0159.976] wcscpy_s (in: _Destination=0x297c78afa70, _SizeInWords=0xf, _Source="currentprofile" | out: _Destination="currentprofile") returned 0x0 [0159.976] GetProcessHeap () returned 0x297c7850000 [0159.976] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x18) returned 0x297c78a46d0 [0159.977] GetProcessHeap () returned 0x297c7850000 [0159.977] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0xc) returned 0x297c78a4570 [0159.977] wcscpy_s (in: _Destination=0x297c78a4570, _SizeInWords=0x6, _Source="state" | out: _Destination="state") returned 0x0 [0159.977] GetProcessHeap () returned 0x297c7850000 [0159.977] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x18) returned 0x297c78a4750 [0159.977] GetProcessHeap () returned 0x297c7850000 [0159.977] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x8) returned 0x297c78a4e40 [0159.977] wcscpy_s (in: _Destination=0x297c78a4e40, _SizeInWords=0x4, _Source="off" | out: _Destination="off") returned 0x0 [0159.977] GetProcessHeap () returned 0x297c7850000 [0159.977] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a6d10) returned 1 [0159.977] GetProcessHeap () returned 0x297c7850000 [0159.977] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a4530) returned 1 [0159.977] GetProcessHeap () returned 0x297c7850000 [0159.977] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x18) returned 0x297c78a4290 [0159.977] GetProcessHeap () returned 0x297c7850000 [0159.977] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x18) returned 0x297c78a4670 [0159.977] wcscpy_s (in: _Destination=0x297c78a4670, _SizeInWords=0xc, _Source="advfirewall" | out: _Destination="advfirewall") returned 0x0 [0159.977] GetProcessHeap () returned 0x297c7850000 [0159.977] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a46f0) returned 1 [0159.977] GetProcessHeap () returned 0x297c7850000 [0159.977] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a4650) returned 1 [0159.977] GetProcessHeap () returned 0x297c7850000 [0159.977] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x18) returned 0x297c78a42d0 [0159.977] GetProcessHeap () returned 0x297c7850000 [0159.977] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x18) returned 0x297c78a4490 [0159.977] wcscpy_s (in: _Destination=0x297c78a4490, _SizeInWords=0xc, _Source="advfirewall" | out: _Destination="advfirewall") returned 0x0 [0159.977] GetProcessHeap () returned 0x297c7850000 [0159.977] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a4670) returned 1 [0159.977] GetProcessHeap () returned 0x297c7850000 [0159.977] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a4290) returned 1 [0159.977] GetProcessHeap () returned 0x297c7850000 [0159.977] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x18) returned 0x297c78a4650 [0159.977] GetProcessHeap () returned 0x297c7850000 [0159.977] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x8) returned 0x297c78a4fe0 [0159.977] wcscpy_s (in: _Destination=0x297c78a4fe0, _SizeInWords=0x4, _Source="set" | out: _Destination="set") returned 0x0 [0159.977] GetProcessHeap () returned 0x297c7850000 [0159.977] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a5120) returned 1 [0159.978] GetProcessHeap () returned 0x297c7850000 [0159.978] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a4130) returned 1 [0159.978] GetProcessHeap () returned 0x297c7850000 [0159.978] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x18) returned 0x297c78a46f0 [0159.978] GetProcessHeap () returned 0x297c7850000 [0159.978] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x1e) returned 0x297c78af710 [0159.978] wcscpy_s (in: _Destination=0x297c78af710, _SizeInWords=0xf, _Source="currentprofile" | out: _Destination="currentprofile") returned 0x0 [0159.978] GetProcessHeap () returned 0x297c7850000 [0159.978] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78afa70) returned 1 [0159.978] GetProcessHeap () returned 0x297c7850000 [0159.978] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a4010) returned 1 [0159.978] GetProcessHeap () returned 0x297c7850000 [0159.978] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x18) returned 0x297c78a4310 [0159.978] GetProcessHeap () returned 0x297c7850000 [0159.978] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0xc) returned 0x297c78a4010 [0159.978] wcscpy_s (in: _Destination=0x297c78a4010, _SizeInWords=0x6, _Source="state" | out: _Destination="state") returned 0x0 [0159.978] GetProcessHeap () returned 0x297c7850000 [0159.978] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a4570) returned 1 [0159.978] GetProcessHeap () returned 0x297c7850000 [0159.978] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a46d0) returned 1 [0159.978] GetProcessHeap () returned 0x297c7850000 [0159.978] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x18) returned 0x297c78a41f0 [0159.978] GetProcessHeap () returned 0x297c7850000 [0159.978] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x8) returned 0x297c78a4f70 [0159.978] wcscpy_s (in: _Destination=0x297c78a4f70, _SizeInWords=0x4, _Source="off" | out: _Destination="off") returned 0x0 [0159.978] GetProcessHeap () returned 0x297c7850000 [0159.978] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a4e40) returned 1 [0159.978] GetProcessHeap () returned 0x297c7850000 [0159.978] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a4750) returned 1 [0159.978] GetProcessHeap () returned 0x297c7850000 [0159.978] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x30) returned 0x297c7882220 [0159.978] GetProcessHeap () returned 0x297c7850000 [0159.978] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0xc) returned 0x297c78a4670 [0159.978] GetProcessHeap () returned 0x297c7850000 [0159.978] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x18) returned 0x297c78a4690 [0159.978] GetProcessHeap () returned 0x297c7850000 [0159.978] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x8) returned 0x297c78a5140 [0159.979] GetProcessHeap () returned 0x297c7850000 [0159.979] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x1e) returned 0x297c78af740 [0159.979] GetProcessHeap () returned 0x297c7850000 [0159.979] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0xc) returned 0x297c78a41b0 [0159.979] GetProcessHeap () returned 0x297c7850000 [0159.979] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x8) returned 0x297c78a5020 [0159.979] GetProcessHeap () returned 0x297c7850000 [0159.979] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0xc) returned 0x297c78a4530 [0159.979] GetProcessHeap () returned 0x297c7850000 [0159.979] RtlReAllocateHeap (Heap=0x297c7850000, Flags=0x0, Ptr=0x297c78a4530, Size=0xe) returned 0x297c78a4570 [0159.979] GetProcessHeap () returned 0x297c7850000 [0159.979] RtlReAllocateHeap (Heap=0x297c7850000, Flags=0x0, Ptr=0x297c78a4570, Size=0x24) returned 0x297c78af920 [0159.979] GetProcessHeap () returned 0x297c7850000 [0159.979] RtlReAllocateHeap (Heap=0x297c7850000, Flags=0x0, Ptr=0x297c78af920, Size=0x26) returned 0x297c78af7a0 [0159.979] GetProcessHeap () returned 0x297c7850000 [0159.979] RtlReAllocateHeap (Heap=0x297c7850000, Flags=0x0, Ptr=0x297c78af7a0, Size=0x2c) returned 0x297c7881c20 [0159.979] GetProcessHeap () returned 0x297c7850000 [0159.979] RtlReAllocateHeap (Heap=0x297c7850000, Flags=0x0, Ptr=0x297c7881c20, Size=0x2e) returned 0x297c7882160 [0159.979] GetProcessHeap () returned 0x297c7850000 [0159.979] RtlReAllocateHeap (Heap=0x297c7850000, Flags=0x0, Ptr=0x297c7882160, Size=0x4a) returned 0x297c78a5f30 [0159.979] GetProcessHeap () returned 0x297c7850000 [0159.979] RtlReAllocateHeap (Heap=0x297c7850000, Flags=0x0, Ptr=0x297c78a5f30, Size=0x4c) returned 0x297c78a6d10 [0159.979] GetProcessHeap () returned 0x297c7850000 [0159.979] RtlReAllocateHeap (Heap=0x297c7850000, Flags=0x0, Ptr=0x297c78a6d10, Size=0x56) returned 0x297c78a6470 [0159.979] GetProcessHeap () returned 0x297c7850000 [0159.979] RtlReAllocateHeap (Heap=0x297c7850000, Flags=0x0, Ptr=0x297c78a6470, Size=0x58) returned 0x297c78a69b0 [0159.979] GetProcessHeap () returned 0x297c7850000 [0159.979] RtlReAllocateHeap (Heap=0x297c7850000, Flags=0x0, Ptr=0x297c78a69b0, Size=0x5e) returned 0x297c7854390 [0159.979] GetProcessHeap () returned 0x297c7850000 [0159.979] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7854390) returned 1 [0159.979] lstrcmpiW (lpString1="netsh", lpString2="namespace") returned 1 [0159.980] lstrcmpiW (lpString1="netsh", lpString2="branchcache") returned 1 [0159.980] lstrcmpiW (lpString1="netsh", lpString2="advfirewall") returned 1 [0159.980] lstrcmpiW (lpString1="netsh", lpString2="firewall") returned 1 [0159.980] lstrcmpiW (lpString1="netsh", lpString2="interface") returned 1 [0159.980] lstrcmpiW (lpString1="netsh", lpString2="dhcp") returned 1 [0159.980] lstrcmpiW (lpString1="netsh", lpString2="dnsclient") returned 1 [0159.980] lstrcmpiW (lpString1="netsh", lpString2="routing") returned -1 [0159.980] lstrcmpiW (lpString1="netsh", lpString2="ip") returned 1 [0159.980] lstrcmpiW (lpString1="netsh", lpString2="ipv6") returned 1 [0159.980] lstrcmpiW (lpString1="netsh", lpString2="aaaa") returned 1 [0159.980] lstrcmpiW (lpString1="netsh", lpString2="ras") returned -1 [0159.980] _wcsnicmp (_String1="advfirewall", _String2="dump", _MaxCount=0xb) returned -3 [0159.980] _wcsnicmp (_String1="advfirewall", _String2="help", _MaxCount=0xb) returned -7 [0159.980] _wcsnicmp (_String1="advfirewall", _String2="?", _MaxCount=0xb) returned 34 [0159.980] _wcsnicmp (_String1="advfirewall", _String2="exec", _MaxCount=0xb) returned -4 [0159.980] _wcsnicmp (_String1="advfirewall", _String2="advfirewall", _MaxCount=0xb) returned 0 [0159.980] lstrcmpiW (lpString1="advfirewall", lpString2="namespace") returned -1 [0159.980] lstrcmpiW (lpString1="advfirewall", lpString2="branchcache") returned -1 [0159.980] lstrcmpiW (lpString1="advfirewall", lpString2="advfirewall") returned 0 [0159.980] GetProcessHeap () returned 0x297c7850000 [0159.980] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x18) returned 0x297c78a4370 [0159.980] GetProcessHeap () returned 0x297c7850000 [0159.980] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x18) returned 0x297c78a4070 [0159.980] GetProcessHeap () returned 0x297c7850000 [0159.980] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x5e) returned 0x297c7854860 [0159.981] GetProcessHeap () returned 0x297c7850000 [0159.981] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x18) returned 0x297c78a4290 [0159.981] GetProcessHeap () returned 0x297c7850000 [0159.981] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0xc) returned 0x297c78a4530 [0159.981] wcscpy_s (in: _Destination=0x297c78a4530, _SizeInWords=0x6, _Source="netsh" | out: _Destination="netsh") returned 0x0 [0159.981] GetProcessHeap () returned 0x297c7850000 [0159.981] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x18) returned 0x297c78a4750 [0159.981] GetProcessHeap () returned 0x297c7850000 [0159.981] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x18) returned 0x297c78a41d0 [0159.981] wcscpy_s (in: _Destination=0x297c78a41d0, _SizeInWords=0xc, _Source="advfirewall" | out: _Destination="advfirewall") returned 0x0 [0159.981] GetProcessHeap () returned 0x297c7850000 [0159.981] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x18) returned 0x297c78a4570 [0159.981] GetProcessHeap () returned 0x297c7850000 [0159.981] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x8) returned 0x297c78a4f80 [0159.981] wcscpy_s (in: _Destination=0x297c78a4f80, _SizeInWords=0x4, _Source="set" | out: _Destination="set") returned 0x0 [0159.981] GetProcessHeap () returned 0x297c7850000 [0159.981] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x18) returned 0x297c78a46d0 [0159.981] GetProcessHeap () returned 0x297c7850000 [0159.981] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x1e) returned 0x297c78af890 [0159.981] wcscpy_s (in: _Destination=0x297c78af890, _SizeInWords=0xf, _Source="currentprofile" | out: _Destination="currentprofile") returned 0x0 [0159.981] GetProcessHeap () returned 0x297c7850000 [0159.981] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x18) returned 0x297c78a4450 [0159.981] GetProcessHeap () returned 0x297c7850000 [0159.981] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0xc) returned 0x297c78a4130 [0159.981] wcscpy_s (in: _Destination=0x297c78a4130, _SizeInWords=0x6, _Source="state" | out: _Destination="state") returned 0x0 [0159.981] GetProcessHeap () returned 0x297c7850000 [0159.981] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x18) returned 0x297c78a4590 [0159.981] GetProcessHeap () returned 0x297c7850000 [0159.981] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x8) returned 0x297c78a4e70 [0159.981] wcscpy_s (in: _Destination=0x297c78a4e70, _SizeInWords=0x4, _Source="off" | out: _Destination="off") returned 0x0 [0159.981] GetProcessHeap () returned 0x297c7850000 [0159.981] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7854860) returned 1 [0159.981] GetProcessHeap () returned 0x297c7850000 [0159.981] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a4070) returned 1 [0159.981] GetProcessHeap () returned 0x297c7850000 [0159.981] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a41d0) returned 1 [0159.981] GetProcessHeap () returned 0x297c7850000 [0159.982] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x18) returned 0x297c78a4070 [0159.982] lstrcmpiW (lpString1="advfirewall", lpString2="routing") returned -1 [0159.982] lstrcmpiW (lpString1="advfirewall", lpString2="ip") returned -1 [0159.982] lstrcmpiW (lpString1="advfirewall", lpString2="ipv6") returned -1 [0159.982] lstrcmpiW (lpString1="advfirewall", lpString2="aaaa") returned 1 [0159.982] lstrcmpiW (lpString1="advfirewall", lpString2="ras") returned -1 [0159.982] _wcsnicmp (_String1="set", _String2="dum", _MaxCount=0x3) returned 15 [0159.982] _wcsnicmp (_String1="set", _String2="hel", _MaxCount=0x3) returned 11 [0159.982] _wcsnicmp (_String1="set", _String2="?", _MaxCount=0x3) returned 52 [0159.982] _wcsnicmp (_String1="set", _String2="res", _MaxCount=0x3) returned 1 [0159.982] _wcsnicmp (_String1="set", _String2="imp", _MaxCount=0x3) returned 10 [0159.982] _wcsnicmp (_String1="set", _String2="exp", _MaxCount=0x3) returned 14 [0159.982] _wcsnicmp (_String1="set", _String2="con", _MaxCount=0x3) returned 16 [0159.982] _wcsnicmp (_String1="set", _String2="fir", _MaxCount=0x3) returned 13 [0159.982] _wcsnicmp (_String1="set", _String2="mai", _MaxCount=0x3) returned 6 [0159.982] _wcsnicmp (_String1="set", _String2="mon", _MaxCount=0x3) returned 6 [0159.982] _wcsnicmp (_String1="set", _String2="set", _MaxCount=0x3) returned 0 [0159.982] _wcsnicmp (_String1="currentprofile", _String2="help", _MaxCount=0xe) returned -5 [0159.982] _wcsnicmp (_String1="currentprofile", _String2="?", _MaxCount=0xe) returned 36 [0159.982] wcstok (in: _String="domainprofile", _Delimiter=" ", _Context=0x198d5102b80 | out: _String="domainprofile", _Context=0x198d5102b80) returned="domainprofile" [0159.982] _wcsnicmp (_String1="currentprofile", _String2="domainprofile", _MaxCount=0xe) returned -1 [0159.982] wcstok (in: _String="privateprofile", _Delimiter=" ", _Context=0x198d5102a30 | out: _String="privateprofile", _Context=0x198d5102a30) returned="privateprofile" [0159.982] _wcsnicmp (_String1="currentprofile", _String2="privateprofile", _MaxCount=0xe) returned -13 [0159.982] wcstok (in: _String="publicprofile", _Delimiter=" ", _Context=0x198d51028e0 | out: _String="publicprofile", _Context=0x198d51028e0) returned="publicprofile" [0159.982] _wcsnicmp (_String1="currentprofile", _String2="publicprofile", _MaxCount=0xe) returned -13 [0159.982] wcstok (in: _String="currentprofile", _Delimiter=" ", _Context=0x198d5102670 | out: _String="currentprofile", _Context=0x198d5102670) returned="currentprofile" [0159.982] _wcsnicmp (_String1="currentprofile", _String2="currentprofile", _MaxCount=0xe) returned 0 [0159.982] wcstok (in: _String=0x0, _Delimiter=" ", _Context=0x65 | out: _String=0x0, _Context=0x65) returned 0x0 [0159.982] lstrcmpiW (lpString1="advfirewall", lpString2="netsh") returned -1 [0159.982] LdrStandardizeSystemPath () returned 0x7ff64cdabfc4 [0162.912] LoadStringW (in: hInstance=0x0, uID=0x2, lpBuffer=0xfef275f110, cchBufferMax=16384 | out: lpBuffer="Ok.\n") returned 0x4 [0162.912] FormatMessageW (in: dwFlags=0x500, lpSource=0xfef275f110, dwMessageId=0x0, dwLanguageId=0x0, lpBuffer=0xfef275f0f0, nSize=0x0, Arguments=0xfef275f100 | out: lpBuffer="＀잊ʗ") returned 0x5 [0162.912] GetStdHandle (nStdHandle=0xfffffff5) returned 0x224 [0162.913] GetConsoleOutputCP () returned 0x1b5 [0163.361] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Ok.\r\n", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0163.361] GetProcessHeap () returned 0x297c7850000 [0163.361] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x6) returned 0x297c78a4e80 [0163.361] GetConsoleOutputCP () returned 0x1b5 [0164.130] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Ok.\r\n", cchWideChar=-1, lpMultiByteStr=0x297c78a4e80, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ok.\r\n", lpUsedDefaultChar=0x0) returned 6 [0164.130] WriteFile (in: hFile=0x224, lpBuffer=0x297c78a4e80*, nNumberOfBytesToWrite=0x5, lpNumberOfBytesWritten=0xfef275f0a0, lpOverlapped=0x0 | out: lpBuffer=0x297c78a4e80*, lpNumberOfBytesWritten=0xfef275f0a0*=0x5, lpOverlapped=0x0) returned 1 [0164.130] GetProcessHeap () returned 0x297c7850000 [0164.130] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a4e80) returned 1 [0164.130] LocalFree (hMem=0x297c78aff00) returned 0x0 [0164.130] FormatMessageW (in: dwFlags=0x500, lpSource=0x7ff64cdab80c, dwMessageId=0x0, dwLanguageId=0x0, lpBuffer=0xfef2767120, nSize=0x0, Arguments=0xfef2767130 | out: lpBuffer="讐잋ʗ") returned 0x2 [0164.130] GetStdHandle (nStdHandle=0xfffffff5) returned 0x224 [0164.130] GetConsoleOutputCP () returned 0x1b5 [0164.737] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0164.737] GetProcessHeap () returned 0x297c7850000 [0164.737] RtlAllocateHeap (HeapHandle=0x297c7850000, Flags=0x0, Size=0x3) returned 0x297c78a5180 [0164.737] GetConsoleOutputCP () returned 0x1b5 [0165.065] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x297c78a5180, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3 [0165.065] WriteFile (in: hFile=0x224, lpBuffer=0x297c78a5180*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0xfef27670d0, lpOverlapped=0x0 | out: lpBuffer=0x297c78a5180*, lpNumberOfBytesWritten=0xfef27670d0*=0x2, lpOverlapped=0x0) returned 1 [0165.065] GetProcessHeap () returned 0x297c7850000 [0165.065] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a5180) returned 1 [0165.065] LocalFree (hMem=0x297c78b8b90) returned 0x0 [0165.065] GetProcessHeap () returned 0x297c7850000 [0165.065] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a4670) returned 1 [0165.065] GetProcessHeap () returned 0x297c7850000 [0165.065] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a4690) returned 1 [0165.065] GetProcessHeap () returned 0x297c7850000 [0165.065] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a5140) returned 1 [0165.065] GetProcessHeap () returned 0x297c7850000 [0165.066] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78af740) returned 1 [0165.066] GetProcessHeap () returned 0x297c7850000 [0165.066] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a41b0) returned 1 [0165.066] GetProcessHeap () returned 0x297c7850000 [0165.066] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a5020) returned 1 [0165.066] GetProcessHeap () returned 0x297c7850000 [0165.066] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7882220) returned 1 [0165.066] GetProcessHeap () returned 0x297c7850000 [0165.066] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a4490) returned 1 [0165.066] GetProcessHeap () returned 0x297c7850000 [0165.066] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a42d0) returned 1 [0165.066] GetProcessHeap () returned 0x297c7850000 [0165.066] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a4fe0) returned 1 [0165.066] GetProcessHeap () returned 0x297c7850000 [0165.066] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a4650) returned 1 [0165.066] GetProcessHeap () returned 0x297c7850000 [0165.066] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78af710) returned 1 [0165.066] GetProcessHeap () returned 0x297c7850000 [0165.066] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a46f0) returned 1 [0165.066] GetProcessHeap () returned 0x297c7850000 [0165.066] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a4010) returned 1 [0165.066] GetProcessHeap () returned 0x297c7850000 [0165.066] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a4310) returned 1 [0165.066] GetProcessHeap () returned 0x297c7850000 [0165.066] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a4f70) returned 1 [0165.066] GetProcessHeap () returned 0x297c7850000 [0165.066] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a41f0) returned 1 [0165.066] GetProcessHeap () returned 0x297c7850000 [0165.066] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a4110) returned 1 [0165.066] GetProcessHeap () returned 0x297c7850000 [0165.066] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a4550) returned 1 [0165.066] GetProcessHeap () returned 0x297c7850000 [0165.066] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a4050) returned 1 [0165.066] GetProcessHeap () returned 0x297c7850000 [0165.066] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a4410) returned 1 [0165.594] GetProcessHeap () returned 0x297c7850000 [0165.594] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78a6ef0) returned 1 [0165.594] FreeLibrary (hLibModule=0x7ff64cda0000) returned 1 [0165.594] FreeLibrary (hLibModule=0x7ffc8a6d0000) returned 1 [0165.596] FreeLibrary (hLibModule=0x7ffc84b80000) returned 1 [0165.615] free (_Block=0x297c7af6e00) [0165.616] LocalFree (hMem=0x297c7872e40) returned 0x0 [0165.616] LocalFree (hMem=0x297c7871a70) returned 0x0 [0165.616] LocalFree (hMem=0x297c7855390) returned 0x0 [0165.616] LocalFree (hMem=0x297c7869420) returned 0x0 [0165.616] LocalAlloc (uFlags=0x40, uBytes=0x340) returned 0x297c7872e40 [0165.616] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x297c78af620 [0165.616] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x297c78afaa0 [0165.616] free (_Block=0x297c7af1730) [0165.617] free (_Block=0x0) [0165.617] free (_Block=0x297c7af1710) [0165.617] free (_Block=0x297c7af1750) [0165.617] free (_Block=0x297c7af6de0) [0165.617] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x297c78b1a20 [0165.619] LocalFree (hMem=0x297c78b1a20) returned 0x0 [0165.619] LocalFree (hMem=0x297c78735c0) returned 0x0 [0165.619] LocalFree (hMem=0x297c7872e40) returned 0x0 [0165.619] free (_Block=0x297c7af5520) [0165.620] GetModuleHandleA (lpModuleName="MSVCRT.DLL") returned 0x7ffc909d0000 [0165.620] FreeLibrary (hLibModule=0x7ffc909d0000) returned 1 [0165.620] LocalFree (hMem=0x297c78afaa0) returned 0x0 [0165.620] LocalFree (hMem=0x297c78af620) returned 0x0 [0165.620] GlobalHandle (pMem=0x297c7872c20) returned 0x297c92a0008 [0165.620] GlobalUnlock (hMem=0x297c92a0008) returned 0 [0165.625] FreeLibrary (hLibModule=0x7ffc7a570000) returned 1 [0165.627] FreeLibrary (hLibModule=0x7ffc85260000) returned 1 [0165.629] FreeLibrary (hLibModule=0x7ffc84f00000) returned 1 [0165.637] FreeLibrary (hLibModule=0x7ffc7d440000) returned 1 [0165.638] FreeLibrary (hLibModule=0x7ffc84ed0000) returned 1 [0165.976] FreeLibrary (hLibModule=0x7ffc7a3e0000) returned 1 [0165.979] FreeLibrary (hLibModule=0x7ffc7a2b0000) returned 1 [0166.004] FreeLibrary (hLibModule=0x7ffc841d0000) returned 1 [0166.005] FreeLibrary (hLibModule=0x7ffc76920000) returned 1 [0166.528] FreeLibrary (hLibModule=0x7ffc74040000) returned 1 [0166.529] FreeLibrary (hLibModule=0x7ffc74000000) returned 1 [0166.534] FreeLibrary (hLibModule=0x7ffc896e0000) returned 1 [0166.536] FreeLibrary (hLibModule=0x7ffc895f0000) returned 1 [0166.537] FreeLibrary (hLibModule=0x7ffc895e0000) returned 1 [0166.538] FreeLibrary (hLibModule=0x7ffc85170000) returned 1 [0166.816] FreeLibrary (hLibModule=0x7ffc86380000) returned 1 [0166.819] FreeLibrary (hLibModule=0x7ffc85500000) returned 1 [0166.823] FreeLibrary (hLibModule=0x7ffc84d20000) returned 1 [0167.224] GetProcessHeap () returned 0x297c7850000 [0167.224] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c789a870) returned 1 [0167.224] GetProcessHeap () returned 0x297c7850000 [0167.224] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785ede0) returned 1 [0167.224] GetProcessHeap () returned 0x297c7850000 [0167.224] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785ee60) returned 1 [0167.224] GetProcessHeap () returned 0x297c7850000 [0167.224] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785ee80) returned 1 [0167.224] GetProcessHeap () returned 0x297c7850000 [0167.224] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785ec80) returned 1 [0167.224] GetProcessHeap () returned 0x297c7850000 [0167.224] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785efe0) returned 1 [0167.224] GetProcessHeap () returned 0x297c7850000 [0167.224] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785e8c0) returned 1 [0167.224] GetProcessHeap () returned 0x297c7850000 [0167.224] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785ece0) returned 1 [0167.224] GetProcessHeap () returned 0x297c7850000 [0167.224] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785ef80) returned 1 [0167.224] GetProcessHeap () returned 0x297c7850000 [0167.224] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785ef60) returned 1 [0167.224] GetProcessHeap () returned 0x297c7850000 [0167.225] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785e9e0) returned 1 [0167.225] GetProcessHeap () returned 0x297c7850000 [0167.225] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785e920) returned 1 [0167.225] GetProcessHeap () returned 0x297c7850000 [0167.225] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785ef40) returned 1 [0167.225] GetProcessHeap () returned 0x297c7850000 [0167.225] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785ec40) returned 1 [0167.225] GetProcessHeap () returned 0x297c7850000 [0167.225] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785ec00) returned 1 [0167.225] GetProcessHeap () returned 0x297c7850000 [0167.225] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785ef00) returned 1 [0167.225] GetProcessHeap () returned 0x297c7850000 [0167.225] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785efa0) returned 1 [0167.225] GetProcessHeap () returned 0x297c7850000 [0167.225] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785ed40) returned 1 [0167.225] GetProcessHeap () returned 0x297c7850000 [0167.225] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785ecc0) returned 1 [0167.225] GetProcessHeap () returned 0x297c7850000 [0167.225] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785ee40) returned 1 [0167.225] GetProcessHeap () returned 0x297c7850000 [0167.225] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785eca0) returned 1 [0167.225] GetProcessHeap () returned 0x297c7850000 [0167.225] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785efc0) returned 1 [0167.225] GetProcessHeap () returned 0x297c7850000 [0167.225] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785f000) returned 1 [0167.225] GetProcessHeap () returned 0x297c7850000 [0167.225] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785ec60) returned 1 [0167.225] GetProcessHeap () returned 0x297c7850000 [0167.225] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785ee00) returned 1 [0167.225] GetProcessHeap () returned 0x297c7850000 [0167.225] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785eee0) returned 1 [0167.225] GetProcessHeap () returned 0x297c7850000 [0167.225] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785f020) returned 1 [0167.225] GetProcessHeap () returned 0x297c7850000 [0167.225] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785e940) returned 1 [0167.225] GetProcessHeap () returned 0x297c7850000 [0167.225] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785eea0) returned 1 [0167.225] GetProcessHeap () returned 0x297c7850000 [0167.226] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785e8a0) returned 1 [0167.226] GetProcessHeap () returned 0x297c7850000 [0167.226] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785ea40) returned 1 [0167.226] GetProcessHeap () returned 0x297c7850000 [0167.226] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785ed00) returned 1 [0167.226] GetProcessHeap () returned 0x297c7850000 [0167.226] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785ee20) returned 1 [0167.226] GetProcessHeap () returned 0x297c7850000 [0167.226] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785eec0) returned 1 [0167.226] GetProcessHeap () returned 0x297c7850000 [0167.226] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785ebe0) returned 1 [0167.226] GetProcessHeap () returned 0x297c7850000 [0167.226] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785e960) returned 1 [0167.226] GetProcessHeap () returned 0x297c7850000 [0167.226] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785e900) returned 1 [0167.226] GetProcessHeap () returned 0x297c7850000 [0167.226] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785ec20) returned 1 [0167.226] GetProcessHeap () returned 0x297c7850000 [0167.226] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785eb00) returned 1 [0167.226] GetProcessHeap () returned 0x297c7850000 [0167.226] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785ea20) returned 1 [0167.226] GetProcessHeap () returned 0x297c7850000 [0167.226] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785ed20) returned 1 [0167.226] GetProcessHeap () returned 0x297c7850000 [0167.226] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785ef20) returned 1 [0167.226] GetProcessHeap () returned 0x297c7850000 [0167.226] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785ea60) returned 1 [0167.226] GetProcessHeap () returned 0x297c7850000 [0167.226] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785ed60) returned 1 [0167.226] GetProcessHeap () returned 0x297c7850000 [0167.226] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785e8e0) returned 1 [0167.226] GetProcessHeap () returned 0x297c7850000 [0167.226] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785e980) returned 1 [0167.226] GetProcessHeap () returned 0x297c7850000 [0167.226] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785e9a0) returned 1 [0167.226] GetProcessHeap () returned 0x297c7850000 [0167.226] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785e9c0) returned 1 [0167.226] GetProcessHeap () returned 0x297c7850000 [0167.226] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785ed80) returned 1 [0167.226] GetProcessHeap () returned 0x297c7850000 [0167.227] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785ebc0) returned 1 [0167.227] GetProcessHeap () returned 0x297c7850000 [0167.227] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785ea00) returned 1 [0167.227] GetProcessHeap () returned 0x297c7850000 [0167.227] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785eda0) returned 1 [0167.227] GetProcessHeap () returned 0x297c7850000 [0167.227] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785ea80) returned 1 [0167.227] GetProcessHeap () returned 0x297c7850000 [0167.227] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785eba0) returned 1 [0167.227] GetProcessHeap () returned 0x297c7850000 [0167.227] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785eaa0) returned 1 [0167.227] GetProcessHeap () returned 0x297c7850000 [0167.227] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785eb20) returned 1 [0167.227] GetProcessHeap () returned 0x297c7850000 [0167.227] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785eac0) returned 1 [0167.227] GetProcessHeap () returned 0x297c7850000 [0167.227] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785edc0) returned 1 [0167.227] GetProcessHeap () returned 0x297c7850000 [0167.227] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785eae0) returned 1 [0167.227] GetProcessHeap () returned 0x297c7850000 [0167.227] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785eb40) returned 1 [0167.227] GetProcessHeap () returned 0x297c7850000 [0167.227] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785eb60) returned 1 [0167.227] GetProcessHeap () returned 0x297c7850000 [0167.227] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785eb80) returned 1 [0167.227] GetProcessHeap () returned 0x297c7850000 [0167.227] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78602e0) returned 1 [0167.227] GetProcessHeap () returned 0x297c7850000 [0167.227] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860360) returned 1 [0167.227] GetProcessHeap () returned 0x297c7850000 [0167.227] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78600c0) returned 1 [0167.227] GetProcessHeap () returned 0x297c7850000 [0167.227] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860300) returned 1 [0167.227] GetProcessHeap () returned 0x297c7850000 [0167.227] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785fe20) returned 1 [0167.227] GetProcessHeap () returned 0x297c7850000 [0167.227] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860000) returned 1 [0167.227] GetProcessHeap () returned 0x297c7850000 [0167.228] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78600e0) returned 1 [0167.228] GetProcessHeap () returned 0x297c7850000 [0167.228] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785fd20) returned 1 [0167.228] GetProcessHeap () returned 0x297c7850000 [0167.228] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860420) returned 1 [0167.228] GetProcessHeap () returned 0x297c7850000 [0167.228] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785ff40) returned 1 [0167.228] GetProcessHeap () returned 0x297c7850000 [0167.228] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785ffc0) returned 1 [0167.228] GetProcessHeap () returned 0x297c7850000 [0167.228] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785fd40) returned 1 [0167.228] GetProcessHeap () returned 0x297c7850000 [0167.228] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785ff20) returned 1 [0167.228] GetProcessHeap () returned 0x297c7850000 [0167.228] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78602a0) returned 1 [0167.228] GetProcessHeap () returned 0x297c7850000 [0167.228] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785ffe0) returned 1 [0167.228] GetProcessHeap () returned 0x297c7850000 [0167.228] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860400) returned 1 [0167.228] GetProcessHeap () returned 0x297c7850000 [0167.228] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860260) returned 1 [0167.228] GetProcessHeap () returned 0x297c7850000 [0167.228] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860380) returned 1 [0167.228] GetProcessHeap () returned 0x297c7850000 [0167.228] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860220) returned 1 [0167.228] GetProcessHeap () returned 0x297c7850000 [0167.228] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785fd60) returned 1 [0167.228] GetProcessHeap () returned 0x297c7850000 [0167.228] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78602c0) returned 1 [0167.228] GetProcessHeap () returned 0x297c7850000 [0167.228] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78603a0) returned 1 [0167.228] GetProcessHeap () returned 0x297c7850000 [0167.228] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860320) returned 1 [0167.228] GetProcessHeap () returned 0x297c7850000 [0167.228] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785ff00) returned 1 [0167.228] GetProcessHeap () returned 0x297c7850000 [0167.228] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860020) returned 1 [0167.228] GetProcessHeap () returned 0x297c7850000 [0167.228] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78603c0) returned 1 [0167.228] GetProcessHeap () returned 0x297c7850000 [0167.228] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785fe60) returned 1 [0167.229] GetProcessHeap () returned 0x297c7850000 [0167.229] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860140) returned 1 [0167.229] GetProcessHeap () returned 0x297c7850000 [0167.229] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860280) returned 1 [0167.229] GetProcessHeap () returned 0x297c7850000 [0167.229] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78604a0) returned 1 [0167.229] GetProcessHeap () returned 0x297c7850000 [0167.229] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78603e0) returned 1 [0167.229] GetProcessHeap () returned 0x297c7850000 [0167.229] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785fd80) returned 1 [0167.229] GetProcessHeap () returned 0x297c7850000 [0167.229] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860040) returned 1 [0167.229] GetProcessHeap () returned 0x297c7850000 [0167.229] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860100) returned 1 [0167.229] GetProcessHeap () returned 0x297c7850000 [0167.229] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78601a0) returned 1 [0167.229] GetProcessHeap () returned 0x297c7850000 [0167.229] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860440) returned 1 [0167.229] GetProcessHeap () returned 0x297c7850000 [0167.229] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860240) returned 1 [0167.229] GetProcessHeap () returned 0x297c7850000 [0167.229] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860460) returned 1 [0167.229] GetProcessHeap () returned 0x297c7850000 [0167.229] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860480) returned 1 [0167.229] GetProcessHeap () returned 0x297c7850000 [0167.229] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860340) returned 1 [0167.229] GetProcessHeap () returned 0x297c7850000 [0167.229] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785fec0) returned 1 [0167.229] GetProcessHeap () returned 0x297c7850000 [0167.229] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785fda0) returned 1 [0167.229] GetProcessHeap () returned 0x297c7850000 [0167.229] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785fe40) returned 1 [0167.229] GetProcessHeap () returned 0x297c7850000 [0167.229] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78600a0) returned 1 [0167.229] GetProcessHeap () returned 0x297c7850000 [0167.229] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860120) returned 1 [0167.229] GetProcessHeap () returned 0x297c7850000 [0167.229] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860160) returned 1 [0167.229] GetProcessHeap () returned 0x297c7850000 [0167.229] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860060) returned 1 [0167.230] GetProcessHeap () returned 0x297c7850000 [0167.230] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860200) returned 1 [0167.230] GetProcessHeap () returned 0x297c7850000 [0167.230] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785fdc0) returned 1 [0167.230] GetProcessHeap () returned 0x297c7850000 [0167.230] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860080) returned 1 [0167.230] GetProcessHeap () returned 0x297c7850000 [0167.230] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785fde0) returned 1 [0167.230] GetProcessHeap () returned 0x297c7850000 [0167.230] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785fe80) returned 1 [0167.230] GetProcessHeap () returned 0x297c7850000 [0167.230] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785fe00) returned 1 [0167.230] GetProcessHeap () returned 0x297c7850000 [0167.230] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785ff60) returned 1 [0167.230] GetProcessHeap () returned 0x297c7850000 [0167.230] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860180) returned 1 [0167.230] GetProcessHeap () returned 0x297c7850000 [0167.230] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78601c0) returned 1 [0167.230] GetProcessHeap () returned 0x297c7850000 [0167.230] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785fea0) returned 1 [0167.230] GetProcessHeap () returned 0x297c7850000 [0167.230] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785fee0) returned 1 [0167.230] GetProcessHeap () returned 0x297c7850000 [0167.231] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785ff80) returned 1 [0167.231] GetProcessHeap () returned 0x297c7850000 [0167.231] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c785ffa0) returned 1 [0167.231] GetProcessHeap () returned 0x297c7850000 [0167.231] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78601e0) returned 1 [0167.231] GetProcessHeap () returned 0x297c7850000 [0167.231] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860790) returned 1 [0167.231] GetProcessHeap () returned 0x297c7850000 [0167.231] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860b70) returned 1 [0167.231] GetProcessHeap () returned 0x297c7850000 [0167.231] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860c90) returned 1 [0167.231] GetProcessHeap () returned 0x297c7850000 [0167.231] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860870) returned 1 [0167.231] GetProcessHeap () returned 0x297c7850000 [0167.231] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78609f0) returned 1 [0167.231] GetProcessHeap () returned 0x297c7850000 [0167.231] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860850) returned 1 [0167.231] GetProcessHeap () returned 0x297c7850000 [0167.231] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860a90) returned 1 [0167.231] GetProcessHeap () returned 0x297c7850000 [0167.231] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860690) returned 1 [0167.231] GetProcessHeap () returned 0x297c7850000 [0167.231] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860a50) returned 1 [0167.231] GetProcessHeap () returned 0x297c7850000 [0167.231] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860bd0) returned 1 [0167.231] GetProcessHeap () returned 0x297c7850000 [0167.231] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860810) returned 1 [0167.231] GetProcessHeap () returned 0x297c7850000 [0167.231] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860670) returned 1 [0167.231] GetProcessHeap () returned 0x297c7850000 [0167.231] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860b50) returned 1 [0167.231] GetProcessHeap () returned 0x297c7850000 [0167.231] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78608f0) returned 1 [0167.231] GetProcessHeap () returned 0x297c7850000 [0167.231] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860ab0) returned 1 [0167.231] GetProcessHeap () returned 0x297c7850000 [0167.231] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78606d0) returned 1 [0167.231] GetProcessHeap () returned 0x297c7850000 [0167.231] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860c50) returned 1 [0167.231] GetProcessHeap () returned 0x297c7850000 [0167.232] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860890) returned 1 [0167.232] GetProcessHeap () returned 0x297c7850000 [0167.232] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78606b0) returned 1 [0167.232] GetProcessHeap () returned 0x297c7850000 [0167.232] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860cb0) returned 1 [0167.232] GetProcessHeap () returned 0x297c7850000 [0167.232] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78606f0) returned 1 [0167.232] GetProcessHeap () returned 0x297c7850000 [0167.232] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860b90) returned 1 [0167.232] GetProcessHeap () returned 0x297c7850000 [0167.232] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860bf0) returned 1 [0167.232] GetProcessHeap () returned 0x297c7850000 [0167.232] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860bb0) returned 1 [0167.232] GetProcessHeap () returned 0x297c7850000 [0167.232] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78608b0) returned 1 [0167.232] GetProcessHeap () returned 0x297c7850000 [0167.232] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860910) returned 1 [0167.232] GetProcessHeap () returned 0x297c7850000 [0167.232] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78607b0) returned 1 [0167.232] GetProcessHeap () returned 0x297c7850000 [0167.232] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860550) returned 1 [0167.232] GetProcessHeap () returned 0x297c7850000 [0167.232] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860af0) returned 1 [0167.232] GetProcessHeap () returned 0x297c7850000 [0167.232] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78609b0) returned 1 [0167.232] GetProcessHeap () returned 0x297c7850000 [0167.232] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78605b0) returned 1 [0167.232] GetProcessHeap () returned 0x297c7850000 [0167.232] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860c30) returned 1 [0167.232] GetProcessHeap () returned 0x297c7850000 [0167.232] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860c10) returned 1 [0167.232] GetProcessHeap () returned 0x297c7850000 [0167.232] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860a10) returned 1 [0167.232] GetProcessHeap () returned 0x297c7850000 [0167.232] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860a70) returned 1 [0167.232] GetProcessHeap () returned 0x297c7850000 [0167.232] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78607f0) returned 1 [0167.232] GetProcessHeap () returned 0x297c7850000 [0167.232] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78608d0) returned 1 [0167.232] GetProcessHeap () returned 0x297c7850000 [0167.232] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860b10) returned 1 [0167.232] GetProcessHeap () returned 0x297c7850000 [0167.233] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860570) returned 1 [0167.233] GetProcessHeap () returned 0x297c7850000 [0167.233] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78605d0) returned 1 [0167.233] GetProcessHeap () returned 0x297c7850000 [0167.233] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860ad0) returned 1 [0167.233] GetProcessHeap () returned 0x297c7850000 [0167.233] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860a30) returned 1 [0167.233] GetProcessHeap () returned 0x297c7850000 [0167.233] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860b30) returned 1 [0167.233] GetProcessHeap () returned 0x297c7850000 [0167.233] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860c70) returned 1 [0167.233] GetProcessHeap () returned 0x297c7850000 [0167.233] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860930) returned 1 [0167.233] GetProcessHeap () returned 0x297c7850000 [0167.233] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860530) returned 1 [0167.233] GetProcessHeap () returned 0x297c7850000 [0167.233] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860950) returned 1 [0167.233] GetProcessHeap () returned 0x297c7850000 [0167.233] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860590) returned 1 [0167.233] GetProcessHeap () returned 0x297c7850000 [0167.233] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860970) returned 1 [0167.233] GetProcessHeap () returned 0x297c7850000 [0167.233] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78605f0) returned 1 [0167.233] GetProcessHeap () returned 0x297c7850000 [0167.233] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860770) returned 1 [0167.233] GetProcessHeap () returned 0x297c7850000 [0167.233] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860710) returned 1 [0167.233] GetProcessHeap () returned 0x297c7850000 [0167.233] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860610) returned 1 [0167.233] GetProcessHeap () returned 0x297c7850000 [0167.233] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860990) returned 1 [0167.233] GetProcessHeap () returned 0x297c7850000 [0167.233] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78607d0) returned 1 [0167.233] GetProcessHeap () returned 0x297c7850000 [0167.233] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860630) returned 1 [0167.233] GetProcessHeap () returned 0x297c7850000 [0167.233] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860830) returned 1 [0167.233] GetProcessHeap () returned 0x297c7850000 [0167.233] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860650) returned 1 [0167.233] GetProcessHeap () returned 0x297c7850000 [0167.233] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860730) returned 1 [0167.233] GetProcessHeap () returned 0x297c7850000 [0167.233] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78609d0) returned 1 [0167.234] GetProcessHeap () returned 0x297c7850000 [0167.234] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860750) returned 1 [0167.234] GetProcessHeap () returned 0x297c7850000 [0167.234] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7861160) returned 1 [0167.234] GetProcessHeap () returned 0x297c7850000 [0167.234] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7861200) returned 1 [0167.234] GetProcessHeap () returned 0x297c7850000 [0167.234] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78610e0) returned 1 [0167.234] GetProcessHeap () returned 0x297c7850000 [0167.234] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7861300) returned 1 [0167.234] GetProcessHeap () returned 0x297c7850000 [0167.234] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7861220) returned 1 [0167.234] GetProcessHeap () returned 0x297c7850000 [0167.234] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7861240) returned 1 [0167.234] GetProcessHeap () returned 0x297c7850000 [0167.234] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7861120) returned 1 [0167.234] GetProcessHeap () returned 0x297c7850000 [0167.234] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860da0) returned 1 [0167.234] GetProcessHeap () returned 0x297c7850000 [0167.234] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78613a0) returned 1 [0167.234] GetProcessHeap () returned 0x297c7850000 [0167.234] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860e40) returned 1 [0167.234] GetProcessHeap () returned 0x297c7850000 [0167.234] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860f20) returned 1 [0167.234] GetProcessHeap () returned 0x297c7850000 [0167.234] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860fe0) returned 1 [0167.234] GetProcessHeap () returned 0x297c7850000 [0167.234] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7861080) returned 1 [0167.234] GetProcessHeap () returned 0x297c7850000 [0167.234] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860dc0) returned 1 [0167.234] GetProcessHeap () returned 0x297c7850000 [0167.234] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860e80) returned 1 [0167.234] GetProcessHeap () returned 0x297c7850000 [0167.234] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860e20) returned 1 [0167.234] GetProcessHeap () returned 0x297c7850000 [0167.234] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860ea0) returned 1 [0167.234] GetProcessHeap () returned 0x297c7850000 [0167.234] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860e60) returned 1 [0167.234] GetProcessHeap () returned 0x297c7850000 [0167.234] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7861380) returned 1 [0167.234] GetProcessHeap () returned 0x297c7850000 [0167.234] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7861460) returned 1 [0167.234] GetProcessHeap () returned 0x297c7850000 [0167.235] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860d80) returned 1 [0167.235] GetProcessHeap () returned 0x297c7850000 [0167.235] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7860ec0) returned 1 [0167.235] GetProcessHeap () returned 0x297c7850000 [0167.235] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7861000) returned 1 [0167.235] GetProcessHeap () returned 0x297c7850000 [0167.235] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7861140) returned 1 [0167.235] GetProcessHeap () returned 0x297c7850000 [0167.235] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78612c0) returned 1 [0167.235] GetProcessHeap () returned 0x297c7850000 [0167.235] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c7861100) returned 1 [0167.235] GetProcessHeap () returned 0x297c7850000 [0167.235] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78613c0) returned 1 [0167.235] GetProcessHeap () returned 0x297c7850000 [0167.235] RtlFreeHeap (HeapHandle=0x297c7850000, Flags=0x0, BaseAddress=0x297c78610a0) returned 1 [0167.235] FreeLibrary (hLibModule=0x7ffc84cf0000) returned 1 [0167.236] exit (_Code=0) Thread: id = 92 os_tid = 0xfe8 Thread: id = 93 os_tid = 0x89c Thread: id = 94 os_tid = 0x988 [0165.254] LocalAlloc (uFlags=0x40, uBytes=0x340) returned 0x297c78a4790 [0165.254] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x297c78af530 [0165.254] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x297c78afb00 [0165.255] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x297c78b16f0 [0165.255] LocalFree (hMem=0x297c78a4790) returned 0x0 [0165.255] LocalFree (hMem=0x297c78b16f0) returned 0x0 [0165.255] LocalFree (hMem=0x297c78afb00) returned 0x0 [0165.255] LocalFree (hMem=0x297c78af530) returned 0x0 Thread: id = 95 os_tid = 0xc84 [0165.082] LocalAlloc (uFlags=0x40, uBytes=0x340) returned 0x297c78b8350 [0165.082] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x297c78af680 [0165.082] LocalAlloc (uFlags=0x0, uBytes=0x18) returned 0x297c78b8f90 [0165.082] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x297c78b0f80 [0165.082] LocalReAlloc (hMem=0x297c78b8f90, uBytes=0x20, uFlags=0x2) returned 0x297c7855450 [0165.083] LocalFree (hMem=0x297c78b8350) returned 0x0 [0165.083] LocalFree (hMem=0x297c78b0f80) returned 0x0 [0165.083] LocalFree (hMem=0x297c7855450) returned 0x0 [0165.083] LocalFree (hMem=0x297c78af680) returned 0x0 Thread: id = 97 os_tid = 0x5d0 Process: id = "14" image_name = "shaofao.exe" filename = "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\shaofao.exe" page_root = "0x24384000" os_pid = "0x4e0" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "8" os_parent_pid = "0xdc8" cmd_line = "\"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\shaofao.exe\" " cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00012070" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 99 os_tid = 0x374 [0161.974] GetProcessHeap () returned 0x470000 [0161.974] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x30) returned 0x486670 [0161.974] GetProcessHeap () returned 0x470000 [0161.974] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x3400) returned 0x486940 [0161.978] GetProcessHeap () returned 0x470000 [0161.978] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x204) returned 0x489d48 [0161.979] GetProcessHeap () returned 0x470000 [0161.979] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x47adc8 [0161.979] GetTickCount () returned 0x11406d7 [0161.979] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0xeffcf8 | out: lpWSAData=0xeffcf8) returned 0 [0161.982] GetProcessHeap () returned 0x470000 [0161.982] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x1c) returned 0x474d78 [0161.982] GetProcessHeap () returned 0x470000 [0161.982] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x1c) returned 0x475158 [0161.982] GetVersion () returned 0x23f00206 [0161.982] GetCurrentProcess () returned 0xffffffff [0161.982] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0xeffc4c | out: TokenHandle=0xeffc4c*=0x1ec) returned 1 [0161.982] GetTokenInformation (in: TokenHandle=0x1ec, TokenInformationClass=0x14, TokenInformation=0xeffc44, TokenInformationLength=0x4, ReturnLength=0xeffc48 | out: TokenInformation=0xeffc44, ReturnLength=0xeffc48) returned 1 [0161.982] CloseHandle (hObject=0x1ec) returned 1 [0161.983] GetProcessHeap () returned 0x470000 [0161.983] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x20) returned 0x474100 [0161.983] GetProcessHeap () returned 0x470000 [0161.983] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x1e) returned 0x474a88 [0161.983] GetProcessHeap () returned 0x470000 [0161.983] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x1e) returned 0x472bf8 [0161.983] GetProcessHeap () returned 0x470000 [0161.983] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x90) returned 0x475050 [0161.983] GetProcessHeap () returned 0x470000 [0161.983] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x475050 | out: hHeap=0x470000) returned 1 [0161.983] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x474a88, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0161.983] GetProcessHeap () returned 0x470000 [0161.983] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x472bf8 | out: hHeap=0x470000) returned 1 [0161.983] GetProcessHeap () returned 0x470000 [0161.983] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x474100 | out: hHeap=0x470000) returned 1 [0161.983] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xeffbec, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xeffbec*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0161.983] GetProcessHeap () returned 0x470000 [0161.983] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x474a88 | out: hHeap=0x470000) returned 1 [0161.983] GetProcessHeap () returned 0x470000 [0161.983] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x40) returned 0x47dd40 [0161.983] GetProcessHeap () returned 0x470000 [0161.983] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x3a) returned 0x47e208 [0161.983] GetProcessHeap () returned 0x470000 [0161.983] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x47e208, Size=0x72) returned 0x4744b8 [0161.983] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x1ec [0161.983] WaitForSingleObject (hHandle=0x1ec, dwMilliseconds=0x0) returned 0x102 [0161.983] CloseHandle (hObject=0x1ec) returned 1 [0161.984] GetProcessHeap () returned 0x470000 [0161.984] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x47dd40 | out: hHeap=0x470000) returned 1 [0161.984] GetProcessHeap () returned 0x470000 [0161.984] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4744b8 | out: hHeap=0x470000) returned 1 [0161.984] GetProcessHeap () returned 0x470000 [0161.984] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x474d78 | out: hHeap=0x470000) returned 1 [0161.984] GetProcessHeap () returned 0x470000 [0161.984] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x475158 | out: hHeap=0x470000) returned 1 [0161.984] GetProcessHeap () returned 0x470000 [0161.984] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x47adc8 | out: hHeap=0x470000) returned 1 [0161.984] GetProcessHeap () returned 0x470000 [0161.984] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x489d48 | out: hHeap=0x470000) returned 1 [0161.984] GetProcessHeap () returned 0x470000 [0161.984] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x486940 | out: hHeap=0x470000) returned 1 [0161.984] GetProcessHeap () returned 0x470000 [0161.984] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x486670 | out: hHeap=0x470000) returned 1 [0161.984] ExitProcess (uExitCode=0x0) Thread: id = 105 os_tid = 0x4dc Process: id = "15" image_name = "netsh.exe" filename = "c:\\windows\\system32\\netsh.exe" page_root = "0x242af000" os_pid = "0xc18" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "11" os_parent_pid = "0xfa8" cmd_line = "netsh firewall set opmode mode=disable" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NQDPDE\\FD1HVy" bitness = "64" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00012070" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 112 os_tid = 0x884 [0171.455] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff64cda0000 [0171.455] __set_app_type (_Type=0x1) [0171.455] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x7ff64cdaa1c0) returned 0x0 [0171.455] __wgetmainargs (in: _Argc=0x7ff64cdb7668, _Argv=0x7ff64cdb7670, _Env=0x7ff64cdb7678, _DoWildCard=0, _StartInfo=0x7ff64cdb7684 | out: _Argc=0x7ff64cdb7668, _Argv=0x7ff64cdb7670, _Env=0x7ff64cdb7678) returned 0 [0171.456] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0171.456] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff64cda0000 [0171.456] _vsnwprintf (in: _Buffer=0x7ff64cdb9b00, _BufferCount=0x1fff, _Format="%s>", _ArgList=0x9f52f775a8 | out: _Buffer="netsh>") returned 6 [0171.457] GetProcessHeap () returned 0x285fd830000 [0171.457] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83eab0 [0171.457] GetProcessHeap () returned 0x285fd830000 [0171.457] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83e6d0 [0171.457] GetProcessHeap () returned 0x285fd830000 [0171.457] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83e530 [0171.457] GetProcessHeap () returned 0x285fd830000 [0171.457] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83ea90 [0171.457] GetProcessHeap () returned 0x285fd830000 [0171.457] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83e490 [0171.457] GetProcessHeap () returned 0x285fd830000 [0171.457] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83e870 [0171.457] GetProcessHeap () returned 0x285fd830000 [0171.457] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83e470 [0171.457] GetProcessHeap () returned 0x285fd830000 [0171.457] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83eaf0 [0171.457] GetProcessHeap () returned 0x285fd830000 [0171.457] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83e4d0 [0171.457] GetProcessHeap () returned 0x285fd830000 [0171.457] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83ebb0 [0171.457] GetProcessHeap () returned 0x285fd830000 [0171.457] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83e890 [0171.457] GetProcessHeap () returned 0x285fd830000 [0171.457] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83e970 [0171.457] GetProcessHeap () returned 0x285fd830000 [0171.457] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83e5f0 [0171.457] GetProcessHeap () returned 0x285fd830000 [0171.457] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83e710 [0171.457] GetProcessHeap () returned 0x285fd830000 [0171.458] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83e9d0 [0171.458] GetProcessHeap () returned 0x285fd830000 [0171.458] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83e5b0 [0171.458] GetProcessHeap () returned 0x285fd830000 [0171.458] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83e7d0 [0171.458] GetProcessHeap () returned 0x285fd830000 [0171.458] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83e950 [0171.458] GetProcessHeap () returned 0x285fd830000 [0171.458] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83e6f0 [0171.458] GetProcessHeap () returned 0x285fd830000 [0171.458] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83eb10 [0171.458] GetProcessHeap () returned 0x285fd830000 [0171.458] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83eb30 [0171.458] GetProcessHeap () returned 0x285fd830000 [0171.458] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83e610 [0171.458] GetProcessHeap () returned 0x285fd830000 [0171.458] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83ebd0 [0171.458] GetProcessHeap () returned 0x285fd830000 [0171.458] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83e570 [0171.458] GetProcessHeap () returned 0x285fd830000 [0171.458] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83e730 [0171.458] GetProcessHeap () returned 0x285fd830000 [0171.458] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83e5d0 [0171.458] GetProcessHeap () returned 0x285fd830000 [0171.458] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83e750 [0171.458] GetProcessHeap () returned 0x285fd830000 [0171.458] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83e7f0 [0171.458] GetProcessHeap () returned 0x285fd830000 [0171.458] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83eb50 [0171.458] GetProcessHeap () returned 0x285fd830000 [0171.458] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83e590 [0171.458] GetProcessHeap () returned 0x285fd830000 [0171.458] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83eb70 [0171.458] GetProcessHeap () returned 0x285fd830000 [0171.458] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83e450 [0171.458] GetProcessHeap () returned 0x285fd830000 [0171.458] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83e8b0 [0171.458] GetProcessHeap () returned 0x285fd830000 [0171.458] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83eb90 [0171.458] GetProcessHeap () returned 0x285fd830000 [0171.458] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83e4b0 [0171.458] GetProcessHeap () returned 0x285fd830000 [0171.458] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83e4f0 [0171.458] GetProcessHeap () returned 0x285fd830000 [0171.458] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83ea50 [0171.459] GetProcessHeap () returned 0x285fd830000 [0171.459] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83e630 [0171.459] GetProcessHeap () returned 0x285fd830000 [0171.459] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83e510 [0171.459] GetProcessHeap () returned 0x285fd830000 [0171.459] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83e550 [0171.459] GetProcessHeap () returned 0x285fd830000 [0171.459] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83e8d0 [0171.459] GetProcessHeap () returned 0x285fd830000 [0171.459] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83e650 [0171.459] GetProcessHeap () returned 0x285fd830000 [0171.459] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83e670 [0171.459] GetProcessHeap () returned 0x285fd830000 [0171.459] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83e770 [0171.459] GetProcessHeap () returned 0x285fd830000 [0171.459] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83e690 [0171.459] GetProcessHeap () returned 0x285fd830000 [0171.459] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83e6b0 [0171.459] GetProcessHeap () returned 0x285fd830000 [0171.459] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83e850 [0171.459] GetProcessHeap () returned 0x285fd830000 [0171.459] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83e810 [0171.459] GetProcessHeap () returned 0x285fd830000 [0171.459] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83e9f0 [0171.459] GetProcessHeap () returned 0x285fd830000 [0171.459] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83e790 [0171.459] GetProcessHeap () returned 0x285fd830000 [0171.459] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83e8f0 [0171.459] GetProcessHeap () returned 0x285fd830000 [0171.459] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83e830 [0171.459] GetProcessHeap () returned 0x285fd830000 [0171.459] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83e7b0 [0171.459] GetProcessHeap () returned 0x285fd830000 [0171.459] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83e930 [0171.459] GetProcessHeap () returned 0x285fd830000 [0171.459] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83e910 [0171.459] GetProcessHeap () returned 0x285fd830000 [0171.459] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83e990 [0171.459] GetProcessHeap () returned 0x285fd830000 [0171.459] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83e9b0 [0171.459] GetProcessHeap () returned 0x285fd830000 [0171.459] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83ea10 [0171.459] GetProcessHeap () returned 0x285fd830000 [0171.459] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83ea30 [0171.460] GetProcessHeap () returned 0x285fd830000 [0171.460] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83ea70 [0171.460] GetProcessHeap () returned 0x285fd830000 [0171.460] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83ead0 [0171.460] GetProcessHeap () returned 0x285fd830000 [0171.460] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83fab0 [0171.460] GetProcessHeap () returned 0x285fd830000 [0171.460] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83fe50 [0171.460] GetProcessHeap () returned 0x285fd830000 [0171.460] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83fb70 [0171.460] GetProcessHeap () returned 0x285fd830000 [0171.460] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83f990 [0171.460] GetProcessHeap () returned 0x285fd830000 [0171.460] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83fa30 [0171.460] GetProcessHeap () returned 0x285fd830000 [0171.460] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83f9d0 [0171.460] GetProcessHeap () returned 0x285fd830000 [0171.460] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83fef0 [0171.460] GetProcessHeap () returned 0x285fd830000 [0171.460] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83f890 [0171.460] GetProcessHeap () returned 0x285fd830000 [0171.460] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83f850 [0171.460] GetProcessHeap () returned 0x285fd830000 [0171.460] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83ff30 [0171.460] GetProcessHeap () returned 0x285fd830000 [0171.460] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83ff10 [0171.460] GetProcessHeap () returned 0x285fd830000 [0171.460] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83f950 [0171.460] GetProcessHeap () returned 0x285fd830000 [0171.460] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83fc50 [0171.460] GetProcessHeap () returned 0x285fd830000 [0171.460] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83fcf0 [0171.460] GetProcessHeap () returned 0x285fd830000 [0171.460] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83fb10 [0171.460] GetProcessHeap () returned 0x285fd830000 [0171.460] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83fa10 [0171.460] GetProcessHeap () returned 0x285fd830000 [0171.460] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83f870 [0171.460] GetProcessHeap () returned 0x285fd830000 [0171.460] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83fd30 [0171.460] GetProcessHeap () returned 0x285fd830000 [0171.460] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83fc90 [0171.460] GetProcessHeap () returned 0x285fd830000 [0171.461] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83f930 [0171.461] GetProcessHeap () returned 0x285fd830000 [0171.461] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83f9b0 [0171.461] GetProcessHeap () returned 0x285fd830000 [0171.461] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83fed0 [0171.461] GetProcessHeap () returned 0x285fd830000 [0171.461] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83fe70 [0171.461] GetProcessHeap () returned 0x285fd830000 [0171.461] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83fc70 [0171.461] GetProcessHeap () returned 0x285fd830000 [0171.461] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83fcb0 [0171.461] GetProcessHeap () returned 0x285fd830000 [0171.461] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83fdf0 [0171.461] GetProcessHeap () returned 0x285fd830000 [0171.461] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83f8d0 [0171.461] GetProcessHeap () returned 0x285fd830000 [0171.461] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83f970 [0171.461] GetProcessHeap () returned 0x285fd830000 [0171.461] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83faf0 [0171.461] GetProcessHeap () returned 0x285fd830000 [0171.461] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83ffb0 [0171.461] GetProcessHeap () returned 0x285fd830000 [0171.461] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83fbf0 [0171.461] GetProcessHeap () returned 0x285fd830000 [0171.461] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83fb30 [0171.461] GetProcessHeap () returned 0x285fd830000 [0171.461] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83fc10 [0171.461] GetProcessHeap () returned 0x285fd830000 [0171.461] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83ffd0 [0171.461] GetProcessHeap () returned 0x285fd830000 [0171.461] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83fad0 [0171.461] GetProcessHeap () returned 0x285fd830000 [0171.461] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83fb50 [0171.461] GetProcessHeap () returned 0x285fd830000 [0171.461] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83f8b0 [0171.461] GetProcessHeap () returned 0x285fd830000 [0171.461] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83ff50 [0171.461] GetProcessHeap () returned 0x285fd830000 [0171.461] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83fc30 [0171.461] GetProcessHeap () returned 0x285fd830000 [0171.461] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83fe10 [0171.461] GetProcessHeap () returned 0x285fd830000 [0171.461] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83fa90 [0171.462] GetProcessHeap () returned 0x285fd830000 [0171.462] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83f8f0 [0171.462] GetProcessHeap () returned 0x285fd830000 [0171.462] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83fe30 [0171.462] GetProcessHeap () returned 0x285fd830000 [0171.462] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83fb90 [0171.462] GetProcessHeap () returned 0x285fd830000 [0171.462] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83ff70 [0171.462] GetProcessHeap () returned 0x285fd830000 [0171.462] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83fbb0 [0171.462] GetProcessHeap () returned 0x285fd830000 [0171.462] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83fd50 [0171.462] GetProcessHeap () returned 0x285fd830000 [0171.462] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83ff90 [0171.462] GetProcessHeap () returned 0x285fd830000 [0171.462] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83f910 [0171.462] GetProcessHeap () returned 0x285fd830000 [0171.462] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83fdb0 [0171.462] GetProcessHeap () returned 0x285fd830000 [0171.462] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83fd10 [0171.462] GetProcessHeap () returned 0x285fd830000 [0171.462] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83fd70 [0171.462] GetProcessHeap () returned 0x285fd830000 [0171.462] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83fbd0 [0171.462] GetProcessHeap () returned 0x285fd830000 [0171.462] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83f9f0 [0171.462] GetProcessHeap () returned 0x285fd830000 [0171.462] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83fd90 [0171.462] GetProcessHeap () returned 0x285fd830000 [0171.462] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83fcd0 [0171.462] GetProcessHeap () returned 0x285fd830000 [0171.462] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83fdd0 [0171.462] GetProcessHeap () returned 0x285fd830000 [0171.462] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83fe90 [0171.462] GetProcessHeap () returned 0x285fd830000 [0171.462] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83fa50 [0171.462] GetProcessHeap () returned 0x285fd830000 [0171.462] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83feb0 [0171.462] GetProcessHeap () returned 0x285fd830000 [0171.462] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd83fa70 [0171.462] GetProcessHeap () returned 0x285fd830000 [0171.462] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840060 [0171.462] GetProcessHeap () returned 0x285fd830000 [0171.463] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd8402a0 [0171.463] GetProcessHeap () returned 0x285fd830000 [0171.463] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840460 [0171.463] GetProcessHeap () returned 0x285fd830000 [0171.463] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd8401c0 [0171.463] GetProcessHeap () returned 0x285fd830000 [0171.463] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840440 [0171.463] GetProcessHeap () returned 0x285fd830000 [0171.463] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840720 [0171.463] GetProcessHeap () returned 0x285fd830000 [0171.463] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840660 [0171.463] GetProcessHeap () returned 0x285fd830000 [0171.463] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd8400a0 [0171.463] GetProcessHeap () returned 0x285fd830000 [0171.463] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd8403c0 [0171.463] GetProcessHeap () returned 0x285fd830000 [0171.463] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840220 [0171.463] GetProcessHeap () returned 0x285fd830000 [0171.463] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840080 [0171.463] GetProcessHeap () returned 0x285fd830000 [0171.463] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840180 [0171.463] GetProcessHeap () returned 0x285fd830000 [0171.463] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840480 [0171.463] GetProcessHeap () returned 0x285fd830000 [0171.463] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840540 [0171.463] GetProcessHeap () returned 0x285fd830000 [0171.463] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840680 [0171.463] GetProcessHeap () returned 0x285fd830000 [0171.463] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840760 [0171.463] GetProcessHeap () returned 0x285fd830000 [0171.463] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd8402e0 [0171.463] GetProcessHeap () returned 0x285fd830000 [0171.463] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840340 [0171.463] GetProcessHeap () returned 0x285fd830000 [0171.463] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd8400c0 [0171.463] GetProcessHeap () returned 0x285fd830000 [0171.463] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840600 [0171.463] GetProcessHeap () returned 0x285fd830000 [0171.463] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840520 [0171.463] GetProcessHeap () returned 0x285fd830000 [0171.463] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840620 [0171.463] GetProcessHeap () returned 0x285fd830000 [0171.463] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd8402c0 [0171.464] GetProcessHeap () returned 0x285fd830000 [0171.464] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840320 [0171.464] GetProcessHeap () returned 0x285fd830000 [0171.464] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840700 [0171.464] GetProcessHeap () returned 0x285fd830000 [0171.464] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840200 [0171.464] GetProcessHeap () returned 0x285fd830000 [0171.464] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840500 [0171.464] GetProcessHeap () returned 0x285fd830000 [0171.464] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840640 [0171.464] GetProcessHeap () returned 0x285fd830000 [0171.464] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840740 [0171.464] GetProcessHeap () returned 0x285fd830000 [0171.464] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd8406a0 [0171.464] GetProcessHeap () returned 0x285fd830000 [0171.464] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd8406c0 [0171.464] GetProcessHeap () returned 0x285fd830000 [0171.464] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd8406e0 [0171.464] GetProcessHeap () returned 0x285fd830000 [0171.464] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840140 [0171.464] GetProcessHeap () returned 0x285fd830000 [0171.464] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840560 [0171.464] GetProcessHeap () returned 0x285fd830000 [0171.464] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd8404a0 [0171.464] GetProcessHeap () returned 0x285fd830000 [0171.464] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840380 [0171.464] GetProcessHeap () returned 0x285fd830000 [0171.464] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840420 [0171.464] GetProcessHeap () returned 0x285fd830000 [0171.464] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840360 [0171.464] GetProcessHeap () returned 0x285fd830000 [0171.464] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840580 [0171.464] GetProcessHeap () returned 0x285fd830000 [0171.464] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd8403a0 [0171.465] GetProcessHeap () returned 0x285fd830000 [0171.465] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840260 [0171.465] GetProcessHeap () returned 0x285fd830000 [0171.465] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd8404c0 [0171.465] GetProcessHeap () returned 0x285fd830000 [0171.465] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd8400e0 [0171.465] GetProcessHeap () returned 0x285fd830000 [0171.465] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840280 [0171.465] GetProcessHeap () returned 0x285fd830000 [0171.465] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840780 [0171.465] GetProcessHeap () returned 0x285fd830000 [0171.465] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd8407a0 [0171.465] GetProcessHeap () returned 0x285fd830000 [0171.465] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd8405e0 [0171.465] GetProcessHeap () returned 0x285fd830000 [0171.465] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd8407c0 [0171.465] GetProcessHeap () returned 0x285fd830000 [0171.465] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd8403e0 [0171.465] GetProcessHeap () returned 0x285fd830000 [0171.465] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd8407e0 [0171.465] GetProcessHeap () returned 0x285fd830000 [0171.465] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840100 [0171.465] GetProcessHeap () returned 0x285fd830000 [0171.465] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840120 [0171.465] GetProcessHeap () returned 0x285fd830000 [0171.465] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840160 [0171.465] GetProcessHeap () returned 0x285fd830000 [0171.465] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840240 [0171.465] GetProcessHeap () returned 0x285fd830000 [0171.465] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840400 [0171.465] GetProcessHeap () returned 0x285fd830000 [0171.465] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd8401a0 [0171.465] GetProcessHeap () returned 0x285fd830000 [0171.465] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd8401e0 [0171.465] GetProcessHeap () returned 0x285fd830000 [0171.465] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840300 [0171.465] GetProcessHeap () returned 0x285fd830000 [0171.465] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd8404e0 [0171.465] GetProcessHeap () returned 0x285fd830000 [0171.465] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd8405a0 [0171.465] GetProcessHeap () returned 0x285fd830000 [0171.466] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd8405c0 [0171.466] GetProcessHeap () returned 0x285fd830000 [0171.466] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840fb0 [0171.466] GetProcessHeap () returned 0x285fd830000 [0171.466] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840e30 [0171.466] GetProcessHeap () returned 0x285fd830000 [0171.466] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840a70 [0171.466] GetProcessHeap () returned 0x285fd830000 [0171.466] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840ab0 [0171.466] GetProcessHeap () returned 0x285fd830000 [0171.466] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840c70 [0171.466] GetProcessHeap () returned 0x285fd830000 [0171.466] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840bf0 [0171.466] GetProcessHeap () returned 0x285fd830000 [0171.466] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd8409f0 [0171.466] GetProcessHeap () returned 0x285fd830000 [0171.466] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840bb0 [0171.466] GetProcessHeap () returned 0x285fd830000 [0171.466] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840c10 [0171.466] GetProcessHeap () returned 0x285fd830000 [0171.466] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd8409d0 [0171.466] GetProcessHeap () returned 0x285fd830000 [0171.466] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840b90 [0171.466] GetProcessHeap () returned 0x285fd830000 [0171.466] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840b70 [0171.466] GetProcessHeap () returned 0x285fd830000 [0171.466] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840930 [0171.667] GetProcessHeap () returned 0x285fd830000 [0171.667] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840910 [0171.667] GetProcessHeap () returned 0x285fd830000 [0171.667] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840c90 [0171.667] GetProcessHeap () returned 0x285fd830000 [0171.667] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840f50 [0171.667] GetProcessHeap () returned 0x285fd830000 [0171.667] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840f70 [0171.667] GetProcessHeap () returned 0x285fd830000 [0171.667] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840af0 [0171.667] GetProcessHeap () returned 0x285fd830000 [0171.667] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840bd0 [0171.667] GetProcessHeap () returned 0x285fd830000 [0171.667] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd8408b0 [0171.667] GetProcessHeap () returned 0x285fd830000 [0171.667] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd8408f0 [0171.667] GetProcessHeap () returned 0x285fd830000 [0171.667] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840950 [0171.667] GetProcessHeap () returned 0x285fd830000 [0171.667] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840a50 [0171.667] GetProcessHeap () returned 0x285fd830000 [0171.667] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840f10 [0171.667] GetProcessHeap () returned 0x285fd830000 [0171.667] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd8408d0 [0171.667] GetProcessHeap () returned 0x285fd830000 [0171.667] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840f90 [0171.667] GetProcessHeap () returned 0x285fd830000 [0171.667] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840fd0 [0171.667] GetProcessHeap () returned 0x285fd830000 [0171.667] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd840a10 [0171.668] _wcsicmp (_String1="netsh.exe", _String2="ipxmontr.dll") returned 5 [0171.668] _wcsicmp (_String1="netsh.exe", _String2="ipxpromn.dll") returned 5 [0171.668] GetProcessHeap () returned 0x285fd830000 [0171.668] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x28) returned 0x285fd838920 [0171.668] GetProcessHeap () returned 0x285fd830000 [0171.668] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x2) returned 0x285fd83db40 [0171.668] GetProcessHeap () returned 0x285fd830000 [0171.668] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x14) returned 0x285fd840d70 [0171.668] _wcsupr (in: _String="netsh.exe" | out: _String="NETSH.EXE") returned="NETSH.EXE" [0171.668] GetProcessHeap () returned 0x285fd830000 [0171.668] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x0) returned 1 [0171.668] GetProcessHeap () returned 0x285fd830000 [0171.668] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x58) returned 0x285fd8356b0 [0171.668] GetProcessHeap () returned 0x285fd830000 [0171.668] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x0) returned 1 [0171.668] GetProcessHeap () returned 0x285fd830000 [0171.668] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0xb0) returned 0x285fd835030 [0171.668] GetProcessHeap () returned 0x285fd830000 [0171.668] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8356b0) returned 1 [0171.668] LoadLibraryExW (lpLibFileName="api-ms-win-appmodel-runtime-l1-1-0.dll", hFile=0x0, dwFlags=0x8) returned 0x7ffc8e9f0000 [0171.679] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\NetSh", ulOptions=0x0, samDesired=0x20019, phkResult=0x9f52f77558 | out: phkResult=0x9f52f77558*=0xb4) returned 0x0 [0171.680] RegQueryInfoKeyW (in: hKey=0xb4, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x9f52f77590, lpcbMaxValueNameLen=0x9f52f775a0, lpcbMaxValueLen=0x9f52f77598, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x9f52f77590*=0x14, lpcbMaxValueNameLen=0x9f52f775a0, lpcbMaxValueLen=0x9f52f77598, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0171.680] GetProcessHeap () returned 0x285fd830000 [0171.680] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x8, Size=0x16) returned 0x285fd840cb0 [0171.680] GetProcessHeap () returned 0x285fd830000 [0171.680] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x8, Size=0x23) returned 0x285fd838890 [0171.680] RegEnumValueW (in: hKey=0xb4, dwIndex=0x0, lpValueName=0x285fd840cb0, lpcchValueName=0x9f52f77550, lpReserved=0x0, lpType=0x0, lpData=0x285fd838890, lpcbData=0x9f52f775a8 | out: lpValueName="2", lpcchValueName=0x9f52f77550, lpType=0x0, lpData=0x285fd838890, lpcbData=0x9f52f775a8) returned 0x0 [0171.680] _wcsicmp (_String1="ifmon.dll", _String2="ipxmontr.dll") returned -10 [0171.680] _wcsicmp (_String1="ifmon.dll", _String2="ipxpromn.dll") returned -10 [0171.680] GetProcessHeap () returned 0x285fd830000 [0171.680] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x50) returned 0x285fd8417e0 [0171.680] GetProcessHeap () returned 0x285fd830000 [0171.680] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x4) returned 0x285fd83dbd0 [0171.680] GetProcessHeap () returned 0x285fd830000 [0171.680] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x14) returned 0x285fd840d10 [0171.680] _wcsupr (in: _String="ifmon.dll" | out: _String="IFMON.DLL") returned="IFMON.DLL" [0171.680] GetProcessHeap () returned 0x285fd830000 [0171.680] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd838920) returned 1 [0171.680] LoadLibraryExW (lpLibFileName="IFMON.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffc8a6d0000 [0171.695] GetProcAddress (hModule=0x7ffc8a6d0000, lpProcName="InitHelperDll") returned 0x7ffc8a6d1310 [0171.695] InitHelperDll () returned 0x0 [0171.698] RegisterHelper () returned 0x0 [0171.698] GetProcessHeap () returned 0x285fd830000 [0171.698] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x108) returned 0x285fd8342e0 [0171.698] GetProcessHeap () returned 0x285fd830000 [0171.698] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd835030) returned 1 [0171.849] RegEnumValueW (in: hKey=0xb4, dwIndex=0x1, lpValueName=0x285fd840cb0, lpcchValueName=0x9f52f77550, lpReserved=0x0, lpType=0x0, lpData=0x285fd838890, lpcbData=0x9f52f775a8 | out: lpValueName="4", lpcchValueName=0x9f52f77550, lpType=0x0, lpData=0x285fd838890, lpcbData=0x9f52f775a8) returned 0x0 [0171.849] _wcsicmp (_String1="rasmontr.dll", _String2="ipxmontr.dll") returned 9 [0171.849] _wcsicmp (_String1="rasmontr.dll", _String2="ipxpromn.dll") returned 9 [0171.849] GetProcessHeap () returned 0x285fd830000 [0171.850] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x78) returned 0x285fd835030 [0171.850] GetProcessHeap () returned 0x285fd830000 [0171.850] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x4) returned 0x285fd83dbb0 [0171.850] GetProcessHeap () returned 0x285fd830000 [0171.850] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x1a) returned 0x285fd838620 [0171.850] _wcsupr (in: _String="rasmontr.dll" | out: _String="RASMONTR.DLL") returned="RASMONTR.DLL" [0171.850] GetProcessHeap () returned 0x285fd830000 [0171.850] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8417e0) returned 1 [0171.850] LoadLibraryExW (lpLibFileName="RASMONTR.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffc86390000 [0172.003] LoadLibraryExA (lpLibFileName="MSVCRT.DLL", hFile=0x0, dwFlags=0x800) returned 0x7ffc909d0000 [0172.003] GetVersion () returned 0x3ad7000a [0172.003] SetErrorMode (uMode=0x0) returned 0x0 [0172.004] SetErrorMode (uMode=0x8001) returned 0x0 [0172.004] LocalAlloc (uFlags=0x0, uBytes=0x2000) returned 0x285fd852b90 [0172.004] LocalFree (hMem=0x285fd852b90) returned 0x0 [0172.004] GetVersion () returned 0x3ad7000a [0172.005] GlobalLock (hMem=0x285ff1b0008) returned 0x285fd852b90 [0172.005] LocalAlloc (uFlags=0x40, uBytes=0x340) returned 0x285fd852db0 [0172.005] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x285fd849690 [0172.005] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x285fd840dd0 [0172.006] malloc (_Size=0x100) returned 0x285fda015f0 [0172.006] __dllonexit () returned 0x7ffc7a5f1200 [0172.006] __dllonexit () returned 0x7ffc7a5f11f0 [0172.006] __dllonexit () returned 0x7ffc7a5f1240 [0172.006] __dllonexit () returned 0x7ffc7a5f12a0 [0172.006] __dllonexit () returned 0x7ffc7a5f1390 [0172.006] __dllonexit () returned 0x7ffc7a5f13a0 [0172.007] __dllonexit () returned 0x7ffc7a5f1420 [0172.007] __dllonexit () returned 0x7ffc7a5f14c0 [0172.007] __dllonexit () returned 0x7ffc7a5f12c0 [0172.007] __dllonexit () returned 0x7ffc7a6159c0 [0172.007] __dllonexit () returned 0x7ffc7a5f12e0 [0172.007] __dllonexit () returned 0x7ffc7a5f1470 [0172.007] __dllonexit () returned 0x7ffc7a5f1490 [0172.007] __dllonexit () returned 0x7ffc7a5f14e0 [0172.007] __dllonexit () returned 0x7ffc7a5f1500 [0172.007] __dllonexit () returned 0x7ffc7a5f1520 [0172.007] __dllonexit () returned 0x7ffc7a5f1550 [0172.007] __dllonexit () returned 0x7ffc7a5f1610 [0172.008] __dllonexit () returned 0x7ffc7a5f1050 [0172.008] __dllonexit () returned 0x7ffc7a5f1070 [0172.008] __dllonexit () returned 0x7ffc7a5f1030 [0172.010] RegisterClipboardFormatW (lpszFormat="commctrl_DragListMsg") returned 0xc157 [0172.010] __dllonexit () returned 0x7ffc7a6159a0 [0172.010] __dllonexit () returned 0x7ffc7a615980 [0172.011] __dllonexit () returned 0x7ffc7a6159b0 [0172.011] __dllonexit () returned 0x7ffc7a615990 [0172.011] GetVersion () returned 0x3ad7000a [0172.011] GetVersion () returned 0x3ad7000a [0172.011] GetVersion () returned 0x3ad7000a [0172.011] __dllonexit () returned 0x7ffc7a6028e0 [0172.011] __dllonexit () returned 0x7ffc7a602910 [0172.011] __dllonexit () returned 0x7ffc7a5f1300 [0172.011] __dllonexit () returned 0x7ffc7a5f13b0 [0172.011] __dllonexit () returned 0x7ffc7a5f13d0 [0172.011] __dllonexit () returned 0x7ffc7a6026e0 [0172.011] GetVersion () returned 0x3ad7000a [0172.012] GetProcessVersion (ProcessId=0x0) returned 0xa0000 [0172.012] GetSystemMetrics (nIndex=11) returned 32 [0172.012] GetSystemMetrics (nIndex=12) returned 32 [0172.012] GetSystemMetrics (nIndex=2) returned 17 [0172.012] GetSystemMetrics (nIndex=3) returned 17 [0172.012] GetDC (hWnd=0x0) returned 0x201051a [0172.012] GetDeviceCaps (hdc=0x201051a, index=88) returned 96 [0172.012] GetDeviceCaps (hdc=0x201051a, index=90) returned 96 [0172.012] ReleaseDC (hWnd=0x0, hDC=0x201051a) returned 1 [0172.012] GetSysColor (nIndex=15) returned 0xf0f0f0 [0172.013] GetSysColor (nIndex=16) returned 0xa0a0a0 [0172.013] GetSysColor (nIndex=20) returned 0xffffff [0172.013] GetSysColor (nIndex=18) returned 0x0 [0172.013] GetSysColor (nIndex=6) returned 0x646464 [0172.013] GetSysColorBrush (nIndex=15) returned 0x100072 [0172.013] GetSysColorBrush (nIndex=6) returned 0x10007a [0172.013] LoadCursorW (hInstance=0x0, lpCursorName=0x7f02) returned 0x10007 [0172.013] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0172.013] __dllonexit () returned 0x7ffc7a5f1450 [0172.013] RegisterClipboardFormatW (lpszFormat="commdlg_FindReplace") returned 0xc158 [0172.013] __dllonexit () returned 0x7ffc7a6026c0 [0172.013] RegisterClipboardFormatW (lpszFormat="Native") returned 0xc004 [0172.013] RegisterClipboardFormatW (lpszFormat="OwnerLink") returned 0xc003 [0172.013] RegisterClipboardFormatW (lpszFormat="ObjectLink") returned 0xc002 [0172.013] RegisterClipboardFormatW (lpszFormat="Embedded Object") returned 0xc00a [0172.013] RegisterClipboardFormatW (lpszFormat="Embed Source") returned 0xc00b [0172.014] RegisterClipboardFormatW (lpszFormat="Link Source") returned 0xc00d [0172.014] RegisterClipboardFormatW (lpszFormat="Object Descriptor") returned 0xc00e [0172.014] RegisterClipboardFormatW (lpszFormat="Link Source Descriptor") returned 0xc00f [0172.014] RegisterClipboardFormatW (lpszFormat="FileName") returned 0xc006 [0172.014] RegisterClipboardFormatW (lpszFormat="FileNameW") returned 0xc007 [0172.014] RegisterClipboardFormatW (lpszFormat="Rich Text Format") returned 0xc07a [0172.014] RegisterClipboardFormatW (lpszFormat="RichEdit Text and Objects") returned 0xc083 [0172.014] RegisterClipboardFormatW (lpszFormat="commdlg_FindReplace") returned 0xc158 [0172.014] __dllonexit () returned 0x7ffc7a6159d0 [0172.014] __dllonexit () returned 0x7ffc7a6159f0 [0172.015] __dllonexit () returned 0x7ffc7a615a00 [0172.015] __dllonexit () returned 0x7ffc7a615a10 [0172.015] __dllonexit () returned 0x7ffc7a615a20 [0172.015] GetCursorPos (in: lpPoint=0x7ffc7a735ae8 | out: lpPoint=0x7ffc7a735ae8*(x=1361, y=297)) returned 1 [0172.015] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x285fd850e30 [0172.015] LocalReAlloc (hMem=0x285fd840dd0, uBytes=0x18, uFlags=0x2) returned 0x285fd835390 [0172.016] GetCurrentThread () returned 0xfffffffffffffffe [0172.016] GetCurrentThreadId () returned 0x884 [0172.016] __dllonexit () returned 0x7ffc7a5f1620 [0172.016] SetErrorMode (uMode=0x0) returned 0x8001 [0172.016] SetErrorMode (uMode=0x8001) returned 0x0 [0172.016] GetModuleFileNameW (in: hModule=0x7ffc7a5f0000, lpFilename=0x9f52f76530, nSize=0x104 | out: lpFilename="C:\\WINDOWS\\system32\\MFC42u.dll" (normalized: "c:\\windows\\system32\\mfc42u.dll")) returned 0x1e [0172.016] wcscpy_s (in: _Destination=0x9f52f76740, _SizeInWords=0x104, _Source="MFC42u" | out: _Destination="MFC42u") returned 0x0 [0172.016] FindResourceW (hModule=0x7ffc7a5f0000, lpName=0xe01, lpType=0x6) returned 0x285fd7d0bb0 [0172.017] LoadStringW (in: hInstance=0x7ffc7a5f0000, uID=0xe000, lpBuffer=0x9f52f76950, cchBufferMax=256 | out: lpBuffer="") returned 0x0 [0172.017] wcscpy_s (in: _Destination=0x9f52f76564, _SizeInWords=0x5, _Source=".HLP" | out: _Destination=".HLP") returned 0x0 [0172.017] wcscat_s (in: _Destination="MFC42u", _SizeInWords=0x104, _Source=".INI" | out: _Destination="MFC42u.INI") returned 0x0 [0172.018] malloc (_Size=0x80) returned 0x285fda01610 [0172.018] LocalAlloc (uFlags=0x40, uBytes=0x2100) returned 0x285fd853100 [0172.019] GetSystemDirectoryA (in: lpBuffer=0x9f52f76bd0, uSize=0x112 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13 [0172.019] strcat_s (in: _Destination="C:\\WINDOWS\\system32", _SizeInBytes=0x112, _Source="\\MFC42" | out: _Destination="C:\\WINDOWS\\system32\\MFC42") returned 0x0 [0172.019] strcat_s (in: _Destination="C:\\WINDOWS\\system32\\MFC42", _SizeInBytes=0x112, _Source="LOC" | out: _Destination="C:\\WINDOWS\\system32\\MFC42LOC") returned 0x0 [0172.019] strcat_s (in: _Destination="C:\\WINDOWS\\system32\\MFC42LOC", _SizeInBytes=0x112, _Source=".DLL" | out: _Destination="C:\\WINDOWS\\system32\\MFC42LOC.DLL") returned 0x0 [0172.019] LoadLibraryExA (lpLibFileName="C:\\WINDOWS\\system32\\MFC42LOC.DLL", hFile=0x0, dwFlags=0x2) returned 0x0 [0172.020] GetProcAddress (hModule=0x7ffc86390000, lpProcName="InitHelperDll") returned 0x7ffc863a5850 [0172.020] InitHelperDll () returned 0x0 [0172.020] RegisterHelper () returned 0x0 [0172.020] GetProcessHeap () returned 0x285fd830000 [0172.020] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x160) returned 0x285fd84ab30 [0172.020] GetProcessHeap () returned 0x285fd830000 [0172.020] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8342e0) returned 1 [0172.020] RegisterHelper () returned 0x0 [0172.020] GetProcessHeap () returned 0x285fd830000 [0172.020] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x1b8) returned 0x285fd84aca0 [0172.020] GetProcessHeap () returned 0x285fd830000 [0172.020] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd84ab30) returned 1 [0172.021] RegisterHelper () returned 0x0 [0172.021] GetProcessHeap () returned 0x285fd830000 [0172.021] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x210) returned 0x285fd84d2c0 [0172.021] GetProcessHeap () returned 0x285fd830000 [0172.021] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd84aca0) returned 1 [0172.021] RegisterHelper () returned 0x0 [0172.021] GetProcessHeap () returned 0x285fd830000 [0172.021] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x268) returned 0x285fd84ab30 [0172.021] GetProcessHeap () returned 0x285fd830000 [0172.021] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd84d2c0) returned 1 [0172.021] RegisterHelper () returned 0x0 [0172.021] GetProcessHeap () returned 0x285fd830000 [0172.021] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x2c0) returned 0x285fd84d2c0 [0172.021] GetProcessHeap () returned 0x285fd830000 [0172.021] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd84ab30) returned 1 [0172.021] RegEnumValueW (in: hKey=0xb4, dwIndex=0x2, lpValueName=0x285fd840cb0, lpcchValueName=0x9f52f77550, lpReserved=0x0, lpType=0x0, lpData=0x285fd838890, lpcbData=0x9f52f775a8 | out: lpValueName="authfwcfg", lpcchValueName=0x9f52f77550, lpType=0x0, lpData=0x285fd838890, lpcbData=0x9f52f775a8) returned 0x0 [0172.021] _wcsicmp (_String1="authfwcfg.dll", _String2="ipxmontr.dll") returned -8 [0172.021] _wcsicmp (_String1="authfwcfg.dll", _String2="ipxpromn.dll") returned -8 [0172.021] GetProcessHeap () returned 0x285fd830000 [0172.021] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0xa0) returned 0x285fd8352d0 [0172.021] GetProcessHeap () returned 0x285fd830000 [0172.021] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x14) returned 0x285fd840870 [0172.021] GetProcessHeap () returned 0x285fd830000 [0172.021] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x1c) returned 0x285fd8493c0 [0172.021] _wcsupr (in: _String="authfwcfg.dll" | out: _String="AUTHFWCFG.DLL") returned="AUTHFWCFG.DLL" [0172.021] GetProcessHeap () returned 0x285fd830000 [0172.021] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd835030) returned 1 [0172.021] LoadLibraryExW (lpLibFileName="AUTHFWCFG.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffc84b20000 [0172.130] GetProcAddress (hModule=0x7ffc84b20000, lpProcName="InitHelperDll") returned 0x7ffc84b21430 [0172.130] InitHelperDll () returned 0x0 [0172.132] RegisterHelper () returned 0x0 [0172.132] GetProcessHeap () returned 0x285fd830000 [0172.132] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x318) returned 0x285fd84ab30 [0172.132] GetProcessHeap () returned 0x285fd830000 [0172.132] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd84d2c0) returned 1 [0172.132] RegisterHelper () returned 0x0 [0172.132] GetProcessHeap () returned 0x285fd830000 [0172.132] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x370) returned 0x285fd84d2c0 [0172.132] GetProcessHeap () returned 0x285fd830000 [0172.132] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd84ab30) returned 1 [0172.132] RegisterHelper () returned 0x0 [0172.132] GetProcessHeap () returned 0x285fd830000 [0172.132] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x3c8) returned 0x285fd855a20 [0172.132] GetProcessHeap () returned 0x285fd830000 [0172.132] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd84d2c0) returned 1 [0172.132] RegisterHelper () returned 0x0 [0172.132] GetProcessHeap () returned 0x285fd830000 [0172.132] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x420) returned 0x285fd84d2c0 [0172.132] GetProcessHeap () returned 0x285fd830000 [0172.132] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd855a20) returned 1 [0172.132] RegisterHelper () returned 0x0 [0172.132] GetProcessHeap () returned 0x285fd830000 [0172.132] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x478) returned 0x285fd855a20 [0172.132] GetProcessHeap () returned 0x285fd830000 [0172.133] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd84d2c0) returned 1 [0172.133] RegEnumValueW (in: hKey=0xb4, dwIndex=0x3, lpValueName=0x285fd840cb0, lpcchValueName=0x9f52f77550, lpReserved=0x0, lpType=0x0, lpData=0x285fd838890, lpcbData=0x9f52f775a8 | out: lpValueName="dhcpclient", lpcchValueName=0x9f52f77550, lpType=0x0, lpData=0x285fd838890, lpcbData=0x9f52f775a8) returned 0x0 [0172.133] _wcsicmp (_String1="dhcpcmonitor.dll", _String2="ipxmontr.dll") returned -5 [0172.133] _wcsicmp (_String1="dhcpcmonitor.dll", _String2="ipxpromn.dll") returned -5 [0172.133] GetProcessHeap () returned 0x285fd830000 [0172.133] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0xc8) returned 0x285fd848e60 [0172.133] GetProcessHeap () returned 0x285fd830000 [0172.133] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x16) returned 0x285fd855600 [0172.133] GetProcessHeap () returned 0x285fd830000 [0172.133] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x22) returned 0x285fd856250 [0172.133] _wcsupr (in: _String="dhcpcmonitor.dll" | out: _String="DHCPCMONITOR.DLL") returned="DHCPCMONITOR.DLL" [0172.133] GetProcessHeap () returned 0x285fd830000 [0172.133] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8352d0) returned 1 [0172.133] LoadLibraryExW (lpLibFileName="DHCPCMONITOR.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffc896e0000 [0172.144] GetProcAddress (hModule=0x7ffc896e0000, lpProcName="InitHelperDll") returned 0x7ffc896e1610 [0172.144] InitHelperDll () returned 0x0 [0172.144] RegisterHelper () returned 0x0 [0172.144] GetProcessHeap () returned 0x285fd830000 [0172.144] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x4d0) returned 0x285fd8566b0 [0172.144] GetProcessHeap () returned 0x285fd830000 [0172.144] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd855a20) returned 1 [0172.144] RegEnumValueW (in: hKey=0xb4, dwIndex=0x4, lpValueName=0x285fd840cb0, lpcchValueName=0x9f52f77550, lpReserved=0x0, lpType=0x0, lpData=0x285fd838890, lpcbData=0x9f52f775a8 | out: lpValueName="dot3cfg", lpcchValueName=0x9f52f77550, lpType=0x0, lpData=0x285fd838890, lpcbData=0x9f52f775a8) returned 0x0 [0172.144] _wcsicmp (_String1="dot3cfg.dll", _String2="ipxmontr.dll") returned -5 [0172.144] _wcsicmp (_String1="dot3cfg.dll", _String2="ipxpromn.dll") returned -5 [0172.144] GetProcessHeap () returned 0x285fd830000 [0172.144] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0xf0) returned 0x285fd8342e0 [0172.144] GetProcessHeap () returned 0x285fd830000 [0172.144] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd855320 [0172.144] GetProcessHeap () returned 0x285fd830000 [0172.144] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x18) returned 0x285fd855520 [0172.144] _wcsupr (in: _String="dot3cfg.dll" | out: _String="DOT3CFG.DLL") returned="DOT3CFG.DLL" [0172.144] GetProcessHeap () returned 0x285fd830000 [0172.144] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd848e60) returned 1 [0172.144] LoadLibraryExW (lpLibFileName="DOT3CFG.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffc895f0000 [0172.354] GetProcAddress (hModule=0x7ffc895f0000, lpProcName="InitHelperDll") returned 0x7ffc895f1100 [0172.354] InitHelperDll () returned 0x0 [0172.354] RegisterHelper () returned 0x0 [0172.354] GetProcessHeap () returned 0x285fd830000 [0172.354] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x528) returned 0x285fd8577b0 [0172.354] GetProcessHeap () returned 0x285fd830000 [0172.354] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8566b0) returned 1 [0172.354] RegEnumValueW (in: hKey=0xb4, dwIndex=0x5, lpValueName=0x285fd840cb0, lpcchValueName=0x9f52f77550, lpReserved=0x0, lpType=0x0, lpData=0x285fd838890, lpcbData=0x9f52f775a8 | out: lpValueName="fwcfg", lpcchValueName=0x9f52f77550, lpType=0x0, lpData=0x285fd838890, lpcbData=0x9f52f775a8) returned 0x0 [0172.354] _wcsicmp (_String1="fwcfg.dll", _String2="ipxmontr.dll") returned -3 [0172.355] _wcsicmp (_String1="fwcfg.dll", _String2="ipxpromn.dll") returned -3 [0172.355] GetProcessHeap () returned 0x285fd830000 [0172.355] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x118) returned 0x285fd849a00 [0172.355] GetProcessHeap () returned 0x285fd830000 [0172.355] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0xc) returned 0x285fd8553c0 [0172.355] GetProcessHeap () returned 0x285fd830000 [0172.355] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x14) returned 0x285fd8555e0 [0172.355] _wcsupr (in: _String="fwcfg.dll" | out: _String="FWCFG.DLL") returned="FWCFG.DLL" [0172.355] GetProcessHeap () returned 0x285fd830000 [0172.355] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8342e0) returned 1 [0172.355] LoadLibraryExW (lpLibFileName="FWCFG.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffc84d30000 [0172.359] GetProcAddress (hModule=0x7ffc84d30000, lpProcName="InitHelperDll") returned 0x7ffc84d311f0 [0172.359] InitHelperDll () returned 0x0 [0172.359] RegisterHelper () returned 0x0 [0172.359] GetProcessHeap () returned 0x285fd830000 [0172.359] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x580) returned 0x285fd857ce0 [0172.359] GetProcessHeap () returned 0x285fd830000 [0172.359] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8577b0) returned 1 [0172.359] RegEnumValueW (in: hKey=0xb4, dwIndex=0x6, lpValueName=0x285fd840cb0, lpcchValueName=0x9f52f77550, lpReserved=0x0, lpType=0x0, lpData=0x285fd838890, lpcbData=0x9f52f775a8 | out: lpValueName="hnetmon", lpcchValueName=0x9f52f77550, lpType=0x0, lpData=0x285fd838890, lpcbData=0x9f52f775a8) returned 0x0 [0172.359] _wcsicmp (_String1="hnetmon.dll", _String2="ipxmontr.dll") returned -1 [0172.359] _wcsicmp (_String1="hnetmon.dll", _String2="ipxpromn.dll") returned -1 [0172.359] GetProcessHeap () returned 0x285fd830000 [0172.359] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x140) returned 0x285fd84ab30 [0172.359] GetProcessHeap () returned 0x285fd830000 [0172.359] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd855620 [0172.360] GetProcessHeap () returned 0x285fd830000 [0172.360] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x18) returned 0x285fd855900 [0172.360] _wcsupr (in: _String="hnetmon.dll" | out: _String="HNETMON.DLL") returned="HNETMON.DLL" [0172.360] GetProcessHeap () returned 0x285fd830000 [0172.360] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd849a00) returned 1 [0172.360] LoadLibraryExW (lpLibFileName="HNETMON.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffc895e0000 [0172.677] GetProcAddress (hModule=0x7ffc895e0000, lpProcName="InitHelperDll") returned 0x7ffc895e2060 [0172.677] InitHelperDll () returned 0x0 [0172.677] RegisterHelper () returned 0x0 [0172.677] GetProcessHeap () returned 0x285fd830000 [0172.677] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x5d8) returned 0x285fd85efb0 [0172.677] GetProcessHeap () returned 0x285fd830000 [0172.678] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd857ce0) returned 1 [0172.678] RegEnumValueW (in: hKey=0xb4, dwIndex=0x7, lpValueName=0x285fd840cb0, lpcchValueName=0x9f52f77550, lpReserved=0x0, lpType=0x0, lpData=0x285fd838890, lpcbData=0x9f52f775a8 | out: lpValueName="netiohlp", lpcchValueName=0x9f52f77550, lpType=0x0, lpData=0x285fd838890, lpcbData=0x9f52f775a8) returned 0x0 [0172.678] _wcsicmp (_String1="netiohlp.dll", _String2="ipxmontr.dll") returned 5 [0172.678] _wcsicmp (_String1="netiohlp.dll", _String2="ipxpromn.dll") returned 5 [0172.678] GetProcessHeap () returned 0x285fd830000 [0172.678] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x168) returned 0x285fd84d2c0 [0172.678] GetProcessHeap () returned 0x285fd830000 [0172.678] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x12) returned 0x285fd855640 [0172.678] GetProcessHeap () returned 0x285fd830000 [0172.678] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x1a) returned 0x285fd85fa90 [0172.678] _wcsupr (in: _String="netiohlp.dll" | out: _String="NETIOHLP.DLL") returned="NETIOHLP.DLL" [0172.678] GetProcessHeap () returned 0x285fd830000 [0172.678] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd84ab30) returned 1 [0172.678] LoadLibraryExW (lpLibFileName="NETIOHLP.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffc84ae0000 [0173.127] GetProcAddress (hModule=0x7ffc84ae0000, lpProcName="InitHelperDll") returned 0x7ffc84af5f80 [0173.127] InitHelperDll () returned 0x0 [0173.127] RegisterHelper () returned 0x0 [0173.127] GetProcessHeap () returned 0x285fd830000 [0173.127] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x630) returned 0x285fd860db0 [0173.127] GetProcessHeap () returned 0x285fd830000 [0173.127] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd85efb0) returned 1 [0173.127] RegisterHelper () returned 0x0 [0173.127] GetProcessHeap () returned 0x285fd830000 [0173.127] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x688) returned 0x285fd8613f0 [0173.127] GetProcessHeap () returned 0x285fd830000 [0173.127] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd860db0) returned 1 [0173.127] RegisterHelper () returned 0x0 [0173.127] GetProcessHeap () returned 0x285fd830000 [0173.127] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x6e0) returned 0x285fd861a80 [0173.127] GetProcessHeap () returned 0x285fd830000 [0173.127] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8613f0) returned 1 [0173.127] RegisterHelper () returned 0x0 [0173.128] GetProcessHeap () returned 0x285fd830000 [0173.128] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x738) returned 0x285fd860db0 [0173.128] GetProcessHeap () returned 0x285fd830000 [0173.128] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd861a80) returned 1 [0173.128] RegisterHelper () returned 0x0 [0173.128] GetProcessHeap () returned 0x285fd830000 [0173.128] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x790) returned 0x285fd8614f0 [0173.128] GetProcessHeap () returned 0x285fd830000 [0173.128] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd860db0) returned 1 [0173.128] RegisterHelper () returned 0x0 [0173.128] GetProcessHeap () returned 0x285fd830000 [0173.128] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x7e8) returned 0x285fd861c90 [0173.128] GetProcessHeap () returned 0x285fd830000 [0173.128] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8614f0) returned 1 [0173.128] RegisterHelper () returned 0x0 [0173.128] GetProcessHeap () returned 0x285fd830000 [0173.128] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x840) returned 0x285fd862480 [0173.128] GetProcessHeap () returned 0x285fd830000 [0173.128] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd861c90) returned 1 [0173.128] RegisterHelper () returned 0x0 [0173.128] GetProcessHeap () returned 0x285fd830000 [0173.128] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x898) returned 0x285fd860db0 [0173.128] GetProcessHeap () returned 0x285fd830000 [0173.128] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd862480) returned 1 [0173.128] RegisterHelper () returned 0x0 [0173.128] GetProcessHeap () returned 0x285fd830000 [0173.128] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x8f0) returned 0x285fd861650 [0173.128] GetProcessHeap () returned 0x285fd830000 [0173.128] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd860db0) returned 1 [0173.128] RegEnumValueW (in: hKey=0xb4, dwIndex=0x8, lpValueName=0x285fd840cb0, lpcchValueName=0x9f52f77550, lpReserved=0x0, lpType=0x0, lpData=0x285fd838890, lpcbData=0x9f52f775a8 | out: lpValueName="nettrace", lpcchValueName=0x9f52f77550, lpType=0x0, lpData=0x285fd838890, lpcbData=0x9f52f775a8) returned 0x0 [0173.129] _wcsicmp (_String1="nettrace.dll", _String2="ipxmontr.dll") returned 5 [0173.129] _wcsicmp (_String1="nettrace.dll", _String2="ipxpromn.dll") returned 5 [0173.129] GetProcessHeap () returned 0x285fd830000 [0173.129] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x190) returned 0x285fd84ab30 [0173.129] GetProcessHeap () returned 0x285fd830000 [0173.129] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x12) returned 0x285fd8553e0 [0173.129] GetProcessHeap () returned 0x285fd830000 [0173.129] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x1a) returned 0x285fd85f970 [0173.129] _wcsupr (in: _String="nettrace.dll" | out: _String="NETTRACE.DLL") returned="NETTRACE.DLL" [0173.129] GetProcessHeap () returned 0x285fd830000 [0173.129] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd84d2c0) returned 1 [0173.129] LoadLibraryExW (lpLibFileName="NETTRACE.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffc7a330000 [0173.165] GetProcAddress (hModule=0x7ffc7a330000, lpProcName="InitHelperDll") returned 0x7ffc7a3315d0 [0173.165] InitHelperDll () returned 0x0 [0173.165] RegisterHelper () returned 0x0 [0173.165] GetProcessHeap () returned 0x285fd830000 [0173.165] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x948) returned 0x285fd8757a0 [0173.165] GetProcessHeap () returned 0x285fd830000 [0173.165] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd861650) returned 1 [0173.165] RegEnumValueW (in: hKey=0xb4, dwIndex=0x9, lpValueName=0x285fd840cb0, lpcchValueName=0x9f52f77550, lpReserved=0x0, lpType=0x0, lpData=0x285fd838890, lpcbData=0x9f52f775a8 | out: lpValueName="nshhttp", lpcchValueName=0x9f52f77550, lpType=0x0, lpData=0x285fd838890, lpcbData=0x9f52f775a8) returned 0x0 [0173.165] _wcsicmp (_String1="nshhttp.dll", _String2="ipxmontr.dll") returned 5 [0173.165] _wcsicmp (_String1="nshhttp.dll", _String2="ipxpromn.dll") returned 5 [0173.165] GetProcessHeap () returned 0x285fd830000 [0173.165] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x1b8) returned 0x285fd85f190 [0173.165] GetProcessHeap () returned 0x285fd830000 [0173.165] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd8641c0 [0173.165] GetProcessHeap () returned 0x285fd830000 [0173.165] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x18) returned 0x285fd864200 [0173.165] _wcsupr (in: _String="nshhttp.dll" | out: _String="NSHHTTP.DLL") returned="NSHHTTP.DLL" [0173.165] GetProcessHeap () returned 0x285fd830000 [0173.165] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd84ab30) returned 1 [0173.165] LoadLibraryExW (lpLibFileName="NSHHTTP.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffc86380000 [0173.173] GetProcAddress (hModule=0x7ffc86380000, lpProcName="InitHelperDll") returned 0x7ffc863810e0 [0173.173] InitHelperDll () returned 0x0 [0173.173] RegisterHelper () returned 0x0 [0173.173] GetProcessHeap () returned 0x285fd830000 [0173.173] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x9a0) returned 0x285fd8760f0 [0173.173] GetProcessHeap () returned 0x285fd830000 [0173.173] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8757a0) returned 1 [0173.174] RegEnumValueW (in: hKey=0xb4, dwIndex=0xa, lpValueName=0x285fd840cb0, lpcchValueName=0x9f52f77550, lpReserved=0x0, lpType=0x0, lpData=0x285fd838890, lpcbData=0x9f52f775a8 | out: lpValueName="nshipsec", lpcchValueName=0x9f52f77550, lpType=0x0, lpData=0x285fd838890, lpcbData=0x9f52f775a8) returned 0x0 [0173.174] _wcsicmp (_String1="nshipsec.dll", _String2="ipxmontr.dll") returned 5 [0173.174] _wcsicmp (_String1="nshipsec.dll", _String2="ipxpromn.dll") returned 5 [0173.174] GetProcessHeap () returned 0x285fd830000 [0173.174] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x1e0) returned 0x285fd84ab30 [0173.174] GetProcessHeap () returned 0x285fd830000 [0173.174] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x12) returned 0x285fd864500 [0173.174] GetProcessHeap () returned 0x285fd830000 [0173.174] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x1a) returned 0x285fd8610d0 [0173.174] _wcsupr (in: _String="nshipsec.dll" | out: _String="NSHIPSEC.DLL") returned="NSHIPSEC.DLL" [0173.174] GetProcessHeap () returned 0x285fd830000 [0173.174] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd85f190) returned 1 [0173.174] LoadLibraryExW (lpLibFileName="NSHIPSEC.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffc7a530000 [0173.536] GetProcAddress (hModule=0x7ffc7a530000, lpProcName="InitHelperDll") returned 0x7ffc7a531250 [0173.537] InitHelperDll () returned 0x0 [0173.537] RegisterHelper () returned 0x0 [0173.537] GetProcessHeap () returned 0x285fd830000 [0173.537] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x9f8) returned 0x285fd879ac0 [0173.537] GetProcessHeap () returned 0x285fd830000 [0173.537] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8760f0) returned 1 [0173.537] RegisterHelper () returned 0x0 [0173.537] GetProcessHeap () returned 0x285fd830000 [0173.537] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0xa50) returned 0x285fd87a4c0 [0173.537] GetProcessHeap () returned 0x285fd830000 [0173.537] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd879ac0) returned 1 [0173.537] RegisterHelper () returned 0x0 [0173.537] GetProcessHeap () returned 0x285fd830000 [0173.537] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0xaa8) returned 0x285fd8757a0 [0173.537] GetProcessHeap () returned 0x285fd830000 [0173.537] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd87a4c0) returned 1 [0173.547] RegEnumValueW (in: hKey=0xb4, dwIndex=0xb, lpValueName=0x285fd840cb0, lpcchValueName=0x9f52f77550, lpReserved=0x0, lpType=0x0, lpData=0x285fd838890, lpcbData=0x9f52f775a8 | out: lpValueName="nshwfp", lpcchValueName=0x9f52f77550, lpType=0x0, lpData=0x285fd838890, lpcbData=0x9f52f775a8) returned 0x0 [0173.547] _wcsicmp (_String1="nshwfp.dll", _String2="ipxmontr.dll") returned 5 [0173.547] _wcsicmp (_String1="nshwfp.dll", _String2="ipxpromn.dll") returned 5 [0173.547] GetProcessHeap () returned 0x285fd830000 [0173.547] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x208) returned 0x285fd87aad0 [0173.547] GetProcessHeap () returned 0x285fd830000 [0173.547] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0xe) returned 0x285fd864420 [0173.547] GetProcessHeap () returned 0x285fd830000 [0173.547] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x16) returned 0x285fd864000 [0173.547] _wcsupr (in: _String="nshwfp.dll" | out: _String="NSHWFP.DLL") returned="NSHWFP.DLL" [0173.547] GetProcessHeap () returned 0x285fd830000 [0173.547] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd84ab30) returned 1 [0173.547] LoadLibraryExW (lpLibFileName="NSHWFP.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffc76920000 [0173.714] GetProcAddress (hModule=0x7ffc76920000, lpProcName="InitHelperDll") returned 0x7ffc769210d0 [0173.714] InitHelperDll () returned 0x0 [0173.714] RegisterHelper () returned 0x0 [0173.714] GetProcessHeap () returned 0x285fd830000 [0173.714] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0xb00) returned 0x285fd87d680 [0173.714] GetProcessHeap () returned 0x285fd830000 [0173.714] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8757a0) returned 1 [0173.714] RegEnumValueW (in: hKey=0xb4, dwIndex=0xc, lpValueName=0x285fd840cb0, lpcchValueName=0x9f52f77550, lpReserved=0x0, lpType=0x0, lpData=0x285fd838890, lpcbData=0x9f52f775a8 | out: lpValueName="p2pnetsh", lpcchValueName=0x9f52f77550, lpType=0x0, lpData=0x285fd838890, lpcbData=0x9f52f775a8) returned 0x0 [0173.715] _wcsicmp (_String1="p2pnetsh.dll", _String2="ipxmontr.dll") returned 7 [0173.715] _wcsicmp (_String1="p2pnetsh.dll", _String2="ipxpromn.dll") returned 7 [0173.715] GetProcessHeap () returned 0x285fd830000 [0173.715] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x230) returned 0x285fd861820 [0173.715] GetProcessHeap () returned 0x285fd830000 [0173.715] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x12) returned 0x285fd864480 [0173.715] GetProcessHeap () returned 0x285fd830000 [0173.715] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x1a) returned 0x285fd87c180 [0173.715] _wcsupr (in: _String="p2pnetsh.dll" | out: _String="P2PNETSH.DLL") returned="P2PNETSH.DLL" [0173.715] GetProcessHeap () returned 0x285fd830000 [0173.715] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd87aad0) returned 1 [0173.715] LoadLibraryExW (lpLibFileName="P2PNETSH.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffc7a290000 [0173.729] GetProcAddress (hModule=0x7ffc7a290000, lpProcName="InitHelperDll") returned 0x7ffc7a2911e0 [0173.729] InitHelperDll () returned 0x0 [0173.729] RegisterHelper () returned 0x0 [0173.729] GetProcessHeap () returned 0x285fd830000 [0173.729] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0xb58) returned 0x285fd8801a0 [0173.730] GetProcessHeap () returned 0x285fd830000 [0173.730] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd87d680) returned 1 [0173.730] RegisterHelper () returned 0x0 [0173.730] GetProcessHeap () returned 0x285fd830000 [0173.730] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0xbb0) returned 0x285fd880d00 [0173.730] GetProcessHeap () returned 0x285fd830000 [0173.730] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8801a0) returned 1 [0173.730] RegisterHelper () returned 0x0 [0173.730] GetProcessHeap () returned 0x285fd830000 [0173.730] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0xc08) returned 0x285fd8818c0 [0173.730] GetProcessHeap () returned 0x285fd830000 [0173.730] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd880d00) returned 1 [0173.730] RegisterHelper () returned 0x0 [0173.730] GetProcessHeap () returned 0x285fd830000 [0173.730] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0xc60) returned 0x285fd8801a0 [0173.730] GetProcessHeap () returned 0x285fd830000 [0173.730] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8818c0) returned 1 [0173.733] RegisterHelper () returned 0x0 [0173.733] GetProcessHeap () returned 0x285fd830000 [0173.733] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0xcb8) returned 0x285fd880e10 [0173.733] GetProcessHeap () returned 0x285fd830000 [0173.733] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8801a0) returned 1 [0173.733] RegisterHelper () returned 0x0 [0173.733] GetProcessHeap () returned 0x285fd830000 [0173.733] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0xd10) returned 0x285fd881ad0 [0173.733] GetProcessHeap () returned 0x285fd830000 [0173.733] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd880e10) returned 1 [0173.733] RegisterHelper () returned 0x0 [0173.733] GetProcessHeap () returned 0x285fd830000 [0173.733] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0xd68) returned 0x285fd8801a0 [0173.733] GetProcessHeap () returned 0x285fd830000 [0173.733] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd881ad0) returned 1 [0173.738] RegisterHelper () returned 0x0 [0173.738] GetProcessHeap () returned 0x285fd830000 [0173.738] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0xdc0) returned 0x285fd880f10 [0173.738] GetProcessHeap () returned 0x285fd830000 [0173.738] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8801a0) returned 1 [0173.738] RegEnumValueW (in: hKey=0xb4, dwIndex=0xd, lpValueName=0x285fd840cb0, lpcchValueName=0x9f52f77550, lpReserved=0x0, lpType=0x0, lpData=0x285fd838890, lpcbData=0x9f52f775a8 | out: lpValueName="rpc", lpcchValueName=0x9f52f77550, lpType=0x0, lpData=0x285fd838890, lpcbData=0x9f52f775a8) returned 0x0 [0173.738] _wcsicmp (_String1="rpcnsh.dll", _String2="ipxmontr.dll") returned 9 [0173.738] _wcsicmp (_String1="rpcnsh.dll", _String2="ipxpromn.dll") returned 9 [0173.738] GetProcessHeap () returned 0x285fd830000 [0173.738] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x258) returned 0x285fd861a60 [0173.738] GetProcessHeap () returned 0x285fd830000 [0173.738] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x8) returned 0x285fd83dae0 [0173.738] GetProcessHeap () returned 0x285fd830000 [0173.738] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x16) returned 0x285fd8644a0 [0173.738] _wcsupr (in: _String="rpcnsh.dll" | out: _String="RPCNSH.DLL") returned="RPCNSH.DLL" [0173.739] GetProcessHeap () returned 0x285fd830000 [0173.739] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd861820) returned 1 [0173.739] LoadLibraryExW (lpLibFileName="RPCNSH.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffc84ed0000 [0173.742] GetProcAddress (hModule=0x7ffc84ed0000, lpProcName="InitHelperDll") returned 0x7ffc84ed1010 [0173.742] InitHelperDll () returned 0x0 [0173.743] RegisterHelper () returned 0x0 [0173.743] GetProcessHeap () returned 0x285fd830000 [0173.743] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0xe18) returned 0x285fd881ce0 [0173.743] GetProcessHeap () returned 0x285fd830000 [0173.743] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd880f10) returned 1 [0173.743] RegisterHelper () returned 0x0 [0173.743] GetProcessHeap () returned 0x285fd830000 [0173.743] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0xe70) returned 0x285fd8801a0 [0173.743] GetProcessHeap () returned 0x285fd830000 [0173.743] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd881ce0) returned 1 [0173.743] RegEnumValueW (in: hKey=0xb4, dwIndex=0xe, lpValueName=0x285fd840cb0, lpcchValueName=0x9f52f77550, lpReserved=0x0, lpType=0x0, lpData=0x285fd838890, lpcbData=0x9f52f775a8 | out: lpValueName="WcnNetsh", lpcchValueName=0x9f52f77550, lpType=0x0, lpData=0x285fd838890, lpcbData=0x9f52f775a8) returned 0x0 [0173.743] _wcsicmp (_String1="WcnNetsh.dll", _String2="ipxmontr.dll") returned 14 [0173.743] _wcsicmp (_String1="WcnNetsh.dll", _String2="ipxpromn.dll") returned 14 [0173.743] GetProcessHeap () returned 0x285fd830000 [0173.743] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x280) returned 0x285fd876490 [0173.743] GetProcessHeap () returned 0x285fd830000 [0173.743] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x12) returned 0x285fd864280 [0173.743] GetProcessHeap () returned 0x285fd830000 [0173.743] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x1a) returned 0x285fd87bfd0 [0173.743] _wcsupr (in: _String="WcnNetsh.dll" | out: _String="WCNNETSH.DLL") returned="WCNNETSH.DLL" [0173.743] GetProcessHeap () returned 0x285fd830000 [0173.743] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd861a60) returned 1 [0173.743] LoadLibraryExW (lpLibFileName="WCNNETSH.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffc84ac0000 [0173.752] GetProcAddress (hModule=0x7ffc84ac0000, lpProcName="InitHelperDll") returned 0x7ffc84ac1680 [0173.752] InitHelperDll () returned 0x0 [0173.752] RegisterHelper () returned 0x0 [0173.752] GetProcessHeap () returned 0x285fd830000 [0173.752] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0xec8) returned 0x285fd881020 [0173.752] GetProcessHeap () returned 0x285fd830000 [0173.752] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8801a0) returned 1 [0173.752] RegEnumValueW (in: hKey=0xb4, dwIndex=0xf, lpValueName=0x285fd840cb0, lpcchValueName=0x9f52f77550, lpReserved=0x0, lpType=0x0, lpData=0x285fd838890, lpcbData=0x9f52f775a8 | out: lpValueName="whhelper", lpcchValueName=0x9f52f77550, lpType=0x0, lpData=0x285fd838890, lpcbData=0x9f52f775a8) returned 0x0 [0173.752] _wcsicmp (_String1="whhelper.dll", _String2="ipxmontr.dll") returned 14 [0173.752] _wcsicmp (_String1="whhelper.dll", _String2="ipxpromn.dll") returned 14 [0173.752] GetProcessHeap () returned 0x285fd830000 [0173.752] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x2a8) returned 0x285fd876720 [0173.752] GetProcessHeap () returned 0x285fd830000 [0173.752] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x12) returned 0x285fd8642e0 [0173.752] GetProcessHeap () returned 0x285fd830000 [0173.752] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x1a) returned 0x285fd87c1e0 [0173.752] _wcsupr (in: _String="whhelper.dll" | out: _String="WHHELPER.DLL") returned="WHHELPER.DLL" [0173.752] GetProcessHeap () returned 0x285fd830000 [0173.752] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd876490) returned 1 [0173.752] LoadLibraryExW (lpLibFileName="WHHELPER.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffc84d20000 [0173.760] GetProcAddress (hModule=0x7ffc84d20000, lpProcName="InitHelperDll") returned 0x7ffc84d214d0 [0173.760] InitHelperDll () returned 0x0 [0173.760] RegisterHelper () returned 0x0 [0173.760] GetProcessHeap () returned 0x285fd830000 [0173.760] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0xf20) returned 0x285fd882f00 [0173.760] GetProcessHeap () returned 0x285fd830000 [0173.760] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd881020) returned 1 [0173.760] RegEnumValueW (in: hKey=0xb4, dwIndex=0x10, lpValueName=0x285fd840cb0, lpcchValueName=0x9f52f77550, lpReserved=0x0, lpType=0x0, lpData=0x285fd838890, lpcbData=0x9f52f775a8 | out: lpValueName="wlancfg", lpcchValueName=0x9f52f77550, lpType=0x0, lpData=0x285fd838890, lpcbData=0x9f52f775a8) returned 0x0 [0173.760] _wcsicmp (_String1="wlancfg.dll", _String2="ipxmontr.dll") returned 14 [0173.760] _wcsicmp (_String1="wlancfg.dll", _String2="ipxpromn.dll") returned 14 [0173.760] GetProcessHeap () returned 0x285fd830000 [0173.760] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x2d0) returned 0x285fd8757a0 [0173.760] GetProcessHeap () returned 0x285fd830000 [0173.761] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd864300 [0173.761] GetProcessHeap () returned 0x285fd830000 [0173.761] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x18) returned 0x285fd864320 [0173.761] _wcsupr (in: _String="wlancfg.dll" | out: _String="WLANCFG.DLL") returned="WLANCFG.DLL" [0173.761] GetProcessHeap () returned 0x285fd830000 [0173.761] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd876720) returned 1 [0173.761] LoadLibraryExW (lpLibFileName="WLANCFG.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffc740b0000 [0174.241] GetProcAddress (hModule=0x7ffc740b0000, lpProcName="InitHelperDll") returned 0x7ffc740b1320 [0174.242] InitHelperDll () returned 0x0 [0174.242] RegisterHelper () returned 0x0 [0174.242] GetProcessHeap () returned 0x285fd830000 [0174.242] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0xf78) returned 0x285fd885e40 [0174.242] GetProcessHeap () returned 0x285fd830000 [0174.242] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd882f00) returned 1 [0174.242] RegEnumValueW (in: hKey=0xb4, dwIndex=0x11, lpValueName=0x285fd840cb0, lpcchValueName=0x9f52f77550, lpReserved=0x0, lpType=0x0, lpData=0x285fd838890, lpcbData=0x9f52f775a8 | out: lpValueName="wshelper", lpcchValueName=0x9f52f77550, lpType=0x0, lpData=0x285fd838890, lpcbData=0x9f52f775a8) returned 0x0 [0174.242] _wcsicmp (_String1="wshelper.dll", _String2="ipxmontr.dll") returned 14 [0174.242] _wcsicmp (_String1="wshelper.dll", _String2="ipxpromn.dll") returned 14 [0174.242] GetProcessHeap () returned 0x285fd830000 [0174.242] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x2f8) returned 0x285fd87de90 [0174.242] GetProcessHeap () returned 0x285fd830000 [0174.242] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x12) returned 0x285fd864380 [0174.242] GetProcessHeap () returned 0x285fd830000 [0174.242] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x1a) returned 0x285fd87dbe0 [0174.242] _wcsupr (in: _String="wshelper.dll" | out: _String="WSHELPER.DLL") returned="WSHELPER.DLL" [0174.242] GetProcessHeap () returned 0x285fd830000 [0174.242] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8757a0) returned 1 [0174.242] LoadLibraryExW (lpLibFileName="WSHELPER.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffc84ab0000 [0174.246] GetProcAddress (hModule=0x7ffc84ab0000, lpProcName="InitHelperDll") returned 0x7ffc84ab1030 [0174.246] InitHelperDll () returned 0x0 [0174.246] RegisterHelper () returned 0x0 [0174.246] GetProcessHeap () returned 0x285fd830000 [0174.247] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0xfd0) returned 0x285fd8801a0 [0174.247] GetProcessHeap () returned 0x285fd830000 [0174.247] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd885e40) returned 1 [0174.247] RegEnumValueW (in: hKey=0xb4, dwIndex=0x12, lpValueName=0x285fd840cb0, lpcchValueName=0x9f52f77550, lpReserved=0x0, lpType=0x0, lpData=0x285fd838890, lpcbData=0x9f52f775a8 | out: lpValueName="wwancfg", lpcchValueName=0x9f52f77550, lpType=0x0, lpData=0x285fd838890, lpcbData=0x9f52f775a8) returned 0x0 [0174.247] _wcsicmp (_String1="wwancfg.dll", _String2="ipxmontr.dll") returned 14 [0174.247] _wcsicmp (_String1="wwancfg.dll", _String2="ipxpromn.dll") returned 14 [0174.247] GetProcessHeap () returned 0x285fd830000 [0174.247] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x320) returned 0x285fd876490 [0174.247] GetProcessHeap () returned 0x285fd830000 [0174.247] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd8643e0 [0174.247] GetProcessHeap () returned 0x285fd830000 [0174.247] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x18) returned 0x285fd864520 [0174.247] _wcsupr (in: _String="wwancfg.dll" | out: _String="WWANCFG.DLL") returned="WWANCFG.DLL" [0174.247] GetProcessHeap () returned 0x285fd830000 [0174.247] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd87de90) returned 1 [0174.247] LoadLibraryExW (lpLibFileName="WWANCFG.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffc832f0000 [0174.265] GetProcAddress (hModule=0x7ffc832f0000, lpProcName="InitHelperDll") returned 0x7ffc832f11d0 [0174.265] InitHelperDll () returned 0x0 [0174.265] RegisterHelper () returned 0x0 [0174.265] GetProcessHeap () returned 0x285fd830000 [0174.266] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x1028) returned 0x285fd886e50 [0174.266] GetProcessHeap () returned 0x285fd830000 [0174.266] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8801a0) returned 1 [0174.266] RegEnumValueW (in: hKey=0xb4, dwIndex=0x13, lpValueName=0x285fd840cb0, lpcchValueName=0x9f52f77550, lpReserved=0x0, lpType=0x0, lpData=0x285fd838890, lpcbData=0x9f52f775a8 | out: lpValueName="peerdistsh", lpcchValueName=0x9f52f77550, lpType=0x0, lpData=0x285fd838890, lpcbData=0x9f52f775a8) returned 0x0 [0174.266] _wcsicmp (_String1="peerdistsh.dll", _String2="ipxmontr.dll") returned 7 [0174.266] _wcsicmp (_String1="peerdistsh.dll", _String2="ipxpromn.dll") returned 7 [0174.266] GetProcessHeap () returned 0x285fd830000 [0174.266] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x348) returned 0x285fd882f00 [0174.266] GetProcessHeap () returned 0x285fd830000 [0174.266] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x16) returned 0x285fd8834a0 [0174.266] GetProcessHeap () returned 0x285fd830000 [0174.266] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x1e) returned 0x285fd87d940 [0174.266] _wcsupr (in: _String="peerdistsh.dll" | out: _String="PEERDISTSH.DLL") returned="PEERDISTSH.DLL" [0174.266] GetProcessHeap () returned 0x285fd830000 [0174.266] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd876490) returned 1 [0174.266] LoadLibraryExW (lpLibFileName="PEERDISTSH.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffc731f0000 [0174.276] GetProcAddress (hModule=0x7ffc731f0000, lpProcName="InitHelperDll") returned 0x7ffc731f1220 [0174.276] InitHelperDll () returned 0x0 [0174.276] RegisterHelper () returned 0x0 [0174.276] GetProcessHeap () returned 0x285fd830000 [0174.276] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x1080) returned 0x285fd887e80 [0174.276] GetProcessHeap () returned 0x285fd830000 [0174.276] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd886e50) returned 1 [0174.277] RegisterHelper () returned 0x0 [0174.277] GetProcessHeap () returned 0x285fd830000 [0174.277] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10d8) returned 0x285fd8801a0 [0174.277] GetProcessHeap () returned 0x285fd830000 [0174.277] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd887e80) returned 1 [0174.277] RegCloseKey (hKey=0xb4) returned 0x0 [0174.277] GetProcessHeap () returned 0x285fd830000 [0174.277] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840cb0) returned 1 [0174.277] GetProcessHeap () returned 0x285fd830000 [0174.277] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd838890) returned 1 [0174.278] GetProcessHeap () returned 0x285fd830000 [0174.278] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x70) returned 0x285fd84d4e0 [0174.278] GetProcessHeap () returned 0x285fd830000 [0174.278] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x0) returned 1 [0174.278] RegisterContext () returned 0x0 [0174.278] GetProcessHeap () returned 0x285fd830000 [0174.278] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x70) returned 0x285fd834430 [0174.279] GetProcessHeap () returned 0x285fd830000 [0174.279] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x0) returned 1 [0174.279] RegisterContext () returned 0x0 [0174.531] _wcsicmp (_String1="ras", _String2="interface") returned 9 [0174.531] _wcsicmp (_String1="ras", _String2="interface") returned 9 [0174.531] GetProcessHeap () returned 0x285fd830000 [0174.531] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0xe0) returned 0x285fd879ed0 [0174.532] GetProcessHeap () returned 0x285fd830000 [0174.532] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd834430) returned 1 [0175.163] RegisterContext () returned 0x0 [0175.164] GetProcessHeap () returned 0x285fd830000 [0175.164] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x70) returned 0x285fd87e0b0 [0175.164] GetProcessHeap () returned 0x285fd830000 [0175.164] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x0) returned 1 [0175.164] RegisterContext () returned 0x0 [0175.165] _wcsicmp (_String1="ipv6", _String2="ip") returned 118 [0175.165] _wcsicmp (_String1="ipv6", _String2="ip") returned 118 [0175.165] GetProcessHeap () returned 0x285fd830000 [0175.165] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0xe0) returned 0x285fd879fc0 [0175.165] GetProcessHeap () returned 0x285fd830000 [0175.165] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd87e0b0) returned 1 [0175.165] RegisterContext () returned 0x0 [0175.166] _wcsicmp (_String1="aaaa", _String2="ip") returned -8 [0175.166] _wcsicmp (_String1="aaaa", _String2="ipv6") returned -8 [0175.166] _wcsicmp (_String1="aaaa", _String2="ip") returned -8 [0175.166] GetProcessHeap () returned 0x285fd830000 [0175.166] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x150) returned 0x285fd861c30 [0175.166] GetProcessHeap () returned 0x285fd830000 [0175.166] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd879fc0) returned 1 [0175.166] RegisterContext () returned 0x0 [0175.167] _wcsicmp (_String1="diagnostics", _String2="aaaa") returned 3 [0175.167] _wcsicmp (_String1="diagnostics", _String2="ip") returned -5 [0175.167] _wcsicmp (_String1="diagnostics", _String2="ipv6") returned -5 [0175.167] _wcsicmp (_String1="diagnostics", _String2="aaaa") returned 3 [0175.167] _wcsicmp (_String1="diagnostics", _String2="ip") returned -5 [0175.167] GetProcessHeap () returned 0x285fd830000 [0175.167] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x1c0) returned 0x285fd8580a0 [0175.167] GetProcessHeap () returned 0x285fd830000 [0175.167] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd861c30) returned 1 [0175.167] RegisterContext () returned 0x0 [0175.167] _wcsicmp (_String1="advfirewall", _String2="interface") returned -8 [0175.167] _wcsicmp (_String1="advfirewall", _String2="ras") returned -17 [0175.167] _wcsicmp (_String1="advfirewall", _String2="interface") returned -8 [0175.167] GetProcessHeap () returned 0x285fd830000 [0175.168] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x150) returned 0x285fd861c30 [0175.168] GetProcessHeap () returned 0x285fd830000 [0175.168] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd879ed0) returned 1 [0175.168] RegisterContext () returned 0x0 [0175.168] GetProcessHeap () returned 0x285fd830000 [0175.168] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x70) returned 0x285fd87e0b0 [0175.168] GetProcessHeap () returned 0x285fd830000 [0175.168] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x0) returned 1 [0175.168] RegisterContext () returned 0x0 [0175.168] _wcsicmp (_String1="firewall", _String2="consec") returned 3 [0175.168] _wcsicmp (_String1="firewall", _String2="consec") returned 3 [0175.168] GetProcessHeap () returned 0x285fd830000 [0175.168] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0xe0) returned 0x285fd87a380 [0175.168] GetProcessHeap () returned 0x285fd830000 [0175.168] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd87e0b0) returned 1 [0175.168] RegisterContext () returned 0x0 [0175.168] _wcsicmp (_String1="monitor", _String2="consec") returned 10 [0175.168] _wcsicmp (_String1="monitor", _String2="firewall") returned 7 [0175.168] _wcsicmp (_String1="monitor", _String2="consec") returned 10 [0175.168] _wcsicmp (_String1="monitor", _String2="firewall") returned 7 [0175.168] GetProcessHeap () returned 0x285fd830000 [0175.168] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x150) returned 0x285fd876880 [0175.168] GetProcessHeap () returned 0x285fd830000 [0175.168] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd87a380) returned 1 [0175.169] RegisterContext () returned 0x0 [0175.169] _wcsicmp (_String1="mainmode", _String2="consec") returned 10 [0175.169] _wcsicmp (_String1="mainmode", _String2="firewall") returned 7 [0175.169] _wcsicmp (_String1="mainmode", _String2="monitor") returned -14 [0175.169] _wcsicmp (_String1="mainmode", _String2="consec") returned 10 [0175.169] _wcsicmp (_String1="mainmode", _String2="firewall") returned 7 [0175.169] _wcsicmp (_String1="mainmode", _String2="monitor") returned -14 [0175.169] GetProcessHeap () returned 0x285fd830000 [0175.169] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x1c0) returned 0x285fd881280 [0175.169] GetProcessHeap () returned 0x285fd830000 [0175.169] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd876880) returned 1 [0175.169] RegisterContext () returned 0x0 [0175.169] _wcsicmp (_String1="dhcpclient", _String2="advfirewall") returned 3 [0175.169] _wcsicmp (_String1="dhcpclient", _String2="interface") returned -5 [0175.169] _wcsicmp (_String1="dhcpclient", _String2="ras") returned -14 [0175.169] _wcsicmp (_String1="dhcpclient", _String2="advfirewall") returned 3 [0175.169] _wcsicmp (_String1="dhcpclient", _String2="interface") returned -5 [0175.169] GetProcessHeap () returned 0x285fd830000 [0175.169] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x1c0) returned 0x285fd876880 [0175.169] GetProcessHeap () returned 0x285fd830000 [0175.169] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd861c30) returned 1 [0175.169] RegisterContext () returned 0x0 [0175.169] _wcsicmp (_String1="lan", _String2="advfirewall") returned 11 [0175.169] _wcsicmp (_String1="lan", _String2="dhcpclient") returned 8 [0175.170] _wcsicmp (_String1="lan", _String2="interface") returned 3 [0175.170] _wcsicmp (_String1="lan", _String2="ras") returned -6 [0175.170] _wcsicmp (_String1="lan", _String2="advfirewall") returned 11 [0175.170] _wcsicmp (_String1="lan", _String2="dhcpclient") returned 8 [0175.170] _wcsicmp (_String1="lan", _String2="interface") returned 3 [0175.170] _wcsicmp (_String1="lan", _String2="ras") returned -6 [0175.170] GetProcessHeap () returned 0x285fd830000 [0175.170] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x230) returned 0x285fd881450 [0175.170] GetProcessHeap () returned 0x285fd830000 [0175.170] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd876880) returned 1 [0175.171] RegisterContext () returned 0x0 [0175.171] _wcsicmp (_String1="firewall", _String2="advfirewall") returned 5 [0175.171] _wcsicmp (_String1="firewall", _String2="dhcpclient") returned 2 [0175.171] _wcsicmp (_String1="firewall", _String2="interface") returned -3 [0175.171] _wcsicmp (_String1="firewall", _String2="lan") returned -6 [0175.172] _wcsicmp (_String1="firewall", _String2="ras") returned -12 [0175.172] _wcsicmp (_String1="firewall", _String2="advfirewall") returned 5 [0175.172] _wcsicmp (_String1="firewall", _String2="dhcpclient") returned 2 [0175.172] _wcsicmp (_String1="firewall", _String2="interface") returned -3 [0175.172] GetProcessHeap () returned 0x285fd830000 [0175.172] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x2a0) returned 0x285fd88fb00 [0175.172] GetProcessHeap () returned 0x285fd830000 [0175.172] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd881450) returned 1 [0175.172] RegisterContext () returned 0x0 [0175.172] _wcsicmp (_String1="bridge", _String2="advfirewall") returned 1 [0175.172] _wcsicmp (_String1="bridge", _String2="dhcpclient") returned -2 [0175.172] _wcsicmp (_String1="bridge", _String2="firewall") returned -4 [0175.172] _wcsicmp (_String1="bridge", _String2="interface") returned -7 [0175.172] _wcsicmp (_String1="bridge", _String2="lan") returned -10 [0175.172] _wcsicmp (_String1="bridge", _String2="ras") returned -16 [0175.172] _wcsicmp (_String1="bridge", _String2="advfirewall") returned 1 [0175.172] _wcsicmp (_String1="bridge", _String2="dhcpclient") returned -2 [0175.172] GetProcessHeap () returned 0x285fd830000 [0175.172] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x310) returned 0x285fd88fdb0 [0175.172] GetProcessHeap () returned 0x285fd830000 [0175.172] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd88fb00) returned 1 [0175.172] RegisterContext () returned 0x0 [0175.172] _wcsicmp (_String1="netio", _String2="advfirewall") returned 13 [0175.173] _wcsicmp (_String1="netio", _String2="bridge") returned 12 [0175.173] _wcsicmp (_String1="netio", _String2="dhcpclient") returned 10 [0175.173] _wcsicmp (_String1="netio", _String2="firewall") returned 8 [0175.173] _wcsicmp (_String1="netio", _String2="interface") returned 5 [0175.173] _wcsicmp (_String1="netio", _String2="lan") returned 2 [0175.173] _wcsicmp (_String1="netio", _String2="ras") returned -4 [0175.173] _wcsicmp (_String1="netio", _String2="advfirewall") returned 13 [0175.173] _wcsicmp (_String1="netio", _String2="bridge") returned 12 [0175.173] _wcsicmp (_String1="netio", _String2="dhcpclient") returned 10 [0175.173] _wcsicmp (_String1="netio", _String2="firewall") returned 8 [0175.173] _wcsicmp (_String1="netio", _String2="interface") returned 5 [0175.173] _wcsicmp (_String1="netio", _String2="lan") returned 2 [0175.173] _wcsicmp (_String1="netio", _String2="ras") returned -4 [0175.173] GetProcessHeap () returned 0x285fd830000 [0175.173] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x380) returned 0x285fd8900d0 [0175.173] GetProcessHeap () returned 0x285fd830000 [0175.173] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd88fdb0) returned 1 [0175.173] RegisterContext () returned 0x0 [0175.173] _wcsicmp (_String1="dnsclient", _String2="advfirewall") returned 3 [0175.173] _wcsicmp (_String1="dnsclient", _String2="bridge") returned 2 [0175.173] _wcsicmp (_String1="dnsclient", _String2="dhcpclient") returned 6 [0175.173] _wcsicmp (_String1="dnsclient", _String2="firewall") returned -2 [0175.173] _wcsicmp (_String1="dnsclient", _String2="interface") returned -5 [0175.173] _wcsicmp (_String1="dnsclient", _String2="lan") returned -8 [0175.173] _wcsicmp (_String1="dnsclient", _String2="netio") returned -10 [0175.173] _wcsicmp (_String1="dnsclient", _String2="ras") returned -14 [0175.173] _wcsicmp (_String1="dnsclient", _String2="advfirewall") returned 3 [0175.174] _wcsicmp (_String1="dnsclient", _String2="bridge") returned 2 [0175.174] _wcsicmp (_String1="dnsclient", _String2="dhcpclient") returned 6 [0175.174] _wcsicmp (_String1="dnsclient", _String2="firewall") returned -2 [0175.174] GetProcessHeap () returned 0x285fd830000 [0175.174] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x3f0) returned 0x285fd88fb00 [0175.174] GetProcessHeap () returned 0x285fd830000 [0175.174] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8900d0) returned 1 [0175.174] RegisterContext () returned 0x0 [0175.174] _wcsicmp (_String1="namespace", _String2="advfirewall") returned 13 [0175.174] _wcsicmp (_String1="namespace", _String2="bridge") returned 12 [0175.174] _wcsicmp (_String1="namespace", _String2="dhcpclient") returned 10 [0175.174] _wcsicmp (_String1="namespace", _String2="dnsclient") returned 10 [0175.174] _wcsicmp (_String1="namespace", _String2="firewall") returned 8 [0175.174] _wcsicmp (_String1="namespace", _String2="interface") returned 5 [0175.174] _wcsicmp (_String1="namespace", _String2="lan") returned 2 [0175.174] _wcsicmp (_String1="namespace", _String2="netio") returned -4 [0175.174] _wcsicmp (_String1="namespace", _String2="ras") returned -4 [0175.174] _wcsicmp (_String1="namespace", _String2="advfirewall") returned 13 [0175.174] _wcsicmp (_String1="namespace", _String2="bridge") returned 12 [0175.174] _wcsicmp (_String1="namespace", _String2="dhcpclient") returned 10 [0175.174] _wcsicmp (_String1="namespace", _String2="dnsclient") returned 10 [0175.174] _wcsicmp (_String1="namespace", _String2="firewall") returned 8 [0175.174] _wcsicmp (_String1="namespace", _String2="interface") returned 5 [0175.174] _wcsicmp (_String1="namespace", _String2="lan") returned 2 [0175.174] _wcsicmp (_String1="namespace", _String2="netio") returned -4 [0175.174] GetProcessHeap () returned 0x285fd830000 [0175.174] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x460) returned 0x285fd88ff00 [0175.174] GetProcessHeap () returned 0x285fd830000 [0175.175] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd88fb00) returned 1 [0175.175] RegisterContext () returned 0x0 [0175.175] GetProcessHeap () returned 0x285fd830000 [0175.175] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x70) returned 0x285fd87e0b0 [0175.175] GetProcessHeap () returned 0x285fd830000 [0175.175] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x0) returned 1 [0175.175] RegisterContext () returned 0x0 [0175.175] _wcsicmp (_String1="ipv6", _String2="ipv4") returned 2 [0175.175] _wcsicmp (_String1="ipv6", _String2="ipv4") returned 2 [0175.175] GetProcessHeap () returned 0x285fd830000 [0175.175] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0xe0) returned 0x285fd87a650 [0175.175] GetProcessHeap () returned 0x285fd830000 [0175.175] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd87e0b0) returned 1 [0175.175] RegisterContext () returned 0x0 [0175.175] _wcsicmp (_String1="6to4", _String2="ipv4") returned -51 [0175.175] _wcsicmp (_String1="6to4", _String2="ipv6") returned -51 [0175.175] _wcsicmp (_String1="6to4", _String2="ipv4") returned -51 [0175.175] GetProcessHeap () returned 0x285fd830000 [0175.175] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x150) returned 0x285fd861c30 [0175.176] GetProcessHeap () returned 0x285fd830000 [0175.176] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd87a650) returned 1 [0175.176] RegisterContext () returned 0x0 [0175.176] _wcsicmp (_String1="isatap", _String2="6to4") returned 51 [0175.176] _wcsicmp (_String1="isatap", _String2="ipv4") returned 3 [0175.176] _wcsicmp (_String1="isatap", _String2="ipv6") returned 3 [0175.176] _wcsicmp (_String1="isatap", _String2="6to4") returned 51 [0175.176] _wcsicmp (_String1="isatap", _String2="ipv4") returned 3 [0175.176] _wcsicmp (_String1="isatap", _String2="ipv6") returned 3 [0175.176] GetProcessHeap () returned 0x285fd830000 [0175.176] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x1c0) returned 0x285fd876880 [0175.176] GetProcessHeap () returned 0x285fd830000 [0175.176] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd861c30) returned 1 [0175.176] RegisterContext () returned 0x0 [0175.176] _wcsicmp (_String1="teredo", _String2="6to4") returned 62 [0175.176] _wcsicmp (_String1="teredo", _String2="ipv4") returned 11 [0175.176] _wcsicmp (_String1="teredo", _String2="ipv6") returned 11 [0175.176] _wcsicmp (_String1="teredo", _String2="isatap") returned 11 [0175.176] _wcsicmp (_String1="teredo", _String2="6to4") returned 62 [0175.176] _wcsicmp (_String1="teredo", _String2="ipv4") returned 11 [0175.176] _wcsicmp (_String1="teredo", _String2="ipv6") returned 11 [0175.176] _wcsicmp (_String1="teredo", _String2="isatap") returned 11 [0175.176] GetProcessHeap () returned 0x285fd830000 [0175.176] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x230) returned 0x285fd881450 [0175.176] GetProcessHeap () returned 0x285fd830000 [0175.176] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd876880) returned 1 [0175.177] RegisterContext () returned 0x0 [0175.177] _wcsicmp (_String1="portproxy", _String2="6to4") returned 58 [0175.177] _wcsicmp (_String1="portproxy", _String2="ipv4") returned 7 [0175.177] _wcsicmp (_String1="portproxy", _String2="ipv6") returned 7 [0175.177] _wcsicmp (_String1="portproxy", _String2="isatap") returned 7 [0175.177] _wcsicmp (_String1="portproxy", _String2="teredo") returned -4 [0175.177] _wcsicmp (_String1="portproxy", _String2="6to4") returned 58 [0175.177] _wcsicmp (_String1="portproxy", _String2="ipv4") returned 7 [0175.177] _wcsicmp (_String1="portproxy", _String2="ipv6") returned 7 [0175.177] _wcsicmp (_String1="portproxy", _String2="isatap") returned 7 [0175.177] _wcsicmp (_String1="portproxy", _String2="teredo") returned -4 [0175.177] GetProcessHeap () returned 0x285fd830000 [0175.177] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x2a0) returned 0x285fd88fb00 [0175.177] GetProcessHeap () returned 0x285fd830000 [0175.177] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd881450) returned 1 [0175.177] RegisterContext () returned 0x0 [0175.177] GetProcessHeap () returned 0x285fd830000 [0175.177] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x70) returned 0x285fd87e0b0 [0175.178] GetProcessHeap () returned 0x285fd830000 [0175.178] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x0) returned 1 [0175.178] RegisterContext () returned 0x0 [0175.178] _wcsicmp (_String1="isatap", _String2="6to4") returned 51 [0175.178] _wcsicmp (_String1="isatap", _String2="6to4") returned 51 [0175.178] GetProcessHeap () returned 0x285fd830000 [0175.178] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0xe0) returned 0x285fd87a740 [0175.178] GetProcessHeap () returned 0x285fd830000 [0175.178] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd87e0b0) returned 1 [0175.178] RegisterContext () returned 0x0 [0175.178] _wcsicmp (_String1="portproxy", _String2="6to4") returned 58 [0175.178] _wcsicmp (_String1="portproxy", _String2="ipv4") returned 7 [0175.178] _wcsicmp (_String1="portproxy", _String2="ipv6") returned 7 [0175.178] _wcsicmp (_String1="portproxy", _String2="isatap") returned 7 [0175.178] _wcsicmp (_String1="portproxy", _String2="portproxy") returned 0 [0175.178] RegisterContext () returned 0x0 [0175.178] _wcsicmp (_String1="httpstunnel", _String2="6to4") returned 50 [0175.178] _wcsicmp (_String1="httpstunnel", _String2="ipv4") returned -1 [0175.178] _wcsicmp (_String1="httpstunnel", _String2="ipv6") returned -1 [0175.178] _wcsicmp (_String1="httpstunnel", _String2="isatap") returned -1 [0175.178] _wcsicmp (_String1="httpstunnel", _String2="portproxy") returned -8 [0175.178] _wcsicmp (_String1="httpstunnel", _String2="teredo") returned -12 [0175.178] _wcsicmp (_String1="httpstunnel", _String2="6to4") returned 50 [0175.178] _wcsicmp (_String1="httpstunnel", _String2="ipv4") returned -1 [0175.178] GetProcessHeap () returned 0x285fd830000 [0175.178] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x310) returned 0x285fd890370 [0175.179] GetProcessHeap () returned 0x285fd830000 [0175.179] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd88fb00) returned 1 [0175.179] RegisterContext () returned 0x0 [0175.179] _wcsicmp (_String1="tcp", _String2="6to4") returned 62 [0175.179] _wcsicmp (_String1="tcp", _String2="httpstunnel") returned 12 [0175.179] _wcsicmp (_String1="tcp", _String2="ipv4") returned 11 [0175.179] _wcsicmp (_String1="tcp", _String2="ipv6") returned 11 [0175.179] _wcsicmp (_String1="tcp", _String2="isatap") returned 11 [0175.179] _wcsicmp (_String1="tcp", _String2="portproxy") returned 4 [0175.179] _wcsicmp (_String1="tcp", _String2="teredo") returned -2 [0175.179] _wcsicmp (_String1="tcp", _String2="6to4") returned 62 [0175.179] _wcsicmp (_String1="tcp", _String2="httpstunnel") returned 12 [0175.179] _wcsicmp (_String1="tcp", _String2="ipv4") returned 11 [0175.179] _wcsicmp (_String1="tcp", _String2="ipv6") returned 11 [0175.179] _wcsicmp (_String1="tcp", _String2="isatap") returned 11 [0175.179] _wcsicmp (_String1="tcp", _String2="portproxy") returned 4 [0175.179] _wcsicmp (_String1="tcp", _String2="teredo") returned -2 [0175.179] GetProcessHeap () returned 0x285fd830000 [0175.179] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x380) returned 0x285fd88fb00 [0175.179] GetProcessHeap () returned 0x285fd830000 [0175.179] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd890370) returned 1 [0175.179] RegisterContext () returned 0x0 [0175.179] _wcsicmp (_String1="trace", _String2="advfirewall") returned 19 [0175.180] _wcsicmp (_String1="trace", _String2="bridge") returned 18 [0175.180] _wcsicmp (_String1="trace", _String2="dhcpclient") returned 16 [0175.180] _wcsicmp (_String1="trace", _String2="dnsclient") returned 16 [0175.180] _wcsicmp (_String1="trace", _String2="firewall") returned 14 [0175.180] _wcsicmp (_String1="trace", _String2="interface") returned 11 [0175.180] _wcsicmp (_String1="trace", _String2="lan") returned 8 [0175.180] _wcsicmp (_String1="trace", _String2="namespace") returned 6 [0175.180] _wcsicmp (_String1="trace", _String2="netio") returned 6 [0175.180] _wcsicmp (_String1="trace", _String2="ras") returned 2 [0175.180] _wcsicmp (_String1="trace", _String2="advfirewall") returned 19 [0175.180] _wcsicmp (_String1="trace", _String2="bridge") returned 18 [0175.180] _wcsicmp (_String1="trace", _String2="dhcpclient") returned 16 [0175.180] _wcsicmp (_String1="trace", _String2="dnsclient") returned 16 [0175.180] _wcsicmp (_String1="trace", _String2="firewall") returned 14 [0175.180] _wcsicmp (_String1="trace", _String2="interface") returned 11 [0175.180] _wcsicmp (_String1="trace", _String2="lan") returned 8 [0175.180] _wcsicmp (_String1="trace", _String2="namespace") returned 6 [0175.180] _wcsicmp (_String1="trace", _String2="netio") returned 6 [0175.180] _wcsicmp (_String1="trace", _String2="ras") returned 2 [0175.180] GetProcessHeap () returned 0x285fd830000 [0175.180] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x4d0) returned 0x285fd890370 [0175.180] GetProcessHeap () returned 0x285fd830000 [0175.180] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd88ff00) returned 1 [0175.181] RegisterContext () returned 0x0 [0175.181] _wcsicmp (_String1="http", _String2="advfirewall") returned 7 [0175.181] _wcsicmp (_String1="http", _String2="bridge") returned 6 [0175.181] _wcsicmp (_String1="http", _String2="dhcpclient") returned 4 [0175.181] _wcsicmp (_String1="http", _String2="dnsclient") returned 4 [0175.181] _wcsicmp (_String1="http", _String2="firewall") returned 2 [0175.181] _wcsicmp (_String1="http", _String2="interface") returned -1 [0175.181] _wcsicmp (_String1="http", _String2="lan") returned -4 [0175.181] _wcsicmp (_String1="http", _String2="namespace") returned -6 [0175.181] _wcsicmp (_String1="http", _String2="netio") returned -6 [0175.181] _wcsicmp (_String1="http", _String2="ras") returned -10 [0175.181] _wcsicmp (_String1="http", _String2="trace") returned -12 [0175.181] _wcsicmp (_String1="http", _String2="advfirewall") returned 7 [0175.181] _wcsicmp (_String1="http", _String2="bridge") returned 6 [0175.181] _wcsicmp (_String1="http", _String2="dhcpclient") returned 4 [0175.181] _wcsicmp (_String1="http", _String2="dnsclient") returned 4 [0175.181] _wcsicmp (_String1="http", _String2="firewall") returned 2 [0175.181] _wcsicmp (_String1="http", _String2="interface") returned -1 [0175.182] GetProcessHeap () returned 0x285fd830000 [0175.182] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x540) returned 0x285fd891060 [0175.182] GetProcessHeap () returned 0x285fd830000 [0175.182] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd890370) returned 1 [0175.182] RegisterContext () returned 0x0 [0175.182] _wcsicmp (_String1="ipsec", _String2="advfirewall") returned 8 [0175.182] _wcsicmp (_String1="ipsec", _String2="bridge") returned 7 [0175.182] _wcsicmp (_String1="ipsec", _String2="dhcpclient") returned 5 [0175.182] _wcsicmp (_String1="ipsec", _String2="dnsclient") returned 5 [0175.182] _wcsicmp (_String1="ipsec", _String2="firewall") returned 3 [0175.182] _wcsicmp (_String1="ipsec", _String2="http") returned 1 [0175.182] _wcsicmp (_String1="ipsec", _String2="interface") returned 2 [0175.182] _wcsicmp (_String1="ipsec", _String2="lan") returned -3 [0175.182] _wcsicmp (_String1="ipsec", _String2="namespace") returned -5 [0175.182] _wcsicmp (_String1="ipsec", _String2="netio") returned -5 [0175.183] _wcsicmp (_String1="ipsec", _String2="ras") returned -9 [0175.183] _wcsicmp (_String1="ipsec", _String2="trace") returned -11 [0175.183] _wcsicmp (_String1="ipsec", _String2="advfirewall") returned 8 [0175.183] _wcsicmp (_String1="ipsec", _String2="bridge") returned 7 [0175.183] _wcsicmp (_String1="ipsec", _String2="dhcpclient") returned 5 [0175.183] _wcsicmp (_String1="ipsec", _String2="dnsclient") returned 5 [0175.183] _wcsicmp (_String1="ipsec", _String2="firewall") returned 3 [0175.183] _wcsicmp (_String1="ipsec", _String2="http") returned 1 [0175.183] _wcsicmp (_String1="ipsec", _String2="interface") returned 2 [0175.183] _wcsicmp (_String1="ipsec", _String2="lan") returned -3 [0175.183] GetProcessHeap () returned 0x285fd830000 [0175.183] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x5b0) returned 0x285fd88fe90 [0175.183] GetProcessHeap () returned 0x285fd830000 [0175.183] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd891060) returned 1 [0175.183] RegisterContext () returned 0x0 [0175.183] GetProcessHeap () returned 0x285fd830000 [0175.183] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x70) returned 0x285fd87e0b0 [0175.183] GetProcessHeap () returned 0x285fd830000 [0175.183] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x0) returned 1 [0175.183] RegisterContext () returned 0x0 [0175.183] _wcsicmp (_String1="dynamic", _String2="static") returned -15 [0175.183] _wcsicmp (_String1="dynamic", _String2="static") returned -15 [0175.183] GetProcessHeap () returned 0x285fd830000 [0175.183] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0xe0) returned 0x285fd87a380 [0175.183] GetProcessHeap () returned 0x285fd830000 [0175.183] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd87e0b0) returned 1 [0175.184] RegisterContext () returned 0x0 [0175.184] _wcsicmp (_String1="static", _String2="dynamic") returned 15 [0175.184] _wcsicmp (_String1="static", _String2="static") returned 0 [0175.184] RegisterContext () returned 0x0 [0175.184] _wcsicmp (_String1="dynamic", _String2="dynamic") returned 0 [0175.184] RegisterContext () returned 0x0 [0175.184] _wcsicmp (_String1="wfp", _String2="advfirewall") returned 22 [0175.184] _wcsicmp (_String1="wfp", _String2="bridge") returned 21 [0175.184] _wcsicmp (_String1="wfp", _String2="dhcpclient") returned 19 [0175.184] _wcsicmp (_String1="wfp", _String2="dnsclient") returned 19 [0175.184] _wcsicmp (_String1="wfp", _String2="firewall") returned 17 [0175.184] _wcsicmp (_String1="wfp", _String2="http") returned 15 [0175.184] _wcsicmp (_String1="wfp", _String2="interface") returned 14 [0175.184] _wcsicmp (_String1="wfp", _String2="ipsec") returned 14 [0175.184] _wcsicmp (_String1="wfp", _String2="lan") returned 11 [0175.184] _wcsicmp (_String1="wfp", _String2="namespace") returned 9 [0175.184] _wcsicmp (_String1="wfp", _String2="netio") returned 9 [0175.184] _wcsicmp (_String1="wfp", _String2="ras") returned 5 [0175.184] _wcsicmp (_String1="wfp", _String2="trace") returned 3 [0175.184] _wcsicmp (_String1="wfp", _String2="advfirewall") returned 22 [0175.184] _wcsicmp (_String1="wfp", _String2="bridge") returned 21 [0175.184] _wcsicmp (_String1="wfp", _String2="dhcpclient") returned 19 [0175.184] _wcsicmp (_String1="wfp", _String2="dnsclient") returned 19 [0175.184] _wcsicmp (_String1="wfp", _String2="firewall") returned 17 [0175.184] _wcsicmp (_String1="wfp", _String2="http") returned 15 [0175.185] _wcsicmp (_String1="wfp", _String2="interface") returned 14 [0175.185] _wcsicmp (_String1="wfp", _String2="ipsec") returned 14 [0175.185] _wcsicmp (_String1="wfp", _String2="lan") returned 11 [0175.185] _wcsicmp (_String1="wfp", _String2="namespace") returned 9 [0175.185] _wcsicmp (_String1="wfp", _String2="netio") returned 9 [0175.185] _wcsicmp (_String1="wfp", _String2="ras") returned 5 [0175.185] _wcsicmp (_String1="wfp", _String2="trace") returned 3 [0175.185] GetProcessHeap () returned 0x285fd830000 [0175.185] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x620) returned 0x285fd891060 [0175.185] GetProcessHeap () returned 0x285fd830000 [0175.185] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd88fe90) returned 1 [0175.186] RegisterContext () returned 0x0 [0175.186] _wcsicmp (_String1="p2p", _String2="advfirewall") returned 15 [0175.186] _wcsicmp (_String1="p2p", _String2="bridge") returned 14 [0175.186] _wcsicmp (_String1="p2p", _String2="dhcpclient") returned 12 [0175.186] _wcsicmp (_String1="p2p", _String2="dnsclient") returned 12 [0175.186] _wcsicmp (_String1="p2p", _String2="firewall") returned 10 [0175.186] _wcsicmp (_String1="p2p", _String2="http") returned 8 [0175.186] _wcsicmp (_String1="p2p", _String2="interface") returned 7 [0175.186] _wcsicmp (_String1="p2p", _String2="ipsec") returned 7 [0175.186] _wcsicmp (_String1="p2p", _String2="lan") returned 4 [0175.186] _wcsicmp (_String1="p2p", _String2="namespace") returned 2 [0175.186] _wcsicmp (_String1="p2p", _String2="netio") returned 2 [0175.186] _wcsicmp (_String1="p2p", _String2="ras") returned -2 [0175.186] _wcsicmp (_String1="p2p", _String2="trace") returned -4 [0175.186] _wcsicmp (_String1="p2p", _String2="wfp") returned -7 [0175.186] _wcsicmp (_String1="p2p", _String2="advfirewall") returned 15 [0175.187] _wcsicmp (_String1="p2p", _String2="bridge") returned 14 [0175.187] _wcsicmp (_String1="p2p", _String2="dhcpclient") returned 12 [0175.187] _wcsicmp (_String1="p2p", _String2="dnsclient") returned 12 [0175.187] _wcsicmp (_String1="p2p", _String2="firewall") returned 10 [0175.187] _wcsicmp (_String1="p2p", _String2="http") returned 8 [0175.187] _wcsicmp (_String1="p2p", _String2="interface") returned 7 [0175.187] _wcsicmp (_String1="p2p", _String2="ipsec") returned 7 [0175.187] _wcsicmp (_String1="p2p", _String2="lan") returned 4 [0175.187] _wcsicmp (_String1="p2p", _String2="namespace") returned 2 [0175.187] _wcsicmp (_String1="p2p", _String2="netio") returned 2 [0175.187] _wcsicmp (_String1="p2p", _String2="ras") returned -2 [0175.187] GetProcessHeap () returned 0x285fd830000 [0175.187] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x690) returned 0x285fd8936a0 [0175.187] GetProcessHeap () returned 0x285fd830000 [0175.187] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd891060) returned 1 [0175.187] RegisterContext () returned 0x0 [0175.187] GetProcessHeap () returned 0x285fd830000 [0175.187] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x70) returned 0x285fd87e0b0 [0175.187] GetProcessHeap () returned 0x285fd830000 [0175.187] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x0) returned 1 [0175.188] RegisterContext () returned 0x0 [0175.188] _wcsicmp (_String1="group", _String2="pnrp") returned -9 [0175.188] _wcsicmp (_String1="group", _String2="pnrp") returned -9 [0175.188] GetProcessHeap () returned 0x285fd830000 [0175.188] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0xe0) returned 0x285fd87a470 [0175.189] GetProcessHeap () returned 0x285fd830000 [0175.189] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd87e0b0) returned 1 [0175.189] RegisterContext () returned 0x0 [0175.189] _wcsicmp (_String1="idmgr", _String2="group") returned 2 [0175.189] _wcsicmp (_String1="idmgr", _String2="pnrp") returned -7 [0175.189] _wcsicmp (_String1="idmgr", _String2="group") returned 2 [0175.189] _wcsicmp (_String1="idmgr", _String2="pnrp") returned -7 [0175.189] GetProcessHeap () returned 0x285fd830000 [0175.189] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x150) returned 0x285fd861c30 [0175.189] GetProcessHeap () returned 0x285fd830000 [0175.189] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd87a470) returned 1 [0175.189] RegisterContext () returned 0x0 [0175.189] GetProcessHeap () returned 0x285fd830000 [0175.189] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x70) returned 0x285fd87e0b0 [0175.189] GetProcessHeap () returned 0x285fd830000 [0175.189] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x0) returned 1 [0175.189] RegisterContext () returned 0x0 [0175.189] _wcsicmp (_String1="diagnostics", _String2="cloud") returned 1 [0175.189] _wcsicmp (_String1="diagnostics", _String2="cloud") returned 1 [0175.189] GetProcessHeap () returned 0x285fd830000 [0175.189] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0xe0) returned 0x285fd87a560 [0175.190] GetProcessHeap () returned 0x285fd830000 [0175.190] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd87e0b0) returned 1 [0175.190] RegisterContext () returned 0x0 [0175.190] _wcsicmp (_String1="peer", _String2="cloud") returned 13 [0175.190] _wcsicmp (_String1="peer", _String2="diagnostics") returned 12 [0175.190] _wcsicmp (_String1="peer", _String2="cloud") returned 13 [0175.190] _wcsicmp (_String1="peer", _String2="diagnostics") returned 12 [0175.190] GetProcessHeap () returned 0x285fd830000 [0175.190] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x150) returned 0x285fd8906d0 [0175.190] GetProcessHeap () returned 0x285fd830000 [0175.190] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd87a560) returned 1 [0175.190] RegisterContext () returned 0x0 [0175.190] GetProcessHeap () returned 0x285fd830000 [0175.190] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x70) returned 0x285fd87e0b0 [0175.190] GetProcessHeap () returned 0x285fd830000 [0175.190] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x0) returned 1 [0175.190] RegisterContext () returned 0x0 [0175.191] _wcsicmp (_String1="rpc", _String2="advfirewall") returned 17 [0175.191] _wcsicmp (_String1="rpc", _String2="bridge") returned 16 [0175.191] _wcsicmp (_String1="rpc", _String2="dhcpclient") returned 14 [0175.191] _wcsicmp (_String1="rpc", _String2="dnsclient") returned 14 [0175.191] _wcsicmp (_String1="rpc", _String2="firewall") returned 12 [0175.191] _wcsicmp (_String1="rpc", _String2="http") returned 10 [0175.191] _wcsicmp (_String1="rpc", _String2="interface") returned 9 [0175.191] _wcsicmp (_String1="rpc", _String2="ipsec") returned 9 [0175.191] _wcsicmp (_String1="rpc", _String2="lan") returned 6 [0175.191] _wcsicmp (_String1="rpc", _String2="namespace") returned 4 [0175.191] _wcsicmp (_String1="rpc", _String2="netio") returned 4 [0175.191] _wcsicmp (_String1="rpc", _String2="p2p") returned 2 [0175.191] _wcsicmp (_String1="rpc", _String2="ras") returned 15 [0175.191] _wcsicmp (_String1="rpc", _String2="trace") returned -2 [0175.191] _wcsicmp (_String1="rpc", _String2="wfp") returned -5 [0175.191] _wcsicmp (_String1="rpc", _String2="advfirewall") returned 17 [0175.191] _wcsicmp (_String1="rpc", _String2="bridge") returned 16 [0175.191] _wcsicmp (_String1="rpc", _String2="dhcpclient") returned 14 [0175.191] _wcsicmp (_String1="rpc", _String2="dnsclient") returned 14 [0175.191] _wcsicmp (_String1="rpc", _String2="firewall") returned 12 [0175.191] _wcsicmp (_String1="rpc", _String2="http") returned 10 [0175.191] _wcsicmp (_String1="rpc", _String2="interface") returned 9 [0175.191] _wcsicmp (_String1="rpc", _String2="ipsec") returned 9 [0175.191] _wcsicmp (_String1="rpc", _String2="lan") returned 6 [0175.191] _wcsicmp (_String1="rpc", _String2="namespace") returned 4 [0175.191] _wcsicmp (_String1="rpc", _String2="netio") returned 4 [0175.191] _wcsicmp (_String1="rpc", _String2="p2p") returned 2 [0175.191] _wcsicmp (_String1="rpc", _String2="ras") returned 15 [0175.191] _wcsicmp (_String1="rpc", _String2="trace") returned -2 [0175.191] GetProcessHeap () returned 0x285fd830000 [0175.192] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x700) returned 0x285fd893d40 [0175.192] GetProcessHeap () returned 0x285fd830000 [0175.192] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8936a0) returned 1 [0175.192] RegisterContext () returned 0x0 [0175.192] GetProcessHeap () returned 0x285fd830000 [0175.192] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x70) returned 0x285fd842240 [0175.192] GetProcessHeap () returned 0x285fd830000 [0175.192] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x0) returned 1 [0175.192] RegisterContext () returned 0x0 [0175.192] _wcsicmp (_String1="wcn", _String2="advfirewall") returned 22 [0175.192] _wcsicmp (_String1="wcn", _String2="bridge") returned 21 [0175.192] _wcsicmp (_String1="wcn", _String2="dhcpclient") returned 19 [0175.192] _wcsicmp (_String1="wcn", _String2="dnsclient") returned 19 [0175.192] _wcsicmp (_String1="wcn", _String2="firewall") returned 17 [0175.192] _wcsicmp (_String1="wcn", _String2="http") returned 15 [0175.192] _wcsicmp (_String1="wcn", _String2="interface") returned 14 [0175.192] _wcsicmp (_String1="wcn", _String2="ipsec") returned 14 [0175.192] _wcsicmp (_String1="wcn", _String2="lan") returned 11 [0175.192] _wcsicmp (_String1="wcn", _String2="namespace") returned 9 [0175.192] _wcsicmp (_String1="wcn", _String2="netio") returned 9 [0175.192] _wcsicmp (_String1="wcn", _String2="p2p") returned 7 [0175.192] _wcsicmp (_String1="wcn", _String2="ras") returned 5 [0175.192] _wcsicmp (_String1="wcn", _String2="rpc") returned 5 [0175.192] _wcsicmp (_String1="wcn", _String2="trace") returned 3 [0175.192] _wcsicmp (_String1="wcn", _String2="wfp") returned -3 [0175.192] _wcsicmp (_String1="wcn", _String2="advfirewall") returned 22 [0175.192] _wcsicmp (_String1="wcn", _String2="bridge") returned 21 [0175.193] _wcsicmp (_String1="wcn", _String2="dhcpclient") returned 19 [0175.193] _wcsicmp (_String1="wcn", _String2="dnsclient") returned 19 [0175.193] _wcsicmp (_String1="wcn", _String2="firewall") returned 17 [0175.193] _wcsicmp (_String1="wcn", _String2="http") returned 15 [0175.193] _wcsicmp (_String1="wcn", _String2="interface") returned 14 [0175.193] _wcsicmp (_String1="wcn", _String2="ipsec") returned 14 [0175.193] _wcsicmp (_String1="wcn", _String2="lan") returned 11 [0175.193] _wcsicmp (_String1="wcn", _String2="namespace") returned 9 [0175.193] _wcsicmp (_String1="wcn", _String2="netio") returned 9 [0175.193] _wcsicmp (_String1="wcn", _String2="p2p") returned 7 [0175.193] _wcsicmp (_String1="wcn", _String2="ras") returned 5 [0175.193] _wcsicmp (_String1="wcn", _String2="rpc") returned 5 [0175.193] _wcsicmp (_String1="wcn", _String2="trace") returned 3 [0175.193] _wcsicmp (_String1="wcn", _String2="wfp") returned -3 [0175.193] GetProcessHeap () returned 0x285fd830000 [0175.193] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x770) returned 0x285fd894450 [0175.193] GetProcessHeap () returned 0x285fd830000 [0175.193] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd893d40) returned 1 [0175.193] RegisterContext () returned 0x0 [0175.193] _wcsicmp (_String1="winhttp", _String2="advfirewall") returned 22 [0175.193] _wcsicmp (_String1="winhttp", _String2="bridge") returned 21 [0175.193] _wcsicmp (_String1="winhttp", _String2="dhcpclient") returned 19 [0175.193] _wcsicmp (_String1="winhttp", _String2="dnsclient") returned 19 [0175.193] _wcsicmp (_String1="winhttp", _String2="firewall") returned 17 [0175.193] _wcsicmp (_String1="winhttp", _String2="http") returned 15 [0175.193] _wcsicmp (_String1="winhttp", _String2="interface") returned 14 [0175.193] _wcsicmp (_String1="winhttp", _String2="ipsec") returned 14 [0175.193] _wcsicmp (_String1="winhttp", _String2="lan") returned 11 [0175.193] _wcsicmp (_String1="winhttp", _String2="namespace") returned 9 [0175.193] _wcsicmp (_String1="winhttp", _String2="netio") returned 9 [0175.194] _wcsicmp (_String1="winhttp", _String2="p2p") returned 7 [0175.194] _wcsicmp (_String1="winhttp", _String2="ras") returned 5 [0175.194] _wcsicmp (_String1="winhttp", _String2="rpc") returned 5 [0175.194] _wcsicmp (_String1="winhttp", _String2="trace") returned 3 [0175.194] _wcsicmp (_String1="winhttp", _String2="wcn") returned 6 [0175.194] _wcsicmp (_String1="winhttp", _String2="wfp") returned 3 [0175.194] _wcsicmp (_String1="winhttp", _String2="advfirewall") returned 22 [0175.194] _wcsicmp (_String1="winhttp", _String2="bridge") returned 21 [0175.194] _wcsicmp (_String1="winhttp", _String2="dhcpclient") returned 19 [0175.194] _wcsicmp (_String1="winhttp", _String2="dnsclient") returned 19 [0175.194] _wcsicmp (_String1="winhttp", _String2="firewall") returned 17 [0175.194] _wcsicmp (_String1="winhttp", _String2="http") returned 15 [0175.194] _wcsicmp (_String1="winhttp", _String2="interface") returned 14 [0175.194] _wcsicmp (_String1="winhttp", _String2="ipsec") returned 14 [0175.194] _wcsicmp (_String1="winhttp", _String2="lan") returned 11 [0175.194] _wcsicmp (_String1="winhttp", _String2="namespace") returned 9 [0175.194] _wcsicmp (_String1="winhttp", _String2="netio") returned 9 [0175.194] _wcsicmp (_String1="winhttp", _String2="p2p") returned 7 [0175.194] _wcsicmp (_String1="winhttp", _String2="ras") returned 5 [0175.194] _wcsicmp (_String1="winhttp", _String2="rpc") returned 5 [0175.194] _wcsicmp (_String1="winhttp", _String2="trace") returned 3 [0175.194] _wcsicmp (_String1="winhttp", _String2="wcn") returned 6 [0175.194] _wcsicmp (_String1="winhttp", _String2="wfp") returned 3 [0175.194] GetProcessHeap () returned 0x285fd830000 [0175.194] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x7e0) returned 0x285fd8936a0 [0175.194] GetProcessHeap () returned 0x285fd830000 [0175.194] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd894450) returned 1 [0175.194] RegisterContext () returned 0x0 [0175.194] _wcsicmp (_String1="wlan", _String2="advfirewall") returned 22 [0175.195] _wcsicmp (_String1="wlan", _String2="bridge") returned 21 [0175.195] _wcsicmp (_String1="wlan", _String2="dhcpclient") returned 19 [0175.195] _wcsicmp (_String1="wlan", _String2="dnsclient") returned 19 [0175.195] _wcsicmp (_String1="wlan", _String2="firewall") returned 17 [0175.195] _wcsicmp (_String1="wlan", _String2="http") returned 15 [0175.195] _wcsicmp (_String1="wlan", _String2="interface") returned 14 [0175.195] _wcsicmp (_String1="wlan", _String2="ipsec") returned 14 [0175.195] _wcsicmp (_String1="wlan", _String2="lan") returned 11 [0175.195] _wcsicmp (_String1="wlan", _String2="namespace") returned 9 [0175.195] _wcsicmp (_String1="wlan", _String2="netio") returned 9 [0175.195] _wcsicmp (_String1="wlan", _String2="p2p") returned 7 [0175.195] _wcsicmp (_String1="wlan", _String2="ras") returned 5 [0175.195] _wcsicmp (_String1="wlan", _String2="rpc") returned 5 [0175.195] _wcsicmp (_String1="wlan", _String2="trace") returned 3 [0175.195] _wcsicmp (_String1="wlan", _String2="wcn") returned 9 [0175.195] _wcsicmp (_String1="wlan", _String2="wfp") returned 6 [0175.195] _wcsicmp (_String1="wlan", _String2="winhttp") returned 3 [0175.195] _wcsicmp (_String1="wlan", _String2="advfirewall") returned 22 [0175.195] _wcsicmp (_String1="wlan", _String2="bridge") returned 21 [0175.195] _wcsicmp (_String1="wlan", _String2="dhcpclient") returned 19 [0175.195] _wcsicmp (_String1="wlan", _String2="dnsclient") returned 19 [0175.195] _wcsicmp (_String1="wlan", _String2="firewall") returned 17 [0175.195] _wcsicmp (_String1="wlan", _String2="http") returned 15 [0175.195] _wcsicmp (_String1="wlan", _String2="interface") returned 14 [0175.195] _wcsicmp (_String1="wlan", _String2="ipsec") returned 14 [0175.195] _wcsicmp (_String1="wlan", _String2="lan") returned 11 [0175.195] _wcsicmp (_String1="wlan", _String2="namespace") returned 9 [0175.195] _wcsicmp (_String1="wlan", _String2="netio") returned 9 [0175.195] _wcsicmp (_String1="wlan", _String2="p2p") returned 7 [0175.195] _wcsicmp (_String1="wlan", _String2="ras") returned 5 [0175.195] _wcsicmp (_String1="wlan", _String2="rpc") returned 5 [0175.195] _wcsicmp (_String1="wlan", _String2="trace") returned 3 [0175.195] _wcsicmp (_String1="wlan", _String2="wcn") returned 9 [0175.196] _wcsicmp (_String1="wlan", _String2="wfp") returned 6 [0175.196] _wcsicmp (_String1="wlan", _String2="winhttp") returned 3 [0175.196] GetProcessHeap () returned 0x285fd830000 [0175.196] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x850) returned 0x285fd893e90 [0175.196] GetProcessHeap () returned 0x285fd830000 [0175.196] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8936a0) returned 1 [0175.196] RegisterContext () returned 0x0 [0175.196] _wcsicmp (_String1="winsock", _String2="advfirewall") returned 22 [0175.196] _wcsicmp (_String1="winsock", _String2="bridge") returned 21 [0175.196] _wcsicmp (_String1="winsock", _String2="dhcpclient") returned 19 [0175.196] _wcsicmp (_String1="winsock", _String2="dnsclient") returned 19 [0175.196] _wcsicmp (_String1="winsock", _String2="firewall") returned 17 [0175.196] _wcsicmp (_String1="winsock", _String2="http") returned 15 [0175.196] _wcsicmp (_String1="winsock", _String2="interface") returned 14 [0175.196] _wcsicmp (_String1="winsock", _String2="ipsec") returned 14 [0175.196] _wcsicmp (_String1="winsock", _String2="lan") returned 11 [0175.196] _wcsicmp (_String1="winsock", _String2="namespace") returned 9 [0175.196] _wcsicmp (_String1="winsock", _String2="netio") returned 9 [0175.196] _wcsicmp (_String1="winsock", _String2="p2p") returned 7 [0175.196] _wcsicmp (_String1="winsock", _String2="ras") returned 5 [0175.196] _wcsicmp (_String1="winsock", _String2="rpc") returned 5 [0175.196] _wcsicmp (_String1="winsock", _String2="trace") returned 3 [0175.196] _wcsicmp (_String1="winsock", _String2="wcn") returned 6 [0175.196] _wcsicmp (_String1="winsock", _String2="wfp") returned 3 [0175.196] _wcsicmp (_String1="winsock", _String2="winhttp") returned 11 [0175.196] _wcsicmp (_String1="winsock", _String2="wlan") returned -3 [0175.196] _wcsicmp (_String1="winsock", _String2="advfirewall") returned 22 [0175.196] _wcsicmp (_String1="winsock", _String2="bridge") returned 21 [0175.196] _wcsicmp (_String1="winsock", _String2="dhcpclient") returned 19 [0175.196] _wcsicmp (_String1="winsock", _String2="dnsclient") returned 19 [0175.196] _wcsicmp (_String1="winsock", _String2="firewall") returned 17 [0175.197] _wcsicmp (_String1="winsock", _String2="http") returned 15 [0175.197] _wcsicmp (_String1="winsock", _String2="interface") returned 14 [0175.197] _wcsicmp (_String1="winsock", _String2="ipsec") returned 14 [0175.197] _wcsicmp (_String1="winsock", _String2="lan") returned 11 [0175.197] _wcsicmp (_String1="winsock", _String2="namespace") returned 9 [0175.197] _wcsicmp (_String1="winsock", _String2="netio") returned 9 [0175.197] _wcsicmp (_String1="winsock", _String2="p2p") returned 7 [0175.197] _wcsicmp (_String1="winsock", _String2="ras") returned 5 [0175.197] _wcsicmp (_String1="winsock", _String2="rpc") returned 5 [0175.197] _wcsicmp (_String1="winsock", _String2="trace") returned 3 [0175.197] _wcsicmp (_String1="winsock", _String2="wcn") returned 6 [0175.197] _wcsicmp (_String1="winsock", _String2="wfp") returned 3 [0175.197] _wcsicmp (_String1="winsock", _String2="winhttp") returned 11 [0175.197] _wcsicmp (_String1="winsock", _String2="wlan") returned -3 [0175.197] GetProcessHeap () returned 0x285fd830000 [0175.197] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x8c0) returned 0x285fd8946f0 [0175.197] GetProcessHeap () returned 0x285fd830000 [0175.197] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd893e90) returned 1 [0175.197] RegisterContext () returned 0x0 [0175.197] _wcsicmp (_String1="mbn", _String2="advfirewall") returned 12 [0175.197] _wcsicmp (_String1="mbn", _String2="bridge") returned 11 [0175.197] _wcsicmp (_String1="mbn", _String2="dhcpclient") returned 9 [0175.197] _wcsicmp (_String1="mbn", _String2="dnsclient") returned 9 [0175.197] _wcsicmp (_String1="mbn", _String2="firewall") returned 7 [0175.197] _wcsicmp (_String1="mbn", _String2="http") returned 5 [0175.197] _wcsicmp (_String1="mbn", _String2="interface") returned 4 [0175.197] _wcsicmp (_String1="mbn", _String2="ipsec") returned 4 [0175.197] _wcsicmp (_String1="mbn", _String2="lan") returned 1 [0175.197] _wcsicmp (_String1="mbn", _String2="namespace") returned -1 [0175.197] _wcsicmp (_String1="mbn", _String2="netio") returned -1 [0175.197] _wcsicmp (_String1="mbn", _String2="p2p") returned -3 [0175.198] _wcsicmp (_String1="mbn", _String2="ras") returned -5 [0175.198] _wcsicmp (_String1="mbn", _String2="rpc") returned -5 [0175.198] _wcsicmp (_String1="mbn", _String2="trace") returned -7 [0175.198] _wcsicmp (_String1="mbn", _String2="wcn") returned -10 [0175.198] _wcsicmp (_String1="mbn", _String2="wfp") returned -10 [0175.198] _wcsicmp (_String1="mbn", _String2="winhttp") returned -10 [0175.198] _wcsicmp (_String1="mbn", _String2="winsock") returned -10 [0175.198] _wcsicmp (_String1="mbn", _String2="wlan") returned -10 [0175.198] _wcsicmp (_String1="mbn", _String2="advfirewall") returned 12 [0175.198] _wcsicmp (_String1="mbn", _String2="bridge") returned 11 [0175.198] _wcsicmp (_String1="mbn", _String2="dhcpclient") returned 9 [0175.198] _wcsicmp (_String1="mbn", _String2="dnsclient") returned 9 [0175.198] _wcsicmp (_String1="mbn", _String2="firewall") returned 7 [0175.198] _wcsicmp (_String1="mbn", _String2="http") returned 5 [0175.198] _wcsicmp (_String1="mbn", _String2="interface") returned 4 [0175.198] _wcsicmp (_String1="mbn", _String2="ipsec") returned 4 [0175.198] _wcsicmp (_String1="mbn", _String2="lan") returned 1 [0175.198] _wcsicmp (_String1="mbn", _String2="namespace") returned -1 [0175.198] GetProcessHeap () returned 0x285fd830000 [0175.198] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x930) returned 0x285fd8936a0 [0175.198] GetProcessHeap () returned 0x285fd830000 [0175.198] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8946f0) returned 1 [0175.898] RegisterContext () returned 0x0 [0175.899] _wcsicmp (_String1="branchcache", _String2="advfirewall") returned 1 [0175.899] _wcsicmp (_String1="branchcache", _String2="bridge") returned -8 [0175.899] _wcsicmp (_String1="branchcache", _String2="dhcpclient") returned -2 [0175.899] _wcsicmp (_String1="branchcache", _String2="dnsclient") returned -2 [0175.899] _wcsicmp (_String1="branchcache", _String2="firewall") returned -4 [0175.899] _wcsicmp (_String1="branchcache", _String2="http") returned -6 [0175.899] _wcsicmp (_String1="branchcache", _String2="interface") returned -7 [0175.899] _wcsicmp (_String1="branchcache", _String2="ipsec") returned -7 [0175.899] _wcsicmp (_String1="branchcache", _String2="lan") returned -10 [0175.899] _wcsicmp (_String1="branchcache", _String2="mbn") returned -11 [0175.899] _wcsicmp (_String1="branchcache", _String2="namespace") returned -12 [0175.899] _wcsicmp (_String1="branchcache", _String2="netio") returned -12 [0175.899] _wcsicmp (_String1="branchcache", _String2="p2p") returned -14 [0175.899] _wcsicmp (_String1="branchcache", _String2="ras") returned -16 [0175.899] _wcsicmp (_String1="branchcache", _String2="rpc") returned -16 [0175.899] _wcsicmp (_String1="branchcache", _String2="trace") returned -18 [0175.899] _wcsicmp (_String1="branchcache", _String2="wcn") returned -21 [0175.899] _wcsicmp (_String1="branchcache", _String2="wfp") returned -21 [0175.899] _wcsicmp (_String1="branchcache", _String2="winhttp") returned -21 [0175.899] _wcsicmp (_String1="branchcache", _String2="winsock") returned -21 [0175.899] _wcsicmp (_String1="branchcache", _String2="wlan") returned -21 [0175.899] _wcsicmp (_String1="branchcache", _String2="advfirewall") returned 1 [0175.899] _wcsicmp (_String1="branchcache", _String2="bridge") returned -8 [0175.899] GetProcessHeap () returned 0x285fd830000 [0175.899] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x9a0) returned 0x285fd89a470 [0175.900] GetProcessHeap () returned 0x285fd830000 [0175.900] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8936a0) returned 1 [0175.900] RegisterContext () returned 0x0 [0175.900] GetProcessHeap () returned 0x285fd830000 [0175.900] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x70) returned 0x285fd876a20 [0175.900] GetProcessHeap () returned 0x285fd830000 [0175.900] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x0) returned 1 [0175.900] LoadLibraryExW (lpLibFileName="mprmsg.dll", hFile=0x0, dwFlags=0x800) returned 0x7ffc84730000 [0176.007] GetProcAddress (hModule=0x7ffc84730000, lpProcName="MprmsgGetErrorString") returned 0x7ffc84731040 [0176.007] SetConsoleCtrlHandler (HandlerRoutine=0x7ff64cda8410, Add=1) returned 1 [0176.007] SetThreadUILanguage (LangId=0x0) returned 0x409 [0176.194] _wcsicmp (_String1="firewall", _String2="-?") returned 57 [0176.225] _wcsicmp (_String1="firewall", _String2="-h") returned 57 [0176.225] _wcsicmp (_String1="firewall", _String2="?") returned 39 [0176.225] _wcsicmp (_String1="firewall", _String2="/?") returned 55 [0176.225] _wcsicmp (_String1="firewall", _String2="-v") returned 57 [0176.225] _wcsicmp (_String1="firewall", _String2="-a") returned 57 [0176.225] _wcsicmp (_String1="firewall", _String2="-c") returned 57 [0176.225] _wcsicmp (_String1="firewall", _String2="-f") returned 57 [0176.225] _wcsicmp (_String1="firewall", _String2="-r") returned 57 [0176.225] _wcsicmp (_String1="firewall", _String2="-u") returned 57 [0176.225] _wcsicmp (_String1="firewall", _String2="-p") returned 57 [0176.240] GetVersionExW (in: lpVersionInformation=0x9f52f775e0*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x9f52f775e0*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x3ad7, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0176.240] _vsnwprintf (in: _Buffer=0x7ff64cdb7ca0, _BufferCount=0x103, _Format="%d.%d.%d", _ArgList=0x9f52f775a8 | out: _Buffer="10.0.15063") returned 10 [0176.240] _vsnwprintf (in: _Buffer=0x7ff64cdb7eb0, _BufferCount=0x103, _Format="%d", _ArgList=0x9f52f775a8 | out: _Buffer="15063") returned 5 [0176.240] _vsnwprintf (in: _Buffer=0x7ff64cdb80c0, _BufferCount=0x103, _Format="%d", _ArgList=0x9f52f775a8 | out: _Buffer="0") returned 1 [0176.240] _vsnwprintf (in: _Buffer=0x7ff64cdb82d0, _BufferCount=0x103, _Format="%d", _ArgList=0x9f52f775a8 | out: _Buffer="0") returned 1 [0176.241] GetProcessHeap () returned 0x285fd830000 [0176.241] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x18) returned 0x285fd8838e0 [0176.241] GetProcessHeap () returned 0x285fd830000 [0176.241] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x18) returned 0x285fd883380 [0176.241] GetProcessHeap () returned 0x285fd830000 [0176.241] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0xc) returned 0x285fd883480 [0176.241] GetProcessHeap () returned 0x285fd830000 [0176.241] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x18) returned 0x285fd8833c0 [0176.241] GetProcessHeap () returned 0x285fd830000 [0176.241] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0xc) returned 0x285fd883900 [0176.241] wcscpy_s (in: _Destination=0x285fd883900, _SizeInWords=0x6, _Source="netsh" | out: _Destination="netsh") returned 0x0 [0176.241] GetProcessHeap () returned 0x285fd830000 [0176.241] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd883480) returned 1 [0176.241] GetProcessHeap () returned 0x285fd830000 [0176.241] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd883380) returned 1 [0176.241] GetProcessHeap () returned 0x285fd830000 [0176.241] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x18) returned 0x285fd883920 [0176.241] GetProcessHeap () returned 0x285fd830000 [0176.241] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x18) returned 0x285fd883380 [0176.241] GetProcessHeap () returned 0x285fd830000 [0176.241] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x42) returned 0x285fd881fe0 [0176.241] GetProcessHeap () returned 0x285fd830000 [0176.241] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x18) returned 0x285fd883940 [0176.241] GetProcessHeap () returned 0x285fd830000 [0176.241] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x12) returned 0x285fd8839c0 [0176.241] wcscpy_s (in: _Destination=0x285fd8839c0, _SizeInWords=0x9, _Source="firewall" | out: _Destination="firewall") returned 0x0 [0176.241] GetProcessHeap () returned 0x285fd830000 [0176.241] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x18) returned 0x285fd8839e0 [0176.241] GetProcessHeap () returned 0x285fd830000 [0176.241] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x8) returned 0x285fd881790 [0176.241] wcscpy_s (in: _Destination=0x285fd881790, _SizeInWords=0x4, _Source="set" | out: _Destination="set") returned 0x0 [0176.241] GetProcessHeap () returned 0x285fd830000 [0176.241] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x18) returned 0x285fd8833a0 [0176.241] GetProcessHeap () returned 0x285fd830000 [0176.241] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0xe) returned 0x285fd883a00 [0176.242] wcscpy_s (in: _Destination=0x285fd883a00, _SizeInWords=0x7, _Source="opmode" | out: _Destination="opmode") returned 0x0 [0176.242] GetProcessHeap () returned 0x285fd830000 [0176.242] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x18) returned 0x285fd8833e0 [0176.242] GetProcessHeap () returned 0x285fd830000 [0176.242] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0xa) returned 0x285fd883a20 [0176.242] wcscpy_s (in: _Destination=0x285fd883a20, _SizeInWords=0x5, _Source="mode" | out: _Destination="mode") returned 0x0 [0176.242] GetProcessHeap () returned 0x285fd830000 [0176.242] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x18) returned 0x285fd883400 [0176.242] GetProcessHeap () returned 0x285fd830000 [0176.242] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x4) returned 0x285fd8819a0 [0176.242] wcscpy_s (in: _Destination=0x285fd8819a0, _SizeInWords=0x2, _Source="=" | out: _Destination="=") returned 0x0 [0176.242] GetProcessHeap () returned 0x285fd830000 [0176.242] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x18) returned 0x285fd8832c0 [0176.242] GetProcessHeap () returned 0x285fd830000 [0176.242] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd8832e0 [0176.242] wcscpy_s (in: _Destination=0x285fd8832e0, _SizeInWords=0x8, _Source="disable" | out: _Destination="disable") returned 0x0 [0176.242] GetProcessHeap () returned 0x285fd830000 [0176.242] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd881fe0) returned 1 [0176.242] GetProcessHeap () returned 0x285fd830000 [0176.242] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd883380) returned 1 [0176.242] GetProcessHeap () returned 0x285fd830000 [0176.242] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x18) returned 0x285fd8834e0 [0176.242] GetProcessHeap () returned 0x285fd830000 [0176.242] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x12) returned 0x285fd883380 [0176.242] wcscpy_s (in: _Destination=0x285fd883380, _SizeInWords=0x9, _Source="firewall" | out: _Destination="firewall") returned 0x0 [0176.242] GetProcessHeap () returned 0x285fd830000 [0176.242] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8839c0) returned 1 [0176.242] GetProcessHeap () returned 0x285fd830000 [0176.242] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd883940) returned 1 [0176.242] GetProcessHeap () returned 0x285fd830000 [0176.242] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x18) returned 0x285fd883420 [0176.242] GetProcessHeap () returned 0x285fd830000 [0176.242] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x12) returned 0x285fd8839c0 [0176.242] wcscpy_s (in: _Destination=0x285fd8839c0, _SizeInWords=0x9, _Source="firewall" | out: _Destination="firewall") returned 0x0 [0176.243] GetProcessHeap () returned 0x285fd830000 [0176.243] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd883380) returned 1 [0176.243] GetProcessHeap () returned 0x285fd830000 [0176.243] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8834e0) returned 1 [0176.243] GetProcessHeap () returned 0x285fd830000 [0176.243] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x18) returned 0x285fd883940 [0176.243] GetProcessHeap () returned 0x285fd830000 [0176.243] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x8) returned 0x285fd881990 [0176.243] wcscpy_s (in: _Destination=0x285fd881990, _SizeInWords=0x4, _Source="set" | out: _Destination="set") returned 0x0 [0176.243] GetProcessHeap () returned 0x285fd830000 [0176.243] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd881790) returned 1 [0176.243] GetProcessHeap () returned 0x285fd830000 [0176.243] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8839e0) returned 1 [0176.243] GetProcessHeap () returned 0x285fd830000 [0176.243] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x18) returned 0x285fd883480 [0176.243] GetProcessHeap () returned 0x285fd830000 [0176.243] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0xe) returned 0x285fd8834e0 [0176.243] wcscpy_s (in: _Destination=0x285fd8834e0, _SizeInWords=0x7, _Source="opmode" | out: _Destination="opmode") returned 0x0 [0176.243] GetProcessHeap () returned 0x285fd830000 [0176.243] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd883a00) returned 1 [0176.243] GetProcessHeap () returned 0x285fd830000 [0176.243] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8833a0) returned 1 [0176.243] GetProcessHeap () returned 0x285fd830000 [0176.243] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x18) returned 0x285fd8839e0 [0176.243] GetProcessHeap () returned 0x285fd830000 [0176.243] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0xa) returned 0x285fd883500 [0176.243] wcscpy_s (in: _Destination=0x285fd883500, _SizeInWords=0x5, _Source="mode" | out: _Destination="mode") returned 0x0 [0176.243] GetProcessHeap () returned 0x285fd830000 [0176.243] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd883a20) returned 1 [0176.243] GetProcessHeap () returned 0x285fd830000 [0176.243] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8833e0) returned 1 [0176.243] GetProcessHeap () returned 0x285fd830000 [0176.243] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x18) returned 0x285fd883a00 [0176.243] GetProcessHeap () returned 0x285fd830000 [0176.243] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x4) returned 0x285fd8819d0 [0176.243] wcscpy_s (in: _Destination=0x285fd8819d0, _SizeInWords=0x2, _Source="=" | out: _Destination="=") returned 0x0 [0176.244] GetProcessHeap () returned 0x285fd830000 [0176.244] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8819a0) returned 1 [0176.244] GetProcessHeap () returned 0x285fd830000 [0176.244] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd883400) returned 1 [0176.244] GetProcessHeap () returned 0x285fd830000 [0176.244] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x18) returned 0x285fd883a20 [0176.244] GetProcessHeap () returned 0x285fd830000 [0176.244] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd883380 [0176.244] wcscpy_s (in: _Destination=0x285fd883380, _SizeInWords=0x8, _Source="disable" | out: _Destination="disable") returned 0x0 [0176.244] GetProcessHeap () returned 0x285fd830000 [0176.244] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8832e0) returned 1 [0176.244] GetProcessHeap () returned 0x285fd830000 [0176.244] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8832c0) returned 1 [0176.244] GetProcessHeap () returned 0x285fd830000 [0176.244] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x38) returned 0x285fd88f840 [0176.244] GetProcessHeap () returned 0x285fd830000 [0176.244] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0xc) returned 0x285fd8832c0 [0176.244] GetProcessHeap () returned 0x285fd830000 [0176.244] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x12) returned 0x285fd8833e0 [0176.244] GetProcessHeap () returned 0x285fd830000 [0176.244] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x8) returned 0x285fd8818f0 [0176.244] GetProcessHeap () returned 0x285fd830000 [0176.244] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0xe) returned 0x285fd8833a0 [0176.244] GetProcessHeap () returned 0x285fd830000 [0176.244] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0xa) returned 0x285fd8832e0 [0176.244] GetProcessHeap () returned 0x285fd830000 [0176.244] RtlReAllocateHeap (Heap=0x285fd830000, Flags=0x0, Ptr=0x285fd8832e0, Size=0xc) returned 0x285fd883400 [0176.244] GetProcessHeap () returned 0x285fd830000 [0176.244] RtlReAllocateHeap (Heap=0x285fd830000, Flags=0x0, Ptr=0x285fd883400, Size=0x1a) returned 0x285fd890c00 [0176.244] GetProcessHeap () returned 0x285fd830000 [0176.244] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0xc) returned 0x285fd8832e0 [0176.244] GetProcessHeap () returned 0x285fd830000 [0176.245] RtlReAllocateHeap (Heap=0x285fd830000, Flags=0x0, Ptr=0x285fd8832e0, Size=0xe) returned 0x285fd883400 [0176.245] GetProcessHeap () returned 0x285fd830000 [0176.245] RtlReAllocateHeap (Heap=0x285fd830000, Flags=0x0, Ptr=0x285fd883400, Size=0x1e) returned 0x285fd890a20 [0176.245] GetProcessHeap () returned 0x285fd830000 [0176.245] RtlReAllocateHeap (Heap=0x285fd830000, Flags=0x0, Ptr=0x285fd890a20, Size=0x20) returned 0x285fd890c30 [0176.245] GetProcessHeap () returned 0x285fd830000 [0176.245] RtlReAllocateHeap (Heap=0x285fd830000, Flags=0x0, Ptr=0x285fd890c30, Size=0x26) returned 0x285fd890b70 [0176.245] GetProcessHeap () returned 0x285fd830000 [0176.245] RtlReAllocateHeap (Heap=0x285fd830000, Flags=0x0, Ptr=0x285fd890b70, Size=0x28) returned 0x285fd890bd0 [0176.245] GetProcessHeap () returned 0x285fd830000 [0176.245] RtlReAllocateHeap (Heap=0x285fd830000, Flags=0x0, Ptr=0x285fd890bd0, Size=0x34) returned 0x285fd88ef00 [0176.245] GetProcessHeap () returned 0x285fd830000 [0176.245] RtlReAllocateHeap (Heap=0x285fd830000, Flags=0x0, Ptr=0x285fd88ef00, Size=0x36) returned 0x285fd88f2c0 [0176.245] GetProcessHeap () returned 0x285fd830000 [0176.245] RtlReAllocateHeap (Heap=0x285fd830000, Flags=0x0, Ptr=0x285fd88f2c0, Size=0x4e) returned 0x285fd8862b0 [0176.245] GetProcessHeap () returned 0x285fd830000 [0176.245] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8862b0) returned 1 [0176.245] lstrcmpiW (lpString1="netsh", lpString2="namespace") returned 1 [0176.246] lstrcmpiW (lpString1="netsh", lpString2="branchcache") returned 1 [0176.246] lstrcmpiW (lpString1="netsh", lpString2="advfirewall") returned 1 [0176.246] lstrcmpiW (lpString1="netsh", lpString2="firewall") returned 1 [0176.246] lstrcmpiW (lpString1="netsh", lpString2="interface") returned 1 [0176.246] lstrcmpiW (lpString1="netsh", lpString2="dhcp") returned 1 [0176.246] lstrcmpiW (lpString1="netsh", lpString2="dnsclient") returned 1 [0176.246] lstrcmpiW (lpString1="netsh", lpString2="routing") returned -1 [0176.246] lstrcmpiW (lpString1="netsh", lpString2="ip") returned 1 [0176.246] lstrcmpiW (lpString1="netsh", lpString2="ipv6") returned 1 [0176.246] lstrcmpiW (lpString1="netsh", lpString2="aaaa") returned 1 [0176.246] lstrcmpiW (lpString1="netsh", lpString2="ras") returned -1 [0176.246] _wcsnicmp (_String1="firewall", _String2="dump", _MaxCount=0x8) returned 2 [0176.246] _wcsnicmp (_String1="firewall", _String2="help", _MaxCount=0x8) returned -2 [0176.246] _wcsnicmp (_String1="firewall", _String2="?", _MaxCount=0x8) returned 39 [0176.246] _wcsnicmp (_String1="firewall", _String2="exec", _MaxCount=0x8) returned 1 [0176.246] _wcsnicmp (_String1="firewall", _String2="advfirew", _MaxCount=0x8) returned 5 [0176.246] _wcsnicmp (_String1="firewall", _String2="branchca", _MaxCount=0x8) returned 4 [0176.246] _wcsnicmp (_String1="firewall", _String2="bridge", _MaxCount=0x8) returned 4 [0176.246] _wcsnicmp (_String1="firewall", _String2="dhcpclie", _MaxCount=0x8) returned 2 [0176.246] _wcsnicmp (_String1="firewall", _String2="dnsclien", _MaxCount=0x8) returned 2 [0176.246] _wcsnicmp (_String1="firewall", _String2="firewall", _MaxCount=0x8) returned 0 [0176.246] lstrcmpiW (lpString1="firewall", lpString2="namespace") returned -1 [0176.246] lstrcmpiW (lpString1="firewall", lpString2="branchcache") returned 1 [0176.246] lstrcmpiW (lpString1="firewall", lpString2="advfirewall") returned 1 [0176.246] lstrcmpiW (lpString1="firewall", lpString2="firewall") returned 0 [0176.246] GetProcessHeap () returned 0x285fd830000 [0176.247] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x18) returned 0x285fd8832e0 [0176.247] GetProcessHeap () returned 0x285fd830000 [0176.247] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x18) returned 0x285fd883400 [0176.247] GetProcessHeap () returned 0x285fd830000 [0176.247] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x4e) returned 0x285fd886790 [0176.247] GetProcessHeap () returned 0x285fd830000 [0176.247] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x18) returned 0x285fd840cb0 [0176.247] GetProcessHeap () returned 0x285fd830000 [0176.247] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0xc) returned 0x285fd89b920 [0176.247] wcscpy_s (in: _Destination=0x285fd89b920, _SizeInWords=0x6, _Source="netsh" | out: _Destination="netsh") returned 0x0 [0176.247] GetProcessHeap () returned 0x285fd830000 [0176.247] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x18) returned 0x285fd89bb40 [0176.247] GetProcessHeap () returned 0x285fd830000 [0176.247] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x12) returned 0x285fd89bc80 [0176.247] wcscpy_s (in: _Destination=0x285fd89bc80, _SizeInWords=0x9, _Source="firewall" | out: _Destination="firewall") returned 0x0 [0176.247] GetProcessHeap () returned 0x285fd830000 [0176.247] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x18) returned 0x285fd89bb20 [0176.247] GetProcessHeap () returned 0x285fd830000 [0176.247] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x8) returned 0x285fd8817f0 [0176.247] wcscpy_s (in: _Destination=0x285fd8817f0, _SizeInWords=0x4, _Source="set" | out: _Destination="set") returned 0x0 [0176.247] GetProcessHeap () returned 0x285fd830000 [0176.247] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x18) returned 0x285fd89b7c0 [0176.247] GetProcessHeap () returned 0x285fd830000 [0176.247] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0xe) returned 0x285fd89bbc0 [0176.247] wcscpy_s (in: _Destination=0x285fd89bbc0, _SizeInWords=0x7, _Source="opmode" | out: _Destination="opmode") returned 0x0 [0176.247] GetProcessHeap () returned 0x285fd830000 [0176.247] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x18) returned 0x285fd89bc40 [0176.247] GetProcessHeap () returned 0x285fd830000 [0176.247] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0xa) returned 0x285fd89b9c0 [0176.247] wcscpy_s (in: _Destination=0x285fd89b9c0, _SizeInWords=0x5, _Source="mode" | out: _Destination="mode") returned 0x0 [0176.247] GetProcessHeap () returned 0x285fd830000 [0176.247] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x18) returned 0x285fd89bb00 [0176.247] GetProcessHeap () returned 0x285fd830000 [0176.247] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x4) returned 0x285fd881900 [0176.247] wcscpy_s (in: _Destination=0x285fd881900, _SizeInWords=0x2, _Source="=" | out: _Destination="=") returned 0x0 [0176.247] GetProcessHeap () returned 0x285fd830000 [0176.247] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x18) returned 0x285fd89b720 [0176.248] GetProcessHeap () returned 0x285fd830000 [0176.248] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x10) returned 0x285fd89baa0 [0176.248] wcscpy_s (in: _Destination=0x285fd89baa0, _SizeInWords=0x8, _Source="disable" | out: _Destination="disable") returned 0x0 [0176.248] GetProcessHeap () returned 0x285fd830000 [0176.248] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd886790) returned 1 [0176.248] GetProcessHeap () returned 0x285fd830000 [0176.248] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd883400) returned 1 [0176.248] GetProcessHeap () returned 0x285fd830000 [0176.248] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd89bc80) returned 1 [0176.248] GetProcessHeap () returned 0x285fd830000 [0176.248] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x12) returned 0x285fd89b780 [0176.248] lstrcmpiW (lpString1="firewall", lpString2="routing") returned -1 [0176.248] lstrcmpiW (lpString1="firewall", lpString2="ip") returned -1 [0176.248] lstrcmpiW (lpString1="firewall", lpString2="ipv6") returned -1 [0176.248] lstrcmpiW (lpString1="firewall", lpString2="aaaa") returned 1 [0176.248] lstrcmpiW (lpString1="firewall", lpString2="ras") returned -1 [0176.248] _wcsnicmp (_String1="set", _String2="dum", _MaxCount=0x3) returned 15 [0176.248] _wcsnicmp (_String1="set", _String2="hel", _MaxCount=0x3) returned 11 [0176.248] _wcsnicmp (_String1="set", _String2="?", _MaxCount=0x3) returned 52 [0176.248] _wcsnicmp (_String1="set", _String2="res", _MaxCount=0x3) returned 1 [0176.248] _wcsnicmp (_String1="set", _String2="add", _MaxCount=0x3) returned 18 [0176.248] _wcsnicmp (_String1="set", _String2="del", _MaxCount=0x3) returned 15 [0176.248] _wcsnicmp (_String1="set", _String2="set", _MaxCount=0x3) returned 0 [0176.248] _wcsnicmp (_String1="opmode", _String2="help", _MaxCount=0x6) returned 7 [0176.248] _wcsnicmp (_String1="opmode", _String2="?", _MaxCount=0x6) returned 48 [0176.248] wcstok (in: _String="allowedprogram", _Delimiter=" ", _Context=0x7f5d31dc3498 | out: _String="allowedprogram", _Context=0x7f5d31dc3498) returned="allowedprogram" [0176.248] _wcsnicmp (_String1="opmode", _String2="allowe", _MaxCount=0x6) returned 14 [0176.248] wcstok (in: _String="icmpsetting", _Delimiter=" ", _Context=0x7f5d31dc34d0 | out: _String="icmpsetting", _Context=0x7f5d31dc34d0) returned="icmpsetting" [0176.248] _wcsnicmp (_String1="opmode", _String2="icmpse", _MaxCount=0x6) returned 6 [0176.248] wcstok (in: _String="logging", _Delimiter=" ", _Context=0x7f5d31dc34e8 | out: _String="logging", _Context=0x7f5d31dc34e8) returned="logging" [0176.248] _wcsnicmp (_String1="opmode", _String2="loggin", _MaxCount=0x6) returned 3 [0176.248] wcstok (in: _String="multicastbroadcastresponse", _Delimiter=" ", _Context=0x7f5d31dc34f8 | out: _String="multicastbroadcastresponse", _Context=0x7f5d31dc34f8) returned="multicastbroadcastresponse" [0176.249] _wcsnicmp (_String1="opmode", _String2="multic", _MaxCount=0x6) returned 2 [0176.249] wcstok (in: _String="notifications", _Delimiter=" ", _Context=0x7f5d31dc3530 | out: _String="notifications", _Context=0x7f5d31dc3530) returned="notifications" [0176.249] _wcsnicmp (_String1="opmode", _String2="notifi", _MaxCount=0x6) returned 1 [0176.249] wcstok (in: _String="opmode", _Delimiter=" ", _Context=0x7f5d31dc3550 | out: _String="opmode", _Context=0x7f5d31dc3550) returned="opmode" [0176.249] _wcsnicmp (_String1="opmode", _String2="opmode", _MaxCount=0x6) returned 0 [0176.249] wcstok (in: _String=0x0, _Delimiter=" ", _Context=0x65 | out: _String=0x0, _Context=0x65) returned 0x0 [0176.249] _wcsnicmp (_String1="mode=disable", _String2="help", _MaxCount=0xc) returned 5 [0176.249] _wcsnicmp (_String1="mode=disable", _String2="?", _MaxCount=0xc) returned 46 [0176.249] lstrcmpiW (lpString1="firewall", lpString2="netsh") returned -1 [0176.249] LdrStandardizeSystemPath () returned 0x7ff64cdabfc0 [0176.249] MatchTagsInCmdLine () returned 0x0 [0176.249] wcspbrk (_String="mode=disable", _Control="=") returned="=disable" [0176.249] GetProcessHeap () returned 0x285fd830000 [0176.249] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x1a) returned 0x285fd890ba0 [0176.249] wcscpy_s (in: _Destination=0x285fd890ba0, _SizeInWords=0xd, _Source="mode=disable" | out: _Destination="mode=disable") returned 0x0 [0176.249] wcstok (in: _String="mode=disable", _Delimiter="=", _Context=0x285fd890c1a*=0x0 | out: _String="mode", _Context=0x285fd890c1a*=0x0) returned="mode" [0176.249] _wcsnicmp (_String1="mode", _String2="mode", _MaxCount=0x4) returned 0 [0176.249] wcscpy_s (in: _Destination=0x285fd890c00, _SizeInWords=0xd, _Source="disable" | out: _Destination="disable") returned 0x0 [0176.249] GetProcessHeap () returned 0x285fd830000 [0176.249] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd890ba0) returned 1 [0176.249] MatchEnumTag () returned 0x0 [0176.249] _wcsnicmp (_String1="disable", _String2="enable", _MaxCount=0x7) returned -1 [0176.249] _wcsnicmp (_String1="disable", _String2="disable", _MaxCount=0x7) returned 0 [0179.738] PrintError () returned 0x132 [0179.738] LoadStringW (in: hInstance=0x7ffc84d30000, uID=0x119a, lpBuffer=0x9f52f6f180, cchBufferMax=16384 | out: lpBuffer="\nIMPORTANT: Command executed successfully.\nHowever, \"netsh firewall\" is deprecated;\nuse \"netsh advfirewall firewall\" instead.\nFor more information on using \"netsh advfirewall firewall\" commands\ninstead of \"netsh firewall\", see KB article 947709\nat https://go.microsoft.com/fwlink/?linkid=121488 .\n\n") returned 0x12a [0179.738] FormatMessageW (in: dwFlags=0x500, lpSource=0x9f52f6f180, dwMessageId=0x0, dwLanguageId=0x0, lpBuffer=0x9f52f6f160, nSize=0x0, Arguments=0x9f52f6f170 | out: lpBuffer="쌠ﾄʅ") returned 0x132 [0179.738] GetStdHandle (nStdHandle=0xfffffff5) returned 0x224 [0179.738] GetConsoleOutputCP () returned 0x1b5 [0180.060] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\nIMPORTANT: Command executed successfully.\r\nHowever, \"netsh firewall\" is deprecated;\r\nuse \"netsh advfirewall firewall\" instead.\r\nFor more information on using \"netsh advfirewall firewall\" commands\r\ninstead of \"netsh firewall\", see KB article 947709\r\nat https://go.microsoft.com/fwlink/?linkid=121488 .\r\n\r\n", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 307 [0180.060] GetProcessHeap () returned 0x285fd830000 [0180.060] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x133) returned 0x285fd848ff0 [0180.060] GetConsoleOutputCP () returned 0x1b5 [0180.261] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\nIMPORTANT: Command executed successfully.\r\nHowever, \"netsh firewall\" is deprecated;\r\nuse \"netsh advfirewall firewall\" instead.\r\nFor more information on using \"netsh advfirewall firewall\" commands\r\ninstead of \"netsh firewall\", see KB article 947709\r\nat https://go.microsoft.com/fwlink/?linkid=121488 .\r\n\r\n", cchWideChar=-1, lpMultiByteStr=0x285fd848ff0, cbMultiByte=307, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nIMPORTANT: Command executed successfully.\r\nHowever, \"netsh firewall\" is deprecated;\r\nuse \"netsh advfirewall firewall\" instead.\r\nFor more information on using \"netsh advfirewall firewall\" commands\r\ninstead of \"netsh firewall\", see KB article 947709\r\nat https://go.microsoft.com/fwlink/?linkid=121488 .\r\n\r\n", lpUsedDefaultChar=0x0) returned 307 [0180.261] WriteFile (in: hFile=0x224, lpBuffer=0x285fd848ff0*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x9f52f6f130, lpOverlapped=0x0 | out: lpBuffer=0x285fd848ff0*, lpNumberOfBytesWritten=0x9f52f6f130*=0x132, lpOverlapped=0x0) returned 1 [0180.261] GetProcessHeap () returned 0x285fd830000 [0180.261] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd848ff0) returned 1 [0180.261] LocalFree (hMem=0x285ff84c320) returned 0x0 [0180.261] LoadStringW (in: hInstance=0x0, uID=0x2, lpBuffer=0x9f52f6f270, cchBufferMax=16384 | out: lpBuffer="Ok.\n") returned 0x4 [0180.261] FormatMessageW (in: dwFlags=0x500, lpSource=0x9f52f6f270, dwMessageId=0x0, dwLanguageId=0x0, lpBuffer=0x9f52f6f250, nSize=0x0, Arguments=0x9f52f6f260 | out: lpBuffer="叐ﶉʅ") returned 0x5 [0180.261] GetStdHandle (nStdHandle=0xfffffff5) returned 0x224 [0180.261] GetConsoleOutputCP () returned 0x1b5 [0180.509] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Ok.\r\n", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0180.526] GetProcessHeap () returned 0x285fd830000 [0180.526] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x6) returned 0x285fd881a30 [0180.526] GetConsoleOutputCP () returned 0x1b5 [0180.809] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Ok.\r\n", cchWideChar=-1, lpMultiByteStr=0x285fd881a30, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ok.\r\n", lpUsedDefaultChar=0x0) returned 6 [0180.809] WriteFile (in: hFile=0x224, lpBuffer=0x285fd881a30*, nNumberOfBytesToWrite=0x5, lpNumberOfBytesWritten=0x9f52f6f200, lpOverlapped=0x0 | out: lpBuffer=0x285fd881a30*, lpNumberOfBytesWritten=0x9f52f6f200*=0x5, lpOverlapped=0x0) returned 1 [0180.809] GetProcessHeap () returned 0x285fd830000 [0180.809] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd881a30) returned 1 [0180.809] LocalFree (hMem=0x285fd8953d0) returned 0x0 [0180.809] FormatMessageW (in: dwFlags=0x500, lpSource=0x7ff64cdab80c, dwMessageId=0x0, dwLanguageId=0x0, lpBuffer=0x9f52f77280, nSize=0x0, Arguments=0x9f52f77290 | out: lpBuffer="믠ﶉʅ") returned 0x2 [0180.809] GetStdHandle (nStdHandle=0xfffffff5) returned 0x224 [0180.809] GetConsoleOutputCP () returned 0x1b5 [0181.135] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0181.136] GetProcessHeap () returned 0x285fd830000 [0181.136] RtlAllocateHeap (HeapHandle=0x285fd830000, Flags=0x0, Size=0x3) returned 0x285fd881850 [0181.136] GetConsoleOutputCP () returned 0x1b5 [0181.523] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x285fd881850, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3 [0181.523] WriteFile (in: hFile=0x224, lpBuffer=0x285fd881850*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x9f52f77230, lpOverlapped=0x0 | out: lpBuffer=0x285fd881850*, lpNumberOfBytesWritten=0x9f52f77230*=0x2, lpOverlapped=0x0) returned 1 [0181.524] GetProcessHeap () returned 0x285fd830000 [0181.524] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd881850) returned 1 [0181.524] LocalFree (hMem=0x285fd89bbe0) returned 0x0 [0181.524] GetProcessHeap () returned 0x285fd830000 [0181.524] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8832c0) returned 1 [0181.524] GetProcessHeap () returned 0x285fd830000 [0181.524] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8833e0) returned 1 [0181.524] GetProcessHeap () returned 0x285fd830000 [0181.524] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8818f0) returned 1 [0181.524] GetProcessHeap () returned 0x285fd830000 [0181.524] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8833a0) returned 1 [0181.524] GetProcessHeap () returned 0x285fd830000 [0181.524] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd890c00) returned 1 [0181.524] GetProcessHeap () returned 0x285fd830000 [0181.524] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd88f840) returned 1 [0181.524] GetProcessHeap () returned 0x285fd830000 [0181.524] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8839c0) returned 1 [0181.524] GetProcessHeap () returned 0x285fd830000 [0181.524] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd883420) returned 1 [0181.524] GetProcessHeap () returned 0x285fd830000 [0181.524] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd881990) returned 1 [0181.525] GetProcessHeap () returned 0x285fd830000 [0181.525] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd883940) returned 1 [0181.525] GetProcessHeap () returned 0x285fd830000 [0181.525] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8834e0) returned 1 [0181.525] GetProcessHeap () returned 0x285fd830000 [0181.525] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd883480) returned 1 [0181.525] GetProcessHeap () returned 0x285fd830000 [0181.525] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd883500) returned 1 [0181.525] GetProcessHeap () returned 0x285fd830000 [0181.525] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8839e0) returned 1 [0181.525] GetProcessHeap () returned 0x285fd830000 [0181.525] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8819d0) returned 1 [0181.525] GetProcessHeap () returned 0x285fd830000 [0181.525] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd883a00) returned 1 [0181.525] GetProcessHeap () returned 0x285fd830000 [0181.525] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd883380) returned 1 [0181.525] GetProcessHeap () returned 0x285fd830000 [0181.525] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd883a20) returned 1 [0181.525] GetProcessHeap () returned 0x285fd830000 [0181.525] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd883920) returned 1 [0181.525] GetProcessHeap () returned 0x285fd830000 [0181.525] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd883900) returned 1 [0181.525] GetProcessHeap () returned 0x285fd830000 [0181.525] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8833c0) returned 1 [0181.525] GetProcessHeap () returned 0x285fd830000 [0181.525] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8838e0) returned 1 [0181.794] GetProcessHeap () returned 0x285fd830000 [0181.794] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8801a0) returned 1 [0181.794] FreeLibrary (hLibModule=0x7ff64cda0000) returned 1 [0181.794] FreeLibrary (hLibModule=0x7ffc8a6d0000) returned 1 [0181.796] FreeLibrary (hLibModule=0x7ffc86390000) returned 1 [0181.812] free (_Block=0x285fda01610) [0181.813] LocalFree (hMem=0x285fd852db0) returned 0x0 [0181.813] LocalFree (hMem=0x285fd850e30) returned 0x0 [0181.813] LocalFree (hMem=0x285fd835390) returned 0x0 [0181.813] LocalFree (hMem=0x285fd849690) returned 0x0 [0181.813] LocalAlloc (uFlags=0x40, uBytes=0x340) returned 0x285fd852db0 [0181.813] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x285ff8658c0 [0181.813] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x285ff865c80 [0181.813] free (_Block=0x285fda06f50) [0181.813] free (_Block=0x0) [0181.813] free (_Block=0x285fda06f30) [0181.813] free (_Block=0x285fda06f70) [0181.813] free (_Block=0x285fda015f0) [0181.814] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x285fd891f60 [0181.815] LocalFree (hMem=0x285fd891f60) returned 0x0 [0181.815] LocalFree (hMem=0x285fd853100) returned 0x0 [0181.815] LocalFree (hMem=0x285fd852db0) returned 0x0 [0181.815] free (_Block=0x285fda05530) [0181.816] GetModuleHandleA (lpModuleName="MSVCRT.DLL") returned 0x7ffc909d0000 [0181.816] FreeLibrary (hLibModule=0x7ffc909d0000) returned 1 [0181.816] LocalFree (hMem=0x285ff865c80) returned 0x0 [0181.816] LocalFree (hMem=0x285ff8658c0) returned 0x0 [0181.816] GlobalHandle (pMem=0x285fd852b90) returned 0x285ff1b0008 [0181.816] GlobalUnlock (hMem=0x285ff1b0008) returned 0 [0181.821] FreeLibrary (hLibModule=0x7ffc84b20000) returned 1 [0181.823] FreeLibrary (hLibModule=0x7ffc896e0000) returned 1 [0181.825] FreeLibrary (hLibModule=0x7ffc895f0000) returned 1 [0181.964] FreeLibrary (hLibModule=0x7ffc84d30000) returned 1 [0181.966] FreeLibrary (hLibModule=0x7ffc895e0000) returned 1 [0181.970] FreeLibrary (hLibModule=0x7ffc84ae0000) returned 1 [0181.974] FreeLibrary (hLibModule=0x7ffc7a330000) returned 1 [0182.165] FreeLibrary (hLibModule=0x7ffc86380000) returned 1 [0182.166] FreeLibrary (hLibModule=0x7ffc7a530000) returned 1 [0182.177] FreeLibrary (hLibModule=0x7ffc76920000) returned 1 [0182.179] FreeLibrary (hLibModule=0x7ffc7a290000) returned 1 [0182.184] FreeLibrary (hLibModule=0x7ffc84ed0000) returned 1 [0182.187] FreeLibrary (hLibModule=0x7ffc84ac0000) returned 1 [0182.188] FreeLibrary (hLibModule=0x7ffc84d20000) returned 1 [0182.188] FreeLibrary (hLibModule=0x7ffc740b0000) returned 1 [0182.259] FreeLibrary (hLibModule=0x7ffc84ab0000) returned 1 [0182.262] FreeLibrary (hLibModule=0x7ffc832f0000) returned 1 [0182.267] FreeLibrary (hLibModule=0x7ffc731f0000) returned 1 [0182.491] GetProcessHeap () returned 0x285fd830000 [0182.491] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd882f00) returned 1 [0182.491] GetProcessHeap () returned 0x285fd830000 [0182.491] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83eab0) returned 1 [0182.491] GetProcessHeap () returned 0x285fd830000 [0182.491] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83e6d0) returned 1 [0182.491] GetProcessHeap () returned 0x285fd830000 [0182.491] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83e530) returned 1 [0182.491] GetProcessHeap () returned 0x285fd830000 [0182.491] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83ea90) returned 1 [0182.491] GetProcessHeap () returned 0x285fd830000 [0182.491] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83e490) returned 1 [0182.491] GetProcessHeap () returned 0x285fd830000 [0182.491] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83e870) returned 1 [0182.491] GetProcessHeap () returned 0x285fd830000 [0182.491] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83e470) returned 1 [0182.491] GetProcessHeap () returned 0x285fd830000 [0182.491] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83eaf0) returned 1 [0182.491] GetProcessHeap () returned 0x285fd830000 [0182.491] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83e4d0) returned 1 [0182.491] GetProcessHeap () returned 0x285fd830000 [0182.491] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83ebb0) returned 1 [0182.491] GetProcessHeap () returned 0x285fd830000 [0182.491] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83e890) returned 1 [0182.491] GetProcessHeap () returned 0x285fd830000 [0182.491] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83e970) returned 1 [0182.491] GetProcessHeap () returned 0x285fd830000 [0182.492] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83e5f0) returned 1 [0182.492] GetProcessHeap () returned 0x285fd830000 [0182.492] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83e710) returned 1 [0182.492] GetProcessHeap () returned 0x285fd830000 [0182.492] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83e9d0) returned 1 [0182.492] GetProcessHeap () returned 0x285fd830000 [0182.492] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83e5b0) returned 1 [0182.492] GetProcessHeap () returned 0x285fd830000 [0182.492] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83e7d0) returned 1 [0182.492] GetProcessHeap () returned 0x285fd830000 [0182.492] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83e950) returned 1 [0182.492] GetProcessHeap () returned 0x285fd830000 [0182.492] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83e6f0) returned 1 [0182.492] GetProcessHeap () returned 0x285fd830000 [0182.492] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83eb10) returned 1 [0182.492] GetProcessHeap () returned 0x285fd830000 [0182.492] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83eb30) returned 1 [0182.492] GetProcessHeap () returned 0x285fd830000 [0182.492] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83e610) returned 1 [0182.492] GetProcessHeap () returned 0x285fd830000 [0182.492] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83ebd0) returned 1 [0182.492] GetProcessHeap () returned 0x285fd830000 [0182.492] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83e570) returned 1 [0182.492] GetProcessHeap () returned 0x285fd830000 [0182.492] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83e730) returned 1 [0182.492] GetProcessHeap () returned 0x285fd830000 [0182.492] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83e5d0) returned 1 [0182.492] GetProcessHeap () returned 0x285fd830000 [0182.492] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83e750) returned 1 [0182.492] GetProcessHeap () returned 0x285fd830000 [0182.492] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83e7f0) returned 1 [0182.492] GetProcessHeap () returned 0x285fd830000 [0182.492] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83eb50) returned 1 [0182.492] GetProcessHeap () returned 0x285fd830000 [0182.492] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83e590) returned 1 [0182.492] GetProcessHeap () returned 0x285fd830000 [0182.492] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83eb70) returned 1 [0182.492] GetProcessHeap () returned 0x285fd830000 [0182.492] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83e450) returned 1 [0182.493] GetProcessHeap () returned 0x285fd830000 [0182.493] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83e8b0) returned 1 [0182.493] GetProcessHeap () returned 0x285fd830000 [0182.493] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83eb90) returned 1 [0182.493] GetProcessHeap () returned 0x285fd830000 [0182.493] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83e4b0) returned 1 [0182.493] GetProcessHeap () returned 0x285fd830000 [0182.493] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83e4f0) returned 1 [0182.493] GetProcessHeap () returned 0x285fd830000 [0182.493] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83ea50) returned 1 [0182.493] GetProcessHeap () returned 0x285fd830000 [0182.493] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83e630) returned 1 [0182.493] GetProcessHeap () returned 0x285fd830000 [0182.493] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83e510) returned 1 [0182.493] GetProcessHeap () returned 0x285fd830000 [0182.493] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83e550) returned 1 [0182.493] GetProcessHeap () returned 0x285fd830000 [0182.493] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83e8d0) returned 1 [0182.493] GetProcessHeap () returned 0x285fd830000 [0182.493] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83e650) returned 1 [0182.493] GetProcessHeap () returned 0x285fd830000 [0182.493] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83e670) returned 1 [0182.493] GetProcessHeap () returned 0x285fd830000 [0182.493] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83e770) returned 1 [0182.493] GetProcessHeap () returned 0x285fd830000 [0182.493] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83e690) returned 1 [0182.493] GetProcessHeap () returned 0x285fd830000 [0182.493] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83e6b0) returned 1 [0182.493] GetProcessHeap () returned 0x285fd830000 [0182.493] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83e850) returned 1 [0182.493] GetProcessHeap () returned 0x285fd830000 [0182.493] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83e810) returned 1 [0182.493] GetProcessHeap () returned 0x285fd830000 [0182.493] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83e9f0) returned 1 [0182.493] GetProcessHeap () returned 0x285fd830000 [0182.493] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83e790) returned 1 [0182.493] GetProcessHeap () returned 0x285fd830000 [0182.493] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83e8f0) returned 1 [0182.493] GetProcessHeap () returned 0x285fd830000 [0182.494] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83e830) returned 1 [0182.494] GetProcessHeap () returned 0x285fd830000 [0182.494] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83e7b0) returned 1 [0182.494] GetProcessHeap () returned 0x285fd830000 [0182.494] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83e930) returned 1 [0182.494] GetProcessHeap () returned 0x285fd830000 [0182.494] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83e910) returned 1 [0182.494] GetProcessHeap () returned 0x285fd830000 [0182.494] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83e990) returned 1 [0182.494] GetProcessHeap () returned 0x285fd830000 [0182.494] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83e9b0) returned 1 [0182.494] GetProcessHeap () returned 0x285fd830000 [0182.494] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83ea10) returned 1 [0182.494] GetProcessHeap () returned 0x285fd830000 [0182.494] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83ea30) returned 1 [0182.494] GetProcessHeap () returned 0x285fd830000 [0182.494] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83ea70) returned 1 [0182.494] GetProcessHeap () returned 0x285fd830000 [0182.494] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83ead0) returned 1 [0182.494] GetProcessHeap () returned 0x285fd830000 [0182.494] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83fab0) returned 1 [0182.494] GetProcessHeap () returned 0x285fd830000 [0182.494] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83fe50) returned 1 [0182.494] GetProcessHeap () returned 0x285fd830000 [0182.494] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83fb70) returned 1 [0182.494] GetProcessHeap () returned 0x285fd830000 [0182.494] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83f990) returned 1 [0182.494] GetProcessHeap () returned 0x285fd830000 [0182.494] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83fa30) returned 1 [0182.494] GetProcessHeap () returned 0x285fd830000 [0182.494] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83f9d0) returned 1 [0182.494] GetProcessHeap () returned 0x285fd830000 [0182.494] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83fef0) returned 1 [0182.494] GetProcessHeap () returned 0x285fd830000 [0182.494] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83f890) returned 1 [0182.494] GetProcessHeap () returned 0x285fd830000 [0182.494] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83f850) returned 1 [0182.494] GetProcessHeap () returned 0x285fd830000 [0182.494] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83ff30) returned 1 [0182.495] GetProcessHeap () returned 0x285fd830000 [0182.495] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83ff10) returned 1 [0182.495] GetProcessHeap () returned 0x285fd830000 [0182.495] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83f950) returned 1 [0182.495] GetProcessHeap () returned 0x285fd830000 [0182.495] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83fc50) returned 1 [0182.495] GetProcessHeap () returned 0x285fd830000 [0182.495] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83fcf0) returned 1 [0182.495] GetProcessHeap () returned 0x285fd830000 [0182.495] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83fb10) returned 1 [0182.495] GetProcessHeap () returned 0x285fd830000 [0182.495] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83fa10) returned 1 [0182.495] GetProcessHeap () returned 0x285fd830000 [0182.495] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83f870) returned 1 [0182.495] GetProcessHeap () returned 0x285fd830000 [0182.495] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83fd30) returned 1 [0182.495] GetProcessHeap () returned 0x285fd830000 [0182.495] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83fc90) returned 1 [0182.495] GetProcessHeap () returned 0x285fd830000 [0182.495] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83f930) returned 1 [0182.495] GetProcessHeap () returned 0x285fd830000 [0182.495] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83f9b0) returned 1 [0182.495] GetProcessHeap () returned 0x285fd830000 [0182.495] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83fed0) returned 1 [0182.495] GetProcessHeap () returned 0x285fd830000 [0182.495] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83fe70) returned 1 [0182.495] GetProcessHeap () returned 0x285fd830000 [0182.495] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83fc70) returned 1 [0182.495] GetProcessHeap () returned 0x285fd830000 [0182.495] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83fcb0) returned 1 [0182.495] GetProcessHeap () returned 0x285fd830000 [0182.495] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83fdf0) returned 1 [0182.495] GetProcessHeap () returned 0x285fd830000 [0182.495] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83f8d0) returned 1 [0182.495] GetProcessHeap () returned 0x285fd830000 [0182.495] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83f970) returned 1 [0182.495] GetProcessHeap () returned 0x285fd830000 [0182.495] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83faf0) returned 1 [0182.495] GetProcessHeap () returned 0x285fd830000 [0182.495] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83ffb0) returned 1 [0182.496] GetProcessHeap () returned 0x285fd830000 [0182.496] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83fbf0) returned 1 [0182.496] GetProcessHeap () returned 0x285fd830000 [0182.496] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83fb30) returned 1 [0182.496] GetProcessHeap () returned 0x285fd830000 [0182.496] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83fc10) returned 1 [0182.496] GetProcessHeap () returned 0x285fd830000 [0182.496] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83ffd0) returned 1 [0182.496] GetProcessHeap () returned 0x285fd830000 [0182.496] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83fad0) returned 1 [0182.496] GetProcessHeap () returned 0x285fd830000 [0182.496] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83fb50) returned 1 [0182.496] GetProcessHeap () returned 0x285fd830000 [0182.496] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83f8b0) returned 1 [0182.496] GetProcessHeap () returned 0x285fd830000 [0182.496] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83ff50) returned 1 [0182.496] GetProcessHeap () returned 0x285fd830000 [0182.496] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83fc30) returned 1 [0182.496] GetProcessHeap () returned 0x285fd830000 [0182.496] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83fe10) returned 1 [0182.496] GetProcessHeap () returned 0x285fd830000 [0182.496] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83fa90) returned 1 [0182.496] GetProcessHeap () returned 0x285fd830000 [0182.496] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83f8f0) returned 1 [0182.496] GetProcessHeap () returned 0x285fd830000 [0182.496] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83fe30) returned 1 [0182.496] GetProcessHeap () returned 0x285fd830000 [0182.496] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83fb90) returned 1 [0182.496] GetProcessHeap () returned 0x285fd830000 [0182.496] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83ff70) returned 1 [0182.496] GetProcessHeap () returned 0x285fd830000 [0182.496] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83fbb0) returned 1 [0182.496] GetProcessHeap () returned 0x285fd830000 [0182.496] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83fd50) returned 1 [0182.496] GetProcessHeap () returned 0x285fd830000 [0182.496] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83ff90) returned 1 [0182.496] GetProcessHeap () returned 0x285fd830000 [0182.496] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83f910) returned 1 [0182.496] GetProcessHeap () returned 0x285fd830000 [0182.496] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83fdb0) returned 1 [0182.497] GetProcessHeap () returned 0x285fd830000 [0182.497] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83fd10) returned 1 [0182.497] GetProcessHeap () returned 0x285fd830000 [0182.497] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83fd70) returned 1 [0182.497] GetProcessHeap () returned 0x285fd830000 [0182.497] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83fbd0) returned 1 [0182.497] GetProcessHeap () returned 0x285fd830000 [0182.497] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83f9f0) returned 1 [0182.497] GetProcessHeap () returned 0x285fd830000 [0182.497] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83fd90) returned 1 [0182.497] GetProcessHeap () returned 0x285fd830000 [0182.497] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83fcd0) returned 1 [0182.497] GetProcessHeap () returned 0x285fd830000 [0182.497] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83fdd0) returned 1 [0182.497] GetProcessHeap () returned 0x285fd830000 [0182.497] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83fe90) returned 1 [0182.497] GetProcessHeap () returned 0x285fd830000 [0182.497] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83fa50) returned 1 [0182.497] GetProcessHeap () returned 0x285fd830000 [0182.497] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83feb0) returned 1 [0182.497] GetProcessHeap () returned 0x285fd830000 [0182.497] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd83fa70) returned 1 [0182.497] GetProcessHeap () returned 0x285fd830000 [0182.497] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840060) returned 1 [0182.497] GetProcessHeap () returned 0x285fd830000 [0182.497] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8402a0) returned 1 [0182.497] GetProcessHeap () returned 0x285fd830000 [0182.497] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840460) returned 1 [0182.497] GetProcessHeap () returned 0x285fd830000 [0182.497] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8401c0) returned 1 [0182.497] GetProcessHeap () returned 0x285fd830000 [0182.497] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840440) returned 1 [0182.497] GetProcessHeap () returned 0x285fd830000 [0182.497] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840720) returned 1 [0182.497] GetProcessHeap () returned 0x285fd830000 [0182.497] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840660) returned 1 [0182.497] GetProcessHeap () returned 0x285fd830000 [0182.497] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8400a0) returned 1 [0182.498] GetProcessHeap () returned 0x285fd830000 [0182.498] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8403c0) returned 1 [0182.498] GetProcessHeap () returned 0x285fd830000 [0182.498] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840220) returned 1 [0182.498] GetProcessHeap () returned 0x285fd830000 [0182.498] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840080) returned 1 [0182.498] GetProcessHeap () returned 0x285fd830000 [0182.498] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840180) returned 1 [0182.498] GetProcessHeap () returned 0x285fd830000 [0182.498] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840480) returned 1 [0182.498] GetProcessHeap () returned 0x285fd830000 [0182.498] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840540) returned 1 [0182.498] GetProcessHeap () returned 0x285fd830000 [0182.498] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840680) returned 1 [0182.498] GetProcessHeap () returned 0x285fd830000 [0182.498] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840760) returned 1 [0182.498] GetProcessHeap () returned 0x285fd830000 [0182.498] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8402e0) returned 1 [0182.498] GetProcessHeap () returned 0x285fd830000 [0182.498] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840340) returned 1 [0182.498] GetProcessHeap () returned 0x285fd830000 [0182.498] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8400c0) returned 1 [0182.498] GetProcessHeap () returned 0x285fd830000 [0182.498] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840600) returned 1 [0182.498] GetProcessHeap () returned 0x285fd830000 [0182.498] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840520) returned 1 [0182.498] GetProcessHeap () returned 0x285fd830000 [0182.498] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840620) returned 1 [0182.498] GetProcessHeap () returned 0x285fd830000 [0182.498] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8402c0) returned 1 [0182.498] GetProcessHeap () returned 0x285fd830000 [0182.498] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840320) returned 1 [0182.498] GetProcessHeap () returned 0x285fd830000 [0182.498] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840700) returned 1 [0182.498] GetProcessHeap () returned 0x285fd830000 [0182.498] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840200) returned 1 [0182.498] GetProcessHeap () returned 0x285fd830000 [0182.498] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840500) returned 1 [0182.498] GetProcessHeap () returned 0x285fd830000 [0182.498] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840640) returned 1 [0182.498] GetProcessHeap () returned 0x285fd830000 [0182.499] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840740) returned 1 [0182.499] GetProcessHeap () returned 0x285fd830000 [0182.499] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8406a0) returned 1 [0182.499] GetProcessHeap () returned 0x285fd830000 [0182.499] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8406c0) returned 1 [0182.499] GetProcessHeap () returned 0x285fd830000 [0182.499] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8406e0) returned 1 [0182.499] GetProcessHeap () returned 0x285fd830000 [0182.499] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840140) returned 1 [0182.499] GetProcessHeap () returned 0x285fd830000 [0182.499] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840560) returned 1 [0182.499] GetProcessHeap () returned 0x285fd830000 [0182.499] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8404a0) returned 1 [0182.499] GetProcessHeap () returned 0x285fd830000 [0182.499] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840380) returned 1 [0182.499] GetProcessHeap () returned 0x285fd830000 [0182.499] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840420) returned 1 [0182.499] GetProcessHeap () returned 0x285fd830000 [0182.499] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840360) returned 1 [0182.499] GetProcessHeap () returned 0x285fd830000 [0182.499] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840580) returned 1 [0182.499] GetProcessHeap () returned 0x285fd830000 [0182.499] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8403a0) returned 1 [0182.499] GetProcessHeap () returned 0x285fd830000 [0182.499] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840260) returned 1 [0182.499] GetProcessHeap () returned 0x285fd830000 [0182.499] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8404c0) returned 1 [0182.499] GetProcessHeap () returned 0x285fd830000 [0182.499] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8400e0) returned 1 [0182.499] GetProcessHeap () returned 0x285fd830000 [0182.499] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840280) returned 1 [0182.499] GetProcessHeap () returned 0x285fd830000 [0182.499] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840780) returned 1 [0182.499] GetProcessHeap () returned 0x285fd830000 [0182.499] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8407a0) returned 1 [0182.499] GetProcessHeap () returned 0x285fd830000 [0182.499] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8405e0) returned 1 [0182.499] GetProcessHeap () returned 0x285fd830000 [0182.499] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8407c0) returned 1 [0182.500] GetProcessHeap () returned 0x285fd830000 [0182.500] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8403e0) returned 1 [0182.500] GetProcessHeap () returned 0x285fd830000 [0182.500] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8407e0) returned 1 [0182.500] GetProcessHeap () returned 0x285fd830000 [0182.500] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840100) returned 1 [0182.500] GetProcessHeap () returned 0x285fd830000 [0182.500] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840120) returned 1 [0182.500] GetProcessHeap () returned 0x285fd830000 [0182.500] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840160) returned 1 [0182.500] GetProcessHeap () returned 0x285fd830000 [0182.500] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840240) returned 1 [0182.500] GetProcessHeap () returned 0x285fd830000 [0182.500] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840400) returned 1 [0182.500] GetProcessHeap () returned 0x285fd830000 [0182.500] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8401a0) returned 1 [0182.500] GetProcessHeap () returned 0x285fd830000 [0182.500] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8401e0) returned 1 [0182.500] GetProcessHeap () returned 0x285fd830000 [0182.500] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840300) returned 1 [0182.500] GetProcessHeap () returned 0x285fd830000 [0182.500] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8404e0) returned 1 [0182.500] GetProcessHeap () returned 0x285fd830000 [0182.500] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8405a0) returned 1 [0182.500] GetProcessHeap () returned 0x285fd830000 [0182.500] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8405c0) returned 1 [0182.500] GetProcessHeap () returned 0x285fd830000 [0182.500] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840fb0) returned 1 [0182.500] GetProcessHeap () returned 0x285fd830000 [0182.500] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840e30) returned 1 [0182.500] GetProcessHeap () returned 0x285fd830000 [0182.500] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840a70) returned 1 [0182.500] GetProcessHeap () returned 0x285fd830000 [0182.500] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840ab0) returned 1 [0182.500] GetProcessHeap () returned 0x285fd830000 [0182.500] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840c70) returned 1 [0182.500] GetProcessHeap () returned 0x285fd830000 [0182.500] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840bf0) returned 1 [0182.500] GetProcessHeap () returned 0x285fd830000 [0182.500] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8409f0) returned 1 [0182.500] GetProcessHeap () returned 0x285fd830000 [0182.500] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840bb0) returned 1 [0182.501] GetProcessHeap () returned 0x285fd830000 [0182.501] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840c10) returned 1 [0182.501] GetProcessHeap () returned 0x285fd830000 [0182.501] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8409d0) returned 1 [0182.501] GetProcessHeap () returned 0x285fd830000 [0182.501] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840b90) returned 1 [0182.501] GetProcessHeap () returned 0x285fd830000 [0182.501] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840b70) returned 1 [0182.501] GetProcessHeap () returned 0x285fd830000 [0182.501] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840930) returned 1 [0182.501] GetProcessHeap () returned 0x285fd830000 [0182.501] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840910) returned 1 [0182.501] GetProcessHeap () returned 0x285fd830000 [0182.501] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840c90) returned 1 [0182.501] GetProcessHeap () returned 0x285fd830000 [0182.501] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840f50) returned 1 [0182.501] GetProcessHeap () returned 0x285fd830000 [0182.501] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840f70) returned 1 [0182.501] GetProcessHeap () returned 0x285fd830000 [0182.501] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840af0) returned 1 [0182.501] GetProcessHeap () returned 0x285fd830000 [0182.501] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840bd0) returned 1 [0182.501] GetProcessHeap () returned 0x285fd830000 [0182.501] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8408b0) returned 1 [0182.501] GetProcessHeap () returned 0x285fd830000 [0182.501] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8408f0) returned 1 [0182.501] GetProcessHeap () returned 0x285fd830000 [0182.501] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840950) returned 1 [0182.501] GetProcessHeap () returned 0x285fd830000 [0182.501] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840a50) returned 1 [0182.501] GetProcessHeap () returned 0x285fd830000 [0182.501] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840f10) returned 1 [0182.501] GetProcessHeap () returned 0x285fd830000 [0182.501] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd8408d0) returned 1 [0182.501] GetProcessHeap () returned 0x285fd830000 [0182.501] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840f90) returned 1 [0182.501] GetProcessHeap () returned 0x285fd830000 [0182.501] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840fd0) returned 1 [0182.501] GetProcessHeap () returned 0x285fd830000 [0182.501] RtlFreeHeap (HeapHandle=0x285fd830000, Flags=0x0, BaseAddress=0x285fd840a10) returned 1 [0182.502] FreeLibrary (hLibModule=0x7ffc84730000) returned 1 [0182.502] exit (_Code=0) Thread: id = 113 os_tid = 0x9d0 Thread: id = 115 os_tid = 0x890 [0181.776] LocalAlloc (uFlags=0x40, uBytes=0x340) returned 0x285fd92c8c0 [0181.776] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x285ff865fe0 [0181.776] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x285ff865980 [0181.776] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x285fd892070 [0181.790] LocalFree (hMem=0x285fd92c8c0) returned 0x0 [0181.790] LocalFree (hMem=0x285fd892070) returned 0x0 [0181.790] LocalFree (hMem=0x285ff865980) returned 0x0 [0181.790] LocalFree (hMem=0x285ff865fe0) returned 0x0 Thread: id = 116 os_tid = 0x880 [0181.546] LocalAlloc (uFlags=0x40, uBytes=0x340) returned 0x285fd92c8c0 [0181.546] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x285ff866010 [0181.547] LocalAlloc (uFlags=0x0, uBytes=0x18) returned 0x285fd89b6e0 [0181.547] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x285fd8923a0 [0181.547] LocalReAlloc (hMem=0x285fd89b6e0, uBytes=0x20, uFlags=0x2) returned 0x285fd84d560 [0181.547] LocalFree (hMem=0x285fd92c8c0) returned 0x0 [0181.548] LocalFree (hMem=0x285fd8923a0) returned 0x0 [0181.548] LocalFree (hMem=0x285fd84d560) returned 0x0 [0181.548] LocalFree (hMem=0x285ff866010) returned 0x0 Thread: id = 117 os_tid = 0xd10